syzbot


BUG: soft lockup in perf_release

Status: auto-closed as invalid on 2019/08/19 07:15
Subsystems: trace
[Documentation on labels]
Reported-by: syzbot+bb4935a5c09b5ff79940@syzkaller.appspotmail.com
First crash: 2049d, last: 1892d
Discussions (12)
Title Replies (including bot) Last reply
[PATCH 4.9 000/128] 4.9.228-rc1 review 135 (135) 2021/02/26 19:09
[PATCH 5.4 000/134] 5.4.47-rc1 review 141 (141) 2021/01/28 17:06
[PATCH AUTOSEL 4.19 001/106] ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb 107 (107) 2020/07/11 10:01
[PATCH 4.19 000/267] 4.19.129-rc1 review 280 (280) 2020/06/30 01:36
[PATCH 4.14 000/190] 4.14.185-rc1 review 197 (197) 2020/06/26 07:05
[PATCH AUTOSEL 5.7 001/274] drm/amdgpu: fix and cleanup amdgpu_gem_object_close v4 281 (281) 2020/06/17 17:29
[PATCH 5.6 000/161] 5.6.19-rc1 review 164 (164) 2020/06/16 17:11
[PATCH 5.7 000/163] 5.7.3-rc1 review 164 (164) 2020/06/16 15:35
[PATCH AUTOSEL 4.14 01/72] ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb 76 (76) 2020/06/09 13:55
[PATCH AUTOSEL 4.9 01/50] ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb 50 (50) 2020/06/08 23:26
[PATCH AUTOSEL 5.4 001/175] drm/amdgpu: fix and cleanup amdgpu_gem_object_close v4 175 (175) 2020/06/08 23:18
perf: add cond_resched() to task_function_call() 7 (7) 2020/05/23 09:27
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-15 BUG: soft lockup in perf_release 1 6d19h 6d19h 0/2 premoderation: reported on 2024/04/20 01:14
linux-4.19 BUG: soft lockup in perf_release 1 1721d 1721d 0/1 auto-closed as invalid on 2019/12/08 14:19
upstream BUG: soft lockup in perf_release (2) perf 2 1389d 1386d 0/26 auto-closed as invalid on 2020/10/05 03:02

Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.2:25788]
Modules linked in:
irq event stamp: 30878
hardirqs last  enabled at (30877): [<ffffffff81006673>] trace_hardirqs_on_thunk+0x1a/0x1c
hardirqs last disabled at (30878): [<ffffffff8100668f>] trace_hardirqs_off_thunk+0x1a/0x1c
softirqs last  enabled at (2922): [<ffffffff856befc1>] sock_orphan include/net/sock.h:1800 [inline]
softirqs last  enabled at (2922): [<ffffffff856befc1>] sk_common_release+0x171/0x330 net/core/sock.c:3036
softirqs last disabled at (2920): [<ffffffff856bef23>] sock_orphan include/net/sock.h:1796 [inline]
softirqs last disabled at (2920): [<ffffffff856bef23>] sk_common_release+0xd3/0x330 net/core/sock.c:3036
CPU: 0 PID: 25788 Comm: syz-executor.2 Not tainted 5.0.0-rc7+ #80
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:write_comp_data+0x68/0x70 kernel/kcov.c:146
Code: 00 00 4e 8d 14 dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 <c3> 0f 1f 80 00 00 00 00 55 40 0f b6 d6 40 0f b6 f7 31 ff 48 89 e5
RSP: 0018:ffff8880955276c8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: 1ffff11012aa4ee0 RCX: ffffffff816564fc
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffff8880955276d0 R08: ffff888099416580 R09: ffffed1015d25be9
R10: ffffed1015d25be8 R11: ffff8880ae92df47 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  0000000002299940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f95331c0000 CR3: 000000004e6eb000 CR4: 00000000001426f0
Call Trace:
 csd_lock_wait kernel/smp.c:108 [inline]
 smp_call_function_single+0x14c/0x420 kernel/smp.c:302
 smp_call_function_many+0x750/0x8c0 kernel/smp.c:434
 smp_call_function+0x42/0x90 kernel/smp.c:492
 on_each_cpu+0x31/0x200 kernel/smp.c:602
 text_poke_bp+0xde/0x19b arch/x86/kernel/alternative.c:808
 __jump_label_transform+0x263/0x330 arch/x86/kernel/jump_label.c:91
 arch_jump_label_transform+0x2b/0x40 arch/x86/kernel/jump_label.c:99
 __jump_label_update+0x16a/0x210 kernel/jump_label.c:389
 jump_label_update kernel/jump_label.c:752 [inline]
 jump_label_update+0x1ce/0x3d0 kernel/jump_label.c:731
 __static_key_slow_dec_cpuslocked+0x61/0x150 kernel/jump_label.c:228
 __static_key_slow_dec kernel/jump_label.c:238 [inline]
 static_key_slow_dec+0x60/0xa0 kernel/jump_label.c:252
 tracepoint_remove_func kernel/tracepoint.c:298 [inline]
 tracepoint_probe_unregister+0x4ee/0x670 kernel/tracepoint.c:368
 trace_event_reg+0x189/0x350 kernel/trace/trace_events.c:310
 perf_trace_event_unreg.isra.0+0xbb/0x220 kernel/trace/trace_event_perf.c:157
 perf_trace_destroy+0xc1/0x100 kernel/trace/trace_event_perf.c:238
 tp_perf_event_destroy+0x16/0x20 kernel/events/core.c:8344
 _free_event+0x356/0x1220 kernel/events/core.c:4446
 put_event+0x47/0x60 kernel/events/core.c:4532
 perf_event_release_kernel+0x68f/0xbf0 kernel/events/core.c:4638
 perf_release+0x37/0x50 kernel/events/core.c:4648
 __fput+0x2df/0x8d0 fs/file_table.c:278
 ____fput+0x16/0x20 fs/file_table.c:309
 task_work_run+0x14a/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x273/0x2c0 arch/x86/entry/common.c:166
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x52d/0x610 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x411d31
Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffc61a63a70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000411d31
RDX: 0000000000000000 RSI: 0000000000741008 RDI: 0000000000000009
RBP: 0000000000000000 R08: 0000000000741000 R09: 000000000024aa5e
R10: 00007ffc61a63990 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000001 R14: 000000000000010a R15: 0000000000000002
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 20596 Comm: kworker/1:5 Not tainted 5.0.0-rc7+ #80
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: rcu_gp process_srcu
RIP: 0010:delay_tsc+0x72/0xc0 arch/x86/lib/delay.c:66
Code: ae e8 0f 31 48 c1 e2 20 48 89 d3 48 09 c3 48 89 d8 4c 29 e0 4c 39 f0 73 24 bf 01 00 00 00 e8 55 dd 4c fa 65 8b 05 ee 17 01 79 <85> c0 75 bb e8 be 90 ff f9 eb b4 49 29 dc 4d 01 e6 eb 93 bf 01 00
RSP: 0018:ffff888044d07bb0 EFLAGS: 00000297
RAX: 0000000080000000 RBX: 00000553a83b50d2 RCX: 0000000000000000
RDX: 0000000000000004 RSI: ffffffff832b0a98 RDI: 0000000000000001
RBP: ffff888044d07bd0 R08: ffff8880860446c0 R09: 0000000000000040
R10: 0000000000000040 R11: ffffffff88a41827 R12: 00000553a83b4e68
R13: 0000000000000001 R14: 0000000000002ced R15: 00000000000025d9
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000982c5000 CR4: 00000000001426e0
Call Trace:
 __delay arch/x86/lib/delay.c:161 [inline]
 __const_udelay+0x5f/0x80 arch/x86/lib/delay.c:175
 try_check_zero+0x201/0x330 kernel/rcu/srcutree.c:730
 srcu_advance_state kernel/rcu/srcutree.c:1167 [inline]
 process_srcu+0x329/0xec0 kernel/rcu/srcutree.c:1261
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2173
 worker_thread+0x98/0xe40 kernel/workqueue.c:2319
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/02/20 07:14 upstream 40e196a906d9 4df543c9 .config console log report ci-upstream-kasan-gce-root
2018/10/18 22:36 upstream fa520c47eaa1 9aba67b5 .config console log report ci-upstream-kasan-gce
2018/09/19 21:32 upstream 4ca719a338d5 7f125108 .config console log report ci-upstream-kasan-gce-386
2018/09/18 19:44 upstream 5211da9ca526 7f125108 .config console log report ci-upstream-kasan-gce-386
2018/09/16 09:11 upstream 27c5a778dfe2 a343a400 .config console log report ci-upstream-kasan-gce-386
2018/09/22 15:31 linux-next 46c163a036b4 37079712 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.