From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.6 required=3.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SPF_PASS,URIBL_BLOCKED,USER_IN_DEF_DKIM_WL autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0AFF4C43387 for ; Mon, 31 Dec 2018 07:15:16 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id C6E9A21019 for ; Mon, 31 Dec 2018 07:15:15 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="bAnkSnQF" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727075AbeLaHPO (ORCPT ); Mon, 31 Dec 2018 02:15:14 -0500 Received: from mail-it1-f196.google.com ([209.85.166.196]:38025 "EHLO mail-it1-f196.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726228AbeLaHPO (ORCPT ); Mon, 31 Dec 2018 02:15:14 -0500 Received: by mail-it1-f196.google.com with SMTP id h65so33216348ith.3 for ; Sun, 30 Dec 2018 23:15:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FJHOYKeUnx+U9LgSq3AUPAy1LW45QKUMfaRkJ/GP/2Q=; b=bAnkSnQFNuhUDNjPIvMb7WzQxSRYTXSyO3SR6CTd1lWYv6GEWk90szmWIT4PlHl8uS 5B4qCLJZv403fTdcrBvI2FkyzVgSVjZvHysxwrqvgJDyPJ9HTItqoTae6bj+37JoG0zj LPAyamQib+fyXJV5YfpKHw9omALZFFPSzhudcSnz4ZDrW9AhByNqQgJkXs7HZiNQBBtS lXQdKiwoAXxRP6Cvo2jM3dRoo1cQQuEqFxI3OmFBjSekq+4IF4aVrQ9fnHs15mvpPucc U9RUGYG54w1mNLRa1EZNPzpvwgtpwWSxv2/GoDhaiEKLXXjoUMeG+eQKygfLLrhn8zBH WfSA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FJHOYKeUnx+U9LgSq3AUPAy1LW45QKUMfaRkJ/GP/2Q=; b=XVAUKpC3ZSJYbl2zfifpb7P5BK8gSKKhe/w/Munvd3bZM7e5EPaYFv93eLpCNmTF0o LdpK8YcWzgjY2WbxcePWqfFK6UcpIBHJEZrRRZHxsFQSlT/1B9G7MtNtlpv6Iplz1GkT PO9YFDTPZYJIFzgCyovC11IQGjEx+oYuJjGv/6VsoxRYWPlT4qS2GbVLH5IKlF8rEPBA c0mJEmcS9boE1aiCl/x5x9ydzOcua3tXakb7Rg/uoBKPYz3YuUPqnJC3lFRi4AZ5rqEH Z4Mk+WX0ggbxSNiZBspWrupGLZrIEHs/5Oi0WQGSvJXKZZIMUjuqpAQ9tyoVhLGvkDet NsKg== X-Gm-Message-State: AJcUukfmcNkBE9KVjvL5oGXI5rizLmFMa4losvxA8bEQPFgyaWhLRKQw PWxwXlc1xyqioZw8JuBj55YLpn51jqeONNxonDYpww== X-Google-Smtp-Source: ALg8bN4D6vHlss8JzrEO0HfchycQO8OOGTOR/N7qL3YNotNKWynTu7DrQqxTbfex5pxKj5m20LEDAdiTw517Ll7j6UA= X-Received: by 2002:a24:f14d:: with SMTP id q13mr21630836iti.166.1546240511897; Sun, 30 Dec 2018 23:15:11 -0800 (PST) MIME-Version: 1.0 References: <0000000000006069e7057e4c2833@google.com> In-Reply-To: <0000000000006069e7057e4c2833@google.com> From: Dmitry Vyukov Date: Mon, 31 Dec 2018 08:15:01 +0100 Message-ID: Subject: Re: general protection fault in rb_next (2) To: syzbot Cc: Greg Kroah-Hartman , LKML , syzkaller-bugs , Tejun Heo , Linux-MM Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Dec 31, 2018 at 8:14 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit: edeca3a769ad Merge tag 'sound-4.20-rc4' of git://git.kerne.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=13316f7b400000 > kernel config: https://syzkaller.appspot.com/x/.config?x=73e2bc0cb6463446 > dashboard link: https://syzkaller.appspot.com/bug?extid=563bb80fa8765090bf16 > compiler: gcc (GCC) 8.0.1 20180413 (experimental) > > Unfortunately, I don't have any reproducer for this crash yet. > > IMPORTANT: if you fix the bug, please add the following tag to the commit: > Reported-by: syzbot+563bb80fa8765090bf16@syzkaller.appspotmail.com Since this involves OOMs and looks like a one-off induced memory corruption: #syz dup: kernel panic: corrupted stack end in wb_workfn > bond0 (unregistering): Releasing backup interface bond_slave_0 > bond0 (unregistering): Released all slaves > kasan: CONFIG_KASAN_INLINE enabled > kasan: GPF could be caused by NULL-ptr deref or user memory access > general protection fault: 0000 [#1] PREEMPT SMP KASAN > CPU: 1 PID: 160 Comm: kworker/u4:3 Not tainted 4.20.0-rc3+ #125 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS > Google 01/01/2011 > Workqueue: netns cleanup_net > RIP: 0010:rb_next+0xd7/0x140 lib/rbtree.c:541 > Code: 49 89 dc 4c 89 eb 48 83 e3 fc 48 89 d8 75 c8 48 83 c4 08 5b 41 5c 41 > 5d 41 5e 5d c3 48 89 d0 48 8d 78 10 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 75 > 1a 48 8b 50 10 48 85 d2 75 e3 48 83 c4 08 5b 41 5c > RSP: 0018:ffff8881d930ebc8 EFLAGS: 00010203 > RAX: 5741e5894855dfff RBX: dffffc0000000000 RCX: ffffffff81f8d010 > RDX: 0ae83cb1290abc01 RSI: ffffffff81f8cee0 RDI: 5741e5894855e00f > RBP: ffff8881d930ebf0 R08: ffff8881d92fc480 R09: fffffbfff0fab697 > R10: fffffbfff0fab697 R11: ffffffff87d5b4bf R12: ffffffff87d5b4f0 > R13: fc0000000000ba48 R14: dffffc0000000000 R15: 0000000000000004 > FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 0000000000402e9d CR3: 000000017cbad000 CR4: 00000000001406e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 > Call Trace: > kernfs_next_descendant_post+0x89/0x2e0 fs/kernfs/dir.c:1235 > __kernfs_remove+0x178/0xaf0 fs/kernfs/dir.c:1295 > kernfs_remove+0x23/0x40 fs/kernfs/dir.c:1353 > sysfs_remove_dir+0xd6/0x110 fs/sysfs/dir.c:101 > kobject_del.part.4+0x3a/0xf0 lib/kobject.c:592 > kobject_del lib/kobject.c:588 [inline] > kobject_cleanup lib/kobject.c:656 [inline] > kobject_release lib/kobject.c:691 [inline] > kref_put include/linux/kref.h:70 [inline] > kobject_put.cold.9+0x1f0/0x2e4 lib/kobject.c:708 > netdev_queue_update_kobjects+0x312/0x4f0 net/core/net-sysfs.c:1513 > remove_queue_kobjects net/core/net-sysfs.c:1563 [inline] > netdev_unregister_kobject+0x1ff/0x2e0 net/core/net-sysfs.c:1713 > rollback_registered_many+0x8d4/0x1250 net/core/dev.c:8030 > unregister_netdevice_many+0xfa/0x4c0 net/core/dev.c:9111 > default_device_exit_batch+0x43a/0x540 net/core/dev.c:9580 > ops_exit_list.isra.5+0x105/0x160 net/core/net_namespace.c:156 > cleanup_net+0x555/0xb10 net/core/net_namespace.c:551 > process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153 > worker_thread+0x17f/0x1390 kernel/workqueue.c:2296 > kthread+0x35a/0x440 kernel/kthread.c:246 > ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 > Modules linked in: > ---[ end trace 0076ea0e5672f55d ]--- > RIP: 0010:rb_next+0xd7/0x140 lib/rbtree.c:541 > Code: 49 89 dc 4c 89 eb 48 83 e3 fc 48 89 d8 75 c8 48 83 c4 08 5b 41 5c 41 > 5d 41 5e 5d c3 48 89 d0 48 8d 78 10 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 75 > 1a 48 8b 50 10 48 85 d2 75 e3 48 83 c4 08 5b 41 5c > RSP: 0018:ffff8881d930ebc8 EFLAGS: 00010203 > RAX: 5741e5894855dfff RBX: dffffc0000000000 RCX: ffffffff81f8d010 > RDX: 0ae83cb1290abc01 RSI: ffffffff81f8cee0 RDI: 5741e5894855e00f > RBP: ffff8881d930ebf0 R08: ffff8881d92fc480 R09: fffffbfff0fab697 > R10: fffffbfff0fab697 R11: ffffffff87d5b4bf R12: ffffffff87d5b4f0 > R13: fc0000000000ba48 R14: dffffc0000000000 R15: 0000000000000004 > FS: 0000000000000000(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: ffffffffff600400 CR3: 00000001d2e72000 CR4: 00000000001406f0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This bug is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this bug report. See: > https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with > syzbot. > > -- > You received this message because you are subscribed to the Google Groups "syzkaller-bugs" group. > To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-bugs+unsubscribe@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-bugs/0000000000006069e7057e4c2833%40google.com. > For more options, visit https://groups.google.com/d/optout. From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.6 required=3.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SPF_PASS,USER_IN_DEF_DKIM_WL autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 87B08C43387 for ; Mon, 31 Dec 2018 07:15:14 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 207C821019 for ; Mon, 31 Dec 2018 07:15:14 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="bAnkSnQF" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 207C821019 Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=google.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id B50468E007E; Mon, 31 Dec 2018 02:15:13 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id AFE9E8E005B; Mon, 31 Dec 2018 02:15:13 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 9ED848E007E; Mon, 31 Dec 2018 02:15:13 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from mail-io1-f69.google.com (mail-io1-f69.google.com [209.85.166.69]) by kanga.kvack.org (Postfix) with ESMTP id 754718E005B for ; Mon, 31 Dec 2018 02:15:13 -0500 (EST) Received: by mail-io1-f69.google.com with SMTP id o22so31701363iob.13 for ; Sun, 30 Dec 2018 23:15:13 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:dkim-signature:mime-version:references :in-reply-to:from:date:message-id:subject:to:cc; bh=FJHOYKeUnx+U9LgSq3AUPAy1LW45QKUMfaRkJ/GP/2Q=; b=asX50l58QOS9rgvZJRDbWPszNvr8IaIzI9C8NamfFOT2Dv8RIOFSxNdTZ+iAlyv+OE Xjbb4+w5trZSLuTRMEUrKGA2sVheBZj5efFJgbF1LkGotqJSbUqvueoNs98nmqw9tzpH c2o5cen7M4FSZbGaCFicFoQzC3iv1vQM6ffwJ5js6s0waDpyml6De3af2mZMsBQyG9uq uLYmjtZZ5Fz77Jk2q0onTBzR5C/gt2yvUEWhMnvVx/uWk+vxeoftqcKq16KUsUSN2PGm qsetIeq+ntmXUZ/Jsk89GhVXPU/MbpQG+qCxCvdmKd1uOWVggWxlg0hC66x7rsH4daRB MdKg== X-Gm-Message-State: AA+aEWZ8ob7a6cUw0juDvAzO37IJyTFVmIwbSQOBOJJVUZUtXmbpENmr DHjDXLx4ATlbDAy/HbebklM8c8nP59WedGYB1EwvCuXC9Jjd7XsYkfBs2sspmVpb/gJo9pH+P00 DQFo51yxwI5HC2RPetg8s2wJToAW+uSnzndaIIpSYW4AOYhueXtl0BsCRESM7HLxV/aPz06h+4v RXA/hYZL5MyBQ+RljK4MQrlrX6hf3SxiL54CJijoKAUfJjzxl9N2flqiT0wynFRR9ZQqgLyOs88 0RheUzYJ1DejC+c775cucWwl2ixvV/9UTHk5JYQS+tMDu9SjfxVwFHwDYScPpZ97qA6YCfGNa7q 3bia9O44qbAZ1Ht872xcrUZsanmsXrhouaAWUQmb/XJsAvcVOpq+fkd6NuJZr7MP2bNfxsEZFUq S X-Received: by 2002:a02:6915:: with SMTP id e21mr24696980jac.142.1546240513195; Sun, 30 Dec 2018 23:15:13 -0800 (PST) X-Received: by 2002:a02:6915:: with SMTP id e21mr24696960jac.142.1546240512426; Sun, 30 Dec 2018 23:15:12 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1546240512; cv=none; d=google.com; s=arc-20160816; b=yMKAvlvoCqB6t0MplxjgX4IMnQhjuh5KXtDDI0zNEOY6tUzosc74L/qiKnZCuygKCC YLgIL9Vm2/P2j6kRAPkJwspfKgArIakyCzq7k78pih3018RxtYkH2Xxsj4P8t4sokRSs gJEAzzOd84bR4WJVbtr2t4UNA9ujtBJo+YJ0JdLT4lWkaE9WPuprJAJ6JYAbI3f0kvTJ otksumxEyoPKlGQnqjkdgk6p+AJbC4TX90wRtfYp0iu+n57iC1uNGThCicgdt/BXTvmC w2Em9/CIUmfsDpTgU5HN7GjHVsdOGpx+ySGzObPiXVfvpTTeEcgR/vy4gc2Uw1QQvQCI jRaQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=FJHOYKeUnx+U9LgSq3AUPAy1LW45QKUMfaRkJ/GP/2Q=; b=Cir2n2PZ7wXXUXEzoEfYw4iiUluAwnINgk89NtIP2xYo+iK6uQtJlE/MbCHUnqGfhY Do1FqsxUsNW0iILrIzkFeUnUDNqm9fI64Zak/4Z7TcXG4hdqydmeeNcd7pF6WuzeEp2e iK6H4t3bsCorzjQfhFtzSZFCUbdCVoIIrlqygvfFFWfz0FoMbwYD5Bfte+8Vv2XZyN9t Ghu0jcUuWzelZHXqvjDUeW9nqmKFuIyIA4WGQ+sFyIlhDPQ+kqWKr0yfpHJYc3w3sC73 P4CaefMs+MkuZFXKmszyAFPWBYuJWNnDmai82azMGAXDelT9HDhcbLf7ZwW0D9zkMKc0 K4zg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=bAnkSnQF; spf=pass (google.com: domain of dvyukov@google.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=dvyukov@google.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65]) by mx.google.com with SMTPS id y78sor28227153itb.5.2018.12.30.23.15.12 for (Google Transport Security); Sun, 30 Dec 2018 23:15:12 -0800 (PST) Received-SPF: pass (google.com: domain of dvyukov@google.com designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=bAnkSnQF; spf=pass (google.com: domain of dvyukov@google.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=dvyukov@google.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FJHOYKeUnx+U9LgSq3AUPAy1LW45QKUMfaRkJ/GP/2Q=; b=bAnkSnQFNuhUDNjPIvMb7WzQxSRYTXSyO3SR6CTd1lWYv6GEWk90szmWIT4PlHl8uS 5B4qCLJZv403fTdcrBvI2FkyzVgSVjZvHysxwrqvgJDyPJ9HTItqoTae6bj+37JoG0zj LPAyamQib+fyXJV5YfpKHw9omALZFFPSzhudcSnz4ZDrW9AhByNqQgJkXs7HZiNQBBtS lXQdKiwoAXxRP6Cvo2jM3dRoo1cQQuEqFxI3OmFBjSekq+4IF4aVrQ9fnHs15mvpPucc U9RUGYG54w1mNLRa1EZNPzpvwgtpwWSxv2/GoDhaiEKLXXjoUMeG+eQKygfLLrhn8zBH WfSA== X-Google-Smtp-Source: ALg8bN4D6vHlss8JzrEO0HfchycQO8OOGTOR/N7qL3YNotNKWynTu7DrQqxTbfex5pxKj5m20LEDAdiTw517Ll7j6UA= X-Received: by 2002:a24:f14d:: with SMTP id q13mr21630836iti.166.1546240511897; Sun, 30 Dec 2018 23:15:11 -0800 (PST) MIME-Version: 1.0 References: <0000000000006069e7057e4c2833@google.com> In-Reply-To: <0000000000006069e7057e4c2833@google.com> From: Dmitry Vyukov Date: Mon, 31 Dec 2018 08:15:01 +0100 Message-ID: Subject: Re: general protection fault in rb_next (2) To: syzbot Cc: Greg Kroah-Hartman , LKML , syzkaller-bugs , Tejun Heo , Linux-MM Content-Type: text/plain; charset="UTF-8" X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: Message-ID: <20181231071501.uDvTElzI76LpObOCsb1E7w5yfs4IB-_d6BFq49dZfoU@z> On Mon, Dec 31, 2018 at 8:14 AM syzbot wrote: > > Hello, > > syzbot found the following crash on: > > HEAD commit: edeca3a769ad Merge tag 'sound-4.20-rc4' of git://git.kerne.. > git tree: upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=13316f7b400000 > kernel config: https://syzkaller.appspot.com/x/.config?x=73e2bc0cb6463446 > dashboard link: https://syzkaller.appspot.com/bug?extid=563bb80fa8765090bf16 > compiler: gcc (GCC) 8.0.1 20180413 (experimental) > > Unfortunately, I don't have any reproducer for this crash yet. > > IMPORTANT: if you fix the bug, please add the following tag to the commit: > Reported-by: syzbot+563bb80fa8765090bf16@syzkaller.appspotmail.com Since this involves OOMs and looks like a one-off induced memory corruption: #syz dup: kernel panic: corrupted stack end in wb_workfn > bond0 (unregistering): Releasing backup interface bond_slave_0 > bond0 (unregistering): Released all slaves > kasan: CONFIG_KASAN_INLINE enabled > kasan: GPF could be caused by NULL-ptr deref or user memory access > general protection fault: 0000 [#1] PREEMPT SMP KASAN > CPU: 1 PID: 160 Comm: kworker/u4:3 Not tainted 4.20.0-rc3+ #125 > Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS > Google 01/01/2011 > Workqueue: netns cleanup_net > RIP: 0010:rb_next+0xd7/0x140 lib/rbtree.c:541 > Code: 49 89 dc 4c 89 eb 48 83 e3 fc 48 89 d8 75 c8 48 83 c4 08 5b 41 5c 41 > 5d 41 5e 5d c3 48 89 d0 48 8d 78 10 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 75 > 1a 48 8b 50 10 48 85 d2 75 e3 48 83 c4 08 5b 41 5c > RSP: 0018:ffff8881d930ebc8 EFLAGS: 00010203 > RAX: 5741e5894855dfff RBX: dffffc0000000000 RCX: ffffffff81f8d010 > RDX: 0ae83cb1290abc01 RSI: ffffffff81f8cee0 RDI: 5741e5894855e00f > RBP: ffff8881d930ebf0 R08: ffff8881d92fc480 R09: fffffbfff0fab697 > R10: fffffbfff0fab697 R11: ffffffff87d5b4bf R12: ffffffff87d5b4f0 > R13: fc0000000000ba48 R14: dffffc0000000000 R15: 0000000000000004 > FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 0000000000402e9d CR3: 000000017cbad000 CR4: 00000000001406e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 > Call Trace: > kernfs_next_descendant_post+0x89/0x2e0 fs/kernfs/dir.c:1235 > __kernfs_remove+0x178/0xaf0 fs/kernfs/dir.c:1295 > kernfs_remove+0x23/0x40 fs/kernfs/dir.c:1353 > sysfs_remove_dir+0xd6/0x110 fs/sysfs/dir.c:101 > kobject_del.part.4+0x3a/0xf0 lib/kobject.c:592 > kobject_del lib/kobject.c:588 [inline] > kobject_cleanup lib/kobject.c:656 [inline] > kobject_release lib/kobject.c:691 [inline] > kref_put include/linux/kref.h:70 [inline] > kobject_put.cold.9+0x1f0/0x2e4 lib/kobject.c:708 > netdev_queue_update_kobjects+0x312/0x4f0 net/core/net-sysfs.c:1513 > remove_queue_kobjects net/core/net-sysfs.c:1563 [inline] > netdev_unregister_kobject+0x1ff/0x2e0 net/core/net-sysfs.c:1713 > rollback_registered_many+0x8d4/0x1250 net/core/dev.c:8030 > unregister_netdevice_many+0xfa/0x4c0 net/core/dev.c:9111 > default_device_exit_batch+0x43a/0x540 net/core/dev.c:9580 > ops_exit_list.isra.5+0x105/0x160 net/core/net_namespace.c:156 > cleanup_net+0x555/0xb10 net/core/net_namespace.c:551 > process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153 > worker_thread+0x17f/0x1390 kernel/workqueue.c:2296 > kthread+0x35a/0x440 kernel/kthread.c:246 > ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 > Modules linked in: > ---[ end trace 0076ea0e5672f55d ]--- > RIP: 0010:rb_next+0xd7/0x140 lib/rbtree.c:541 > Code: 49 89 dc 4c 89 eb 48 83 e3 fc 48 89 d8 75 c8 48 83 c4 08 5b 41 5c 41 > 5d 41 5e 5d c3 48 89 d0 48 8d 78 10 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 75 > 1a 48 8b 50 10 48 85 d2 75 e3 48 83 c4 08 5b 41 5c > RSP: 0018:ffff8881d930ebc8 EFLAGS: 00010203 > RAX: 5741e5894855dfff RBX: dffffc0000000000 RCX: ffffffff81f8d010 > RDX: 0ae83cb1290abc01 RSI: ffffffff81f8cee0 RDI: 5741e5894855e00f > RBP: ffff8881d930ebf0 R08: ffff8881d92fc480 R09: fffffbfff0fab697 > R10: fffffbfff0fab697 R11: ffffffff87d5b4bf R12: ffffffff87d5b4f0 > R13: fc0000000000ba48 R14: dffffc0000000000 R15: 0000000000000004 > FS: 0000000000000000(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: ffffffffff600400 CR3: 00000001d2e72000 CR4: 00000000001406f0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > > > --- > This bug is generated by a bot. It may contain errors. > See https://goo.gl/tpsmEJ for more information about syzbot. > syzbot engineers can be reached at syzkaller@googlegroups.com. > > syzbot will keep track of this bug report. See: > https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with > syzbot. > > -- > You received this message because you are subscribed to the Google Groups "syzkaller-bugs" group. > To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-bugs+unsubscribe@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-bugs/0000000000006069e7057e4c2833%40google.com. > For more options, visit https://groups.google.com/d/optout.