watchdog: BUG: soft lockup - CPU#0 stuck for 134s! [syz-executor.0:24450] Modules linked in: irq event stamp: 32760 hardirqs last enabled at (32759): [] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628 hardirqs last disabled at (32760): [] sysvec_apic_timer_interrupt+0xc/0xf0 arch/x86/kernel/apic/apic.c:1096 softirqs last enabled at (308): [] asm_call_irq_on_stack+0xf/0x20 softirqs last disabled at (255): [] asm_call_irq_on_stack+0xf/0x20 CPU: 0 PID: 24450 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:csd_lock_wait kernel/smp.c:227 [inline] RIP: 0010:smp_call_function_single+0x272/0x530 kernel/smp.c:512 Code: 3c 02 00 00 44 8b 6c 24 68 44 89 ee 83 e6 01 31 ff e8 62 af 0b 00 41 83 e5 01 75 0c e8 47 ab 0b 00 e9 f9 00 00 00 66 90 f3 90 <42> 0f b6 04 23 84 c0 75 15 f7 44 24 68 01 00 00 00 0f 84 d9 00 00 RSP: 0018:ffffc9000169fae0 EFLAGS: 00000246 RAX: ffffffff8171715e RBX: 1ffff920002d3f69 RCX: 0000000000040000 RDX: ffffc9000be5a000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffc9000169fbf0 R08: ffffffff8171712e R09: ffffed10173a6af1 R10: ffffed10173a6af1 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000000001 R14: 0000000000000000 R15: ffffc9000169fb48 FS: 00007f9f92419700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9f92418db8 CR3: 000000001405c000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: smp_call_function_many_cond+0xa17/0xb70 kernel/smp.c:648 smp_call_function_many kernel/smp.c:711 [inline] smp_call_function kernel/smp.c:733 [inline] on_each_cpu+0xae/0x1d0 kernel/smp.c:832 clock_was_set+0x18/0x20 kernel/time/hrtimer.c:871 do_settimeofday64+0x5f5/0x770 kernel/time/timekeeping.c:1327 __do_sys_clock_settime kernel/time/posix-timers.c:1079 [inline] __se_sys_clock_settime kernel/time/posix-timers.c:1067 [inline] __x64_sys_clock_settime+0x1f4/0x230 kernel/time/posix-timers.c:1067 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45e219 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f9f92418c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045e219 RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000000 RBP: 000000000119c108 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc R13: 00007ffc6103941f R14: 00007f9f924199c0 R15: 000000000119c0dc Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 24438 Comm: syz-executor.4 Not tainted 5.11.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rcu_read_lock_sched_held+0x1/0x110 kernel/rcu/update.c:118 Code: 02 e9 f8 fd ff ff e8 fe 16 37 08 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 e9 5b a6 1e 00 90 66 2e 0f 1f 84 00 00 00 00 00 55 <48> 89 e5 41 57 41 56 53 48 83 e4 e0 48 83 ec 60 65 48 8b 04 25 28 RSP: 0018:ffffc90000db0ce8 EFLAGS: 00000097 RAX: 0000000080010002 RBX: 0000000000000001 RCX: ffff888028beb780 RDX: ffff888028beb780 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90000db0e80 R08: ffffffff816caf8e R09: fffffbfff1ae7266 R10: fffffbfff1ae7266 R11: 0000000000000000 R12: ffff8880b9d26840 R13: dffffc0000000000 R14: ffffc90000db0e00 R15: ffff88801be5d340 FS: 0000000002ce2940(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004de790 CR3: 0000000022006000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: trace_hrtimer_expire_entry+0xde/0x270 include/trace/events/timer.h:232 __run_hrtimer kernel/time/hrtimer.c:1516 [inline] __hrtimer_run_queues+0x497/0xa60 kernel/time/hrtimer.c:1583 hrtimer_interrupt+0x393/0xf70 kernel/time/hrtimer.c:1645 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline] __sysvec_apic_timer_interrupt+0xf9/0x270 arch/x86/kernel/apic/apic.c:1102 asm_call_irq_on_stack+0xf/0x20 __run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline] run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline] sysvec_apic_timer_interrupt+0x9f/0xf0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628 RIP: 0010:orc_ip arch/x86/kernel/unwind_orc.c:30 [inline] RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:52 [inline] RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:173 [inline] RIP: 0010:unwind_next_frame+0x521/0x1e20 arch/x86/kernel/unwind_orc.c:443 Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 e0 4c 0f 46 f9 48 RSP: 0018:ffffc900018af510 EFLAGS: 00000a06 RAX: 0000000000000000 RBX: ffffffff8d7fc390 RCX: dffffc0000000000 RDX: ffffffff8de4cb5c RSI: 0000000000000001 RDI: ffffffff8136ebdd RBP: ffffffff8d7fc384 R08: 0000000000000007 R09: ffffc900018af690 R10: fffff52000315ed4 R11: 0000000000000000 R12: ffffffff812e1fa5 R13: ffffffff8d7fc39c R14: ffffffff8d7fc384 R15: ffffffff8d7fc384 __unwind_start+0x60b/0x750 arch/x86/kernel/unwind_orc.c:696 unwind_start arch/x86/include/asm/unwind.h:60 [inline] arch_stack_walk+0x76/0xe0 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x104/0x1e0 kernel/stacktrace.c:121 kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track+0x3d/0x70 mm/kasan/common.c:46 kasan_set_free_info+0x1f/0x40 mm/kasan/generic.c:356 ____kasan_slab_free+0xe2/0x110 mm/kasan/common.c:362 kasan_slab_free include/linux/kasan.h:192 [inline] slab_free_hook mm/slub.c:1547 [inline] slab_free_freelist_hook+0xd6/0x1a0 mm/slub.c:1580 slab_free mm/slub.c:3142 [inline] kfree+0xd1/0x2a0 mm/slub.c:4124 smk_import_entry+0x32d/0x400 security/smack/smack_access.c:597 smk_fetch security/smack/smack_lsm.c:298 [inline] smack_d_instantiate+0x7ed/0xde0 security/smack/smack_lsm.c:3409 security_d_instantiate+0xa5/0x100 security/security.c:1974 d_instantiate_new+0x61/0x110 fs/dcache.c:1999 ext4_add_nondir+0x22b/0x290 fs/ext4/namei.c:2581 ext4_symlink+0x9d5/0x1000 fs/ext4/namei.c:3406 vfs_symlink+0x36f/0x500 fs/namei.c:3962 do_symlinkat+0x1e0/0x490 fs/namei.c:3989 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45df47 Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffd6bdfcc78 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045df47 RDX: 00007ffd6bdfcd33 RSI: 00000000004c3c7f RDI: 00007ffd6bdfcd20 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000013 R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000000