syzbot


general protection fault in hsr_dev_change_mtu

Status: auto-closed as invalid on 2021/01/06 06:37
Reported-by: syzbot+3aa4e524b682ef6a2728@syzkaller.appspotmail.com
First crash: 1540d, last: 1319d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 general protection fault in hsr_dev_change_mtu (2) C error 2 603d 1186d 0/1 upstream: reported C repro on 2021/01/19 13:13
linux-4.19 general protection fault in hsr_dev_change_mtu 1 1356d 1356d 0/1 auto-closed as invalid on 2020/11/30 07:56
linux-4.19 general protection fault in hsr_dev_change_mtu (2) C error 9 925d 1217d 0/1 upstream: reported C repro on 2020/12/19 00:10

Sample crash report:
bond0: enslaved VLAN challenged slave hsr2. Adding VLANs will be blocked as long as hsr2 is part of bond bond0
bond0: The slave device specified does not support setting the MAC address
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 14907 Comm: syz-executor.3 Not tainted 4.14.196-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff888056006580 task.stack: ffff88804b4a0000
RIP: 0010:hsr_dev_change_mtu+0x95/0xc0 net/hsr/hsr_device.c:149
RSP: 0018:ffff88804b4a6f50 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff888055f2ac00 RCX: ffffc9000726e000
RDX: 0000000000000002 RSI: ffffffff864c7180 RDI: 0000000000000010
RBP: 00000000000005dc R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: ffff888056006580 R12: ffff888055f2b6c0
R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff864c7100
FS:  00007fefe8092700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32521000 CR3: 000000009ec1c000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __dev_set_mtu net/core/dev.c:6874 [inline]
 dev_set_mtu+0x1f0/0x3c0 net/core/dev.c:6909
 bond_enslave+0x68f/0x4b00 drivers/net/bonding/bond_main.c:1481
 do_set_master+0x19e/0x200 net/core/rtnetlink.c:1961
 do_setlink+0x8b8/0x2bf0 net/core/rtnetlink.c:2098
 rtnl_newlink+0x1267/0x1830 net/core/rtnetlink.c:2660
 rtnetlink_rcv_msg+0x3be/0xb10 net/core/rtnetlink.c:4316
 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2433
 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline]
 netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1313
 netlink_sendmsg+0x62e/0xb80 net/netlink/af_netlink.c:1878
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062
 __sys_sendmsg+0xa3/0x120 net/socket.c:2096
 SYSC_sendmsg net/socket.c:2107 [inline]
 SyS_sendmsg+0x27/0x40 net/socket.c:2103
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45d5b9
RSP: 002b:00007fefe8091c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5b9
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc0d4e43af R14: 00007fefe80929c0 R15: 000000000118cf4c
Code: 44 89 e0 5b 5d 41 5c 41 5d c3 e8 47 f3 38 fb eb e1 e8 90 25 0f fb 49 8d 7d 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 1d 49 8b 7d 10 ba 06 00 00 00 48 c7 c6 a0 11 51 
RIP: hsr_dev_change_mtu+0x95/0xc0 net/hsr/hsr_device.c:149 RSP: ffff88804b4a6f50
---[ end trace b73b233b4312c10f ]---

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/08 06:36 linux-4.14.y 2f166cdcf8a9 abf9ba4f .config console log report ci2-linux-4-14
2020/08/05 09:33 linux-4.14.y ca4f2c56d416 b7129355 .config console log report ci2-linux-4-14
2020/08/04 14:31 linux-4.14.y 7f2c5eb458b8 80a06902 .config console log report ci2-linux-4-14
2020/07/24 02:26 linux-4.14.y 69b94dd6dcd1 70c104a1 .config console log report ci2-linux-4-14
2020/04/14 10:05 linux-4.14.y c10b57a567e4 7c54686a .config console log report ci2-linux-4-14
2020/02/20 23:59 linux-4.14.y 98db2bf27b9e 81230308 .config console log report ci2-linux-4-14
2020/02/02 07:48 linux-4.14.y 9fa690a2a016 2274ad39 .config console log report ci2-linux-4-14
2020/01/31 00:15 linux-4.14.y 9fa690a2a016 5ed23f9a .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.