syzbot


BUG: soft lockup in inet6_rtm_newroute

Status: fixed on 2024/07/09 19:14
Subsystems: net
[Documentation on labels]
Fix commit: 22f008128625 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
First crash: 165d, last: 165d

Sample crash report:
cdc_wdm 1-1:1.0: nonzero urb status received: -71
cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
cdc_wdm 1-1:1.0: nonzero urb status received: -71
cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz-executor.0:7246]
Modules linked in:
irq event stamp: 220032
hardirqs last  enabled at (220031): [<ffff80008037b734>] console_emit_next_record kernel/printk/printk.c:2935 [inline]
hardirqs last  enabled at (220031): [<ffff80008037b734>] console_flush_all+0x5e4/0xafc kernel/printk/printk.c:2994
hardirqs last disabled at (220032): [<ffff80008b066fd4>] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline]
hardirqs last disabled at (220032): [<ffff80008b066fd4>] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551
softirqs last  enabled at (220026): [<ffff8000801ea3cc>] softirq_handle_end kernel/softirq.c:400 [inline]
softirqs last  enabled at (220026): [<ffff8000801ea3cc>] handle_softirqs+0xa3c/0xbfc kernel/softirq.c:582
softirqs last disabled at (220021): [<ffff800080020de8>] __do_softirq+0x14/0x20 kernel/softirq.c:588
CPU: 1 PID: 7246 Comm: syz-executor.0 Tainted: G        W          6.10.0-rc3-syzkaller-gac2193b4b460 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:176 [inline]
pc : arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline]
pc : console_emit_next_record kernel/printk/printk.c:2935 [inline]
pc : console_flush_all+0x608/0xafc kernel/printk/printk.c:2994
lr : console_emit_next_record kernel/printk/printk.c:2935 [inline]
lr : console_flush_all+0x604/0xafc kernel/printk/printk.c:2994
sp : ffff8000a0865d00
x29: ffff8000a0865e20 x28: ffff800090ac7ce0 x27: 0000000000000001
x26: ffff800090ac7d38 x25: dfff800000000000 x24: 1ffff00012158f9e
x23: ffff8000a0865ee0 x22: ffff800090ac7cf0 x21: 0000000000000000
x20: 0000000000000000 x19: 00000000000000c0 x18: ffff8000a0865c38
x17: 6965636572207375 x16: ffff800080338014 x15: 0000000000000001
x14: 1ffff00011e6d9c8 x13: 0000000000000000 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000d3e9dac0 x7 : ffff80008038185c x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000006 x1 : 0000000000000080 x0 : 0000000000000000
Call trace:
 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline]
 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline]
 console_emit_next_record kernel/printk/printk.c:2935 [inline]
 console_flush_all+0x608/0xafc kernel/printk/printk.c:2994
 console_unlock+0xfc/0x3d4 kernel/printk/printk.c:3063
 vprintk_emit+0x1e8/0x344 kernel/printk/printk.c:2345
 vprintk_default+0xa0/0xe4 kernel/printk/printk.c:2360
 vprintk+0x200/0x2d4 kernel/printk/printk_safe.c:45
 _printk+0xdc/0x128 kernel/printk/printk.c:2370
 validate_nla lib/nlattr.c:414 [inline]
 __nla_validate_parse+0x1440/0x2844 lib/nlattr.c:635
 __nla_parse+0x60/0x7c lib/nlattr.c:732
 nla_parse_nested_deprecated include/net/netlink.h:1339 [inline]
 seg6_local_build_state+0xf0/0xc38 net/ipv6/seg6_local.c:2506
 lwtunnel_build_state+0x338/0x47c net/core/lwtunnel.c:135
 fib_nh_common_init+0x13c/0x408 net/ipv4/fib_semantics.c:604
 fib6_nh_init+0xccc/0x1c64 net/ipv6/route.c:3622
 ip6_route_info_create+0x794/0xf00 net/ipv6/route.c:3809
 ip6_route_add+0x38/0x194 net/ipv6/route.c:3853
 inet6_rtm_newroute+0x248/0x1cc8 net/ipv6/route.c:5519
 rtnetlink_rcv_msg+0x748/0xe64 net/core/rtnetlink.c:6635
 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2564
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6653
 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline]
 netlink_unicast+0x65c/0x898 net/netlink/af_netlink.c:1361
 netlink_sendmsg+0x7a0/0xa84 net/netlink/af_netlink.c:1905
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x56c/0x840 net/socket.c:2585
 ___sys_sendmsg net/socket.c:2639 [inline]
 __sys_sendmsg+0x26c/0x33c net/socket.c:2668
 __do_sys_sendmsg net/socket.c:2677 [inline]
 __se_sys_sendmsg net/socket.c:2675 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2675
 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W          6.10.0-rc3-syzkaller-gac2193b4b460 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:50
lr : default_idle_call+0xf8/0x128 kernel/sched/idle.c:124
sp : ffff80008f117cf0
x29: ffff80008f117cf0 x28: dfff800000000000 x27: 1ffff00011e22fac
x26: ffff80008f19d000 x25: 0000000000000000 x24: 0000000000000001
x23: 1ffff00011e33aad x22: ffff80008f19d568 x21: 0000000000000000
x20: ffff80008f1c4e40 x19: ffff8000802e6844 x18: 1fffe000367aa1de
x17: ffff80008f19d000 x16: ffff8000802e6108 x15: 0000000000000001
x14: 1fffe000367abf41 x13: 0000000000000000 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000000000003 x9 : 0000000000000000
x8 : 000000000007d85d x7 : ffff80008047e2d4 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008b06b4bc
x2 : 0000000000000000 x1 : ffff80008b1e00a0 x0 : ffff800124c6a000
Call trace:
 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline]
 arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48
 cpuidle_idle_call kernel/sched/idle.c:191 [inline]
 do_idle+0x1f0/0x4e4 kernel/sched/idle.c:332
 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:430
 rest_init+0x2dc/0x2f4 init/main.c:747
 start_kernel+0x3f4/0x4f4 init/main.c:1103
 __primary_switched+0x84/0x8c arch/arm64/kernel/head.S:243

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/23 10:21 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ac2193b4b460 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: soft lockup in inet6_rtm_newroute
* Struck through repros no longer work on HEAD.