WARNING: suspicious RCU usage in tcp_md5_do_lookup

Status: upstream: reported C repro on 2020/03/10 09:14
Reported-by: syzbot+abbacfadf9858477b162@syzkaller.appspotmail.com
First crash: 2358d, last: 1923d
Fix bisection the fix commit could be any of (bisect log):
  12cd844a39ed Linux 4.14.173
  56dfe6252c68 Linux 4.14.188
   
▶ ▼ Last patch testing requests (4)
Created Duration User Patch Repo Result
2023/02/08 05:32 9m retest repro linux-4.14.y report log
2023/02/08 04:32 14m retest repro linux-4.14.y report log
2022/09/17 21:29 10m retest repro linux-4.14.y report log
2022/09/17 20:29 10m retest repro linux-4.14.y report log
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2020/07/20 17:17 39m bisect fix linux-4.14.y OK (2) job log
2020/05/17 00:51 41m bisect fix linux-4.14.y OK (0) job log log

Sample crash report:
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
device lo entered promiscuous mode
device lo entered promiscuous mode
=============================
WARNING: suspicious RCU usage
4.14.198-syzkaller #0 Not tainted
-----------------------------
net/ipv4/tcp_ipv4.c:918 suspicious rcu_dereference_check() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
4 locks held by kworker/u4:0/5:
 #0:  ("%s""netns"){+.+.}, at: [<ffffffff813ba640>] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087
 #1:  (net_cleanup_work){+.+.}, at: [<ffffffff813ba676>] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091
 #2:  (net_mutex){+.+.}, at: [<ffffffff8511c9f0>] cleanup_net+0x110/0x840 net/core/net_namespace.c:450
 #3:  (rtnl_mutex){+.+.}, at: [<ffffffff85151f8e>] netdev_run_todo+0x20e/0xad0 net/core/dev.c:7926

stack backtrace:
CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.198-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 tcp_md5_do_lookup+0x3b4/0x510 net/ipv4/tcp_ipv4.c:918
 tcp_established_options+0x94/0x410 net/ipv4/tcp_output.c:690
 __tcp_transmit_skb+0x286/0x2cb0 net/ipv4/tcp_output.c:1032
 tcp_transmit_skb net/ipv4/tcp_output.c:1149 [inline]
 tcp_send_active_reset+0x40b/0x5c0 net/ipv4/tcp_output.c:3156
 tcp_disconnect+0x15a/0x1860 net/ipv4/tcp.c:2341
 rds_tcp_conn_paths_destroy net/rds/tcp.c:515 [inline]
 rds_tcp_kill_sock net/rds/tcp.c:544 [inline]
 rds_tcp_dev_event+0x73f/0xa30 net/rds/tcp.c:573
 notifier_call_chain+0x108/0x1a0 kernel/notifier.c:93
 call_netdevice_notifiers_info net/core/dev.c:1667 [inline]
 call_netdevice_notifiers net/core/dev.c:1683 [inline]
 netdev_run_todo+0x242/0xad0 net/core/dev.c:7927
 default_device_exit_batch+0x2e2/0x380 net/core/dev.c:8747
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:145
 cleanup_net+0x3b3/0x840 net/core/net_namespace.c:484
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404

=============================
WARNING: suspicious RCU usage
4.14.198-syzkaller #0 Not tainted
-----------------------------
include/net/sock.h:1800 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
4 locks held by kworker/u4:0/5:
 #0:  ("%s""netns"){+.+.}, at: [<ffffffff813ba640>] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087
 #1:  (net_cleanup_work){+.+.}, at: [<ffffffff813ba676>] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091
 #2:  (net_mutex){+.+.}, at: [<ffffffff8511c9f0>] cleanup_net+0x110/0x840 net/core/net_namespace.c:450
 #3:  (rtnl_mutex){+.+.}, at: [<ffffffff85151f8e>] netdev_run_todo+0x20e/0xad0 net/core/dev.c:7926

stack backtrace:
CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.198-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 __sk_dst_set include/net/sock.h:1800 [inline]
 __sk_dst_reset include/net/sock.h:1820 [inline]
 tcp_disconnect+0x13e5/0x1860 net/ipv4/tcp.c:2383
 rds_tcp_conn_paths_destroy net/rds/tcp.c:515 [inline]
 rds_tcp_kill_sock net/rds/tcp.c:544 [inline]
 rds_tcp_dev_event+0x73f/0xa30 net/rds/tcp.c:573
 notifier_call_chain+0x108/0x1a0 kernel/notifier.c:93
 call_netdevice_notifiers_info net/core/dev.c:1667 [inline]
 call_netdevice_notifiers net/core/dev.c:1683 [inline]
 netdev_run_todo+0x242/0xad0 net/core/dev.c:7927
 default_device_exit_batch+0x2e2/0x380 net/core/dev.c:8747
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:145
 cleanup_net+0x3b3/0x840 net/core/net_namespace.c:484
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
device veth1_macvtap left promiscuous mode
device veth0_macvtap left promiscuous mode
device veth1_vlan left promiscuous mode
device veth0_vlan left promiscuous mode
device veth1_macvtap left promiscuous mode
device veth0_macvtap left promiscuous mode
device veth1_vlan left promiscuous mode
device veth0_vlan left promiscuous mode
device veth1_macvtap left promiscuous mode
device veth0_macvtap left promiscuous mode
device veth1_vlan left promiscuous mode
device veth0_vlan left promiscuous mode
device veth1_macvtap left promiscuous mode
device veth0_macvtap left promiscuous mode
device veth1_vlan left promiscuous mode
device veth0_vlan left promiscuous mode
device hsr_slave_1 left promiscuous mode
device hsr_slave_0 left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
device hsr_slave_1 left promiscuous mode
device hsr_slave_0 left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
device hsr_slave_1 left promiscuous mode
device hsr_slave_0 left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
device hsr_slave_1 left promiscuous mode
device hsr_slave_0 left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves

Crashes (791):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/24 06:43 linux-4.14.y cbfa1702aaf6 54289b08 .config console log report syz C ci2-linux-4-14
2020/03/18 08:52 linux-4.14.y 12cd844a39ed 97bc55ce .config console log report syz C ci2-linux-4-14
2021/05/19 15:03 linux-4.14.y 7d7d1c0ab3eb a343ba6b .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/19 04:27 linux-4.14.y 7d7d1c0ab3eb a343ba6b .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/17 23:38 linux-4.14.y 7d7d1c0ab3eb a343ba6b .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/17 15:57 linux-4.14.y 7d7d1c0ab3eb a2eb125d .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/17 11:35 linux-4.14.y 7d7d1c0ab3eb a2eb125d .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/17 03:16 linux-4.14.y 7d7d1c0ab3eb f54a5c09 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/16 17:40 linux-4.14.y 7d7d1c0ab3eb f54a5c09 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/16 07:04 linux-4.14.y 7d7d1c0ab3eb f54a5c09 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/15 16:48 linux-4.14.y 7d7d1c0ab3eb 93f844de .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/15 10:39 linux-4.14.y 7d7d1c0ab3eb 93f844de .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/15 09:53 linux-4.14.y 7d7d1c0ab3eb 93f844de .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/15 05:03 linux-4.14.y 7d7d1c0ab3eb 8bdd5343 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/15 00:49 linux-4.14.y 7d7d1c0ab3eb 8bdd5343 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/14 13:30 linux-4.14.y 7d7d1c0ab3eb 8bdd5343 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/14 04:42 linux-4.14.y 7d7d1c0ab3eb 8bdd5343 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/14 03:28 linux-4.14.y 7d7d1c0ab3eb 8bdd5343 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/13 20:20 linux-4.14.y 7d7d1c0ab3eb ecb594cb .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/12 19:24 linux-4.14.y 7d7d1c0ab3eb ed7d41c5 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/12 09:54 linux-4.14.y 7d7d1c0ab3eb 86294427 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/12 07:18 linux-4.14.y 7d7d1c0ab3eb 86294427 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/12 03:49 linux-4.14.y 7d7d1c0ab3eb b3c3bb8e .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/11 19:41 linux-4.14.y 7d7d1c0ab3eb b3c3bb8e .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/11 17:19 linux-4.14.y 7d7d1c0ab3eb ca873091 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/11 14:32 linux-4.14.y 7d7d1c0ab3eb ca873091 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/11 13:16 linux-4.14.y 7d7d1c0ab3eb ca873091 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/11 10:54 linux-4.14.y 7d7d1c0ab3eb ca873091 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/10 12:41 linux-4.14.y 7d7d1c0ab3eb ca873091 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/10 09:55 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/10 04:26 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/09 22:27 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/09 14:45 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/09 10:30 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/09 05:31 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/09 02:53 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/08 18:50 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/08 09:24 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/08 02:01 linux-4.14.y 7d7d1c0ab3eb bc5434be .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/07 11:25 linux-4.14.y 7d7d1c0ab3eb f6da8120 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/07 02:54 linux-4.14.y 7d7d1c0ab3eb 06585184 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/06 15:58 linux-4.14.y 7d7d1c0ab3eb 06585184 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/05 23:05 linux-4.14.y 7d7d1c0ab3eb 06c27ff5 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/05/05 17:00 linux-4.14.y 7d7d1c0ab3eb 06c27ff5 .config console log report info ci2-linux-4-14 WARNING: suspicious RCU usage in tcp_md5_do_lookup
2021/01/17 14:17 linux-4.14.y 2762b48e9611 813be542 .config console log report info ci2-linux-4-14
2020/03/10 09:13 linux-4.14.y 78d697fc93f9 35f53e45 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.