syzbot
panic: excl->share
Status:
fixed on 2026/01/04 15:07
Reported-by: syzbot+c366cf5e7c87ead7f4f7@syzkaller.appspotmail.com
Fix commit:
2b6fc957b059
Backout: Protect IGMP and MLD6 fast timer with rwlock.
First crash: 262d, last: 261d
Sample crash report:
wpanic: excl->share
Starting stack trace...
panic(ffffffff833b4a35) at panic+0x1d0 sys/kern/subr_prf.c:229
witness_checkorder(ffff8000015a1078,1,0) at witness_checkorder+0x122c sys/kern/subr_witness.c:854
rw_do_enter_read(ffff8000015a1060,0) at rw_do_enter_read+0x99 sys/kern/kern_rwlock.c:355
in6_hasmulti(fffffd805ece1bf0,ffff8000015a1000) at in6_hasmulti+0x41 in6_lookupmulti sys/netinet6/in6.c:-1 [inline]
in6_hasmulti(fffffd805ece1bf0,ffff8000015a1000) at in6_hasmulti+0x41 sys/netinet6/in6.c:1150
ip6_output(fffffd805ece1b00,ffffffff839eee58,0,0,ffff80002a1fde30,0) at ip6_output+0x13bd sys/netinet6/ip6_output.c:507
mld6_sendpkt(ffff800001550100,83,0) at mld6_sendpkt+0x385 sys/netinet6/mld6.c:499
mld6_fasttimo() at mld6_fasttimo+0x16d mld6_checktimer sys/netinet6/mld6.c:395 [inline]
mld6_fasttimo() at mld6_fasttimo+0x16d sys/netinet6/mld6.c:369
pffasttimo(ffffffff83a15020) at pffasttimo+0x184 sys/kern/uipc_domain.c:-1
timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159 sys/kern/kern_timeout.c:698
softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7 sys/kern/kern_timeout.c:842
softclock_thread_mp(ffff8000ffffef90) at softclock_thread_mp+0x86
end trace frame: 0x0, count: 246
End of stack trace.
* Struck through repros no longer work on HEAD.