syzbot


INFO: rcu detected stall in vma_set_page_prot

Status: auto-closed as invalid on 2022/08/01 11:05
Subsystems: mm
[Documentation on labels]
First crash: 724d, last: 724d

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	1-...0: (1 GPs behind) idle=1ef/1/0x4000000000000000 softirq=62831/62834 fqs=1820 
	(detected by 0, t=10506 jiffies, g=88701, q=459)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 19381 Comm: syz-executor.4 Not tainted 5.18.0-rc5-syzkaller-00006-g9050ba3a61a4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:lock_release+0xc/0x720 kernel/locking/lockdep.c:5649
Code: e9 55 fe ff ff 48 c7 c7 08 40 b8 8d e8 9d 8f 66 00 e9 6d fd ff ff 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 57 <41> 56 41 55 41 54 49 89 fc 55 53 48 81 ec 90 00 00 00 48 8d 6c 24
RSP: 0018:ffffc900003f8d30 EFLAGS: 00000086
RAX: dffffc0000000000 RBX: 0000000000000006 RCX: ffffffff815d57a0
RDX: 0000000000000000 RSI: ffffffff83fb84f4 RDI: ffffffff907bf388
RBP: ffffffff907bf370 R08: ffffffff907bf370 R09: 0000000000000003
R10: fffff5200007f199 R11: 0000000000000001 R12: dffffc0000000000
R13: ffffffff89ce4900 R14: 1ffff9200007f1ad R15: ffff88801bf36340
FS:  0000555555f35400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd1c419bf64 CR3: 0000000020618000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:149 [inline]
 _raw_spin_unlock_irqrestore+0x16/0x70 kernel/locking/spinlock.c:194
 debug_object_deactivate lib/debugobjects.c:757 [inline]
 debug_object_deactivate+0x264/0x300 lib/debugobjects.c:723
 debug_hrtimer_deactivate kernel/time/hrtimer.c:425 [inline]
 debug_deactivate kernel/time/hrtimer.c:481 [inline]
 __run_hrtimer kernel/time/hrtimer.c:1653 [inline]
 __hrtimer_run_queues+0x3f8/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:vma_wants_writenotify+0x2/0x3f0 mm/mmap.c:1673
Code: 4c 8b 04 24 e9 e1 fe ff ff 4c 89 0c 24 e8 26 05 10 00 4c 8b 0c 24 e9 ac fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 <41> 56 41 55 41 54 49 bc 00 00 00 00 00 fc ff df 55 53 48 89 fb 48
RSP: 0018:ffffc90003bf7c10 EFLAGS: 00000202
RAX: fbf0000000000187 RBX: ffff888011d6c420 RCX: 0000000000000000
RDX: ffff88807ca86100 RSI: 0000000000000120 RDI: ffff888011d6c420
RBP: 0000000000000120 R08: 0000000000000000 R09: ffffffff8db814ab
R10: ffffffff81b36a89 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000100 R14: 0000000008000070 R15: ffff888011d6c468
 vma_set_page_prot+0x11a/0x250 mm/mmap.c:138
 mmap_region+0x568/0x14a0 mm/mmap.c:1875
 do_mmap+0x863/0xfa0 mm/mmap.c:1582
 vm_mmap_pgoff+0x1b7/0x290 mm/util.c:519
 ksys_mmap_pgoff+0x79/0x5a0 mm/mmap.c:1628
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd1c4089132
Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64
RSP: 002b:00007ffe1f5e87f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000020022 RCX: 00007fd1c4089132
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe1f5e8a00
R13: 00007fd1c37ff700 R14: 0000000000000000 R15: 0000000000022000
 </TASK>
rcu: rcu_preempt kthread starved for 1405 jiffies! g88701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28368 pid:   16 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5073 [inline]
 __schedule+0xa9a/0x4cc0 kernel/sched/core.c:6388
 schedule+0xd2/0x1f0 kernel/sched/core.c:6460
 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1884
 rcu_gp_fqs_loop+0x186/0x810 kernel/rcu/tree.c:1971
 rcu_gp_kthread+0x1de/0x320 kernel/rcu/tree.c:2144
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.18.0-rc5-syzkaller-00006-g9050ba3a61a4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x1e6/0x230 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_check_gp_kthread_starvation.cold+0x1fb/0x200 kernel/rcu/tree_stall.h:490
 print_other_cpu_stall kernel/rcu/tree_stall.h:595 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:741 [inline]
 rcu_pending kernel/rcu/tree.c:3923 [inline]
 rcu_sched_clock_irq+0x1f7c/0x2150 kernel/rcu/tree.c:2625
 update_process_times+0x16d/0x200 kernel/time/timer.c:1788
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:243
 tick_sched_timer+0xee/0x120 kernel/time/tick-sched.c:1473
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 drivers/acpi/processor_idle.c:551
Code: 89 de e8 2d f2 0b f8 84 db 75 ac e8 44 ee 0b f8 e8 ff 36 12 f8 eb 0c e8 38 ee 0b f8 0f 00 2d c1 bd c5 00 e8 2c ee 0b f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 a7 f0 0b f8 48 85 db
RSP: 0018:ffffffff8ba07d38 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffffffff8babc700 RSI: ffffffff896c85a4 RDI: 0000000000000000
RBP: ffff888016b7a864 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff817ebcc8 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888016b7a800 R14: ffff888016b7a864 R15: ffff8881480f8004
 acpi_idle_enter+0x361/0x500 drivers/acpi/processor_idle.c:686
 cpuidle_enter_state+0x1b1/0xc80 drivers/cpuidle/cpuidle.c:237
 cpuidle_enter+0x4a/0xa0 drivers/cpuidle/cpuidle.c:351
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:236 [inline]
 do_idle+0x3e8/0x590 kernel/sched/idle.c:303
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:400
 rest_init+0x169/0x270 init/main.c:726
 arch_call_rest_init+0xf/0x14 init/main.c:882
 start_kernel+0x47f/0x4a0 init/main.c:1140
 secondary_startup_64_no_verify+0xc3/0xcb
 </TASK>
----------------
Code disassembly (best guess):
   0:	e9 55 fe ff ff       	jmpq   0xfffffe5a
   5:	48 c7 c7 08 40 b8 8d 	mov    $0xffffffff8db84008,%rdi
   c:	e8 9d 8f 66 00       	callq  0x668fae
  11:	e9 6d fd ff ff       	jmpq   0xfffffd83
  16:	0f 1f 84 00 00 00 00 	nopl   0x0(%rax,%rax,1)
  1d:	00
  1e:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  25:	fc ff df
  28:	41 57                	push   %r15
* 2a:	41 56                	push   %r14 <-- trapping instruction
  2c:	41 55                	push   %r13
  2e:	41 54                	push   %r12
  30:	49 89 fc             	mov    %rdi,%r12
  33:	55                   	push   %rbp
  34:	53                   	push   %rbx
  35:	48 81 ec 90 00 00 00 	sub    $0x90,%rsp
  3c:	48                   	rex.W
  3d:	8d                   	.byte 0x8d
  3e:	6c                   	insb   (%dx),%es:(%rdi)
  3f:	24                   	.byte 0x24

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/05/03 11:03 upstream 9050ba3a61a4 7ee63e2c .config console log report info ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in vma_set_page_prot
* Struck through repros no longer work on HEAD.