syzbot


WARNING in sk_stream_kill_queues (7)

Status: fixed on 2022/03/08 16:11
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: c4777efa751d net: add and use skb_unclone_keeptruesize() helper
First crash: 323d, last: 205d
similar bugs (8):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in sk_stream_kill_queues (4) C done done 6 943d 947d 17/24 fixed on 2020/06/30 18:57
upstream WARNING in sk_stream_kill_queues (3) C done 622 1209d 1568d 14/24 fixed on 2019/11/26 19:44
upstream WARNING in sk_stream_kill_queues (5) C done 4684 538d 668d 22/24 fixed on 2021/04/09 19:46
upstream WARNING in sk_stream_kill_queues (8) C unreliable 70 1d22h 92d 23/24 upstream: reported C repro on 2022/06/29 17:41
upstream WARNING in sk_stream_kill_queues (2) C 124 1669d 1730d 0/24 closed as dup on 2018/01/03 23:44
upstream WARNING in sk_stream_kill_queues (6) C 11376 323d 538d 22/24 fixed on 2021/11/10 00:50
upstream WARNING in sk_stream_kill_queues syz 96 1870d 1873d 3/24 fixed on 2017/11/07 20:45
linux-4.19 WARNING in sk_stream_kill_queues C error 4 87d 192d 0/1 upstream: reported C repro on 2022/03/21 10:58

Sample crash report:
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3598 at net/core/stream.c:205 sk_stream_kill_queues+0x2eb/0x3d0 net/core/stream.c:205
Modules linked in:
CPU: 1 PID: 3598 Comm: syz-executor236 Not tainted 5.17.0-rc2-syzkaller-00071-g1f2cfdd349b7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:sk_stream_kill_queues+0x2eb/0x3d0 net/core/stream.c:205
Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ec 00 00 00 8b ab 30 02 00 00 e9 60 ff ff ff e8 3e 3b 4e fa 0f 0b eb 97 e8 35 3b 4e fa <0f> 0b eb a0 e8 2c 3b 4e fa 0f 0b e9 6a fe ff ff e8 e0 81 95 fa e9
RSP: 0018:ffffc90001a4f960 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88801f6c3a00 RSI: ffffffff872a3d5b RDI: 0000000000000003
RBP: 0000000000000fe1 R08: 0000000000000000 R09: ffffffff8ffbd9ff
R10: ffffffff872a3cfb R11: 000000000000000b R12: ffff888077fe0e30
R13: ffffffff908a2f80 R14: ffff888077fe0c28 R15: ffff888077fe0db8
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007facb5ce7718 CR3: 000000000b88e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 inet_csk_destroy_sock+0x1a5/0x440 net/ipv4/inet_connection_sock.c:1012
 __tcp_close+0xd5b/0x12b0 net/ipv4/tcp.c:2907
 tcp_close+0x29/0xc0 net/ipv4/tcp.c:2919
 inet_release+0x12e/0x280 net/ipv4/af_inet.c:428
 __sock_release+0xcd/0x280 net/socket.c:650
 sock_close+0x18/0x20 net/socket.c:1318
 __fput+0x286/0x9f0 fs/file_table.c:311
 task_work_run+0xdd/0x1a0 kernel/task_work.c:164
 exit_task_work include/linux/task_work.h:32 [inline]
 do_exit+0xb29/0x2a30 kernel/exit.c:806
 do_group_exit+0xd2/0x2f0 kernel/exit.c:935
 get_signal+0x4b0/0x28c0 kernel/signal.c:2862
 arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7facb5d55e69
Code: Unable to access opcode bytes at RIP 0x7facb5d55e3f.
RSP: 002b:00007facb5ce7318 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007facb5dde438 RCX: 00007facb5d55e69
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007facb5dde438
RBP: 00007facb5dde430 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007facb5dac004
R13: 00007ffc492bdeaf R14: 00007facb5ce7400 R15: 0000000000022000
 </TASK>

Crashes (6689):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2022/02/04 01:27 upstream 1f2cfdd349b7 30646bfe .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce 2022/01/23 23:21 upstream dd81e1c7d5fb 214351e1 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-smack-root 2022/01/22 05:47 upstream 9b57f4589857 214351e1 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce 2022/01/04 09:18 upstream c9e6606c7fe9 7f723fbe .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce 2021/12/25 16:24 upstream b927dfc67d05 6caa12e4 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-net-this-kasan-gce 2022/02/03 19:10 net 4a81f6da9cb2 4ebb2798 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-net-this-kasan-gce 2022/01/22 09:45 net afa114d987c4 214351e1 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-net-this-kasan-gce 2022/01/04 02:51 net 1ef5e1d0dca5 4a3f34f2 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-net-this-kasan-gce 2021/12/25 11:27 net b45396afa417 6caa12e4 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 18:14 net-next 9c30918925d7 4ebb2798 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/01/22 09:24 net-next fe8152b38d3a 214351e1 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/01/04 03:03 net-next 3d694552fd8f 4a3f34f2 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-linux-next-kasan-gce-root 2021/11/14 06:39 linux-next f2e19fd15bd7 83f5c9b5 .config log report syz C WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-selinux-root 2022/03/08 01:09 upstream ea4424be1688 7bdd8b2c .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-smack-root 2022/02/04 06:54 upstream 1f2cfdd349b7 30646bfe .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-smack-root 2022/02/04 05:13 upstream 1f2cfdd349b7 30646bfe .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-root 2022/02/03 23:49 upstream 1f2cfdd349b7 30646bfe .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-root 2022/02/03 19:19 upstream 88808fbbead4 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-smack-root 2022/02/03 15:43 upstream 88808fbbead4 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce 2022/02/03 10:52 upstream 27bb0b18c208 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-root 2022/02/03 00:34 upstream 27bb0b18c208 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-root 2022/02/02 21:08 upstream 27bb0b18c208 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce 2022/02/02 09:09 upstream 9f7fb8de5d9b 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-selinux-root 2022/02/02 04:06 upstream 9f7fb8de5d9b 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-smack-root 2022/02/02 00:59 upstream 9f7fb8de5d9b 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream 2022/01/07 10:13 upstream b2b436ec0205 6acc789a .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/09 20:04 upstream f4bc5bbb5fef 0b33604d .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/09 03:33 upstream e6251ab4551f 0b33604d .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/08 15:09 upstream 555f3d7be91a 0b33604d .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/08 01:05 upstream 2ade8eef993c a7dab638 .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/07 22:52 upstream 2ade8eef993c a7dab638 .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/07 09:00 upstream dfd42facf1e4 a7dab638 .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/06 21:03 upstream d8ad2ce873ab a7dab638 .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/06 00:11 upstream 90c9e950c0de a7dab638 .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/05 22:42 upstream 90c9e950c0de a7dab638 .config log report info WARNING in sk_stream_kill_queues
ci-qemu-upstream-386 2022/02/04 21:50 upstream cff7f2237c2b e13a05ed .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-386 2022/02/02 23:16 upstream 27bb0b18c208 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-386 2022/02/02 20:53 upstream 27bb0b18c208 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-386 2022/02/02 15:02 upstream 9f7fb8de5d9b 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-386 2022/02/02 02:51 upstream 9f7fb8de5d9b 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-386 2022/02/02 01:31 upstream 9f7fb8de5d9b 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-kasan-gce-386 2022/02/01 23:32 upstream 9f7fb8de5d9b 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-this-kasan-gce 2022/02/01 17:39 net 9cef24c8b76c c1c1631d .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/10 13:18 net-next 5a8fb33e5305 0b33604d .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/04 09:04 net-next 9c30918925d7 30646bfe .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/04 04:06 net-next 9c30918925d7 30646bfe .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 21:22 net-next 9c30918925d7 30646bfe .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 20:22 net-next 9c30918925d7 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 16:50 net-next 9c30918925d7 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 14:12 net-next 52dae93f3bad 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 12:47 net-next 52dae93f3bad 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 12:10 net-next 52dae93f3bad 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 08:28 net-next 52dae93f3bad 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 07:11 net-next 52dae93f3bad 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 04:08 net-next 52dae93f3bad 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/03 03:03 net-next 52dae93f3bad 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/02 12:04 net-next 000fe940e51f 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/02 10:14 net-next e4d2763f9aaf 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/02 07:00 net-next e4d2763f9aaf 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/02 03:57 net-next e4d2763f9aaf 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/01 22:24 net-next e4d2763f9aaf 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/01 19:38 net-next 9a90986efcff c1c1631d .config log report info WARNING in sk_stream_kill_queues
ci-upstream-net-kasan-gce 2022/02/01 16:36 net-next 9a90986efcff c1c1631d .config log report info WARNING in sk_stream_kill_queues
ci-upstream-bpf-next-kasan-gce 2021/11/14 14:31 bpf-next 325d956d6717 83f5c9b5 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-bpf-next-kasan-gce 2021/11/10 00:55 bpf-next 5577f24cb04a 55fa030c .config log report info WARNING in sk_stream_kill_queues
ci-upstream-linux-next-kasan-gce-root 2022/02/20 01:38 linux-next ef6b35306dd8 3cd800e4 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-linux-next-kasan-gce-root 2022/02/04 12:20 linux-next ef6b35306dd8 a3e470b2 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-linux-next-kasan-gce-root 2022/02/04 03:02 linux-next 2d3d8c7643a5 30646bfe .config log report info WARNING in sk_stream_kill_queues
ci-upstream-linux-next-kasan-gce-root 2022/02/03 06:08 linux-next 6abab1b81b65 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-linux-next-kasan-gce-root 2022/02/02 16:05 linux-next 6abab1b81b65 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
ci-upstream-linux-next-kasan-gce-root 2022/02/02 05:57 linux-next 6abab1b81b65 4ebb2798 .config log report info WARNING in sk_stream_kill_queues
* Struck through repros no longer work on HEAD.