syzbot


WARNING in uart_write

Status: upstream: reported on 2024/05/27 06:03
Subsystems: serial
[Documentation on labels]
Reported-by: syzbot+a38f8e1908608d337bb3@syzkaller.appspotmail.com
First crash: 26d, last: 1d16h
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] Monthly serial report (Jun 2024) 0 (1) 2024/06/10 12:41
[syzbot] [serial?] WARNING in uart_write 0 (1) 2024/05/27 06:03

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5125 at drivers/tty/serial/serial_core.c:625 uart_write+0x2b0/0x320 drivers/tty/serial/serial_core.c:625
Modules linked in:
CPU: 1 PID: 5125 Comm: kworker/u9:4 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Workqueue: hci1 hci_cmd_timeout
RIP: 0010:uart_write+0x2b0/0x320 drivers/tty/serial/serial_core.c:625
Code: 74 08 48 89 df e8 90 cc c1 fc 48 83 3b 00 74 74 e8 85 0c 5c fc eb 97 e8 7e 0c 5c fc 45 31 e4 eb 08 e8 74 0c 5c fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 63 0c 5c fc 45 31 f6 eb 84 e8 59 0c 5c
RSP: 0018:ffffc90000a18b40 EFLAGS: 00010046
RAX: ffffffff853a0a02 RBX: dffffc0000000000 RCX: ffff88805df8da00
RDX: 0000000000000102 RSI: 0000000000000004 RDI: ffffc90000a18a20
RBP: ffff88801f680f48 R08: 0000000000000003 R09: fffff52000143144
R10: dffffc0000000000 R11: fffff52000143144 R12: 0000000000000000
R13: 0000000000000246 R14: ffff88801f680be8 R15: ffffffff94aced00
FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000b000 CR3: 000000007b7ce000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 resync_tnc+0x162/0x2a0 drivers/net/hamradio/6pack.c:517
 call_timer_fn+0x190/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c6/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_flush_all+0xaad/0xfd0 kernel/printk/printk.c:3000
Code: ff ff e8 16 d0 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 08 d0 1f 00 e8 43 01 10 0a 4d 85 f6 74 b6 e8 f9 cf 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31
RSP: 0018:ffffc90002f7f560 EFLAGS: 00000293
RAX: 1ffff920005efef8 RBX: 0000000000000000 RCX: ffff88805df8da00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90002f7f710 R08: ffffffff81764624 R09: 1ffffffff25f50b0
R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: ffffffff8eb22518
R13: ffffffff8eb224c0 R14: 0000000000000200 R15: dffffc0000000000
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3063
 vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2345
 _printk+0xd5/0x120 kernel/printk/printk.c:2370
 bt_err+0x127/0x180 net/bluetooth/lib.c:296
 hci_cmd_timeout+0x104/0x1e0 net/bluetooth/hci_core.c:1528
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2e/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393
 kthread+0x2f2/0x390 kernel/kthread.c:389
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	e8 16 d0 1f 00       	call   0x1fd01b
   5:	90                   	nop
   6:	0f 0b                	ud2
   8:	90                   	nop
   9:	e9 d8 f8 ff ff       	jmp    0xfffff8e6
   e:	e8 08 d0 1f 00       	call   0x1fd01b
  13:	e8 43 01 10 0a       	call   0xa10015b
  18:	4d 85 f6             	test   %r14,%r14
  1b:	74 b6                	je     0xffffffd3
  1d:	e8 f9 cf 1f 00       	call   0x1fd01b
  22:	fb                   	sti
  23:	48 8b 44 24 70       	mov    0x70(%rsp),%rax
* 28:	42 0f b6 04 38       	movzbl (%rax,%r15,1),%eax <-- trapping instruction
  2d:	84 c0                	test   %al,%al
  2f:	48 8b 7c 24 30       	mov    0x30(%rsp),%rdi
  34:	0f 85 22 02 00 00    	jne    0x25c
  3a:	0f b6 1f             	movzbl (%rdi),%ebx
  3d:	31                   	.byte 0x31

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/04 20:02 upstream 2ab795141095 a1feae05 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in uart_write
2024/06/16 21:20 upstream 2ccbdf43d5e7 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in uart_write
2024/06/11 04:42 upstream 83a7eefedc9b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in uart_write
2024/06/07 18:05 upstream 8a92980606e3 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in uart_write
2024/06/05 08:25 upstream 32f88d65f01b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in uart_write
2024/05/29 22:03 upstream 4a4be1ad3a6e c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in uart_write
2024/05/23 05:54 linux-next 124cfbcd6d18 4d098039 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in uart_write
* Struck through repros no longer work on HEAD.