syzbot


WARNING: suspicious RCU usage in dev_deactivate_many

Status: closed as invalid on 2024/12/17 17:57
Subsystems: net
[Documentation on labels]
First crash: 69d, last: 69d

Sample crash report:
=============================
WARNING: suspicious RCU usage
6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 Not tainted
-----------------------------
other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
 #0: ffff888032be1148 ((wq_completion)bond0#9
){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204

stack backtrace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6821
 dev_deactivate_queue+0x167/0x190 net/sched/sch_generic.c:1290
 netdev_for_each_tx_queue include/linux/netdevice.h:2504 [inline]
 dev_deactivate_many+0xe7/0xb20 net/sched/sch_generic.c:1363
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:263
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

=============================
WARNING: suspicious RCU usage
6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 Not tainted
-----------------------------
include/linux/rtnetlink.h:100 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by kworker/u32:7/1137:
 #0: ffff888032be1148 ((wq_completion)bond0#9){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc900060bfd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2937

stack backtrace:
CPU: 2 UID: 0 PID: 1137 Comm: kworker/u32:7 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6821
 dev_ingress_queue include/linux/rtnetlink.h:100 [inline]
 dev_deactivate_many+0x8af/0xb20 net/sched/sch_generic.c:1365
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:175
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:263
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2717 [inline]
 bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2939
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
3 locks held by kworker/u32:7/1137:
 #0: ffff888032be1148 ((wq_completion)bond0#9){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc900060bfd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2937
CPU: 2 UID: 0 PID: 1137 Comm: kworker/u32:7 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
 <TASK>
 synchronize_net+0x1b/0x60 net/core/dev.c:11284
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

WARNING: suspicious RCU usage
-----------------------------

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by kworker/u32:7/1137:
 #0: ffff888032be1148 ((wq_completion)bond0#9){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc900060bfd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2937

stack backtrace:
CPU: 2 UID: 0 PID: 1137 Comm: kworker/u32:7 Tainted: G        W          6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6821
 synchronize_rcu_expedited+0x1e5/0x450 kernel/rcu/tree_exp.h:946
 synchronize_net+0x3e/0x60 net/core/dev.c:11286
 dev_deactivate_many+0x2a1/0xb20 net/sched/sch_generic.c:1377
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:175
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:263
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2717 [inline]
 bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2939
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

=============================
[ BUG: Invalid wait context ]
6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 Tainted: G        W         
-----------------------------
kworker/u32:7/1137 is trying to lock:
ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329
other info that might help us debug this:
context-{4:4}
3 locks held by kworker/u32:7/1137:
 #0: ffff888032be1148 ((wq_completion)bond0#9){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 kernel/workqueue.c:3204
 #1: ffffc900060bfd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3205
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2937
stack backtrace:
CPU: 2 UID: 0 PID: 1137 Comm: kworker/u32:7 Tainted: G        W          6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_lock_invalid_wait_context kernel/locking/lockdep.c:4802 [inline]
 check_wait_context kernel/locking/lockdep.c:4874 [inline]
 __lock_acquire+0x13db/0x3ce0 kernel/locking/lockdep.c:5152
 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5825
 __mutex_lock_common kernel/locking/mutex.c:608 [inline]
 __mutex_lock+0x175/0x9c0 kernel/locking/mutex.c:752
 exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329
 synchronize_rcu_expedited+0x290/0x450 kernel/rcu/tree_exp.h:976
 synchronize_net+0x3e/0x60 net/core/dev.c:11286
 dev_deactivate_many+0x2a1/0xb20 net/sched/sch_generic.c:1377
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:175
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:263
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2717 [inline]
 bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2939
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
------------[ cut here ]------------
Voluntary context switch within RCU read-side critical section!
WARNING: CPU: 2 PID: 1137 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xc5c/0x1ae0 kernel/rcu/tree_plugin.h:331
Modules linked in:
CPU: 2 UID: 0 PID: 1137 Comm: kworker/u32:7 Tainted: G        W          6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 kernel/rcu/tree_plugin.h:331
Code: 79 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 53 c1 d2 0e 01 90 48 c7 c7 c0 a5 6e 8b e8 f5 1d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80
RSP: 0018:ffffc900060bf3b0 EFLAGS: 00010086
RAX: 0000000000000000 RBX: ffff88806a83fe40 RCX: ffffffff814e6e79
RDX: ffff8880277d8000 RSI: ffffffff814e6e86 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880277d8000
R13: ffff8880277d8000 R14: ffff8880277d8000 R15: ffff88806a83ee80
FS:  0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff74719f7c CR3: 000000002aa18000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __schedule+0x297/0x5740 kernel/sched/core.c:6573
 __schedule_loop kernel/sched/core.c:6770 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6785
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6842
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 exp_funnel_lock+0x1a4/0x3b0 kernel/rcu/tree_exp.h:329
 synchronize_rcu_expedited+0x290/0x450 kernel/rcu/tree_exp.h:976
 synchronize_net+0x3e/0x60 net/core/dev.c:11286
 dev_deactivate_many+0x2a1/0xb20 net/sched/sch_generic.c:1377
 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1403
 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:175
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:263
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62
 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2717 [inline]
 bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2939
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/13 00:40 upstream 3022e9d00ebe 62026c85 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING: suspicious RCU usage in dev_deactivate_many
* Struck through repros no longer work on HEAD.