syzbot


INFO: rcu detected stall in skb_put

Status: closed as invalid on 2018/09/05 12:51
Subsystems: sctp
[Documentation on labels]
First crash: 2615d, last: 2615d

Sample crash report:
netlink: 41098 bytes leftover after parsing attributes in process `syz-executor6'.
openvswitch: netlink: Flow set message rejected, Key attribute missing.
netlink: 41098 bytes leftover after parsing attributes in process `syz-executor6'.
openvswitch: netlink: Flow set message rejected, Key attribute missing.
INFO: rcu_sched self-detected stall on CPU
	0-....: (119981 ticks this GP) idle=41e/1/4611686018427387908 softirq=288147/288147 fqs=29834 
	 (t=120000 jiffies g=147517 c=147516 q=281762)
NMI backtrace for cpu 0
CPU: 0 PID: 23 Comm: kauditd Not tainted 4.17.0+ #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 nmi_cpu_backtrace lib/nmi_backtrace.c:103 [inline]
 nmi_trigger_cpumask_backtrace+0x262/0x4c0 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x2c/0x40 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_single_cpu_backtrace include/linux/nmi.h:156 [inline]
 rcu_dump_cpu_stacks+0x307/0x4b0 kernel/rcu/tree.c:1376
 print_cpu_stall kernel/rcu/tree.c:1525 [inline]
 check_cpu_stall kernel/rcu/tree.c:1593 [inline]
 __rcu_pending kernel/rcu/tree.c:3356 [inline]
 rcu_pending kernel/rcu/tree.c:3401 [inline]
 rcu_check_callbacks+0x11c5/0x2ae0 kernel/rcu/tree.c:2763
 update_process_times+0x132/0x1a0 kernel/time/timer.c:1636
 tick_sched_handle kernel/time/tick-sched.c:164 [inline]
 tick_sched_timer+0x3ba/0x520 kernel/time/tick-sched.c:1274
 __run_hrtimer kernel/time/hrtimer.c:1398 [inline]
 __hrtimer_run_queues+0xc54/0x1630 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x451/0x13c0 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt+0x6b/0x250 arch/x86/kernel/apic/apic.c:1025
 smp_apic_timer_interrupt+0x5a/0x90 arch/x86/kernel/apic/apic.c:1053
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:866
RIP: 0010:native_restore_fl arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:78 [inline]
RIP: 0010:kmsan_unpoison_shadow+0x7c/0xb0 mm/kmsan/kmsan.c:227
RSP: 0018:ffff88021fc0f778 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000001 RBX: ffff8801d8f6d7c0 RCX: ffff8801d8f6d7c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff880149fd9804
RBP: ffff88021fc0f7a8 R08: 0000000001080020 R09: ffff88010c646f00
R10: 0000000000000002 R11: ffffffff893ed830 R12: 0000000000000246
R13: ffff88009ee28480 R14: 0000000000000000 R15: ffff880149fd9804
 skb_put+0x232/0x360 net/core/skbuff.c:1703
 skb_put_zero include/linux/skbuff.h:2044 [inline]
 sctp_addto_chunk net/sctp/sm_make_chunk.c:1516 [inline]
 sctp_make_heartbeat+0x566/0xa40 net/sctp/sm_make_chunk.c:1193
 sctp_sf_heartbeat net/sctp/sm_statefuns.c:1005 [inline]
 sctp_sf_sendbeat_8_3+0x19f/0xb90 net/sctp/sm_statefuns.c:1049
 sctp_do_sm+0x2a2/0x9190 net/sctp/sm_sideeffect.c:1188
 sctp_generate_heartbeat_event+0x3cf/0x5c0 net/sctp/sm_sideeffect.c:406
 call_timer_fn+0x280/0x5d0 kernel/time/timer.c:1326
 expire_timers kernel/time/timer.c:1363 [inline]
 __run_timers+0xd96/0x11b0 kernel/time/timer.c:1666
 run_timer_softirq+0x43/0x70 kernel/time/timer.c:1692
 __do_softirq+0x592/0x979 kernel/softirq.c:285
 invoke_softirq kernel/softirq.c:365 [inline]
 irq_exit+0x202/0x240 kernel/softirq.c:405
 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:525
 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:866
 </IRQ>
RIP: 0010:native_restore_fl arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:console_unlock+0x1817/0x1c80 arch/x86/include/asm/irqflags.h:78
RSP: 0018:ffff8801d8a4f850 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000282 RBX: 0000000000000000 RCX: ffff8801d8f6d7c0
RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000
RBP: ffff8801d8a4f998 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff86575950 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8801d8f6e098 R15: 0000000000000000
 vprintk_emit+0xd83/0x1060 kernel/printk/printk.c:1915
 vprintk_default+0x90/0xa0 kernel/printk/printk.c:1955
 vprintk_func+0x517/0x700 kernel/printk/printk_safe.c:379
 printk+0x1e4/0x210 kernel/printk/printk.c:1991
 kauditd_printk_skb kernel/audit.c:549 [inline]
 kauditd_hold_skb+0x181/0x2e0 kernel/audit.c:582
 kauditd_send_queue+0x21d/0x660 kernel/audit.c:745
 kauditd_thread+0x918/0xda0 kernel/audit.c:871
 kthread+0x4db/0x6c0 kernel/kthread.c:241
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:413
IPVS: stopping master sync thread 3244 ...
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/01 07:38 https://github.com/google/kmsan.git master 123906095e30 dba0b50e .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.