BUG: soft lockup in _raw_spin_unlock

Status: closed as dup on 2018/04/23 08:40
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+9d16ae40a3249b00a524@syzkaller.appspotmail.com
First crash: 3028d, last: 2977d
▶ ▼ Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in d_walk fs 1 syz, C 25680 2974d 3036d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
BUG: soft lockup in _raw_spin_unlock 1 (2) 2018/04/23 08:39

Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor629:4520]
Modules linked in:
irq event stamp: 13421524
hardirqs last  enabled at (13421523): [<ffffffff81c6992f>] seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline]
hardirqs last  enabled at (13421523): [<ffffffff81c6992f>] read_seqcount_begin include/linux/seqlock.h:164 [inline]
hardirqs last  enabled at (13421523): [<ffffffff81c6992f>] read_seqbegin include/linux/seqlock.h:433 [inline]
hardirqs last  enabled at (13421523): [<ffffffff81c6992f>] read_seqbegin_or_lock include/linux/seqlock.h:529 [inline]
hardirqs last  enabled at (13421523): [<ffffffff81c6992f>] d_walk+0x80f/0xc80 fs/dcache.c:1248
hardirqs last disabled at (13421524): [<ffffffff87800905>] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625
softirqs last  enabled at (3821254): [<ffffffff87a00778>] __do_softirq+0x778/0xaf5 kernel/softirq.c:311
softirqs last disabled at (3820877): [<ffffffff81475241>] invoke_softirq kernel/softirq.c:365 [inline]
softirqs last disabled at (3820877): [<ffffffff81475241>] irq_exit+0x1d1/0x200 kernel/softirq.c:405
CPU: 0 PID: 4520 Comm: syz-executor629 Not tainted 4.17.0-rc4+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:do_raw_spin_unlock+0x64/0x2e0 kernel/locking/spinlock_debug.c:133
RSP: 0018:ffff8801ad8c7948 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: ffffed0035b18f29 RBX: ffff8801a426ba60 RCX: 1ffff10035b4f19d
RDX: dffffc0000000000 RSI: 0000000000000005 RDI: ffff8801a426ba64
RBP: ffff8801ad8c79d0 R08: 1ffff10035b18f1d R09: ffff8801ad8c7728
R10: 0000000000000003 R11: 0000000000000004 R12: 1ffff10035b18f29
R13: dffffc0000000000 R14: ffff8801ad8c79a8 R15: ffff8801ad8c7b50
FS:  0000000001806940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffddbdefe4c CR3: 00000001d01e9000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __raw_spin_unlock include/linux/spinlock_api_smp.h:151 [inline]
 _raw_spin_unlock+0x22/0x30 kernel/locking/spinlock.c:176
 spin_unlock include/linux/spinlock.h:350 [inline]
 d_walk+0x451/0xc80 fs/dcache.c:1298
 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486
 vfs_rmdir+0x202/0x470 fs/namei.c:3850
 do_rmdir+0x523/0x610 fs/namei.c:3911
 __do_sys_rmdir fs/namei.c:3929 [inline]
 __se_sys_rmdir fs/namei.c:3927 [inline]
 __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x449507
RSP: 002b:00007ffddbdf0558 EFLAGS: 00000207 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000449507
RDX: 0000000000000000 RSI: 00000000006e5678 RDI: 00007ffddbdf1d80
RBP: 00007ffddbdf1d80 R08: 0000000000000000 R09: 0000000000000001
R10: 000000000000000a R11: 0000000000000207 R12: 0000000001807960
R13: 0000000000000000 R14: 000000000002fa9d R15: 00007ffddbdf1778
Code: 1c 98 9a 88 48 c7 85 78 ff ff ff b3 8a b5 41 48 c7 45 88 60 08 5e 81 c7 00 f1 f1 f1 f1 c7 40 04 04 f2 f2 f2 c7 40 08 f3 f3 f3 f3 <48> 89 f8 48 c1 e8 03 0f b6 14 10 48 89 f8 83 e0 07 83 c0 03 38 
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4518 Comm: syz-executor629 Not tainted 4.17.0-rc4+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:hlock_class kernel/locking/lockdep.c:152 [inline]
RIP: 0010:mark_lock+0xd3/0x19e0 kernel/locking/lockdep.c:3121
RSP: 0018:ffff8801adb67830 EFLAGS: 00000802
RAX: 0000000000000345 RBX: 1ffff10035b6cf0b RCX: 1ffff10035c0719d
RDX: 0000000000000000 RSI: ffff8801ae038cc8 RDI: ffff8801ae038440
RBP: ffff8801adb67960 R08: 0000000000000002 R09: 0000000000000002
R10: ffff8801ae038440 R11: 0000000000000000 R12: ffff8801ae038cc8
R13: ffff8801ae038ce8 R14: 0000000000000003 R15: 0000000000000004
FS:  0000000001806940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffddbdefe4c CR3: 00000001ae77b000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 mark_held_locks+0xc9/0x160 kernel/locking/lockdep.c:2807
 __trace_hardirqs_on_caller kernel/locking/lockdep.c:2828 [inline]
 trace_hardirqs_on_caller+0x19e/0x5c0 kernel/locking/lockdep.c:2883
 trace_hardirqs_on+0xd/0x10 kernel/locking/lockdep.c:2890
 seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline]
 read_seqcount_begin include/linux/seqlock.h:164 [inline]
 read_seqbegin include/linux/seqlock.h:433 [inline]
 read_seqbegin_or_lock include/linux/seqlock.h:529 [inline]
 d_walk+0x80f/0xc80 fs/dcache.c:1248
 shrink_dcache_parent+0x179/0x230 fs/dcache.c:1486
 vfs_rmdir+0x202/0x470 fs/namei.c:3850
 do_rmdir+0x523/0x610 fs/namei.c:3911
 __do_sys_rmdir fs/namei.c:3929 [inline]
 __se_sys_rmdir fs/namei.c:3927 [inline]
 __x64_sys_rmdir+0x36/0x40 fs/namei.c:3927
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x449507
RSP: 002b:00007ffddbdf0558 EFLAGS: 00000207 ORIG_RAX: 0000000000000054
RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 0000000000449507
RDX: 0000000000000000 RSI: 00000000006e5678 RDI: 00007ffddbdf1d80
RBP: 00007ffddbdf1d80 R08: 0000000000000000 R09: 0000000000000001
R10: 000000000000000a R11: 0000000000000207 R12: 0000000001807960
R13: 0000000000000000 R14: 000000000002fa98 R15: 00007ffddbdf1778
Code: 0f 8e 61 06 00 00 41 0f b7 44 24 20 66 a9 ff 1f 0f 84 b0 00 00 00 48 ba 00 00 00 00 00 fc ff df 4c 89 e9 48 c1 e9 03 0f b6 14 11 <84> d2 74 09 80 fa 03 0f 8e 58 06 00 00 25 ff 1f 00 00 48 8d 14

Crashes (72):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/18 22:15 bpf-next 82f9e2d5dba6 849705db .config console log report syz C ci-upstream-bpf-next-kasan-gce
2018/05/19 02:18 upstream 2c71d338bef2 849705db .config console log report syz ci-upstream-kasan-gce-root
2018/06/02 14:56 upstream 0512e0134582 2f93b54f .config console log report ci-upstream-kasan-gce-root
2018/05/18 23:50 upstream 2c71d338bef2 849705db .config console log report ci-upstream-kasan-gce-root
2018/05/18 22:47 upstream 2c71d338bef2 849705db .config console log report ci-upstream-kasan-gce-root
2018/06/10 11:05 bpf-next 75d4e704fa8d 866118af .config console log report ci-upstream-bpf-next-kasan-gce
2018/06/08 09:23 bpf-next 75d4e704fa8d f7b27b7a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/25 17:12 bpf-next 10f678683e40 f48c20b8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/24 00:27 bpf-next ff4fb475cea8 f48c20b8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/23 21:53 bpf-next ff4fb475cea8 f48c20b8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/23 15:43 bpf-next ff4fb475cea8 f48c20b8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/23 08:57 bpf-next 3fb48d881dbe f48c20b8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/21 07:33 bpf-next d849f9f9768c f48c20b8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/19 01:55 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/19 01:48 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/19 01:46 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/19 01:12 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/19 00:50 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/19 00:19 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 23:21 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 23:18 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 22:59 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 22:56 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 22:19 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 21:36 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 21:34 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 21:27 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 21:26 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 21:03 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:59 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:53 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:44 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:34 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:30 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:24 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:22 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 20:10 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 19:52 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 19:50 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 19:46 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 19:38 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 19:37 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/18 19:33 bpf-next 82f9e2d5dba6 849705db .config console log report ci-upstream-bpf-next-kasan-gce
2018/04/20 19:49 bpf-next 878a4d328104 cc402841 .config console log report ci-upstream-bpf-next-kasan-gce
* Struck through repros no longer work on HEAD.