syzbot


WARNING in rt_mutex_slowunlock

Status: public: reported syz repro on 2019/10/18 17:02
Reported-by: syzbot+889efe3a3b6ebb1c497f@syzkaller.appspotmail.com
First crash: 1861d, last: 1861d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 WARNING in rt_mutex_slowunlock syz 3 1860d 1861d 0/3 public: reported syz repro on 2019/10/18 17:00

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3049 at kernel/locking/rtmutex-debug.c:142 debug_rt_mutex_unlock+0xd4/0x100 kernel/locking/rtmutex-debug.c:142()
DEBUG_LOCKS_WARN_ON(rt_mutex_owner(lock) != current)
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 3049 Comm: syz-executor.5 Not tainted 4.4.174+ #17
 0000000000000000 d3d30f1c1a958b78 ffff8801d9d77628 ffffffff81aad1a1
 ffff8801d9d77778 ffffffff82835ee0 ffffffff82851320 000000000000008e
 ffffffff8120e084 ffff8801d9d77708 ffffffff813a48c2 0000000041b58ab3
Call Trace:
 [<ffffffff81aad1a1>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81aad1a1>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<ffffffff813a48c2>] panic+0x1b9/0x37b kernel/panic.c:112
 [<ffffffff813a4ab9>] warn_slowpath_common kernel/panic.c:455 [inline]
 [<ffffffff813a4ab9>] warn_slowpath_common.cold+0x20/0x20 kernel/panic.c:435
 [<ffffffff810d394f>] warn_slowpath_fmt+0xbf/0x100 kernel/panic.c:471
 [<ffffffff8120e084>] debug_rt_mutex_unlock+0xd4/0x100 kernel/locking/rtmutex-debug.c:142
 [<ffffffff82713a7e>] rt_mutex_slowunlock+0x1e/0x1c0 kernel/locking/rtmutex.c:1332
 [<ffffffff827147d8>] rt_mutex_fastunlock kernel/locking/rtmutex.c:1446 [inline]
 [<ffffffff827147d8>] rt_mutex_unlock+0x88/0xf0 kernel/locking/rtmutex.c:1550
 [<ffffffff8129545f>] exit_pi_state_list+0x2af/0x540 kernel/futex.c:913
 [<ffffffff810caa33>] mm_release+0x2e3/0x400 kernel/fork.c:932
 [<ffffffff810d86da>] exit_mm kernel/exit.c:395 [inline]
 [<ffffffff810d86da>] do_exit+0x49a/0x2c60 kernel/exit.c:750
 [<ffffffff810df091>] do_group_exit+0x111/0x300 kernel/exit.c:893
 [<ffffffff81100a97>] get_signal+0x517/0x1570 kernel/signal.c:2321
 [<ffffffff8100bd4c>] do_signal+0x9c/0x1840 arch/x86/kernel/signal.c:712
 [<ffffffff81003da7>] exit_to_usermode_loop+0x127/0x170 arch/x86/entry/common.c:184
 [<ffffffff810064b9>] prepare_exit_to_usermode arch/x86/entry/common.c:221 [inline]
 [<ffffffff810064b9>] syscall_return_slowpath arch/x86/entry/common.c:286 [inline]
 [<ffffffff810064b9>] do_syscall_32_irqs_on arch/x86/entry/common.c:336 [inline]
 [<ffffffff810064b9>] do_fast_syscall_32+0x7a9/0xa90 arch/x86/entry/common.c:397
 [<ffffffff8271a350>] sysenter_flags_fixed+0xd/0x1a
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/18 16:01 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 8c88c9c1 .config console log report syz ci-android-44-kasan-gce-386
* Struck through repros no longer work on HEAD.