syzbot

 sign-in | mailing list | source | docs
🐞 Open [568] 🐞 Fixed [180] 🐞 Invalid [586] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes

INFO: rcu detected stall in bind

Status: auto-closed as invalid on 2021/09/15 00:37
Reported-by: syzbot+c478ade1c9e5e39d8496@syzkaller.appspotmail.com
First crash: 648d, last: 415d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 BUG: soft lockup in bind 11 67d 204d 0/1 upstream: reported on 2021/12/15 16:15

Sample crash report:
RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
RBP: 00007f619a974ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007ffdf182280f R14: 00007f619a9759c0 R15: 000000000119bf8c
INFO: rcu_sched self-detected stall on CPU
	1-...: (10482 ticks this GP) idle=b0e/140000000000001/0 softirq=224549/224550 fqs=0 
	 (t=10500 jiffies g=53542 c=53541 q=2)
rcu_sched kthread starved for 10500 jiffies! g53542 c53541 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
rcu_sched       R  running task    30008     9      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_timeout+0x4af/0xe90 kernel/time/timer.c:1747
 rcu_gp_kthread+0xc0a/0x1e60 kernel/rcu/tree.c:2255
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
NMI backtrace for cpu 1
CPU: 1 PID: 10851 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x13a/0x180 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline]
 rcu_dump_cpu_stacks+0x15f/0x19c kernel/rcu/tree.c:1396
 print_cpu_stall kernel/rcu/tree.c:1542 [inline]
 check_cpu_stall kernel/rcu/tree.c:1610 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0x464/0xd8d kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1591
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x92/0x200 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x30b/0xc80 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793
 </IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
RSP: 0018:ffff88807933fb20 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 1ffffffff11e1254 RBX: ffffffff89dd29ac RCX: 1ffff11013600dc7
RDX: dffffc0000000000 RSI: ffff88809b006e18 RDI: ffff88809b006dc4
RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000282
R13: dffffc0000000000 R14: ffffffff89dd29ad R15: ffffed10174a55d8
 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
 kvm_wait arch/x86/kernel/kvm.c:600 [inline]
 kvm_wait+0x179/0x240 arch/x86/kernel/kvm.c:580
 pv_wait arch/x86/include/asm/paravirt.h:679 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:447 [inline]
 __pv_queued_spin_lock_slowpath+0x722/0x910 kernel/locking/qspinlock.c:465
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:669 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:52 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:90 [inline]
 queued_read_lock_slowpath+0x150/0x190 kernel/locking/qrwlock.c:90
 hci_send_to_channel+0x3c/0x200 net/bluetooth/hci_sock.c:261
 hci_send_monitor_ctrl_event+0x3dd/0x500 net/bluetooth/hci_sock.c:391
 mgmt_send_event+0x2b3/0x330 net/bluetooth/mgmt_util.c:86
 mgmt_index_event net/bluetooth/mgmt.c:253 [inline]
 mgmt_index_removed+0x200/0x240 net/bluetooth/mgmt.c:6594
 hci_sock_bind+0xce1/0x1170 net/bluetooth/hci_sock.c:1169
 SYSC_bind net/socket.c:1489 [inline]
 SyS_bind+0x174/0x1f0 net/socket.c:1475
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45e219
RSP: 002b:00007f619a974c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
RBP: 00007f619a974ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007ffdf182280f R14: 00007f619a9759c0 R15: 000000000119bf8c
INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 1, t=10542 jiffies, g=67240, c=67239, q=30)
All QSes seen, last rcu_preempt kthread activity 10542 (4295181022-4295170480), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.0  R  running task    28912 10851   8034 0x0000000a
Call Trace:
 <IRQ>
 sched_show_task.cold+0x333/0x39a kernel/sched/core.c:5165
 print_other_cpu_stall kernel/rcu/tree.c:1501 [inline]
 check_cpu_stall kernel/rcu/tree.c:1616 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0xd29/0xd8d kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1591
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x92/0x200 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x30b/0xc80 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793
 </IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
RSP: 0018:ffff88807933fb20 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 1ffffffff11e1254 RBX: ffffffff89dd29ac RCX: 1ffff11013600dc7
RDX: dffffc0000000000 RSI: ffff88809b006e18 RDI: ffff88809b006dc4
RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000282
R13: dffffc0000000000 R14: ffffffff89dd29ad R15: ffffed10174a55d8
 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
 kvm_wait arch/x86/kernel/kvm.c:600 [inline]
 kvm_wait+0x179/0x240 arch/x86/kernel/kvm.c:580
 pv_wait arch/x86/include/asm/paravirt.h:679 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:447 [inline]
 __pv_queued_spin_lock_slowpath+0x722/0x910 kernel/locking/qspinlock.c:465
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:669 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:52 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:90 [inline]
 queued_read_lock_slowpath+0x150/0x190 kernel/locking/qrwlock.c:90
 hci_send_to_channel+0x3c/0x200 net/bluetooth/hci_sock.c:261
 hci_send_monitor_ctrl_event+0x3dd/0x500 net/bluetooth/hci_sock.c:391
 mgmt_send_event+0x2b3/0x330 net/bluetooth/mgmt_util.c:86
 mgmt_index_event net/bluetooth/mgmt.c:253 [inline]
 mgmt_index_removed+0x200/0x240 net/bluetooth/mgmt.c:6594
 hci_sock_bind+0xce1/0x1170 net/bluetooth/hci_sock.c:1169
 SYSC_bind net/socket.c:1489 [inline]
 SyS_bind+0x174/0x1f0 net/socket.c:1475
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45e219
RSP: 002b:00007f619a974c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
RBP: 00007f619a974ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007ffdf182280f R14: 00007f619a9759c0 R15: 000000000119bf8c
rcu_preempt kthread starved for 10542 jiffies! g67240 c67239 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
rcu_preempt     R  running task    30008     8      2 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_timeout+0x4af/0xe90 kernel/time/timer.c:1747
 rcu_gp_kthread+0xc0a/0x1e60 kernel/rcu/tree.c:2255
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404

Crashes (12):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2021/01/29 15:35 linux-4.14.y 2d2791fce891 6593fd32 .config log report info INFO: rcu detected stall in bind
ci2-linux-4-14 2021/01/24 06:00 linux-4.14.y 2d2791fce891 52e37319 .config log report info INFO: rcu detected stall in bind
ci2-linux-4-14 2021/05/18 00:36 linux-4.14.y 7d7d1c0ab3eb a343ba6b .config log report info BUG: soft lockup in bind
ci2-linux-4-14 2021/05/14 10:12 linux-4.14.y 7d7d1c0ab3eb 8bdd5343 .config log report info BUG: soft lockup in bind
ci2-linux-4-14 2021/05/13 10:48 linux-4.14.y 7d7d1c0ab3eb ed7d41c5 .config log report info BUG: soft lockup in bind
ci2-linux-4-14 2021/04/23 15:18 linux-4.14.y cf256fbcbe34 17f0b706 .config log report info BUG: soft lockup in bind
ci2-linux-4-14 2021/04/21 06:04 linux-4.14.y cf256fbcbe34 c0ced557 .config log report info BUG: soft lockup in bind
ci2-linux-4-14 2021/03/31 00:52 linux-4.14.y bd634aa64163 6a81331a .config log report info BUG: soft lockup in bind
ci2-linux-4-14 2021/03/30 08:34 linux-4.14.y 670d6552eda8 6a81331a .config log report info BUG: soft lockup in bind
ci2-linux-4-14 2021/01/12 00:43 linux-4.14.y ec822b3e8bf4 2c1f2513 .config log report info
ci2-linux-4-14 2020/10/12 06:12 linux-4.14.y cbfa1702aaf6 4a77ae0b .config log report info
ci2-linux-4-14 2020/09/27 12:10 linux-4.14.y cbfa1702aaf6 5dd8aee8 .config log report info