syzbot


WARNING in bpf_get_stack_raw_tp

Status: upstream: reported C repro on 2024/09/01 10:26
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+40432b66a5b71fa92989@syzkaller.appspotmail.com
First crash: 258d, last: 17d
Bug presence (1)
Date Name Commit Repro Result
2024/10/26 upstream (ToT) 850925a8133c C [report] WARNING in bpf_get_stack_raw_tp
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in bpf_get_stack_raw_tp origin:lts-only C done 967 5h52m 271d 0/3 upstream: reported C repro on 2024/08/19 13:02
upstream WARNING in bpf_get_stack_raw_tp bpf trace C error 179 12d 264d 0/28 upstream: reported C repro on 2024/08/26 12:52
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2025/04/29 17:03 5h44m bisect fix linux-6.1.y OK (0) job log log
2025/03/29 15:22 1h36m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4267 at kernel/trace/bpf_trace.c:1799 ____bpf_get_stack_raw_tp kernel/trace/bpf_trace.c:1872 [inline]
WARNING: CPU: 1 PID: 4267 at kernel/trace/bpf_trace.c:1799 bpf_get_stack_raw_tp+0x1d3/0x220 kernel/trace/bpf_trace.c:1869
Modules linked in:

CPU: 1 PID: 4267 Comm: syz-executor377 Not tainted 6.1.129-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:get_bpf_raw_tp_regs kernel/trace/bpf_trace.c:1799 [inline]
RIP: 0010:____bpf_get_stack_raw_tp kernel/trace/bpf_trace.c:1872 [inline]
RIP: 0010:bpf_get_stack_raw_tp+0x1d3/0x220 kernel/trace/bpf_trace.c:1869
Code: f1 45 31 c0 e8 7e 76 17 00 65 ff 0d 77 4e 6e 7e 4c 63 e8 4c 89 e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7d a5 f5 ff <0f> 0b 65 ff 0d 54 4e 6e 7e 49 c7 c5 f0 ff ff ff eb d7 e8 66 a5 f5
RSP: 0000:ffffc90003c06ad0 EFLAGS: 00010293
RAX: ffffffff8194f153 RBX: 0000000000000003 RCX: ffff888030d0d940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc
RBP: ffffc90003c06b10 R08: ffffffff8194f013 R09: fffffbfff2256c4d
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003c06b28
R13: 0000000000000000 R14: 0000000000000900 R15: ffff8880b8f33db8
FS:  000055556644c380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f73bae7ed08 CR3: 000000003109c000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
 bpf_dispatcher_nop_func include/linux/bpf.h:1000 [inline]
 __bpf_prog_run include/linux/filter.h:603 [inline]
 bpf_prog_run include/linux/filter.h:610 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2284 [inline]
 bpf_trace_run4+0x253/0x470 kernel/trace/bpf_trace.c:2325
 __traceiter_mmap_lock_acquire_returned+0x8c/0xe0 include/trace/events/mmap_lock.h:52
 trace_mmap_lock_acquire_returned include/trace/events/mmap_lock.h:52 [inline]
 __mmap_lock_do_trace_acquire_returned+0x2c0/0x360 mm/mmap_lock.c:102
 __mmap_lock_trace_acquire_returned include/linux/mmap_lock.h:36 [inline]
 mmap_read_trylock include/linux/mmap_lock.h:137 [inline]
 stack_map_get_build_id_offset+0x99e/0x9c0 kernel/bpf/stackmap.c:144
 __bpf_get_stack+0x497/0x590 kernel/bpf/stackmap.c:452
 ____bpf_get_stack_raw_tp kernel/trace/bpf_trace.c:1879 [inline]
 bpf_get_stack_raw_tp+0x1b2/0x220 kernel/trace/bpf_trace.c:1869
 bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
 bpf_dispatcher_nop_func include/linux/bpf.h:1000 [inline]
 __bpf_prog_run include/linux/filter.h:603 [inline]
 bpf_prog_run include/linux/filter.h:610 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2284 [inline]
 bpf_trace_run4+0x253/0x470 kernel/trace/bpf_trace.c:2325
 __traceiter_mmap_lock_acquire_returned+0x8c/0xe0 include/trace/events/mmap_lock.h:52
 trace_mmap_lock_acquire_returned include/trace/events/mmap_lock.h:52 [inline]
 __mmap_lock_do_trace_acquire_returned+0x2c0/0x360 mm/mmap_lock.c:102
 __mmap_lock_trace_acquire_returned include/linux/mmap_lock.h:36 [inline]
 mmap_read_trylock include/linux/mmap_lock.h:137 [inline]
 stack_map_get_build_id_offset+0x99e/0x9c0 kernel/bpf/stackmap.c:144
 __bpf_get_stack+0x497/0x590 kernel/bpf/stackmap.c:452
 ____bpf_get_stack_raw_tp kernel/trace/bpf_trace.c:1879 [inline]
 bpf_get_stack_raw_tp+0x1b2/0x220 kernel/trace/bpf_trace.c:1869
 bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
 bpf_dispatcher_nop_func include/linux/bpf.h:1000 [inline]
 __bpf_prog_run include/linux/filter.h:603 [inline]
 bpf_prog_run include/linux/filter.h:610 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2284 [inline]
 bpf_trace_run4+0x253/0x470 kernel/trace/bpf_trace.c:2325
 __traceiter_mmap_lock_acquire_returned+0x8c/0xe0 include/trace/events/mmap_lock.h:52
 trace_mmap_lock_acquire_returned include/trace/events/mmap_lock.h:52 [inline]
 __mmap_lock_do_trace_acquire_returned+0x2c0/0x360 mm/mmap_lock.c:102
 __mmap_lock_trace_acquire_returned include/linux/mmap_lock.h:36 [inline]
 mmap_read_trylock include/linux/mmap_lock.h:137 [inline]
 stack_map_get_build_id_offset+0x99e/0x9c0 kernel/bpf/stackmap.c:144
 __bpf_get_stack+0x497/0x590 kernel/bpf/stackmap.c:452
 ____bpf_get_stack_raw_tp kernel/trace/bpf_trace.c:1879 [inline]
 bpf_get_stack_raw_tp+0x1b2/0x220 kernel/trace/bpf_trace.c:1869
 bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
 bpf_dispatcher_nop_func include/linux/bpf.h:1000 [inline]
 __bpf_prog_run include/linux/filter.h:603 [inline]
 bpf_prog_run include/linux/filter.h:610 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2284 [inline]
 bpf_trace_run4+0x253/0x470 kernel/trace/bpf_trace.c:2325
 __traceiter_mmap_lock_acquire_returned+0x8c/0xe0 include/trace/events/mmap_lock.h:52
 trace_mmap_lock_acquire_returned include/trace/events/mmap_lock.h:52 [inline]
 __mmap_lock_do_trace_acquire_returned+0x2c0/0x360 mm/mmap_lock.c:102
 __mmap_lock_trace_acquire_returned include/linux/mmap_lock.h:36 [inline]
 mmap_read_trylock include/linux/mmap_lock.h:137 [inline]
 get_mmap_lock_carefully mm/memory.c:5320 [inline]
 lock_mm_and_find_vma+0x219/0x2e0 mm/memory.c:5382
 do_user_addr_fault arch/x86/mm/fault.c:1312 [inline]
 handle_page_fault arch/x86/mm/fault.c:1431 [inline]
 exc_page_fault+0x169/0x620 arch/x86/mm/fault.c:1487
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:608
RIP: 0033:0x7f73baddb220
Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d cd 0d 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 <f0> 0f b1 15 e0 3a 0a 00 0f 85 0f 02 00 00 4c 8d 25 d3 3a 0a 00 4c
RSP: 002b:00007ffdeed21d40 EFLAGS: 00010246

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/24 14:09 linux-6.1.y 3a8358583626 d34966d1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2025/02/01 13:27 linux-6.1.y 75cefdf153f5 aa47157c .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2025/01/08 03:33 linux-6.1.y 7dc732d24ff7 f3558dbf .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/11/21 16:16 linux-6.1.y b67dc5c9ade9 4b25d554 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/11/20 23:39 linux-6.1.y b67dc5c9ade9 4fca1650 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/11/10 18:07 linux-6.1.y d7039b844a1c 6b856513 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/11/04 11:37 linux-6.1.y 7c15117f9468 f00eed24 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/10/24 03:50 linux-6.1.y 7ec6f9fa3d97 15fa2979 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2025/01/29 10:28 linux-6.1.y 75cefdf153f5 865ef71e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2025/01/29 10:26 linux-6.1.y 75cefdf153f5 865ef71e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/10/01 17:03 linux-6.1.y aa4cd140bba5 ea2b66a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/09/01 11:47 linux-6.1.y 311d8503ef9f 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/09/01 11:06 linux-6.1.y 311d8503ef9f 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
2024/09/01 10:26 linux-6.1.y 311d8503ef9f 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf WARNING in bpf_get_stack_raw_tp
* Struck through repros no longer work on HEAD.