syzbot


WARNING in handle_irq (2)

Status: closed as dup on 2018/07/05 16:21
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+1ede6e178c15cdd7530c@syzkaller.appspotmail.com
First crash: 2367d, last: 2350d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
KASAN: stack-out-of-bounds Read in timerqueue_add kernel C 4 2351d 2367d
Discussions (1)
Title Replies (including bot) Last reply
WARNING in handle_irq (2) 2 (3) 2018/07/05 16:20
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in handle_irq kernel 1 2495d 2491d 0/28 closed as invalid on 2018/05/26 17:52
upstream WARNING in handle_irq (3) kernel 4 2185d 2310d 0/28 auto-closed as invalid on 2019/07/01 03:34

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
IPVS: ftp: loaded support on port[0] = 21
------------[ cut here ]------------
do_IRQ(): syz-executor930 has overflown the kernel stack (cur:ffff8801aadf0000,sp:ffff8801a8dda0c0,irq stk top-bottom:ffff8801daf00080-ffff8801daf08000,exception stk top-bottom:fffffe0000038080-fffffe0000042000,ip:lock_release+0x505/0xa30)
WARNING: CPU: 1 PID: 4681 at arch/x86/kernel/irq_64.c:63 stack_overflow_check arch/x86/kernel/irq_64.c:60 [inline]
WARNING: CPU: 1 PID: 4681 at arch/x86/kernel/irq_64.c:63 handle_irq+0x1fb/0x2e7 arch/x86/kernel/irq_64.c:72
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 4681 Comm: syz-executor930 Not tainted 4.18.0-rc3+ #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
 panic+0x238/0x4e7 kernel/panic.c:184
 __warn.cold.8+0x163/0x1ba kernel/panic.c:536
 report_bug+0x252/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x1fc/0x4d0 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:992
RIP: 0010:stack_overflow_check arch/x86/kernel/irq_64.c:60 [inline]
RIP: 0010:handle_irq+0x1fb/0x2e7 arch/x86/kernel/irq_64.c:72
Code: 00 00 ff b6 80 00 00 00 48 c7 c7 40 bc e4 87 41 54 41 55 65 48 8b 04 25 40 ee 01 00 48 05 68 06 00 00 48 89 c6 e8 85 b3 1c 00 <0f> 0b 48 83 c4 18 e9 3f ff ff ff 48 89 75 e0 e8 a1 69 8f 00 48 8b 
RSP: 0018:ffff8801daf07f58 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff8801ce228d80 RCX: 0000000000000000
RDX: 0000000000010000 RSI: ffffffff81631851 RDI: 0000000000000001
RBP: ffff8801daf07fb0 R08: ffff8801aaeba000 R09: ffffed003b5e3ec2
R10: ffffed003b5e3ec2 R11: ffff8801daf1f617 R12: fffffe0000042000
R13: fffffe0000038080 R14: 000000000000002a R15: 0000000000000000
 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
 </IRQ>
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (29):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/06 21:58 bpf c48424d993fa 9636bc93 .config console log report syz C ci-upstream-bpf-kasan-gce
2018/07/16 15:37 bpf-next 13f7432bdd8e 92a49505 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2018/07/10 05:22 bpf-next d90c936fb318 f25e5770 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2018/07/07 09:36 bpf-next d90c936fb318 6c0c0099 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2018/07/05 17:55 bpf-next 6fcf9b1d4d6c d3b2a0e2 .config console log report syz C ci-upstream-bpf-next-kasan-gce
2018/07/08 17:51 linux-next 526674536360 c9a7a4dc .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/07 18:45 linux-next 526674536360 ab89aea9 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2018/07/06 23:59 bpf c48424d993fa 9636bc93 .config console log report ci-upstream-bpf-kasan-gce
2018/07/22 00:33 bpf-next 8ae71e76cf1f 8cc079c3 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/16 02:20 bpf-next 13f7432bdd8e 92a49505 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/15 06:36 bpf-next 13f7432bdd8e 92a49505 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/15 06:23 bpf-next 13f7432bdd8e 92a49505 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/12 16:09 bpf-next 671dffa7de7b 06c33b3a .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/08 15:39 bpf-next d90c936fb318 c9a7a4dc .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/08 07:34 bpf-next d90c936fb318 c9a7a4dc .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/07 10:22 bpf-next d90c936fb318 6c0c0099 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/07 04:52 bpf-next d90c936fb318 6c0c0099 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/06 12:46 bpf-next 6fcf9b1d4d6c 18403e65 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/06 10:16 bpf-next 6fcf9b1d4d6c 18403e65 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/06 02:27 bpf-next 6fcf9b1d4d6c d3b2a0e2 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/06 02:09 bpf-next 6fcf9b1d4d6c d3b2a0e2 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/05 12:15 bpf-next 6fcf9b1d4d6c f525fd72 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/05 09:38 bpf-next 6fcf9b1d4d6c f525fd72 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/05 04:55 bpf-next 2bdea157b999 e1b966c6 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/05 02:04 bpf-next 2bdea157b999 e1b966c6 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/04 23:40 bpf-next 2bdea157b999 e1b966c6 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/04 19:53 bpf-next 2bdea157b999 e1b966c6 .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/04 16:29 bpf-next 2bdea157b999 317fc8ea .config console log report ci-upstream-bpf-next-kasan-gce
2018/07/04 10:39 bpf-next 2bdea157b999 317fc8ea .config console log report ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.