syzbot


BUG: soft lockup in sys_nanosleep

Status: closed as dup on 2019/12/05 08:31
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+2c5faf4c142a8f63275a@syzkaller.appspotmail.com
First crash: 1603d, last: 1603d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in sys_kill cgroups mm 3 1568d 1604d

Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.0:8335]
Modules linked in:
irq event stamp: 155584
hardirqs last  enabled at (155583): [<ffffffff8100606b>] trace_hardirqs_on_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:41
hardirqs last disabled at (155584): [<ffffffff81006087>] trace_hardirqs_off_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:42
softirqs last  enabled at (124886): [<ffffffff814a00d7>] invoke_softirq kernel/softirq.c:373 [inline]
softirqs last  enabled at (124886): [<ffffffff814a00d7>] irq_exit+0x227/0x230 kernel/softirq.c:413
softirqs last disabled at (124831): [<ffffffff814a00d7>] invoke_softirq kernel/softirq.c:373 [inline]
softirqs last disabled at (124831): [<ffffffff814a00d7>] irq_exit+0x227/0x230 kernel/softirq.c:413
CPU: 0 PID: 8335 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:free_thread_stack+0x177/0x590 kernel/fork.c:284
Code: 80 3c 28 00 74 08 48 89 df e8 25 a0 69 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a0 69 00 <49> 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08
RSP: 0018:ffffc90001e37bd0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: ffffffff81487433 RBX: ffff8880a7eac288 RCX: ffff88808dbc2380
RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00029f2900
RBP: ffffc90001e37c08 R08: dffffc0000000000 R09: fffffbfff120248a
R10: fffffbfff120248a R11: 0000000000000000 R12: ffff8880a7eac320
R13: dffffc0000000000 R14: 1ffff11014fd5864 R15: ffff888098e51828
FS:  0000000000e74940(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0bccd40000 CR3: 000000007f9bb000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 release_task_stack kernel/fork.c:440 [inline]
 put_task_stack+0xa3/0x130 kernel/fork.c:451
 finish_task_switch+0x3f1/0x550 kernel/sched/core.c:3256
 context_switch kernel/sched/core.c:3388 [inline]
 __schedule+0x9a8/0xcc0 kernel/sched/core.c:4081
 schedule+0x181/0x210 kernel/sched/core.c:4155
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0x1d0/0x6c0 kernel/time/hrtimer.c:1874
 hrtimer_nanosleep+0x3a6/0x5b0 kernel/time/hrtimer.c:1927
 __do_sys_nanosleep kernel/time/hrtimer.c:1961 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1948 [inline]
 __x64_sys_nanosleep+0x186/0x1d0 kernel/time/hrtimer.c:1948
 do_syscall_64+0xf7/0x1c0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458b20
Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 11 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00
RSP: 002b:00007fffbd2816e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023
RAX: ffffffffffffffda RBX: 000000000000f4d2 RCX: 0000000000458b20
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fffbd2816f0
RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000e74940
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007fffbd281740 R14: 000000000000f4bc R15: 00007fffbd281750
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 8357 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:35 [inline]
RIP: 0010:memcg_kmem_enabled include/linux/memcontrol.h:1389 [inline]
RIP: 0010:memcg_kmem_uncharge include/linux/memcontrol.h:1401 [inline]
RIP: 0010:free_thread_stack+0x11f/0x590 kernel/fork.c:284
Code: 3e e8 e5 96 ee ff 48 c1 e8 06 48 83 e0 c0 48 bf 00 00 00 00 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 f6 9e 60 00 e9 5d 04 00 00 <e8> dc 2a 2e 00 48 89 df 31 f6 e8 a2 a1 6e 00 43 80 3c 2e 00 74 08
RSP: 0018:ffffc900021d7848 EFLAGS: 00000246
RAX: 1ffff11012469311 RBX: ffffea00025a65c0 RCX: 0000000000040000
RDX: ffffc90001e79000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: ffffc900021d7880 R08: dffffc0000000000 R09: fffffbfff1287a8d
R10: fffffbfff1287a8d R11: 0000000000000000 R12: ffff888092349920
R13: dffffc0000000000 R14: 1ffff11012469324 R15: ffff888098485628
FS:  00007fc138f87700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000075c000 CR3: 00000000a3424000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 release_task_stack kernel/fork.c:440 [inline]
 put_task_stack+0xa3/0x130 kernel/fork.c:451
 finish_task_switch+0x3f1/0x550 kernel/sched/core.c:3256
 context_switch kernel/sched/core.c:3388 [inline]
 __schedule+0x9a8/0xcc0 kernel/sched/core.c:4081
 schedule+0x181/0x210 kernel/sched/core.c:4155
 freezable_schedule include/linux/freezer.h:172 [inline]
 futex_wait_queue_me+0x2a3/0x4b0 kernel/futex.c:2704
 futex_wait+0x252/0x770 kernel/futex.c:2810
 do_futex+0x437/0x3d60 kernel/futex.c:3881
 __do_sys_futex kernel/futex.c:3942 [inline]
 __se_sys_futex+0x28c/0x360 kernel/futex.c:3910
 __x64_sys_futex+0xe5/0x100 kernel/futex.c:3910
 do_syscall_64+0xf7/0x1c0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45a679
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fc138f86cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 000000000075bf28 RCX: 000000000045a679
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c
R13: 00007fffbd2814df R14: 00007fc138f879c0 R15: 000000000075bf2c

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/12/04 12:07 upstream 63de37476ebd 0ecb9746 .config console log report ci-upstream-kasan-gce-smack-root
* Struck through repros no longer work on HEAD.