WARNING in __put_task_struct

Status: auto-closed as invalid on 2019/12/30 00:10
Reported-by: syzbot+0b1cffc6e907317ff3db@syzkaller.appspotmail.com
First crash: 2523d, last: 2514d
▶ ▼ Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __put_task_struct (4) mm -1 1 721d 721d 0/29 closed as invalid on 2024/09/06 13:45
upstream WARNING in __put_task_struct (5) mm -1 syz 4 424d 426d 0/29 closed as dup on 2025/06/18 22:49
upstream WARNING in __put_task_struct mm -1 1 3169d 3165d 0/29 closed as invalid on 2018/02/13 19:55
upstream WARNING in __put_task_struct (3) io-uring mm -1 syz, C error 4 1314d 1314d 0/29 auto-obsoleted due to no activity on 2023/04/22 22:53
upstream WARNING in __put_task_struct (2) mm -1 syz, C 17 2862d 2871d 11/29 fixed on 2018/11/12 21:25
upstream WARNING in __put_task_struct (6) prio:high mm -1 5 129d 176d 0/29 auto-obsoleted due to no activity on 2026/07/20 17:11

Sample crash report:
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 12695 at kernel/fork.c:677 __put_task_struct.cold+0x29/0x48 kernel/fork.c:677
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 12695 Comm: syz-executor.0 Not tainted 4.19.75 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 panic+0x263/0x507 kernel/panic.c:185
 __warn.cold+0x20/0x4a kernel/panic.c:540
 report_bug+0x263/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037
RIP: 0010:__put_task_struct.cold+0x29/0x48 kernel/fork.c:677
Code: ff e8 20 7d 2c 00 48 c7 c7 20 45 49 87 e8 f8 e3 16 00 0f 0b e9 34 4b ff ff e8 08 7d 2c 00 48 c7 c7 20 45 49 87 e8 e0 e3 16 00 <0f> 0b e9 c5 4a ff ff e8 f0 7c 2c 00 48 c7 c7 20 45 49 87 e8 c8 e3
RSP: 0018:ffff88808e7ffcd8 EFLAGS: 00010286
RAX: 0000000000000024 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8155dbd6 RDI: ffffed1011cfff8d
RBP: ffff88808e7ffd00 R08: 0000000000000024 R09: ffffed1015d25079
R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: ffff888050d4e3c0
R13: ffff888053e994f0 R14: 0000000000000000 R15: 0000000000000000
 put_task_struct include/linux/sched/task.h:96 [inline]
 rdma_restrack_del+0x1da/0x240 drivers/infiniband/core/restrack.c:229
 rdma_destroy_id+0xac/0xab0 drivers/infiniband/core/cma.c:1726
 ucma_close+0x115/0x320 drivers/infiniband/core/ucma.c:1770
 __fput+0x2dd/0x8b0 fs/file_table.c:278
 ____fput+0x16/0x20 fs/file_table.c:309
 task_work_run+0x145/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:193 [inline]
 exit_to_usermode_loop+0x273/0x2c0 arch/x86/entry/common.c:167
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
 do_syscall_64+0x53d/0x620 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x413711
Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffd75859420 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413711
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff
R10: 00007ffd75859500 R11: 0000000000000293 R12: 000000000075bfc8
R13: 000000000004ca83 R14: 00000000007605d0 R15: 000000000075bfd4
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/01 00:09 linux-4.19.y d573e8a79f70 c7a4fb99 .config console log report ci2-linux-4-19
2019/10/01 00:00 linux-4.19.y d573e8a79f70 c7a4fb99 .config console log report ci2-linux-4-19
2019/09/30 03:37 linux-4.19.y d573e8a79f70 c1ad5441 .config console log report ci2-linux-4-19
2019/09/29 03:52 linux-4.19.y d573e8a79f70 eb6b9855 .config console log report ci2-linux-4-19
2019/09/28 22:04 linux-4.19.y d573e8a79f70 eb6b9855 .config console log report ci2-linux-4-19
2019/09/28 20:04 linux-4.19.y d573e8a79f70 eb6b9855 .config console log report ci2-linux-4-19
2019/09/28 08:47 linux-4.19.y d573e8a79f70 d8074e0b .config console log report ci2-linux-4-19
2019/09/28 04:16 linux-4.19.y d573e8a79f70 d8074e0b .config console log report ci2-linux-4-19
2019/09/27 13:27 linux-4.19.y d573e8a79f70 d8074e0b .config console log report ci2-linux-4-19
2019/09/27 05:38 linux-4.19.y d573e8a79f70 2f1548bc .config console log report ci2-linux-4-19
2019/09/26 12:58 linux-4.19.y d573e8a79f70 24d405a3 .config console log report ci2-linux-4-19
2019/09/26 12:54 linux-4.19.y d573e8a79f70 24d405a3 .config console log report ci2-linux-4-19
2019/09/25 10:43 linux-4.19.y d573e8a79f70 e38a6630 .config console log report ci2-linux-4-19
2019/09/24 23:37 linux-4.19.y d573e8a79f70 e38a6630 .config console log report ci2-linux-4-19
2019/09/24 15:35 linux-4.19.y d573e8a79f70 f8368f99 .config console log report ci2-linux-4-19
2019/09/23 01:26 linux-4.19.y d573e8a79f70 d96e88f3 .config console log report ci2-linux-4-19
2019/09/22 17:23 linux-4.19.y d573e8a79f70 d96e88f3 .config console log report ci2-linux-4-19
2019/09/21 22:04 linux-4.19.y d573e8a79f70 d96e88f3 .config console log report ci2-linux-4-19
2019/09/21 07:03 linux-4.19.y d573e8a79f70 d96e88f3 .config console log report ci2-linux-4-19
2019/09/21 06:44 linux-4.19.y d573e8a79f70 d96e88f3 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.