syzbot


INFO: rcu detected stall in hci_sock_release

Status: auto-closed as invalid on 2021/09/03 05:06
Reported-by: syzbot+3f6bec9dfdd9d9358012@syzkaller.appspotmail.com
First crash: 531d, last: 427d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 BUG: soft lockup in hci_sock_release 12 93d 214d 0/1 upstream: reported on 2021/12/05 00:36

Sample crash report:
INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 0, t=10502 jiffies, g=9058, c=9057, q=183)
All QSes seen, last rcu_preempt kthread activity 10502 (4294978817-4294968315), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.5  R  running task    28912 20504   8019 0x0000000a
Call Trace:
 <IRQ>
 sched_show_task.cold+0x333/0x39a kernel/sched/core.c:5165
 print_other_cpu_stall kernel/rcu/tree.c:1501 [inline]
 check_cpu_stall kernel/rcu/tree.c:1616 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0xd29/0xd8d kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1591
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x92/0x200 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x30b/0xc80 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793
 </IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
RSP: 0018:ffff88823ab0fb68 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10
RAX: 1ffffffff11e1254 RBX: ffffffff89dd29ac RCX: 1ffff11013ad6d44
RDX: dffffc0000000000 RSI: ffff88809d6b6a00 RDI: ffff88809d6b6984
RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000282
R13: dffffc0000000000 R14: ffffffff89dd29ad R15: ffffed10174855d8
 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
 kvm_wait arch/x86/kernel/kvm.c:600 [inline]
 kvm_wait+0x179/0x240 arch/x86/kernel/kvm.c:580
 pv_wait arch/x86/include/asm/paravirt.h:679 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:447 [inline]
 __pv_queued_spin_lock_slowpath+0x722/0x910 kernel/locking/qspinlock.c:465
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:669 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:52 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:90 [inline]
 queued_read_lock_slowpath+0x150/0x190 kernel/locking/qrwlock.c:90
 hci_send_to_channel+0x3c/0x200 net/bluetooth/hci_sock.c:261
 hci_send_monitor_ctrl_event+0x3dd/0x500 net/bluetooth/hci_sock.c:391
 mgmt_send_event+0x2b3/0x330 net/bluetooth/mgmt_util.c:86
 mgmt_index_event net/bluetooth/mgmt.c:253 [inline]
 mgmt_index_added+0x1d5/0x210 net/bluetooth/mgmt.c:6559
 hci_sock_release+0x3d7/0x4c0 net/bluetooth/hci_sock.c:866
 __sock_release+0xcd/0x2b0 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1139
 __fput+0x25f/0x7a0 fs/file_table.c:210
 task_work_run+0x11f/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x418e1b
RSP: 002b:00007ffca7950780 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000418e1b
RDX: ffffffffffffffbc RSI: 00000000005701c8 RDI: 0000000000000004
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31920000
R10: 00007ffca7950870 R11: 0000000000000293 R12: 00000000000003e8
R13: 000000000004bba3 R14: 000000000056bf60 R15: 000000000056bf60
rcu_preempt kthread starved for 10502 jiffies! g9058 c9057 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=1
rcu_preempt     R  running task    30008     8      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_timeout+0x4af/0xe90 kernel/time/timer.c:1747
 rcu_gp_kthread+0xc0a/0x1e60 kernel/rcu/tree.c:2255
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404

Crashes (9):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2021/01/30 03:50 linux-4.14.y 2d2791fce891 fc9fd31e .config log report info INFO: rcu detected stall in hci_sock_release
ci2-linux-4-14 2021/01/22 15:44 linux-4.14.y 2762b48e9611 d4f4eca5 .config log report info INFO: rcu detected stall in hci_sock_release
ci2-linux-4-14 2021/05/06 05:05 linux-4.14.y 7d7d1c0ab3eb 06c27ff5 .config log report info BUG: soft lockup in hci_sock_release
ci2-linux-4-14 2021/05/05 23:21 linux-4.14.y 7d7d1c0ab3eb 06c27ff5 .config log report info BUG: soft lockup in hci_sock_release
ci2-linux-4-14 2021/04/05 00:26 linux-4.14.y bd634aa64163 6a81331a .config log report info BUG: soft lockup in hci_sock_release
ci2-linux-4-14 2021/04/04 04:33 linux-4.14.y bd634aa64163 6a81331a .config log report info BUG: soft lockup in hci_sock_release
ci2-linux-4-14 2021/04/03 01:03 linux-4.14.y bd634aa64163 6a81331a .config log report info BUG: soft lockup in hci_sock_release
ci2-linux-4-14 2021/04/01 20:39 linux-4.14.y bd634aa64163 6a81331a .config log report info BUG: soft lockup in hci_sock_release
ci2-linux-4-14 2021/03/27 15:30 linux-4.14.y 670d6552eda8 a8529b82 .config log report info BUG: soft lockup in hci_sock_release