INFO: rcu detected stall in ext4_filemap_fault

9 views
Skip to first unread message

syzbot

unread,
Apr 10, 2019, 12:04:13 PM4/10/19
to syzkaller-a...@googlegroups.com
Hello,

syzbot found the following crash on:

HEAD commit: 815e34f8 Merge 4.14.90 into android-4.14
git tree: android-4.14
console output: https://syzkaller.appspot.com/x/log.txt?x=1349fec7400000
kernel config: https://syzkaller.appspot.com/x/.config?x=608dc5a2664d6079
dashboard link: https://syzkaller.appspot.com/bug?extid=42fdaae8652774a946d7
compiler: gcc (GCC) 8.0.1 20180413 (experimental)

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+42fdaa...@syzkaller.appspotmail.com

[30611] 0 30611 17634 12692 31 3 0
1000 syz-executor5
[30616] 0 30616 17667 8219 25 4 0
0 syz-executor4
[30638] 0 30638 17667 8219 25 4 0
0 syz-executor4
[30696] 0 30696 17634 12692 31 3 0
1000 syz-executor5
[30723] 0 30723 17634 12692 31 3 0
1000 syz-executor5
INFO: rcu_preempt detected stalls on CPUs/tasks:
Tasks blocked on level-0 rcu_node (CPUs 0-1): P1771
(detected by 0, t=10502 jiffies, g=53027, c=53026, q=32)
syz-fuzzer R running task 23984 1771 1769 0x10000000
Call Trace:
<IRQ>
sched_show_task.cold.31+0x342/0x3c0 kernel/sched/core.c:5230
rcu_print_detail_task_stall_rnp+0xbf/0xf8 kernel/rcu/tree_plugin.h:568
rcu_print_detail_task_stall kernel/rcu/tree_plugin.h:581 [inline]
print_other_cpu_stall kernel/rcu/tree.c:1488 [inline]
check_cpu_stall kernel/rcu/tree.c:1616 [inline]
__rcu_pending kernel/rcu/tree.c:3382 [inline]
rcu_pending kernel/rcu/tree.c:3444 [inline]
rcu_check_callbacks.cold.56+0x7ad/0xd99 kernel/rcu/tree.c:2784
update_process_times+0x24/0x60 kernel/time/timer.c:1588
tick_sched_handle.isra.8+0x73/0x150 kernel/time/tick-sched.c:161
tick_sched_timer+0x7e/0x160 kernel/time/tick-sched.c:1321
__run_hrtimer kernel/time/hrtimer.c:1259 [inline]
__hrtimer_run_queues+0x2d0/0xc10 kernel/time/hrtimer.c:1323
hrtimer_interrupt+0x19a/0x440 kernel/time/hrtimer.c:1357
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
smp_apic_timer_interrupt+0x13a/0x600 arch/x86/kernel/apic/apic.c:1062
apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
</IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:778
[inline]
RIP: 0010:console_unlock+0x753/0xc80 kernel/printk/printk.c:2399
RSP: 0018:ffff8881d0b1f640 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10
RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffff1103a2ad413
RDX: 0000000000000000 RSI: ffff8881d156a078 RDI: 0000000000000297
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb83647f0
R13: ffffffffbafb7fa0 R14: dffffc0000000000 R15: 000000000000006a
vprintk_emit+0x125/0x320 kernel/printk/printk.c:1917
vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401
printk+0xa7/0xcf kernel/printk/printk.c:1990
dump_tasks mm/oom_kill.c:396 [inline]
dump_header+0x70b/0x7a8 mm/oom_kill.c:428
oom_kill_process.cold.8+0x10/0xc88 mm/oom_kill.c:861
out_of_memory+0x669/0xa60 mm/oom_kill.c:1075
__alloc_pages_may_oom mm/page_alloc.c:3356 [inline]
__alloc_pages_slowpath mm/page_alloc.c:4045 [inline]
__alloc_pages_nodemask+0x182f/0x2180 mm/page_alloc.c:4210
__alloc_pages include/linux/gfp.h:461 [inline]
__alloc_pages_node include/linux/gfp.h:474 [inline]
alloc_pages_node include/linux/gfp.h:488 [inline]
__page_cache_alloc include/linux/pagemap.h:226 [inline]
page_cache_read mm/filemap.c:2286 [inline]
filemap_fault+0xcdd/0x14a0 mm/filemap.c:2470
ext4_filemap_fault+0x7d/0xb0 fs/ext4/inode.c:6179
__do_fault+0x80/0x210 mm/memory.c:3194
do_read_fault mm/memory.c:3604 [inline]
do_fault mm/memory.c:3730 [inline]
handle_pte_fault mm/memory.c:3960 [inline]
__handle_mm_fault+0x991/0x25f0 mm/memory.c:4084
handle_mm_fault+0x2f2/0x6eb mm/memory.c:4121
__do_page_fault+0x45d/0xb60 arch/x86/mm/fault.c:1425
page_fault+0x42/0x50 arch/x86/entry/entry_64.S:1104
RIP: 0020:0x13
RSP: 355bfa70:00007ffead068888 EFLAGS: 00000000
syz-fuzzer R running task 23984 1771 1769 0x10000000
Call Trace:
<IRQ>
sched_show_task.cold.31+0x342/0x3c0 kernel/sched/core.c:5230
rcu_print_detail_task_stall_rnp+0xbf/0xf8 kernel/rcu/tree_plugin.h:568
rcu_print_detail_task_stall kernel/rcu/tree_plugin.h:583 [inline]
print_other_cpu_stall kernel/rcu/tree.c:1488 [inline]
check_cpu_stall kernel/rcu/tree.c:1616 [inline]
__rcu_pending kernel/rcu/tree.c:3382 [inline]
rcu_pending kernel/rcu/tree.c:3444 [inline]
rcu_check_callbacks.cold.56+0x805/0xd99 kernel/rcu/tree.c:2784
update_process_times+0x24/0x60 kernel/time/timer.c:1588
tick_sched_handle.isra.8+0x73/0x150 kernel/time/tick-sched.c:161
tick_sched_timer+0x7e/0x160 kernel/time/tick-sched.c:1321
__run_hrtimer kernel/time/hrtimer.c:1259 [inline]
__hrtimer_run_queues+0x2d0/0xc10 kernel/time/hrtimer.c:1323
hrtimer_interrupt+0x19a/0x440 kernel/time/hrtimer.c:1357
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
smp_apic_timer_interrupt+0x13a/0x600 arch/x86/kernel/apic/apic.c:1062
apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787
</IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:778
[inline]
RIP: 0010:console_unlock+0x753/0xc80 kernel/printk/printk.c:2399
RSP: 0018:ffff8881d0b1f640 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10
RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffff1103a2ad413
RDX: 0000000000000000 RSI: ffff8881d156a078 RDI: 0000000000000297
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffb83647f0
R13: ffffffffbafb7fa0 R14: dffffc0000000000 R15: 000000000000006a
vprintk_emit+0x125/0x320 kernel/printk/printk.c:1917
vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401
printk+0xa7/0xcf kernel/printk/printk.c:1990
dump_tasks mm/oom_kill.c:396 [inline]
dump_header+0x70b/0x7a8 mm/oom_kill.c:428
oom_kill_process.cold.8+0x10/0xc88 mm/oom_kill.c:861
out_of_memory+0x669/0xa60 mm/oom_kill.c:1075
__alloc_pages_may_oom mm/page_alloc.c:3356 [inline]
__alloc_pages_slowpath mm/page_alloc.c:4045 [inline]
__alloc_pages_nodemask+0x182f/0x2180 mm/page_alloc.c:4210
__alloc_pages include/linux/gfp.h:461 [inline]
__alloc_pages_node include/linux/gfp.h:474 [inline]
alloc_pages_node include/linux/gfp.h:488 [inline]
__page_cache_alloc include/linux/pagemap.h:226 [inline]
page_cache_read mm/filemap.c:2286 [inline]
filemap_fault+0xcdd/0x14a0 mm/filemap.c:2470
ext4_filemap_fault+0x7d/0xb0 fs/ext4/inode.c:6179
__do_fault+0x80/0x210 mm/memory.c:3194
do_read_fault mm/memory.c:3604 [inline]
do_fault mm/memory.c:3730 [inline]
handle_pte_fault mm/memory.c:3960 [inline]
__handle_mm_fault+0x991/0x25f0 mm/memory.c:4084
handle_mm_fault+0x2f2/0x6eb mm/memory.c:4121
__do_page_fault+0x45d/0xb60 arch/x86/mm/fault.c:1425
page_fault+0x42/0x50 arch/x86/entry/entry_64.S:1104
RIP: 0020:0x13
RSP: 355bfa70:00007ffead068888 EFLAGS: 00000000
[30800] 0 30800 17634 12692 31 3 0
1000 syz-executor5
[30883] 0 30883 17634 12692 31 3 0
1000 syz-executor5
[30981] 0 30981 17634 12692 31 3 0
1000 syz-executor5
[30985] 0 30985 17634 8235 26 4 0
0 syz-executor4
[31015] 0 31015 17601 8233 26 4 0
0 syz-executor4
[31043] 0 31043 17634 12692 31 3 0
1000 syz-executor5
[31086] 0 31086 17634 12692 31 3 0
1000 syz-executor5
[31162] 0 31162 17634 12692 31 3 0
1000 syz-executor5
[31198] 0 31198 17601 8231 25 4 0
0 syz-executor4
[31216] 0 31216 17601 8199 24 3 0
0 syz-executor4
[31223] 0 31223 17667 8203 24 3 0
0 syz-executor4
[31230] 0 31230 17601 8230 24 4 0
0 syz-executor4
[31234] 0 31234 17634 12692 31 3 0
1000 syz-executor5
[31260] 0 31260 17667 8234 25 4 0
1000 syz-executor1
[31288] 0 31288 17634 12692 31 3 0
1000 syz-executor5
[31363] 0 31363 17634 12692 31 3 0
1000 syz-executor5
[31422] 0 31422 17634 12692 31 3 0
1000 syz-executor5
[31490] 0 31490 17667 8234 24 4 0
1000 syz-executor0
[31492] 0 31492 17634 12692 31 3 0
1000 syz-executor5
[31493] 0 31493 17667 8234 24 4 0
1000 syz-executor0
[31552] 0 31552 17634 12692 31 3 0
1000 syz-executor5
[31579] 0 31579 17634 12692 31 3 0
1000 syz-executor5
[31585] 0 31585 17601 8199 24 3 0
1000 syz-executor2
[31586] 0 31586 17601 8231 25 4 0
1000 syz-executor2
[31615] 0 31615 17667 8238 28 4 0
1000 syz-executor1
[31700] 0 31700 17634 12692 31 3 0
1000 syz-executor5
[31826] 0 31826 17634 12692 31 3 0
1000 syz-executor5
[31885] 0 31885 17700 8237 25 4 0
1000 syz-executor0
[31898] 0 31898 17634 12692 31 3 0
1000 syz-executor5
[31904] 0 31904 17601 8198 23 3 0
1000 syz-executor0
[31909] 0 31909 17601 8198 23 3 0
1000 syz-executor0
[31970] 0 31970 17634 12692 31 3 0
1000 syz-executor5
[32051] 0 32051 17634 12692 31 3 0
1000 syz-executor5
[32133] 0 32133 17634 12692 31 3 0
1000 syz-executor5
[32227] 0 32227 17634 12692 31 3 0
1000 syz-executor5
[32278] 0 32278 17634 12692 31 3 0
1000 syz-executor5
[32286] 0 32286 17700 8237 25 4 0
0 syz-executor4
[32332] 0 32332 17634 12692 31 3 0
1000 syz-executor5
[32381] 0 32381 17634 12693 31 3 0
1000 syz-executor5
[32416] 0 32416 17601 8230 24 4 0
1000 syz-executor0
[32421] 0 32421 17601 8198 23 3 0
1000 syz-executor1
[32436] 0 32436 17634 12692 31 3 0
1000 syz-executor5
[32442] 0 32442 17601 8201 24 3 0
1000 syz-executor1
[32472] 0 32472 17601 8198 23 3 0
1000 syz-executor1
[32517] 0 32517 17634 12692 31 3 0
1000 syz-executor5
[32559] 0 32559 17700 8238 30 4 0
0 syz-executor0
[32595] 0 32595 17634 12692 31 3 0
1000 syz-executor5
[32664] 0 32664 17667 8237 25 4 0
1000 syz-executor1
[32667] 0 32667 17634 12692 31 3 0
1000 syz-executor5
[32671] 0 32671 17667 8237 25 4 0
1000 syz-executor1
[32675] 0 32675 17634 8233 25 4 0
1000 syz-executor2
[32753] 0 32753 17634 12692 31 3 0
1000 syz-executor5
[ 335] 0 335 17634 12692 31 3 0
1000 syz-executor5
[ 444] 0 444 17634 12692 31 3 0
1000 syz-executor5
[ 516] 0 516 17634 12692 31 3 0
1000 syz-executor5
[ 581] 0 581 17634 12692 31 3 0
1000 syz-executor5
[ 605] 0 605 17601 8200 25 3 0
0 syz-executor0
[ 612] 0 612 17634 12692 31 3 0
1000 syz-executor5
[ 626] 0 626 17634 8233 25 4 0
0 syz-executor4
[ 632] 0 632 17601 8231 25 4 0
0 syz-executor4
[ 699] 0 699 17634 12692 31 3 0
1000 syz-executor5
[ 817] 0 817 17634 12692 31 3 0
1000 syz-executor5
[ 851] 0 851 17634 12692 31 3 0
1000 syz-executor5
[ 936] 0 936 17634 12692 31 3 0
1000 syz-executor5
[ 992] 0 992 17634 12692 31 3 0
1000 syz-executor5
[ 1021] 0 1021 17601 8230 24 4 0
0 syz-executor0
[ 1038] 0 1038 17634 12692 31 3 0
1000 syz-executor5
[ 1113] 0 1113 17634 12692 31 3 0
1000 syz-executor5
[ 1164] 0 1164 17634 12692 31 3 0
1000 syz-executor5
[ 1191] 0 1191 17601 8230 24 4 0
0 syz-executor4
[ 1215] 0 1215 17634 12692 31 3 0
1000 syz-executor5
[ 1263] 0 1263 17634 12692 31 3 0
1000 syz-executor5
[ 1345] 0 1345 17634 12692 31 3 0
1000 syz-executor5
[ 1366] 0 1366 17634 8218 25 4 0
0 syz-executor4
[ 1376] 0 1376 17634 8218 25 4 0
0 syz-executor4
[ 1403] 0 1403 17634 12692 31 3 0
1000 syz-executor5
[ 1407] 0 1407 17700 10494 29 4 0
0 syz-executor4
[ 1429] 0 1429 17700 8224 26 4 0
1000 syz-executor2
[ 1465] 0 1465 17634 12692 31 3 0
1000 syz-executor5
[ 1521] 0 1521 17634 12692 31 3 0
1000 syz-executor5
[ 1569] 0 1569 17634 12693 31 3 0
1000 syz-executor5
[ 1638] 0 1638 17601 8230 24 4 0
0 syz-executor0
[ 1650] 0 1650 17667 8234 24 4 0
0 syz-executor0
[ 1661] 0 1661 17634 12692 31 3 0
1000 syz-executor5
[ 1749] 0 1749 17634 12692 31 3 0
1000 syz-executor5
[ 1813] 0 1813 17634 12692 31 3 0
1000 syz-executor5
[ 1882] 0 1882 17634 12692 31 3 0
1000 syz-executor5


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Jun 22, 2019, 6:11:03 PM6/22/19
to syzkaller-a...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages