Rising-Sun:

Hey,

my device is crashing when data is transfered through a batman_adv Mesh connection.

Devolo 1750e with Kernel 4.19 and 5.4

Powered by LuCI Master (git-20.088.24060-0adf93d) / OpenWrt SNAPSHOT r12752-258f070d1a (Kernel 5.4) Using mainline ath10k with ath10k_core rawmode=1.
Batman_adv is configured like in the example with WPA3 and bat0 is bridged with br-lan but only the wifi-devices are configured as hardifs not the ethX devices. Forwarding is off in the wifi config.

Connect Xiaomi 3G per 5Ghzb with batman_adv Mesh without a direct LAN connection. scp a test file with 10Mb from Xiaomi 3G to devolo's /tmp. The devolo device does a kernel panic.

root@OpenWrt-devolo:/# [ 205.433160] batman_adv: bat0: MLD Querier appeared

root@OpenWrt-devolo:/# [ 332.176798] skbuff: skb_over_panic: text:478ac643 len:146 put:8 head:ed3f07e2 data:080f49d9 tail:0x86d27508 end:0x86d27500 dev:mesh1
[ 332.188934] Kernel bug detected[#1]:
[ 332.192564] CPU: 0 PID: 0 Comm: swapper Not tainted 5.4.28 #0
[ 332.198382] $ 0 : 00000000 00000001 00000078 00000000
[ 332.203679] $ 4 : 806034c4 806034c4 8060d030 00000175
[ 332.208977] $ 8 : 00000031 00000000 32373530 30206465
[ 332.214274] $12 : 00000175 80770000 80770000 00000000
[ 332.219571] $16 : 86d1de40 a7730000 8764a448 00000000
[ 332.224870] $20 : 00000000 87649d60 87c39c70 00000000
[ 332.230167] $24 : 00000003 802e6650
[ 332.235465] $28 : 805f8000 87c0b398 86d27476 8036d934
[ 332.240763] Hi : 000000b3
[ 332.243676] Lo : 67fa8000
[ 332.246606] epc : 8036cd98 BUG+0x0/0x4
[ 332.250581] ra : 8036d934 skb_push+0x0/0x44
[ 332.255080] Status: 1100fc03KERNEL EXL IE
[ 332.259323] Cause : 00800024 (ExcCode 09)
[ 332.263380] PrId : 00019750 (MIPS 74Kc)
[ 332.267355] Modules linked in: ksmbd ath9k ath9k_common pppoe ppp_async iptable_nat batman_adv ath9k_hw ath10k_pci ath10k_core ath xt_state xt_nat xt_conntrack xt_REDIRECT xt_MASQUERADE xt_FLOWOFFLOAD pppox ppp_generic nf_nat nf_flow_table_hw nf_flow_table nf_conntrack_rtcache nf_conntrack mac80211 ipt_REJECT cfg80211 xt_time xt_tcpudp xt_multiport xt_mark xt_mac xt_limit xt_comment xt_TCPMSS xt_LOG slhc nf_reject_ipv4 nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_filter ip_tables crc_ccitt compat ledtrig_heartbeat nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 nls_utf8 sha512_generic sha256_generic libsha256 seqiv jitterentropy_rng drbg md5 md4 hmac ghash_generic gf128mul gcm ecb des_generic libdes ctr cmac ccm arc4 fsl_mph_dr_of ehci_platform ehci_fsl ehci_hcd gpio_button_hotplug usbcore nls_base usb_common crc16 aead crypto_null cryptomgr crc32c_generic crypto_hash
[ 332.353083] Process swapper (pid: 0, threadinfo=8cb10ed9, task=e8f11321, tls=00000000)
[ 332.361101] Stack : 87776000 805b33fc 87021238 00000092 00000008 86d27400 86d27476 86d27508
[ 332.369576] 86d27500 86cd2000 86d1de40 8036d9c8 805b376c 00000001 00000a20 00000000
[ 332.378049] 86d1de40 87021238 00000000 00000000 00000000 00000000 00000000 00000000
[ 332.386525] 86d1de40 00000000 07730000 00000000 00000034 877b24b4 0000058f 87c39c70
[ 332.394999] 000000a2 804ca050 00000000 86c899e0 13552df5 87041df8 00000000 87776000
[ 332.403473] ...
[ 332.405948] Call Trace:
[ 332.408426] [<8036cd98>] BUG+0x0/0x4
[ 332.412052] [<8036d934>] skb_push+0x0/0x44
[ 332.416200] Code: 24a60008 080ddd11 00402825 <000c000d> 27bdffd8 afb2001c afb10018 afbf0024 afb30020
[ 332.426090]
[ 332.427651] ---[ end trace bfb30e41d4d60f18 ]---
[ 332.432333] Kernel panic - not syncing: Fatal exception in interrupt
[ 332.438777] Rebooting in 3 seconds..


root@OpenWrt-devolo:/# [ 492.689510] skbuff: skb_over_panic: text:35425077 len:138 put:8 head:3e11da35 data:6b2baf52 tail:0x86d31d08 end:0x86d31d00 dev:mesh1
[ 492.701653] Kernel bug detected[#1]:
[ 492.705278] CPU: 0 PID: 0 Comm: swapper Not tainted 5.4.28 #0
[ 492.711097] $ 0 : 00000000 00000001 00000078 00000000
[ 492.716393] $ 4 : 806034c4 806034c4 8060d030 000000f6
[ 492.721691] $ 8 : 00000031 00000000 33316430 30206465
[ 492.726989] $12 : 000000f6 80770000 80770000 00000000
[ 492.732286] $16 : 852ea840 a7790000 877a2448 00000000
[ 492.737584] $20 : 00000000 877a1d60 87c39c70 00000000
[ 492.742881] $24 : 00000003 802e6650
[ 492.748179] $28 : 805f8000 87c0b398 86d31c7e 8036d934
[ 492.753478] Hi : 000000b3
[ 492.756391] Lo : 67fa8000
[ 492.759321] epc : 8036cd98 BUG+0x0/0x4
[ 492.763294] ra : 8036d934 skb_push+0x0/0x44
[ 492.767795] Status: 1100fc03KERNEL EXL IE
[ 492.772037] Cause : 00800024 (ExcCode 09)
[ 492.776095] PrId : 00019750 (MIPS 74Kc)
[ 492.780069] Modules linked in: ksmbd ath9k ath9k_common pppoe ppp_async iptable_nat batman_adv ath9k_hw ath10k_pci ath10k_core ath xt_state xt_nat xt_conntrack xt_REDIRECT xt_MASQUERADE xt_FLOWOFFLOAD pppox ppp_generic nf_nat nf_flow_table_hw nf_flow_table nf_conntrack_rtcache nf_conntrack mac80211 ipt_REJECT cfg80211 xt_time xt_tcpudp xt_multiport xt_mark xt_mac xt_limit xt_comment xt_TCPMSS xt_LOG slhc nf_reject_ipv4 nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_filter ip_tables crc_ccitt compat ledtrig_heartbeat nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 nls_utf8 sha512_generic sha256_generic libsha256 seqiv jitterentropy_rng drbg md5 md4 hmac ghash_generic gf128mul gcm ecb des_generic libdes ctr cmac ccm arc4 fsl_mph_dr_of ehci_platform ehci_fsl ehci_hcd gpio_button_hotplug usbcore nls_base usb_common crc16 aead crypto_null cryptomgr crc32c_generic crypto_hash
[ 492.865798] Process swapper (pid: 0, threadinfo=00f90435, task=15df6761, tls=00000000)
[ 492.873817] Stack : 871fb000 805b33fc 87021238 0000008a 00000008 86d31c00 86d31c7e 86d31d08
[ 492.882290] 86d31d00 86cc4000 852ea840 8036d9c8 805b376c 00000001 00000a20 00000000
[ 492.890764] 852ea840 87021238 00000000 00000000 00000000 00000000 00000000 00000000
[ 492.899239] 852ea840 00000000 07790000 00000000 00000034 877324b4 00010000 800b4398
[ 492.907713] 00000000 00000000 00000000 8720bb78 1cacfd2a 800b7c10 00000000 871fb000
[ 492.916188] ...
[ 492.918663] Call Trace:
[ 492.921141] [<8036cd98>] BUG+0x0/0x4
[ 492.924767] [<8036d934>] skb_push+0x0/0x44
[ 492.928915] Code: 24a60008 080ddd11 00402825 <000c000d> 27bdffd8 afb2001c afb10018 afbf0024 afb30020
[ 492.938804]
[ 492.940369] ---[ end trace cb297d2d2554dc55 ]---
[ 492.945056] Kernel panic - not syncing: Fatal exception in interrupt
[ 492.951501] Rebooting in 3 seconds..

[ 11.233720] ath10k_pci 0000:00:00.0: enabling device (0000 -> 0002)
[ 11.240230] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[ 12.177590] ath10k_pci 0000:00:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[ 12.186994] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 1
[ 12.199685] ath10k_pci 0000:00:00.0: firmware ver 10.2.4-1.0-00047 api 5 features no-p2p,raw-mode,mfp,allows-mesh-bcast crc32 35bd9258
[ 12.469122] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[ 13.583147] ath10k_pci 0000:00:00.0: unsupported HTC service id: 1536
[ 13.611722] ath10k_pci 0000:00:00.0: htt-ver 2.1 wmi-op 5 htt-op 2 cal file max-sta 128 raw 1 hwcrypto 1
[ 13.796823] batman_adv: B.A.T.M.A.N. advanced 2020.0-openwrt-1 (compatibility version 15) loaded
[ 13.880872] ieee80211 phy1: Atheros AR9550 Rev:0 mem=0xb8100000, irq=13