syzbot


WARNING in sk_stream_kill_queues

Status: fixed on 2017/11/07 20:45
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 7749d4ff88d3 net-backports: dccp: purge write queue in dccp_destroy_sock()
First crash: 1896d, last: 1873d
similar bugs (8):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in sk_stream_kill_queues (4) C done done 6 946d 950d 17/24 fixed on 2020/06/30 18:57
upstream WARNING in sk_stream_kill_queues (3) C done 622 1211d 1570d 14/24 fixed on 2019/11/26 19:44
upstream WARNING in sk_stream_kill_queues (7) C 6689 208d 326d 22/24 fixed on 2022/03/08 16:11
upstream WARNING in sk_stream_kill_queues (5) C done 4684 540d 671d 22/24 fixed on 2021/04/09 19:46
upstream WARNING in sk_stream_kill_queues (8) C unreliable 71 2d05h 94d 23/24 upstream: reported C repro on 2022/06/29 17:41
upstream WARNING in sk_stream_kill_queues (2) C 124 1672d 1733d 0/24 closed as dup on 2018/01/03 23:44
upstream WARNING in sk_stream_kill_queues (6) C 11376 326d 540d 22/24 fixed on 2021/11/10 00:50
linux-4.19 WARNING in sk_stream_kill_queues C error 4 90d 194d 0/1 upstream: reported C repro on 2022/03/21 10:58

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 2953 at net/core/stream.c:199 sk_stream_kill_queues+0x3ce/0x520 net/core/stream.c:199
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 2953 Comm: syz-executor0 Not tainted 4.13.0-rc4+ #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:52
 panic+0x1e4/0x417 kernel/panic.c:180
 __warn+0x1c4/0x1d9 kernel/panic.c:541
 report_bug+0x211/0x2d0 lib/bug.c:183
 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:190
 do_trap_no_signal arch/x86/kernel/traps.c:224 [inline]
 do_trap+0x260/0x390 arch/x86/kernel/traps.c:273
 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:310
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:323
 invalid_op+0x1e/0x30 arch/x86/entry/entry_64.S:846
RIP: 0010:sk_stream_kill_queues+0x3ce/0x520 net/core/stream.c:199
RSP: 0018:ffff8801d182f108 EFLAGS: 00010297
RAX: ffff8801d1144140 RBX: ffff8801d13cb280 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff85137b00 RDI: ffff8801d13cb280
RBP: ffff8801d182f148 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d13cb4d0
R13: ffff8801d13cb3b8 R14: ffff8801d13cb300 R15: ffff8801d13cb3b8
 inet_csk_destroy_sock+0x175/0x3f0 net/ipv4/inet_connection_sock.c:835
 dccp_close+0x84d/0xc10 net/dccp/proto.c:1067
 inet_release+0xed/0x1c0 net/ipv4/af_inet.c:425
 sock_release+0x8d/0x1e0 net/socket.c:597
 sock_close+0x16/0x20 net/socket.c:1126
 __fput+0x327/0x7e0 fs/file_table.c:210
 ____fput+0x15/0x20 fs/file_table.c:246
 task_work_run+0x18a/0x260 kernel/task_work.c:116
 exit_task_work include/linux/task_work.h:21 [inline]
 do_exit+0xa32/0x1b10 kernel/exit.c:865
 do_group_exit+0x149/0x400 kernel/exit.c:969
 get_signal+0x7e8/0x17e0 kernel/signal.c:2330
 do_signal+0x94/0x1ee0 arch/x86/kernel/signal.c:808
 exit_to_usermode_loop+0x21c/0x2d0 arch/x86/entry/common.c:157
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath+0x3a7/0x450 arch/x86/entry/common.c:263
 entry_SYSCALL_64_fastpath+0xbc/0xbe
RIP: 0033:0x4512e9
RSP: 002b:00007f63a4be4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00000000007180c8 RCX: 00000000004512e9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000007180c8
RBP: 00000000007180a8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff040cfbef R14: 00007f63a4be59c0 R15: 0000000000000002
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (96):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-kasan-gce 2017/08/12 12:34 net-next aa69ff9e9c32 360f0528 .config log report syz
ci-upstream-kasan-gce 2017/08/06 20:06 upstream 6ea1bc9b1a05 f5040a63 .config log report
ci-upstream-kasan-gce 2017/07/26 02:54 upstream 25f6a53799d6 b0d23a5c .config log report
ci-upstream-kasan-gce 2017/07/23 11:43 upstream 4b162c530d9c eab4e2eb .config log report
ci-upstream-net-kasan-gce 2017/08/16 03:54 net-next 2587b52a7b5a 6a0246bf .config log report
ci-upstream-net-kasan-gce 2017/08/16 03:10 net-next 2587b52a7b5a 6a0246bf .config log report
ci-upstream-net-kasan-gce 2017/08/16 01:28 net-next 2587b52a7b5a 6a0246bf .config log report
ci-upstream-net-kasan-gce 2017/08/15 20:50 net-next 2587b52a7b5a 6a0246bf .config log report
ci-upstream-net-kasan-gce 2017/08/15 10:32 net-next cb44a8606f06 6a0246bf .config log report
ci-upstream-net-kasan-gce 2017/08/14 23:11 net-next f5b589488ea5 6a0246bf .config log report
ci-upstream-net-kasan-gce 2017/08/14 15:07 net-next f5b589488ea5 6a0246bf .config log report
ci-upstream-net-kasan-gce 2017/08/14 09:40 net-next d0225784be6c 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/14 09:20 net-next d0225784be6c 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/14 06:33 net-next d0225784be6c 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/14 04:41 net-next d0225784be6c 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/14 02:18 net-next aa69ff9e9c32 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/13 21:01 net-next aa69ff9e9c32 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/13 11:37 net-next aa69ff9e9c32 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/13 10:11 net-next aa69ff9e9c32 360f0528 .config log report
ci-upstream-net-kasan-gce 2017/08/13 10:09 net-next aa69ff9e9c32 360f0528 .config log report
ci-upstream-next-kasan-gce 2017/08/12 19:05 linux-next 91dfed74eabc 360f0528 .config log report
* Struck through repros no longer work on HEAD.