Re: general protection fault in dst_dev_put (2)

[Dmitry Vyukov]

On Wed, Mar 20, 2019 at 4:43 PM Jon Maloy <jon.maloy@xxxxxxxxxxxx> wrote:
>
> This one points to a bug that was fixed in commit dc4501ff2875 ("tipc: fix a double free in tipc_enable_bearer()").
> That commit was applied to 4.20, but is not present in 4.16, which caused this dump.
> To get further with this I need a dump of the actual crash in 4.20 or 5.0.
> Maybe we are looking at two different problems here?

Hi Jon,

The latest crashes are available on the syzbot dashboard (see dashbolard link).

>
> ///jon
>
>
>
> > -----Original Message-----
> > From: netdev-owner@xxxxxxxxxxxxxxx <netdev-owner@xxxxxxxxxxxxxxx>
> > On Behalf Of syzbot
> > Sent: 19-Mar-19 18:24
> > To: davem@xxxxxxxxxxxxx; dsahern@xxxxxxxxx; Jon Maloy
> > <jon.maloy@xxxxxxxxxxxx>; linux-kernel@xxxxxxxxxxxxxxx;
> > netdev@xxxxxxxxxxxxxxx; pablo@xxxxxxxxxxxxx; syzkaller-
> > bugs@xxxxxxxxxxxxxxxx; tipc-discussion@xxxxxxxxxxxxxxxxxxxxx;
> > ying.xue@xxxxxxxxxxxxx
> > Subject: Re: general protection fault in dst_dev_put (2)
> >
> > syzbot has bisected this bug to:
> >
> > commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81
> > Author: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
> > Date:   Thu Mar 22 19:42:52 2018 +0000
> >
> >      tipc: obtain node identity from interface by default
> >
> > bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=1631fc2b200000
> > start commit:   52dfae5c tipc: obtain node identity from interface by defa..
> > git tree:       upstream
> > final crash:    https://syzkaller.appspot.com/x/report.txt?x=1531fc2b200000
> > console output: https://syzkaller.appspot.com/x/log.txt?x=1131fc2b200000
> > kernel config:  https://syzkaller.appspot.com/x/.config?x=8f00801d7b7c4fe6
> > dashboard link:
> > https://syzkaller.appspot.com/bug?extid=9d4c12bfd45a58738d0a
> > syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=17254878c00000
> > C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=171ca5df400000
> >
> > Reported-by: syzbot+9d4c12bfd45a58738d0a@xxxxxxxxxxxxxxxxxxxxxxxxx
> > Fixes: 52dfae5c ("tipc: obtain node identity from interface by default")
>
> --
> You received this message because you are subscribed to the Google Groups "syzkaller-bugs" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-bugs+unsubscribe@xxxxxxxxxxxxxxxxx
> To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-bugs/BL0PR1501MB200344EF36F7E6EFCE435F4E9A410%40BL0PR1501MB2003.namprd15.prod.outlook.com.
> For more options, visit https://groups.google.com/d/optout.