syzbot


WARNING: can't dereference registers at ADDR for ip entry_SYSCALL_64_after_hwframe

Status: auto-closed as invalid on 2021/03/16 07:11
Reported-by: syzbot+77c7d0174822f825bb70@syzkaller.appspotmail.com
First crash: 562d, last: 555d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 WARNING: can't dereference registers at ADDR for ip entry_SYSCALL_64_after_hwframe (2) 590931 196d 400d 0/1 auto-closed as invalid on 2022/03/10 13:14

Sample crash report:
IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
batman_adv: batadv0: Interface activated: batadv_slave_0
IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
WARNING: can't dereference registers at 0000000000000539 for ip entry_SYSCALL_64_after_hwframe+0x46/0xbb
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
Bluetooth: hci5 command 0x0419 tx timeout
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
Bluetooth: hci3 command 0x0419 tx timeout
Bluetooth: hci1 command 0x0419 tx timeout
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
Bluetooth: hci2 command 0x0419 tx timeout
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
Bluetooth: hci0 command 0x0419 tx timeout
IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
Bluetooth: hci4 command 0x0419 tx timeout
batman_adv: batadv0: Interface activated: batadv_slave_1
IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
device veth0_macvtap entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
device veth1_macvtap entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
batman_adv: batadv0: Interface activated: batadv_slave_0
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
batman_adv: batadv0: Interface activated: batadv_slave_1
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
hrtimer: interrupt took 35787 ns
overlayfs: unrecognized mount option "" or missing value
ptrace attach of "/root/syz-executor.5"[9733] was attempted by "/root/syz-executor.5"[9734]
syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
Unknown ioctl 35123
Unknown ioctl -2147191743
Unknown ioctl 35123
Unknown ioctl -2147191743
IPVS: ftp: loaded support on port[0] = 21
audit: type=1804 audit(1608102232.703:3): pid=9868 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir692875614/syzkaller.kbKe2I/22/file0" dev="sda1" ino=15707 res=1
IPVS: ftp: loaded support on port[0] = 21
audit: type=1804 audit(1608102233.123:4): pid=9930 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir692875614/syzkaller.kbKe2I/23/file0" dev="sda1" ino=15812 res=1
ptrace attach of "/root/syz-executor.5"[10036] was attempted by "/root/syz-executor.5"[10041]
audit: type=1804 audit(1608102233.773:5): pid=10044 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir692875614/syzkaller.kbKe2I/25/file0" dev="sda1" ino=15812 res=1
audit: type=1804 audit(1608102234.163:6): pid=10104 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir886570593/syzkaller.7yO3yI/28/bus" dev="sda1" ino=15770 res=1
audit: type=1804 audit(1608102234.353:7): pid=10114 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir886570593/syzkaller.7yO3yI/28/bus" dev="sda1" ino=15770 res=1
ptrace attach of "/root/syz-executor.5"[10192] was attempted by "/root/syz-executor.5"[10196]
tmpfs: Bad value '|' for mount option 'size'
tmpfs: Bad value '|' for mount option 'size'
input input7: cannot allocate more than FF_MAX_EFFECTS effects
tmpfs: Bad value '' for mount option 'uid'
tmpfs: Bad value '' for mount option 'uid'
ptrace attach of "/root/syz-executor.3"[10417] was attempted by "/root/syz-executor.3"[10419]
ptrace attach of "/root/syz-executor.1"[10444] was attempted by "/root/syz-executor.1"[10446]
ptrace attach of "/root/syz-executor.3"[10474] was attempted by "/root/syz-executor.3"[10477]
IPVS: ftp: loaded support on port[0] = 21
audit: type=1804 audit(1608102237.153:8): pid=10521 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir527050316/syzkaller.P9bqmH/48/bus/file0" dev="sda1" ino=15863 res=1
overlayfs: './file0' not a directory
audit: type=1804 audit(1608102237.243:9): pid=10534 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir527050316/syzkaller.P9bqmH/48/bus/bus/file0" dev="sda1" ino=15836 res=1
syz-executor.2 (10521) used greatest stack depth: 24024 bytes left
IPVS: ftp: loaded support on port[0] = 21
audit: type=1804 audit(1608102237.243:10): pid=10534 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir527050316/syzkaller.P9bqmH/48/bus/bus/file0" dev="sda1" ino=15836 res=1

Crashes (20933):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2020/12/16 07:03 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 06:50 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 06:36 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 06:23 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 06:09 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 05:58 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 05:44 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 05:34 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 05:17 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 05:03 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 04:55 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 04:47 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 04:39 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 04:29 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 04:15 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 04:00 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 03:48 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 03:36 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 03:24 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 03:12 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 03:00 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 02:52 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 02:43 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 02:33 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 02:25 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 02:16 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 02:06 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 01:56 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 01:46 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 01:37 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 01:30 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 01:20 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 01:10 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 01:03 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 00:53 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 00:45 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 00:37 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 00:28 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 00:19 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 00:12 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/16 00:03 linux-4.14.y 3f2ecb86cb90 f213e07e .config log report info
ci2-linux-4-14 2020/12/09 20:25 linux-4.14.y 47cbf4cc32db c090b4da .config log report info