BUG: soft lockup in tipc_disc_timeout (2)

Status: upstream: reported on 2026/05/19 15:10
Reported-by: syzbot+1740cd1278ad039c1d0e@syzkaller.appspotmail.com
First crash: 85d, last: 7d14h
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 BUG: soft lockup in tipc_disc_timeout (2) 1 1 1403d 1403d 0/1 auto-obsoleted due to no activity on 2023/02/06 01:50
linux-6.1 BUG: soft lockup in tipc_disc_timeout 1 6 326d 388d 0/3 auto-obsoleted due to no activity on 2025/12/29 01:14
upstream BUG: soft lockup in tipc_disc_timeout net 1 1 612d 612d 0/29 closed as invalid on 2025/01/15 12:30
linux-4.19 BUG: soft lockup in tipc_disc_timeout 1 2 1788d 1789d 0/1 auto-closed as invalid on 2022/01/17 13:56
android-5-15 BUG: soft lockup in tipc_disc_timeout 1 1 1101d 1101d 0/2 auto-obsoleted due to no activity on 2023/11/05 03:35
linux-5.15 INFO: rcu detected stall in tipc_disc_timeout (2) 1 4 15d 135d 0/3 upstream: reported on 2026/03/30 17:12
linux-5.15 INFO: rcu detected stall in tipc_disc_timeout 1 1 378d 378d 0/3 auto-obsoleted due to no activity on 2025/11/07 23:05
upstream INFO: rcu detected stall in tipc_disc_timeout (3) net 1 1 768d 768d 0/29 auto-obsoleted due to no activity on 2024/10/03 12:56

Sample crash report:
watchdog: BUG: soft lockup - CPU#1 stuck for 28s! [syz.2.463:6493]
Modules linked in:
irq event stamp: 1370275
hardirqs last  enabled at (1370274): [<ffff800011b8e264>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (1370274): [<ffff800011b8e264>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (1370275): [<ffff800011b8c3ac>] __el1_irq arch/arm64/kernel/entry-common.c:468 [inline]
hardirqs last disabled at (1370275): [<ffff800011b8c3ac>] el1_interrupt+0x24/0x54 arch/arm64/kernel/entry-common.c:486
softirqs last  enabled at (83604): [<ffff8000081ae3bc>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (83604): [<ffff8000081ae3bc>] handle_softirqs+0xb1c/0xc90 kernel/softirq.c:624
softirqs last disabled at (89205): [<ffff800008020e6c>] __do_softirq+0x14/0x20 kernel/softirq.c:630
CPU: 1 PID: 6493 Comm: syz.2.463 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : check_kcov_mode kernel/kcov.c:182 [inline]
pc : write_comp_data kernel/kcov.c:245 [inline]
pc : __sanitizer_cov_trace_cmp4+0x50/0xac kernel/kcov.c:287
lr : cake_heapify+0x22c/0x464 net/sched/sch_cake.c:1494
sp : ffff800008017100
x29: ffff800008017120 x28: 0000000000000cc8 x27: 0000000000001992
x26: ffff0000f11d82d8 x25: dfff800000000000 x24: 1fffe0001e23b05a
x23: 0000000000000000 x22: ffff000106a47e68 x21: 0000000000000000
x20: ffff0000f11d82d0 x19: 0000000000000cc8 x18: 1fffe00033e7697e
x17: 0000000000000000 x16: ffff8000082dd248 x15: 000000000004ffff
x14: 0000000000000001 x13: 1ffff00002a70071 x12: 00000000d57aa618
x11: ff0080001019a6ec x10: 0000000000000301 x9 : ffff0000d36a0000
x8 : ffff80001019a6ec x7 : ffff8000083c791c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 check_kcov_mode kernel/kcov.c:182 [inline]
 write_comp_data kernel/kcov.c:245 [inline]
 __sanitizer_cov_trace_cmp4+0x50/0xac kernel/kcov.c:287
 cake_drop net/sched/sch_cake.c:1572 [inline]
 cake_enqueue+0x357c/0x6960 net/sched/sch_cake.c:1946
 qdisc_enqueue include/net/sch_generic.h:854 [inline]
 netem_dequeue+0xa00/0x1018 net/sched/sch_netem.c:736
 dequeue_skb net/sched/sch_generic.c:295 [inline]
 qdisc_restart net/sched/sch_generic.c:400 [inline]
 __qdisc_run+0x1b4/0x1300 net/sched/sch_generic.c:418
 __dev_xmit_skb net/core/dev.c:3995 [inline]
 __dev_queue_xmit+0xc38/0x3154 net/core/dev.c:4337
 dev_queue_xmit include/linux/netdevice.h:3051 [inline]
 tipc_l2_send_msg+0x2a0/0x364 net/tipc/bearer.c:519
 tipc_bearer_xmit_skb+0x240/0x380 net/tipc/bearer.c:578
 tipc_disc_timeout+0x4e8/0x630 net/tipc/discover.c:338
 call_timer_fn+0x1b8/0x96c kernel/time/timer.c:1701
 expire_timers kernel/time/timer.c:1752 [inline]
 __run_timers+0x478/0x6d8 kernel/time/timer.c:2023
 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:2036
 handle_softirqs+0x318/0xc90 kernel/softirq.c:596
 __do_softirq+0x14/0x20 kernel/softirq.c:630
 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897
 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85
 invoke_softirq kernel/softirq.c:477 [inline]
 __irq_exit_rcu+0x23c/0x430 kernel/softirq.c:679
 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691
 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline]
 el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581
 rcu_preempt_read_enter kernel/rcu/tree_plugin.h:-1 [inline]
 __rcu_read_unlock+0x0/0x110 kernel/rcu/tree_plugin.h:402
 sk_filter include/linux/filter.h:905 [inline]
 unix_dgram_sendmsg+0x784/0x13e4 net/unix/af_unix.c:1979
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmmsg+0x320/0x7ec net/socket.c:2659
 __do_sys_sendmmsg net/socket.c:2688 [inline]
 __se_sys_sendmmsg net/socket.c:2685 [inline]
 __arm64_sys_sendmmsg+0xa4/0xc0 net/socket.c:2685
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/05 08:24 linux-6.1.y fb28aa725e05 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: soft lockup in tipc_disc_timeout
2026/07/24 22:11 linux-6.1.y dc5c83b7f5f8 dd737a83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: soft lockup in tipc_disc_timeout
2026/06/11 20:45 linux-6.1.y 228da13e907e d93a6ab6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: soft lockup in tipc_disc_timeout
2026/05/19 15:09 linux-6.1.y c27210688955 223544dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: soft lockup in tipc_disc_timeout
* Struck through repros no longer work on HEAD.