syzbot


INFO: rcu detected stall in newlstat (5)

Status: auto-obsoleted due to no activity on 2023/09/06 16:16
Subsystems: tomoyo
[Documentation on labels]
First crash: 328d, last: 328d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in newlstat tomoyo 7 884d 948d 0/26 closed as invalid on 2022/02/08 10:00
upstream INFO: rcu detected stall in newlstat (4) tomoyo 1 428d 428d 0/26 auto-obsoleted due to no activity on 2023/05/30 04:31
upstream INFO: rcu detected stall in newlstat (3) tomoyo 1 665d 665d 0/26 auto-closed as invalid on 2022/10/05 01:09
upstream INFO: rcu detected stall in newlstat (2) fs 1 793d 793d 0/26 auto-closed as invalid on 2022/04/30 11:07

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
 1-....
 } 2648 jiffies s: 3577 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored
NMI backtrace for cpu 1
CPU: 1 PID: 2482 Comm: syz-executor.5 Not tainted 6.4.0-rc5-syzkaller-gd37537a1f7cf #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:476
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 18 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 e8 c5 45 19 ff eb a4 e8 1e 46 19 ff eb e1 66
RSP: 0018:ffffc900001884d8 EFLAGS: 00000002
RAX: 0000000000000020 RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff827b6045 RDI: ffffffff8bf10f40
RBP: ffffffff8bf10f00 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 205d314320202020 R12: 0000000000000000
R13: 0000000000000020 R14: ffffffff827b5fe0 R15: 0000000000000000
FS:  0000555556358400(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555556361728 CR3: 000000013a3b5000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 serial_out drivers/tty/serial/8250/8250.h:123 [inline]
 serial8250_console_fifo_write drivers/tty/serial/8250/8250_port.c:3388 [inline]
 serial8250_console_write+0xd12/0x1010 drivers/tty/serial/8250/8250_port.c:3459
 console_emit_next_record kernel/printk/printk.c:2877 [inline]
 console_flush_all+0x49c/0xcc0 kernel/printk/printk.c:2933
 console_unlock+0xb8/0x1f0 kernel/printk/printk.c:3007
 vprintk_emit+0x1bd/0x600 kernel/printk/printk.c:2307
 dev_vprintk_emit drivers/base/core.c:4840 [inline]
 dev_printk_emit+0xda/0x120 drivers/base/core.c:4851
 __dev_printk+0xf8/0x270 drivers/base/core.c:4863
 _dev_warn+0xdc/0x120 drivers/base/core.c:4907
 usb_rx_callback_intf0+0x11b/0x1a0 drivers/media/rc/imon.c:1771
 __usb_hcd_giveback_urb+0x2b6/0x5c0 drivers/usb/core/hcd.c:1671
 usb_hcd_giveback_urb+0x384/0x430 drivers/usb/core/hcd.c:1754
 dummy_timer+0x13b6/0x3400 drivers/usb/gadget/udc/dummy_hcd.c:1987
 call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700
 expire_timers+0x29b/0x4b0 kernel/time/timer.c:1751
 __run_timers kernel/time/timer.c:2022 [inline]
 __run_timers kernel/time/timer.c:1995 [inline]
 run_timer_softirq+0x326/0x910 kernel/time/timer.c:2035
 __do_softirq+0x1c1/0x8e8 kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu kernel/softirq.c:650 [inline]
 irq_exit_rcu+0x11b/0x190 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x92/0xc0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 kernel/kcov.c:207
Code: 81 e1 00 01 00 00 65 48 8b 14 25 c0 a9 03 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 44 15 00 00 85 c0 74 2b 8b 82 20 15 00 00 <83> f8 02 75 20 48 8b 8a 28 15 00 00 8b 92 24 15 00 00 48 8b 01 48
RSP: 0018:ffffc900015579b0 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff88813c622fe8 RCX: 0000000000000000
RDX: ffff888113de8000 RSI: ffffffff820877db RDI: 0000000000000001
RBP: 000000000000002c R08: 0000000000000001 R09: 000000000000005c
R10: 0000000000000031 R11: 0000000000056001 R12: ffff88813c622fbc
R13: 0000000000000041 R14: 000000000000002c R15: 0000000000000031
 tomoyo_encode2.part.0+0x3b/0x3a0 security/tomoyo/realpath.c:38
 tomoyo_encode2 security/tomoyo/realpath.c:31 [inline]
 tomoyo_encode+0x2c/0x50 security/tomoyo/realpath.c:80
 tomoyo_realpath_from_path+0x185/0x600 security/tomoyo/realpath.c:283
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x230/0x430 security/tomoyo/file.c:822
 security_inode_getattr+0xd3/0x140 security/security.c:2114
 vfs_getattr fs/stat.c:167 [inline]
 vfs_statx+0x16e/0x430 fs/stat.c:242
 vfs_fstatat+0x90/0xb0 fs/stat.c:276
 vfs_lstat include/linux/fs.h:2890 [inline]
 __do_sys_newlstat+0x84/0x100 fs/stat.c:432
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f9c56a16116
Code: ff ff ff 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 41 89 f8 48 89 f7 48 89 d6 41 83 f8 01 77 29 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 c3 90 48 c7 c2 b8 ff ff ff f7 d8 64 89 02
RSP: 002b:00007ffd62386af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9c56a16116
RDX: 00007ffd62386b30 RSI: 00007ffd62386b30 RDI: 00007ffd62386bc0
RBP: 00007ffd62386bc0 R08: 0000000000000001 R09: 00007ffd62386990
R10: 00005555563597c3 R11: 0000000000000246 R12: 00007f9c56a71cdc
R13: 00007ffd62387c80 R14: 00005555563596f0 R15: 00007ffd62387cc0
 </TASK>
cdc_wdm 3-1:1.0: nonzero urb status received: -71
cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored
imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored
usb 4-1: USB disconnect, device number 7
usb 4-1: new high-speed USB device number 8 using dummy_hcd
usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
usb 4-1: SerialNumber: syz
cdc_ether: probe of 4-1:1.0 failed with error -22
usb 2-1: new high-speed USB device number 23 using dummy_hcd
usb 2-1: Using ep0 maxpacket: 8
usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 2-1: Product: syz
usb 2-1: Manufacturer: syz
usb 2-1: SerialNumber: syz
cdc_ether: probe of 2-1:1.0 failed with error -22
usb 2-1: USB disconnect, device number 23
usb 6-1: new high-speed USB device number 22 using dummy_hcd
usb 6-1: Using ep0 maxpacket: 16
usb 6-1: config 0 has an invalid interface number: 153 but max is 0
usb 6-1: config 0 has no interface number 0
usb 6-1: New USB device found, idVendor=0f3d, idProduct=0112, bcdDevice=d4.66
usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16
usb 6-1: Product: syz
usb 6-1: Manufacturer: syz
usb 6-1: SerialNumber: syz
usb 6-1: config 0 descriptor??
sierra 6-1:0.153: Sierra USB modem converter detected
usb 6-1: USB disconnect, device number 22
sierra 6-1:0.153: device disconnected
usb 6-1: new high-speed USB device number 23 using dummy_hcd
usb 6-1: Using ep0 maxpacket: 16
usb 6-1: config 0 has an invalid interface number: 153 but max is 0
usb 6-1: config 0 has no interface number 0

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/08 16:07 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d37537a1f7cf 058b3a5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in newlstat
* Struck through repros no longer work on HEAD.