syzbot


BUG: soft lockup (2)

Status: closed as invalid on 2018/05/19 09:44
First crash: 2276d, last: 2276d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 BUG: soft lockup 1 2381d 2381d 0/3 closed as invalid on 2017/12/05 10:45
upstream BUG: soft lockup C 466 2347d 2361d 3/26 fixed on 2017/11/18 01:42
upstream BUG: soft lockup (2) sound C 29 2293d 2322d 3/26 fixed on 2018/01/19 01:24

Sample crash report:
binder: binder_mmap: 5974 20545000-20549000 bad vm_flags failed -1
NMI watchdog: BUG: soft lockup - CPU#0 stuck for 134s! [syz-executor1:5973]
Modules linked in:
irq event stamp: 37922
hardirqs last  enabled at (37921): [<ffffffff838b37a9>] restore_regs_and_iret+0x0/0x1d
hardirqs last disabled at (37922): [<ffffffff838b475b>] apic_timer_interrupt+0x9b/0xb0 arch/x86/entry/entry_64.S:752
softirqs last  enabled at (7570): [<ffffffff838b9b26>] __do_softirq+0x466/0x951 kernel/softirq.c:310
softirqs last disabled at (4541): [<ffffffff81146be5>] invoke_softirq kernel/softirq.c:364 [inline]
softirqs last disabled at (4541): [<ffffffff81146be5>] irq_exit+0x165/0x190 kernel/softirq.c:405
CPU: 0 PID: 5973 Comm: syz-executor1 Not tainted 4.9.78-g29eadc4 #20
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801c63cb000 task.stack: ffff8801c4588000
RIP: 0010:[<ffffffff812e6850>]  [<ffffffff812e6850>] rep_nop arch/x86/include/asm/processor.h:584 [inline]
RIP: 0010:[<ffffffff812e6850>]  [<ffffffff812e6850>] cpu_relax arch/x86/include/asm/processor.h:589 [inline]
RIP: 0010:[<ffffffff812e6850>]  [<ffffffff812e6850>] csd_lock_wait kernel/smp.c:96 [inline]
RIP: 0010:[<ffffffff812e6850>]  [<ffffffff812e6850>] smp_call_function_single+0x120/0x380 kernel/smp.c:288
RSP: 0000:ffff8801c458f938  EFLAGS: 00000293
RAX: ffff8801c63cb000 RBX: 1ffff100388b1f2a RCX: ffffffff812e684e
RDX: 0000000000000000 RSI: ffff8801c63cb8d8 RDI: 0000000000000246
RBP: ffff8801c458f9f8 R08: 1ffff10038c7971a R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801c458f9d0
R13: 0000000000000000 R14: ffff8801c458fab8 R15: 0000000000000001
FS:  0000000002951940(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020108ffc CR3: 00000001c4af8000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000000 ffffffff810ee640 0000000100000046 0000000041b58ab3
 ffffffff8418f00c ffffffff812e6730 0000000000000040 0000000000000000
 ffffffff810ee640 ffff8801c458fab8 0000000000000003 ffff8801c458f9b8
Call Trace:
 [<ffffffff812e7718>] smp_call_function_many+0x448/0x6a0 kernel/smp.c:420
 [<ffffffff810ef784>] native_flush_tlb_others+0xd4/0x510 arch/x86/mm/tlb.c:307
 [<ffffffff810efcc3>] flush_tlb_others arch/x86/include/asm/paravirt.h:324 [inline]
 [<ffffffff810efcc3>] flush_tlb_mm_range+0x103/0x440 arch/x86/mm/tlb.c:373
 [<ffffffff81501fb7>] pmdp_huge_clear_flush+0xc7/0x130 mm/pgtable-generic.c:123
 [<ffffffff8154fb25>] do_huge_pmd_wp_page+0xee5/0x27d0 mm/huge_memory.c:1097
 [<ffffffff814cf990>] wp_huge_pmd mm/memory.c:3413 [inline]
 [<ffffffff814cf990>] __handle_mm_fault mm/memory.c:3567 [inline]
 [<ffffffff814cf990>] handle_mm_fault+0x1020/0x2530 mm/memory.c:3614
 [<ffffffff810de642>] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1407
 [<ffffffff810dede7>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1470
 [<ffffffff838b3fc8>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1055
Code: 95 48 ff ff ff 49 8d 74 24 a0 4c 89 f1 8b bd 54 ff ff ff e8 03 fc ff ff 41 89 c5 41 8b 44 24 b8 a8 01 74 10 e8 32 49 08 00 f3 90 <41> 8b 44 24 b8 a8 01 75 f0 e8 22 49 08 00 e8 1d 49 08 00 bf 01 
Kernel panic - not syncing: softlockup: hung tasks
CPU: 0 PID: 5973 Comm: syz-executor1 Tainted: G             L  4.9.78-g29eadc4 #20
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801db207d20 ffffffff81d943a9 ffffffff83a8af60 ffff8801db207df8
 0000000000001700 ffff8801c458f888 000000059682f000 ffff8801db207de8
 ffffffff8142f451 0000000041b58ab3 ffffffff8418ac30 ffffffff8142f295
Call Trace:
 <IRQ> [  205.157932]  [<ffffffff81d943a9>] __dump_stack lib/dump_stack.c:15 [inline]
 <IRQ> [  205.157932]  [<ffffffff81d943a9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff8142f451>] panic+0x1bc/0x3a8 kernel/panic.c:179
 [<ffffffff81373cf3>] watchdog_timer_fn+0x373/0x3a0 kernel/watchdog.c:362
 [<ffffffff812b007a>] __run_hrtimer kernel/time/hrtimer.c:1248 [inline]
 [<ffffffff812b007a>] __hrtimer_run_queues+0x2ea/0xe70 kernel/time/hrtimer.c:1312
 [<ffffffff812b22c6>] hrtimer_interrupt+0x1a6/0x440 kernel/time/hrtimer.c:1346
 [<ffffffff810b2e0a>] local_apic_timer_interrupt+0x6a/0xb0 arch/x86/kernel/apic/apic.c:935
 [<ffffffff838b84d6>] smp_apic_timer_interrupt+0x76/0xa0 arch/x86/kernel/apic/apic.c:959
 [<ffffffff838b4760>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:752
 <EOI> [  205.253275]  [<ffffffff812e684e>] ? rep_nop arch/x86/include/asm/processor.h:584 [inline]
 <EOI> [  205.253275]  [<ffffffff812e684e>] ? cpu_relax arch/x86/include/asm/processor.h:589 [inline]
 <EOI> [  205.253275]  [<ffffffff812e684e>] ? csd_lock_wait kernel/smp.c:96 [inline]
 <EOI> [  205.253275]  [<ffffffff812e684e>] ? smp_call_function_single+0x11e/0x380 kernel/smp.c:288
 [<ffffffff812e7718>] smp_call_function_many+0x448/0x6a0 kernel/smp.c:420
 [<ffffffff810ef784>] native_flush_tlb_others+0xd4/0x510 arch/x86/mm/tlb.c:307
 [<ffffffff810efcc3>] flush_tlb_others arch/x86/include/asm/paravirt.h:324 [inline]
 [<ffffffff810efcc3>] flush_tlb_mm_range+0x103/0x440 arch/x86/mm/tlb.c:373
 [<ffffffff81501fb7>] pmdp_huge_clear_flush+0xc7/0x130 mm/pgtable-generic.c:123
 [<ffffffff8154fb25>] do_huge_pmd_wp_page+0xee5/0x27d0 mm/huge_memory.c:1097
 [<ffffffff814cf990>] wp_huge_pmd mm/memory.c:3413 [inline]
 [<ffffffff814cf990>] __handle_mm_fault mm/memory.c:3567 [inline]
 [<ffffffff814cf990>] handle_mm_fault+0x1020/0x2530 mm/memory.c:3614
 [<ffffffff810de642>] __do_page_fault+0x5c2/0xd40 arch/x86/mm/fault.c:1407
 [<ffffffff810dede7>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1470
 [<ffffffff838b3fc8>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1055
Shutting down cpus with NMI
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/01/25 09:23 https://android.googlesource.com/kernel/common android-4.9 29eadc4b5c13 6b2a715e .config console log report ci-android-49-kasan-gce
* Struck through repros no longer work on HEAD.