syzbot

 sign-in | mailing list | source | docs
🐞 Open [717]
🐞 Fixed [181]
🐞 Invalid [640]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

INFO: rcu detected stall in mrp_periodic_timer

Status: auto-closed as invalid on 2020/07/01 22:48
Reported-by: syzbot+87f99ce190f683d48487@syzkaller.appspotmail.com
First crash: 2042d, last: 2004d
▶ ▼ Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in mrp_periodic_timer (4) kernel 1 1 945d 945d 0/29 auto-obsoleted due to no activity on 2023/04/26 22:06
upstream INFO: rcu detected stall in mrp_periodic_timer (2) net 1 1 1829d 1829d 0/29 auto-closed as invalid on 2020/11/23 04:34
upstream INFO: rcu detected stall in mrp_periodic_timer (5) net 1 2 396d 452d 0/29 auto-obsoleted due to no activity on 2024/10/27 01:42
upstream INFO: rcu detected stall in mrp_periodic_timer net 1 1 2033d 2032d 0/29 auto-closed as invalid on 2020/05/04 02:54
linux-4.19 INFO: rcu detected stall in mrp_periodic_timer 1 3 1978d 2028d 0/1 auto-closed as invalid on 2020/07/28 00:22
upstream INFO: rcu detected stall in mrp_periodic_timer (3) perf 1 1 1331d 1331d 0/29 closed as invalid on 2022/02/08 10:10

Sample crash report:
ip_tables: iptables: counters copy to user failed while replacing table
bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0
bond0: lo is up - this may be due to an out of date ifenslave
INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 1, t=10502 jiffies, g=14288, c=14287, q=279)
All QSes seen, last rcu_preempt kthread activity 10502 (4295004548-4294994046), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.3  R  running task    25984 22065   7461 0x00000008
Call Trace:
 <IRQ>
 sched_show_task kernel/sched/core.c:5168 [inline]
 sched_show_task.cold+0x2e3/0x347 kernel/sched/core.c:5143
 print_other_cpu_stall kernel/rcu/tree.c:1501 [inline]
 check_cpu_stall kernel/rcu/tree.c:1616 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0xd3f/0xdaa kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1590
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x3e/0x120 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x25c/0xbb0 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
RIP: 0010:lock_acquire+0x1f1/0x3f0 kernel/locking/lockdep.c:3998
RSP: 0018:ffff8880aeb07cf8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 1ffffffff0fa2ce1 RBX: ffff88804b68e180 RCX: 00000000346a7e4a
RDX: dffffc0000000000 RSI: ffff88804b68ea78 RDI: 0000000000000286
RBP: ffff888085c6f908 R08: 0000000000004466 R09: ffffffff8a07dbf0
R10: ffff88804b68ea78 R11: ffff88804b68e180 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152
 spin_lock include/linux/spinlock.h:317 [inline]
 mrp_periodic_timer+0x1a/0x50 net/802/mrp.c:612
 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279
 expire_timers kernel/time/timer.c:1318 [inline]
 __run_timers kernel/time/timer.c:1636 [inline]
 __run_timers kernel/time/timer.c:1604 [inline]
 run_timer_softirq+0x52a/0x1390 kernel/time/timer.c:1649
 __do_softirq+0x254/0x9bf kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x15b/0x1a0 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1102
 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
 </IRQ>
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 kernel/locking/spinlock.c:200
RSP: 0018:ffff88808323f598 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10
RAX: 1ffffffff0fa2ce3 RBX: ffff88804b68e7a8 RCX: 1ffff110096d1d49
RDX: dffffc0000000000 RSI: ffff88804b68ea28 RDI: ffff88804b68e9fc
RBP: ffff8880aeb2b540 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804b68e180
R13: ffff88808323f608 R14: ffff88804b68e180 R15: ffff8880aeb2b540
 rq_unlock_irq kernel/sched/sched.h:1766 [inline]
 __schedule+0x135d/0x1ca0 kernel/sched/core.c:3387
 preempt_schedule_common+0x4a/0xc0 kernel/sched/core.c:3508
 ___preempt_schedule+0x16/0x18
 __raw_read_unlock include/linux/rwlock_api_smp.h:227 [inline]
 _raw_read_unlock+0x3b/0x40 kernel/locking/spinlock.c:256
 security_compute_sid.part.0+0x9fb/0xfa0 security/selinux/ss/services.c:1742
 security_compute_sid security/selinux/ss/services.c:1764 [inline]
 security_transition_sid+0xcb/0x120 security/selinux/ss/services.c:1764
 selinux_determine_inode_label security/selinux/hooks.c:1900 [inline]
 selinux_determine_inode_label+0x233/0x320 security/selinux/hooks.c:1885
 may_create+0x281/0x3a0 security/selinux/hooks.c:1933
 security_inode_create+0xbf/0x100 security/security.c:611
 may_o_create fs/namei.c:3041 [inline]
 lookup_open+0x97a/0x1750 fs/namei.c:3194
audit: type=1804 audit(1583275549.000:217): pid=22029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir030563754/syzkaller.oztgYw/427/bus" dev="sda1" ino=16792 res=1
 do_last fs/namei.c:3334 [inline]
 path_openat+0xfc1/0x3c50 fs/namei.c:3569
 do_filp_open+0x18e/0x250 fs/namei.c:3603
 do_sys_open+0x29d/0x3f0 fs/open.c:1084
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c479
RSP: 002b:00007f92640adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007f92640ae6d4 RCX: 000000000045c479
RDX: 0000000000000000 RSI: 0000000000141042 RDI: 0000000020000000
RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000772 R14: 00000000005039df R15: 000000000076bf2c

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/03 22:47 linux-4.14.y 78d697fc93f9 1f73b64b .config console log report ci2-linux-4-14
2020/01/26 01:03 linux-4.14.y 8bac50406cca f4e7270e .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.