syzbot


INFO: suspicious RCU usage in __l2tp_session_unhash

Status: auto-closed as invalid on 2019/02/22 12:31
First crash: 2190d, last: 2071d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 INFO: suspicious RCU usage in __l2tp_session_unhash C 9 2083d 1842d 0/2 public: reported C repro on 2019/04/11 08:44

Sample crash report:
Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable

===============================
[ INFO: suspicious RCU usage. ]
SELinux:  policydb magic number 0xef03ff8c does not match expected magic number 0xf97cff8c
Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
4.9.123-g520d10d3 #81 Not tainted
-------------------------------
kernel/rcu/tree_plugin.h:678 Illegal synchronize_rcu() in RCU read-side critical section!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 0
4 locks held by blkid/12703:
 #0:  (&mm->mmap_sem){++++++}, at: [<ffffffff810dcabb>] __do_page_fault+0x36b/0xd50 arch/x86/mm/fault.c:1337
 #1:  (rcu_read_lock){......}, at: [<ffffffff81439bda>] filemap_map_pages+0xfa/0xd40 mm/filemap.c:2242
 #2:  (&(ptlock_ptr(page))->rlock#2){+.+...}, at: [<ffffffff814ce5f3>] spin_lock include/linux/spinlock.h:302 [inline]
 #2:  (&(ptlock_ptr(page))->rlock#2){+.+...}, at: [<ffffffff814ce5f3>] pte_alloc_one_map mm/memory.c:2921 [inline]
 #2:  (&(ptlock_ptr(page))->rlock#2){+.+...}, at: [<ffffffff814ce5f3>] alloc_set_pte+0xb13/0x1290 mm/memory.c:3019
 #3:  (rcu_callback){......}, at: [<ffffffff81289b8e>] __rcu_reclaim kernel/rcu/rcu.h:108 [inline]
 #3:  (rcu_callback){......}, at: [<ffffffff81289b8e>] rcu_do_batch kernel/rcu/tree.c:2789 [inline]
 #3:  (rcu_callback){......}, at: [<ffffffff81289b8e>] invoke_rcu_callbacks kernel/rcu/tree.c:3053 [inline]
 #3:  (rcu_callback){......}, at: [<ffffffff81289b8e>] __rcu_process_callbacks kernel/rcu/tree.c:3020 [inline]
 #3:  (rcu_callback){......}, at: [<ffffffff81289b8e>] rcu_process_callbacks+0x98e/0x12b0 kernel/rcu/tree.c:3037

stack backtrace:
CPU: 1 PID: 12703 Comm: blkid Not tainted 4.9.123-g520d10d3 #81
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801db307d60 ffffffff81eb9689 ffff8801a12d9800 0000000000000000
 0000000000000002 ffffffff83c6e380 ffff8801c9927558 ffff8801db307d90
 ffffffff81428611 ffff8801c9927400 ffff8801a5fb4c48 ffff8801a5fb4448
Call Trace:
 <IRQ> [  154.753745]  [<ffffffff81eb9689>] __dump_stack lib/dump_stack.c:15 [inline]
 <IRQ> [  154.753745]  [<ffffffff81eb9689>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81428611>] lockdep_rcu_suspicious.cold.48+0x110/0x141 kernel/locking/lockdep.c:4455
 [<ffffffff81286428>] synchronize_rcu+0x68/0x90 kernel/rcu/tree_plugin.h:675
 [<ffffffff836c4f2a>] __l2tp_session_unhash+0x38a/0x520 net/l2tp/l2tp_core.c:1796
SELinux:  policydb magic number 0xef03ff8c does not match expected magic number 0xf97cff8c
 [<ffffffff836c52b7>] l2tp_tunnel_closeall+0x1f7/0x350 net/l2tp/l2tp_core.c:1364
 [<ffffffff836c5b72>] l2tp_tunnel_destruct+0x2f2/0x590 net/l2tp/l2tp_core.c:1324
 [<ffffffff830281f5>] __sk_destruct+0x55/0x590 net/core/sock.c:1428
 [<ffffffff81289aae>] __rcu_reclaim kernel/rcu/rcu.h:118 [inline]
 [<ffffffff81289aae>] rcu_do_batch kernel/rcu/tree.c:2789 [inline]
 [<ffffffff81289aae>] invoke_rcu_callbacks kernel/rcu/tree.c:3053 [inline]
 [<ffffffff81289aae>] __rcu_process_callbacks kernel/rcu/tree.c:3020 [inline]
 [<ffffffff81289aae>] rcu_process_callbacks+0x8ae/0x12b0 kernel/rcu/tree.c:3037
 [<ffffffff83a08980>] __do_softirq+0x210/0x940 kernel/softirq.c:288
 [<ffffffff8114d554>] invoke_softirq kernel/softirq.c:368 [inline]
 [<ffffffff8114d554>] irq_exit+0x114/0x150 kernel/softirq.c:409
 [<ffffffff83a07561>] exiting_irq arch/x86/include/asm/apic.h:669 [inline]
 [<ffffffff83a07561>] smp_apic_timer_interrupt+0x81/0xa0 arch/x86/kernel/apic/apic.c:962
 [<ffffffff83a036f0>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> [  154.877193]  [<ffffffff81222d25>] ? __read_once_size include/linux/compiler.h:243 [inline]
 <EOI> [  154.877193]  [<ffffffff81222d25>] ? list_empty include/linux/list.h:189 [inline]
 <EOI> [  154.877193]  [<ffffffff81222d25>] ? waitqueue_active include/linux/wait.h:137 [inline]
 <EOI> [  154.877193]  [<ffffffff81222d25>] ? __wake_up_bit+0x85/0xe0 kernel/sched/wait.c:455
 [<ffffffff81437ddb>] wake_up_page include/linux/pagemap.h:512 [inline]
 [<ffffffff81437ddb>] unlock_page+0xab/0x110 mm/filemap.c:865
 [<ffffffff8143a4c6>] filemap_map_pages+0x9e6/0xd40 mm/filemap.c:2303
 [<ffffffff814d4094>] do_fault_around mm/memory.c:3144 [inline]
 [<ffffffff814d4094>] do_read_fault mm/memory.c:3184 [inline]
 [<ffffffff814d4094>] do_fault mm/memory.c:3324 [inline]
 [<ffffffff814d4094>] handle_pte_fault mm/memory.c:3525 [inline]
 [<ffffffff814d4094>] __handle_mm_fault mm/memory.c:3612 [inline]
 [<ffffffff814d4094>] handle_mm_fault+0x1db4/0x2a00 mm/memory.c:3649
 [<ffffffff810dccff>] __do_page_fault+0x5af/0xd50 arch/x86/mm/fault.c:1408
 [<ffffffff810dd4c7>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1471
 [<ffffffff83a02f08>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:951
ODEBUG: object ffff8801db307ce8 is NOT on stack ffff8801d4828000, but annotated
------------[ cut here ]------------
WARNING: CPU: 1 PID: 12703 at lib/debugobjects.c:303 debug_object_is_on_stack lib/debugobjects.c:303 [inline]
WARNING: CPU: 1 PID: 12703 at lib/debugobjects.c:303 __debug_object_init.cold.10+0x6b/0x2b0 lib/debugobjects.c:329

Crashes (46):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/24 10:50 https://android.googlesource.com/kernel/common android-4.9 520d10d31ca4 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/24 08:20 https://android.googlesource.com/kernel/common android-4.9 520d10d31ca4 95b5c82b .config console log report ci-android-49-kasan-gce-root
2018/08/22 15:07 https://android.googlesource.com/kernel/common android-4.9 8dd3fc2ed765 95b5c82b .config console log report ci-android-49-kasan-gce
2018/08/18 16:09 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 db1858f6 .config console log report ci-android-49-kasan-gce-root
2018/08/15 15:36 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 9ccc1d45 .config console log report ci-android-49-kasan-gce-root
2018/08/15 15:24 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 9ccc1d45 .config console log report ci-android-49-kasan-gce
2018/08/07 07:43 https://android.googlesource.com/kernel/common android-4.9 47b77b8d01c4 1beb8136 .config console log report ci-android-49-kasan-gce
2018/08/06 18:34 https://android.googlesource.com/kernel/common android-4.9 47b77b8d01c4 1beb8136 .config console log report ci-android-49-kasan-gce-root
2018/08/05 14:08 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 1beb8136 .config console log report ci-android-49-kasan-gce-root
2018/08/05 01:57 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 3476a2df .config console log report ci-android-49-kasan-gce-root
2018/08/01 12:18 https://android.googlesource.com/kernel/common android-4.9 52be322125e5 1477993e .config console log report ci-android-49-kasan-gce-root
2018/07/31 12:02 https://android.googlesource.com/kernel/common android-4.9 8956c50bdcd3 1a381291 .config console log report ci-android-49-kasan-gce
2018/07/29 22:48 https://android.googlesource.com/kernel/common android-4.9 990559158c7b 1a381291 .config console log report ci-android-49-kasan-gce-root
2018/07/23 23:22 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 912c93d7 .config console log report ci-android-49-kasan-gce
2018/07/21 23:16 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 8cc079c3 .config console log report ci-android-49-kasan-gce
2018/07/21 03:13 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 af255b09 .config console log report ci-android-49-kasan-gce
2018/07/20 18:46 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 af255b09 .config console log report ci-android-49-kasan-gce-root
2018/07/18 05:47 https://android.googlesource.com/kernel/common android-4.9 7f6f94c98c2f 6d5bd5b5 .config console log report ci-android-49-kasan-gce-root
2018/07/16 20:51 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 40cb0c9a .config console log report ci-android-49-kasan-gce
2018/07/13 19:36 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 92a49505 .config console log report ci-android-49-kasan-gce
2018/07/13 17:36 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 92a49505 .config console log report ci-android-49-kasan-gce
2018/07/12 02:39 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 2e0e3130 .config console log report ci-android-49-kasan-gce
2018/07/09 13:59 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 f25e5770 .config console log report ci-android-49-kasan-gce-root
2018/07/08 17:26 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 c9a7a4dc .config console log report ci-android-49-kasan-gce
2018/07/07 22:27 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 ab89aea9 .config console log report ci-android-49-kasan-gce
2018/07/06 09:47 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 18403e65 .config console log report ci-android-49-kasan-gce
2018/06/29 01:15 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 dba0b50e .config console log report ci-android-49-kasan-gce-root
2018/06/26 09:10 https://android.googlesource.com/kernel/common android-4.9 7143cbff9ce1 2064fc5c .config console log report ci-android-49-kasan-gce-root
2018/06/14 13:08 https://android.googlesource.com/kernel/common android-4.9 b7d377b4640b 27c5f59f .config console log report ci-android-49-kasan-gce
2018/05/26 05:13 https://android.googlesource.com/kernel/common android-4.9 0cecdf831513 f48c20b8 .config console log report ci-android-49-kasan-gce-root
2018/05/21 22:11 https://android.googlesource.com/kernel/common android-4.9 aef17a58e8ca f48c20b8 .config console log report ci-android-49-kasan-gce
2018/05/09 08:19 https://android.googlesource.com/kernel/common android-4.9 9731a2dab47e 12c7428a .config console log report ci-android-49-kasan-gce
2018/04/27 16:18 https://android.googlesource.com/kernel/common android-4.9 71fce1edd26d 7785e404 .config console log report ci-android-49-kasan-gce
2018/08/24 18:22 https://android.googlesource.com/kernel/common android-4.9 6a1b5923548a 9b0f5c75 .config console log report ci-android-49-kasan-gce-386
2018/08/24 06:13 https://android.googlesource.com/kernel/common android-4.9 7fa8c15e72a4 95b5c82b .config console log report ci-android-49-kasan-gce-386
2018/08/19 08:08 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 de20bcbb .config console log report ci-android-49-kasan-gce-386
2018/08/14 01:26 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-386
2018/08/12 14:34 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-386
2018/07/07 21:56 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 ab89aea9 .config console log report ci-android-49-kasan-gce-386
2018/07/02 16:03 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 574780b0 .config console log report ci-android-49-kasan-gce-386
2018/06/27 09:05 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 43e60f7e .config console log report ci-android-49-kasan-gce-386
2018/06/24 20:08 https://android.googlesource.com/kernel/common android-4.9 7cecc756ceae 2064fc5c .config console log report ci-android-49-kasan-gce-386
2018/06/12 05:07 https://android.googlesource.com/kernel/common android-4.9 db2c520bb56b 112eec79 .config console log report ci-android-49-kasan-gce-386
2018/05/20 11:31 https://android.googlesource.com/kernel/common android-4.9 aef17a58e8ca f48c20b8 .config console log report ci-android-49-kasan-gce-386
2018/05/18 23:03 https://android.googlesource.com/kernel/common android-4.9 e14d1a35ebd9 849705db .config console log report ci-android-49-kasan-gce-386
2018/04/29 18:04 https://android.googlesource.com/kernel/common android-4.9 71fce1edd26d bb79c6ab .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.