From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-io1-f70.google.com (mail-io1-f70.google.com [209.85.166.70])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id D6BC83FB91
	for <linux-kernel@vger.kernel.org>; Sat,  9 Mar 2024 13:56:22 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.166.70
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1709992584; cv=none; b=oKHFhEPyrTnuHxo8WT4dzXPQ+Gr4nQr/O2FHozGaeaiRqzgp78WGUlPhAYTNK8Z6YhuWkFTezM6xCaEaB9pDFEEoGoJolGHGTqjBM/k9s49PImi7SxLrdySYNGkRZupm/Qof5DFQW6XZHfLJoIBH8Iccj5W7u9SbWfdEAVMFaPE=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1709992584; c=relaxed/simple;
	bh=4/rRvptdp4qKmeIoYfCSm0w2FvFvH5RKhZS0MyGJ7MU=;
	h=MIME-Version:Date:Message-ID:Subject:From:To:Content-Type; b=Q9y/B1rLgyqXFAELIQXAW5rXyEAGC9xqTfrwk/lweJynQ6W/UYTCeAxcrLtU6kIE0RrwdSm4pMJimYixQTXpA7rDwSRNtGB9AZJL1VNVvC2sYQi4ecWyCaPq8F3mLgumC/Bh00tXG0Weg6EbaEJXTtdV6Ytw7HZF1UKjFW9iR2Q=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.166.70
Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com
Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com
Received: by mail-io1-f70.google.com with SMTP id ca18e2360f4ac-7c8a98e52b5so13523039f.1
        for <linux-kernel@vger.kernel.org>; Sat, 09 Mar 2024 05:56:22 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1709992582; x=1710597382;
        h=to:from:subject:message-id:date:mime-version:x-gm-message-state
         :from:to:cc:subject:date:message-id:reply-to;
        bh=yeWdolIukjuIT6djSO5vJ9A0bt1LKEAUENPR0p05oog=;
        b=mRxaMP0kTwHMdpMrIDPUqdVwe+0+jHWVGGQ0rniw8tuUWlE9pW/wkonVGouy7c0qaP
         4qCJ1X2aCxmkgevB/S8P1MmS7LOOMi7vajZVcTzY8GLdSsnqsL65VGfrDb5KGKQqkNvF
         CDRqVpz2LDqOqn0j85VLT/qze8S6MfIMRL/xwr9G1xFxZWFlmJIYZROXVILOrYonijCh
         RGpZsq7WOgeygmnUvGtZvuwt/XPTuHsOpz9vYTrhL9jyPGesXI9ZPz7ia8IVdUKMz94/
         /a4SJE0xqZCToZW39iq4R9F/P7nCSmAgFmYt7N6YzGH4AqNZkSeavxSvPPXSWCnZw6+A
         HaSQ==
X-Forwarded-Encrypted: i=1; AJvYcCUIJ2HiuSeqZC+Upc4Y7ZAm+W8+uA+/3ssJ21UG2rkV7K9/N/e3TUlt0WtDy6ZQUxEGY+MVSiEzF27yHaoVSv0rJSpww/eIDeVdK/tu
X-Gm-Message-State: AOJu0Yznd53LGdz++ddvVrbLD7NR+d5/pln5myV5XkLZrfe+3CgQZnxs
	fsNnwwhWPveS3NoAq3Mzp8sKosl1hFhXXaGgQ/KDswLZgx3mi81lFn5T7v6ydTuYJGVwMVGhK+S
	soKqCBtiVMhwaq1/YIMNosyt38A9CsUBt3eHEWIQ4LFOhMnty+pP7QAk=
X-Google-Smtp-Source: AGHT+IGospwXP3X//QXmS850gEnXTtJTITsLt1q19l2raEN3aAt2yX9zRlc27x6V4JGS+3bKBjHBiAkPP5Ixom+Sv014ly6u103d
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-Received: by 2002:a05:6602:6403:b0:7c8:593f:fdc3 with SMTP id
 gn3-20020a056602640300b007c8593ffdc3mr33513iob.4.1709992582162; Sat, 09 Mar
 2024 05:56:22 -0800 (PST)
Date: Sat, 09 Mar 2024 05:56:22 -0800
X-Google-Appengine-App-Id: s~syzkaller
X-Google-Appengine-App-Id-Alias: syzkaller
Message-ID: <0000000000006dbb0b06133aacee@google.com>
Subject: [syzbot] [mm?] [input?] [usb?] INFO: rcu detected stall in asm_exc_page_fault
From: syzbot <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com>
To: akpm@linux-foundation.org, linux-input@vger.kernel.org, 
	linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-usb@vger.kernel.org, 
	pasha.tatashin@soleen.com, syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"

Hello,

syzbot found the following issue on:

HEAD commit:    90d35da658da Linux 6.8-rc7
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=122f6f6a180000
kernel config:  https://syzkaller.appspot.com/x/.config?x=119d08814b43915b
dashboard link: https://syzkaller.appspot.com/bug?extid=360faf5c01a5be55581d
compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=124056de180000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/fb2c1adf4ec3/disk-90d35da6.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/09c5b88a8ceb/vmlinux-90d35da6.xz
kernel image: https://storage.googleapis.com/syzbot-assets/5e5cbc312e49/bzImage-90d35da6.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com

rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
 1-....
 } 4831 jiffies s: 1849 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
 kthread+0x2ef/0x390 kernel/kthread.c:388
NMI backtrace for cpu 1
CPU: 1 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
RIP: 0010:format_decode+0x546/0x1bb0
Code: 85 96 01 00 00 45 84 ff 0f 84 8d 01 00 00 48 bb 00 ff ff ff 00 ff ff ff 48 8b 44 24 20 42 0f b6 04 30 84 c0 0f 85 4d 10 00 00 <48> 8b 54 24 48 48 21 da 48 8b 44 24 28 42 0f b6 04 30 84 c0 48 8d
RSP: 0000:ffffc900001efa20 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffffff00ffffff00 RCX: ffff8880219e0000
RDX: ffff8880219e0000 RSI: 0000000000000025 RDI: 0000000000000000
RBP: ffffc900001efb10 R08: ffffffff8b57a4c8 R09: ffffffff8b57a1aa
R10: 0000000000000002 R11: ffff8880219e0000 R12: ffffffff8bab75e6
R13: ffffffff8bab75e6 R14: dffffc0000000000 R15: 0000000000000025
FS:  0000555555c82480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f74dc087056 CR3: 0000000021bc6000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1324 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1350
 record_print_text kernel/printk/printk.c:1399 [inline]
 printk_get_next_message+0x408/0xce0 kernel/printk/printk.c:2828
 console_emit_next_record kernel/printk/printk.c:2868 [inline]
 console_flush_all+0x42d/0xec0 kernel/printk/printk.c:2967
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3036
 vprintk_emit+0x508/0x720 kernel/printk/printk.c:2303
 _printk+0xd5/0x120 kernel/printk/printk.c:2328
 printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
 show_trace_log_lvl+0x438/0x520 arch/x86/kernel/dumpstack.c:285
 sched_show_task+0x50c/0x6d0 kernel/sched/core.c:9171
 show_state_filter+0x19e/0x270 kernel/sched/core.c:9216
 kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
 kbd_event+0x30fa/0x4910 drivers/tty/vt/keyboard.c:1543
 input_to_handler drivers/input/input.c:132 [inline]
 input_pass_values+0x945/0x1200 drivers/input/input.c:161
 input_event_dispose drivers/input/input.c:378 [inline]
 input_handle_event drivers/input/input.c:406 [inline]
 input_repeat_key+0x3fd/0x6c0 drivers/input/input.c:2263
 call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x621/0x830 kernel/time/timer.c:2038
 run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
 __do_softirq+0x2bb/0x942 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:1076
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:page_table_check_set+0x58/0x700 mm/page_table_check.c:109
Code: 95 ff 85 ed 0f 84 5f 03 00 00 49 bf 00 00 00 00 00 fc ff df 48 c1 e3 06 48 bd 00 00 00 00 00 ea ff ff 48 8d 3c 2b 48 89 3c 24 <e8> 33 e9 ff ff 49 89 c6 4c 8d 64 2b 08 4c 89 e5 48 c1 ed 03 42 80
RSP: 0000:ffffc90004d0f650 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000001c8ae80 RCX: ffff8880219e0000
RDX: ffff8880219e0000 RSI: 0000000000000001 RDI: ffffea0001c8ae80
RBP: ffffea0000000000 R08: ffffffff81fdf590 R09: 1ffffffff1f0880d
R10: dffffc0000000000 R11: fffffbfff1f0880e R12: 0000000000000000
R13: 0000000000000001 R14: 00000000722ba025 R15: dffffc0000000000
 __page_table_check_ptes_set+0x220/0x280 mm/page_table_check.c:196
 page_table_check_ptes_set include/linux/page_table_check.h:74 [inline]
 set_ptes include/linux/pgtable.h:241 [inline]
 set_pte_range+0x885/0x8b0 mm/memory.c:4549
 filemap_map_order0_folio mm/filemap.c:3513 [inline]
 filemap_map_pages+0xee2/0x1830 mm/filemap.c:3559
 do_fault_around mm/memory.c:4716 [inline]
 do_read_fault mm/memory.c:4749 [inline]
 do_fault mm/memory.c:4888 [inline]
 do_pte_missing mm/memory.c:3745 [inline]
 handle_pte_fault mm/memory.c:5164 [inline]
 __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305
 handle_mm_fault+0x27e/0x770 mm/memory.c:5470
 do_user_addr_fault arch/x86/mm/fault.c:1355 [inline]
 handle_page_fault arch/x86/mm/fault.c:1498 [inline]
 exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7f74dc087080
Code: Unable to access opcode bytes at 0x7f74dc087056.
RSP: 002b:00007ffe028d3bb8 EFLAGS: 00010246
RAX: 00007f74dcdfb9d0 RBX: 00007f74dcdfb6c0 RCX: 00007f74dc07de67
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74dcdfb6c0
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe028d3e60
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
 </TASK>
task:kworker/u4:0    state:I stack:24400 pid:11    tgid:11    ppid:2      flags:0x00004000
Workqueue:  0x0 (events_unbound)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0x149/0x260 kernel/sched/core.c:6817
 worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
 kthread+0x2ef/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
 </TASK>
task:kworker/u4:1    state:I stack:23344 pid:12    tgid:12    ppid:2      flags:0x00004000
Workqueue:  0x0 (bat_events)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0x149/0x260 kernel/sched/core.c:6817
 worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
 kthread+0x2ef/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
 </TASK>
task:kworker/R-mm_pe state:I stack:28752 pid:13    tgid:13    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0x149/0x260 kernel/sched/core.c:6817
 rescuer_thread+0xc45/0xda0 kernel/workqueue.c:2937
 kthread+0x2ef/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
 </TASK>
task:rcu_tasks_kthre state:I stack:27448 pid:14    tgid:14    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0x149/0x260 kernel/sched/core.c:6817
 rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
 rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
 kthread+0x2ef/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
 </TASK>
task:rcu_tasks_trace state:I stack:27144 pid:15    tgid:15    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0x149/0x260 kernel/sched/core.c:6817
 rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
 rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
 kthread+0x2ef/0x390 kernel/kthread.c:388
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
 </TASK>
task:ksoftirqd/0


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-pg1-f172.google.com (mail-pg1-f172.google.com [209.85.215.172])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id 76D5E14275;
	Mon, 11 Mar 2024 09:12:35 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.215.172
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1710148357; cv=none; b=Fl7yW9v0qRnUFVmHBDfSVCvKGr+DnO/kc4u1+CVYWl/u62kQdS/Dc41n4XNLFpbC+KFYRh4561k8EpQapok46eN0OrOXbSZYwWYVEfvb6HMoI252P1duxf4AzwV++j5BVeZnuNFxPOF4GJ61r76zl33YmVghIBAHRF0HO/KyO7k=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1710148357; c=relaxed/simple;
	bh=LZf8aKALWQ4GjXdbZ2Phxwp+kFTjxyvh+JWieX5/E2w=;
	h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject:
	 To:Cc:Content-Type; b=rkmDfV0OCcDVJdMpzY3o0h4NEm9ot9EsdLY+xScn4RXIsFMuoMXmQg2PwXJmBI3tkkDoPWjL6qJsa/HOm2Oh1zJy71o77T0FW3KdyYn5KajEeGkDbMUEW4pJ8Rsm5yHsTsbx4Ghw280VtYjRnqS6EKgZdib7+n6XDU3JxkZGQpk=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=JnepWx1Q; arc=none smtp.client-ip=209.85.215.172
Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com
Authentication-Results: smtp.subspace.kernel.org;
	dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="JnepWx1Q"
Received: by mail-pg1-f172.google.com with SMTP id 41be03b00d2f7-5d8b70b39efso2223042a12.0;
        Mon, 11 Mar 2024 02:12:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1710148355; x=1710753155; darn=vger.kernel.org;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=dVlARnxmjviZM9MgRuztuSx0uEpoNo7afHr6yWCY/5c=;
        b=JnepWx1Q4VmUUJ1RghGR4z+Ur46ysQ6jYHwOAyw+b20B08DvnjCfEI3xLCZtdOyXuV
         Zsz5PMnlEA1zJzbHfe/BHtOjKLfKmw9FukIDjPdthgojpdE3y8A4IOQMWYDki6n3XDn7
         GhmHNvmGfiv8d92QhH/vrX8RmZ3BBpaaSBsX1kCJZkY553vgCpDejyONs7lCKDYEWTSu
         re2P8ynb7czjJfkug67kg5SnQexrLFOBN2PelTf4N4ak/PFyNFufi8R92+tiaDLr5Y5Q
         Pj/YG5cfiymM3K4mnKc3M+uzzJ3f21mTUZUnG9z3nZRqK2KevQOkPEwi+vCU3uuWgIUA
         fcnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1710148355; x=1710753155;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
         :reply-to;
        bh=dVlARnxmjviZM9MgRuztuSx0uEpoNo7afHr6yWCY/5c=;
        b=RIjvlF1hsFt69XUFW77rRic/RNf3W8R2UnFqwW+la3TyDT/v5hwCZJyDAr4Yopi40Y
         hagxpcKMmgOfHxxq1KPEPYJ6111WrGUru1EuvVYYrSnPhNo20IB/2pPNCMTnGz0C4l2d
         IPUzj9fI81gIWlaCRUqKPIA4oPg7KTw+kpuyf62TrZ0vG7XPu25vE1hGM5Ald7oGZpAG
         6nW4ZUWDFO+MyJbslM5GIFc6p6DxFkpCwB5ZzzJhqts5kvcL3q0ECFwH2qaWMW/Mt9HW
         odM5Xw/J9oCQyqW1h4xBJpNhKIdsdJBcXoJD2BcD+oe57Y4jwnHTkDf9fo5cSPoDyqqq
         qeog==
X-Forwarded-Encrypted: i=1; AJvYcCXQcjRSBjMQ5xacN6t6tplnZ2JSGuIUxCID6gvlfgv7y4uqRV4+7JdKUmVUsWKbKw1tzQsMYRHjpgAEUrZxtHQvhx04ORQydo/J+z4yVrnDC13PS8g93JogbPum0qZAOd/S1g9QUL3EcZD+5xkLe0A9/u7KIDRgVwRYDDapAeBtbeAuLi0=
X-Gm-Message-State: AOJu0YyojmuOdlWJCpd0c/Rs9t8T0uDoaqbirurVR88sWtuNP6jyfC03
	4dkUGmB22CuUkBgs2fgE3GPiD6hV8zXr24uGRNJCdj3P/p6GA8dVpDEFa7nUEoEQb2uQmMFzIU3
	ooKyFhIugcBfo9TGDKJJNIQCkO/U=
X-Google-Smtp-Source: AGHT+IFc0HSgZ+Yo+k/KJIgQmyPYsfswEkj9cwlLYmD9PwYcLgfm7FbrGKk7NxkxSnYk25WK5DovQcqp9jhQCa58VR0=
X-Received: by 2002:a17:90a:4683:b0:29b:db64:c1db with SMTP id
 z3-20020a17090a468300b0029bdb64c1dbmr2704961pjf.15.1710148354710; Mon, 11 Mar
 2024 02:12:34 -0700 (PDT)
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
References: <0000000000006dbb0b06133aacee@google.com>
In-Reply-To: <0000000000006dbb0b06133aacee@google.com>
From: Z qiang <qiang.zhang1211@gmail.com>
Date: Mon, 11 Mar 2024 17:12:23 +0800
Message-ID: <CALm+0cX+J-Cb_-Vd7i=2M3FiDa89BreqrdXYwMB=yeR6G7GGvw@mail.gmail.com>
Subject: Re: [syzbot] [mm?] [input?] [usb?] INFO: rcu detected stall in asm_exc_page_fault
To: syzbot <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com>
Cc: akpm@linux-foundation.org, linux-input@vger.kernel.org, 
	linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-usb@vger.kernel.org, 
	pasha.tatashin@soleen.com, syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"

>
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit:    90d35da658da Linux 6.8-rc7
> git tree:       upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=122f6f6a180000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=119d08814b43915b
> dashboard link: https://syzkaller.appspot.com/bug?extid=360faf5c01a5be55581d
> compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=124056de180000
>
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/fb2c1adf4ec3/disk-90d35da6.raw.xz
> vmlinux: https://storage.googleapis.com/syzbot-assets/09c5b88a8ceb/vmlinux-90d35da6.xz
> kernel image: https://storage.googleapis.com/syzbot-assets/5e5cbc312e49/bzImage-90d35da6.xz
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com


#syz test https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
master

diff --git a/kernel/sched/core.c b/kernel/sched/core.c
index 7019a40457a6..69e344f07e68 100644
--- a/kernel/sched/core.c
+++ b/kernel/sched/core.c
@@ -9233,6 +9233,7 @@ void show_state_filter(unsigned int state_filter)
                 */
                touch_nmi_watchdog();
                touch_all_softlockup_watchdogs();
+               rcu_cpu_stall_reset();
                if (state_filter_match(state_filter, p))
                        sched_show_task(p);

        }


>
> rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
>  1-....
>  } 4831 jiffies s: 1849 root: 0x2/.
> rcu: blocking rcu_node structures (internal RCU debug):
> Sending NMI from CPU 0 to CPUs 1:
>  kthread+0x2ef/0x390 kernel/kthread.c:388
> NMI backtrace for cpu 1
> CPU: 1 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller #0
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
> RIP: 0010:format_decode+0x546/0x1bb0
> Code: 85 96 01 00 00 45 84 ff 0f 84 8d 01 00 00 48 bb 00 ff ff ff 00 ff ff ff 48 8b 44 24 20 42 0f b6 04 30 84 c0 0f 85 4d 10 00 00 <48> 8b 54 24 48 48 21 da 48 8b 44 24 28 42 0f b6 04 30 84 c0 48 8d
> RSP: 0000:ffffc900001efa20 EFLAGS: 00000046
> RAX: 0000000000000000 RBX: ffffff00ffffff00 RCX: ffff8880219e0000
> RDX: ffff8880219e0000 RSI: 0000000000000025 RDI: 0000000000000000
> RBP: ffffc900001efb10 R08: ffffffff8b57a4c8 R09: ffffffff8b57a1aa
> R10: 0000000000000002 R11: ffff8880219e0000 R12: ffffffff8bab75e6
> R13: ffffffff8bab75e6 R14: dffffc0000000000 R15: 0000000000000025
> FS:  0000555555c82480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> CR2: 00007f74dc087056 CR3: 0000000021bc6000 CR4: 00000000003506f0
> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> Call Trace:
>  <NMI>
>  </NMI>
>  <IRQ>
>  vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
>  sprintf+0xda/0x120 lib/vsprintf.c:3028
>  print_time kernel/printk/printk.c:1324 [inline]
>  info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1350
>  record_print_text kernel/printk/printk.c:1399 [inline]
>  printk_get_next_message+0x408/0xce0 kernel/printk/printk.c:2828
>  console_emit_next_record kernel/printk/printk.c:2868 [inline]
>  console_flush_all+0x42d/0xec0 kernel/printk/printk.c:2967
>  console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3036
>  vprintk_emit+0x508/0x720 kernel/printk/printk.c:2303
>  _printk+0xd5/0x120 kernel/printk/printk.c:2328
>  printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
>  show_trace_log_lvl+0x438/0x520 arch/x86/kernel/dumpstack.c:285
>  sched_show_task+0x50c/0x6d0 kernel/sched/core.c:9171
>  show_state_filter+0x19e/0x270 kernel/sched/core.c:9216
>  kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
>  kbd_event+0x30fa/0x4910 drivers/tty/vt/keyboard.c:1543
>  input_to_handler drivers/input/input.c:132 [inline]
>  input_pass_values+0x945/0x1200 drivers/input/input.c:161
>  input_event_dispose drivers/input/input.c:378 [inline]
>  input_handle_event drivers/input/input.c:406 [inline]
>  input_repeat_key+0x3fd/0x6c0 drivers/input/input.c:2263
>  call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700
>  expire_timers kernel/time/timer.c:1751 [inline]
>  __run_timers+0x621/0x830 kernel/time/timer.c:2038
>  run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
>  __do_softirq+0x2bb/0x942 kernel/softirq.c:553
>  invoke_softirq kernel/softirq.c:427 [inline]
>  __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632
>  irq_exit_rcu+0x9/0x30 kernel/softirq.c:644
>  sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:1076
>  </IRQ>
>  <TASK>
>  asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
> RIP: 0010:page_table_check_set+0x58/0x700 mm/page_table_check.c:109
> Code: 95 ff 85 ed 0f 84 5f 03 00 00 49 bf 00 00 00 00 00 fc ff df 48 c1 e3 06 48 bd 00 00 00 00 00 ea ff ff 48 8d 3c 2b 48 89 3c 24 <e8> 33 e9 ff ff 49 89 c6 4c 8d 64 2b 08 4c 89 e5 48 c1 ed 03 42 80
> RSP: 0000:ffffc90004d0f650 EFLAGS: 00000202
> RAX: 0000000000000000 RBX: 0000000001c8ae80 RCX: ffff8880219e0000
> RDX: ffff8880219e0000 RSI: 0000000000000001 RDI: ffffea0001c8ae80
> RBP: ffffea0000000000 R08: ffffffff81fdf590 R09: 1ffffffff1f0880d
> R10: dffffc0000000000 R11: fffffbfff1f0880e R12: 0000000000000000
> R13: 0000000000000001 R14: 00000000722ba025 R15: dffffc0000000000
>  __page_table_check_ptes_set+0x220/0x280 mm/page_table_check.c:196
>  page_table_check_ptes_set include/linux/page_table_check.h:74 [inline]
>  set_ptes include/linux/pgtable.h:241 [inline]
>  set_pte_range+0x885/0x8b0 mm/memory.c:4549
>  filemap_map_order0_folio mm/filemap.c:3513 [inline]
>  filemap_map_pages+0xee2/0x1830 mm/filemap.c:3559
>  do_fault_around mm/memory.c:4716 [inline]
>  do_read_fault mm/memory.c:4749 [inline]
>  do_fault mm/memory.c:4888 [inline]
>  do_pte_missing mm/memory.c:3745 [inline]
>  handle_pte_fault mm/memory.c:5164 [inline]
>  __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305
>  handle_mm_fault+0x27e/0x770 mm/memory.c:5470
>  do_user_addr_fault arch/x86/mm/fault.c:1355 [inline]
>  handle_page_fault arch/x86/mm/fault.c:1498 [inline]
>  exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554
>  asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
> RIP: 0033:0x7f74dc087080
> Code: Unable to access opcode bytes at 0x7f74dc087056.
> RSP: 002b:00007ffe028d3bb8 EFLAGS: 00010246
> RAX: 00007f74dcdfb9d0 RBX: 00007f74dcdfb6c0 RCX: 00007f74dc07de67
> RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74dcdfb6c0
> RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
> R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe028d3e60
> R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
>  </TASK>
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:kworker/u4:0    state:I stack:24400 pid:11    tgid:11    ppid:2      flags:0x00004000
> Workqueue:  0x0 (events_unbound)
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:kworker/u4:1    state:I stack:23344 pid:12    tgid:12    ppid:2      flags:0x00004000
> Workqueue:  0x0 (bat_events)
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:kworker/R-mm_pe state:I stack:28752 pid:13    tgid:13    ppid:2      flags:0x00004000
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  rescuer_thread+0xc45/0xda0 kernel/workqueue.c:2937
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:rcu_tasks_kthre state:I stack:27448 pid:14    tgid:14    ppid:2      flags:0x00004000
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:rcu_tasks_trace state:I stack:27144 pid:15    tgid:15    ppid:2      flags:0x00004000
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:ksoftirqd/0
>
>
> ---
> This report is generated by a bot. It may contain errors.
> See https://goo.gl/tpsmEJ for more information about syzbot.
> syzbot engineers can be reached at syzkaller@googlegroups.com.
>
> syzbot will keep track of this issue. See:
> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
>
> If the report is already addressed, let syzbot know by replying with:
> #syz fix: exact-commit-title
>
> If you want syzbot to run the reproducer, reply with:
> #syz test: git://repo/address.git branch-or-commit-hash
> If you attach or paste a git patch, syzbot will apply it before testing.
>
> If you want to overwrite report's subsystems, reply with:
> #syz set subsystems: new-subsystem
> (See the list of subsystem names on the web dashboard)
>
> If the report is a duplicate of another one, reply with:
> #syz dup: exact-subject-of-another-report
>
> If you want to undo deduplication, reply with:
> #syz undup
>

From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-io1-f71.google.com (mail-io1-f71.google.com [209.85.166.71])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id C69221756E
	for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 09:12:37 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.166.71
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1710148360; cv=none; b=qLodP9Zn4f/up7HbZf5/KIq7OWhdX500QcvEh4fsZXzwq/SMmD46wYLHK4cJT0RY6uxeiwo1EKWiwDX/Ynmor6UrmvqvaTX2tDUFbQfOOECcDILsix8DJDC3DVbGQ/8I/aywXWxVtu4nWgHz/d41nEbnBfHO0Rj0pt2jZTljz6w=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1710148360; c=relaxed/simple;
	bh=qcBs8VJi4ALCc01TWmrSgZNswNUBm7k4tsOLXylCIqY=;
	h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To:Cc:
	 Content-Type; b=iP/v2RPwoJeZD1n+rmUrvfeenz7thNpqTHGZvrbpYcdIclvVSCNFIqceyuqMjghE5ownsFINaKBAMMYQFefUlOA7oeJ1cnFZ1sIpe0LvcBZiPK/fvrJlJ43uxg8dU7eby/Qvb0JdN4U/nXuM0j+01ORpn8JNszjSCc4qlCTjUG4=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.166.71
Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com
Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com
Received: by mail-io1-f71.google.com with SMTP id ca18e2360f4ac-7c8aeef8f4eso55805039f.0
        for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 02:12:37 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1710148357; x=1710753157;
        h=cc:to:from:subject:message-id:in-reply-to:date:mime-version
         :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=zV+2MZPC9Fb2zhgtQv+/B2Z+g/NRuNuM1JR2FH6QjLg=;
        b=o4BlPawHfuk+oH8MHmHFadb2+WG1OUlq21gdes+T40/e2mmXQV8vFKf9ih3Wf/morz
         S8D03aaUvSqjlLAXCOYFU6icoL2c+m4KxDQ730uqHJk36rU73Uwwg+njem2T5xXVvIXS
         qXsIhfZcYnhO5Cpkv/k7YW6Lwof1filKUG/Krz4AtIgoqRquCGq67ZdWgrPvWtH0P9bO
         dRXEkSpzjHHxBWNOZxyWIbWa52u3hs1fDUKvLU+HhVwRYz2fp75AP54bovkNQ/UVS8rB
         GdgLH9Sa/sPhl4fJXSkdYglBeLDLyyU2aA4f/6zq5Zqfn1P6GUVC5Vh5WFnrMHaIocJ/
         haaw==
X-Forwarded-Encrypted: i=1; AJvYcCUnsieNNvXrXqdYtRqGG4nDYHGGA2KLLKs2cck4CKRbzaR4codTJvfwR3nyyo8vKRwRjwE0GKg2p9i74sfFGUFlqC0PfUykbXglrGxC
X-Gm-Message-State: AOJu0Yx0NvBkERtY/Fgv+oMckzS3MGxi7kh+DvG+S4oySSVo48C+KzCU
	ZdxHtcLVcMVgHwTXC5Aqp6f7lwJlfMtrK3fMPMK14zHeentHY4FIzLr9w9/NvGz9HRbTAsgFhY7
	D6vjtJa/Z1FIjtcISzeuxrVVgmAd2oRx+tTy3Y15e8Q0vbsZULK5qwQw=
X-Google-Smtp-Source: AGHT+IEEBsLyMFDxA7YTAE/YZ0rkNbEGm4Fq1Uxy07bQDJBSvAcL8lpEI11i0Ak93X2nLSg8YlDCzeectrVOcCN1LLHvLI2TSJxt
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-Received: by 2002:a05:6638:16c4:b0:474:f7aa:d873 with SMTP id
 g4-20020a05663816c400b00474f7aad873mr303928jat.0.1710148355565; Mon, 11 Mar
 2024 02:12:35 -0700 (PDT)
Date: Mon, 11 Mar 2024 02:12:35 -0700
In-Reply-To: <CALm+0cX+J-Cb_-Vd7i=2M3FiDa89BreqrdXYwMB=yeR6G7GGvw@mail.gmail.com>
X-Google-Appengine-App-Id: s~syzkaller
X-Google-Appengine-App-Id-Alias: syzkaller
Message-ID: <0000000000003f383106135ef1e2@google.com>
Subject: Re: [syzbot] [mm?] [input?] [usb?] INFO: rcu detected stall in asm_exc_page_fault
From: syzbot <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com>
To: qiang.zhang1211@gmail.com
Cc: akpm@linux-foundation.org, linux-input@vger.kernel.org, 
	linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-usb@vger.kernel.org, 
	pasha.tatashin@soleen.com, qiang.zhang1211@gmail.com, 
	syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"

>>
>> Hello,
>>
>> syzbot found the following issue on:
>>
>> HEAD commit:    90d35da658da Linux 6.8-rc7
>> git tree:       upstream
>> console output: https://syzkaller.appspot.com/x/log.txt?x=122f6f6a180000
>> kernel config:  https://syzkaller.appspot.com/x/.config?x=119d08814b43915b
>> dashboard link: https://syzkaller.appspot.com/bug?extid=360faf5c01a5be55581d
>> compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
>> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=124056de180000
>>
>> Downloadable assets:
>> disk image: https://storage.googleapis.com/syzbot-assets/fb2c1adf4ec3/disk-90d35da6.raw.xz
>> vmlinux: https://storage.googleapis.com/syzbot-assets/09c5b88a8ceb/vmlinux-90d35da6.xz
>> kernel image: https://storage.googleapis.com/syzbot-assets/5e5cbc312e49/bzImage-90d35da6.xz
>>
>> IMPORTANT: if you fix the issue, please add the following tag to the commit:
>> Reported-by: syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com
>
>
> #syz test https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git

want either no args or 2 args (repo, branch), got 1

> master
>
> diff --git a/kernel/sched/core.c b/kernel/sched/core.c
> index 7019a40457a6..69e344f07e68 100644
> --- a/kernel/sched/core.c
> +++ b/kernel/sched/core.c
> @@ -9233,6 +9233,7 @@ void show_state_filter(unsigned int state_filter)
>                  */
>                 touch_nmi_watchdog();
>                 touch_all_softlockup_watchdogs();
> +               rcu_cpu_stall_reset();
>                 if (state_filter_match(state_filter, p))
>                         sched_show_task(p);
>
>         }
>
>
>>
>> rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
>>  1-....
>>  } 4831 jiffies s: 1849 root: 0x2/.
>> rcu: blocking rcu_node structures (internal RCU debug):
>> Sending NMI from CPU 0 to CPUs 1:
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> NMI backtrace for cpu 1
>> CPU: 1 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller #0
>> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
>> RIP: 0010:format_decode+0x546/0x1bb0
>> Code: 85 96 01 00 00 45 84 ff 0f 84 8d 01 00 00 48 bb 00 ff ff ff 00 ff ff ff 48 8b 44 24 20 42 0f b6 04 30 84 c0 0f 85 4d 10 00 00 <48> 8b 54 24 48 48 21 da 48 8b 44 24 28 42 0f b6 04 30 84 c0 48 8d
>> RSP: 0000:ffffc900001efa20 EFLAGS: 00000046
>> RAX: 0000000000000000 RBX: ffffff00ffffff00 RCX: ffff8880219e0000
>> RDX: ffff8880219e0000 RSI: 0000000000000025 RDI: 0000000000000000
>> RBP: ffffc900001efb10 R08: ffffffff8b57a4c8 R09: ffffffff8b57a1aa
>> R10: 0000000000000002 R11: ffff8880219e0000 R12: ffffffff8bab75e6
>> R13: ffffffff8bab75e6 R14: dffffc0000000000 R15: 0000000000000025
>> FS:  0000555555c82480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
>> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> CR2: 00007f74dc087056 CR3: 0000000021bc6000 CR4: 00000000003506f0
>> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
>> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
>> Call Trace:
>>  <NMI>
>>  </NMI>
>>  <IRQ>
>>  vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
>>  sprintf+0xda/0x120 lib/vsprintf.c:3028
>>  print_time kernel/printk/printk.c:1324 [inline]
>>  info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1350
>>  record_print_text kernel/printk/printk.c:1399 [inline]
>>  printk_get_next_message+0x408/0xce0 kernel/printk/printk.c:2828
>>  console_emit_next_record kernel/printk/printk.c:2868 [inline]
>>  console_flush_all+0x42d/0xec0 kernel/printk/printk.c:2967
>>  console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3036
>>  vprintk_emit+0x508/0x720 kernel/printk/printk.c:2303
>>  _printk+0xd5/0x120 kernel/printk/printk.c:2328
>>  printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
>>  show_trace_log_lvl+0x438/0x520 arch/x86/kernel/dumpstack.c:285
>>  sched_show_task+0x50c/0x6d0 kernel/sched/core.c:9171
>>  show_state_filter+0x19e/0x270 kernel/sched/core.c:9216
>>  kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
>>  kbd_event+0x30fa/0x4910 drivers/tty/vt/keyboard.c:1543
>>  input_to_handler drivers/input/input.c:132 [inline]
>>  input_pass_values+0x945/0x1200 drivers/input/input.c:161
>>  input_event_dispose drivers/input/input.c:378 [inline]
>>  input_handle_event drivers/input/input.c:406 [inline]
>>  input_repeat_key+0x3fd/0x6c0 drivers/input/input.c:2263
>>  call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700
>>  expire_timers kernel/time/timer.c:1751 [inline]
>>  __run_timers+0x621/0x830 kernel/time/timer.c:2038
>>  run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
>>  __do_softirq+0x2bb/0x942 kernel/softirq.c:553
>>  invoke_softirq kernel/softirq.c:427 [inline]
>>  __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632
>>  irq_exit_rcu+0x9/0x30 kernel/softirq.c:644
>>  sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:1076
>>  </IRQ>
>>  <TASK>
>>  asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
>> RIP: 0010:page_table_check_set+0x58/0x700 mm/page_table_check.c:109
>> Code: 95 ff 85 ed 0f 84 5f 03 00 00 49 bf 00 00 00 00 00 fc ff df 48 c1 e3 06 48 bd 00 00 00 00 00 ea ff ff 48 8d 3c 2b 48 89 3c 24 <e8> 33 e9 ff ff 49 89 c6 4c 8d 64 2b 08 4c 89 e5 48 c1 ed 03 42 80
>> RSP: 0000:ffffc90004d0f650 EFLAGS: 00000202
>> RAX: 0000000000000000 RBX: 0000000001c8ae80 RCX: ffff8880219e0000
>> RDX: ffff8880219e0000 RSI: 0000000000000001 RDI: ffffea0001c8ae80
>> RBP: ffffea0000000000 R08: ffffffff81fdf590 R09: 1ffffffff1f0880d
>> R10: dffffc0000000000 R11: fffffbfff1f0880e R12: 0000000000000000
>> R13: 0000000000000001 R14: 00000000722ba025 R15: dffffc0000000000
>>  __page_table_check_ptes_set+0x220/0x280 mm/page_table_check.c:196
>>  page_table_check_ptes_set include/linux/page_table_check.h:74 [inline]
>>  set_ptes include/linux/pgtable.h:241 [inline]
>>  set_pte_range+0x885/0x8b0 mm/memory.c:4549
>>  filemap_map_order0_folio mm/filemap.c:3513 [inline]
>>  filemap_map_pages+0xee2/0x1830 mm/filemap.c:3559
>>  do_fault_around mm/memory.c:4716 [inline]
>>  do_read_fault mm/memory.c:4749 [inline]
>>  do_fault mm/memory.c:4888 [inline]
>>  do_pte_missing mm/memory.c:3745 [inline]
>>  handle_pte_fault mm/memory.c:5164 [inline]
>>  __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305
>>  handle_mm_fault+0x27e/0x770 mm/memory.c:5470
>>  do_user_addr_fault arch/x86/mm/fault.c:1355 [inline]
>>  handle_page_fault arch/x86/mm/fault.c:1498 [inline]
>>  exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554
>>  asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
>> RIP: 0033:0x7f74dc087080
>> Code: Unable to access opcode bytes at 0x7f74dc087056.
>> RSP: 002b:00007ffe028d3bb8 EFLAGS: 00010246
>> RAX: 00007f74dcdfb9d0 RBX: 00007f74dcdfb6c0 RCX: 00007f74dc07de67
>> RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74dcdfb6c0
>> RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
>> R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe028d3e60
>> R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
>>  </TASK>
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:kworker/u4:0    state:I stack:24400 pid:11    tgid:11    ppid:2      flags:0x00004000
>> Workqueue:  0x0 (events_unbound)
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:kworker/u4:1    state:I stack:23344 pid:12    tgid:12    ppid:2      flags:0x00004000
>> Workqueue:  0x0 (bat_events)
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:kworker/R-mm_pe state:I stack:28752 pid:13    tgid:13    ppid:2      flags:0x00004000
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  rescuer_thread+0xc45/0xda0 kernel/workqueue.c:2937
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:rcu_tasks_kthre state:I stack:27448 pid:14    tgid:14    ppid:2      flags:0x00004000
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:rcu_tasks_trace state:I stack:27144 pid:15    tgid:15    ppid:2      flags:0x00004000
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:ksoftirqd/0
>>
>>
>> ---
>> This report is generated by a bot. It may contain errors.
>> See https://goo.gl/tpsmEJ for more information about syzbot.
>> syzbot engineers can be reached at syzkaller@googlegroups.com.
>>
>> syzbot will keep track of this issue. See:
>> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
>>
>> If the report is already addressed, let syzbot know by replying with:
>> #syz fix: exact-commit-title
>>
>> If you want syzbot to run the reproducer, reply with:
>> #syz test: git://repo/address.git branch-or-commit-hash
>> If you attach or paste a git patch, syzbot will apply it before testing.
>>
>> If you want to overwrite report's subsystems, reply with:
>> #syz set subsystems: new-subsystem
>> (See the list of subsystem names on the web dashboard)
>>
>> If the report is a duplicate of another one, reply with:
>> #syz dup: exact-subject-of-another-report
>>
>> If you want to undo deduplication, reply with:
>> #syz undup
>>

From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-pg1-f171.google.com (mail-pg1-f171.google.com [209.85.215.171])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6541C22F14;
	Mon, 11 Mar 2024 09:15:10 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.215.171
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1710148512; cv=none; b=GCzDqaRtFiRBn34lrZGxq9Lp1CLAvZ+UVNDk3QnpiZ9S/MP5emIq2c46H1SddbcUVsg6gPkiSMZTM5r4zcxoyIV38XudA42tKk3EYrpSN0sK2CVCKhgmLmom4mfhcxZ0r6yyAXjZ4znN41llII2Mg/0s74TdKZpxEAE0+On3e6I=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1710148512; c=relaxed/simple;
	bh=GhLIU5sRaBTZKgau5yc14KuQA31H1roC2T/f0x3Fi+k=;
	h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject:
	 To:Cc:Content-Type; b=ZNH25FrWIvnE95fPitOXaKpe+LmaYx5fttzl8yXwceQQdX4xJULIz1liqPMBhsDRaegLWqs7FAGFQ0/MkoDNywxvAyr7ngmUjfLk1j03G1HhQ76l5JpiPjniYC6eIxG/7ynWupOxglV73yjiUJ8eqcw4LLUxt4BX1ynqWwCU68c=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=nCV5vGPc; arc=none smtp.client-ip=209.85.215.171
Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com
Authentication-Results: smtp.subspace.kernel.org;
	dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="nCV5vGPc"
Received: by mail-pg1-f171.google.com with SMTP id 41be03b00d2f7-5c66b093b86so3799484a12.0;
        Mon, 11 Mar 2024 02:15:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1710148510; x=1710753310; darn=vger.kernel.org;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=MWhBUNsPmm62H/e0c8fmAcvywcTD8S5kwEzqcIxgQ8c=;
        b=nCV5vGPcTWUYrDsJ8ZCo8QU4KEE031kvdF7f8OoehwUP+zxz3p2DiAMq3vlpxueNtN
         RXK6sd0WIcEcyEHlOnhkU/PvmuKzAD9ftjAQYLqTevW+ReL/1dzQ8T4S1WMMlYg4IkII
         nJ6vsKC3C9jBo73b/SAZ4aUpLkvqRU2i8Irb1EMCnDFteorcPp4v1cin0HCtm/I9tEp2
         PJx//26nFt3PSJ7qM3q6RSqrKtX4NQFRnp2Jd9t42DdN9zqsaBnLI2KMSDk7dtboptqM
         9dlrLuOY4y/q8/JX2YoqTuwpKNO54JhBFdxZHyCOGsschJNp1rFxoecjjMjYtkZU3TCy
         dL8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1710148510; x=1710753310;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
         :reply-to;
        bh=MWhBUNsPmm62H/e0c8fmAcvywcTD8S5kwEzqcIxgQ8c=;
        b=Opri9sINrAc2NXXdaKrhPLrN3IxaruILODWmGaDks5jBWgBedrfqw0GQ1hue+PflzY
         tFfYmxYDAFoC3J/fg8OgeuzGADwRDmRySrgdEBecy5ElreXA5KIuii5Uoq443qPD0NSx
         H5uIWo7oJb1cfXSehcNCnLSxYKoMeuZo8uuA86mrLOQd3BUUhfzanqmJFT+0AHcHMvPz
         mbxxO2ZA5ZuOZbSL3Lum8FgN+CHdZvxI/GLoFkW0c85u62dXXhTzRPPRt232r1JsTFr5
         LQL8n5c84VR20arRW/G9jAwYkiIU9QN0SeIwqwOQT/JEr8jhS7SD1mhObopSDlUgL4hv
         11EQ==
X-Forwarded-Encrypted: i=1; AJvYcCW5dsCXGQNqGoWqd56XtQKAYfw0G7TtPTJF/qeozpm4mReMbuMIjLG9czmW5+O0tSIytfpfJcCh5J5Oqnyy3x+r9+WAg4dly932FOZjRzAkQyLA6n2XRJI/pKjhknJ5FXKfNotIrB+abZeBlyndFHAgYzCi91RFxM/iZeQ/4qIzDY2sBHg=
X-Gm-Message-State: AOJu0Yz0Nb/cKy6WdWMGeSDK9QdP5G4+OE7FrnGBSx+ON6doc6LMiHcE
	u/mB0wPrlMw8HXqmkyCpdbWXIu0J7jengDv4o3NxtscbNZ4D6gPsGfZHYq7FZLUTj904VVZR/x4
	Ht/sAO7ItxyQ9grWLrewJSI4JVe8=
X-Google-Smtp-Source: AGHT+IGEF8HVRO+OB9AHJrnM3e1i1OuhRKOD7oSnDWd/K1yvW1ptiJK1DEDo1LYr8J7cqqWsg8Boqm/w7XqXFGr8ces=
X-Received: by 2002:a17:90a:72ce:b0:29b:a345:620a with SMTP id
 l14-20020a17090a72ce00b0029ba345620amr8375253pjk.20.1710148509691; Mon, 11
 Mar 2024 02:15:09 -0700 (PDT)
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
References: <0000000000006dbb0b06133aacee@google.com>
In-Reply-To: <0000000000006dbb0b06133aacee@google.com>
From: Z qiang <qiang.zhang1211@gmail.com>
Date: Mon, 11 Mar 2024 17:14:58 +0800
Message-ID: <CALm+0cVun=SSczF2hJPJFZU85NMmntScWAFLL7e9pXJiVt+qWw@mail.gmail.com>
Subject: Re: [syzbot] [mm?] [input?] [usb?] INFO: rcu detected stall in asm_exc_page_fault
To: syzbot <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com>
Cc: akpm@linux-foundation.org, linux-input@vger.kernel.org, 
	linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-usb@vger.kernel.org, 
	pasha.tatashin@soleen.com, syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"

>
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit:    90d35da658da Linux 6.8-rc7
> git tree:       upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=122f6f6a180000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=119d08814b43915b
> dashboard link: https://syzkaller.appspot.com/bug?extid=360faf5c01a5be55581d
> compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=124056de180000
>
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/fb2c1adf4ec3/disk-90d35da6.raw.xz
> vmlinux: https://storage.googleapis.com/syzbot-assets/09c5b88a8ceb/vmlinux-90d35da6.xz
> kernel image: https://storage.googleapis.com/syzbot-assets/5e5cbc312e49/bzImage-90d35da6.xz
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com

#syz test https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
master

diff --git a/kernel/sched/core.c b/kernel/sched/core.c
index 7019a40457a6..69e344f07e68 100644
--- a/kernel/sched/core.c
+++ b/kernel/sched/core.c
@@ -9233,6 +9233,7 @@ void show_state_filter(unsigned int state_filter)
                 */
                touch_nmi_watchdog();
                touch_all_softlockup_watchdogs();
+               rcu_cpu_stall_reset();
                if (state_filter_match(state_filter, p))
                        sched_show_task(p);
        }




>
> rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
>  1-....
>  } 4831 jiffies s: 1849 root: 0x2/.
> rcu: blocking rcu_node structures (internal RCU debug):
> Sending NMI from CPU 0 to CPUs 1:
>  kthread+0x2ef/0x390 kernel/kthread.c:388
> NMI backtrace for cpu 1
> CPU: 1 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller #0
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
> RIP: 0010:format_decode+0x546/0x1bb0
> Code: 85 96 01 00 00 45 84 ff 0f 84 8d 01 00 00 48 bb 00 ff ff ff 00 ff ff ff 48 8b 44 24 20 42 0f b6 04 30 84 c0 0f 85 4d 10 00 00 <48> 8b 54 24 48 48 21 da 48 8b 44 24 28 42 0f b6 04 30 84 c0 48 8d
> RSP: 0000:ffffc900001efa20 EFLAGS: 00000046
> RAX: 0000000000000000 RBX: ffffff00ffffff00 RCX: ffff8880219e0000
> RDX: ffff8880219e0000 RSI: 0000000000000025 RDI: 0000000000000000
> RBP: ffffc900001efb10 R08: ffffffff8b57a4c8 R09: ffffffff8b57a1aa
> R10: 0000000000000002 R11: ffff8880219e0000 R12: ffffffff8bab75e6
> R13: ffffffff8bab75e6 R14: dffffc0000000000 R15: 0000000000000025
> FS:  0000555555c82480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> CR2: 00007f74dc087056 CR3: 0000000021bc6000 CR4: 00000000003506f0
> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> Call Trace:
>  <NMI>
>  </NMI>
>  <IRQ>
>  vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
>  sprintf+0xda/0x120 lib/vsprintf.c:3028
>  print_time kernel/printk/printk.c:1324 [inline]
>  info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1350
>  record_print_text kernel/printk/printk.c:1399 [inline]
>  printk_get_next_message+0x408/0xce0 kernel/printk/printk.c:2828
>  console_emit_next_record kernel/printk/printk.c:2868 [inline]
>  console_flush_all+0x42d/0xec0 kernel/printk/printk.c:2967
>  console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3036
>  vprintk_emit+0x508/0x720 kernel/printk/printk.c:2303
>  _printk+0xd5/0x120 kernel/printk/printk.c:2328
>  printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
>  show_trace_log_lvl+0x438/0x520 arch/x86/kernel/dumpstack.c:285
>  sched_show_task+0x50c/0x6d0 kernel/sched/core.c:9171
>  show_state_filter+0x19e/0x270 kernel/sched/core.c:9216
>  kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
>  kbd_event+0x30fa/0x4910 drivers/tty/vt/keyboard.c:1543
>  input_to_handler drivers/input/input.c:132 [inline]
>  input_pass_values+0x945/0x1200 drivers/input/input.c:161
>  input_event_dispose drivers/input/input.c:378 [inline]
>  input_handle_event drivers/input/input.c:406 [inline]
>  input_repeat_key+0x3fd/0x6c0 drivers/input/input.c:2263
>  call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700
>  expire_timers kernel/time/timer.c:1751 [inline]
>  __run_timers+0x621/0x830 kernel/time/timer.c:2038
>  run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
>  __do_softirq+0x2bb/0x942 kernel/softirq.c:553
>  invoke_softirq kernel/softirq.c:427 [inline]
>  __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632
>  irq_exit_rcu+0x9/0x30 kernel/softirq.c:644
>  sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:1076
>  </IRQ>
>  <TASK>
>  asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
> RIP: 0010:page_table_check_set+0x58/0x700 mm/page_table_check.c:109
> Code: 95 ff 85 ed 0f 84 5f 03 00 00 49 bf 00 00 00 00 00 fc ff df 48 c1 e3 06 48 bd 00 00 00 00 00 ea ff ff 48 8d 3c 2b 48 89 3c 24 <e8> 33 e9 ff ff 49 89 c6 4c 8d 64 2b 08 4c 89 e5 48 c1 ed 03 42 80
> RSP: 0000:ffffc90004d0f650 EFLAGS: 00000202
> RAX: 0000000000000000 RBX: 0000000001c8ae80 RCX: ffff8880219e0000
> RDX: ffff8880219e0000 RSI: 0000000000000001 RDI: ffffea0001c8ae80
> RBP: ffffea0000000000 R08: ffffffff81fdf590 R09: 1ffffffff1f0880d
> R10: dffffc0000000000 R11: fffffbfff1f0880e R12: 0000000000000000
> R13: 0000000000000001 R14: 00000000722ba025 R15: dffffc0000000000
>  __page_table_check_ptes_set+0x220/0x280 mm/page_table_check.c:196
>  page_table_check_ptes_set include/linux/page_table_check.h:74 [inline]
>  set_ptes include/linux/pgtable.h:241 [inline]
>  set_pte_range+0x885/0x8b0 mm/memory.c:4549
>  filemap_map_order0_folio mm/filemap.c:3513 [inline]
>  filemap_map_pages+0xee2/0x1830 mm/filemap.c:3559
>  do_fault_around mm/memory.c:4716 [inline]
>  do_read_fault mm/memory.c:4749 [inline]
>  do_fault mm/memory.c:4888 [inline]
>  do_pte_missing mm/memory.c:3745 [inline]
>  handle_pte_fault mm/memory.c:5164 [inline]
>  __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305
>  handle_mm_fault+0x27e/0x770 mm/memory.c:5470
>  do_user_addr_fault arch/x86/mm/fault.c:1355 [inline]
>  handle_page_fault arch/x86/mm/fault.c:1498 [inline]
>  exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554
>  asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
> RIP: 0033:0x7f74dc087080
> Code: Unable to access opcode bytes at 0x7f74dc087056.
> RSP: 002b:00007ffe028d3bb8 EFLAGS: 00010246
> RAX: 00007f74dcdfb9d0 RBX: 00007f74dcdfb6c0 RCX: 00007f74dc07de67
> RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74dcdfb6c0
> RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
> R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe028d3e60
> R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
>  </TASK>
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:kworker/u4:0    state:I stack:24400 pid:11    tgid:11    ppid:2      flags:0x00004000
> Workqueue:  0x0 (events_unbound)
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:kworker/u4:1    state:I stack:23344 pid:12    tgid:12    ppid:2      flags:0x00004000
> Workqueue:  0x0 (bat_events)
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:kworker/R-mm_pe state:I stack:28752 pid:13    tgid:13    ppid:2      flags:0x00004000
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  rescuer_thread+0xc45/0xda0 kernel/workqueue.c:2937
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:rcu_tasks_kthre state:I stack:27448 pid:14    tgid:14    ppid:2      flags:0x00004000
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:rcu_tasks_trace state:I stack:27144 pid:15    tgid:15    ppid:2      flags:0x00004000
> Call Trace:
>  <TASK>
>  context_switch kernel/sched/core.c:5400 [inline]
>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>  __schedule_loop kernel/sched/core.c:6802 [inline]
>  schedule+0x149/0x260 kernel/sched/core.c:6817
>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>  kthread+0x2ef/0x390 kernel/kthread.c:388
>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>  </TASK>
> task:ksoftirqd/0
>
>
> ---
> This report is generated by a bot. It may contain errors.
> See https://goo.gl/tpsmEJ for more information about syzbot.
> syzbot engineers can be reached at syzkaller@googlegroups.com.
>
> syzbot will keep track of this issue. See:
> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
>
> If the report is already addressed, let syzbot know by replying with:
> #syz fix: exact-commit-title
>
> If you want syzbot to run the reproducer, reply with:
> #syz test: git://repo/address.git branch-or-commit-hash
> If you attach or paste a git patch, syzbot will apply it before testing.
>
> If you want to overwrite report's subsystems, reply with:
> #syz set subsystems: new-subsystem
> (See the list of subsystem names on the web dashboard)
>
> If the report is a duplicate of another one, reply with:
> #syz dup: exact-subject-of-another-report
>
> If you want to undo deduplication, reply with:
> #syz undup
>

From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-il1-f198.google.com (mail-il1-f198.google.com [209.85.166.198])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id 795CF1426D
	for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 09:15:11 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.166.198
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1710148513; cv=none; b=LizUg6JBb/9WjUd0XhIUzqpdDng+v/CcIRCTDldekK9aYRKvoPQkFCG/OvvlVhk/0/o1oMHfViQI46gGRivQ65X8jbVuCiSe8xWPyjrvUTECkpEfIqvyd+kc79m8QBtnf77sgbaV3QuK8n3O9RFsuxMT+H8VklqvdYv4ElPKq0E=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1710148513; c=relaxed/simple;
	bh=+a79OneknX1EqTbxlS6yjHd1PpaOgGh0aDEWwjpLBcU=;
	h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To:Cc:
	 Content-Type; b=PC/Npj4ANu/m4xfN+wCnvGa7cRhnolyByaiuX+qkXfsmEcyMrEIBzQh3CX+Hw8sJSw1p3EqJpa+pWRXyXL6mlsYK4B8v6rrHpUQoK6Y6OqfcyuaAxIZfYfvBbN4Xjug2fcm9K+JvnlSMVihAdOhNG8u38L0dl5c1JXzGf75/c7U=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.166.198
Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com
Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com
Received: by mail-il1-f198.google.com with SMTP id e9e14a558f8ab-3662dbb587eso28614835ab.0
        for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 02:15:11 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1710148510; x=1710753310;
        h=cc:to:from:subject:message-id:in-reply-to:date:mime-version
         :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=d+1f4PZqhiHK9OVcIZgHUxd/qGBfnABnvkeOocsCZJc=;
        b=ucK+GOD/rBtoB/1jhmUkWr4Hc/dovKqNB79dkzkwDdhbmbONu1JCfBJdSMl6Xivi1J
         eOaifz63p3FIOJdZtl2TqzhD++OYbEl2PJuVUT2BwzVhMWRIPhQB2iueAJxa4HXAWxY6
         qOOWW+18YixKGnlr/Oeji0gvf74KLGz0PVIcTSDyLetHtdRXeCIBBuHgKsyScXgkG9gu
         VNYVr69PVKOLNUGnWl32FkYz1/fuhJKey8tG4f1WoWPtekMLFuDZZaNjMx521fPch1fO
         gV55h6kd9zCw6Ag+3hQY38qGrGfeWfqCMVgSv3RYQit/XGC8c3oUbIepbknK3WFv9Crk
         ygig==
X-Forwarded-Encrypted: i=1; AJvYcCVgtwpwLukVFtepDR0SLh4+Pn6iEmfhj44VHU9b8n3GlPArjpquh7/ffp/jp980uHk0ASEABfm1pEq1Mj606PgKfZYO6CeNtKDrj9YB
X-Gm-Message-State: AOJu0YxCzYvBt19+iQyRfT/ezF0P53RdrwBWeDiZ57w4A+9ZCOlRf6jz
	ethZPWs64BgrfQPHqat5+qs6LypFe9KykRM9FbTzMYs3O5aD2tcZWTn9V44bkkJt6KGHZkWUfOi
	dxRBUwBSWCWWO66SGjFNMdq9viJSaAtq7ETeSdspT5f9IY6yyj19L+ns=
X-Google-Smtp-Source: AGHT+IEL4r7BJbNvFakfKZsdnCrwX4acORTbl21kM1zYXOasAzDfSE7ExoEdA8j5jAXqntsaBCEerTw9188hXZs2HYH/K9tj1vhq
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-Received: by 2002:a05:6e02:128c:b0:366:471c:935c with SMTP id
 y12-20020a056e02128c00b00366471c935cmr117707ilq.2.1710148510636; Mon, 11 Mar
 2024 02:15:10 -0700 (PDT)
Date: Mon, 11 Mar 2024 02:15:10 -0700
In-Reply-To: <CALm+0cVun=SSczF2hJPJFZU85NMmntScWAFLL7e9pXJiVt+qWw@mail.gmail.com>
X-Google-Appengine-App-Id: s~syzkaller
X-Google-Appengine-App-Id-Alias: syzkaller
Message-ID: <0000000000007d76cf06135efac5@google.com>
Subject: Re: [syzbot] [mm?] [input?] [usb?] INFO: rcu detected stall in asm_exc_page_fault
From: syzbot <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com>
To: qiang.zhang1211@gmail.com
Cc: akpm@linux-foundation.org, linux-input@vger.kernel.org, 
	linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-usb@vger.kernel.org, 
	pasha.tatashin@soleen.com, qiang.zhang1211@gmail.com, 
	syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"

>>
>> Hello,
>>
>> syzbot found the following issue on:
>>
>> HEAD commit:    90d35da658da Linux 6.8-rc7
>> git tree:       upstream
>> console output: https://syzkaller.appspot.com/x/log.txt?x=122f6f6a180000
>> kernel config:  https://syzkaller.appspot.com/x/.config?x=119d08814b43915b
>> dashboard link: https://syzkaller.appspot.com/bug?extid=360faf5c01a5be55581d
>> compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
>> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=124056de180000
>>
>> Downloadable assets:
>> disk image: https://storage.googleapis.com/syzbot-assets/fb2c1adf4ec3/disk-90d35da6.raw.xz
>> vmlinux: https://storage.googleapis.com/syzbot-assets/09c5b88a8ceb/vmlinux-90d35da6.xz
>> kernel image: https://storage.googleapis.com/syzbot-assets/5e5cbc312e49/bzImage-90d35da6.xz
>>
>> IMPORTANT: if you fix the issue, please add the following tag to the commit:
>> Reported-by: syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com
>
> #syz test https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git

want either no args or 2 args (repo, branch), got 1

> master
>
> diff --git a/kernel/sched/core.c b/kernel/sched/core.c
> index 7019a40457a6..69e344f07e68 100644
> --- a/kernel/sched/core.c
> +++ b/kernel/sched/core.c
> @@ -9233,6 +9233,7 @@ void show_state_filter(unsigned int state_filter)
>                  */
>                 touch_nmi_watchdog();
>                 touch_all_softlockup_watchdogs();
> +               rcu_cpu_stall_reset();
>                 if (state_filter_match(state_filter, p))
>                         sched_show_task(p);
>         }
>
>
>
>
>>
>> rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
>>  1-....
>>  } 4831 jiffies s: 1849 root: 0x2/.
>> rcu: blocking rcu_node structures (internal RCU debug):
>> Sending NMI from CPU 0 to CPUs 1:
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> NMI backtrace for cpu 1
>> CPU: 1 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller #0
>> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
>> RIP: 0010:format_decode+0x546/0x1bb0
>> Code: 85 96 01 00 00 45 84 ff 0f 84 8d 01 00 00 48 bb 00 ff ff ff 00 ff ff ff 48 8b 44 24 20 42 0f b6 04 30 84 c0 0f 85 4d 10 00 00 <48> 8b 54 24 48 48 21 da 48 8b 44 24 28 42 0f b6 04 30 84 c0 48 8d
>> RSP: 0000:ffffc900001efa20 EFLAGS: 00000046
>> RAX: 0000000000000000 RBX: ffffff00ffffff00 RCX: ffff8880219e0000
>> RDX: ffff8880219e0000 RSI: 0000000000000025 RDI: 0000000000000000
>> RBP: ffffc900001efb10 R08: ffffffff8b57a4c8 R09: ffffffff8b57a1aa
>> R10: 0000000000000002 R11: ffff8880219e0000 R12: ffffffff8bab75e6
>> R13: ffffffff8bab75e6 R14: dffffc0000000000 R15: 0000000000000025
>> FS:  0000555555c82480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
>> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> CR2: 00007f74dc087056 CR3: 0000000021bc6000 CR4: 00000000003506f0
>> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
>> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
>> Call Trace:
>>  <NMI>
>>  </NMI>
>>  <IRQ>
>>  vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
>>  sprintf+0xda/0x120 lib/vsprintf.c:3028
>>  print_time kernel/printk/printk.c:1324 [inline]
>>  info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1350
>>  record_print_text kernel/printk/printk.c:1399 [inline]
>>  printk_get_next_message+0x408/0xce0 kernel/printk/printk.c:2828
>>  console_emit_next_record kernel/printk/printk.c:2868 [inline]
>>  console_flush_all+0x42d/0xec0 kernel/printk/printk.c:2967
>>  console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3036
>>  vprintk_emit+0x508/0x720 kernel/printk/printk.c:2303
>>  _printk+0xd5/0x120 kernel/printk/printk.c:2328
>>  printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
>>  show_trace_log_lvl+0x438/0x520 arch/x86/kernel/dumpstack.c:285
>>  sched_show_task+0x50c/0x6d0 kernel/sched/core.c:9171
>>  show_state_filter+0x19e/0x270 kernel/sched/core.c:9216
>>  kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
>>  kbd_event+0x30fa/0x4910 drivers/tty/vt/keyboard.c:1543
>>  input_to_handler drivers/input/input.c:132 [inline]
>>  input_pass_values+0x945/0x1200 drivers/input/input.c:161
>>  input_event_dispose drivers/input/input.c:378 [inline]
>>  input_handle_event drivers/input/input.c:406 [inline]
>>  input_repeat_key+0x3fd/0x6c0 drivers/input/input.c:2263
>>  call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700
>>  expire_timers kernel/time/timer.c:1751 [inline]
>>  __run_timers+0x621/0x830 kernel/time/timer.c:2038
>>  run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
>>  __do_softirq+0x2bb/0x942 kernel/softirq.c:553
>>  invoke_softirq kernel/softirq.c:427 [inline]
>>  __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632
>>  irq_exit_rcu+0x9/0x30 kernel/softirq.c:644
>>  sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:1076
>>  </IRQ>
>>  <TASK>
>>  asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
>> RIP: 0010:page_table_check_set+0x58/0x700 mm/page_table_check.c:109
>> Code: 95 ff 85 ed 0f 84 5f 03 00 00 49 bf 00 00 00 00 00 fc ff df 48 c1 e3 06 48 bd 00 00 00 00 00 ea ff ff 48 8d 3c 2b 48 89 3c 24 <e8> 33 e9 ff ff 49 89 c6 4c 8d 64 2b 08 4c 89 e5 48 c1 ed 03 42 80
>> RSP: 0000:ffffc90004d0f650 EFLAGS: 00000202
>> RAX: 0000000000000000 RBX: 0000000001c8ae80 RCX: ffff8880219e0000
>> RDX: ffff8880219e0000 RSI: 0000000000000001 RDI: ffffea0001c8ae80
>> RBP: ffffea0000000000 R08: ffffffff81fdf590 R09: 1ffffffff1f0880d
>> R10: dffffc0000000000 R11: fffffbfff1f0880e R12: 0000000000000000
>> R13: 0000000000000001 R14: 00000000722ba025 R15: dffffc0000000000
>>  __page_table_check_ptes_set+0x220/0x280 mm/page_table_check.c:196
>>  page_table_check_ptes_set include/linux/page_table_check.h:74 [inline]
>>  set_ptes include/linux/pgtable.h:241 [inline]
>>  set_pte_range+0x885/0x8b0 mm/memory.c:4549
>>  filemap_map_order0_folio mm/filemap.c:3513 [inline]
>>  filemap_map_pages+0xee2/0x1830 mm/filemap.c:3559
>>  do_fault_around mm/memory.c:4716 [inline]
>>  do_read_fault mm/memory.c:4749 [inline]
>>  do_fault mm/memory.c:4888 [inline]
>>  do_pte_missing mm/memory.c:3745 [inline]
>>  handle_pte_fault mm/memory.c:5164 [inline]
>>  __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305
>>  handle_mm_fault+0x27e/0x770 mm/memory.c:5470
>>  do_user_addr_fault arch/x86/mm/fault.c:1355 [inline]
>>  handle_page_fault arch/x86/mm/fault.c:1498 [inline]
>>  exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554
>>  asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
>> RIP: 0033:0x7f74dc087080
>> Code: Unable to access opcode bytes at 0x7f74dc087056.
>> RSP: 002b:00007ffe028d3bb8 EFLAGS: 00010246
>> RAX: 00007f74dcdfb9d0 RBX: 00007f74dcdfb6c0 RCX: 00007f74dc07de67
>> RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74dcdfb6c0
>> RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
>> R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe028d3e60
>> R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
>>  </TASK>
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:kworker/u4:0    state:I stack:24400 pid:11    tgid:11    ppid:2      flags:0x00004000
>> Workqueue:  0x0 (events_unbound)
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:kworker/u4:1    state:I stack:23344 pid:12    tgid:12    ppid:2      flags:0x00004000
>> Workqueue:  0x0 (bat_events)
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:kworker/R-mm_pe state:I stack:28752 pid:13    tgid:13    ppid:2      flags:0x00004000
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  rescuer_thread+0xc45/0xda0 kernel/workqueue.c:2937
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:rcu_tasks_kthre state:I stack:27448 pid:14    tgid:14    ppid:2      flags:0x00004000
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:rcu_tasks_trace state:I stack:27144 pid:15    tgid:15    ppid:2      flags:0x00004000
>> Call Trace:
>>  <TASK>
>>  context_switch kernel/sched/core.c:5400 [inline]
>>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>>  __schedule_loop kernel/sched/core.c:6802 [inline]
>>  schedule+0x149/0x260 kernel/sched/core.c:6817
>>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>>  kthread+0x2ef/0x390 kernel/kthread.c:388
>>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>>  </TASK>
>> task:ksoftirqd/0
>>
>>
>> ---
>> This report is generated by a bot. It may contain errors.
>> See https://goo.gl/tpsmEJ for more information about syzbot.
>> syzbot engineers can be reached at syzkaller@googlegroups.com.
>>
>> syzbot will keep track of this issue. See:
>> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
>>
>> If the report is already addressed, let syzbot know by replying with:
>> #syz fix: exact-commit-title
>>
>> If you want syzbot to run the reproducer, reply with:
>> #syz test: git://repo/address.git branch-or-commit-hash
>> If you attach or paste a git patch, syzbot will apply it before testing.
>>
>> If you want to overwrite report's subsystems, reply with:
>> #syz set subsystems: new-subsystem
>> (See the list of subsystem names on the web dashboard)
>>
>> If the report is a duplicate of another one, reply with:
>> #syz dup: exact-subject-of-another-report
>>
>> If you want to undo deduplication, reply with:
>> #syz undup
>>

From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-io1-f71.google.com (mail-io1-f71.google.com [209.85.166.71])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id 31ECB224C6
	for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 10:08:16 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.166.71
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1710151699; cv=none; b=Q1Zp08+ghwM9fmfRv60lKbFyULRz5oByN0KVxopd7gFGUtnakS43MmcabmLLpOkREo4QyAbEyAOvPbeQ1yg2T4wXgvoPCkIEo0WzDOvFz9xZLUCaSKuIWDndKI46+SHgO96yT3wJGPU8D/bvDS5o3clah9qos7nxcr3EOckoA94=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1710151699; c=relaxed/simple;
	bh=DbXehXlhnP6Bz/Wj6Af8vdtjtc83bBQ3eUP0aXWtPYs=;
	h=MIME-Version:Date:In-Reply-To:Message-ID:Subject:From:To:Cc:
	 Content-Type; b=H+mA4guEQf5pFNwmDSTlU8USNtY5GPcu8V/UrjTi5iUDOM24LlBlj52mOkwGG+UIBds7FYAXWqIJnE3wwCLb3DRVHG/WDQRUsZi23qbne8xLGgxdPY0J3b9dnnuKwBRsgG6bw4zd+bP7O6dzZStU2vrnuwqf+zM25hUYdThQEcs=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.client-ip=209.85.166.71
Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com
Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com
Received: by mail-io1-f71.google.com with SMTP id ca18e2360f4ac-7bc32b2226aso453189339f.2
        for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 03:08:16 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1710151696; x=1710756496;
        h=content-transfer-encoding:cc:to:from:subject:message-id:in-reply-to
         :date:mime-version:x-gm-message-state:from:to:cc:subject:date
         :message-id:reply-to;
        bh=hGXegcpcfqeOx1oIj3nhoXvwQk/1eJ91VZ0Xg27UAus=;
        b=EHEB+SFljZant9eFsNoXXyxSereCqFRqC9Lhc+AoVaUO/PPnAtCCz8D9OQr7Oqh7dy
         ygEX+tfvmbo/QToAPfqI9XzYBSk3dHBfFqTgJgKMLFjZKLJl6OPtVWNX8BLYR/ddmSFP
         VzkHVxe9tq2M+giqh5axWvrc6DfYOa4Vma45qRF0FSOt5EF0jaGtI2u/A1KjOYRCxl3L
         d/9eHisvWPB+DtsEiEq8jX9bC2zRI0nmqPNBBZyKoiTzWlHdTsX1D5owRQ4XPJ1jHwLM
         AXsgYiX0ZLadxD1t0VdyJ9RJH6dyuy9pYxlCPW2A8tOphOwBJDCmSSfkQ4hhfsKgaxbZ
         I5gQ==
X-Forwarded-Encrypted: i=1; AJvYcCXlN8hBIYDiok6BA5BHvVRHEltWcwxHSSzUG0qUKCRdXhpEJa77J1cfzBhMl9DxsfK2Ee/f/hhcNzXmlfQl+WpLXoRHFQ2Hm5c3FtLi
X-Gm-Message-State: AOJu0YxCRAQNZAz++5J/sxHZbdZdwxjRIOtqNoAsUt8ZdCgLGrjHtwm/
	k2GTvfH0t9gLWljyPmQgcW14vD5Z+DlZwrSU9lrSra3mDBiFTcyyz5wclhXggT5TNU31xR5uXzO
	6tCgVIZJfMjz+BnlBxGfLbBJHGFNKfaeJ6HTJ5/xF+Z4IieRF5rY3ttE=
X-Google-Smtp-Source: AGHT+IEdMJarvMkfuhCjH4XGrXH2vepeW4/3vkoQbOdD9ISkE24A8dYVqnDy+Rx02w2KhROEOUTdNuSnsuD9WIZiFS3QWpf9ASD3
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-Received: by 2002:a05:6602:13c6:b0:7c8:b434:8f3c with SMTP id
 o6-20020a05660213c600b007c8b4348f3cmr99900iov.1.1710151696404; Mon, 11 Mar
 2024 03:08:16 -0700 (PDT)
Date: Mon, 11 Mar 2024 03:08:16 -0700
In-Reply-To: <CANp29Y40T7LrN07BnMiGE4u1EK4wo-FgxSGNBQ9dKOn=yajmdA@mail.gmail.com>
X-Google-Appengine-App-Id: s~syzkaller
X-Google-Appengine-App-Id-Alias: syzkaller
Message-ID: <0000000000006072e806135fb8b7@google.com>
Subject: Re: [syzbot] [mm?] [input?] [usb?] INFO: rcu detected stall in asm_exc_page_fault
From: syzbot <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com>
To: nogikh@google.com
Cc: akpm@linux-foundation.org, linux-input@vger.kernel.org, 
	linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-usb@vger.kernel.org, 
	nogikh@google.com, pasha.tatashin@soleen.com, qiang.zhang1211@gmail.com, 
	syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

> On Mon, Mar 11, 2024 at 10:15=E2=80=AFAM syzbot
> <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com> wrote:
>>
>> >>
>> >> Hello,
>> >>
>> >> syzbot found the following issue on:
>> >>
>> >> HEAD commit:    90d35da658da Linux 6.8-rc7
>> >> git tree:       upstream
>> >> console output: https://syzkaller.appspot.com/x/log.txt?x=3D122f6f6a1=
80000
>> >> kernel config:  https://syzkaller.appspot.com/x/.config?x=3D119d08814=
b43915b
>> >> dashboard link: https://syzkaller.appspot.com/bug?extid=3D360faf5c01a=
5be55581d
>> >> compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for=
 Debian) 2.40
>> >> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=3D124056d=
e180000
>> >>
>> >> Downloadable assets:
>> >> disk image: https://storage.googleapis.com/syzbot-assets/fb2c1adf4ec3=
/disk-90d35da6.raw.xz
>> >> vmlinux: https://storage.googleapis.com/syzbot-assets/09c5b88a8ceb/vm=
linux-90d35da6.xz
>> >> kernel image: https://storage.googleapis.com/syzbot-assets/5e5cbc312e=
49/bzImage-90d35da6.xz
>> >>
>> >> IMPORTANT: if you fix the issue, please add the following tag to the =
commit:
>> >> Reported-by: syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com
>> >
>> > #syz test https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-n=
ext.git
>
> Please try to either put this whole command on one line or add : after
> #syz test (as in the example at the bottom of the report), then syzbot

want either no args or 2 args (repo, branch), got 12

> will parse the next line with the branch name as well.
>
> --=20
> Aleksandr
>
>>
>> want either no args or 2 args (repo, branch), got 1
>>
>> > master
>> >
>> > diff --git a/kernel/sched/core.c b/kernel/sched/core.c
>> > index 7019a40457a6..69e344f07e68 100644
>> > --- a/kernel/sched/core.c
>> > +++ b/kernel/sched/core.c
>> > @@ -9233,6 +9233,7 @@ void show_state_filter(unsigned int state_filter=
)
>> >                  */
>> >                 touch_nmi_watchdog();
>> >                 touch_all_softlockup_watchdogs();
>> > +               rcu_cpu_stall_reset();
>> >                 if (state_filter_match(state_filter, p))
>> >                         sched_show_task(p);
>> >         }
>> >
>> >
>> >
>> >
>> >>
>> >> rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
>> >>  1-....
>> >>  } 4831 jiffies s: 1849 root: 0x2/.
>> >> rcu: blocking rcu_node structures (internal RCU debug):
>> >> Sending NMI from CPU 0 to CPUs 1:
>> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> >> NMI backtrace for cpu 1
>> >> CPU: 1 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller=
 #0
>> >> Hardware name: Google Google Compute Engine/Google Compute Engine, BI=
OS Google 01/25/2024
>> >> RIP: 0010:format_decode+0x546/0x1bb0
>> >> Code: 85 96 01 00 00 45 84 ff 0f 84 8d 01 00 00 48 bb 00 ff ff ff 00 =
ff ff ff 48 8b 44 24 20 42 0f b6 04 30 84 c0 0f 85 4d 10 00 00 <48> 8b 54 2=
4 48 48 21 da 48 8b 44 24 28 42 0f b6 04 30 84 c0 48 8d
>> >> RSP: 0000:ffffc900001efa20 EFLAGS: 00000046
>> >> RAX: 0000000000000000 RBX: ffffff00ffffff00 RCX: ffff8880219e0000
>> >> RDX: ffff8880219e0000 RSI: 0000000000000025 RDI: 0000000000000000
>> >> RBP: ffffc900001efb10 R08: ffffffff8b57a4c8 R09: ffffffff8b57a1aa
>> >> R10: 0000000000000002 R11: ffff8880219e0000 R12: ffffffff8bab75e6
>> >> R13: ffffffff8bab75e6 R14: dffffc0000000000 R15: 0000000000000025
>> >> FS:  0000555555c82480(0000) GS:ffff8880b9500000(0000) knlGS:000000000=
0000000
>> >> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> >> CR2: 00007f74dc087056 CR3: 0000000021bc6000 CR4: 00000000003506f0
>> >> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
>> >> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
>> >> Call Trace:
>> >>  <NMI>
>> >>  </NMI>
>> >>  <IRQ>
>> >>  vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
>> >>  sprintf+0xda/0x120 lib/vsprintf.c:3028
>> >>  print_time kernel/printk/printk.c:1324 [inline]
>> >>  info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1350
>> >>  record_print_text kernel/printk/printk.c:1399 [inline]
>> >>  printk_get_next_message+0x408/0xce0 kernel/printk/printk.c:2828
>> >>  console_emit_next_record kernel/printk/printk.c:2868 [inline]
>> >>  console_flush_all+0x42d/0xec0 kernel/printk/printk.c:2967
>> >>  console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3036
>> >>  vprintk_emit+0x508/0x720 kernel/printk/printk.c:2303
>> >>  _printk+0xd5/0x120 kernel/printk/printk.c:2328
>> >>  printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
>> >>  show_trace_log_lvl+0x438/0x520 arch/x86/kernel/dumpstack.c:285
>> >>  sched_show_task+0x50c/0x6d0 kernel/sched/core.c:9171
>> >>  show_state_filter+0x19e/0x270 kernel/sched/core.c:9216
>> >>  kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
>> >>  kbd_event+0x30fa/0x4910 drivers/tty/vt/keyboard.c:1543
>> >>  input_to_handler drivers/input/input.c:132 [inline]
>> >>  input_pass_values+0x945/0x1200 drivers/input/input.c:161
>> >>  input_event_dispose drivers/input/input.c:378 [inline]
>> >>  input_handle_event drivers/input/input.c:406 [inline]
>> >>  input_repeat_key+0x3fd/0x6c0 drivers/input/input.c:2263
>> >>  call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700
>> >>  expire_timers kernel/time/timer.c:1751 [inline]
>> >>  __run_timers+0x621/0x830 kernel/time/timer.c:2038
>> >>  run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
>> >>  __do_softirq+0x2bb/0x942 kernel/softirq.c:553
>> >>  invoke_softirq kernel/softirq.c:427 [inline]
>> >>  __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632
>> >>  irq_exit_rcu+0x9/0x30 kernel/softirq.c:644
>> >>  sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:10=
76
>> >>  </IRQ>
>> >>  <TASK>
>> >>  asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idten=
try.h:649
>> >> RIP: 0010:page_table_check_set+0x58/0x700 mm/page_table_check.c:109
>> >> Code: 95 ff 85 ed 0f 84 5f 03 00 00 49 bf 00 00 00 00 00 fc ff df 48 =
c1 e3 06 48 bd 00 00 00 00 00 ea ff ff 48 8d 3c 2b 48 89 3c 24 <e8> 33 e9 f=
f ff 49 89 c6 4c 8d 64 2b 08 4c 89 e5 48 c1 ed 03 42 80
>> >> RSP: 0000:ffffc90004d0f650 EFLAGS: 00000202
>> >> RAX: 0000000000000000 RBX: 0000000001c8ae80 RCX: ffff8880219e0000
>> >> RDX: ffff8880219e0000 RSI: 0000000000000001 RDI: ffffea0001c8ae80
>> >> RBP: ffffea0000000000 R08: ffffffff81fdf590 R09: 1ffffffff1f0880d
>> >> R10: dffffc0000000000 R11: fffffbfff1f0880e R12: 0000000000000000
>> >> R13: 0000000000000001 R14: 00000000722ba025 R15: dffffc0000000000
>> >>  __page_table_check_ptes_set+0x220/0x280 mm/page_table_check.c:196
>> >>  page_table_check_ptes_set include/linux/page_table_check.h:74 [inlin=
e]
>> >>  set_ptes include/linux/pgtable.h:241 [inline]
>> >>  set_pte_range+0x885/0x8b0 mm/memory.c:4549
>> >>  filemap_map_order0_folio mm/filemap.c:3513 [inline]
>> >>  filemap_map_pages+0xee2/0x1830 mm/filemap.c:3559
>> >>  do_fault_around mm/memory.c:4716 [inline]
>> >>  do_read_fault mm/memory.c:4749 [inline]
>> >>  do_fault mm/memory.c:4888 [inline]
>> >>  do_pte_missing mm/memory.c:3745 [inline]
>> >>  handle_pte_fault mm/memory.c:5164 [inline]
>> >>  __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305
>> >>  handle_mm_fault+0x27e/0x770 mm/memory.c:5470
>> >>  do_user_addr_fault arch/x86/mm/fault.c:1355 [inline]
>> >>  handle_page_fault arch/x86/mm/fault.c:1498 [inline]
>> >>  exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554
>> >>  asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
>> >> RIP: 0033:0x7f74dc087080
>> >> Code: Unable to access opcode bytes at 0x7f74dc087056.
>> >> RSP: 002b:00007ffe028d3bb8 EFLAGS: 00010246
>> >> RAX: 00007f74dcdfb9d0 RBX: 00007f74dcdfb6c0 RCX: 00007f74dc07de67
>> >> RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74dcdfb6c0
>> >> RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
>> >> R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe028d3e60
>> >> R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
>> >>  </TASK>
>> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>> >>  </TASK>
>> >> task:kworker/u4:0    state:I stack:24400 pid:11    tgid:11    ppid:2 =
     flags:0x00004000
>> >> Workqueue:  0x0 (events_unbound)
>> >> Call Trace:
>> >>  <TASK>
>> >>  context_switch kernel/sched/core.c:5400 [inline]
>> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
>> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
>> >>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>> >>  </TASK>
>> >> task:kworker/u4:1    state:I stack:23344 pid:12    tgid:12    ppid:2 =
     flags:0x00004000
>> >> Workqueue:  0x0 (bat_events)
>> >> Call Trace:
>> >>  <TASK>
>> >>  context_switch kernel/sched/core.c:5400 [inline]
>> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
>> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
>> >>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
>> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>> >>  </TASK>
>> >> task:kworker/R-mm_pe state:I stack:28752 pid:13    tgid:13    ppid:2 =
     flags:0x00004000
>> >> Call Trace:
>> >>  <TASK>
>> >>  context_switch kernel/sched/core.c:5400 [inline]
>> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
>> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
>> >>  rescuer_thread+0xc45/0xda0 kernel/workqueue.c:2937
>> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>> >>  </TASK>
>> >> task:rcu_tasks_kthre state:I stack:27448 pid:14    tgid:14    ppid:2 =
     flags:0x00004000
>> >> Call Trace:
>> >>  <TASK>
>> >>  context_switch kernel/sched/core.c:5400 [inline]
>> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
>> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
>> >>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>> >>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>> >>  </TASK>
>> >> task:rcu_tasks_trace state:I stack:27144 pid:15    tgid:15    ppid:2 =
     flags:0x00004000
>> >> Call Trace:
>> >>  <TASK>
>> >>  context_switch kernel/sched/core.c:5400 [inline]
>> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
>> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
>> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
>> >>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
>> >>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
>> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
>> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
>> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
>> >>  </TASK>
>> >> task:ksoftirqd/0
>> >>
>> >>
>> >> ---
>> >> This report is generated by a bot. It may contain errors.
>> >> See https://goo.gl/tpsmEJ for more information about syzbot.
>> >> syzbot engineers can be reached at syzkaller@googlegroups.com.
>> >>
>> >> syzbot will keep track of this issue. See:
>> >> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
>> >>
>> >> If the report is already addressed, let syzbot know by replying with:
>> >> #syz fix: exact-commit-title
>> >>
>> >> If you want syzbot to run the reproducer, reply with:
>> >> #syz test: git://repo/address.git branch-or-commit-hash
>> >> If you attach or paste a git patch, syzbot will apply it before testi=
ng.
>> >>
>> >> If you want to overwrite report's subsystems, reply with:
>> >> #syz set subsystems: new-subsystem
>> >> (See the list of subsystem names on the web dashboard)
>> >>
>> >> If the report is a duplicate of another one, reply with:
>> >> #syz dup: exact-subject-of-another-report
>> >>
>> >> If you want to undo deduplication, reply with:
>> >> #syz undup
>> >>
>>
>> --
>> You received this message because you are subscribed to the Google Group=
s "syzkaller-bugs" group.
>> To unsubscribe from this group and stop receiving emails from it, send a=
n email to syzkaller-bugs+unsubscribe@googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/msg=
id/syzkaller-bugs/0000000000007d76cf06135efac5%40google.com.

From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-pl1-f178.google.com (mail-pl1-f178.google.com [209.85.214.178])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1CAEA14F75
	for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 10:08:15 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.178
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1710151697; cv=none; b=PtR7QXQEVmn7pXqgXDkwAssglBjOd8N2fCdAW5UDKZTVDMavA7SELXC6aC+WRwYS/huZlxZWrMI0xGouQJ+8glY63Bq/0t3vIzXEAcndR2F9DidfyfshOkySu696Dajf3XMjU+HwMDqowA6VEOAud3xIN4qm9TW2zA3fzt15hIQ=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1710151697; c=relaxed/simple;
	bh=wY1Lnr14Gr3ee1PdiW1505U7Gtq+VQI2sT3f7n101bc=;
	h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject:
	 To:Cc:Content-Type; b=GEn6BtI0x4a4bNccj7moo/mlE4UNGf+GM9OPSSc9CJhrOt7nA0KHpUwuKmAj3+UP+5u5jwLMarPul6WASnODRL0xWbTV3TJTWm4uKUyyDhpZLNakxM6HB/mxneLzHC3Nj9PNrLPfasu3AKWaXuYDojddOO7weASlGLyW9mfgC6I=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=fvKwfpbH; arc=none smtp.client-ip=209.85.214.178
Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com
Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=google.com
Authentication-Results: smtp.subspace.kernel.org;
	dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="fvKwfpbH"
Received: by mail-pl1-f178.google.com with SMTP id d9443c01a7336-1dd80777328so131035ad.1
        for <linux-kernel@vger.kernel.org>; Mon, 11 Mar 2024 03:08:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=google.com; s=20230601; t=1710151695; x=1710756495; darn=vger.kernel.org;
        h=content-transfer-encoding:cc:to:subject:message-id:date:from
         :in-reply-to:references:mime-version:from:to:cc:subject:date
         :message-id:reply-to;
        bh=H/yW6l1x8QPV4dtLtLPXS4oujA80bfHi2C71JoVyook=;
        b=fvKwfpbHyyPwCmz96Q8a2SqMIlsHQrCupNUCOUAK9CJZqb1sFEA0ppRpxpx2gc1/ms
         GzShzTcfNxV5JaPoJiOKnSueuqBdoscQqmi4CYQF/69OkwxApuwmijNpjm6KdF1tOal6
         EuEAQQ8P5zN+796VKFC1LCd1iRWT/uaQtrCHvv7zwsQfe21AZiOXkF+BzlCuYs4boFwf
         kmXamaZOboeuQHerdw9PqmsCX3nfhtBvV96muEdh1LuxtDmVadyqzPlue/UXhl5do3FP
         ByEuiDjs2b3/96UfqsUJ2xdqEhBZHgf0Infh3Uakth6rPkAVg5RAUyIRpsFLdSmDRTGa
         nOeQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1710151695; x=1710756495;
        h=content-transfer-encoding:cc:to:subject:message-id:date:from
         :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
         :subject:date:message-id:reply-to;
        bh=H/yW6l1x8QPV4dtLtLPXS4oujA80bfHi2C71JoVyook=;
        b=cwCtI/iW0WSqvFOJWBk4nzKh+rsiXjY7WSTc/2Ts3niwOWAdgWoYEIV31pGJuviTBe
         m9PXqWds8oXID+cgq3v0cJ/lXpfLcPZ/1UytrKgQTsZzSgaws0/cK5dLZunEnSE3nNYm
         +10Zde480Z4XW7VYW9McnNvvZU5SKjR/z+EgIcwV46p/0iKd1egi0CiYSsoQBhJIJC7S
         q47pjtUQoPxxfJlaNSD3TorxdIxYEuIrrAG8pv+7uF7Pb4QKpAzzkgMW76S4nvzUyVHr
         JrVOrMEXSjNGIVpIuE3bcI/i78lh7/KfyUKKumXLZabZNKMxS7c4ZlwfUdzw5DDf/kng
         V+Rg==
X-Forwarded-Encrypted: i=1; AJvYcCUtti+tVZuK65jdYD0o2NfWl5GXMG3Sud3pWtaT1Qqrl3A68zDi7CY6LeC2OHSaiCWby54JXzxndKGtu4Hw4YI/n2xozoftIRpt0z5Q
X-Gm-Message-State: AOJu0YyKMKGWla6W/fPhZfaF9SgSLOXhspVvWVDrp+PzqgnP+9+pFV6U
	l1L95FQJt4BFgAdiZgvj60pecCf8GWEELxFkG92Kp4JjopqUMv46PsEpFtxK0H/CtwGsn8R5iGg
	Sp0HjjVsymfKz2Tj3PCWsY7+JydFO/7GS6X2tcQwZc+NUeZSYmQ==
X-Google-Smtp-Source: AGHT+IHTYrS4yA3ZPmRfUPhMJWfq3GMKadDtBjn0um0LLUQe+5pPobW/IE/2/3EysK16O6dVHcr4VelWgKF7+ZzSfMA=
X-Received: by 2002:a17:902:ec87:b0:1dd:9543:3fe3 with SMTP id
 x7-20020a170902ec8700b001dd95433fe3mr118969plg.23.1710151695136; Mon, 11 Mar
 2024 03:08:15 -0700 (PDT)
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
References: <CALm+0cVun=SSczF2hJPJFZU85NMmntScWAFLL7e9pXJiVt+qWw@mail.gmail.com>
 <0000000000007d76cf06135efac5@google.com>
In-Reply-To: <0000000000007d76cf06135efac5@google.com>
From: Aleksandr Nogikh <nogikh@google.com>
Date: Mon, 11 Mar 2024 11:08:00 +0100
Message-ID: <CANp29Y40T7LrN07BnMiGE4u1EK4wo-FgxSGNBQ9dKOn=yajmdA@mail.gmail.com>
Subject: Re: [syzbot] [mm?] [input?] [usb?] INFO: rcu detected stall in asm_exc_page_fault
To: syzbot <syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com>
Cc: qiang.zhang1211@gmail.com, akpm@linux-foundation.org, 
	linux-input@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, 
	linux-usb@vger.kernel.org, pasha.tatashin@soleen.com, 
	syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Mar 11, 2024 at 10:15=E2=80=AFAM syzbot
<syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com> wrote:
>
> >>
> >> Hello,
> >>
> >> syzbot found the following issue on:
> >>
> >> HEAD commit:    90d35da658da Linux 6.8-rc7
> >> git tree:       upstream
> >> console output: https://syzkaller.appspot.com/x/log.txt?x=3D122f6f6a18=
0000
> >> kernel config:  https://syzkaller.appspot.com/x/.config?x=3D119d08814b=
43915b
> >> dashboard link: https://syzkaller.appspot.com/bug?extid=3D360faf5c01a5=
be55581d
> >> compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for =
Debian) 2.40
> >> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=3D124056de=
180000
> >>
> >> Downloadable assets:
> >> disk image: https://storage.googleapis.com/syzbot-assets/fb2c1adf4ec3/=
disk-90d35da6.raw.xz
> >> vmlinux: https://storage.googleapis.com/syzbot-assets/09c5b88a8ceb/vml=
inux-90d35da6.xz
> >> kernel image: https://storage.googleapis.com/syzbot-assets/5e5cbc312e4=
9/bzImage-90d35da6.xz
> >>
> >> IMPORTANT: if you fix the issue, please add the following tag to the c=
ommit:
> >> Reported-by: syzbot+360faf5c01a5be55581d@syzkaller.appspotmail.com
> >
> > #syz test https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-ne=
xt.git

Please try to either put this whole command on one line or add : after
#syz test (as in the example at the bottom of the report), then syzbot
will parse the next line with the branch name as well.

--=20
Aleksandr

>
> want either no args or 2 args (repo, branch), got 1
>
> > master
> >
> > diff --git a/kernel/sched/core.c b/kernel/sched/core.c
> > index 7019a40457a6..69e344f07e68 100644
> > --- a/kernel/sched/core.c
> > +++ b/kernel/sched/core.c
> > @@ -9233,6 +9233,7 @@ void show_state_filter(unsigned int state_filter)
> >                  */
> >                 touch_nmi_watchdog();
> >                 touch_all_softlockup_watchdogs();
> > +               rcu_cpu_stall_reset();
> >                 if (state_filter_match(state_filter, p))
> >                         sched_show_task(p);
> >         }
> >
> >
> >
> >
> >>
> >> rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
> >>  1-....
> >>  } 4831 jiffies s: 1849 root: 0x2/.
> >> rcu: blocking rcu_node structures (internal RCU debug):
> >> Sending NMI from CPU 0 to CPUs 1:
> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
> >> NMI backtrace for cpu 1
> >> CPU: 1 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller =
#0
> >> Hardware name: Google Google Compute Engine/Google Compute Engine, BIO=
S Google 01/25/2024
> >> RIP: 0010:format_decode+0x546/0x1bb0
> >> Code: 85 96 01 00 00 45 84 ff 0f 84 8d 01 00 00 48 bb 00 ff ff ff 00 f=
f ff ff 48 8b 44 24 20 42 0f b6 04 30 84 c0 0f 85 4d 10 00 00 <48> 8b 54 24=
 48 48 21 da 48 8b 44 24 28 42 0f b6 04 30 84 c0 48 8d
> >> RSP: 0000:ffffc900001efa20 EFLAGS: 00000046
> >> RAX: 0000000000000000 RBX: ffffff00ffffff00 RCX: ffff8880219e0000
> >> RDX: ffff8880219e0000 RSI: 0000000000000025 RDI: 0000000000000000
> >> RBP: ffffc900001efb10 R08: ffffffff8b57a4c8 R09: ffffffff8b57a1aa
> >> R10: 0000000000000002 R11: ffff8880219e0000 R12: ffffffff8bab75e6
> >> R13: ffffffff8bab75e6 R14: dffffc0000000000 R15: 0000000000000025
> >> FS:  0000555555c82480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000=
000000
> >> CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> >> CR2: 00007f74dc087056 CR3: 0000000021bc6000 CR4: 00000000003506f0
> >> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> >> DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> >> Call Trace:
> >>  <NMI>
> >>  </NMI>
> >>  <IRQ>
> >>  vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
> >>  sprintf+0xda/0x120 lib/vsprintf.c:3028
> >>  print_time kernel/printk/printk.c:1324 [inline]
> >>  info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1350
> >>  record_print_text kernel/printk/printk.c:1399 [inline]
> >>  printk_get_next_message+0x408/0xce0 kernel/printk/printk.c:2828
> >>  console_emit_next_record kernel/printk/printk.c:2868 [inline]
> >>  console_flush_all+0x42d/0xec0 kernel/printk/printk.c:2967
> >>  console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3036
> >>  vprintk_emit+0x508/0x720 kernel/printk/printk.c:2303
> >>  _printk+0xd5/0x120 kernel/printk/printk.c:2328
> >>  printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
> >>  show_trace_log_lvl+0x438/0x520 arch/x86/kernel/dumpstack.c:285
> >>  sched_show_task+0x50c/0x6d0 kernel/sched/core.c:9171
> >>  show_state_filter+0x19e/0x270 kernel/sched/core.c:9216
> >>  kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
> >>  kbd_event+0x30fa/0x4910 drivers/tty/vt/keyboard.c:1543
> >>  input_to_handler drivers/input/input.c:132 [inline]
> >>  input_pass_values+0x945/0x1200 drivers/input/input.c:161
> >>  input_event_dispose drivers/input/input.c:378 [inline]
> >>  input_handle_event drivers/input/input.c:406 [inline]
> >>  input_repeat_key+0x3fd/0x6c0 drivers/input/input.c:2263
> >>  call_timer_fn+0x17e/0x600 kernel/time/timer.c:1700
> >>  expire_timers kernel/time/timer.c:1751 [inline]
> >>  __run_timers+0x621/0x830 kernel/time/timer.c:2038
> >>  run_timer_softirq+0x67/0xf0 kernel/time/timer.c:2051
> >>  __do_softirq+0x2bb/0x942 kernel/softirq.c:553
> >>  invoke_softirq kernel/softirq.c:427 [inline]
> >>  __irq_exit_rcu+0xf1/0x1c0 kernel/softirq.c:632
> >>  irq_exit_rcu+0x9/0x30 kernel/softirq.c:644
> >>  sysvec_apic_timer_interrupt+0x97/0xb0 arch/x86/kernel/apic/apic.c:107=
6
> >>  </IRQ>
> >>  <TASK>
> >>  asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtent=
ry.h:649
> >> RIP: 0010:page_table_check_set+0x58/0x700 mm/page_table_check.c:109
> >> Code: 95 ff 85 ed 0f 84 5f 03 00 00 49 bf 00 00 00 00 00 fc ff df 48 c=
1 e3 06 48 bd 00 00 00 00 00 ea ff ff 48 8d 3c 2b 48 89 3c 24 <e8> 33 e9 ff=
 ff 49 89 c6 4c 8d 64 2b 08 4c 89 e5 48 c1 ed 03 42 80
> >> RSP: 0000:ffffc90004d0f650 EFLAGS: 00000202
> >> RAX: 0000000000000000 RBX: 0000000001c8ae80 RCX: ffff8880219e0000
> >> RDX: ffff8880219e0000 RSI: 0000000000000001 RDI: ffffea0001c8ae80
> >> RBP: ffffea0000000000 R08: ffffffff81fdf590 R09: 1ffffffff1f0880d
> >> R10: dffffc0000000000 R11: fffffbfff1f0880e R12: 0000000000000000
> >> R13: 0000000000000001 R14: 00000000722ba025 R15: dffffc0000000000
> >>  __page_table_check_ptes_set+0x220/0x280 mm/page_table_check.c:196
> >>  page_table_check_ptes_set include/linux/page_table_check.h:74 [inline=
]
> >>  set_ptes include/linux/pgtable.h:241 [inline]
> >>  set_pte_range+0x885/0x8b0 mm/memory.c:4549
> >>  filemap_map_order0_folio mm/filemap.c:3513 [inline]
> >>  filemap_map_pages+0xee2/0x1830 mm/filemap.c:3559
> >>  do_fault_around mm/memory.c:4716 [inline]
> >>  do_read_fault mm/memory.c:4749 [inline]
> >>  do_fault mm/memory.c:4888 [inline]
> >>  do_pte_missing mm/memory.c:3745 [inline]
> >>  handle_pte_fault mm/memory.c:5164 [inline]
> >>  __handle_mm_fault+0x485d/0x72d0 mm/memory.c:5305
> >>  handle_mm_fault+0x27e/0x770 mm/memory.c:5470
> >>  do_user_addr_fault arch/x86/mm/fault.c:1355 [inline]
> >>  handle_page_fault arch/x86/mm/fault.c:1498 [inline]
> >>  exc_page_fault+0x456/0x870 arch/x86/mm/fault.c:1554
> >>  asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
> >> RIP: 0033:0x7f74dc087080
> >> Code: Unable to access opcode bytes at 0x7f74dc087056.
> >> RSP: 002b:00007ffe028d3bb8 EFLAGS: 00010246
> >> RAX: 00007f74dcdfb9d0 RBX: 00007f74dcdfb6c0 RCX: 00007f74dc07de67
> >> RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74dcdfb6c0
> >> RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
> >> R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe028d3e60
> >> R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
> >>  </TASK>
> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
> >>  </TASK>
> >> task:kworker/u4:0    state:I stack:24400 pid:11    tgid:11    ppid:2  =
    flags:0x00004000
> >> Workqueue:  0x0 (events_unbound)
> >> Call Trace:
> >>  <TASK>
> >>  context_switch kernel/sched/core.c:5400 [inline]
> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
> >>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
> >>  </TASK>
> >> task:kworker/u4:1    state:I stack:23344 pid:12    tgid:12    ppid:2  =
    flags:0x00004000
> >> Workqueue:  0x0 (bat_events)
> >> Call Trace:
> >>  <TASK>
> >>  context_switch kernel/sched/core.c:5400 [inline]
> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
> >>  worker_thread+0xc26/0x1000 kernel/workqueue.c:2802
> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
> >>  </TASK>
> >> task:kworker/R-mm_pe state:I stack:28752 pid:13    tgid:13    ppid:2  =
    flags:0x00004000
> >> Call Trace:
> >>  <TASK>
> >>  context_switch kernel/sched/core.c:5400 [inline]
> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
> >>  rescuer_thread+0xc45/0xda0 kernel/workqueue.c:2937
> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
> >>  </TASK>
> >> task:rcu_tasks_kthre state:I stack:27448 pid:14    tgid:14    ppid:2  =
    flags:0x00004000
> >> Call Trace:
> >>  <TASK>
> >>  context_switch kernel/sched/core.c:5400 [inline]
> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
> >>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
> >>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
> >>  </TASK>
> >> task:rcu_tasks_trace state:I stack:27144 pid:15    tgid:15    ppid:2  =
    flags:0x00004000
> >> Call Trace:
> >>  <TASK>
> >>  context_switch kernel/sched/core.c:5400 [inline]
> >>  __schedule+0x177f/0x49a0 kernel/sched/core.c:6727
> >>  __schedule_loop kernel/sched/core.c:6802 [inline]
> >>  schedule+0x149/0x260 kernel/sched/core.c:6817
> >>  rcu_tasks_one_gp+0x7f5/0xda0 kernel/rcu/tasks.h:578
> >>  rcu_tasks_kthread+0x186/0x1b0 kernel/rcu/tasks.h:625
> >>  kthread+0x2ef/0x390 kernel/kthread.c:388
> >>  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> >>  ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:243
> >>  </TASK>
> >> task:ksoftirqd/0
> >>
> >>
> >> ---
> >> This report is generated by a bot. It may contain errors.
> >> See https://goo.gl/tpsmEJ for more information about syzbot.
> >> syzbot engineers can be reached at syzkaller@googlegroups.com.
> >>
> >> syzbot will keep track of this issue. See:
> >> https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
> >>
> >> If the report is already addressed, let syzbot know by replying with:
> >> #syz fix: exact-commit-title
> >>
> >> If you want syzbot to run the reproducer, reply with:
> >> #syz test: git://repo/address.git branch-or-commit-hash
> >> If you attach or paste a git patch, syzbot will apply it before testin=
g.
> >>
> >> If you want to overwrite report's subsystems, reply with:
> >> #syz set subsystems: new-subsystem
> >> (See the list of subsystem names on the web dashboard)
> >>
> >> If the report is a duplicate of another one, reply with:
> >> #syz dup: exact-subject-of-another-report
> >>
> >> If you want to undo deduplication, reply with:
> >> #syz undup
> >>
>
> --
> You received this message because you are subscribed to the Google Groups=
 "syzkaller-bugs" group.
> To unsubscribe from this group and stop receiving emails from it, send an=
 email to syzkaller-bugs+unsubscribe@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgi=
d/syzkaller-bugs/0000000000007d76cf06135efac5%40google.com.

