Message-ID: <ffa928.3bb3.18a8d55f4f3.Coremail.wangteng13@nudt.edu.cn>
Date: Wed, 13 Sep 2023 14:58:55 +0800 (GMT+08:00)
From: "Teng Wang" <wangteng13@...t.edu.cn>
To: brauner@...nel.org, viro@...iv.linux.org.uk, netdev@...r.kernel.org
Subject: BUG: rcu detected stall in perf_event_open

Dear All
This bug was found in linux Kernel v5.14

Syzkaller hit 'INFO: rcu detected stall in perf_event_open' bug.
audit: type=1400 audit(1680603043.538:8): avc:  denied  { execmem } for  pid=387 comm="syz-executor251" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 hrtimer: interrupt took 427717 ns rcu: INFO: rcu_sched self-detected stall on CPU rcu:  0-....: (20864 ticks this GP) idle=c2e/1/0x4000000000000000 softirq=3565/3565 fqs=5143   (t=21017 jiffies g=4385 q=36) NMI backtrace for cpu 0 CPU: 0 PID: 389 Comm: syz-executor251 Not tainted 5.14.0 #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014 Call Trace:  <IRQ>  __dump_stack lib/dump_stack.c:88 [inline]  dump_stack_lvl+0x4c/0x64 lib/dump_stack.c:105  nmi_cpu_backtrace+0xd4/0xf0 lib/nmi_backtrace.c:105  nmi_trigger_cpumask_backtrace+0xd4/0x120 lib/nmi_backtrace.c:62  trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]  rcu_dump_cpu_stacks+0xc0/0xf0 kernel/rcu/tree_stall.h:342  print_cpu_stall kernel/rcu/tree_stall.h:625 [inline]  check_cpu_stall kernel/rcu/tree_stall.h:700 [inline]  rcu_pending kernel/rcu/tree.c:3922 [inline]  rcu_sched_clock_irq+0x5ee/0x850 kernel/rcu/tree.c:2641  update_process_times+0x9b/0xd0 kernel/time/timer.c:1785  tick_sched_handle.isra.19+0x48/0x60 kernel/time/tick-sched.c:226  tick_sched_timer+0x7e/0xa0 kernel/time/tick-sched.c:1421  __run_hrtimer kernel/time/hrtimer.c:1537 [inline]  __hrtimer_run_queues+0x144/0x300 kernel/time/hrtimer.c:1601  hrtimer_interrupt+0xed/0x260 kernel/time/hrtimer.c:1663  local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]  __sysvec_apic_timer_interrupt+0x55/0xf0 arch/x86/kernel/apic/apic.c:1106  sysvec_apic_timer_interrupt+0x43/0x80 arch/x86/kernel/apic/apic.c:1100  </IRQ>  asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:__do_sys_perf_event_open+0xd9f/0x1230 kernel/events/core.c:12353 Code: fe e8 45 28 ff ff 8b 95 84 02 00 00 4c 89 ef 48 89 ee 65 48 8b 04 25 00 6d 01 00 48 89 85 98 02 00 00 e8 14 26 ff ff 4c 89 ef <e8> 1c ee fe ff e8 77 42 fa ff 48 8b 7c 24 20 e8 ed f5 d7 00 4d 85 RSP: 0018:ffffaf78c061be38 EFLAGS: 00000282 RAX: 0000000000000000 RBX: 0000000000000008 RCX: ffffffff827be8c1 RDX: ffff957902325e80 RSI: 0000000000000000 RDI: ffff957903409d00 RBP: ffff957906968000 R08: ffff957902e16e00 R09: 0000000000000000 R10: ffffaf78c061bd98 R11: 000000000002df40 R12: ffff957902325e80 R13: ffff957903409d00 R14: 0000000000000008 R15: ffff957906968162  do_syscall_x64 arch/x86/entry/common.c:50 [inline]  do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80  entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x44af79 Code: 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcb80f5a98 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000044af79 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 RBP: 000000000000be70 R08: 0000000000000000 R09: 0000000000402530 R10: 00000000ffffffff R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000000 R14: 00000000006bb018 R15: 0000000000000000 

	



View attachment "repro.log" of type "text/plain" (7618 bytes)

Download attachment "repro.stats" of type "application/octet-stream" (14581 bytes)

Powered by blists - more mailing lists