syzbot

 sign-in | mailing list | source | docs
🐞 Open [993] ≡ Subsystems 🐞 Fixed [5244] 🐞 Invalid [12529] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in bpf_link_release (2)

Status: auto-obsoleted due to no activity on 2023/02/13 11:46
Subsystems: kernel
[Documentation on labels]
First crash: 533d, last: 533d
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in bpf_link_release kernel 1 848d 848d 0/26 closed as invalid on 2022/02/08 10:10
android-5-15 BUG: soft lockup in bpf_link_release 4 1d13h 20d 0/2 premoderation: reported on 2024/04/08 01:38

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...!: (3 ticks this GP) idle=b7dc/1/0x4000000000000000 softirq=26074/26076 fqs=215
	(detected by 0, t=10506 jiffies, g=41589, q=125 ncpus=2)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 7740 Comm: syz-executor.3 Not tainted 6.1.0-rc4-syzkaller-00159-g4bbf3422df78 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:__lock_is_held kernel/locking/lockdep.c:5407 [inline]
RIP: 0010:lock_is_held_type+0x90/0x140 kernel/locking/lockdep.c:5711
Code: 24 48 0a 00 00 4d 8d ac 24 50 0a 00 00 65 ff 05 46 e4 73 76 85 c0 7f 12 e9 8a 00 00 00 83 c3 01 41 3b 9c 24 48 0a 00 00 7d 7d <48> 63 c3 48 89 ee 48 8d 04 80 4d 8d 7c c5 00 4c 89 ff e8 99 fe ff
RSP: 0018:ffffc900003e8c90 EFLAGS: 00000093
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8bf85c00 RDI: ffff888074836c10
RBP: ffffffff8bf85c00 R08: 0000000000000000 R09: ffffffff8de18397
R10: fffffbfff1bc3072 R11: 0000000000000000 R12: ffff8880748361c0
R13: ffff888074836c10 R14: 00000000ffffffff R15: ffff888074836c10
FS:  0000555555787400(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f822000 CR3: 0000000022918000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 lock_is_held include/linux/lockdep.h:283 [inline]
 rcu_read_lock_sched_held+0x3a/0x70 kernel/rcu/update.c:125
 trace_lock_release include/trace/events/lock.h:69 [inline]
 lock_release+0x5cb/0x810 kernel/locking/lockdep.c:5679
 __raw_spin_unlock include/linux/spinlock_api_smp.h:141 [inline]
 _raw_spin_unlock+0x12/0x40 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:390 [inline]
 advance_sched+0x435/0x9a0 net/sched/sch_taprio.c:749
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x690/0xfb0 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline]
 __sysvec_apic_timer_interrupt+0x17c/0x640 arch/x86/kernel/apic/apic.c:1113
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:spin_unlock include/linux/spinlock.h:390 [inline]
RIP: 0010:__text_poke+0x475/0x8e0 arch/x86/kernel/alternative.c:1193
Code: 84 03 02 00 00 48 83 7c 24 08 00 0f 85 ed 01 00 00 9c 58 f6 c4 02 0f 85 1e 03 00 00 48 83 7c 24 08 00 74 01 fb 48 8b 7c 24 68 <e8> e6 a4 64 08 48 8b 4c 24 20 48 b8 00 00 00 00 00 fc ff df 48 c7
RSP: 0018:ffffc90003627aa8 EFLAGS: 00000206
RAX: 0000000000000006 RBX: 0000000000000007 RCX: 1ffffffff21263de
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881401e4060
RBP: ffff888012173558 R08: 0000000000000001 R09: ffffffff9092a957
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff816870af
R13: 0000000000000004 R14: 00000000000000b3 R15: ffff888084f1d7c0
 text_poke arch/x86/kernel/alternative.c:1217 [inline]
 text_poke_bp_batch+0x37d/0x6b0 arch/x86/kernel/alternative.c:1515
 text_poke_flush arch/x86/kernel/alternative.c:1670 [inline]
 text_poke_flush arch/x86/kernel/alternative.c:1667 [inline]
 text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1677
 arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
 jump_label_update+0x32f/0x410 kernel/jump_label.c:801
 static_key_disable_cpuslocked+0x152/0x1b0 kernel/jump_label.c:207
 static_key_disable+0x16/0x20 kernel/jump_label.c:215
 tracepoint_remove_func kernel/tracepoint.c:417 [inline]
 tracepoint_probe_unregister+0x632/0xc30 kernel/tracepoint.c:551
 bpf_raw_tp_link_release+0x51/0xa0 kernel/bpf/syscall.c:3140
 bpf_link_free+0xe6/0x1b0 kernel/bpf/syscall.c:2723
 bpf_link_put+0x161/0x1b0 kernel/bpf/syscall.c:2749
 bpf_link_release+0x33/0x40 kernel/bpf/syscall.c:2758
 __fput+0x27c/0xa90 fs/file_table.c:320
 task_work_run+0x16b/0x270 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x19/0x50 kernel/entry/common.c:296
 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7ff213e3d40b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffca4770e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007ff213e3d40b
RDX: 00007ff213a005f8 RSI: ffffffffffffffff RDI: 0000000000000004
RBP: 00007ff213fad980 R08: 0000000000000000 R09: 00007ff213a00000
R10: 00007ff213a00600 R11: 0000000000000293 R12: 00000000000a8611
R13: 00007ffca4770f70 R14: 00007ff213fabf80 R15: 0000000000000032
 </TASK>
rcu: rcu_preempt kthread starved for 9430 jiffies! g41589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28752 pid:15    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5191 [inline]
 __schedule+0xae9/0x53f0 kernel/sched/core.c:6503
 schedule+0xda/0x1b0 kernel/sched/core.c:6579
 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1935
 rcu_gp_fqs_loop+0x190/0x910 kernel/rcu/tree.c:1660
 rcu_gp_kthread+0x236/0x360 kernel/rcu/tree.c:1859
 kthread+0x2e4/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.0-rc4-syzkaller-00159-g4bbf3422df78 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:kmem_cache_free+0x134/0x4b0 mm/slab.c:3611
Code: f2 4c 89 ee 4c 89 e7 e8 1a fb ff ff 48 85 db 0f 85 3c 01 00 00 9c 58 f6 c4 02 0f 85 85 01 00 00 48 85 db 74 01 fb 48 83 c4 20 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b 05 52 ea 3a 7e 3b 05 f4 55
RSP: 0018:ffffc90000007c58 EFLAGS: 00000282
RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1bc2a81
RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000
RBP: ffffea00004a3a40 R08: 0000000000000001 R09: 0000000000000001
R10: 000000000000000f R11: 000000000008c07e R12: ffff888016edcd00
R13: ffff8880128e95c0 R14: ffffffff8751b4df R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe4fd0fee8 CR3: 0000000027b10000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 kfree_skbmem+0xef/0x1b0 net/core/skbuff.c:812
 __kfree_skb net/core/skbuff.c:869 [inline]
 consume_skb net/core/skbuff.c:1033 [inline]
 consume_skb+0xcf/0x160 net/core/skbuff.c:1027
 mac80211_hwsim_tx_frame+0x1f6/0x2a0 drivers/net/wireless/mac80211_hwsim.c:2054
 mac80211_hwsim_beacon_tx+0x55c/0xab0 drivers/net/wireless/mac80211_hwsim.c:2116
 __iterate_interfaces+0x2c8/0x550 net/mac80211/util.c:796
 ieee80211_iterate_active_interfaces_atomic+0x70/0x180 net/mac80211/util.c:832
 mac80211_hwsim_beacon+0xfd/0x1f0 drivers/net/wireless/mac80211_hwsim.c:2142
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x690/0xfb0 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x17b/0x360 kernel/time/hrtimer.c:1766
 __do_softirq+0x1f7/0xad8 kernel/softirq.c:571
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:662
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1107
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:113 [inline]
RIP: 0010:acpi_idle_do_entry+0x1fd/0x2a0 drivers/acpi/processor_idle.c:572
Code: 89 de e8 76 0c ea f7 84 db 75 ac e8 dd 0f ea f7 e8 38 87 f0 f7 66 90 e8 d1 0f ea f7 0f 00 2d ba d2 c2 00 e8 c5 0f ea f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 a0 0c ea f7 48 85 db
RSP: 0018:ffffffff8bc07d28 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffffffff8bcbc9c0 RSI: ffffffff8991c4ab RDI: 0000000000000000
RBP: ffff8881459e8064 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
R13: ffff8881459e8000 R14: ffff8881459e8064 R15: ffff888146ae6004
 acpi_idle_enter+0x364/0x500 drivers/acpi/processor_idle.c:709
 cpuidle_enter_state+0x1ab/0xd30 drivers/cpuidle/cpuidle.c:239
 cpuidle_enter+0x4a/0xa0 drivers/cpuidle/cpuidle.c:356
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:236 [inline]
 do_idle+0x3f7/0x590 kernel/sched/idle.c:303
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:400
 rest_init+0x169/0x270 init/main.c:729
 arch_call_rest_init+0xf/0x14 init/main.c:890
 start_kernel+0x478/0x499 init/main.c:1145
 secondary_startup_64_no_verify+0xce/0xdb
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/11 22:32 upstream 4bbf3422df78 3ead01ad .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in bpf_link_release
* Struck through repros no longer work on HEAD.