syzbot


BUG: using __this_cpu_read() in preemptible code in sk_mc_loop

Status: closed as dup on 2019/04/03 11:54
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+537175332b212b4d885b@syzkaller.appspotmail.com
First crash: 2076d, last: 2070d
Cause bisection: introduced by (bisect log) :
commit 97cdcf37b57e3f204be3000b9eab9686f38b4356
Author: Florian Westphal <fw@strlen.de>
Date: Mon Apr 1 14:42:13 2019 +0000

  net: place xmit recursion in softnet data

Crash: BUG: using __this_cpu_read() in preemptible code in sk_mc_loop (log)
Repro: C syz .config
  
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
BUG: using __this_cpu_read() in preemptible code in ip6_finish_output C done 18807 2070d 2075d
Discussions (1)
Title Replies (including bot) Last reply
BUG: using __this_cpu_read() in preemptible code in sk_mc_loop 1 (2) 2019/04/03 11:54

Sample crash report:
raw_sendmsg: syz-executor800 forgot to set AF_INET. Fix it!
check_preemption_disabled: 3 callbacks suppressed
BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor800/7836
caller is dev_recursion_level include/linux/netdevice.h:3052 [inline]
caller is sk_mc_loop+0x1d/0x210 net/core/sock.c:705
CPU: 1 PID: 7836 Comm: syz-executor800 Not tainted 5.1.0-rc2+ #118
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 __this_cpu_preempt_check+0x246/0x270 lib/smp_processor_id.c:47
 dev_recursion_level include/linux/netdevice.h:3052 [inline]
 sk_mc_loop+0x1d/0x210 net/core/sock.c:705
 ip_mc_output+0x2ef/0xf70 net/ipv4/ip_output.c:352
 dst_output include/net/dst.h:433 [inline]
 ip_local_out+0xc4/0x1b0 net/ipv4/ip_output.c:124
 ip_send_skb+0x42/0xf0 net/ipv4/ip_output.c:1465
 ip_push_pending_frames+0x64/0x80 net/ipv4/ip_output.c:1485
 raw_sendmsg+0x1e6d/0x2f20 net/ipv4/raw.c:676
 inet_sendmsg+0x147/0x5e0 net/ipv4/af_inet.c:802
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xdd/0x130 net/socket.c:661
 __sys_sendto+0x262/0x380 net/socket.c:1932
 __do_sys_sendto net/socket.c:1944 [inline]
 __se_sys_sendto net/socket.c:1940 [inline]
 __x64_sys_sendto+0xe1/0x1a0 net/socket.c:1940
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4401a9
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffeb42a53c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401a9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00000000006ca01

Crashes (1713):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/04/02 21:29 net-next-old e142723700ba dfd3394d .config console log report syz C ci-upstream-net-kasan-gce
2019/04/02 21:10 net-next-old e142723700ba dfd3394d .config console log report syz C ci-upstream-net-kasan-gce
2019/04/05 09:51 net-next-old 847d44efad07 e5d1b3ac .config console log report ci-upstream-net-kasan-gce
2019/04/02 09:12 net-next-old e142723700ba a9ca43d4 .config console log report ci-upstream-net-kasan-gce
2019/04/08 05:44 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/08 04:34 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/08 03:28 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/08 02:18 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/08 01:59 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/08 00:58 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 23:50 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 23:22 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 22:13 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 20:08 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 19:07 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 19:06 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 18:05 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 17:04 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 16:56 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 15:52 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 14:49 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 14:28 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 13:23 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 12:07 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 10:59 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 10:20 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 09:19 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 08:24 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 07:46 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 06:48 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 05:46 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 04:39 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 03:04 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 01:54 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 01:46 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/07 00:44 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 23:26 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 23:26 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 22:15 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 21:13 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 21:12 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 20:10 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 18:57 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 18:50 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 17:49 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/04/06 16:34 linux-next 81e0cd6a7f09 c34fde03 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.