syzbot


WARNING in inet_sock_destruct (2)

Status: upstream: reported C repro on 2025/01/28 09:26
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+c1a0107529554d81d3a6@syzkaller.appspotmail.com
First crash: 111d, last: 3d09h
Bug presence (2)
Date Name Commit Repro Result
2025/03/14 linux-6.1.y (ToT) 344a09659766 C [report] WARNING in inet_sock_destruct
2025/03/14 upstream (ToT) e3a854b577cb C Didn't crash
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 WARNING in inet_sock_destruct C 728 2454d 2229d 0/3 public: reported C repro on 2019/04/12 00:00
android-44 WARNING in inet_sock_destruct 12 2463d 2675d 0/2 auto-closed as invalid on 2019/02/22 12:37
upstream WARNING in inet_sock_destruct (4) net C done 6438 4h07m 696d 0/28 upstream: reported C repro on 2023/06/23 14:36
upstream WARNING in inet_sock_destruct (3) net C 87 714d 817d 22/28 fixed on 2023/06/08 14:41
linux-5.15 WARNING in inet_sock_destruct origin:lts-only C inconclusive 2055 8d12h 741d 0/3 upstream: reported C repro on 2023/05/08 19:19
linux-6.1 WARNING in inet_sock_destruct origin:upstream missing-backport C done 631 155d 768d 3/3 fixed on 2025/01/27 09:36
upstream WARNING in inet_sock_destruct (2) net C unreliable unreliable 1259 1013d 1644d 0/28 closed as invalid on 2022/10/12 18:26
upstream WARNING in inet_sock_destruct net 5893 2757d 2752d 0/28 closed as invalid on 2018/01/30 22:53
linux-4.14 WARNING in inet_sock_destruct C inconclusive 1 1813d 1873d 0/1 upstream: reported C repro on 2020/04/02 03:04
Fix bisection attempts (1)
Created Duration User Patch Repo Result
2025/04/03 15:22 19m fix candidate upstream error job log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x580/0x678 net/ipv4/af_inet.c:154
Modules linked in:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.138-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : inet_sock_destruct+0x580/0x678 net/ipv4/af_inet.c:154
lr : inet_sock_destruct+0x580/0x678 net/ipv4/af_inet.c:154
sp : ffff800008007c80
x29: ffff800008007c90 x28: ffff0000d68d2b28 x27: dfff800000000000
x26: 1fffe0001ad1a4f4 x25: dfff800000000000 x24: ffff0000d68d2640
x23: 1fffe0001ad1a4cd x22: 0000000000000007 x21: 0000000000000000
x20: 0000000000000fff x19: 0000000000000000 x18: ffff800011a7bd00
x17: ffff800008549090 x16: ffff8000082d1408 x15: ffff8000081efc84
x14: 0000000000000000 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100
x11: ff008000104ff290 x10: 0000000000000000 x9 : ffff8000104ff290
x8 : ffff800015094800 x7 : ffff800008370454 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000104ff0dc
x2 : 0000000000000000 x1 : 0000000000000fff x0 : 0000000000000000
Call trace:
 inet_sock_destruct+0x580/0x678 net/ipv4/af_inet.c:154
 inet6_sock_destruct+0x28/0x38 net/ipv6/af_inet6.c:115
 __sk_destruct+0x5c/0x760 net/core/sock.c:2142
 rcu_do_batch kernel/rcu/tree.c:2297 [inline]
 rcu_core+0x81c/0x18ac kernel/rcu/tree.c:2557
 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2574
 handle_softirqs+0x318/0xc6c kernel/softirq.c:578
 __do_softirq+0x14/0x20 kernel/softirq.c:612
 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893
 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85
 invoke_softirq kernel/softirq.c:459 [inline]
 __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:661
 irq_exit_rcu+0x14/0x84 kernel/softirq.c:673
 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline]
 el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581
 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35
 default_idle_call+0x68/0xdc kernel/sched/idle.c:109
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x1d8/0x4bc kernel/sched/idle.c:303
 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:401
 rest_init+0x2d4/0x2f0 init/main.c:733
 start_kernel+0x0/0x554 init/main.c:893
 start_kernel+0x4a4/0x554 init/main.c:1140
 __primary_switched+0xb8/0xc0 arch/arm64/kernel/head.S:468
irq event stamp: 134675
hardirqs last  enabled at (134674): [<ffff8000119ffc94>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (134674): [<ffff8000119ffc94>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (134675): [<ffff800011914990>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (134626): [<ffff8000081a85c0>] softirq_handle_end kernel/softirq.c:421 [inline]
softirqs last  enabled at (134626): [<ffff8000081a85c0>] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:606
softirqs last disabled at (134645): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:612
---[ end trace 0000000000000000 ]---

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/16 06:50 linux-6.1.y 02b72ccb5f9d cfde8269 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in inet_sock_destruct
2025/01/28 12:13 linux-6.1.y 75cefdf153f5 18070896 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in inet_sock_destruct
2025/03/03 15:38 linux-6.1.y 3a8358583626 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in inet_sock_destruct
2025/02/24 16:22 linux-6.1.y 3a8358583626 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in inet_sock_destruct
2025/05/16 05:35 linux-6.1.y 02b72ccb5f9d cfde8269 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in inet_sock_destruct
2025/01/28 09:26 linux-6.1.y 75cefdf153f5 18070896 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in inet_sock_destruct
* Struck through repros no longer work on HEAD.