syzbot


BUG: using __this_cpu_add() in preemptible code in tcp_try_rmem_schedule

Status: public: reported syz repro on 2019/04/14 00:02
Reported-by: syzbot+86f93ab5ec01c6c3c6de@syzkaller.appspotmail.com
First crash: 2335d, last: 1615d

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read, 109 bits of entropy available)
random: sshd: uninitialized urandom read (32 bytes read, 114 bits of entropy available)
IPVS: Creating netns size=2552 id=1
BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor0/3998
caller is __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
CPU: 0 PID: 3998 Comm: syz-executor0 Not tainted 4.4.115-g55a366596 #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 39f2478c2b18d88d ffff8801d845f6b0 ffffffff81d03d8d
 0000000000000000 ffffffff839fe4a0 ffffffff83cef860 ffff8800ba3c0000
 0000000000000003 ffff8801d845f6f0 ffffffff81d63cd4 ffffffff81237470
Call Trace:
 [<ffffffff81d03d8d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d03d8d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81d63cd4>] check_preemption_disabled+0x1d4/0x200 lib/smp_processor_id.c:46
 [<ffffffff81d63d3c>] __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
 [<ffffffff83133ce2>] tcp_prune_queue net/ipv4/tcp_input.c:4861 [inline]
 [<ffffffff83133ce2>] tcp_try_rmem_schedule+0xf2/0x1180 net/ipv4/tcp_input.c:4337
 [<ffffffff8314a08a>] tcp_send_rcvq+0x1ba/0x450 net/ipv4/tcp_input.c:4520
 [<ffffffff831214cf>] tcp_sendmsg+0x1e8f/0x2b10 net/ipv4/tcp.c:1134
 [<ffffffff831d71fc>] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:755
 [<ffffffff82deb92a>] sock_sendmsg_nosec net/socket.c:625 [inline]
 [<ffffffff82deb92a>] sock_sendmsg+0xca/0x110 net/socket.c:635
 [<ffffffff82debb96>] sock_write_iter+0x226/0x3b0 net/socket.c:834
 [<ffffffff8151e148>] do_iter_readv_writev+0x138/0x1e0 fs/read_write.c:664
 [<ffffffff8151f8e2>] do_readv_writev+0x2d2/0x6e0 fs/read_write.c:808
 [<ffffffff8151fe1b>] vfs_writev+0x7b/0xb0 fs/read_write.c:847
 [<ffffffff815222d9>] SYSC_writev fs/read_write.c:880 [inline]
 [<ffffffff815222d9>] SyS_writev+0xd9/0x240 fs/read_write.c:872
 [<ffffffff837744df>] entry_SYSCALL_64_fastpath+0x1c/0x98
BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor0/3998
caller is __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
CPU: 0 PID: 3998 Comm: syz-executor0 Not tainted 4.4.115-g55a366596 #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 39f2478c2b18d88d ffff8801d845f6b0 ffffffff81d03d8d
 0000000000000000 ffffffff839fe4a0 ffffffff83cef860 ffff8800ba3c0000
 0000000000000003 ffff8801d845f6f0 ffffffff81d63cd4 ffffffff8313163a
Call Trace:
 [<ffffffff81d03d8d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d03d8d>] dump_stack+0xc1/0x124 lib/dump_stack.c:51
 [<ffffffff81d63cd4>] check_preemption_disabled+0x1d4/0x200 lib/smp_processor_id.c:46
 [<ffffffff81d63d3c>] __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62
 [<ffffffff83134a23>] tcp_prune_queue net/ipv4/tcp_input.c:4891 [inline]
 [<ffffffff83134a23>] tcp_try_rmem_schedule+0xe33/0x1180 net/ipv4/tcp_input.c:4337
 [<ffffffff8314a08a>] tcp_send_rcvq+0x1ba/0x450 net/ipv4/tcp_input.c:4520
 [<ffffffff831214cf>] tcp_sendmsg+0x1e8f/0x2b10 net/ipv4/tcp.c:1134
 [<ffffffff831d71fc>] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:755
 [<ffffffff82deb92a>] sock_sendmsg_nosec net/socket.c:625 [inline]
 [<ffffffff82deb92a>] sock_sendmsg+0xca/0x110 net/socket.c:635
 [<ffffffff82debb96>] sock_write_iter+0x226/0x3b0 net/socket.c:834
 [<ffffffff8151e148>] do_iter_readv_writev+0x138/0x1e0 fs/read_write.c:664
 [<ffffffff8151f8e2>] do_readv_writev+0x2d2/0x6e0 fs/read_write.c:808
 [<ffffffff8151fe1b>] vfs_writev+0x7b/0xb0 fs/read_write.c:847
 [<ffffffff815222d9>] SYSC_writev fs/read_write.c:880 [inline]
 [<ffffffff815222d9>] SyS_writev+0xd9/0x240 fs/read_write.c:872
 [<ff

Crashes (2560):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/02/20 07:49 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce
2018/02/20 07:33 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce
2018/02/20 06:27 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce
2018/02/20 02:38 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce
2018/02/20 05:59 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce-386
2018/02/20 04:20 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce-386
2018/02/20 03:47 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce-386
2018/02/20 03:03 https://android.googlesource.com/kernel/common android-4.4 55a366596215 c1f526e3 .config console log report syz ci-android-44-kasan-gce-386
2019/11/29 06:42 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 76357d6f .config console log report ci-android-44-kasan-gce
2019/11/25 13:05 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 371caf77 .config console log report ci-android-44-kasan-gce
2019/11/23 02:52 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 598ca6c8 .config console log report ci-android-44-kasan-gce
2019/11/22 18:32 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 598ca6c8 .config console log report ci-android-44-kasan-gce
2019/11/22 14:06 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 598ca6c8 .config console log report ci-android-44-kasan-gce
2019/11/19 06:32 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 5bc70212 .config console log report ci-android-44-kasan-gce
2019/11/18 19:39 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 1daed50a .config console log report ci-android-44-kasan-gce
2019/11/16 15:40 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b d5696d51 .config console log report ci-android-44-kasan-gce
2019/11/15 13:49 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 79248ee8 .config console log report ci-android-44-kasan-gce
2019/11/13 23:29 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce
2019/11/13 23:13 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce
2019/11/13 22:40 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce
2019/11/13 22:25 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce
2019/11/09 18:53 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b dc438b91 .config console log report ci-android-44-kasan-gce
2019/11/06 19:58 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b da505f84 .config console log report ci-android-44-kasan-gce
2019/11/06 02:22 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 0f3ec414 .config console log report ci-android-44-kasan-gce
2019/11/05 21:20 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 0f3ec414 .config console log report ci-android-44-kasan-gce
2019/11/05 21:17 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 0f3ec414 .config console log report ci-android-44-kasan-gce
2019/11/05 07:26 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 76630fc9 .config console log report ci-android-44-kasan-gce
2019/11/03 02:38 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a41ca8fa .config console log report ci-android-44-kasan-gce
2019/12/04 03:33 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/04 01:41 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/03 20:06 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b ae13a849 .config console log report ci-android-44-kasan-gce-386
2019/12/02 10:18 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce-386
2019/12/02 03:26 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f879db37 .config console log report ci-android-44-kasan-gce-386
2019/12/01 00:25 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce-386
2019/11/30 22:59 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b a76bf83f .config console log report ci-android-44-kasan-gce-386
2019/11/30 12:55 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 3a75be00 .config console log report ci-android-44-kasan-gce-386
2019/11/29 16:52 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b d29b9e84 .config console log report ci-android-44-kasan-gce-386
2019/11/29 14:10 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b d29b9e84 .config console log report ci-android-44-kasan-gce-386
2019/11/28 13:20 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 46869e3e .config console log report ci-android-44-kasan-gce-386
2019/11/27 14:59 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 5a38f3f0 .config console log report ci-android-44-kasan-gce-386
2019/11/27 10:06 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 1048481f .config console log report ci-android-44-kasan-gce-386
2019/11/27 02:38 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 1048481f .config console log report ci-android-44-kasan-gce-386
2019/11/26 07:42 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f746151a .config console log report ci-android-44-kasan-gce-386
2019/11/24 01:09 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 598ca6c8 .config console log report ci-android-44-kasan-gce-386
2019/11/23 16:01 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 598ca6c8 .config console log report ci-android-44-kasan-gce-386
2019/11/22 08:34 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 8098ea0f .config console log report ci-android-44-kasan-gce-386
2019/11/21 05:48 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 8098ea0f .config console log report ci-android-44-kasan-gce-386
2019/11/20 08:03 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b f4b7ed07 .config console log report ci-android-44-kasan-gce-386
2019/11/19 06:32 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 5bc70212 .config console log report ci-android-44-kasan-gce-386
2019/11/17 21:04 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b d5696d51 .config console log report ci-android-44-kasan-gce-386
2019/11/15 23:33 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b cdac920b .config console log report ci-android-44-kasan-gce-386
2019/11/13 23:29 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce-386
2019/11/13 23:01 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce-386
2019/11/13 22:12 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce-386
2019/11/13 22:04 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b 048f2d49 .config console log report ci-android-44-kasan-gce-386
2019/11/09 07:54 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b dc438b91 .config console log report ci-android-44-kasan-gce-386
2019/11/06 04:46 https://android.googlesource.com/kernel/common android-4.4 62872f952d6b bc2c6e45 .config console log report ci-android-44-kasan-gce-386
* Struck through repros no longer work on HEAD.