syzbot


INFO: rcu detected stall in schedule

Status: auto-closed as invalid on 2019/06/23 09:16
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+e3fddf2febbaa06e73bc@syzkaller.appspotmail.com
First crash: 2010d, last: 2010d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in schedule (5) kernel 1 1116d 1116d 0/27 auto-closed as invalid on 2021/09/03 22:50
upstream INFO: rcu detected stall in schedule (4) cgroups mm 2 1631d 1631d 0/27 closed as invalid on 2020/01/09 08:13
upstream INFO: rcu detected stall in schedule (3) mm cgroups 4 1631d 1631d 0/27 closed as invalid on 2020/01/08 05:23
upstream INFO: rcu detected stall in schedule (2) kernel 10 1666d 1667d 0/27 closed as invalid on 2019/12/04 14:04
upstream INFO: rcu detected stall in schedule (7) usb block C done 14 4d09h 30d 0/27 upstream: reported C repro on 2024/05/27 15:00
linux-6.1 INFO: rcu detected stall in schedule 4 6d20h 18d 0/3 upstream: reported on 2024/06/08 09:44
upstream INFO: rcu detected stall in schedule (6) kernel syz done 1 318d 314d 0/27 auto-obsoleted due to no activity on 2023/11/21 16:15

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-...!: (10499 ticks this GP) idle=712/1/0x4000000000000002 softirq=154906/154906 fqs=0 
rcu: 	 (t=10500 jiffies g=229445 q=450)
rcu: rcu_preempt kthread starved for 10500 jiffies! g229445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
rcu: RCU grace-period kthread stack dump:
rcu_preempt     I23000    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x86c/0x1ed0 kernel/sched/core.c:3472
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 schedule_timeout+0x140/0x260 kernel/time/timer.c:1804
 rcu_gp_fqs_loop+0x762/0xa80 kernel/rcu/tree.c:1934
 rcu_gp_kthread+0x341/0xc70 kernel/rcu/tree.c:2090
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.089 msecs
NMI backtrace for cpu 0
CPU: 0 PID: 18528 Comm: syz-executor2 Not tainted 4.20.0 #290
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:nohz_idle_balance kernel/sched/fair.c:9525 [inline]
RIP: 0010:run_rebalance_domains+0xe4/0x500 kernel/sched/fair.c:9726
Code: 8d be 90 0a 00 00 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 06 0f 8e 48 03 00 00 49 8d 86 d0 0a 00 00 45 0f b6 be 90 0a 00 00 <48> 89 c2 48 89 85 10 ff ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1
RSP: 0018:ffff8881dae07b88 EFLAGS: 00000246
RAX: ffff8881dae2d810 RBX: 000000000002cd40 RCX: ffffffff838ed8fa
RDX: 1ffff1103b5c5afa RSI: ffffffff838ed908 RDI: ffff8881dae2d7d0
RBP: ffff8881dae07c78 R08: ffff8881d25864c0 R09: ffffed103b5c5b77
R10: ffffed103b5c5b77 R11: ffff8881dae2dbbb R12: 1ffff1103b5c0f76
R13: ffff8881dae07c50 R14: ffff8881dae2cd40 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881dae00000(0063) knlGS:00000000f5f96b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000008350004 CR3: 00000001b5e36000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __do_softirq+0x30c/0xb2e kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x17f/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1cb/0x760 arch/x86/kernel/apic/apic.c:1061
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline]
RIP: 0010:lock_is_held_type+0x18b/0x210 kernel/locking/lockdep.c:3884
Code: ff df 41 c7 84 24 7c 08 00 00 00 00 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 63 48 83 3d 1c 22 f2 07 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e8 5b 41 5c 41 5d 5d c3 48 83 c4
RSP: 0018:ffff888186ddf9f0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: dffffc0000000000 RBX: 0000000000000282 RCX: ffffc90009e1d000
RDX: 1ffffffff12a4016 RSI: 00000000ffffffff RDI: 0000000000000282
RBP: ffff888186ddfa10 R08: ffff8881d25864c0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d25864c0
R13: 0000000000000000 R14: ffff8881dae2cd40 R15: ffff8881d25864c0
 lock_is_held include/linux/lockdep.h:339 [inline]
 schedule_debug kernel/sched/core.c:3292 [inline]
 __schedule+0x9a9/0x1ed0 kernel/sched/core.c:3394
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 exit_to_usermode_loop+0x22f/0x380 arch/x86/entry/common.c:152
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_32_irqs_on arch/x86/entry/common.c:341 [inline]
 do_fast_syscall_32+0xcd5/0xfb2 arch/x86/entry/common.c:397
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7f9aa49
Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f5f9612c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
RAX: 0000000000000000 RBX: 000000000814af68 RCX: 0000000000000080
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000814af6c
RBP: 00000000f5f96228 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
NMI backtrace for cpu 1
CPU: 1 PID: 18521 Comm: syz-executor1 Not tainted 4.20.0 #290
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1d3/0x2c6 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold.4+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1c2/0x22c lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x16f/0x1bc kernel/rcu/tree.c:1195
 print_cpu_stall.cold.65+0x1f3/0x3c6 kernel/rcu/tree.c:1334
 check_cpu_stall kernel/rcu/tree.c:1408 [inline]
 rcu_pending kernel/rcu/tree.c:2961 [inline]
 rcu_check_callbacks+0xac1/0x1410 kernel/rcu/tree.c:2506
 update_process_times+0x2d/0x70 kernel/time/timer.c:1636
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1034 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1059
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:__read_once_size include/linux/compiler.h:191 [inline]
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x25a/0x660 kernel/smp.c:302
Code: e8 03 4c 01 f0 c6 00 f8 48 89 44 24 28 e8 be 5c 0c 00 45 85 e4 74 67 48 8b 44 24 28 48 83 c3 18 49 89 c4 e8 98 5b 0c 00 f3 90 <48> 89 d8 41 c6 04 24 04 48 c1 e8 03 42 0f b6 04 30 84 c0 74 08 3c
RSP: 0018:ffff888184c0eec0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: ffff888184c0ef38 RCX: ffffc90007e01000
RDX: 0000000000040000 RSI: ffffffff8171fd08 RDI: 0000000000000005
RBP: ffff888184c0f008 R08: ffff8881cde6a600 R09: ffffed103b5c5b90
R10: ffffed103b5c5b90 R11: ffff8881dae2dc87 R12: ffffed1030981df4
R13: 1ffff11030981de0 R14: dffffc0000000000 R15: 0000000000000001
 smp_call_function_many+0x918/0xae0 kernel/smp.c:434
 smp_call_function+0x42/0x80 kernel/smp.c:492
 on_each_cpu+0x2f/0x1e0 kernel/smp.c:604
 flush_tlb_kernel_range+0x120/0x160 arch/x86/mm/tlb.c:800
 cpa_flush_range arch/x86/mm/pageattr.c:310 [inline]
 change_page_attr_set_clr+0x790/0xd00 arch/x86/mm/pageattr.c:1780
 change_page_attr_clear arch/x86/mm/pageattr.c:1797 [inline]
 set_memory_ro+0x7b/0xa0 arch/x86/mm/pageattr.c:2026
 bpf_jit_binary_lock_ro include/linux/filter.h:714 [inline]
 bpf_int_jit_compile+0xbb8/0xe97 arch/x86/net/bpf_jit_comp.c:1168
 bpf_prog_select_runtime+0x46d/0x650 kernel/bpf/core.c:1571
 bpf_migrate_filter net/core/filter.c:1278 [inline]
 bpf_prepare_filter+0xbc6/0x1110 net/core/filter.c:1326
 bpf_prog_create_from_user+0x1e1/0x2d0 net/core/filter.c:1420
 seccomp_prepare_filter kernel/seccomp.c:395 [inline]
 seccomp_prepare_user_filter kernel/seccomp.c:430 [inline]
 seccomp_set_mode_filter kernel/seccomp.c:862 [inline]
 do_seccomp+0x934/0x2670 kernel/seccomp.c:935
 __do_sys_seccomp kernel/seccomp.c:949 [inline]
 __se_sys_seccomp kernel/seccomp.c:946 [inline]
 __ia32_sys_seccomp+0x72/0xb0 kernel/seccomp.c:946
 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline]
 do_fast_syscall_32+0x34d/0xfb2 arch/x86/entry/common.c:397
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7f39a49
Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f5f350cc EFLAGS: 00000296 ORIG_RAX: 0000000000000162
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000020007ff0 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/25 09:15 upstream 8fe28cb58bcb 8a41a0ad .config console log report ci-upstream-kasan-gce-386
* Struck through repros no longer work on HEAD.