syzbot


possible deadlock in vmci_qp_broker_detach

Status: upstream: reported C repro on 2021/03/26 01:19
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+44e40ac2cfe68e8ce207@syzkaller.appspotmail.com
First crash: 1340d, last: 12d
Cause bisection: introduced by (bisect log) [no-op commit]:
commit 2dd209f00fc5a1caafa493066c7cd692fd2fd57c
Author: Bart Van Assche <bvanassche@acm.org>
Date: Tue Mar 10 04:26:16 2020 +0000

  blk-mq: Fix a comment in include/linux/blk-mq.h

Crash: possible deadlock in vmci_qp_broker_detach (log)
Repro: syz .config
  
Fix bisection: failed (error log, bisect log)
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] possible deadlock in vmci_qp_broker_detach 2 (7) 2021/06/30 22:20
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 possible deadlock in vmci_qp_broker_detach C error 7 803d 964d 0/1 upstream: reported C repro on 2022/04/01 16:43
linux-4.19 possible deadlock in vmci_qp_broker_detach C error 11 930d 1423d 0/1 upstream: reported C repro on 2020/12/28 17:12
linux-5.15 possible deadlock in vmci_qp_broker_detach syz 1 4d12h 4d12h 0/3 upstream: reported syz repro on 2024/11/16 18:45
Last patch testing requests (12)
Created Duration User Patch Repo Result
2024/11/08 10:33 16m retest repro upstream report log
2024/10/25 09:26 25m retest repro linux-next report log
2024/10/11 09:00 21m retest repro linux-next report log
2024/09/26 06:53 20m retest repro upstream report log
2024/08/24 16:00 24m retest repro upstream report log
2024/08/02 10:23 22m retest repro linux-next error
2024/08/02 07:46 23m retest repro linux-next error
2024/07/17 18:36 20m retest repro upstream report log
2024/06/15 15:42 16m retest repro upstream error
2024/05/24 01:45 1h23m retest repro linux-next report log
2021/06/30 22:00 19m paskripkin@gmail.com patch upstream report log
2021/06/30 21:36 19m paskripkin@gmail.com patch upstream report log
Fix bisection attempts (9)
Created Duration User Patch Repo Result
2023/05/24 05:48 6m bisect fix upstream error job log
2023/03/18 02:36 38m bisect fix upstream OK (0) job log log
2023/01/25 15:36 46m bisect fix upstream OK (0) job log log
2022/11/04 08:21 36m bisect fix upstream OK (0) job log log
2022/04/22 13:53 34m bisect fix upstream OK (0) job log log
2022/03/16 16:10 22m bisect fix upstream OK (0) job log log
2021/11/19 09:58 32m bisect fix upstream OK (0) job log log
2021/10/16 14:44 32m bisect fix upstream OK (0) job log log
2021/08/28 20:06 31m bisect fix upstream OK (0) job log log

Sample crash report:
============================================
WARNING: possible recursive locking detected
6.5.0-rc6-syzkaller-00027-g91aa6c412d7f #0 Not tainted
--------------------------------------------
syz-executor229/2777 is trying to acquire lock:
ffffffff8d70c498 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x14d/0x1370 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095

but task is already holding lock:
ffffffff8d70c498 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x14d/0x1370 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(qp_broker_list.mutex);
  lock(qp_broker_list.mutex);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

1 lock held by syz-executor229/2777:
 #0: ffffffff8d70c498 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x14d/0x1370 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095

stack backtrace:
CPU: 0 PID: 2777 Comm: syz-executor229 Not tainted 6.5.0-rc6-syzkaller-00027-g91aa6c412d7f #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106
 check_deadlock kernel/locking/lockdep.c:3070 [inline]
 validate_chain kernel/locking/lockdep.c:3863 [inline]
 __lock_acquire+0x2971/0x5de0 kernel/locking/lockdep.c:5144
 lock_acquire kernel/locking/lockdep.c:5761 [inline]
 lock_acquire+0x1ae/0x510 kernel/locking/lockdep.c:5726
 __mutex_lock_common kernel/locking/mutex.c:603 [inline]
 __mutex_lock+0x181/0x1340 kernel/locking/mutex.c:747
 vmci_qp_broker_detach+0x14d/0x1370 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095
 ctx_free_ctx+0x4fa/0xda0 drivers/misc/vmw_vmci/vmci_context.c:444
 kref_put include/linux/kref.h:65 [inline]
 vmci_ctx_put drivers/misc/vmw_vmci/vmci_context.c:497 [inline]
 vmci_ctx_enqueue_datagram+0x4dc/0x690 drivers/misc/vmw_vmci/vmci_context.c:360
 dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:275 [inline]
 vmci_datagram_dispatch+0x42c/0xcd0 drivers/misc/vmw_vmci/vmci_datagram.c:339
 qp_notify_peer+0x19e/0x260 drivers/misc/vmw_vmci/vmci_queue_pair.c:1481
 vmci_qp_broker_detach+0x5f7/0x1370 drivers/misc/vmw_vmci/vmci_queue_pair.c:2188
 ctx_free_ctx+0x4fa/0xda0 drivers/misc/vmw_vmci/vmci_context.c:444
 kref_put include/linux/kref.h:65 [inline]
 vmci_ctx_put drivers/misc/vmw_vmci/vmci_context.c:497 [inline]
 vmci_ctx_destroy+0x16d/0x1e0 drivers/misc/vmw_vmci/vmci_context.c:195
 vmci_host_close+0x11a/0x1b0 drivers/misc/vmw_vmci/vmci_host.c:143
 __fput+0x3f7/0xac0 fs/file_table.c:384
 task_work_run+0x14d/0x240 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xa99/0x2a20 kernel/exit.c:874
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1024
 get_signal+0x23ea/0x2770 kernel/signal.c:2881
 arch_do_signal_or_restart+0x89/0x5f0 arch/x86/kernel/signal.c:308
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x11f/0x240 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:297
 do_syscall_64+0x44/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f0a302af499
Code: Unable to access opcode bytes at 0x7f0a302af46f.
RSP: 002b:00007f0a30270228 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f0a30339308 RCX: 00007f0a302af499
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a30339308
RBP: 00007f0a30339300 R08: 00007f0a302706c0 R09: 00007f0a302706c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a3033930c
R13: 00007f0a30306074 R14: 636d762f7665642f R15: 00007ffc6bbd99c8
 </TASK>

Crashes (59):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/08/15 17:04 upstream 91aa6c412d7f 39990d51 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2022/02/09 13:55 linux-next ef6b35306dd8 0b33604d .config console log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/04/14 15:29 upstream 50987beca096 3134b37f .config console log report syz ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/05/18 09:33 linux-next cd557f1c605f a343ba6b .config console log report syz ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/12/29 18:11 upstream e7c124bd0463 6cc879d4 .config console log report syz C ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2023/11/21 20:06 upstream 98b1cc82c4af cb976f63 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2022/07/25 20:55 linux-next cb71b93c2dc3 664c519c .config console log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2022/07/20 13:39 linux-next cb71b93c2dc3 775344bc .config strace log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/06/30 17:21 linux-next a1f92694393a 84fd4c77 .config console log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/07/29 05:14 upstream 4010a528219e 9a4781d4 .config console log report syz ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/07/03 06:42 upstream 3dbdb38e2869 55aa55c2 .config console log report syz ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/04/12 17:28 upstream d434405aaab7 bfeda1b1 .config console log report syz ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2023/08/26 12:53 upstream 7d2f353b2682 7ba13a15 .config console log report syz [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2024/04/24 00:10 upstream 71b1543c83d6 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2023/11/02 11:17 upstream babe393974de b5f07fd3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2023/10/18 20:27 upstream dd72f9c7e512 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2023/10/14 10:22 upstream 727fb8376504 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root possible deadlock in vmci_qp_broker_detach
2022/09/20 23:30 upstream 60891ec99e14 c4b8ccfd .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2022/08/18 20:34 upstream 3b06a2755758 26a13b38 .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2022/07/16 19:06 upstream c658cabbfd32 95cb00d1 .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2022/07/06 16:17 upstream e35e5b6f695d bff65f44 .config console log report info ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2022/06/06 13:14 upstream f2906aa86338 c8857892 .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2022/04/22 15:48 upstream d569e86915b7 131df97d .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2022/03/23 13:53 upstream 6b1f86f8e9c7 5ff41e94 .config console log report info ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2022/03/22 23:15 upstream 519129040766 5ff41e94 .config console log report info ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2022/02/01 09:55 upstream 26291c54e111 c1c1631d .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/12/14 14:53 upstream 5472f14a3742 d018dd31 .config console log report info ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/09/08 11:36 upstream ac08b1c68d1b e2776ee4 .config console log report info ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2021/06/29 15:48 upstream 233a806b00e3 9d2ab5df .config console log report info ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2021/06/10 03:04 upstream cd1245d75ce9 1ba81399 .config console log report info ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2021/05/19 22:37 upstream 293837b9ac8d a343ba6b .config console log report info ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2021/05/17 08:59 upstream d07f6ca923ea a2eb125d .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/04/24 01:59 upstream e77a830c8297 17f0b706 .config console log report info ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2021/04/14 11:37 upstream 50987beca096 3134b37f .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/04/12 16:01 upstream d434405aaab7 bfeda1b1 .config console log report info ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2021/03/31 10:37 upstream 2bb25b3a748a 6a81331a .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/03/22 01:14 upstream 5ee96fa9dd78 bea32f74 .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2023/08/17 17:42 upstream 16931859a650 74b106b6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2023/04/24 00:56 upstream 457391b03803 2b32bd34 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2023/04/06 20:09 upstream f2afccfefe7b 08707520 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2023/04/06 10:34 upstream 99ddf2254feb 08707520 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2023/02/16 01:34 upstream 033c40a89f55 6be0f1f5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2022/07/26 04:01 upstream e0dccc3b76fb 34795c51 .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2022/06/15 04:23 upstream 018ab4fabddd 127d1faf .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2022/05/22 08:46 upstream eaea45fc0e7b 7268fa62 .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2022/04/25 07:46 upstream af2d861d4cd2 c889aef9 .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2022/02/14 14:30 upstream 754e0b0e3560 8b9ca619 .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2022/01/22 16:51 upstream 0809edbae347 214351e1 .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2021/12/20 08:05 upstream a7904a538933 021b36cb .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2021/10/20 09:58 upstream d9abdee5fd5a 418a00eb .config console log report info ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2021/10/17 10:02 upstream d999ade1cc86 0c5d9412 .config console log report info ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2021/06/15 21:38 upstream 94f0b2d4a1d0 990d3cbe .config console log report info ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2021/05/14 20:08 upstream bd3c9cdb21a2 8bdd5343 .config console log report info ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2022/06/15 06:49 linux-next 6012273897fe 127d1faf .config console log report info ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/12/29 12:16 linux-next ea586a076e8a 6cc879d4 .config console log report info ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/12/22 03:22 linux-next 07f8c60fe60f 6caa12e4 .config console log report info ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/09/16 14:44 linux-next 368847b165bb aae492f2 .config console log report info ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/06/30 09:34 linux-next a1f92694393a 84fd4c77 .config console log report info ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/05/17 21:55 linux-next cd557f1c605f a343ba6b .config console log report info ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
* Struck through repros no longer work on HEAD.