syzbot


INFO: rcu detected stall in sctp_setsockopt

Status: auto-closed as invalid on 2019/12/12 00:34
Subsystems: net
[Documentation on labels]
First crash: 1908d, last: 1701d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: rcu detected stall in sctp_setsockopt 3 1379d 1427d 0/1 auto-closed as invalid on 2020/11/28 08:55
upstream INFO: rcu detected stall in sctp_setsockopt (2) sctp 8 1349d 1487d 0/26 auto-closed as invalid on 2020/11/28 11:26

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (1 GPs behind) idle=2be/1/0x4000000000000002 softirq=111768/111770 fqs=34 
	(t=10501 jiffies g=168033 q=382)
rcu: rcu_preempt kthread starved for 10434 jiffies! g168033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     I29256    10      2 0x80004000
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x755/0x1580 kernel/sched/core.c:3880
 schedule+0xd9/0x260 kernel/sched/core.c:3947
 schedule_timeout+0x486/0xc50 kernel/time/timer.c:1807
 rcu_gp_fqs_loop kernel/rcu/tree.c:1611 [inline]
 rcu_gp_kthread+0x9b2/0x18c0 kernel/rcu/tree.c:1768
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
NMI backtrace for cpu 0
CPU: 0 PID: 29761 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x183/0x1cf kernel/rcu/tree_stall.h:254
 print_cpu_stall kernel/rcu/tree_stall.h:455 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:529 [inline]
 rcu_pending kernel/rcu/tree.c:2736 [inline]
 rcu_sched_clock_irq.cold+0x4dd/0xc13 kernel/rcu/tree.c:2183
 update_process_times+0x32/0x80 kernel/time/timer.c:1639
 tick_sched_handle+0xa2/0x190 kernel/time/tick-sched.c:167
 tick_sched_timer+0x53/0x140 kernel/time/tick-sched.c:1296
 __run_hrtimer kernel/time/hrtimer.c:1389 [inline]
 __hrtimer_run_queues+0x364/0xe40 kernel/time/hrtimer.c:1451
 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1509
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1106 [inline]
 smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1131
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830
 </IRQ>
RIP: 0010:__list_add include/linux/list.h:60 [inline]
RIP: 0010:list_add_tail include/linux/list.h:93 [inline]
RIP: 0010:list_move_tail include/linux/list.h:214 [inline]
RIP: 0010:hhf_dequeue+0x674/0xa20 net/sched/sch_hhf.c:439
Code: e8 03 42 80 3c 20 00 0f 85 5b 03 00 00 4d 8b bd 98 03 00 00 48 89 df 48 8b 55 c8 4c 89 fe e8 c3 cb 77 fd 31 ff 89 c6 88 45 b0 <e8> 87 12 ac fb 0f b6 75 b0 40 84 f6 0f 84 c6 f9 ff ff e8 35 11 ac
RSP: 0018:ffff888049e36608 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000001 RBX: ffff8880a3e99df8 RCX: ffffc90008162000
RDX: ffff8880a3e99e90 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff888049e36658 R08: ffff8880666ec280 R09: 0000000000000000
R10: fffffbfff134af9f R11: ffff8880666ec280 R12: dffffc0000000000
R13: ffff8880a3e99b00 R14: ffff8880a3e99e98 R15: ffff8880a3e99e90
 dequeue_skb net/sched/sch_generic.c:263 [inline]
 qdisc_restart net/sched/sch_generic.c:366 [inline]
 __qdisc_run+0x1e5/0x1a00 net/sched/sch_generic.c:384
 __dev_xmit_skb net/core/dev.c:3533 [inline]
 __dev_queue_xmit+0x16f1/0x3650 net/core/dev.c:3838
 dev_queue_xmit+0x18/0x20 net/core/dev.c:3902
 br_dev_queue_push_xmit+0x3f3/0x5c0 net/bridge/br_forward.c:52
 NF_HOOK include/linux/netfilter.h:305 [inline]
 NF_HOOK include/linux/netfilter.h:299 [inline]
 br_forward_finish+0xfa/0x400 net/bridge/br_forward.c:65
 NF_HOOK include/linux/netfilter.h:305 [inline]
 NF_HOOK include/linux/netfilter.h:299 [inline]
 __br_forward+0x641/0xb00 net/bridge/br_forward.c:109
 deliver_clone+0x61/0xc0 net/bridge/br_forward.c:125
 maybe_deliver+0x2c7/0x390 net/bridge/br_forward.c:181
 br_flood+0x13a/0x3d0 net/bridge/br_forward.c:223
 br_dev_xmit+0xd33/0x15a0 net/bridge/br_device.c:84
 __netdev_start_xmit include/linux/netdevice.h:4406 [inline]
 netdev_start_xmit include/linux/netdevice.h:4420 [inline]
 xmit_one net/core/dev.c:3280 [inline]
 dev_hard_start_xmit+0x1a3/0x9c0 net/core/dev.c:3296
 __dev_queue_xmit+0x2b15/0x3650 net/core/dev.c:3869
 dev_queue_xmit+0x18/0x20 net/core/dev.c:3902
 neigh_hh_output include/net/neighbour.h:500 [inline]
 neigh_output include/net/neighbour.h:509 [inline]
 ip_finish_output2+0x1726/0x2570 net/ipv4/ip_output.c:228
 __ip_finish_output net/ipv4/ip_output.c:308 [inline]
 __ip_finish_output+0x5fc/0xb90 net/ipv4/ip_output.c:290
 ip_finish_output+0x38/0x1f0 net/ipv4/ip_output.c:318
 NF_HOOK_COND include/linux/netfilter.h:294 [inline]
 ip_output+0x21f/0x640 net/ipv4/ip_output.c:432
 dst_output include/net/dst.h:436 [inline]
 ip_local_out+0xbb/0x190 net/ipv4/ip_output.c:125
 __ip_queue_xmit+0x86f/0x1bd0 net/ipv4/ip_output.c:532
 sctp_v4_xmit+0x1a8/0x200 net/sctp/protocol.c:976
 sctp_packet_transmit+0x1b9f/0x3650 net/sctp/output.c:629
 sctp_packet_singleton net/sctp/outqueue.c:772 [inline]
 sctp_outq_flush_ctrl.constprop.0+0x73c/0xd30 net/sctp/outqueue.c:903
 sctp_outq_flush+0xe8/0x2780 net/sctp/outqueue.c:1185
 sctp_outq_uncork+0x6c/0x80 net/sctp/outqueue.c:757
 sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1781 [inline]
 sctp_side_effects net/sctp/sm_sideeffect.c:1184 [inline]
 sctp_do_sm+0x4b9/0x5170 net/sctp/sm_sideeffect.c:1155
 sctp_primitive_ASSOCIATE+0x9d/0xd0 net/sctp/primitive.c:73
 __sctp_connect+0x8c3/0xcd0 net/sctp/socket.c:1211
 __sctp_setsockopt_connectx+0x133/0x1a0 net/sctp/socket.c:1334
 sctp_setsockopt_connectx net/sctp/socket.c:1366 [inline]
 sctp_setsockopt net/sctp/socket.c:4648 [inline]
 sctp_setsockopt+0x2366/0x6d40 net/sctp/socket.c:4605
 sock_common_setsockopt+0x94/0xd0 net/core/sock.c:3139
 __sys_setsockopt+0x261/0x4c0 net/socket.c:2084
 __do_sys_setsockopt net/socket.c:2100 [inline]
 __se_sys_setsockopt net/socket.c:2097 [inline]
 __x64_sys_setsockopt+0xbe/0x150 net/socket.c:2097
 do_syscall_64+0xfd/0x6a0 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4598e9
Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f4c217bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9
RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000006
RBP: 000000000075bf20 R08: 0000000000000010 R09: 0000000000000000
R10: 0000000020961fe4 R11: 0000000000000246 R12: 00007f4c217bf6d4
R13: 00000000004cfad0 R14: 00000000004de418 R15: 00000000ffffffff

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/09/09 10:24 net-old 28abe5796252 a60cb4cd .config console log report ci-upstream-net-this-kasan-gce
2019/05/29 00:40 net-old d484e06e25eb 6bd61501 .config console log report ci-upstream-net-this-kasan-gce
2019/04/03 15:59 net-old b2e54b09a3d2 dfd3394d .config console log report ci-upstream-net-this-kasan-gce
2019/03/16 01:41 net-old 9804501fa122 bab43553 .config console log report ci-upstream-net-this-kasan-gce
2019/09/13 00:29 net-next-old 172ca8308b05 0b7672ee .config console log report ci-upstream-net-kasan-gce
2019/09/12 22:09 net-next-old 172ca8308b05 0b7672ee .config console log report ci-upstream-net-kasan-gce
2019/09/08 23:07 net-next-old 6703a605b5ab a60cb4cd .config console log report ci-upstream-net-kasan-gce
2019/02/18 09:24 net-next-old e511f17b1fb4 59f36113 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.