syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

WARNING in xfrm6_tunnel_net_exit

Status: fixed on 2020/01/14 19:04
Reported-by: syzbot+8bfb43e0a72a0122b412@syzkaller.appspotmail.com
Fix commit: bbbe47463da9 xfrm: destroy xfrm_state synchronously on net exit path
First crash: 1843d, last: 1594d
Fix bisection: fixed by (bisect log) :
commit bbbe47463da924160966d528c40182264b869a61
Author: Cong Wang <xiyou.wangcong@gmail.com>
Date: Thu Jan 31 21:05:49 2019 +0000

  xfrm: destroy xfrm_state synchronously on net exit path

  
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in xfrm6_tunnel_net_exit (2) net C 48816 1887d 2169d 11/26 fixed on 2019/03/06 07:43
upstream WARNING in xfrm6_tunnel_net_exit net syz 14002 2174d 2304d 5/26 fixed on 2018/05/17 10:02
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2020/01/14 08:58 4h14m bisect fix linux-4.19.y job log (1)
2019/12/15 07:53 37m bisect fix linux-4.19.y job log (0) log

Sample crash report:
IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
WARNING: CPU: 0 PID: 23 at net/ipv6/xfrm6_tunnel.c:351 xfrm6_tunnel_net_exit+0x1df/0x370 net/ipv6/xfrm6_tunnel.c:351
kobject: 'bond_slave_1' (00000000325f2721): kobject_uevent_env
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 23 Comm: kworker/u4:1 Not tainted 4.19.34 #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
kobject: 'bond_slave_1' (00000000325f2721): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1'
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
kobject: 'queues' (000000006cd35392): kobject_add_internal: parent: 'bond_slave_1', set: '<NULL>'
 panic+0x263/0x51d kernel/panic.c:185
kobject: 'queues' (000000006cd35392): kobject_uevent_env
 __warn.cold+0x20/0x54 kernel/panic.c:540
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
kobject: 'queues' (000000006cd35392): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (000000003b8b5170): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (000000003b8b5170): kobject_uevent_env
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:997
RIP: 0010:xfrm6_tunnel_net_exit+0x1df/0x370 net/ipv6/xfrm6_tunnel.c:351
Code: 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 0f 85 73 01 00 00 4d 8b 34 24 31 ff 4c 89 f6 e8 7b b8 61 fb 4d 85 f6 74 b3 e8 d1 b6 61 fb <0f> 0b eb aa 48 81 c3 00 08 00 00 45 31 e4 49 be 00 00 00 00 00 fc
RSP: 0018:ffff8880aa39fbe0 EFLAGS: 00010293
RAX: ffff8880aa392600 RBX: ffff8880a7d65a00 RCX: ffffffff86098065
RDX: 0000000000000000 RSI: ffffffff8609806f RDI: 0000000000000007
RBP: ffff8880aa39fc08 R08: ffff8880aa392600 R09: ffff8880aa392ef0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a7d65ab8
R13: 0000000000000017 R14: ffff888095d60780 R15: dffffc0000000000
 ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:153
 cleanup_net+0x3fb/0x960 net/core/net_namespace.c:551
 process_one_work+0x98e/0x1760 kernel/workqueue.c:2153
 worker_thread+0x98/0xe40 kernel/workqueue.c:2296
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (34):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/16 22:52 linux-4.19.y 4d552acf3370 505ab413 .config console log report syz ci2-linux-4-19
2019/04/20 05:44 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/19 20:57 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/19 20:09 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/19 19:40 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/19 16:14 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/19 15:47 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/19 01:47 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/18 20:38 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/18 16:38 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/18 15:59 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/17 09:34 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/17 08:11 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/17 08:01 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/17 07:52 linux-4.19.y 4b0e041c9dad b0e8efcb .config console log report ci2-linux-4-19
2019/04/17 01:24 linux-4.19.y 4d552acf3370 b0e8efcb .config console log report ci2-linux-4-19
2019/04/16 17:31 linux-4.19.y 4d552acf3370 505ab413 .config console log report ci2-linux-4-19
2019/04/16 14:10 linux-4.19.y 4d552acf3370 505ab413 .config console log report ci2-linux-4-19
2019/04/15 14:46 linux-4.19.y 4d552acf3370 505ab413 .config console log report ci2-linux-4-19
2019/04/13 03:16 linux-4.19.y 4d552acf3370 c402d8f1 .config console log report ci2-linux-4-19
2019/04/13 03:13 linux-4.19.y 4d552acf3370 c402d8f1 .config console log report ci2-linux-4-19
2019/04/13 03:00 linux-4.19.y 4d552acf3370 c402d8f1 .config console log report ci2-linux-4-19
2019/04/12 15:21 linux-4.19.y 4d552acf3370 4f421599 .config console log report ci2-linux-4-19
2019/04/12 14:50 linux-4.19.y 4d552acf3370 4f421599 .config console log report ci2-linux-4-19
2019/04/12 03:02 linux-4.19.y 4d552acf3370 8916f5e1 .config console log report ci2-linux-4-19
2019/04/12 02:57 linux-4.19.y 4d552acf3370 8916f5e1 .config console log report ci2-linux-4-19
2019/04/12 02:49 linux-4.19.y 4d552acf3370 8916f5e1 .config console log report ci2-linux-4-19
2019/04/11 14:51 linux-4.19.y 4d552acf3370 13030ef8 .config console log report ci2-linux-4-19
2019/04/11 10:18 linux-4.19.y 4d552acf3370 e955ac50 .config console log report ci2-linux-4-19
2019/04/11 10:12 linux-4.19.y 4d552acf3370 e955ac50 .config console log report ci2-linux-4-19
2019/04/11 10:09 linux-4.19.y 4d552acf3370 e955ac50 .config console log report ci2-linux-4-19
2019/04/11 02:09 linux-4.19.y 4d552acf3370 e955ac50 .config console log report ci2-linux-4-19
2019/04/10 21:32 linux-4.19.y 4d552acf3370 65b612b7 .config console log report ci2-linux-4-19
2019/04/10 14:56 linux-4.19.y 4d552acf3370 65b612b7 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.