watchdog: BUG: soft lockup - CPU#1 stuck for 131s! [udevd:3028] Modules linked in: irq event stamp: 851487 hardirqs last enabled at (851486): [] seqcount_lockdep_reader_access+0x153/0x220 include/linux/seqlock.h:105 hardirqs last disabled at (851487): [] sysvec_apic_timer_interrupt+0xa/0xb0 arch/x86/kernel/apic/apic.c:1096 softirqs last enabled at (848346): [] local_bh_enable+0x5/0x20 include/linux/bottom_half.h:31 softirqs last disabled at (849137): [] __do_softirq kernel/softirq.c:592 [inline] softirqs last disabled at (849137): [] invoke_softirq kernel/softirq.c:432 [inline] softirqs last disabled at (849137): [] __irq_exit_rcu+0x157/0x240 kernel/softirq.c:641 CPU: 1 PID: 3028 Comm: udevd Not tainted 5.15.166-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:queued_write_lock_slowpath+0x154/0x440 kernel/locking/qrwlock.c:78 Code: a2 e2 65 00 f0 41 81 0f 00 01 00 00 48 8b 5c 24 08 43 0f b6 04 2e 84 c0 0f 85 94 00 00 00 41 8b 07 3d 00 01 00 00 74 27 f3 90 <43> 0f b6 04 2e 84 c0 74 eb 44 89 f9 80 e1 07 80 c1 03 38 c1 7c de RSP: 0000:ffffc90000dd0500 EFLAGS: 00000206 RAX: 00000000000001ff RBX: 1ffff920001ba0aa RCX: ffffffff816441de RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8db33658 RBP: ffffc90000dd05b0 R08: dffffc0000000000 R09: fffffbfff1b666cc R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000dd0550 R13: dffffc0000000000 R14: 1ffffffff1b666cb R15: ffffffff8db33658 FS: 00007fed7c951c80(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000563720ba3800 CR3: 0000000028c01000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: queued_write_lock include/asm-generic/qrwlock.h:97 [inline] do_raw_write_lock+0x38b/0x4e0 kernel/locking/spinlock_debug.c:210 neigh_forced_gc net/core/neighbour.c:236 [inline] neigh_alloc net/core/neighbour.c:429 [inline] ___neigh_create+0x202/0x2220 net/core/neighbour.c:591 ip6_finish_output2+0x11c5/0x15a0 net/ipv6/ip6_output.c:127 dst_output include/net/dst.h:443 [inline] NF_HOOK include/linux/netfilter.h:302 [inline] ndisc_send_skb+0xae0/0x13c0 net/ipv6/ndisc.c:511 addrconf_rs_timer+0x357/0x610 net/ipv6/addrconf.c:3959 call_timer_fn+0x16d/0x560 kernel/time/timer.c:1451 expire_timers kernel/time/timer.c:1496 [inline] __run_timers+0x67c/0x890 kernel/time/timer.c:1767 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1780 handle_softirqs+0x3a7/0x930 kernel/softirq.c:558 __do_softirq kernel/softirq.c:592 [inline] invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x157/0x240 kernel/softirq.c:641 irq_exit_rcu+0x5/0x20 kernel/softirq.c:653 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:__read_once_word_nocheck+0x0/0x10 include/asm-generic/rwonce.h:67 Code: e1 07 38 c1 0f 8c dc fc ff ff 48 89 df e8 f8 72 91 00 48 ba 00 00 00 00 00 fc ff df e9 c5 fc ff ff 66 0f 1f 84 00 00 00 00 00 <48> 8b 07 c3 cc cc cc cc cc cc cc cc cc cc cc cc 31 c0 81 ff 03 00 RSP: 0000:ffffc90002da7208 EFLAGS: 00000287 RAX: ffffc90002da7c18 RBX: ffffc90002da7300 RCX: 0000000000000000 RDX: ffffc90002da7340 RSI: ffffc90002da7c10 RDI: ffffc90002da7c10 RBP: ffffc90002da8000 R08: ffffc90002da7c10 R09: ffffc90002da7350 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: ffffc90002da0000 R14: ffffc90002da7340 R15: ffffc90002da7c10 deref_stack_reg+0xbe/0x110 arch/x86/kernel/unwind_orc.c:360 unwind_next_frame+0x12f1/0x1fa0 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122 save_stack+0xf6/0x1e0 mm/page_owner.c:119 __set_page_owner+0x37/0x300 mm/page_owner.c:181 prep_new_page mm/page_alloc.c:2426 [inline] get_page_from_freelist+0x322a/0x33c0 mm/page_alloc.c:4159 __alloc_pages+0x272/0x700 mm/page_alloc.c:5423 alloc_pages_vma+0x39a/0x800 mm/mempolicy.c:2146 wp_page_copy+0x24e/0x2070 mm/memory.c:3026 handle_pte_fault mm/memory.c:4638 [inline] __handle_mm_fault mm/memory.c:4755 [inline] handle_mm_fault+0x2a3d/0x5960 mm/memory.c:4853 do_user_addr_fault arch/x86/mm/fault.c:1357 [inline] handle_page_fault arch/x86/mm/fault.c:1445 [inline] exc_page_fault+0x271/0x700 arch/x86/mm/fault.c:1501 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:568 RIP: 0033:0x7fed7ca2d2a4 Code: c0 02 49 8b 0c c6 64 8b 34 25 18 00 00 00 85 f6 75 22 48 39 cd 75 0c 48 8d 3d 24 e6 0e 00 e9 66 fe ff ff 48 c1 ea 0c 48 31 ca <48> 89 55 10 49 89 2c c6 eb 3c 89 d8 48 c1 ea 0c 48 89 ce 49 8d 3c RSP: 002b:00007ffc89f73150 EFLAGS: 00010206 RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000563720c79100 RDX: 0000563243b59aa3 RSI: 0000000000000000 RDI: 0000563720ba3800 RBP: 0000563720ba37f0 R08: 0000000000000007 R09: 0e3e59718eacf3dc R10: cbb3ca63b42b819c R11: 0000000000000007 R12: 0000000000000000 R13: 0000563720ba3820 R14: 00007fed7cb57aa0 R15: 0000000000000000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 5.15.166-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: ipv6_addrconf addrconf_dad_work RIP: 0010:memory_is_nonzero mm/kasan/generic.c:101 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline] RIP: 0010:kasan_check_range+0x5f/0x290 mm/kasan/generic.c:189 Code: eb 03 49 b8 00 00 00 00 00 fc ff df 4e 8d 0c 03 4c 8d 54 37 ff 49 c1 ea 03 49 bb 01 00 00 00 00 fc ff df 4f 8d 34 1a 4c 89 f5 <4c> 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 RSP: 0018:ffffc90000007970 EFLAGS: 00000807 RAX: 0000000000000001 RBX: 1ffffffff20e2218 RCX: ffffffff81631a88 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff907110c0 RBP: fffffbfff20e2219 R08: dffffc0000000000 R09: fffffbfff20e2218 R10: 1ffffffff20e2218 R11: dffffc0000000001 R12: 0000000000000007 R13: dffffc0000000000 R14: fffffbfff20e2219 R15: ffff88801729c788 FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000600 CR3: 000000001a580000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read include/linux/instrumented.h:71 [inline] test_bit include/asm-generic/bitops/instrumented-non-atomic.h:134 [inline] hlock_class kernel/locking/lockdep.c:197 [inline] mark_lock+0x98/0x340 kernel/locking/lockdep.c:4569 mark_usage kernel/locking/lockdep.c:4512 [inline] __lock_acquire+0xc97/0x1ff0 kernel/locking/lockdep.c:4966 lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 debug_object_activate+0x63/0x4e0 lib/debugobjects.c:693 debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline] debug_activate kernel/time/hrtimer.c:475 [inline] enqueue_hrtimer+0x30/0x390 kernel/time/hrtimer.c:1084 __run_hrtimer kernel/time/hrtimer.c:1705 [inline] __hrtimer_run_queues+0x6b6/0xcf0 kernel/time/hrtimer.c:1752 hrtimer_interrupt+0x392/0x980 kernel/time/hrtimer.c:1814 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline] __sysvec_apic_timer_interrupt+0x139/0x470 arch/x86/kernel/apic/apic.c:1102 sysvec_apic_timer_interrupt+0x8c/0xb0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:169 [inline] RIP: 0010:unwind_next_frame+0x1fe/0x1fa0 arch/x86/kernel/unwind_orc.c:448 Code: 46 ff 39 e8 0f 86 a7 15 00 00 89 e8 48 8d 1c 85 40 29 f5 8e 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 3d 17 00 00 44 8b 23 <89> e8 ff c0 48 8d 1c 85 40 29 f5 8e 48 89 d8 48 c1 e8 03 0f b6 04 RSP: 0018:ffffc90000cc7008 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffffff8f1268d0 RCX: 000000000009607f RDX: dffffc0000000000 RSI: ffffffff884fe465 RDI: 0000000000000001 RBP: 0000000000074fe4 R08: 0000000000000005 R09: ffffc90000cc71b0 R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000013e848 R13: ffffffff884fe464 R14: 000000000009607f R15: ffffc90000cc70c0 arch_stack_walk+0x10d/0x140 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x113/0x1c0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] __kasan_slab_alloc+0x8e/0xc0 mm/kasan/common.c:467 kasan_slab_alloc include/linux/kasan.h:254 [inline] slab_post_alloc_hook+0x53/0x380 mm/slab.h:519 slab_alloc_node mm/slub.c:3220 [inline] kmem_cache_alloc_node+0x121/0x2c0 mm/slub.c:3256 __alloc_skb+0xdd/0x590 net/core/skbuff.c:415 alloc_skb include/linux/skbuff.h:1167 [inline] nlmsg_new include/net/netlink.h:953 [inline] __neigh_notify+0x7c/0x130 net/core/neighbour.c:3375 neigh_cleanup_and_release+0xa5/0x260 net/core/neighbour.c:101 neigh_del net/core/neighbour.c:197 [inline] neigh_remove_one+0x4b1/0x5c0 net/core/neighbour.c:218 neigh_forced_gc net/core/neighbour.c:251 [inline] neigh_alloc net/core/neighbour.c:429 [inline] ___neigh_create+0x45a/0x2220 net/core/neighbour.c:591 ip6_finish_output2+0x11c5/0x15a0 net/ipv6/ip6_output.c:127 dst_output include/net/dst.h:443 [inline] NF_HOOK include/linux/netfilter.h:302 [inline] ndisc_send_skb+0xae0/0x13c0 net/ipv6/ndisc.c:511 addrconf_dad_completed+0x75f/0xc40 net/ipv6/addrconf.c:4278 addrconf_dad_work+0xdd0/0x1720 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457 kthread+0x3f6/0x4f0 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287