watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.4.17:5970] Modules linked in: irq event stamp: 10907879 hardirqs last enabled at (10907878): [] irqentry_exit+0x63/0x90 kernel/entry/common.c:357 hardirqs last disabled at (10907879): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1049 softirqs last enabled at (10246230): [] __do_softirq kernel/softirq.c:588 [inline] softirqs last enabled at (10246230): [] invoke_softirq kernel/softirq.c:428 [inline] softirqs last enabled at (10246230): [] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 softirqs last disabled at (10246233): [] __do_softirq kernel/softirq.c:588 [inline] softirqs last disabled at (10246233): [] invoke_softirq kernel/softirq.c:428 [inline] softirqs last disabled at (10246233): [] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 CPU: 0 UID: 0 PID: 5970 Comm: syz.4.17 Not tainted 6.12.0-rc4-syzkaller-g47e2c45c9c89 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 RIP: 0010:ipv6_hdr include/linux/ipv6.h:109 [inline] RIP: 0010:ip6_packet_match net/ipv6/netfilter/ip6_tables.c:55 [inline] RIP: 0010:ip6t_do_table+0x447/0x18a0 net/ipv6/netfilter/ip6_tables.c:306 Code: 28 84 c0 0f 85 d6 0e 00 00 c7 84 24 68 01 00 00 00 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 99 38 7e f7 <4c> 89 7c 24 08 4c 8b 33 48 8b 9c 24 18 01 00 00 48 89 d8 48 c1 e8 RSP: 0018:ffffc90000007620 EFLAGS: 00000246 RAX: 1ffff110064a2b0a RBX: ffff888032515850 RCX: ffff888025ee3c00 RDX: 0000000000000100 RSI: ffff88807a0d6138 RDI: ffff888078f52018 RBP: ffffc90000007808 R08: ffffffff8a80aa68 R09: 0000000000000000 R10: ffffc90000007770 R11: fffff52000000ef2 R12: ffffc900000079a0 R13: dffffc0000000000 R14: ffff888078f52040 R15: ffff888078f522b0 FS: 00007f10a9d116c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f42f88d0d58 CR3: 00000000313e4000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: ip6t_mangle_out net/ipv6/netfilter/ip6table_mangle.c:49 [inline] ip6table_mangle_hook+0x215/0x7a0 net/ipv6/netfilter/ip6table_mangle.c:72 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ndisc_send_skb+0x122f/0x1380 net/ipv6/ndisc.c:511 addrconf_rs_timer+0x371/0x670 net/ipv6/addrconf.c:4042 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1794 expire_timers kernel/time/timer.c:1845 [inline] __run_timers kernel/time/timer.c:2419 [inline] __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2430 run_timer_base kernel/time/timer.c:2439 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2449 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_preemption_disabled+0x2/0x120 lib/smp_processor_id.c:13 Code: 0b 61 8c 48 c7 c6 c0 0b 61 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 RSP: 0018:ffffc90004767230 EFLAGS: 00000246 RAX: ffffc900047673d0 RBX: 1ffff920008ece94 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8c610bc0 RDI: ffffffff8c610b80 RBP: ffffc90004767450 R08: ffffc900047673df R09: 0000000000000000 R10: ffffc900047673d0 R11: fffff520008ece7c R12: 1ffff920008ece8c R13: 1ffff920008ece90 R14: dffffc0000000000 R15: dffffc0000000000 __schedule+0xb8/0x4bd0 kernel/sched/core.c:6560 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7012 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:core_kernel_text+0x4/0xa0 kernel/extable.c:67 Code: 74 06 5b c3 cc cc cc cc 48 89 df 5b e9 d5 2c 44 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <55> 53 48 89 fb 48 c7 c0 00 00 00 81 bd 01 00 00 00 48 39 c7 72 0c RSP: 0018:ffffc900047675d8 EFLAGS: 00000202 RAX: 0000000000000002 RBX: 1ffff920008ececc RCX: ffffffff931d8203 RDX: ffff888025ee3c00 RSI: 0000000000000001 RDI: ffffffff81706d31 RBP: ffffc900047677b0 R08: ffffffff813559ad R09: fffff520008ecf0e R10: dffffc0000000000 R11: fffff520008ecf0e R12: 1ffff920008ecee8 R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff81706d31 __text_poke+0x148/0xd30 arch/x86/kernel/alternative.c:1874 text_poke arch/x86/kernel/alternative.c:1984 [inline] text_poke_bp_batch+0x59c/0xb30 arch/x86/kernel/alternative.c:2317 text_poke_flush arch/x86/kernel/alternative.c:2486 [inline] text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2493 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 tracepoint_add_func+0x953/0x9e0 kernel/tracepoint.c:361 tracepoint_probe_register_prio kernel/tracepoint.c:511 [inline] tracepoint_probe_register+0x105/0x160 kernel/tracepoint.c:531 perf_trace_event_reg kernel/trace/trace_event_perf.c:129 [inline] perf_trace_event_init+0x478/0x930 kernel/trace/trace_event_perf.c:202 perf_trace_init+0x243/0x2e0 kernel/trace/trace_event_perf.c:226 perf_tp_event_init+0x8d/0x110 kernel/events/core.c:10357 perf_try_init_event+0x146/0x810 kernel/events/core.c:11891 perf_init_event kernel/events/core.c:11977 [inline] perf_event_alloc+0x135f/0x2310 kernel/events/core.c:12259 __do_sys_perf_event_open kernel/events/core.c:12766 [inline] __se_sys_perf_event_open+0xb1f/0x3870 kernel/events/core.c:12657 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f10a8f7e719 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f10a9d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 00007f10a9135f80 RCX: 00007f10a8f7e719 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000480 RBP: 00007f10a8ff1616 R08: 0000000000000008 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f10a9135f80 R15: 00007ffd485c9498 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5969 Comm: syz.2.15 Not tainted 6.12.0-rc4-syzkaller-g47e2c45c9c89 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 RIP: 0010:rcu_is_watching+0x70/0xb0 kernel/rcu/tree.c:739 Code: c3 d8 7e 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d f1 11 89 7e 74 10 83 e0 04 c1 e8 02 5b <41> 5e 41 5f c3 cc cc cc cc e8 82 f0 85 ff eb e9 89 d9 80 e1 07 80 RSP: 0018:ffffc90000a17528 EFLAGS: 00000002 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81704674 RDX: 0000000000000000 RSI: ffffffff8c610bc0 RDI: ffffffff8c610b80 RBP: ffffc90000a17688 R08: ffffffff901d22af R09: 1ffffffff203a455 R10: dffffc0000000000 R11: fffffbfff203a456 R12: 1ffff92000142eb0 R13: dffffc0000000000 R14: ffffffff8e320a58 R15: dffffc0000000000 FS: 00007f7f00ec06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f2410175b0 CR3: 0000000078eae000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0xe3/0x550 kernel/locking/lockdep.c:5796 debug_objects_fill_pool+0xa0/0x9f0 lib/debugobjects.c:614 debug_object_activate+0x135/0x510 lib/debugobjects.c:704 debug_hrtimer_activate kernel/time/hrtimer.c:423 [inline] debug_activate kernel/time/hrtimer.c:478 [inline] enqueue_hrtimer+0x30/0x3c0 kernel/time/hrtimer.c:1085 __run_hrtimer kernel/time/hrtimer.c:1708 [inline] __hrtimer_run_queues+0x6cb/0xd50 kernel/time/hrtimer.c:1755 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1817 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x110/0x420 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:find_stack lib/stackdepot.c:553 [inline] RIP: 0010:stack_depot_save_flags+0x1ac/0x830 lib/stackdepot.c:618 Code: 4c 89 cd e8 f6 f4 c7 ff 49 89 e9 8b 6c 24 04 48 89 da 4c 8b 44 24 08 45 85 e4 75 68 4d 8b 3f 49 39 d7 74 5d 45 39 77 10 75 f2 <45> 39 4f 14 75 ec 31 c0 49 8b 0c c0 49 3b 4c c7 20 75 df 48 ff c0 RSP: 0018:ffffc90000a17d30 EFLAGS: 00000246 RAX: ffff88823ae00000 RBX: 000000009a130dda RCX: 00000000001bf010 RDX: ffff88823afbf010 RSI: 0000000000000001 RDI: 00000000af521416 RBP: 0000000000000001 R08: ffffc90000a17d90 R09: 0000000000000011 R10: dffffc0000000000 R11: fffffbfff203a456 R12: 0000000000000920 R13: 0000000000000011 R14: 000000007b21bf01 R15: ffff888024d47ab0 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_save_track+0x51/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:257 [inline] __do_kmalloc_node mm/slub.c:4264 [inline] __kmalloc_noprof+0x1fc/0x400 mm/slub.c:4276 kmalloc_noprof include/linux/slab.h:882 [inline] kzalloc_noprof include/linux/slab.h:1014 [inline] cfg80211_inform_single_bss_data+0xb2d/0x2090 net/wireless/scan.c:2305 cfg80211_inform_bss_data+0x3ce/0x5e70 net/wireless/scan.c:3184 cfg80211_inform_bss_frame_data+0x3b8/0x720 net/wireless/scan.c:3279 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5225 [inline] ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5462 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485 ieee80211_rx include/net/mac80211.h:5138 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:784 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_kcov_mode kernel/kcov.c:185 [inline] RIP: 0010:write_comp_data kernel/kcov.c:246 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x2f/0x90 kernel/kcov.c:300 Code: 8b 04 24 65 48 8b 14 25 00 d8 03 00 65 8b 05 30 fd 6e 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 <8b> 82 f8 15 00 00 83 f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc RSP: 0018:ffffc900047462a8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000005 RCX: dffffc0000000000 RDX: ffff888025ee1e00 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff8bc07360 R09: ffffffff8bc039b4 R10: 0000000000000012 R11: ffff888025ee1e00 R12: ffffc90004746540 R13: ffffc90004746654 R14: ffffc9000474664f R15: fffffffffffffffe string_nocheck lib/vsprintf.c:647 [inline] string+0x1c0/0x2b0 lib/vsprintf.c:728 vsnprintf+0x1101/0x1da0 lib/vsprintf.c:2803 sprintf+0xda/0x120 lib/vsprintf.c:3007 print_caller kernel/printk/printk.c:1373 [inline] info_print_prefix+0x204/0x310 kernel/printk/printk.c:1390 record_print_text kernel/printk/printk.c:1437 [inline] printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2978 console_emit_next_record kernel/printk/printk.c:3046 [inline] console_flush_all+0x569/0xeb0 kernel/printk/printk.c:3180 __console_flush_and_unlock kernel/printk/printk.c:3239 [inline] console_unlock+0x14f/0x3b0 kernel/printk/printk.c:3279 vprintk_emit+0x730/0xa10 kernel/printk/printk.c:2407 _printk+0xd5/0x120 kernel/printk/printk.c:2432 batadv_check_known_mac_addr+0x2bd/0x410 net/batman-adv/hard-interface.c:528 batadv_hard_if_event+0x3a5/0x1620 net/batman-adv/hard-interface.c:998 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2034 [inline] call_netdevice_notifiers+0xb6/0xf0 net/core/dev.c:2048 do_setlink+0xba1/0x41f0 net/core/rtnetlink.c:2925 __rtnl_newlink net/core/rtnetlink.c:3725 [inline] rtnl_newlink+0x180d/0x20a0 net/core/rtnetlink.c:3772 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2551 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:744 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x292/0x380 net/socket.c:2690 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7f0017e719 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7f00ec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f7f00335f80 RCX: 00007f7f0017e719 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000013 RBP: 00007f7f001f1616 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f7f00335f80 R15: 00007ffc76878618