syzbot

 sign-in | mailing list | source | docs
🐞 Open [703]
🐞 Fixed [89]
🐞 Invalid [366]
⬇ Missing Backports [41]
Kernel Health Bugs/Month Bug Lifetimes Fuzzing Crashes
💬 Send us feedback

INFO: rcu detected stall in ip_list_rcv

Status: upstream: reported on 2024/08/28 18:02
Reported-by: syzbot+c74c685a722ddef528f3@syzkaller.appspotmail.com
First crash: 17d, last: 17d
▶ ▼ Similar bugs (11)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: soft lockup in ip_list_rcv (2) kvm 8 872d 873d 0/28 auto-closed as invalid on 2022/06/25 08:42
linux-5.15 INFO: rcu detected stall in ip_list_rcv 2 1d03h 56d 0/3 upstream: reported on 2024/07/20 04:22
upstream INFO: rcu detected stall in ip_list_rcv (6) virt netfilter C done done 34 31d 285d 0/28 upstream: reported C repro on 2023/12/04 09:45
upstream INFO: rcu detected stall in ip_list_rcv (5) lsm netfilter 3 429d 487d 0/28 auto-obsoleted due to no activity on 2023/10/11 22:12
upstream INFO: rcu detected stall in ip_list_rcv net C error done 3 1446d 1472d 15/28 fixed on 2020/11/16 12:12
upstream INFO: rcu detected stall in ip_list_rcv (4) netfilter 1 804d 804d 0/28 auto-closed as invalid on 2022/09/01 16:20
upstream INFO: rcu detected stall in ip_list_rcv (2) netfilter 3 1300d 1379d 0/28 auto-closed as invalid on 2021/05/23 12:59
upstream INFO: rcu detected stall in ip_list_rcv (3) net 1 992d 992d 0/28 closed as invalid on 2022/02/08 10:10
android-5-15 BUG: soft lockup in ip_list_rcv 19 7d11h 144d 0/2 premoderation: reported on 2024/04/23 12:02
android-6-1 BUG: soft lockup in ip_list_rcv 2 43d 65d 0/2 premoderation: reported on 2024/07/11 05:20
android-5-10 BUG: soft lockup in ip_list_rcv 1 39d 39d 0/2 premoderation: reported on 2024/08/06 20:21

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P3824 1-.... } 4746 jiffies s: 1593 root: 0x2/T
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3780 Comm: syz.4.17 Not tainted 6.1.106-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:lockdep_hardirqs_on_prepare+0xea/0x7a0 kernel/locking/lockdep.c:4296
Code: 03 0f b6 04 10 84 c0 0f 85 42 05 00 00 83 3d bc f6 88 10 00 0f 85 a8 00 00 00 4c 8d 74 24 40 4c 89 f3 48 c1 eb 03 80 3c 13 00 <74> 12 4c 89 f7 e8 8c e4 77 00 48 ba 00 00 00 00 00 fc ff df 48 c7
RSP: 0018:ffffc900001df900 EFLAGS: 00000046
RAX: 0000000000000004 RBX: 1ffff9200003bf28 RCX: ffffffff91f33103
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8ac00d46
RBP: ffffc900001df9b0 R08: ffffffff9013e040 R09: ffffffff9013e048
R10: ffffffff9013e058 R11: ffffffff9013e050 R12: 0000000000000000
R13: 0000000000000000 R14: ffffc900001df940 R15: 1ffff9200003bf24
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3a739f3394 CR3: 000000001c345000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 trace_hardirqs_on+0x34/0x40 kernel/trace/trace_preemptirq.c:49
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:lock_is_held_type+0x137/0x180
Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
RSP: 0018:ffffc900001dfa78 EFLAGS: 00000206
RAX: 3d8e1ed6e3160200 RBX: 0000000000000003 RCX: ffff888028f39dc0
RDX: ffff888028f39dc0 RSI: ffffffff8b0c13e0 RDI: ffffffff8b5d62c0
RBP: 0000000000000001 R08: ffffffff89269e0e R09: ffffc900001dfd40
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246
R13: ffff888028f39dc0 R14: 00000000ffffffff R15: ffff88807a7b00b0
 lock_is_held include/linux/lockdep.h:283 [inline]
 lockdep_sock_is_held include/net/sock.h:1741 [inline]
 sock_owned_by_me include/net/sock.h:1835 [inline]
 tcp_snd_una_update net/ipv4/tcp_input.c:3571 [inline]
 tcp_ack_update_window net/ipv4/tcp_input.c:3624 [inline]
 tcp_ack+0x153b/0x6e80 net/ipv4/tcp_input.c:3892
 tcp_rcv_established+0xc51/0x1f00 net/ipv4/tcp_input.c:6053
 tcp_v4_do_rcv+0x487/0xb00 net/ipv4/tcp_ipv4.c:1678
 tcp_v4_rcv+0x29e0/0x3250 net/ipv4/tcp_ipv4.c:2109
 ip_protocol_deliver_rcu+0x381/0x740 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x304/0x580 net/ipv4/ip_input.c:233
 NF_HOOK+0x39d/0x450 include/linux/netfilter.h:302
 dst_input include/net/dst.h:454 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:631 [inline]
 ip_sublist_rcv+0xaf9/0xe70 net/ipv4/ip_input.c:639
 ip_list_rcv+0x422/0x470 net/ipv4/ip_input.c:674
 __netif_receive_skb_list_ptype net/core/dev.c:5571 [inline]
 __netif_receive_skb_list_core+0x6b1/0x890 net/core/dev.c:5619
 __netif_receive_skb_list net/core/dev.c:5671 [inline]
 netif_receive_skb_list_internal+0xa0d/0xe20 net/core/dev.c:5762
 gro_normal_list include/net/gro.h:433 [inline]
 napi_complete_done+0x352/0x820 net/core/dev.c:6103
 virtqueue_napi_complete drivers/net/virtio_net.c:403 [inline]
 virtnet_poll+0xc85/0x1470 drivers/net/virtio_net.c:1687
 __napi_poll+0xc7/0x470 net/core/dev.c:6537
 napi_poll net/core/dev.c:6604 [inline]
 net_rx_action+0x70f/0xeb0 net/core/dev.c:6718
 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571
 __do_softirq kernel/softirq.c:605 [inline]
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:preempt_schedule+0x0/0xe0 kernel/sched/core.c:6744
Code: f7 eb a2 0f 1f 80 00 00 00 00 bf 01 00 00 00 e8 06 5a b0 f6 e8 e1 fd ff ff bf 01 00 00 00 e8 77 58 b0 f6 c3 66 0f 1f 44 00 00 <55> 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 65 48 8b
RSP: 0018:ffffc90004ea72f0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888072c4f720 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
RBP: ffffc90004ea7340 R08: dffffc0000000000 R09: ffffed100e589ee5
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880282725e8
R13: 8000000062038007 R14: 00007f16cc2bd000 R15: dffffc0000000000
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_unlock+0x36/0x40 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 zap_pte_range mm/memory.c:1515 [inline]
 zap_pmd_range mm/memory.c:1574 [inline]
 zap_pud_range mm/memory.c:1603 [inline]
 zap_p4d_range mm/memory.c:1624 [inline]
 unmap_page_range+0x2190/0x2740 mm/memory.c:1645
 unmap_vmas+0x48b/0x640 mm/memory.c:1730
 exit_mmap+0x252/0x9f0 mm/mmap.c:3227
 __mmput+0x115/0x3c0 kernel/fork.c:1199
 exit_mm+0x226/0x300 kernel/exit.c:565
 do_exit+0x9f6/0x26a0 kernel/exit.c:858
 do_group_exit+0x202/0x2b0 kernel/exit.c:1021
 get_signal+0x16f7/0x17d0 kernel/signal.c:2870
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:316
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0033:0x7f16cd779ef9
Code: Unable to access opcode bytes at 0x7f16cd779ecf.
RSP: 002b:00007f16ce56b0e8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 00007f16cd915f88 RCX: 00007f16cd779ef9
RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f16cd915f8c
RBP: 00007f16cd915f80 R08: 0000000000000010 R09: 0000000000000000
R10: 0000000000000006 R11: 0000000000000246 R12: 00007f16cd915f8c
R13: 0000000000000000 R14: 00007ffc91a55bc0 R15: 00007ffc91a55ca8
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/08/28 18:02 linux-6.1.y ee5e09825b81 ef3de9e8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in ip_list_rcv
* Struck through repros no longer work on HEAD.