============================= WARNING: suspicious RCU usage 4.14.0-rc5+ #142 Not tainted ----------------------------- ./include/linux/inetdevice.h:230 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor1/24104: #0: (rcu_read_lock){....}, at: [] inet_rtm_getroute+0xaa0/0x2d70 net/ipv4/route.c:2738 stack backtrace: CPU: 1 PID: 24104 Comm: syz-executor1 Not tainted 4.14.0-rc5+ #142 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:16 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:52 lockdep_rcu_suspicious+0x123/0x170 kernel/locking/lockdep.c:4665 __in_dev_get_rtnl include/linux/inetdevice.h:230 [inline] fib_dump_info+0x1136/0x13d0 net/ipv4/fib_semantics.c:1377 inet_rtm_getroute+0xf97/0x2d70 net/ipv4/route.c:2785 rtnetlink_rcv_msg+0x51c/0x1090 net/core/rtnetlink.c:4237 netlink_rcv_skb+0x216/0x440 net/netlink/af_netlink.c:2409 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:4261 netlink_unicast_kernel net/netlink/af_netlink.c:1273 [inline] netlink_unicast+0x4e8/0x6f0 net/netlink/af_netlink.c:1299 netlink_sendmsg+0xa4a/0xe60 net/netlink/af_netlink.c:1862 sock_sendmsg_nosec net/socket.c:633 [inline] sock_sendmsg+0xca/0x110 net/socket.c:643 sock_write_iter+0x31a/0x5d0 net/socket.c:912 call_write_iter include/linux/fs.h:1770 [inline] new_sync_write fs/read_write.c:468 [inline] __vfs_write+0x684/0x970 fs/read_write.c:481 vfs_write+0x189/0x510 fs/read_write.c:543 SYSC_write fs/read_write.c:588 [inline] SyS_write+0xef/0x220 fs/read_write.c:580 entry_SYSCALL_64_fastpath+0x1f/0xbe RIP: 0033:0x452719 RSP: 002b:00007f87e5b7bbe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452719 RDX: 0000000000000024 RSI: 0000000020226000 RDI: 0000000000000014 RBP: 0000000000000082 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 R13: 0000000000a6f7ff R14: 00007f87e5b7c9c0 R15: 0000000000000000 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pig=24116 comm=syz-executor5 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pig=24116 comm=syz-executor5 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24203 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pig=24218 comm=syz-executor4 selinux_nlmsg_perm: 1 callbacks suppressed SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pig=24203 comm=syz-executor4 IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready IPv6: ADDRCONF(NETDEV_UP): i: link is not ready dccp_close: ABORT with 12 bytes unread SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38578 sclass=netlink_route_socket pig=24412 comm=syz-executor6 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38578 sclass=netlink_route_socket pig=24412 comm=syz-executor6 netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. sctp: [Deprecated]: syz-executor6 (pid 24433) Use of int in max_burst socket option deprecated. Use struct sctp_assoc_value instead sctp: [Deprecated]: syz-executor6 (pid 24433) Use of int in max_burst socket option deprecated. Use struct sctp_assoc_value instead audit: type=1326 audit(1508636296.470:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636296.470:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636296.470:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636296.470:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636296.470:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636296.470:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636296.470:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app audit: type=1326 audit(1508636296.470:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24463 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app sctp: [Deprecated]: syz-executor3 (pid 24544) Use of int in maxseg socket option. Use struct sctp_assoc_value instead sctp: [Deprecated]: syz-executor3 (pid 24586) Use of int in maxseg socket option. Use struct sctp_assoc_value instead device eql entered promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready device lo entered promiscuous mode device lo left promiscuous mode netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. device lo entered promiscuous mode netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. device lo left promiscuous mode QAT: Invalid ioctl QAT: Invalid ioctl netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. netlink: 1 bytes leftover after parsing attributes in process `syz-executor2'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 1 bytes leftover after parsing attributes in process `syz-executor2'. loop_reread_partitions: partition scan of loop0 (-\t@r9hxGQ:[il L*@R-Tr-x) failed (rc=-13) netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. kauditd_printk_skb: 43 callbacks suppressed audit: type=1326 audit(1508636299.279:15162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24967 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x0 audit: type=1326 audit(1508636299.524:15163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=24967 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x0 device lo left promiscuous mode device lo entered promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready QAT: Invalid ioctl device lo left promiscuous mode QAT: Invalid ioctl audit: type=1326 audit(1508636300.078:15164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25131 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0xffff0000 audit: type=1326 audit(1508636300.206:15165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25150 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636300.206:15166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25150 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=53 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636300.206:15167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25150 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636300.206:15168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25150 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=45 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636300.206:15169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25150 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636300.206:15170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25150 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=85 compat=0 ip=0x452719 code=0x7ffc0000 audit: type=1326 audit(1508636300.206:15171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25150 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452719 code=0x7ffc0000 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25318 comm=syz-executor1 sg_write: data in/out 3171656/144 bytes for SCSI command 0xff-- guessing data in; program syz-executor6 not setting count and/or reply_len properly sg_write: data in/out 3171656/144 bytes for SCSI command 0xff-- guessing data in; program syz-executor6 not setting count and/or reply_len properly device gre0 entered promiscuous mode device lo entered promiscuous mode SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pig=25459 comm=syz-executor7 netlink: 60 bytes leftover after parsing attributes in process `syz-executor7'. device lo left promiscuous mode SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pig=25459 comm=syz-executor7 netlink: 60 bytes leftover after parsing attributes in process `syz-executor7'. netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. IPv6: NLM_F_REPLACE set, but no existing node found! netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. IPv6: NLM_F_REPLACE set, but no existing node found! SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3131 sclass=netlink_xfrm_socket pig=25560 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3131 sclass=netlink_xfrm_socket pig=25560 comm=syz-executor4 QAT: Invalid ioctl QAT: Invalid ioctl