watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.5:8912] Modules linked in: irq event stamp: 23852005 hardirqs last enabled at (23852004): [] trace_hardirqs_on_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:41 hardirqs last disabled at (23852005): [] trace_hardirqs_off_thunk+0x1a/0x1c arch/x86/entry/thunk_64.S:42 softirqs last enabled at (76568): [] invoke_softirq kernel/softirq.c:373 [inline] softirqs last enabled at (76568): [] irq_exit+0x223/0x230 kernel/softirq.c:413 softirqs last disabled at (78083): [] invoke_softirq kernel/softirq.c:373 [inline] softirqs last disabled at (78083): [] irq_exit+0x223/0x230 kernel/softirq.c:413 CPU: 0 PID: 8912 Comm: syz-executor.5 Not tainted 5.6.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:164 [inline] RIP: 0010:unwind_next_frame+0x1e9/0x1cf0 arch/x86/kernel/unwind_orc.c:407 Code: 89 e8 48 8d 1c 85 58 e8 42 8a 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 8a 04 30 84 c0 0f 85 03 15 00 00 44 8b 3b <89> e8 ff c0 48 8d 1c 85 58 e8 42 8a 48 89 d8 48 c1 e8 03 42 8a 04 RSP: 0018:ffffc900000076a8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff14b5a00 RBX: ffffffff8a5ad558 RCX: ffffffff8a631000 RDX: ffffc90000007b50 RSI: 0000000000072027 RDI: 0000000000000001 RBP: 000000000005fb40 R08: 0000000000000003 R09: ffffc90000007818 R10: fffff52000000ef9 R11: 0000000000000000 R12: ffffffff86fb40cd R13: ffffc90000007770 R14: dffffc0000000000 R15: 0000000000140cb6 FS: 00007f8b67141700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8b670dddb8 CR3: 000000009188f000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_stack_walk+0xb4/0xe0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xad/0x150 kernel/stacktrace.c:123 save_stack mm/kasan/common.c:72 [inline] set_track mm/kasan/common.c:80 [inline] __kasan_kmalloc+0x118/0x1c0 mm/kasan/common.c:515 slab_post_alloc_hook mm/slab.h:584 [inline] slab_alloc mm/slab.c:3320 [inline] kmem_cache_alloc+0x1f5/0x2d0 mm/slab.c:3484 dst_alloc+0x16c/0x570 net/core/dst.c:93 ip6_dst_alloc net/ipv6/route.c:355 [inline] icmp6_dst_alloc+0x7e/0x520 net/ipv6/route.c:3138 ndisc_send_skb+0x22d/0xd00 net/ipv6/ndisc.c:485 addrconf_rs_timer+0x226/0x680 net/ipv6/addrconf.c:3879 call_timer_fn+0x91/0x160 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers+0x776/0x970 kernel/time/timer.c:1773 run_timer_softirq+0x46/0x80 kernel/time/timer.c:1786 __do_softirq+0x268/0x7c5 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x223/0x230 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:546 [inline] smp_apic_timer_interrupt+0x113/0x280 arch/x86/kernel/apic/apic.c:1146 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:preempt_schedule_irq+0xc0/0x150 kernel/sched/core.c:4337 Code: 80 f9 43 80 3c 37 00 74 0c 48 c7 c7 68 d4 0a 89 e8 05 6e b7 f9 48 83 3d 55 58 11 01 00 0f 84 81 00 00 00 fb 66 0f 1f 44 00 00 01 00 00 00 e8 f6 ed ff ff 43 80 3c 34 00 74 0c 48 c7 c7 60 d4 RSP: 0018:ffffc90002c67cd0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 RAX: ffff88803dab0bd4 RBX: 0000000000000000 RCX: 0000000000040000 RDX: dffffc0000000000 RSI: 0000000000028980 RDI: ffff88803dab0b84 RBP: 0000000000000000 R08: ffffffff817a3af0 R09: ffffed1015d07004 R10: ffffed1015d07004 R11: 0000000000000000 R12: 1ffffffff1215a8c R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffffffff1215a8d retint_kernel+0x1b/0x2b RIP: 0010:do_strncpy_from_user lib/strncpy_from_user.c:40 [inline] RIP: 0010:strncpy_from_user+0x1b7/0x3f0 lib/strncpy_from_user.c:120 Code: 00 44 89 e8 83 e0 07 48 89 44 24 18 31 db 48 8b 6c 24 08 4d 89 f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 45 31 f6 4d 8b 3c 24 <31> ff 44 89 f6 e8 3f 61 c4 fd 45 85 f6 0f 85 84 00 00 00 49 89 de RSP: 0018:ffffc90002c67da0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffff88803dab0340 RSI: 0000000000000fe0 RDI: 0000000000000007 RBP: ffff888096076220 R08: ffffffff83b05124 R09: 0000000000000fe0 R10: 0000000000000020 R11: ffff88821bc4f700 R12: 00007f8b67140850 R13: 0000000000000fe0 R14: 0000000000000000 R15: 0000000000000000 getname_flags+0x106/0x610 fs/namei.c:149 do_sys_openat2+0x3f2/0x6c0 fs/open.c:1143 do_sys_open fs/open.c:1165 [inline] ksys_open include/linux/syscalls.h:1386 [inline] __do_sys_open fs/open.c:1171 [inline] __se_sys_open fs/open.c:1169 [inline] __x64_sys_open+0x1af/0x1e0 fs/open.c:1169 do_syscall_64+0xf3/0x1b0 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x416241 Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007f8b671407a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416241 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f8b67140850 RBP: 000000000076bf20 R08: 00007f8b671407b0 R09: 000000000076bf20 R10: ffffffffffffffff R11: 0000000000000293 R12: 00000000ffffffff R13: 0000000000000bff R14: 00000000004cdec3 R15: 000000000076bf2c Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8909 Comm: syz-executor.5 Not tainted 5.6.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__read_once_size include/linux/compiler.h:199 [inline] RIP: 0010:csd_lock_wait kernel/smp.c:109 [inline] RIP: 0010:smp_call_function_single+0x1f2/0x430 kernel/smp.c:311 Code: 38 44 89 ee 83 e6 01 31 ff e8 0a ed 0a 00 41 83 e5 01 75 14 e8 5f e9 0a 00 eb 47 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f3 90 <42> 0f b6 04 23 84 c0 75 0e f6 44 24 38 01 74 23 e8 39 e9 0a 00 eb RSP: 0018:ffffc90002c17be0 EFLAGS: 00000293 RAX: ffffffff8169c5c7 RBX: 1ffff92000582f83 RCX: ffff88803d9a8300 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90002c17c80 R08: ffffffff8169c596 R09: ffffed1015d07021 R10: ffffed1015d07021 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000000001 R14: ffffc90002c17c18 R15: 0000000000000000 FS: 00000000023ef940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e326000 CR3: 000000009188f000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: task_function_call kernel/events/core.c:114 [inline] event_function_call+0x367/0x570 kernel/events/core.c:276 perf_remove_from_context+0xb0/0x1e0 kernel/events/core.c:2208 perf_event_release_kernel+0x53a/0xc50 kernel/events/core.c:4739 perf_release+0x37/0x40 kernel/events/core.c:4835 __fput+0x2d8/0x730 fs/file_table.c:280 task_work_run+0x176/0x1b0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_usermode_loop arch/x86/entry/common.c:164 [inline] prepare_exit_to_usermode+0x48e/0x600 arch/x86/entry/common.c:195 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x416041 Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffc91d300d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416041 RDX: 0000000000000000 RSI: 0000001b2e32683c RDI: 0000000000000004 RBP: 0000000000000001 R08: 00000000af41baa6 R09: 00000000af41baaa R10: 00007ffc91d301b0 R11: 0000000000000293 R12: 000000000076c920 R13: 000000000076c920 R14: 0000000000057318 R15: 000000000076bfcc