syzbot


BUG: soft lockup in _rcu_barrier

Status: closed as invalid on 2018/09/05 12:51
Subsystems: kernel
[Documentation on labels]
First crash: 2599d, last: 2561d

Sample crash report:
netlink: 'syz-executor7': attribute type 6 has an invalid length.
netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'.
watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [kworker/u4:6:8167]
Modules linked in:
CPU: 1 PID: 8167 Comm: kworker/u4:6 Not tainted 4.18.0-rc8+ #35
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x385/0x4e0 kernel/smp.c:302
Code: 00 00 00 00 00 e8 6b 33 12 00 f3 90 8b 5c 24 78 4c 89 e7 e8 ad 85 6b 00 8b 00 83 e0 01 83 e3 01 85 c0 74 06 f7 d0 21 d8 74 06 <85> db 75 d7 eb 0b 8b 3a e8 fe 8e 6b 00 85 db 75 ca e8 35 33 12 00 
RSP: 0018:ffff8801ae89f9e0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88019ca0fa58
RDX: ffff88019ca0fa58 RSI: aaaaaaaaaaaab000 RDI: ffffea000a173ba0
RBP: ffff8801ae89fab8 R08: 0000000000000000 R09: 0000000000000002
R10: 0000000000000000 R11: ffffffff81174db0 R12: ffff8801ae89fa58
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801aa0408f8
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000080 CR3: 000000014252e000 CR4: 00000000001406e0
Call Trace:
 _rcu_barrier+0x470/0x720 kernel/rcu/tree.c:3434
 rcu_barrier_sched kernel/rcu/tree.c:3474 [inline]
 rcu_barrier+0x1c/0x20 kernel/rcu/tree_plugin.h:933
 l2tp_exit_net+0x33f/0x3d0 net/l2tp/l2tp_core.c:1752
 ops_exit_list net/core/net_namespace.c:152 [inline]
 cleanup_net+0xa1f/0x16c0 net/core/net_namespace.c:523
 process_one_work+0x1605/0x1f40 kernel/workqueue.c:2153
 worker_thread+0x11a2/0x2590 kernel/workqueue.c:2296
 kthread+0x44d/0x480 kernel/kthread.c:247
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 1 to CPUs 0:
------------[ cut here ]------------
kernel BUG at mm/kmsan/kmsan_entry.c:81!
invalid opcode: 0000 [#1] SMP PTI
CPU: 0 PID: 24539 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #35
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_nmi_enter+0x42/0x70 mm/kmsan/kmsan_entry.c:80
Code: 00 74 27 65 8b 04 25 80 90 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 80 90 03 00 65 c6 04 25 15 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e 
RSP: 0018:fffffe000000eea8 EFLAGS: 00010046
RAX: 0000000080000000 RBX: 0000000000000001 RCX: 00000000c0000101
RDX: 00000000ffff8802 RSI: ffffffff88c0136c RDI: ffffea0004518b40
RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 00000000b8af8000 R15: 0000000000000000
FS:  00007f985226c700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000002351e50 CR3: 00000000b8af8000 CR4: 00000000001406f0
Call Trace:
 <NMI>
 </NMI>
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
---[ end trace cbf23b0be12998b9 ]---
RIP: 0010:kmsan_nmi_enter+0x42/0x70 mm/kmsan/kmsan_entry.c:80
Code: 00 74 27 65 8b 04 25 80 90 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 80 90 03 00 65 c6 04 25 15 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e 
RSP: 0018:fffffe000000eea8 EFLAGS: 00010046
RAX: 0000000080000000 RBX: 0000000000000001 RCX: 00000000c0000101
RDX: 00000000ffff8802 RSI: ffffffff88c0136c RDI: ffffea0004518b40
RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 00000000b8af8000 R15: 0000000000000000
FS:  00007f985226c700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000002351e50 CR3: 00000000b8af8000 CR4: 00000000001406f0

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/28 13:24 https://github.com/google/kmsan.git master 72cde92031e1 7ef1de9e .config console log report ci-upstream-kmsan-gce
2018/08/15 08:25 https://github.com/google/kmsan.git master 0cc51dc9a291 0e6dcb88 .config console log report ci-upstream-kmsan-gce
2018/07/21 20:51 https://github.com/google/kmsan.git master d1c2a46a46f6 8cc079c3 .config console log report ci-upstream-kmsan-gce
2018/07/21 03:56 https://github.com/google/kmsan.git master d1c2a46a46f6 af255b09 .config console log report ci-upstream-kmsan-gce
* Struck through repros no longer work on HEAD.