syzbot

 sign-in | mailing list | source | docs
🐞 Open [978] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12472] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

WARNING in percpu_ref_kill_and_confirm

Status: fixed on 2019/05/27 12:48
Reported-by: syzbot+10d25e23199614b7721f@syzkaller.appspotmail.com
Fix commit: 35fa71a030ca io_uring: fail io_uring_register(2) on a dying io_uring instance
First crash: 1825d, last: 1816d
Cause bisection: introduced by (bisect log) :
commit 38e7571c07be01f9f19b355a9306a4e3d5cb0f5b
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Fri Mar 8 22:48:40 2019 +0000

  Merge tag 'io_uring-2019-03-06' of git://git.kernel.dk/linux-block

Crash: BUG: MAX_STACK_TRACE_ENTRIES too low! (log)
Repro: C syz .config
  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
WARNING in percpu_ref_kill_and_confirm 9 (10) 2019/04/23 14:41
▶ ▼ Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in percpu_ref_kill_and_confirm (2) fs C done 71 1211d 1219d 19/26 fixed on 2021/03/10 01:48

Sample crash report:
------------[ cut here ]------------
percpu_ref_kill_and_confirm called more than once on io_ring_ctx_ref_free!
WARNING: CPU: 1 PID: 7757 at lib/percpu-refcount.c:335 percpu_ref_kill_and_confirm+0x341/0x3b0 lib/percpu-refcount.c:335
Kernel panic - not syncing: panic_on_warn set ...
CPU: 1 PID: 7757 Comm: syz-executor657 Not tainted 5.1.0-rc5+ #78
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x2cb/0x65c kernel/panic.c:214
 __warn.cold+0x20/0x45 kernel/panic.c:571
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:179 [inline]
 fixup_bug arch/x86/kernel/traps.c:174 [inline]
 do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:272
 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:291
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973
RIP: 0010:percpu_ref_kill_and_confirm+0x341/0x3b0 lib/percpu-refcount.c:335
Code: 42 e0 2a 06 01 48 89 fa 48 c1 ea 03 80 3c 02 00 75 76 49 8b 54 24 10 48 c7 c6 a0 71 a1 87 48 c7 c7 40 71 a1 87 e8 ad 92 13 fe <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02
RSP: 0018:ffff8880951f7cf0 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000607f5142f803 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815afcf6 RDI: ffffed1012a3ef90
RBP: ffff8880951f7d20 R08: ffff8880a7c104c0 R09: fffffbfff1133639
R10: fffffbfff1133638 R11: ffffffff8899b1c3 R12: ffff88808632b740
R13: ffff88808632b748 R14: 0000000000000286 R15: 0000000000000000
 percpu_ref_kill include/linux/percpu-refcount.h:128 [inline]
 __io_uring_register+0xa7/0x1fe0 fs/io_uring.c:2937
 __do_sys_io_uring_register fs/io_uring.c:2998 [inline]
 __se_sys_io_uring_register fs/io_uring.c:2980 [inline]
 __x64_sys_io_uring_register+0x193/0x1f0 fs/io_uring.c:2980
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4467c9
Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f5537d67db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
RAX: ffffffffffffffda RBX: 00000000006dbc38 RCX: 00000000004467c9
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003
RBP: 00000000006dbc30 R08: 00007f5537d68700 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc3c
R13: 00007fff6c078c8f R14: 00007f5537d689c0 R15: 20c49ba5e353f7cf
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (443):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/21 05:17 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-root
2019/04/21 05:02 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-root
2019/04/21 04:35 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-root
2019/04/21 04:20 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-root
2019/04/21 04:07 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-root
2019/04/21 03:54 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-root
2019/04/21 03:27 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 02:58 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 02:43 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 02:34 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/21 02:06 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/21 01:51 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce
2019/04/21 01:51 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/21 01:41 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 01:37 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce
2019/04/21 01:35 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/21 01:24 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 01:22 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/21 01:08 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce
2019/04/21 01:07 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/21 00:53 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce
2019/04/21 00:51 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/04/21 00:46 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 00:37 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce
2019/04/21 00:31 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-selinux-root
2019/04/21 00:22 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce
2019/04/21 00:18 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-root
2019/04/21 00:06 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce
2019/04/21 01:49 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-386
2019/04/21 01:33 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-386
2019/04/21 01:05 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-386
2019/04/21 00:49 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-386
2019/04/21 00:33 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-386
2019/04/21 00:17 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-386
2019/04/21 00:00 upstream 9e5de623a0cb b0e8efcb .config console log report syz C ci-upstream-kasan-gce-386
2019/04/28 17:52 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce
2019/04/28 16:49 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce-selinux-root
2019/04/28 15:29 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce-smack-root
2019/04/28 11:42 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce
2019/04/28 10:31 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce
2019/04/28 06:31 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce-selinux-root
2019/04/28 04:08 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce
2019/04/28 02:46 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce-selinux-root
2019/04/27 23:48 upstream 037904a22bf8 b617407b .config console log report ci-upstream-kasan-gce-root
2019/04/27 22:55 upstream baf76f0c58ae b617407b .config console log report ci-upstream-kasan-gce-smack-root
2019/04/27 20:20 upstream baf76f0c58ae b617407b .config console log report ci-upstream-kasan-gce
2019/04/27 15:48 upstream baf76f0c58ae b617407b .config console log report ci-upstream-kasan-gce-smack-root
2019/04/27 14:01 upstream baf76f0c58ae b617407b .config console log report ci-upstream-kasan-gce
2019/04/27 12:02 upstream baf76f0c58ae b617407b .config console log report ci-upstream-kasan-gce-selinux-root
2019/04/27 06:07 upstream d0473f978e61 b617407b .config console log report ci-upstream-kasan-gce-root
2019/04/27 04:19 upstream d0473f978e61 b617407b .config console log report ci-upstream-kasan-gce
2019/04/27 01:27 upstream d0473f978e61 b617407b .config console log report ci-upstream-kasan-gce
2019/04/26 22:15 upstream d0473f978e61 b617407b .config console log report ci-upstream-kasan-gce
2019/04/26 18:54 upstream d0473f978e61 b617407b .config console log report ci-upstream-kasan-gce
2019/04/26 14:26 upstream 8113a85f8720 b617407b .config console log report ci-upstream-kasan-gce-root
2019/04/26 09:29 upstream 8113a85f8720 b617407b .config console log report ci-upstream-kasan-gce
2019/04/26 05:17 upstream 8113a85f8720 b617407b .config console log report ci-upstream-kasan-gce-root
2019/04/26 03:01 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce-smack-root
2019/04/26 02:36 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce
2019/04/26 01:16 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce
2019/04/25 23:31 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce
2019/04/25 20:34 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce
2019/04/25 19:31 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce-root
2019/04/25 17:50 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce-smack-root
2019/04/25 15:30 upstream cd8dead0c394 f46aabc8 .config console log report ci-upstream-kasan-gce-selinux-root
2019/04/20 23:21 upstream 9e5de623a0cb b0e8efcb .config console log report ci-upstream-kasan-gce-selinux-root
2019/04/27 17:26 upstream baf76f0c58ae b617407b .config console log report ci-upstream-kasan-gce-386
2019/04/27 10:21 upstream baf76f0c58ae b617407b .config console log report ci-upstream-kasan-gce-386
2019/04/27 04:45 upstream d0473f978e61 b617407b .config console log report ci-upstream-kasan-gce-386
2019/04/26 16:03 upstream 8113a85f8720 b617407b .config console log report ci-upstream-kasan-gce-386
2019/04/25 22:16 upstream f6f3e747454f f46aabc8 .config console log report ci-upstream-kasan-gce-386
2019/04/29 07:36 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/29 07:13 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/29 03:13 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/29 02:09 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/29 00:40 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/28 18:56 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/28 14:05 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/28 08:33 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/27 21:26 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/27 19:01 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/27 00:04 linux-next 3ddfa8af5dc9 b617407b .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.