mirror of
https://github.com/reactos/syzkaller.git
synced 2024-11-24 03:49:45 +00:00
pkg/report: improve some USB reports
This commit is contained in:
Andrey Konovalov
Dmitry Vyukov
parent
669cade06a
commit
5883acb646
@ -767,10 +767,16 @@ var linuxStackParams = &stackParams{
|
||||
"destroy_workqueue",
|
||||
"get_device_parent",
|
||||
"device_add",
|
||||
"device_del",
|
||||
"device_unregister",
|
||||
"kobject_del",
|
||||
"finish_wait",
|
||||
"rollback_registered",
|
||||
"unregister_netdev",
|
||||
"sysfs_remove_file",
|
||||
"device_remove_file",
|
||||
"usb_kill_urb",
|
||||
"usb_control_msg",
|
||||
},
|
||||
corruptedLines: []*regexp.Regexp{
|
||||
// Fault injection stacks are frequently intermixed with crash reports.
|
||||
|
||||
110
pkg/report/testdata/linux/report/416
vendored
Normal file
110
pkg/report/testdata/linux/report/416
vendored
Normal file
@ -0,0 +1,110 @@
|
||||
TITLE: KASAN: use-after-free Write in video_unregister_device
|
||||
|
||||
[ 1527.943923][T23697] ==================================================================
|
||||
[ 1527.952472][T23697] BUG: KASAN: use-after-free in kobject_del+0x12e/0x170
|
||||
[ 1527.959545][T23697] Write of size 1 at addr ffff8881c84f8b14 by task v4l_id/23697
|
||||
[ 1527.967273][T23697]
|
||||
[ 1527.969594][T23697] CPU: 1 PID: 23697 Comm: v4l_id Not tainted 5.3.0-rc7+ #0
|
||||
[ 1527.976778][T23697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
|
||||
[ 1527.986817][T23697] Call Trace:
|
||||
[ 1527.990098][T23697] dump_stack+0xca/0x13e
|
||||
[ 1527.994323][T23697] ? kobject_del+0x12e/0x170
|
||||
[ 1527.998893][T23697] ? kobject_del+0x12e/0x170
|
||||
[ 1528.003532][T23697] print_address_description+0x6a/0x32c
|
||||
[ 1528.009154][T23697] ? kobject_del+0x12e/0x170
|
||||
[ 1528.013744][T23697] ? kobject_del+0x12e/0x170
|
||||
[ 1528.018454][T23697] __kasan_report.cold+0x1a/0x33
|
||||
[ 1528.023464][T23697] ? kobject_del+0x12e/0x170
|
||||
[ 1528.028249][T23697] kasan_report+0xe/0x12
|
||||
[ 1528.032488][T23697] kobject_del+0x12e/0x170
|
||||
[ 1528.037099][T23697] device_del+0x6dd/0xb10
|
||||
[ 1528.041527][T23697] ? __device_links_no_driver+0x240/0x240
|
||||
[ 1528.047382][T23697] ? wait_for_completion+0x3c0/0x3c0
|
||||
[ 1528.052652][T23697] device_unregister+0x11/0x30
|
||||
[ 1528.057530][T23697] video_unregister_device+0xa2/0xc0
|
||||
[ 1528.062885][T23697] usbvision_unregister_video+0x83/0x120
|
||||
[ 1528.068512][T23697] usbvision_release+0x10d/0x1c0
|
||||
[ 1528.073436][T23697] usbvision_radio_close.cold+0x6f/0x74
|
||||
[ 1528.078968][T23697] ? usbvision_disconnect+0x1d0/0x1d0
|
||||
[ 1528.084429][T23697] v4l2_release+0x2e7/0x390
|
||||
[ 1528.088914][T23697] ? dev_debug_store+0x100/0x100
|
||||
[ 1528.093887][T23697] __fput+0x2d7/0x840
|
||||
[ 1528.097851][T23697] task_work_run+0x13f/0x1c0
|
||||
[ 1528.102423][T23697] exit_to_usermode_loop+0x1d2/0x200
|
||||
[ 1528.107685][T23697] do_syscall_64+0x45f/0x580
|
||||
[ 1528.112260][T23697] entry_SYSCALL_64_after_hwframe+0x49/0xbe
|
||||
[ 1528.118128][T23697] RIP: 0033:0x7f88374e32b0
|
||||
[ 1528.122540][T23697] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24
|
||||
[ 1528.142135][T23697] RSP: 002b:00007ffce3f3e218 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
|
||||
[ 1528.150541][T23697] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f88374e32b0
|
||||
[ 1528.158497][T23697] RDX: 00007f8837799df0 RSI: 0000000000000001 RDI: 0000000000000003
|
||||
[ 1528.166452][T23697] RBP: 0000000000000000 R08: 00007f8837799df0 R09: 000000000000000a
|
||||
[ 1528.174406][T23697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000400884
|
||||
[ 1528.182359][T23697] R13: 00007ffce3f3e370 R14: 0000000000000000 R15: 0000000000000000
|
||||
[ 1528.190321][T23697]
|
||||
[ 1528.192631][T23697] Allocated by task 2775:
|
||||
[ 1528.196957][T23697] save_stack+0x1b/0x80
|
||||
[ 1528.201092][T23697] __kasan_kmalloc.constprop.0+0xbf/0xd0
|
||||
[ 1528.206700][T23697] usbvision_probe.cold+0x586/0x1e57
|
||||
[ 1528.212016][T23697] usb_probe_interface+0x305/0x7a0
|
||||
[ 1528.217268][T23697] really_probe+0x281/0x6d0
|
||||
[ 1528.221955][T23697] driver_probe_device+0x101/0x1b0
|
||||
[ 1528.227070][T23697] __device_attach_driver+0x1c2/0x220
|
||||
[ 1528.232452][T23697] bus_for_each_drv+0x162/0x1e0
|
||||
[ 1528.237301][T23697] __device_attach+0x217/0x360
|
||||
[ 1528.242086][T23697] bus_probe_device+0x1e4/0x290
|
||||
[ 1528.246918][T23697] device_add+0xae6/0x16f0
|
||||
[ 1528.251380][T23697] usb_set_configuration+0xdf6/0x1670
|
||||
[ 1528.256771][T23697] generic_probe+0x9d/0xd5
|
||||
[ 1528.261184][T23697] usb_probe_device+0x99/0x100
|
||||
[ 1528.265945][T23697] really_probe+0x281/0x6d0
|
||||
[ 1528.270426][T23697] driver_probe_device+0x101/0x1b0
|
||||
[ 1528.275540][T23697] __device_attach_driver+0x1c2/0x220
|
||||
[ 1528.280913][T23697] bus_for_each_drv+0x162/0x1e0
|
||||
[ 1528.285778][T23697] __device_attach+0x217/0x360
|
||||
[ 1528.290711][T23697] bus_probe_device+0x1e4/0x290
|
||||
[ 1528.295568][T23697] device_add+0xae6/0x16f0
|
||||
[ 1528.299968][T23697] usb_new_device.cold+0x6a4/0xe79
|
||||
[ 1528.305056][T23697] hub_event+0x1b5c/0x3640
|
||||
[ 1528.309469][T23697] process_one_work+0x92b/0x1530
|
||||
[ 1528.314399][T23697] worker_thread+0x96/0xe20
|
||||
[ 1528.318883][T23697] kthread+0x318/0x420
|
||||
[ 1528.322935][T23697] ret_from_fork+0x24/0x30
|
||||
[ 1528.327325][T23697]
|
||||
[ 1528.329631][T23697] Freed by task 12:
|
||||
[ 1528.333420][T23697] save_stack+0x1b/0x80
|
||||
[ 1528.337569][T23697] __kasan_slab_free+0x130/0x180
|
||||
[ 1528.342584][T23697] kfree+0xe4/0x2f0
|
||||
[ 1528.346461][T23697] usbvision_release+0x181/0x1c0
|
||||
[ 1528.351520][T23697] usbvision_disconnect+0x16c/0x1d0
|
||||
[ 1528.356739][T23697] usb_unbind_interface+0x1bd/0x8a0
|
||||
[ 1528.361931][T23697] device_release_driver_internal+0x42f/0x500
|
||||
[ 1528.368279][T23697] bus_remove_device+0x2dc/0x4a0
|
||||
[ 1528.373293][T23697] device_del+0x420/0xb10
|
||||
[ 1528.377737][T23697] usb_disable_device+0x211/0x690
|
||||
[ 1528.382760][T23697] usb_disconnect+0x284/0x8d0
|
||||
[ 1528.387424][T23697] hub_event+0x1454/0x3640
|
||||
[ 1528.391830][T23697] process_one_work+0x92b/0x1530
|
||||
[ 1528.396747][T23697] worker_thread+0x96/0xe20
|
||||
[ 1528.401230][T23697] kthread+0x318/0x420
|
||||
[ 1528.405299][T23697] ret_from_fork+0x24/0x30
|
||||
[ 1528.409691][T23697]
|
||||
[ 1528.412163][T23697] The buggy address belongs to the object at ffff8881c84f8000
|
||||
[ 1528.412163][T23697] which belongs to the cache kmalloc-8k of size 8192
|
||||
[ 1528.426457][T23697] The buggy address is located 2836 bytes inside of
|
||||
[ 1528.426457][T23697] 8192-byte region [ffff8881c84f8000, ffff8881c84fa000)
|
||||
[ 1528.439901][T23697] The buggy address belongs to the page:
|
||||
[ 1528.445541][T23697] page:ffffea0007213e00 refcount:1 mapcount:0 mapping:ffff8881da00c500 index:0x0 compound_mapcount: 0
|
||||
[ 1528.456458][T23697] flags: 0x200000000010200(slab|head)
|
||||
[ 1528.461814][T23697] raw: 0200000000010200 0000000000000000 0000000100000001 ffff8881da00c500
|
||||
[ 1528.470393][T23697] raw: 0000000000000000 0000000080030003 00000001ffffffff 0000000000000000
|
||||
[ 1528.478964][T23697] page dumped because: kasan: bad access detected
|
||||
[ 1528.485355][T23697]
|
||||
[ 1528.487659][T23697] Memory state around the buggy address:
|
||||
[ 1528.493311][T23697] ffff8881c84f8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 1528.501374][T23697] ffff8881c84f8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 1528.509442][T23697] >ffff8881c84f8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 1528.517660][T23697] ^
|
||||
[ 1528.522244][T23697] ffff8881c84f8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 1528.530286][T23697] ffff8881c84f8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 1528.538418][T23697] ==================================================================
|
||||
105
pkg/report/testdata/linux/report/417
vendored
Normal file
105
pkg/report/testdata/linux/report/417
vendored
Normal file
@ -0,0 +1,105 @@
|
||||
TITLE: KASAN: use-after-free Read in usbvision_release
|
||||
|
||||
[ 472.680102][ T9268] ==================================================================
|
||||
[ 472.689737][ T9268] BUG: KASAN: use-after-free in sysfs_remove_file_ns+0x5f/0x70
|
||||
[ 472.697269][ T9268] Read of size 8 at addr ffff8881d53ec5c0 by task v4l_id/9268
|
||||
[ 472.704705][ T9268]
|
||||
[ 472.707042][ T9268] CPU: 1 PID: 9268 Comm: v4l_id Not tainted 5.3.0-rc7+ #0
|
||||
[ 472.714167][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
|
||||
[ 472.724226][ T9268] Call Trace:
|
||||
[ 472.727595][ T9268] dump_stack+0xca/0x13e
|
||||
[ 472.731846][ T9268] ? sysfs_remove_file_ns+0x5f/0x70
|
||||
[ 472.737047][ T9268] ? sysfs_remove_file_ns+0x5f/0x70
|
||||
[ 472.742424][ T9268] print_address_description+0x6a/0x32c
|
||||
[ 472.747986][ T9268] ? sysfs_remove_file_ns+0x5f/0x70
|
||||
[ 472.753193][ T9268] ? sysfs_remove_file_ns+0x5f/0x70
|
||||
[ 472.758401][ T9268] __kasan_report.cold+0x1a/0x33
|
||||
[ 472.763349][ T9268] ? sysfs_remove_file_ns+0x5f/0x70
|
||||
[ 472.768550][ T9268] kasan_report+0xe/0x12
|
||||
[ 472.772798][ T9268] sysfs_remove_file_ns+0x5f/0x70
|
||||
[ 472.777900][ T9268] device_remove_file+0x25/0x30
|
||||
[ 472.782796][ T9268] usbvision_release+0x97/0x1c0
|
||||
[ 472.787651][ T9268] usbvision_radio_close.cold+0x6f/0x74
|
||||
[ 472.793199][ T9268] ? usbvision_disconnect+0x1d0/0x1d0
|
||||
[ 472.798643][ T9268] v4l2_release+0x2e7/0x390
|
||||
[ 472.803154][ T9268] ? dev_debug_store+0x100/0x100
|
||||
[ 472.808140][ T9268] __fput+0x2d7/0x840
|
||||
[ 472.812127][ T9268] task_work_run+0x13f/0x1c0
|
||||
[ 472.816718][ T9268] exit_to_usermode_loop+0x1d2/0x200
|
||||
[ 472.822007][ T9268] do_syscall_64+0x45f/0x580
|
||||
[ 472.826662][ T9268] entry_SYSCALL_64_after_hwframe+0x49/0xbe
|
||||
[ 472.832558][ T9268] RIP: 0033:0x7f09895112b0
|
||||
[ 472.836981][ T9268] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24
|
||||
[ 472.856593][ T9268] RSP: 002b:00007ffd9be4b9e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
|
||||
[ 472.865009][ T9268] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f09895112b0
|
||||
[ 472.872994][ T9268] RDX: 00007f09897c7df0 RSI: 0000000000000001 RDI: 0000000000000003
|
||||
[ 472.880969][ T9268] RBP: 0000000000000000 R08: 00007f09897c7df0 R09: 000000000000000a
|
||||
[ 472.888965][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000400884
|
||||
[ 472.897029][ T9268] R13: 00007ffd9be4bb40 R14: 0000000000000000 R15: 0000000000000000
|
||||
[ 472.905001][ T9268]
|
||||
[ 472.907342][ T9268] Allocated by task 2747:
|
||||
[ 472.911675][ T9268] save_stack+0x1b/0x80
|
||||
[ 472.915833][ T9268] __kasan_kmalloc.constprop.0+0xbf/0xd0
|
||||
[ 472.921466][ T9268] usbvision_probe.cold+0x586/0x1e57
|
||||
[ 472.926853][ T9268] usb_probe_interface+0x305/0x7a0
|
||||
[ 472.932021][ T9268] really_probe+0x281/0x6d0
|
||||
[ 472.936532][ T9268] driver_probe_device+0x101/0x1b0
|
||||
[ 472.941646][ T9268] __device_attach_driver+0x1c2/0x220
|
||||
[ 472.947021][ T9268] bus_for_each_drv+0x162/0x1e0
|
||||
[ 472.951873][ T9268] __device_attach+0x217/0x360
|
||||
[ 472.956635][ T9268] bus_probe_device+0x1e4/0x290
|
||||
[ 472.961480][ T9268] device_add+0xae6/0x16f0
|
||||
[ 472.965956][ T9268] usb_set_configuration+0xdf6/0x1670
|
||||
[ 472.971375][ T9268] generic_probe+0x9d/0xd5
|
||||
[ 472.975808][ T9268] usb_probe_device+0x99/0x100
|
||||
[ 472.980569][ T9268] really_probe+0x281/0x6d0
|
||||
[ 472.985075][ T9268] driver_probe_device+0x101/0x1b0
|
||||
[ 472.990272][ T9268] __device_attach_driver+0x1c2/0x220
|
||||
[ 472.995641][ T9268] bus_for_each_drv+0x162/0x1e0
|
||||
[ 473.000489][ T9268] __device_attach+0x217/0x360
|
||||
[ 473.005250][ T9268] bus_probe_device+0x1e4/0x290
|
||||
[ 473.010101][ T9268] device_add+0xae6/0x16f0
|
||||
[ 473.014521][ T9268] usb_new_device.cold+0x6a4/0xe79
|
||||
[ 473.019635][ T9268] hub_event+0x1b5c/0x3640
|
||||
[ 473.024050][ T9268] process_one_work+0x92b/0x1530
|
||||
[ 473.028985][ T9268] worker_thread+0x96/0xe20
|
||||
[ 473.033492][ T9268] kthread+0x318/0x420
|
||||
[ 473.037558][ T9268] ret_from_fork+0x24/0x30
|
||||
[ 473.041964][ T9268]
|
||||
[ 473.044289][ T9268] Freed by task 2943:
|
||||
[ 473.048268][ T9268] save_stack+0x1b/0x80
|
||||
[ 473.052423][ T9268] __kasan_slab_free+0x130/0x180
|
||||
[ 473.057361][ T9268] kfree+0xe4/0x2f0
|
||||
[ 473.061170][ T9268] usbvision_release+0x181/0x1c0
|
||||
[ 473.066104][ T9268] usbvision_disconnect+0x16c/0x1d0
|
||||
[ 473.071300][ T9268] usb_unbind_interface+0x1bd/0x8a0
|
||||
[ 473.076501][ T9268] device_release_driver_internal+0x42f/0x500
|
||||
[ 473.082567][ T9268] bus_remove_device+0x2dc/0x4a0
|
||||
[ 473.087500][ T9268] device_del+0x420/0xb10
|
||||
[ 473.091843][ T9268] usb_disable_device+0x211/0x690
|
||||
[ 473.096867][ T9268] usb_disconnect+0x284/0x8d0
|
||||
[ 473.101554][ T9268] hub_event+0x1454/0x3640
|
||||
[ 473.106000][ T9268] process_one_work+0x92b/0x1530
|
||||
[ 473.110940][ T9268] worker_thread+0x96/0xe20
|
||||
[ 473.115446][ T9268] kthread+0x318/0x420
|
||||
[ 473.119514][ T9268] ret_from_fork+0x24/0x30
|
||||
[ 473.123918][ T9268]
|
||||
[ 473.126269][ T9268] The buggy address belongs to the object at ffff8881d53ec200
|
||||
[ 473.126269][ T9268] which belongs to the cache kmalloc-8k of size 8192
|
||||
[ 473.140316][ T9268] The buggy address is located 960 bytes inside of
|
||||
[ 473.140316][ T9268] 8192-byte region [ffff8881d53ec200, ffff8881d53ee200)
|
||||
[ 473.153655][ T9268] The buggy address belongs to the page:
|
||||
[ 473.159409][ T9268] page:ffffea000754fa00 refcount:1 mapcount:0 mapping:ffff8881da00c500 index:0x0 compound_mapcount: 0
|
||||
[ 473.170434][ T9268] flags: 0x200000000010200(slab|head)
|
||||
[ 473.175813][ T9268] raw: 0200000000010200 0000000000000000 0000000100000001 ffff8881da00c500
|
||||
[ 473.184643][ T9268] raw: 0000000000000000 0000000080030003 00000001ffffffff 0000000000000000
|
||||
[ 473.193209][ T9268] page dumped because: kasan: bad access detected
|
||||
[ 473.199599][ T9268]
|
||||
[ 473.201910][ T9268] Memory state around the buggy address:
|
||||
[ 473.207527][ T9268] ffff8881d53ec480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 473.215575][ T9268] ffff8881d53ec500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 473.223641][ T9268] >ffff8881d53ec580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 473.233156][ T9268] ^
|
||||
[ 473.239291][ T9268] ffff8881d53ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 473.247344][ T9268] ffff8881d53ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
|
||||
[ 473.255385][ T9268] ==================================================================
|
||||
62
pkg/report/testdata/linux/report/418
vendored
Normal file
62
pkg/report/testdata/linux/report/418
vendored
Normal file
@ -0,0 +1,62 @@
|
||||
TITLE: general protection fault in hdm_disconnect
|
||||
|
||||
[ 43.976394][ T12] kasan: CONFIG_KASAN_INLINE enabled
|
||||
[ 43.981766][ T12] kasan: GPF could be caused by NULL-ptr deref or user memory access
|
||||
[ 43.990194][ T12] general protection fault: 0000 [#1] SMP KASAN
|
||||
[ 43.996992][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.2.0-rc6+ #14
|
||||
[ 44.004550][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
|
||||
[ 44.014751][ T12] Workqueue: usb_hub_wq hub_event
|
||||
[ 44.019837][ T12] RIP: 0010:device_del+0x7a/0xb80
|
||||
[ 44.024916][ T12] Code: c7 40 04 00 07 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 00 00 00 31 c0 e8 d1 9d d5 fe 48 8d 7b 40 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 79 0a 00 00 48 8b 43 40 4c 8d a3 80 00 00 00 31
|
||||
[ 44.044519][ T12] RSP: 0018:ffff8881d9e0f7d0 EFLAGS: 00010202
|
||||
[ 44.050635][ T12] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000
|
||||
[ 44.058736][ T12] RDX: 0000000000000000 RSI: ffffffff82673ddf RDI: 0000000000000040
|
||||
[ 44.066812][ T12] RBP: dffffc0000000000 R08: ffff8881d9df9800 R09: ffffed1039fee706
|
||||
[ 44.074827][ T12] R10: ffffed1039fee705 R11: ffff8881cff7382f R12: ffff8881cfef1a28
|
||||
[ 44.083004][ T12] R13: ffff8881cff73760 R14: ffff8881cfef19b0 R15: 0000000000000000
|
||||
[ 44.091024][ T12] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
|
||||
[ 44.100010][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
|
||||
[ 44.106589][ T12] CR2: 00000000006cc0a0 CR3: 0000000006e21000 CR4: 00000000001406f0
|
||||
[ 44.114551][ T12] Call Trace:
|
||||
[ 44.117892][ T12] ? try_to_del_timer_sync+0xbf/0x110
|
||||
[ 44.123311][ T12] ? __device_links_no_driver+0x240/0x240
|
||||
[ 44.129090][ T12] ? mark_held_locks+0x9f/0xe0
|
||||
[ 44.133843][ T12] ? del_timer_sync+0x121/0x130
|
||||
[ 44.138778][ T12] device_unregister+0x11/0x30
|
||||
[ 44.143593][ T12] hdm_disconnect+0xdf/0x200
|
||||
[ 44.148174][ T12] usb_unbind_interface+0x1bd/0x8a0
|
||||
[ 44.153361][ T12] ? usb_autoresume_device+0x60/0x60
|
||||
[ 44.158710][ T12] device_release_driver_internal+0x404/0x4c0
|
||||
[ 44.164819][ T12] bus_remove_device+0x2dc/0x4a0
|
||||
[ 44.169824][ T12] device_del+0x460/0xb80
|
||||
[ 44.174147][ T12] ? __device_links_no_driver+0x240/0x240
|
||||
[ 44.179857][ T12] ? usb_remove_ep_devs+0x3e/0x80
|
||||
[ 44.184869][ T12] ? remove_intf_ep_devs+0x13f/0x1d0
|
||||
[ 44.190144][ T12] usb_disable_device+0x211/0x690
|
||||
[ 44.195157][ T12] usb_disconnect+0x284/0x830
|
||||
[ 44.199825][ T12] hub_event+0x143d/0x35f0
|
||||
[ 44.204242][ T12] ? hub_port_debounce+0x260/0x260
|
||||
[ 44.209335][ T12] process_one_work+0x905/0x1570
|
||||
[ 44.214273][ T12] ? pwq_dec_nr_in_flight+0x310/0x310
|
||||
[ 44.219636][ T12] ? do_raw_spin_lock+0x11a/0x280
|
||||
[ 44.224650][ T12] worker_thread+0x96/0xe20
|
||||
[ 44.229148][ T12] ? process_one_work+0x1570/0x1570
|
||||
[ 44.234338][ T12] kthread+0x30b/0x410
|
||||
[ 44.238394][ T12] ? kthread_park+0x1a0/0x1a0
|
||||
[ 44.243060][ T12] ret_from_fork+0x24/0x30
|
||||
[ 44.247593][ T12] Modules linked in:
|
||||
[ 44.251552][ T12] ---[ end trace e4fe4de18bc13a7b ]---
|
||||
[ 44.257035][ T12] RIP: 0010:device_del+0x7a/0xb80
|
||||
[ 44.262054][ T12] Code: c7 40 04 00 07 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 00 00 00 31 c0 e8 d1 9d d5 fe 48 8d 7b 40 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 79 0a 00 00 48 8b 43 40 4c 8d a3 80 00 00 00 31
|
||||
[ 44.281897][ T12] RSP: 0018:ffff8881d9e0f7d0 EFLAGS: 00010202
|
||||
[ 44.287988][ T12] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000
|
||||
[ 44.296069][ T12] RDX: 0000000000000000 RSI: ffffffff82673ddf RDI: 0000000000000040
|
||||
[ 44.304048][ T12] RBP: dffffc0000000000 R08: ffff8881d9df9800 R09: ffffed1039fee706
|
||||
[ 44.312143][ T12] R10: ffffed1039fee705 R11: ffff8881cff7382f R12: ffff8881cfef1a28
|
||||
[ 44.320164][ T12] R13: ffff8881cff73760 R14: ffff8881cfef19b0 R15: 0000000000000000
|
||||
[ 44.328182][ T12] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
|
||||
[ 44.337301][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
|
||||
[ 44.343876][ T12] CR2: 00000000006cc0a0 CR3: 0000000006e21000 CR4: 00000000001406f0
|
||||
[ 44.351869][ T12] Kernel panic - not syncing: Fatal exception
|
||||
[ 44.358761][ T12] Kernel Offset: disabled
|
||||
[ 44.363185][ T12] Rebooting in 86400 seconds..
|
||||
118
pkg/report/testdata/linux/report/419
vendored
Normal file
118
pkg/report/testdata/linux/report/419
vendored
Normal file
@ -0,0 +1,118 @@
|
||||
TITLE: INFO: task hung in ld_usb_write
|
||||
TYPE: HANG
|
||||
|
||||
[ 534.703301][ T23] INFO: task syz-executor865:1721 blocked for more than 143 seconds.
|
||||
[ 534.711469][ T23] Not tainted 5.3.0-rc5+ #27
|
||||
[ 534.716695][ T23] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
|
||||
[ 534.725429][ T23] syz-executor865 D28344 1721 1719 0x00000000
|
||||
[ 534.731748][ T23] Call Trace:
|
||||
[ 534.735164][ T23] ? __schedule+0x703/0x1440
|
||||
[ 534.739749][ T23] ? __sched_text_start+0x8/0x8
|
||||
[ 534.744699][ T23] ? mark_held_locks+0x9f/0xe0
|
||||
[ 534.749456][ T23] schedule+0x9a/0x250
|
||||
[ 534.753552][ T23] schedule_timeout+0x440/0xb20
|
||||
[ 534.758478][ T23] ? find_held_lock+0x2d/0x110
|
||||
[ 534.763310][ T23] ? usleep_range+0x160/0x160
|
||||
[ 534.768043][ T23] ? __next_timer_interrupt+0x190/0x190
|
||||
[ 534.773630][ T23] ? mark_held_locks+0x9f/0xe0
|
||||
[ 534.778487][ T23] ? _raw_spin_unlock_irq+0x24/0x30
|
||||
[ 534.783738][ T23] wait_for_completion_timeout+0x282/0x3e0
|
||||
[ 534.789540][ T23] ? wait_for_completion_io+0x3c0/0x3c0
|
||||
[ 534.795167][ T23] ? wake_up_q+0xf0/0xf0
|
||||
[ 534.799441][ T23] ? usb_submit_urb+0x6ed/0x13b0
|
||||
[ 534.804409][ T23] usb_start_wait_urb+0x14b/0x2b0
|
||||
[ 534.809410][ T23] ? sg_clean+0x230/0x230
|
||||
[ 534.813812][ T23] ? kasan_unpoison_shadow+0x30/0x40
|
||||
[ 534.819085][ T23] ? memset+0x20/0x40
|
||||
[ 534.823109][ T23] usb_control_msg+0x31c/0x4a0
|
||||
[ 534.827929][ T23] ? usb_start_wait_urb+0x2b0/0x2b0
|
||||
[ 534.833349][ T23] ? __might_fault+0x192/0x1d0
|
||||
[ 534.838245][ T23] ld_usb_write+0x856/0xa10
|
||||
[ 534.842741][ T23] ? find_held_lock+0x2d/0x110
|
||||
[ 534.847556][ T23] ? copy_overflow+0x30/0x30
|
||||
[ 534.852145][ T23] ? vmf_insert_mixed_mkwrite+0x30/0x30
|
||||
[ 534.857759][ T23] ? lock_downgrade+0x6e0/0x6e0
|
||||
[ 534.862601][ T23] ? handle_mm_fault+0x1d5/0x900
|
||||
[ 534.867699][ T23] ? security_file_permission+0x8a/0x370
|
||||
[ 534.873376][ T23] ? copy_overflow+0x30/0x30
|
||||
[ 534.877982][ T23] __vfs_write+0x76/0x100
|
||||
[ 534.882353][ T23] vfs_write+0x262/0x5c0
|
||||
[ 534.886675][ T23] ksys_write+0x1e8/0x250
|
||||
[ 534.891004][ T23] ? __ia32_sys_read+0xb0/0xb0
|
||||
[ 534.895996][ T23] ? trace_hardirqs_off_caller+0x55/0x1e0
|
||||
[ 534.901805][ T23] do_syscall_64+0xb7/0x580
|
||||
[ 534.906376][ T23] entry_SYSCALL_64_after_hwframe+0x49/0xbe
|
||||
[ 534.912336][ T23] RIP: 0033:0x4407e9
|
||||
[ 534.916307][ T23] Code: Bad RIP value.
|
||||
[ 534.920357][ T23] RSP: 002b:00007ffeb5a0a2c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
|
||||
[ 534.928889][ T23] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004407e9
|
||||
[ 534.936927][ T23] RDX: 000000000000004f RSI: 0000000020001bc0 RDI: 0000000000000004
|
||||
[ 534.944933][ T23] RBP: 00000000006cb018 R08: 000000000000000f R09: 00000000004002c8
|
||||
[ 534.952895][ T23] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402070
|
||||
[ 534.960938][ T23] R13: 0000000000402100 R14: 0000000000000000 R15: 0000000000000000
|
||||
[ 534.969054][ T23]
|
||||
[ 534.969054][ T23] Showing all locks held in the system:
|
||||
[ 534.976852][ T23] 1 lock held by khungtaskd/23:
|
||||
[ 534.981745][ T23] #0: 00000000fd563b60 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x269
|
||||
[ 534.991130][ T23] 1 lock held by rsyslogd/1600:
|
||||
[ 534.995990][ T23] #0: 00000000c20a41d9 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100
|
||||
[ 535.004669][ T23] 2 locks held by getty/1690:
|
||||
[ 535.009321][ T23] #0: 000000001154fd1d (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
|
||||
[ 535.018602][ T23] #1: 000000002f4c05ee (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0
|
||||
[ 535.028169][ T23] 2 locks held by getty/1691:
|
||||
[ 535.032819][ T23] #0: 00000000a911f389 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
|
||||
[ 535.042049][ T23] #1: 00000000bba4c828 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0
|
||||
[ 535.051613][ T23] 2 locks held by getty/1692:
|
||||
[ 535.056343][ T23] #0: 0000000081f06ffe (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
|
||||
[ 535.065595][ T23] #1: 0000000062b1cd97 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0
|
||||
[ 535.075197][ T23] 2 locks held by getty/1693:
|
||||
[ 535.079937][ T23] #0: 00000000188b899f (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
|
||||
[ 535.089208][ T23] #1: 00000000ee216f65 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0
|
||||
[ 535.098793][ T23] 2 locks held by getty/1694:
|
||||
[ 535.103509][ T23] #0: 00000000cd50b032 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
|
||||
[ 535.119785][ T23] #1: 00000000c3aad320 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0
|
||||
[ 535.129392][ T23] 2 locks held by getty/1695:
|
||||
[ 535.134066][ T23] #0: 00000000464bb3bf (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
|
||||
[ 535.143375][ T23] #1: 000000000fa65af6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0
|
||||
[ 535.152983][ T23] 2 locks held by getty/1696:
|
||||
[ 535.157712][ T23] #0: 0000000076992f0e (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
|
||||
[ 535.166926][ T23] #1: 00000000324b1de8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x223/0x1ae0
|
||||
[ 535.176506][ T23] 1 lock held by syz-executor865/1721:
|
||||
[ 535.181936][ T23] #0: 00000000f3f16e64 (&dev->mutex#3){+.+.}, at: ld_usb_write+0x111/0xa10
|
||||
[ 535.190646][ T23]
|
||||
[ 535.192952][ T23] =============================================
|
||||
[ 535.192952][ T23]
|
||||
[ 535.201470][ T23] NMI backtrace for cpu 1
|
||||
[ 535.205836][ T23] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.3.0-rc5+ #27
|
||||
[ 535.213187][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
|
||||
[ 535.223232][ T23] Call Trace:
|
||||
[ 535.226579][ T23] dump_stack+0xca/0x13e
|
||||
[ 535.230825][ T23] ? irq_force_complete_move.cold+0x27/0x47
|
||||
[ 535.236702][ T23] nmi_cpu_backtrace.cold+0x55/0x96
|
||||
[ 535.241876][ T23] ? lapic_can_unplug_cpu.cold+0x3f/0x3f
|
||||
[ 535.247483][ T23] nmi_trigger_cpumask_backtrace+0x1b0/0x1c7
|
||||
[ 535.253477][ T23] watchdog+0x9a4/0xe50
|
||||
[ 535.257605][ T23] ? reset_hung_task_detector+0x30/0x30
|
||||
[ 535.263176][ T23] kthread+0x318/0x420
|
||||
[ 535.267236][ T23] ? kthread_create_on_node+0xf0/0xf0
|
||||
[ 535.272605][ T23] ret_from_fork+0x24/0x30
|
||||
[ 535.277091][ T23] Sending NMI from CPU 1 to CPUs 0:
|
||||
[ 535.282367][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0x28/0x2e0
|
||||
[ 535.283289][ T23] Kernel panic - not syncing: hung_task: blocked tasks
|
||||
[ 535.297306][ T23] CPU: 1 PID: 23 Comm: khungtaskd Not tainted 5.3.0-rc5+ #27
|
||||
[ 535.304646][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
|
||||
[ 535.314675][ T23] Call Trace:
|
||||
[ 535.317945][ T23] dump_stack+0xca/0x13e
|
||||
[ 535.322202][ T23] panic+0x2a3/0x6da
|
||||
[ 535.326071][ T23] ? add_taint.cold+0x16/0x16
|
||||
[ 535.330717][ T23] ? cpumask_next+0x1f/0x30
|
||||
[ 535.335211][ T23] ? printk_safe_flush+0xd9/0x120
|
||||
[ 535.340212][ T23] ? watchdog+0x9a4/0xe50
|
||||
[ 535.344517][ T23] ? nmi_trigger_cpumask_backtrace+0x168/0x1c7
|
||||
[ 535.350724][ T23] watchdog+0x9b5/0xe50
|
||||
[ 535.354864][ T23] ? reset_hung_task_detector+0x30/0x30
|
||||
[ 535.360396][ T23] kthread+0x318/0x420
|
||||
[ 535.364440][ T23] ? kthread_create_on_node+0xf0/0xf0
|
||||
[ 535.369787][ T23] ret_from_fork+0x24/0x30
|
||||
[ 535.374959][ T23] Kernel Offset: disabled
|
||||
[ 535.379284][ T23] Rebooting in 86400 seconds..
|
||||
Loading…
Reference in New Issue
Block a user