syzbot


kernel BUG at kernel/time/timer.c:LINE! (2)

Status: fixed on 2019/01/15 20:25
Subsystems: hams
[Documentation on labels]
Fix commit: 202700e30740 net/hamradio/6pack: use mod_timer() to rearm timers
First crash: 1935d, last: 1933d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at kernel/time/timer.c:LINE! netfilter C 18 2246d 2258d 4/26 fixed on 2018/02/26 20:04
upstream kernel BUG at kernel/time/timer.c:LINE! (3) net 1 1870d 1870d 11/26 fixed on 2019/03/28 12:00
upstream kernel BUG at kernel/time/timer.c:LINE! (4) media usb syz 1 1659d 1656d 15/26 fixed on 2019/12/13 00:31
linux-4.14 kernel BUG at kernel/time/timer.c:LINE! C inconclusive 12 1208d 1594d 0/1 upstream: reported C repro on 2019/12/08 18:43

Sample crash report:
sp0: Synchronizing with TNC
sp0: Found TNC
sp0: Synchronizing with TNC
sp0: Found TNC
------------[ cut here ]------------
kernel BUG at kernel/time/timer.c:1136!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
------------[ cut here ]------------
CPU: 0 PID: 112 Comm: kworker/u4:3 Not tainted 4.20.0+ #2
downgrading a read lock
WARNING: CPU: 1 PID: 9978 at kernel/locking/lockdep.c:3553 __lock_downgrade kernel/locking/lockdep.c:3553 [inline]
WARNING: CPU: 1 PID: 9978 at kernel/locking/lockdep.c:3553 lock_downgrade+0x4d2/0x910 kernel/locking/lockdep.c:3816
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Kernel panic - not syncing: panic_on_warn set ...
Workqueue: events_unbound flush_to_ldisc
RIP: 0010:add_timer kernel/time/timer.c:1136 [inline]
RIP: 0010:add_timer+0xa81/0x1470 kernel/time/timer.c:1134
Code: 4d 89 7d 40 48 c7 85 70 fe ff ff 00 00 00 00 c7 85 7c fe ff ff ff ff ff ff 48 89 85 90 fe ff ff e9 e6 f7 ff ff e8 cf 42 12 00 <0f> 0b e8 c8 42 12 00 0f 0b e8 c1 42 12 00 4c 89 bd 60 fe ff ff e9
RSP: 0018:ffff8880a91c75a8 EFLAGS: 00010293
RAX: ffff8880a907a6c0 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff816f3ee1 RDI: ffff88808b40f1f8
RBP: ffff8880a91c7760 R08: 0000000000000007 R09: ffff8880a907afd8
R10: ffff8880a907a6c0 R11: 0000000000000000 R12: ffff88808b40f1f8
R13: ffff88808b40f1f8 R14: ffff88808b40efc0 R15: 0000000000000028
FS:  0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5875c119de CR3: 00000000978f9000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 decode_prio_command drivers/net/hamradio/6pack.c:903 [inline]
 sixpack_decode drivers/net/hamradio/6pack.c:971 [inline]
 sixpack_receive_buf drivers/net/hamradio/6pack.c:457 [inline]
 sixpack_receive_buf+0xf9c/0x1470 drivers/net/hamradio/6pack.c:434
 tty_ldisc_receive_buf+0x164/0x1c0 drivers/tty/tty_buffer.c:465
 tty_port_default_receive_buf+0x114/0x190 drivers/tty/tty_port.c:38
 receive_buf drivers/tty/tty_buffer.c:481 [inline]
 flush_to_ldisc+0x3b2/0x590 drivers/tty/tty_buffer.c:533
 process_one_work+0xd0c/0x1ce0 kernel/workqueue.c:2153
 worker_thread+0x143/0x14a0 kernel/workqueue.c:2296
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/01 10:38 upstream f12e840c819b 3d85f48c .config console log report syz C ci-upstream-kasan-gce-root
2019/01/01 09:57 upstream f12e840c819b 3d85f48c .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/01/01 11:50 linux-next 6a1d293238c1 3d85f48c .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/01/03 09:03 upstream 85f78456f286 06a2b89f .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/01 09:22 upstream f12e840c819b 3d85f48c .config console log report ci-upstream-kasan-gce-selinux-root
* Struck through repros no longer work on HEAD.