WARNING in hci_conn_timeout
20 views
Skip to first unread message
syzbot
Jul 30, 2020, 10:13:16 PM7/30/20
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: e5a54aa2 Linux 4.14.190
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=14bbef50900000
kernel config: https://syzkaller.appspot.com/x/.config?x=dbb53fc7192d83c3
dashboard link: https://syzkaller.appspot.com/bug?extid=acd541d3e3ae018e2374
compiler: gcc (GCC) 10.1.0-syz 20200507
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+acd541...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 7817 at net/bluetooth/hci_conn.c:404 hci_conn_timeout+0x1de/0x230 net/bluetooth/hci_conn.c:404
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 7817 Comm: kworker/u5:4 Not tainted 4.14.190-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
Workqueue: hci3 hci_conn_timeout
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x20/0x4b kernel/panic.c:547
report_bug+0x208/0x249 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:hci_conn_timeout+0x1de/0x230 net/bluetooth/hci_conn.c:404
RSP: 0000:ffff888060977d40 EFLAGS: 00010297
RAX: ffff88808db56080 RBX: ffff88808dbae8a0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88808dbae790
RBP: 00000000ffffffff R08: ffffffff8a0a2fb8 R09: 00000000000407f6
R10: ffff88808db56930 R11: ffff88808db56080 R12: ffff88808dbae8b0
R13: ffff8880a8df8e00 R14: ffff8880a79eb200 R15: ffff8880977ec400
process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: e5a54aa2 Linux 4.14.190
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=14bbef50900000
kernel config: https://syzkaller.appspot.com/x/.config?x=dbb53fc7192d83c3
dashboard link: https://syzkaller.appspot.com/bug?extid=acd541d3e3ae018e2374
compiler: gcc (GCC) 10.1.0-syz 20200507
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+acd541...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 7817 at net/bluetooth/hci_conn.c:404 hci_conn_timeout+0x1de/0x230 net/bluetooth/hci_conn.c:404
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 7817 Comm: kworker/u5:4 Not tainted 4.14.190-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
Workqueue: hci3 hci_conn_timeout
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x20/0x4b kernel/panic.c:547
report_bug+0x208/0x249 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:hci_conn_timeout+0x1de/0x230 net/bluetooth/hci_conn.c:404
RSP: 0000:ffff888060977d40 EFLAGS: 00010297
RAX: ffff88808db56080 RBX: ffff88808dbae8a0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88808dbae790
RBP: 00000000ffffffff R08: ffffffff8a0a2fb8 R09: 00000000000407f6
R10: ffff88808db56930 R11: ffff88808db56080 R12: ffff88808dbae8b0
R13: ffff8880a8df8e00 R14: ffff8880a79eb200 R15: ffff8880977ec400
process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
Aug 1, 2020, 11:05:16 AM8/1/20
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 7f2c5eb4 Linux 4.14.191
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=131d8232900000
kernel config: https://syzkaller.appspot.com/x/.config?x=881f1aee9620bf9f
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11273242900000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+acd541...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6371 at net/bluetooth/hci_conn.c:404 hci_conn_timeout+0x1de/0x230 net/bluetooth/hci_conn.c:404
RAX: ffff8880972e2200 RBX: ffff88809b3ec620 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88809b3ec510
RBP: 00000000ffffffff R08: 0000000000000001 R09: ffffffff8951a340
R10: 000000000011dff3 R11: ffff8880972e2200 R12: ffff88809b3ec630
R13: ffff88809ff27c00 R14: ffff8880a79df180 R15: ffff88808c714c00
HEAD commit: 7f2c5eb4 Linux 4.14.191
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=131d8232900000
kernel config: https://syzkaller.appspot.com/x/.config?x=881f1aee9620bf9f
dashboard link: https://syzkaller.appspot.com/bug?extid=acd541d3e3ae018e2374
compiler: gcc (GCC) 10.1.0-syz 20200507
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13678e04900000
compiler: gcc (GCC) 10.1.0-syz 20200507
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11273242900000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+acd541...@syzkaller.appspotmail.com
------------[ cut here ]------------
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 6371 Comm: kworker/u5:2 Not tainted 4.14.191-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: hci0 hci_conn_timeout
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x20/0x4b kernel/panic.c:547
report_bug+0x208/0x249 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:hci_conn_timeout+0x1de/0x230 net/bluetooth/hci_conn.c:404
RSP: 0018:ffff88809802fd40 EFLAGS: 00010297
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x20/0x4b kernel/panic.c:547
report_bug+0x208/0x249 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:hci_conn_timeout+0x1de/0x230 net/bluetooth/hci_conn.c:404
RAX: ffff8880972e2200 RBX: ffff88809b3ec620 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88809b3ec510
RBP: 00000000ffffffff R08: 0000000000000001 R09: ffffffff8951a340
R10: 000000000011dff3 R11: ffff8880972e2200 R12: ffff88809b3ec630
R13: ffff88809ff27c00 R14: ffff8880a79df180 R15: ffff88808c714c00
syzbot
Aug 1, 2020, 1:09:18 PM8/1/20
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 13af6c74 Linux 4.19.136
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1425b214900000
kernel config: https://syzkaller.appspot.com/x/.config?x=5b7578d3b5457a49
dashboard link: https://syzkaller.appspot.com/bug?extid=1a6290d59d61c9310dfd
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1024c242900000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1a6290...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1226 at net/bluetooth/hci_conn.c:404 hci_conn_timeout.cold+0x11/0x18 net/bluetooth/hci_conn.c:404
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
panic+0x26a/0x50e kernel/panic.c:186
__warn.cold+0x20/0x61 kernel/panic.c:541
report_bug+0x262/0x2b0 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:178 [inline]
fixup_bug arch/x86/kernel/traps.c:173 [inline]
do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:hci_conn_timeout.cold+0x11/0x18 net/bluetooth/hci_conn.c:404
Code: cb 24 fb e9 49 fe ff ff 48 8d bb 40 0f 00 00 e8 cd cb 24 fb e9 00 fe ff ff e8 63 ae ee fa 48 c7 c7 40 c2 39 88 e8 06 bc d9 fa <0f> 0b e9 eb 4c ff ff e8 4b ae ee fa e8 c6 b1 24 fb 48 c7 c7 80 ca
RSP: 0018:ffff8880a7597d18 EFLAGS: 00010282
RAX: 0000000000000024 RBX: ffff8880a5e8a720 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8154cf01 RDI: ffffed1014eb2f95
RBP: 00000000ffffffff R08: 0000000000000024 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880a7500050
R13: ffff8880a7bf8b00 R14: ffff8880a7500000 R15: ffff8880893c9800
process_one_work+0x864/0x1570 kernel/workqueue.c:2155
worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
kthread+0x30b/0x410 kernel/kthread.c:246
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
https://goo.gl/tpsmEJ#testing-patches
syzbot found the following issue on:
HEAD commit: 13af6c74 Linux 4.19.136
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1425b214900000
kernel config: https://syzkaller.appspot.com/x/.config?x=5b7578d3b5457a49
dashboard link: https://syzkaller.appspot.com/bug?extid=1a6290d59d61c9310dfd
compiler: gcc (GCC) 10.1.0-syz 20200507
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=177c7c92900000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1024c242900000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1226 at net/bluetooth/hci_conn.c:404 hci_conn_timeout.cold+0x11/0x18 net/bluetooth/hci_conn.c:404
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 1226 Comm: kworker/u5:0 Not tainted 4.19.136-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: hci0 hci_conn_timeout
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
Workqueue: hci0 hci_conn_timeout
Call Trace:
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
panic+0x26a/0x50e kernel/panic.c:186
__warn.cold+0x20/0x61 kernel/panic.c:541
report_bug+0x262/0x2b0 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:178 [inline]
fixup_bug arch/x86/kernel/traps.c:173 [inline]
do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:hci_conn_timeout.cold+0x11/0x18 net/bluetooth/hci_conn.c:404
Code: cb 24 fb e9 49 fe ff ff 48 8d bb 40 0f 00 00 e8 cd cb 24 fb e9 00 fe ff ff e8 63 ae ee fa 48 c7 c7 40 c2 39 88 e8 06 bc d9 fa <0f> 0b e9 eb 4c ff ff e8 4b ae ee fa e8 c6 b1 24 fb 48 c7 c7 80 ca
RSP: 0018:ffff8880a7597d18 EFLAGS: 00010282
RAX: 0000000000000024 RBX: ffff8880a5e8a720 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8154cf01 RDI: ffffed1014eb2f95
RBP: 00000000ffffffff R08: 0000000000000024 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880a7500050
R13: ffff8880a7bf8b00 R14: ffff8880a7500000 R15: ffff8880893c9800
process_one_work+0x864/0x1570 kernel/workqueue.c:2155
worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
kthread+0x30b/0x410 kernel/kthread.c:246
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Kernel Offset: disabled
Rebooting in 86400 seconds..
Rebooting in 86400 seconds..
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
https://goo.gl/tpsmEJ#testing-patches
Reply all
Reply to author
Forward
0 new messages