syzbot


WARNING in __bfs

Status: auto-closed as invalid on 2021/01/29 09:23
Reported-by: syzbot+d630b76760b952d9af4a@syzkaller.appspotmail.com
First crash: 1544d, last: 1524d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in __bfs (2) 1 1397d 1397d 0/1 auto-closed as invalid on 2021/06/06 05:22
linux-4.19 WARNING in __bfs (4) C error 11 723d 1028d 0/1 upstream: reported C repro on 2022/02/09 16:15
linux-4.19 WARNING in __bfs (3) 1 1205d 1205d 0/1 auto-closed as invalid on 2021/12/15 04:17

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 17144 at kernel/locking/lockdep.c:965 lock_accessed kernel/locking/lockdep.c:965 [inline]
WARNING: CPU: 0 PID: 17144 at kernel/locking/lockdep.c:965 __bfs.part.0.cold+0x11/0xee kernel/locking/lockdep.c:1032
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 17144 Comm: syz-executor.4 Not tainted 4.19.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x22c/0x33e lib/dump_stack.c:118
 panic+0x2ac/0x565 kernel/panic.c:186
 __warn.cold+0x20/0x5a kernel/panic.c:541
 report_bug+0x262/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x1e1/0x330 arch/x86/kernel/traps.c:296
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:lock_accessed kernel/locking/lockdep.c:965 [inline]
RIP: 0010:__bfs.part.0.cold+0x11/0xee kernel/locking/lockdep.c:1032
Code: 20 2b 2e 8d e8 6c ef 52 00 eb 88 48 c7 c7 40 ee 40 8d e8 5e ef 52 00 eb bd 48 c7 c7 80 35 0b 88 48 89 4c 24 28 e8 7a 2d 03 00 <0f> 0b 49 8d 45 10 48 8b 4c 24 28 48 89 44 24 20 48 c1 e8 03 42 80
RSP: 0018:ffff8880a62d7480 EFLAGS: 00010086
RAX: 0000000000000024 RBX: ffffffff8d07b2e0 RCX: 0000000000000000
RDX: 000000000002980c RSI: ffffffff815b523f RDI: ffffed1014c5ae82
RBP: ffff8880a62d7540 R08: 0000000000000024 R09: 0000000000000000
R10: 0000000000000005 R11: 000000001db65d7a R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000073651928
 __bfs kernel/locking/lockdep.c:1387 [inline]
 __bfs_backwards kernel/locking/lockdep.c:1069 [inline]
 find_usage_backwards kernel/locking/lockdep.c:1387 [inline]
 check_usage_backwards+0x184/0x310 kernel/locking/lockdep.c:2668
 mark_lock_irq kernel/locking/lockdep.c:2759 [inline]
 mark_lock+0x41b/0x13b0 kernel/locking/lockdep.c:3131
 mark_irqflags kernel/locking/lockdep.c:3023 [inline]
 __lock_acquire+0x5a2/0x3ff0 kernel/locking/lockdep.c:3372
 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3907
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline]
 _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:168
 spin_lock_bh include/linux/spinlock.h:334 [inline]
 lock_sock_nested+0x3b/0x110 net/core/sock.c:2864
 l2cap_sock_teardown_cb+0x88/0x3f0 net/bluetooth/l2cap_sock.c:1328
 l2cap_chan_del+0xad/0x900 net/bluetooth/l2cap_core.c:596
 l2cap_conn_del+0x397/0x6b0 net/bluetooth/l2cap_core.c:1726
 l2cap_disconn_cfm net/bluetooth/l2cap_core.c:7435 [inline]
 l2cap_disconn_cfm+0x85/0xa0 net/bluetooth/l2cap_core.c:7428
 hci_disconn_cfm include/net/bluetooth/hci_core.h:1261 [inline]
 hci_conn_hash_flush+0x114/0x220 net/bluetooth/hci_conn.c:1495
 hci_dev_do_close+0x623/0xe70 net/bluetooth/hci_core.c:1666
 hci_rfkill_set_block+0x102/0x130 net/bluetooth/hci_core.c:2100
 rfkill_set_block+0x1f9/0x4b0 net/rfkill/core.c:353
 rfkill_fop_write+0x287/0x580 net/rfkill/core.c:1249
 do_loop_readv_writev fs/read_write.c:704 [inline]
 do_loop_readv_writev fs/read_write.c:688 [inline]
 do_iter_write+0x461/0x5d0 fs/read_write.c:962
 vfs_writev+0x153/0x2e0 fs/read_write.c:1005
 do_writev+0x136/0x330 fs/read_write.c:1040
 do_syscall_64+0xf9/0x670 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45dd99
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f063d7f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 000000000003b880 RCX: 000000000045dd99
RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffe5f7a992f R14: 00007f063d7f49c0 R15: 000000000118bf2c
Shutting down cpus with NMI
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/01 09:23 linux-4.19.y 10ad6cfd5736 4103fce0 .config console log report info ci2-linux-4-19
2020/09/12 06:34 linux-4.19.y 67957f12548c 79fb24e2 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.