From: syzbot <syzbot+e326127852f785c44347@syzkaller.appspotmail.com>
To: dccp@vger.kernel.org
Subject: BUG: please report to dccp@vger.kernel.org => prev = 5, last = 5 at net/dccp/ccids/lib/packet_histor
Date: Fri, 12 Oct 2018 07:58:02 +0000 [thread overview]
Message-ID: <000000000000627205057803724d@google.com> (raw)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WARNING: multiple messages have this Message-ID (diff)
From: syzbot <syzbot+e326127852f785c44347@syzkaller.appspotmail.com>
To: davem@davemloft.net, dccp@vger.kernel.org,
garsilva@embeddedor.com, gerrit@erg.abdn.ac.uk,
linux-kernel@vger.kernel.org, netdev@vger.kernel.org,
syzkaller-bugs@googlegroups.com
Subject: BUG: please report to dccp@vger.kernel.org => prev = 5, last = 5 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his
Date: Fri, 12 Oct 2018 00:58:02 -0700 [thread overview]
Message-ID: <000000000000627205057803724d@google.com> (raw)
Hello,
syzbot found the following crash on:
HEAD commit: 771b65e89c8a Add linux-next specific files for 20181011
git tree: linux-next
console output: https://syzkaller.appspot.com/x/log.txt?x=167d2376400000
kernel config: https://syzkaller.appspot.com/x/.config?x=45f1c06c4da0a925
dashboard link: https://syzkaller.appspot.com/bug?extid=e326127852f785c44347
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+e326127852f785c44347@syzkaller.appspotmail.com
BUG: please report to dccp@vger.kernel.org => prev = 5, last = 5 at
net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt()
CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 4.19.0-rc7-next-20181011+ #92
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x244/0x3ab lib/dump_stack.c:113
tfrc_rx_hist_sample_rtt.cold.3+0x54/0x5c
net/dccp/ccids/lib/packet_history.c:422
ccid3_hc_rx_packet_recv+0x5c4/0xeb0 net/dccp/ccids/ccid3.c:767
ccid_hc_rx_packet_recv net/dccp/ccid.h:185 [inline]
dccp_deliver_input_to_ccids+0xf0/0x280 net/dccp/input.c:180
dccp_rcv_established+0x87/0xb0 net/dccp/input.c:378
dccp_v4_do_rcv+0x153/0x180 net/dccp/ipv4.c:656
sk_backlog_rcv include/net/sock.h:932 [inline]
__sk_receive_skb+0x3e0/0xeb0 net/core/sock.c:473
binder: send failed reply for transaction 41 to 27388:27389
dccp_v4_rcv+0x10f9/0x1f58 net/dccp/ipv4.c:877
ip_local_deliver_finish+0x2e9/0xda0 net/ipv4/ip_input.c:215
NF_HOOK include/linux/netfilter.h:289 [inline]
ip_local_deliver+0x1e4/0x740 net/ipv4/ip_input.c:256
dst_input include/net/dst.h:450 [inline]
ip_rcv_finish+0x1f9/0x300 net/ipv4/ip_input.c:415
NF_HOOK include/linux/netfilter.h:289 [inline]
ip_rcv+0xe8/0x600 net/ipv4/ip_input.c:524
__netif_receive_skb_one_core+0x14d/0x200 net/core/dev.c:4908
__netif_receive_skb+0x27/0x1e0 net/core/dev.c:5018
process_backlog+0x24e/0x7a0 net/core/dev.c:5822
napi_poll net/core/dev.c:6242 [inline]
net_rx_action+0x7fa/0x19b0 net/core/dev.c:6308
__do_softirq+0x30d/0xb26 kernel/softirq.c:292
run_ksoftirqd+0x5e/0x100 kernel/softirq.c:654
smpboot_thread_fn+0x68b/0xa00 kernel/smpboot.c:164
kthread+0x35a/0x440 kernel/kthread.c:246
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
dccp_close: ABORT with 52224 bytes unread
binder: send failed reply for transaction 43 to 27399:27404
dccp_close: ABORT with 3584 bytes unread
binder: send failed reply for transaction 45 to 27417:27418
binder: send failed reply for transaction 47 to 27424:27425
dccp_close: ABORT with 105984 bytes unread
dccp_close: ABORT with 105984 bytes unread
dccp_close: ABORT with 105984 bytes unread
nf_conntrack: default automatic helper assignment has been turned off for
security reasons and CT-based firewall rule not found. Use the iptables CT
target to attach helpers instead.
Dead loop on virtual device ip6_vti0, fix it urgently!
Dead loop on virtual device ip6_vti0, fix it urgently!
Dead loop on virtual device ip6_vti0, fix it urgently!
Dead loop on virtual device ip6_vti0, fix it urgently!
Dead loop on virtual device ip6_vti0, fix it urgently!
Dead loop on virtual device ip6_vti0, fix it urgently!
IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid
= 0, id = 0
Dead loop on virtual device ip6_vti0, fix it urgently!
IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid
= 0, id = 0
IPVS: ftp: loaded support on port[0] = 21
\x01: renamed from bpq0
IPVS: ftp: loaded support on port[0] = 21
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.
next reply other threads:[~2018-10-12 7:58 UTC|newest]
Thread overview: 25+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-10-12 7:58 syzbot [this message]
2018-10-12 7:58 ` BUG: please report to dccp@vger.kernel.org => prev = 5, last = 5 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his syzbot
-- strict thread matches above, loose matches on Subject: below --
2021-08-26 16:29 [syzbot] BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/ syzbot
2021-08-26 16:29 ` [syzbot] BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx syzbot
2018-04-08 21:57 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_hi Eric Biggers
2018-04-08 21:57 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_sample_rtt() Eric Biggers
2018-05-06 0:57 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_histor syzbot
2018-05-06 0:57 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his syzbot
2018-05-09 5:05 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_hi Eric Biggers
2018-05-09 5:05 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his Eric Biggers
2018-05-09 5:23 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_hi Dmitry Vyukov
2018-05-09 5:23 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his Dmitry Vyukov
2018-05-09 5:40 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_hi Eric Biggers
2018-05-09 5:40 ` BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his Eric Biggers
2018-10-23 10:13 ` BUG: please report to dccp@vger.kernel.org => prev = 2, last = 2 at net/dccp/ccids/lib/packet_histor syzbot
2018-10-23 10:13 ` BUG: please report to dccp@vger.kernel.org => prev = 2, last = 2 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his syzbot
2019-02-27 0:42 ` BUG: please report to dccp@vger.kernel.org => prev = 2, last = 2 at net/dccp/ccids/lib/packet_hi Eric Biggers
2019-02-27 0:42 ` BUG: please report to dccp@vger.kernel.org => prev = 2, last = 2 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his Eric Biggers
2019-02-27 0:44 ` BUG: please report to dccp@vger.kernel.org => prev = 5, last = 5 at net/dccp/ccids/lib/packet_hi Eric Biggers
2019-02-27 0:44 ` BUG: please report to dccp@vger.kernel.org => prev = 5, last = 5 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_his Eric Biggers
2021-08-30 8:50 ` [syzbot] BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/ Dmitry Vyukov
2021-08-30 8:50 ` [syzbot] BUG: please report to dccp@vger.kernel.org => prev = NUM, last = NUM at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx Dmitry Vyukov
2017-11-05 9:05 BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:LINE/tfrc_rx_hist_sample_rtt() syzbot
2017-12-06 21:40 ` syzbot
2018-01-18 9:34 ` syzbot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=000000000000627205057803724d@google.com \
--to=syzbot+e326127852f785c44347@syzkaller.appspotmail.com \
--cc=dccp@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.