syzbot


upstream boot error: WARNING in print_tainted

Status: upstream: reported on 2023/05/04 06:25
Reported-by: syzbot+6a9b930b1a8d784b692a@syzkaller.appspotmail.com
First crash: 29d, last: 20d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] upstream boot error: WARNING in print_tainted 0 (1) 2023/05/04 06:25

Sample crash report:
Movable zone start for each node
Early memory node ranges
  node   0: [mem 0x0000000080000000-0x00000000ffffffff]
Initmem setup node 0 [mem 0x0000000080000000-0x00000000ffffffff]
percpu: Embedded 19 pages/cpu s47048 r8192 d22584 u77824
Kernel command line: root=/dev/vda console=ttyAMA0  earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 rcupdate.rcu_cpu_stall_cputime=1 no_hash_pointers page_owner=on sysctl.vm.nr_hugepages=4 sysctl.vm.nr_overcommit_hugepages=4 secretmem.enable=1 sysctl.max_rcu_stall_to_panic=1 msr.allow_writes=off coredump_filter=0xffff root=/dev/vda console=ttyAMA0 vmalloc=512M smp.csd_lock_timeout=300000 watchdog_thresh=165 workqueue.watchdog_thresh=420 sysctl.net.core.netdev_unregister_timeout_secs=420 dummy_hcd.num=2 panic_on_warn=1
Unknown kernel command line parameters "earlyprintk=serial page_owner=on", will be passed to user space.
Dentry cache hash table entries: 262144 (order: 8, 1048576 bytes, linear)
Inode-cache hash table entries: 131072 (order: 7, 524288 bytes, linear)
Built 1 zonelists, mobility grouping on.  Total pages: 520868
allocated 2097152 bytes of page_ext
mem auto-init: stack:off, heap alloc:on, heap free:off
software IO TLB: area num 2.
software IO TLB: mapped [mem 0x00000000d9a47000-0x00000000dda47000] (64MB)
Memory: 1952316K/2097152K available (24576K kernel code, 2364K rwdata, 8404K rodata, 2048K init, 868K bss, 128452K reserved, 16384K cma-reserved, 524288K highmem)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
trace event string verifier disabled
rcu: Preemptible hierarchical RCU implementation.
rcu: 	RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2.
rcu: 	RCU callback double-/use-after-free debug is enabled.
	All grace periods are expedited (rcu_expedited).
	Trampoline variant of Tasks RCU enabled.
	Tracing variant of Tasks RCU enabled.
rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
GIC physical location is 0x2c001000
rcu: srcu_init: Setting srcu_struct sizes based on contention.
sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 89478484971ns
clocksource: arm,sp804: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275 ns
arch_timer: cp15 timer(s) running at 62.50MHz (virt).
clocksource: arch_sys_counter: mask: 0x1ffffffffffffff max_cycles: 0x1cd42e208c, max_idle_ns: 881590405314 ns
sched_clock: 57 bits at 63MHz, resolution 16ns, wraps every 4398046511096ns
Switching to timer-based delay loop, resolution 16ns
Console: colour dummy device 80x30
Calibrating delay loop (skipped), value calculated using timer frequency.. 125.00 BogoMIPS (lpj=625000)
pid_max: default: 32768 minimum: 301
LSM: initializing lsm=lockdown,capability,landlock,yama,safesetid,tomoyo,selinux,bpf,integrity
landlock: Up and running.
Yama: becoming mindful.
TOMOYO Linux initialized
SELinux:  Initializing.
LSM support for eBPF active
stackdepot: allocating hash table of 131072 entries via kvcalloc
Mount-cache hash table entries: 4096 (order: 2, 16384 bytes, linear)
Mountpoint-cache hash table entries: 4096 (order: 2, 16384 bytes, linear)
CPU: Testing write buffer coherency: ok
CPU0: Spectre BHB: enabling loop workaround for all CPUs
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at drivers/gpio/gpiolib.c:3222 gpiod_set_value+0x6c/0xc0 drivers/gpio/gpiolib.c:3222
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc1-syzkaller #0
Hardware name: ARM-Versatile Express
Backtrace: 
[<817d9364>] (dump_backtrace) from [<817d9458>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:256)
 r7:00000000 r6:826229c4 r5:60000193 r4:81f9d2f8
[<817d9440>] (show_stack) from [<817f5f30>] (__dump_stack lib/dump_stack.c:88 [inline])
[<817d9440>] (show_stack) from [<817f5f30>] (dump_stack_lvl+0x48/0x54 lib/dump_stack.c:106)
[<817f5ee8>] (dump_stack_lvl) from [<817f5f54>] (dump_stack+0x18/0x1c lib/dump_stack.c:113)
 r5:00000000 r4:82850d14
[<817f5f3c>] (dump_stack) from [<817d9f50>] (panic+0x120/0x370 kernel/panic.c:340)
[<817d9e30>] (panic) from [<80241fa8>] (print_tainted+0x0/0xa0 kernel/panic.c:236)
 r3:8260c488 r2:00000001 r1:81f863ec r0:81f8ddfc
 r7:80891b20
[<80241f24>] (check_panic_on_warn) from [<8024219c>] (__warn+0x7c/0x180 kernel/panic.c:673)
[<80242120>] (__warn) from [<80242378>] (warn_slowpath_fmt+0xd8/0x1d8 kernel/panic.c:697)
 r8:00000009 r7:00000c96 r6:81fef63c r5:8260c964 r4:824adf7c
[<802422a4>] (warn_slowpath_fmt) from [<80891b20>] (gpiod_set_value+0x6c/0xc0 drivers/gpio/gpiolib.c:3222)
 r10:00000000 r9:827e16a6 r8:00000001 r7:dddd1798 r6:000000ff r5:00000001
 r4:837ba6e8
[<80891ab4>] (gpiod_set_value) from [<8107f9e8>] (gpio_led_set+0x5c/0x60 drivers/leds/leds-gpio.c:54)
 r5:000000ff r4:8301e1dc
[<8107f98c>] (gpio_led_set) from [<8107de18>] (__led_set_brightness drivers/leds/led-core.c:47 [inline])
[<8107f98c>] (gpio_led_set) from [<8107de18>] (led_set_brightness_nopm drivers/leds/led-core.c:271 [inline])
[<8107f98c>] (gpio_led_set) from [<8107de18>] (led_set_brightness_nosleep+0x38/0x5c drivers/leds/led-core.c:287)
 r5:000000ff r4:8301e1dc
[<8107dde0>] (led_set_brightness_nosleep) from [<8107e164>] (led_set_brightness+0x64/0x68 drivers/leds/led-core.c:264)
[<8107e100>] (led_set_brightness) from [<8107f000>] (led_trigger_event drivers/leds/led-triggers.c:390 [inline])
[<8107e100>] (led_set_brightness) from [<8107f000>] (led_trigger_event+0x38/0x50 drivers/leds/led-triggers.c:380)
 r5:84585814 r4:8301e1dc
[<8107efc8>] (led_trigger_event) from [<810803c8>] (ledtrig_cpu+0xb0/0x100 drivers/leds/trigger/ledtrig-cpu.c:86)
 r7:dddd1798 r6:00000002 r5:8290cee4 r4:000001fd
[<81080318>] (ledtrig_cpu) from [<80208efc>] (arch_cpu_idle_exit+0x14/0x18 arch/arm/kernel/process.c:98)
 r9:827e16a6 r8:00000000 r7:8260c4e0 r6:8261ae40 r5:8260c498 r4:00000000
[<80208ee8>] (arch_cpu_idle_exit) from [<80293570>] (do_idle+0x7c/0x2f0 kernel/sched/idle.c:284)
[<802934f4>] (do_idle) from [<80293b00>] (cpu_startup_entry+0x20/0x24 kernel/sched/idle.c:379)
 r10:82850000 r9:8260c440 r8:8261a934 r7:00000000 r6:8260c440 r5:82625c7c
 r4:000000ea
[<80293ae0>] (cpu_startup_entry) from [<817f7f34>] (rest_init+0xdc/0xe0 init/main.c:735)
[<817f7e58>] (rest_init) from [<82400bb8>] (arch_post_acpi_subsys_init+0x0/0x20 init/main.c:834)
[<82400ba8>] (arch_call_rest_init) from [<824012f8>] (start_kernel+0x6e0/0x70c init/main.c:1088)
[<82400c18>] (start_kernel) from [<00000000>] (0x0)
8<--- cut here ---
Unable to handle kernel NULL pointer dereference at virtual address 00000206 when execute
[00000206] *pgd=80000080004003, *pmd=00000000
Internal error: Oops: 80000207 [#1] PREEMPT SMP ARM
Modules linked in:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc1-syzkaller #0
Hardware name: ARM-Versatile Express
PC is at 0x206
LR is at __ipi_send_mask+0x2c/0xcc kernel/irq/ipi.c:285
pc : [<00000206>]    lr : [<802c768c>]    psr: 200001b3
sp : 82601d50  ip : 82601d78  fp : 82601d74
r10: 8261ae40  r9 : 80891b20  r8 : 81f8ddfc
r7 : 83092a6c  r6 : 82601da0  r5 : 83092a18  r4 : 00000207
r3 : 8260c460  r2 : 00000002  r1 : 82601da0  r0 : 83092a18
Flags: nzCv  IRQs off  FIQs on  Mode SVC_32  ISA Thumb  Segment user
Control: 30c5387d  Table: 8487d080  DAC: fffffffd
Register r0 information: slab kmalloc-256 start 83092a00 pointer offset 24 size 256
Register r1 information:
8<--- cut here ---
Unable to handle kernel NULL pointer dereference at virtual address 000001ff when read
[000001ff] *pgd=80000080004003, *pmd=00000000
Internal error: Oops: 207 [#2] PREEMPT SMP ARM
Modules linked in:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc1-syzkaller #0
Hardware name: ARM-Versatile Express
PC is at __find_vmap_area mm/vmalloc.c:841 [inline]
PC is at find_vmap_area mm/vmalloc.c:1862 [inline]
PC is at find_vm_area mm/vmalloc.c:2623 [inline]
PC is at vmalloc_dump_obj+0x38/0xb4 mm/vmalloc.c:4221
LR is at __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline]
LR is at _raw_spin_lock+0x18/0x58 kernel/locking/spinlock.c:154
pc : [<8047a2ec>]    lr : [<81802294>]    psr: 20000193
sp : 82601be0  ip : 82601bc8  fp : 82601bf4
r10: 8261ae40  r9 : 8261c9a4  r8 : 8285041c
r7 : 60000193  r6 : 00000002  r5 : 82602000  r4 : 00000207
r3 : 830e1910  r2 : 00001dd5  r1 : 00000000  r0 : 00000001
Flags: nzCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM  Segment user
Control: 30c5387d  Table: 8487d080  DAC: fffffffd

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Manager Title
2023/05/12 23:02 upstream 76c7f8873a76 893599a2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
2023/05/11 22:51 upstream cc3c44c9fda2 adb9a3cd .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
2023/05/09 06:59 upstream ba0ad6ed89fd f4168103 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
2023/05/08 18:56 upstream ba0ad6ed89fd 33db58a6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
2023/05/07 21:38 upstream ac9a78681b92 90c93c40 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
2023/05/06 03:09 upstream 2e1e1337881b 90c93c40 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
2023/05/05 11:30 upstream 78b421b6a7c6 acf730dc .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
2023/05/04 04:02 upstream 1a5304fecee5 b5918830 .config console log report ci-qemu2-arm32 upstream boot error: WARNING in print_tainted
* Struck through repros no longer work on HEAD.