| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <202509301323.34d956e1-lkp@intel.com>
Date: Tue, 30 Sep 2025 14:31:18 +0800
From: kernel test robot <oliver.sang@...el.com>
To: pengyu <pengyu@...inos.cn>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>, <linux-kernel@...r.kernel.org>,
<linux-serial@...r.kernel.org>, <gregkh@...uxfoundation.org>,
<jirislaby@...nel.org>, <legion@...nel.org>, <mingo@...nel.org>,
<myrrhperiwinkle@...labs.xyz>, <tglx@...utronix.de>,
<dmitry.torokhov@...il.com>, <changlianzhi@...ontech.com>, pengyu
<pengyu@...inos.cn>, <syzbot+79c403850e6816dc39cf@...kaller.appspotmail.com>,
<oliver.sang@...el.com>
Subject: Re: [PATCH] tty/vt: Fix possible deadlock in input_inject_event
Hello,
kernel test robot noticed "WARNING:at_kernel/workqueue.c:#enable_work" on:
commit: 81d246ffd402b46338d8a3e0cd23f474195dd236 ("[PATCH] tty/vt: Fix possible deadlock in input_inject_event")
url: https://github.com/intel-lab-lkp/linux/commits/pengyu/tty-vt-Fix-possible-deadlock-in-input_inject_event/20250928-211353
base: https://git.kernel.org/cgit/linux/kernel/git/gregkh/tty.git tty-testing
patch link: https://lore.kernel.org/all/20250928130819.383808-1-pengyu@kylinos.cn/
patch subject: [PATCH] tty/vt: Fix possible deadlock in input_inject_event
in testcase: boot
config: x86_64-kexec
compiler: clang-20
test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 16G
(please refer to attached dmesg/kmsg for entire log/backtrace)
+--------------------------------------------+------------+------------+
| | f4abab3508 | 81d246ffd4 |
+--------------------------------------------+------------+------------+
| WARNING:at_kernel/workqueue.c:#enable_work | 0 | 12 |
| RIP:enable_work | 0 | 12 |
+--------------------------------------------+------------+------------+
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202509301323.34d956e1-lkp@intel.com
[ 0.877354][ T1] ------------[ cut here ]------------
[ 0.878411][ T1] workqueue: work disable count underflowed
[ 0.879704][ T1] WARNING: CPU: 0 PID: 1 at kernel/workqueue.c:4326 enable_work (kernel/workqueue.c:4326)
[ 0.881213][ T1] Modules linked in:
[ 0.881232][ T1] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.17.0-rc6-00045-g81d246ffd402 #1 PREEMPT(voluntary)
[ 0.881232][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 0.881232][ T1] RIP: 0010:enable_work (kernel/workqueue.c:4326)
[ 0.881232][ T1] Code: 5e 5d e9 0c c1 ec 00 cc 0f 0b eb 9b 31 ed 80 3d 1e e8 c6 01 00 75 a0 c6 05 15 e8 c6 01 01 48 c7 c7 cd bf 6d 82 e8 89 26 f3 ff <0f> 0b eb 89 0f 0b eb 93 e8 cc c7 eb 00 66 66 66 2e 0f 1f 84 00 00
All code
========
0: 5e pop %rsi
1: 5d pop %rbp
2: e9 0c c1 ec 00 jmp 0xecc113
7: cc int3
8: 0f 0b ud2
a: eb 9b jmp 0xffffffffffffffa7
c: 31 ed xor %ebp,%ebp
e: 80 3d 1e e8 c6 01 00 cmpb $0x0,0x1c6e81e(%rip) # 0x1c6e833
15: 75 a0 jne 0xffffffffffffffb7
17: c6 05 15 e8 c6 01 01 movb $0x1,0x1c6e815(%rip) # 0x1c6e833
1e: 48 c7 c7 cd bf 6d 82 mov $0xffffffff826dbfcd,%rdi
25: e8 89 26 f3 ff call 0xfffffffffff326b3
2a:* 0f 0b ud2 <-- trapping instruction
2c: eb 89 jmp 0xffffffffffffffb7
2e: 0f 0b ud2
30: eb 93 jmp 0xffffffffffffffc5
32: e8 cc c7 eb 00 call 0xebc803
37: 66 data16
38: 66 data16
39: 66 data16
3a: 2e cs
3b: 0f .byte 0xf
3c: 1f (bad)
3d: 84 00 test %al,(%rax)
...
Code starting with the faulting instruction
===========================================
0: 0f 0b ud2
2: eb 89 jmp 0xffffffffffffff8d
4: 0f 0b ud2
6: eb 93 jmp 0xffffffffffffff9b
8: e8 cc c7 eb 00 call 0xebc7d9
d: 66 data16
e: 66 data16
f: 66 data16
10: 2e cs
11: 0f .byte 0xf
12: 1f (bad)
13: 84 00 test %al,(%rax)
...
[ 0.881232][ T1] RSP: 0000:ffffc90000013b28 EFLAGS: 00010046
[ 0.881232][ T1] RAX: 63593ad70bfd2600 RBX: ffffffff82ead988 RCX: 63593ad70bfd2601
[ 0.881232][ T1] RDX: ffffc90000013918 RSI: 00000000ffff7fff RDI: 0000000000000001
[ 0.881232][ T1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc90000013910
[ 0.881232][ T1] R10: 00000000ffff7fff R11: 0000000000000001 R12: 0000000000000000
[ 0.881232][ T1] R13: 0000000000000000 R14: 000fffffffe00001 R15: 0000000000000000
[ 0.881232][ T1] FS: 0000000000000000(0000) GS:ffff8884ac411000(0000) knlGS:0000000000000000
[ 0.881232][ T1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.881232][ T1] CR2: ffff88843ffff000 CR3: 0000000002a30000 CR4: 00000000000406f0
[ 0.881232][ T1] Call Trace:
[ 0.881232][ T1] <TASK>
[ 0.881232][ T1] kbd_init (include/linux/workqueue.h:730 drivers/tty/vt/keyboard.c:1666)
[ 0.881232][ T1] vty_init (drivers/tty/vt/vt.c:3884)
[ 0.881232][ T1] tty_init (drivers/tty/tty_io.c:3651)
[ 0.881232][ T1] ? __pfx_chr_dev_init (drivers/char/mem.c:734)
[ 0.881232][ T1] do_one_initcall (init/main.c:1269)
[ 0.881232][ T1] ? __alloc_frozen_pages_noprof (mm/page_alloc.c:5148)
[ 0.881232][ T1] ? alloc_pages_mpol (mm/mempolicy.c:2416)
[ 0.881232][ T1] ? new_slab (mm/slub.c:560 mm/slub.c:2698 mm/slub.c:2714)
[ 0.881232][ T1] ? __proc_create (fs/proc/generic.c:453)
[ 0.881232][ T1] ? ida_alloc_range (include/linux/xarray.h:1437 lib/idr.c:461)
[ 0.881232][ T1] ? parameq (kernel/params.c:90 kernel/params.c:99)
[ 0.881232][ T1] ? __pfx_ignore_unknown_bootoption (init/main.c:1315)
[ 0.881232][ T1] ? parse_args (kernel/params.c:153 kernel/params.c:186)
[ 0.881232][ T1] do_initcall_level (init/main.c:1330)
[ 0.881232][ T1] do_initcalls (init/main.c:1344)
[ 0.881232][ T1] kernel_init_freeable (init/main.c:1583)
[ 0.881232][ T1] ? __pfx_kernel_init (init/main.c:1461)
[ 0.881232][ T1] kernel_init (init/main.c:1471)
[ 0.881232][ T1] ret_from_fork (arch/x86/kernel/process.c:154)
[ 0.881232][ T1] ? __pfx_kernel_init (init/main.c:1461)
[ 0.881232][ T1] ret_from_fork_asm (arch/x86/entry/entry_64.S:258)
[ 0.881232][ T1] </TASK>
[ 0.881232][ T1] ---[ end trace 0000000000000000 ]---
The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20250930/202509301323.34d956e1-lkp@intel.com
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
Powered by blists - more mailing lists