============================= WARNING: suspicious RCU usage 4.19.0-rc5+ #258 Not tainted ----------------------------- include/net/inet_sock.h:136 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor0/7696: #0: 00000000f01aa5af (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1491 [inline] #0: 00000000f01aa5af (sk_lock-AF_INET6){+.+.}, at: inet_dccp_listen+0x45/0x230 net/dccp/proto.c:941 stack backtrace: CPU: 0 PID: 7696 Comm: syz-executor0 Not tainted 4.19.0-rc5+ #258 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 lockdep_rcu_suspicious+0x14a/0x153 kernel/locking/lockdep.c:4536 ireq_opt_deref include/net/inet_sock.h:135 [inline] inet_csk_route_req+0x977/0xde0 net/ipv4/inet_connection_sock.c:547 dccp_v4_send_response+0xb4/0x6d0 net/dccp/ipv4.c:485 dccp_v4_conn_request+0xc81/0x1390 net/dccp/ipv4.c:634 dccp_v6_conn_request+0xdb9/0x1660 net/dccp/ipv6.c:317 dccp_rcv_state_process+0x6f7/0x1a32 net/dccp/input.c:612 dccp_v4_do_rcv+0x102/0x180 net/dccp/ipv4.c:683 dccp_v6_do_rcv+0x99d/0xbf0 net/dccp/ipv6.c:579 sk_backlog_rcv include/net/sock.h:931 [inline] __release_sock+0x12f/0x3a0 net/core/sock.c:2336 release_sock+0xad/0x2c0 net/core/sock.c:2849 inet_dccp_listen+0x153/0x230 net/dccp/proto.c:967 __sys_listen+0x1d6/0x380 net/socket.c:1517 __do_sys_listen net/socket.c:1526 [inline] __se_sys_listen net/socket.c:1524 [inline] __x64_sys_listen+0x54/0x80 net/socket.c:1524 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457579 Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f3126530c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457579 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31265316d4 R13: 00000000004c26e0 R14: 00000000004d3858 R15: 00000000ffffffff ============================= WARNING: suspicious RCU usage 4.19.0-rc5+ #258 Not tainted ----------------------------- include/net/inet_sock.h:136 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor0/7696: #0: 00000000f01aa5af (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1491 [inline] #0: 00000000f01aa5af (sk_lock-AF_INET6){+.+.}, at: inet_dccp_listen+0x45/0x230 net/dccp/proto.c:941 stack backtrace: CPU: 0 PID: 7696 Comm: syz-executor0 Not tainted 4.19.0-rc5+ #258 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 lockdep_rcu_suspicious+0x14a/0x153 kernel/locking/lockdep.c:4536 ireq_opt_deref include/net/inet_sock.h:135 [inline] dccp_v4_send_response+0x537/0x6d0 net/dccp/ipv4.c:496 dccp_v4_conn_request+0xc81/0x1390 net/dccp/ipv4.c:634 dccp_v6_conn_request+0xdb9/0x1660 net/dccp/ipv6.c:317 dccp_rcv_state_process+0x6f7/0x1a32 net/dccp/input.c:612 dccp_v4_do_rcv+0x102/0x180 net/dccp/ipv4.c:683 dccp_v6_do_rcv+0x99d/0xbf0 net/dccp/ipv6.c:579 sk_backlog_rcv include/net/sock.h:931 [inline] __release_sock+0x12f/0x3a0 net/core/sock.c:2336 release_sock+0xad/0x2c0 net/core/sock.c:2849 inet_dccp_listen+0x153/0x230 net/dccp/proto.c:967 __sys_listen+0x1d6/0x380 net/socket.c:1517 __do_sys_listen net/socket.c:1526 [inline] __se_sys_listen net/socket.c:1524 [inline] __x64_sys_listen+0x54/0x80 net/socket.c:1524 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457579 Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f3126530c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457579 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31265316d4 R13: 00000000004c26e0 R14: 00000000004d3858 R15: 00000000ffffffff dccp_close: ABORT with 16 bytes unread dccp_close: ABORT with 16 bytes unread net_ratelimit: 66 callbacks suppressed dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(88864875350475) <= P.seqno(0) <= S.SWH(88864875350549)) and (P.ackno exists or LAWL(155985438683067) <= P.ackno(155985438683068) <= S.AWH(155985438683068), sending SYNC... dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(145494189924259) <= P.seqno(0) <= S.SWH(145494189924333)) and (P.ackno exists or LAWL(229997893537085) <= P.ackno(229997893537086) <= S.AWH(229997893537086), sending SYNC... dccp_close: ABORT with 1061 bytes unread dccp_close: ABORT with 1061 bytes unread dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(42251646476811) <= P.seqno(0) <= S.SWH(42251646476885)) and (P.ackno exists or LAWL(32802802792945) <= P.ackno(32802802792946) <= S.AWH(32802802792946), sending SYNC... dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(244859531943633) <= P.seqno(0) <= S.SWH(244859531943707)) and (P.ackno exists or LAWL(137907566508941) <= P.ackno(137907566508942) <= S.AWH(137907566508942), sending SYNC... dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(242822259478187) <= P.seqno(0) <= S.SWH(242822259478261)) and (P.ackno exists or LAWL(93289021058768) <= P.ackno(93289021058769) <= S.AWH(93289021058769), sending SYNC... dccp_close: ABORT with 1061 bytes unread dccp_close: ABORT with 1061 bytes unread dccp_close: ABORT with 1061 bytes unread XFS (loop5): Mounting V4 Filesystem XFS (loop5): totally zeroed log XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0 fs/xfs/libxfs/xfs_ialloc.c:2548, xfs_agi block 0x2 XFS (loop5): Unmount and run xfs_repair XFS (loop5): First 128 bytes of corrupted metadata buffer: 00000000b85ebff2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000771133a5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000608de992: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ FAT-fs (loop0): error, invalid access to FAT (entry 0x00000020) 00000000efa11dd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000004ba8ff81: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000007e977648: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ FAT-fs (loop0): Filesystem has been set read-only 0000000017b5fefc: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000003897dab0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ XFS (loop5): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 FAT-fs (loop0): error, invalid access to FAT (entry 0x00000020) XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 XFS (loop5): Failed to read root inode 0x80, error 117 FAT-fs (loop0): error, invalid access to FAT (entry 0x00000020) FAT-fs (loop0): error, invalid access to FAT (entry 0x00000020) XFS (loop5): Mounting V4 Filesystem XFS (loop5): totally zeroed log XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0 fs/xfs/libxfs/xfs_ialloc.c:2548, xfs_agi block 0x2 XFS (loop5): Unmount and run xfs_repair XFS (loop5): First 128 bytes of corrupted metadata buffer: 00000000c7418880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000363a07e2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000005ced24: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000054a11e7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000da32926f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0000000007867191: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000eb1968f4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000a6c2143a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ XFS (loop5): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 XFS (loop5): Failed to read root inode 0x80, error 117 FAT-fs (loop0): error, invalid access to FAT (entry 0x00000020) FAT-fs (loop0): Filesystem has been set read-only FAT-fs (loop0): error, invalid access to FAT (entry 0x00000020) XFS (loop5): Mounting V4 Filesystem XFS (loop5): totally zeroed log XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0 fs/xfs/libxfs/xfs_ialloc.c:2548, xfs_agi block 0x2 XFS (loop5): Unmount and run xfs_repair XFS (loop5): First 128 bytes of corrupted metadata buffer: 00000000538c20a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000e30af879: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000319384d7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0000000012d3f155: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000005548eb6a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000003c690fab: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000628171df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000661f9edf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ XFS (loop5): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 XFS (loop5): Failed to read root inode 0x80, error 117 XFS (loop5): Mounting V4 Filesystem XFS (loop5): totally zeroed log XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0 fs/xfs/libxfs/xfs_ialloc.c:2548, xfs_agi block 0x2 XFS (loop5): Unmount and run xfs_repair XFS (loop5): First 128 bytes of corrupted metadata buffer: 00000000620fa2f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000be939b87: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000008cfb6e9d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 00000000216dea89: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ FAT-fs (loop1): Filesystem has been set read-only 0000000004c9ea67: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000000da3f9230: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000001bb04c78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0000000061fde7bd: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) XFS (loop5): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 XFS (loop5): Failed to read root inode 0x80, error 117 FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) FAT-fs (loop4): Filesystem has been set read-only FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020)