[syzbot] INFO: trying to register non-static key in open_xa_dir

From: syzbot
Date: Tue Sep 06 2022 - 06:39:30 EST

Next message: Marc Kleine-Budde: "Re: [RFC PATCH v3 4/4] can: bxcan: add support for ST bxCAN controller"
Previous message: Conor.Dooley: "Re: [RFC PATCH 1/2] riscv: vendors: andes: Add support to configure the PMA regions"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello,

syzbot found the following issue on:

HEAD commit: 85413d1e802e Merge branch 'for-next/fixes' into for-kernelci
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
console output: https://syzkaller.appspot.com/x/log.txt?x=13aeb7bd080000
kernel config: https://syzkaller.appspot.com/x/.config?x=57b9bfeca947ab90
dashboard link: https://syzkaller.appspot.com/bug?extid=65fa614434c3a3ae70ae
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: arm64

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+65fa614434c3a3ae70ae@xxxxxxxxxxxxxxxxxxxxxxxxx

EXT4-fs (loop3): Cannot turn on quotas: error -22
EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz-executor.3: bad orphan inode 2147483648
EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 1 PID: 12538 Comm: syz-executor.3 Not tainted 6.0.0-rc3-syzkaller-16800-g85413d1e802e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Call trace:
dump_backtrace+0x1b0/0x1dc arch/arm64/kernel/stacktrace.c:182
show_stack+0x2c/0x64 arch/arm64/kernel/stacktrace.c:189
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x104/0x16c lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
assign_lock_key+0x134/0x140 kernel/locking/lockdep.c:979
register_lock_class+0xc4/0x2f8 kernel/locking/lockdep.c:1292
__lock_acquire+0xa8/0x30a4 kernel/locking/lockdep.c:4932
lock_acquire+0x100/0x1f8 kernel/locking/lockdep.c:5666
down_write_nested+0x64/0xc4 kernel/locking/rwsem.c:1662
inode_lock_nested include/linux/fs.h:791 [inline]
open_xa_root fs/reiserfs/xattr.c:127 [inline]
open_xa_dir+0x5c/0x2a8 fs/reiserfs/xattr.c:152
xattr_lookup+0x34/0x198 fs/reiserfs/xattr.c:395
reiserfs_xattr_get+0x8c/0x680 fs/reiserfs/xattr.c:677
reiserfs_get_acl+0x84/0x1ac fs/reiserfs/xattr_acl.c:214
get_acl+0x104/0x330 fs/posix_acl.c:152
check_acl+0x40/0x168 fs/namei.c:306
acl_permission_check fs/namei.c:351 [inline]
generic_permission+0x270/0x32c fs/namei.c:404
reiserfs_permission+0x4c/0x6c fs/reiserfs/xattr.c:954
do_inode_permission fs/namei.c:458 [inline]
inode_permission+0x128/0x244 fs/namei.c:525
may_open+0x1e4/0x2bc fs/namei.c:3185
do_open fs/namei.c:3555 [inline]
path_openat+0xdd0/0x11c4 fs/namei.c:3691
do_filp_open+0xdc/0x1b8 fs/namei.c:3718
do_sys_openat2+0xb8/0x22c fs/open.c:1311
do_sys_open fs/open.c:1327 [inline]
__do_sys_openat fs/open.c:1343 [inline]
__se_sys_openat fs/open.c:1338 [inline]
__arm64_sys_openat+0xb0/0xe0 fs/open.c:1338
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
do_el0_svc+0x48/0x154 arch/arm64/kernel/syscall.c:206
el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:624
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:642
el0t_64_sync+0x18c/0x190
Unable to handle kernel paging request at virtual address ffff7fff437161a0
Mem abort info:
ESR = 0x0000000096000004
EC = 0x25: DABT (current EL), IL = 32 bits
SET = 0, FnV = 0
EA = 0, S1PTW = 0
FSC = 0x04: level 0 translation fault
Data abort info:
ISV = 0, ISS = 0x00000004
CM = 0, WnR = 0
swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001c5736000
[ffff7fff437161a0] pgd=0000000000000000, p4d=0000000000000000
Internal error: Oops: 96000004 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 12538 Comm: syz-executor.3 Not tainted 6.0.0-rc3-syzkaller-16800-g85413d1e802e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : decode_cpu kernel/locking/osq_lock.c:34 [inline]
pc : osq_lock+0x60/0x1cc kernel/locking/osq_lock.c:111
lr : osq_lock+0x38/0x1cc kernel/locking/osq_lock.c:94
sp : ffff8000134eb6e0
x29: ffff8000134eb6e0 x28: 0000000000000030 x27: ffff0000e96a4270
x26: 0000000000000000 x25: 0000000000000000 x24: ffff0000fc36b500
x23: 0000000000000000 x22: ffff80000d2e1a00 x21: ffff80000d37cf28
x20: ffff0001fefefa00 x19: ffff0000f7ce6d50 x18: 0000000000000000
x17: 6e69676e45206574 x16: 0000000000000001 x15: 0000000000000000
x14: 0000000000000000 x13: 205d383335323154 x12: 5b5d313738343532
x11: ff808000095ecd98 x10: 0000000000000000 x9 : 0000000000000002
x8 : 00000000e6c7324f x7 : 545b5d3137383435 x6 : ffff800008197c80
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000001 x1 : ffff80000ce74037 x0 : 0000000000000001
Call trace:
decode_cpu kernel/locking/osq_lock.c:32 [inline]
osq_lock+0x60/0x1cc kernel/locking/osq_lock.c:111
rwsem_optimistic_spin+0x38/0x1f4 kernel/locking/rwsem.c:827
rwsem_down_write_slowpath+0xb0/0x520 kernel/locking/rwsem.c:1114
__down_write_common kernel/locking/rwsem.c:1297 [inline]
__down_write kernel/locking/rwsem.c:1306 [inline]
down_write_nested+0x90/0xc4 kernel/locking/rwsem.c:1663
inode_lock_nested include/linux/fs.h:791 [inline]
open_xa_root fs/reiserfs/xattr.c:127 [inline]
open_xa_dir+0x5c/0x2a8 fs/reiserfs/xattr.c:152
xattr_lookup+0x34/0x198 fs/reiserfs/xattr.c:395
reiserfs_xattr_get+0x8c/0x680 fs/reiserfs/xattr.c:677
reiserfs_get_acl+0x84/0x1ac fs/reiserfs/xattr_acl.c:214
get_acl+0x104/0x330 fs/posix_acl.c:152
check_acl+0x40/0x168 fs/namei.c:306
acl_permission_check fs/namei.c:351 [inline]
generic_permission+0x270/0x32c fs/namei.c:404
reiserfs_permission+0x4c/0x6c fs/reiserfs/xattr.c:954
do_inode_permission fs/namei.c:458 [inline]
inode_permission+0x128/0x244 fs/namei.c:525
may_open+0x1e4/0x2bc fs/namei.c:3185
do_open fs/namei.c:3555 [inline]
path_openat+0xdd0/0x11c4 fs/namei.c:3691
do_filp_open+0xdc/0x1b8 fs/namei.c:3718
do_sys_openat2+0xb8/0x22c fs/open.c:1311
do_sys_open fs/open.c:1327 [inline]
__do_sys_openat fs/open.c:1343 [inline]
__se_sys_openat fs/open.c:1338 [inline]
__arm64_sys_openat+0xb0/0xe0 fs/open.c:1338
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
do_el0_svc+0x48/0x154 arch/arm64/kernel/syscall.c:206
el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:624
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:642
el0t_64_sync+0x18c/0x190
Code: d503201f d503201f 340005e8 51000508 (f868daa8)
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
0: d503201f nop
4: d503201f nop
8: 340005e8 cbz w8, 0xc4
c: 51000508 sub w8, w8, #0x1
* 10: f868daa8 ldr x8, [x21, w8, sxtw #3] <-- trapping instruction

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@xxxxxxxxxxxxxxxx.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

Next message: Marc Kleine-Budde: "Re: [RFC PATCH v3 4/4] can: bxcan: add support for ST bxCAN controller"
Previous message: Conor.Dooley: "Re: [RFC PATCH 1/2] riscv: vendors: andes: Add support to configure the PMA regions"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]