WARNING in tty_set_termios

Status: fixed on 2019/12/03 19:11
Reported-by: syzbot+2b51fc95e5df897f47e5@syzkaller.appspotmail.com
Fix commit: b36a1552d731 Bluetooth: hci_uart: check for missing tty operations
First crash: 2656d, last: 2546d
Fix bisection: fixed by (bisect log) :
commit 56966212e23f82ced10831f7cca02f7339147428
Author: Vladis Dronov <vdronov@redhat.com>
Date: Tue Jul 30 09:33:45 2019 +0000

  Bluetooth: hci_uart: check for missing tty operations

  
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in tty_set_termios -1 C done done 1997 2549d 2749d 15/29 fixed on 2020/01/08 01:06
linux-4.14 WARNING in tty_set_termios -1 C 589 1235d 2654d 0/1 upstream: reported C repro on 2019/04/18 11:57

Sample crash report:
audit: type=1400 audit(1559911069.398:36): avc:  denied  { map } for  pid=7643 comm="syz-executor181" path="/root/syz-executor181831587" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
WARNING: CPU: 1 PID: 1277 at drivers/tty/tty_ioctl.c:319 tty_set_termios+0x7a5/0x8d0 drivers/tty/tty_ioctl.c:319
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 1277 Comm: kworker/u5:0 Not tainted 4.19.48 #20
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: hci0 hci_power_on
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x263/0x507 kernel/panic.c:185
 __warn.cold+0x20/0x4a kernel/panic.c:540
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1013
RIP: 0010:tty_set_termios+0x7a5/0x8d0 drivers/tty/tty_ioctl.c:319
Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a3 00 00 00 45 89 a7 d0 03 00 00 e9 49 fe ff ff e8 4b 65 05 fe <0f> 0b e9 3e f9 ff ff e8 9f c8 3b fe e9 d6 fa ff ff e8 95 c8 3b fe
RSP: 0018:ffff8880a64df990 EFLAGS: 00010293
RAX: ffff8880a64ce080 RBX: ffff8880a64dfa50 RCX: ffffffff8365980d
RDX: 0000000000000000 RSI: ffffffff83659ed5 RDI: 0000000000000005
RBP: ffff8880a64dfa78 R08: ffff8880a64ce080 R09: fffffbfff15dcbc1
R10: fffffbfff15dcbc0 R11: 0000000000000003 R12: ffff8880a64dfab8
R13: 0000000000010004 R14: 1ffff11014c9bf51 R15: ffff888093e7a1c0
 hci_uart_set_baudrate+0x157/0x1c0 drivers/bluetooth/hci_ldisc.c:378
 hci_uart_setup+0xa2/0x490 drivers/bluetooth/hci_ldisc.c:401
 hci_dev_do_open+0x674/0x14a0 net/bluetooth/hci_core.c:1423
 hci_power_on+0x10d/0x580 net/bluetooth/hci_core.c:2130
 process_one_work+0x989/0x1750 kernel/workqueue.c:2153
 worker_thread+0x98/0xe40 kernel/workqueue.c:2296
 kthread+0x354/0x420 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (151):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/07 12:41 linux-4.19.y e109a984cf38 698773cb .config console log report syz C ci2-linux-4-19
2019/04/24 19:37 linux-4.19.y c98875d930e9 8e3c52b1 .config console log report syz C ci2-linux-4-19
2019/04/17 01:00 linux-4.19.y 4d552acf3370 505ab413 .config console log report syz C ci2-linux-4-19
2019/08/04 07:19 linux-4.19.y 9a9de33a9dfa 6affd8e8 .config console log report ci2-linux-4-19
2019/08/04 03:53 linux-4.19.y 9a9de33a9dfa 6affd8e8 .config console log report ci2-linux-4-19
2019/08/03 21:20 linux-4.19.y 9a9de33a9dfa 6affd8e8 .config console log report ci2-linux-4-19
2019/08/03 19:58 linux-4.19.y 9a9de33a9dfa 6affd8e8 .config console log report ci2-linux-4-19
2019/08/02 10:01 linux-4.19.y 9a9de33a9dfa 835dffe7 .config console log report ci2-linux-4-19
2019/08/02 07:21 linux-4.19.y 9a9de33a9dfa 835dffe7 .config console log report ci2-linux-4-19
2019/08/02 03:17 linux-4.19.y 9a9de33a9dfa 835dffe7 .config console log report ci2-linux-4-19
2019/08/02 01:55 linux-4.19.y 9a9de33a9dfa 835dffe7 .config console log report ci2-linux-4-19
2019/08/01 14:41 linux-4.19.y 9a9de33a9dfa 835dffe7 .config console log report ci2-linux-4-19
2019/08/01 09:12 linux-4.19.y 9a9de33a9dfa c692b5bd .config console log report ci2-linux-4-19
2019/07/30 18:44 linux-4.19.y 64f4694072aa f28bf2a5 .config console log report ci2-linux-4-19
2019/07/30 03:11 linux-4.19.y 64f4694072aa f67095ee .config console log report ci2-linux-4-19
2019/07/29 13:04 linux-4.19.y 64f4694072aa c85e1c5b .config console log report ci2-linux-4-19
2019/07/29 11:13 linux-4.19.y 64f4694072aa c85e1c5b .config console log report ci2-linux-4-19
2019/07/28 09:03 linux-4.19.y 64f4694072aa c85e1c5b .config console log report ci2-linux-4-19
2019/07/25 01:14 linux-4.19.y be9b6782a9eb 32329ceb .config console log report ci2-linux-4-19
2019/07/24 03:56 linux-4.19.y be9b6782a9eb de453f34 .config console log report ci2-linux-4-19
2019/07/23 18:48 linux-4.19.y be9b6782a9eb bb071d58 .config console log report ci2-linux-4-19
2019/07/23 05:04 linux-4.19.y be9b6782a9eb 55e0c077 .config console log report ci2-linux-4-19
2019/07/21 18:35 linux-4.19.y be9b6782a9eb 1656845f .config console log report ci2-linux-4-19
2019/07/21 02:37 linux-4.19.y 3bd837bfe431 1656845f .config console log report ci2-linux-4-19
2019/07/21 00:36 linux-4.19.y 3bd837bfe431 1656845f .config console log report ci2-linux-4-19
2019/07/19 03:51 linux-4.19.y 3bd837bfe431 7bb222f7 .config console log report ci2-linux-4-19
2019/07/17 18:45 linux-4.19.y 3bd837bfe431 f613a7c4 .config console log report ci2-linux-4-19
2019/07/04 05:21 linux-4.19.y 1a0592436669 55565fa0 .config console log report ci2-linux-4-19
2019/07/03 09:39 linux-4.19.y aec3002d07fd 55565fa0 .config console log report ci2-linux-4-19
2019/07/02 18:41 linux-4.19.y aec3002d07fd 5f175e9c .config console log report ci2-linux-4-19
2019/07/02 16:26 linux-4.19.y aec3002d07fd 5f175e9c .config console log report ci2-linux-4-19
2019/07/01 14:49 linux-4.19.y aec3002d07fd 907bf746 .config console log report ci2-linux-4-19
2019/07/01 06:18 linux-4.19.y aec3002d07fd 699d6448 .config console log report ci2-linux-4-19
2019/07/01 02:38 linux-4.19.y aec3002d07fd 699d6448 .config console log report ci2-linux-4-19
2019/06/30 14:42 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/30 12:06 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/30 08:27 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/30 06:15 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/30 01:06 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/29 20:06 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/29 10:00 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/29 06:21 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/28 14:06 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/06/28 09:18 linux-4.19.y aec3002d07fd 7509bf36 .config console log report ci2-linux-4-19
2019/04/16 08:42 linux-4.19.y 4d552acf3370 505ab413 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.