syzbot

 sign-in | mailing list | source | docs
🐞 Open [960] 🐞 Fixed [3811] 🐞 Invalid [8185] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes

WARNING in batadv_mcast_mla_tt_retract
Status: fixed on 2019/06/14 18:22
Reported-by: syzbot+83f2d54ec6b7e417e13f@syzkaller.appspotmail.com
Fix commit: a3c7cd0cdf11 batman-adv: mcast: fix multicast tt/tvlv worker locking
First crash: 1248d, last: 1109d

Cause bisection: introduced by (bisect log) :
commit 2ed30cfcf866f657349bf9f54a017a957cd98378
Author: Heiko Stuebner <heiko@sntech.de>
Date: Thu Aug 2 11:36:41 2018 +0000

  arm64: dts: rockchip: enable dwc2-based otg controller on px30-evb

Crash: WARNING: ODEBUG bug in netdev_freemem (log)
Repro: syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in batadv_mcast_mla_tt_retract 2 1117d 1133d 0/1 auto-closed as invalid on 2019/10/25 08:52

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
WARNING: CPU: 0 PID: 26 at net/batman-adv/multicast.c:337 batadv_mcast_mla_tt_retract+0x3d7/0x4b0 net/batman-adv/multicast.c:337
kobject: 'lo' (000000007d40203a): kobject_uevent_env
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 26 Comm: kworker/u4:2 Not tainted 5.0.0-rc1+ #21
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_mcast_mla_update
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
kobject: 'lo' (000000007d40203a): fill_kobj_path: path = '/devices/virtual/net/lo'
kobject: 'queues' (0000000029ca31b3): kobject_add_internal: parent: 'lo', set: '<NULL>'
 __warn.cold+0x20/0x48 kernel/panic.c:571
kobject: 'queues' (0000000029ca31b3): kobject_uevent_env
 report_bug+0x263/0x2b0 lib/bug.c:186
kobject: 'queues' (0000000029ca31b3): kobject_uevent_env: filter function caused the event to drop!
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:290
kobject: 'rx-0' (00000000a8654327): kobject_add_internal: parent: 'queues', set: 'queues'
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:batadv_mcast_mla_tt_retract+0x3d7/0x4b0 net/batman-adv/multicast.c:337
kobject: 'rx-0' (00000000a8654327): kobject_uevent_env
Code: 48 8b 45 d0 65 48 33 04 25 28 00 00 00 0f 85 c8 00 00 00 48 81 c4 a0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 07 b0 f9 <0f> 0b e9 de fc ff ff e8 9d f2 f3 f9 e9 e3 fd ff ff 48 89 df e8 b0
RSP: 0018:ffff8880a96676b0 EFLAGS: 00010293
RAX: ffff8880a96586c0 RBX: 0000000000000001 RCX: ffffffff87d1ed13
RDX: 0000000000000000 RSI: ffffffff87d1f037 RDI: 0000000000000007
kobject: 'rx-0' (00000000a8654327): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0'
RBP: ffff8880a9667778 R08: ffff8880a96586c0 R09: 0000000000000003
R10: 0000000000000000 R11: ffff8880ae62dc7b R12: ffff8880a9667868
R13: 0000000000000000 R14: 1ffff110152ccf0d R15: ffff88808820dc40
kobject: 'tx-0' (00000000e6698f16): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-0' (00000000e6698f16): kobject_uevent_env
kobject: 'tx-0' (00000000e6698f16): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0'
 __batadv_mcast_mla_update net/batman-adv/multicast.c:635 [inline]
 batadv_mcast_mla_update+0x78e/0x2980 net/batman-adv/multicast.c:661
kobject: 'veth1_to_bond' (00000000a8d46f44): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'veth1_to_bond' (00000000a8d46f44): kobject_uevent_env
kobject: 'veth1_to_bond' (00000000a8d46f44): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond'
kobject: 'queues' (000000006228a66d): kobject_add_internal: parent: 'veth1_to_bond', set: '<NULL>'
kobject: 'queues' (000000006228a66d): kobject_uevent_env
kobject: 'queues' (000000006228a66d): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (000000008bc09a3a): kobject_add_internal: parent: 'queues', set: 'queues'
 process_one_work+0xd0c/0x1ce0 kernel/workqueue.c:2153
kobject: 'rx-0' (000000008bc09a3a): kobject_uevent_env
kobject: 'rx-0' (000000008bc09a3a): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond/queues/rx-0'
kobject: 'tx-0' (000000007f0c3f6d): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-0' (000000007f0c3f6d): kobject_uevent_env
kobject: 'tx-0' (000000007f0c3f6d): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond/queues/tx-0'
kobject: 'batman_adv' (00000000f9be0f83): kobject_add_internal: parent: 'veth1_to_bond', set: '<NULL>'
kobject: 'bond_slave_1' (000000003c754cbc): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'bond_slave_1' (000000003c754cbc): kobject_uevent_env
 worker_thread+0x143/0x14a0 kernel/workqueue.c:2296
kobject: 'bond_slave_1' (000000003c754cbc): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1'
kobject: 'queues' (000000002a7c877f): kobject_add_internal: parent: 'bond_slave_1', set: '<NULL>'
kobject: 'queues' (000000002a7c877f): kobject_uevent_env
kobject: 'queues' (000000002a7c877f): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (00000000bd1d2cc7): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (00000000bd1d2cc7): kobject_uevent_env
kobject: 'rx-0' (00000000bd1d2cc7): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1/queues/rx-0'
kobject: 'tx-0' (00000000ccbdecac): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-0' (00000000ccbdecac): kobject_uevent_env
kobject: 'tx-0' (00000000ccbdecac): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1/queues/tx-0'
kobject: 'batman_adv' (0000000021ba1ff8): kobject_add_internal: parent: 'bond_slave_1', set: '<NULL>'
 kthread+0x357/0x430 kernel/kthread.c:246
kobject: 'ip6gretap0' (0000000011d834fd): kobject_add_internal: parent: 'net', set: 'devices'
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
kobject: 'ip6gretap0' (0000000011d834fd): kobject_uevent_env
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (190):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2019/01/12 18:10 upstream 4b3c31c8d4dd c3f3344c .config log report syz
ci-upstream-kasan-gce-root 2019/05/02 20:17 upstream b7a5b22b0547 e9039493 .config log report
ci-upstream-kasan-gce-selinux-root 2019/05/02 01:49 upstream 459e3a21535a 7516d9fa .config log report
ci-upstream-kasan-gce-smack-root 2019/05/01 00:50 upstream bf3bd966dfd7 618456b4 .config log report
ci-upstream-kasan-gce-root 2019/04/30 13:12 upstream 83a50840e72a 20f16bef .config log report
ci-upstream-kasan-gce-smack-root 2019/04/29 21:56 upstream 80871482fd5c b617407b .config log report
ci-upstream-kasan-gce-selinux-root 2019/04/26 23:34 upstream d0473f978e61 b617407b .config log report
ci-upstream-kasan-gce-selinux-root 2019/04/22 23:22 upstream 085b7755808a 53199d6e .config log report
ci-upstream-kasan-gce-smack-root 2019/04/14 11:21 upstream 4443f8e6ac77 505ab413 .config log report
ci-upstream-kasan-gce-selinux-root 2019/04/06 04:00 upstream 7f46774c6480 fa763482 .config log report
ci-upstream-kasan-gce 2019/03/05 11:38 upstream 736706bee329 bb91cf81 .config log report
ci-upstream-kasan-gce-smack-root 2018/12/27 02:44 upstream eed9688f8513 e747ec98 .config log report
ci-upstream-kasan-gce-386 2019/03/05 07:59 upstream cd2a3bf02625 bb91cf81 .config log report
ci-upstream-bpf-kasan-gce 2019/05/04 13:33 bpf b9aa0b35d878 d28f4ce5 .config log report
ci-upstream-bpf-kasan-gce 2019/05/01 23:50 bpf 21f1b8a6636c 7516d9fa .config log report
ci-upstream-bpf-kasan-gce 2019/05/01 18:55 bpf 21f1b8a6636c 7516d9fa .config log report
ci-upstream-bpf-kasan-gce 2019/05/01 09:33 bpf 21f1b8a6636c 618456b4 .config log report
ci-upstream-bpf-kasan-gce 2019/04/27 05:34 bpf 0edd6b64d193 b617407b .config log report
ci-upstream-bpf-kasan-gce 2019/04/26 09:58 bpf 7f09baa92884 b617407b .config log report
ci-upstream-bpf-kasan-gce 2019/04/24 06:24 bpf fed68833fc53 4d3d6a50 .config log report
ci-upstream-bpf-kasan-gce 2019/04/21 00:06 bpf fed68833fc53 b0e8efcb .config log report
ci-upstream-bpf-kasan-gce 2019/04/19 18:55 bpf fed68833fc53 b0e8efcb .config log report
ci-upstream-bpf-kasan-gce 2019/04/17 09:24 bpf fed68833fc53 b0e8efcb .config log report
ci-upstream-bpf-kasan-gce 2019/04/15 09:59 bpf ad40ddd4cef4 505ab413 .config log report
ci-upstream-bpf-kasan-gce 2019/04/11 19:20 bpf bbd669a868bb 13030ef8 .config log report
ci-upstream-net-this-kasan-gce 2019/03/31 04:39 net 288ac524cf70 0c624d4d .config log report
ci-upstream-bpf-kasan-gce 2019/03/30 12:57 bpf 676e4a6fe703 c35ee0ea .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/15 00:58 bpf-next 80f232121b69 bd4e3ac7 .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/13 15:59 bpf-next 80f232121b69 16ab1e89 .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/13 09:45 bpf-next 80f232121b69 16ab1e89 .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/11 15:15 bpf-next 80f232121b69 46caad94 .config log report
ci-upstream-net-kasan-gce 2019/05/09 20:01 net-next 80f232121b69 6fc130d3 .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/09 18:59 bpf-next 80f232121b69 6fc130d3 .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/09 11:06 bpf-next 80f232121b69 1ab4c999 .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/08 14:36 bpf-next d24ed99b3b27 a7383bfa .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/02 14:40 bpf-next 2b5bc3c8ebce 7516d9fa .config log report
ci-upstream-bpf-next-kasan-gce 2019/05/01 20:56 bpf-next 2b5bc3c8ebce 7516d9fa .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/29 12:44 bpf-next 9076c49bdca2 b617407b .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/28 03:55 bpf-next 9076c49bdca2 b617407b .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/26 03:33 bpf-next 0e33d334df13 b617407b .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/25 10:32 bpf-next a21b48a2f2af 8e3c52b1 .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/25 01:29 bpf-next a21b48a2f2af 8e3c52b1 .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/24 15:02 bpf-next a21b48a2f2af 8e3c52b1 .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/23 19:17 bpf-next 7e6e185c74dd 53199d6e .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/23 13:57 bpf-next 7e6e185c74dd 53199d6e .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/23 06:27 bpf-next 3b8802446d27 53199d6e .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/22 20:50 bpf-next 4519efa6f8ea 53199d6e .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/22 12:54 bpf-next 4519efa6f8ea 0a77c33c .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/21 17:29 bpf-next 4519efa6f8ea b0e8efcb .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/20 15:35 bpf-next 4519efa6f8ea b0e8efcb .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/20 09:03 bpf-next 4519efa6f8ea b0e8efcb .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/18 08:24 bpf-next 193d0002ef04 b0e8efcb .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/18 01:52 bpf-next 00967e84f742 b0e8efcb .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/17 08:23 bpf-next 02a8c817a316 b0e8efcb .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/16 19:22 bpf-next bcbccad694b7 505ab413 .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/16 15:12 bpf-next bcbccad694b7 505ab413 .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/15 03:32 bpf-next c342dc109aa5 505ab413 .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/06 06:36 bpf-next 347807d3876a fa763482 .config log report
ci-upstream-bpf-next-kasan-gce 2019/04/04 14:47 bpf-next cc441a69486b 6a475fff .config log report
ci-upstream-net-kasan-gce 2019/03/11 04:33 net-next d9862cfbe209 12365b99 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/04/01 16:14 linux-next e3ecb83ee707 a9ca43d4 .config log report