bisecting fixing commit since e0f8b8a65a473a8baa439cf865a694bbeb83fe90
building syzkaller on 35f5e45ed3cc032d9f969f3a8700e29607c1364f
testing commit e0f8b8a65a473a8baa439cf865a694bbeb83fe90 with gcc (GCC) 8.1.0
kernel signature: a9c1525bb59c0962c0347771d28456716406cb3c83b16eda3206c4f45e99edb0
run #0: basic kernel testing failed: failed to copy test binary to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-i" "/syzkaller/jobs/linux/workdir/image/key" "/syzkaller/jobs/linux/workdir/repro.prog" "root@10.128.15.199:./repro.prog"]: exit status 1
Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts.
/syzkaller/jobs/linux/workdir/repro.prog: Broken pipe

run #1: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet
run #2: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet
run #3: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet
run #4: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet
run #5: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet
run #6: crashed: WARNING in process_one_work
run #7: crashed: WARNING in corrupted
run #8: OK
run #9: OK
testing current HEAD c6db52a88798e5a0dfef80041ad4d33cc8cf04eb
testing commit c6db52a88798e5a0dfef80041ad4d33cc8cf04eb with gcc (GCC) 8.1.0
kernel signature: 6cb9b590f7ea425eab3cd979cbfad9d2aa61896801d39561a70ed205e0789a88
run #0: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet
run #1: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet
run #2: crashed: WARNING in corrupted
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
revisions tested: 2, total time: 40m34.930623863s (build: 16m56.929630275s, test: 22m38.506983783s)
the crash still happens on HEAD
commit msg: Linux 4.14.183
crash: WARNING in corrupted
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
R13: 00000000000009cb R14: 00000000004cb3c7 R15: 000000000000000e
batman_adv: batadv0: Adding interface: macsec0
------------[ cut here ]------------
batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
WARNING: CPU: 0 PID: 101 at net/batman-adv/bat_iv_ogm.c:588 batadv_iv_send_outstanding_bat_ogm_packet+0x633/0x7c0 net/batman-adv/bat_iv_ogm.c:1835
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 101 Comm: kworker/u4:2 Not tainted 4.14.183-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
batman_adv: batadv0: Interface activated: macsec0
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xf7/0x13b lib/dump_stack.c:58
 panic+0x1b0/0x358 kernel/panic.c:183
 __warn.cold.8+0x25/0x2c kernel/panic.c:547
 report_bug+0x1a4/0x1f3 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:588 [inline]
RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet+0x633/0x7c0 net/batman-adv/bat_iv_ogm.c:1847
RSP: 0018:ffff8880a9aafce0 EFLAGS: 00010286
RAX: ffff88808d4c2900 RBX: ffff8880a92f3488 RCX: 1ffff110118fa36e
RDX: 0000000000000000 RSI: ffffffff87f84e20 RDI: ffff88808c7d1b70
RBP: ffff8880a9aafd60 R08: ffff8880a9abad90 R09: 0000000000007f6c
R10: 0000000000000028 R11: ffff8880a9aba4c0 R12: ffff88808bd314c0
R13: ffff8880a92f3440 R14: ffff88808c7d1b00 R15: ffff8880a92f3528
 process_one_work+0x79e/0x16c0 kernel/workqueue.c:2116
 worker_thread+0xcc/0xee0 kernel/workqueue.c:2250
 kthread+0x338/0x400 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..