syzbot


INFO: rcu detected stall in flock (2)

Status: auto-obsoleted due to no activity on 2025/05/02 07:58
Subsystems: bpf
[Documentation on labels]
First crash: 97d, last: 97d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in flock kernel 1 811d 811d 0/28 auto-obsoleted due to no activity on 2023/05/19 06:57

Sample crash report:
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5193/1:b..l P6675/1:b..l P5841/2:b..l
rcu: 	(detected by 1, t=10503 jiffies, g=11545, q=645 ncpus=2)
task:udevd           state:R  running task     stack:25872 pid:5841  tgid:5841  ppid:5193   task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5377 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6764
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7086
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:raw_read_seqcount_latch include/linux/seqlock.h:644 [inline]
RIP: 0010:read_seqcount_latch include/linux/seqlock.h:661 [inline]
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:209 [inline]
RIP: 0010:bpf_ksym_find+0x26/0x1c0 kernel/bpf/core.c:740
Code: 90 90 90 90 41 57 41 56 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 49 89 fc 55 53 48 83 ec 08 e8 a0 e2 f0 ff 8b 05 ba 37 18 0c <89> c5 89 44 24 04 83 e5 01 48 63 c5 48 8d 3c c5 f0 03 e1 8d 48 89
RSP: 0018:ffffc9000379f6f8 EFLAGS: 00000293
RAX: 0000000000000162 RBX: 0000000000000001 RCX: ffffffff81ca6572
RDX: ffff888030cb4880 RSI: ffffffff81c8cc00 RDI: 00007f410e916fc7
RBP: 00007f410e916fc7 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000002 R12: 00007f410e916fc7
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888030cb4880
 is_bpf_text_address+0x58/0x1a0 kernel/bpf/core.c:773
 kernel_text_address kernel/extable.c:125 [inline]
 kernel_text_address+0x8d/0x100 kernel/extable.c:94
 __kernel_text_address+0xd/0x40 kernel/extable.c:79
 unwind_get_return_address+0x59/0xa0 arch/x86/kernel/unwind_orc.c:369
 arch_stack_walk+0xa7/0x100 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 save_stack+0x162/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171
 locks_alloc_lock fs/locks.c:275 [inline]
 flock_lock_inode+0xbfd/0x1040 fs/locks.c:1091
 flock_lock_inode_wait fs/locks.c:2084 [inline]
 locks_lock_inode_wait+0x1c7/0x450 fs/locks.c:2111
 locks_lock_file_wait include/linux/filelock.h:422 [inline]
 __do_sys_flock+0x448/0x520 fs/locks.c:2179
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f410e916fc7
RSP: 002b:00007ffdc1afbe88 EFLAGS: 00000202 ORIG_RAX: 0000000000000049
RAX: ffffffffffffffda RBX: 0000563414aaddc0 RCX: 00007f410e916fc7
RDX: 00000000000a0800 RSI: 0000000000000005 RDI: 0000000000000008
RBP: 0000563414aaddc0 R08: 00000000ffffffff R09: 00007f410ee77000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000563414ad2880
R13: 0000563414acdba0 R14: 0000000000000008 R15: 0000563414a7a2c0
 </TASK>
task:udevd           state:R  running task     stack:27264 pid:6675  tgid:6675  ppid:5193   task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5377 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6764
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7086
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_next_frame+0x53/0x20c0 arch/x86/kernel/unwind_orc.c:470
Code: 02 84 c0 74 08 3c 03 0f 8e 48 0a 00 00 41 8b 5d 00 85 db 75 15 31 c0 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc <49> 8d 6d 48 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80
RSP: 0018:ffffc90003977680 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc900039777d8
RDX: 1ffff9200072eee8 RSI: ffff88802ac64880 RDI: ffffc90003977740
RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
R10: ffffc90003977740 R11: 0000000000000001 R12: fffff5200072eeea
R13: ffffc90003977740 R14: ffffc90003977740 R15: ffffc90003977748
 __unwind_start+0x45f/0x7f0 arch/x86/kernel/unwind_orc.c:760
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0x74/0x100 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 save_stack+0x162/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4171
 locks_alloc_lock fs/locks.c:275 [inline]
 flock_lock_inode+0xbfd/0x1040 fs/locks.c:1091
 flock_lock_inode_wait fs/locks.c:2084 [inline]
 locks_lock_inode_wait+0x1c7/0x450 fs/locks.c:2111
 locks_lock_file_wait include/linux/filelock.h:422 [inline]
 __do_sys_flock+0x448/0x520 fs/locks.c:2179
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f410e916fc7
RSP: 002b:00007ffdc1afbe88 EFLAGS: 00000202 ORIG_RAX: 0000000000000049
RAX: ffffffffffffffda RBX: 0000563414acf010 RCX: 00007f410e916fc7
RDX: 00000000000a0800 RSI: 0000000000000005 RDI: 0000000000000008
RBP: 0000563414acf010 R08: 00000000ffffffff R09: 00007f410ee77000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000563414af8e00
R13: 0000563414acedd0 R14: 0000000000000008 R15: 0000563414a7a2c0
 </TASK>
task:udevd           state:R  running task     stack:25792 pid:5193  tgid:5193  ppid:1      task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5377 [inline]
 __schedule+0xf43/0x5890 kernel/sched/core.c:6764
 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6943
 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
 unwind_next_frame+0x1776/0x20c0 arch/x86/kernel/unwind_orc.c:672
 arch_stack_walk+0x95/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 save_stack+0x162/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_frozen_pages+0x6db/0xfb0 mm/page_alloc.c:2660
 __put_partials+0x14c/0x170 mm/slub.c:3153
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4115 [inline]
 slab_alloc_node mm/slub.c:4164 [inline]
 __do_kmalloc_node mm/slub.c:4293 [inline]
 __kmalloc_noprof+0x1cd/0x510 mm/slub.c:4306
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 tomoyo_encode2+0x100/0x3e0 security/tomoyo/realpath.c:45
 tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80
 tomoyo_realpath_from_path+0x19d/0x720 security/tomoyo/realpath.c:283
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:822
 security_inode_getattr+0x116/0x290 security/security.c:2377
 vfs_getattr fs/stat.c:243 [inline]
 vfs_statx_path+0x2b/0x310 fs/stat.c:283
 vfs_statx+0x11f/0x1c0 fs/stat.c:347
 vfs_fstatat+0x7b/0xf0 fs/stat.c:366
 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:530
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f410e9165f4
RSP: 002b:00007ffdc1afbf58 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 00005633dc35b6d0 RCX: 00007f410e9165f4
RDX: 00007ffdc1afbf68 RSI: 00005633dc3497ff RDI: 00000000ffffff9c
RBP: 0000563414aa5a48 R08: 00062305ed946d00 R09: 00007f410ee77000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00062305ed946d00 R15: 00005633dc34fdca
 </TASK>
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/01 07:47 upstream 69e858e0b8b2 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in flock
* Struck through repros no longer work on HEAD.