From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-10.2 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING, SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id EB347C433EF for ; Sat, 18 Sep 2021 13:53:06 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id D15186126A for ; Sat, 18 Sep 2021 13:53:06 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S238234AbhIRNy3 (ORCPT ); Sat, 18 Sep 2021 09:54:29 -0400 Received: from netrider.rowland.org ([192.131.102.5]:44809 "HELO netrider.rowland.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S237067AbhIRNy0 (ORCPT ); Sat, 18 Sep 2021 09:54:26 -0400 Received: (qmail 80311 invoked by uid 1000); 18 Sep 2021 09:53:01 -0400 Date: Sat, 18 Sep 2021 09:53:01 -0400 From: Alan Stern To: Hao Sun , Shuah Khan Cc: Greg KH , linux-usb@vger.kernel.org, a.darwish@linutronix.de, johan@kernel.org, Linux Kernel Mailing List , oneukum@suse.com Subject: Re: INFO: task hung in hub_port_init Message-ID: <20210918135301.GA79656@rowland.harvard.edu> References: <20210913135459.GA120302@rowland.harvard.edu> <20210918020245.GA69263@rowland.harvard.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Sep 18, 2021 at 10:17:26AM +0800, Hao Sun wrote: > Alan Stern 于2021年9月18日周六 上午10:02写道： > > > > On Sat, Sep 18, 2021 at 09:56:52AM +0800, Hao Sun wrote: > > > Hi Alan, > > > > > > Alan Stern 于2021年9月13日周一 下午9:55写道： > > > > > > > > On Mon, Sep 13, 2021 at 11:13:15AM +0800, Hao Sun wrote: > > > > > Hello, > > > > > > > > > > When using Healer to fuzz the Linux kernel, the following crash was triggered. > > > > > > > > > > HEAD commit: ac08b1c68d1b Merge tag 'pci-v5.15-changes' > > > > > git tree: upstream > > > > > console output: > > > > > https://drive.google.com/file/d/1ZeDIMe-DoY3fB32j2p5ifgpq-Lc5N74I/view?usp=sharing > > > > > kernel config: https://drive.google.com/file/d/1qrJUXD8ZIeAkg-xojzDpp04v9MtQ8RR6/view?usp=sharing > > > > > Syzlang reproducer: > > > > > https://drive.google.com/file/d/1tZe8VmXfxoPqlNpzpGOd-e5WCSWgbkxB/view?usp=sharing > > > > > Similar report: > > > > > https://groups.google.com/g/syzkaller-bugs/c/zX55CUzjBOY/m/uf91r0XqAgAJ > > > > > > > > > > Sorry, I don't have a C reproducer for this crash but have a Syzlang > > > > > reproducer. Also, hope the symbolized report can help. > > > > > Here are the instructions on how to execute Syzlang prog: > > > > > https://github.com/google/syzkaller/blob/master/docs/executing_syzkaller_programs.md > > > > > > > > > > If you fix this issue, please add the following tag to the commit: > > > > > Reported-by: Hao Sun > > > > > > > > There's not much hope of finding the cause of a problem like this > > > > without seeing the kernel log. > > > > > > > > > > Healer found another Syzlang prog to reproduce this task hang: > > > https://paste.ubuntu.com/p/HCNYbKJYtx/ > > > > > > Also here is a very simple script to execute the reproducer: > > > https://paste.ubuntu.com/p/ZTGmvFSP6d/ > > > > > > The `syz-execprog` and `syz-executor` are needed, so please build > > > Syzkaller first before running the script. > > > Hope this can help to find the root cause of the problem. > > > > I don't have time to install and figure out how to use Healer and > > Syzkaller. But if you run the reproducer and post the kernel log, > > I'll take a look at it. > > > > Just executed the reproducer, here is the full log: > https://paste.ubuntu.com/p/x43SqQy8PX/ The log indicates that the problem is related to the vhci-hcd driver somehow. I don't know why those "Module has invalid ELF structures" errors keep appearing, starting in line 1946 of the log. Alan Stern