syzbot


WARNING in sk_stream_kill_queues (8)

Status: fixed on 2023/02/24 13:50
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+a0e6f8738b58f7654417@syzkaller.appspotmail.com
Fix commit: e9c6e7976026 tcp: fix sock skb accounting in tcp_read_skb()
First crash: 851d, last: 597d
Cause bisection: introduced by (bisect log) [merge commit]:
commit d2127c5933c521e353dbe7982a7fba5fd063d46d
Author: Stephen Rothwell <sfr@canb.auug.org.au>
Date: Mon Jun 27 00:05:06 2022 +0000

  Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git

Crash: BUG: sleeping function called from invalid context in sock_map_destroy (log)
Repro: C syz .config
  
Discussions (4)
Title Replies (including bot) Last reply
[Patch net v3 0/4] tcp: some bug fixes for tcp_read_skb() 13 (13) 2022/09/16 14:40
[Patch net v2 0/4] tcp: some bug fixes for tcp_read_skb() 6 (6) 2022/08/12 23:55
[Patch bpf-next] tcp: fix sock skb accounting in tcp_read_skb() 10 (10) 2022/07/26 16:53
[syzbot] WARNING in sk_stream_kill_queues (8) 6 (7) 2022/07/07 18:49
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in sk_stream_kill_queues (4) net C done done 6 1685d 1689d 15/28 fixed on 2020/06/30 18:57
upstream WARNING in sk_stream_kill_queues (3) net C done 622 1950d 2310d 13/28 fixed on 2019/11/26 19:44
upstream WARNING in sk_stream_kill_queues (7) net C 6689 947d 1065d 20/28 fixed on 2022/03/08 16:11
upstream WARNING in sk_stream_kill_queues (5) net C done 4684 1279d 1410d 20/28 fixed on 2021/04/09 19:46
upstream WARNING in sk_stream_kill_queues (2) net C 124 2411d 2472d 0/28 closed as dup on 2018/01/03 23:44
upstream WARNING in sk_stream_kill_queues (6) net C 11376 1065d 1279d 20/28 fixed on 2021/11/10 00:50
linux-4.14 WARNING in sk_stream_kill_queues C 68 583d 596d 0/1 upstream: reported C repro on 2023/02/22 12:59
upstream WARNING in sk_stream_kill_queues syz 96 2612d 2615d 3/28 fixed on 2017/11/07 20:45
linux-4.19 WARNING in sk_stream_kill_queues C error 5 701d 934d 0/1 upstream: reported C repro on 2022/03/21 10:58
Last patch testing requests (4)
Created Duration User Patch Repo Result
2022/07/07 17:22 16m xiyou.wangcong@gmail.com patch bpf-next OK log
2022/07/07 06:10 10m xiyou.wangcong@gmail.com patch bpf-next report log
2022/07/01 07:14 16m hdanton@sina.com patch http://kernel.source.codeaurora.cn/pub/scm/linux/kernel/git/next/linux-next.git aab35c3d5112 OK log
2022/07/01 03:23 16m hdanton@sina.com patch http://kernel.source.codeaurora.cn/pub/scm/linux/kernel/git/next/linux-next.git aab35c3d5112 report log

Sample crash report:
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3601 at net/core/stream.c:205 sk_stream_kill_queues+0x2ee/0x3d0 net/core/stream.c:205
Modules linked in:
CPU: 1 PID: 3601 Comm: syz-executor408 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
RIP: 0010:sk_stream_kill_queues+0x2ee/0x3d0 net/core/stream.c:205
Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ec 00 00 00 8b ab 28 02 00 00 e9 60 ff ff ff e8 4b 39 2a fa 0f 0b eb 97 e8 42 39 2a fa <0f> 0b eb a0 e8 39 39 2a fa 0f 0b e9 6a fe ff ff e8 fd 3d 76 fa e9
RSP: 0018:ffffc900030dfb48 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888076cc8000 RSI: ffffffff87507dce RDI: 0000000000000005
RBP: 0000000000000b00 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000b00 R11: 0000000000000004 R12: ffff888078340e28
R13: ffffffff913100c0 R14: ffff888078340c28 R15: ffff888078340db8
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000cf3d CR3: 00000000741a4000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 inet_csk_destroy_sock+0x1a5/0x440 net/ipv4/inet_connection_sock.c:1013
 __tcp_close+0xb92/0xf50 net/ipv4/tcp.c:2963
 tcp_close+0x29/0xc0 net/ipv4/tcp.c:2975
 sock_map_close+0x6b3/0x780 net/core/sock_map.c:1598
 inet_release+0x12e/0x270 net/ipv4/af_inet.c:428
 __sock_release+0xcd/0x280 net/socket.c:650
 sock_close+0x18/0x20 net/socket.c:1365
 __fput+0x277/0x9d0 fs/file_table.c:317
 task_work_run+0xdd/0x1a0 kernel/task_work.c:177
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xaf1/0x29f0 kernel/exit.c:795
 do_group_exit+0xd2/0x2f0 kernel/exit.c:925
 __do_sys_exit_group kernel/exit.c:936 [inline]
 __se_sys_exit_group kernel/exit.c:934 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:934
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fd3e0eface9
Code: Unable to access opcode bytes at RIP 0x7fd3e0efacbf.
RSP: 002b:00007fffee7c94e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fd3e0f6f330 RCX: 00007fd3e0eface9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 00007fffee7c96d8
R10: 00007fffee7c96d8 R11: 0000000000000246 R12: 00007fd3e0f6f330
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
 </TASK>

Crashes (4268):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/07/28 03:34 linux-next cb71b93c2dc3 fb95c74d .config strace log report syz C ci-upstream-linux-next-kasan-gce-root WARNING in sk_stream_kill_queues
2022/06/28 03:08 linux-next aab35c3d5112 ef82eb2c .config strace log report syz C ci-upstream-linux-next-kasan-gce-root WARNING in sk_stream_kill_queues
2023/02/16 18:00 upstream 033c40a89f55 7338e3c4 .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in sk_stream_kill_queues
2023/02/16 17:43 upstream 033c40a89f55 7338e3c4 .config console log report info ci-upstream-kasan-gce-smack-root WARNING in sk_stream_kill_queues
2023/02/15 21:37 upstream e1c04510f521 6be0f1f5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in sk_stream_kill_queues
2023/02/15 20:18 upstream e1c04510f521 6be0f1f5 .config console log report info ci-upstream-kasan-gce-smack-root WARNING in sk_stream_kill_queues
2023/02/15 16:33 upstream e1c04510f521 6be0f1f5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in sk_stream_kill_queues
2023/02/15 15:40 upstream e1c04510f521 6be0f1f5 .config console log report info ci-upstream-kasan-gce WARNING in sk_stream_kill_queues
2023/02/15 09:39 upstream e1c04510f521 e62ba3c1 .config console log report info ci-qemu-upstream WARNING in sk_stream_kill_queues
2023/02/16 16:42 upstream 033c40a89f55 7338e3c4 .config console log report info ci-upstream-kasan-gce-386 WARNING in sk_stream_kill_queues
2023/02/16 14:46 upstream 033c40a89f55 38b317a7 .config console log report info ci-qemu-upstream-386 WARNING in sk_stream_kill_queues
2023/02/16 04:16 upstream 033c40a89f55 6be0f1f5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in sk_stream_kill_queues
2023/02/16 03:00 upstream 033c40a89f55 6be0f1f5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in sk_stream_kill_queues
2023/02/15 17:47 upstream e1c04510f521 6be0f1f5 .config console log report info ci-upstream-kasan-gce-386 WARNING in sk_stream_kill_queues
2023/02/15 08:23 upstream e1c04510f521 1d6b4af7 .config console log report info ci-upstream-kasan-gce-386 WARNING in sk_stream_kill_queues
2023/02/09 08:15 net-old b963d9d5b943 14a312c8 .config console log report info ci-upstream-net-this-kasan-gce WARNING in sk_stream_kill_queues
2023/02/17 01:41 net-next-old 84cb1b53cdba 851bc19a .config console log report info ci-upstream-net-kasan-gce WARNING in sk_stream_kill_queues
2022/06/11 17:39 net-next-old e10b02ee5b6c 0d5abf15 .config console log report info ci-upstream-net-kasan-gce WARNING in sk_stream_kill_queues
2023/02/11 23:19 linux-next 38d2b86a665b 93e26d60 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in sk_stream_kill_queues
2023/02/20 17:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 4f5f5209 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 16:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 4f5f5209 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 14:05 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 12:33 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 11:25 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 08:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 07:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 04:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/20 02:35 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 23:50 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 17:07 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 16:01 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 14:12 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 09:35 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 08:29 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 07:24 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/19 05:39 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/18 20:24 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/18 19:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/18 17:55 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/18 11:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 d02e9a70 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/18 07:35 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 d02e9a70 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/18 06:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 d02e9a70 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/18 02:19 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 3e7039f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/17 22:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 3e7039f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/17 13:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 3e7039f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/17 12:09 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 3e7039f4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/17 00:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 851bc19a .config console log report info ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/15 12:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 6be0f1f5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/15 11:02 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 6be0f1f5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/15 05:46 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 1d6b4af7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/14 12:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 1d6b4af7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/14 08:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93ae7e0a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/14 01:38 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93ae7e0a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/14 00:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 93ae7e0a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/13 20:36 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 4d66ad72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/13 20:35 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 4d66ad72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/13 15:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 4d66ad72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
2023/02/13 12:51 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2d3827b3f393 4d66ad72 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in sk_stream_kill_queues
* Struck through repros no longer work on HEAD.