syzbot


BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
Status: upstream: reported C repro on 2021/12/08 20:36
Reported-by: syzbot+485cc00ea7cf41dfdbf1@syzkaller.appspotmail.com
Fix commit: 744451c162a5 Bluetooth: hci_sync: Push sync command cancellation to workqueue
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 51d, last: 36d

Cause bisection: introduced by (bisect log) :
commit c97a747efc93f94a4ad6c707972dfbf8d774edf9
Author: Benjamin Berg <bberg@redhat.com>
Date: Fri Dec 3 14:59:02 2021 +0000

  Bluetooth: btusb: Cancel sync commands for certain URB errors

Crash: BUG: sleeping function called from invalid context in hci_cmd_sync_cancel (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/12/17 08:57 15m bberg@redhat.com patch linux-next OK

Sample crash report:

Crashes (28):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2021/12/08 17:41 linux-next 4eee8d0b64ec a4a2a501 .config log report syz C BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/22 23:12 linux-next 2bd48302750c 6caa12e4 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/22 17:29 linux-next 2bd48302750c 6caa12e4 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/22 17:23 linux-next 2bd48302750c 6caa12e4 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/22 17:22 linux-next 2bd48302750c 6caa12e4 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/22 17:22 linux-next 2bd48302750c 6caa12e4 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/22 17:21 linux-next 2bd48302750c 6caa12e4 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/21 21:18 linux-next 07f8c60fe60f a938f0b8 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/17 16:59 linux-next fbf252e09678 44068e19 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/17 16:59 linux-next fbf252e09678 44068e19 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/17 16:58 linux-next fbf252e09678 44068e19 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/17 16:51 linux-next fbf252e09678 44068e19 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 09:22 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 08:59 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 08:44 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 08:37 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 08:36 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 08:22 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 08:10 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/10 08:03 linux-next 4eee8d0b64ec 4d4ce9bc .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 23:56 linux-next 4eee8d0b64ec a4a2a501 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 23:33 linux-next 4eee8d0b64ec a4a2a501 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 23:26 linux-next 4eee8d0b64ec a4a2a501 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 15:48 linux-next 4eee8d0b64ec a4a2a501 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 14:50 linux-next 4eee8d0b64ec a4a2a501 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 14:20 linux-next 4eee8d0b64ec a4a2a501 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 13:09 linux-next 4eee8d0b64ec a4a2a501 .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
ci-upstream-linux-next-kasan-gce-root 2021/12/08 12:07 linux-next 4eee8d0b64ec 0230ba3e .config log report info BUG: sleeping function called from invalid context in hci_cmd_sync_cancel