syzbot


BUG: scheduling while atomic in wait_for_common

Status: premoderation: reported on 2024/04/02 20:17
Reported-by: syzbot+cbdea7043787556cbce2@syzkaller.appspotmail.com
First crash: 32d, last: 21d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-6-1 BUG: scheduling while atomic in wait_for_common 5 7d14h 30d 0/2 premoderation: reported on 2024/04/04 04:28

Sample crash report:
usb 1-1: USB disconnect, device number 10
BUG: scheduling while atomic: kworker/0:19/21263/0x00000002
Modules linked in:
Preemption disabled at:
[<ffffffff81dcd695>] spin_lock include/linux/spinlock.h:363 [inline]
[<ffffffff81dcd695>] kernfs_put+0x325/0x520 fs/kernfs/dir.c:544
CPU: 0 PID: 21263 Comm: kworker/0:19 Tainted: G        W         5.15.148-syzkaller-00718-g993bed180178 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106
 dump_stack+0x15/0x17 lib/dump_stack.c:113
 __schedule_bug+0x195/0x260 kernel/sched/core.c:5707
 schedule_debug kernel/sched/core.c:5734 [inline]
 __schedule+0xd19/0x1590 kernel/sched/core.c:6402
 schedule+0x11f/0x1e0 kernel/sched/core.c:6595
 schedule_timeout+0xa9/0x370 kernel/time/timer.c:1866
 do_wait_for_common kernel/sched/completion.c:85 [inline]
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common+0x285/0x420 kernel/sched/completion.c:117
 wait_for_completion+0x18/0x20 kernel/sched/completion.c:138
 devtmpfs_submit_req drivers/base/devtmpfs.c:110 [inline]
 devtmpfs_delete_node+0x202/0x2e0 drivers/base/devtmpfs.c:159
 device_del+0x2e7/0xe90 drivers/base/core.c:3573
 device_unregister drivers/base/core.c:3625 [inline]
 device_destroy+0xb1/0x110 drivers/base/core.c:4171
 tty_unregister_device+0x75/0x170 drivers/tty/tty_io.c:3337
 usb_serial_device_remove+0xb7/0x1e0 drivers/usb/serial/bus.c:93
 __device_release_driver drivers/base/dd.c:1227 [inline]
 device_release_driver_internal+0x4c8/0x7d0 drivers/base/dd.c:1262
 device_release_driver+0x19/0x20 drivers/base/dd.c:1285
 bus_remove_device+0x2f8/0x360 drivers/base/bus.c:529
 device_del+0x663/0xe90 drivers/base/core.c:3592
 usb_serial_disconnect+0x29d/0x4d0 drivers/usb/serial/usb-serial.c:1202
 usb_unbind_interface+0x1fa/0x8c0 drivers/usb/core/driver.c:458
 __device_release_driver drivers/base/dd.c:1229 [inline]
 device_release_driver_internal+0x50b/0x7d0 drivers/base/dd.c:1262
 device_release_driver+0x19/0x20 drivers/base/dd.c:1285
 bus_remove_device+0x2f8/0x360 drivers/base/bus.c:529
 device_del+0x663/0xe90 drivers/base/core.c:3592
 usb_disable_device+0x380/0x720 drivers/usb/core/message.c:1414
 usb_disconnect+0x32a/0x890 drivers/usb/core/hub.c:2240
 hub_port_connect drivers/usb/core/hub.c:5334 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5635 [inline]
 port_event drivers/usb/core/hub.c:5785 [inline]
 hub_event+0x1d42/0x4770 drivers/usb/core/hub.c:5867
 process_one_work+0x6bb/0xc10 kernel/workqueue.c:2325
 worker_thread+0xad5/0x12a0 kernel/workqueue.c:2472
 kthread+0x421/0x510 kernel/kthread.c:337
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
ftdi_sio 1-1:0.0: device disconnected
usb 3-1: USB disconnect, device number 28
usb 3-1: new high-speed USB device number 29 using dummy_hcd
usb 3-1: Using ep0 maxpacket: 16
usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 3-1: Product: syz
usb 3-1: Manufacturer: syz
usb 3-1: SerialNumber: syz
usb 3-1: config 0 descriptor??
ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
usb 3-1: Detected FT232H
ftdi_sio ttyUSB1: Unable to read latency timer: -32
ftdi_sio 3-1:0.0: GPIO initialisation failed: -5
usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1
usb 2-1: new high-speed USB device number 6 using dummy_hcd
usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
usb 2-1: SerialNumber: syz
usb 2-1: 0:2 : does not exist
usb 2-1: USB disconnect, device number 6
usb 2-1: new high-speed USB device number 7 using dummy_hcd
usb 2-1: Using ep0 maxpacket: 16
usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
usb 2-1: config 0 descriptor??
usbhid 2-1:0.0: can't add hid device: -71
usbhid: probe of 2-1:0.0 failed with error -71
usb 2-1: USB disconnect, device number 7

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/13 18:40 android13-5.15-lts 993bed180178 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 BUG: scheduling while atomic in wait_for_common
2024/04/07 04:36 android13-5.15-lts 993bed180178 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 BUG: scheduling while atomic in wait_for_common
2024/04/06 08:29 android13-5.15-lts 993bed180178 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 BUG: scheduling while atomic in wait_for_common
2024/04/03 18:33 android13-5.15-lts 993bed180178 51c4dcff .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15-perf BUG: scheduling while atomic in wait_for_common
2024/04/03 14:00 android13-5.15-lts 993bed180178 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15 BUG: scheduling while atomic in wait_for_common
2024/04/02 20:16 android13-5.15-lts 993bed180178 eb2966c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15-perf BUG: scheduling while atomic in wait_for_common
* Struck through repros no longer work on HEAD.