INFO: rcu detected stall in bind

INFO: rcu detected stall in bind
Status: auto-closed as invalid on 2021/09/15 00:37
Reported-by: syzbot+c478ade1c9e5e39d8496@syzkaller.appspotmail.com
First crash: 393d, last: 161d

Sample crash report:

RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
RBP: 00007f619a974ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007ffdf182280f R14: 00007f619a9759c0 R15: 000000000119bf8c
INFO: rcu_sched self-detected stall on CPU
	1-...: (10482 ticks this GP) idle=b0e/140000000000001/0 softirq=224549/224550 fqs=0 
	 (t=10500 jiffies g=53542 c=53541 q=2)
rcu_sched kthread starved for 10500 jiffies! g53542 c53541 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
rcu_sched       R  running task    30008     9      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_timeout+0x4af/0xe90 kernel/time/timer.c:1747
 rcu_gp_kthread+0xc0a/0x1e60 kernel/rcu/tree.c:2255
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
NMI backtrace for cpu 1
CPU: 1 PID: 10851 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x13a/0x180 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline]
 rcu_dump_cpu_stacks+0x15f/0x19c kernel/rcu/tree.c:1396
 print_cpu_stall kernel/rcu/tree.c:1542 [inline]
 check_cpu_stall kernel/rcu/tree.c:1610 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0x464/0xd8d kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1591
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x92/0x200 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x30b/0xc80 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793
 </IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
RSP: 0018:ffff88807933fb20 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 1ffffffff11e1254 RBX: ffffffff89dd29ac RCX: 1ffff11013600dc7
RDX: dffffc0000000000 RSI: ffff88809b006e18 RDI: ffff88809b006dc4
RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000282
R13: dffffc0000000000 R14: ffffffff89dd29ad R15: ffffed10174a55d8
 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
 kvm_wait arch/x86/kernel/kvm.c:600 [inline]
 kvm_wait+0x179/0x240 arch/x86/kernel/kvm.c:580
 pv_wait arch/x86/include/asm/paravirt.h:679 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:447 [inline]
 __pv_queued_spin_lock_slowpath+0x722/0x910 kernel/locking/qspinlock.c:465
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:669 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:52 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:90 [inline]
 queued_read_lock_slowpath+0x150/0x190 kernel/locking/qrwlock.c:90
 hci_send_to_channel+0x3c/0x200 net/bluetooth/hci_sock.c:261
 hci_send_monitor_ctrl_event+0x3dd/0x500 net/bluetooth/hci_sock.c:391
 mgmt_send_event+0x2b3/0x330 net/bluetooth/mgmt_util.c:86
 mgmt_index_event net/bluetooth/mgmt.c:253 [inline]
 mgmt_index_removed+0x200/0x240 net/bluetooth/mgmt.c:6594
 hci_sock_bind+0xce1/0x1170 net/bluetooth/hci_sock.c:1169
 SYSC_bind net/socket.c:1489 [inline]
 SyS_bind+0x174/0x1f0 net/socket.c:1475
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45e219
RSP: 002b:00007f619a974c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
RBP: 00007f619a974ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007ffdf182280f R14: 00007f619a9759c0 R15: 000000000119bf8c
INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 1, t=10542 jiffies, g=67240, c=67239, q=30)
All QSes seen, last rcu_preempt kthread activity 10542 (4295181022-4295170480), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.0  R  running task    28912 10851   8034 0x0000000a
Call Trace:
 <IRQ>
 sched_show_task.cold+0x333/0x39a kernel/sched/core.c:5165
 print_other_cpu_stall kernel/rcu/tree.c:1501 [inline]
 check_cpu_stall kernel/rcu/tree.c:1616 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0xd29/0xd8d kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1591
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x92/0x200 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x30b/0xc80 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793
 </IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
RSP: 0018:ffff88807933fb20 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 1ffffffff11e1254 RBX: ffffffff89dd29ac RCX: 1ffff11013600dc7
RDX: dffffc0000000000 RSI: ffff88809b006e18 RDI: ffff88809b006dc4
RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000282
R13: dffffc0000000000 R14: ffffffff89dd29ad R15: ffffed10174a55d8
 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
 kvm_wait arch/x86/kernel/kvm.c:600 [inline]
 kvm_wait+0x179/0x240 arch/x86/kernel/kvm.c:580
 pv_wait arch/x86/include/asm/paravirt.h:679 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:447 [inline]
 __pv_queued_spin_lock_slowpath+0x722/0x910 kernel/locking/qspinlock.c:465
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:669 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:52 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:90 [inline]
 queued_read_lock_slowpath+0x150/0x190 kernel/locking/qrwlock.c:90
 hci_send_to_channel+0x3c/0x200 net/bluetooth/hci_sock.c:261
 hci_send_monitor_ctrl_event+0x3dd/0x500 net/bluetooth/hci_sock.c:391
 mgmt_send_event+0x2b3/0x330 net/bluetooth/mgmt_util.c:86
 mgmt_index_event net/bluetooth/mgmt.c:253 [inline]
 mgmt_index_removed+0x200/0x240 net/bluetooth/mgmt.c:6594
 hci_sock_bind+0xce1/0x1170 net/bluetooth/hci_sock.c:1169
 SYSC_bind net/socket.c:1489 [inline]
 SyS_bind+0x174/0x1f0 net/socket.c:1475
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45e219
RSP: 002b:00007f619a974c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
RBP: 00007f619a974ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007ffdf182280f R14: 00007f619a9759c0 R15: 000000000119bf8c
rcu_preempt kthread starved for 10542 jiffies! g67240 c67239 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
rcu_preempt     R  running task    30008     8      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_timeout+0x4af/0xe90 kernel/time/timer.c:1747
 rcu_gp_kthread+0xc0a/0x1e60 kernel/rcu/tree.c:2255
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404

Crashes (12):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-linux-4-14	2021/01/29 15:35	linux-4.14.y	2d2791fce891	6593fd32	.config	log	report	info	INFO: rcu detected stall in bind
ci2-linux-4-14	2021/01/24 06:00	linux-4.14.y	2d2791fce891	52e37319	.config	log	report	info	INFO: rcu detected stall in bind
ci2-linux-4-14	2021/05/18 00:36	linux-4.14.y	7d7d1c0ab3eb	a343ba6b	.config	log	report	info	BUG: soft lockup in bind
ci2-linux-4-14	2021/05/14 10:12	linux-4.14.y	7d7d1c0ab3eb	8bdd5343	.config	log	report	info	BUG: soft lockup in bind
ci2-linux-4-14	2021/05/13 10:48	linux-4.14.y	7d7d1c0ab3eb	ed7d41c5	.config	log	report	info	BUG: soft lockup in bind
ci2-linux-4-14	2021/04/23 15:18	linux-4.14.y	cf256fbcbe34	17f0b706	.config	log	report	info	BUG: soft lockup in bind
ci2-linux-4-14	2021/04/21 06:04	linux-4.14.y	cf256fbcbe34	c0ced557	.config	log	report	info	BUG: soft lockup in bind
ci2-linux-4-14	2021/03/31 00:52	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report	info	BUG: soft lockup in bind
ci2-linux-4-14	2021/03/30 08:34	linux-4.14.y	670d6552eda8	6a81331a	.config	log	report	info	BUG: soft lockup in bind
ci2-linux-4-14	2021/01/12 00:43	linux-4.14.y	ec822b3e8bf4	2c1f2513	.config	log	report	info
ci2-linux-4-14	2020/10/12 06:12	linux-4.14.y	cbfa1702aaf6	4a77ae0b	.config	log	report	info
ci2-linux-4-14	2020/09/27 12:10	linux-4.14.y	cbfa1702aaf6	5dd8aee8	.config	log	report	info