WARNING: locking bug in inet

WARNING: locking bug in inet_autobind
Status: auto-closed as invalid on 2019/11/01 17:53
Reported-by: syzbot+bf96d1109a777e3c5632@syzkaller.appspotmail.com
First crash: 325d, last: 325d

similar bugs (2):
Kernel	Title	Repro	Bisected	Count	Last	Reported	Patched	Status
linux-4.14	WARNING: locking bug in inet_autobind (2)			1	37d	37d	0/1	upstream: reported on 2020/04/17 18:15
upstream	WARNING: locking bug in inet_autobind	syz	cause+fix	57	11h16m	374d	0/17	upstream: reported syz repro on 2019/05/16 05:46

Sample crash report:

------------[ cut here ]------------
WARNING: CPU: 1 PID: 8550 at kernel/locking/lockdep.c:722 arch_local_save_flags arch/x86/include/asm/paravirt.h:773 [inline]
WARNING: CPU: 1 PID: 8550 at kernel/locking/lockdep.c:722 arch_local_save_flags arch/x86/include/asm/paravirt.h:771 [inline]
WARNING: CPU: 1 PID: 8550 at kernel/locking/lockdep.c:722 look_up_lock_class kernel/locking/lockdep.c:713 [inline]
WARNING: CPU: 1 PID: 8550 at kernel/locking/lockdep.c:722 register_lock_class+0xd80/0x1730 kernel/locking/lockdep.c:756
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 8550 Comm: syz-executor.5 Not tainted 4.14.132 #26
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x19c lib/dump_stack.c:53
 panic+0x1f2/0x426 kernel/panic.c:182
audit: type=1800 audit(1562262745.790:58): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16745 res=0
 __warn.cold+0x2f/0x36 kernel/panic.c:546
 report_bug+0x216/0x254 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x1bb/0x310 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:960
RIP: 0010:look_up_lock_class kernel/locking/lockdep.c:722 [inline]
RIP: 0010:register_lock_class+0xd80/0x1730 kernel/locking/lockdep.c:756
RSP: 0018:ffff88807a7cfa00 EFLAGS: 00010083
RAX: dffffc0000000000 RBX: ffffffff891a46c0 RCX: ffff88806b2400a0
RDX: 1ffff1100d648017 RSI: 1ffffffff11a4d7e RDI: ffff88806b2400b8
RBP: ffff88807a7cfac0 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff88cbc828 R11: 0000000000000000 R12: ffffffff88d26bd0
R13: 1ffff1100f4f9f4b R14: ffffffff86eea700 R15: 0000000000000000
 __lock_acquire+0x147/0x45e0 kernel/locking/lockdep.c:3374
 lock_acquire+0x16f/0x430 kernel/locking/lockdep.c:3991
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline]
 _raw_spin_lock_bh+0x33/0x50 kernel/locking/spinlock.c:176
 spin_lock_bh include/linux/spinlock.h:322 [inline]
 lock_sock_nested+0x3f/0x110 net/core/sock.c:2757
 lock_sock include/net/sock.h:1462 [inline]
 inet_autobind+0x20/0x180 net/ipv4/af_inet.c:178
 inet_dgram_connect+0x136/0x1e0 net/ipv4/af_inet.c:538
 SYSC_connect+0x1f6/0x2d0 net/socket.c:1655
 SyS_connect+0x24/0x30 net/socket.c:1636
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4597c9
RSP: 002b:00007f911d02fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004597c9
RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f911d0306d4
R13: 00000000004bfd07 R14: 00000000004d1838 R15: 00000000ffffffff
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	Maintainers
ci2-linux-4-14	2019/07/04 17:52	linux-4.14.y	e3c1b273	deef5fbc	.config	log	report			davem@davemloft.net, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, yoshfuji@linux-ipv6.org