BUG: soft lockup in sock_close

Status: upstream: reported C repro on 2024/03/27 04:09
Bug presence: origin:downstream
[Documentation on labels]
Reported-by: syzbot+590c02cc06f6cd2951e1@syzkaller.appspotmail.com
First crash: 958d, last: 2d00h
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/03/27 android14-6.1 (ToT) eef3b6e52937 C [report] BUG: soft lockup in sock_close
2024/03/27 lts (merge base) 883d1a956208 C Didn't crash
2024/04/10 upstream (ToT) 2c71fdf02a95 C Didn't crash
▶ ▼ Similar bugs (14)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 BUG: soft lockup in sock_close 1 syz, C 204 11d 960d 0/2 upstream: reported C repro on 2024/03/25 07:28
linux-5.15 INFO: rcu detected stall in sock_close (3) origin:upstream 1 syz, C error 22 10d 904d 0/3 upstream: reported C repro on 2024/05/20 00:06
android-5-15 BUG: soft lockup in sock_close origin:downstream 1 syz, C done 389 4d04h 959d 0/2 upstream: reported C repro on 2024/03/26 23:21
upstream INFO: rcu detected stall in sock_close (5) prio:normal tipc 1 syz, C error error 91 106d 482d 0/29 upstream: reported C repro on 2025/07/16 17:01
linux-6.1 BUG: soft lockup in sock_close origin:lts-only 1 syz, C inconclusive 10 30d 687d 0/3 upstream: reported C repro on 2024/12/23 18:51
linux-5.15 INFO: rcu detected stall in sock_close (2) 1 1 1021d 1021d 0/3 auto-obsoleted due to no activity on 2024/05/03 14:38
upstream INFO: rcu detected stall in sock_close (4) net 1 2 1111d 1148d 0/29 auto-obsoleted due to no activity on 2024/01/24 15:51
linux-6.1 INFO: rcu detected stall in sock_close (3) 1 1 911d 911d 0/3 auto-obsoleted due to no activity on 2024/08/21 03:02
linux-6.1 INFO: rcu detected stall in sock_close origin:upstream 1 syz, C done 1 1219d 1219d 3/3 fixed on 2023/09/23 10:26
linux-6.1 INFO: rcu detected stall in sock_close (2) 1 1 1013d 1013d 0/3 auto-obsoleted due to no activity on 2024/05/11 05:25
upstream INFO: rcu detected stall in sock_close (3) tipc 1 syz, C done done 5 1821d 2316d 0/29 closed as invalid on 2022/02/08 10:42
linux-5.15 INFO: rcu detected stall in sock_close 1 syz, C error 2 1199d 1253d 0/3 auto-obsoleted due to no activity on 2023/11/07 13:02
linux-6.6 INFO: rcu detected stall in sock_close (2) origin:upstream 1 syz 2 28d 179d 0/2 upstream: reported syz repro on 2026/05/15 05:06
linux-6.6 INFO: rcu detected stall in sock_close 1 syz error 2 359d 442d 0/2 auto-obsoleted due to no activity on 2026/02/24 12:42
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/08/23 08:28 2m retest repro android14-6.1 error job log
2026/08/23 08:28 2m retest repro android14-6.1 error job log
2026/08/23 08:28 7m retest repro android14-6.1 error job log
2026/08/14 14:04 5m retest repro android14-6.1 error job log
2026/08/14 14:04 5m retest repro android14-6.1 error job log
2026/08/14 14:04 6m retest repro android14-6.1 error job log
2026/08/14 14:04 3m retest repro android14-6.1 error job log
2026/08/14 14:04 3m retest repro android14-6.1 error job log
2026/07/08 12:07 16m retest repro android14-6.1 log
2026/07/08 12:07 14m retest repro android14-6.1 log

Sample crash report:
watchdog: BUG: soft lockup - CPU#0 stuck for 245s! [syz-executor426:323]
Modules linked in:
CPU: 0 PID: 323 Comm: syz-executor426 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
RIP: 0010:__refcount_sub_and_test include/linux/refcount.h:277 [inline]
RIP: 0010:__refcount_dec_and_test include/linux/refcount.h:315 [inline]
RIP: 0010:refcount_dec_and_test include/linux/refcount.h:333 [inline]
RIP: 0010:sock_put include/net/sock.h:2098 [inline]
RIP: 0010:tipc_sk_rcv+0x1a27/0x2c20 net/tipc/socket.c:2504
Code: 00 00 e8 ec 03 ff ff 49 83 ed 80 4c 89 ef be 04 00 00 00 e8 0b 42 dc fc 4d 89 f7 41 be ff ff ff ff f0 45 0f c1 b7 80 00 00 00 <bf> 01 00 00 00 44 89 f6 e8 7c a5 96 fc 41 83 fe 01 75 0f e8 51 a1
RSP: 0018:ffffc90000ea6900 EFLAGS: 00000213
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff84dad0a5
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881229d5480
RBP: ffffc90000ea6b70 R08: ffff8881229d5483 R09: 1ffff1102453aa90
R10: dffffc0000000000 R11: ffffed102453aa91 R12: ffffc90000ea6d20
R13: ffff8881229d5480 R14: 0000000000000005 R15: ffff8881229d5400
FS:  00007f910c7836c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f910c782bb0 CR3: 000000010fc46000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 tipc_node_xmit+0x36f/0xd80 net/tipc/node.c:1703
 tipc_node_xmit_skb+0xf7/0x150 net/tipc/node.c:1768
 tipc_sk_rcv+0x1d57/0x2c20 net/tipc/socket.c:2524
 tipc_node_xmit+0x36f/0xd80 net/tipc/node.c:1703
 tipc_sk_push_backlog net/tipc/socket.c:1316 [inline]
 tipc_sk_filter_connect net/tipc/socket.c:2257 [inline]
 tipc_sk_filter_rcv+0x19d7/0x3010 net/tipc/socket.c:2366
 tipc_sk_enqueue net/tipc/socket.c:2447 [inline]
 tipc_sk_rcv+0x7e7/0x2c20 net/tipc/socket.c:2499
 tipc_node_xmit+0x36f/0xd80 net/tipc/node.c:1703
 tipc_node_xmit_skb net/tipc/node.c:1768 [inline]
 tipc_node_distr_xmit+0x277/0x390 net/tipc/node.c:1783
 tipc_sk_backlog_rcv+0x174/0x220 net/tipc/socket.c:2414
 sk_backlog_rcv include/net/sock.h:1150 [inline]
 __release_sock+0x154/0x380 net/core/sock.c:2960
 release_sock+0x60/0x1c0 net/core/sock.c:3536
 tipc_release+0xd1a/0x1640 net/tipc/socket.c:652
 __sock_release net/socket.c:652 [inline]
 sock_close+0xc9/0x220 net/socket.c:1390
 __fput+0x1fd/0x8f0 fs/file_table.c:320
 ____fput+0x15/0x20 fs/file_table.c:348
 task_work_run+0x1e1/0x250 kernel/task_work.c:203
 ptrace_notify+0x23f/0x270 kernel/signal.c:2388
 ptrace_report_syscall include/linux/ptrace.h:424 [inline]
 ptrace_report_syscall_exit include/linux/ptrace.h:486 [inline]
 syscall_exit_work+0x84/0x140 kernel/entry/common.c:258
 syscall_exit_to_user_mode_prepare+0x1c/0x20 kernel/entry/common.c:285
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0xd/0x30 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f910c7c4129
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f910c783218 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f910c875b58 RCX: 00007f910c7c4129
RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
RBP: 00007f910c875b50 R08: 33203a6b63617473 R09: 33203a6b63617473
R10: 33203a6b63617473 R11: 0000000000000246 R12: 00007f910c84737c
R13: 0000200000000000 R14: 0000200000000040 R15: 0000200000000048
 </TASK>

Crashes (18):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/11/08 23:16 android14-6.1 7552023a1d74 5cecaf1f .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2026/07/18 01:40 android14-6.1 c7e15f0bdc49 8aaff637 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2026/05/02 14:30 android14-6.1 1e4e23ff0f90 a0d91488 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2026/03/03 09:58 android14-6.1 6bfa51973214 28b83e23 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2026/01/22 11:05 android14-6.1 c298d33764cb a16aed1d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/12/10 16:26 android14-6.1 0ac176d7ef4d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/12/10 06:15 android14-6.1 0ac176d7ef4d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/10/29 11:35 android14-6.1 7ca912bfce3d fd2207e7 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/07/08 11:15 android14-6.1 fa7e0538663e 4f67c4ae .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/07/07 21:09 android14-6.1 fa7e0538663e 4f67c4ae .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2025/01/26 01:10 android14-6.1 ef4fb40b87a9 9fbd772e .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2024/05/26 17:02 android14-6.1 68c821783c76 a10a183e .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2024/03/27 04:05 android14-6.1 eef3b6e52937 454571b6 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in sock_close
2024/12/06 00:30 android14-6.1 182b090f35f3 29f61fce .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2024/03/27 02:54 android14-6.1 eef3b6e52937 454571b6 .config console log report syz [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2026/09/11 16:41 android14-6.1 6308d6d3f1b1 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in sock_close
2026/07/29 06:04 android14-6.1 92668decd5e0 19622d9d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 BUG: soft lockup in sock_close
2026/06/19 22:31 android14-6.1 9f35ca3ff66c 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf BUG: soft lockup in sock_close
* Struck through repros no longer work on HEAD.