syzbot

 sign-in | mailing list | source | docs
🐞 Open [196]
🐞 Fixed [42]
🐞 Invalid [470]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

WARNING in tcp_close

Status: public: reported syz repro on 2019/06/14 00:50
Reported-by: syzbot+32cf18680cbb8ac7e82c@syzkaller.appspotmail.com
First crash: 2331d, last: 2202d
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in tcp_close net -1 syz 284 2565d 2665d 11/29 fixed on 2018/11/12 21:25
android-414 WARNING in tcp_close -1 syz 10 2534d 2394d 0/1 public: reported syz repro on 2019/04/12 00:01
android-44 WARNING in tcp_close -1 syz 17 2163d 2331d 0/2 public: reported syz repro on 2019/06/14 04:14

Sample crash report:
audit: type=1400 audit(1571609794.725:5): avc:  denied  { associate } for  pid=2059 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4546 at net/ipv4/tcp.c:2193 tcp_close+0xd1e/0x10b0 net/ipv4/tcp.c:2193
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 4546 Comm: syz-executor.0 Not tainted 4.9.194+ #0
 ffff8801c6acfb90 ffffffff81b67001 0000000000000000 ffffffff82a3b3c0
 00000000ffffffff 0000000000000000 0000000000000009 ffff8801c6acfc70
 ffffffff813fef3a 0000000041b58ab3 ffffffff82e32f55 ffffffff813fed61
Call Trace:
 [<000000005bd0033f>] __dump_stack lib/dump_stack.c:15 [inline]
 [<000000005bd0033f>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<0000000023045872>] panic+0x1d9/0x3bd kernel/panic.c:180
 [<00000000c5e75239>] __warn.cold+0x2f/0x2f kernel/panic.c:546
 [<000000007d861752>] warn_slowpath_null+0x2d/0x40 kernel/panic.c:589
 [<00000000e04c3737>] tcp_close+0xd1e/0x10b0 net/ipv4/tcp.c:2193
 [<00000000a4a058c4>] inet_release+0xf2/0x1c0 net/ipv4/af_inet.c:430
 [<000000003e297120>] inet6_release+0x53/0x80 net/ipv6/af_inet6.c:455
 [<000000003b4986f3>] __sock_release+0xd3/0x2c0 net/socket.c:605
 [<000000006fdc91c0>] sock_close+0x1b/0x30 net/socket.c:1060
 [<00000000d5c6e10d>] __fput+0x274/0x720 fs/file_table.c:208
 [<0000000000bb4b7b>] ____fput+0x16/0x20 fs/file_table.c:244
 [<00000000160adbef>] task_work_run+0x108/0x180 kernel/task_work.c:116
 [<000000000b78d0c7>] tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 [<000000000b78d0c7>] exit_to_usermode_loop+0x13b/0x160 arch/x86/entry/common.c:163
 [<000000006f147598>] prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 [<000000006f147598>] syscall_return_slowpath arch/x86/entry/common.c:266 [inline]
 [<000000006f147598>] do_syscall_64+0x3ab/0x5c0 arch/x86/entry/common.c:293
 [<000000008a7f813f>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (21):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/20 22:20 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 8c88c9c1 .config console log report syz ci-android-49-kasan-gce-root
2019/09/14 16:22 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 32d59357 .config console log report syz ci-android-49-kasan-gce
2019/09/14 16:19 https://android.googlesource.com/kernel/common android-4.9 bb1c7f3a1ca8 32d59357 .config console log report syz ci-android-49-kasan-gce-root
2019/08/26 10:30 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d21c5d9d .config console log report syz ci-android-49-kasan-gce
2019/08/22 00:13 https://android.googlesource.com/kernel/common android-4.9 9e50cb052183 984250d5 .config console log report syz ci-android-49-kasan-gce-root
2019/08/21 16:58 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 4ea67ff8 .config console log report syz ci-android-49-kasan-gce
2019/08/21 16:48 https://android.googlesource.com/kernel/common android-4.9 9e50cb052183 4ea67ff8 .config console log report syz ci-android-49-kasan-gce-root
2019/08/02 19:38 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 835dffe7 .config console log report syz ci-android-49-kasan-gce
2019/06/14 01:06 https://android.googlesource.com/kernel/common android-4.9 b8f2f4b8f6d7 a139f92f .config console log report syz ci-android-49-kasan-gce-root
2019/06/14 00:32 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a139f92f .config console log report syz ci-android-49-kasan-gce
2019/10/20 21:56 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 8c88c9c1 .config console log report syz ci-android-49-kasan-gce-386
2019/09/14 19:47 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 32d59357 .config console log report syz ci-android-49-kasan-gce-386
2019/08/26 10:31 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d21c5d9d .config console log report syz ci-android-49-kasan-gce-386
2019/08/21 14:31 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 4ea67ff8 .config console log report syz ci-android-49-kasan-gce-386
2019/06/14 01:10 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a139f92f .config console log report syz ci-android-49-kasan-gce-386
2019/10/11 22:49 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 426631dd .config console log report ci-android-49-kasan-gce
2019/09/10 03:19 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a60cb4cd .config console log report ci-android-49-kasan-gce
2019/08/02 18:57 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 835dffe7 .config console log report ci-android-49-kasan-gce
2019/06/13 23:49 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a139f92f .config console log report ci-android-49-kasan-gce
2019/08/27 09:27 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d21c5d9d .config console log report ci-android-49-kasan-gce-386
2019/08/21 13:48 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 4ea67ff8 .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.