syzbot


BUG: sleeping function called from invalid context at net/core/dev.c:LINE

Status: fixed on 2018/10/30 01:28
Subsystems: bpf
[Documentation on labels]
Fix commit: cee271678d0e xsk: do not call synchronize_net() under RCU read lock
First crash: 2054d, last: 2045d

Sample crash report:
8021q: adding VLAN 0 to HW filter on device bond0
IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
8021q: adding VLAN 0 to HW filter on device team0
BUG: sleeping function called from invalid context at net/core/dev.c:9010
in_atomic(): 1, irqs_disabled(): 0, pid: 6092, name: syz-executor0
INFO: lockdep is turned off.
Preemption disabled at:
[<ffffffff818c0df3>] map_update_elem+0x423/0xd50 kernel/bpf/syscall.c:806
CPU: 1 PID: 6092 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #50
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113
 ___might_sleep.cold.82+0x1ba/0x1f3 kernel/sched/core.c:6143
 __might_sleep+0x95/0x190 kernel/sched/core.c:6096
 synchronize_net+0x1d/0x60 net/core/dev.c:9010
 xsk_map_update_elem+0x2b0/0x470 kernel/bpf/xskmap.c:197
 map_update_elem+0x60c/0xd50 kernel/bpf/syscall.c:829
 __do_sys_bpf kernel/bpf/syscall.c:2363 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:2334 [inline]
 __x64_sys_bpf+0x32d/0x510 kernel/bpf/syscall.c:2334
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457579
Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fdbadfa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579
RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000002
RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdbadfa96d4
R13: 00000000004bd93a R14: 00000000004cc2b0 R15: 00000000ffffffff
BUG: scheduling while atomic: syz-executor0/6092/0x00000002
INFO: lockdep is turned off.
Modules linked in:
Preemption disabled at:
[<ffffffff818c0df3>] map_update_elem+0x423/0xd50 kernel/bpf/syscall.c:806

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/10/08 13:02 upstream 0238df646e62 8b311eaf .config console log report syz ci-upstream-kasan-gce-smack-root
2018/10/08 12:30 upstream 0238df646e62 8b311eaf .config console log report syz ci-upstream-kasan-gce-root
2018/10/08 12:29 upstream 0238df646e62 8b311eaf .config console log report syz ci-upstream-kasan-gce-selinux-root
2018/10/08 12:09 net-old 7e823644b605 8b311eaf .config console log report syz ci-upstream-net-this-kasan-gce
2018/10/08 12:34 net-next-old abf1a08ff323 8b311eaf .config console log report syz ci-upstream-net-kasan-gce
2018/10/08 13:31 linux-next ae16eea39a86 8b311eaf .config console log report syz ci-upstream-linux-next-kasan-gce-root
2018/10/08 11:51 net-old 7e823644b605 8b311eaf .config console log report ci-upstream-net-this-kasan-gce
2018/10/17 08:46 net-next-old aadd4355918f 1ba7fd7e .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.