syzbot


general protection fault in macvlan_device_event

Status: auto-closed as invalid on 2020/08/26 06:23
Reported-by: syzbot+bb889a58eabaca0cec3a@syzkaller.appspotmail.com
First crash: 1682d, last: 1670d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 general protection fault in macvlan_device_event 5 1672d 1684d 0/1 auto-closed as invalid on 2020/08/24 08:28
upstream general protection fault in macvlan_device_event net 86 1667d 1681d 15/28 fixed on 2020/06/18 13:57

Sample crash report:
device veth1_vlan left promiscuous mode
device veth0_vlan left promiscuous mode
bond0 (unregistering): Releasing backup interface macvlan5
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 12381 Comm: kworker/u4:7 Not tainted 4.14.177-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
task: ffff888094108080 task.stack: ffff888048288000
RIP: 0010:macvlan_device_event+0x47f/0x890 drivers/net/macvlan.c:1676
RSP: 0018:ffff88804828f658 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff888045768680 RCX: 1ffffffff10279b4
RDX: 0000000000000000 RSI: ffff88809ae1b410 RDI: ffff8880457689d8
RBP: 1ffff11009051ed1 R08: 0000000000000001 R09: 0000000000000000
R10: ffff88804828f700 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880464f4b48 R14: ffff8880464f4b48 R15: ffff8880464f4340
FS:  0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000002279978 CR3: 0000000094243000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 notifier_call_chain+0x107/0x1a0 kernel/notifier.c:93
 call_netdevice_notifiers net/core/dev.c:1687 [inline]
 dev_set_mac_address net/core/dev.c:6965 [inline]
 dev_set_mac_address+0x1cd/0x2b0 net/core/dev.c:6950
 macvlan_set_mac_address drivers/net/macvlan.c:756 [inline]
 macvlan_set_mac_address+0x228/0x290 drivers/net/macvlan.c:742
 dev_set_mac_address+0x153/0x2b0 net/core/dev.c:6961
 __bond_release_one+0xa03/0x1390 drivers/net/bonding/bond_main.c:1981
 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3093 [inline]
 bond_netdev_event+0x784/0x8c0 drivers/net/bonding/bond_main.c:3191
 notifier_call_chain+0x107/0x1a0 kernel/notifier.c:93
 call_netdevice_notifiers net/core/dev.c:1687 [inline]
 rollback_registered_many+0x694/0xa70 net/core/dev.c:7206
 unregister_netdevice_many.part.0+0x16/0x1d0 net/core/dev.c:8279
 unregister_netdevice_many net/core/dev.c:8278 [inline]
 default_device_exit_batch+0x2dd/0x380 net/core/dev.c:8740
 ops_exit_list.isra.0+0xef/0x140 net/core/net_namespace.c:145
 cleanup_net+0x3bb/0x820 net/core/net_namespace.c:484
 process_one_work+0x813/0x1540 kernel/workqueue.c:2116
 worker_thread+0x5d1/0x1070 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 04 04 00 00 4c 89 e2 48 8b b3 58 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 cd 03 00 00 49 8b 3c 24 41 bc 02 80 00 00 e8 
RIP: macvlan_device_event+0x47f/0x890 drivers/net/macvlan.c:1676 RSP: ffff88804828f658
---[ end trace 6c0996a643164792 ]---

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/04/28 06:23 linux-4.14.y 050272a0423e 0ce7569e .config console log report ci2-linux-4-14
2020/04/27 07:18 linux-4.14.y 050272a0423e 0ce7569e .config console log report ci2-linux-4-14
2020/04/24 06:58 linux-4.14.y 050272a0423e 03d97a1b .config console log report ci2-linux-4-14
2020/04/23 11:20 linux-4.14.y c10b57a567e4 2e44d63e .config console log report ci2-linux-4-14
2020/04/23 01:27 linux-4.14.y c10b57a567e4 2e44d63e .config console log report ci2-linux-4-14
2020/04/19 22:10 linux-4.14.y c10b57a567e4 9f7c6d12 .config console log report ci2-linux-4-14
2020/04/19 21:30 linux-4.14.y c10b57a567e4 9f7c6d12 .config console log report ci2-linux-4-14
2020/04/18 09:05 linux-4.14.y c10b57a567e4 435c6d53 .config console log report ci2-linux-4-14
2020/04/15 23:25 linux-4.14.y c10b57a567e4 3f3c5574 .config console log report ci2-linux-4-14
2020/04/15 14:24 linux-4.14.y c10b57a567e4 3f3c5574 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.