syzbot


BUG: sleeping function called from invalid context in ip_vs_conn_new

Status: fixed on 2026/06/01 09:35
Subsystems: lvs
Labels: prio:high
[Documentation on labels]
Fix commit: d493d9de1c21 ipvs: fix the spin_lock usage for RT build
First crash: 50d, last: 27d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
2e7038d9-fedf-45a6-904c-b52a5c8dc534 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ BUG: sleeping function called from invalid context in ip_vs_conn_new 2026/05/25 06:09 2026/05/25 06:09 2026/05/25 07:01 c69befb30ac10e158cc9d1557b508ee3f0eca1de
Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/05/21 01:52 26m retest repro linux-next log

Sample crash report:
BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6113, name: syz.0.17
preempt_count: 1, expected: 0
RCU nest depth: 2, expected: 2
4 locks held by syz.0.17/6113:
 #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
 #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 include/linux/netfilter.h:242
 #1: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163
 #2: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 kernel/softirq.c:163
 #3: ffff88804225e8f0 (&cp->lock#2){+...}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline]
 #3: ffff88804225e8f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_hash net/netfilter/ipvs/ip_vs_conn.c:272 [inline]
 #3: ffff88804225e8f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 net/netfilter/ipvs/ip_vs_conn.c:1448
Preemption disabled at:
[<ffffffff89958e48>] bit_spin_lock include/linux/bit_spinlock.h:38 [inline]
[<ffffffff89958e48>] hlist_bl_lock+0x18/0x110 include/linux/list_bl.h:149
CPU: 0 UID: 0 PID: 6113 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 __might_resched+0x329/0x480 kernel/sched/core.c:9162
 __rt_spin_lock kernel/locking/spinlock_rt.c:48 [inline]
 rt_spin_lock+0xc2/0x400 kernel/locking/spinlock_rt.c:57
 spin_lock include/linux/spinlock_rt.h:45 [inline]
 ip_vs_conn_hash net/netfilter/ipvs/ip_vs_conn.c:272 [inline]
 ip_vs_conn_new+0x14fe/0x25f0 net/netfilter/ipvs/ip_vs_conn.c:1448
 ip_vs_sched_persist net/netfilter/ipvs/ip_vs_core.c:549 [inline]
 ip_vs_schedule+0x10fd/0x1d70 net/netfilter/ipvs/ip_vs_core.c:686
 udp_conn_schedule+0x391/0x7a0 net/netfilter/ipvs/ip_vs_proto_udp.c:78
 ip_vs_try_to_schedule net/netfilter/ipvs/ip_vs_core.c:1657 [inline]
 ip_vs_in_hook+0xc50/0x1bf0 net/netfilter/ipvs/ip_vs_core.c:2229
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619
 nf_hook+0x22a/0x3a0 include/linux/netfilter.h:273
 __ip_local_out+0x558/0x6a0 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x190 net/ipv4/ip_output.c:129
 ip_send_skb+0x45/0xc0 net/ipv4/ip_output.c:1508
 udp_send_skb+0x7e4/0xf70 net/ipv4/udp.c:1161
 udp_sendmsg+0x1937/0x21a0 net/ipv4/udp.c:1443
 udpv6_sendmsg+0x996/0x25c0 net/ipv6/udp.c:1522
 sock_sendmsg_nosec net/socket.c:786 [inline]
 __sock_sendmsg net/socket.c:801 [inline]
 ____sys_sendmsg+0x5aa/0x9c0 net/socket.c:2650
 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2704
 __sys_sendmsg net/socket.c:2736 [inline]
 __do_sys_sendmsg net/socket.c:2741 [inline]
 __se_sys_sendmsg net/socket.c:2739 [inline]
 __x64_sys_sendmsg+0x1c3/0x2a0 net/socket.c:2739
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9717edc819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe51612c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f9718155fa0 RCX: 00007f9717edc819
RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
RBP: 00007f9717f72c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9718155fac R14: 00007f9718155fa0 R15: 00007f9718155fa0
 </TASK>

Crashes (2034):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/14 03:39 linux-next 1c7cc4904160 1a086e7c .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 23:15 upstream adc1e5c6203c cbcd9ea0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 12:02 linux-next 4cd074ae20bb 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 07:38 linux-next 4cd074ae20bb 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 07:15 linux-next 4cd074ae20bb 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 05:28 linux-next 4cd074ae20bb 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 04:21 linux-next 4cd074ae20bb 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 02:03 linux-next 4cd074ae20bb 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/06 01:00 linux-next 4cd074ae20bb 26da2c66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 23:03 linux-next 4cd074ae20bb 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 22:00 linux-next 4cd074ae20bb 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 21:08 linux-next 4cd074ae20bb 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 19:17 linux-next 4cd074ae20bb 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 16:25 linux-next 4cd074ae20bb 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 13:17 linux-next 9d0d467c3572 06e69a27 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 08:04 linux-next 9d0d467c3572 a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 05:53 linux-next 9d0d467c3572 a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 04:46 linux-next 9d0d467c3572 a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 03:11 linux-next 9d0d467c3572 a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 03:03 linux-next 9d0d467c3572 a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/05 00:02 linux-next 9d0d467c3572 a898ba9c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 22:13 linux-next b9303e6bff70 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 17:59 linux-next b9303e6bff70 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 17:55 linux-next b9303e6bff70 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 14:25 linux-next b9303e6bff70 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 13:13 linux-next b9303e6bff70 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 11:37 linux-next b9303e6bff70 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 11:01 linux-next b9303e6bff70 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 08:03 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 06:05 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 03:29 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/04 01:24 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 22:32 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 21:33 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 20:30 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 20:29 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 18:40 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 17:02 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 15:24 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 14:10 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 13:53 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 12:49 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 08:25 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 06:20 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/05/03 05:16 linux-next b9303e6bff70 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
2026/04/28 04:01 linux-next 39704f00f747 ce741359 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: sleeping function called from invalid context in ip_vs_conn_new
* Struck through repros no longer work on HEAD.