syzbot


WARNING in rt_mutex_slowunlock

Status: public: reported syz repro on 2019/10/18 17:00
Reported-by: syzbot+00915f625ed10d902364@syzkaller.appspotmail.com
First crash: 1652d, last: 1652d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 WARNING in rt_mutex_slowunlock syz 1 1652d 1652d 0/2 public: reported syz repro on 2019/10/18 17:02

Sample crash report:
audit: type=1400 audit(1571413575.398:5): avc:  denied  { associate } for  pid=2069 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
hrtimer: interrupt took 65736 ns
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3487 at kernel/locking/rtmutex-debug.c:142 debug_rt_mutex_unlock+0xd4/0x100 kernel/locking/rtmutex-debug.c:142
DEBUG_LOCKS_WARN_ON(rt_mutex_owner(lock) != current)[   52.866850] Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 3487 Comm: syz-executor.3 Not tainted 4.9.194+ #0
 ffff8801cf80f650 ffffffff81b67001 ffff8801cf80f700 ffffffff82a3b3c0
 00000000ffffffff 0000000000000000 0000000000000009 ffff8801cf80f730
 ffffffff813fef3a 0000000041b58ab3 ffffffff82e32f55 ffffffff813fed61
Call Trace:
 [<00000000ebe7e29f>] __dump_stack lib/dump_stack.c:15 [inline]
 [<00000000ebe7e29f>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<00000000b050e5cc>] panic+0x1d9/0x3bd kernel/panic.c:180
 [<000000008005c0b3>] __warn.cold+0x2f/0x2f kernel/panic.c:546
 [<00000000cea336bd>] warn_slowpath_fmt+0xc2/0x100 kernel/panic.c:569
 [<000000006755276e>] debug_rt_mutex_unlock+0xd4/0x100 kernel/locking/rtmutex-debug.c:142
 [<000000002c4de7e8>] rt_mutex_slowunlock+0x21/0x1d0 kernel/locking/rtmutex.c:1366
 [<00000000869d77ff>] rt_mutex_fastunlock kernel/locking/rtmutex.c:1480 [inline]
 [<00000000869d77ff>] rt_mutex_unlock+0x6e/0xc0 kernel/locking/rtmutex.c:1584
 [<00000000b4f8166c>] exit_pi_state_list+0x29e/0x550 kernel/futex.c:918
 [<00000000edcda2a7>] mm_release+0x2ee/0x410 kernel/fork.c:1105
 [<0000000063bf51a4>] exit_mm kernel/exit.c:469 [inline]
 [<0000000063bf51a4>] do_exit+0x395/0x2aa0 kernel/exit.c:829
 [<000000005605a0a3>] do_group_exit+0x111/0x300 kernel/exit.c:946
 [<000000002ea30913>] get_signal+0x377/0x1cb0 kernel/signal.c:2395
 [<00000000653cb397>] do_signal+0x9c/0x1920 arch/x86/kernel/signal.c:812
 [<00000000954f1805>] exit_to_usermode_loop+0x11c/0x160 arch/x86/entry/common.c:159
 [<00000000c2465bc0>] prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 [<00000000c2465bc0>] syscall_return_slowpath arch/x86/entry/common.c:266 [inline]
 [<00000000c2465bc0>] do_syscall_64+0x3ab/0x5c0 arch/x86/entry/common.c:293
 [<0000000047bfdce0>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Shutting down cpus with NMI
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/18 17:56 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 8c88c9c1 .config console log report syz ci-android-49-kasan-gce-root
2019/10/18 16:00 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 8c88c9c1 .config console log report syz ci-android-49-kasan-gce
2019/10/18 15:59 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 8c88c9c1 .config console log report syz ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.