syzbot


INFO: task can't die in htab_map_update_elem

Status: auto-obsoleted due to no activity on 2022/11/13 20:58
Subsystems: bpf
[Documentation on labels]
First crash: 745d, last: 745d
Cause bisection: failed (error log, bisect log)
  
Last patch testing requests (1)
Created Duration User Patch Repo Result
2022/11/13 11:30 18m retest repro linux-next OK log

Sample crash report:
INFO: task syz-executor311:3624 can't die for more than 143 seconds.
task:syz-executor311 state:R  running task     stack:27456 pid: 3624 ppid:  3622 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6586
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock_irqrestore+0x57/0x70 kernel/locking/spinlock.c:194
 htab_unlock_bucket kernel/bpf/hashtab.c:189 [inline]
 htab_map_update_elem+0x52c/0x860 kernel/bpf/hashtab.c:1111
 bpf_map_update_value.isra.0+0x2dc/0x8f0 kernel/bpf/syscall.c:224
 check_object_size include/linux/thread_info.h:199 [inline]
 check_copy_size include/linux/thread_info.h:235 [inline]
 copy_from_user include/linux/uaccess.h:151 [inline]
 generic_map_update_batch+0x32a/0x5c0 kernel/bpf/syscall.c:1408
 bpf_map_do_batch+0x2d7/0x5b0 kernel/bpf/syscall.c:4241
 __sys_bpf+0x1cdd/0x55d0 kernel/bpf/syscall.c:4727
 __do_sys_bpf kernel/bpf/syscall.c:4767 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:4765 [inline]
 __x64_sys_bpf+0x75/0xb0 kernel/bpf/syscall.c:4765
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7feda28ebed9
RSP: 002b:00007ffef1c28ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007feda28ebed9
RDX: 0000000000000038 RSI: 0000000020000140 RDI: 000000000000001a
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: 00007ffef1c28560 R11: 0000000000000246 R12: 00007feda28af6b0
R13: 0000000000000000 R14: 00007ffef1c28b10 R15: 00007ffef1c28b00
 </TASK>
INFO: task syz-executor311:3629 can't die for more than 144 seconds.
task:syz-executor311 state:R  running task     stack:27928 pid: 3629 ppid:  3627 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6586
 </TASK>
INFO: task syz-executor311:3630 can't die for more than 145 seconds.
task:syz-executor311 state:R  running task     stack:27928 pid: 3630 ppid:  3625 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
 </TASK>
INFO: task syz-executor311:3631 can't die for more than 146 seconds.
task:syz-executor311 state:R  running task     stack:27928 pid: 3631 ppid:  3623 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
 </TASK>
INFO: task syz-executor311:3632 can't die for more than 146 seconds.
task:syz-executor311 state:R  running task     stack:27328 pid: 3632 ppid:  3626 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
 preempt_schedule_common+0x45/0xc0 kernel/sched/core.c:6586
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock_irqrestore+0x57/0x70 kernel/locking/spinlock.c:194
 htab_unlock_bucket kernel/bpf/hashtab.c:189 [inline]
 htab_map_update_elem+0x52c/0x860 kernel/bpf/hashtab.c:1111
 bpf_map_update_value.isra.0+0x2dc/0x8f0 kernel/bpf/syscall.c:224
 generic_map_update_batch+0x3f2/0x5c0 kernel/bpf/syscall.c:1413
 bpf_map_do_batch+0x2d7/0x5b0 kernel/bpf/syscall.c:4241
 __sys_bpf+0x1cdd/0x55d0 kernel/bpf/syscall.c:4727
 __do_sys_bpf kernel/bpf/syscall.c:4767 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:4765 [inline]
 __x64_sys_bpf+0x75/0xb0 kernel/bpf/syscall.c:4765
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7feda28ebed9
RSP: 002b:00007ffef1c28ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007feda28ebed9
RDX: 0000000000000038 RSI: 0000000020000140 RDI: 000000000000001a
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: 00007ffef1c28560 R11: 0000000000000246 R12: 00007feda28af6b0
R13: 0000000000000000 R14: 00007ffef1c28b10 R15: 00007ffef1c28b00
 </TASK>
INFO: task syz-executor311:3633 can't die for more than 147 seconds.
task:syz-executor311 state:R  running task     stack:27816 pid: 3633 ppid:  3628 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4cc0 kernel/sched/core.c:6421
 htab_map_update_elem+0x16c/0x860 kernel/bpf/hashtab.c:1044
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:35
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/28:
 #0: ffffffff8bd83de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6491
1 lock held by klogd/2950:
2 locks held by getty/3276:
 #0: ffff888148da3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:244
 #1: ffffc90002e562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcea/0x1230 drivers/tty/n_tty.c:2075
1 lock held by syz-executor311/3624:
1 lock held by syz-executor311/3629:
1 lock held by syz-executor311/3631:
1 lock held by syz-executor311/3632:
1 lock held by syz-executor311/3633:

=============================================


Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/04/12 02:57 linux-next d12d7e1cfe38 af01ee7d .config console log report syz C ci-upstream-linux-next-kasan-gce-root INFO: task can't die in htab_map_update_elem
2022/04/12 00:48 linux-next d12d7e1cfe38 af01ee7d .config console log report info ci-upstream-linux-next-kasan-gce-root INFO: task can't die in htab_map_update_elem
* Struck through repros no longer work on HEAD.