syzbot


INFO: rcu detected stall in lo_ioctl (4)

Status: auto-obsoleted due to no activity on 2023/11/02 10:53
Subsystems: block
[Documentation on labels]
First crash: 330d, last: 274d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in lo_ioctl (2) kernel 2 1613d 1614d 0/26 closed as invalid on 2019/12/04 14:04
upstream INFO: rcu detected stall in lo_ioctl (3) kernfs 2 857d 862d 0/26 closed as invalid on 2022/02/08 10:00
upstream INFO: rcu detected stall in lo_ioctl block 193 2129d 2329d 0/26 closed as dup on 2018/05/04 17:09
android-5-15 BUG: soft lockup in lo_ioctl 1 5d17h 5d17h 0/2 premoderation: reported on 2024/04/28 17:42

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (10500 ticks this GP) idle=1bd4/1/0x4000000000000000 softirq=94433/94433 fqs=4997
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:        1          0            0
rcu: 	cputime:    13576      38922           11   ==> 52500(ms)
rcu: 	(t=10501 jiffies g=125613 q=6390 ncpus=2)
CPU: 0 PID: 30483 Comm: syz-executor.3 Not tainted 6.5.0-rc4-syzkaller-00174-gc1a515d3c027 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 kernel/kcov.c:207
Code: 0f 1e fa 48 8b be b0 01 00 00 e8 b0 ff ff ff 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 65 8b 05 5d b1 7d 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 80 b9 03 00 a9
RSP: 0018:ffffc90000007d58 EFLAGS: 00000297
RAX: 0000000000000102 RBX: ffff888042a32394 RCX: ffffffff88594c71
RDX: ffff888078e13b80 RSI: 0000000000000100 RDI: 0000000000000004
RBP: 000000000000000b R08: 0000000000000004 R09: 000000000000000b
R10: 000000000000000c R11: 0000000000094000 R12: 0000000000000008
R13: ffff88807612cb60 R14: 000000000000000c R15: 0000000000000001
FS:  00007fc1e491c6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2ed29000 CR3: 0000000047f7a000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 taprio_next_tc_txq net/sched/sch_taprio.c:775 [inline]
 taprio_dequeue_tc_priority+0x33d/0x4b0 net/sched/sch_taprio.c:801
 taprio_dequeue+0x12e/0x5f0 net/sched/sch_taprio.c:868
 dequeue_skb net/sched/sch_generic.c:292 [inline]
 qdisc_restart net/sched/sch_generic.c:397 [inline]
 __qdisc_run+0x1c4/0x19d0 net/sched/sch_generic.c:415
 qdisc_run include/net/pkt_sched.h:125 [inline]
 qdisc_run include/net/pkt_sched.h:122 [inline]
 net_tx_action+0x71e/0xc80 net/core/dev.c:5049
 __do_softirq+0x218/0x965 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1109
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:console_flush_all+0x9b6/0xf50 kernel/printk/printk.c:2939
Code: d0 15 23 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 8e 66 1c 00 48 85 db 0f 85 94 03 00 00 e8 f0 6a 1c 00 fb 48 8b 44 24 08 <48> 8b 14 24 0f b6 00 83 e2 07 38 d0 7f 08 84 c0 0f 85 9d 04 00 00
RSP: 0018:ffffc900060e76c8 EFLAGS: 00000283
RAX: fffff52000c1cf04 RBX: 0000000000000000 RCX: ffffc9000e075000
RDX: 0000000000040000 RSI: ffffffff81699d30 RDI: 0000000000000007
RBP: ffffffff8d4c9e60 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 205d333834303354 R12: 0000000000000000
R13: ffffffff8d4c9eb8 R14: dffffc0000000000 R15: 0000000000000001
 console_unlock+0xc6/0x1f0 kernel/printk/printk.c:3007
 vprintk_emit+0x1c5/0x640 kernel/printk/printk.c:2307
 vprintk+0x89/0xa0 kernel/printk/printk_safe.c:50
 _printk+0xc8/0x100 kernel/printk/printk.c:2328
 set_capacity_and_notify+0x1f9/0x2b0 block/genhd.c:86
 loop_set_size drivers/block/loop.c:237 [inline]
 loop_configure+0xde4/0x18c0 drivers/block/loop.c:1100
 lo_ioctl+0x745/0x1a50 drivers/block/loop.c:1550
 blkdev_ioctl+0x2f9/0x770 block/ioctl.c:621
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x18f/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fc1e3c7c84b
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fc1e491be40 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc1e3c7c84b
RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000059b
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 00007fc1e491bf3c R14: 00007fc1e491bf40 R15: 00007fc1da3ff000
 </TASK>
watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz-executor.3:30483]
Modules linked in:
irq event stamp: 7738511
hardirqs last  enabled at (7738510): [<ffffffff8a40140a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
hardirqs last disabled at (7738511): [<ffffffff8a31d3ce>] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1109
softirqs last  enabled at (2302): [<ffffffff814ea377>] invoke_softirq kernel/softirq.c:427 [inline]
softirqs last  enabled at (2302): [<ffffffff814ea377>] __irq_exit_rcu kernel/softirq.c:632 [inline]
softirqs last  enabled at (2302): [<ffffffff814ea377>] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
softirqs last disabled at (2311): [<ffffffff814ea377>] invoke_softirq kernel/softirq.c:427 [inline]
softirqs last disabled at (2311): [<ffffffff814ea377>] __irq_exit_rcu kernel/softirq.c:632 [inline]
softirqs last disabled at (2311): [<ffffffff814ea377>] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
CPU: 0 PID: 30483 Comm: syz-executor.3 Not tainted 6.5.0-rc4-syzkaller-00174-gc1a515d3c027 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70 kernel/kcov.c:207
Code: b0 01 00 00 e8 b0 ff ff ff 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 65 8b 05 5d b1 7d 7e 89 c1 48 8b 34 24 <81> e1 00 01 00 00 65 48 8b 14 25 80 b9 03 00 a9 00 01 ff 00 74 0e
RSP: 0018:ffffc90000007d58 EFLAGS: 00000246
RAX: 0000000000000102 RBX: ffff888042a32394 RCX: 0000000000000102
RDX: ffff888078e13b80 RSI: ffffffff88594b6c RDI: 0000000000000004
RBP: 0000000000000009 R08: 0000000000000004 R09: 0000000000000009
R10: 0000000000000010 R11: 0000000000094000 R12: 0000000000000010
R13: ffff88807612cb60 R14: 000000000000000c R15: 0000000000000001
FS:  00007fc1e491c6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2ed29000 CR3: 0000000047f7a000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 taprio_dequeue_tc_priority+0x22c/0x4b0 net/sched/sch_taprio.c:808
 taprio_dequeue+0x12e/0x5f0 net/sched/sch_taprio.c:868
 dequeue_skb net/sched/sch_generic.c:292 [inline]
 qdisc_restart net/sched/sch_generic.c:397 [inline]
 __qdisc_run+0x1c4/0x19d0 net/sched/sch_generic.c:415
 qdisc_run include/net/pkt_sched.h:125 [inline]
 qdisc_run include/net/pkt_sched.h:122 [inline]
 net_tx_action+0x71e/0xc80 net/core/dev.c:5049
 __do_softirq+0x218/0x965 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1109
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:console_flush_all+0x9b6/0xf50 kernel/printk/printk.c:2939
Code: d0 15 23 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 8e 66 1c 00 48 85 db 0f 85 94 03 00 00 e8 f0 6a 1c 00 fb 48 8b 44 24 08 <48> 8b 14 24 0f b6 00 83 e2 07 38 d0 7f 08 84 c0 0f 85 9d 04 00 00
RSP: 0018:ffffc900060e76c8 EFLAGS: 00000283
RAX: fffff52000c1cf04 RBX: 0000000000000000 RCX: ffffc9000e075000
RDX: 0000000000040000 RSI: ffffffff81699d30 RDI: 0000000000000007
RBP: ffffffff8d4c9e60 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 205d333834303354 R12: 0000000000000000
R13: ffffffff8d4c9eb8 R14: dffffc0000000000 R15: 0000000000000001
 console_unlock+0xc6/0x1f0 kernel/printk/printk.c:3007
 vprintk_emit+0x1c5/0x640 kernel/printk/printk.c:2307
 vprintk+0x89/0xa0 kernel/printk/printk_safe.c:50
 _printk+0xc8/0x100 kernel/printk/printk.c:2328
 set_capacity_and_notify+0x1f9/0x2b0 block/genhd.c:86
 loop_set_size drivers/block/loop.c:237 [inline]
 loop_configure+0xde4/0x18c0 drivers/block/loop.c:1100
 lo_ioctl+0x745/0x1a50 drivers/block/loop.c:1550
 blkdev_ioctl+0x2f9/0x770 block/ioctl.c:621
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x18f/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fc1e3c7c84b
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007fc1e491be40 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc1e3c7c84b
RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000059b
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 00007fc1e491bf3c R14: 00007fc1e491bf40 R15: 00007fc1da3ff000
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 16600 Comm: kworker/u4:17 Not tainted 6.5.0-rc4-syzkaller-00174-gc1a515d3c027 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
Workqueue: bat_events batadv_nc_worker
RIP: 0010:native_apic_mem_write+0xc/0x10 arch/x86/include/asm/apic.h:110
Code: bf 30 08 00 00 e8 24 8d 17 03 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f3 0f 1e fa 89 ff 89 b7 00 c0 5f ff <c3> 0f 1f 00 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 89 fb 48
RSP: 0018:ffffc900001e0fd0 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: ffffffff8c39ae60 RCX: 1ffff11017325102
RDX: 1ffffffff18735cc RSI: 0000000000000000 RDI: 00000000000000b0
RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1d5718a
R10: ffffffff8eab8c57 R11: ffffc900001e0ff8 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c0037dd000 CR3: 000000000c776000 CR4: 0000000000350ee0
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 apic_eoi arch/x86/include/asm/apic.h:399 [inline]
 ack_APIC_irq arch/x86/include/asm/apic.h:445 [inline]
 __sysvec_apic_timer_interrupt+0x7d/0x430 arch/x86/kernel/apic/apic.c:1113
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1109
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:lock_acquire+0x1ef/0x510 kernel/locking/lockdep.c:5729
Code: c1 05 55 6f 9b 7e 83 f8 01 0f 85 b0 02 00 00 9c 58 f6 c4 02 0f 85 9b 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc9000aa0fac8 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff92001541f5b RCX: 0000000000000001
RDX: 1ffff11006b22510 RSI: ffffffff8a6c7780 RDI: ffffffff8ac80560
RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff23095d0
R10: ffffffff9184ae87 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff8c9a6580 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:303 [inline]
 rcu_read_lock include/linux/rcupdate.h:749 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0x175/0x10f0 net/batman-adv/network-coding.c:719
 process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2597
 worker_thread+0x687/0x1110 kernel/workqueue.c:2748
 kthread+0x33a/0x430 kernel/kthread.c:389
 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/08/04 10:52 upstream c1a515d3c027 74621247 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: rcu detected stall in lo_ioctl
2023/06/09 10:18 upstream 25041a4c02c7 7086cdb9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: rcu detected stall in lo_ioctl
* Struck through repros no longer work on HEAD.