syzbot


BUG: soft lockup in sock_close

Status: upstream: reported C repro on 2024/03/25 07:28
Reported-by: syzbot+8e44f6baf770f194eef0@syzkaller.appspotmail.com
First crash: 37d, last: 1d17h
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 BUG: soft lockup in sock_close C 113 36m 32d 0/2 upstream: reported C repro on 2024/03/26 23:21
android-6-1 BUG: soft lockup in sock_close C error 2 32d 32d 0/2 upstream: reported C repro on 2024/03/27 04:09
linux-5.15 INFO: rcu detected stall in sock_close (2) 1 94d 94d 0/3 upstream: reported on 2024/01/24 14:38
upstream INFO: rcu detected stall in sock_close (4) net 2 184d 222d 0/26 auto-obsoleted due to no activity on 2024/01/24 15:51
linux-6.1 INFO: rcu detected stall in sock_close origin:upstream C done 1 293d 293d 3/3 fixed on 2023/09/23 10:26
linux-6.1 INFO: rcu detected stall in sock_close (2) 1 87d 87d 0/3 upstream: reported on 2024/02/01 05:24
upstream INFO: rcu detected stall in sock_close (3) tipc C done done 5 894d 1389d 0/26 closed as invalid on 2022/02/08 10:42
linux-5.15 INFO: rcu detected stall in sock_close C error 2 272d 326d 0/3 auto-obsoleted due to no activity on 2023/11/07 13:02

Sample crash report:
watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor265:2301]
Modules linked in:
CPU: 1 PID: 2301 Comm: syz-executor265 Not tainted 5.10.209-syzkaller-00001-ge7daca75b4c3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
RIP: 0010:_raw_spin_unlock_bh+0x1/0x60 kernel/locking/spinlock.c:206
Code: 00 00 e8 12 fc 97 fc 65 8b 05 c7 57 51 7b 85 c0 74 03 5b 5d c3 e8 73 69 4f fc eb f6 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 <48> 89 e5 53 48 89 fb 48 c7 c0 b0 76 6c 86 48 c1 e8 03 48 b9 00 00
RSP: 0018:ffffc90002166950 EFLAGS: 00000293
RAX: ffffffff8497cb4b RBX: ffff888117e110c4 RCX: ffff888119e23b40
RDX: 0000000000000000 RSI: 000000008788f38a RDI: ffffc90002166db4
RBP: ffffc90002166bf0 R08: ffffffff8497c9e5 R09: 0000000000000003
R10: fffff5200042cd1c R11: dffffc0000000001 R12: dffffc0000000000
R13: ffffc90002166da0 R14: 000000008788f38a R15: ffffc90002166da0
FS:  00007f895d0286c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001c40 CR3: 000000011716d000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 tipc_node_xmit+0x34b/0xe30 net/tipc/node.c:1674
 tipc_node_xmit_skb+0x153/0x1b0 net/tipc/node.c:1739
 tipc_sk_rcv+0x1c0b/0x1e30 net/tipc/socket.c:2518
 tipc_node_xmit+0x34b/0xe30 net/tipc/node.c:1674
 tipc_sk_push_backlog net/tipc/socket.c:1306 [inline]
 tipc_sk_filter_connect net/tipc/socket.c:2253 [inline]
 tipc_sk_filter_rcv+0x1da8/0x3e00 net/tipc/socket.c:2362
 tipc_sk_enqueue net/tipc/socket.c:2442 [inline]
 tipc_sk_rcv+0x8a1/0x1e30 net/tipc/socket.c:2493
 tipc_node_xmit+0x34b/0xe30 net/tipc/node.c:1674
 tipc_node_xmit_skb net/tipc/node.c:1739 [inline]
 tipc_node_distr_xmit+0x36a/0x4d0 net/tipc/node.c:1754
 tipc_sk_backlog_rcv+0x18b/0x210 net/tipc/socket.c:2410
 sk_backlog_rcv include/net/sock.h:1050 [inline]
 __release_sock+0x148/0x410 net/core/sock.c:2571
 release_sock+0x65/0x1b0 net/core/sock.c:3122
 tipc_release+0xb6b/0x1440 net/tipc/socket.c:639
 __sock_release net/socket.c:597 [inline]
 sock_close+0xdf/0x270 net/socket.c:1286
 __fput+0x309/0x760 fs/file_table.c:281
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x129/0x190 kernel/task_work.c:164
 ptrace_notify+0x29e/0x350 kernel/signal.c:2277
 ptrace_report_syscall include/linux/tracehook.h:66 [inline]
 tracehook_report_syscall_exit include/linux/tracehook.h:129 [inline]
 arch_syscall_exit_tracehook include/linux/entry-common.h:285 [inline]
 syscall_exit_work kernel/entry/common.c:239 [inline]
 syscall_exit_to_user_mode_prepare kernel/entry/common.c:266 [inline]
 syscall_exit_to_user_mode+0x120/0x1d0 kernel/entry/common.c:272
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f895d067669
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f895d028218 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 00007f895d0f1328 RCX: 00007f895d067669
RDX: 00007f895d067669 RSI: 00000000000f4240 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffb0
R13: 00007f895d0f1320 R14: 00007f895d0f132c R15: 00007f895d0be064

Crashes (22):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/27 03:02 android13-5.10-lts e7daca75b4c3 454571b6 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/03/25 07:19 android13-5.10-lts e7daca75b4c3 0ea90952 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/04/26 14:30 android13-5.10-lts 70b6ab09a34b 059e9963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/22 11:56 android13-5.10-lts 8d3bb9cb3b7d 36c961ad .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/21 15:02 android13-5.10-lts 8d3bb9cb3b7d af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/20 07:12 android13-5.10-lts c449d2a618ef af24b050 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/15 23:03 android13-5.10-lts 4e1bc8d8e8ae b9af7e61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/04/13 01:30 android13-5.10-lts 4e1bc8d8e8ae c8349e48 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/04/11 21:35 android13-5.10-lts 4e1bc8d8e8ae 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/11 16:35 android13-5.10-lts 4e1bc8d8e8ae 95ed9ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/09 20:47 android13-5.10-lts 4e1bc8d8e8ae 171ec371 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/07 23:07 android13-5.10-lts e7daca75b4c3 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/04/06 17:48 android13-5.10-lts e7daca75b4c3 ca620dd8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/04/04 16:29 android13-5.10-lts e7daca75b4c3 0ee3535e .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/04/03 05:32 android13-5.10-lts e7daca75b4c3 7925100d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/03/27 15:22 android13-5.10-lts e7daca75b4c3 454571b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/03/26 01:23 android13-5.10-lts e7daca75b4c3 bcd9b39f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/03/25 00:20 android13-5.10-lts e7daca75b4c3 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/03/24 12:48 android13-5.10-lts e7daca75b4c3 0ea90952 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/03/23 03:25 android13-5.10-lts e7daca75b4c3 4b6cdce6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10 BUG: soft lockup in sock_close
2024/03/21 14:54 android13-5.10-lts e7daca75b4c3 6753db5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
2024/03/21 13:17 android13-5.10-lts e7daca75b4c3 6753db5c .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-10-perf BUG: soft lockup in sock_close
* Struck through repros no longer work on HEAD.