INFO: rcu detected stall in fsconfig (3)

Status: auto-obsoleted due to no activity on 2026/10/12 07:27
Subsystems: selinux
Labels: prio:high
[Documentation on labels]
First crash: 91d, last: 91d
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
f64f9092 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ INFO: rcu detected stall in fsconfig (3) 2026/07/16 00:02 2026/07/16 00:02 2026/07/16 01:01 10d97020
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in fsconfig (2) fs 1 1 420d 420d 0/29 auto-obsoleted due to no activity on 2025/11/17 14:57
upstream INFO: rcu detected stall in fsconfig mm 1 1 775d 775d 0/29 auto-obsoleted due to no activity on 2024/11/27 12:34

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12090/2:b..l P12083/1:b..l
rcu: 	(detected by 1, t=10502 jiffies, g=66773, q=217 ncpus=2)
task:syz.0.1460      state:R  running task     stack:27144 pid:12083 tgid:12083 ppid:5606   task_flags:0x40004c flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7413
 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline]
 _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:190
 spin_unlock include/linux/spinlock.h:390 [inline]
 zap_pte_range mm/memory.c:1964 [inline]
 zap_pmd_range mm/memory.c:2020 [inline]
 zap_pud_range mm/memory.c:2048 [inline]
 zap_p4d_range mm/memory.c:2069 [inline]
 __zap_vma_range+0x16f7/0x4a30 mm/memory.c:2109
 unmap_vmas+0x299/0x5f0 mm/memory.c:2178
 exit_mmap+0x1ef/0xa00 mm/mmap.c:1300
 __mmput+0x12a/0x410 kernel/fork.c:1187
 mmput+0x67/0x80 kernel/fork.c:1210
 exit_mm kernel/exit.c:615 [inline]
 do_exit+0x8b1/0x2ae0 kernel/exit.c:997
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1152
 __do_sys_exit_group kernel/exit.c:1163 [inline]
 __se_sys_exit_group kernel/exit.c:1161 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1161
 x64_sys_call+0x102c/0x1530 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb3f6b9de59
RSP: 002b:00007ffd3c6b5cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb3f6b9de59
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffd3c6b5d2c R08: 0000000000000000 R09: 00000000000927c0
R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000011a
R13: 00000000000927c0 R14: 0000000000091dd2 R15: 00007ffd3c6b5d80
 </TASK>
task:syz.5.1463      state:R  running task     stack:27424 pid:12090 tgid:12088 ppid:7618   task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:avtab_node_cmp security/selinux/ss/avtab.c:70 [inline]
RIP: 0010:avtab_search_node+0x2aa/0x490 security/selinux/ss/avtab.c:156
Code: 00 e8 5a f6 32 fd 48 89 d8 48 c1 e8 03 42 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 95 01 00 00 0f b7 2b <44> 89 e7 89 ee e8 ac ef 32 fd 66 41 39 ec 75 86 e8 21 f6 32 fd 48
RSP: 0018:ffffc900036273c8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffff888032bcc8e8 RCX: ffffc900065ba000
RDX: 0000000000000000 RSI: ffffffff84d6e646 RDI: ffffc900036274fe
RBP: 00000000000000c6 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000800 R11: 0000000000000000 R12: 000000000000031f
R13: dffffc0000000000 R14: 00000000000002f5 R15: 000000000000003a
 context_struct_compute_av+0x622/0x1250 security/selinux/ss/services.c:662
 security_compute_av+0x5ea/0x11e0 security/selinux/ss/services.c:1178
 avc_compute_av+0x84/0x820 security/selinux/avc.c:992
 avc_perm_nonode+0xb1/0x180 security/selinux/avc.c:1117
 avc_has_perm_noaudit+0x2d4/0x3b0 security/selinux/avc.c:1160
 avc_has_perm+0xbd/0x1e0 security/selinux/avc.c:1195
 selinux_key_permission+0x150/0x1d0 security/selinux/hooks.c:7082
 security_key_permission+0x9b/0x230 security/security.c:5175
 key_task_permission+0x2c0/0x3c0 security/keys/permission.c:90
 keyring_search_rcu+0x16b/0x310 security/keys/keyring.c:919
 search_cred_keyrings_rcu+0x73/0x2e0 security/keys/process_keys.c:441
 search_process_keyrings_rcu+0x1c/0x310 security/keys/process_keys.c:544
 request_key_and_link+0x27e/0x1330 security/keys/request_key.c:618
 request_key_tag+0x56/0xc0 security/keys/request_key.c:717
 dns_query+0x27c/0x770 net/dns_resolver/dns_query.c:96
 ceph_dns_resolve_name net/ceph/messenger.c:1271 [inline]
 ceph_parse_server_name net/ceph/messenger.c:1306 [inline]
 ceph_parse_ips+0x871/0x930 net/ceph/messenger.c:1333
 ceph_parse_mon_ips+0x65/0xd0 net/ceph/ceph_common.c:406
 ceph_parse_old_source fs/ceph/super.c:263 [inline]
 ceph_parse_source fs/ceph/super.c:380 [inline]
 ceph_parse_mount_param+0x1b0e/0x28a0 fs/ceph/super.c:449
 vfs_parse_fs_param+0x200/0x3b0 fs/fs_context.c:132
 vfs_fsconfig_locked fs/fsopen.c:303 [inline]
 __do_sys_fsconfig+0x617/0xcb0 fs/fsopen.c:463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f59ef39de59
RSP: 002b:00007f59f01a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
RAX: ffffffffffffffda RBX: 00007f59ef625fa0 RCX: 00007f59ef39de59
RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000003
RBP: 00007f59ef433e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f59ef626038 R14: 00007f59ef625fa0 R15: 00007ffdbf3491b8
 </TASK>
rcu: rcu_preempt kthread starved for 3050 jiffies! g66773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27592 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0xdd/0x2c0 kernel/sched/core.c:7326
 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 76 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 39 12 00 fb f4 <e9> bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242
RAX: 0000000002a7be91 RBX: ffffffff8e891480 RCX: ffffffff8bb962d5
RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: ffffffff8c400f80
RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d
R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33321ff8 CR3: 000000001e7a5000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
 default_idle+0x9/0x10 arch/x86/kernel/process.c:768
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x3a7/0x5b0 kernel/sched/idle.c:355
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
 rest_init+0x251/0x260 init/main.c:717
 start_kernel+0x48e/0x490 init/main.c:1175
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
 x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
 common_startup_64+0x13e/0x158
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/14 07:20 upstream 0f26556c5eee 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in fsconfig
* Struck through repros no longer work on HEAD.