From: syzbot <syzbot+f62f559357490e4f015b@syzkaller.appspotmail.com>
To: davem@davemloft.net, edumazet@google.com, kuba@kernel.org,
linux-kernel@vger.kernel.org, netdev@vger.kernel.org,
pabeni@redhat.com, syzkaller-bugs@googlegroups.com
Subject: [syzbot] [net?] WARNING in hsr_netdev_notify
Date: Fri, 19 Jul 2024 20:42:24 -0700 [thread overview]
Message-ID: <000000000000a461bd061da59915@google.com> (raw)
Hello,
syzbot found the following issue on:
HEAD commit: 0c3836482481 Linux 6.10
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=10a5ea79980000
kernel config: https://syzkaller.appspot.com/x/.config?x=4beb7abb485abb7b
dashboard link: https://syzkaller.appspot.com/bug?extid=f62f559357490e4f015b
compiler: aarch64-linux-gnu-gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image (non-bootable): https://storage.googleapis.com/syzbot-assets/384ffdcca292/non_bootable_disk-0c383648.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/724e4d62dcb4/vmlinux-0c383648.xz
kernel image: https://storage.googleapis.com/syzbot-assets/c77816774342/Image-0c383648.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f62f559357490e4f015b@syzkaller.appspotmail.com
------------[ cut here ]------------
RTNL: assertion failed at net/hsr/hsr_slave.h (24)
WARNING: CPU: 0 PID: 2102 at net/hsr/hsr_slave.h:24 hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
WARNING: CPU: 0 PID: 2102 at net/hsr/hsr_slave.h:24 hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Not tainted 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
pc : hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
lr : hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
lr : hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
sp : ffff8000881e3b40
x29: ffff8000881e3b40 x28: 0000000000000003 x27: 0000000000000001
x26: 0000000000000000 x25: 0000000000000000 x24: ffff800082944d60
x23: f6f0000006dca600 x22: ffff8000881e3b88 x21: f6f0000006dca000
x20: 00000000ffffffc8 x19: 0000000000000004 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e3570
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001c08
x11: 0000000000000958 x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : fff000007f8cbf48 x4 : 0000000000000000 x3 : fff07ffffd2e9000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
notifier_call_chain kernel/notifier.c:93 [inline]
raw_notifier_call_chain+0x54/0x74 kernel/notifier.c:461
call_netdevice_notifiers_info+0x58/0xa4 net/core/dev.c:1992
netdev_state_change net/core/dev.c:1374 [inline]
netdev_state_change+0x68/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
RTNL: assertion failed at net/core/rtnetlink.c (1823)
WARNING: CPU: 0 PID: 2102 at net/core/rtnetlink.c:1823 rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Tainted: G W 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
lr : rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
sp : ffff8000881e3a30
x29: ffff8000881e3a30 x28: 0000000000000000 x27: 0000000000000000
x26: 0000000000000010 x25: 0000000000000000 x24: 0000000000000000
x23: 0000000000000000 x22: 0000000000000000 x21: ffff80008282be48
x20: f6f0000006dca000 x19: f4f0000006c2f600 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e3460
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001c74
x11: 000000000000097c x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
rtmsg_ifinfo_build_skb+0xc4/0x13c net/core/rtnetlink.c:4073
rtmsg_ifinfo_event net/core/rtnetlink.c:4107 [inline]
rtmsg_ifinfo_event net/core/rtnetlink.c:4097 [inline]
rtmsg_ifinfo+0x64/0xc4 net/core/rtnetlink.c:4116
netdev_state_change net/core/dev.c:1376 [inline]
netdev_state_change+0x84/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
RTNL: assertion failed at net/devlink/port.c (1595)
WARNING: CPU: 0 PID: 2102 at net/devlink/port.c:1595 devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Tainted: G W 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
lr : devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
sp : ffff8000881e39c0
x29: ffff8000881e39c0 x28: 0000000000000000 x27: 0000000000000000
x26: 0000000000000010 x25: 0000000000000000 x24: f4f00000051ab000
x23: ffff8000881e3ae7 x22: 0000000000000000 x21: f6f0000006dca000
x20: ffff8000881e3b18 x19: 0000000000000010 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e33f0
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001ce0
x11: 00000000000009a0 x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
dev_get_phys_port_name+0x5c/0x70 net/core/dev.c:9146
rtnl_phys_port_name_fill net/core/rtnetlink.c:1225 [inline]
rtnl_fill_ifinfo.constprop.0+0x5d4/0x1210 net/core/rtnetlink.c:1903
rtmsg_ifinfo_build_skb+0xc4/0x13c net/core/rtnetlink.c:4073
rtmsg_ifinfo_event net/core/rtnetlink.c:4107 [inline]
rtmsg_ifinfo_event net/core/rtnetlink.c:4097 [inline]
rtmsg_ifinfo+0x64/0xc4 net/core/rtnetlink.c:4116
netdev_state_change net/core/dev.c:1376 [inline]
netdev_state_change+0x84/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
RTNL: assertion failed at net/core/dev.c (7045)
WARNING: CPU: 0 PID: 2102 at net/core/dev.c:7045 netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Tainted: G W 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
lr : netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
sp : ffff8000881e3a10
x29: ffff8000881e3a10 x28: 0000000000000000 x27: ffff80008228a3a0
x26: f4f00000051ab000 x25: ffff8000827a94c8 x24: f4f00000051ab000
x23: f4f00000051ab248 x22: 0000000000000000 x21: ffff80008282be48
x20: f6f0000006dca000 x19: f6f0000006dca000 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e3440
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001d52
x11: 00000000000009c6 x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
rtnl_link_slave_info_fill net/core/rtnetlink.c:655 [inline]
rtnl_link_fill net/core/rtnetlink.c:724 [inline]
rtnl_fill_ifinfo.constprop.0+0xaf0/0x1210 net/core/rtnetlink.c:1922
rtmsg_ifinfo_build_skb+0xc4/0x13c net/core/rtnetlink.c:4073
rtmsg_ifinfo_event net/core/rtnetlink.c:4107 [inline]
rtmsg_ifinfo_event net/core/rtnetlink.c:4097 [inline]
rtmsg_ifinfo+0x64/0xc4 net/core/rtnetlink.c:4116
netdev_state_change net/core/dev.c:1376 [inline]
netdev_state_change+0x84/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
reply other threads:[~2024-07-20 3:42 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=000000000000a461bd061da59915@google.com \
--to=syzbot+f62f559357490e4f015b@syzkaller.appspotmail.com \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=kuba@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=syzkaller-bugs@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.