syzbot


WARNING: suspicious RCU usage in in_dev_dump_addr

Status: fixed on 2019/08/05 13:45
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+bad6e32808a3a97b1515@syzkaller.appspotmail.com
Fix commit: d3e6e285fff3 net: ipv4: fix rcu lockdep splat due to wrong annotation
First crash: 1788d, last: 1785d
Cause bisection: introduced by (bisect log) :
commit 2638eb8b50cfc16240e0bb080b9afbf541a9b39d
Author: Florian Westphal <fw@strlen.de>
Date: Fri May 31 16:27:09 2019 +0000

  net: ipv4: provide __rcu annotation for ifa_list

Crash: WARNING: suspicious RCU usage in in_dev_dump_addr (log)
Repro: C syz .config
  
Discussions (2)
Title Replies (including bot) Last reply
[PATCH net-next] net: ipv4: fix rcu lockdep splat due to wrong annotation 2 (2) 2019/06/04 21:24
WARNING: suspicious RCU usage in in_dev_dump_addr 0 (1) 2019/06/03 18:51

Sample crash report:
=============================
WARNING: suspicious RCU usage
5.2.0-rc2+ #13 Not tainted
-----------------------------
net/ipv4/devinet.c:1766 suspicious rcu_dereference_check() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
1 lock held by syz-executor924/9000:
 #0: 0000000087fe3874 (rtnl_mutex){+.+.}, at: netlink_dump+0xe7/0xfb0 net/netlink/af_netlink.c:2208

stack backtrace:
CPU: 0 PID: 9000 Comm: syz-executor924 Not tainted 5.2.0-rc2+ #13
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 lockdep_rcu_suspicious+0x153/0x15d kernel/locking/lockdep.c:5250
 in_dev_dump_addr+0x36f/0x3d0 net/ipv4/devinet.c:1766
 inet_dump_ifaddr+0xa8f/0xca0 net/ipv4/devinet.c:1826
 rtnl_dump_all+0x295/0x490 net/core/rtnetlink.c:3444
 netlink_dump+0x558/0xfb0 net/netlink/af_netlink.c:2253
 __netlink_dump_start+0x5b1/0x7d0 net/netlink/af_netlink.c:2361
 netlink_dump_start include/linux/netlink.h:226 [inline]
 rtnetlink_rcv_msg+0x73d/0xb00 net/core/rtnetlink.c:5181
 netlink_rcv_skb+0x177/0x450 net/netlink/af_netlink.c:2486
 rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:5236
 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
 netlink_unicast+0x531/0x710 net/netlink/af_netlink.c:1337
 netlink_sendmsg+0x8ae/0xd70 net/netlink/af_netlink.c:1926
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xd7/0x130 net/socket.c:671
 ___sys_sendmsg+0x803/0x920 net/socket.c:2292
 __sys_sendmsg+0x105/0x1d0 net/socket.c:2330
 __do_sys_sendmsg net/socket.c:2339 [inline]
 __se_sys_sendmsg net/socket.c:2337 [inline]
 __x64_sys_sendmsg+0x78/0xb0 net/socket.c:2337
 do_syscall_64+0xfd/0x680 arch/x86/entry/common.c:301
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4402a9
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fffe5f26f18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402a9
RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
R10: 

Crashes (107):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/06/03 13:30 net-next-old b33bc2b878e0 63bf051f .config console log report syz C ci-upstream-net-kasan-gce
2019/06/05 17:35 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 16:35 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 14:30 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 12:51 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 12:00 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 10:56 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 09:47 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 08:38 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 07:17 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 06:04 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 04:42 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 03:34 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 01:47 net-next-old 712246bc93cb bfb4a51e .config console log report ci-upstream-net-kasan-gce
2019/06/05 00:02 net-next-old 712246bc93cb e41a20c5 .config console log report ci-upstream-net-kasan-gce
2019/06/04 22:23 net-next-old 712246bc93cb e41a20c5 .config console log report ci-upstream-net-kasan-gce
2019/06/04 19:42 net-next-old 712246bc93cb e41a20c5 .config console log report ci-upstream-net-kasan-gce
2019/06/04 18:39 net-next-old b7034146756b e41a20c5 .config console log report ci-upstream-net-kasan-gce
2019/06/04 17:28 net-next-old b7034146756b e41a20c5 .config console log report ci-upstream-net-kasan-gce
2019/06/04 15:41 net-next-old b7034146756b e41a20c5 .config console log report ci-upstream-net-kasan-gce
2019/06/04 10:19 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/04 09:17 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/04 07:02 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/04 05:30 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/04 01:01 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/04 00:54 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/04 00:49 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/04 00:41 net-next-old b7034146756b ce07a7ae .config console log report ci-upstream-net-kasan-gce
2019/06/03 23:10 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 23:06 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 22:49 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 22:43 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 22:30 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 22:21 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 22:09 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 22:07 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 22:06 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 21:41 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 21:23 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 21:18 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 21:02 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 20:56 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 20:42 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 20:19 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/03 11:57 net-next-old b33bc2b878e0 63bf051f .config console log report ci-upstream-net-kasan-gce
2019/06/04 18:39 linux-next 56b697c6c13b e41a20c5 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/06/04 11:31 linux-next 56b697c6c13b e41a20c5 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.