syzbot


INFO: rcu detected stall in ip_list_rcv (6)

Status: upstream: reported C repro on 2023/12/04 09:45
Subsystems: netfilter virt
[Documentation on labels]
Reported-by: syzbot+45b67ef6e09a39a2cbcd@syzkaller.appspotmail.com
First crash: 318d, last: 4d10h
Cause bisection: introduced by (bisect log) :
commit b5b73b26b3ca34574124ed7ae9c5ba8391a7f176
Author: Vinicius Costa Gomes <vinicius.gomes@intel.com>
Date: Thu Sep 10 00:03:11 2020 +0000

  taprio: Fix allowing too small intervals

Crash: INFO: rcu detected stall in do_idle (log)
Repro: C syz .config
  
Fix bisection: fixed by (bisect log) :
commit e634134180885574d1fe7aa162777ba41e7fcd5b
Author: Vladimir Oltean <vladimir.oltean@nxp.com>
Date: Mon May 27 15:39:54 2024 +0000

  net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()

  
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] [net?] INFO: rcu detected stall in ip_list_rcv (6) 5 (7) 2024/09/14 16:12
[syzbot] Monthly netfilter report (Aug 2024) 0 (1) 2024/08/05 12:54
Similar bugs (12)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: soft lockup in ip_list_rcv (2) kvm 8 902d 902d 0/28 auto-closed as invalid on 2022/06/25 08:42
linux-5.15 INFO: rcu detected stall in ip_list_rcv 2 31d 86d 0/3 upstream: reported on 2024/07/20 04:22
linux-6.1 INFO: rcu detected stall in ip_list_rcv 1 47d 47d 0/3 upstream: reported on 2024/08/28 18:02
upstream INFO: rcu detected stall in ip_list_rcv (5) lsm netfilter 3 458d 517d 0/28 auto-obsoleted due to no activity on 2023/10/11 22:12
upstream INFO: rcu detected stall in ip_list_rcv net C error done 3 1476d 1502d 15/28 fixed on 2020/11/16 12:12
upstream INFO: rcu detected stall in ip_list_rcv (4) netfilter 1 834d 834d 0/28 auto-closed as invalid on 2022/09/01 16:20
upstream INFO: rcu detected stall in ip_list_rcv (2) netfilter 3 1330d 1409d 0/28 auto-closed as invalid on 2021/05/23 12:59
upstream INFO: rcu detected stall in ip_list_rcv (3) net 1 1022d 1022d 0/28 closed as invalid on 2022/02/08 10:10
android-5-15 BUG: soft lockup in ip_list_rcv 20 20d 174d 0/2 premoderation: reported on 2024/04/23 12:02
android-6-1 BUG: soft lockup in ip_list_rcv 2 73d 95d 0/2 premoderation: reported on 2024/07/11 05:20
android-5-10 BUG: soft lockup in ip_list_rcv 1 69d 69d 0/2 premoderation: reported on 2024/08/06 20:21
upstream BUG: soft lockup in ip_list_rcv net 1 1403d 1403d 0/28 auto-closed as invalid on 2021/03/11 09:36
Last patch testing requests (2)
Created Duration User Patch Repo Result
2024/08/28 20:24 32m retest repro net-next OK log
2023/12/15 17:57 16m retest repro net-next report log
Fix bisection attempts (4)
Created Duration User Patch Repo Result
2024/09/14 05:11 11h00m bisect fix net-next OK (1) job log
2024/03/11 11:39 1h52m bisect fix net-next OK (0) job log log
2024/02/08 15:39 3h22m bisect fix net-next OK (0) job log log
2023/12/31 18:23 3h28m bisect fix net-next OK (0) job log log

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2665 jiffies s: 14657 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 18261 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:in_softirq_really kernel/kcov.c:170 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x1e/0x70 kernel/kcov.c:216
Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 d4 ff 77 7e 65 8b 05 d5 ff 77 7e a9 00 01 ff 00 48 8b 34 24 74 1d <f6> c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c
RSP: 0018:ffffc900000063d0 EFLAGS: 00000006
RAX: 0000000000010102 RBX: ffffc90000006458 RCX: ffffffff813d0689
RDX: ffff88807c2cda00 RSI: ffffffff813d1253 RDI: 0000000000000001
RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff9161cebc
R13: ffffc90000006ed8 R14: ffffffff9161cec0 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31e06ff8 CR3: 000000000db7c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 deref_stack_regs arch/x86/kernel/unwind_orc.c:418 [inline]
 unwind_next_frame+0x1353/0x23a0 arch/x86/kernel/unwind_orc.c:596
 arch_stack_walk+0x100/0x170 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:387
 kmalloc_noprof include/linux/slab.h:690 [inline]
 dummy_urb_enqueue+0x8d/0x8a0 drivers/usb/gadget/udc/dummy_hcd.c:1271
 usb_hcd_submit_urb+0x2d1/0x2090 drivers/usb/core/hcd.c:1533
 usb_submit_urb+0x87c/0x1730 drivers/usb/core/urb.c:581
 ath9k_hif_usb_reg_in_cb+0x500/0x720 drivers/net/wireless/ath/ath9k/hif_usb.c:790
 __usb_hcd_giveback_urb+0x389/0x6e0 drivers/usb/core/hcd.c:1650
 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
 dummy_timer+0x17c3/0x38d0 drivers/usb/gadget/udc/dummy_hcd.c:1987
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x43/0xb0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:26 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline]
RIP: 0010:write_comp_data+0x11/0x90 kernel/kcov.c:245
Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 4f ff 77 7e <65> 8b 05 50 ff 77 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00
RSP: 0018:ffffc90000006f88 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff888078c626a8 RCX: ffffffff897bfa4f
RDX: ffff88807c2cda00 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000000 R12: ffff888078c626c0
R13: 000000009e88907d R14: ffff888078c62670 R15: dffffc0000000000
 __inet_lookup_established+0x43f/0x800 net/ipv4/inet_hashtables.c:513
 __inet_lookup include/net/inet_hashtables.h:419 [inline]
 __inet_lookup_skb include/net/inet_hashtables.h:506 [inline]
 tcp_v4_rcv+0x1d68/0x4390 net/ipv4/tcp_ipv4.c:2219
 ip_protocol_deliver_rcu+0xba/0x4c0 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x316/0x570 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:314 [inline]
 NF_HOOK include/linux/netfilter.h:308 [inline]
 ip_local_deliver+0x18e/0x1f0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:460 [inline]
 ip_sublist_rcv_finish+0x2c1/0x620 net/ipv4/ip_input.c:580
 ip_list_rcv_finish.constprop.0+0x559/0x720 net/ipv4/ip_input.c:630
 ip_sublist_rcv net/ipv4/ip_input.c:638 [inline]
 ip_list_rcv+0x339/0x450 net/ipv4/ip_input.c:672
 __netif_receive_skb_list_ptype net/core/dev.c:5705 [inline]
 __netif_receive_skb_list_core+0x755/0x950 net/core/dev.c:5752
 __netif_receive_skb_list net/core/dev.c:5804 [inline]
 netif_receive_skb_list_internal+0x753/0xdb0 net/core/dev.c:5895
 gro_normal_list include/net/gro.h:515 [inline]
 gro_normal_one include/net/gro.h:528 [inline]
 napi_skb_finish net/core/gro.c:610 [inline]
 napi_gro_receive+0xa16/0xc60 net/core/gro.c:640
 virtnet_receive_done+0xa6c/0x1a00 drivers/net/virtio_net.c:2357
 receive_buf+0x4d9/0x31f0 drivers/net/virtio_net.c:2401
 virtnet_receive_packets drivers/net/virtio_net.c:2698 [inline]
 virtnet_receive drivers/net/virtio_net.c:2722 [inline]
 virtnet_poll+0x107c/0x3ba0 drivers/net/virtio_net.c:2817
 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6771
 napi_poll net/core/dev.c:6840 [inline]
 net_rx_action+0xa92/0x1010 net/core/dev.c:6962
 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_flush_all+0xa19/0xd70 kernel/printk/printk.c:3056
Code: e8 8c 6c 26 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 6a 24 1f 00 48 85 db 0f 85 8b 01 00 00 e8 ec 21 1f 00 fb 48 8b 04 24 <4c> 89 fa 83 e2 07 0f b6 00 38 d0 7f 08 84 c0 0f 85 a9 02 00 00 41
RSP: 0018:ffffc90009e875d8 EFLAGS: 00000293
RAX: fffff520013d0ee2 RBX: 0000000000000000 RCX: ffffffff816cb6e6
RDX: ffff88807c2cda00 RSI: ffffffff816cb6f4 RDI: 0000000000000007
RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200
R13: ffffffff8ea78d78 R14: ffffffff8ea78d20 R15: ffffc90009e87710
 console_unlock+0xae/0x290 kernel/printk/printk.c:3119
 vprintk_emit+0x409/0x600 kernel/printk/printk.c:2348
 dev_vprintk_emit drivers/base/core.c:4912 [inline]
 dev_printk_emit+0xfb/0x140 drivers/base/core.c:4923
 __dev_printk+0xf5/0x270 drivers/base/core.c:4935
 _dev_err+0xe5/0x120 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x185/0x1c0 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x185/0x2660 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x33/0x70 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x272/0x620 drivers/net/wireless/ath/ath9k/hif_usb.c:1271
 request_firmware_work_func+0x13a/0x250 drivers/base/firmware_loader/main.c:1167
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3393
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Crashes (36):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/19 15:38 upstream a430d95c5efa 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in ip_list_rcv
2024/08/14 20:19 upstream 9d5906799f7d e4bacdaf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in ip_list_rcv
2024/08/14 11:58 upstream 6b0f8db921ab bde81f6f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: rcu detected stall in ip_list_rcv
2024/07/09 10:08 upstream 4376e966ecb7 bc23a442 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in ip_list_rcv
2024/07/06 11:56 upstream 1dd28064d416 bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: rcu detected stall in ip_list_rcv
2024/06/26 17:19 upstream 55027e689933 880c1ca1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: rcu detected stall in ip_list_rcv
2024/06/19 11:07 upstream 2ccbdf43d5e7 41b7e219 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: rcu detected stall in ip_list_rcv
2024/05/25 10:34 upstream 0b32d436c015 a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: rcu detected stall in ip_list_rcv
2024/05/18 13:52 upstream 7ee332c9f12b c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: rcu detected stall in ip_list_rcv
2024/04/29 06:49 upstream e67572cd2204 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: rcu detected stall in ip_list_rcv
2024/07/26 18:00 upstream 1722389b0d86 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: rcu detected stall in ip_list_rcv
2024/05/28 01:04 upstream 2bfcfd584ff5 f550015e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: rcu detected stall in ip_list_rcv
2023/12/01 16:10 net-next 753c8608f3e5 f819d6f7 .config console log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: rcu detected stall in ip_list_rcv
2024/08/08 06:25 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 25f51b76f90f de12cf65 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/08/08 03:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 25f51b76f90f de12cf65 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/08/07 04:31 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d483f034f032 1ef9fe42 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/29 15:47 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 1722389b0d86 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/23 06:28 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 933069701c1b 708c10c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/22 09:15 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 933069701c1b df655b64 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/19 11:49 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b72749301112 ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/18 00:30 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b72749301112 0f902625 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/17 19:34 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b72749301112 215bec2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/15 03:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b72749301112 eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/13 09:20 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing b72749301112 eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/07/01 19:08 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing f7697db8b1b3 b294e901 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/06/30 15:57 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 2ea6d07efe53 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/06/29 03:35 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 2ea6d07efe53 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/06/28 15:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 2ea6d07efe53 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/06/27 08:09 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 6a6aad7489b2 c6d33a01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/06/23 10:36 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 819984a0dd36 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/06/15 02:13 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing 5821bf2dffbe f429ab00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: rcu detected stall in ip_list_rcv
2024/06/05 21:14 linux-next 234cb065ad82 121701b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: rcu detected stall in ip_list_rcv
2024/05/11 03:21 linux-next 75fa778d74b7 9026e142 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: rcu detected stall in ip_list_rcv
2024/06/11 11:19 bpf 36534d3c5453 c7d7d815 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce BUG: soft lockup in ip_list_rcv
2024/10/10 09:37 bpf-next 4073213488be 0278d004 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce BUG: soft lockup in ip_list_rcv
2024/05/08 04:50 bpf-next 7e2c7a3f732b 4cf3f9b3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce BUG: soft lockup in ip_list_rcv
* Struck through repros no longer work on HEAD.