Revision 4e43e64d0f1332fcc503babad4dc31aead7131ca authored by Eric Dumazet on 28 June 2022, 12:12:48 UTC, committed by Jakub Kicinski on 30 June 2022, 03:41:09 UTC
As reported by syzbot, we should not use rcu_dereference() when rcu_read_lock() is not held. WARNING: suspicious RCU usage 5.19.0-rc2-syzkaller #0 Not tainted net/ipv6/addrconf.c:5175 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor326/3617: #0: ffffffff8d5848e8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xae/0xc20 net/netlink/af_netlink.c:2223 stack backtrace: CPU: 0 PID: 3617 Comm: syz-executor326 Not tainted 5.19.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 in6_dump_addrs+0x12d1/0x1790 net/ipv6/addrconf.c:5175 inet6_dump_addr+0x9c1/0xb50 net/ipv6/addrconf.c:5300 netlink_dump+0x541/0xc20 net/netlink/af_netlink.c:2275 __netlink_dump_start+0x647/0x900 net/netlink/af_netlink.c:2380 netlink_dump_start include/linux/netlink.h:245 [inline] rtnetlink_rcv_msg+0x73e/0xc90 net/core/rtnetlink.c:6046 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:734 ____sys_sendmsg+0x6eb/0x810 net/socket.c:2492 ___sys_sendmsg+0xf3/0x170 net/socket.c:2546 __sys_sendmsg net/socket.c:2575 [inline] __do_sys_sendmsg net/socket.c:2584 [inline] __se_sys_sendmsg net/socket.c:2582 [inline] __x64_sys_sendmsg+0x132/0x220 net/socket.c:2582 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Fixes: 88e2ca308094 ("mld: convert ifmcaddr6 to RCU") Reported-by: syzbot <syzkaller@googlegroups.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Taehee Yoo <ap420073@gmail.com> Link: https://lore.kernel.org/r/20220628121248.858695-1-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>
1 parent fa152f6
File | Mode | Size |
---|---|---|
Kconfig | -rw-r--r-- | 49.2 KB |
Makefile | -rw-r--r-- | 8.2 KB |
TODO | -rw-r--r-- | 8.1 KB |
gpio-104-dio-48e.c | -rw-r--r-- | 13.5 KB |
gpio-104-idi-48.c | -rw-r--r-- | 8.7 KB |
gpio-104-idio-16.c | -rw-r--r-- | 8.4 KB |
gpio-74x164.c | -rw-r--r-- | 5.0 KB |
gpio-74xx-mmio.c | -rw-r--r-- | 3.4 KB |
gpio-adnp.c | -rw-r--r-- | 12.0 KB |
gpio-adp5520.c | -rw-r--r-- | 3.8 KB |
gpio-adp5588.c | -rw-r--r-- | 10.8 KB |
gpio-aggregator.c | -rw-r--r-- | 12.6 KB |
gpio-altera-a10sr.c | -rw-r--r-- | 2.9 KB |
gpio-altera.c | -rw-r--r-- | 9.6 KB |
gpio-amd-fch.c | -rw-r--r-- | 4.9 KB |
gpio-amd8111.c | -rw-r--r-- | 6.7 KB |
gpio-amdpt.c | -rw-r--r-- | 3.8 KB |
gpio-arizona.c | -rw-r--r-- | 5.2 KB |
gpio-aspeed-sgpio.c | -rw-r--r-- | 14.7 KB |
gpio-aspeed.c | -rw-r--r-- | 31.6 KB |
gpio-ath79.c | -rw-r--r-- | 8.0 KB |
gpio-bcm-kona.c | -rw-r--r-- | 17.8 KB |
gpio-bd71815.c | -rw-r--r-- | 5.1 KB |
gpio-bd71828.c | -rw-r--r-- | 3.8 KB |
gpio-bd9571mwv.c | -rw-r--r-- | 3.3 KB |
gpio-brcmstb.c | -rw-r--r-- | 20.6 KB |
gpio-bt8xx.c | -rw-r--r-- | 7.0 KB |
gpio-cadence.c | -rw-r--r-- | 7.5 KB |
gpio-clps711x.c | -rw-r--r-- | 1.8 KB |
gpio-creg-snps.c | -rw-r--r-- | 4.3 KB |
gpio-crystalcove.c | -rw-r--r-- | 9.8 KB |
gpio-cs5535.c | -rw-r--r-- | 9.1 KB |
gpio-da9052.c | -rw-r--r-- | 5.7 KB |
gpio-da9055.c | -rw-r--r-- | 4.1 KB |
gpio-davinci.c | -rw-r--r-- | 16.7 KB |
gpio-dln2.c | -rw-r--r-- | 12.8 KB |
gpio-dwapb.c | -rw-r--r-- | 20.8 KB |
gpio-eic-sprd.c | -rw-r--r-- | 18.8 KB |
gpio-em.c | -rw-r--r-- | 9.3 KB |
gpio-en7523.c | -rw-r--r-- | 3.3 KB |
gpio-ep93xx.c | -rw-r--r-- | 12.7 KB |
gpio-exar.c | -rw-r--r-- | 5.5 KB |
gpio-f7188x.c | -rw-r--r-- | 14.1 KB |
gpio-ftgpio010.c | -rw-r--r-- | 8.8 KB |
gpio-ge.c | -rw-r--r-- | 2.6 KB |
gpio-gpio-mm.c | -rw-r--r-- | 9.3 KB |
gpio-grgpio.c | -rw-r--r-- | 11.0 KB |
gpio-gw-pld.c | -rw-r--r-- | 3.1 KB |
gpio-hisi.c | -rw-r--r-- | 9.2 KB |
gpio-hlwd.c | -rw-r--r-- | 8.5 KB |
gpio-htc-egpio.c | -rw-r--r-- | 10.0 KB |
gpio-ich.c | -rw-r--r-- | 12.1 KB |
gpio-idt3243x.c | -rw-r--r-- | 5.2 KB |
gpio-iop.c | -rw-r--r-- | 1.3 KB |
gpio-it87.c | -rw-r--r-- | 9.0 KB |
gpio-ixp4xx.c | -rw-r--r-- | 7.8 KB |
gpio-janz-ttl.c | -rw-r--r-- | 4.3 KB |
gpio-kempld.c | -rw-r--r-- | 5.1 KB |
gpio-logicvc.c | -rw-r--r-- | 4.1 KB |
gpio-loongson.c | -rw-r--r-- | 3.0 KB |
gpio-loongson1.c | -rw-r--r-- | 2.3 KB |
gpio-lp3943.c | -rw-r--r-- | 5.3 KB |
gpio-lp873x.c | -rw-r--r-- | 4.5 KB |
gpio-lp87565.c | -rw-r--r-- | 4.7 KB |
gpio-lpc18xx.c | -rw-r--r-- | 9.9 KB |
gpio-lpc32xx.c | -rw-r--r-- | 14.2 KB |
gpio-madera.c | -rw-r--r-- | 5.8 KB |
gpio-max3191x.c | -rw-r--r-- | 14.2 KB |
gpio-max7300.c | -rw-r--r-- | 1.8 KB |
gpio-max7301.c | -rw-r--r-- | 2.3 KB |
gpio-max730x.c | -rw-r--r-- | 5.6 KB |
gpio-max732x.c | -rw-r--r-- | 17.3 KB |
gpio-max77620.c | -rw-r--r-- | 9.6 KB |
gpio-max77650.c | -rw-r--r-- | 5.0 KB |
gpio-mb86s7x.c | -rw-r--r-- | 5.6 KB |
gpio-mc33880.c | -rw-r--r-- | 3.4 KB |
gpio-menz127.c | -rw-r--r-- | 5.0 KB |
gpio-merrifield.c | -rw-r--r-- | 13.7 KB |
gpio-ml-ioh.c | -rw-r--r-- | 12.7 KB |
gpio-mlxbf.c | -rw-r--r-- | 3.9 KB |
gpio-mlxbf2.c | -rw-r--r-- | 11.3 KB |
gpio-mm-lantiq.c | -rw-r--r-- | 3.9 KB |
gpio-mmio.c | -rw-r--r-- | 21.0 KB |
gpio-mockup.c | -rw-r--r-- | 15.0 KB |
gpio-moxtet.c | -rw-r--r-- | 4.1 KB |
gpio-mpc5200.c | -rw-r--r-- | 8.9 KB |
gpio-mpc8xxx.c | -rw-r--r-- | 12.3 KB |
gpio-msc313.c | -rw-r--r-- | 19.5 KB |
gpio-mt7621.c | -rw-r--r-- | 7.9 KB |
gpio-mvebu.c | -rw-r--r-- | 34.1 KB |
gpio-mxc.c | -rw-r--r-- | 13.9 KB |
gpio-mxs.c | -rw-r--r-- | 9.7 KB |
gpio-octeon.c | -rw-r--r-- | 3.2 KB |
gpio-omap.c | -rw-r--r-- | 42.2 KB |
gpio-palmas.c | -rw-r--r-- | 5.3 KB |
gpio-pca953x.c | -rw-r--r-- | 35.0 KB |
gpio-pca9570.c | -rw-r--r-- | 3.1 KB |
gpio-pcf857x.c | -rw-r--r-- | 11.7 KB |
gpio-pch.c | -rw-r--r-- | 11.4 KB |
gpio-pci-idio-16.c | -rw-r--r-- | 9.8 KB |
gpio-pcie-idio-24.c | -rw-r--r-- | 16.8 KB |
gpio-pisosr.c | -rw-r--r-- | 5.0 KB |
gpio-pl061.c | -rw-r--r-- | 11.1 KB |
gpio-pmic-eic-sprd.c | -rw-r--r-- | 10.1 KB |
gpio-pxa.c | -rw-r--r-- | 19.8 KB |
gpio-raspberrypi-exp.c | -rw-r--r-- | 6.2 KB |
gpio-rc5t583.c | -rw-r--r-- | 4.0 KB |
gpio-rcar.c | -rw-r--r-- | 16.8 KB |
gpio-rda.c | -rw-r--r-- | 7.6 KB |
gpio-rdc321x.c | -rw-r--r-- | 5.0 KB |
gpio-realtek-otto.c | -rw-r--r-- | 12.7 KB |
gpio-reg.c | -rw-r--r-- | 4.5 KB |
gpio-regmap.c | -rw-r--r-- | 8.7 KB |
gpio-rockchip.c | -rw-r--r-- | 20.6 KB |
gpio-sa1100.c | -rw-r--r-- | 7.3 KB |
gpio-sama5d2-piobu.c | -rw-r--r-- | 6.0 KB |
gpio-sch.c | -rw-r--r-- | 10.0 KB |
gpio-sch311x.c | -rw-r--r-- | 11.5 KB |
gpio-sifive.c | -rw-r--r-- | 7.7 KB |
gpio-sim.c | -rw-r--r-- | 37.8 KB |
gpio-siox.c | -rw-r--r-- | 6.3 KB |
gpio-sl28cpld.c | -rw-r--r-- | 3.9 KB |
gpio-sodaville.c | -rw-r--r-- | 5.4 KB |
gpio-spear-spics.c | -rw-r--r-- | 5.0 KB |
gpio-sprd.c | -rw-r--r-- | 7.7 KB |
gpio-sta2x11.c | -rw-r--r-- | 10.4 KB |
gpio-stmpe.c | -rw-r--r-- | 13.8 KB |
gpio-stp-xway.c | -rw-r--r-- | 9.6 KB |
gpio-syscon.c | -rw-r--r-- | 7.0 KB |
gpio-tb10x.c | -rw-r--r-- | 6.3 KB |
gpio-tc3589x.c | -rw-r--r-- | 9.9 KB |
gpio-tegra.c | -rw-r--r-- | 21.1 KB |
gpio-tegra186.c | -rw-r--r-- | 33.2 KB |
gpio-thunderx.c | -rw-r--r-- | 16.0 KB |
gpio-timberdale.c | -rw-r--r-- | 6.8 KB |
gpio-tn48m.c | -rw-r--r-- | 2.2 KB |
gpio-tpic2810.c | -rw-r--r-- | 3.9 KB |
gpio-tps65086.c | -rw-r--r-- | 3.0 KB |
gpio-tps65218.c | -rw-r--r-- | 5.7 KB |
gpio-tps6586x.c | -rw-r--r-- | 3.1 KB |
gpio-tps65910.c | -rw-r--r-- | 4.8 KB |
gpio-tps65912.c | -rw-r--r-- | 3.3 KB |
gpio-tps68470.c | -rw-r--r-- | 4.5 KB |
gpio-tqmx86.c | -rw-r--r-- | 8.8 KB |
gpio-ts4800.c | -rw-r--r-- | 2.0 KB |
gpio-ts4900.c | -rw-r--r-- | 4.9 KB |
gpio-ts5500.c | -rw-r--r-- | 11.8 KB |
gpio-twl4030.c | -rw-r--r-- | 15.0 KB |
gpio-twl6040.c | -rw-r--r-- | 2.8 KB |
gpio-ucb1400.c | -rw-r--r-- | 2.2 KB |
gpio-uniphier.c | -rw-r--r-- | 13.3 KB |
gpio-vf610.c | -rw-r--r-- | 8.5 KB |
gpio-viperboard.c | -rw-r--r-- | 11.7 KB |
gpio-virtio.c | -rw-r--r-- | 17.0 KB |
gpio-visconti.c | -rw-r--r-- | 5.1 KB |
gpio-vr41xx.c | -rw-r--r-- | 11.6 KB |
gpio-vx855.c | -rw-r--r-- | 7.1 KB |
gpio-wcd934x.c | -rw-r--r-- | 3.1 KB |
gpio-wcove.c | -rw-r--r-- | 12.9 KB |
gpio-winbond.c | -rw-r--r-- | 18.8 KB |
gpio-wm831x.c | -rw-r--r-- | 7.3 KB |
gpio-wm8350.c | -rw-r--r-- | 3.7 KB |
gpio-wm8994.c | -rw-r--r-- | 7.3 KB |
gpio-ws16c48.c | -rw-r--r-- | 13.1 KB |
gpio-xgene-sb.c | -rw-r--r-- | 9.0 KB |
gpio-xgene.c | -rw-r--r-- | 5.5 KB |
gpio-xgs-iproc.c | -rw-r--r-- | 8.5 KB |
gpio-xilinx.c | -rw-r--r-- | 20.2 KB |
gpio-xlp.c | -rw-r--r-- | 8.4 KB |
gpio-xra1403.c | -rw-r--r-- | 5.6 KB |
gpio-xtensa.c | -rw-r--r-- | 4.6 KB |
gpio-zevio.c | -rw-r--r-- | 5.9 KB |
gpio-zynq.c | -rw-r--r-- | 31.2 KB |
gpio-zynqmp-modepin.c | -rw-r--r-- | 4.1 KB |
gpiolib-acpi.c | -rw-r--r-- | 41.5 KB |
gpiolib-acpi.h | -rw-r--r-- | 2.9 KB |
gpiolib-cdev.c | -rw-r--r-- | 64.7 KB |
gpiolib-cdev.h | -rw-r--r-- | 284 bytes |
gpiolib-devres.c | -rw-r--r-- | 13.8 KB |
gpiolib-legacy.c | -rw-r--r-- | 2.4 KB |
gpiolib-of.c | -rw-r--r-- | 26.7 KB |
gpiolib-of.h | -rw-r--r-- | 1.3 KB |
gpiolib-sysfs.c | -rw-r--r-- | 19.1 KB |
gpiolib-sysfs.h | -rw-r--r-- | 457 bytes |
gpiolib.c | -rw-r--r-- | 122.9 KB |
gpiolib.h | -rw-r--r-- | 8.3 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...