syzbot


WARNING in console_unlock

Status: auto-closed as invalid on 2022/02/16 18:35
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+c81440130f8669eb86d8@syzkaller.appspotmail.com
First crash: 864d, last: 860d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] WARNING in console_unlock 0 (1) 2021/12/18 14:49
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in console_unlock (2) kernel 1 728d 728d 0/26 auto-closed as invalid on 2022/07/28 17:43

Sample crash report:
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffff8 CR3: 0000000088a15000 CR4: 00000000003506e0
Call Trace:
Modules linked in:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 13785 at include/trace/events/printk.h:10 trace_console_rcuidle include/trace/events/printk.h:10 [inline]
WARNING: CPU: 1 PID: 13785 at include/trace/events/printk.h:10 call_console_drivers kernel/printk/printk.c:1905 [inline]
WARNING: CPU: 1 PID: 13785 at include/trace/events/printk.h:10 console_unlock+0xabd/0xb70 kernel/printk/printk.c:2714
Modules linked in:
CPU: 1 PID: 13785 Comm: syz-executor.3 Not tainted 5.16.0-rc5-next-20211216-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:trace_console_rcuidle include/trace/events/printk.h:10 [inline]
RIP: 0010:call_console_drivers kernel/printk/printk.c:1905 [inline]
RIP: 0010:console_unlock+0xabd/0xb70 kernel/printk/printk.c:2714
Code: 43 f0 0e 00 00 00 00 48 8b bc 24 68 01 00 00 e8 69 c7 ff ff e9 35 ff ff ff e8 7f ec 18 00 0f 0b e9 17 fd ff ff e8 73 ec 18 00 <0f> 0b e9 6a fd ff ff 48 89 ef e8 24 fa 63 00 e9 34 f7 ff ff e8 ea
RSP: 0018:fffffe0000053d40 EFLAGS: 00010046
RAX: 0000000080110000 RBX: 0000000000100000 RCX: 0000000000000000
RDX: ffff88801b611d40 RSI: ffffffff815f14cd RDI: 0000000000000003
RBP: fffffe0000053dd8 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff815f1236 R11: 0000000000000000 R12: 000000000000000f
R13: 0000000000000000 R14: fffffe0000053d98 R15: dffffc0000000000
FS:  00007fb4fa574700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: fffffffffffffff8 CR3: 0000000088a15000 CR4: 00000000003506e0
Call Trace:
 <#DF>
 console_unblank+0xfc/0x130 kernel/printk/printk.c:2779
 bust_spinlocks+0x60/0xe0 lib/bust_spinlocks.c:28
 oops_end+0x2b/0xf0 arch/x86/kernel/dumpstack.c:361
 exc_double_fault+0x16d/0x180 arch/x86/kernel/traps.c:466
 asm_exc_double_fault+0x1e/0x40 arch/x86/include/asm/idtentry.h:613
RIP: 0010:entry_SYSENTER_compat+0x3/0x17 arch/x86/entry/entry_64_compat.S:54
Code: 41 5c 5d 5b 41 5b 41 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 30 fd 48 c7 44 24 28 00 00 00 00 48 cf cc cc cc cc cc cc 0f 01 f8 <50> 58 65 48 8b 24 25 d0 6f 02 00 6a 2b 6a 00 9c 6a 23 6a 00 89 c0
RSP: 0018:0000000000000000 EFLAGS: 00010146
RAX: 00000000000000b9 RBX: 0000000000018ff5 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00000000200193c0 R08: 0000000000000000 R09: 00000000200001c0
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </#DF>
----------------
Code disassembly (best guess):
   0:	41 5c                	pop    %r12
   2:	5d                   	pop    %rbp
   3:	5b                   	pop    %rbx
   4:	41 5b                	pop    %r11
   6:	41 5a                	pop    %r10
   8:	41 59                	pop    %r9
   a:	41 58                	pop    %r8
   c:	58                   	pop    %rax
   d:	59                   	pop    %rcx
   e:	5a                   	pop    %rdx
   f:	5e                   	pop    %rsi
  10:	5f                   	pop    %rdi
  11:	48 83 c4 30          	add    $0x30,%rsp
  15:	fd                   	std
  16:	48 c7 44 24 28 00 00 	movq   $0x0,0x28(%rsp)
  1d:	00 00
  1f:	48 cf                	iretq
  21:	cc                   	int3
  22:	cc                   	int3
  23:	cc                   	int3
  24:	cc                   	int3
  25:	cc                   	int3
  26:	cc                   	int3
  27:	0f 01 f8             	swapgs
* 2a:	50                   	push   %rax <-- trapping instruction
  2b:	58                   	pop    %rax
  2c:	65 48 8b 24 25 d0 6f 	mov    %gs:0x26fd0,%rsp
  33:	02 00
  35:	6a 2b                	pushq  $0x2b
  37:	6a 00                	pushq  $0x0
  39:	9c                   	pushfq
  3a:	6a 23                	pushq  $0x23
  3c:	6a 00                	pushq  $0x0
  3e:	89 c0                	mov    %eax,%eax

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/12/18 18:35 linux-next fbf252e09678 44068e19 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in console_unlock
2021/12/14 14:46 linux-next ea922272cbe5 d018dd31 .config console log report info ci-upstream-linux-next-kasan-gce-root WARNING in console_unlock
* Struck through repros no longer work on HEAD.