syzbot


general protection fault in batadv_iv_ogm_schedule_buff (2)

Status: auto-closed as invalid on 2022/02/23 03:02
Reported-by: syzbot+7a97706650fb860b61c4@syzkaller.appspotmail.com
First crash: 954d, last: 910d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 general protection fault in batadv_iv_ogm_schedule_buff 1 1467d 1467d 1/1 fixed on 2020/07/08 19:03
linux-4.14 general protection fault in batadv_iv_ogm_schedule_buff (2) 1 1384d 1384d 0/1 auto-closed as invalid on 2020/11/06 04:28
linux-4.19 general protection fault in batadv_iv_ogm_schedule_buff 6 1498d 1554d 1/1 fixed on 2020/07/08 18:45
upstream general protection fault in batadv_iv_ogm_schedule_buff batman 24 1505d 1528d 15/26 fixed on 2020/04/15 17:19
linux-4.14 general protection fault in batadv_iv_ogm_schedule_buff (3) 1 1151d 1151d 0/1 auto-closed as invalid on 2021/06/27 06:13
upstream general protection fault in batadv_iv_ogm_schedule_buff (2) batman 4 1302d 1386d 0/26 auto-closed as invalid on 2021/01/27 07:05

Sample crash report:
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 20123 Comm: kworker/u4:2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
RIP: 0010:batadv_iv_ogm_schedule_buff+0xc7e/0x1340 net/batman-adv/bat_iv_ogm.c:1026
(unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
Code: 80 3c 38 00 0f 85 be 06 00 00 48 8b 1b 48 81 fb 60 8c db 8d 0f 84 78 02 00 00 e8 9d 69 8d f9 48 8d 7b 78 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 0f 85 ee 05 00 00 48 8b 04 24 48 8b 6b 78 80 38 00
RSP: 0000:ffff888227f4fbc0 EFLAGS: 00010206
RAX: 000000000000000f RBX: 0000000000000000 RCX: ffffffff87d51f41
RDX: 0000000000000000 RSI: ffffffff87d51bd3 RDI: 0000000000000078
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888012f4bb00 R14: 0000000000000400 R15: dffffc0000000000
(unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f76a1b373a4 CR3: 000000009f991000 CR4: 00000000003426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:1052 [inline]
 batadv_iv_ogm_schedule net/batman-adv/bat_iv_ogm.c:1045 [inline]
 batadv_iv_send_outstanding_bat_ogm_packet+0x68c/0x7a0 net/batman-adv/bat_iv_ogm.c:1871
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
(unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Modules linked in:
(unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
---[ end trace 1fff2edd62aae733 ]---
RIP: 0010:batadv_iv_ogm_schedule_buff+0xc7e/0x1340 net/batman-adv/bat_iv_ogm.c:1026
Code: 80 3c 38 00 0f 85 be 06 00 00 48 8b 1b 48 81 fb 60 8c db 8d 0f 84 78 02 00 00 e8 9d 69 8d f9 48 8d 7b 78 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 0f 85 ee 05 00 00 48 8b 04 24 48 8b 6b 78 80 38 00
(unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
RSP: 0000:ffff888227f4fbc0 EFLAGS: 00010206
RAX: 000000000000000f RBX: 0000000000000000 RCX: ffffffff87d51f41
(unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
RDX: 0000000000000000 RSI: ffffffff87d51bd3 RDI: 0000000000000078
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888012f4bb00 R14: 0000000000000400 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
(unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
CR2: 00007f5439f76000 CR3: 0000000092a3f000 CR4: 00000000003426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	80 3c 38 00          	cmpb   $0x0,(%rax,%rdi,1)
   4:	0f 85 be 06 00 00    	jne    0x6c8
   a:	48 8b 1b             	mov    (%rbx),%rbx
   d:	48 81 fb 60 8c db 8d 	cmp    $0xffffffff8ddb8c60,%rbx
  14:	0f 84 78 02 00 00    	je     0x292
  1a:	e8 9d 69 8d f9       	callq  0xf98d69bc
  1f:	48 8d 7b 78          	lea    0x78(%rbx),%rdi
  23:	48 89 f8             	mov    %rdi,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 38 00       	cmpb   $0x0,(%rax,%r15,1) <-- trapping instruction
  2f:	0f 85 ee 05 00 00    	jne    0x623
  35:	48 8b 04 24          	mov    (%rsp),%rax
  39:	48 8b 6b 78          	mov    0x78(%rbx),%rbp
  3d:	80 38 00             	cmpb   $0x0,(%rax)

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/10/26 03:01 linux-4.19.y 3f8a27f9e27b c1132b49 .config console log report info ci2-linux-4-19 general protection fault in batadv_iv_ogm_schedule_buff
2021/09/12 12:13 linux-4.19.y b172b44fcb17 3ce60af8 .config console log report info ci2-linux-4-19 general protection fault in batadv_iv_ogm_schedule_buff
* Struck through repros no longer work on HEAD.