syzbot


BUG: soft lockup in sock_close

Status: upstream: reported C repro on 2024/03/27 04:09
Bug presence: origin:downstream
[Documentation on labels]
Reported-by: syzbot+590c02cc06f6cd2951e1@syzkaller.appspotmail.com
First crash: 486d, last: 3d06h
Fix bisection: failed (error log, bisect log)
  
Bug presence (3)
Date Name Commit Repro Result
2024/03/27 android14-6.1 (ToT) eef3b6e52937 C [report] BUG: soft lockup in sock_close
2024/03/27 lts (merge base) 883d1a956208 C Didn't crash
2024/04/10 upstream (ToT) 2c71fdf02a95 C Didn't crash
Similar bugs (12)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 BUG: soft lockup in sock_close 1 C 149 15h51m 488d 0/2 upstream: reported C repro on 2024/03/25 07:28
linux-5.15 INFO: rcu detected stall in sock_close (3) origin:upstream 1 C 9 31d 432d 0/3 upstream: reported C repro on 2024/05/20 00:06
android-5-15 BUG: soft lockup in sock_close origin:downstream 1 C done 352 15d 486d 0/2 upstream: reported C repro on 2024/03/26 23:21
upstream INFO: rcu detected stall in sock_close (5) wireless 1 syz 31 8d19h 10d 0/29 upstream: reported syz repro on 2025/07/16 17:01
linux-6.1 BUG: soft lockup in sock_close origin:upstream 1 syz error 1 215d 215d 0/3 upstream: reported syz repro on 2024/12/23 18:51
linux-5.15 INFO: rcu detected stall in sock_close (2) 1 1 549d 549d 0/3 auto-obsoleted due to no activity on 2024/05/03 14:38
upstream INFO: rcu detected stall in sock_close (4) net 1 2 639d 676d 0/29 auto-obsoleted due to no activity on 2024/01/24 15:51
linux-6.1 INFO: rcu detected stall in sock_close (3) 1 1 439d 439d 0/3 auto-obsoleted due to no activity on 2024/08/21 03:02
linux-6.1 INFO: rcu detected stall in sock_close origin:upstream 1 C done 1 747d 747d 3/3 fixed on 2023/09/23 10:26
linux-6.1 INFO: rcu detected stall in sock_close (2) 1 1 541d 541d 0/3 auto-obsoleted due to no activity on 2024/05/11 05:25
upstream INFO: rcu detected stall in sock_close (3) tipc 1 C done done 5 1349d 1843d 0/29 closed as invalid on 2022/02/08 10:42
linux-5.15 INFO: rcu detected stall in sock_close 1 C error 2 727d 781d 0/3 auto-obsoleted due to no activity on 2023/11/07 13:02
Last patch testing requests (10)
Created Duration User Patch Repo Result
2025/07/23 14:29 22m retest repro android14-6.1 report log
2025/07/23 14:29 15m retest repro android14-6.1 report log
2025/06/29 04:19 12m retest repro android14-6.1 report log
2025/06/04 21:17 15m retest repro android14-6.1 report log
2025/06/04 21:17 14m retest repro android14-6.1 report log
2025/05/21 19:51 18m retest repro android14-6.1 report log
2025/04/20 03:34 11m retest repro android14-6.1 report log
2025/03/18 22:29 10m retest repro android14-6.1 report log
2025/03/16 20:23 11m retest repro android14-6.1 report log
2025/03/01 02:35 10m retest repro android14-6.1 report log

Sample crash report:
RBP: 00007fd3d01e13e0 R08: 0000000000000000 R09: 0000000000000000
R10: 00002000000003c0 R11: 0000000000000246 R12: 00007fd3d01ae44c
R13: 00002000000026c0 R14: 0000200000009150 R15: 0000200000008fc0
 </TASK>
watchdog: BUG: soft lockup - CPU#1 stuck for 245s! [syz-executor168:295]
Modules linked in:
CPU: 1 PID: 295 Comm: syz-executor168 Not tainted 6.1.141-syzkaller-00037-gfa7e0538663e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__kasan_check_write+0x0/0x20 mm/kasan/shadow.c:36
Code: 48 8b 4d 08 31 d2 e8 df e7 ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef <55> 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 ac e7 ff ff 5d c3
RSP: 0018:ffffc90000e467d8 EFLAGS: 00000202
RAX: 0000000000000402 RBX: ffffc90000e46cd4 RCX: ffffffff8796c003
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90000e46cd4
RBP: ffffc90000e46870 R08: dffffc0000000000 R09: ffffed1021ded3d1
R10: ffffed1021ded3d1 R11: 1ffff11021ded3d0 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffffc90000e46800 R15: 1ffff920001c8cfc
FS:  00007fd3d01166c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000001f000 CR3: 000000010348d000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 spin_lock_bh include/linux/spinlock.h:356 [inline]
 tipc_skb_peek_port net/tipc/msg.h:1225 [inline]
 tipc_sk_rcv+0x25c/0x2cc0 net/tipc/socket.c:2491
 tipc_node_xmit+0x257/0xd00 net/tipc/node.c:1703
 tipc_node_xmit_skb+0xe9/0x130 net/tipc/node.c:1768
 tipc_sk_rcv+0x1def/0x2cc0 net/tipc/socket.c:2522
 tipc_node_xmit+0x257/0xd00 net/tipc/node.c:1703
 tipc_sk_push_backlog net/tipc/socket.c:1316 [inline]
 tipc_sk_filter_connect net/tipc/socket.c:2255 [inline]
 tipc_sk_filter_rcv+0x155f/0x2c80 net/tipc/socket.c:2364
 tipc_sk_enqueue net/tipc/socket.c:2445 [inline]
 tipc_sk_rcv+0x7d9/0x2cc0 net/tipc/socket.c:2497
 tipc_node_xmit+0x257/0xd00 net/tipc/node.c:1703
 tipc_node_xmit_skb net/tipc/node.c:1768 [inline]
 tipc_node_distr_xmit+0x292/0x390 net/tipc/node.c:1783
 tipc_sk_backlog_rcv+0x16f/0x1f0 net/tipc/socket.c:2412
 sk_backlog_rcv include/net/sock.h:1131 [inline]
 __release_sock+0x154/0x380 net/core/sock.c:2945
 release_sock+0x60/0x1c0 net/core/sock.c:3519
 tipc_release+0xd32/0x1650 net/tipc/socket.c:652
 __sock_release net/socket.c:652 [inline]
 sock_close+0xf1/0x290 net/socket.c:1390
 __fput+0x1fc/0x8f0 fs/file_table.c:320
 ____fput+0x15/0x20 fs/file_table.c:348
 task_work_run+0x1db/0x240 kernel/task_work.c:203
 ptrace_notify+0x221/0x250 kernel/signal.c:2377
 ptrace_report_syscall include/linux/ptrace.h:424 [inline]
 ptrace_report_syscall_exit include/linux/ptrace.h:486 [inline]
 syscall_exit_work+0x84/0x140 kernel/entry/common.c:258
 syscall_exit_to_user_mode_prepare+0x1c/0x20 kernel/entry/common.c:285
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0xd/0x30 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fd3d01561d9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd3d0116218 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: 00000000000203a0 RBX: 00007fd3d01e13e8 RCX: 00007fd3d01561d9
RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
RBP: 00007fd3d01e13e0 R08: 0000000000000000 R09: 0000000000000000
R10: 00002000000003c0 R11: 0000000000000246 R12: 00007fd3d01ae44c
R13: 00002000000026c0 R14: 0000200000009150 R15: 0000200000008fc0
 </TASK>

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/08 11:15 android14-6.1 fa7e0538663e 4f67c4ae .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/07/07 21:09 android14-6.1 fa7e0538663e 4f67c4ae .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/01/26 01:10 android14-6.1 ef4fb40b87a9 9fbd772e .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2024/05/26 17:02 android14-6.1 68c821783c76 a10a183e .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2024/03/27 04:05 android14-6.1 eef3b6e52937 454571b6 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in sock_close
2024/12/06 00:30 android14-6.1 182b090f35f3 29f61fce .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2024/03/27 02:54 android14-6.1 eef3b6e52937 454571b6 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
* Struck through repros no longer work on HEAD.