syzbot


INFO: rcu detected stall in tc_modify_qdisc

Status: upstream: reported on 2024/06/06 08:34
Reported-by: syzbot+a44c0d4ae73a3c602c9f@syzkaller.appspotmail.com
First crash: 12d, last: 12d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in tc_modify_qdisc net C done 479 5d05h 1420d 0/27 upstream: reported C repro on 2020/07/29 05:53
android-6-1 BUG: soft lockup in tc_modify_qdisc C done done 53 203d 235d 0/2 auto-obsoleted due to no activity on 2024/02/06 04:01
android-5-15 BUG: soft lockup in tc_modify_qdisc origin:lts C done done 254 292d 347d 0/2 auto-obsoleted due to no activity on 2023/11/09 01:01
linux-5.15 BUG: soft lockup in tc_modify_qdisc origin:upstream C error 1 381d 381d 0/3 auto-obsoleted due to no activity on 2023/09/11 01:53
linux-6.1 BUG: soft lockup in tc_modify_qdisc origin:upstream C done 1 380d 380d 3/3 fixed on 2023/07/10 11:22
android-5-10 BUG: soft lockup in tc_modify_qdisc C done done 314 294d 347d 0/2 auto-obsoleted due to no activity on 2023/11/07 07:54

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 5859 jiffies s: 58849 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 28281 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:match_held_lock+0x2/0xb0 kernel/locking/lockdep.c:5107
Code: e8 03 00 75 cf 48 c7 c7 60 00 ec 8a 48 c7 c6 a0 00 ec 8a e8 30 7f c7 f6 0f 0b eb b6 e8 e7 fa ff ff 0f 1f 80 00 00 00 00 55 53 <bd> 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 10 00 72
RSP: 0018:ffffc90000007b68 EFLAGS: 00000087
RAX: 000000000000000a RBX: 0000000000000002 RCX: ffffc90000007c03
RDX: ffff88807af00ad8 RSI: ffff8880b982a4d8 RDI: ffff88807af00b30
RBP: ffffc90000007cb0 R08: dffffc0000000000 R09: fffffbfff1ce712e
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807af00b30
R13: 0000000000000002 R14: 000000000000000a R15: dffffc0000000000
FS:  00007f59a8e886c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30b21000 CR3: 000000002262b000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 find_held_lock kernel/locking/lockdep.c:5152 [inline]
 __lock_release kernel/locking/lockdep.c:5337 [inline]
 lock_release+0x264/0xa20 kernel/locking/lockdep.c:5682
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline]
 _raw_spin_unlock_irqrestore+0x75/0x130 kernel/locking/spinlock.c:194
 __run_hrtimer kernel/time/hrtimer.c:1682 [inline]
 __hrtimer_run_queues+0x4b0/0xe50 kernel/time/hrtimer.c:1750
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1812
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 kernel/locking/spinlock.c:194
Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 f2 c1 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d7 08 c9 f6 65 8b 05 48 24 6d 75 85 c0 74 3f 48 c7 04 24 0e 36
RSP: 0018:ffffc900116aed40 EFLAGS: 00000206
RAX: 38cf1ff73096b300 RBX: 1ffff920022d5dac RCX: ffffffff816acf0a
RDX: dffffc0000000000 RSI: ffffffff8aec01c0 RDI: 0000000000000001
RBP: ffffc900116aedd0 R08: dffffc0000000000 R09: fffffbfff209385c
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 1ffff920022d5da8 R14: ffffc900116aed60 R15: 0000000000000246
 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
 taprio_change+0x4a86/0x5810 net/sched/sch_taprio.c:1689
 qdisc_create+0x8a1/0x1220 net/sched/sch_api.c:1314
 tc_modify_qdisc+0xa0a/0x1d70 net/sched/sch_api.c:1750
 rtnetlink_rcv_msg+0x818/0xff0 net/core/rtnetlink.c:6121
 netlink_rcv_skb+0x1cd/0x410 net/netlink/af_netlink.c:2508
 netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]
 netlink_unicast+0x7d8/0x970 net/netlink/af_netlink.c:1352
 netlink_sendmsg+0xa26/0xd60 net/netlink/af_netlink.c:1874
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5a5/0x8f0 net/socket.c:2514
 ___sys_sendmsg net/socket.c:2568 [inline]
 __sys_sendmsg+0x2a9/0x390 net/socket.c:2597
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f59a807cf69
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f59a8e880c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f59a81b3f80 RCX: 00007f59a807cf69
RDX: 0000000000000000 RSI: 0000000020000c00 RDI: 0000000000000004
RBP: 00007f59a80da6fe R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f59a81b3f80 R15: 00007ffcf3db7cf8
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/06 08:35 linux-6.1.y 88690811da69 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in tc_modify_qdisc
2024/06/06 08:34 linux-6.1.y 88690811da69 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in tc_modify_qdisc
* Struck through repros no longer work on HEAD.