syzbot

 sign-in | mailing list | source | docs
🐞 Open [985] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12474] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in inet_twsk_kill (2)

Status: auto-closed as invalid on 2021/05/30 18:52
Subsystems: net
[Documentation on labels]
First crash: 1238d, last: 1145d
▶ ▼ Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 INFO: rcu detected stall in inet_twsk_kill 2 1342d 1443d 0/1 auto-closed as invalid on 2020/12/13 21:12
linux-4.19 INFO: rcu detected stall in inet_twsk_kill 1 1396d 1396d 0/1 auto-closed as invalid on 2020/10/21 08:34
upstream INFO: rcu detected stall in inet_twsk_kill net 6 1369d 1500d 0/26 auto-closed as invalid on 2020/10/18 02:42

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (1 GPs behind) idle=76e/1/0x4000000000000000 softirq=25743/25744 fqs=4459 
	(t=10500 jiffies g=32717 q=289261)
NMI backtrace for cpu 0
CPU: 0 PID: 14778 Comm: syz-executor.2 Not tainted 5.12.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0xfa/0x151 lib/dump_stack.c:120
 nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x222/0x2a7 kernel/rcu/tree_stall.h:341
 print_cpu_stall kernel/rcu/tree_stall.h:622 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:697 [inline]
 rcu_pending kernel/rcu/tree.c:3830 [inline]
 rcu_sched_clock_irq.cold+0x4f7/0x11dd kernel/rcu/tree.c:2650
 update_process_times+0x16d/0x200 kernel/time/timer.c:1796
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1369
 __run_hrtimer kernel/time/hrtimer.c:1519 [inline]
 __hrtimer_run_queues+0x1c0/0xe40 kernel/time/hrtimer.c:1583
 hrtimer_interrupt+0x334/0x940 kernel/time/hrtimer.c:1645
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:orc_ip arch/x86/kernel/unwind_orc.c:30 [inline]
RIP: 0010:__orc_find+0x66/0xf0 arch/x86/kernel/unwind_orc.c:52
Code: 8d 6b 04 49 89 de 49 39 ec 72 4d 4c 89 e0 48 29 e8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 f8 48 8d 5c 85 00 48 89 d8 <48> c1 e8 03 42 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04
RSP: 0018:ffffc90000007758 EFLAGS: 00000216
RAX: ffffffff8dd9d5b0 RBX: ffffffff8dd9d5b0 RCX: ffffffff81b685b1
RDX: 000000000000000a RSI: ffffffff8e48a1ae RDI: ffffffff8dd9d59c
RBP: ffffffff8dd9d59c R08: ffffffff8e48a1f0 R09: ffffffff8e48a1ae
R10: 0000000000084087 R11: 000000000002a0b7 R12: ffffffff8dd9d5c4
R13: ffffffff8dd9d59c R14: ffffffff8dd9d59c R15: dffffc0000000000
 orc_find arch/x86/kernel/unwind_orc.c:173 [inline]
 unwind_next_frame+0x342/0x2000 arch/x86/kernel/unwind_orc.c:443
 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
 kasan_set_track+0x1c/0x30 mm/kasan/common.c:46
 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:357
 ____kasan_slab_free mm/kasan/common.c:360 [inline]
 ____kasan_slab_free mm/kasan/common.c:325 [inline]
 __kasan_slab_free+0xf5/0x130 mm/kasan/common.c:367
 kasan_slab_free include/linux/kasan.h:199 [inline]
 slab_free_hook mm/slub.c:1562 [inline]
 slab_free_freelist_hook+0x72/0x1b0 mm/slub.c:1600
 slab_free mm/slub.c:3161 [inline]
 kmem_cache_free+0x8b/0x730 mm/slub.c:3177
 inet_bind_bucket_destroy net/ipv4/inet_hashtables.c:91 [inline]
 inet_bind_bucket_destroy+0xdf/0x120 net/ipv4/inet_hashtables.c:87
 inet_twsk_bind_unhash+0x121/0x1b0 net/ipv4/inet_timewait_sock.c:39
 inet_twsk_kill+0x21d/0x470 net/ipv4/inet_timewait_sock.c:59
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1431
 expire_timers kernel/time/timer.c:1476 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1745
 __run_timers kernel/time/timer.c:1726 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1758
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu kernel/softirq.c:422 [inline]
 irq_exit_rcu+0x134/0x200 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:199
Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 1e ef 53 f8 48 89 ef e8 96 a4 54 f8 e8 f1 05 74 f8 fb bf 01 00 00 00 <e8> 16 a0 48 f8 65 8b 05 6f b4 fc 76 85 c0 74 02 5d c3 e8 cb 09 fb
RSP: 0018:ffffc9000175fdc8 EFLAGS: 00000206
RAX: 000000000069deb7 RBX: 0000000000000002 RCX: 1ffffffff1b8be09
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
RBP: ffff8880b9c35180 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff81794168 R11: 0000000000000000 R12: ffff8880b9c35180
R13: ffff8880784a0000 R14: ffff88801d64aa00 R15: ffff888075369bc0
 finish_lock_switch kernel/sched/core.c:4076 [inline]
 finish_task_switch.isra.0+0x158/0x7e0 kernel/sched/core.c:4193
 context_switch kernel/sched/core.c:4327 [inline]
 __schedule+0x914/0x21a0 kernel/sched/core.c:5075
 schedule+0xcf/0x270 kernel/sched/core.c:5154
 exit_to_user_mode_loop kernel/entry/common.c:162 [inline]
 exit_to_user_mode_prepare+0x115/0x250 kernel/entry/common.c:208
 irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:314
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0033:0x465ef9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa6a448d218 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 000000000056bf68 RCX: 0000000000465ef9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68
RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c
R13: 00007ffcdb88705f R14: 00007fa6a448d300 R15: 0000000000022000
NMI backtrace for cpu 0
CPU: 0 PID: 14778 Comm: syz-executor.2 Not tainted 5.12.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:mark_lock+0x151/0x17b0 kernel/locking/lockdep.c:4439
Code: 12 00 00 48 89 ee 48 23 70 50 41 ba 01 00 00 00 0f 84 79 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 <c7> 43 08 00 00 00 00 48 c7 43 10 00 00 00 00 48 8b 84 24 10 01 00
RSP: 0018:ffffc90000007590 EFLAGS: 00000082
RAX: dffffc0000000000 RBX: fffff52000000eb9 RCX: 1ffffffff1f56b9a
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff8fab5cd0
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8fab5867
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88807536a5c8 R14: 0000000000000000 R15: ffff88807536a5e8
FS:  00007fa6a448d700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa6a448e000 CR3: 0000000075fed000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 mark_usage kernel/locking/lockdep.c:4370 [inline]
 __lock_acquire+0x1468/0x54c0 kernel/locking/lockdep.c:4854
 lock_acquire kernel/locking/lockdep.c:5510 [inline]
 lock_acquire+0x1ab/0x730 kernel/locking/lockdep.c:5475
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:159
 debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:656
 debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline]
 debug_activate kernel/time/hrtimer.c:475 [inline]
 enqueue_hrtimer+0x27/0x3e0 kernel/time/hrtimer.c:964
 __run_hrtimer kernel/time/hrtimer.c:1536 [inline]
 __hrtimer_run_queues+0xb54/0xe40 kernel/time/hrtimer.c:1583
 hrtimer_interrupt+0x334/0x940 kernel/time/hrtimer.c:1645
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:inet_twsk_bind_unhash+0x2f/0x1b0 net/ipv4/inet_timewait_sock.c:32
Code: 54 55 48 89 f5 53 48 89 fb e8 cd 2a f9 f9 48 8d bb f0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 33 01 00 00 4c 8b b3 f0 00 00 00 4d 85 f6 0f 84 02 01 00 00
RSP: 0018:ffffc90000007cd0 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: ffff888024142158 RCX: 0000000000000100
RDX: 1ffff11004828449 RSI: ffffffff877a2ca3 RDI: ffff888024142248
RBP: ffffffff901f6e00 R08: 0000000000000001 R09: 0000000000000003
R10: fffff52000000f92 R11: 0000000000000000 R12: ffffffff901f6e00
R13: ffff8880241421b8 R14: ffffc90007f5cb08 R15: ffffc90007ae3000
 inet_twsk_kill+0x21d/0x470 net/ipv4/inet_timewait_sock.c:59
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1431
 expire_timers kernel/time/timer.c:1476 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1745
 __run_timers kernel/time/timer.c:1726 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1758
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu kernel/softirq.c:422 [inline]
 irq_exit_rcu+0x134/0x200 kernel/softirq.c:434
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:199
Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 1e ef 53 f8 48 89 ef e8 96 a4 54 f8 e8 f1 05 74 f8 fb bf 01 00 00 00 <e8> 16 a0 48 f8 65 8b 05 6f b4 fc 76 85 c0 74 02 5d c3 e8 cb 09 fb
RSP: 0018:ffffc9000175fdc8 EFLAGS: 00000206
RAX: 000000000069deb7 RBX: 0000000000000002 RCX: 1ffffffff1b8be09
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
RBP: ffff8880b9c35180 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff81794168 R11: 0000000000000000 R12: ffff8880b9c35180
R13: ffff8880784a0000 R14: ffff88801d64aa00 R15: ffff888075369bc0
 finish_lock_switch kernel/sched/core.c:4076 [inline]
 finish_task_switch.isra.0+0x158/0x7e0 kernel/sched/core.c:4193
 context_switch kernel/sched/core.c:4327 [inline]
 __schedule+0x914/0x21a0 kernel/sched/core.c:5075
 schedule+0xcf/0x270 kernel/sched/core.c:5154
 exit_to_user_mode_loop kernel/entry/common.c:162 [inline]
 exit_to_user_mode_prepare+0x115/0x250 kernel/entry/common.c:208
 irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:314
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
RIP: 0033:0x465ef9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa6a448d218 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 000000000056bf68 RCX: 0000000000465ef9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68
RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c
R13: 00007ffcdb88705f R14: 00007fa6a448d300 R15: 0000000000022000

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/03/01 18:43 upstream fe07bfda2fb9 4c37c133 .config console log report info ci-upstream-kasan-gce-root INFO: rcu detected stall in inet_twsk_kill
2021/02/20 10:51 upstream f40ddce88593 3e5ed8b4 .config console log report info ci-upstream-kasan-gce-root INFO: rcu detected stall in inet_twsk_kill
2020/12/13 17:28 upstream 6bff9bb8a292 bca53db9 .config console log report info ci-upstream-kasan-gce-root
2020/12/10 14:06 upstream a2f5ea9e314b f900b48c .config console log report info ci-upstream-kasan-gce-root
2020/12/08 02:35 upstream cd796ed33450 51a9082e .config console log report info ci-upstream-kasan-gce-root
2020/11/28 11:50 upstream c84e1efae022 486f93ef .config console log report info ci-upstream-kasan-gce-root
* Struck through repros no longer work on HEAD.