syzbot


INFO: rcu detected stall in ieee80211_iface_work (2)

Status: upstream: reported on 2025/04/09 15:46
Reported-by: syzbot+b4b9cfd7c52495b85f04@syzkaller.appspotmail.com
First crash: 107d, last: 47d
Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in ieee80211_iface_work (3) wireless 1 1 973d 973d 0/29 auto-obsoleted due to no activity on 2023/02/25 18:08
upstream INFO: rcu detected stall in ieee80211_iface_work (4) wireless 1 3 759d 865d 0/29 auto-obsoleted due to no activity on 2023/09/25 23:55
upstream INFO: rcu detected stall in ieee80211_iface_work wireless 1 2 1425d 1433d 0/29 auto-closed as invalid on 2021/10/29 13:44
linux-6.1 INFO: rcu detected stall in ieee80211_iface_work (2) 1 3 82d 124d 0/3 upstream: reported on 2025/03/23 05:33
linux-5.15 INFO: rcu detected stall in ieee80211_iface_work 1 1 410d 410d 0/3 auto-obsoleted due to no activity on 2024/09/18 22:31
upstream INFO: rcu detected stall in ieee80211_iface_work (2) iomap 1 1 1187d 1187d 0/29 auto-closed as invalid on 2022/06/25 02:47
linux-6.1 INFO: rcu detected stall in ieee80211_iface_work 1 3 265d 351d 0/3 auto-obsoleted due to no activity on 2025/02/10 05:28

Sample crash report:
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P3095/1:b..l
	(detected by 0, t=10502 jiffies, g=6945, q=58)
task:kworker/u4:5    state:R  running task     stack:25888 pid: 3095 ppid:     2 flags:0x00004000
Workqueue: phy7 ieee80211_iface_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x11b8/0x43b0 kernel/sched/core.c:6376
 preempt_schedule_irq+0xb1/0x150 kernel/sched/core.c:6780
 irqentry_exit+0x63/0x70 kernel/entry/common.c:432
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:202
Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 10 ef f0 0b 48 89 de 5b e9 87 a9 44 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d a4 b1 8a 7e 65 8b 15 a5 b1 8a 7e 81 e2 00
RSP: 0018:ffffc9000c88f8f0 EFLAGS: 00000216
RAX: ffffffff8937ba3a RBX: 0000000000000006 RCX: ffff88802a910000
RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000078
RBP: 0000000000000078 R08: dffffc0000000000 R09: fffffbfff1ad155e
R10: fffffbfff1ad155e R11: 1ffffffff1ad155d R12: 000000000000000b
R13: 000000000000003c R14: dffffc0000000000 R15: ffff888079afb350
 ieee80211_sta_get_rates+0x422/0x6b0 net/mac80211/util.c:2137
 ieee80211_update_sta_info net/mac80211/ibss.c:1007 [inline]
 ieee80211_rx_bss_info net/mac80211/ibss.c:1121 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1614 [inline]
 ieee80211_ibss_rx_queued_mgmt+0xf47/0x29c0 net/mac80211/ibss.c:1643
 ieee80211_iface_process_skb net/mac80211/iface.c:1459 [inline]
 ieee80211_iface_work+0x70e/0xc60 net/mac80211/iface.c:1513
 process_one_work+0x863/0x1000 kernel/workqueue.c:2310
 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: rcu_preempt kthread starved for 10513 jiffies! g6945 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28032 pid:   15 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0x11b8/0x43b0 kernel/sched/core.c:6376
 schedule+0x11b/0x1e0 kernel/sched/core.c:6459
 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1914
 rcu_gp_fqs_loop+0x29e/0x11b0 kernel/rcu/tree.c:1972
 rcu_gp_kthread+0x98/0x350 kernel/rcu/tree.c:2145
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.181-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
Call Trace:
 <IRQ>
 dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x397/0x3d0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline]
 rcu_check_gp_kthread_starvation+0x1cd/0x250 kernel/rcu/tree_stall.h:487
 print_other_cpu_stall+0x10c8/0x1220 kernel/rcu/tree_stall.h:592
 check_cpu_stall kernel/rcu/tree_stall.h:745 [inline]
 rcu_pending kernel/rcu/tree.c:3932 [inline]
 rcu_sched_clock_irq+0x831/0x1110 kernel/rcu/tree.c:2619
 update_process_times+0x193/0x200 kernel/time/timer.c:1818
 tick_sched_handle kernel/time/tick-sched.c:254 [inline]
 tick_sched_timer+0x37d/0x560 kernel/time/tick-sched.c:1473
 __run_hrtimer kernel/time/hrtimer.c:1690 [inline]
 __hrtimer_run_queues+0x4fe/0xc40 kernel/time/hrtimer.c:1754
 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1816
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
 __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:default_idle+0xb/0x10 arch/x86/kernel/process.c:723
Code: bf 48 89 df e8 16 c3 12 f8 eb b5 e8 4f be f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 57 53 5b 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6
RAX: 2f19bb67f8ae7e00 RBX: ffffffff8bebc3c0 RCX: 2f19bb67f8ae7e00
RDX: 0000000000000001 RSI: ffffffff8a0b0fc0 RDI: ffffffff8a59a2c0
RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed101720765a
R10: ffffed101720765a R11: 1ffff11017207659 R12: ffffffff8d68aae8
R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878
 default_idle_call+0x81/0xc0 kernel/sched/idle.c:112
 cpuidle_idle_call kernel/sched/idle.c:194 [inline]
 do_idle+0x21b/0x5b0 kernel/sched/idle.c:306
 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403
 start_kernel+0x486/0x530 init/main.c:1140
 secondary_startup_64_no_verify+0xb1/0xbb
 </TASK>

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/05 17:54 linux-5.15.y 16fdf2c7111b 6ca47dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in ieee80211_iface_work
2025/04/09 15:45 linux-5.15.y 0c935c049b5c 47d015b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: rcu detected stall in ieee80211_iface_work
2025/06/08 15:46 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 INFO: rcu detected stall in ieee80211_iface_work
* Struck through repros no longer work on HEAD.