syzbot

 sign-in | mailing list | source | docs
🐞 Open [712] 🐞 Fixed [297] 🐞 Invalid [838] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in lock_is_held_type

Status: auto-closed as invalid on 2020/07/28 13:19
Reported-by: syzbot+1f3f9b12fbfd8d6ecaf2@syzkaller.appspotmail.com
First crash: 1577d, last: 1501d
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in lock_is_held_type (2) kernel 4 1212d 1253d 0/26 auto-closed as invalid on 2021/04/13 14:40
upstream INFO: rcu detected stall in lock_is_held_type (4) mm 1 423d 423d 0/26 auto-obsoleted due to no activity on 2023/06/11 21:13
linux-4.14 INFO: rcu detected stall in lock_is_held_type 1 1323d 1323d 0/1 auto-closed as invalid on 2021/01/22 12:51
upstream INFO: rcu detected stall in lock_is_held_type tomoyo 2 1567d 1601d 0/26 auto-closed as invalid on 2020/04/23 13:55
upstream INFO: rcu detected stall in lock_is_held_type (3) wireless 1 1013d 1013d 0/26 auto-closed as invalid on 2021/10/29 13:54

Sample crash report:
audit: type=1400 audit(1585574223.164:1771): avc:  denied  { map } for  pid=22786 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (10501 ticks this GP) idle=27a/1/0x4000000000000004 softirq=209700/209700 fqs=5059 
rcu: 	 (t=10501 jiffies g=209665 q=260876)
NMI backtrace for cpu 1
CPU: 1 PID: 22776 Comm: syz-executor.2 Not tainted 4.19.113-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x188/0x20d lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x170/0x1bb kernel/rcu/tree.c:1340
 print_cpu_stall kernel/rcu/tree.c:1478 [inline]
 check_cpu_stall kernel/rcu/tree.c:1550 [inline]
 __rcu_pending kernel/rcu/tree.c:3293 [inline]
 rcu_pending kernel/rcu/tree.c:3336 [inline]
 rcu_check_callbacks.cold+0x634/0xddc kernel/rcu/tree.c:2682
 update_process_times+0x2a/0x70 kernel/time/timer.c:1638
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:168
 tick_sched_timer+0x42/0x130 kernel/time/tick-sched.c:1278
 __run_hrtimer kernel/time/hrtimer.c:1401 [inline]
 __hrtimer_run_queues+0x2fc/0xd50 kernel/time/hrtimer.c:1463
 hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1521
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline]
 smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:893
RIP: 0010:lock_is_held_type+0x186/0x210 kernel/locking/lockdep.c:3946
Code: 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 75 63 48 83 3d 65 68 63 07 00 74 2c 48 89 df 57 9d 0f 1f 44 00 00 48 83 c4 08 44 89 e0 <5b> 5d 41 5c c3 48 83 c4 08 41 bc 01 00 00 00 5b 44 89 e0 5d 41 5c
RSP: 0018:ffff8880ae707d10 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000286 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: ffffffff88b92960 RDI: 0000000000000286
RBP: ffff88804686e080 R08: ffff88804686e080 R09: ffffed1015ce4733
R10: ffffed1015ce4732 R11: ffff8880ae723993 R12: 0000000000000000
R13: 1ffff11015ce0faa R14: 0000000000000000 R15: ffff88803b72c5d0
 lock_is_held include/linux/lockdep.h:344 [inline]
 rcu_read_lock_sched_held+0x10a/0x130 kernel/rcu/update.c:118
 trace_timer_expire_exit include/trace/events/timer.h:121 [inline]
 call_timer_fn+0x617/0x700 kernel/time/timer.c:1327
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers kernel/time/timer.c:1684 [inline]
 __run_timers kernel/time/timer.c:1652 [inline]
 run_timer_softirq+0x5d0/0x1540 kernel/time/timer.c:1697
 __do_softirq+0x26c/0x93c kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x17b/0x1c0 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:893
 </IRQ>
RIP: 0010:latch_tree_find include/linux/rbtree_latch.h:209 [inline]
RIP: 0010:bpf_prog_kallsyms_find kernel/bpf/core.c:511 [inline]
RIP: 0010:bpf_prog_kallsyms_find+0x76/0x2a0 kernel/bpf/core.c:504
Code: ff 4c 89 e0 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 49 bc 00 00 00 00 00 fc ff df eb 23 e8 00 cf f5 ff 8b 1d 1a 08 2f 07 <44> 8b 7c 24 0c 89 de 44 89 ff e8 db cf f5 ff 41 39 df 0f 84 8e 01
RSP: 0018:ffff888215887730 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: 00000000000000f4 RCX: ffffc9000a2c0000
RDX: 0000000000002ed0 RSI: ffffffff8171d3a0 RDI: 0000000000000007
RBP: 0000000000000000 R08: ffff88804686e080 R09: ffffed1015ce4733
R10: ffffed1015ce4732 R11: ffff8880ae723993 R12: dffffc0000000000
R13: 000000000045c849 R14: 0000000000000000 R15: ffff88809566c09f
 is_bpf_text_address+0x75/0x160 kernel/bpf/core.c:546
 kernel_text_address+0x6e/0xe0 kernel/extable.c:152
 __kernel_text_address+0x9/0x30 kernel/extable.c:107
 unwind_get_return_address arch/x86/kernel/unwind_orc.c:300 [inline]
 unwind_get_return_address+0x5a/0xa0 arch/x86/kernel/unwind_orc.c:295
 __save_stack_trace+0x8a/0xf0 arch/x86/kernel/stacktrace.c:45
 save_stack+0x32/0xa0 mm/kasan/kasan.c:448
 set_track mm/kasan/kasan.c:460 [inline]
 kasan_kmalloc mm/kasan/kasan.c:553 [inline]
 kasan_kmalloc+0xbf/0xe0 mm/kasan/kasan.c:531
 slab_post_alloc_hook mm/slab.h:445 [inline]
 slab_alloc mm/slab.c:3397 [inline]
 kmem_cache_alloc_trace+0x137/0x7a0 mm/slab.c:3623
 kmalloc include/linux/slab.h:515 [inline]
 kzalloc include/linux/slab.h:709 [inline]
 selinux_key_alloc+0x46/0x1a0 security/selinux/hooks.c:6679
 security_key_alloc+0x6c/0xb0 security/security.c:1726
 key_alloc+0x7a9/0x1060 security/keys/key.c:314
 key_create_or_update+0x5b0/0xae0 security/keys/key.c:910
 __do_sys_add_key security/keys/keyctl.c:123 [inline]
 __se_sys_add_key security/keys/keyctl.c:63 [inline]
 __x64_sys_add_key+0x2ab/0x4c0 security/keys/keyctl.c:63
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c849
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fdf9526fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
RAX: ffffffffffffffda RBX: 00007fdf952706d4 RCX: 000000000045c849
RDX: 0000000020000700 RSI: 0000000020000000 RDI: 00000000200000c0
RBP: 000000000076bf00 R08: fffffffffffffffe R09: 0000000000000000
R10: 0000000000000199 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000001f R14: 00000000004c2bf2 R15: 000000000076bf0c

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/30 13:18 linux-4.19.y 54b4fa6d3955 c8d1cc20 .config console log report ci2-linux-4-19
2020/01/14 07:12 linux-4.19.y dcd888983542 32881205 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.