watchdog: BUG: soft lockup - CPU#0 stuck for 130s! [syz-executor.0:8002] Modules linked in: irq event stamp: 5477077 hardirqs last enabled at (5477076): [] trace_hardirqs_on_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:41 hardirqs last disabled at (5477077): [] trace_hardirqs_off_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:42 softirqs last enabled at (693638): [] __do_softirq+0x6cd/0x98c kernel/softirq.c:319 softirqs last disabled at (807183): [] invoke_softirq kernel/softirq.c:373 [inline] softirqs last disabled at (807183): [] irq_exit+0x19b/0x1e0 kernel/softirq.c:413 CPU: 0 PID: 8002 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 RIP: 0010:decode_session6 net/xfrm/xfrm_policy.c:3436 [inline] RIP: 0010:__xfrm_decode_session+0x20ee/0x2e90 net/xfrm/xfrm_policy.c:3482 Code: 00 00 48 c1 ea 03 80 3c 02 00 0f 85 4d 0d 00 00 49 8b 87 c0 00 00 00 48 89 44 24 28 41 0f b7 c4 48 89 44 24 20 e9 90 f3 ff ff cd f4 d1 fa 49 8d 7f 70 4c 29 e3 48 b8 00 00 00 00 00 fc ff df RSP: 0018:ffff88802d209328 EFLAGS: 00010202 ORIG_RAX: ffffffffffffff13 RAX: ffff888017acc040 RBX: ffff88802989fc3a RCX: ffffffff86a2d863 RDX: 0000000000000100 RSI: ffffffff86a2d871 RDI: 0000000000000005 RBP: ffff88802d2093c8 R08: ffff888017acc040 R09: ffff88802d209480 R10: ffffed1005a4129a R11: ffff88802d2094d7 R12: ffff88802989fc10 R13: 0000000000000000 R14: ffff88802d209480 R15: ffff88801d4b8280 FS: 00007f5367fe3700(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f02c000 CR3: 00000000204d3000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: xfrm_decode_session include/net/xfrm.h:1137 [inline] vti6_tnl_xmit+0x600/0x1c00 net/ipv6/ip6_vti.c:539 __netdev_start_xmit include/linux/netdevice.h:4442 [inline] netdev_start_xmit include/linux/netdevice.h:4456 [inline] xmit_one net/core/dev.c:3420 [inline] dev_hard_start_xmit+0x1a3/0x9b0 net/core/dev.c:3436 __dev_queue_xmit+0x2b05/0x35c0 net/core/dev.c:4013 dev_queue_xmit+0x18/0x20 net/core/dev.c:4046 neigh_direct_output+0x16/0x20 net/core/neighbour.c:1530 neigh_output include/net/neighbour.h:511 [inline] ip6_finish_output2+0x109a/0x25c0 net/ipv6/ip6_output.c:116 __ip6_finish_output+0x444/0xaa0 net/ipv6/ip6_output.c:142 ip6_finish_output+0x38/0x1f0 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x25e/0x880 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] ndisc_send_skb+0xf1f/0x1490 net/ipv6/ndisc.c:505 ndisc_send_rs+0x134/0x720 net/ipv6/ndisc.c:699 addrconf_rs_timer+0x30f/0x6e0 net/ipv6/addrconf.c:3879 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0x6c3/0x1790 kernel/time/timer.c:1786 __do_softirq+0x262/0x98c kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x19b/0x1e0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1a3/0x610 arch/x86/kernel/apic/apic.c:1137 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 kernel/locking/spinlock.c:199 Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 RSP: 0018:ffff888017af78d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff12a668d RBX: ffff888017acc040 RCX: 0000000000000006 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888017acc8d4 RBP: ffff888017af78e0 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d237380 R13: ffffffff8947a1c0 R14: ffff888016788340 R15: 0000000000000000 finish_lock_switch kernel/sched/core.c:3124 [inline] finish_task_switch+0x147/0x750 kernel/sched/core.c:3224 context_switch kernel/sched/core.c:3388 [inline] __schedule+0x8e9/0x1f30 kernel/sched/core.c:4081 preempt_schedule_common+0x4f/0xe0 kernel/sched/core.c:4236 preempt_schedule+0x4b/0x60 kernel/sched/core.c:4261 ___preempt_schedule+0x16/0x18 arch/x86/entry/thunk_64.S:50 smp_call_function_single+0x410/0x480 kernel/smp.c:313 task_function_call+0xe9/0x180 kernel/events/core.c:114 perf_install_in_context+0x308/0x5a0 kernel/events/core.c:2746 __do_sys_perf_event_open+0x1cbc/0x2c70 kernel/events/core.c:11543 __se_sys_perf_event_open kernel/events/core.c:11151 [inline] __x64_sys_perf_event_open+0xbe/0x150 kernel/events/core.c:11151 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45a759 Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f5367fe2c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f5367fe36d4 R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff Sending NMI from CPU 0 to CPUs 1-3: NMI backtrace for cpu 2 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60 NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60 NMI backtrace for cpu 3 CPU: 3 PID: 8003 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 RIP: 0010:__read_once_size include/linux/compiler.h:199 [inline] RIP: 0010:lookup_chain_cache kernel/locking/lockdep.c:2862 [inline] RIP: 0010:lookup_chain_cache_add kernel/locking/lockdep.c:2881 [inline] RIP: 0010:validate_chain kernel/locking/lockdep.c:2936 [inline] RIP: 0010:__lock_acquire+0x178a/0x4a00 kernel/locking/lockdep.c:3955 Code: 5b 4c 8b b5 48 ff ff ff 49 bc 00 00 00 00 00 fc ff df eb 06 48 83 eb 08 74 42 48 8d 7b 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 <0f> 85 c3 1e 00 00 48 8b 43 18 49 39 c6 0f 84 90 f1 ff ff 48 8d 7b RSP: 0018:ffff88802d509808 EFLAGS: 00000046 RAX: 1ffffffff15043f7 RBX: ffffffff8a821fa0 RCX: ffffffff815a7cd2 RDX: 1ffffffff15d03dc RSI: 0000000000000008 RDI: ffffffff8a821fb8 RBP: ffff88802d509920 R08: 0000000000007254 R09: fffffbfff15d299d R10: ffff88801b6f89a0 R11: ffff88801b6f8040 R12: dffffc0000000000 R13: ffffffff8a370ed0 R14: b4180b31ccbc795f R15: 0000000000000000 FS: 00007fd820b34700(0000) GS:ffff88802d500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000002942d000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x190/0x410 kernel/locking/lockdep.c:4485 seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] read_seqcount_begin include/linux/seqlock.h:164 [inline] ktime_get_update_offsets_now+0xd4/0x430 kernel/time/timekeeping.c:2222 hrtimer_update_base kernel/time/hrtimer.c:598 [inline] hrtimer_interrupt+0x13d/0x770 kernel/time/hrtimer.c:1620 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1110 [inline] smp_apic_timer_interrupt+0x160/0x610 arch/x86/kernel/apic/apic.c:1135 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x90/0xe0 kernel/locking/spinlock.c:191 Code: 48 c7 c0 58 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d ff 25 99 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 e1 67 96 f9 65 8b 05 12 10 48 78 RSP: 0018:ffff88802d509bb8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff12a668b RBX: 0000000000000282 RCX: 0000000000000002 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000282 RBP: ffff88802d509bc8 R08: 1ffffffff15d299c R09: fffffbfff15d299d R10: fffffbfff15d299c R11: ffffffff8ae94ce7 R12: ffff88802d227240 R13: 1ffff11005aa137e R14: ffffffff8b204a80 R15: ffff88802d509c50 add_timer_on+0x2b3/0x4f0 kernel/time/timer.c:1175 clocksource_watchdog+0x6b1/0x9a0 kernel/time/clocksource.c:297 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0x6c3/0x1790 kernel/time/timer.c:1786 __do_softirq+0x262/0x98c kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x19b/0x1e0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1a3/0x610 arch/x86/kernel/apic/apic.c:1137 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 kernel/locking/spinlock.c:199 Code: c0 68 34 53 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 2a 99 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 6b 96 f9 65 8b 05 18 14 48 78 85 c0 74 06 41 RSP: 0018:ffff88801b6e7b20 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff12a668d RBX: ffff88801b6f8040 RCX: 0000000000000006 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff88801b6f88d4 RBP: ffff88801b6e7b28 R08: 1ffffffff15d29b8 R09: fffffbfff15d29b9 R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88802d537380 R13: ffff88802c6c8800 R14: ffff888014b47680 R15: 0000000000000001 finish_lock_switch kernel/sched/core.c:3124 [inline] finish_task_switch+0x147/0x750 kernel/sched/core.c:3224 context_switch kernel/sched/core.c:3388 [inline] __schedule+0x8e9/0x1f30 kernel/sched/core.c:4081 preempt_schedule_irq+0xb5/0x160 kernel/sched/core.c:4338 retint_kernel+0x1b/0x2b RIP: 0010:__do_sys_perf_event_open+0x1cbc/0x2c70 kernel/events/core.c:11544 Code: c0 03 38 d0 7c 08 84 d2 0f 85 99 0f 00 00 48 8b b5 c8 fe ff ff 48 8b 9d 88 fe ff ff 8b 96 dc 02 00 00 48 89 df e8 b4 43 fe ff <48> 89 df e8 6c b1 fc ff e8 57 30 e6 ff 48 8b bd 90 fe ff ff e8 9b RSP: 0018:ffff88801b6e7d40 EFLAGS: 00010282 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: ffff88800f0ce800 RCX: ffffc900062ad000 RDX: 0000000000040000 RSI: ffffffff818cf4c7 RDI: 0000000000000005 RBP: ffff88801b6e7ed8 R08: ffff88801b6f8040 R09: fffffbfff15d29b9 R10: fffffbfff15d29b8 R11: ffffffff8ae94dc7 R12: ffff88800f0ce800 R13: ffff88801bd03000 R14: ffff88801bd0315a R15: 1ffff110036dcfb6 __se_sys_perf_event_open kernel/events/core.c:11151 [inline] __x64_sys_perf_event_open+0xbe/0x150 kernel/events/core.c:11151 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45a759 Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fd820b33c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fd820b346d4 R13: 00000000004aec2b R14: 00000000006f1ca8 R15: 00000000ffffffff