watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.2:1293]
Modules linked in:
CPU: 0 PID: 1293 Comm: syz-executor.2 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:dev_hold include/linux/netdevice.h:3843 [inline]
RIP: 0010:dst_init net/core/dst.c:53 [inline]
RIP: 0010:dst_alloc+0x19f/0x4c0 net/core/dst.c:97
Code: 4d 85 ff 74 37 e8 01 85 e1 fd 49 81 c7 78 04 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f4 69 11 fe 49 8b 07 <65> ff 00 eb 12 e8 d7 84 e1 fd 45 31 f6 e9 0c 02 00 00 e8 ca 84 e1
RSP: 0018:ffff8881f6e09978 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000607e08e436a0 RBX: ffff8881d4eb23c0 RCX: ffff8881ebc65e80
RDX: 0000000000000100 RSI: ffff8881f6e09738 RDI: 00000000b987a4f1
RBP: ffff8881ec2eab40 R08: 0000000000000002 R09: ffffffff846031dc
R10: ffffffff84800000 R11: dffffc0000000001 R12: dffffc0000000000
R13: 0000000000000000 R14: ffff8881d4eb23c0 R15: ffff8881d659c478
FS:  00007f5928d186c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30732000 CR3: 00000001ebf6c000 CR4: 00000000003406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 ip6_dst_alloc net/ipv6/route.c:357 [inline]
 icmp6_dst_alloc+0xf1/0x550 net/ipv6/route.c:3183
 ndisc_send_skb+0x262/0xc30 net/ipv6/ndisc.c:489
 addrconf_rs_timer+0x2d1/0x600 net/ipv6/addrconf.c:3953
 call_timer_fn+0x36/0x390 kernel/time/timer.c:1448
 expire_timers kernel/time/timer.c:1493 [inline]
 __run_timers+0x879/0xbe0 kernel/time/timer.c:1817
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1830
 __do_softirq+0x23b/0x6b7 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x195/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:538 [inline]
 smp_apic_timer_interrupt+0x11a/0x460 arch/x86/kernel/apic/apic.c:1149
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:834
 </IRQ>
RIP: 0010:copy_verifier_state+0x544/0xbf0 kernel/bpf/verifier.c:745
Code: f2 ff 49 63 c7 48 89 44 24 10 4d 8d 64 c5 00 4c 89 e5 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 e7 e8 30 30 22 00 49 8b 04 24 <48> 85 c0 74 0a 48 89 c3 e8 0f 4b f2 ff eb 65 48 8b 44 24 38 42 80
RSP: 0018:ffff8881e4c7f018 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: ffff8881ef50a000 RBX: ffff8881f19f4060 RCX: 0000000000040000
RDX: ffffc90003b5b000 RSI: 000000000003ffff RDI: 0000000000040000
RBP: 1ffff1103e33e800 R08: ffffffff8171f0ca R09: ffffed103af9d999
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f19f4000
R13: ffff8881f19f4000 R14: dffffc0000000000 R15: 0000000000000000
 pop_stack kernel/bpf/verifier.c:786 [inline]
 do_check+0x67cc/0x9820 kernel/bpf/verifier.c:8098
 bpf_check+0x2169/0xb340 kernel/bpf/verifier.c:9637
 bpf_prog_load kernel/bpf/syscall.c:1724 [inline]
 __do_sys_bpf kernel/bpf/syscall.c:2891 [inline]
 __se_sys_bpf+0x8139/0xbcb0 kernel/bpf/syscall.c:2849
 do_syscall_64+0xca/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
RIP: 0033:0x7f592999e0a9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5928d180c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f5929ad4f80 RCX: 00007f592999e0a9
RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005
RBP: 00007f5929a0d074 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f5929ad4f80 R15: 00007ffd67c1b238
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 1286 Comm: syz-executor.1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:unwind_next_frame+0x103e/0x1ea0 arch/x86/kernel/unwind_orc.c:534
Code: 6c 24 10 0f 85 bb 0c 00 00 48 8b 44 24 50 c6 00 00 ba 10 00 00 00 48 8b 7c 24 38 31 f6 e8 2a 26 64 00 4c 89 f3 48 8b 54 24 18 <e9> de 04 00 00 48 89 5c 24 70 49 8d 7d 08 48 89 f8 48 c1 e8 03 42
RSP: 0018:ffff8881f6f09400 EFLAGS: 00000256
RAX: ffff8881f6f09750 RBX: ffff8881f6f09700 RCX: 0000000000000000
RDX: ffffffff86a6a296 RSI: 0000000000000000 RDI: ffff8881f6f09760
RBP: ffff8881f6f096f0 R08: dffffc0000000000 R09: ffff8881f6f09750
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff0d4d452
R13: ffffffff86a6a292 R14: ffff8881f6f09700 R15: dffffc0000000000
FS:  00007f5a958106c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30736000 CR3: 00000001d56c3000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 arch_stack_walk+0x111/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x118/0x1c0 kernel/stacktrace.c:123
 save_stack mm/kasan/common.c:70 [inline]
 set_track mm/kasan/common.c:78 [inline]
 __kasan_kmalloc+0x171/0x210 mm/kasan/common.c:529
 slab_post_alloc_hook mm/slab.h:584 [inline]
 slab_alloc_node mm/slub.c:2829 [inline]
 slab_alloc mm/slub.c:2837 [inline]
 kmem_cache_alloc+0xd9/0x250 mm/slub.c:2842
 kmem_cache_alloc_node include/linux/slab.h:427 [inline]
 __alloc_skb+0x7a/0x4d0 net/core/skbuff.c:198
 alloc_skb include/linux/skbuff.h:1080 [inline]
 ndisc_alloc_skb+0xee/0x2c0 net/ipv6/ndisc.c:421
 ndisc_send_rs+0x269/0x6a0 net/ipv6/ndisc.c:687
 addrconf_rs_timer+0x2d1/0x600 net/ipv6/addrconf.c:3953
 call_timer_fn+0x36/0x390 kernel/time/timer.c:1448
 expire_timers kernel/time/timer.c:1493 [inline]
 __run_timers+0x879/0xbe0 kernel/time/timer.c:1817
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1830
 __do_softirq+0x23b/0x6b7 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x195/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:538 [inline]
 smp_apic_timer_interrupt+0x11a/0x460 arch/x86/kernel/apic/apic.c:1149
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:834
 </IRQ>
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 kernel/kcov.c:183
Code: 1f 84 00 00 00 00 00 0f 1f 00 be 0c 00 00 00 48 c7 c7 a0 a7 f1 85 e8 3f de 2f 00 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 04 24 65 48 8b 0d 54 51 9e 7e 65 8b 15 59 51 9e 7e f7 c2 00
RSP: 0018:ffff8881d95cf8d0 EFLAGS: 00000283 ORIG_RAX: ffffffffffffff13
RAX: ffff8881ebc60fc0 RBX: 00000000ffffffff RCX: 0000000000000002
RDX: ffffc90003f5d000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff816b776d R09: ffffffff819965c0
R10: ffff8881ebc60fc0 R11: 0000000000000003 R12: ffff8881d95cfd10
R13: ffffffff864b3560 R14: ffffffff864ab260 R15: ffffffff864ab280
 bpf_get_raw_tracepoint+0x8f/0x260 kernel/trace/bpf_trace.c:1318
 bpf_raw_tracepoint_open kernel/bpf/syscall.c:1833 [inline]
 __do_sys_bpf kernel/bpf/syscall.c:2933 [inline]
 __se_sys_bpf+0x842/0xbcb0 kernel/bpf/syscall.c:2849
 do_syscall_64+0xca/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
RIP: 0033:0x7f5a964960a9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5a958100c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f5a965ccf80 RCX: 00007f5a964960a9
RDX: 0000000000000010 RSI: 0000000020000bc0 RDI: 0000000000000011
RBP: 00007f5a96505074 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f5a965ccf80 R15: 00007fff0d209058