watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor.1:556]
Modules linked in:
CPU: 1 PID: 556 Comm: syz-executor.1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:166 [inline]
RIP: 0010:unwind_next_frame+0x2a5/0x1ea0 arch/x86/kernel/unwind_orc.c:438
Code: f8 48 8d 1c 85 1c 3c b6 86 48 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 84 c0 0f 85 53 18 00 00 44 8b 33 <44> 89 f8 ff c0 48 8d 1c 85 1c 3c b6 86 48 89 d8 48 c1 e8 03 42 0f
RSP: 0018:ffff8881f6f08840 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: ffffffff86b6e374 RCX: ffffffff86e99903
RDX: 0000000000038021 RSI: ffff8881f6f087c0 RDI: 0000000000000001
RBP: ffff8881f6f08b30 R08: dffffc0000000000 R09: ffff8881f6f08c90
R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8129d64c
R13: dffffc0000000000 R14: 00000000000082e4 R15: 00000000000029d6
FS:  00007f52e317b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200016e0 CR3: 00000001d3e24000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __unwind_start+0x708/0x890 arch/x86/kernel/unwind_orc.c:691
 unwind_start arch/x86/include/asm/unwind.h:60 [inline]
 arch_stack_walk+0xdd/0x140 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0x118/0x1c0 kernel/stacktrace.c:123
 save_stack mm/kasan/common.c:70 [inline]
 set_track mm/kasan/common.c:78 [inline]
 kasan_set_free_info mm/kasan/common.c:345 [inline]
 __kasan_slab_free+0x1b5/0x270 mm/kasan/common.c:487
 slab_free_hook mm/slub.c:1455 [inline]
 slab_free_freelist_hook mm/slub.c:1494 [inline]
 slab_free mm/slub.c:3080 [inline]
 kmem_cache_free+0x10b/0x2c0 mm/slub.c:3096
 ip6gre_tunnel_xmit+0xa8a/0x1120 net/ipv6/ip6_gre.c:918
 __netdev_start_xmit include/linux/netdevice.h:4538 [inline]
 netdev_start_xmit include/linux/netdevice.h:4552 [inline]
 xmit_one net/core/dev.c:3221 [inline]
 dev_hard_start_xmit+0x1b7/0x6b0 net/core/dev.c:3237
 sch_direct_xmit+0x28f/0xa10 net/sched/sch_generic.c:336
 qdisc_restart net/sched/sch_generic.c:401 [inline]
 __qdisc_run+0xa14/0x1e80 net/sched/sch_generic.c:409
 qdisc_run+0xf8/0x300 include/net/pkt_sched.h:122
 __dev_xmit_skb net/core/dev.c:3413 [inline]
 __dev_queue_xmit+0xb43/0x27e0 net/core/dev.c:3768
 neigh_hh_output include/net/neighbour.h:502 [inline]
 neigh_output include/net/neighbour.h:516 [inline]
 ip6_finish_output2+0xf67/0x18e0 net/ipv6/ip6_output.c:144
 NF_HOOK_COND include/linux/netfilter.h:292 [inline]
 ip6_output+0x1b3/0x430 net/ipv6/ip6_output.c:248
 dst_output include/net/dst.h:438 [inline]
 NF_HOOK include/linux/netfilter.h:303 [inline]
 ndisc_send_skb+0x702/0xc30 net/ipv6/ndisc.c:509
 addrconf_rs_timer+0x2d1/0x600 net/ipv6/addrconf.c:3953
 call_timer_fn+0x36/0x390 kernel/time/timer.c:1448
 expire_timers kernel/time/timer.c:1493 [inline]
 __run_timers+0x879/0xbe0 kernel/time/timer.c:1817
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1830
 __do_softirq+0x23b/0x6b7 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x195/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:538 [inline]
 smp_apic_timer_interrupt+0x11a/0x460 arch/x86/kernel/apic/apic.c:1149
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:834
 </IRQ>
RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x1/0x12
Code: 90 90 90 90 90 90 90 90 90 51 52 56 57 41 50 41 51 41 52 41 53 e8 bf 0a 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 c3 66 90 52 <b8> 01 00 00 00 31 d2 f0 0f b0 17 3c 01 75 02 5a c3 56 0f b6 f0 e8
RSP: 0018:ffff8881e702fbf8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff0bd6772 RBX: ffff8881ebd97e30 RCX: dffffc0000000000
RDX: ffffc90000540000 RSI: 0000000000000ea9 RDI: ffff8881ebd97e30
RBP: 0000000000000000 R08: dffffc0000000000 R09: 0000000000000003
R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103ce1d55f
R13: 0000000000000003 R14: dffffc0000000000 R15: ffff8881eb5bc940
 pv_queued_spin_unlock arch/x86/include/asm/paravirt.h:647 [inline]
 queued_spin_unlock arch/x86/include/asm/qspinlock.h:55 [inline]
 do_raw_spin_unlock include/linux/spinlock.h:210 [inline]
 __raw_spin_unlock include/linux/spinlock_api_smp.h:151 [inline]
 _raw_spin_unlock+0x3d/0x60 kernel/locking/spinlock.c:183
 spin_unlock include/linux/spinlock.h:378 [inline]
 fasync_insert_entry+0x214/0x2d0 fs/fcntl.c:943
 fasync_add_entry fs/fcntl.c:966 [inline]
 fasync_helper+0x4d/0xa0 fs/fcntl.c:984
 perf_fasync+0x7f/0xa0 kernel/events/core.c:6002
 ioctl_fioasync fs/ioctl.c:579 [inline]
 do_vfs_ioctl+0xb93/0x1720 fs/ioctl.c:684
 ksys_ioctl fs/ioctl.c:742 [inline]
 __do_sys_ioctl fs/ioctl.c:749 [inline]
 __se_sys_ioctl fs/ioctl.c:747 [inline]
 __x64_sys_ioctl+0xd4/0x110 fs/ioctl.c:747
 do_syscall_64+0xca/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
RIP: 0033:0x7f52e3e010a9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f52e317b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f52e3f37f80 RCX: 00007f52e3e010a9
RDX: 00000000200016c0 RSI: 0000000000005452 RDI: 0000000000000003
RBP: 00007f52e3e70074 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f52e3f37f80 R15: 00007ffc8af44318
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 551 Comm: syz-executor.0 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:__perf_event_header__init_id+0x37b/0x510 kernel/events/core.c:6292
Code: 08 00 74 08 48 89 df e8 03 48 1a 00 48 89 2b 48 bd 00 00 00 00 00 fc ff df eb 05 e8 5f 62 ea ff 4c 89 e6 48 81 e6 00 02 00 00 <31> ff e8 ae 65 ea ff 4c 89 e0 48 25 00 02 00 00 75 07 e8 3e 62 ea
RSP: 0018:ffff8881f6e08870 EFLAGS: 00000046
RAX: ffffffff8179d9c1 RBX: 0000000000000000 RCX: ffff8881e7049f80
RDX: 0000000000010101 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff8179d934 R09: ffff8881f6e08a00
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: ffff8881e764e800 R14: ffff8881f6e08bc0 R15: ffff8881f6e08a66
FS:  00007f4d0831d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd21d760978 CR3: 00000001eba30000 CR4: 00000000003406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 perf_prepare_sample+0x165/0x1500 kernel/events/core.c:6682
 __perf_event_output kernel/events/core.c:6807 [inline]
 perf_event_output_forward+0xde/0x1b0 kernel/events/core.c:6827
 __perf_event_overflow+0x1d7/0x360 kernel/events/core.c:8301
 perf_swevent_hrtimer+0x3fd/0x560 kernel/events/core.c:9688
 __run_hrtimer kernel/time/hrtimer.c:1581 [inline]
 __hrtimer_run_queues+0x3e9/0xb90 kernel/time/hrtimer.c:1643
 hrtimer_interrupt+0x38a/0x890 kernel/time/hrtimer.c:1705
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1122 [inline]
 smp_apic_timer_interrupt+0x110/0x460 arch/x86/kernel/apic/apic.c:1147
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:834
RIP: 0010:unwind_next_frame+0x129/0x1ea0 arch/x86/kernel/unwind_orc.c:414
Code: 64 00 4c 89 64 24 20 4d 8b 6e 48 4d 8d 66 38 4c 89 e0 48 c1 e8 03 48 89 44 24 60 42 80 3c 38 00 74 08 4c 89 e7 e8 b7 61 64 00 <4c> 89 64 24 68 49 8b 4e 38 4d 89 f4 49 c1 ec 03 43 0f b6 04 3c 84
RSP: 0018:ffff8881f6e09140 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 1ffff1103edc12af RBX: 1ffff1103edc123c RCX: 0000000000000002
RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffff8881f6e093c0
RBP: ffff8881f6e09430 R08: ffffffff82316ca1 R09: ffff8881f6e09540
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e09578
R13: ffffffff812fe293 R14: ffff8881f6e09540 R15: dffffc0000000000
 __unwind_start+0x708/0x890 arch/x86/kernel/unwind_orc.c:691
 unwind_start arch/x86/include/asm/unwind.h:60 [inline]
 arch_stack_walk+0xdd/0x140 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0x118/0x1c0 kernel/stacktrace.c:123
 save_stack mm/kasan/common.c:70 [inline]
 set_track mm/kasan/common.c:78 [inline]
 __kasan_kmalloc+0x171/0x210 mm/kasan/common.c:529
 slab_post_alloc_hook mm/slab.h:584 [inline]
 slab_alloc_node mm/slub.c:2829 [inline]
 slab_alloc mm/slub.c:2837 [inline]
 kmem_cache_alloc+0xd9/0x250 mm/slub.c:2842
 dst_alloc+0x154/0x4c0 net/core/dst.c:93
 ip6_dst_alloc net/ipv6/route.c:357 [inline]
 icmp6_dst_alloc+0xf1/0x550 net/ipv6/route.c:3183
 ndisc_send_skb+0x262/0xc30 net/ipv6/ndisc.c:489
 addrconf_rs_timer+0x2d1/0x600 net/ipv6/addrconf.c:3953
 call_timer_fn+0x36/0x390 kernel/time/timer.c:1448
 expire_timers kernel/time/timer.c:1493 [inline]
 __run_timers+0x879/0xbe0 kernel/time/timer.c:1817
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1830
 __do_softirq+0x23b/0x6b7 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x195/0x1c0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:538 [inline]
 smp_apic_timer_interrupt+0x11a/0x460 arch/x86/kernel/apic/apic.c:1149
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:834
 </IRQ>
RIP: 0010:preempt_schedule_irq+0xc2/0x140 kernel/sched/core.c:4558
Code: 4c 89 e7 e8 90 e1 43 fd f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 04 a2 f4 fc fb bf 01 00 00 00 <e8> b9 e6 ff ff fa bf 01 00 00 00 e8 6e a3 f4 fc 65 48 8b 1d a6 4d
RSP: 0018:ffff8881e775fae0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 1ffff1103ce0951f RBX: 1ffff1103ceebf60 RCX: ffffffff84511c00
RDX: ffffc90000d44000 RSI: 000000000003ffff RDI: 0000000000000001
RBP: ffff8881e775fb78 R08: ffffffff82316d59 R09: ffffed103edcb135
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e775fb00
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff1103ceebf5c
 retint_kernel+0x1b/0x1b
RIP: 0010:cgroup_task_frozen include/linux/cgroup.h:937 [inline]
RIP: 0010:get_signal+0xcd8/0x1440 kernel/signal.c:2709
Code: 55 00 80 63 01 fe 0f 1f 44 00 00 e8 d2 a8 25 00 e8 5d 65 ff ff 41 be 09 00 00 00 48 8b 7c 24 18 e8 2d 7b 12 03 48 8b 54 24 28 <48> 89 d0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 9d 03 00 00 0f b6
RSP: 0018:ffff8881e775fc30 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000000000 RBX: ffff8881e704a700 RCX: 0000000000000001
RDX: ffff8881e704a490 RSI: 0000000000000008 RDI: 0000000000000001
RBP: ffff8881e704a480 R08: dffffc0000000000 R09: ffffed103ce093f1
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e704a6f0
R13: dffffc0000000000 R14: 0000000000000009 R15: ffff8881e775fe00
 do_signal+0xb0/0x11f0 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0xc0/0x1a0 arch/x86/entry/common.c:159
 prepare_exit_to_usermode+0x199/0x200 arch/x86/entry/common.c:194
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
RIP: 0033:0x7f4d08fa30a9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4d0831d178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f4d090d9f88 RCX: 00007f4d08fa30a9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d090d9f88
RBP: 00007f4d090d9f80 R08: 00007f4d0831d6c0 R09: 00007f4d0831d6c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d090d9f8c
R13: 000000000000000b R14: 00007ffdcc0d59f0 R15: 00007ffdcc0d5ad8