syzbot


INFO: rcu detected stall in neigh_timer_handler (4)

Status: closed as invalid on 2019/12/04 14:04
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 985d, last: 985d
similar bugs (7):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in neigh_timer_handler (6) 1 614d 614d 0/23 auto-closed as invalid on 2021/03/09 03:20
upstream INFO: rcu detected stall in neigh_timer_handler 1 1360d 1360d 0/23 auto-closed as invalid on 2019/05/23 06:47
upstream INFO: rcu detected stall in neigh_timer_handler (2) 2 1070d 1071d 14/23 fixed on 2019/10/09 10:54
upstream INFO: rcu detected stall in neigh_timer_handler (5) 1 717d 717d 0/23 auto-closed as invalid on 2020/11/26 10:25
upstream INFO: rcu detected stall in neigh_timer_handler (3) 2 990d 990d 0/23 closed as invalid on 2019/11/29 14:24
upstream INFO: rcu detected stall in neigh_timer_handler (7) 1 490d 490d 0/23 auto-closed as invalid on 2021/07/11 19:14
linux-4.14 INFO: rcu detected stall in neigh_timer_handler 5 835d 954d 0/1 auto-closed as invalid on 2020/08/30 16:21

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (1 GPs behind) idle=ede/1/0x4000000000000004 softirq=10298/10300 fqs=4984 
	(t=10510 jiffies g=9781 q=2170)
NMI backtrace for cpu 0
CPU: 0 PID: 9297 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x197/0x210 lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x183/0x1cf kernel/rcu/tree_stall.h:254
 print_cpu_stall kernel/rcu/tree_stall.h:455 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:529 [inline]
 rcu_pending kernel/rcu/tree.c:2827 [inline]
 rcu_sched_clock_irq.cold+0x509/0xc02 kernel/rcu/tree.c:2271
 update_process_times+0x2d/0x70 kernel/time/timer.c:1726
 tick_sched_handle+0xa2/0x190 kernel/time/tick-sched.c:167
 tick_sched_timer+0x53/0x140 kernel/time/tick-sched.c:1310
 __run_hrtimer kernel/time/hrtimer.c:1517 [inline]
 __hrtimer_run_queues+0x364/0xe40 kernel/time/hrtimer.c:1579
 hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1641
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline]
 smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1135
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
RIP: 0010:__ip6_make_skb+0x1439/0x1ea0 net/ipv6/ip6_output.c:1786
Code: 00 00 00 89 de e8 77 31 bb fa 80 fb 3a 0f 84 03 02 00 00 e8 29 30 bb fa 48 8b 74 24 70 48 8b bc 24 88 00 00 00 e8 a7 74 fe ff <e8> 12 30 bb fa 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 18 48 c7
RSP: 0018:ffffc900000076d0 EFLAGS: 00010246 ORIG_RAX: ffffffffffffff13
RAX: ffff888069b4ba70 RBX: ffff88801de37a00 RCX: 0000000000000000
RDX: 0000000000000058 RSI: 0000000000000000 RDI: ffff888069b4bac8
RBP: ffffc900000078b0 R08: 1ffff1100d36974e R09: ffff888069b4ba70
R10: ffffed100d369758 R11: ffff888069b4bac7 R12: ffff88802393b940
R13: ffff88802a91b000 R14: 0000000000000000 R15: ffffc900000077a0
 ip6_finish_skb include/net/ipv6.h:1019 [inline]
 ip6_push_pending_frames+0xb3/0xf0 net/ipv6/ip6_output.c:1811
 icmpv6_push_pending_frames+0x34b/0x540 net/ipv6/icmp.c:285
 icmp6_send+0x1a7f/0x1f90 net/ipv6/icmp.c:598
 icmpv6_send+0xec/0x220 net/ipv6/ip6_icmp.c:43
 ip6_link_failure+0x2b/0x530 net/ipv6/route.c:2641
 dst_link_failure include/net/dst.h:419 [inline]
 ndisc_error_report+0xce/0x1c0 net/ipv6/ndisc.c:709
 neigh_invalidate+0x245/0x570 net/core/neighbour.c:996
 neigh_timer_handler+0xd44/0x10e0 net/core/neighbour.c:1082
 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0x6c3/0x1790 kernel/time/timer.c:1786
 __do_softirq+0x262/0x98c kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x19b/0x1e0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1a3/0x610 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline]
RIP: 0010:generic_exec_single+0x33a/0x4c0 kernel/smp.c:155
Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 68 01 00 00 48 83 3d 3e 5e 09 08 00 0f 84 e0 00 00 00 e8 9b 25 0b 00 48 89 df 57 9d <0f> 1f 44 00 00 45 31 ed e9 39 fe ff ff e8 84 25 0b 00 0f 0b e9 23
RSP: 0018:ffffc9000b327a60 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: 0000000000000216 RCX: ffffc90022b16000
RDX: 0000000000002764 RSI: ffffffff8169d5a5 RDI: 0000000000000216
RBP: ffffc9000b327a90 R08: 1ffffffff16181bc R09: fffffbfff16181bd
R10: fffffbfff16181bc R11: ffffffff8b0c0de7 R12: 0000000000000200
R13: ffffc9000b327ae0 R14: ffffc9000b327bc0 R15: ffffffff818bef80
 smp_call_function_single+0x17c/0x480 kernel/smp.c:308
 task_function_call+0xe9/0x180 kernel/events/core.c:114
 perf_install_in_context+0x308/0x5a0 kernel/events/core.c:2746
 __do_sys_perf_event_open+0x1cbc/0x2c70 kernel/events/core.c:11543
 __se_sys_perf_event_open kernel/events/core.c:11151 [inline]
 __ia32_sys_perf_event_open+0xbd/0x140 kernel/events/core.c:11151
 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline]
 do_fast_syscall_32+0x27b/0xe16 arch/x86/entry/common.c:408
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7fafa39
Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000150
RAX: ffffffffffffffda RBX: 000000002001d000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-qemu-upstream-386 2019/12/04 10:43 upstream 63de37476ebd 0ecb9746 .config log report