RBP: 00007f5accd81300 R08: 00007f5acccb86c0 R09: 00007f5acccb86c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5accd8130c R13: 0000000000000000 R14: 00007ffc86a2acd0 R15: 00007ffc86a2adb8 BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 204s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: psi_avgs_work pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_shepherd workqueue events_unbound: flags=0x2 pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 pending: toggle_allocation_gate, flush_memcg_stats_dwork workqueue events_power_efficient: flags=0x80 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 pending: neigh_periodic_work, gc_worker, check_lifetime pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: neigh_periodic_work workqueue mm_percpu_wq: flags=0x8 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update workqueue dm_bufio_cache: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: work_fn workqueue ipv6_addrconf: flags=0x40008 pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 pending: addrconf_verify_work NMI backtrace for cpu 0 CPU: 0 PID: 460 Comm: syz-executor308 Not tainted 5.15.149-syzkaller-00490-g5d96939590c0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:irqtime_account_irq+0x6/0x3c0 kernel/sched/cputime.c:54 Code: fd ff ff cc 55 48 89 e5 c6 05 f5 ff da 05 01 5d c3 0f 1f 00 55 48 89 e5 c6 05 e5 ff da 05 00 5d c3 0f 1f 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 18 41 89 f5 49 89 fe e8 44 85 74 03 RSP: 0018:ffffc90000007fb8 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff888115fd62c0 RCX: dffffc0000000000 RDX: 0000000080010001 RSI: 0000000000000000 RDI: ffff888115fd62c0 RBP: ffffc90000007fc0 R08: ffffffff8160ab70 R09: ffffffff816390dd R10: 0000000000000002 R11: ffff888115fd62c0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f5acccb86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5acccb7e40 CR3: 000000011f4ef000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: account_hardirq_exit include/linux/vtime.h:159 [inline] __irq_exit_rcu+0x18/0xf0 kernel/softirq.c:645 irq_exit_rcu+0x9/0x10 kernel/softirq.c:660 sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70 kernel/locking/spinlock.c:202 Code: 08 00 74 0c 48 c7 c7 d8 54 8d 86 e8 41 6c e9 fc 48 83 3d 21 78 c4 01 00 74 2a 48 89 df e8 93 09 8c fc 66 90 fb bf 01 00 00 00 12 4d 83 fc 65 8b 05 b3 90 39 7b 85 c0 74 03 5b 5d c3 e8 b3 a4 RSP: 0018:ffffc90001107bb8 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff88810adee900 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffffc90001107bc0 R08: ffffffff81456dfa R09: fffff52000220fc0 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810adee900 R13: ffff88810adeed20 R14: 0000000000000021 R15: dffffc0000000000 spin_unlock_irq include/linux/spinlock.h:413 [inline] get_signal+0x1562/0x1630 kernel/signal.c:2899 arch_do_signal_or_restart+0xbd/0x1680 arch/x86/kernel/signal.c:867 handle_signal_work kernel/entry/common.c:148 [inline] exit_to_user_mode_loop+0xa0/0xe0 kernel/entry/common.c:172 exit_to_user_mode_prepare+0x5a/0xa0 kernel/entry/common.c:208 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline] syscall_exit_to_user_mode+0x26/0x160 kernel/entry/common.c:301 do_syscall_64+0x49/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f5acccf7417 Code: 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 RSP: 002b:00007f5acccb8238 EFLAGS: 00000246 RAX: 00000000000000ca RBX: 00007f5accd81308 RCX: 00007f5acccf7419 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5accd81308 RBP: 00007f5accd81300 R08: 00007f5acccb86c0 R09: 00007f5acccb86c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5accd8130c R13: 0000000000000000 R14: 00007ffc86a2acd0 R15: 00007ffc86a2adb8 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 3.189 msecs ---------------- Code disassembly (best guess), 2 bytes skipped: 0: ff cc dec %esp 2: 55 push %rbp 3: 48 89 e5 mov %rsp,%rbp 6: c6 05 f5 ff da 05 01 movb $0x1,0x5dafff5(%rip) # 0x5db0002 d: 5d pop %rbp e: c3 ret f: 0f 1f 00 nopl (%rax) 12: 55 push %rbp 13: 48 89 e5 mov %rsp,%rbp 16: c6 05 e5 ff da 05 00 movb $0x0,0x5daffe5(%rip) # 0x5db0002 1d: 5d pop %rbp 1e: c3 ret 1f: 0f 1f 00 nopl (%rax) 22: 55 push %rbp 23: 48 89 e5 mov %rsp,%rbp 26: 41 57 push %r15 * 28: 41 56 push %r14 <-- trapping instruction 2a: 41 55 push %r13 2c: 41 54 push %r12 2e: 53 push %rbx 2f: 48 83 ec 18 sub $0x18,%rsp 33: 41 89 f5 mov %esi,%r13d 36: 49 89 fe mov %rdi,%r14 39: e8 44 85 74 03 call 0x3748582