syzbot


BUG: soft lockup in smp_call_function

Status: upstream: reported C repro on 2024/04/02 06:05
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+0c78669af74220668cbf@syzkaller.appspotmail.com
First crash: 30d, last: 21h04m
Bug presence (2)
Date Name Commit Repro Result
2024/04/02 lts (merge base) 883d1a956208 C [report] BUG: soft lockup in smp_call_function
2024/04/02 upstream (ToT) 026e680b0a08 C [report] BUG: soft lockup in smp_call_function
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 BUG: soft lockup in smp_call_function C error 2 611d 740d 0/1 upstream: reported C repro on 2022/04/23 05:26
upstream BUG: soft lockup in smp_call_function kernel C done 1020 1h10m 1389d 0/26 upstream: reported C repro on 2020/07/12 23:02
linux-6.1 BUG: soft lockup in smp_call_function 52 11h40m 411d 0/3 upstream: reported on 2023/03/18 00:36
android-54 BUG: soft lockup in smp_call_function 1 909d 909d 0/2 auto-closed as invalid on 2022/03/05 18:04
linux-4.14 BUG: soft lockup in smp_call_function C 1 437d 740d 0/1 upstream: reported C repro on 2022/04/23 04:43
linux-5.15 BUG: soft lockup in smp_call_function origin:upstream missing-backport C error 86 11h42m 410d 0/3 upstream: reported C repro on 2023/03/19 12:10
android-5-15 BUG: soft lockup in smp_call_function origin:upstream C error inconclusive 325 1h53m 423d 0/2 upstream: reported C repro on 2023/03/05 21:20
android-54 BUG: soft lockup in smp_call_function (2) C 16 5d07h 95d 0/2 upstream: reported C repro on 2024/01/28 03:58
android-5-10 BUG: soft lockup in smp_call_function C error 46 1d05h 284d 0/2 upstream: reported C repro on 2023/07/22 22:59
upstream INFO: rcu detected stall in smp_call_function perf C 107 1118d 1373d 20/26 fixed on 2021/04/13 06:26

Sample crash report:
RBP: 00007f2f391c52b0 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f2f391c52b0
R13: 0000000000000000 R14: 00007f2f391c5d20 R15: 00007f2f3911bf50
 </TASK>
watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz-executor358:312]
Modules linked in:
CPU: 1 PID: 312 Comm: syz-executor358 Not tainted 6.1.75-syzkaller-00027-g77fec6cefe26 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:csd_lock_wait kernel/smp.c:453 [inline]
RIP: 0010:smp_call_function_many_cond+0x851/0x930 kernel/smp.c:998
Code: 3e 44 89 fe 83 e6 01 31 ff e8 0b 9e 09 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0a e8 46 9a 09 00 e9 2f ff ff ff f3 90 <42> 0f b6 04 3b 84 c0 75 14 41 f7 06 01 00 00 00 0f 84 12 ff ff ff
RSP: 0018:ffffc90000f77860 EFLAGS: 00000293
RAX: ffffffff816bc3fc RBX: 1ffff1103ee07919 RCX: ffff88811b428000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90000f77968 R08: ffffffff816bc3c5 R09: fffffbfff0dcdb58
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: 0000000800000000 R14: ffff8881f703c8c8 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe76b54b58 CR3: 0000000006c0f000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 on_each_cpu_cond_mask+0x40/0x80 kernel/smp.c:1166
 native_flush_tlb_multi+0x143/0x210
 __flush_tlb_multi arch/x86/include/asm/paravirt.h:87 [inline]
 flush_tlb_multi arch/x86/mm/tlb.c:924 [inline]
 flush_tlb_mm_range+0x298/0x360 arch/x86/mm/tlb.c:1010
 tlb_flush arch/x86/include/asm/tlb.h:20 [inline]
 tlb_flush_mmu_tlbonly+0x1b7/0x420 include/asm-generic/tlb.h:430
 tlb_flush_mmu mm/mmu_gather.c:260 [inline]
 tlb_finish_mmu+0xe1/0x3f0 mm/mmu_gather.c:361
 exit_mmap+0x421/0x940 mm/mmap.c:3343
 __mmput+0x95/0x310 kernel/fork.c:1298
 mmput+0x56/0x170 kernel/fork.c:1321
 exit_mm kernel/exit.c:566 [inline]
 do_exit+0xb29/0x2b80 kernel/exit.c:862
 do_group_exit+0x21a/0x2d0 kernel/exit.c:1025
 __do_sys_exit_group kernel/exit.c:1036 [inline]
 __se_sys_exit_group kernel/exit.c:1034 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1034
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2f3914adb9
Code: Unable to access opcode bytes at 0x7f2f3914ad8f.
RSP: 002b:00007ffe76b54bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f3914adb9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f2f391c52b0 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f2f391c52b0
R13: 0000000000000000 R14: 00007f2f391c5d20 R15: 00007f2f3911bf50
 </TASK>

Crashes (30):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/16 10:28 android14-6.1 77fec6cefe26 0d592ce4 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/14 05:54 android14-6.1 cfa154389a65 c8349e48 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/05 17:02 android14-6.1 60534eef4739 77230c29 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/02 06:31 android14-6.1 931187cc187d 6baf5069 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/02 05:56 android14-6.1 931187cc187d 6baf5069 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/09 13:06 android14-6.1 338203a81721 f3234354 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/05/01 23:18 android14-6.1 6657c436ed73 3ba885bc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/29 03:42 android14-6.1 08cc4037cf32 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/28 22:45 android14-6.1 08cc4037cf32 07b455f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/26 14:17 android14-6.1 fa87a072a7fc 059e9963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/26 09:56 android14-6.1 fa87a072a7fc 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/26 05:44 android14-6.1 fa87a072a7fc 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/25 13:43 android14-6.1 c61278bb705a 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/24 23:47 android14-6.1 c61278bb705a 8bdc0f22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/24 12:08 android14-6.1 d0c6724b0f6f 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/22 08:37 android14-6.1 dcb09569bbff af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/22 01:10 android14-6.1 dcb09569bbff af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/21 05:11 android14-6.1 dcb09569bbff af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/18 20:15 android14-6.1 692e3553d2e9 af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/16 01:24 android14-6.1 26f2c9be9ebe b9af7e61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/15 00:43 android14-6.1 b76ed1185975 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/14 06:32 android14-6.1 cfa154389a65 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/14 03:29 android14-6.1 cfa154389a65 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/13 09:52 android14-6.1 cfa154389a65 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/13 00:12 android14-6.1 cfa154389a65 c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/12 01:30 android14-6.1 ca4095789fda 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/08 19:14 android14-6.1 56ba301cac0b 53df08b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/07 06:27 android14-6.1 60534eef4739 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
2024/04/02 04:14 android14-6.1 931187cc187d 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in smp_call_function
2024/04/01 21:05 android14-6.1 931187cc187d 6baf5069 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in smp_call_function
* Struck through repros no longer work on HEAD.