syzbot


INFO: rcu detected stall in mod_timer

Status: auto-closed as invalid on 2021/01/03 01:48
Reported-by: syzbot+7eeef512f087e0630c9c@syzkaller.appspotmail.com
First crash: 1727d, last: 1540d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 INFO: rcu detected stall in mod_timer 2 1686d 1731d 0/1 auto-closed as invalid on 2020/08/10 12:01
upstream INFO: rcu detected stall in mod_timer kernel 2 1628d 1628d 0/28 auto-closed as invalid on 2020/09/07 13:48

Sample crash report:
IPv6 header not found
IPv6 header not found
IPv6 header not found
IPv6 header not found
IPv6 header not found
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (1 GPs behind) idle=912/1/0x4000000000000004 softirq=57984/57986 fqs=4079 
rcu: 	 (t=10500 jiffies g=72645 q=5628)
NMI backtrace for cpu 1
CPU: 1 PID: 31185 Comm: syz-executor.5 Not tainted 4.19.143-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x15f/0x19c kernel/rcu/tree.c:1340
 print_cpu_stall kernel/rcu/tree.c:1478 [inline]
 check_cpu_stall kernel/rcu/tree.c:1550 [inline]
 __rcu_pending kernel/rcu/tree.c:3293 [inline]
 rcu_pending kernel/rcu/tree.c:3336 [inline]
 rcu_check_callbacks.cold+0x62d/0xe19 kernel/rcu/tree.c:2682
 update_process_times+0x2a/0xb0 kernel/time/timer.c:1650
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:168
 tick_sched_timer+0xfc/0x290 kernel/time/tick-sched.c:1278
 __run_hrtimer kernel/time/hrtimer.c:1401 [inline]
 __hrtimer_run_queues+0x3f6/0xe60 kernel/time/hrtimer.c:1463
 hrtimer_interrupt+0x32a/0x930 kernel/time/hrtimer.c:1521
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline]
 smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xa3/0xe0 kernel/locking/spinlock.c:184
Code: 48 c7 c0 48 5b d2 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 2f 48 83 3d bc bd 94 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb b2 e8 5a c1 c2 f9 eb c0 0f 0b 0f 0b 48 c7 c7 48
RSP: 0018:ffff8880ae707c18 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff11a4b69 RBX: 0000000000000282 RCX: 1ffff110123aad1a
RDX: dffffc0000000000 RSI: ffff888091d568b0 RDI: 0000000000000282
RBP: ffff8880ae723a40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000023a40 R14: 0000000000000000 R15: ffff8880ae723a40
 __mod_timer kernel/time/timer.c:1071 [inline]
 mod_timer+0x4ea/0x1010 kernel/time/timer.c:1114
 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338
 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375
 __run_timers kernel/time/timer.c:1703 [inline]
 run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1716
 __do_softirq+0x26c/0x9a0 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:372 [inline]
 irq_exit+0x215/0x260 kernel/softirq.c:412
 exiting_irq arch/x86/include/asm/apic.h:544 [inline]
 smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1094
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
 </IRQ>
RIP: 0010:check_kcov_mode kernel/kcov.c:67 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 kernel/kcov.c:101
Code: e8 30 0c eb ff 48 c7 05 76 2b 28 0a 00 00 00 00 e9 39 ec ff ff 90 48 8b 34 24 65 48 8b 04 25 40 ee 01 00 65 8b 15 ec 3b 98 7e <81> e2 00 01 1f 00 75 2b 8b 90 d8 12 00 00 83 fa 02 75 20 48 8b 88
RSP: 0018:ffff88802eab7ae8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13
RAX: ffff888091d56000 RBX: ffff8880985af0c0 RCX: ffffffff83212a28
RDX: 0000000080000001 RSI: ffffffff832129dc RDI: 0000000000000004
RBP: 0000000000000007 R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880995fea88
R13: dffffc0000000000 R14: 0000000000000006 R15: 1ffff110132bfd52
 security_compute_sid.part.0+0x85c/0x13e0 security/selinux/ss/services.c:1772
 security_compute_sid security/selinux/ss/services.c:1825 [inline]
 security_transition_sid+0x122/0x190 security/selinux/ss/services.c:1825
 socket_sockcreate_sid security/selinux/hooks.c:4561 [inline]
 socket_sockcreate_sid security/selinux/hooks.c:4553 [inline]
 selinux_socket_create+0x40e/0x590 security/selinux/hooks.c:4595
 security_socket_create+0x5c/0xc0 security/security.c:1375
 __sock_create+0x88/0x740 net/socket.c:1231
 sock_create net/socket.c:1316 [inline]
 __sys_socketpair+0x242/0x570 net/socket.c:1408
 __do_sys_socketpair net/socket.c:1457 [inline]
 __se_sys_socketpair net/socket.c:1454 [inline]
 __x64_sys_socketpair+0x93/0xf0 net/socket.c:1454
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45d5b9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fcc1cf5bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
RAX: ffffffffffffffda RBX: 0000000000033940 RCX: 000000000045d5b9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001
RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020029000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffc781b151f R14: 00007fcc1cf5c9c0 R15: 000000000118cf4c
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
IPv6 header not found
IPv6 header not found
IPv6 header not found
IPv6 header not found
IPv6 header not found
IPv6 header not found
NOHZ: local_softirq_pending 08
IPVS: ftp: loaded support on port[0] = 21
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
device veth1_macvtap left promiscuous mode
device veth0_macvtap left promiscuous mode
device veth1_vlan left promiscuous mode
device veth0_vlan left promiscuous mode

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/05 01:47 linux-4.19.y c37da90efff5 abf9ba4f .config console log report ci2-linux-4-19
2020/09/04 12:05 linux-4.19.y c37da90efff5 abf9ba4f .config console log report ci2-linux-4-19
2020/08/01 22:14 linux-4.19.y 13af6c74b14a 8df85ed9 .config console log report ci2-linux-4-19
2020/07/23 17:42 linux-4.19.y 20b3a3dfdf6c 70c104a1 .config console log report ci2-linux-4-19
2020/07/18 00:39 linux-4.19.y 17a87580a885 9c812472 .config console log report ci2-linux-4-19
2020/07/15 20:31 linux-4.19.y dce0f88600e4 ada108d0 .config console log report ci2-linux-4-19
2020/07/11 00:24 linux-4.19.y dce0f88600e4 18d18b59 .config console log report ci2-linux-4-19
2020/06/04 22:18 linux-4.19.y 4707d8e57273 6720fdef .config console log report ci2-linux-4-19
2020/04/15 13:17 linux-4.19.y 6dd0e32665e5 3f3c5574 .config console log report ci2-linux-4-19
2020/04/04 09:38 linux-4.19.y dda0e2920330 ef26b610 .config console log report ci2-linux-4-19
2020/03/06 05:41 linux-4.19.y 7472c4028e23 b655d91b .config console log report ci2-linux-4-19
2020/03/02 16:47 linux-4.19.y a083db76118d 4a4e0509 .config console log report ci2-linux-4-19
2020/03/02 04:09 linux-4.19.y a083db76118d 4a4e0509 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.