syzbot


INFO: rcu detected stall in sys_getsockopt (4)

Status: closed as invalid on 2020/01/09 08:13
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 1057d, last: 1057d
similar bugs (8):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_getsockopt (2) 1 1058d 1058d 0/24 closed as invalid on 2020/01/08 05:23
linux-4.19 INFO: rcu detected stall in sys_getsockopt 1 71d 71d 0/1 upstream: reported on 2022/09/21 05:52
upstream INFO: rcu detected stall in sys_getsockopt (3) 1 1058d 1058d 0/24 closed as invalid on 2020/01/08 05:33
upstream INFO: rcu detected stall in sys_getsockopt (6) 3 475d 543d 0/24 auto-closed as invalid on 2021/11/10 12:58
upstream INFO: rcu detected stall in sys_getsockopt (7) 2 332d 382d 0/24 closed as invalid on 2022/02/08 10:10
upstream INFO: rcu detected stall in sys_getsockopt (5) 2 875d 918d 0/24 auto-closed as invalid on 2020/10/06 19:28
upstream INFO: rcu detected stall in sys_getsockopt (8) 2 223d 238d 0/24 auto-closed as invalid on 2022/07/21 00:25
upstream INFO: rcu detected stall in sys_getsockopt 2 1092d 1093d 0/24 closed as invalid on 2019/12/04 14:04

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 0, t=10502 jiffies, g=6533, q=357)
rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294954109-4294943606), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.1  R  running task    24952  8419   8418 0x0000400a
Call Trace:
 <IRQ>
 sched_show_task+0x40f/0x560 kernel/sched/core.c:5954
 print_other_cpu_stall kernel/rcu/tree_stall.h:410 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:538 [inline]
 rcu_pending kernel/rcu/tree.c:2827 [inline]
 rcu_sched_clock_irq+0x1861/0x1ad0 kernel/rcu/tree.c:2271
 update_process_times+0x12d/0x180 kernel/time/timer.c:1726
 tick_sched_handle kernel/time/tick-sched.c:167 [inline]
 tick_sched_timer+0x263/0x420 kernel/time/tick-sched.c:1310
 __run_hrtimer kernel/time/hrtimer.c:1517 [inline]
 __hrtimer_run_queues+0x403/0x840 kernel/time/hrtimer.c:1579
 hrtimer_interrupt+0x38c/0xda0 kernel/time/hrtimer.c:1641
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0x109/0x280 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 </IRQ>
RIP: 0010:mod_memcg_page_state+0x8/0x190 include/linux/memcontrol.h:652
Code: eb 0c e8 eb 27 2e 00 eb 05 e8 e4 27 2e 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 <41> 54 53 41 89 f6 48 89 fb e8 ba 27 2e 00 48 83 c3 38 48 89 d8 48
RSP: 0018:ffffc900021673b8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 1ffff11014da54c1 RBX: ffff8880a6d2a608 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00025162c0
RBP: ffffc900021673c8 R08: 000000000003a728 R09: fffffbfff124248a
R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a708ed20
R13: dffffc0000000000 R14: 1ffff11014e11da4 R15: ffff88809a5c79f8
 free_thread_stack+0x168/0x590 kernel/fork.c:280
 release_task_stack kernel/fork.c:440 [inline]
 put_task_stack+0xa3/0x130 kernel/fork.c:451
 finish_task_switch+0x3f1/0x550 kernel/sched/core.c:3256
 context_switch kernel/sched/core.c:3388 [inline]
 __schedule+0x9a8/0xcc0 kernel/sched/core.c:4081
 preempt_schedule_irq+0xc1/0x140 kernel/sched/core.c:4338
 retint_kernel+0x1b/0x2b
RIP: 0010:preempt_count_add+0x6/0x160 kernel/sched/core.c:3774
Code: 80 e1 07 80 c1 03 38 c1 0f 8c 3b ff ff ff 4c 89 e7 e8 3e 09 60 00 e9 2e ff ff ff 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 <41> 56 53 89 fb 65 01 3d 3a 00 af 7e 48 c7 c0 60 51 47 8a 48 c1 e8
RSP: 0018:ffffc90002167620 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8163d517
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
RBP: ffffc90002167628 R08: dffffc0000000000 R09: ffffed1015d46fc5
R10: ffffed1015d46fc5 R11: 0000000000000000 R12: ffff888094d680c0
R13: ffffffff8165c180 R14: 0000000000000000 R15: 1ffff9200042cee1
 is_module_text_address+0x1a/0x150 kernel/module.c:4494
 kernel_text_address kernel/extable.c:143 [inline]
 __kernel_text_address+0x88/0x110 kernel/extable.c:104
 unwind_get_return_address+0x4c/0x90 arch/x86/kernel/unwind_frame.c:19
 arch_stack_walk+0x98/0xe0 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0xb6/0x150 kernel/stacktrace.c:123
 save_stack mm/kasan/common.c:72 [inline]
 set_track mm/kasan/common.c:80 [inline]
 __kasan_kmalloc+0x11c/0x1b0 mm/kasan/common.c:513
 kasan_slab_alloc+0xf/0x20 mm/kasan/common.c:521
 slab_post_alloc_hook mm/slab.h:584 [inline]
 slab_alloc_node mm/slab.c:3263 [inline]
 kmem_cache_alloc_node_trace+0x225/0x2d0 mm/slab.c:3593
 kmalloc_node include/linux/slab.h:574 [inline]
 kzalloc_node include/linux/slab.h:681 [inline]
 __get_vm_area_node+0x14f/0x350 mm/vmalloc.c:2102
 __vmalloc_node_range+0xe1/0x850 mm/vmalloc.c:2541
 __vmalloc_node mm/vmalloc.c:2601 [inline]
 __vmalloc_node_flags mm/vmalloc.c:2615 [inline]
 vzalloc+0x73/0x80 mm/vmalloc.c:2660
 alloc_counters+0x6b/0x6e0 net/ipv6/netfilter/ip6_tables.c:816
 copy_entries_to_user net/ipv4/netfilter/arp_tables.c:675 [inline]
 get_entries net/ipv4/netfilter/arp_tables.c:862 [inline]
 do_arpt_get_ctl+0x420/0x7e0 net/ipv4/netfilter/arp_tables.c:1483
 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline]
 nf_getsockopt+0x287/0x2b0 net/netfilter/nf_sockopt.c:122
 ip_getsockopt+0x10b/0x1f0 net/ipv4/ip_sockglue.c:1576
 tcp_getsockopt+0xbe/0xd0 net/ipv4/tcp.c:3690
 sock_common_getsockopt+0x99/0xb0 net/core/sock.c:3108
 __sys_getsockopt+0x24c/0x2b0 net/socket.c:2162
 __do_sys_getsockopt net/socket.c:2177 [inline]
 __se_sys_getsockopt net/socket.c:2174 [inline]
 __x64_sys_getsockopt+0xbf/0xd0 net/socket.c:2174
 do_syscall_64+0xf7/0x1c0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45da5a
Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 8d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00
RSP: 002b:00007ffe8559f628 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007ffe8559f640 RCX: 000000000045da5a
RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000003 R08: 00007ffe8559f63c R09: 0000000000000001
R10: 00007ffe8559f640 R11: 0000000000000212 R12: 00000000000003e0
R13: 00007ffe8559fcc0 R14: 0000000000000003 R15: 00007ffe8559fcd0
rcu: rcu_preempt kthread starved for 10563 jiffies! g6533 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    28984    10      2 0x80004000
Call Trace:
 context_switch kernel/sched/core.c:3385 [inline]
 __schedule+0x9a0/0xcc0 kernel/sched/core.c:4081
 schedule+0x181/0x210 kernel/sched/core.c:4155
 schedule_timeout+0x14f/0x240 kernel/time/timer.c:1895
 rcu_gp_fqs_loop kernel/rcu/tree.c:1661 [inline]
 rcu_gp_kthread+0xed8/0x1770 kernel/rcu/tree.c:1821
 kthread+0x332/0x350 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2020/01/08 11:41 upstream ae6088216ce4 6738e0b3 .config log report
ci-upstream-kasan-gce-smack-root 2020/01/08 10:51 upstream ae6088216ce4 6738e0b3 .config log report
ci-upstream-kasan-gce-smack-root 2020/01/08 07:19 upstream ae6088216ce4 6738e0b3 .config log report
* Struck through repros no longer work on HEAD.