WARNING in batadv_mcast_mla_tt

WARNING in batadv_mcast_mla_tt_retract
Status: fixed on 2019/06/14 18:22
Reported-by: syzbot+83f2d54ec6b7e417e13f@syzkaller.appspotmail.com
Fix commit: a3c7cd0c batman-adv: mcast: fix multicast tt/tvlv worker locking
First crash: 848d, last: 709d

Cause bisection: introduced by (bisect log) :
commit 2ed30cfcf866f657349bf9f54a017a957cd98378
Author: Heiko Stuebner <heiko@sntech.de>
Date: Thu Aug 2 11:36:41 2018 +0000

arm64: dts: rockchip: enable dwc2-based otg controller on px30-evb

Crash: WARNING: ODEBUG bug in netdev_freemem (log)
Repro: syz .config

similar bugs (1):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
linux-4.19	WARNING in batadv_mcast_mla_tt_retract				2	717d	733d	0/1	auto-closed as invalid on 2019/10/25 08:52

Sample crash report:

IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
WARNING: CPU: 0 PID: 26 at net/batman-adv/multicast.c:337 batadv_mcast_mla_tt_retract+0x3d7/0x4b0 net/batman-adv/multicast.c:337
kobject: 'lo' (000000007d40203a): kobject_uevent_env
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 26 Comm: kworker/u4:2 Not tainted 5.0.0-rc1+ #21
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_mcast_mla_update
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
kobject: 'lo' (000000007d40203a): fill_kobj_path: path = '/devices/virtual/net/lo'
kobject: 'queues' (0000000029ca31b3): kobject_add_internal: parent: 'lo', set: '<NULL>'
 __warn.cold+0x20/0x48 kernel/panic.c:571
kobject: 'queues' (0000000029ca31b3): kobject_uevent_env
 report_bug+0x263/0x2b0 lib/bug.c:186
kobject: 'queues' (0000000029ca31b3): kobject_uevent_env: filter function caused the event to drop!
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:290
kobject: 'rx-0' (00000000a8654327): kobject_add_internal: parent: 'queues', set: 'queues'
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:batadv_mcast_mla_tt_retract+0x3d7/0x4b0 net/batman-adv/multicast.c:337
kobject: 'rx-0' (00000000a8654327): kobject_uevent_env
Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 c8 00 00 00 48 81 c4 a0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 07 b0 f9 <0f> 0b e9 de fc ff ff e8 9d f2 f3 f9 e9 e3 fd ff ff 48 89 df e8 b0
RSP: 0018:ffff8880a96676b0 EFLAGS: 00010293
RAX: ffff8880a96586c0 RBX: 0000000000000001 RCX: ffffffff87d1ed13
RDX: 0000000000000000 RSI: ffffffff87d1f037 RDI: 0000000000000007
kobject: 'rx-0' (00000000a8654327): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0'
RBP: ffff8880a9667778 R08: ffff8880a96586c0 R09: 0000000000000003
R10: 0000000000000000 R11: ffff8880ae62dc7b R12: ffff8880a9667868
R13: 0000000000000000 R14: 1ffff110152ccf0d R15: ffff88808820dc40
kobject: 'tx-0' (00000000e6698f16): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-0' (00000000e6698f16): kobject_uevent_env
kobject: 'tx-0' (00000000e6698f16): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0'
 __batadv_mcast_mla_update net/batman-adv/multicast.c:635 [inline]
 batadv_mcast_mla_update+0x78e/0x2980 net/batman-adv/multicast.c:661
kobject: 'veth1_to_bond' (00000000a8d46f44): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'veth1_to_bond' (00000000a8d46f44): kobject_uevent_env
kobject: 'veth1_to_bond' (00000000a8d46f44): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond'
kobject: 'queues' (000000006228a66d): kobject_add_internal: parent: 'veth1_to_bond', set: '<NULL>'
kobject: 'queues' (000000006228a66d): kobject_uevent_env
kobject: 'queues' (000000006228a66d): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (000000008bc09a3a): kobject_add_internal: parent: 'queues', set: 'queues'
 process_one_work+0xd0c/0x1ce0 kernel/workqueue.c:2153
kobject: 'rx-0' (000000008bc09a3a): kobject_uevent_env
kobject: 'rx-0' (000000008bc09a3a): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond/queues/rx-0'
kobject: 'tx-0' (000000007f0c3f6d): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-0' (000000007f0c3f6d): kobject_uevent_env
kobject: 'tx-0' (000000007f0c3f6d): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond/queues/tx-0'
kobject: 'batman_adv' (00000000f9be0f83): kobject_add_internal: parent: 'veth1_to_bond', set: '<NULL>'
kobject: 'bond_slave_1' (000000003c754cbc): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'bond_slave_1' (000000003c754cbc): kobject_uevent_env
 worker_thread+0x143/0x14a0 kernel/workqueue.c:2296
kobject: 'bond_slave_1' (000000003c754cbc): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1'
kobject: 'queues' (000000002a7c877f): kobject_add_internal: parent: 'bond_slave_1', set: '<NULL>'
kobject: 'queues' (000000002a7c877f): kobject_uevent_env
kobject: 'queues' (000000002a7c877f): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (00000000bd1d2cc7): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (00000000bd1d2cc7): kobject_uevent_env
kobject: 'rx-0' (00000000bd1d2cc7): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1/queues/rx-0'
kobject: 'tx-0' (00000000ccbdecac): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-0' (00000000ccbdecac): kobject_uevent_env
kobject: 'tx-0' (00000000ccbdecac): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1/queues/tx-0'
kobject: 'batman_adv' (0000000021ba1ff8): kobject_add_internal: parent: 'bond_slave_1', set: '<NULL>'
 kthread+0x357/0x430 kernel/kthread.c:246
kobject: 'ip6gretap0' (0000000011d834fd): kobject_add_internal: parent: 'net', set: 'devices'
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
kobject: 'ip6gretap0' (0000000011d834fd): kobject_uevent_env
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (190):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro
ci-upstream-kasan-gce-root	2019/01/12 18:10	upstream	4b3c31c8	c3f3344c	.config	log	report	syz
ci-upstream-kasan-gce-root	2019/05/02 20:17	upstream	b7a5b22b	e9039493	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/05/02 01:49	upstream	459e3a21	7516d9fa	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/05/01 00:50	upstream	bf3bd966	618456b4	.config	log	report
ci-upstream-kasan-gce-root	2019/04/30 13:12	upstream	83a50840	20f16bef	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/04/29 21:56	upstream	80871482	b617407b	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/04/26 23:34	upstream	d0473f97	b617407b	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/04/22 23:22	upstream	085b7755	53199d6e	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/04/14 11:21	upstream	4443f8e6	505ab413	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/04/06 04:00	upstream	7f46774c	fa763482	.config	log	report
ci-upstream-kasan-gce	2019/03/05 11:38	upstream	736706be	bb91cf81	.config	log	report
ci-upstream-kasan-gce-smack-root	2018/12/27 02:44	upstream	eed9688f	e747ec98	.config	log	report
ci-upstream-kasan-gce-386	2019/03/05 07:59	upstream	cd2a3bf0	bb91cf81	.config	log	report
ci-upstream-bpf-kasan-gce	2019/05/04 13:33	bpf	b9aa0b35	d28f4ce5	.config	log	report
ci-upstream-bpf-kasan-gce	2019/05/01 23:50	bpf	21f1b8a6	7516d9fa	.config	log	report
ci-upstream-bpf-kasan-gce	2019/05/01 18:55	bpf	21f1b8a6	7516d9fa	.config	log	report
ci-upstream-bpf-kasan-gce	2019/05/01 09:33	bpf	21f1b8a6	618456b4	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/27 05:34	bpf	0edd6b64	b617407b	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/26 09:58	bpf	7f09baa9	b617407b	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/24 06:24	bpf	fed68833	4d3d6a50	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/21 00:06	bpf	fed68833	b0e8efcb	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/19 18:55	bpf	fed68833	b0e8efcb	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/17 09:24	bpf	fed68833	b0e8efcb	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/15 09:59	bpf	ad40ddd4	505ab413	.config	log	report
ci-upstream-bpf-kasan-gce	2019/04/11 19:20	bpf	bbd669a8	13030ef8	.config	log	report
ci-upstream-net-this-kasan-gce	2019/03/31 04:39	net	288ac524	0c624d4d	.config	log	report
ci-upstream-bpf-kasan-gce	2019/03/30 12:57	bpf	676e4a6f	c35ee0ea	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/15 00:58	bpf-next	80f23212	bd4e3ac7	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/13 15:59	bpf-next	80f23212	16ab1e89	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/13 09:45	bpf-next	80f23212	16ab1e89	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/11 15:15	bpf-next	80f23212	46caad94	.config	log	report
ci-upstream-net-kasan-gce	2019/05/09 20:01	net-next	80f23212	6fc130d3	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/09 18:59	bpf-next	80f23212	6fc130d3	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/09 11:06	bpf-next	80f23212	1ab4c999	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/08 14:36	bpf-next	d24ed99b	a7383bfa	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/02 14:40	bpf-next	2b5bc3c8	7516d9fa	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/05/01 20:56	bpf-next	2b5bc3c8	7516d9fa	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/29 12:44	bpf-next	9076c49b	b617407b	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/28 03:55	bpf-next	9076c49b	b617407b	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/26 03:33	bpf-next	0e33d334	b617407b	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/25 10:32	bpf-next	a21b48a2	8e3c52b1	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/25 01:29	bpf-next	a21b48a2	8e3c52b1	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/24 15:02	bpf-next	a21b48a2	8e3c52b1	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/23 19:17	bpf-next	7e6e185c	53199d6e	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/23 13:57	bpf-next	7e6e185c	53199d6e	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/23 06:27	bpf-next	3b880244	53199d6e	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/22 20:50	bpf-next	4519efa6	53199d6e	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/22 12:54	bpf-next	4519efa6	0a77c33c	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/21 17:29	bpf-next	4519efa6	b0e8efcb	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/20 15:35	bpf-next	4519efa6	b0e8efcb	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/20 09:03	bpf-next	4519efa6	b0e8efcb	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/18 08:24	bpf-next	193d0002	b0e8efcb	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/18 01:52	bpf-next	00967e84	b0e8efcb	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/17 08:23	bpf-next	02a8c817	b0e8efcb	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/16 19:22	bpf-next	bcbccad6	505ab413	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/16 15:12	bpf-next	bcbccad6	505ab413	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/15 03:32	bpf-next	c342dc10	505ab413	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/06 06:36	bpf-next	347807d3	fa763482	.config	log	report
ci-upstream-bpf-next-kasan-gce	2019/04/04 14:47	bpf-next	cc441a69	6a475fff	.config	log	report
ci-upstream-net-kasan-gce	2019/03/11 04:33	net-next	d9862cfb	12365b99	.config	log	report
ci-upstream-linux-next-kasan-gce-root	2019/04/01 16:14	linux-next	e3ecb83e	a9ca43d4	.config	log	report