============================= WARNING: suspicious RCU usage 4.15.0+ #307 Not tainted ----------------------------- ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor0/23522: #0: (rcu_read_lock){....}, at: [<00000000db08b9b8>] __rds_conn_create+0xe46/0x1b50 net/rds/connection.c:218 stack backtrace: CPU: 0 PID: 23522 Comm: syz-executor0 Not tainted 4.15.0+ #307 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 lockdep_rcu_suspicious+0x123/0x170 kernel/locking/lockdep.c:4592 rcu_preempt_sleep_check include/linux/rcupdate.h:301 [inline] ___might_sleep+0x385/0x470 kernel/sched/core.c:6093 __might_sleep+0x95/0x190 kernel/sched/core.c:6081 slab_pre_alloc_hook mm/slab.h:420 [inline] slab_alloc mm/slab.c:3365 [inline] kmem_cache_alloc_trace+0x299/0x740 mm/slab.c:3605 kmalloc include/linux/slab.h:512 [inline] kzalloc include/linux/slab.h:701 [inline] rds_loop_conn_alloc+0xc8/0x380 net/rds/loop.c:126 __rds_conn_create+0x112f/0x1b50 net/rds/connection.c:227 rds_conn_create_outgoing+0x3f/0x50 net/rds/connection.c:309 rds_sendmsg+0xda3/0x2390 net/rds/send.c:1126 sock_sendmsg_nosec net/socket.c:630 [inline] sock_sendmsg+0xca/0x110 net/socket.c:640 SYSC_sendto+0x361/0x5c0 net/socket.c:1747 SyS_sendto+0x40/0x50 net/socket.c:1715 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007fb2f0cebc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fb2f0cec6d4 RCX: 0000000000453a59 RDX: 0000000000000000 RSI: 0000000020dbf000 RDI: 0000000000000013 RBP: 000000000071bea0 R08: 0000000020b2d000 R09: 0000000000000010 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004b9 R14: 00000000006f71f8 R15: 0000000000000000 BUG: sleeping function called from invalid context at mm/slab.h:420 in_atomic(): 1, irqs_disabled(): 0, pid: 23522, name: syz-executor0 1 lock held by syz-executor0/23522: #0: (rcu_read_lock){....}, at: [<00000000db08b9b8>] __rds_conn_create+0xe46/0x1b50 net/rds/connection.c:218 CPU: 0 PID: 23522 Comm: syz-executor0 Not tainted 4.15.0+ #307 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 ___might_sleep+0x2b2/0x470 kernel/sched/core.c:6128 __might_sleep+0x95/0x190 kernel/sched/core.c:6081 slab_pre_alloc_hook mm/slab.h:420 [inline] slab_alloc mm/slab.c:3365 [inline] kmem_cache_alloc_trace+0x299/0x740 mm/slab.c:3605 kmalloc include/linux/slab.h:512 [inline] kzalloc include/linux/slab.h:701 [inline] rds_loop_conn_alloc+0xc8/0x380 net/rds/loop.c:126 __rds_conn_create+0x112f/0x1b50 net/rds/connection.c:227 rds_conn_create_outgoing+0x3f/0x50 net/rds/connection.c:309 rds_sendmsg+0xda3/0x2390 net/rds/send.c:1126 sock_sendmsg_nosec net/socket.c:630 [inline] sock_sendmsg+0xca/0x110 net/socket.c:640 SYSC_sendto+0x361/0x5c0 net/socket.c:1747 SyS_sendto+0x40/0x50 net/socket.c:1715 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007fb2f0cebc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fb2f0cec6d4 RCX: 0000000000453a59 RDX: 0000000000000000 RSI: 0000000020dbf000 RDI: 0000000000000013 RBP: 000000000071bea0 R08: 0000000020b2d000 R09: 0000000000000010 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004b9 R14: 00000000006f71f8 R15: 0000000000000000 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13029 sclass=netlink_route_socket pig=23668 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13029 sclass=netlink_route_socket pig=23682 comm=syz-executor4 audit: type=1400 audit(1518299701.618:123): avc: denied { ioctl } for pid=23764 comm="syz-executor2" path="socket:[67344]" dev="sockfs" ino=67344 ioctlcmd=0x5460 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=sock_file permissive=1 irq bypass consumer (token 000000006c57b749) registration fails: -16 irq bypass consumer (token 000000006c57b749) registration fails: -16 xt_connbytes: Forcing CT accounting to be enabled 9pnet_virtio: no channels available for device ./file0 x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 9pnet_virtio: no channels available for device ./file0 x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl audit: type=1326 audit(1518299704.331:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24309 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x0 audit: type=1326 audit(1518299704.428:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24309 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x0 netlink: 'syz-executor0': attribute type 3 has an invalid length. audit: type=1400 audit(1518299704.764:126): avc: denied { relabelfrom } for pid=24420 comm="syz-executor4" name="NETLINK" dev="sockfs" ino=68225 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 netlink: 'syz-executor0': attribute type 3 has an invalid length. audit: type=1400 audit(1518299704.811:127): avc: denied { relabelto } for pid=24420 comm="syz-executor4" name="NETLINK" dev="sockfs" ino=68225 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=netlink_netfilter_socket permissive=1 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 24627 Comm: syz-executor3 Tainted: G W 4.15.0+ #307 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc mm/slab.c:3365 [inline] __do_kmalloc mm/slab.c:3703 [inline] __kmalloc+0x63/0x760 mm/slab.c:3714 kmalloc include/linux/slab.h:517 [inline] alloc_msg ipc/msgutil.c:56 [inline] load_msg+0x3c/0x2e0 ipc/msgutil.c:91 do_msgsnd+0x219/0x1470 ipc/msg.c:758 SYSC_msgsnd ipc/msg.c:862 [inline] SyS_msgsnd+0x65/0x90 ipc/msg.c:855 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007f17da7ecc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 RAX: ffffffffffffffda RBX: 00007f17da7ed6d4 RCX: 0000000000453a59 RDX: 0000000000000008 RSI: 0000000020440fa5 RDI: 000000000022003d RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000013 R13: 00000000000003f2 R14: 00000000006f5f50 R15: 0000000000000000 x_tables: ip6_tables: CT.2 target: invalid size 72 (kernel) != (user) 41 x_tables: ip6_tables: CT.2 target: invalid size 72 (kernel) != (user) 41 irq bypass consumer (token 000000006e3544e5) registration fails: -16 irq bypass consumer (token 000000003299ec68) registration fails: -16 audit: type=1326 audit(1518299706.809:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24875 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x0 audit: type=1326 audit(1518299706.895:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24875 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x453a59 code=0x0 audit: type=1400 audit(1518299707.033:130): avc: denied { map } for pid=24922 comm="syz-executor3" path="/dev/amidi6" dev="devtmpfs" ino=31086 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:device_t:s0 tclass=file permissive=1 sctp: [Deprecated]: syz-executor4 (pid 24979) Use of int in max_burst socket option. Use struct sctp_assoc_value instead sctp: [Deprecated]: syz-executor4 (pid 24987) Use of int in max_burst socket option. Use struct sctp_assoc_value instead ion_ioctl: ioctl validate failed syz-executor4 (25428) used greatest stack depth: 14400 bytes left FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 25522 Comm: syz-executor1 Tainted: G W 4.15.0+ #307 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 audit: type=1400 audit(1518299709.531:131): avc: denied { map } for pid=25524 comm="syz-executor4" path="socket:[71480]" dev="sockfs" ino=71480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc mm/slab.c:3365 [inline] kmem_cache_alloc_trace+0x4b/0x740 mm/slab.c:3605 kmalloc include/linux/slab.h:512 [inline] kzalloc include/linux/slab.h:701 [inline] rtentry_to_fib_config net/ipv4/fib_frontend.c:566 [inline] ip_rt_ioctl+0xcce/0x1420 net/ipv4/fib_frontend.c:602 inet_ioctl+0x273/0x310 net/ipv4/af_inet.c:890 sock_do_ioctl+0xef/0x390 net/socket.c:958 sock_ioctl+0x36b/0x610 net/socket.c:1081