INFO: task hung in fib6_rules_net_exit
6 views
Skip to first unread message
syzbot
Jan 19, 2022, 10:58:18 AM1/19/22
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=149cefb0700000
kernel config: https://syzkaller.appspot.com/x/.config?x=9b9277b418617afe
dashboard link: https://syzkaller.appspot.com/bug?extid=86573ae8f3ebb6e3e91f
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+86573a...@syzkaller.appspotmail.com
Name Used Total
pid_13 2KB 7KB
pid_12 7KB 11KB
pid_11 33KB 41KB
pid_10 79KB 82KB
INFO: task kworker/u4:4:19703 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
pid_9 124KB 127KB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:4 D25080 19703 2 0x80000000
pid_8 106KB 112KB
pid_7 78KB 84KB
pid_6 39KB 44KB
pid_5 13KB 20KB
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
pid_4 1KB 3KB
pid_3 3KB 7KB
pid_2 889KB 1088KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
ubi_wl_entry_slab 1KB 3KB
batadv_tl_cache 5KB 12KB
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
TIPC 2640KB 2640KB
rds_connection 0KB 3KB
SCTPv6 5843KB 5847KB
SCTP 7KB 11KB
sctp_chunk 0KB 7KB
sctp_bind_bucket 0KB 3KB
DCCPv6 7062KB 7065KB
DCCP 6716KB 6718KB
fib6_rules_net_exit+0xe/0x50 net/ipv6/fib6_rules.c:487
ops_exit_list+0xa5/0x150 net/core/net_namespace.c:153
L2TP/IP 1KB 7KB
RXRPC 2861KB 2866KB
rxrpc_call_jar 19834KB 19837KB
can_receiver 0KB 3KB
cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:554
bridge_fdb_cache 11KB 19KB
process_one_work+0x864/0x1570 kernel/workqueue.c:2153
fib6_nodes 180KB 240KB
ip6_dst_cache 169KB 360KB
worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
RAWv6 28628KB 28633KB
kthread+0x33f/0x460 kernel/kthread.c:259
UDPv6 3318KB 3322KB
TCPv6 5769KB 5772KB
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task syz-executor.5:9005 blocked for more than 140 seconds.
nf_conntrack 2KB 15KB
Not tainted 4.19.211-syzkaller #0
t10_alua_lu_gp_cache 0KB 3KB
sd_ext_cdb 0KB 7KB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26784 9005 4411 0x00000000
scsi_sense_cache 1056KB 1060KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
virtio_scsi_cmd 16KB 16KB
sgpool-128 8KB 8KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
sgpool-64 4KB 12KB
sgpool-32 2KB 15KB
sgpool-16 1KB 7KB
sgpool-8 0KB 7KB
mqueue_inode_cache 27KB 52KB
bio_post_read_ctx 14KB 15KB
bio-2 14KB 15KB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
jfs_mp 7KB 7KB
cifs_small_rq 15KB 16KB
cifs_request 67KB 67KB
cifs_mpx_ids 0KB 7KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
nfs_commit_data 3KB 14KB
nfs_write_data 34KB 44KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
ext4_system_zone 1KB 7KB
kioctx 1KB 7KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
bio-1 1KB 7KB
fasync_cache 0KB 4KB
pid_namespace 873KB 873KB
rpc_buffers 17KB 25KB
rpc_tasks 2KB 7KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
UNIX 95KB 108KB
tcp_bind_bucket 221KB 224KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
inet_peer_cache 63KB 68KB
ip_fib_trie 27KB 39KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
ip_fib_alias 129KB 158KB
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
ip_dst_cache 9KB 76KB
RAW 16963KB 16965KB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
UDP 4782KB 4785KB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
TCP 160KB 174KB
hugetlbfs_inode_cache 236KB 422KB
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
fscache_cookie_jar 1KB 7KB
eventpoll_pwq 13KB 35KB
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
INFO: task syz-executor.5:9600 blocked for more than 140 seconds.
eventpoll_epi 24KB 47KB
inotify_inode_mark 9KB 23KB
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
request_queue 222KB 222KB
blkdev_requests 1KB 3KB
syz-executor.5 D26784 9600 9322 0x00000000
blkdev_ioc 22KB 30KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
bio-0 2467KB 2467KB
biovec-max 1872KB 1872KB
biovec-64 2377KB 2378KB
biovec-16 422KB 423KB
bio_integrity_payload 1KB 8KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
khugepaged_mm_slot 360KB 364KB
user_namespace 12KB 25KB
uid_cache 0KB 4KB
dmaengine-unmap-2 0KB 3KB
audit_buffer 0KB 3KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
skbuff_fclone_cache 577KB 630KB
skbuff_head_cache 7978KB 8021KB
configfs_dir_cache 3KB 11KB
file_lock_cache 14KB 19KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
file_lock_ctx 10KB 15KB
fsnotify_mark_connector 4KB 15KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
net_namespace 24666KB 24666KB
shmem_inode_cache 8118KB 8493KB
task_delay_info 2128KB 2968KB
taskstats 13KB 53KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
proc_dir_entry 129543KB 129547KB
pde_opener 2KB 23KB
seq_file 58KB 70KB
sigqueue 503KB 504KB
kernfs_node_cache 416709KB 416713KB
mnt_cache 1017KB 1020KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
filp 5129KB 7410KB
names_cache 44816KB 44846KB
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
iint_cache 91KB 103KB
key_jar 6KB 11KB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
uts_namespace 8KB 15KB
nsproxy 239KB 241KB
vm_area_struct 44998KB 44998KB
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
mm_struct 10128KB 10205KB
fs_cache 2871KB 4064KB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
files_cache 10530KB 12442KB
signal_cache 16246KB 18500KB
INFO: task syz-executor.5:9945 blocked for more than 140 seconds.
sighand_cache 14552KB 14804KB
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task_struct 71419KB 71451KB
cred_jar 5753KB 8180KB
anon_vma_chain 37617KB 37618KB
syz-executor.5 D26392 9945 9322 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
anon_vma 19826KB 20093KB
pid 702KB 824KB
Acpi-Operand 156KB 198KB
Acpi-ParseExt 9KB 11KB
Acpi-Parse 41KB 47KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
Acpi-State 52KB 63KB
Acpi-Namespace 20KB 27KB
numa_policy 0KB 3KB
debug_objects_cache 33041KB 33046KB
trace_event_file 297KB 298KB
ftrace_event_field 398KB 401KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
pool_workqueue 3637KB 3640KB
page->ptl 9589KB 9614KB
kmalloc-2097152 2050KB 2050KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
kmalloc-524288 2056KB 2056KB
kmalloc-262144 1290KB 1290KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
kmalloc-131072 650KB 650KB
kmalloc-65536 2838KB 2838KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
kmalloc-32768 165264KB 165264KB
kmalloc-16384 58921KB 58921KB
kmalloc-8192 111837KB 111837KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
kmalloc-4096 551713KB 551735KB
kmalloc-2048 424660KB 424702KB
kmalloc-1024 177478KB 177486KB
kmalloc-512 136236KB 147232KB
kmalloc-256 89089KB 90258KB
kmalloc-128 42993KB 42997KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
kmalloc-96 12427KB 12956KB
kmalloc-64 31372KB 32524KB
kmalloc-32 27731KB 28649KB
kmalloc-192 58544KB 60020KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
kmem_cache 182KB 187KB
Out of memory (oom_kill_allocating_task): Kill process 30086 (syz-executor.5) score 0 or sacrifice child
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
Killed process 30086 (syz-executor.5) total-vm:56936kB, anon-rss:424kB, file-rss:14080kB, shmem-rss:0kB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
oom_reaper: reaped process 30086 (syz-executor.5), now anon-rss:0kB, file-rss:14080kB, shmem-rss:0kB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
systemd-cgroups invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
INFO: task syz-executor.5:10003 blocked for more than 140 seconds.
systemd-cgroups cpuset=/ mems_allowed=0-1
CPU: 0 PID: 7797 Comm: systemd-cgroups Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
Not tainted 4.19.211-syzkaller #0
dump_header+0x15d/0xc3f mm/oom_kill.c:443
oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
out_of_memory mm/oom_kill.c:1114 [inline]
out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
__alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
__alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
__alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
syz-executor.5 D26920 10003 9600 0x00000000
alloc_pages include/linux/gfp.h:532 [inline]
__page_cache_alloc mm/filemap.c:969 [inline]
page_cache_read mm/filemap.c:2408 [inline]
filemap_fault+0x146e/0x2180 mm/filemap.c:2592
ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
__do_fault+0x10b/0x4b0 mm/memory.c:3403
Call Trace:
do_read_fault mm/memory.c:3815 [inline]
do_fault mm/memory.c:3944 [inline]
handle_pte_fault mm/memory.c:4175 [inline]
__handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
handle_mm_fault+0x436/0xb10 mm/memory.c:4336
__do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x7fb5ba9a7415
Code: Bad RIP value.
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
RSP: 002b:00007ffcfba85370 EFLAGS: 00010202
RAX: 00007fb5ba1c32c8 RBX: 00007fb5babbf9e8 RCX: 000000000000004c
RDX: 00000000000003f3 RSI: 0000000000330a00 RDI: 00000000bba75332
RBP: 0000000000000003 R08: 00007ffcfba854c0 R09: 00007fb5babc3428
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
R10: 00007fb5b8735fd8 R11: 00007fb5b8532000 R12: 0000000000000012
R13: 0000000000000000 R14: 00007fb5babb96e0 R15: 0000000000000000
Mem-Info:
active_anon:362421 inactive_anon:8477 isolated_anon:0
active_file:16 inactive_file:16 isolated_file:0
unevictable:0 dirty:0 writeback:0 unstable:0
slab_reclaimable:53400 slab_unreclaimable:1007580
mapped:19029 shmem:17375 pagetables:87022 bounce:0
free:24889 free_pcp:905 free_cma:0
Node 0 active_anon:1301600kB inactive_anon:33732kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75968kB dirty:0kB writeback:0kB shmem:69312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 667648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:148084kB inactive_anon:176kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:0kB writeback:0kB shmem:188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:508kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:35032kB min:35996kB low:44992kB high:53988kB active_anon:1300896kB inactive_anon:33732kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:51552kB pagetables:131788kB bounce:0kB free_pcp:1348kB local_pcp:576kB free_cma:0kB
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:53604kB min:53876kB low:67344kB high:80812kB active_anon:148072kB inactive_anon:176kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:146592kB pagetables:215820kB bounce:0kB free_pcp:2288kB local_pcp:952kB free_cma:0kB
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 18*4kB (M) 24*8kB (UM) 6*16kB (UME) 12*32kB (UM) 6*64kB (UME) 1*128kB (M) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10984kB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
Node 0 DMA32: 3508*4kB (UM) 1145*8kB (UM) 328*16kB (M) 146*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 34968kB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
INFO: task syz-executor.5:10594 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
Node 1 Normal: 4581*4kB (UME) 1106*8kB (UME) 326*16kB (UM) 45*32kB (UME) 17*64kB (UME) 14*128kB (UM) 2*256kB (UE) 2*512kB (ME) 1*1024kB (M) 1*2048kB (E) 3*4096kB (M) = 53604kB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26888 10594 9170 0x00000000
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
17407 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
2097051 pages RAM
0 pages HighMem/MovableOnly
369649 pages reserved
0 pages cma reserved
Unreclaimable slab info:
Name Used Total
pid_13 2KB 7KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
pid_12 7KB 11KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
pid_11 33KB 41KB
pid_10 79KB 82KB
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
pid_9 124KB 127KB
pid_8 106KB 112KB
pid_7 78KB 84KB
pid_6 39KB 44KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
pid_5 13KB 20KB
pid_4 1KB 3KB
pid_3 3KB 7KB
pid_2 889KB 1088KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
ubi_wl_entry_slab 1KB 3KB
batadv_tl_cache 5KB 12KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
TIPC 2640KB 2640KB
rds_connection 0KB 3KB
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
SCTPv6 5843KB 5847KB
SCTP 7KB 11KB
sctp_chunk 0KB 7KB
sctp_bind_bucket 0KB 3KB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
DCCPv6 7062KB 7065KB
DCCP 6716KB 6718KB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
L2TP/IP 1KB 7KB
RXRPC 2861KB 2866KB
rxrpc_call_jar 19834KB 19837KB
can_receiver 0KB 3KB
bridge_fdb_cache 11KB 19KB
INFO: task syz-executor.5:10609 blocked for more than 140 seconds.
fib6_nodes 180KB 240KB
ip6_dst_cache 169KB 360KB
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26792 10609 9336 0x00000000
RAWv6 28628KB 28633KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
UDPv6 3318KB 3322KB
TCPv6 5769KB 5772KB
nf_conntrack 2KB 15KB
t10_alua_lu_gp_cache 0KB 3KB
sd_ext_cdb 0KB 7KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
scsi_sense_cache 1056KB 1060KB
virtio_scsi_cmd 16KB 16KB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
sgpool-128 8KB 8KB
sgpool-64 4KB 12KB
sgpool-32 2KB 15KB
sgpool-16 1KB 7KB
sgpool-8 0KB 7KB
mqueue_inode_cache 27KB 52KB
bio_post_read_ctx 14KB 15KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
bio-2 14KB 15KB
jfs_mp 7KB 7KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
cifs_small_rq 15KB 16KB
cifs_request 67KB 67KB
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
cifs_mpx_ids 0KB 7KB
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
nfs_commit_data 3KB 14KB
nfs_write_data 34KB 44KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
ext4_system_zone 1KB 7KB
kioctx 1KB 7KB
bio-1 1KB 7KB
fasync_cache 0KB 4KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
pid_namespace 873KB 873KB
rpc_buffers 17KB 25KB
rpc_tasks 2KB 7KB
UNIX 95KB 108KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
tcp_bind_bucket 220KB 224KB
inet_peer_cache 63KB 68KB
ip_fib_trie 27KB 39KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
ip_fib_alias 129KB 158KB
ip_dst_cache 9KB 76KB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
RAW 16963KB 16965KB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
UDP 4782KB 4785KB
TCP 160KB 174KB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
hugetlbfs_inode_cache 236KB 422KB
fscache_cookie_jar 1KB 7KB
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
eventpoll_pwq 13KB 35KB
eventpoll_epi 24KB 47KB
INFO: task syz-executor.5:10681 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
inotify_inode_mark 9KB 23KB
request_queue 222KB 222KB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26768 10681 9005 0x00000000
blkdev_requests 1KB 3KB
blkdev_ioc 22KB 30KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
bio-0 2465KB 2467KB
biovec-max 1872KB 1872KB
biovec-64 2377KB 2378KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
biovec-16 422KB 423KB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
bio_integrity_payload 1KB 8KB
khugepaged_mm_slot 360KB 364KB
user_namespace 12KB 25KB
uid_cache 0KB 4KB
dmaengine-unmap-2 0KB 3KB
audit_buffer 0KB 3KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
skbuff_fclone_cache 577KB 630KB
skbuff_head_cache 8087KB 8130KB
configfs_dir_cache 3KB 11KB
file_lock_cache 14KB 19KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
file_lock_ctx 10KB 15KB
fsnotify_mark_connector 4KB 15KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
net_namespace 24666KB 24666KB
shmem_inode_cache 8118KB 8493KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
task_delay_info 2123KB 2968KB
taskstats 13KB 53KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
proc_dir_entry 129542KB 129547KB
pde_opener 2KB 23KB
seq_file 58KB 70KB
sigqueue 502KB 504KB
kernfs_node_cache 416709KB 416713KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
mnt_cache 1016KB 1020KB
filp 5110KB 7410KB
names_cache 44807KB 44837KB
iint_cache 91KB 103KB
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
key_jar 6KB 11KB
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=149cefb0700000
kernel config: https://syzkaller.appspot.com/x/.config?x=9b9277b418617afe
dashboard link: https://syzkaller.appspot.com/bug?extid=86573ae8f3ebb6e3e91f
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)
Unfortunately, I don't have any reproducer for this issue yet.
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+86573a...@syzkaller.appspotmail.com
Name Used Total
pid_13 2KB 7KB
pid_12 7KB 11KB
pid_11 33KB 41KB
pid_10 79KB 82KB
INFO: task kworker/u4:4:19703 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
pid_9 124KB 127KB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:4 D25080 19703 2 0x80000000
pid_8 106KB 112KB
pid_7 78KB 84KB
pid_6 39KB 44KB
pid_5 13KB 20KB
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
pid_4 1KB 3KB
pid_3 3KB 7KB
pid_2 889KB 1088KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
ubi_wl_entry_slab 1KB 3KB
batadv_tl_cache 5KB 12KB
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
TIPC 2640KB 2640KB
rds_connection 0KB 3KB
SCTPv6 5843KB 5847KB
SCTP 7KB 11KB
sctp_chunk 0KB 7KB
sctp_bind_bucket 0KB 3KB
DCCPv6 7062KB 7065KB
DCCP 6716KB 6718KB
fib6_rules_net_exit+0xe/0x50 net/ipv6/fib6_rules.c:487
ops_exit_list+0xa5/0x150 net/core/net_namespace.c:153
L2TP/IP 1KB 7KB
RXRPC 2861KB 2866KB
rxrpc_call_jar 19834KB 19837KB
can_receiver 0KB 3KB
cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:554
bridge_fdb_cache 11KB 19KB
process_one_work+0x864/0x1570 kernel/workqueue.c:2153
fib6_nodes 180KB 240KB
ip6_dst_cache 169KB 360KB
worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
RAWv6 28628KB 28633KB
kthread+0x33f/0x460 kernel/kthread.c:259
UDPv6 3318KB 3322KB
TCPv6 5769KB 5772KB
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task syz-executor.5:9005 blocked for more than 140 seconds.
nf_conntrack 2KB 15KB
Not tainted 4.19.211-syzkaller #0
t10_alua_lu_gp_cache 0KB 3KB
sd_ext_cdb 0KB 7KB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26784 9005 4411 0x00000000
scsi_sense_cache 1056KB 1060KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
virtio_scsi_cmd 16KB 16KB
sgpool-128 8KB 8KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
sgpool-64 4KB 12KB
sgpool-32 2KB 15KB
sgpool-16 1KB 7KB
sgpool-8 0KB 7KB
mqueue_inode_cache 27KB 52KB
bio_post_read_ctx 14KB 15KB
bio-2 14KB 15KB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
jfs_mp 7KB 7KB
cifs_small_rq 15KB 16KB
cifs_request 67KB 67KB
cifs_mpx_ids 0KB 7KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
nfs_commit_data 3KB 14KB
nfs_write_data 34KB 44KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
ext4_system_zone 1KB 7KB
kioctx 1KB 7KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
bio-1 1KB 7KB
fasync_cache 0KB 4KB
pid_namespace 873KB 873KB
rpc_buffers 17KB 25KB
rpc_tasks 2KB 7KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
UNIX 95KB 108KB
tcp_bind_bucket 221KB 224KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
inet_peer_cache 63KB 68KB
ip_fib_trie 27KB 39KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
ip_fib_alias 129KB 158KB
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
ip_dst_cache 9KB 76KB
RAW 16963KB 16965KB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
UDP 4782KB 4785KB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
TCP 160KB 174KB
hugetlbfs_inode_cache 236KB 422KB
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
fscache_cookie_jar 1KB 7KB
eventpoll_pwq 13KB 35KB
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
INFO: task syz-executor.5:9600 blocked for more than 140 seconds.
eventpoll_epi 24KB 47KB
inotify_inode_mark 9KB 23KB
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
request_queue 222KB 222KB
blkdev_requests 1KB 3KB
syz-executor.5 D26784 9600 9322 0x00000000
blkdev_ioc 22KB 30KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
bio-0 2467KB 2467KB
biovec-max 1872KB 1872KB
biovec-64 2377KB 2378KB
biovec-16 422KB 423KB
bio_integrity_payload 1KB 8KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
khugepaged_mm_slot 360KB 364KB
user_namespace 12KB 25KB
uid_cache 0KB 4KB
dmaengine-unmap-2 0KB 3KB
audit_buffer 0KB 3KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
skbuff_fclone_cache 577KB 630KB
skbuff_head_cache 7978KB 8021KB
configfs_dir_cache 3KB 11KB
file_lock_cache 14KB 19KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
file_lock_ctx 10KB 15KB
fsnotify_mark_connector 4KB 15KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
net_namespace 24666KB 24666KB
shmem_inode_cache 8118KB 8493KB
task_delay_info 2128KB 2968KB
taskstats 13KB 53KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
proc_dir_entry 129543KB 129547KB
pde_opener 2KB 23KB
seq_file 58KB 70KB
sigqueue 503KB 504KB
kernfs_node_cache 416709KB 416713KB
mnt_cache 1017KB 1020KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
filp 5129KB 7410KB
names_cache 44816KB 44846KB
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
iint_cache 91KB 103KB
key_jar 6KB 11KB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
uts_namespace 8KB 15KB
nsproxy 239KB 241KB
vm_area_struct 44998KB 44998KB
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
mm_struct 10128KB 10205KB
fs_cache 2871KB 4064KB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
files_cache 10530KB 12442KB
signal_cache 16246KB 18500KB
INFO: task syz-executor.5:9945 blocked for more than 140 seconds.
sighand_cache 14552KB 14804KB
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task_struct 71419KB 71451KB
cred_jar 5753KB 8180KB
anon_vma_chain 37617KB 37618KB
syz-executor.5 D26392 9945 9322 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
anon_vma 19826KB 20093KB
pid 702KB 824KB
Acpi-Operand 156KB 198KB
Acpi-ParseExt 9KB 11KB
Acpi-Parse 41KB 47KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
Acpi-State 52KB 63KB
Acpi-Namespace 20KB 27KB
numa_policy 0KB 3KB
debug_objects_cache 33041KB 33046KB
trace_event_file 297KB 298KB
ftrace_event_field 398KB 401KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
pool_workqueue 3637KB 3640KB
page->ptl 9589KB 9614KB
kmalloc-2097152 2050KB 2050KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
kmalloc-524288 2056KB 2056KB
kmalloc-262144 1290KB 1290KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
kmalloc-131072 650KB 650KB
kmalloc-65536 2838KB 2838KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
kmalloc-32768 165264KB 165264KB
kmalloc-16384 58921KB 58921KB
kmalloc-8192 111837KB 111837KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
kmalloc-4096 551713KB 551735KB
kmalloc-2048 424660KB 424702KB
kmalloc-1024 177478KB 177486KB
kmalloc-512 136236KB 147232KB
kmalloc-256 89089KB 90258KB
kmalloc-128 42993KB 42997KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
kmalloc-96 12427KB 12956KB
kmalloc-64 31372KB 32524KB
kmalloc-32 27731KB 28649KB
kmalloc-192 58544KB 60020KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
kmem_cache 182KB 187KB
Out of memory (oom_kill_allocating_task): Kill process 30086 (syz-executor.5) score 0 or sacrifice child
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
Killed process 30086 (syz-executor.5) total-vm:56936kB, anon-rss:424kB, file-rss:14080kB, shmem-rss:0kB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
oom_reaper: reaped process 30086 (syz-executor.5), now anon-rss:0kB, file-rss:14080kB, shmem-rss:0kB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
systemd-cgroups invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
INFO: task syz-executor.5:10003 blocked for more than 140 seconds.
systemd-cgroups cpuset=/ mems_allowed=0-1
CPU: 0 PID: 7797 Comm: systemd-cgroups Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
Not tainted 4.19.211-syzkaller #0
dump_header+0x15d/0xc3f mm/oom_kill.c:443
oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
out_of_memory mm/oom_kill.c:1114 [inline]
out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
__alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
__alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
__alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
syz-executor.5 D26920 10003 9600 0x00000000
alloc_pages include/linux/gfp.h:532 [inline]
__page_cache_alloc mm/filemap.c:969 [inline]
page_cache_read mm/filemap.c:2408 [inline]
filemap_fault+0x146e/0x2180 mm/filemap.c:2592
ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6379
__do_fault+0x10b/0x4b0 mm/memory.c:3403
Call Trace:
do_read_fault mm/memory.c:3815 [inline]
do_fault mm/memory.c:3944 [inline]
handle_pte_fault mm/memory.c:4175 [inline]
__handle_mm_fault+0x273b/0x41c0 mm/memory.c:4299
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
handle_mm_fault+0x436/0xb10 mm/memory.c:4336
__do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x7fb5ba9a7415
Code: Bad RIP value.
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
RSP: 002b:00007ffcfba85370 EFLAGS: 00010202
RAX: 00007fb5ba1c32c8 RBX: 00007fb5babbf9e8 RCX: 000000000000004c
RDX: 00000000000003f3 RSI: 0000000000330a00 RDI: 00000000bba75332
RBP: 0000000000000003 R08: 00007ffcfba854c0 R09: 00007fb5babc3428
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
R10: 00007fb5b8735fd8 R11: 00007fb5b8532000 R12: 0000000000000012
R13: 0000000000000000 R14: 00007fb5babb96e0 R15: 0000000000000000
Mem-Info:
active_anon:362421 inactive_anon:8477 isolated_anon:0
active_file:16 inactive_file:16 isolated_file:0
unevictable:0 dirty:0 writeback:0 unstable:0
slab_reclaimable:53400 slab_unreclaimable:1007580
mapped:19029 shmem:17375 pagetables:87022 bounce:0
free:24889 free_pcp:905 free_cma:0
Node 0 active_anon:1301600kB inactive_anon:33732kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75968kB dirty:0kB writeback:0kB shmem:69312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 667648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 1 active_anon:148084kB inactive_anon:176kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:0kB writeback:0kB shmem:188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:704kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:508kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:35032kB min:35996kB low:44992kB high:53988kB active_anon:1300896kB inactive_anon:33732kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:51552kB pagetables:131788kB bounce:0kB free_pcp:1348kB local_pcp:576kB free_cma:0kB
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:53604kB min:53876kB low:67344kB high:80812kB active_anon:148072kB inactive_anon:176kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:146592kB pagetables:215820kB bounce:0kB free_pcp:2288kB local_pcp:952kB free_cma:0kB
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 18*4kB (M) 24*8kB (UM) 6*16kB (UME) 12*32kB (UM) 6*64kB (UME) 1*128kB (M) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10984kB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
Node 0 DMA32: 3508*4kB (UM) 1145*8kB (UM) 328*16kB (M) 146*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 34968kB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
INFO: task syz-executor.5:10594 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
Node 1 Normal: 4581*4kB (UME) 1106*8kB (UME) 326*16kB (UM) 45*32kB (UME) 17*64kB (UME) 14*128kB (UM) 2*256kB (UE) 2*512kB (ME) 1*1024kB (M) 1*2048kB (E) 3*4096kB (M) = 53604kB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26888 10594 9170 0x00000000
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
17407 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
2097051 pages RAM
0 pages HighMem/MovableOnly
369649 pages reserved
0 pages cma reserved
Unreclaimable slab info:
Name Used Total
pid_13 2KB 7KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
pid_12 7KB 11KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
pid_11 33KB 41KB
pid_10 79KB 82KB
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
pid_9 124KB 127KB
pid_8 106KB 112KB
pid_7 78KB 84KB
pid_6 39KB 44KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
pid_5 13KB 20KB
pid_4 1KB 3KB
pid_3 3KB 7KB
pid_2 889KB 1088KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
ubi_wl_entry_slab 1KB 3KB
batadv_tl_cache 5KB 12KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
TIPC 2640KB 2640KB
rds_connection 0KB 3KB
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
SCTPv6 5843KB 5847KB
SCTP 7KB 11KB
sctp_chunk 0KB 7KB
sctp_bind_bucket 0KB 3KB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
DCCPv6 7062KB 7065KB
DCCP 6716KB 6718KB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
L2TP/IP 1KB 7KB
RXRPC 2861KB 2866KB
rxrpc_call_jar 19834KB 19837KB
can_receiver 0KB 3KB
bridge_fdb_cache 11KB 19KB
INFO: task syz-executor.5:10609 blocked for more than 140 seconds.
fib6_nodes 180KB 240KB
ip6_dst_cache 169KB 360KB
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26792 10609 9336 0x00000000
RAWv6 28628KB 28633KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
UDPv6 3318KB 3322KB
TCPv6 5769KB 5772KB
nf_conntrack 2KB 15KB
t10_alua_lu_gp_cache 0KB 3KB
sd_ext_cdb 0KB 7KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
scsi_sense_cache 1056KB 1060KB
virtio_scsi_cmd 16KB 16KB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
sgpool-128 8KB 8KB
sgpool-64 4KB 12KB
sgpool-32 2KB 15KB
sgpool-16 1KB 7KB
sgpool-8 0KB 7KB
mqueue_inode_cache 27KB 52KB
bio_post_read_ctx 14KB 15KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
bio-2 14KB 15KB
jfs_mp 7KB 7KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
cifs_small_rq 15KB 16KB
cifs_request 67KB 67KB
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
cifs_mpx_ids 0KB 7KB
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
nfs_commit_data 3KB 14KB
nfs_write_data 34KB 44KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
ext4_system_zone 1KB 7KB
kioctx 1KB 7KB
bio-1 1KB 7KB
fasync_cache 0KB 4KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
pid_namespace 873KB 873KB
rpc_buffers 17KB 25KB
rpc_tasks 2KB 7KB
UNIX 95KB 108KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
tcp_bind_bucket 220KB 224KB
inet_peer_cache 63KB 68KB
ip_fib_trie 27KB 39KB
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
ip_fib_alias 129KB 158KB
ip_dst_cache 9KB 76KB
RAX: ffffffffffffffda RBX: 00007f820586e030 RCX: 00007f820575afe9
RAW 16963KB 16965KB
RDX: 0000000020001040 RSI: 0000000020001040 RDI: 0000000062102000
RBP: 00007f82057b508d R08: 00000000200010c0 R09: 00000000200010c0
UDP 4782KB 4785KB
TCP 160KB 174KB
R10: 0000000020001080 R11: 0000000000000206 R12: 0000000000000000
hugetlbfs_inode_cache 236KB 422KB
fscache_cookie_jar 1KB 7KB
R13: 00007ffcbca60b7f R14: 00007f82040af300 R15: 0000000000022000
eventpoll_pwq 13KB 35KB
eventpoll_epi 24KB 47KB
INFO: task syz-executor.5:10681 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
inotify_inode_mark 9KB 23KB
request_queue 222KB 222KB
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5 D26768 10681 9005 0x00000000
blkdev_requests 1KB 3KB
blkdev_ioc 22KB 30KB
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
bio-0 2465KB 2467KB
biovec-max 1872KB 1872KB
biovec-64 2377KB 2378KB
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
biovec-16 422KB 423KB
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
__mutex_lock_common kernel/locking/mutex.c:1016 [inline]
__mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
bio_integrity_payload 1KB 8KB
khugepaged_mm_slot 360KB 364KB
user_namespace 12KB 25KB
uid_cache 0KB 4KB
dmaengine-unmap-2 0KB 3KB
audit_buffer 0KB 3KB
ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034
skbuff_fclone_cache 577KB 630KB
skbuff_head_cache 8087KB 8130KB
configfs_dir_cache 3KB 11KB
file_lock_cache 14KB 19KB
ops_init+0xb3/0x410 net/core/net_namespace.c:129
setup_net+0x2c2/0x720 net/core/net_namespace.c:316
file_lock_ctx 10KB 15KB
fsnotify_mark_connector 4KB 15KB
copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439
create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107
copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165
net_namespace 24666KB 24666KB
shmem_inode_cache 8118KB 8493KB
copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916
task_delay_info 2123KB 2968KB
taskstats 13KB 53KB
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
proc_dir_entry 129542KB 129547KB
pde_opener 2KB 23KB
seq_file 58KB 70KB
sigqueue 502KB 504KB
kernfs_node_cache 416709KB 416713KB
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
mnt_cache 1016KB 1020KB
filp 5110KB 7410KB
names_cache 44807KB 44837KB
iint_cache 91KB 103KB
RIP: 0033:0x7f820575afe9
Code: Bad RIP value.
RSP: 002b:00007f82040af118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
key_jar 6KB 11KB
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
May 19, 2022, 11:58:14 AM5/19/22
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages