syzbot


INFO: rcu detected stall in sys_sendto (3)

Status: closed as invalid on 2020/05/21 18:32
Subsystems: kernel
[Documentation on labels]
First crash: 1471d, last: 1471d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in sys_sendto (2) kernel 93 1568d 1568d 0/26 closed as dup on 2020/01/08 06:15
upstream INFO: rcu detected stall in sys_sendto (6) net 1 152d 152d 0/26 closed as invalid on 2024/02/01 10:31
linux-6.1 INFO: rcu detected stall in sys_sendto origin:upstream C 1 17d 89d 0/3 upstream: reported C repro on 2024/01/26 15:19
upstream INFO: rcu detected stall in sys_sendto kernel 357 1603d 1604d 0/26 closed as invalid on 2019/12/04 14:14
upstream INFO: rcu detected stall in sys_sendto (5) perf 7 814d 935d 0/26 closed as invalid on 2022/02/08 10:00
upstream INFO: rcu detected stall in sys_sendto (4) perf 1 1393d 1393d 0/26 auto-closed as invalid on 2020/09/29 07:17

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P8789
	(detected by 0, t=10503 jiffies, g=13409, q=313)
syz-executor.1  R  running task    26240  8789   7181 0x00004000
Call Trace:
 context_switch kernel/sched/core.c:3372 [inline]
 __schedule+0x937/0x1ff0 kernel/sched/core.c:4088
 print_usage_bug+0x240/0x240 kernel/locking/lockdep.c:101
 __sched_text_start+0x8/0x8
 mark_held_locks+0x9f/0xe0 kernel/locking/lockdep.c:3628
 preempt_schedule_irq+0xb0/0x150 kernel/sched/core.c:4346
 retint_kernel+0x1b/0x2b
RIP: 0010:nf_hook_slow+0x44/0x1e0 net/netfilter/core.c:511
Code: 52 5e 1a fb 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 61 01 00 00 44 0f b7 65 00 <89> df 44 89 e6 e8 12 5f 1a fb 44 39 e3 0f 83 09 01 00 00 49 bf 00
RSP: 0018:ffffc90005e57380 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90004530000
RDX: 1ffff1101519bdc0 RSI: ffffffff8658d5ae RDI: ffff8880934d1da0
RBP: ffff8880a8cdee00 R08: ffff88804cce2100 R09: ffffed1015cc7104
R10: ffff8880ae63881b R11: ffffed1015cc7103 R12: 0000000000000004
R13: ffff8880934d1da0 R14: ffffc90005e57408 R15: ffff88805d010000
 nf_hook_slow+0x1e/0x1e0 net/netfilter/core.c:511
 nf_hook include/linux/netfilter.h:262 [inline]
 NF_HOOK_COND include/linux/netfilter.h:295 [inline]
 ip_output+0x3df/0x620 net/ipv4/ip_output.c:430
 ip_mc_output+0xed0/0xed0 net/ipv4/ip_output.c:394
 retint_kernel+0x2b/0x2b
 __ip_finish_output+0xbd0/0xbd0 include/linux/compiler.h:199
 dst_output include/net/dst.h:435 [inline]
 ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:125
 __ip_queue_xmit+0x863/0x1c20 net/ipv4/ip_output.c:530
 mptcp_options_write net/ipv4/tcp_output.c:450 [inline]
 tcp_options_write+0x2cd/0xa90 net/ipv4/tcp_output.c:564
 __tcp_transmit_skb+0x1a07/0x3760 net/ipv4/tcp_output.c:1238
 __tcp_select_window+0x880/0x880 include/linux/memcontrol.h:1338
 tcp_fastopen_cookie_check+0x24/0x3f0 net/ipv4/tcp_fastopen.c:411
 find_held_lock+0x2d/0x110 kernel/locking/lockdep.c:4458
 tcp_transmit_skb net/ipv4/tcp_output.c:1254 [inline]
 tcp_send_syn_data net/ipv4/tcp_output.c:3625 [inline]
 tcp_connect+0x1dbe/0x4290 net/ipv4/tcp_output.c:3664
 __tcp_transmit_skb+0x3760/0x3760 include/net/dst.h:171
 siphash_1u64+0x13/0x260 lib/siphash.c:125
 secure_ipv6_port_ephemeral+0x250/0x250 net/core/secure_seq.c:113
 get_current arch/x86/include/asm/current.h:15 [inline]
 write_comp_data+0x9/0x70 kernel/kcov.c:207
 prandom_u32_state+0xe/0x170 lib/random32.c:63
 tcp_v4_connect+0x14f0/0x1c10 net/ipv4/tcp_ipv4.c:311
 tcp_v4_md5_lookup+0x240/0x240 include/net/sock.h:2521
 __inet_stream_connect+0x80f/0xe30 net/ipv4/af_inet.c:655
 trace_hardirqs_on_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:41
 ipv4_mib_init_net+0x570/0x570 net/ipv4/af_inet.c:1776
 retint_kernel+0x2b/0x2b
 tcp_sendmsg_fastopen net/ipv4/tcp.c:1164 [inline]
 tcp_sendmsg_locked+0x243a/0x3210 net/ipv4/tcp.c:1206
 test_bit include/asm-generic/bitops/instrumented-non-atomic.h:110 [inline]
 hlock_class kernel/locking/lockdep.c:179 [inline]
 mark_lock+0x12b/0xf10 kernel/locking/lockdep.c:3912
 print_usage_bug+0x240/0x240 kernel/locking/lockdep.c:101
 lock_downgrade+0x840/0x840 kernel/locking/lockdep.c:4579
 tcp_sendpage+0x60/0x60 net/ipv4/tcp.c:1119
 mark_held_locks+0x9f/0xe0 kernel/locking/lockdep.c:3628
 __local_bh_enable_ip+0x159/0x270 kernel/softirq.c:194
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1433
 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:807
 inet_send_prepare+0x4d0/0x4d0 include/linux/netdevice.h:722
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:672
 __sys_sendto+0x220/0x330 net/socket.c:2000
 __ia32_sys_getpeername+0xb0/0xb0 net/socket.c:1958
 _copy_to_user+0x126/0x160 lib/usercopy.c:31
 put_timespec64+0xcb/0x120 kernel/time/time.c:812
 ns_to_kernel_old_timeval+0x100/0x100 kernel/time/time.c:521
 set_irq_regs arch/x86/include/asm/irq_regs.h:27 [inline]
 smp_apic_timer_interrupt+0x1b6/0x600 arch/x86/kernel/apic/apic.c:1142
 __do_sys_clock_gettime kernel/time/posix-timers.c:1094 [inline]
 __se_sys_clock_gettime kernel/time/posix-timers.c:1082 [inline]
 __x64_sys_clock_gettime+0x165/0x240 kernel/time/posix-timers.c:1082
 __ia32_sys_clock_settime+0x260/0x260 kernel/time/posix-timers.c:1410
 __do_sys_sendto net/socket.c:2012 [inline]
 __se_sys_sendto net/socket.c:2008 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2008
 __trace_hardirqs_on_caller kernel/locking/lockdep.c:3657 [inline]
 lockdep_hardirqs_on+0x463/0x620 kernel/locking/lockdep.c:3702
 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x49/0xb3
RIP: 0033:0x45c889
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f73408adc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f73408ae6d4 RCX: 000000000045c889
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 000000000076bf00 R08: 0000000020e68000 R09: 0000000000000010
R10: 00000000220007fd R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000a08 R14: 00000000004ccc2e R15: 000000000076bf0c
rcu: rcu_preempt kthread starved for 10500 jiffies! g13409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: RCU grace-period kthread stack dump:
rcu_preempt     R  running task    28848    10      2 0x80004000
Call Trace:
 context_switch kernel/sched/core.c:3372 [inline]
 __schedule+0x937/0x1ff0 kernel/sched/core.c:4088
 __sched_text_start+0x8/0x8
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:117 [inline]
 _raw_spin_lock_irqsave+0x94/0xbf kernel/locking/spinlock.c:159
 check_preemption_disabled lib/smp_processor_id.c:52 [inline]
 debug_smp_processor_id+0x2f/0x185 lib/smp_processor_id.c:57
 schedule+0xd0/0x2a0 kernel/sched/core.c:4163
 schedule_timeout+0x35c/0x850 kernel/time/timer.c:1898
 usleep_range+0x160/0x160 kernel/time/timer.c:2093
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irqrestore+0x62/0xe0 kernel/locking/spinlock.c:191
 __next_timer_interrupt+0x190/0x190 kernel/time/timer.c:1512
 prepare_to_swait_exclusive+0x110/0x110 kernel/sched/swait.c:98
 rcu_gp_fqs_loop kernel/rcu/tree.c:1674 [inline]
 rcu_gp_kthread+0x9bf/0x1960 kernel/rcu/tree.c:1836
 rcu_barrier+0x4b0/0x4b0 arch/x86/include/asm/paravirt.h:764
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irqrestore+0x62/0xe0 kernel/locking/spinlock.c:191
 __trace_hardirqs_on_caller kernel/locking/lockdep.c:3657 [inline]
 lockdep_hardirqs_on+0x463/0x620 kernel/locking/lockdep.c:3702
 __kthread_parkme+0x13f/0x1e0 kernel/kthread.c:212
 rcu_barrier+0x4b0/0x4b0 arch/x86/include/asm/paravirt.h:764
 kthread+0x388/0x470 kernel/kthread.c:268
 kthread_mod_delayed_work+0x1a0/0x1a0 kernel/kthread.c:1090
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/04/14 12:23 upstream 8f3d9f354286 3f3c5574 .config console log report ci-upstream-kasan-gce-root
* Struck through repros no longer work on HEAD.