WARNING: suspicious RCU usage in bond_ipsec_add

WARNING: suspicious RCU usage in bond_ipsec_add_sa (2)
Status: upstream: reported C repro on 2020/09/21 09:51
Reported-by: syzbot+11dcfe6879155fbb6a4e@syzkaller.appspotmail.com
First crash: 163d, last: 9h53m

Cause bisection: introduced by (bisect log) :
commit a3b658cfb66497525278cbf852913a04dbaae992
Author: Jarod Wilson <jarod@redhat.com>
Date: Tue Jun 30 18:49:41 2020 +0000

bonding: allow xfrm offload setup post-module-load

Crash: WARNING: suspicious RCU usage in bond_ipsec_add_sa (log)
Repro: C syz .config

similar bugs (1):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	WARNING: suspicious RCU usage in bond_ipsec_add_sa				214	167d	238d	17/21	fixed on 2020/09/16 22:51

Sample crash report:

netlink: 'syz-executor863': attribute type 1 has an invalid length.
=============================
WARNING: suspicious RCU usage
5.10.0-rc7-syzkaller #0 Not tainted
-----------------------------
drivers/net/bonding/bond_main.c:395 suspicious rcu_dereference_check() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
1 lock held by syz-executor863/8476:
 #0: ffffffff8c917228 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{3:3}, at: xfrm_netlink_rcv+0x5c/0x90 net/xfrm/xfrm_user.c:2763

stack backtrace:
CPU: 1 PID: 8476 Comm: syz-executor863 Not tainted 5.10.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x107/0x163 lib/dump_stack.c:118
 bond_ipsec_add_sa+0x1dc/0x240 drivers/net/bonding/bond_main.c:395
 xfrm_dev_state_add+0x2da/0x7b0 net/xfrm/xfrm_device.c:268
 xfrm_state_construct net/xfrm/xfrm_user.c:655 [inline]
 xfrm_add_sa+0x2166/0x34f0 net/xfrm/xfrm_user.c:684
 xfrm_user_rcv_msg+0x42f/0x8b0 net/xfrm/xfrm_user.c:2752
 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2494
 xfrm_netlink_rcv+0x6b/0x90 net/xfrm/xfrm_user.c:2764
 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline]
 netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1330
 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2353
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2407
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2440
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x440449
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fffe4f80d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440449
RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004
RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401c50
R13: 0000000000401ce0 R14: 0000000000000000 R15: 0000000000000000
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 8476 Comm: syz-executor863 Not tainted 5.10.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bond_ipsec_add_sa+0x9e/0x240 drivers/net/bonding/bond_main.c:396
Code: 04 31 ff 89 c3 89 c6 e8 60 e3 d8 fc 85 db 0f 85 f6 00 00 00 e8 03 eb d8 fc 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 5f 01 00 00 48 8d bd d0 02 00 00 49 8b 5d 00 48
RSP: 0018:ffffc9000106f498 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8155a917
RDX: 0000000000000000 RSI: ffffffff8497196d RDI: 0000000000000000
RBP: ffff888018f94000 R08: 0000000000000001 R09: ffffffff8ebaf727
R10: fffffbfff1d75ee4 R11: 0000000000000000 R12: ffff8880271f4000
R13: 0000000000000000 R14: ffff888018f942e0 R15: ffff888018f942e4
FS:  0000000001f21880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc254e27000 CR3: 0000000014df1000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 xfrm_dev_state_add+0x2da/0x7b0 net/xfrm/xfrm_device.c:268
 xfrm_state_construct net/xfrm/xfrm_user.c:655 [inline]
 xfrm_add_sa+0x2166/0x34f0 net/xfrm/xfrm_user.c:684
 xfrm_user_rcv_msg+0x42f/0x8b0 net/xfrm/xfrm_user.c:2752
 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2494
 xfrm_netlink_rcv+0x6b/0x90 net/xfrm/xfrm_user.c:2764
 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline]
 netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1330
 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2353
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2407
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2440
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x440449
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fffe4f80d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440449
RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004
RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401c50
R13: 0000000000401ce0 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace aa42dce50d377e54 ]---
RIP: 0010:bond_ipsec_add_sa+0x9e/0x240 drivers/net/bonding/bond_main.c:396
Code: 04 31 ff 89 c3 89 c6 e8 60 e3 d8 fc 85 db 0f 85 f6 00 00 00 e8 03 eb d8 fc 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 5f 01 00 00 48 8d bd d0 02 00 00 49 8b 5d 00 48
RSP: 0018:ffffc9000106f498 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8155a917
RDX: 0000000000000000 RSI: ffffffff8497196d RDI: 0000000000000000
RBP: ffff888018f94000 R08: 0000000000000001 R09: ffffffff8ebaf727
R10: fffffbfff1d75ee4 R11: 0000000000000000 R12: ffff8880271f4000
R13: 0000000000000000 R14: ffff888018f942e0 R15: ffff888018f942e4
FS:  0000000001f21880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc254e27000 CR3: 0000000014df1000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (413):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci-upstream-kasan-gce	2020/12/09 03:31	upstream	7d8761ba	a7f7f4a4	.config	log	report	syz	C
ci-upstream-kasan-gce-root	2020/11/06 23:01	upstream	521b619a	64069d48	.config	log	report	syz	C
ci-upstream-kasan-gce-selinux-root	2020/11/06 02:47	upstream	521b619a	64069d48	.config	log	report	syz	C
ci-upstream-kasan-gce-selinux-root	2020/11/06 02:27	upstream	521b619a	64069d48	.config	log	report	syz	C
ci-upstream-kasan-gce-smack-root	2020/10/03 12:42	upstream	d3d45f82	2653fa43	.config	log	report	syz	C
ci-upstream-kasan-gce-smack-root	2020/10/03 12:12	upstream	d3d45f82	2653fa43	.config	log	report	syz	C
ci-upstream-kasan-gce	2020/09/24 00:26	upstream	805c6d3c	287cd75a	.config	log	report	syz	C
ci-upstream-kasan-gce	2020/09/23 23:35	upstream	805c6d3c	287cd75a	.config	log	report	syz	C
ci-upstream-net-this-kasan-gce	2020/10/31 08:44	net	2b94f526	18e33098	.config	log	report	syz	C
ci-upstream-net-this-kasan-gce	2020/09/20 19:04	net	f13d783a	9564d2e9	.config	log	report	syz	C
ci-upstream-net-this-kasan-gce	2020/09/20 18:07	net	f13d783a	9564d2e9	.config	log	report	syz	C
ci-upstream-net-kasan-gce	2020/10/31 06:59	net-next	1fb74191	18e33098	.config	log	report	syz	C
ci-upstream-net-kasan-gce	2020/09/20 19:03	net-next	dd92f179	9564d2e9	.config	log	report	syz	C
ci-upstream-net-kasan-gce	2020/09/20 18:08	net-next	dd92f179	9564d2e9	.config	log	report	syz	C
ci-upstream-net-kasan-gce	2021/03/01 19:42	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/03/01 12:53	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/03/01 09:27	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/03/01 05:16	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/03/01 01:55	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/28 19:09	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/28 12:11	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/28 10:04	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/27 09:50	net-next	d310ec03	4c37c133	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/26 09:11	net-next	d310ec03	76f7fc95	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/26 06:53	net-next	d310ec03	76f7fc95	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/26 01:05	net-next	d310ec03	76f7fc95	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/25 11:26	net-next	d310ec03	fcc6d71b	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/25 03:02	net-next	d310ec03	fcc6d71b	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/23 23:32	net-next	d310ec03	fcc6d71b	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/23 15:32	net-next	d310ec03	fcc6d71b	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/23 07:25	net-next	d310ec03	c26fb06b	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/23 05:36	net-next	d310ec03	c26fb06b	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/22 16:16	net-next	d310ec03	a659b3f1	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/22 13:38	net-next	d310ec03	a659b3f1	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/22 12:27	net-next	d310ec03	a659b3f1	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/22 10:15	net-next	d310ec03	a659b3f1	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/21 12:35	net-next	38b5133a	3e5ed8b4	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/21 11:06	net-next	38b5133a	3e5ed8b4	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/21 07:24	net-next	38b5133a	3e5ed8b4	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/21 05:26	net-next	38b5133a	3e5ed8b4	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/21 03:34	net-next	38b5133a	3e5ed8b4	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/21 03:33	net-next	38b5133a	3e5ed8b4	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/19 19:56	net-next	38b5133a	f689d40a	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/17 12:46	net-next	d489ded1	052f8d9f	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/16 11:25	net-next	9ec5eea5	98682e5e	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/15 21:09	net-next	d2a04370	98682e5e	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/12 13:38	net-next	3c5a2fd0	a5f86b15	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/12 01:44	net-next	e4b62cf7	a5f86b15	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/11 23:31	net-next	e4b62cf7	a5f86b15	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/11 18:09	net-next	e4b62cf7	a5f86b15	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/11 10:28	net-next	dc9d8758	a52ee10a	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/11 07:41	net-next	dc9d8758	a52ee10a	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/10 20:34	net-next	de1db4a6	a52ee10a	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/10 10:47	net-next	de1db4a6	2bd9619f	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/10 05:01	net-next	fc1a8db3	2bd9619f	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/09 23:32	net-next	fc1a8db3	2bd9619f	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/09 13:58	net-next	5ea3c72c	2bd9619f	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/09 09:21	net-next	8e571586	2bd9619f	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/08 19:20	net-next	badc6ac3	2ce644fc	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/08 03:46	net-next	badc6ac3	2ce644fc	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/07 23:41	net-next	badc6ac3	2ce644fc	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/07 15:46	net-next	badc6ac3	2ce644fc	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/07 09:04	net-next	badc6ac3	2ce644fc	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/07 05:29	net-next	c90597bd	0655e081	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-net-kasan-gce	2021/02/06 14:56	net-next	4d469ec8	0655e081	.config	log	report			info	WARNING: suspicious RCU usage in bond_ipsec_add_sa
ci-upstream-kasan-gce-root	2020/12/11 10:38	upstream	33dc9614	f900b48c	.config	log	report			info
ci-qemu-upstream	2020/11/01 19:41	upstream	31f02006	8bc4594f	.config	log	report			info
ci-upstream-kasan-gce-smack-root	2020/10/06 21:58	upstream	7575fdda	1880b4a9	.config	log	report			info
ci-upstream-kasan-gce-386	2021/01/15 16:28	upstream	14662050	65a7a854	.config	log	report			info
ci-upstream-net-this-kasan-gce	2020/12/17 07:10	net	57030a0b	04201c06	.config	log	report			info
ci-upstream-net-kasan-gce	2021/01/17 07:41	net-next	c761b2df	65a7a854	.config	log	report			info
ci-upstream-net-kasan-gce	2020/09/20 01:15	net-next	a5a3303e	53ce8104	.config	log	report			info
ci-upstream-linux-next-kasan-gce-root	2020/09/27 19:20	linux-next	d1d2220c	5dd8aee8	.config	log	report			info