| TITLE: BUG: soft lockup in snd_pcm_oss_write |
| TYPE: HANG |
| |
| [ 562.725743] watchdog: BUG: soft lockup - CPU#0 stuck for 135s! [syzkaller670324:3527] |
| [ 562.733767] Modules linked in: |
| [ 562.736941] irq event stamp: 2531226 |
| [ 562.740767] hardirqs last enabled at (2531225): [<00000000f1ec093f>] snd_pcm_stream_unlock_irq+0x78/0xe0 |
| [ 562.750576] hardirqs last disabled at (2531226): [<000000003c6ef1cd>] apic_timer_interrupt+0xa4/0xb0 |
| [ 562.759828] softirqs last enabled at (41848): [<0000000081bd5f03>] __do_softirq+0x7a0/0xb85 |
| [ 562.768381] softirqs last disabled at (41829): [<00000000d02c6d52>] irq_exit+0x1cc/0x200 |
| [ 562.777054] CPU: 0 PID: 3527 Comm: syzkaller670324 Not tainted 4.15.0-rc6+ #158 |
| [ 562.784477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 |
| [ 562.793814] RIP: 0010:memcpy+0x45/0x50 |
| [ 562.797675] RSP: 0018:ffff8801bf6676f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff11 |
| [ 562.805414] RAX: ffffc9000137ba06 RBX: 0000000000000002 RCX: 0000000000000000 |
| [ 562.812665] RDX: 0000000000000002 RSI: ffff8801bf6677da RDI: ffffc9000137ba08 |
| [ 562.819913] RBP: ffff8801bf667708 R08: fffff5200026f741 R09: fffff5200026f741 |
| [ 562.827157] R10: 0000000000000001 R11: fffff5200026f740 R12: ffffc9000137ba06 |
| [ 562.834404] R13: ffff8801bf6677d8 R14: dffffc0000000000 R15: ffffc9000137ba06 |
| [ 562.841665] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f7ec6b40 |
| [ 562.849868] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 |
| [ 562.855726] CR2: 0000000020735ee0 CR3: 00000001bfba8002 CR4: 00000000001606f0 |
| [ 562.862979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 |
| [ 562.870226] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 |
| [ 562.877473] Call Trace: |
| [ 562.880094] mulaw_decode+0x52f/0x770 |
| [ 562.883876] ? trace_hardirqs_on_caller+0x421/0x5c0 |
| [ 562.888898] ? snd_pcm_plugin_build_linear+0x8a0/0x8a0 |
| [ 562.894156] ? snd_pcm_plugin_client_channels+0x17/0x80 |
| [ 562.899501] ? io_src_channels+0x10a/0x210 |
| [ 562.903719] mulaw_transfer+0x222/0x270 |
| [ 562.907670] ? lock_release+0xa40/0xa40 |
| [ 562.911626] ? mulaw_encode+0x7c0/0x7c0 |
| [ 562.915588] snd_pcm_plug_write_transfer+0x22d/0x420 |
| [ 562.920680] ? snd_pcm_plug_client_channels_buf+0x3f0/0x3f0 |
| [ 562.926368] ? snd_pcm_format_physical_width+0x5b/0x70 |
| [ 562.931623] ? snd_pcm_plug_client_channels_buf+0x1db/0x3f0 |
| [ 562.937326] snd_pcm_oss_write2+0x260/0x420 |
| [ 562.941634] ? snd_pcm_oss_write3+0x1b0/0x1b0 |
| [ 562.946110] ? snd_pcm_oss_write2+0x2bb/0x420 |
| [ 562.950586] ? snd_pcm_oss_write2+0x2e6/0x420 |
| [ 562.955066] snd_pcm_oss_write+0x5fe/0x830 |
| [ 562.959301] ? snd_pcm_oss_ioctl_compat+0x30/0x30 |
| [ 562.964131] ? find_held_lock+0x35/0x1d0 |
| [ 562.968182] ? snd_pcm_oss_ioctl_compat+0x30/0x30 |
| [ 562.973007] __vfs_write+0xef/0x970 |
| [ 562.976617] ? rcu_note_context_switch+0x710/0x710 |
| [ 562.981531] ? kernel_read+0x120/0x120 |
| [ 562.985398] ? __might_sleep+0x95/0x190 |
| [ 562.989356] ? _cond_resched+0x14/0x30 |
| [ 562.993223] ? __inode_security_revalidate+0xd9/0x130 |
| [ 562.998392] ? avc_policy_seqno+0x9/0x20 |
| [ 563.002432] ? selinux_file_permission+0x82/0x460 |
| [ 563.007260] ? security_file_permission+0x89/0x1e0 |
| [ 563.012174] ? rw_verify_area+0xe5/0x2b0 |
| [ 563.016212] ? __fdget_raw+0x20/0x20 |
| [ 563.019910] vfs_write+0x189/0x510 |
| [ 563.023439] SyS_write+0xef/0x220 |
| [ 563.026872] ? __do_page_fault+0x3d6/0xc90 |
| [ 563.031090] ? SyS_read+0x220/0x220 |
| [ 563.034702] ? do_fast_syscall_32+0x156/0xf9d |
| [ 563.039182] ? SyS_read+0x220/0x220 |
| [ 563.042792] do_fast_syscall_32+0x3ee/0xf9d |
| [ 563.047102] ? do_int80_syscall_32+0x9d0/0x9d0 |
| [ 563.051675] ? syscall_return_slowpath+0x2ad/0x550 |
| [ 563.056584] ? prepare_exit_to_usermode+0x340/0x340 |
| [ 563.061581] ? retint_user+0x18/0x18 |
| [ 563.065284] ? trace_hardirqs_off_thunk+0x1a/0x1c |
| [ 563.070119] entry_SYSENTER_compat+0x54/0x63 |
| [ 563.074504] RIP: 0023:0xf7f0cc79 |
| [ 563.077845] RSP: 002b:00000000f7ec61fc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 |
| [ 563.085532] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020735ee0 |
| [ 563.092780] RDX: 00000000fffffee4 RSI: 0000000000000000 RDI: 0000000000000000 |
| [ 563.100028] RBP: 00000000003d0f00 R08: 0000000000000000 R09: 0000000000000000 |
| [ 563.107277] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 |
| [ 563.114524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 |
| [ 563.121796] Code: 89 de 31 d2 e8 9d f9 ff ff 48 8b 4d 08 48 89 de 4c 89 e7 ba 01 00 00 00 e8 89 f9 ff ff 48 89 da 4c 89 ee 4c 89 e7 e8 7b eb c0 03 <5b> 41 5c 41 5d 5d c3 0f 1f 40 00 89 f1 b8 00 10 00 00 55 48 d3 |
| [ 563.141034] Kernel panic - not syncing: softlockup: hung tasks |
| [ 563.146993] CPU: 0 PID: 3527 Comm: syzkaller670324 Tainted: G L 4.15.0-rc6+ #158 |
| [ 563.155717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 |
| [ 563.165059] Call Trace: |
| [ 563.167618] <IRQ> |
| [ 563.169827] dump_stack+0x194/0x257 |
| [ 563.173438] ? arch_local_irq_restore+0x53/0x53 |
| [ 563.178082] ? vprintk_default+0x28/0x30 |
| [ 563.182125] ? vprintk_func+0x5e/0xc0 |
| [ 563.185907] ? vsnprintf+0x1ed/0x1900 |
| [ 563.189692] panic+0x1e4/0x41c |
| [ 563.192864] ? refcount_error_report+0x214/0x214 |
| [ 563.197611] ? watchdog_timer_fn+0x303/0x320 |
| [ 563.202006] watchdog_timer_fn+0x314/0x320 |
| [ 563.206236] __hrtimer_run_queues+0x358/0xe20 |
| [ 563.210715] ? watchdog+0x30/0x30 |
| [ 563.214154] ? hrtimer_fixup_init+0x70/0x70 |
| [ 563.218466] ? pvclock_read_flags+0x160/0x160 |
| [ 563.222959] ? kvm_clock_get_cycles+0x25/0x30 |
| [ 563.227434] ? ktime_get_update_offsets_now+0x34a/0x520 |
| [ 563.232786] ? do_timer+0x50/0x50 |
| [ 563.236217] ? native_apic_msr_write+0x5c/0x80 |
| [ 563.240777] ? do_raw_spin_trylock+0x190/0x190 |
| [ 563.245336] ? lapic_next_event+0x54/0x80 |
| [ 563.249464] ? clockevents_program_event+0x108/0x2e0 |
| [ 563.254559] hrtimer_interrupt+0x1c2/0x5e0 |
| [ 563.258801] smp_apic_timer_interrupt+0x14a/0x700 |
| [ 563.263623] ? smp_call_function_single_interrupt+0x640/0x640 |
| [ 563.269488] ? _raw_spin_lock+0x32/0x40 |
| [ 563.273447] ? _raw_spin_unlock+0x22/0x30 |
| [ 563.277573] ? handle_edge_irq+0x2b4/0x7c0 |
| [ 563.281787] ? task_prio+0x40/0x40 |
| [ 563.285324] ? trace_hardirqs_off_thunk+0x1a/0x1c |
| [ 563.290156] apic_timer_interrupt+0xa9/0xb0 |
| [ 563.294450] </IRQ> |
| [ 563.296665] RIP: 0010:memcpy+0x45/0x50 |
| [ 563.300525] RSP: 0018:ffff8801bf6676f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff11 |
| [ 563.308213] RAX: ffffc9000137ba06 RBX: 0000000000000002 RCX: 0000000000000000 |
| [ 563.316166] RDX: 0000000000000002 RSI: ffff8801bf6677da RDI: ffffc9000137ba08 |
| [ 563.323417] RBP: ffff8801bf667708 R08: fffff5200026f741 R09: fffff5200026f741 |
| [ 563.330662] R10: 0000000000000001 R11: fffff5200026f740 R12: ffffc9000137ba06 |
| [ 563.337911] R13: ffff8801bf6677d8 R14: dffffc0000000000 R15: ffffc9000137ba06 |
| [ 563.345202] mulaw_decode+0x52f/0x770 |
| [ 563.348983] ? trace_hardirqs_on_caller+0x421/0x5c0 |
| [ 563.354005] ? snd_pcm_plugin_build_linear+0x8a0/0x8a0 |
| [ 563.359265] ? snd_pcm_plugin_client_channels+0x17/0x80 |
| [ 563.364611] ? io_src_channels+0x10a/0x210 |
| [ 563.368831] mulaw_transfer+0x222/0x270 |
| [ 563.372780] ? lock_release+0xa40/0xa40 |
| [ 563.376738] ? mulaw_encode+0x7c0/0x7c0 |
| [ 563.380695] snd_pcm_plug_write_transfer+0x22d/0x420 |
| [ 563.385786] ? snd_pcm_plug_client_channels_buf+0x3f0/0x3f0 |
| [ 563.391477] ? snd_pcm_format_physical_width+0x5b/0x70 |
| [ 563.396734] ? snd_pcm_plug_client_channels_buf+0x1db/0x3f0 |
| [ 563.402433] snd_pcm_oss_write2+0x260/0x420 |
| [ 563.406767] ? snd_pcm_oss_write3+0x1b0/0x1b0 |
| [ 563.411242] ? snd_pcm_oss_write2+0x2bb/0x420 |
| [ 563.415719] ? snd_pcm_oss_write2+0x2e6/0x420 |
| [ 563.420201] snd_pcm_oss_write+0x5fe/0x830 |
| [ 563.424433] ? snd_pcm_oss_ioctl_compat+0x30/0x30 |
| [ 563.429258] ? find_held_lock+0x35/0x1d0 |
| [ 563.433309] ? snd_pcm_oss_ioctl_compat+0x30/0x30 |
| [ 563.438130] __vfs_write+0xef/0x970 |
| [ 563.441737] ? rcu_note_context_switch+0x710/0x710 |
| [ 563.446648] ? kernel_read+0x120/0x120 |
| [ 563.450517] ? __might_sleep+0x95/0x190 |
| [ 563.454475] ? _cond_resched+0x14/0x30 |
| [ 563.458343] ? __inode_security_revalidate+0xd9/0x130 |
| [ 563.463514] ? avc_policy_seqno+0x9/0x20 |
| [ 563.467552] ? selinux_file_permission+0x82/0x460 |
| [ 563.472382] ? security_file_permission+0x89/0x1e0 |
| [ 563.477298] ? rw_verify_area+0xe5/0x2b0 |
| [ 563.481338] ? __fdget_raw+0x20/0x20 |
| [ 563.485036] vfs_write+0x189/0x510 |
| [ 563.488563] SyS_write+0xef/0x220 |
| [ 563.491996] ? __do_page_fault+0x3d6/0xc90 |
| [ 563.496215] ? SyS_read+0x220/0x220 |
| [ 563.499827] ? do_fast_syscall_32+0x156/0xf9d |
| [ 563.504309] ? SyS_read+0x220/0x220 |
| [ 563.507918] do_fast_syscall_32+0x3ee/0xf9d |
| [ 563.512230] ? do_int80_syscall_32+0x9d0/0x9d0 |
| [ 563.516803] ? syscall_return_slowpath+0x2ad/0x550 |
| [ 563.521711] ? prepare_exit_to_usermode+0x340/0x340 |
| [ 563.526706] ? retint_user+0x18/0x18 |
| [ 563.530404] ? trace_hardirqs_off_thunk+0x1a/0x1c |
| [ 563.535238] entry_SYSENTER_compat+0x54/0x63 |
| [ 563.539641] RIP: 0023:0xf7f0cc79 |
| [ 563.542980] RSP: 002b:00000000f7ec61fc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 |
| [ 563.550667] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020735ee0 |
| [ 563.557914] RDX: 00000000fffffee4 RSI: 0000000000000000 RDI: 0000000000000000 |
| [ 563.565162] RBP: 00000000003d0f00 R08: 0000000000000000 R09: 0000000000000000 |
| [ 563.572409] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 |
| [ 563.579660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 |
| [ 563.587661] Dumping ftrace buffer: |
| [ 563.591248] (ftrace buffer empty) |
| [ 563.594937] Kernel Offset: disabled |
| [ 563.598549] Rebooting in 86400 seconds.. |
