syzbot


general protection fault in vxlan_netdevice_event

Status: auto-closed as invalid on 2020/10/22 09:12
Subsystems: ppp
[Documentation on labels]
First crash: 1342d, last: 1342d

Sample crash report:
general protection fault, probably for non-canonical address 0xe00093fdd1289f4a: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0x0004bfee8944fa50-0x0004bfee8944fa57]
CPU: 0 PID: 28288 Comm: syz-executor.4 Not tainted 5.9.0-rc1-next-20200821-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:vxlan_handle_lowerdev_unregister drivers/net/vxlan.c:4500 [inline]
RIP: 0010:vxlan_netdevice_event+0x3ba/0x630 drivers/net/vxlan.c:4525
Code: 00 00 00 00 fc ff df 48 89 44 24 20 48 c1 e8 03 4c 01 e8 48 89 44 24 08 eb 33 e8 41 60 a7 fc 48 8d 53 30 48 89 d0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 d2 01 00 00 48 8b 43 30 48 89 dd 48 83 e8 30
RSP: 0018:ffffc900157d7b50 EFLAGS: 00010203
RAX: 000097fdd1289f4a RBX: 0004bfee8944fa24 RCX: ffffffff84cd1308
RDX: 0004bfee8944fa54 RSI: ffffffff84cd127f RDI: 0000000000000004
RBP: ffff8880072006f0 R08: 0000000000000000 R09: ffff888094960813
R10: 00000000b60f03ea R11: 0000000000000001 R12: ffff88804b736000
R13: dffffc0000000000 R14: 000000000000004b R15: 00000000b60f03ea
FS:  000000000271b940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31a24000 CR3: 0000000099801000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83
 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033
 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline]
 call_netdevice_notifiers net/core/dev.c:2059 [inline]
 rollback_registered_many+0x768/0x1210 net/core/dev.c:9283
 rollback_registered net/core/dev.c:9328 [inline]
 unregister_netdevice_queue+0x2dd/0x570 net/core/dev.c:10409
 unregister_netdevice include/linux/netdevice.h:2774 [inline]
 ppp_release+0x216/0x240 drivers/net/ppp/ppp_generic.c:403
 __fput+0x285/0x920 fs/file_table.c:281
 task_work_run+0xdd/0x190 kernel/task_work.c:141
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:139 [inline]
 exit_to_user_mode_prepare+0x195/0x1c0 kernel/entry/common.c:166
 syscall_exit_to_user_mode+0x59/0x2b0 kernel/entry/common.c:241
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x416e21
Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffc7d8d29f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416e21
RDX: 0000000000000000 RSI: 0000000000001548 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00000000fc8fd548 R09: 00000000fc8fd54c
R10: 00007ffc7d8d2ae0 R11: 0000000000000293 R12: 00000000011901f0
R13: 00000000000af7fe R14: ffffffffffffffff R15: 000000000118cf4c
Modules linked in:
---[ end trace 3b9f5ae2621b50b3 ]---
RIP: 0010:vxlan_handle_lowerdev_unregister drivers/net/vxlan.c:4500 [inline]
RIP: 0010:vxlan_netdevice_event+0x3ba/0x630 drivers/net/vxlan.c:4525
Code: 00 00 00 00 fc ff df 48 89 44 24 20 48 c1 e8 03 4c 01 e8 48 89 44 24 08 eb 33 e8 41 60 a7 fc 48 8d 53 30 48 89 d0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 d2 01 00 00 48 8b 43 30 48 89 dd 48 83 e8 30
RSP: 0018:ffffc900157d7b50 EFLAGS: 00010203
RAX: 000097fdd1289f4a RBX: 0004bfee8944fa24 RCX: ffffffff84cd1308
RDX: 0004bfee8944fa54 RSI: ffffffff84cd127f RDI: 0000000000000004
RBP: ffff8880072006f0 R08: 0000000000000000 R09: ffff888094960813
R10: 00000000b60f03ea R11: 0000000000000001 R12: ffff88804b736000
R13: dffffc0000000000 R14: 000000000000004b R15: 00000000b60f03ea
FS:  000000000271b940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31a24000 CR3: 0000000099801000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/23 09:12 linux-next 494d311a82bb 1da71ab0 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.