syzbot


WARNING: suspicious RCU usage in dev_deactivate

Status: upstream: reported on 2024/11/16 08:16
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+8a65ac5be396817eefb3@syzkaller.appspotmail.com
First crash: 72d, last: 35d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [net?] WARNING: suspicious RCU usage in dev_deactivate 0 (1) 2024/11/16 08:16

Sample crash report:
=============================
WARNING: suspicious RCU usage
6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 Not tainted
-----------------------------
net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by kworker/u32:9/1170:
 #0: ffff88804d45b148 ((wq_completion)bond0#8){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc900062f7d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960

stack backtrace:
CPU: 3 UID: 0 PID: 1170 Comm: kworker/u32:9 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:180
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:268
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline]
 bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

=============================
WARNING: suspicious RCU usage
6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 Not tainted
-----------------------------
./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by kworker/u32:9/1170:
 #0: ffff88804d45b148 ((wq_completion)bond0#8){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc900062f7d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960

stack backtrace:
CPU: 3 UID: 0 PID: 1170 Comm: kworker/u32:9 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6845
 dev_ingress_queue include/linux/rtnetlink.h:156 [inline]
 dev_deactivate_many+0x8af/0xb20 net/sched/sch_generic.c:1365
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:180
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:268
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline]
 bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
BUG: sleeping function called from invalid context at net/core/dev.c:11403
3 locks held by kworker/u32:9/1170:
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 synchronize_net+0x1b/0x60 net/core/dev.c:11403
 dev_deactivate_many+0x2a1/0xb20 net/sched/sch_generic.c:1377
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 Tainted: G        W         
other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
 #1: ffffc900062f7d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
stack backtrace:
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 </TASK>
------------[ cut here ]------------
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Code: 7b 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 2c 6f c6 0e 01 90 48 c7 c7 a0 ae 6e 8b e8 c5 e5 d8 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000003 R12: ffff8880274f4880
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/20 04:08 upstream 8faabc041a00 c87fa8a3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING: suspicious RCU usage in dev_deactivate
2024/11/12 08:07 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING: suspicious RCU usage in dev_deactivate
* Struck through repros no longer work on HEAD.