syzbot


INFO: rcu detected stall in addrconf_rs_timer

Status: upstream: reported on 2024/05/24 18:08
Reported-by: syzbot+8c2bd9d58eb3944b2c1b@syzkaller.appspotmail.com
First crash: 106d, last: 3d22h
Similar bugs (25)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in addrconf_rs_timer (2) net 362 1801d 1824d 13/27 fixed on 2019/10/21 12:31
linux-4.14 INFO: rcu detected stall in addrconf_rs_timer C error 220 1465d 1828d 0/1 upstream: reported C repro on 2019/09/06 14:33
upstream INFO: rcu detected stall in addrconf_rs_timer net 38 2088d 2184d 0/27 closed as dup on 2019/01/02 16:33
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer 45 1816d 1828d 0/1 auto-closed as invalid on 2019/12/17 18:46
linux-4.19 BUG: soft lockup in addrconf_rs_timer syz error 24 586d 1268d 0/1 upstream: reported syz repro on 2021/03/19 06:05
linux-5.15 BUG: soft lockup in addrconf_rs_timer C error 36 451d 464d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:06
upstream INFO: rcu detected stall in addrconf_rs_timer (3) net C inconclusive done 81 1723d 1719d 15/27 fixed on 2020/02/18 14:31
linux-4.19 INFO: rcu detected stall in addrconf_rs_timer (2) 5 1466d 1539d 0/1 auto-closed as invalid on 2020/12/31 12:17
upstream INFO: rcu detected stall in addrconf_rs_timer (5) kvm 4 866d 866d 0/27 auto-closed as invalid on 2022/06/24 22:41
upstream INFO: rcu detected stall in addrconf_rs_timer (4) net C error error 121 1042d 1496d 0/27 closed as invalid on 2022/02/08 10:39
linux-5.15 INFO: rcu detected stall in addrconf_rs_timer origin:upstream C error 17 8h21m 272d 0/3 upstream: reported C repro on 2023/12/10 10:27
upstream INFO: rcu detected stall in addrconf_rs_timer (6) usb netfilter syz error 363 1d18h 98d 0/27 upstream: reported syz repro on 2024/06/01 13:51
upstream BUG: soft lockup in addrconf_rs_timer (3) net syz 8 346d 410d 0/27 auto-obsoleted due to no activity on 2024/01/05 16:48
upstream BUG: soft lockup in addrconf_rs_timer (4) net 1 241d 241d 0/27 closed as invalid on 2024/03/12 13:17
android-6-1 BUG: soft lockup in addrconf_rs_timer 1 314d 314d 0/2 auto-obsoleted due to no activity on 2024/01/27 13:54
android-5-10 BUG: soft lockup in addrconf_rs_timer (2) C 192 6h41m 77d 0/2 upstream: reported C repro on 2024/06/22 20:35
android-5-10 BUG: soft lockup in addrconf_rs_timer 2 404d 422d 0/2 auto-obsoleted due to no activity on 2023/10/29 01:38
linux-6.1 BUG: soft lockup in addrconf_rs_timer C done 26 451d 463d 3/3 fixed on 2023/07/30 15:47
linux-4.14 BUG: soft lockup in addrconf_rs_timer C error 133 624d 1826d 0/1 upstream: reported C repro on 2019/09/08 14:09
android-5-15 BUG: soft lockup in addrconf_rs_timer (2) 42 9h07m 133d 0/2 premoderation: reported on 2024/04/27 11:00
android-54 BUG: soft lockup in addrconf_rs_timer 190 66d 121d 0/2 auto-obsoleted due to no activity on 2024/08/22 17:20
android-6-1 BUG: soft lockup in addrconf_rs_timer (2) syz 165 5h04m 117d 0/2 premoderation: reported syz repro on 2024/05/13 20:21
upstream BUG: soft lockup in addrconf_rs_timer (2) net C 51 444d 465d 23/27 fixed on 2023/07/04 09:17
android-5-15 BUG: soft lockup in addrconf_rs_timer 1 412d 412d 0/2 auto-obsoleted due to no activity on 2023/10/21 14:14
upstream BUG: soft lockup in addrconf_rs_timer net 18 1630d 1826d 0/27 auto-closed as invalid on 2020/07/20 22:25

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 5087 jiffies s: 1773 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 3770 Comm: syz.2.20 Not tainted 6.1.107-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:__lock_acquire+0x135/0x1f80 kernel/locking/lockdep.c:4952
Code: 89 6c 24 18 8b 75 00 48 c7 c0 60 21 33 97 48 c1 e8 03 0f b6 04 10 84 c0 48 89 74 24 40 0f 85 70 15 00 00 83 3d 3b 97 c8 15 00 <75> 09 83 fe 30 0f 83 8e 13 00 00 44 89 64 24 68 44 89 7c 24 60 44
RSP: 0018:ffffc90000006e80 EFLAGS: 00000046
RAX: 0000000000000004 RBX: ffffffff90bb3120 RCX: ffffffff97332103
RDX: dffffc0000000000 RSI: 0000000000000007 RDI: ffffffff97595020
RBP: ffff88802a6ac658 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: ffff88802a6abb80 R14: ffffffff97595020 R15: 0000000000000001
FS:  00007f62e19ec6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007eff05829f98 CR3: 0000000020fce000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 lock_acquire+0x1f8/0x5a0 kernel/locking/lockdep.c:5662
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162
 debug_object_deactivate+0x63/0x380 lib/debugobjects.c:752
 debug_hrtimer_deactivate kernel/time/hrtimer.c:426 [inline]
 debug_deactivate+0x1d/0x280 kernel/time/hrtimer.c:482
 __run_hrtimer kernel/time/hrtimer.c:1657 [inline]
 __hrtimer_run_queues+0x334/0xe50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:__seqprop_spinlock_sequence include/linux/seqlock.h:275 [inline]
RIP: 0010:read_seqbegin+0x1d8/0x2b0 include/linux/seqlock.h:836
Code: 48 83 7c 24 18 00 75 19 e8 15 28 eb f8 eb 18 e8 0e 28 eb f8 e8 f9 e4 06 02 48 83 7c 24 18 00 74 e7 e8 fc 27 eb f8 fb 4d 89 fc <49> c1 ec 03 43 0f b6 04 2c 84 c0 0f 85 97 00 00 00 41 8b 1f 89 de
RSP: 0018:ffffc90000007540 EFLAGS: 00000246
RAX: ffffffff889f8674 RBX: 0000000000000000 RCX: ffff88802a6abb80
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000007608 R08: ffffffff889f8644 R09: fffffbfff223b662
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807c078930
R13: dffffc0000000000 R14: 1ffff92000000eac R15: ffff88807c078930
 neigh_connected_output+0x1d4/0x440 net/core/neighbour.c:1586
 neigh_output include/net/neighbour.h:544 [inline]
 ip6_finish_output2+0xee6/0x15f0 net/ipv6/ip6_output.c:138
 __ip6_finish_output net/ipv6/ip6_output.c:205 [inline]
 ip6_finish_output+0x6a0/0xa80 net/ipv6/ip6_output.c:216
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ndisc_send_skb+0xbab/0x14e0 net/ipv6/ndisc.c:511
 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3963
 call_timer_fn+0x1ad/0x6b0 kernel/time/timer.c:1504
 expire_timers kernel/time/timer.c:1549 [inline]
 __run_timers+0x67c/0x890 kernel/time/timer.c:1820
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1833
 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571
 __do_softirq kernel/softirq.c:605 [inline]
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:unwind_next_frame+0x573/0x2220 arch/x86/kernel/unwind_orc.c:461
Code: c1 ef 03 41 0f b6 04 3f 84 c0 0f 85 92 16 00 00 48 89 d8 48 c1 e8 03 0f b6 04 38 84 c0 0f 85 a5 16 00 00 41 0f b7 45 00 89 c3 <83> e3 0f 0f 84 94 00 00 00 8d 43 fe 83 f8 07 0f 87 98 00 00 00 ff
RSP: 0018:ffffc9000471ede0 EFLAGS: 00000246
RAX: 0000000000000015 RBX: 0000000000000015 RCX: ffffffff8efeb6b4
RDX: ffffffff8f95965c RSI: ffffffff896d2a8e RDI: dffffc0000000000
RBP: ffffffff8f95965c R08: 0000000000000001 R09: ffffc9000471efb0
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: ffffffff8f959660 R14: ffffffff8efeb6b0 R15: 1ffffffff1f2b2cc
 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122
 kasan_save_stack+0x3b/0x60 mm/kasan/common.c:45
 __kasan_record_aux_stack+0xb0/0xc0 mm/kasan/generic.c:486
 kvfree_call_rcu+0x116/0x8c0 kernel/rcu/tree.c:3401
 ipv6_mc_destroy_dev+0x3ae/0x570 net/ipv6/mcast.c:2813
 addrconf_ifdown+0x16d3/0x1b90 net/ipv6/addrconf.c:3925
 addrconf_notify+0x3ec/0xf60
 notifier_call_chain kernel/notifier.c:87 [inline]
 raw_notifier_call_chain+0xd0/0x170 kernel/notifier.c:455
 call_netdevice_notifiers_info net/core/dev.c:1970 [inline]
 call_netdevice_notifiers_extack net/core/dev.c:2008 [inline]
 call_netdevice_notifiers net/core/dev.c:2022 [inline]
 unregister_netdevice_many+0xebf/0x17a0 net/core/dev.c:10882
 vti6_exit_batch_net+0x3c3/0x410 net/ipv6/ip6_vti.c:1190
 ops_exit_list net/core/net_namespace.c:177 [inline]
 setup_net+0x939/0xb90 net/core/net_namespace.c:358
 copy_net_ns+0x392/0x5d0 net/core/net_namespace.c:481
 create_new_namespaces+0x425/0x7a0 kernel/nsproxy.c:110
 copy_namespaces+0x397/0x3f0 kernel/nsproxy.c:178
 copy_process+0x1ab8/0x4060 kernel/fork.c:2270
 kernel_clone+0x222/0x920 kernel/fork.c:2682
 __do_sys_clone kernel/fork.c:2823 [inline]
 __se_sys_clone kernel/fork.c:2807 [inline]
 __x64_sys_clone+0x231/0x280 kernel/fork.c:2807
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f62e0b7ceb9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f62e19ebfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f62e0d35f80 RCX: 00007f62e0b7ceb9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000
RBP: 00007f62e0beefbe R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f62e0d35f80 R15: 00007fff9fd1aff8
 </TASK>

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/04 01:08 linux-6.1.y 311d8503ef9f 326f9c5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/09/01 23:03 linux-6.1.y 311d8503ef9f 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/28 18:09 linux-6.1.y ee5e09825b81 ef3de9e8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/28 12:34 linux-6.1.y ee5e09825b81 6c853ff9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/26 13:30 linux-6.1.y ee5e09825b81 d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/25 14:34 linux-6.1.y ee5e09825b81 d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/25 03:55 linux-6.1.y ee5e09825b81 d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/24 15:21 linux-6.1.y ee5e09825b81 d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/24 12:32 linux-6.1.y ee5e09825b81 d7d32352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/20 09:20 linux-6.1.y ee5e09825b81 9f0ab3fb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/18 23:02 linux-6.1.y 117ac406ba90 dbc93b08 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/13 20:07 linux-6.1.y 36790ef5e00b f21a18ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/05 09:41 linux-6.1.y 48d525b0e463 e35c337f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/08/04 09:25 linux-6.1.y 48d525b0e463 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/07/27 03:15 linux-6.1.y c18e82d3ee44 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/07/26 13:09 linux-6.1.y c18e82d3ee44 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/07/23 08:31 linux-6.1.y 9b3f9a5b12dc 708c10c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/07/21 21:39 linux-6.1.y 9b3f9a5b12dc b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/07/19 14:41 linux-6.1.y 9b3f9a5b12dc ee4e11c8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/06/18 17:02 linux-6.1.y eb44d83053d6 639d6cdf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/06/13 23:23 linux-6.1.y ae9f2a70d69e a9616ff5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/06/03 11:24 linux-6.1.y 88690811da69 0aba2352 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/05/24 18:08 linux-6.1.y 4078fa637fcd a10a183e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in addrconf_rs_timer
2024/07/18 00:00 linux-6.1.y cac15753b8ce 0f902625 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan BUG: soft lockup in addrconf_rs_timer
* Struck through repros no longer work on HEAD.