INFO: task hung in __unregister_prot_hook
16 views
Skip to first unread message
syzbot
Sep 17, 2018, 5:23:05 PM9/17/18
to syzkaller-upst...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 34043d250f51 net/sched: act_sample: fix NULL dereference i..
git tree: net
console output: https://syzkaller.appspot.com/x/log.txt?x=1718c21a400000
kernel config: https://syzkaller.appspot.com/x/.config?x=b8f349d23d3c4835
dashboard link: https://syzkaller.appspot.com/bug?extid=a562ce65a87d2e2d9c24
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
CC: [alexande...@intel.com da...@davemloft.net
edum...@google.com jeffrey....@intel.com kees...@chromium.org
ktk...@virtuozzo.com linux-...@vger.kernel.org liron...@baidu.com
magnus....@intel.com mal...@google.com net...@vger.kernel.org
wil...@google.com]
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a562ce...@syzkaller.appspotmail.com
IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
netlink: 'syz-executor2': attribute type 41 has an invalid length.
netlink: 'syz-executor2': attribute type 41 has an invalid length.
INFO: task syz-executor3:25504 blocked for more than 140 seconds.
Not tainted 4.19.0-rc3+ #99
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor3 D25400 25504 5348 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2825 [inline]
__schedule+0x86c/0x1ed0 kernel/sched/core.c:3473
schedule+0xfe/0x460 kernel/sched/core.c:3517
exp_funnel_lock kernel/rcu/tree_exp.h:320 [inline]
_synchronize_rcu_expedited+0xc68/0xfd0 kernel/rcu/tree_exp.h:667
synchronize_rcu_expedited+0x35/0xb0 kernel/rcu/tree_exp.h:795
synchronize_net+0x3b/0x60 net/core/dev.c:9012
__unregister_prot_hook+0x2b8/0x340 net/packet/af_packet.c:349
packet_do_bind+0x78c/0xdb0 net/packet/af_packet.c:3082
packet_bind+0x15d/0x1b0 net/packet/af_packet.c:3165
__sys_bind+0x331/0x440 net/socket.c:1483
__do_sys_bind net/socket.c:1494 [inline]
__se_sys_bind net/socket.c:1492 [inline]
__x64_sys_bind+0x73/0xb0 net/socket.c:1492
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4572d9
Code: 42 08 48 8b 40 08 48 89 04 24 e8 02 d3 fc ff 48 8b 6c 24 08 48 83 c4
10 c3 e8 e3 2b 00 00 eb c1 cc 64 48 8b 0c 25 f8 ff ff ff <48> 3b 61 10 76
75 48 83 ec 38 48 89 6c 24 30 48 8d 6c 24 30 48 8b
RSP: 002b:00007f76e2d47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 00007f76e2d486d4 RCX: 00000000004572d9
RDX: 0000000000000014 RSI: 0000000020000240 RDI: 0000000000000004
RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004cba40 R14: 00000000004c3428 R15: 0000000000000002
INFO: task syz-executor3:25527 blocked for more than 140 seconds.
Not tainted 4.19.0-rc3+ #99
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor3 D26544 25527 5348 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2825 [inline]
__schedule+0x86c/0x1ed0 kernel/sched/core.c:3473
schedule+0xfe/0x460 kernel/sched/core.c:3517
__lock_sock+0x1fb/0x350 net/core/sock.c:2312
lock_sock_nested+0xfe/0x120 net/core/sock.c:2834
lock_sock include/net/sock.h:1491 [inline]
sock_setsockopt+0x1aa/0x2280 net/core/sock.c:678
__sys_setsockopt+0x304/0x3c0 net/socket.c:1898
__do_sys_setsockopt net/socket.c:1913 [inline]
__se_sys_setsockopt net/socket.c:1910 [inline]
__x64_sys_setsockopt+0xbe/0x150 net/socket.c:1910
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4572d9
Code: 42 08 48 8b 40 08 48 89 04 24 e8 02 d3 fc ff 48 8b 6c 24 08 48 83 c4
10 c3 e8 e3 2b 00 00 eb c1 cc 64 48 8b 0c 25 f8 ff ff ff <48> 3b 61 10 76
75 48 83 ec 38 48 89 6c 24 30 48 8d 6c 24 30 48 8b
RSP: 002b:00007f76e2d05c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f76e2d066d4 RCX: 00000000004572d9
RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004
RBP: 0000000000930320 R08: 0000000000000010 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004d54c0 R14: 00000000004c96ea R15: 0000000000000004
Showing all locks held in the system:
1 lock held by khungtaskd/985:
#0: 000000006b0c1827 (rcu_read_lock){....}, at:
debug_show_all_locks+0xd0/0x424 kernel/locking/lockdep.c:4436
1 lock held by rsyslogd/5208:
2 locks held by getty/5298:
#0: 000000007dd56e8d (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000fbf63fe9 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5299:
#0: 00000000f248103b (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000c0e2322b (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5300:
#0: 000000003f535e8e (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000e42644e8 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5301:
#0: 00000000e8bee1ed (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000e0718531 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5302:
#0: 00000000ed7e4a75 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000a2704c05 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5303:
#0: 00000000094d04ad (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 0000000060965caf (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5304:
#0: 0000000090445c44 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 0000000083b88ead (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
1 lock held by syz-executor3/25504:
#0: 00000000f3b4ebec (sk_lock-AF_PACKET){+.+.}, at: lock_sock
include/net/sock.h:1491 [inline]
#0: 00000000f3b4ebec (sk_lock-AF_PACKET){+.+.}, at:
packet_do_bind+0x9c/0xdb0 net/packet/af_packet.c:3044
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 985 Comm: khungtaskd Not tainted 4.19.0-rc3+ #99
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113
nmi_cpu_backtrace.cold.3+0x63/0xa2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1b3/0x1ed lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
watchdog+0xb3e/0x1050 kernel/hung_task.c:265
kthread+0x35a/0x420 kernel/kthread.c:246
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Sending NMI from CPU 1 to CPUs 0:
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.490
msecs
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.0-rc3+ #99
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
RIP: 0010:find_busiest_group+0x345/0x1ca0 kernel/sched/fair.c:8277
Code: 00 0f 85 f2 10 00 00 48 81 c4 e0 01 00 00 5b 41 5c 41 5d 41 5e 41 5f
5d c3 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f
85 0a 11 00 00 4d 8b b4 24 80 fe ff ff 4d 85 f6 0f
RSP: 0018:ffff8801dae06fc0 EFLAGS: 00000a02
RAX: dffffc0000000000 RBX: ffff8801dae07020 RCX: 0000000000000000
RDX: 1ffff1003b5c0e04 RSI: 0000000000000001 RDI: ffff8801d9ae7850
RBP: ffff8801dae071c8 R08: ffff8801dae07348 R09: 000000000000001a
R10: 000000000000045b R11: 0000000000000002 R12: ffff8801dae071a0
R13: 1ffff1003b5c0e00 R14: ffff8801d9ae7800 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 00000001bf10c000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
load_balance+0x66c/0x3430 kernel/sched/fair.c:8467
rebalance_domains+0x845/0xdc0 kernel/sched/fair.c:8883
_nohz_idle_balance+0x621/0x7a0 kernel/sched/fair.c:9269
nohz_idle_balance kernel/sched/fair.c:9317 [inline]
run_rebalance_domains+0x2ec/0x500 kernel/sched/fair.c:9500
__do_softirq+0x30b/0xad8 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x17f/0x1c0 kernel/softirq.c:412
scheduler_ipi+0x55a/0xad0 kernel/sched/core.c:1780
smp_reschedule_interrupt+0x109/0x650 arch/x86/kernel/smp.c:278
reschedule_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:888
</IRQ>
RIP: 0010:native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:57
Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 43 91 02 fa 48 8b 45 d8 e9 ca
fe ff ff 48 89 df e8 32 91 02 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84
00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90
RSP: 0018:ffffffff89407bb8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02
RAX: dffffc0000000000 RBX: 1ffffffff1280f7b RCX: 0000000000000000
RDX: 1ffffffff12a4540 RSI: 0000000000000001 RDI: ffffffff89522a00
RBP: ffffffff89407bb8 R08: ffffffff89475fc0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89407c78
R13: ffffffff8a314b20 R14: 0000000000000000 R15: 0000000000000000
arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
default_idle+0xbf/0x490 arch/x86/kernel/process.c:498
arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:489
default_idle_call+0x6d/0x90 kernel/sched/idle.c:93
cpuidle_idle_call kernel/sched/idle.c:153 [inline]
do_idle+0x3db/0x5b0 kernel/sched/idle.c:262
cpu_startup_entry+0x10c/0x120 kernel/sched/idle.c:368
rest_init+0xe2/0xe5 init/main.c:442
start_kernel+0x8f4/0x92f init/main.c:739
x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:452
x86_64_start_kernel+0x76/0x79 arch/x86/kernel/head64.c:433
secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:242
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.
syzbot found the following crash on:
HEAD commit: 34043d250f51 net/sched: act_sample: fix NULL dereference i..
git tree: net
console output: https://syzkaller.appspot.com/x/log.txt?x=1718c21a400000
kernel config: https://syzkaller.appspot.com/x/.config?x=b8f349d23d3c4835
dashboard link: https://syzkaller.appspot.com/bug?extid=a562ce65a87d2e2d9c24
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
CC: [alexande...@intel.com da...@davemloft.net
edum...@google.com jeffrey....@intel.com kees...@chromium.org
ktk...@virtuozzo.com linux-...@vger.kernel.org liron...@baidu.com
magnus....@intel.com mal...@google.com net...@vger.kernel.org
wil...@google.com]
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a562ce...@syzkaller.appspotmail.com
IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
netlink: 'syz-executor2': attribute type 41 has an invalid length.
netlink: 'syz-executor2': attribute type 41 has an invalid length.
INFO: task syz-executor3:25504 blocked for more than 140 seconds.
Not tainted 4.19.0-rc3+ #99
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor3 D25400 25504 5348 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2825 [inline]
__schedule+0x86c/0x1ed0 kernel/sched/core.c:3473
schedule+0xfe/0x460 kernel/sched/core.c:3517
exp_funnel_lock kernel/rcu/tree_exp.h:320 [inline]
_synchronize_rcu_expedited+0xc68/0xfd0 kernel/rcu/tree_exp.h:667
synchronize_rcu_expedited+0x35/0xb0 kernel/rcu/tree_exp.h:795
synchronize_net+0x3b/0x60 net/core/dev.c:9012
__unregister_prot_hook+0x2b8/0x340 net/packet/af_packet.c:349
packet_do_bind+0x78c/0xdb0 net/packet/af_packet.c:3082
packet_bind+0x15d/0x1b0 net/packet/af_packet.c:3165
__sys_bind+0x331/0x440 net/socket.c:1483
__do_sys_bind net/socket.c:1494 [inline]
__se_sys_bind net/socket.c:1492 [inline]
__x64_sys_bind+0x73/0xb0 net/socket.c:1492
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4572d9
Code: 42 08 48 8b 40 08 48 89 04 24 e8 02 d3 fc ff 48 8b 6c 24 08 48 83 c4
10 c3 e8 e3 2b 00 00 eb c1 cc 64 48 8b 0c 25 f8 ff ff ff <48> 3b 61 10 76
75 48 83 ec 38 48 89 6c 24 30 48 8d 6c 24 30 48 8b
RSP: 002b:00007f76e2d47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 00007f76e2d486d4 RCX: 00000000004572d9
RDX: 0000000000000014 RSI: 0000000020000240 RDI: 0000000000000004
RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004cba40 R14: 00000000004c3428 R15: 0000000000000002
INFO: task syz-executor3:25527 blocked for more than 140 seconds.
Not tainted 4.19.0-rc3+ #99
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor3 D26544 25527 5348 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2825 [inline]
__schedule+0x86c/0x1ed0 kernel/sched/core.c:3473
schedule+0xfe/0x460 kernel/sched/core.c:3517
__lock_sock+0x1fb/0x350 net/core/sock.c:2312
lock_sock_nested+0xfe/0x120 net/core/sock.c:2834
lock_sock include/net/sock.h:1491 [inline]
sock_setsockopt+0x1aa/0x2280 net/core/sock.c:678
__sys_setsockopt+0x304/0x3c0 net/socket.c:1898
__do_sys_setsockopt net/socket.c:1913 [inline]
__se_sys_setsockopt net/socket.c:1910 [inline]
__x64_sys_setsockopt+0xbe/0x150 net/socket.c:1910
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4572d9
Code: 42 08 48 8b 40 08 48 89 04 24 e8 02 d3 fc ff 48 8b 6c 24 08 48 83 c4
10 c3 e8 e3 2b 00 00 eb c1 cc 64 48 8b 0c 25 f8 ff ff ff <48> 3b 61 10 76
75 48 83 ec 38 48 89 6c 24 30 48 8d 6c 24 30 48 8b
RSP: 002b:00007f76e2d05c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f76e2d066d4 RCX: 00000000004572d9
RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004
RBP: 0000000000930320 R08: 0000000000000010 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004d54c0 R14: 00000000004c96ea R15: 0000000000000004
Showing all locks held in the system:
1 lock held by khungtaskd/985:
#0: 000000006b0c1827 (rcu_read_lock){....}, at:
debug_show_all_locks+0xd0/0x424 kernel/locking/lockdep.c:4436
1 lock held by rsyslogd/5208:
2 locks held by getty/5298:
#0: 000000007dd56e8d (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000fbf63fe9 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5299:
#0: 00000000f248103b (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000c0e2322b (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5300:
#0: 000000003f535e8e (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000e42644e8 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5301:
#0: 00000000e8bee1ed (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000e0718531 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5302:
#0: 00000000ed7e4a75 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 00000000a2704c05 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5303:
#0: 00000000094d04ad (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 0000000060965caf (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5304:
#0: 0000000090445c44 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
#1: 0000000083b88ead (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
1 lock held by syz-executor3/25504:
#0: 00000000f3b4ebec (sk_lock-AF_PACKET){+.+.}, at: lock_sock
include/net/sock.h:1491 [inline]
#0: 00000000f3b4ebec (sk_lock-AF_PACKET){+.+.}, at:
packet_do_bind+0x9c/0xdb0 net/packet/af_packet.c:3044
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 985 Comm: khungtaskd Not tainted 4.19.0-rc3+ #99
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113
nmi_cpu_backtrace.cold.3+0x63/0xa2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1b3/0x1ed lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
watchdog+0xb3e/0x1050 kernel/hung_task.c:265
kthread+0x35a/0x420 kernel/kthread.c:246
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Sending NMI from CPU 1 to CPUs 0:
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.490
msecs
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.0-rc3+ #99
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
RIP: 0010:find_busiest_group+0x345/0x1ca0 kernel/sched/fair.c:8277
Code: 00 0f 85 f2 10 00 00 48 81 c4 e0 01 00 00 5b 41 5c 41 5d 41 5e 41 5f
5d c3 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f
85 0a 11 00 00 4d 8b b4 24 80 fe ff ff 4d 85 f6 0f
RSP: 0018:ffff8801dae06fc0 EFLAGS: 00000a02
RAX: dffffc0000000000 RBX: ffff8801dae07020 RCX: 0000000000000000
RDX: 1ffff1003b5c0e04 RSI: 0000000000000001 RDI: ffff8801d9ae7850
RBP: ffff8801dae071c8 R08: ffff8801dae07348 R09: 000000000000001a
R10: 000000000000045b R11: 0000000000000002 R12: ffff8801dae071a0
R13: 1ffff1003b5c0e00 R14: ffff8801d9ae7800 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 00000001bf10c000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
load_balance+0x66c/0x3430 kernel/sched/fair.c:8467
rebalance_domains+0x845/0xdc0 kernel/sched/fair.c:8883
_nohz_idle_balance+0x621/0x7a0 kernel/sched/fair.c:9269
nohz_idle_balance kernel/sched/fair.c:9317 [inline]
run_rebalance_domains+0x2ec/0x500 kernel/sched/fair.c:9500
__do_softirq+0x30b/0xad8 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x17f/0x1c0 kernel/softirq.c:412
scheduler_ipi+0x55a/0xad0 kernel/sched/core.c:1780
smp_reschedule_interrupt+0x109/0x650 arch/x86/kernel/smp.c:278
reschedule_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:888
</IRQ>
RIP: 0010:native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:57
Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 43 91 02 fa 48 8b 45 d8 e9 ca
fe ff ff 48 89 df e8 32 91 02 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84
00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90
RSP: 0018:ffffffff89407bb8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02
RAX: dffffc0000000000 RBX: 1ffffffff1280f7b RCX: 0000000000000000
RDX: 1ffffffff12a4540 RSI: 0000000000000001 RDI: ffffffff89522a00
RBP: ffffffff89407bb8 R08: ffffffff89475fc0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89407c78
R13: ffffffff8a314b20 R14: 0000000000000000 R15: 0000000000000000
arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
default_idle+0xbf/0x490 arch/x86/kernel/process.c:498
arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:489
default_idle_call+0x6d/0x90 kernel/sched/idle.c:93
cpuidle_idle_call kernel/sched/idle.c:153 [inline]
do_idle+0x3db/0x5b0 kernel/sched/idle.c:262
cpu_startup_entry+0x10c/0x120 kernel/sched/idle.c:368
rest_init+0xe2/0xe5 init/main.c:442
start_kernel+0x8f4/0x92f init/main.c:739
x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:452
x86_64_start_kernel+0x76/0x79 arch/x86/kernel/head64.c:433
secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:242
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.
Dmitry Vyukov
Oct 23, 2019, 3:20:32 AM10/23/19
to syzbot, 'Dmitry Vyukov' via syzkaller-upstream-moderation
After https://github.com/google/syzkaller/commit/37dc03de04826cc0d5d1e3699832b0a3113d40af
this should be re-detected as "task hung in synchronize_rcu"
#syz invalid
> --
> You received this message because you are subscribed to the Google Groups "syzkaller-upstream-moderation" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-upstream-m...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-upstream-moderation/0000000000005d8dbc057617c7b6%40google.com.
> For more options, visit https://groups.google.com/d/optout.
this should be re-detected as "task hung in synchronize_rcu"
#syz invalid
> You received this message because you are subscribed to the Google Groups "syzkaller-upstream-moderation" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-upstream-m...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-upstream-moderation/0000000000005d8dbc057617c7b6%40google.com.
> For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages