syzbot


possible deadlock in __queue_map_get

Status: upstream: reported C repro on 2024/04/13 05:14
Subsystems: bpf
[Documentation on labels]
Reported-by: syzbot+8bdfc2c53fb2b63e1871@syzkaller.appspotmail.com
First crash: 226d, last: 10d
Cause bisection: failed (error log, bisect log)
  
Discussions (9)
Title Replies (including bot) Last reply
[syzbot] Monthly bpf report (Oct 2024) 0 (1) 2024/10/15 21:53
[syzbot] Monthly bpf report (Sep 2024) 0 (1) 2024/09/14 12:53
[syzbot] Monthly bpf report (Aug 2024) 0 (1) 2024/08/14 12:43
[syzbot] Monthly bpf report (Jul 2024) 0 (1) 2024/07/15 11:52
[syzbot] Monthly bpf report (Jun 2024) 0 (1) 2024/06/12 22:41
[PATCH v3 bpf-next 1/2] bpf: Patch to Fix deadlocks in queue and stack maps 7 (7) 2024/05/17 03:32
[PATCH v2 bpf-next 1/2] bpf: Patch to Fix deadlocks in queue and stack maps 1 (1) 2024/05/14 12:23
[PATCH bpf-next 1/2] Patch to Fix deadlocks in queue and stack maps 4 (4) 2024/05/04 12:22
[syzbot] [bpf?] possible deadlock in __queue_map_get 0 (1) 2024/04/13 05:14
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 possible deadlock in __queue_map_get origin:upstream C error 13 69d 227d 0/3 upstream: reported C repro on 2024/04/08 00:56
Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/11/10 14:04 18m retest repro net report log
2024/10/21 05:34 41m retest repro bpf-next report log
2024/10/21 05:34 18m retest repro bpf-next report log
2024/10/21 05:34 20m retest repro bpf-next report log
2024/10/21 05:34 15m retest repro bpf-next report log
2024/10/21 05:33 11m retest repro upstream report log
2024/08/25 04:51 16m retest repro bpf report log
2024/07/22 17:43 39m retest repro bpf-next report log
2024/07/22 17:43 26m retest repro bpf-next report log
2024/07/08 06:52 24m retest repro net-next report log

Sample crash report:
============================================
WARNING: possible recursive locking detected
6.11.0-rc7-syzkaller #0 Not tainted
--------------------------------------------
syz-executor892/5347 is trying to acquire lock:
ffff88803295d1d8 (&qs->lock){....}-{2:2}, at: __queue_map_get+0x2b8/0x360 kernel/bpf/queue_stack_maps.c:105

but task is already holding lock:
ffff88802a1811d8 (&qs->lock){....}-{2:2}, at: __queue_map_get+0x2b8/0x360 kernel/bpf/queue_stack_maps.c:105

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&qs->lock);
  lock(&qs->lock);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

4 locks held by syz-executor892/5347:
 #0: ffff888027bcb830 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1091 [inline]
 #0: ffff888027bcb830 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2a/0x220 kernel/futex/core.c:1143
 #1: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
 #1: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #1: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2405 [inline]
 #1: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 kernel/trace/bpf_trace.c:2447
 #2: ffff88802a1811d8 (&qs->lock){....}-{2:2}, at: __queue_map_get+0x2b8/0x360 kernel/bpf/queue_stack_maps.c:105
 #3: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
 #3: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #3: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2405 [inline]
 #3: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 kernel/trace/bpf_trace.c:2447

stack backtrace:
CPU: 2 UID: 0 PID: 5347 Comm: syz-executor892 Not tainted 6.11.0-rc7-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119
 check_deadlock kernel/locking/lockdep.c:3061 [inline]
 validate_chain kernel/locking/lockdep.c:3855 [inline]
 __lock_acquire+0x2167/0x3cb0 kernel/locking/lockdep.c:5142
 lock_acquire kernel/locking/lockdep.c:5759 [inline]
 lock_acquire+0x1b1/0x560 kernel/locking/lockdep.c:5724
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162
 __queue_map_get+0x2b8/0x360 kernel/bpf/queue_stack_maps.c:105
 </TASK>

Crashes (162):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/09 19:46 upstream da3ea35007d0 8f722c94 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in __queue_map_get
2024/10/27 13:44 bpf ae90f6a6170d 65e8686b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/10/07 05:32 bpf bcd28cfd04eb d7906eff .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/09/14 17:17 bpf b831f83e40a2 ff60e2ca .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/04/15 22:30 bpf 443574b03387 0d592ce4 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/04/09 05:34 net f99c5f563c17 53df08b6 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce possible deadlock in __queue_map_get
2024/11/10 14:44 bpf-next a2b4a9cddae8 6b856513 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/10/25 21:28 bpf-next 87cb58aebdf7 65e8686b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/10/02 02:57 bpf-next 9502a7de5a61 ea2b66a6 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/31 15:12 bpf-next fbe3e8473f39 34889ee3 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/18 11:44 net-next 4b377b4868ef c0f1611a .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce possible deadlock in __queue_map_get
2024/05/11 15:41 net-next b9d5f5711dd8 9026e142 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce possible deadlock in __queue_map_get
2024/05/08 20:29 bpf-next e612b5c1d3ee 4cf3f9b3 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/05 00:30 bpf-next a9e7715ce8b3 610f2a54 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/04/11 21:54 bpf 443574b03387 478efa7f .config console log report syz [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/09/26 23:29 upstream 11a299a7933e 0d19f247 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in __queue_map_get
2024/09/10 02:48 upstream da3ea35007d0 dd9c7e97 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root possible deadlock in __queue_map_get
2024/05/27 10:48 upstream 1613e604df0c a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in __queue_map_get
2024/05/25 07:54 upstream 0b32d436c015 a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root possible deadlock in __queue_map_get
2024/05/17 11:21 upstream ea5f6ad9ad96 c2e07261 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root possible deadlock in __queue_map_get
2024/05/12 03:59 upstream cf87f46fd34d 9026e142 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in __queue_map_get
2024/09/09 19:03 upstream da3ea35007d0 8f722c94 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in __queue_map_get
2024/06/18 13:19 upstream 2ccbdf43d5e7 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in __queue_map_get
2024/05/27 01:33 upstream 1613e604df0c c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in __queue_map_get
2024/05/18 08:56 upstream 4b377b4868ef c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in __queue_map_get
2024/05/17 18:42 upstream ff2632d7d08e c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in __queue_map_get
2024/08/11 04:46 bpf ee9a43b7cfe2 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/06/24 05:43 bpf 36534d3c5453 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/06/15 19:05 bpf 36534d3c5453 f429ab00 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/05/07 20:25 bpf 3e9bc0472b91 cb2dcc0e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce possible deadlock in __queue_map_get
2024/04/09 05:10 net f99c5f563c17 53df08b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce possible deadlock in __queue_map_get
2024/07/30 19:15 bpf-next ba71ffb660e4 a4e01e1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/07/27 13:25 bpf-next 7d30b8aa4fc3 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/06/23 10:38 bpf-next 1ae7a19e3763 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/06/18 10:22 bpf-next f6afdaf72af7 ce6011bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/06/18 02:14 bpf-next dedf56d775c0 1f11cfd7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/06/09 18:43 bpf-next f85af9d955ac 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/06/08 05:20 bpf-next f85af9d955ac 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/06/03 03:10 bpf-next 531876c80004 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/06/01 11:23 bpf-next 531876c80004 3113787f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/30 01:21 bpf-next fbe3e8473f39 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/29 16:43 bpf-next eb4e7726279a 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/29 02:00 bpf-next d9cbd8343b01 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/28 22:23 bpf-next d9cbd8343b01 34889ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/09 01:28 net-next 252aa6d53931 20bf80e1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce possible deadlock in __queue_map_get
2024/05/02 13:51 bpf-next ac2f438c2a85 3ba885bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce possible deadlock in __queue_map_get
2024/05/28 07:13 linux-next 6dc544b66971 f550015e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/28 07:12 linux-next 6dc544b66971 f550015e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/27 08:29 linux-next 3689b0ef08b7 a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/23 17:35 linux-next 124cfbcd6d18 8f98448e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/23 04:45 linux-next 124cfbcd6d18 4d098039 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/22 13:17 linux-next 124cfbcd6d18 4d098039 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/22 13:16 linux-next 124cfbcd6d18 4d098039 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/21 16:13 linux-next 124cfbcd6d18 1014eca7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/21 03:59 linux-next 124cfbcd6d18 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/20 04:55 linux-next 632483ea8004 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/20 04:55 linux-next 632483ea8004 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/18 03:21 linux-next c75962170e49 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/18 01:20 linux-next c75962170e49 c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/17 13:07 linux-next c75962170e49 a12e99e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/17 11:48 linux-next c75962170e49 c2e07261 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
2024/05/03 14:44 linux-next 9221b2819b8a 375d4445 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in __queue_map_get
* Struck through repros no longer work on HEAD.