syzbot


INFO: rcu detected stall in pfkey_sendmsg

Status: fixed on 2019/03/06 07:43
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+e1d3a7522b4d05aeede4@syzkaller.appspotmail.com
Fix commit: 12750abad517 xfrm: policy: fix infinite loop when merging src-nodes
First crash: 1986d, last: 1961d
Discussions (1)
Title Replies (including bot) Last reply
INFO: rcu detected stall in pfkey_sendmsg 2 (3) 2018/12/19 19:49
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in pfkey_sendmsg (2) net 1 1413d 1413d 0/26 auto-closed as invalid on 2020/09/12 07:57

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (1 GPs behind) idle=91a/1/0x4000000000000002 softirq=301392/301393 fqs=5248 
rcu: 	 (t=10502 jiffies g=403157 q=1903)
NMI backtrace for cpu 1
CPU: 1 PID: 30255 Comm: syz-executor3 Not tainted 4.20.0+ #393
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1d3/0x2c6 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold.4+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1c2/0x22c lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x16f/0x1bc kernel/rcu/tree.c:1211
 print_cpu_stall.cold.68+0x218/0x40a kernel/rcu/tree.c:1348
 check_cpu_stall kernel/rcu/tree.c:1422 [inline]
 rcu_pending kernel/rcu/tree.c:3018 [inline]
 rcu_check_callbacks+0xac1/0x1410 kernel/rcu/tree.c:2521
 update_process_times+0x2d/0x70 kernel/time/timer.c:1635
 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:161
 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1271
 __run_hrtimer kernel/time/hrtimer.c:1389 [inline]
 __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1451
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1509
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1035 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1060
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:write_comp_data+0x0/0x70 kernel/kcov.c:116
Code: ff ff e8 43 93 43 00 e9 a4 fc ff ff 4c 89 f7 e8 96 92 43 00 e9 6d fc ff ff e8 ec 8f c9 ff 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 65 4c 8b 04 25 40 ee 01 00 65 8b 05 3c 48 80 7e a9 00
RSP: 0018:ffff8880a7fb7330 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffffff86c24d50
RDX: 000000000000dee0 RSI: 000000000100dee0 RDI: 0000000000000004
RBP: ffff8880a7fb7338 R08: ffff888052ae0500 R09: 0000000000000008
R10: 0000000000000003 R11: ffff888052ae0500 R12: dffffc0000000000
R13: ffff8880874a9c08 R14: ffff8880a17bf308 R15: 000000000000dee0
 selector_cmp net/xfrm/xfrm_policy.c:1391 [inline]
 xfrm_policy_insert_list+0x600/0x1020 net/xfrm/xfrm_policy.c:1534
 xfrm_policy_inexact_insert+0x166/0xee0 net/xfrm/xfrm_policy.c:1195
 xfrm_policy_insert+0x639/0x850 net/xfrm/xfrm_policy.c:1570
 pfkey_spdadd+0x10f8/0x19d0 net/key/af_key.c:2339
 pfkey_process+0x851/0x9a0 net/key/af_key.c:2844
 pfkey_sendmsg+0x5df/0xfb0 net/key/af_key.c:3683
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg+0xd5/0x120 net/socket.c:631
 ___sys_sendmsg+0x7fd/0x930 net/socket.c:2116
 __sys_sendmsg+0x11d/0x280 net/socket.c:2154
 __do_sys_sendmsg net/socket.c:2163 [inline]
 __se_sys_sendmsg net/socket.c:2161 [inline]
 __x64_sys_sendmsg+0x78/0xb0 net/socket.c:2161
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4579b9
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fc230fbac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004579b9
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc230fbb6d4
R13: 00000000004c4d47 R14: 00000000004d84c0 R15: 00000000ffffffff

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/28 13:15 upstream 00c569b567c7 fc6ae81a .config console log report ci-upstream-kasan-gce
2019/01/05 07:29 net-old ec90ad334986 53be0a37 .config console log report ci-upstream-net-this-kasan-gce
2018/12/30 10:16 net-old 0d9c9a238faf 35e3f847 .config console log report ci-upstream-net-this-kasan-gce
2019/01/13 15:38 net-next-old b71acb0e3721 c3f3344c .config console log report ci-upstream-net-kasan-gce
2018/12/28 13:16 net-next-old b71acb0e3721 fc6ae81a .config console log report ci-upstream-net-kasan-gce
2018/12/25 16:26 net-next-old 90cadbbf341d 8a41a0ad .config console log report ci-upstream-net-kasan-gce
2018/12/19 06:16 net-next-old a26d94bff4d5 4edaba93 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.