syzbot


INFO: suspicious RCU usage in shmem_add_seals

Status: public: reported C repro on 2019/11/16 14:10
Reported-by: syzbot+ef0659e5f6443a1c0e26@syzkaller.appspotmail.com
First crash: 1832d, last: 1823d

Sample crash report:
===============================
[ INFO: suspicious RCU usage. ]
4.9.202+ #0 Not tainted
-------------------------------
include/linux/radix-tree.h:199 suspicious rcu_dereference_check() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 0
2 locks held by syz-executor184/2062:
 #0:  (&sb->s_type->i_mutex_key#10){+.+.+.}, at: [<00000000e5465ac4>] inode_lock include/linux/fs.h:771 [inline]
 #0:  (&sb->s_type->i_mutex_key#10){+.+.+.}, at: [<00000000e5465ac4>] shmem_add_seals+0x166/0x1020 mm/shmem.c:2610
 #1:  (&(&mapping->tree_lock)->rlock){..-...}, at: [<000000008749736d>] spin_lock_irq include/linux/spinlock.h:332 [inline]
 #1:  (&(&mapping->tree_lock)->rlock){..-...}, at: [<000000008749736d>] shmem_tag_pins mm/shmem.c:2465 [inline]
 #1:  (&(&mapping->tree_lock)->rlock){..-...}, at: [<000000008749736d>] shmem_wait_for_pins mm/shmem.c:2506 [inline]
 #1:  (&(&mapping->tree_lock)->rlock){..-...}, at: [<000000008749736d>] shmem_add_seals+0x342/0x1020 mm/shmem.c:2622

stack backtrace:
CPU: 1 PID: 2062 Comm: syz-executor184 Not tainted 4.9.202+ #0
 ffff8801cf257ca0 ffffffff81b55d2b ffff8801c977ec28 0000000000000000
 0000000000000002 00000000000000c7 ffff8801d209df00 ffff8801cf257cd0
 ffffffff81406867 ffffea00074d45c0 dffffc0000000000 ffff8801cf257d78
Call Trace:
 [<000000000d8f2bba>] __dump_stack lib/dump_stack.c:15 [inline]
 [<000000000d8f2bba>] dump_stack+0xcb/0x130 lib/dump_stack.c:56
 [<00000000ff27527b>] lockdep_rcu_suspicious.cold+0x10a/0x149 kernel/locking/lockdep.c:4458
 [<0000000019b3d172>] radix_tree_deref_slot include/linux/radix-tree.h:199 [inline]
 [<0000000019b3d172>] shmem_tag_pins mm/shmem.c:2467 [inline]
 [<0000000019b3d172>] shmem_wait_for_pins mm/shmem.c:2506 [inline]
 [<0000000019b3d172>] shmem_add_seals+0xa44/0x1020 mm/shmem.c:2622
 [<000000003a7a5a43>] shmem_fcntl+0xf7/0x130 mm/shmem.c:2657
 [<0000000

Crashes (1869):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/25 07:52 android-4.9 258971b8e1ac 598ca6c8 .config console log report syz C ci-android-49-kasan-gce-root
2019/11/21 14:11 android-4.9 258971b8e1ac 8098ea0f .config console log report syz C ci-android-49-kasan-gce-root
2019/11/21 08:26 android-4.9 258971b8e1ac 8098ea0f .config console log report syz C ci-android-49-kasan-gce-root
2019/11/20 22:34 android-4.9 258971b8e1ac 8098ea0f .config console log report syz C ci-android-49-kasan-gce-root
2019/11/25 10:16 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 09:14 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 08:56 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 06:55 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 05:43 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 05:22 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 04:18 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 03:01 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 02:52 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 01:44 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/25 00:11 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 23:29 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 22:29 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 22:16 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 21:00 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 20:15 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 19:11 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 17:58 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 16:56 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 15:48 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 15:21 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 14:16 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 13:12 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 12:48 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 11:30 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 10:10 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 09:05 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 08:59 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 07:53 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 07:52 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 06:38 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 05:34 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 04:29 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 03:28 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 02:27 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 02:24 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 01:14 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/24 00:04 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/23 23:58 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/23 22:57 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/23 21:50 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/23 20:45 android-4.9 258971b8e1ac 598ca6c8 .config console log report ci-android-49-kasan-gce-root
2019/11/16 14:07 android-4.9 258971b8e1ac d5696d51 .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.