syzbot


BUG: soft lockup in addrconf_rs_timer

Status: auto-closed as invalid on 2020/07/20 22:25
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+efa0ea0bc593cef594e1@syzkaller.appspotmail.com
First crash: 1915d, last: 1717d
Discussions (1)
Title Replies (including bot) Last reply
BUG: soft lockup in addrconf_rs_timer 0 (1) 2019/09/08 07:18
Similar bugs (18)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: soft lockup in addrconf_rs_timer (3) net syz 8 433d 497d 0/28 auto-obsoleted due to no activity on 2024/01/05 16:48
upstream BUG: soft lockup in addrconf_rs_timer (4) net 1 328d 328d 0/28 closed as invalid on 2024/03/12 13:17
android-6-1 BUG: soft lockup in addrconf_rs_timer 1 401d 401d 0/2 auto-obsoleted due to no activity on 2024/01/27 13:54
android-5-10 BUG: soft lockup in addrconf_rs_timer (2) C 248 7d02h 164d 0/2 upstream: reported C repro on 2024/06/22 20:35
android-5-10 BUG: soft lockup in addrconf_rs_timer 2 492d 510d 0/2 auto-obsoleted due to no activity on 2023/10/29 01:38
linux-6.1 BUG: soft lockup in addrconf_rs_timer C done 26 539d 551d 3/3 fixed on 2023/07/30 15:47
linux-4.19 BUG: soft lockup in addrconf_rs_timer syz error 24 673d 1356d 0/1 upstream: reported syz repro on 2021/03/19 06:05
linux-4.14 BUG: soft lockup in addrconf_rs_timer C error 133 711d 1913d 0/1 upstream: reported C repro on 2019/09/08 14:09
linux-5.15 BUG: soft lockup in addrconf_rs_timer C error 36 539d 551d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:06
android-5-15 BUG: soft lockup in addrconf_rs_timer (2) syz 93 7h20m 220d 0/2 premoderation: reported syz repro on 2024/04/27 11:00
android-54 BUG: soft lockup in addrconf_rs_timer 190 153d 208d 0/2 auto-obsoleted due to no activity on 2024/08/22 17:20
android-6-1 BUG: soft lockup in addrconf_rs_timer (2) syz 174 27d 204d 0/2 premoderation: reported syz repro on 2024/05/13 20:21
upstream BUG: soft lockup in addrconf_rs_timer (2) net C 51 531d 552d 23/28 fixed on 2023/07/04 09:17
android-5-15 BUG: soft lockup in addrconf_rs_timer 1 499d 499d 0/2 auto-obsoleted due to no activity on 2023/10/21 14:14
upstream INFO: rcu detected stall in addrconf_rs_timer (4) net C error error 121 1129d 1583d 0/28 closed as invalid on 2022/02/08 10:39
linux-6.1 INFO: rcu detected stall in addrconf_rs_timer 55 4d19h 193d 0/3 upstream: reported on 2024/05/24 18:08
linux-5.15 INFO: rcu detected stall in addrconf_rs_timer origin:upstream C error 37 17d 359d 0/3 upstream: reported C repro on 2023/12/10 10:27
upstream INFO: rcu detected stall in addrconf_rs_timer (6) usb syz error 393 12d 185d 0/28 upstream: reported syz repro on 2024/06/01 13:51

Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 114s! [syz-executor.3:8810]
Modules linked in:
irq event stamp: 35797471
hardirqs last  enabled at (35797470): [<ffffffff81005ef4>] trace_hardirqs_on_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:41
hardirqs last disabled at (35797471): [<ffffffff81005f10>] trace_hardirqs_off_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:42
softirqs last  enabled at (14036344): [<ffffffff8148d373>] invoke_softirq kernel/softirq.c:373 [inline]
softirqs last  enabled at (14036344): [<ffffffff8148d373>] irq_exit+0x223/0x230 kernel/softirq.c:413
softirqs last disabled at (14037963): [<ffffffff8148d373>] invoke_softirq kernel/softirq.c:373 [inline]
softirqs last disabled at (14037963): [<ffffffff8148d373>] irq_exit+0x223/0x230 kernel/softirq.c:413
CPU: 0 PID: 8810 Comm: syz-executor.3 Not tainted 5.6.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:759 [inline]
RIP: 0010:lock_is_held_type+0x259/0x2b0 kernel/locking/lockdep.c:4523
Code: 18 d4 0a 89 48 c1 e8 03 42 80 3c 38 00 74 0c 48 c7 c7 18 d4 0a 89 e8 36 c9 56 00 48 83 3d 66 bb b0 07 00 74 53 4c 89 f7 57 9d <0f> 1f 44 00 00 89 e8 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3
RSP: 0018:ffffc90000007c38 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff1215a83 RBX: 1ffff110093add72 RCX: ffff888049d6e300
RDX: dffffc0000000000 RSI: ffff888049d6ebe0 RDI: 0000000000000282
RBP: 0000000000000000 R08: ffffffff86f71443 R09: ffffed1015d07004
R10: ffffed1015d07004 R11: 0000000000000000 R12: ffff888049d6eb94
R13: ffffffff89390ba0 R14: 0000000000000282 R15: dffffc0000000000
FS:  00007f9bc6cd9700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c000067c80 CR3: 000000008c65e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 lock_is_held include/linux/lockdep.h:361 [inline]
 lockdep_rtnl_is_held+0x17/0x30 net/core/rtnetlink.c:137
 __in6_dev_get include/net/addrconf.h:309 [inline]
 ipv6_get_lladdr+0xe3/0x340 net/ipv6/addrconf.c:1866
 addrconf_rs_timer+0x1e0/0x680 net/ipv6/addrconf.c:3884
 call_timer_fn+0x91/0x160 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers+0x776/0x970 kernel/time/timer.c:1773
 run_timer_softirq+0x46/0x80 kernel/time/timer.c:1786
 __do_softirq+0x268/0x7c5 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x223/0x230 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:546 [inline]
 smp_apic_timer_interrupt+0x113/0x280 arch/x86/kernel/apic/apic.c:1146
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 </IRQ>
RIP: 0010:ex_to_insn lib/extable.c:20 [inline]
RIP: 0010:cmp_ex_search+0x3d/0x90 lib/extable.c:101
Code: fc ff df e8 15 24 82 f9 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c0 5f be f9 4c 8b 3b 4c 89 f0 48 c1 e8 03 8a 04 28 <84> c0 75 35 49 63 1e 4c 01 f3 49 39 df 19 c0 49 39 df bd 01 00 00
RSP: 0018:ffffc90002a87b48 EFLAGS: 00000a06 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff11ed200 RBX: ffffc90002a87bb0 RCX: 0000000000040000
RDX: ffffc90010cc4000 RSI: 0000000000026021 RDI: 0000000000026022
RBP: dffffc0000000000 R08: ffffffff839364f1 R09: ffffed1014e5981f
R10: ffffed1014e5981f R11: 0000000000000000 R12: ffffffff88f68154
R13: ffffc90002a87bb0 R14: ffffffff88f691b0 R15: ffffffff83b03c13
 bsearch+0x46/0xb0 lib/bsearch.c:39
 search_extable+0x62/0x90 lib/extable.c:120
 search_kernel_exception_table kernel/extable.c:47 [inline]
 search_exception_tables+0x3f/0x60 kernel/extable.c:56
 fixup_exception+0x4f/0xd0 arch/x86/mm/extable.c:173
 no_context+0x18c/0xd70 arch/x86/mm/fault.c:725
 page_fault+0x39/0x40 arch/x86/entry/entry_64.S:1203
RIP: 0010:do_strncpy_from_user lib/strncpy_from_user.c:40 [inline]
RIP: 0010:strncpy_from_user+0x1b3/0x3f0 lib/strncpy_from_user.c:120
Code: 86 b7 00 00 00 44 89 e8 83 e0 07 48 89 44 24 18 31 db 48 8b 6c 24 08 4d 89 f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 45 31 f6 <4d> 8b 3c 24 31 ff 44 89 f6 e8 9f 6d c4 fd 45 85 f6 0f 85 84 00 00
RSP: 0018:ffffc90002a87d98 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffff888049d6e300 RSI: 0000000000000fe0 RDI: 0000000000000007
RBP: ffff888049f4a2e0 R08: ffffffff83b03be4 R09: 0000000000000fe0
R10: 0000000000000020 R11: ffff88821bc4f700 R12: 0000000000000000
R13: 0000000000000fe0 R14: 0000000000000000 R15: ffff888049d6f7d0
 getname_flags+0x106/0x610 fs/namei.c:149
 do_sys_openat2+0x3f2/0x6c0 fs/open.c:1140
 do_sys_open fs/open.c:1162 [inline]
 __do_sys_openat fs/open.c:1176 [inline]
 __se_sys_openat fs/open.c:1171 [inline]
 __x64_sys_openat+0x1c8/0x1f0 fs/open.c:1171
 do_syscall_64+0xf3/0x1b0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c849
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f9bc6cd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f9bc6cd96d4 RCX: 000000000045c849
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000007e5 R14: 00000000004ca9fd R15: 000000000076bf0c
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 8632 Comm: syz-fuzzer Not tainted 5.6.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0033:0x4206f9
Code: 5c 24 78 4c 89 24 24 4c 89 4c 24 08 4c 89 5c 24 10 e8 3b 3d ff ff 48 8b 44 24 18 48 8b 4c 24 20 48 8b 54 24 28 48 85 c0 75 33 <8b> 44 24 38 8b 4c 24 3c 48 8b 54 24 48 48 8b 5c 24 78 89 ce 4c 8b
RSP: 002b:00007ffc971fd478 EFLAGS: 00000212
RAX: 0000000000000001 RBX: 000000c00081b800 RCX: 0000000000000006
RDX: 000000c00002f770 RSI: 000000c00564d980 RDI: 0000000000000006
RBP: 00007ffc971fd4f8 R08: 00000000000000f8 R09: 0000000000000040
R10: 00007fdf884c5790 R11: 0000000000000028 R12: 000000c00564d980
R13: 0000000000e908a0 R14: 0000000000000000 R15: 0000000000000000
FS:  00000000020bea50 GS:  0000000000000000

Crashes (18):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/22 22:25 upstream b74b991fb8b9 78267cec .config console log report ci-upstream-kasan-gce-smack-root
2020/03/07 23:10 upstream 63849c8f4107 2e9971bb .config console log report ci-upstream-kasan-gce-smack-root
2019/11/30 15:25 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/30 08:03 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/30 05:40 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/30 04:27 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/30 01:04 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/30 00:49 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/29 21:56 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/29 21:35 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/29 16:40 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/11/29 15:52 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2019/09/14 15:42 upstream a7f89616b737 32d59357 .config console log report ci-upstream-kasan-gce
2019/09/13 05:28 upstream 505a8ec7e11a 40fa42bc .config console log report ci-upstream-kasan-gce
2019/09/07 07:25 upstream 1e3778cb223e a60cb4cd .config console log report ci-upstream-kasan-gce-smack-root
2019/09/06 13:33 upstream 3b47fd5ca9ea 040fda58 .config console log report ci-upstream-kasan-gce-selinux-root
2019/09/13 02:07 net-next-old 172ca8308b05 40fa42bc .config console log report ci-upstream-net-kasan-gce
2019/09/11 21:52 net-next-old c1609946b8b6 f4e53c10 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.