syzbot


WARNING in inet_sock_destruct

Status: upstream: reported C repro on 2023/05/08 19:19
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+f1ce40f7fa5e1ed90a63@syzkaller.appspotmail.com
First crash: 360d, last: 1d20h
Bug presence (1)
Date Name Commit Repro Result
2023/11/21 upstream (ToT) 98b1cc82c4af C [report] WARNING in inet_sock_destruct
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 WARNING in inet_sock_destruct C 728 2073d 1848d 0/3 public: reported C repro on 2019/04/12 00:00
android-44 WARNING in inet_sock_destruct 12 2082d 2293d 0/2 auto-closed as invalid on 2019/02/22 12:37
upstream WARNING in inet_sock_destruct (4) net C done 479 52m 314d 0/26 upstream: reported C repro on 2023/06/23 14:36
upstream WARNING in inet_sock_destruct (3) net C 87 333d 436d 22/26 fixed on 2023/06/08 14:41
linux-6.1 WARNING in inet_sock_destruct origin:upstream C 40 9d17h 387d 0/3 upstream: reported C repro on 2023/04/11 23:37
upstream WARNING in inet_sock_destruct (2) net C unreliable unreliable 1259 631d 1262d 0/26 closed as invalid on 2022/10/12 18:26
upstream WARNING in inet_sock_destruct net 5893 2375d 2370d 0/26 closed as invalid on 2018/01/30 22:53
linux-4.14 WARNING in inet_sock_destruct C inconclusive 1 1432d 1492d 0/1 upstream: reported C repro on 2020/04/02 03:04
Fix bisection attempts (1)
Created Duration User Patch Repo Result
2024/01/26 03:17 49m bisect fix linux-5.15.y job log (0) log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 0 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x64d/0x740
Modules linked in:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.139-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
RIP: 0010:inet_sock_destruct+0x64d/0x740 net/ipv4/af_inet.c:157
Code: 01 e8 a7 45 b1 f8 0f 0b e9 61 fe ff ff e8 9b 45 b1 f8 0f 0b e9 96 fe ff ff e8 8f 45 b1 f8 0f 0b e9 be fe ff ff e8 83 45 b1 f8 <0f> 0b e9 e6 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c 5b fd ff ff
RSP: 0018:ffffc90000dd0b68 EFLAGS: 00010246
RAX: ffffffff88cede4d RBX: 00000000000000de RCX: ffff88813fe70000
RDX: 0000000000000101 RSI: 00000000000000de RDI: 0000000000000000
RBP: 0000000000000007 R08: ffffffff88cedd2d R09: ffffed100ee74380
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880773a1980
R13: ffff8880773a1e88 R14: dffffc0000000000 R15: ffff8880773a1992
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe509ab73c8 CR3: 000000001b592000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __sk_destruct+0x54/0x840 net/core/sock.c:1937
 rcu_do_batch kernel/rcu/tree.c:2510 [inline]
 rcu_core+0xa15/0x1650 kernel/rcu/tree.c:2750
 __do_softirq+0x3b3/0x93a kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x155/0x240 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:132 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:110 [inline]
RIP: 0010:acpi_idle_do_entry+0x10f/0x340 drivers/acpi/processor_idle.c:570
Code: 17 5b f7 48 83 e3 08 0f 85 0a 01 00 00 4c 8d 74 24 20 e8 e4 94 61 f7 0f 1f 44 00 00 e8 9a 13 5b f7 0f 00 2d 83 6d bd 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 fb c9 a4 f7
RSP: 0018:ffffc90000d67b00 EFLAGS: 000002d3
RAX: ffffffff8a251036 RBX: 0000000000000000 RCX: ffff88813fe70000
RDX: 0000000000000000 RSI: ffffffff8a8b0be0 RDI: ffffffff8ad87b40
RBP: ffffc90000d67b90 R08: ffffffff8186a540 R09: ffffed1027fce001
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920001acf60
R13: ffff888140ff7004 R14: ffffc90000d67b20 R15: dffffc0000000000
 acpi_idle_enter+0x352/0x4f0 drivers/acpi/processor_idle.c:705
 cpuidle_enter_state+0x521/0xef0 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:158 [inline]
 cpuidle_idle_call kernel/sched/idle.c:239 [inline]
 do_idle+0x3e4/0x670 kernel/sched/idle.c:306
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403
 start_secondary+0x371/0x500 arch/x86/kernel/smpboot.c:281
 secondary_startup_64_no_verify+0xb1/0xbb
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	5b                   	pop    %rbx
   1:	f7 48 83 e3 08 0f 85 	testl  $0x850f08e3,-0x7d(%rax)
   8:	0a 01                	or     (%rcx),%al
   a:	00 00                	add    %al,(%rax)
   c:	4c 8d 74 24 20       	lea    0x20(%rsp),%r14
  11:	e8 e4 94 61 f7       	call   0xf76194fa
  16:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  1b:	e8 9a 13 5b f7       	call   0xf75b13ba
  20:	0f 00 2d 83 6d bd 00 	verw   0xbd6d83(%rip)        # 0xbd6daa
  27:	fb                   	sti
  28:	f4                   	hlt
* 29:	4c 89 f3             	mov    %r14,%rbx <-- trapping instruction
  2c:	48 c1 eb 03          	shr    $0x3,%rbx
  30:	42 80 3c 3b 00       	cmpb   $0x0,(%rbx,%r15,1)
  35:	74 08                	je     0x3f
  37:	4c 89 f7             	mov    %r14,%rdi
  3a:	e8 fb c9 a4 f7       	call   0xf7a4ca3a

Crashes (31):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/11/21 00:33 linux-5.15.y 2a910f4af54d cb976f63 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2024/04/28 20:15 linux-5.15.y b925f60c6ee7 07b455f9 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/04/15 06:36 linux-5.15.y fa3df276cd36 c8349e48 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/03/03 13:36 linux-5.15.y 80efc6265290 25905f5d .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2023/05/19 11:34 linux-5.15.y 9d6bde853685 3bb7af1d .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2023/08/05 06:16 linux-5.15.y 38d4ca22a528 cdae481e .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/06/17 08:14 linux-5.15.y 471e639e59d1 f3921d4d .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/06/19 12:04 linux-5.15.y 471e639e59d1 f3921d4d .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/04/21 04:36 linux-5.15.y c52b9710c83d af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2024/04/09 18:13 linux-5.15.y 9465fef4ae35 f3234354 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2024/03/26 09:06 linux-5.15.y b95c01af2113 bcd9b39f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2024/03/24 04:47 linux-5.15.y b95c01af2113 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2024/03/16 18:13 linux-5.15.y b95c01af2113 d615901c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/12/26 02:48 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/12/15 12:11 linux-5.15.y d0fc081c6241 3222d10c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/11/27 13:17 linux-5.15.y 2a910f4af54d 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/11/20 23:58 linux-5.15.y 2a910f4af54d cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/10/22 09:47 linux-5.15.y 00c03985402e 361b23dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/10/02 22:28 linux-5.15.y b911329317b4 50b20e75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2023/09/23 08:44 linux-5.15.y 35ecaa3632bf 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in inet_sock_destruct
2024/05/01 11:30 linux-5.15.y b925f60c6ee7 3ba885bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/04/21 04:31 linux-5.15.y c52b9710c83d af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/03/26 09:12 linux-5.15.y b95c01af2113 bcd9b39f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/03/13 04:02 linux-5.15.y 574362648507 c35c26ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/03/12 02:46 linux-5.15.y 574362648507 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2024/03/03 12:53 linux-5.15.y 80efc6265290 25905f5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2023/12/26 08:00 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2023/12/22 06:02 linux-5.15.y 1d146b1875fc 4f9530a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2023/11/10 23:53 linux-5.15.y 80529b4968a8 d80eec66 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2023/08/17 03:36 linux-5.15.y f6f7927ac664 74b106b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
2023/05/08 19:18 linux-5.15.y 8a7f2a5c5aa1 c7a5e2a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in inet_sock_destruct
* Struck through repros no longer work on HEAD.