From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-8.4 required=3.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_IN_DEF_DKIM_WL autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id ACFC6C76188 for ; Tue, 23 Jul 2019 07:35:29 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 751952251A for ; Tue, 23 Jul 2019 07:35:29 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="K6jrhJo2" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2388412AbfGWHf1 (ORCPT ); Tue, 23 Jul 2019 03:35:27 -0400 Received: from mail-io1-f66.google.com ([209.85.166.66]:42163 "EHLO mail-io1-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2388285AbfGWHf0 (ORCPT ); Tue, 23 Jul 2019 03:35:26 -0400 Received: by mail-io1-f66.google.com with SMTP id e20so49417586iob.9 for ; Tue, 23 Jul 2019 00:35:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=iMJt7LYpGZYAS3qDDFAugtw9Yp/06nPuXjE/LheYSLE=; b=K6jrhJo253IdbXHUQ2A27o9l6p5GATnAvxI8zT3N0y6X+QAGISnKFWgEul1wxcxXGM PeDkddGcyjMaJoMx9RBdkn4BfmkMZj8kFiWcvSOX5j7ZOSbvxSaKvwcVJALnECsiV1NV Z25LOuY8DcmviCyU/Q5C/DzjpoNMRfUKHg8TWzZu6YHqw8gpswZx7yWdR0/3XGKuLisr d8uaaxIP4y7dZnuWe50t82UvtrxC5qBk1X7vYhT08svGoWBPQsS4UDSVJE3kb/A65+HU ucqlw77a6ABvZaKPt28RJAjoCQptAPZKkeJj4AYa+44K3U8HjFkfAb9G1SOmNEdgUAWw cXNg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=iMJt7LYpGZYAS3qDDFAugtw9Yp/06nPuXjE/LheYSLE=; b=VFnYiYpQptd3cXckgHR0dlSUivc0TkazK4XpWSI5/hzCKnIru1WEth9p9u9+kEfpUa H1r3TUc8hLJs30DXTDea4NTDA/298QpDvk2ZOe2H3laYRKnMMkQvS0kO3OqrXBjLcFsa DaeLMNy/5+DLKi7LWTGNVcEemED3pZmTa1fa4g0D23t9s7WJhDJDD3ix2ZNx0r+LRSOQ b/zRveOk3r6+qnb6JCfFo/GgTjn7vxcBsreYy8BFpm5JzHYiXFYKzBYSTMX24uAJ1l6C /YOmLPgadfFnVRKHMnpztt/q/JCkkCl0ufbFmlody3rOzEqypdSZ1jTTQAqMcG1inmUI OQ8Q== X-Gm-Message-State: APjAAAWfp0M9DoWMInPV1e4v/aRlfb5qJ9+IOB+E/C/iFixKDNJMHech XJy6sALZwl8Zr3wqL9j6OAbMbKXSKVjUshmEfDeXgYX+Y18FcQ== X-Google-Smtp-Source: APXvYqwo3nEQtK25A6u2jl/OWx72I0xFP+EZmhFdqZw8kcmY6COIeDdHSlCvnyVYiaHf7SdPzJX1ISu7/izvxj92zSE= X-Received: by 2002:a6b:4101:: with SMTP id n1mr42213427ioa.138.1563867325471; Tue, 23 Jul 2019 00:35:25 -0700 (PDT) MIME-Version: 1.0 References: <000000000000d8b010058e03aaf8@google.com> <000000000000fcdf6c058e076819@google.com> In-Reply-To: <000000000000fcdf6c058e076819@google.com> From: Dmitry Vyukov Date: Tue, 23 Jul 2019 09:35:14 +0200 Message-ID: Subject: Re: BUG: unable to handle kernel paging request in corrupted (2) To: syzbot Cc: dave.stevenson@raspberrypi.org, David Miller , LKML , USB list , netdev , syzkaller-bugs , unglinuxdriver@microchip.com, woojung.huh@microchip.com, John Fastabend Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Jul 19, 2019 at 1:56 PM syzbot wrote: > > syzbot has bisected this bug to: > > commit 9343ac87f2a4e09bf6e27b5f31e72e9e3a82abff > Author: Dave Stevenson > Date: Mon Jun 25 14:07:15 2018 +0000 > > net: lan78xx: Use s/w csum check on VLANs without tag stripping > > bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=102feb84600000 > start commit: 49d05fe2 ipv6: rt6_check should return NULL if 'from' is N.. > git tree: net > final crash: https://syzkaller.appspot.com/x/report.txt?x=122feb84600000 > console output: https://syzkaller.appspot.com/x/log.txt?x=142feb84600000 > kernel config: https://syzkaller.appspot.com/x/.config?x=87305c3ca9c25c70 > dashboard link: https://syzkaller.appspot.com/bug?extid=08b7a2c58acdfa12c82d > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=143a78f4600000 > > Reported-by: syzbot+08b7a2c58acdfa12c82d@syzkaller.appspotmail.com > Fixes: 9343ac87f2a4 ("net: lan78xx: Use s/w csum check on VLANs without tag > stripping") > > For information about bisection process see: https://goo.gl/tpsmEJ#bisection >From the repro it looks like the same bpf stack overflow bug. +John We need to dup them onto some canonical report for this bug, or this becomes unmanageable. #syz dup: kernel panic: corrupted stack end in dput