syzbot

 sign-in | mailing list | source | docs
🐞 Open [717] 🐞 Fixed [181] 🐞 Invalid [640] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in neigh_timer_handler

Status: auto-closed as invalid on 2020/08/30 16:21
Reported-by: syzbot+6e52d84ca9c021bc0e16@syzkaller.appspotmail.com
First crash: 1436d, last: 1316d
▶ ▼ Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in neigh_timer_handler (6) netfilter 1 1096d 1096d 0/25 auto-closed as invalid on 2021/03/09 03:20
upstream INFO: rcu detected stall in neigh_timer_handler net 1 1842d 1842d 0/25 auto-closed as invalid on 2019/05/23 06:47
upstream INFO: rcu detected stall in neigh_timer_handler (2) net 2 1551d 1553d 14/25 fixed on 2019/10/09 10:54
upstream INFO: rcu detected stall in neigh_timer_handler (4) net 1 1467d 1467d 0/25 closed as invalid on 2019/12/04 14:04
upstream INFO: rcu detected stall in neigh_timer_handler (5) net 1 1199d 1199d 0/25 auto-closed as invalid on 2020/11/26 10:25
upstream INFO: rcu detected stall in neigh_timer_handler (3) net 2 1471d 1471d 0/25 closed as invalid on 2019/11/29 14:24
upstream INFO: rcu detected stall in neigh_timer_handler (7) net 1 971d 971d 0/25 auto-closed as invalid on 2021/07/11 19:14

Sample crash report:
INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 1, t=10502 jiffies, g=4626, c=4625, q=436)
All QSes seen, last rcu_preempt kthread activity 9880 (4294977600-4294967720), jiffies_till_next_fqs=1, root ->qsmask 0x0
syz-executor.3  R  running task    27568 11247   6347 0x8000000e
Call Trace:
 <IRQ>
 sched_show_task kernel/sched/core.c:5168 [inline]
 sched_show_task.cold+0x2e3/0x347 kernel/sched/core.c:5143
 print_other_cpu_stall kernel/rcu/tree.c:1501 [inline]
 check_cpu_stall kernel/rcu/tree.c:1616 [inline]
 __rcu_pending kernel/rcu/tree.c:3390 [inline]
 rcu_pending kernel/rcu/tree.c:3452 [inline]
 rcu_check_callbacks.cold+0xd3f/0xdaa kernel/rcu/tree.c:2792
 update_process_times+0x29/0x60 kernel/time/timer.c:1590
 tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
 tick_sched_timer+0x3e/0x120 kernel/time/tick-sched.c:1223
 __run_hrtimer kernel/time/hrtimer.c:1223 [inline]
 __hrtimer_run_queues+0x25c/0xbb0 kernel/time/hrtimer.c:1287
 hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
 smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
RIP: 0010:arp_solicit+0x2/0x1080 net/ipv4/arp.c:335
RSP: 0018:ffff8880aeb07cf8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10
RAX: ffff8880a44a6300 RBX: ffff88808d11b6c0 RCX: 0000000000000000
RDX: 0000000000000100 RSI: ffff8880a4b70180 RDI: ffff88808d11b6c0
RBP: ffff8880a4b70180 R08: 0000000000000001 R09: 0000000000000002
R10: ffffed101496e048 R11: ffff8880a4b70247 R12: ffffffff85561b80
R13: 0000000000000001 R14: ffff88808d11b7dd R15: ffff88808d11b6e8
 neigh_probe+0xc2/0x100 net/core/neighbour.c:913
 neigh_timer_handler+0x259/0xa50 net/core/neighbour.c:994
 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279
 expire_timers kernel/time/timer.c:1318 [inline]
 __run_timers kernel/time/timer.c:1636 [inline]
 __run_timers kernel/time/timer.c:1604 [inline]
 run_timer_softirq+0x52a/0x1390 kernel/time/timer.c:1649
 __do_softirq+0x254/0x9bf kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x15b/0x1a0 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1102
 apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline]
RIP: 0010:qlink_free mm/kasan/quarantine.c:150 [inline]
RIP: 0010:qlist_free_all+0xfc/0x140 mm/kasan/quarantine.c:166
RSP: 0018:ffff88805cb8fa00 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 0000000000000007 RBX: ffff8880669e6c00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff8880a44a6b88 RDI: 0000000000000286
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880866d6500
R13: ffff88805cb8fa38 R14: ffff8880aa587e40 R15: 0000000000000286
 quarantine_reduce+0x140/0x170 mm/kasan/quarantine.c:259
 kasan_kmalloc+0x95/0xe0 mm/kasan/kasan.c:536
 kmem_cache_alloc+0x127/0x770 mm/slab.c:3552
 __d_alloc+0x2a/0x9b0 fs/dcache.c:1623
 anon_inode_getfile+0x101/0x2f0 fs/anon_inodes.c:92
 anon_inode_getfd+0x42/0x90 fs/anon_inodes.c:150
 bpf_prog_new_fd kernel/bpf/syscall.c:895 [inline]
 bpf_prog_load+0x728/0xe00 kernel/bpf/syscall.c:1087
 SYSC_bpf kernel/bpf/syscall.c:1512 [inline]
 SyS_bpf+0xf89/0x2cd3 kernel/bpf/syscall.c:1477
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c829
RSP: 002b:00007fe57f8efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045c829
RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005
RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000006a R14: 00000000004c30b4 R15: 00007fe57f8f06d4

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/02 16:20 linux-4.14.y 773e2b1cd56a 58da4c35 .config console log report ci2-linux-4-14
2020/03/31 03:56 linux-4.14.y 01364dad1d45 c8d1cc20 .config console log report ci2-linux-4-14
2020/02/25 09:46 linux-4.14.y 98db2bf27b9e 59b57593 .config console log report ci2-linux-4-14
2020/02/17 12:31 linux-4.14.y 98db2bf27b9e 72bfa6f2 .config console log report ci2-linux-4-14
2020/01/04 05:14 linux-4.14.y 4c5bf01e16a7 68256974 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.