syzbot


INFO: rcu detected stall in avc_has_extended_perms

Status: auto-obsoleted due to no activity on 2024/11/18 16:23
Subsystems: selinux
[Documentation on labels]
First crash: 373d, last: 373d

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P1021/1:b..l P5238/1:b..l P10238/1:b..l
rcu: 	(detected by 1, t=10502 jiffies, g=43901, q=205 ncpus=2)
task:cmp             state:R  running task     stack:26448 pid:10238 tgid:10238 ppid:10207  flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xe37/0x5490 kernel/sched/core.c:6529
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:6851
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:variable_test_bit arch/x86/include/asm/bitops.h:227 [inline]
RIP: 0010:arch_test_bit arch/x86/include/asm/bitops.h:239 [inline]
RIP: 0010:_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline]
RIP: 0010:cpumask_test_cpu include/linux/cpumask.h:562 [inline]
RIP: 0010:cpu_online include/linux/cpumask.h:1105 [inline]
RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline]
RIP: 0010:lock_release+0xa9/0x6f0 kernel/locking/lockdep.c:5770
Code: 03 00 65 41 8b 2e 83 fd 07 0f 87 21 05 00 00 89 ed be 08 00 00 00 48 89 e8 48 c1 e8 06 48 8d 3c c5 58 f5 12 90 e8 a7 41 7f 00 <48> 0f a3 2d 77 8a aa 0e 0f 82 3a 04 00 00 48 c7 c5 38 26 13 90 48
RSP: 0018:ffffc9000347f650 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 1ffff9200068fecc RCX: ffffffff81686ad9
RDX: fffffbfff2025eac RSI: 0000000000000008 RDI: ffffffff9012f558
RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2025eab
R10: ffffffff9012f55f R11: 0000000000000000 R12: ffffffff8ddb5be0
R13: 0000000000000000 R14: 000000000003db0c R15: dffffc0000000000
 rcu_lock_release include/linux/rcupdate.h:336 [inline]
 rcu_read_unlock include/linux/rcupdate.h:869 [inline]
 page_ext_put+0x43/0xd0 mm/page_ext.c:550
 __page_table_check_zero+0x2e5/0x370 mm/page_table_check.c:160
 page_table_check_free include/linux/page_table_check.h:41 [inline]
 free_pages_prepare mm/page_alloc.c:1095 [inline]
 free_unref_folios+0xa07/0x1390 mm/page_alloc.c:2660
 folios_put_refs+0x560/0x760 mm/swap.c:1039
 free_pages_and_swap_cache+0x45f/0x510 mm/swap_state.c:335
 __tlb_batch_free_encoded_pages+0xf9/0x290 mm/mmu_gather.c:136
 tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]
 tlb_flush_mmu mm/mmu_gather.c:373 [inline]
 tlb_finish_mmu+0x168/0x7b0 mm/mmu_gather.c:465
 exit_mmap+0x3d1/0xb20 mm/mmap.c:3425
 __mmput+0x12a/0x480 kernel/fork.c:1345
 mmput+0x62/0x70 kernel/fork.c:1367
 exit_mm kernel/exit.c:571 [inline]
 do_exit+0x9bf/0x2bb0 kernel/exit.c:869
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1031
 __do_sys_exit_group kernel/exit.c:1042 [inline]
 __se_sys_exit_group kernel/exit.c:1040 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1040
 x64_sys_call+0x14a9/0x16a0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6978e93a90
RSP: 002b:00007ffd5e990ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f6978f84860 RCX: 00007f6978e93a90
RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000
RBP: 00007f6978f84860 R08: 0000000000000000 R09: 1870c3c961e5eb0d
R10: 00007ffd5e990eb0 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f6978f88658 R15: 0000000000000001
 </TASK>
task:udevd           state:R  running task     stack:24896 pid:5238  tgid:5238  ppid:4668   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xe37/0x5490 kernel/sched/core.c:6529
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:6851
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:121 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5735 [inline]
RIP: 0010:lock_acquire+0x138/0x560 kernel/locking/lockdep.c:5724
Code: 0f 85 1d 01 00 00 65 48 8b 15 34 60 9b 7e 48 8d ba dc 0a 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 0c 01 <48> 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 b3 03 00 00 8b
RSP: 0018:ffffc90003307a00 EFLAGS: 00000a03
RAX: dffffc0000000000 RBX: 1ffff92000660f42 RCX: 0000000000000000
RDX: ffff888027555a00 RSI: ffffffff8bb09840 RDI: ffff8880275564dc
RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2025eab
R10: ffffffff9012f55f R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff8ddb5be0 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
 rcu_read_lock include/linux/rcupdate.h:838 [inline]
 avc_has_extended_perms+0x1fa/0xf90 security/selinux/avc.c:1041
 ioctl_has_perm.constprop.0.isra.0+0x2f0/0x470 security/selinux/hooks.c:3692
 selinux_file_ioctl+0x180/0x270 security/selinux/hooks.c:3740
 security_file_ioctl+0x75/0xc0 security/security.c:2791
 __do_sys_ioctl fs/ioctl.c:901 [inline]
 __se_sys_ioctl fs/ioctl.c:893 [inline]
 __x64_sys_ioctl+0xbb/0x220 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa0ed11ad49
RSP: 002b:00007fff96ee0b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0ed11ad49
RDX: 00007fff96ee0b90 RSI: 0000000080280215 RDI: 0000000000000009
RBP: 00005570eca98cf0 R08: 0000000000000000 R09: 00007fa0ed1f1c10
R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000009
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
 </TASK>
task:kworker/u8:5    state:R  running task     stack:22752 pid:1021  tgid:1021  ppid:2      flags:0x00004000
Workqueue: bat_events batadv_nc_worker
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xe37/0x5490 kernel/sched/core.c:6529
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:6851
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x1f2/0x560 kernel/locking/lockdep.c:5727
Code: c1 05 0a 10 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc90003f07a30 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff920007e0f48 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffffffff8b4cc7c0 RDI: ffffffff8bb098c0
RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c54e0
R10: ffffffff9462a707 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff8ddb5be0 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
 rcu_read_lock include/linux/rcupdate.h:838 [inline]
 batadv_nc_process_nc_paths.part.0+0xe4/0x3e0 net/batman-adv/network-coding.c:687
 batadv_nc_process_nc_paths net/batman-adv/network-coding.c:679 [inline]
 batadv_nc_worker+0xcc8/0x1060 net/batman-adv/network-coding.c:728
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: rcu_preempt kthread starved for 10554 jiffies! g43901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28304 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0xe37/0x5490 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6621
 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2581
 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2034
 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2236
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:106 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:111
sched: RT throttling activated

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/08/20 16:15 upstream 6e4436539ae1 9f0ab3fb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in avc_has_extended_perms
* Struck through repros no longer work on HEAD.