syzbot


inconsistent lock state in sco_sock_timeout
Status: upstream: reported C repro on 2020/08/17 15:31
Reported-by: syzbot+2f6d7c28bb4bf7e82060@syzkaller.appspotmail.com
Fix commit: ba316be1b6a0 Bluetooth: schedule SCO timeouts with delayed_work
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 428d, last: 82d

Cause bisection: introduced by (bisect log) :
commit 331c56ac73846fa267c04ee6aa9a00bb5fed9440
Author: Heiner Kallweit <hkallweit1@gmail.com>
Date: Mon Aug 12 21:51:27 2019 +0000

  net: phy: add phy_speed_down_core and phy_resolve_min_speed

Crash: general protection fault in batadv_iv_ogm_queue_add (log)
Repro: C syz .config
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
inconsistent lock state in sco_conn_del C done 110 49d 433d 0/22 closed as dup on 2021/06/28 04:28
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 inconsistent lock state in sco_sock_timeout C 14 26d 436d 0/1 upstream: reported C repro on 2020/08/08 22:36
linux-4.19 inconsistent lock state in sco_sock_timeout C done 19 36d 427d 1/1 fixed on 2021/10/12 13:38
Patch testing requests:
Created Duration User Patch Repo Result
2021/08/04 03:19 18m desmondcheongzx@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git master OK
2021/08/03 16:54 18m desmondcheongzx@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git master report log
2021/08/03 11:41 18m desmondcheongzx@gmail.com patch upstream OK
2021/08/03 10:26 17m desmondcheongzx@gmail.com patch upstream report log
2021/08/03 09:41 13m desmondcheongzx@gmail.com patch upstream report log
2021/08/03 08:45 18m desmondcheongzx@gmail.com patch upstream report log
2021/08/03 08:29 0m desmondcheongzx@gmail.com patch upstream error
2021/08/03 04:38 18m desmondcheongzx@gmail.com patch upstream report log
2021/08/02 17:03 18m desmondcheongzx@gmail.com patch upstream report log
2021/08/02 15:57 16m desmondcheongzx@gmail.com patch upstream report log
2021/08/02 15:02 18m desmondcheongzx@gmail.com patch upstream report log
2021/08/02 13:23 15m desmondcheongzx@gmail.com patch upstream report log
2021/08/02 08:46 11m desmondcheongzx@gmail.com patch upstream report log
2021/08/02 05:06 18m desmondcheongzx@gmail.com patch upstream report log
2021/08/01 06:15 18m desmondcheongzx@gmail.com patch upstream report log
2021/08/01 04:13 18m desmondcheongzx@gmail.com patch upstream report log
2021/07/30 16:05 18m desmondcheongzx@gmail.com patch upstream report log
2021/07/30 08:38 0m desmondcheongzx@gmail.com patch upstream error
2021/07/29 12:14 23m desmondcheongzx@gmail.com patch upstream OK
2021/07/29 10:25 18m desmondcheongzx@gmail.com patch upstream report log
2021/07/28 03:44 19m desmondcheongzx@gmail.com patch upstream report log
2021/07/27 13:44 22m desmondcheongzx@gmail.com patch upstream OK
2021/07/21 03:24 21m desmondcheongzx@gmail.com patch upstream OK
2021/07/20 13:55 0m desmondcheongzx@gmail.com patch upstream error
2021/07/19 13:20 18m desmondcheongzx@gmail.com patch upstream report log
2021/07/19 11:08 19m desmondcheongzx@gmail.com patch upstream report log
2021/07/13 12:35 19m desmondcheongzx@gmail.com patch upstream OK
2021/07/13 09:35 18m desmondcheongzx@gmail.com patch upstream OK
2021/06/28 07:22 18m desmondcheongzx@gmail.com patch upstream OK
2021/06/28 06:37 18m desmondcheongzx@gmail.com patch upstream report log
2021/06/28 04:21 18m desmondcheongzx@gmail.com patch upstream OK

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/07/28 01:13 upstream 7d549995d4e0 9d2ab5df .config log report syz C
ci-upstream-kasan-gce-root 2021/05/02 07:19 upstream 17ae69aba89d 94b45706 .config log report syz C
ci-upstream-kasan-gce-root 2020/12/28 10:46 upstream 5c8fe583cce5 94b45706 .config log report syz C
ci-upstream-kasan-gce-root 2020/11/28 10:19 upstream c84e1efae022 94b45706 .config log report syz C
ci-upstream-kasan-gce-root 2020/10/29 09:54 upstream 23859ae44402 94b45706 .config log report syz C
ci-upstream-kasan-gce-root 2020/09/19 00:15 upstream 92ab97adeefc 94b45706 .config log report syz C
Crashes (16):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/06/27 06:23 upstream 625acffd7ae2 9d2ab5df .config log report syz C inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-root 2021/06/23 08:24 upstream 0c18f29aae7c aba2b2fb .config log report syz C inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-root 2020/08/19 23:47 upstream 18445bf405cb 94b45706 .config log report syz C
ci-upstream-kasan-gce-smack-root 2020/08/17 07:58 upstream 2cc3c4b3c2e9 424dd8e7 .config log report syz C
ci-upstream-kasan-gce-smack-root 2021/06/14 01:58 upstream e4e453434a19 1ba81399 .config log report info inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-root 2021/05/25 14:12 upstream a050a6d2b7e8 3c7fef33 .config log report info inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-smack-root 2021/04/02 00:34 upstream ffd9fb546d49 6a81331a .config log report info inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-root 2021/03/10 19:02 upstream 05a59d79793d 764067f3 .config log report info inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-root 2021/02/04 13:30 upstream 61556703b610 42b90a7c .config log report info inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-root 2021/01/30 17:32 upstream 0e9bcda5d286 fc9fd31e .config log report info inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-smack-root 2021/01/22 04:04 upstream 9f29bd8b2e71 d4f4eca5 .config log report info inconsistent lock state in sco_sock_timeout
ci-qemu2-arm64-compat 2021/02/17 06:09 upstream f40ddce88593 98682e5e .config log report info inconsistent lock state in sco_sock_timeout
ci-upstream-kasan-gce-selinux-root 2020/09/29 09:28 upstream fb0155a09b02 1b88c6d5 .config log report info
ci-upstream-kasan-gce-selinux-root 2020/09/27 23:09 upstream a1bffa48745a 5dd8aee8 .config log report info
ci-upstream-kasan-gce-smack-root 2020/08/17 03:04 upstream 2cc3c4b3c2e9 424dd8e7 .config log report
ci-upstream-kasan-gce-root 2020/08/16 03:00 upstream c9c9735c46f5 424dd8e7 .config log report