syzbot

 sign-in | mailing list | source | docs
🐞 Open [988] ≡ Subsystems 🐞 Fixed [5236] 🐞 Invalid [12505] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in shmem_fault

Status: closed as dup on 2019/01/02 16:58
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+77e6b28a7a7106ad0def@syzkaller.appspotmail.com
First crash: 2024d, last: 1864d
▶ ▼ Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in ndisc_alloc_skb net 1 2022d 1942d
▶ ▼ Discussions (2)
Title Replies (including bot) Last reply
[PATCH v3] mm: memcontrol: Don't flood OOM messages with no eligible task. 23 (23) 2018/10/23 10:23
INFO: rcu detected stall in shmem_fault 38 (39) 2018/10/16 11:17
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in shmem_fault (4) kernel 1 481d 481d 0/26 auto-obsoleted due to no activity on 2023/04/08 07:17
upstream INFO: rcu detected stall in shmem_fault (5) cgroups mm 3 251d 271d 23/26 fixed on 2023/10/12 12:48
linux-5.15 INFO: rcu detected stall in shmem_fault 1 236d 236d 0/3 auto-obsoleted due to no activity on 2023/12/11 11:17
upstream INFO: rcu detected stall in shmem_fault (3) fs mm 4 730d 730d 0/26 auto-closed as invalid on 2022/06/25 08:10
upstream INFO: rcu detected stall in shmem_fault (2) cgroups mm 1 1604d 1604d 0/26 closed as invalid on 2019/12/04 14:04

Sample crash report:
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8148,uid=0
Memory cgroup out of memory: Kill process 8148 (syz-executor.0) score 1132 or sacrifice child
Killed process 8148 (syz-executor.0) total-vm:72708kB, anon-rss:8344kB, file-rss:35324kB, shmem-rss:0kB
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 0, t=10502 jiffies, g=319621, q=137)
rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295140069-4295129567), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.0  R  running task    25744 29063   7980 0x80000002
Call Trace:
 <IRQ>
 sched_show_task kernel/sched/core.c:5306 [inline]
 sched_show_task.cold+0x292/0x30b kernel/sched/core.c:5281
 print_other_cpu_stall kernel/rcu/tree.c:1301 [inline]
 check_cpu_stall kernel/rcu/tree.c:1429 [inline]
 rcu_pending kernel/rcu/tree.c:3018 [inline]
 rcu_check_callbacks.cold+0xa10/0xa4a kernel/rcu/tree.c:2521
 update_process_times+0x32/0x80 kernel/time/timer.c:1635
 tick_sched_handle+0xa2/0x190 kernel/time/tick-sched.c:161
 tick_sched_timer+0x47/0x130 kernel/time/tick-sched.c:1271
 __run_hrtimer kernel/time/hrtimer.c:1389 [inline]
 __hrtimer_run_queues+0x33e/0xde0 kernel/time/hrtimer.c:1451
 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1509
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1035 [inline]
 smp_apic_timer_interrupt+0x120/0x570 arch/x86/kernel/apic/apic.c:1060
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:trace_mm_shrink_slab_start include/trace/events/vmscan.h:196 [inline]
RIP: 0010:do_shrink_slab+0x89f/0xa80 mm/vmscan.c:526
Code: 48 8b 05 ec 7e c8 07 e8 cf 7e cc ff 31 ff 41 89 c5 89 c6 e8 b3 34 df ff 45 85 ed 74 1c e8 29 33 df ff 44 0f b6 2d 0f 0f c8 07 <31> ff 44 89 ee e8 57 34 df ff 45 84 ed 74 4a e8 0d 33 df ff 65 ff
RSP: 0018:ffff8881fec26f18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90006060000
RDX: 0000000000040000 RSI: ffffffff8190ae57 RDI: 0000000000000005
RBP: ffff8881fec26f98 R08: ffff8881f1d86580 R09: ffffed10140d3ef9
R10: ffffed10140d3ef8 R11: ffff8880a069f7c7 R12: ffff8881fec27000
R13: 0000000000000000 R14: ffff8880a55d7178 R15: 0000000000000400
 shrink_slab_memcg mm/vmscan.c:616 [inline]
 shrink_slab+0x36a/0x5e0 mm/vmscan.c:688
 shrink_node+0x50f/0x1540 mm/vmscan.c:2747
 shrink_zones mm/vmscan.c:2977 [inline]
 do_try_to_free_pages+0x3cb/0x11e0 mm/vmscan.c:3039
 try_to_free_mem_cgroup_pages+0x337/0x960 mm/vmscan.c:3343
 try_charge+0x3d7/0x1570 mm/memcontrol.c:2234
 mem_cgroup_try_charge+0x24d/0x5e0 mm/memcontrol.c:5913
 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928
 shmem_getpage_gfp+0x69b/0x3520 mm/shmem.c:1790
 shmem_fault+0x22d/0x760 mm/shmem.c:1988
 __do_fault+0x116/0x4e0 mm/memory.c:3019
 do_read_fault mm/memory.c:3430 [inline]
 do_fault mm/memory.c:3556 [inline]
 handle_pte_fault mm/memory.c:3787 [inline]
 __handle_mm_fault+0x2cbd/0x3f20 mm/memory.c:3911
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 faultin_page mm/gup.c:535 [inline]
 __get_user_pages+0x7b6/0x1a40 mm/gup.c:738
 populate_vma_page_range+0x20d/0x2a0 mm/gup.c:1247
 __mm_populate+0x204/0x380 mm/gup.c:1295
 mm_populate include/linux/mm.h:2388 [inline]
 vm_mmap_pgoff+0x213/0x230 mm/util.c:355
 ksys_mmap_pgoff+0xf7/0x630 mm/mmap.c:1609
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:91 [inline]
 __x64_sys_mmap+0xe9/0x1b0 arch/x86/kernel/sys_x86_64.c:91
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457e29
Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ff1c0621c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29
RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000000020000000
RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000008031 R11: 0000000000000246 R12: 00007ff1c06226d4
R13: 00000000004c3b88 R14: 00000000004d6d40 R15: 00000000ffffffff
rcu: rcu_preempt kthread starved for 10502 jiffies! g319621 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    29024    10      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2844 [inline]
 __schedule+0x817/0x1cc0 kernel/sched/core.c:3485
 schedule+0x92/0x180 kernel/sched/core.c:3529
 schedule_timeout+0x4db/0xfd0 kernel/time/timer.c:1803
 rcu_gp_fqs_loop kernel/rcu/tree.c:1948 [inline]
 rcu_gp_kthread+0x956/0x17a0 kernel/rcu/tree.c:2105
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/02/23 09:54 upstream cb268d806972 18107ce0 .config console log report ci-upstream-kasan-gce-selinux-root
2019/02/20 19:43 upstream 2137397c92ae c95f0707 .config console log report ci-upstream-kasan-gce-selinux-root
2019/02/03 13:25 upstream 12491ed354d2 c198d5dd .config console log report ci-upstream-kasan-gce-smack-root
2019/01/19 00:09 upstream d7393226d15a 2103a236 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/15 08:47 upstream 6531e115b7ab c9128939 .config console log report ci-upstream-kasan-gce-smack-root
2019/03/19 00:12 linux-next b99981945914 46264c32 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/03/03 20:24 linux-next c63e9e91a254 1c0e457a .config console log report ci-upstream-linux-next-kasan-gce-root
2019/03/01 06:37 linux-next 42fd8df9d1d9 8a4b3a6b .config console log report ci-upstream-linux-next-kasan-gce-root
2019/02/28 11:07 linux-next 42fd8df9d1d9 09aeeba4 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/02/19 15:25 linux-next 43dc36c945ef 4df543c9 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/02/08 16:21 linux-next a46228f6598a fa6c7b70 .config console log report ci-upstream-linux-next-kasan-gce-root
2019/02/03 12:47 linux-next dc4c89997735 c198d5dd .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/09 21:06 linux-next 570b7bdeaf18 8b311eaf .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.