syzbot


BUG: soft lockup in addrconf_dad_work

Status: auto-obsoleted due to no activity on 2023/10/25 16:01
Reported-by: syzbot+9cc4d6f6ed377c6dca6f@syzkaller.appspotmail.com
First crash: 290d, last: 290d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in addrconf_dad_work (5) net C done inconclusive 9 17d 1333d 0/26 upstream: reported C repro on 2020/09/07 15:59
upstream BUG: soft lockup in addrconf_dad_work net C done 1 1695d 1695d 13/26 fixed on 2019/10/09 10:54
linux-4.19 BUG: soft lockup in addrconf_dad_work C error 55 468d 809d 0/1 upstream: reported C repro on 2022/02/13 10:05
android-5-15 BUG: soft lockup in addrconf_dad_work 1 5d12h 5d12h 0/2 premoderation: reported on 2024/04/27 14:56

Sample crash report:
watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [kworker/1:12:4981]
Modules linked in:
irq event stamp: 388165
hardirqs last  enabled at (388164): [<ffff800011959e88>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:81 [inline]
hardirqs last  enabled at (388164): [<ffff800011959e88>] exit_to_kernel_mode+0x100/0x178 arch/arm64/kernel/entry-common.c:91
hardirqs last disabled at (388165): [<ffff80001195a0d0>] enter_el1_irq_or_nmi+0x10/0x1c arch/arm64/kernel/entry-common.c:227
softirqs last  enabled at (383818): [<ffff8000109e96a0>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (383820): [<ffff8000108819c0>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
CPU: 1 PID: 4981 Comm: kworker/1:12 Not tainted 5.15.120-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
Workqueue: ipv6_addrconf addrconf_dad_work
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : find_entry_to_transmit+0x51c/0x6ac
lr : find_entry_to_transmit+0x4a4/0x6ac
sp : ffff800022936e20
x29: ffff800022936ee0 x28: 05062b647cea4d63 x27: 0000000000000080
x26: ffff0000c8559710 x25: ffff0000cb6b3000 x24: 0000000000000000
x23: 05062b64fcea4cc0 x22: 05062b64fcea4cc0 x21: 05062b64fcea4d01
x20: dfff800000000000 x19: 05062b64fcea4cc0 x18: 0000000000000200
x17: ff8080000ff4afcc x16: ffff8000082e8c60 x15: ffff80000ff4afcc
x14: 1ffff0000291e06a x13: ffffffffffffffff x12: 0000000000000000
x11: ff808000100afd1c x10: 0000000000000000 x9 : 05062b64fcea4c81
x8 : 1ffff00004526e06 x7 : 0000000000000000 x6 : ffff800022937030
x5 : ffff800022937050 x4 : 05062b647cea4d63 x3 : ffff8000100af960
x2 : 0000000000000000 x1 : 7fffffffffffffff x0 : 05062b64fcea4d01
Call trace:
 find_entry_to_transmit+0x51c/0x6ac
 get_packet_txtime net/sched/sch_taprio.c:379 [inline]
 taprio_enqueue_one+0xdac/0x1468 net/sched/sch_taprio.c:426
 taprio_enqueue+0x2b0/0x514 net/sched/sch_taprio.c:491
 dev_qdisc_enqueue+0x60/0x35c net/core/dev.c:3789
 __dev_xmit_skb net/core/dev.c:3873 [inline]
 __dev_queue_xmit+0x1048/0x2a6c net/core/dev.c:4190
 dev_queue_xmit+0x24/0x34 net/core/dev.c:4258
 neigh_resolve_output+0x52c/0x5dc net/core/neighbour.c:1493
 neigh_output include/net/neighbour.h:509 [inline]
 ip6_finish_output2+0x1344/0x1c48 net/ipv6/ip6_output.c:126
 __ip6_finish_output+0x518/0x67c net/ipv6/ip6_output.c:191
 ip6_finish_output+0x40/0x218 net/ipv6/ip6_output.c:201
 NF_HOOK_COND include/linux/netfilter.h:291 [inline]
 ip6_output+0x270/0x594 net/ipv6/ip6_output.c:224
 dst_output include/net/dst.h:443 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 ndisc_send_skb+0xbf8/0x1788 net/ipv6/ndisc.c:508
 ndisc_send_ns+0x538/0x6ec net/ipv6/ndisc.c:650
 addrconf_dad_work+0x81c/0x126c net/ipv6/addrconf.c:4174
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2307
 worker_thread+0x910/0x1034 kernel/workqueue.c:2454
 kthread+0x37c/0x45c kernel/kthread.c:319
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/17 16:01 linux-5.15.y d54cfc420586 20f8b3c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: soft lockup in addrconf_dad_work
* Struck through repros no longer work on HEAD.