WARNING in process_one_work
6 views
Skip to first unread message
syzbot
Oct 25, 2019, 7:01:09 AM10/25/19
to syzkaller...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: b98aebd2 Linux 4.14.150
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=170e2cb7600000
kernel config: https://syzkaller.appspot.com/x/.config?x=c52c93b368dac5a7
dashboard link: https://syzkaller.appspot.com/bug?extid=9eafbfdb45d207faf7a5
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9eafbf...@syzkaller.appspotmail.com
do_setlink+0x99f/0x2d50 net/core/rtnetlink.c:2077
------------[ cut here ]------------
WARNING: CPU: 0 PID: 2835 at net/batman-adv/bat_iv_ogm.c:555
batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
WARNING: CPU: 0 PID: 2835 at net/batman-adv/bat_iv_ogm.c:555
batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680
net/batman-adv/bat_iv_ogm.c:1797
Kernel panic - not syncing: panic_on_warn set ...
rtnl_newlink+0x11a7/0x1700 net/core/rtnetlink.c:2630
rtnetlink_rcv_msg+0x3eb/0xb70 net/core/rtnetlink.c:4285
netlink_rcv_skb+0x14f/0x3c0 net/netlink/af_netlink.c:2432
rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4297
netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
netlink_unicast+0x45d/0x640 net/netlink/af_netlink.c:1312
netlink_sendmsg+0x7c4/0xc60 net/netlink/af_netlink.c:1877
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xce/0x110 net/socket.c:656
___sys_sendmsg+0x70a/0x840 net/socket.c:2062
__sys_sendmsg+0xb9/0x140 net/socket.c:2096
SYSC_sendmsg net/socket.c:2107 [inline]
SyS_sendmsg+0x2d/0x50 net/socket.c:2103
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459ef9
RSP: 002b:00007f3760d62c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f3760d62c90 RCX: 0000000000459ef9
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3760d636d4
R13: 00000000004c81fc R14: 00000000004de220 R15: 0000000000000006
CPU: 0 PID: 2835 Comm: kworker/u4:5 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
batman_adv: batadv0: Adding interface: veth131
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x197 lib/dump_stack.c:53
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x2f/0x2f kernel/panic.c:547
report_bug+0x216/0x254 lib/bug.c:186
batman_adv: batadv0: The MTU of interface veth131 is too small (1500) to
handle the transport of batman-adv packets. Packets going over this
interface will be fragmented on layer2 which could impact the performance.
Setting the MTU to 1560 would solve the problem.
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963
RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680
net/batman-adv/bat_iv_ogm.c:1797
batman_adv: batadv0: Interface activated: veth131
RSP: 0018:ffff88809d837cc8 EFLAGS: 00010297
RAX: ffff88809d828400 RBX: ffff888060561988 RCX: ffff88809d828c80
RDX: 0000000000000000 RSI: ffffffff8778f6e0 RDI: ffff88800ca0b868
RBP: ffff88809d837d38 R08: 00000000000012e3 R09: ffffffff88c8abd8
R10: ffff88809d828ca8 R11: ffff88809d828400 R12: ffff888056c1ddc0
R13: ffff888060561940 R14: ffff8880995e5000 R15: ffff88800ca0b800
process_one_work+0x863/0x1600 kernel/workqueue.c:2114
worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248
kobject: 'veth138' (ffff8880921f90f0): kobject_add_internal: parent: 'net',
set: 'devices'
kthread+0x319/0x430 kernel/kthread.c:232
kobject: 'veth138' (ffff8880921f90f0): kobject_uevent_env
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following crash on:
HEAD commit: b98aebd2 Linux 4.14.150
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=170e2cb7600000
kernel config: https://syzkaller.appspot.com/x/.config?x=c52c93b368dac5a7
dashboard link: https://syzkaller.appspot.com/bug?extid=9eafbfdb45d207faf7a5
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9eafbf...@syzkaller.appspotmail.com
do_setlink+0x99f/0x2d50 net/core/rtnetlink.c:2077
------------[ cut here ]------------
WARNING: CPU: 0 PID: 2835 at net/batman-adv/bat_iv_ogm.c:555
batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
WARNING: CPU: 0 PID: 2835 at net/batman-adv/bat_iv_ogm.c:555
batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680
net/batman-adv/bat_iv_ogm.c:1797
Kernel panic - not syncing: panic_on_warn set ...
rtnl_newlink+0x11a7/0x1700 net/core/rtnetlink.c:2630
rtnetlink_rcv_msg+0x3eb/0xb70 net/core/rtnetlink.c:4285
netlink_rcv_skb+0x14f/0x3c0 net/netlink/af_netlink.c:2432
rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4297
netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
netlink_unicast+0x45d/0x640 net/netlink/af_netlink.c:1312
netlink_sendmsg+0x7c4/0xc60 net/netlink/af_netlink.c:1877
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xce/0x110 net/socket.c:656
___sys_sendmsg+0x70a/0x840 net/socket.c:2062
__sys_sendmsg+0xb9/0x140 net/socket.c:2096
SYSC_sendmsg net/socket.c:2107 [inline]
SyS_sendmsg+0x2d/0x50 net/socket.c:2103
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459ef9
RSP: 002b:00007f3760d62c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f3760d62c90 RCX: 0000000000459ef9
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3760d636d4
R13: 00000000004c81fc R14: 00000000004de220 R15: 0000000000000006
CPU: 0 PID: 2835 Comm: kworker/u4:5 Not tainted 4.14.150 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
batman_adv: batadv0: Adding interface: veth131
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x197 lib/dump_stack.c:53
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x2f/0x2f kernel/panic.c:547
report_bug+0x216/0x254 lib/bug.c:186
batman_adv: batadv0: The MTU of interface veth131 is too small (1500) to
handle the transport of batman-adv packets. Packets going over this
interface will be fragmented on layer2 which could impact the performance.
Setting the MTU to 1560 would solve the problem.
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963
RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680
net/batman-adv/bat_iv_ogm.c:1797
batman_adv: batadv0: Interface activated: veth131
RSP: 0018:ffff88809d837cc8 EFLAGS: 00010297
RAX: ffff88809d828400 RBX: ffff888060561988 RCX: ffff88809d828c80
RDX: 0000000000000000 RSI: ffffffff8778f6e0 RDI: ffff88800ca0b868
RBP: ffff88809d837d38 R08: 00000000000012e3 R09: ffffffff88c8abd8
R10: ffff88809d828ca8 R11: ffff88809d828400 R12: ffff888056c1ddc0
R13: ffff888060561940 R14: ffff8880995e5000 R15: ffff88800ca0b800
process_one_work+0x863/0x1600 kernel/workqueue.c:2114
worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248
kobject: 'veth138' (ffff8880921f90f0): kobject_add_internal: parent: 'net',
set: 'devices'
kthread+0x319/0x430 kernel/kthread.c:232
kobject: 'veth138' (ffff8880921f90f0): kobject_uevent_env
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Feb 10, 2020, 6:26:13 AM2/10/20
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following crash on:
HEAD commit: e0f8b8a6 Linux 4.14.170
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13abf6e9e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=633dd9db249084f5
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11d85431e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9eafbf...@syzkaller.appspotmail.com
do_setlink+0x99f/0x2c20 net/core/rtnetlink.c:2098
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5 at net/batman-adv/bat_iv_ogm.c:555 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
WARNING: CPU: 0 PID: 5 at net/batman-adv/bat_iv_ogm.c:555 batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680 net/batman-adv/bat_iv_ogm.c:1797
rtnetlink_rcv_msg+0x3da/0xb70 net/core/rtnetlink.c:4315
netlink_rcv_skb+0x14f/0x3c0 net/netlink/af_netlink.c:2432
rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4327
netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
netlink_unicast+0x44d/0x650 net/netlink/af_netlink.c:1312
RSP: 002b:00007ffe5fa14cb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004436e9
R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000000000
CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.170-syzkaller #0
RAX: ffff8880a9cd2140 RBX: ffff8880a464cd48 RCX: ffff8880a9cd29c0
RDX: 0000000000000000 RSI: ffffffff87f84e60 RDI: ffff888091677ae8
RBP: ffff8880a9cdfd38 R08: 0000000000007133 R09: ffffffff89588218
R10: ffff8880a9cd29e8 R11: ffff8880a9cd2140 R12: ffff8880a39c5b00
R13: ffff8880a464cd00 R14: ffff8880954ae080 R15: ffff888091677a80
HEAD commit: e0f8b8a6 Linux 4.14.170
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13abf6e9e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=633dd9db249084f5
dashboard link: https://syzkaller.appspot.com/bug?extid=9eafbfdb45d207faf7a5
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1364fab5e00000
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11d85431e00000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+9eafbf...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5 at net/batman-adv/bat_iv_ogm.c:555 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
WARNING: CPU: 0 PID: 5 at net/batman-adv/bat_iv_ogm.c:555 batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680 net/batman-adv/bat_iv_ogm.c:1797
Kernel panic - not syncing: panic_on_warn set ...
rtnl_newlink+0x11a7/0x1700 net/core/rtnetlink.c:2660
rtnetlink_rcv_msg+0x3da/0xb70 net/core/rtnetlink.c:4315
netlink_rcv_skb+0x14f/0x3c0 net/netlink/af_netlink.c:2432
rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4327
netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
netlink_unicast+0x44d/0x650 net/netlink/af_netlink.c:1312
netlink_sendmsg+0x7c4/0xc60 net/netlink/af_netlink.c:1877
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xce/0x110 net/socket.c:656
___sys_sendmsg+0x70a/0x840 net/socket.c:2062
__sys_sendmsg+0xb9/0x140 net/socket.c:2096
SYSC_sendmsg net/socket.c:2107 [inline]
SyS_sendmsg+0x2d/0x50 net/socket.c:2103
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4436e9
sock_sendmsg_nosec net/socket.c:646 [inline]
sock_sendmsg+0xce/0x110 net/socket.c:656
___sys_sendmsg+0x70a/0x840 net/socket.c:2062
__sys_sendmsg+0xb9/0x140 net/socket.c:2096
SYSC_sendmsg net/socket.c:2107 [inline]
SyS_sendmsg+0x2d/0x50 net/socket.c:2103
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RSP: 002b:00007ffe5fa14cb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004436e9
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000002 R09: 00000000bb1414ac
R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000000000
CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.170-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x142/0x197 lib/dump_stack.c:58
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x2f/0x2f kernel/panic.c:547
report_bug+0x216/0x254 lib/bug.c:186
__warn.cold+0x2f/0x2f kernel/panic.c:547
report_bug+0x216/0x254 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963
RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680 net/batman-adv/bat_iv_ogm.c:1797
RSP: 0018:ffff8880a9cdfcc8 EFLAGS: 00010297
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963
RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:555 [inline]
RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet+0x5a2/0x680 net/batman-adv/bat_iv_ogm.c:1797
RAX: ffff8880a9cd2140 RBX: ffff8880a464cd48 RCX: ffff8880a9cd29c0
RDX: 0000000000000000 RSI: ffffffff87f84e60 RDI: ffff888091677ae8
RBP: ffff8880a9cdfd38 R08: 0000000000007133 R09: ffffffff89588218
R10: ffff8880a9cd29e8 R11: ffff8880a9cd2140 R12: ffff8880a39c5b00
R13: ffff8880a464cd00 R14: ffff8880954ae080 R15: ffff888091677a80
process_one_work+0x863/0x1600 kernel/workqueue.c:2114
worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248
kthread+0x319/0x430 kernel/kthread.c:232
worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248
Reply all
Reply to author
Forward
0 new messages