Title | Repro | Cause bisect | Fix bisect | Count | Last | Reported |
---|---|---|---|---|---|---|
KASAN: use-after-free Read in firmware_fallback_sysfs kernel | C | error | 16514 | 1193d | 1392d |
syzbot |
sign-in | mailing list | source | docs |
Title | Repro | Cause bisect | Fix bisect | Count | Last | Reported |
---|---|---|---|---|---|---|
KASAN: use-after-free Read in firmware_fallback_sysfs kernel | C | error | 16514 | 1193d | 1392d |
Title | Replies (including bot) | Last reply |
---|---|---|
[syzbot] WARNING: locking bug in complete_all | 1 (2) | 2021/07/05 05:25 |
------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 0 PID: 13788 at kernel/locking/lockdep.c:203 hlock_class kernel/locking/lockdep.c:203 [inline] WARNING: CPU: 0 PID: 13788 at kernel/locking/lockdep.c:203 hlock_class kernel/locking/lockdep.c:192 [inline] WARNING: CPU: 0 PID: 13788 at kernel/locking/lockdep.c:203 check_wait_context kernel/locking/lockdep.c:4575 [inline] WARNING: CPU: 0 PID: 13788 at kernel/locking/lockdep.c:203 __lock_acquire+0x1650/0x5230 kernel/locking/lockdep.c:4852 Modules linked in: CPU: 0 PID: 13788 Comm: syz-executor.1 Not tainted 5.13.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:hlock_class kernel/locking/lockdep.c:203 [inline] RIP: 0010:hlock_class kernel/locking/lockdep.c:192 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4575 [inline] RIP: 0010:__lock_acquire+0x1650/0x5230 kernel/locking/lockdep.c:4852 Code: 08 84 d2 0f 85 4a 2c 00 00 8b 05 c3 08 70 0c 85 c0 0f 85 d4 f9 ff ff 48 c7 c6 c0 a8 6b 89 48 c7 c7 40 9d 6b 89 e8 eb ad 7b 07 <0f> 0b e9 ba f9 ff ff c7 44 24 40 fe ff ff ff 41 bf 01 00 00 00 c7 RSP: 0018:ffffc90001fc72e0 EFLAGS: 00010086 RAX: 0000000000000000 RBX: ffff88807fa7c9f8 RCX: 0000000000000000 RDX: 0000000000040000 RSI: ffffffff815c1805 RDI: fffff520003f8e4e RBP: ffff88807fa7cae8 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff815bb63e R11: 0000000000000000 R12: ffff88807fa7c000 R13: 000000000000121a R14: ffff888021a06040 R15: 0000000000040000 FS: 00007fc11274f700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2ea20000 CR3: 000000002295f000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire kernel/locking/lockdep.c:5512 [inline] lock_acquire+0x1ab/0x740 kernel/locking/lockdep.c:5477 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:159 complete_all+0x13/0x60 kernel/sched/completion.c:63 __fw_state_set drivers/base/firmware_loader/firmware.h:121 [inline] fw_state_aborted drivers/base/firmware_loader/firmware.h:126 [inline] __fw_load_abort drivers/base/firmware_loader/fallback.c:98 [inline] __fw_load_abort drivers/base/firmware_loader/fallback.c:88 [inline] kill_pending_fw_fallback_reqs+0x21b/0x370 drivers/base/firmware_loader/fallback.c:119 fw_pm_notify+0xa2/0x150 drivers/base/firmware_loader/main.c:1450 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 notifier_call_chain_robust kernel/notifier.c:118 [inline] blocking_notifier_call_chain_robust kernel/notifier.c:302 [inline] blocking_notifier_call_chain_robust+0xc4/0x160 kernel/notifier.c:290 pm_notifier_call_chain_robust+0x26/0x60 kernel/power/main.c:87 suspend_prepare kernel/power/suspend.c:354 [inline] enter_state kernel/power/suspend.c:576 [inline] pm_suspend kernel/power/suspend.c:613 [inline] pm_suspend+0x1c8/0x890 kernel/power/suspend.c:605 state_store+0xe5/0x240 kernel/power/main.c:658 kobj_attr_store+0x50/0x80 lib/kobject.c:856 sysfs_kf_write+0x110/0x160 fs/sysfs/file.c:139 kernfs_fop_write_iter+0x342/0x500 fs/kernfs/file.c:296 call_write_iter include/linux/fs.h:2114 [inline] do_iter_readv_writev+0x46f/0x740 fs/read_write.c:740 do_iter_write+0x188/0x670 fs/read_write.c:866 vfs_iter_write+0x70/0xa0 fs/read_write.c:907 iter_file_splice_write+0x6fa/0xc10 fs/splice.c:689 do_splice_from fs/splice.c:767 [inline] direct_splice_actor+0x110/0x180 fs/splice.c:936 splice_direct_to_actor+0x34b/0x8c0 fs/splice.c:891 do_splice_direct+0x1b3/0x280 fs/splice.c:979 do_sendfile+0x9f0/0x1110 fs/read_write.c:1260 __do_sys_sendfile64 fs/read_write.c:1319 [inline] __se_sys_sendfile64 fs/read_write.c:1311 [inline] __x64_sys_sendfile64+0x149/0x210 fs/read_write.c:1311 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665d9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc11274f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007ffd5bfa590f R14: 00007fc11274f300 R15: 0000000000022000
Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2021/05/30 23:21 | upstream | b90e90f40b4f | 325a8dab | .config | console log | report | info | ci-upstream-kasan-gce-selinux-root | WARNING: locking bug in complete_all | |||
2021/05/15 13:07 | upstream | 25a1298726e9 | 93f844de | .config | console log | report | info | ci-upstream-kasan-gce-smack-root | WARNING: locking bug in complete_all | |||
2021/07/17 20:31 | upstream | d980cc0620ae | f115ae98 | .config | console log | report | info | ci-qemu-upstream-386 | WARNING: locking bug in complete_all | |||
2021/07/30 02:01 | linux-next | 4ccc9e2db7ac | c585c7b0 | .config | console log | report | info | ci-upstream-linux-next-kasan-gce-root | WARNING: locking bug in complete_all |