============================= WARNING: suspicious RCU usage 4.19.0-rc6+ #43 Not tainted ----------------------------- include/net/inet_sock.h:136 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor4/22788: #0: 0000000076b79f8a (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1491 [inline] #0: 0000000076b79f8a (sk_lock-AF_INET6){+.+.}, at: inet_dccp_listen+0x45/0x230 net/dccp/proto.c:941 stack backtrace: CPU: 0 PID: 22788 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #43 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 lockdep_rcu_suspicious+0x14a/0x153 kernel/locking/lockdep.c:4536 ireq_opt_deref include/net/inet_sock.h:135 [inline] inet_csk_route_req+0x977/0xde0 net/ipv4/inet_connection_sock.c:547 dccp_v4_send_response+0xb4/0x6d0 net/dccp/ipv4.c:485 dccp_v4_conn_request+0xc81/0x1390 net/dccp/ipv4.c:634 dccp_v6_conn_request+0xdb9/0x1660 net/dccp/ipv6.c:317 dccp_rcv_state_process+0x6f7/0x1a32 net/dccp/input.c:612 dccp_v4_do_rcv+0x102/0x180 net/dccp/ipv4.c:683 dccp_v6_do_rcv+0x99d/0xbf0 net/dccp/ipv6.c:579 sk_backlog_rcv include/net/sock.h:931 [inline] __release_sock+0x12f/0x3a0 net/core/sock.c:2336 release_sock+0xad/0x2c0 net/core/sock.c:2849 inet_dccp_listen+0x153/0x230 net/dccp/proto.c:967 __sys_listen+0x1d6/0x380 net/socket.c:1517 __do_sys_listen net/socket.c:1526 [inline] __se_sys_listen net/socket.c:1524 [inline] __x64_sys_listen+0x54/0x80 net/socket.c:1524 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457579 Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fbd5a9dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457579 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd5a9dc6d4 R13: 00000000004c26e0 R14: 00000000004d3858 R15: 00000000ffffffff ============================= WARNING: suspicious RCU usage 4.19.0-rc6+ #43 Not tainted ----------------------------- include/net/inet_sock.h:136 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor4/22788: #0: 0000000076b79f8a (sk_lock-AF_INET6){+.+.}, at: lock_sock include/net/sock.h:1491 [inline] #0: 0000000076b79f8a (sk_lock-AF_INET6){+.+.}, at: inet_dccp_listen+0x45/0x230 net/dccp/proto.c:941 stack backtrace: CPU: 0 PID: 22788 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #43 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 lockdep_rcu_suspicious+0x14a/0x153 kernel/locking/lockdep.c:4536 ireq_opt_deref include/net/inet_sock.h:135 [inline] dccp_v4_send_response+0x537/0x6d0 net/dccp/ipv4.c:496 dccp_v4_conn_request+0xc81/0x1390 net/dccp/ipv4.c:634 dccp_v6_conn_request+0xdb9/0x1660 net/dccp/ipv6.c:317 dccp_rcv_state_process+0x6f7/0x1a32 net/dccp/input.c:612 dccp_v4_do_rcv+0x102/0x180 net/dccp/ipv4.c:683 dccp_v6_do_rcv+0x99d/0xbf0 net/dccp/ipv6.c:579 sk_backlog_rcv include/net/sock.h:931 [inline] __release_sock+0x12f/0x3a0 net/core/sock.c:2336 release_sock+0xad/0x2c0 net/core/sock.c:2849 inet_dccp_listen+0x153/0x230 net/dccp/proto.c:967 __sys_listen+0x1d6/0x380 net/socket.c:1517 __do_sys_listen net/socket.c:1526 [inline] __se_sys_listen net/socket.c:1524 [inline] __x64_sys_listen+0x54/0x80 net/socket.c:1524 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457579 Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fbd5a9dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457579 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd5a9dc6d4 R13: 00000000004c26e0 R14: 00000000004d3858 R15: 00000000ffffffff net_ratelimit: 8 callbacks suppressed dccp_close: ABORT with 1062 bytes unread dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(23732587268073) <= P.seqno(0) <= S.SWH(23732587268147)) and (P.ackno exists or LAWL(29646031962674) <= P.ackno(29646031962675) <= S.AWH(29646031962675), sending SYNC... dccp_close: ABORT with 1061 bytes unread dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(141898445233112) <= P.seqno(0) <= S.SWH(141898445233186)) and (P.ackno exists or LAWL(22925686979085) <= P.ackno(22925686979086) <= S.AWH(22925686979086), sending SYNC... dccp_close: ABORT with 1061 bytes unread audit: type=1400 audit(1538518192.125:130): avc: denied { getopt } for pid=22881 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(168481254418722) <= P.seqno(0) <= S.SWH(168481254418796)) and (P.ackno exists or LAWL(135310239200821) <= P.ackno(135310239200822) <= S.AWH(135310239200822), sending SYNC... dccp_close: ABORT with 1061 bytes unread netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(256732005097370) <= P.seqno(0) <= S.SWH(256732005097444)) and (P.ackno exists or LAWL(142282200125235) <= P.ackno(142282200125236) <= S.AWH(142282200125236), sending SYNC... dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(149051217618577) <= P.seqno(0) <= S.SWH(149051217618651)) and (P.ackno exists or LAWL(249744845473409) <= P.ackno(249744845473410) <= S.AWH(249744845473410), sending SYNC... dccp_close: ABORT with 1061 bytes unread print_req_error: I/O error, dev loop0, sector 0 print_req_error: I/O error, dev loop0, sector 0