syzbot


INFO: rcu detected stall in addrconf_rs_timer

Status: upstream: reported on 2024/05/24 18:08
Reported-by: syzbot+8c2bd9d58eb3944b2c1b@syzkaller.appspotmail.com
First crash: 23d, last: 3d02h
Similar bugs (23)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in addrconf_rs_timer (2) net 362 1719d 1741d 13/27 fixed on 2019/10/21 12:31
linux-4.14 INFO: rcu detected stall in addrconf_rs_timer C error 220 1382d 1745d 0/1 upstream: reported C repro on 2019/09/06 14:33
upstream INFO: rcu detected stall in addrconf_rs_timer net 38 2005d 2101d 0/27 closed as dup on 2019/01/02 16:33
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer 45 1733d 1745d 0/1 auto-closed as invalid on 2019/12/17 18:46
linux-4.19 BUG: soft lockup in addrconf_rs_timer syz error 24 503d 1185d 0/1 upstream: reported syz repro on 2021/03/19 06:05
linux-5.15 BUG: soft lockup in addrconf_rs_timer C error 36 368d 381d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:06
upstream INFO: rcu detected stall in addrconf_rs_timer (3) net C inconclusive done 81 1640d 1636d 15/27 fixed on 2020/02/18 14:31
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer (2) 5 1383d 1456d 0/1 auto-closed as invalid on 2020/12/31 12:17
upstream INFO: rcu detected stall in addrconf_rs_timer (5) kvm 4 783d 783d 0/27 auto-closed as invalid on 2022/06/24 22:41
upstream INFO: rcu detected stall in addrconf_rs_timer (4) net C error error 121 959d 1413d 0/27 closed as invalid on 2022/02/08 10:39
linux-5.15 INFO: rcu detected stall in addrconf_rs_timer origin:upstream C error 3 94d 189d 0/3 upstream: reported C repro on 2023/12/10 10:27
upstream INFO: rcu detected stall in addrconf_rs_timer (6) netfilter mm usb syz 85 7m 15d 0/27 upstream: reported syz repro on 2024/06/01 13:51
upstream BUG: soft lockup in addrconf_rs_timer (3) net syz 8 263d 327d 0/27 auto-obsoleted due to no activity on 2024/01/05 16:48
upstream BUG: soft lockup in addrconf_rs_timer (4) net 1 158d 158d 0/27 closed as invalid on 2024/03/12 13:17
android-6-1 BUG: soft lockup in addrconf_rs_timer 1 231d 231d 0/2 auto-obsoleted due to no activity on 2024/01/27 13:54
android-5-10 BUG: soft lockup in addrconf_rs_timer (2) 1 1d10h 1d10h 0/2 premoderation: reported on 2024/06/15 15:18
android-5-10 BUG: soft lockup in addrconf_rs_timer 2 322d 340d 0/2 auto-obsoleted due to no activity on 2023/10/29 01:38
linux-6.1 BUG: soft lockup in addrconf_rs_timer C done 26 369d 381d 3/3 fixed on 2023/07/30 15:47
linux-4.14 BUG: soft lockup in addrconf_rs_timer C error 133 541d 1743d 0/1 upstream: reported C repro on 2019/09/08 14:09
android-5-15 BUG: soft lockup in addrconf_rs_timer (2) 2 5d19h 50d 0/2 premoderation: reported on 2024/04/27 11:00
android-6-1 BUG: soft lockup in addrconf_rs_timer (2) syz 14 11h17m 34d 0/2 premoderation: reported syz repro on 2024/05/13 20:21
upstream BUG: soft lockup in addrconf_rs_timer (2) net C 51 361d 382d 23/27 fixed on 2023/07/04 09:17
android-5-15 BUG: soft lockup in addrconf_rs_timer 1 329d 329d 0/2 auto-obsoleted due to no activity on 2023/10/21 14:14

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 3585 jiffies s: 1545 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3762 Comm: syz-executor.4 Not tainted 6.1.93-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:27 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:236 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xc/0x80 kernel/kcov.c:304
Code: 89 11 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 0f 1f 00 4c 8b 04 24 65 48 8b 15 c4 d8 77 7e <65> 8b 05 c5 d8 77 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83
RSP: 0018:ffffc900001e0408 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff8880b99271f4 RCX: 0000000000000838
RDX: ffff888021a38000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff817cdab0 R09: fffffbfff1ce7246
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b99271c0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
FS:  00007fb9a25326c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f21e26e66e4 CR3: 0000000058aae000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 clockevents_program_event+0x1d0/0x310 kernel/time/clockevents.c:336
 hrtimer_interrupt+0x546/0x980 kernel/time/hrtimer.c:1825
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:ip6t_do_table+0xbfe/0x1830 net/ipv6/netfilter/ip6_tables.c:315
Code: 08 00 00 48 8b 44 24 40 0f b6 18 89 de 83 e6 40 31 ff e8 45 bb 2b f8 83 e3 40 0f 85 c2 04 00 00 e8 d7 b8 2b f8 e9 eb fc ff ff <e8> cd b8 2b f8 eb 36 0f b7 f3 31 ff e8 a1 bb 2b f8 66 85 db 0f 84
RSP: 0018:ffffc900001e0640 EFLAGS: 00000246
RAX: ffff88807750b9b8 RBX: 0000000000000000 RCX: ffff888021a38000
RDX: 0000000000000301 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900001e0840 R08: ffffffff895ed71b R09: ffffc900001e0790
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807750b910
R13: 1ffff1100eea1733 R14: ffff88807750b9b8 R15: 0000000000000000
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0xae/0x1e0 net/netfilter/core.c:614
 nf_hook include/linux/netfilter.h:257 [inline]
 NF_HOOK include/linux/netfilter.h:300 [inline]
 ndisc_send_skb+0x1388/0x14e0 net/ipv6/ndisc.c:509
 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3962
 call_timer_fn+0x1ad/0x6b0 kernel/time/timer.c:1504
 expire_timers kernel/time/timer.c:1549 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1820
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1833
 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571
 __do_softirq kernel/softirq.c:605 [inline]
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 kernel/sched/core.c:6870
Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 69 b2 ca f6 e8 84 a7 fd f6 fb bf 01 00 00 00 <e8> 99 b4 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 19 65 4e f7 48
RSP: 0018:ffffc900044de560 EFLAGS: 00000286
RAX: 06fe6d2a26671d00 RBX: 1ffff9200089bcb4 RCX: ffffffff816ad3ca
RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001
RBP: ffffc900044de620 R08: dffffc0000000000 R09: fffffbfff2093a5c
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200089bcac
R13: 1ffff9200089bcb0 R14: ffffc900044de580 R15: dffffc0000000000
 irqentry_exit+0x53/0x80 kernel/entry/common.c:439
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:phys_addr_valid arch/x86/mm/physaddr.h:7 [inline]
RIP: 0010:__phys_addr+0x98/0x170 arch/x86/mm/physaddr.c:28
Code: 00 00 00 44 0f b6 3d 84 da 35 0d bf 40 00 00 00 44 89 fe e8 7a e5 4c 00 41 83 ff 3f 0f 87 a0 00 00 00 e8 0b e3 4c 00 4c 89 f3 <44> 89 f9 48 d3 eb 31 ff 48 89 de e8 d8 e6 4c 00 48 85 db 0f 85 a2
RSP: 0018:ffffc900044de6e0 EFLAGS: 00000287
RAX: ffffffff813db005 RBX: 00000000291dd000 RCX: 0000000000040000
RDX: ffffc90004b0a000 RSI: 0000000000010243 RDI: 0000000000010244
RBP: dffffc0000000000 R08: ffffffff813daff6 R09: 000000008010000a
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888015256500
R13: 0000000000000cc0 R14: 00000000291dd000 R15: 000000000000002e
 virt_to_folio include/linux/mm.h:898 [inline]
 virt_to_slab+0x5/0xa0 mm/slab.h:175
 ___cache_free+0x16/0x90 mm/slub.c:3668
 qlink_free mm/kasan/quarantine.c:168 [inline]
 qlist_free_all+0x76/0xe0 mm/kasan/quarantine.c:187
 kasan_quarantine_reduce+0x156/0x170 mm/kasan/quarantine.c:294
 __kasan_slab_alloc+0x1f/0x70 mm/kasan/common.c:305
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook+0x52/0x3a0 mm/slab.h:737
 slab_alloc_node mm/slub.c:3398 [inline]
 __kmem_cache_alloc_node+0x137/0x260 mm/slub.c:3437

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/13 23:23 linux-6.1.y ae9f2a70d69e a9616ff5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/06/03 11:24 linux-6.1.y 88690811da69 0aba2352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/05/24 18:08 linux-6.1.y 4078fa637fcd a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
* Struck through repros no longer work on HEAD.