syzbot
BUG: soft lockup in addrconf_rs_timer
Status:
auto-closed as invalid on 2020/07/20 22:25
Subsystems:
net
[Documentation on labels]
Reported-by: syzbot+efa0ea0bc593cef594e1@syzkaller.appspotmail.com
First crash: 2531d, last: 2332d
▶
▼
Similar bugs (25)
| Kernel |
Title |
Rank
🛈
|
Repro |
Cause bisect |
Fix bisect |
Count |
Last |
Reported |
Patched |
Status |
| upstream |
BUG: soft lockup in addrconf_rs_timer (3)
net
|
1 |
syz |
|
|
8 |
1048d |
1112d
|
0/29 |
auto-obsoleted due to no activity on 2024/01/05 16:48
|
| upstream |
BUG: soft lockup in addrconf_rs_timer (4)
net
|
1 |
|
|
|
1 |
944d |
944d
|
0/29 |
closed as invalid on 2024/03/12 13:17
|
| android-6-1 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
|
|
|
1 |
1017d |
1017d
|
0/2 |
auto-obsoleted due to no activity on 2024/01/27 13:54
|
| android-5-10 |
BUG: soft lockup in addrconf_rs_timer (2)
|
1 |
syz, C |
|
|
265 |
448d |
779d
|
0/2 |
auto-obsoleted due to no activity on 2025/07/28 18:01
|
| android-6-1 |
BUG: soft lockup in addrconf_rs_timer (5)
origin:lts
|
1 |
syz, C |
|
|
6 |
88d |
92d
|
0/2 |
upstream: reported C repro on 2026/05/10 21:46
|
| android-5-10 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
|
|
|
2 |
1107d |
1125d
|
0/2 |
auto-obsoleted due to no activity on 2023/10/29 01:38
|
| linux-6.1 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
syz, C |
|
done |
26 |
1154d |
1166d
|
3/3 |
fixed on 2023/07/30 15:47
|
| linux-4.19 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
syz |
|
error |
24 |
1289d |
1971d
|
0/1 |
upstream: reported syz repro on 2021/03/19 06:05
|
| linux-4.14 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
syz, C |
|
error |
133 |
1326d |
2529d
|
0/1 |
upstream: reported C repro on 2019/09/08 14:09
|
| android-5-10 |
BUG: soft lockup in addrconf_rs_timer (3)
|
1 |
|
|
|
1 |
188d |
188d
|
0/2 |
auto-obsoleted due to no activity on 2026/05/05 01:45
|
| linux-5.15 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
syz, C |
|
error |
36 |
1154d |
1166d
|
0/3 |
auto-obsoleted due to no activity on 2023/08/23 09:06
|
| android-5-15 |
BUG: soft lockup in addrconf_rs_timer (3)
|
1 |
|
|
|
1 |
112d |
112d
|
0/2 |
auto-obsoleted due to no activity on 2026/07/19 17:10
|
| android-5-15 |
BUG: soft lockup in addrconf_rs_timer (2)
|
1 |
syz |
|
|
99 |
593d |
836d
|
0/2 |
auto-obsoleted due to no activity on 2025/02/14 09:13
|
| android-6-1 |
BUG: soft lockup in addrconf_rs_timer (3)
|
1 |
|
|
|
1 |
493d |
493d
|
0/2 |
auto-obsoleted due to no activity on 2025/07/03 20:11
|
| linux-6.6 |
INFO: rcu detected stall in addrconf_rs_timer
origin:lts-only
|
1 |
syz, C |
|
inconclusive |
29 |
15d |
254d
|
0/2 |
upstream: reported C repro on 2025/11/29 19:55
|
| android-54 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
|
|
|
190 |
768d |
823d
|
0/2 |
auto-obsoleted due to no activity on 2024/08/22 17:20
|
| android-5-10 |
BUG: soft lockup in addrconf_rs_timer (4)
|
1 |
|
|
|
1 |
41d |
41d
|
0/2 |
premoderation: reported on 2026/06/30 19:53
|
| android-6-1 |
BUG: soft lockup in addrconf_rs_timer (2)
|
1 |
syz |
|
|
176 |
614d |
819d
|
0/2 |
auto-obsoleted due to no activity on 2025/01/24 01:43
|
| upstream |
BUG: soft lockup in addrconf_rs_timer (2)
net
|
1 |
syz, C |
|
|
51 |
1147d |
1167d
|
23/29 |
fixed on 2023/07/04 09:17
|
| android-6-1 |
BUG: soft lockup in addrconf_rs_timer (4)
|
1 |
|
|
|
7 |
216d |
364d
|
0/2 |
auto-obsoleted due to no activity on 2026/04/06 21:21
|
| android-5-15 |
BUG: soft lockup in addrconf_rs_timer
|
1 |
|
|
|
1 |
1115d |
1115d
|
0/2 |
auto-obsoleted due to no activity on 2023/10/21 14:14
|
| upstream |
INFO: rcu detected stall in addrconf_rs_timer (4)
net
|
1 |
syz, C |
error |
error |
121 |
1744d |
2198d
|
0/29 |
closed as invalid on 2022/02/08 10:39
|
| linux-6.1 |
INFO: rcu detected stall in addrconf_rs_timer
origin:lts-only
|
1 |
syz, C |
|
done |
124 |
16d |
808d
|
0/3 |
upstream: reported C repro on 2024/05/24 18:08
|
| linux-5.15 |
INFO: rcu detected stall in addrconf_rs_timer
origin:lts-only
|
1 |
syz, C |
|
error |
119 |
2d05h |
975d
|
0/3 |
upstream: reported C repro on 2023/12/10 10:27
|
| upstream |
INFO: rcu detected stall in addrconf_rs_timer (6)
prio:normal
virt
mm
netfilter
|
1 |
syz |
error |
error |
704 |
14d |
801d
|
0/29 |
upstream: reported syz repro on 2024/06/01 13:51
|
Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 114s! [syz-executor.3:8810]
Modules linked in:
irq event stamp: 35797471
hardirqs last enabled at (35797470): [<ffffffff81005ef4>] trace_hardirqs_on_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:41
hardirqs last disabled at (35797471): [<ffffffff81005f10>] trace_hardirqs_off_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:42
softirqs last enabled at (14036344): [<ffffffff8148d373>] invoke_softirq kernel/softirq.c:373 [inline]
softirqs last enabled at (14036344): [<ffffffff8148d373>] irq_exit+0x223/0x230 kernel/softirq.c:413
softirqs last disabled at (14037963): [<ffffffff8148d373>] invoke_softirq kernel/softirq.c:373 [inline]
softirqs last disabled at (14037963): [<ffffffff8148d373>] irq_exit+0x223/0x230 kernel/softirq.c:413
CPU: 0 PID: 8810 Comm: syz-executor.3 Not tainted 5.6.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:759 [inline]
RIP: 0010:lock_is_held_type+0x259/0x2b0 kernel/locking/lockdep.c:4523
Code: 18 d4 0a 89 48 c1 e8 03 42 80 3c 38 00 74 0c 48 c7 c7 18 d4 0a 89 e8 36 c9 56 00 48 83 3d 66 bb b0 07 00 74 53 4c 89 f7 57 9d <0f> 1f 44 00 00 89 e8 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3
RSP: 0018:ffffc90000007c38 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff1215a83 RBX: 1ffff110093add72 RCX: ffff888049d6e300
RDX: dffffc0000000000 RSI: ffff888049d6ebe0 RDI: 0000000000000282
RBP: 0000000000000000 R08: ffffffff86f71443 R09: ffffed1015d07004
R10: ffffed1015d07004 R11: 0000000000000000 R12: ffff888049d6eb94
R13: ffffffff89390ba0 R14: 0000000000000282 R15: dffffc0000000000
FS: 00007f9bc6cd9700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c000067c80 CR3: 000000008c65e000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
lock_is_held include/linux/lockdep.h:361 [inline]
lockdep_rtnl_is_held+0x17/0x30 net/core/rtnetlink.c:137
__in6_dev_get include/net/addrconf.h:309 [inline]
ipv6_get_lladdr+0xe3/0x340 net/ipv6/addrconf.c:1866
addrconf_rs_timer+0x1e0/0x680 net/ipv6/addrconf.c:3884
call_timer_fn+0x91/0x160 kernel/time/timer.c:1404
expire_timers kernel/time/timer.c:1449 [inline]
__run_timers+0x776/0x970 kernel/time/timer.c:1773
run_timer_softirq+0x46/0x80 kernel/time/timer.c:1786
__do_softirq+0x268/0x7c5 kernel/softirq.c:292
invoke_softirq kernel/softirq.c:373 [inline]
irq_exit+0x223/0x230 kernel/softirq.c:413
exiting_irq arch/x86/include/asm/apic.h:546 [inline]
smp_apic_timer_interrupt+0x113/0x280 arch/x86/kernel/apic/apic.c:1146
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
</IRQ>
RIP: 0010:ex_to_insn lib/extable.c:20 [inline]
RIP: 0010:cmp_ex_search+0x3d/0x90 lib/extable.c:101
Code: fc ff df e8 15 24 82 f9 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c0 5f be f9 4c 8b 3b 4c 89 f0 48 c1 e8 03 8a 04 28 <84> c0 75 35 49 63 1e 4c 01 f3 49 39 df 19 c0 49 39 df bd 01 00 00
RSP: 0018:ffffc90002a87b48 EFLAGS: 00000a06 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff11ed200 RBX: ffffc90002a87bb0 RCX: 0000000000040000
RDX: ffffc90010cc4000 RSI: 0000000000026021 RDI: 0000000000026022
RBP: dffffc0000000000 R08: ffffffff839364f1 R09: ffffed1014e5981f
R10: ffffed1014e5981f R11: 0000000000000000 R12: ffffffff88f68154
R13: ffffc90002a87bb0 R14: ffffffff88f691b0 R15: ffffffff83b03c13
bsearch+0x46/0xb0 lib/bsearch.c:39
search_extable+0x62/0x90 lib/extable.c:120
search_kernel_exception_table kernel/extable.c:47 [inline]
search_exception_tables+0x3f/0x60 kernel/extable.c:56
fixup_exception+0x4f/0xd0 arch/x86/mm/extable.c:173
no_context+0x18c/0xd70 arch/x86/mm/fault.c:725
page_fault+0x39/0x40 arch/x86/entry/entry_64.S:1203
RIP: 0010:do_strncpy_from_user lib/strncpy_from_user.c:40 [inline]
RIP: 0010:strncpy_from_user+0x1b3/0x3f0 lib/strncpy_from_user.c:120
Code: 86 b7 00 00 00 44 89 e8 83 e0 07 48 89 44 24 18 31 db 48 8b 6c 24 08 4d 89 f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 45 31 f6 <4d> 8b 3c 24 31 ff 44 89 f6 e8 9f 6d c4 fd 45 85 f6 0f 85 84 00 00
RSP: 0018:ffffc90002a87d98 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffff888049d6e300 RSI: 0000000000000fe0 RDI: 0000000000000007
RBP: ffff888049f4a2e0 R08: ffffffff83b03be4 R09: 0000000000000fe0
R10: 0000000000000020 R11: ffff88821bc4f700 R12: 0000000000000000
R13: 0000000000000fe0 R14: 0000000000000000 R15: ffff888049d6f7d0
getname_flags+0x106/0x610 fs/namei.c:149
do_sys_openat2+0x3f2/0x6c0 fs/open.c:1140
do_sys_open fs/open.c:1162 [inline]
__do_sys_openat fs/open.c:1176 [inline]
__se_sys_openat fs/open.c:1171 [inline]
__x64_sys_openat+0x1c8/0x1f0 fs/open.c:1171
do_syscall_64+0xf3/0x1b0 arch/x86/entry/common.c:294
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c849
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f9bc6cd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f9bc6cd96d4 RCX: 000000000045c849
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000007e5 R14: 00000000004ca9fd R15: 000000000076bf0c
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 8632 Comm: syz-fuzzer Not tainted 5.6.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0033:0x4206f9
Code: 5c 24 78 4c 89 24 24 4c 89 4c 24 08 4c 89 5c 24 10 e8 3b 3d ff ff 48 8b 44 24 18 48 8b 4c 24 20 48 8b 54 24 28 48 85 c0 75 33 <8b> 44 24 38 8b 4c 24 3c 48 8b 54 24 48 48 8b 5c 24 78 89 ce 4c 8b
RSP: 002b:00007ffc971fd478 EFLAGS: 00000212
RAX: 0000000000000001 RBX: 000000c00081b800 RCX: 0000000000000006
RDX: 000000c00002f770 RSI: 000000c00564d980 RDI: 0000000000000006
RBP: 00007ffc971fd4f8 R08: 00000000000000f8 R09: 0000000000000040
R10: 00007fdf884c5790 R11: 0000000000000028 R12: 000000c00564d980
R13: 0000000000e908a0 R14: 0000000000000000 R15: 0000000000000000
FS: 00000000020bea50 GS: 0000000000000000
* Struck through repros no longer work on HEAD.