diff options
| author | Dmitry Vyukov <dvyukov@google.com> | 2018-02-01 15:49:05 +0100 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2018-02-01 15:49:05 +0100 |
| commit | e525e980eaed440e278614b9e887270ca67d2dde (patch) | |
| tree | 773c1f54a4ed6c1a26697a620fa9ef2e492f9c85 /pkg/report/testdata/linux | |
| parent | 9b1e75c0bca1d22b91dbbe645620ffdd7a245a68 (diff) | |
pkg/report: add more TODO cases
Diffstat (limited to 'pkg/report/testdata/linux')
| -rw-r--r-- | pkg/report/testdata/linux/report/157 | 172 | ||||
| -rw-r--r-- | pkg/report/testdata/linux/report/158 | 116 | ||||
| -rw-r--r-- | pkg/report/testdata/linux/report/159 | 88 |
3 files changed, 376 insertions, 0 deletions
diff --git a/pkg/report/testdata/linux/report/157 b/pkg/report/testdata/linux/report/157 new file mode 100644 index 000000000..f725b6983 --- /dev/null +++ b/pkg/report/testdata/linux/report/157 @@ -0,0 +1,172 @@ +# TODO: must be "WARNING in sctp_wfree", or "WARNING in refcount_sub_and_test in sctp_wfree", +# or "WARNING: refcount bug in sctp_wfree". +TITLE: WARNING in refcount_sub_and_test + +[ 44.461565] refcount_t: underflow; use-after-free. +[ 44.466577] ------------[ cut here ]------------ +[ 44.471332] WARNING: CPU: 1 PID: 2992 at lib/refcount.c:186 refcount_sub_and_test+0x167/0x1b0 +[ 44.479978] Kernel panic - not syncing: panic_on_warn set ... +[ 44.479978] +[ 44.487309] CPU: 1 PID: 2992 Comm: syzkaller263121 Not tainted 4.14.0-rc5+ #91 +[ 44.494631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 +[ 44.503948] Call Trace: +[ 44.506504] dump_stack+0x194/0x257 +[ 44.510098] ? arch_local_irq_restore+0x53/0x53 +[ 44.514735] panic+0x1e4/0x417 +[ 44.517892] ? __warn+0x1d9/0x1d9 +[ 44.521307] ? show_regs_print_info+0x65/0x65 +[ 44.525774] ? refcount_sub_and_test+0x167/0x1b0 +[ 44.530498] __warn+0x1c4/0x1d9 +[ 44.533743] ? refcount_sub_and_test+0x167/0x1b0 +[ 44.538466] report_bug+0x211/0x2d0 +[ 44.542078] fixup_bug+0x40/0x90 +[ 44.545410] do_trap+0x260/0x390 +[ 44.548743] do_error_trap+0x120/0x390 +[ 44.552593] ? vprintk_emit+0x49b/0x590 +[ 44.556537] ? do_trap+0x390/0x390 +[ 44.560045] ? refcount_sub_and_test+0x167/0x1b0 +[ 44.564766] ? vprintk_emit+0x3ea/0x590 +[ 44.568710] ? trace_hardirqs_off_thunk+0x1a/0x1c +[ 44.573519] do_invalid_op+0x1b/0x20 +[ 44.577201] invalid_op+0x18/0x20 +[ 44.580618] RIP: 0010:refcount_sub_and_test+0x167/0x1b0 +[ 44.585944] RSP: 0018:ffff8801d1f4e9c8 EFLAGS: 00010282 +[ 44.591271] RAX: 0000000000000026 RBX: 0000000000000001 RCX: 0000000000000000 +[ 44.598504] RDX: 0000000000000026 RSI: 1ffff1003a3e9cf9 RDI: ffffed003a3e9d2d +[ 44.605737] RBP: ffff8801d1f4ea58 R08: 0000000000000000 R09: 1ffff1003a3e9ccb +[ 44.612969] R10: ffff8801d1f4e7f8 R11: ffffffff85b2cb78 R12: 1ffff1003a3e9d3a +[ 44.620203] R13: 00000000ffffff01 R14: 0000000000000100 R15: ffff8801d1d16a3c +[ 44.627449] ? refcount_sub_and_test+0x167/0x1b0 +[ 44.632170] ? refcount_inc+0x50/0x50 +[ 44.635936] ? __sctp_outq_teardown+0xa5b/0x1230 +[ 44.640656] ? sctp_association_free+0x2d0/0x930 +[ 44.645375] ? sctp_do_sm+0x271b/0x6a30 +[ 44.649313] ? sctp_primitive_SHUTDOWN+0xa0/0xd0 +[ 44.654031] ? sctp_close+0x3c6/0x980 +[ 44.657795] ? inet_release+0xed/0x1c0 +[ 44.661648] ? sock_release+0x8d/0x1e0 +[ 44.665498] ? sock_close+0x16/0x20 +[ 44.669090] sctp_wfree+0x183/0x620 +[ 44.672685] ? entry_SYSCALL_64_fastpath+0xbc/0xbe +[ 44.677580] ? __sctp_write_space+0x910/0x910 +[ 44.682043] skb_release_head_state+0x124/0x200 +[ 44.686676] skb_release_all+0x15/0x60 +[ 44.690528] consume_skb+0x153/0x490 +[ 44.694202] ? sctp_chunk_put+0x99/0x420 +[ 44.698226] ? alloc_skb_with_frags+0x750/0x750 +[ 44.702858] ? sctp_chunk_hold+0x20/0x20 +[ 44.706884] ? sctp_sched_dequeue_common+0x2aa/0x5d0 +[ 44.711952] ? refcount_sub_and_test+0x115/0x1b0 +[ 44.716672] ? refcount_inc+0x50/0x50 +[ 44.720440] ? trace_hardirqs_off+0xd/0x10 +[ 44.724641] ? quarantine_put+0xeb/0x190 +[ 44.728672] sctp_chunk_put+0x29c/0x420 +[ 44.732615] ? sctp_chunk_hold+0x20/0x20 +[ 44.736643] ? sctp_transport_dst_confirm+0x50/0x50 +[ 44.741627] ? sctp_sched_fcfs_dequeue+0x198/0x290 +[ 44.746522] ? sctp_sched_dequeue_common+0x5d0/0x5d0 +[ 44.751594] sctp_chunk_free+0x53/0x60 +[ 44.755448] __sctp_outq_teardown+0xa5b/0x1230 +[ 44.759997] ? sctp_inq_set_th_handler+0x1b0/0x1b0 +[ 44.764894] ? debug_check_no_locks_freed+0x3c0/0x3c0 +[ 44.770054] ? check_preempt_wakeup+0x1320/0x1320 +[ 44.774873] ? debug_check_no_locks_freed+0x3c0/0x3c0 +[ 44.780030] ? default_wake_function+0x30/0x50 +[ 44.784576] ? autoremove_wake_function+0x78/0x350 +[ 44.789471] ? finish_wait+0x490/0x490 +[ 44.793325] ? lock_acquire+0x1d5/0x580 +[ 44.797266] ? lock_acquire+0x1d5/0x580 +[ 44.801206] ? lock_acquire+0x1d5/0x580 +[ 44.805147] ? __wake_up_common_lock+0x1c2/0x310 +[ 44.809879] ? lock_acquire+0x1d5/0x580 +[ 44.813821] ? sock_def_wakeup+0x1f9/0x350 +[ 44.818023] ? lock_downgrade+0x990/0x990 +[ 44.822138] ? lock_release+0xa40/0xa40 +[ 44.826078] ? trace_raw_output_tick_stop+0x130/0x130 +[ 44.831234] sctp_outq_free+0x15/0x20 +[ 44.834999] sctp_association_free+0x2d0/0x930 +[ 44.839548] ? sctp_asconf_queue_teardown+0x700/0x700 +[ 44.844704] ? sock_def_wakeup+0x222/0x350 +[ 44.848907] ? sk_dst_check+0x560/0x560 +[ 44.852852] ? lock_release+0xa40/0xa40 +[ 44.856794] ? bpf_prog_kallsyms_find+0xbd/0x440 +[ 44.861519] sctp_do_sm+0x271b/0x6a30 +[ 44.865286] ? lock_acquire+0x1d5/0x580 +[ 44.869227] ? is_bpf_text_address+0x7b/0x120 +[ 44.873691] ? sctp_do_8_2_transport_strike.isra.16+0x8a0/0x8a0 +[ 44.879718] ? debug_check_no_locks_freed+0x3c0/0x3c0 +[ 44.884875] ? do_raw_spin_trylock+0x190/0x190 +[ 44.889429] ? debug_check_no_locks_freed+0x3c0/0x3c0 +[ 44.894592] ? lock_acquire+0x1d5/0x580 +[ 44.898532] ? lock_acquire+0x1d5/0x580 +[ 44.902469] ? skb_dequeue+0x12a/0x180 +[ 44.906323] ? lock_downgrade+0x990/0x990 +[ 44.910438] ? do_raw_spin_trylock+0x190/0x190 +[ 44.914986] ? lock_release+0xa40/0xa40 +[ 44.918928] ? trace_hardirqs_on+0xd/0x10 +[ 44.923045] sctp_primitive_SHUTDOWN+0xa0/0xd0 +[ 44.927595] sctp_close+0x3c6/0x980 +[ 44.931192] ? sctp_apply_peer_addr_params+0xf30/0xf30 +[ 44.936438] ? debug_check_no_locks_freed+0x3c0/0x3c0 +[ 44.941593] ? lock_downgrade+0x990/0x990 +[ 44.945705] ? lock_downgrade+0x990/0x990 +[ 44.949821] ? locks_remove_file+0x3fa/0x5a0 +[ 44.954195] ? fcntl_setlk+0x10c0/0x10c0 +[ 44.958223] ? bsearch+0x83/0xa0 +[ 44.961555] ? __fsnotify_parent+0xb4/0x3a0 +[ 44.965841] ? ip_mc_drop_socket+0x1ce/0x230 +[ 44.970218] inet_release+0xed/0x1c0 +[ 44.973901] sock_release+0x8d/0x1e0 +[ 44.977581] ? sock_release+0x1e0/0x1e0 +[ 44.981521] sock_close+0x16/0x20 +[ 44.984942] __fput+0x327/0x7e0 +[ 44.988190] ? fput+0x140/0x140 +[ 44.991441] ____fput+0x15/0x20 +[ 44.994686] task_work_run+0x199/0x270 +[ 44.998539] ? task_work_cancel+0x210/0x210 +[ 45.002829] ? __do_page_fault+0x3d6/0xd60 +[ 45.007032] get_signal+0x1343/0x16d0 +[ 45.010798] ? mm_fault_error+0x2c0/0x2c0 +[ 45.014910] ? ptrace_notify+0x130/0x130 +[ 45.018935] ? do_page_fault+0xee/0x720 +[ 45.022874] ? __do_page_fault+0xd60/0xd60 +[ 45.027072] ? do_page_fault+0xee/0x720 +[ 45.031011] ? __do_page_fault+0xd60/0xd60 +[ 45.035210] ? lock_acquire+0x1d5/0x580 +[ 45.039147] ? lock_acquire+0x1d5/0x580 +[ 45.043093] do_signal+0x94/0x1ee0 +[ 45.046597] ? lock_acquire+0x1d5/0x580 +[ 45.050533] ? lock_acquire+0x1d5/0x580 +[ 45.054470] ? put_unused_fd+0x62/0x70 +[ 45.058322] ? lock_downgrade+0x990/0x990 +[ 45.062437] ? setup_sigcontext+0x7d0/0x7d0 +[ 45.066722] ? do_raw_spin_trylock+0x190/0x190 +[ 45.071271] ? task_work_add+0x10e/0x1b0 +[ 45.075296] ? __put_unused_fd+0x183/0x250 +[ 45.079498] ? alloc_fdtable+0x280/0x280 +[ 45.083524] ? cpumask_weight.constprop.3+0x45/0x45 +[ 45.088509] ? _copy_to_user+0xa2/0xc0 +[ 45.092398] ? _raw_spin_unlock+0x22/0x30 +[ 45.096511] ? fput+0xd2/0x140 +[ 45.099669] ? SYSC_accept4+0x4ec/0x850 +[ 45.103622] ? kernel_accept+0x2f0/0x2f0 +[ 45.107668] exit_to_usermode_loop+0x214/0x310 +[ 45.112219] ? trace_event_raw_event_sys_exit+0x260/0x260 +[ 45.117728] syscall_return_slowpath+0x42f/0x510 +[ 45.122448] ? finish_task_switch+0x1aa/0x740 +[ 45.126907] ? prepare_exit_to_usermode+0x2d0/0x2d0 +[ 45.131889] ? prepare_exit_to_usermode+0x1a0/0x2d0 +[ 45.136869] ? perf_trace_sys_enter+0xc20/0xc20 +[ 45.141502] ? trace_hardirqs_on_thunk+0x1a/0x1c +[ 45.146226] entry_SYSCALL_64_fastpath+0xbc/0xbe +[ 45.150944] RIP: 0033:0x446539 +[ 45.154099] RSP: 002b:00007f402614bdc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000120 +[ 45.161772] RAX: fffffffffffffff2 RBX: 0000000000000000 RCX: 0000000000446539 +[ 45.169007] RDX: 0000000020137ffc RSI: 0000000020b53ff0 RDI: 0000000000000003 +[ 45.176244] RBP: 0000000000000000 R08: 00007f402614c700 R09: 00007f402614c700 +[ 45.183479] R10: 0000000000080000 R11: 0000000000000202 R12: 0000000000000000 +[ 45.190717] R13: 00000000007efe7f R14: 00007f402614c9c0 R15: 0000000000000000 +[ 45.198315] Dumping ftrace buffer: +[ 45.201822] (ftrace buffer empty) +[ 45.205500] Kernel Offset: disabled +[ 45.209092] Rebooting in 86400 seconds.. diff --git a/pkg/report/testdata/linux/report/158 b/pkg/report/testdata/linux/report/158 new file mode 100644 index 000000000..afe9ccbec --- /dev/null +++ b/pkg/report/testdata/linux/report/158 @@ -0,0 +1,116 @@ +# TODO: must be "WARNING: refcount bug in dev_activate". +TITLE: WARNING in refcount_inc + +[ 359.890494] refcount_t: increment on 0; use-after-free. +[ 359.914113] ------------[ cut here ]------------ +[ 359.919670] WARNING: CPU: 0 PID: 28200 at lib/refcount.c:152 refcount_inc+0x47/0x50 +2017/08/31 09:09:03 executing program 2: +mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) +r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) +r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007000-0xa)="2f6465762f70746d7800", 0x20003, 0x0) +mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) +r2 = dup(r1) +ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00001bb000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) +ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000e85000)=0x0) +ioctl$TIOCSCTTY(r2, 0x540e, 0x800) +r3 = socket$inet(0x2, 0x2, 0x0) +getsockopt$sock_int(r2, 0x1, 0x200000000032, &(0x7f0000a1d000-0x4)=0x0, &(0x7f0000a8f000-0x4)=0x4) +r4 = socket$kcm(0x29, 0x5, 0x0) +writev(r4, &(0x7f0000e5b000)=[{&(0x7f0000c7c000)="4ab6b00b23359a6a25d060bfd09f633f4929df8bc1ea04c19cbf9ca9d96e33a184a46f0c6ebed565a793332077fe2005e180962553f6486616c22bc8254220dcf916a833f31ef38227acf2f47170ba7143635a1b91eb4504b1febc6a5789c926a809ad57545373ebcc5b1e9ccffbd8192fc721baa2107595f09b4124d7a14159d1ae2203ccd768e901cf3ac21e0d6a12da29ede746be4fce5a1911b2b8895096cac5186eadefe76d2077f44ff2feb7a5e448863220679bc1e8f58bec3b0a40f55371d1b2a7d542716928c6846de42bafc6cc093dcc4ac44d52618da3fd190dad7af93dd999a79b716597e6feda6369a5d53a12c332d1f1", 0xf7}, {&(0x7f0000ef7000)="8a7c9f32c556f72679a2062cb55358182e1dd7e13c49536e92899dea88490bae49c8cf792959d550c602fd9cce8ad6ac930a16b02d14b4555e4f5df016716514e7df686782df9af01e0b1735eef3e21e9f34419fba568230027d945d223ac5cadd9bdd1dd9b2c5bd826f452b67cb95550d3e5076cf9cef5857ba9923a369e319b7289ad5c216a3991abd01c9647f602e33a84b26e1e086da95299f7983604e39a5dc02a5b188f0a85a08dd290895e44c6d74f4be8613399baa5cf0bf731cda420f26b40d7324", 0xc6}, {&(0x7f0000d7b000-0xf7)="3a90cea993628e38282a20eaf9243cfb3498f39b3a64df551ab649ce086b8ee95f6fb3d0f9be8b8f648c78027908ca2d6c46a3ee8cf83d695c132f64ad4be84fcc93d47ea38de50d219e43e668a4574b5870b06f353e64334b2342b1cd97f9ed21e79ad77839270fcd95e37f97e97b42b0c365d82da33c2f98141c97449382ff2f06457e9b9f2299393ccccd8a6bd9a524aefb7b816e0e2b8b556b62a5669de8ba2d82fa956941da2647b83e86a78631e2ea04756ec340e0d51a3fa95e162c2040b7d6895b18d72e7c56593bf6906324188c904786705384443d89137af988acc6257654c0a95f4e45080ba481949f0d8e27c4ff3bd537", 0xf7}, {&(0x7f000023d000-0x8d)="ef1e47bc1b92b8aa3ee83fe3d494dfe12a2f72e8d6d2f28035a4e80ad64d24b7d18d26fc03d2b5ba48cff12f44a43114c6bb5d4478816589820e215929a5e7af69ef374de43bf3e18ab0e24ea599618415e6a937c11ec1b9aecdda619370f68e3de7c8b4803635dd196a14fa172c807d185b464083743dd59146d48ac7d3bc193f85eda847a963b3900de205d3", 0x8d}, {&(0x7f00005c3000-0x4d)="f198f10b08173e545f9033f2472d72055a780614aa9e45ef68d4a9d9f42e048770033930435e39bb04801d080488a522006dc1b10978daf10de9ce9408ad741c36b21dea713b803fb15bf04959", 0x4d}], 0x5) +fsync(r3) +mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) +perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) +r5 = syz_open_dev$sndtimer(&(0x7f0000000000)="2f6465762f736e642f74696d657200", 0x0, 0x0) +getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000bbf000)={<r6=>0x0, 0x20, 0x1000, 0x3, 0x7, 0x1800000000}, &(0x7f0000025000-0x4)=0x14) +setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f000005d000-0x14)={r6, 0x1, 0xffffffff, 0xfffffffffffffffa, 0x80000, 0x3ff}, 0x14) +ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000f88000-0x48)={{0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) +ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00007a9000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") +ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00006d2000-0x4)={r3}) +r7 = socket$netlink(0x10, 0x3, 0xb) +mkdir(&(0x7f000028c000-0x8)="2e2f66696c653000", 0x82) +writev(r7, &(0x7f00004a4000)=[{&(0x7f0000aea000-0x39)="390000001300194700bb61e1c305000040000200050000000000000080000900130001000000ff00280fe20000000000000000000000000ad670", 0x3a}], 0x1) +sendto$llc(r2, &(0x7f0000cde000)="993812b205fe34116b1bbe2cafa830e4cb8d5daf991e3c42e1c54d368363207f5f7f6b99e8970d953bc11ddaa01362e3ad69fb5174f000f78bb5f001fd462e3c68438a5f01117ee10fc8975a828c91a5bcadce8f1b80090fcae973289c27c5cd0129475c6140133664df66e4b1e06d8313946dcba4664a5a259e34797e95b9", 0x7f, 0x20040841, &(0x7f000042f000-0x10)={0x1a, 0x17, 0xadef, 0x3, 0x7, 0x3f, @random="573a697a8ca5", [0x0, 0x0]}, 0x10) +fstat(r0, &(0x7f00004fc000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) +socketpair$ax25(0x3, 0x3, 0xc4, &(0x7f000095a000)={0xffffffffffffffff, 0xffffffffffffffff}) +r8 = signalfd4(0xffffffffffffffff, &(0x7f0000ce2000)={0x7fffffff}, 0x8, 0x0) +read(r8, &(0x7f0000e78000-0x80)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x80) +inotify_init1(0x80804) +setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00002f6000-0xb)={0x0, 0x100000001, 0x1, 0x9, 0x7, 0x0, 0x1, 0x8, 0x7, 0xcccc, 0x10000005}, 0xb) +[ 359.985135] Kernel panic - not syncing: panic_on_warn set ... +[ 359.985135] +[ 359.992585] CPU: 0 PID: 28200 Comm: syz-executor7 Not tainted 4.13.0-rc7+ #60 +[ 359.999847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 +[ 360.009190] Call Trace: +[ 360.011774] dump_stack+0x194/0x257 +[ 360.015414] ? arch_local_irq_restore+0x53/0x53 +[ 360.020091] panic+0x1e4/0x417 +[ 360.023270] ? __warn+0x1d9/0x1d9 +[ 360.026706] ? show_regs_print_info+0x65/0x65 +[ 360.031193] ? retint_kernel+0x10/0x10 +[ 360.035065] ? __warn+0x1a9/0x1d9 +[ 360.038513] ? refcount_inc+0x47/0x50 +[ 360.042297] __warn+0x1c4/0x1d9 +[ 360.045578] ? refcount_inc+0x47/0x50 +[ 360.049371] report_bug+0x211/0x2d0 +[ 360.053032] fixup_bug+0x40/0x90 +[ 360.056390] do_trap+0x260/0x390 +[ 360.059766] do_error_trap+0x120/0x390 +[ 360.063653] ? vprintk_emit+0x49b/0x590 +[ 360.067619] ? do_trap+0x390/0x390 +[ 360.071177] ? refcount_inc+0x47/0x50 +[ 360.074961] ? vprintk_emit+0x3ea/0x590 +[ 360.078936] ? trace_hardirqs_off_thunk+0x1a/0x1c +[ 360.083775] do_invalid_op+0x1b/0x20 +[ 360.087475] invalid_op+0x1e/0x30 +[ 360.090909] RIP: 0010:refcount_inc+0x47/0x50 +[ 360.095323] RSP: 0018:ffff8801cb557928 EFLAGS: 00010282 +[ 360.100669] RAX: 000000000000002b RBX: ffffffff8608f514 RCX: 0000000000000000 +[ 360.107934] RDX: 000000000000002b RSI: ffffffff8159319e RDI: ffffed00396aaf19 +[ 360.115187] RBP: ffff8801cb557930 R08: 0000000000000001 R09: 0000000000000000 +[ 360.122452] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8608f3c0 +[ 360.129703] R13: 0000000000000001 R14: ffff8801c27e3580 R15: dffffc0000000000 +[ 360.136985] ? vprintk_func+0x5e/0xc0 +[ 360.140775] ? refcount_inc+0x47/0x50 +[ 360.144568] dev_activate+0x7d3/0xaa0 +[ 360.148368] ? qdisc_create_dflt+0x160/0x160 +[ 360.152765] ? __local_bh_enable_ip+0x9d/0x160 +[ 360.157340] ? trace_hardirqs_on_caller+0x421/0x5c0 +[ 360.162343] ? dev_set_rx_mode+0x2f/0x40 +[ 360.166389] ? trace_hardirqs_on+0xd/0x10 +[ 360.170526] ? __local_bh_enable_ip+0x9d/0x160 +[ 360.175096] ? _raw_spin_unlock_bh+0x30/0x40 +[ 360.179499] __dev_open+0x227/0x330 +[ 360.183113] ? dev_set_rx_mode+0x40/0x40 +[ 360.187159] ? dev_set_rx_mode+0x2f/0x40 +[ 360.191219] ? trace_hardirqs_on+0xd/0x10 +[ 360.195351] ? __local_bh_enable_ip+0x9d/0x160 +[ 360.199920] ? _raw_spin_unlock_bh+0x30/0x40 +[ 360.204325] ? dev_set_rx_mode+0x40/0x40 +[ 360.208373] __dev_change_flags+0x159/0x3d0 +[ 360.212687] dev_change_flags+0x88/0x140 +[ 360.216747] devinet_ioctl+0x123d/0x19a0 +[ 360.220809] ? inet_ifa_byprefix+0x1e0/0x1e0 +[ 360.225275] inet_ioctl+0x117/0x1c0 +[ 360.228885] ? inet_ioctl+0x117/0x1c0 +[ 360.232675] sock_do_ioctl+0x65/0xb0 +[ 360.236381] sock_ioctl+0x2c2/0x440 +[ 360.240000] ? dlci_ioctl_set+0x40/0x40 +[ 360.243959] do_vfs_ioctl+0x1b1/0x1520 +[ 360.247840] ? ioctl_preallocate+0x2b0/0x2b0 +[ 360.252241] ? selinux_capable+0x40/0x40 +[ 360.256295] ? __sb_end_write+0xa0/0xd0 +[ 360.260263] ? fput+0xd2/0x140 +[ 360.263459] ? security_file_ioctl+0x89/0xb0 +[ 360.267876] SyS_ioctl+0x8f/0xc0 +[ 360.271253] entry_SYSCALL_64_fastpath+0x1f/0xbe +[ 360.275990] RIP: 0033:0x451e59 +[ 360.279173] RSP: 002b:00007f7999f6ac08 EFLAGS: 00000216 ORIG_RAX: 0000000000000010 +[ 360.286864] RAX: ffffffffffffffda RBX: 00000000007180b0 RCX: 0000000000451e59 +[ 360.294114] RDX: 000000002044ffe0 RSI: 0000000000008914 RDI: 0000000000000006 +[ 360.301364] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 +[ 360.308614] R10: 0000000000000000 R11: 0000000000000216 R12: 00000000004b69f7 +[ 360.315866] R13: 00007f7999f6ab48 R14: 00000000004b6a07 R15: 0000000000000000 +[ 360.323787] Dumping ftrace buffer: +[ 360.327372] (ftrace buffer empty) +[ 360.331051] Kernel Offset: disabled +[ 360.334650] Rebooting in 86400 seconds.. diff --git a/pkg/report/testdata/linux/report/159 b/pkg/report/testdata/linux/report/159 new file mode 100644 index 000000000..beef78dd8 --- /dev/null +++ b/pkg/report/testdata/linux/report/159 @@ -0,0 +1,88 @@ +# TODO: must be "WARNING: refcount bug in l2tp_session_register". +TITLE: WARNING in refcount_inc + +[ 40.530345] ------------[ cut here ]------------ +[ 40.535205] refcount_t: increment on 0; use-after-free. +[ 40.540824] WARNING: CPU: 1 PID: 3697 at lib/refcount.c:153 refcount_inc+0x47/0x50 +[ 40.548509] Kernel panic - not syncing: panic_on_warn set ... +[ 40.548509] +[ 40.555846] CPU: 1 PID: 3697 Comm: syzkaller479670 Not tainted 4.15.0-rc8+ #174 +[ 40.563263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 +[ 40.572588] Call Trace: +[ 40.575151] dump_stack+0x194/0x257 +[ 40.578756] ? arch_local_irq_restore+0x53/0x53 +[ 40.583400] ? vsnprintf+0x1ed/0x1900 +[ 40.587179] panic+0x1e4/0x41c +[ 40.590345] ? refcount_error_report+0x214/0x214 +[ 40.595074] ? show_regs_print_info+0x18/0x18 +[ 40.599549] ? __warn+0x1c1/0x200 +[ 40.602978] ? refcount_inc+0x47/0x50 +[ 40.606749] __warn+0x1dc/0x200 +[ 40.610000] ? console_unlock+0x983/0xd80 +[ 40.614122] ? refcount_inc+0x47/0x50 +[ 40.617897] report_bug+0x211/0x2d0 +[ 40.621502] fixup_bug.part.11+0x37/0x80 +[ 40.625537] do_error_trap+0x2d7/0x3e0 +[ 40.629398] ? __down_trylock_console_sem+0x10d/0x1e0 +[ 40.634563] ? math_error+0x400/0x400 +[ 40.638337] ? vprintk_emit+0x3ea/0x590 +[ 40.642295] ? trace_hardirqs_off_thunk+0x1a/0x1c +[ 40.647113] do_invalid_op+0x1b/0x20 +[ 40.650800] invalid_op+0x22/0x40 +[ 40.654227] RIP: 0010:refcount_inc+0x47/0x50 +[ 40.658604] RSP: 0018:ffff8801d9077788 EFLAGS: 00010286 +[ 40.663948] RAX: dffffc0000000008 RBX: ffff8801d94f48c0 RCX: ffffffff8159dade +[ 40.671190] RDX: 0000000000000000 RSI: 1ffff1003b20eeac RDI: ffff8801d9077490 +[ 40.678432] RBP: ffff8801d9077790 R08: 1ffff1003b20ee6e R09: 0000000000000000 +[ 40.685674] R10: ffff8801d9077658 R11: 0000000000000000 R12: 0000000000000000 +[ 40.692915] R13: 0000000000000000 R14: ffff8801bc2540c0 R15: ffff8801d2cb6800 +[ 40.700169] ? vprintk_func+0x5e/0xc0 +[ 40.703949] ? refcount_inc+0x47/0x50 +[ 40.707727] l2tp_session_register+0x9cb/0xe20 +[ 40.712291] ? l2tp_tunnel_get+0x690/0x690 +[ 40.716497] ? pppol2tp_connect+0x11ee/0x1dd0 +[ 40.720966] ? lock_downgrade+0x980/0x980 +[ 40.725087] ? ipv4_mtu+0x34d/0x4c0 +[ 40.728688] ? rt_cpu_seq_show+0x2c0/0x2c0 +[ 40.732896] ? refcount_add+0x60/0x60 +[ 40.736670] ? __lock_is_held+0xb6/0x140 +[ 40.740717] pppol2tp_connect+0x134b/0x1dd0 +[ 40.745023] ? pppol2tp_recv_payload_hook+0x1b0/0x1b0 +[ 40.750194] ? selinux_netlbl_socket_connect+0x76/0x1b0 +[ 40.755535] ? selinux_socket_connect+0x311/0x730 +[ 40.760349] ? lock_downgrade+0x980/0x980 +[ 40.764484] ? selinux_socket_setsockopt+0x80/0x80 +[ 40.769383] ? lock_release+0xa40/0xa40 +[ 40.773331] ? trace_event_raw_event_sched_switch+0x800/0x800 +[ 40.779188] ? __check_object_size+0x25d/0x4f0 +[ 40.783749] ? __might_sleep+0x95/0x190 +[ 40.787707] ? security_socket_connect+0x89/0xb0 +[ 40.792442] SYSC_connect+0x213/0x4a0 +[ 40.796217] ? SYSC_bind+0x410/0x410 +[ 40.799906] ? handle_mm_fault+0x410/0x8d0 +[ 40.804113] ? __do_page_fault+0x32d/0xc90 +[ 40.808320] ? __handle_mm_fault+0x3ce0/0x3ce0 +[ 40.812871] ? vmacache_find+0x5f/0x280 +[ 40.816821] ? up_read+0x1a/0x40 +[ 40.820162] ? __do_page_fault+0x3d6/0xc90 +[ 40.824381] SyS_connect+0x24/0x30 +[ 40.827892] ? SyS_accept+0x30/0x30 +[ 40.831491] do_fast_syscall_32+0x3ee/0xf9d +[ 40.835790] ? do_int80_syscall_32+0x9d0/0x9d0 +[ 40.840343] ? trace_hardirqs_on_thunk+0x1a/0x1c +[ 40.845090] ? syscall_return_slowpath+0x2ad/0x550 +[ 40.849991] ? prepare_exit_to_usermode+0x340/0x340 +[ 40.854985] ? retint_user+0x18/0x18 +[ 40.858679] ? trace_hardirqs_off_thunk+0x1a/0x1c +[ 40.863502] entry_SYSENTER_compat+0x54/0x63 +[ 40.867881] RIP: 0023:0xf7fbac79 +[ 40.871216] RSP: 002b:00000000ff9c653c EFLAGS: 00000207 ORIG_RAX: 000000000000016a +[ 40.878896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000205fafd2 +[ 40.886137] RDX: 000000000000002e RSI: 0000000000000167 RDI: 0000000000000018 +[ 40.893381] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 +[ 40.900622] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 +[ 40.907863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 +[ 40.915598] Dumping ftrace buffer: +[ 40.919171] (ftrace buffer empty) +[ 40.922857] Kernel Offset: disabled +[ 40.926459] Rebooting in 86400 seconds.. |
