bisecting cause commit starting from c6dd78fcb8eefa15dd861889e0f59d301cb5230c
building syzkaller on b3c615f51bdc1f8225ef090b77bb8e6b3b597b60
testing commit c6dd78fcb8eefa15dd861889e0f59d301cb5230c with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in mem_write
run #1: crashed: INFO: rcu detected stall in __do_page_fault
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
testing release v5.2
testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in __do_page_fault
run #1: crashed: INFO: rcu detected stall in __do_page_fault
run #2: crashed: INFO: rcu detected stall in __do_page_fault
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
testing release v5.1
testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in do_swap_page
run #1: crashed: INFO: rcu detected stall in do_swap_page
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
testing release v5.0
testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in handle_mm_fault
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
testing release v4.20
testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0
all runs: OK
# git bisect start v5.0 v4.20
Bisecting: 7011 revisions left to test after this (roughly 13 steps)
[af7ddd8a627c62a835524b3f5b471edbbbcce025] Merge tag 'dma-mapping-4.21' of git://git.infradead.org/users/hch/dma-mapping
testing commit af7ddd8a627c62a835524b3f5b471edbbbcce025 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good af7ddd8a627c62a835524b3f5b471edbbbcce025
Bisecting: 3532 revisions left to test after this (roughly 12 steps)
[c9bef4a651769927445900564781a9c99fdf6258] Merge tag 'pinctrl-v4.21-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl
testing commit c9bef4a651769927445900564781a9c99fdf6258 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good c9bef4a651769927445900564781a9c99fdf6258
Bisecting: 1768 revisions left to test after this (roughly 11 steps)
[4d5f6e0201bc568c0758ed3f77a06648ec9fd482] Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
testing commit 4d5f6e0201bc568c0758ed3f77a06648ec9fd482 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 4d5f6e0201bc568c0758ed3f77a06648ec9fd482
Bisecting: 879 revisions left to test after this (roughly 10 steps)
[680905431b9de8c7224b15b76b1826a1481cfeaf] Merge tag 'char-misc-5.0-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
testing commit 680905431b9de8c7224b15b76b1826a1481cfeaf with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in handle_mm_fault
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 680905431b9de8c7224b15b76b1826a1481cfeaf
Bisecting: 435 revisions left to test after this (roughly 9 steps)
[037222ad3f43a45c3a601dabf893efc9264ff5a0] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
testing commit 037222ad3f43a45c3a601dabf893efc9264ff5a0 with gcc (GCC) 8.1.0
all runs: boot failed: WARNING: workqueue cpumask: online intersect > possible intersect
# git bisect skip 037222ad3f43a45c3a601dabf893efc9264ff5a0
Bisecting: 435 revisions left to test after this (roughly 9 steps)
[1fde6f21d90f8ba5da3cb9c54ca991ed72696c43] proc: fix /proc/net/* after setns(2)
testing commit 1fde6f21d90f8ba5da3cb9c54ca991ed72696c43 with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in __do_page_fault
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 1fde6f21d90f8ba5da3cb9c54ca991ed72696c43
Bisecting: 327 revisions left to test after this (roughly 8 steps)
[96f18cb89ffa4bc6dafa447c9493449809fbb318] Merge tag 'staging-5.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
testing commit 96f18cb89ffa4bc6dafa447c9493449809fbb318 with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in __do_page_fault
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 96f18cb89ffa4bc6dafa447c9493449809fbb318
Bisecting: 167 revisions left to test after this (roughly 7 steps)
[74827ee29565f86e2a64495a5e3e58d3371d74ee] ceph: quota: cleanup license mess
testing commit 74827ee29565f86e2a64495a5e3e58d3371d74ee with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 74827ee29565f86e2a64495a5e3e58d3371d74ee
Bisecting: 69 revisions left to test after this (roughly 6 steps)
[aa7b98459f15bf45d0610c8acfa7929a8641864a] Merge tag 'sound-5.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound
testing commit aa7b98459f15bf45d0610c8acfa7929a8641864a with gcc (GCC) 8.1.0
all runs: OK
# git bisect good aa7b98459f15bf45d0610c8acfa7929a8641864a
Bisecting: 40 revisions left to test after this (roughly 5 steps)
[d73aba1115cf40630cc8b4b7aed049ed8117b458] Merge tag 'drm-fixes-2019-01-25-1' of git://anongit.freedesktop.org/drm/drm
testing commit d73aba1115cf40630cc8b4b7aed049ed8117b458 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good d73aba1115cf40630cc8b4b7aed049ed8117b458
Bisecting: 19 revisions left to test after this (roughly 4 steps)
[4f9b838927812b5949a9899f14e0c9ef7f02b0c8] Merge tag 'usb-serial-5.0-rc3' of https://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus
testing commit 4f9b838927812b5949a9899f14e0c9ef7f02b0c8 with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in lock_is_held_type
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 4f9b838927812b5949a9899f14e0c9ef7f02b0c8
Bisecting: 9 revisions left to test after this (roughly 3 steps)
[70d0ba4cf79a0e73485b22d955991c6f27257376] USB: EHCI: ehci-mv: add MODULE_DEVICE_TABLE
testing commit 70d0ba4cf79a0e73485b22d955991c6f27257376 with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in do_swap_page
run #1: OK
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 70d0ba4cf79a0e73485b22d955991c6f27257376
Bisecting: 4 revisions left to test after this (roughly 3 steps)
[575088f60021e69a9ee8292ddc33b3196c53c239] Merge tag 'fixes-for-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus
testing commit 575088f60021e69a9ee8292ddc33b3196c53c239 with gcc (GCC) 8.1.0
run #0: crashed: INFO: rcu detected stall in lock_is_held_type
run #1: crashed: INFO: rcu detected stall in mem_cgroup_from_task
run #2: OK
run #3: OK
run #4: OK
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
# git bisect bad 575088f60021e69a9ee8292ddc33b3196c53c239
Bisecting: 2 revisions left to test after this (roughly 2 steps)
[88b1bb1f3b88e0bf20b05d543a53a5b99bd7ceb6] usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
testing commit 88b1bb1f3b88e0bf20b05d543a53a5b99bd7ceb6 with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 88b1bb1f3b88e0bf20b05d543a53a5b99bd7ceb6
Bisecting: 0 revisions left to test after this (roughly 1 step)
[87b6d2c56825c3119a0e64cc208ae6d795810a2e] usb: dwc2: gadget: Fix Remote Wakeup interrupt bit clearing
testing commit 87b6d2c56825c3119a0e64cc208ae6d795810a2e with gcc (GCC) 8.1.0
all runs: OK
# git bisect good 87b6d2c56825c3119a0e64cc208ae6d795810a2e
575088f60021e69a9ee8292ddc33b3196c53c239 is the first bad commit
revisions tested: 20, total time: 5h27m52.553203871s (build: 1h52m29.670439793s, test: 3h28m57.862023631s)
first bad commit: 575088f60021e69a9ee8292ddc33b3196c53c239 Merge tag 'fixes-for-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus
cc: ["gregkh@linuxfoundation.org"]
crash: INFO: rcu detected stall in mem_cgroup_from_task
rcu: INFO: rcu_sched self-detected stall on CPU
rcu: 0-...!: (10499 ticks this GP) idle=602/1/0x4000000000000002 softirq=32233/32233 fqs=2
rcu: (t=10501 jiffies g=44513 q=83)
rcu: rcu_sched kthread starved for 10498 jiffies! g44513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_sched R running task 29144 10 2 0x80000000
Call Trace:
context_switch /kernel/sched/core.c:2831 [inline]
__schedule+0x8f5/0x1b80 /kernel/sched/core.c:3472
schedule+0x7c/0x180 /kernel/sched/core.c:3516
schedule_timeout+0x367/0xce0 /kernel/time/timer.c:1803
rcu_gp_fqs_loop /kernel/rcu/tree.c:1948 [inline]
rcu_gp_kthread+0x7b4/0x11a0 /kernel/rcu/tree.c:2105
kthread+0x324/0x3e0 /kernel/kthread.c:246
ret_from_fork+0x24/0x30 /arch/x86/entry/entry_64.S:352
NMI backtrace for cpu 0
CPU: 0 PID: 23483 Comm: syz-executor.2 Not tainted 5.0.0-rc2+ #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack /lib/dump_stack.c:77 [inline]
dump_stack+0x115/0x167 /lib/dump_stack.c:113
nmi_cpu_backtrace.cold.4+0x3e/0x76 /lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x11a/0x136 /lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 /arch/x86/kernel/apic/hw_nmi.c:38
trigger_single_cpu_backtrace /./include/linux/nmi.h:164 [inline]
rcu_dump_cpu_stacks+0x16f/0x1bc /kernel/rcu/tree.c:1211
print_cpu_stall /kernel/rcu/tree.c:1348 [inline]
check_cpu_stall /kernel/rcu/tree.c:1422 [inline]
rcu_pending /kernel/rcu/tree.c:3018 [inline]
rcu_check_callbacks.cold.71+0x4a8/0x7c9 /kernel/rcu/tree.c:2521
update_process_times+0x2a/0x60 /kernel/time/timer.c:1635
tick_sched_handle+0x77/0x140 /kernel/time/tick-sched.c:161
tick_sched_timer+0x37/0xf0 /kernel/time/tick-sched.c:1271
__run_hrtimer /kernel/time/hrtimer.c:1389 [inline]
__hrtimer_run_queues+0x2f6/0xa60 /kernel/time/hrtimer.c:1451
hrtimer_interrupt+0x2b5/0x720 /kernel/time/hrtimer.c:1509
local_apic_timer_interrupt /arch/x86/kernel/apic/apic.c:1035 [inline]
smp_apic_timer_interrupt+0xda/0x4c0 /arch/x86/kernel/apic/apic.c:1060
apic_timer_interrupt+0xf/0x20 /arch/x86/entry/entry_64.S:807
RIP: 0010:lock_is_held_type+0x15/0x210 /kernel/locking/lockdep.c:3868
Code: 00 e9 63 ff ff ff e8 7a 9e 45 00 eb ad 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 55 49 89 fd 41 54 <53> 65 48 8b 1c 25 40 ee 01 00 48 8d bb 3c 08 00 00 48 83 ec 08 48
RSP: 0018:ffff88806deef960 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: dffffc0000000000 RBX: ffff888089a96740 RCX: ffffffff8154e0c1
RDX: 1ffffffff10243ae RSI: 00000000ffffffff RDI: ffffffff881bb1d8
RBP: ffff88806deef970 R08: ffffed1015d45b90 R09: ffffed1015d45b8f
R10: ffffed1015d45b8f R11: ffff8880aea2dc7b R12: ffff8880a9745200
R13: ffffffff881bb1d8 R14: 000000002002e080 R15: ffff8880913e7528
lock_is_held /./include/linux/lockdep.h:337 [inline]
task_css /./include/linux/cgroup.h:479 [inline]
mem_cgroup_from_task+0x9e/0x130 /mm/memcontrol.c:815
count_memcg_event_mm /./include/linux/memcontrol.h:763 [inline]
handle_mm_fault+0x135/0x8b0 /mm/memory.c:3928
do_user_addr_fault /arch/x86/mm/fault.c:1475 [inline]
__do_page_fault+0x3ee/0x9e0 /arch/x86/mm/fault.c:1541
do_page_fault+0x64/0x386 /arch/x86/mm/fault.c:1572
page_fault+0x1e/0x30 /arch/x86/entry/entry_64.S:1143
RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 /arch/x86/lib/copy_user_64.S:181
Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83
RSP: 0018:ffff88806deefb48 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 000000002002e080 RCX: 0000000000001000
RDX: 0000000000001000 RSI: 000000002002e080 RDI: ffff88809d06a000
RBP: ffff88806deefb70 R08: 0000000000000000 R09: 0000000000000040
R10: ffffed1013a0d5ff R11: ffff88809d06afff R12: 0000000000001000
R13: ffff88809d06a000 R14: ffff888092e22480 R15: ffff88809d06a000
copy_from_user /./include/linux/uaccess.h:144 [inline]
mem_rw.isra.18+0x1de/0x3a0 /fs/proc/base.c:824
mem_write+0x3d/0x70 /fs/proc/base.c:863
__vfs_write+0xe3/0x970 /fs/read_write.c:485
vfs_write+0x150/0x4e0 /fs/read_write.c:549
ksys_write+0xcd/0x1b0 /fs/read_write.c:598
__do_sys_write /fs/read_write.c:610 [inline]
__se_sys_write /fs/read_write.c:607 [inline]
__x64_sys_write+0x6e/0xb0 /fs/read_write.c:607
do_syscall_64+0xd0/0x4d0 /arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459819
Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f3b9dd04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819
RDX: 000000002000008f RSI: 0000000020000080 RDI: 0000000000000005
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3b9dd056d4
R13: 00000000004c9492 R14: 00000000004e0660 R15: 00000000ffffffff