syzbot


WARNING in __mod_timer (2)

Status: upstream: reported on 2024/04/10 19:08
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+85c55d5ba79e862d9f10@syzkaller.appspotmail.com
First crash: 24d, last: 18d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [kernel?] WARNING in __mod_timer (2) 0 (1) 2024/04/10 19:08
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __mod_timer keyrings lsm 2 393d 428d 22/26 fixed on 2023/06/08 14:41
linux-6.1 WARNING in __mod_timer C done 1 32d 32d 3/3 fixed on 2024/04/29 07:11

Sample crash report:
------------[ cut here ]------------
raw_local_irq_restore() called with IRQs enabled
WARNING: CPU: 1 PID: 7640 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x29/0x40 kernel/locking/irqflag-debug.c:10
Modules linked in:

CPU: 1 PID: 7640 Comm: syz-executor.5 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:warn_bogus_irq_restore+0x29/0x40 kernel/locking/irqflag-debug.c:10
Code: 90 f3 0f 1e fa 90 80 3d ea 8b fd 03 00 74 06 90 e9 6c 08 0b 00 c6 05 db 8b fd 03 01 90 48 c7 c7 e0 b9 aa 8b e8 78 85 e3 f5 90 <0f> 0b 90 90 90 e9 4d 08 0b 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f
RSP: 0000:ffffc900044c75d8 EFLAGS: 00010246

RAX: d4289cc5e28d1100 RBX: 1ffff92000898ec0 RCX: ffff8880605eda00
RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900044c7670 R08: ffffffff8157cc12 R09: 1ffffffff1f0e74d
R10: dffffc0000000000 R11: fffffbfff1f0e74e R12: dffffc0000000000
R13: 1ffff92000898ebc R14: ffffc900044c7600 R15: 0000000000000046
FS:  00005555671ca480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31222000 CR3: 000000007dfd4000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
 _raw_spin_unlock_irqrestore+0x120/0x140 kernel/locking/spinlock.c:194
 __mod_timer+0xb89/0xeb0 kernel/time/timer.c:1186
 dummy_timer+0x30e4/0x3220 drivers/usb/gadget/udc/dummy_hcd.c:1998
 call_timer_fn+0x180/0x600 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2408 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2419
 run_timer_base kernel/time/timer.c:2428 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2438
 __do_softirq+0x2be/0x943 kernel/softirq.c:554
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:645
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x57/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0033:0x7f7e19239b31
Code: ff 41 08 c5 0f 85 ff 01 00 00 41 83 c4 01 44 3b 63 04 0f 83 c9 00 00 00 48 8b 34 24 44 89 e1 48 8b 53 28 4c 89 f8 48 03 14 ce <89> d5 49 89 d7 81 e5 00 f0 ff ff 80 3d 75 e5 16 00 00 75 3f be 00
RSP: 002b:00007ffe533c8e30 EFLAGS: 00000286

RAX: ffffffff818923e8 RBX: 00007f7e193ac018 RCX: 000000000001a00f
RDX: ffffffff818923e8 RSI: 00007f7e18a01008 RDI: 0000000000013c80
RBP: 00000000818922ba R08: 0000001b31620000 R09: 00000000000002ba
R10: 00000000818922be R11: 0000000000000246 R12: 000000000001a00f
R13: 0000000000000001 R14: 00007f7e193a0000 R15: ffffffff818923e8
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/11 23:05 upstream fe46a7dd189e 478efa7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in __mod_timer
2024/04/06 18:58 upstream fe46a7dd189e ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in __mod_timer
* Struck through repros no longer work on HEAD.