syzbot


INFO: rcu detected stall in do_anonymous_page (3)

Status: auto-closed as invalid on 2020/05/05 05:15
Subsystems: mm
[Documentation on labels]
First crash: 1535d, last: 1535d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in do_anonymous_page (2) kernel 1 1563d 1563d 0/26 closed as invalid on 2020/01/09 08:13
upstream INFO: rcu detected stall in do_anonymous_page kernel 5 1598d 1599d 0/26 closed as invalid on 2019/12/04 14:04

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 1, t=10502 jiffies, g=159881, q=219)
rcu: All QSes seen, last rcu_preempt kthread activity 10501 (4295035495-4295024994), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.2  R  running task    26168 15083   9075 0x80004002
Call Trace:
 <IRQ>
 sched_show_task+0x411/0x560 kernel/sched/core.c:5954
 print_other_cpu_stall kernel/rcu/tree_stall.h:430 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:558 [inline]
 rcu_pending kernel/rcu/tree.c:3030 [inline]
 rcu_sched_clock_irq+0x188c/0x1aa0 kernel/rcu/tree.c:2276
 update_process_times+0x12d/0x180 kernel/time/timer.c:1726
 tick_sched_handle kernel/time/tick-sched.c:171 [inline]
 tick_sched_timer+0x263/0x420 kernel/time/tick-sched.c:1314
 __run_hrtimer kernel/time/hrtimer.c:1517 [inline]
 __hrtimer_run_queues+0x3f3/0x840 kernel/time/hrtimer.c:1579
 hrtimer_interrupt+0x37c/0xda0 kernel/time/hrtimer.c:1641
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0x109/0x280 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 </IRQ>
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:92 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:109 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:135 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:166 [inline]
RIP: 0010:check_memory_region_inline mm/kasan/generic.c:182 [inline]
RIP: 0010:check_memory_region+0x84/0x2f0 mm/kasan/generic.c:192
Code: 29 ce 49 83 fe 10 7f 38 4d 85 f6 0f 84 b6 01 00 00 4c 89 cb 4c 29 d3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 45 0f b6 19 <45> 84 db 0f 85 f4 01 00 00 49 ff c1 48 ff c3 75 eb e9 87 01 00 00
RSP: 0018:ffffc9000ddf7218 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 3014a0c415865001 RBX: fffffffffffffffd RCX: ffffffff819c4d1a
RDX: 0000000000000000 RSI: 0000000000000028 RDI: ffffc9000ddf7330
RBP: ffffc9000ddf7240 R08: dffffc0000000000 R09: fffff52001bbee68
R10: fffff52001bbee6b R11: 0000000000000000 R12: 1ffff92001bbee66
R13: dffffc0000000001 R14: 0000000000000005 R15: ffffc9000ddf7300
 memcpy+0x28/0x60 mm/kasan/common.c:127
 shrink_lruvec+0x8a/0x980 mm/vmscan.c:2455
 shrink_node_memcgs+0x258/0x5b0 mm/vmscan.c:2671
 shrink_node+0xb6b/0x1970 mm/vmscan.c:2777
 shrink_zones+0x275/0x8a0 mm/vmscan.c:2980
 do_try_to_free_pages+0x215/0xbb0 mm/vmscan.c:3033
 try_to_free_mem_cgroup_pages+0x33a/0x660 mm/vmscan.c:3355
 try_charge+0x5bd/0x18a0 mm/memcontrol.c:2455
 mem_cgroup_try_charge+0x216/0x550 mm/memcontrol.c:6367
 mem_cgroup_try_charge_delay+0x25/0xa0 mm/memcontrol.c:6382
 do_anonymous_page+0x382/0x1640 mm/memory.c:3190
 handle_pte_fault mm/memory.c:4031 [inline]
 __handle_mm_fault mm/memory.c:4163 [inline]
 handle_mm_fault+0x1c17/0x2900 mm/memory.c:4200
 faultin_page mm/gup.c:659 [inline]
 __get_user_pages+0xf72/0x1610 mm/gup.c:870
 populate_vma_page_range+0x1fd/0x250 mm/gup.c:1181
 __mm_populate+0x268/0x3d0 mm/gup.c:1229
 mm_populate include/linux/mm.h:2343 [inline]
 __do_sys_mlockall mm/mlock.c:823 [inline]
 __se_sys_mlockall+0x33f/0x380 mm/mlock.c:799
 __x64_sys_mlockall+0x38/0x40 mm/mlock.c:799
 do_syscall_64+0xf7/0x1c0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45b399
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f6a65f9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
RAX: ffffffffffffffda RBX: 00007f6a65f9c6d4 RCX: 000000000045b399
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000731 R14: 00000000004c8a7a R15: 000000000075bf2c
rcu: rcu_preempt kthread starved for 10537 jiffies! g159881 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    28952    10      2 0x80004000
Call Trace:
 context_switch kernel/sched/core.c:3386 [inline]
 __schedule+0x87f/0xcd0 kernel/sched/core.c:4082
 schedule+0x188/0x210 kernel/sched/core.c:4156
 schedule_timeout+0x14f/0x240 kernel/time/timer.c:1895
 rcu_gp_fqs_loop kernel/rcu/tree.c:1658 [inline]
 rcu_gp_kthread+0xe8d/0x17e0 kernel/rcu/tree.c:1818
 kthread+0x332/0x350 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/05 05:06 upstream 33b40134e5cf 93e5e335 .config console log report ci-upstream-kasan-gce-smack-root
* Struck through repros no longer work on HEAD.