syzbot


WARNING in isotp_tx_timer_handler

Status: fixed on 2022/03/08 16:11
Subsystems: can
[Documentation on labels]
Reported-by: syzbot+78bab6958a614b0c80b9@syzkaller.appspotmail.com
Fix commit: 9acf636215a6 can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
First crash: 1188d, last: 741d
Cause bisection: failed (error log, bisect log)
  
Discussions (8)
Title Replies (including bot) Last reply
[PATCH 5.14 000/169] 5.14.15-rc1 review 180 (180) 2022/01/11 07:33
[PATCH 5.10 00/95] 5.10.76-rc1 review 106 (106) 2021/10/26 19:16
[PATCH net 05/11] can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() 1 (1) 2021/10/17 21:01
[PATCH net v2 0/2] fix tx buffer concurrent access protection 6 (6) 2021/10/17 12:22
[PATCH net 0/2] fix tx buffer concurrent access protection 4 (4) 2021/09/30 05:47
[PATCH net] can: isotp: add result check for wait_event_interruptible() 3 (3) 2021/09/27 11:32
WARNING in isotp_tx_timer_handler 0 (2) 2020/12/24 00:20
Re: WARNING in isotp_tx_timer_handler 1 (1) 2020/12/21 12:55
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in isotp_tx_timer_handler (2) can C 1416 414d 737d 22/26 fixed on 2023/02/24 13:50
linux-5.15 WARNING in isotp_tx_timer_handler C done 3 138d 342d 3/3 fixed on 2023/12/03 08:04

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 0 at net/can/isotp.c:839 isotp_tx_timer_handler+0xb4a/0xf00 net/can/isotp.c:764
Modules linked in:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.13.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:isotp_tx_timer_handler+0xb4a/0xf00 net/can/isotp.c:764
Code: 00 00 00 49 81 c4 b8 45 00 00 31 db 4c 89 e7 be 01 00 00 00 ba 01 00 00 00 31 c9 e8 10 f8 7d f8 e9 4b 02 00 00 e8 f6 db 9e f8 <0f> 0b 31 db e9 3d 02 00 00 e8 e8 db 9e f8 31 db 49 bf 00 00 00 00
RSP: 0018:ffffc90000dc0b20 EFLAGS: 00010246
RAX: ffffffff88e03dba RBX: 0000000000000000 RCX: ffff888012bcd4c0
RDX: 0000000080000101 RSI: ffffffff8e073020 RDI: 0000000000000000
RBP: ffffc90000dc0c70 R08: 0000000000000001 R09: ffffffff88e0334e
R10: 0000000000000003 R11: ffff888012bcd4c0 R12: ffff888033b20000
R13: ffff888012bcdea0 R14: 0000000000000000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200001c0 CR3: 0000000015198000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __run_hrtimer kernel/time/hrtimer.c:1537 [inline]
 __hrtimer_run_queues+0x50b/0xa60 kernel/time/hrtimer.c:1601
 hrtimer_run_softirq+0x176/0x1e0 kernel/time/hrtimer.c:1618
 __do_softirq+0x372/0x7a6 kernel/softirq.c:559
 invoke_softirq kernel/softirq.c:433 [inline]
 __irq_exit_rcu+0x245/0x280 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:132 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:109 [inline]
RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:513 [inline]
RIP: 0010:acpi_idle_enter+0x430/0x780 drivers/acpi/processor_idle.c:648
Code: e3 08 44 8b 7c 24 04 0f 85 0d 01 00 00 48 8d 5c 24 40 e8 63 82 34 fd e9 0c 00 00 00 e8 09 2d 2e fd 0f 00 2d 72 a9 4e 06 fb f4 <9c> 8f 44 24 40 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df
RSP: 0018:ffffc90000d57be0 EFLAGS: 00000282
RAX: 4876c66fd6e7dd00 RBX: ffffc90000d57c20 RCX: ffffffff90e87703
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90000d57c90 R08: ffffffff81856f30 R09: ffffed1002579a99
R10: ffffed1002579a99 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff888019a18864 R14: ffff888019a18800 R15: 0000000000000001
 cpuidle_enter_state+0x509/0xe60 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x3c8/0x620 kernel/sched/idle.c:306
 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:403
 secondary_startup_64_no_verify+0xb0/0xbb

Crashes (1553):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/06/23 16:04 upstream 0c18f29aae7c aba2b2fb .config console log report syz C ci-upstream-kasan-gce-smack-root WARNING in isotp_tx_timer_handler
2021/02/09 22:12 upstream e0756cfc7d7c 2bd9619f .config console log report syz C ci-upstream-kasan-gce WARNING in isotp_tx_timer_handler
2020/12/24 00:19 upstream 614cb5894306 c2c1d1dd .config console log report syz C ci-upstream-kasan-gce
2020/12/16 22:47 upstream 5e60366d56c6 04201c06 .config console log report syz ci-upstream-kasan-gce
2022/02/27 18:35 upstream 2293be58d6a1 45a13a73 .config console log report info ci-upstream-kasan-gce WARNING in isotp_tx_timer_handler
2022/02/26 21:18 upstream 2293be58d6a1 45a13a73 .config console log report info ci-upstream-kasan-gce-root WARNING in isotp_tx_timer_handler
2022/02/23 23:22 upstream 23d04328444a 6e821dbf .config console log report info ci-upstream-kasan-gce-smack-root WARNING in isotp_tx_timer_handler
2022/02/23 05:02 upstream 917bbdb107f8 6e821dbf .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in isotp_tx_timer_handler
2022/03/08 11:34 upstream ea4424be1688 7bdd8b2c .config console log report info ci-qemu2-arm32 WARNING in isotp_tx_timer_handler
2022/03/08 08:19 upstream ea4424be1688 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/08 06:27 upstream ea4424be1688 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/08 05:16 upstream ea4424be1688 7bdd8b2c .config console log report info ci-qemu2-arm32 WARNING in isotp_tx_timer_handler
2022/03/08 02:01 upstream ea4424be1688 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/08 00:45 upstream ea4424be1688 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/07 20:27 upstream ea4424be1688 7bdd8b2c .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/07 17:59 upstream ffb217a13a2e 7bdd8b2c .config console log report info ci-qemu2-arm32 WARNING in isotp_tx_timer_handler
2022/03/07 17:17 upstream ffb217a13a2e 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/07 15:18 upstream ffb217a13a2e 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/07 13:09 upstream ffb217a13a2e 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/07 10:27 upstream ffb217a13a2e 7bdd8b2c .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/07 04:34 upstream ffb217a13a2e 7bdd8b2c .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/07 03:09 upstream 3ee65c0f0778 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/07 01:36 upstream 3ee65c0f0778 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 23:43 upstream 3ee65c0f0778 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 22:26 upstream 3ee65c0f0778 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 19:15 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 16:09 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 14:58 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 13:12 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm32 WARNING in isotp_tx_timer_handler
2022/03/06 11:52 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 09:41 upstream 0014404f9c18 7bdd8b2c .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/06 08:08 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 06:57 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 05:45 upstream 0014404f9c18 7bdd8b2c .config console log report info ci-qemu2-arm64-compat WARNING in isotp_tx_timer_handler
2022/03/06 04:35 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 02:08 upstream dcde98da9970 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/06 00:20 upstream ac84e82f78cb 7bdd8b2c .config console log report info ci-qemu2-arm32 WARNING in isotp_tx_timer_handler
2022/03/05 23:05 upstream ac84e82f78cb 7bdd8b2c .config console log report info ci-qemu2-arm32 WARNING in isotp_tx_timer_handler
2022/03/05 21:50 upstream ac84e82f78cb 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/05 19:44 upstream ac84e82f78cb 7bdd8b2c .config console log report info ci-qemu2-arm32 WARNING in isotp_tx_timer_handler
2022/03/05 17:55 upstream ac84e82f78cb 7bdd8b2c .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/05 14:00 upstream ac84e82f78cb 45a13a73 .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/05 10:33 upstream ac84e82f78cb 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/05 08:57 upstream ac84e82f78cb 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/05 03:48 upstream ac84e82f78cb 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/05 02:04 upstream 38f80f42147f 45a13a73 .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/04 23:19 upstream 38f80f42147f 45a13a73 .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/04 21:51 upstream 38f80f42147f 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/04 20:33 upstream 38f80f42147f 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/04 19:22 upstream 38f80f42147f 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/04 10:51 upstream b08968f196d4 45a13a73 .config console log report info ci-qemu2-arm64 WARNING in isotp_tx_timer_handler
2022/03/04 07:34 upstream b08968f196d4 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/04 05:52 upstream b08968f196d4 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/03 21:25 upstream 5859a2b19911 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/03 19:32 upstream 5859a2b19911 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/03 17:36 upstream 5859a2b19911 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/03 16:22 upstream 5859a2b19911 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/03 13:47 upstream 5859a2b19911 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2022/03/03 09:26 upstream 92ebf5f91b4d 45a13a73 .config console log report info ci-qemu2-arm64-compat WARNING in isotp_tx_timer_handler
2022/03/03 05:57 upstream 92ebf5f91b4d 45a13a73 .config console log report info ci-qemu2-arm64-mte WARNING in isotp_tx_timer_handler
2021/11/05 10:43 upstream d4439a1189f9 4c1be0be .config console log report info ci-qemu-upstream-386 WARNING in isotp_tx_timer_handler
2021/08/16 14:31 upstream 7c60610d4767 33c26cb7 .config console log report info ci-upstream-kasan-gce-386 WARNING in isotp_tx_timer_handler
2022/02/12 23:41 net-old bf8e59fd315f 8b9ca619 .config console log report info ci-upstream-net-this-kasan-gce WARNING in isotp_tx_timer_handler
2022/02/22 07:50 net-next-old 7b779cc8846a 6e821dbf .config console log report info ci-upstream-net-kasan-gce WARNING in isotp_tx_timer_handler
2022/01/29 12:06 linux-next b605fdc54c2b 495e00c5 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in isotp_tx_timer_handler
2020/12/16 19:18 net-old 57030a0b620f 04201c06 .config console log report info ci-upstream-net-this-kasan-gce
2020/12/28 18:01 net-next-old 3db1a3fa9880 8259d56c .config console log report info ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.