kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz-executor.5:11455] Modules linked in: irq event stamp: 31140 hardirqs last enabled at (31139): [] restore_regs_and_return_to_kernel+0x0/0x2a hardirqs last disabled at (31140): [] apic_timer_interrupt+0x8e/0xa0 arch/x86/entry/entry_64.S:793 softirqs last enabled at (26544): [] __do_softirq+0x68b/0x9ff kernel/softirq.c:314 softirqs last disabled at (26495): [] invoke_softirq kernel/softirq.c:368 [inline] softirqs last disabled at (26495): [] irq_exit+0x193/0x240 kernel/softirq.c:409 CPU: 1 PID: 11455 Comm: syz-executor.5 Not tainted 4.14.283-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88809cad2600 task.stack: ffff888097420000 RIP: 0010:__output_copy kernel/events/internal.h:176 [inline] RIP: 0010:perf_output_read_group kernel/events/core.c:5899 [inline] RIP: 0010:perf_output_read+0x6e2/0x1090 kernel/events/core.c:5932 RSP: 0018:ffff888097427290 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 RAX: ffffed1012e84ea8 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000008 RSI: ffff888097427368 RDI: ffff8880b2f5e6c0 RBP: ffff888097427368 R08: 0000000000000001 R09: ffffed10165ebcd7 R10: ffff8880b2f5e6bf R11: 0000002f90ea068c R12: dffffc0000000000 R13: ffffed1012e84eaa R14: ffff888097427528 R15: 0000000000000008 FS: 00007f4cf0332700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020fca000 CR3: 00000000b10dd000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: perf_output_sample+0xa28/0x16f0 kernel/events/core.c:5974 __perf_event_output kernel/events/core.c:6287 [inline] perf_event_output_forward+0xf8/0x1f0 kernel/events/core.c:6300 __perf_event_overflow+0x113/0x310 kernel/events/core.c:7549 perf_swevent_overflow kernel/events/core.c:7625 [inline] perf_swevent_event+0x299/0x460 kernel/events/core.c:7653 do_perf_sw_event kernel/events/core.c:7766 [inline] ___perf_sw_event+0x2a1/0x480 kernel/events/core.c:7797 __perf_sw_event+0x4f/0x100 kernel/events/core.c:7809 perf_sw_event include/linux/perf_event.h:1046 [inline] __do_page_fault+0x692/0xad0 arch/x86/mm/fault.c:1483 page_fault+0x25/0x50 arch/x86/entry/entry_64.S:1123 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 arch/x86/lib/copy_user_64.S:181 RSP: 0018:ffff888097427a60 EFLAGS: 00050206 RAX: ffffed10122c2000 RBX: 0000000000008000 RCX: 0000000000003acb RDX: 0000000000008000 RSI: 0000000020fca000 RDI: ffff88809160c535 RBP: 0000000020fc5acb R08: 0000000000000001 R09: ffffed10122c1fff R10: ffff88809160ffff R11: 0000000000000000 R12: ffff888091608000 R13: 00007ffffffff000 R14: 0000000020fcdacb R15: ffff888092a3cd80 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:55 [inline] copyin+0x99/0xc0 lib/iov_iter.c:146 _copy_from_iter_full+0x19c/0x760 lib/iov_iter.c:610 copy_from_iter_full include/linux/uio.h:126 [inline] skb_do_copy_data_nocache include/net/sock.h:1892 [inline] skb_copy_to_page_nocache include/net/sock.h:1918 [inline] tcp_sendmsg_locked+0x23fc/0x2ef0 net/ipv4/tcp.c:1360 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1457 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 SYSC_sendto net/socket.c:1763 [inline] SyS_sendto+0x1c7/0x2c0 net/socket.c:1731 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f4cf19bd109 RSP: 002b:00007f4cf0332168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f4cf1acff60 RCX: 00007f4cf19bd109 RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000006 RBP: 00007f4cf1a1705d R08: 0000000000000000 R09: 0000000000000053 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe328571cf R14: 00007f4cf0332300 R15: 0000000000022000 Code: 49 8b 7e 28 4c 89 fa 48 89 ee 4c 29 fb e8 47 74 1b 00 41 80 7d 00 00 0f 85 bc 06 00 00 48 8b 04 24 4c 01 fd 4d 01 7e 28 80 38 00 <0f> 85 7b 06 00 00 4d 29 7e 18 0f 85 9e 00 00 00 e8 09 c8 f1 ff Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff872480de ---------------- Code disassembly (best guess): 0: 49 8b 7e 28 mov 0x28(%r14),%rdi 4: 4c 89 fa mov %r15,%rdx 7: 48 89 ee mov %rbp,%rsi a: 4c 29 fb sub %r15,%rbx d: e8 47 74 1b 00 callq 0x1b7459 12: 41 80 7d 00 00 cmpb $0x0,0x0(%r13) 17: 0f 85 bc 06 00 00 jne 0x6d9 1d: 48 8b 04 24 mov (%rsp),%rax 21: 4c 01 fd add %r15,%rbp 24: 4d 01 7e 28 add %r15,0x28(%r14) 28: 80 38 00 cmpb $0x0,(%rax) * 2b: 0f 85 7b 06 00 00 jne 0x6ac <-- trapping instruction 31: 4d 29 7e 18 sub %r15,0x18(%r14) 35: 0f 85 9e 00 00 00 jne 0xd9 3b: e8 09 c8 f1 ff callq 0xfff1c849