From: syzbot <syzbot+f62f559357490e4f015b@syzkaller.appspotmail.com>
To: davem@davemloft.net, edumazet@google.com, kuba@kernel.org,
linux-kernel@vger.kernel.org, netdev@vger.kernel.org,
pabeni@redhat.com, syzkaller-bugs@googlegroups.com
Subject: [syzbot] [net?] WARNING in hsr_netdev_notify
Date: Fri, 19 Jul 2024 20:42:24 -0700 [thread overview]
Message-ID: <000000000000a461bd061da59915@google.com> (raw)
Hello,
syzbot found the following issue on:
HEAD commit: 0c3836482481 Linux 6.10
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=10a5ea79980000
kernel config: https://syzkaller.appspot.com/x/.config?x=4beb7abb485abb7b
dashboard link: https://syzkaller.appspot.com/bug?extid=f62f559357490e4f015b
compiler: aarch64-linux-gnu-gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image (non-bootable): https://storage.googleapis.com/syzbot-assets/384ffdcca292/non_bootable_disk-0c383648.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/724e4d62dcb4/vmlinux-0c383648.xz
kernel image: https://storage.googleapis.com/syzbot-assets/c77816774342/Image-0c383648.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+f62f559357490e4f015b@syzkaller.appspotmail.com
------------[ cut here ]------------
RTNL: assertion failed at net/hsr/hsr_slave.h (24)
WARNING: CPU: 0 PID: 2102 at net/hsr/hsr_slave.h:24 hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
WARNING: CPU: 0 PID: 2102 at net/hsr/hsr_slave.h:24 hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Not tainted 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
pc : hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
lr : hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
lr : hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
sp : ffff8000881e3b40
x29: ffff8000881e3b40 x28: 0000000000000003 x27: 0000000000000001
x26: 0000000000000000 x25: 0000000000000000 x24: ffff800082944d60
x23: f6f0000006dca600 x22: ffff8000881e3b88 x21: f6f0000006dca000
x20: 00000000ffffffc8 x19: 0000000000000004 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e3570
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001c08
x11: 0000000000000958 x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : fff000007f8cbf48 x4 : 0000000000000000 x3 : fff07ffffd2e9000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
hsr_port_get_rtnl net/hsr/hsr_slave.h:24 [inline]
hsr_netdev_notify+0x2e0/0x354 net/hsr/hsr_main.c:42
notifier_call_chain kernel/notifier.c:93 [inline]
raw_notifier_call_chain+0x54/0x74 kernel/notifier.c:461
call_netdevice_notifiers_info+0x58/0xa4 net/core/dev.c:1992
netdev_state_change net/core/dev.c:1374 [inline]
netdev_state_change+0x68/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
RTNL: assertion failed at net/core/rtnetlink.c (1823)
WARNING: CPU: 0 PID: 2102 at net/core/rtnetlink.c:1823 rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Tainted: G W 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
lr : rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
sp : ffff8000881e3a30
x29: ffff8000881e3a30 x28: 0000000000000000 x27: 0000000000000000
x26: 0000000000000010 x25: 0000000000000000 x24: 0000000000000000
x23: 0000000000000000 x22: 0000000000000000 x21: ffff80008282be48
x20: f6f0000006dca000 x19: f4f0000006c2f600 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e3460
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001c74
x11: 000000000000097c x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
rtnl_fill_ifinfo.constprop.0+0x9a8/0x1210 net/core/rtnetlink.c:1823
rtmsg_ifinfo_build_skb+0xc4/0x13c net/core/rtnetlink.c:4073
rtmsg_ifinfo_event net/core/rtnetlink.c:4107 [inline]
rtmsg_ifinfo_event net/core/rtnetlink.c:4097 [inline]
rtmsg_ifinfo+0x64/0xc4 net/core/rtnetlink.c:4116
netdev_state_change net/core/dev.c:1376 [inline]
netdev_state_change+0x84/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
RTNL: assertion failed at net/devlink/port.c (1595)
WARNING: CPU: 0 PID: 2102 at net/devlink/port.c:1595 devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Tainted: G W 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
lr : devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
sp : ffff8000881e39c0
x29: ffff8000881e39c0 x28: 0000000000000000 x27: 0000000000000000
x26: 0000000000000010 x25: 0000000000000000 x24: f4f00000051ab000
x23: ffff8000881e3ae7 x22: 0000000000000000 x21: f6f0000006dca000
x20: ffff8000881e3b18 x19: 0000000000000010 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e33f0
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001ce0
x11: 00000000000009a0 x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
devlink_compat_phys_port_name_get+0x250/0x2c4 net/devlink/port.c:1595
dev_get_phys_port_name+0x5c/0x70 net/core/dev.c:9146
rtnl_phys_port_name_fill net/core/rtnetlink.c:1225 [inline]
rtnl_fill_ifinfo.constprop.0+0x5d4/0x1210 net/core/rtnetlink.c:1903
rtmsg_ifinfo_build_skb+0xc4/0x13c net/core/rtnetlink.c:4073
rtmsg_ifinfo_event net/core/rtnetlink.c:4107 [inline]
rtmsg_ifinfo_event net/core/rtnetlink.c:4097 [inline]
rtmsg_ifinfo+0x64/0xc4 net/core/rtnetlink.c:4116
netdev_state_change net/core/dev.c:1376 [inline]
netdev_state_change+0x84/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
RTNL: assertion failed at net/core/dev.c (7045)
WARNING: CPU: 0 PID: 2102 at net/core/dev.c:7045 netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
Modules linked in:
CPU: 0 PID: 2102 Comm: kworker/u8:13 Tainted: G W 6.10.0-syzkaller #0
Hardware name: linux,dummy-virt (DT)
Workqueue: bond0 bond_mii_monitor
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
lr : netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
sp : ffff8000881e3a10
x29: ffff8000881e3a10 x28: 0000000000000000 x27: ffff80008228a3a0
x26: f4f00000051ab000 x25: ffff8000827a94c8 x24: f4f00000051ab000
x23: f4f00000051ab248 x22: 0000000000000000 x21: ffff80008282be48
x20: f6f0000006dca000 x19: f6f0000006dca000 x18: ffffffffffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000881e3440
x14: 0000000000000000 x13: ffff80008263b080 x12: 0000000000001d52
x11: 00000000000009c6 x10: ffff8000826eb080 x9 : ffff80008263b080
x8 : 00000000ffffdfff x7 : ffff8000826eb080 x6 : 80000000ffffe000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f2f000000572ed80
Call trace:
netdev_master_upper_dev_get+0x90/0x98 net/core/dev.c:7045
rtnl_link_slave_info_fill net/core/rtnetlink.c:655 [inline]
rtnl_link_fill net/core/rtnetlink.c:724 [inline]
rtnl_fill_ifinfo.constprop.0+0xaf0/0x1210 net/core/rtnetlink.c:1922
rtmsg_ifinfo_build_skb+0xc4/0x13c net/core/rtnetlink.c:4073
rtmsg_ifinfo_event net/core/rtnetlink.c:4107 [inline]
rtmsg_ifinfo_event net/core/rtnetlink.c:4097 [inline]
rtmsg_ifinfo+0x64/0xc4 net/core/rtnetlink.c:4116
netdev_state_change net/core/dev.c:1376 [inline]
netdev_state_change+0x84/0x8c net/core/dev.c:1367
linkwatch_do_dev+0x80/0xec net/core/link_watch.c:177
linkwatch_sync_dev+0x8c/0xc8 net/core/link_watch.c:263
ethtool_op_get_link+0x18/0x34 net/ethtool/ioctl.c:62
bond_check_dev_link+0x68/0x154 drivers/net/bonding/bond_main.c:757
bond_miimon_inspect drivers/net/bonding/bond_main.c:2604 [inline]
bond_mii_monitor+0x110/0x91c drivers/net/bonding/bond_main.c:2826
process_one_work+0x164/0x2a8 kernel/workqueue.c:3248
process_scheduled_works kernel/workqueue.c:3329 [inline]
worker_thread+0x268/0x378 kernel/workqueue.c:3409
kthread+0x114/0x118 kernel/kthread.c:389
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
---[ end trace 0000000000000000 ]---
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
reply other threads:[~2024-07-20 3:42 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=000000000000a461bd061da59915@google.com \
--to=syzbot+f62f559357490e4f015b@syzkaller.appspotmail.com \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=kuba@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=syzkaller-bugs@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).