BUG: soft lockup in sys

Kernel	Title	Count	Last	Reported	Patched	Status
android-5-15	BUG: soft lockup in sys_madvise	1	41d	41d	0/2	premoderation: reported on 2024/03/25 02:48
linux-4.19	BUG: soft lockup in sys_madvise	1	730d	730d	0/1	auto-obsoleted due to no activity on 2022/09/03 05:10
upstream	INFO: rcu detected stall in sys_madvise scsi	1	272d	272d	0/26	auto-obsoleted due to no activity on 2023/11/05 19:10

netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 overlayfs: unrecognized mount option "MowVrdir=.:file4" or missing value watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz-executor.3:10157] Modules linked in: irq event stamp: 2080700 hardirqs last enabled at (2080699): [<ffffffff81003ce4>] trace_hardirqs_on_thunk+0x1a/0x1c hardirqs last disabled at (2080700): [<ffffffff81003d00>] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (2078534): [<ffffffff88400678>] __do_softirq+0x678/0x980 kernel/softirq.c:318 softirqs last disabled at (2037843): [<ffffffff813927d5>] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (2037843): [<ffffffff813927d5>] irq_exit+0x215/0x260 kernel/softirq.c:412 CPU: 1 PID: 10157 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 RIP: 0010:pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:435 [inline] RIP: 0010:__pv_queued_spin_lock_slowpath+0x3a6/0xae0 kernel/locking/qspinlock.c:474 Code: eb c6 45 01 01 41 bc 00 80 00 00 48 c1 e9 03 83 e3 07 41 be 01 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 2c 01 eb 0c f3 90 <41> 83 ec 01 0f 84 38 04 00 00 41 0f b6 45 00 38 d8 7f 08 84 c0 0f RSP: 0018:ffff888042cff318 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000003 RBX: 0000000000000000 RCX: 1ffff110132647a2 RDX: 0000000000000001 RSI: ffffffff8167a995 RDI: 0000000000000286 RBP: ffff888099323d10 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 00000000000060ce R13: ffffed10132647a2 R14: 0000000000000001 R15: ffff8880ba12be00 FS: 00007f11aadf6700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020356ffc CR3: 0000000050002000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:679 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:53 [inline] queued_spin_lock include/asm-generic/qspinlock.h:88 [inline] do_raw_spin_lock+0x189/0x220 kernel/locking/spinlock_debug.c:113 spin_lock include/linux/spinlock.h:329 [inline] map_pte mm/page_vma_mapped.c:51 [inline] page_vma_mapped_walk+0x1172/0x27d0 mm/page_vma_mapped.c:254 remove_migration_pte+0x145/0xff0 mm/migrate.c:217 rmap_walk_anon+0x472/0xa80 mm/rmap.c:1842 rmap_walk_locked+0x12a/0x190 mm/rmap.c:1924 remove_migration_ptes+0xbf/0x120 mm/migrate.c:298 remap_page+0xe2/0x180 mm/huge_memory.c:2452 __split_huge_page mm/huge_memory.c:2561 [inline] split_huge_page_to_list+0x1b20/0x2ce0 mm/huge_memory.c:2796 split_huge_page include/linux/huge_mm.h:146 [inline] madvise_free_huge_pmd+0x5a1/0xdd0 mm/huge_memory.c:1708 madvise_free_pte_range+0x6c5/0x2250 mm/madvise.c:325 walk_pmd_range mm/pagewalk.c:51 [inline] walk_pud_range mm/pagewalk.c:109 [inline] walk_p4d_range mm/pagewalk.c:135 [inline] walk_pgd_range+0x8fe/0x1150 mm/pagewalk.c:161 __walk_page_range mm/pagewalk.c:254 [inline] walk_page_range+0x1a5/0x490 mm/pagewalk.c:335 madvise_free_page_range.isra.0+0xae/0xf0 mm/madvise.c:454 madvise_free_single_vma+0x31c/0x4a0 mm/madvise.c:481 madvise_dontneed_free mm/madvise.c:565 [inline] madvise_vma mm/madvise.c:698 [inline] __do_sys_madvise mm/madvise.c:873 [inline] __se_sys_madvise+0x75c/0x1c10 mm/madvise.c:801 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f11ac481409 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f11aadf6168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c RAX: ffffffffffffffda RBX: 00007f11ac593f80 RCX: 00007f11ac481409 RDX: 0000000000000008 RSI: 0000000000600003 RDI: 0000000020000000 RBP: 00007f11ac4dc367 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffedbd11b2f R14: 00007f11aadf6300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 10202 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 RIP: 0010:skb_release_data+0x139/0x920 net/core/skbuff.c:584 Code: fa 66 31 ed be 04 00 00 00 4c 89 e7 e8 40 95 27 fb 81 c5 01 00 01 00 f0 41 0f c1 5e 20 89 de 89 ef e8 9b cc f1 fa 39 dd 74 13 <48> 83 c4 40 5b 5d 41 5c 41 5d 41 5e 41 5f e9 94 cb f1 fa e8 8f cb RSP: 0018:ffff8880ba007cf0 EFLAGS: 00000286 RAX: 0000000000000007 RBX: 0000000000000000 RCX: 1ffff11015e221a7 RDX: 0000000000000000 RSI: ffff8880af110d40 RDI: 0000000000000286 RBP: ffff888051b69843 R08: 0000000000400000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff888051b69780 R13: 0000000000000000 R14: 0000000000000000 R15: ffff888051b69870 FS: 00007f11aadd5700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31923000 CR3: 0000000050002000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <IRQ> skb_release_all net/core/skbuff.c:640 [inline] __kfree_skb net/core/skbuff.c:654 [inline] consume_skb+0x113/0x3d0 net/core/skbuff.c:714 mac80211_hwsim_tx_frame+0x133/0x210 drivers/net/wireless/mac80211_hwsim.c:1557 mac80211_hwsim_beacon_tx+0x3f8/0x680 drivers/net/wireless/mac80211_hwsim.c:1595 __iterate_interfaces+0x2e1/0x4a0 net/mac80211/util.c:614 ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 net/mac80211/util.c:650 mac80211_hwsim_beacon+0xc9/0x190 drivers/net/wireless/mac80211_hwsim.c:1615 __tasklet_hrtimer_trampoline+0x29/0xa0 kernel/softirq.c:601 tasklet_action_common.constprop.0+0x265/0x360 kernel/softirq.c:522 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 </IRQ> RIP: 0010:pte_flags arch/x86/include/asm/pgtable_types.h:451 [inline] RIP: 0010:pte_dirty arch/x86/include/asm/pgtable.h:124 [inline] RIP: 0010:smaps_pte_entry fs/proc/task_mmu.c:547 [inline] RIP: 0010:smaps_pte_range+0x725/0x1510 fs/proc/task_mmu.c:604 Code: e8 f0 e3 a1 ff 45 31 c9 4c 89 e0 48 85 db 48 b9 00 00 00 00 00 fc ff df 41 0f 95 c1 48 c1 e8 03 80 3c 08 00 0f 85 31 0c 00 00 <48> bb ff 0f 00 00 00 00 f0 ff 49 23 1c 24 31 ff 44 89 4c 24 18 41 RSP: 0018:ffff88804780f790 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 1ffff11013b4fe6b RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: ffff8880af110440 RDI: 0000000000000007 RBP: ffffea0000b61ac0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000000 R12: ffff88809da7f358 R13: ffff8880a49e4318 R14: ffff88804780fa80 R15: 000000002066b000 walk_pmd_range mm/pagewalk.c:51 [inline] walk_pud_range mm/pagewalk.c:109 [inline] walk_p4d_range mm/pagewalk.c:135 [inline] walk_pgd_range+0x8fe/0x1150 mm/pagewalk.c:161 __walk_page_range mm/pagewalk.c:254 [inline] walk_page_vma+0x259/0x300 mm/pagewalk.c:357 smap_gather_stats+0x176/0x2d0 fs/proc/task_mmu.c:754 show_smaps_rollup+0x3f4/0x680 fs/proc/task_mmu.c:842 seq_read+0x4e0/0x11c0 fs/seq_file.c:232 do_loop_readv_writev fs/read_write.c:701 [inline] do_loop_readv_writev fs/read_write.c:688 [inline] do_iter_read+0x471/0x630 fs/read_write.c:925 vfs_readv+0xe5/0x150 fs/read_write.c:987 do_preadv fs/read_write.c:1071 [inline] __do_sys_preadv fs/read_write.c:1121 [inline] __se_sys_preadv fs/read_write.c:1116 [inline] __x64_sys_preadv+0x22b/0x310 fs/read_write.c:1116 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f11ac481409 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f11aadd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 RAX: ffffffffffffffda RBX: 00007f11ac594050 RCX: 00007f11ac481409 RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 RBP: 00007f11ac4dc367 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffedbd11b2f R14: 00007f11aadd5300 R15: 0000000000022000