syzbot


WARNING in inet_csk_destroy_sock (3)

Status: fixed on 2023/05/27 00:56
Subsystems: net
[Documentation on labels]
Fix commit: e0833d1fedb0 dccp/tcp: Fixup bhash2 bucket when connect() fails.
First crash: 337d, last: 337d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in inet_csk_destroy_sock (5) net 1 96d 96d 26/26 fixed on 2024/03/26 17:39
upstream WARNING in inet_csk_destroy_sock (2) io-uring net C done 8 476d 563d 22/26 fixed on 2023/02/24 13:50
upstream WARNING in inet_csk_destroy_sock (4) net 2 195d 261d 0/26 closed as invalid on 2023/12/14 11:36
upstream WARNING in inet_csk_destroy_sock net 1 680d 680d 0/26 auto-closed as invalid on 2022/09/14 07:34

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 9065 at net/ipv4/inet_connection_sock.c:1193 inet_csk_destroy_sock+0x378/0x434 net/ipv4/inet_connection_sock.c:1193
Modules linked in:
CPU: 0 PID: 9065 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-gf1fcbaa18b28 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : inet_csk_destroy_sock+0x378/0x434 net/ipv4/inet_connection_sock.c:1193
lr : inet_csk_destroy_sock+0x378/0x434 net/ipv4/inet_connection_sock.c:1193
sp : ffff80002e4b7730
x29: ffff80002e4b7730 x28: dfff800000000000 x27: 1fffe0001a7a9b75
x26: 1fffe000269f5304 x25: 0000000100000201 x24: 0000000100000201
x23: dfff800000000000 x22: 0000000000000007 x21: ffff000132c55cc0
x20: ffff000132c562e8 x19: ffff000132c55c40 x18: ffff80002e4b7d28
x17: 0000000000000000 x16: ffff800008508e2c x15: 0000000000000000
x14: ffff800015eb0570 x13: dfff800000000000 x12: ffff700005c96ed8
x11: 0000000000000201 x10: 0000000000000000 x9 : 0000000000000000
x8 : ffff0000cbb1d340 x7 : ffff800011959194 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000083281d0
x2 : 0000000000000001 x1 : 000000000000a83e x0 : 0000000000000000
Call trace:
 inet_csk_destroy_sock+0x378/0x434 net/ipv4/inet_connection_sock.c:1193
 dccp_close+0x8f8/0xc34 net/dccp/proto.c:1065
 inet_release+0x160/0x1d0 net/ipv4/af_inet.c:426
 __sock_release net/socket.c:653 [inline]
 sock_close+0xb8/0x1fc net/socket.c:1397
 __fput+0x30c/0x7bc fs/file_table.c:321
 ____fput+0x20/0x30 fs/file_table.c:349
 task_work_run+0x230/0x2e0 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x2180/0x3c90 arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x90/0x15c arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
irq event stamp: 3067
hardirqs last  enabled at (3065): [<ffff8000081cffb8>] __local_bh_enable_ip+0x24c/0x4ac kernel/softirq.c:401
hardirqs last disabled at (3067): [<ffff80001242c39c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (3064): [<ffff800010618f9c>] spin_unlock_bh include/linux/spinlock.h:395 [inline]
softirqs last  enabled at (3064): [<ffff800010618f9c>] release_sock+0x15c/0x1b0 net/core/sock.c:3495
softirqs last disabled at (3066): [<ffff8000119596c4>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/05/25 18:41 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci f1fcbaa18b28 0513b3e6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in inet_csk_destroy_sock
* Struck through repros no longer work on HEAD.