INFO: rcu detected stall in ieee80211_handle_queued_frames

Status: auto-obsoleted due to no activity on 2024/12/24 22:17
Reported-by: syzbot+c3a4cb5960ad2c9e2d7d@syzkaller.appspotmail.com
First crash: 715d, last: 695d
▶ ▼ Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: rcu detected stall in ieee80211_handle_queued_frames (3) origin:lts-only 1 syz, C inconclusive 14 27d 280d 0/3 upstream: reported C repro on 2025/11/04 22:16
upstream INFO: rcu detected stall in ieee80211_handle_queued_frames wireless 1 syz, C error 837 17h39m 787d 0/29 upstream: reported C repro on 2024/06/15 21:07
linux-5.15 INFO: rcu detected stall in ieee80211_handle_queued_frames 1 1 545d 545d 0/3 auto-obsoleted due to no activity on 2025/05/24 12:07
linux-5.15 INFO: rcu detected stall in ieee80211_handle_queued_frames (2) 1 39 2d02h 349d 0/3 upstream: reported on 2025/08/28 08:46
linux-6.1 INFO: rcu detected stall in ieee80211_handle_queued_frames (2) 1 1 565d 565d 0/3 auto-obsoleted due to no activity on 2025/05/04 02:50
linux-6.6 INFO: rcu detected stall in ieee80211_handle_queued_frames 1 1 388d 388d 0/2 auto-obsoleted due to no activity on 2025/10/27 16:58

Sample crash report:
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2676 jiffies s: 1381 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3733 Comm: syz.3.7 Not tainted 6.1.110-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:rcu_rdp_cpu_online kernel/rcu/tree.c:236 [inline]
RIP: 0010:rcu_lockdep_current_cpu_online+0x8e/0x120 kernel/rcu/tree.c:776
Code: 6e 00 48 8b 03 48 8d 98 80 b8 03 00 48 8d b8 a0 b8 03 00 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 36 c6 6e 00 4c 8b 7b 20 <48> 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8
RSP: 0018:ffffc900001dfb90 EFLAGS: 00000046
RAX: 1ffff110171e7714 RBX: ffff8880b8f3b880 RCX: 0000000000010101
RDX: ffff88807e5c1dc0 RSI: ffffffff8b5d6da0 RDI: ffff8880b8f3b8a0
RBP: ffffc900001dfcf0 R08: ffffffff81b4532f R09: fffffbfff223b845
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 1ffff9200003bf88 R14: dffffc0000000000 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055fab9fee028 CR3: 000000000d08e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 rcu_read_lock_held_common kernel/rcu/update.c:112 [inline]
 rcu_read_lock_held+0x1a/0x40 kernel/rcu/update.c:309
 __perf_output_begin kernel/events/ring_buffer.c:170 [inline]
 perf_output_begin_forward+0x1bd/0xaf0 kernel/events/ring_buffer.c:271
 __perf_event_output kernel/events/core.c:7704 [inline]
 perf_event_output_forward+0x1e5/0x330 kernel/events/core.c:7722
 __perf_event_overflow+0x45e/0x640 kernel/events/core.c:9468
 perf_swevent_hrtimer+0x38e/0x4f0 kernel/events/core.c:10876
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x5a7/0xe50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0x156/0x580 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:should_resched arch/x86/include/asm/preempt.h:103 [inline]
RIP: 0010:__local_bh_enable_ip+0x16c/0x1f0 kernel/softirq.c:403
Code: 8b e8 58 c3 52 09 65 66 8b 05 d0 6d af 7e 66 85 c0 75 57 bf 01 00 00 00 e8 f1 45 0a 00 e8 9c 40 3d 00 fb 65 8b 05 bc 3d ae 7e <85> c0 75 05 e8 6b 61 ac ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
RSP: 0018:ffffc900001e0420 EFLAGS: 00000282
RAX: 0000000000000101 RBX: 1ffff9200003c088 RCX: ffffffff816af0fa
RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5d6dc0
RBP: ffffc900001e04d0 R08: dffffc0000000000 R09: fffffbfff223b84b
R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 1ffff9200003c08c R14: ffffc900001e0460 R15: 0000000000000201
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 ieee80211_rx_handlers+0x79a2/0x7a00 net/mac80211/rx.c:4075
 ieee80211_invoke_rx_handlers net/mac80211/rx.c:4097 [inline]
 ieee80211_prepare_and_rx_handle+0x3022/0x5f10 net/mac80211/rx.c:4918
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5124 [inline]
 ieee80211_rx_list+0x2616/0x3380 net/mac80211/rx.c:5286
 ieee80211_rx_napi+0x186/0x3b0 net/mac80211/rx.c:5309
 ieee80211_rx include/net/mac80211.h:4830 [inline]
 ieee80211_handle_queued_frames+0x103/0x1b0 net/mac80211/main.c:315
 tasklet_action_common+0x3cb/0x4a0
 handle_softirqs+0x2ee/0xa40 kernel/softirq.c:571
 __do_softirq kernel/softirq.c:605 [inline]
 invoke_softirq kernel/softirq.c:445 [inline]
 __irq_exit_rcu+0x157/0x240 kernel/softirq.c:654
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:666
 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653
RIP: 0010:schedule_debug kernel/sched/core.c:5799 [inline]
RIP: 0010:__schedule+0x151/0x4570 kernel/sched/core.c:6451
Code: f7 48 8b 1b 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 46 f8 32 f7 48 81 3b 9d 6e ac 57 <0f> 85 c6 19 00 00 45 85 e4 75 5e 48 8b 44 24 30 48 8d 58 18 48 89
RSP: 0018:ffffc900046c7040 EFLAGS: 00000246
RAX: 1ffff920008d8000 RBX: ffffc900046c0000 RCX: dffffc0000000000
RDX: 0000000000000010 RSI: ffffffff8b5d6da0 RDI: ffffffff8b5d6d60
RBP: ffffc900046c71f0 R08: dffffc0000000000 R09: ffffc900046c7180
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
R13: 8000000071c90025 R14: ffff8880b8f00000 R15: dffffc0000000000
 preempt_schedule_common+0x83/0xd0 kernel/sched/core.c:6727
 preempt_schedule+0xd9/0xe0 kernel/sched/core.c:6751
 preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:34
 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_unlock+0x36/0x40 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 zap_pte_range mm/memory.c:1515 [inline]
 zap_pmd_range mm/memory.c:1574 [inline]
 zap_pud_range mm/memory.c:1603 [inline]
 zap_p4d_range mm/memory.c:1624 [inline]
 unmap_page_range+0x2190/0x2740 mm/memory.c:1645
 unmap_vmas+0x48b/0x640 mm/memory.c:1730
 exit_mmap+0x252/0x9f0 mm/mmap.c:3227
 __mmput+0x115/0x3c0 kernel/fork.c:1199
 exit_mm+0x226/0x300 kernel/exit.c:565
 do_exit+0x9f6/0x26a0 kernel/exit.c:858
 do_group_exit+0x202/0x2b0 kernel/exit.c:1021
 get_signal+0x16f7/0x17d0 kernel/signal.c:2870
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2235f7def9
Code: Unable to access opcode bytes at 0x7f2235f7decf.
RSP: 002b:00007f2236c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007f2236135f80 RCX: 00007f2235f7def9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f2235ff0b76 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f2236135f80 R15: 00007ffdc21b4648
 </TASK>

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/15 22:17 linux-6.1.y 5f55cad62cc9 08d8a733 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in ieee80211_handle_queued_frames
2024/09/02 12:39 linux-6.1.y 311d8503ef9f 1eda0d14 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in ieee80211_handle_queued_frames
2024/08/26 23:14 linux-6.1.y ee5e09825b81 9aee4e0b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in ieee80211_handle_queued_frames
2024/08/26 21:24 linux-6.1.y ee5e09825b81 9aee4e0b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-perf INFO: rcu detected stall in ieee80211_handle_queued_frames
* Struck through repros no longer work on HEAD.