syzbot


INFO: rcu detected stall in vm_mmap_pgoff

Status: upstream: reported on 2024/06/22 04:29
Reported-by: syzbot+4b0bbce1d75cb57afd3e@syzkaller.appspotmail.com
First crash: 144d, last: 35d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in vm_mmap_pgoff mm 54 2d07h 94d 0/28 upstream: reported on 2024/08/11 07:12

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14159/1:b..l P14142/1:b..l
	(detected by 1, t=10502 jiffies, g=76601, q=67 ncpus=2)
task:syz.4.2792      state:R  running task     stack:25624 pid:14142 ppid:10416  flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6870
 irqentry_exit+0x53/0x80 kernel/entry/common.c:439
 asm_sysvec_reschedule_ipi+0x16/0x20 arch/x86/include/asm/idtentry.h:658
RIP: 0010:lock_acquire+0x26f/0x5a0 kernel/locking/lockdep.c:5666
Code: 2b 00 74 08 4c 89 f7 e8 3f ac 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0018:ffffc90003c0f740 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92000781ef4 RCX: 1ffff92000781e94
RDX: dffffc0000000000 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5d7180
RBP: ffffc90003c0f898 R08: dffffc0000000000 R09: fffffbfff223ba45
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000781ef0
R13: dffffc0000000000 R14: ffffc90003c0f7a0 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 rcu_read_lock include/linux/rcupdate.h:791 [inline]
 page_ext_get+0x39/0x2a0 mm/page_ext.c:157
 __reset_page_owner+0x32/0x1a0 mm/page_owner.c:144
 reset_page_owner include/linux/page_owner.h:24 [inline]
 free_pages_prepare mm/page_alloc.c:1444 [inline]
 free_pcp_prepare mm/page_alloc.c:1494 [inline]
 free_unref_page_prepare+0xf63/0x1120 mm/page_alloc.c:3369
 free_unref_page+0x33/0x3e0 mm/page_alloc.c:3464
 unmap_and_move_huge_page mm/migrate.c:1383 [inline]
 migrate_pages+0x15f7/0x4310 mm/migrate.c:1468
 do_mbind mm/mempolicy.c:1334 [inline]
 kernel_mbind mm/mempolicy.c:1481 [inline]
 __do_sys_mbind mm/mempolicy.c:1558 [inline]
 __se_sys_mbind+0x895/0xb10 mm/mempolicy.c:1554
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f8899f7dff9
RSP: 002b:00007f889acd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
RAX: ffffffffffffffda RBX: 00007f889a135f80 RCX: 00007f8899f7dff9
RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000
RBP: 00007f8899ff0296 R08: 0000000000000000 R09: 0000000000000002
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f889a135f80 R15: 00007ffeed4b9ba8
 </TASK>
task:syz.3.2797      state:R  running task     stack:24696 pid:14159 ppid:10997  flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 preempt_schedule_irq+0xf7/0x1c0 kernel/sched/core.c:6870
 irqentry_exit+0x53/0x80 kernel/entry/common.c:439
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:xas_load lib/xarray.c:243 [inline]
RIP: 0010:xas_find+0x21d/0xaa0 lib/xarray.c:1252
Code: 38 ec 0f 87 10 01 00 00 48 8b 5c 24 18 48 89 df 4c 89 ee e8 05 8a ff ff 49 89 c7 48 b9 00 00 00 00 00 fc ff df 41 0f b6 04 0e <49> 89 ce 84 c0 75 47 41 80 7d 00 00 0f 84 f2 00 00 00 e8 2c 67 e7
RSP: 0018:ffffc9000438f6a8 EFLAGS: 00000282
RAX: 0000000000000000 RBX: ffffc9000438f800 RCX: dffffc0000000000
RDX: ffffc9000f484000 RSI: 000000000002dd1b RDI: 000000000002dd1c
RBP: 0000000000000000 R08: ffffffff8aa2d361 R09: ffffffff8aa346dc
R10: 0000000000000002 R11: ffff888073140000 R12: 0000000000000000
R13: ffff888068940dc0 R14: 1ffff1100d1281b8 R15: ffffea0001573a00
 first_map_page mm/filemap.c:3389 [inline]
 filemap_map_pages+0x32a/0x12c0 mm/filemap.c:3416
 do_fault_around mm/memory.c:4598 [inline]
 do_read_fault mm/memory.c:4624 [inline]
 do_fault mm/memory.c:4758 [inline]
 handle_pte_fault mm/memory.c:5029 [inline]
 __handle_mm_fault mm/memory.c:5171 [inline]
 handle_mm_fault+0x33e0/0x5340 mm/memory.c:5292
 faultin_page mm/gup.c:1009 [inline]
 __get_user_pages+0x4f3/0x1190 mm/gup.c:1233
 populate_vma_page_range+0x217/0x2b0 mm/gup.c:1590
 __mm_populate+0x275/0x440 mm/gup.c:1704
 mm_populate include/linux/mm.h:2801 [inline]
 vm_mmap_pgoff+0x22b/0x2d0 mm/util.c:525
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f8c1057dff9
RSP: 002b:00007f8c1138e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007f8c10735f80 RCX: 00007f8c1057dff9
RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
RBP: 00007f8c105f0296 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f8c10735f80 R15: 00007fffbb50fef8
 </TASK>
rcu: rcu_preempt kthread starved for 9628 jiffies! g76601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:26048 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 schedule_timeout+0x1b9/0x300 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2d2/0x1150 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0xa3/0x3b0 kernel/rcu/tree.c:1905
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 drivers/acpi/processor_idle.c:567

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/08 22:40 linux-6.1.y aa4cd140bba5 402f1df0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/09/23 21:57 linux-6.1.y e526b12bf916 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/09/17 12:59 linux-6.1.y 5f55cad62cc9 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/07/29 20:34 linux-6.1.y c1cec4dad96b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/07/20 22:47 linux-6.1.y 9b3f9a5b12dc b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/06/24 06:53 linux-6.1.y eb44d83053d6 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
2024/06/22 04:28 linux-6.1.y eb44d83053d6 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: rcu detected stall in vm_mmap_pgoff
* Struck through repros no longer work on HEAD.