syzbot


general protection fault in macvlan_device_event

Status: auto-closed as invalid on 2020/08/24 08:28
Reported-by: syzbot+df11c1da83132651bd3f@syzkaller.appspotmail.com
First crash: 1684d, last: 1672d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 general protection fault in macvlan_device_event 10 1670d 1682d 0/1 auto-closed as invalid on 2020/08/26 06:23
upstream general protection fault in macvlan_device_event net 86 1667d 1682d 15/28 fixed on 2020/06/18 13:57

Sample crash report:
bond5 (unregistering): Released all slaves
bond4 (unregistering): Released all slaves
bond0 (unregistering): Releasing backup interface macvlan6
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 6641 Comm: kworker/u4:11 Not tainted 4.19.118-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:macvlan_device_event+0x62c/0x930 drivers/net/macvlan.c:1679
Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 09 03 00 00 4c 89 e2 48 8b b3 58 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 d2 02 00 00 49 8b 3c 24 41 bc 02 80 00 00 e8 cb
RSP: 0018:ffff8881f1637530 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff8881ef332c00 RCX: ffffffff844c6d55
RDX: 0000000000000000 RSI: ffff88809472d010 RDI: ffff8881ef332f58
RBP: 1ffff1103e2c6eac R08: ffff888215964480 R09: fffffbfff13004bd
R10: ffff8881f16375f8 R11: ffffffff898025e7 R12: 0000000000000000
R13: ffff88808e379088 R14: ffff88808e379088 R15: ffff88808e378880
FS:  0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd534018550 CR3: 00000000a833a000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93
 call_netdevice_notifiers net/core/dev.c:1766 [inline]
 dev_set_mac_address net/core/dev.c:7899 [inline]
 dev_set_mac_address+0x22f/0x320 net/core/dev.c:7884
 macvlan_set_mac_address drivers/net/macvlan.c:751 [inline]
 macvlan_set_mac_address+0x296/0x320 drivers/net/macvlan.c:737
 dev_set_mac_address+0x189/0x320 net/core/dev.c:7895
 __bond_release_one+0xb81/0x15c0 drivers/net/bonding/bond_main.c:2000
 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3113 [inline]
 bond_netdev_event+0x980/0xb00 drivers/net/bonding/bond_main.c:3225
 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93
 call_netdevice_notifiers net/core/dev.c:1766 [inline]
 rollback_registered_many+0x7bc/0xc40 net/core/dev.c:8183
 unregister_netdevice_many.part.0+0x16/0x1e0 net/core/dev.c:9297
 unregister_netdevice_many net/core/dev.c:9296 [inline]
 default_device_exit_batch+0x2ff/0x3c0 net/core/dev.c:9768
 ops_exit_list.isra.0+0xef/0x140 net/core/net_namespace.c:156
 cleanup_net+0x3bf/0x850 net/core/net_namespace.c:553
 process_one_work+0x91f/0x1640 kernel/workqueue.c:2155
 worker_thread+0x96/0xe20 kernel/workqueue.c:2298
 kthread+0x34a/0x420 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Modules linked in:
---[ end trace b3a13e611c69c06a ]---
RIP: 0010:macvlan_device_event+0x62c/0x930 drivers/net/macvlan.c:1679
Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 09 03 00 00 4c 89 e2 48 8b b3 58 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 d2 02 00 00 49 8b 3c 24 41 bc 02 80 00 00 e8 cb
RSP: 0018:ffff8881f1637530 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff8881ef332c00 RCX: ffffffff844c6d55
RDX: 0000000000000000 RSI: ffff88809472d010 RDI: ffff8881ef332f58
RBP: 1ffff1103e2c6eac R08: ffff888215964480 R09: fffffbfff13004bd
R10: ffff8881f16375f8 R11: ffffffff898025e7 R12: 0000000000000000
R13: ffff88808e379088 R14: ffff88808e379088 R15: ffff88808e378880
FS:  0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fba928e3000 CR3: 0000000093f8b000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/04/26 08:27 linux-4.19.y 7edd66cf6167 0ce7569e .config console log report ci2-linux-4-19
2020/04/26 05:34 linux-4.19.y 7edd66cf6167 b8bb8e5f .config console log report ci2-linux-4-19
2020/04/22 18:42 linux-4.19.y 8e2406c85187 2e44d63e .config console log report ci2-linux-4-19
2020/04/14 12:01 linux-4.19.y 6dd0e32665e5 3f3c5574 .config console log report ci2-linux-4-19
2020/04/13 22:14 linux-4.19.y 6dd0e32665e5 7c54686a .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.