INFO: rcu detected stall in garp_join

INFO: rcu detected stall in garp_join_timer (2)
Status: upstream: reported on 2020/02/16 10:50
Reported-by: syzbot+3fb2b230a1134a93a964@syzkaller.appspotmail.com
First crash: 142d, last: 44d

similar bugs (3):
Kernel	Title	Count	Last	Reported	Patched	Status
linux-4.19	INFO: rcu detected stall in garp_join_timer	7	112d	143d	0/1	upstream: reported on 2020/01/08 07:29
upstream	INFO: rcu detected stall in garp_join_timer	1	183d	183d	0/17	closed as invalid on 2019/11/29 14:24
linux-4.14	INFO: rcu detected stall in garp_join_timer	4	107d	122d	0/1	upstream: reported on 2020/01/29 07:15

Sample crash report:

rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-...!: (10500 ticks this GP) idle=e32/1/0x4000000000000004 softirq=34931/34931 fqs=0 
	(t=10500 jiffies g=64905 q=285)
rcu: rcu_preempt kthread starved for 10500 jiffies! g64905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    28848    10      2 0x80004000
Call Trace:
 schedule+0xd0/0x2a0 kernel/sched/core.c:4163
 schedule_timeout+0x35c/0x850 kernel/time/timer.c:1898
 rcu_gp_fqs_loop kernel/rcu/tree.c:1674 [inline]
 rcu_gp_kthread+0x9bf/0x1960 kernel/rcu/tree.c:1836
 kthread+0x388/0x470 kernel/kthread.c:268
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
NMI backtrace for cpu 1
CPU: 1 PID: 21314 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x188/0x20d lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x70/0xb1 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x231/0x27e lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x19b/0x1e5 kernel/rcu/tree_stall.h:254
 print_cpu_stall kernel/rcu/tree_stall.h:475 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:549 [inline]
 rcu_pending kernel/rcu/tree.c:3225 [inline]
 rcu_sched_clock_irq.cold+0x55d/0xcfa kernel/rcu/tree.c:2296
 update_process_times+0x25/0x60 kernel/time/timer.c:1727
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:176
 tick_sched_timer+0x4e/0x140 kernel/time/tick-sched.c:1320
 __run_hrtimer kernel/time/hrtimer.c:1520 [inline]
 __hrtimer_run_queues+0x5ca/0xed0 kernel/time/hrtimer.c:1584
 hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1646
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 [inline]
 smp_apic_timer_interrupt+0x15b/0x600 arch/x86/kernel/apic/apic.c:1138
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
RIP: 0010:garp_pdu_queue+0x2/0x730 net/802/garp.c:237
Code: ff 48 89 df e8 0f 17 78 fb e9 5e fe ff ff e8 e5 16 78 fb e9 18 ff ff ff e8 8b 17 78 fb e9 3b ff ff ff cc cc cc cc cc cc 41 57 <41> 56 41 55 41 54 55 48 89 fd 53 4c 8d ad f8 00 00 00 48 83 ec 08
RSP: 0000:ffffc90000da8ce8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13
RAX: ffff8880477403c0 RBX: ffff8880a21974a0 RCX: ffffffff815a8459
RDX: 0000000000000100 RSI: ffffffff86390990 RDI: ffff8880a2197400
RBP: ffff8880a2197460 R08: 0000000000000004 R09: fffff520001b5192
R10: 0000000000000003 R11: fffff520001b5191 R12: ffff8880a2197400
R13: 0000000000000000 R14: 1ffff920001b51a6 R15: ffff8880ae727580
 garp_join_timer+0x38/0x80 net/802/garp.c:407
 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1405
 expire_timers kernel/time/timer.c:1450 [inline]
 __run_timers kernel/time/timer.c:1774 [inline]
 __run_timers kernel/time/timer.c:1741 [inline]
 run_timer_softirq+0x623/0x1600 kernel/time/timer.c:1787
 __do_softirq+0x26c/0x9f7 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x192/0x1d0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:546 [inline]
 smp_apic_timer_interrupt+0x19e/0x600 arch/x86/kernel/apic/apic.c:1140
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:759 [inline]
RIP: 0010:lock_acquire+0x267/0x8f0 kernel/locking/lockdep.c:4937
Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 c6 05 00 00 48 83 3d 35 3b 3b 08 00 0f 84 65 04 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 08 48 c7
RSP: 0000:ffffc900088a75e8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff1329844 RBX: ffff8880477403c0 RCX: ffffffff81592f8b
RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000282
RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff185cd3d
R10: ffffffff8c2e69e7 R11: fffffbfff185cd3c R12: 0000000000000002
R13: ffffffff899bed00 R14: 0000000000000000 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:208 [inline]
 rcu_read_lock include/linux/rcupdate.h:601 [inline]
 lock_page_memcg+0x36/0x230 mm/memcontrol.c:1996
 page_remove_file_rmap mm/rmap.c:1233 [inline]
 page_remove_rmap+0x5b7/0x1190 mm/rmap.c:1326
 zap_pte_range mm/memory.c:1092 [inline]
 zap_pmd_range mm/memory.c:1196 [inline]
 zap_pud_range mm/memory.c:1225 [inline]
 zap_p4d_range mm/memory.c:1246 [inline]
 unmap_page_range+0xd12/0x25d0 mm/memory.c:1267
 unmap_single_vma+0x196/0x300 mm/memory.c:1312
 unmap_vmas+0x16f/0x2f0 mm/memory.c:1344
 exit_mmap+0x2aa/0x510 mm/mmap.c:3150
 __mmput kernel/fork.c:1085 [inline]
 mmput+0x168/0x4b0 kernel/fork.c:1106
 exit_mm kernel/exit.c:479 [inline]
 do_exit+0xa51/0x2dd0 kernel/exit.c:782
 do_group_exit+0x125/0x340 kernel/exit.c:893
 get_signal+0x47b/0x24e0 kernel/signal.c:2739
 do_signal+0x81/0x2240 arch/x86/kernel/signal.c:784
 exit_to_usermode_loop+0x26c/0x360 arch/x86/entry/common.c:161
 prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:279 [inline]
 do_syscall_64+0x6b1/0x7d0 arch/x86/entry/common.c:305
 entry_SYSCALL_64_after_hwframe+0x49/0xb3
RIP: 0033:0x45c889
Code: 60 48 85 c9 74 1a 8b 54 24 24 85 d2 74 12 8b 5c 24 68 0f b7 0c 59 81 e1 ff 7f 00 00 39 d1 75 30 48 8b 4c 24 28 48 8b 54 24 40 <48> 8b 4c ca 08 48 03 48 10 48 8b 84 24 88 00 00 00 48 89 08 c6 84
RSP: 002b:00007f5bb6835c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
RAX: fffffffffffffdfe RBX: 00007f5bb68366d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000040
RBP: 000000000076bf00 R08: 0000000020000200 R09: 0000000000000000
R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000860 R14: 00000000004cb248 R15: 000000000076bf0c

Crashes (4):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Maintainers
ci-upstream-kasan-gce	2020/04/16 16:08	upstream	00086336	c743fcb3	.config	log	report	allison@lohutok.net, davem@davemloft.net, gregkh@linuxfoundation.org, info@metux.net, kstewart@linuxfoundation.org, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-smack-root	2020/02/04 20:01	upstream	322bf2d3	93e5e335	.config	log	report	allison@lohutok.net, davem@davemloft.net, gregkh@linuxfoundation.org, info@metux.net, kstewart@linuxfoundation.org, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-root	2020/02/04 17:53	upstream	322bf2d3	93e5e335	.config	log	report	allison@lohutok.net, davem@davemloft.net, gregkh@linuxfoundation.org, info@metux.net, kstewart@linuxfoundation.org, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tglx@linutronix.de
ci-upstream-kasan-gce-386	2020/01/09 16:05	upstream	b07f636f	ddc3e859	.config	log	report	allison@lohutok.net, davem@davemloft.net, gregkh@linuxfoundation.org, info@metux.net, kstewart@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, tglx@linutronix.de