syzbot


INFO: rcu detected stall in vm_mmap_pgoff

Status: upstream: reported on 2024/06/22 04:29
Reported-by: syzbot+4b0bbce1d75cb57afd3e@syzkaller.appspotmail.com
First crash: 77d, last: 40d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in vm_mmap_pgoff mm 39 1d13h 27d 0/27 upstream: reported on 2024/08/11 07:12

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7525/1:b..l
	(detected by 1, t=10502 jiffies, g=33745, q=539 ncpus=2)
task:syz.2.1108      state:R  running task     stack:24808 pid:7525  ppid:4305   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6561
 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6873
 irqentry_exit+0x53/0x80 kernel/entry/common.c:439
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:lock_acquire+0x26f/0x5a0 kernel/locking/lockdep.c:5666
Code: 2b 00 74 08 4c 89 f7 e8 3f b5 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc9000c8075c0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92001900ec4 RCX: 1ffff92001900e64
RDX: dffffc0000000000 RSI: ffffffff8b0c13c0 RDI: ffffffff8b5d5ba0
RBP: ffffc9000c807708 R08: dffffc0000000000 R09: fffffbfff20e7245
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001900ec0
R13: dffffc0000000000 R14: ffffc9000c807620 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 rcu_read_lock include/linux/rcupdate.h:791 [inline]
 filemap_map_pages+0x294/0x12c0 mm/filemap.c:3415
 do_fault_around mm/memory.c:4581 [inline]
 do_read_fault mm/memory.c:4607 [inline]
 do_fault mm/memory.c:4741 [inline]
 handle_pte_fault mm/memory.c:5013 [inline]
 __handle_mm_fault mm/memory.c:5155 [inline]
 handle_mm_fault+0x33e2/0x5340 mm/memory.c:5276
 faultin_page mm/gup.c:1009 [inline]
 __get_user_pages+0x4f3/0x1190 mm/gup.c:1233
 populate_vma_page_range+0x217/0x2b0 mm/gup.c:1590
 __mm_populate+0x275/0x440 mm/gup.c:1704
 mm_populate include/linux/mm.h:2797 [inline]
 vm_mmap_pgoff+0x22b/0x2d0 mm/util.c:525
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fedcb377299
RSP: 002b:00007fedcc129048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fedcb505f80 RCX: 00007fedcb377299
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
RBP: 00007fedcb3e48e6 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fedcb505f80 R15: 00007ffcf47533a8
 </TASK>
rcu: rcu_preempt kthread starved for 9490 jiffies! g33745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26136 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6561
 schedule+0xbf/0x180 kernel/sched/core.c:6637
 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2d2/0x1150 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0xa3/0x3b0 kernel/rcu/tree.c:1905
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 drivers/acpi/processor_idle.c:567
NMI backtrace for cpu 1
CPU: 1 PID: 7536 Comm: syz.0.1113 Not tainted 6.1.102-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:hlock_class kernel/locking/lockdep.c:228 [inline]
RIP: 0010:mark_lock+0xa2/0x340 kernel/locking/lockdep.c:4606
Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 92 73 90 be 08 00 00 00 e8 16 4b 77 00 48 0f a3 1d 1e b8 08 0f <73> 11 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 f1 42 90 eb 23 48 c7 c0
RSP: 0018:ffffc9000c1676b8 EFLAGS: 00000057
RAX: 0000000000000001 RBX: 0000000000000199 RCX: ffffffff816ad9fa
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90739250
RBP: 0000000000000007 R08: dffffc0000000000 R09: fffffbfff20e724b
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807c322898
R13: dffffc0000000000 R14: 0000000000000080 R15: ffff88807c3228a0
FS:  0000555556489500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c32363a CR3: 00000000617fb000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 __lock_acquire+0xc50/0x1f80 kernel/locking/lockdep.c:5003
 lock_acquire+0x1f8/0x5a0 kernel/locking/lockdep.c:5662
 __might_fault+0xbd/0x110 mm/memory.c:5835
 __copy_to_user include/linux/uaccess.h:111 [inline]
 save_xstate_epilog arch/x86/kernel/fpu/signal.c:127 [inline]
 copy_fpstate_to_sigframe+0xb16/0xda0 arch/x86/kernel/fpu/signal.c:245
 get_sigframe+0x378/0x4b0 arch/x86/kernel/signal.c:297
 __setup_rt_frame arch/x86/kernel/signal.c:472 [inline]
 setup_rt_frame arch/x86/kernel/signal.c:784 [inline]
 handle_signal arch/x86/kernel/signal.c:828 [inline]
 arch_do_signal_or_restart+0x4ef/0x1a10 arch/x86/kernel/signal.c:873
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fd2af249ba2
Code: c4 01 00 00 4c 8d 25 9d bb de 00 45 85 ff 0f 85 ac 00 00 00 8b 74 24 0c 4c 89 e7 e8 78 5e 00 00 48 8b 0d f1 bb de 00 8b 51 08 <83> fa 3f 0f 87 cc 06 00 00 8b 5c 24 08 89 d6 83 c2 01 48 83 c6 02
RSP: 002b:00007ffd7565aeb0 EFLAGS: 00000206
RAX: 00000000000000a4 RBX: 00000000000000a0 RCX: 0000001b2fc20000
RDX: 0000000000000007 RSI: 0000001b3001ff52 RDI: 0000001b3001ffc6
RBP: 000000000000009c R08: 00000000003ffd4c R09: 00007fd2af4f2000
R10: 0000001b2fc20214 R11: 000000000000000a R12: 00007fd2b0035720
R13: ffffffffffffff64 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/29 20:34 linux-6.1.y c1cec4dad96b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/07/20 22:47 linux-6.1.y 9b3f9a5b12dc b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/06/24 06:53 linux-6.1.y eb44d83053d6 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/06/22 04:28 linux-6.1.y eb44d83053d6 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
* Struck through repros no longer work on HEAD.