syzbot


INFO: rcu detected stall in tw_timer_handler

Status: auto-closed as invalid on 2020/06/19 12:56
Subsystems: net
[Documentation on labels]
First crash: 1496d, last: 1496d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 INFO: rcu detected stall in tw_timer_handler 1 1357d 1357d 0/1 auto-closed as invalid on 2020/12/05 23:10

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (10500 ticks this GP) idle=342/1/0x4000000000000004 softirq=114249/114249 fqs=5243 
	(t=10501 jiffies g=97221 q=220123)
NMI backtrace for cpu 1
CPU: 1 PID: 23217 Comm: syz-executor.0 Not tainted 5.6.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1e9/0x30e lib/dump_stack.c:118
 nmi_cpu_backtrace+0x9f/0x180 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x169/0x250 kernel/rcu/tree_stall.h:254
 print_cpu_stall kernel/rcu/tree_stall.h:475 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:549 [inline]
 rcu_pending kernel/rcu/tree.c:3030 [inline]
 rcu_sched_clock_irq+0x171f/0x1970 kernel/rcu/tree.c:2276
 update_process_times+0x12c/0x180 kernel/time/timer.c:1726
 tick_sched_handle kernel/time/tick-sched.c:171 [inline]
 tick_sched_timer+0x254/0x410 kernel/time/tick-sched.c:1314
 __run_hrtimer kernel/time/hrtimer.c:1517 [inline]
 __hrtimer_run_queues+0x3cf/0x7d0 kernel/time/hrtimer.c:1579
 hrtimer_interrupt+0x373/0xd60 kernel/time/hrtimer.c:1641
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1119 [inline]
 smp_apic_timer_interrupt+0x109/0x280 arch/x86/kernel/apic/apic.c:1144
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
RIP: 0010:tw_timer_handler+0x1/0xe0 net/ipv4/inet_timewait_sock.c:145
Code: e8 e9 75 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 97 fb ff ff 48 89 df e8 4b 4f ee fa e9 8a fb ff ff 66 0f 1f 44 00 00 55 <41> 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 06
RSP: 0018:ffffc90000da8d48 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13
RAX: ffffffff8164e311 RBX: 0000000000000100 RCX: ffff888050f7a240
RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8880514999d0
RBP: ffffc90000da8ea0 R08: ffffffff8164e308 R09: ffffed1015d27004
R10: ffffed1015d27004 R11: 0000000000000000 R12: 000000010000a800
R13: ffff8880514999d0 R14: ffffffff86c29300 R15: ffff8880514999d0
 call_timer_fn+0x91/0x160 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers+0x776/0x970 kernel/time/timer.c:1773
 run_timer_softirq+0x46/0x80 kernel/time/timer.c:1786
 __do_softirq+0x268/0x7c5 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x223/0x230 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:546 [inline]
 smp_apic_timer_interrupt+0x113/0x280 arch/x86/kernel/apic/apic.c:1146
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 </IRQ>
RIP: 0010:rmqueue+0x4c/0x2020 mm/page_alloc.c:3297
Code: 00 48 89 84 24 18 01 00 00 49 bc 00 00 00 00 00 fc ff df 85 d2 0f 85 b6 00 00 00 4c 89 ee 89 ea 89 d9 e8 b7 22 00 00 49 89 c6 <49> 8d ad 78 05 00 00 48 89 ef be 08 00 00 00 e8 a0 a1 07 00 48 89
RSP: 0018:ffffc90007827860 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff1215a83 RBX: dffffc0000000000 RCX: ffffffff815a6057
RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000282
RBP: 0000000000000282 R08: dffffc0000000000 R09: fffffbfff15db92a
R10: fffffbfff15db92a R11: 0000000000000000 R12: dffffc0000000000
R13: ffff88812fffb6c0 R14: ffffea0001325000 R15: 0000000000000004
 get_page_from_freelist+0x589/0xa80 mm/page_alloc.c:3681
 __alloc_pages_nodemask+0x281/0x600 mm/page_alloc.c:4731
 alloc_pages include/linux/gfp.h:532 [inline]
 skb_page_frag_refill+0x2a4/0x480 net/core/sock.c:2377
 sk_page_frag_refill+0x48/0x200 net/core/sock.c:2397
 tcp_sendmsg_locked+0x137c/0x3ee0 net/ipv4/tcp.c:1318
 tcp_sendmsg+0x2c/0x40 net/ipv4/tcp.c:1433
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg net/socket.c:672 [inline]
 __sys_sendto+0x3f3/0x590 net/socket.c:1998
 __do_sys_sendto net/socket.c:2010 [inline]
 __se_sys_sendto net/socket.c:2006 [inline]
 __x64_sys_sendto+0xda/0xf0 net/socket.c:2006
 do_syscall_64+0xf3/0x1b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c849
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f030070bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f030070c6d4 RCX: 000000000045c849
RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000005
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000a02 R14: 00000000004ccb8a R15: 000000000076bf0c

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/21 12:52 upstream 5ad0ec0b8652 4288d95e .config console log report ci-upstream-kasan-gce-smack-root
* Struck through repros no longer work on HEAD.