BUG: soft lockup in dev_ioctl

Status: auto-obsoleted due to no activity on 2024/08/13 06:45
Subsystems: batman
[Documentation on labels]
Reported-by: syzbot+d405240e0575ca2ded5d@syzkaller.appspotmail.com
First crash: 888d, last: 818d
▶ ▼ Similar bugs (15)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 BUG: soft lockup in dev_ioctl 1 6 228d 387d 0/3 auto-obsoleted due to no activity on 2026/04/05 06:22
android-5-15 BUG: soft lockup in dev_ioctl 1 7 746d 836d 0/2 auto-obsoleted due to no activity on 2024/10/24 08:58
upstream BUG: soft lockup in dev_ioctl (2) mm 1 6 285d 354d 0/29 auto-obsoleted due to no activity on 2026/02/07 12:10
linux-6.1 INFO: rcu detected stall in dev_ioctl (2) 1 1 9d07h 9d07h 0/3 upstream: reported on 2026/08/02 22:47
linux-5.15 INFO: rcu detected stall in dev_ioctl (2) 1 5 137d 241d 0/3 auto-obsoleted due to no activity on 2026/07/05 19:56
linux-6.1 INFO: rcu detected stall in dev_ioctl 1 2 128d 128d 0/3 auto-obsoleted due to no activity on 2026/07/15 04:42
linux-4.19 INFO: rcu detected stall in dev_ioctl (2) 1 1 1808d 1808d 0/1 auto-closed as invalid on 2021/12/27 14:21
upstream INFO: rcu detected stall in dev_ioctl batman 1 18 1583d 2451d 0/29 auto-closed as invalid on 2022/08/09 13:29
linux-4.19 INFO: rcu detected stall in dev_ioctl (3) 1 1 1685d 1685d 0/1 auto-closed as invalid on 2022/04/29 15:27
linux-6.6 INFO: rcu detected stall in dev_ioctl (2) 1 1 3d01h 3d01h 0/2 upstream: reported on 2026/08/09 04:57
linux-5.15 INFO: rcu detected stall in dev_ioctl (3) 1 2 16d 20d 0/3 upstream: reported on 2026/07/22 13:58
linux-5.15 INFO: rcu detected stall in dev_ioctl 1 1 618d 618d 0/3 auto-obsoleted due to no activity on 2025/03/11 17:46
linux-6.6 INFO: rcu detected stall in dev_ioctl 1 1 352d 352d 0/2 auto-obsoleted due to no activity on 2025/12/02 20:33
upstream INFO: rcu detected stall in dev_ioctl (2) mm 1 3 583d 667d 0/29 auto-obsoleted due to no activity on 2025/04/05 21:09
linux-4.19 INFO: rcu detected stall in dev_ioctl 1 1 2170d 2170d 0/1 auto-closed as invalid on 2020/12/30 14:33

Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.2:32230]
Modules linked in:
irq event stamp: 54848489
hardirqs last  enabled at (54848488): [<ffff8000801d9d34>] __local_bh_enable_ip+0x224/0x44c kernel/softirq.c:386
hardirqs last disabled at (54848489): [<ffff80008ad63978>] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline]
hardirqs last disabled at (54848489): [<ffff80008ad63978>] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551
softirqs last  enabled at (3050): [<ffff800088f57938>] pneigh_ifdown_and_unlock net/core/neighbour.c:865 [inline]
softirqs last  enabled at (3050): [<ffff800088f57938>] __neigh_ifdown+0x198/0x390 net/core/neighbour.c:447
softirqs last disabled at (3088): [<ffff80008aad7cbc>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (3088): [<ffff80008aad7cbc>] batadv_tt_local_resize_to_mtu+0x60/0x154 net/batman-adv/translation-table.c:3949
CPU: 0 PID: 32230 Comm: syz-executor.2 Not tainted 6.8.0-rc6-syzkaller-g9910665503b3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : should_resched arch/arm64/include/asm/preempt.h:79 [inline]
pc : __local_bh_enable_ip+0x228/0x44c kernel/softirq.c:388
lr : __local_bh_enable_ip+0x224/0x44c kernel/softirq.c:386
sp : ffff80009a3073d0
x29: ffff80009a3073e0 x28: dfff800000000000 x27: dfff800000000000
x26: ffff00011f230190 x25: ffff0000d1570d88 x24: 0000000000000001
x23: 1fffe00019edab41 x22: dfff800000000000 x21: ffff80008aad8014
x20: 0000000000000202 x19: ffff0000cf6d5a08 x18: ffff80009a306b20
x17: 77656e2074696620 x16: ffff800080320090 x15: 0000000000000001
x14: 1fffe00023e4e190 x13: 0000000000000000 x12: 0000000000000003
x11: 0000000000040000 x10: 0000000000000003 x9 : 0000000000000000
x8 : 000000000344ebe8 x7 : ffff80008aad7eac x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000002 x1 : ffff80008aedda60 x0 : ffff800125414000
Call trace:
 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:27 [inline]
 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:49 [inline]
 __local_bh_enable_ip+0x228/0x44c kernel/softirq.c:386
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 batadv_tt_local_purge+0x264/0x2e8 net/batman-adv/translation-table.c:1356
 batadv_tt_local_resize_to_mtu+0xa0/0x154 net/batman-adv/translation-table.c:3956
 batadv_hard_if_event+0x41c/0xe04
 notifier_call_chain+0x1a4/0x510 kernel/notifier.c:93
 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:461
 call_netdevice_notifiers_info net/core/dev.c:1966 [inline]
 call_netdevice_notifiers_mtu+0x170/0x20c net/core/dev.c:2041
 dev_set_mtu_ext+0x3c8/0x544 net/core/dev.c:8791
 dev_set_mtu+0xb0/0x194 net/core/dev.c:8812
 dev_ifsioc+0x1d0/0x9a8 net/core/dev_ioctl.c:537
 dev_ioctl+0x4d8/0xd34 net/core/dev_ioctl.c:787
 sock_do_ioctl+0x1d4/0x2d0 net/socket.c:1236
 sock_ioctl+0x4ec/0x838 net/socket.c:1341
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:871 [inline]
 __se_sys_ioctl fs/ioctl.c:857 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:857
 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.8.0-rc6-syzkaller-g9910665503b3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:51
lr : default_idle_call+0xf8/0x128 kernel/sched/idle.c:103
sp : ffff800093a17d30
x29: ffff800093a17d30 x28: dfff800000000000 x27: 1ffff00012742fb4
x26: ffff80008ec9d000 x25: 0000000000000000 x24: 0000000000000002
x23: 1ffff00011d93a74 x22: ffff80008ec9d3a0 x21: 0000000000000000
x20: ffff0000c1aabc00 x19: ffff8000802cfefc x18: 1fffe00036804396
x17: ffff80008ec9d000 x16: ffff8000802cf7c0 x15: 0000000000000001
x14: 1fffe00036805f10 x13: 0000000000000000 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000000000003 x9 : 0000000000000000
x8 : 0000000000541bbf x7 : ffff80008045f908 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008ad679c0
x2 : 0000000000000000 x1 : ffff80008aedda60 x0 : ffff800125436000
Call trace:
 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:27 [inline]
 arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:49
 cpuidle_idle_call kernel/sched/idle.c:170 [inline]
 do_idle+0x1f0/0x4e8 kernel/sched/idle.c:312
 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:410
 secondary_start_kernel+0x198/0x1c0 arch/arm64/kernel/smp.c:272
 __secondary_switched+0xb8/0xbc arch/arm64/kernel/head.S:404

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/07 02:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 9910665503b3 f39a7eed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: soft lockup in dev_ioctl
2024/05/15 06:44 upstream 1b10b390d945 fdb4c10c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: rcu detected stall in dev_ioctl
* Struck through repros no longer work on HEAD.