syzbot


INFO: rcu detected stall in ext4_filemap_fault

Status: auto-closed as invalid on 2019/06/22 22:11
Reported-by: syzbot+42fdaae8652774a946d7@syzkaller.appspotmail.com
First crash: 1997d, last: 1997d
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: rcu detected stall in ext4_filemap_fault (3) 2 762d 793d 0/1 auto-obsoleted due to no activity on 2022/09/09 17:56
linux-4.19 INFO: rcu detected stall in ext4_filemap_fault (2) 1 1418d 1418d 0/1 auto-closed as invalid on 2020/11/23 02:32
android-49 INFO: rcu detected stall in ext4_filemap_fault C 1 1737d 1737d 0/3 public: reported C repro on 2019/09/11 03:52
upstream INFO: rcu detected stall in ext4_filemap_fault mm 109 1928d 2098d 0/28 closed as dup on 2019/01/02 16:36
linux-4.19 INFO: rcu detected stall in ext4_filemap_fault 4 1606d 1756d 0/1 auto-closed as invalid on 2020/05/18 19:50
linux-4.14 INFO: rcu detected stall in ext4_filemap_fault 1 1660d 1660d 0/1 auto-closed as invalid on 2020/03/25 22:24
upstream INFO: rcu detected stall in ext4_filemap_fault (2) cgroups 1 1702d 1702d 0/28 auto-closed as invalid on 2020/01/13 18:23
android-414 INFO: rcu detected stall in ext4_filemap_fault (2) 2 1656d 1700d 0/1 auto-closed as invalid on 2020/03/30 02:23

Sample crash report:
[30611]     0 30611    17634    12692      31       3        0          1000 syz-executor5
[30616]     0 30616    17667     8219      25       4        0             0 syz-executor4
[30638]     0 30638    17667     8219      25       4        0             0 syz-executor4
[30696]     0 30696    17634    12692      31       3        0          1000 syz-executor5
[30723]     0 30723    17634    12692      31       3        0          1000 syz-executor5
INFO: rcu_preempt detected stalls on CPUs/tasks:
	Tasks blocked on level-0 rcu_node (CPUs 0-1): P1771
	(detected by 0, t=10502 jiffies, g=53027, c=53026, q=32)
syz-fuzzer      R  running task    23984  1771   1769 0x10000000
Call Trace:
 <IRQ>
 sched_show_task.cold.31+0x342/0x3c0 kernel/sched/core.c:5230
 rcu_print_detail_task_stall_rnp+0xbf/0xf8 kernel/rcu/tree_plugin.h:568
 rcu_print_detail_task_stall kernel/rcu/tree_plugin.h:581 [inline]
 print_other_cpu_stall kernel/rcu/tree.c:1488 [inline]
 check_cpu_stall kernel/rcu/tree.c:1616 [inline]
 __rcu_pending kernel/rcu/tree.c:3382 [inline]
 rcu_pending kernel/rcu/tree.c:3444 [inline]
 rcu_check_callbacks.cold.56+0x7ad/0xd99 kernel/rcu/tree.c:2784
 update_process_times+0x24/0x60 kernel/time/timer.c:1588
 tick_sched_handle.isra.8+0x73/0x150 kernel/time/tick-sched.c:161
 tick_sched_timer+0x7e/0x160 kernel/time/tick-sched.c:1321
 __run_hrtimer kernel/time/hrtimer.c:1259 [inline]
 __hrtimer_run_queues+0x2d0/0xc10 kernel/time/hrtimer.c:1323
 hrtimer_interrupt+0x19a/0x440 kernel/time/hrtimer.c:1357
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 smp_apic_timer_interrupt+0x13a/0x600 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:778 [inline]
RIP: 0010:console_unlock+0x753/0xc80 kernel/printk/printk.c:2399
RSP: 0018:ffff8881d0b1f640 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10
RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffff1103a2ad413
RDX: 0000000000000000 RSI: ffff8881d156a078 RDI: 0000000000000297
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb83647f0
R13: ffffffffbafb7fa0 R14: dffffc0000000000 R15: 000000000000006a
 vprintk_emit+0x125/0x320 kernel/printk/printk.c:1917
 vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401
 printk+0xa7/0xcf kernel/printk/printk.c:1990
 dump_tasks mm/oom_kill.c:396 [inline]
 dump_header+0x70b/0x7a8 mm/oom_kill.c:428
 oom_kill_process.cold.8+0x10/0xc88 mm/oom_kill.c:861
 out_of_memory+0x669/0xa60 mm/oom_kill.c:1075
 __alloc_pages_may_oom mm/page_alloc.c:3356 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4045 [inline]
 __alloc_pages_nodemask+0x182f/0x2180 mm/page_alloc.c:4210
 __alloc_pages include/linux/gfp.h:461 [inline]
 __alloc_pages_node include/linux/gfp.h:474 [inline]
 alloc_pages_node include/linux/gfp.h:488 [inline]
 __page_cache_alloc include/linux/pagemap.h:226 [inline]
 page_cache_read mm/filemap.c:2286 [inline]
 filemap_fault+0xcdd/0x14a0 mm/filemap.c:2470
 ext4_filemap_fault+0x7d/0xb0 fs/ext4/inode.c:6179
 __do_fault+0x80/0x210 mm/memory.c:3194
 do_read_fault mm/memory.c:3604 [inline]
 do_fault mm/memory.c:3730 [inline]
 handle_pte_fault mm/memory.c:3960 [inline]
 __handle_mm_fault+0x991/0x25f0 mm/memory.c:4084
 handle_mm_fault+0x2f2/0x6eb mm/memory.c:4121
 __do_page_fault+0x45d/0xb60 arch/x86/mm/fault.c:1425
 page_fault+0x42/0x50 arch/x86/entry/entry_64.S:1104
RIP: 0020:0x13
RSP: 355bfa70:00007ffead068888 EFLAGS: 00000000
syz-fuzzer      R  running task    23984  1771   1769 0x10000000
Call Trace:
 <IRQ>
 sched_show_task.cold.31+0x342/0x3c0 kernel/sched/core.c:5230
 rcu_print_detail_task_stall_rnp+0xbf/0xf8 kernel/rcu/tree_plugin.h:568
 rcu_print_detail_task_stall kernel/rcu/tree_plugin.h:583 [inline]
 print_other_cpu_stall kernel/rcu/tree.c:1488 [inline]
 check_cpu_stall kernel/rcu/tree.c:1616 [inline]
 __rcu_pending kernel/rcu/tree.c:3382 [inline]
 rcu_pending kernel/rcu/tree.c:3444 [inline]
 rcu_check_callbacks.cold.56+0x805/0xd99 kernel/rcu/tree.c:2784
 update_process_times+0x24/0x60 kernel/time/timer.c:1588
 tick_sched_handle.isra.8+0x73/0x150 kernel/time/tick-sched.c:161
 tick_sched_timer+0x7e/0x160 kernel/time/tick-sched.c:1321
 __run_hrtimer kernel/time/hrtimer.c:1259 [inline]
 __hrtimer_run_queues+0x2d0/0xc10 kernel/time/hrtimer.c:1323
 hrtimer_interrupt+0x19a/0x440 kernel/time/hrtimer.c:1357
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 smp_apic_timer_interrupt+0x13a/0x600 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:778 [inline]
RIP: 0010:console_unlock+0x753/0xc80 kernel/printk/printk.c:2399
RSP: 0018:ffff8881d0b1f640 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10
RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffff1103a2ad413
RDX: 0000000000000000 RSI: ffff8881d156a078 RDI: 0000000000000297
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb83647f0
R13: ffffffffbafb7fa0 R14: dffffc0000000000 R15: 000000000000006a
 vprintk_emit+0x125/0x320 kernel/printk/printk.c:1917
 vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401
 printk+0xa7/0xcf kernel/printk/printk.c:1990
 dump_tasks mm/oom_kill.c:396 [inline]
 dump_header+0x70b/0x7a8 mm/oom_kill.c:428
 oom_kill_process.cold.8+0x10/0xc88 mm/oom_kill.c:861
 out_of_memory+0x669/0xa60 mm/oom_kill.c:1075
 __alloc_pages_may_oom mm/page_alloc.c:3356 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4045 [inline]
 __alloc_pages_nodemask+0x182f/0x2180 mm/page_alloc.c:4210
 __alloc_pages include/linux/gfp.h:461 [inline]
 __alloc_pages_node include/linux/gfp.h:474 [inline]
 alloc_pages_node include/linux/gfp.h:488 [inline]
 __page_cache_alloc include/linux/pagemap.h:226 [inline]
 page_cache_read mm/filemap.c:2286 [inline]
 filemap_fault+0xcdd/0x14a0 mm/filemap.c:2470
 ext4_filemap_fault+0x7d/0xb0 fs/ext4/inode.c:6179
 __do_fault+0x80/0x210 mm/memory.c:3194
 do_read_fault mm/memory.c:3604 [inline]
 do_fault mm/memory.c:3730 [inline]
 handle_pte_fault mm/memory.c:3960 [inline]
 __handle_mm_fault+0x991/0x25f0 mm/memory.c:4084
 handle_mm_fault+0x2f2/0x6eb mm/memory.c:4121
 __do_page_fault+0x45d/0xb60 arch/x86/mm/fault.c:1425
 page_fault+0x42/0x50 arch/x86/entry/entry_64.S:1104
RIP: 0020:0x13
RSP: 355bfa70:00007ffead068888 EFLAGS: 00000000
[30800]     0 30800    17634    12692      31       3        0          1000 syz-executor5
[30883]     0 30883    17634    12692      31       3        0          1000 syz-executor5
[30981]     0 30981    17634    12692      31       3        0          1000 syz-executor5
[30985]     0 30985    17634     8235      26       4        0             0 syz-executor4
[31015]     0 31015    17601     8233      26       4        0             0 syz-executor4
[31043]     0 31043    17634    12692      31       3        0          1000 syz-executor5
[31086]     0 31086    17634    12692      31       3        0          1000 syz-executor5
[31162]     0 31162    17634    12692      31       3        0          1000 syz-executor5
[31198]     0 31198    17601     8231      25       4        0             0 syz-executor4
[31216]     0 31216    17601     8199      24       3        0             0 syz-executor4
[31223]     0 31223    17667     8203      24       3        0             0 syz-executor4
[31230]     0 31230    17601     8230      24       4        0             0 syz-executor4
[31234]     0 31234    17634    12692      31       3        0          1000 syz-executor5
[31260]     0 31260    17667     8234      25       4        0          1000 syz-executor1
[31288]     0 31288    17634    12692      31       3        0          1000 syz-executor5
[31363]     0 31363    17634    12692      31       3        0          1000 syz-executor5
[31422]     0 31422    17634    12692      31       3        0          1000 syz-executor5
[31490]     0 31490    17667     8234      24       4        0          1000 syz-executor0
[31492]     0 31492    17634    12692      31       3        0          1000 syz-executor5
[31493]     0 31493    17667     8234      24       4        0          1000 syz-executor0
[31552]     0 31552    17634    12692      31       3        0          1000 syz-executor5
[31579]     0 31579    17634    12692      31       3        0          1000 syz-executor5
[31585]     0 31585    17601     8199      24       3        0          1000 syz-executor2
[31586]     0 31586    17601     8231      25       4        0          1000 syz-executor2
[31615]     0 31615    17667     8238      28       4        0          1000 syz-executor1
[31700]     0 31700    17634    12692      31       3        0          1000 syz-executor5
[31826]     0 31826    17634    12692      31       3        0          1000 syz-executor5
[31885]     0 31885    17700     8237      25       4        0          1000 syz-executor0
[31898]     0 31898    17634    12692      31       3        0          1000 syz-executor5
[31904]     0 31904    17601     8198      23       3        0          1000 syz-executor0
[31909]     0 31909    17601     8198      23       3        0          1000 syz-executor0
[31970]     0 31970    17634    12692      31       3        0          1000 syz-executor5
[32051]     0 32051    17634    12692      31       3        0          1000 syz-executor5
[32133]     0 32133    17634    12692      31       3        0          1000 syz-executor5
[32227]     0 32227    17634    12692      31       3        0          1000 syz-executor5
[32278]     0 32278    17634    12692      31       3        0          1000 syz-executor5
[32286]     0 32286    17700     8237      25       4        0             0 syz-executor4
[32332]     0 32332    17634    12692      31       3        0          1000 syz-executor5
[32381]     0 32381    17634    12693      31       3        0          1000 syz-executor5
[32416]     0 32416    17601     8230      24       4        0          1000 syz-executor0
[32421]     0 32421    17601     8198      23       3        0          1000 syz-executor1
[32436]     0 32436    17634    12692      31       3        0          1000 syz-executor5
[32442]     0 32442    17601     8201      24       3        0          1000 syz-executor1
[32472]     0 32472    17601     8198      23       3        0          1000 syz-executor1
[32517]     0 32517    17634    12692      31       3        0          1000 syz-executor5
[32559]     0 32559    17700     8238      30       4        0             0 syz-executor0
[32595]     0 32595    17634    12692      31       3        0          1000 syz-executor5
[32664]     0 32664    17667     8237      25       4        0          1000 syz-executor1
[32667]     0 32667    17634    12692      31       3        0          1000 syz-executor5
[32671]     0 32671    17667     8237      25       4        0          1000 syz-executor1
[32675]     0 32675    17634     8233      25       4        0          1000 syz-executor2
[32753]     0 32753    17634    12692      31       3        0          1000 syz-executor5
[  335]     0   335    17634    12692      31       3        0          1000 syz-executor5
[  444]     0   444    17634    12692      31       3        0          1000 syz-executor5
[  516]     0   516    17634    12692      31       3        0          1000 syz-executor5
[  581]     0   581    17634    12692      31       3        0          1000 syz-executor5
[  605]     0   605    17601     8200      25       3        0             0 syz-executor0
[  612]     0   612    17634    12692      31       3        0          1000 syz-executor5
[  626]     0   626    17634     8233      25       4        0             0 syz-executor4
[  632]     0   632    17601     8231      25       4        0             0 syz-executor4
[  699]     0   699    17634    12692      31       3        0          1000 syz-executor5
[  817]     0   817    17634    12692      31       3        0          1000 syz-executor5
[  851]     0   851    17634    12692      31       3        0          1000 syz-executor5
[  936]     0   936    17634    12692      31       3        0          1000 syz-executor5
[  992]     0   992    17634    12692      31       3        0          1000 syz-executor5
[ 1021]     0  1021    17601     8230      24       4        0             0 syz-executor0
[ 1038]     0  1038    17634    12692      31       3        0          1000 syz-executor5
[ 1113]     0  1113    17634    12692      31       3        0          1000 syz-executor5
[ 1164]     0  1164    17634    12692      31       3        0          1000 syz-executor5
[ 1191]     0  1191    17601     8230      24       4        0             0 syz-executor4
[ 1215]     0  1215    17634    12692      31       3        0          1000 syz-executor5
[ 1263]     0  1263    17634    12692      31       3        0          1000 syz-executor5
[ 1345]     0  1345    17634    12692      31       3        0          1000 syz-executor5
[ 1366]     0  1366    17634     8218      25       4        0             0 syz-executor4
[ 1376]     0  1376    17634     8218      25       4        0             0 syz-executor4
[ 1403]     0  1403    17634    12692      31       3        0          1000 syz-executor5
[ 1407]     0  1407    17700    10494      29       4        0             0 syz-executor4
[ 1429]     0  1429    17700     8224      26       4        0          1000 syz-executor2
[ 1465]     0  1465    17634    12692      31       3        0          1000 syz-executor5
[ 1521]     0  1521    17634    12692      31       3        0          1000 syz-executor5
[ 1569]     0  1569    17634    12693      31       3        0          1000 syz-executor5
[ 1638]     0  1638    17601     8230      24       4        0             0 syz-executor0
[ 1650]     0  1650    17667     8234      24       4        0             0 syz-executor0
[ 1661]     0  1661    17634    12692      31       3        0          1000 syz-executor5
[ 1749]     0  1749    17634    12692      31       3        0          1000 syz-executor5
[ 1813]     0  1813    17634    12692      31       3        0          1000 syz-executor5
[ 1882]     0  1882    17634    12692      31       3        0          1000 syz-executor5

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/12/24 22:10 android-4.14 815e34f802d8 8a41a0ad .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.