ci starts bisection 2024-02-09 14:03:55.136253552 +0000 UTC m=+80747.509523382 bisecting cause commit starting from 1f719a2f3fa67665578c759ac34fd3d3690c1a20 building syzkaller on 7f07e9b0e2d1b715e875a446eea8399f9bb8a4b2 ensuring issue is reproducible on original commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 testing commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cca9396369a92da5924db9a165df8a4ca42d5c6f46de35134fbf35dc2e606160 all runs: crashed: INFO: task hung in unix_dgram_sendmsg representative crash: INFO: task hung in unix_dgram_sendmsg, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9bb6351018b68e7d1e19fb35b189a0e5cab351d7132cac350d1668520770c9c7 all runs: crashed: INFO: task hung in unix_dgram_sendmsg representative crash: INFO: task hung in unix_dgram_sendmsg, types: [HANG] the bug reproduces without the instrumentation disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed kconfig minimization: base=3940 full=7960 leaves diff=2018 split chunks (needed=false): <2018> split chunk #0 of len 2018 into 5 parts testing without sub-chunk 1/5 disabling configs for [BUG KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN], they are not needed testing commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 43ae7abd8ec2d5fd3567fe26b82430c12b3d1994b98613844064b15db4494a62 all runs: crashed: INFO: task hung in unix_dgram_sendmsg representative crash: INFO: task hung in unix_dgram_sendmsg, types: [HANG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 042419a3887edb641f6a449823c2f921a77233d15824d40471ff1e0ef3fba40c all runs: crashed: INFO: task hung in unix_dgram_sendmsg representative crash: INFO: task hung in unix_dgram_sendmsg, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c342e7ee7b115606622b2ab507474e594e561e18c27baf8bdb85a0d21c279eaa all runs: crashed: INFO: task hung in unix_dgram_sendmsg representative crash: INFO: task hung in unix_dgram_sendmsg, types: [HANG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5dce837704c9608c8fa9181717dd8efc2aae7ca5c24cfb48fabfcc80f82f6704 run #0: infra problem: failed to delete instance: googleapi: Error 503: The service is currently unavailable., backendError run #1: crashed: BUG: soft lockup in unix_release run #2: crashed: BUG: soft lockup in unix_release run #3: crashed: BUG: soft lockup in unix_release run #4: crashed: BUG: soft lockup in unix_release run #5: crashed: BUG: soft lockup in unix_release run #6: crashed: BUG: soft lockup in unix_release run #7: crashed: BUG: soft lockup in unix_release run #8: crashed: BUG: soft lockup in unix_release run #9: crashed: BUG: soft lockup in unix_release representative crash: BUG: soft lockup in unix_release, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 1f719a2f3fa67665578c759ac34fd3d3690c1a20 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 79e1f58a22cbe416f5230659c4c2b061916753b223a0d238ede3babb1b9b7427 all runs: crashed: BUG: soft lockup in unix_release representative crash: BUG: soft lockup in unix_release, types: [HANG] the chunk can be dropped disabling configs for [LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG KASAN], they are not needed picked [v6.7 v6.6 v6.5 v6.3 v6.1 v5.19 v5.17 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 30 release tags testing release v6.7 testing commit 0dd3ee31125508cd67f7e7172247f05b7fd1753a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4f1d07a86877ebbb03c1219c82281a30ea0ada32529c805339c99e6b254ecc12 all runs: OK false negative chance: 0.000 # git bisect start 1f719a2f3fa67665578c759ac34fd3d3690c1a20 0dd3ee31125508cd67f7e7172247f05b7fd1753a Bisecting: 7822 revisions left to test after this (roughly 13 steps) [ba5afb9a84df2e6b26a1b6389b98849cd16ea757] fs: rework listmount() implementation testing commit ba5afb9a84df2e6b26a1b6389b98849cd16ea757 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 78f1c0644c130d43da2e346794118d38a662e10a7b8308b40df65c42f8900990 all runs: OK false negative chance: 0.000 # git bisect good ba5afb9a84df2e6b26a1b6389b98849cd16ea757 Bisecting: 4001 revisions left to test after this (roughly 12 steps) [5aa1c96e8ef347430e7a7c898f290425d1b568ef] Merge branch 'master' into mm-hotfixes-stable testing commit 5aa1c96e8ef347430e7a7c898f290425d1b568ef gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1f41f218cf3c92bb79ddd5b959cdb8bd67237d4ba2d943c17346a33761974720 all runs: OK false negative chance: 0.000 # git bisect good 5aa1c96e8ef347430e7a7c898f290425d1b568ef Bisecting: 1990 revisions left to test after this (roughly 11 steps) [0f289bdd4102fc870c8b97652c57d41952040d70] Merge tag 'input-for-v6.8-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input testing commit 0f289bdd4102fc870c8b97652c57d41952040d70 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0ee7b963ee5073e5831d5f8eb150552bf425ac49cee5ec049e3f76e74100bf13 all runs: OK false negative chance: 0.000 # git bisect good 0f289bdd4102fc870c8b97652c57d41952040d70 Bisecting: 996 revisions left to test after this (roughly 10 steps) [3eab830189d94f0f80f34cbff609b5bb54002679] uselib: remove use of __FMODE_EXEC testing commit 3eab830189d94f0f80f34cbff609b5bb54002679 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 63f81403724512c0edb74ef02db9ff9ea0356cb3f222b1d206b03aebab92041f all runs: OK false negative chance: 0.000 # git bisect good 3eab830189d94f0f80f34cbff609b5bb54002679 Bisecting: 541 revisions left to test after this (roughly 9 steps) [91481c9092465d68bcb4540ac0dbfd65024a0170] Merge tag 'parisc-for-6.8-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux testing commit 91481c9092465d68bcb4540ac0dbfd65024a0170 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 999e8a3a32f66194058409a6ba5e3ce29883352b7a0c3fd5b5e5bcf7f5dc14e5 all runs: OK false negative chance: 0.000 # git bisect good 91481c9092465d68bcb4540ac0dbfd65024a0170 Bisecting: 267 revisions left to test after this (roughly 8 steps) [9c2f0338bbd132a4b12b988004d796798609d297] Merge tag 'drm-fixes-2024-02-03' of git://anongit.freedesktop.org/drm/drm testing commit 9c2f0338bbd132a4b12b988004d796798609d297 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 79b3e922fc48a49f2f21b3f515a4690b7dc9baf774bf2cff2e39c10e68c188c2 all runs: OK false negative chance: 0.000 # git bisect good 9c2f0338bbd132a4b12b988004d796798609d297 Bisecting: 133 revisions left to test after this (roughly 7 steps) [6b79ecd084c99b31c8b4d0beda08893716d5558e] LoongArch: Select HAVE_ARCH_SECCOMP to use the common SECCOMP menu testing commit 6b79ecd084c99b31c8b4d0beda08893716d5558e gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e79a35590acec36186b454d07578dac0eac24531d79de63a1cfd54b0f1ad45d0 all runs: OK false negative chance: 0.000 # git bisect good 6b79ecd084c99b31c8b4d0beda08893716d5558e Bisecting: 66 revisions left to test after this (roughly 6 steps) [335bac1daae3fd9070d0f9f34d7d7ba708729256] Merge tag 'wireless-2024-02-06' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless testing commit 335bac1daae3fd9070d0f9f34d7d7ba708729256 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9671b0debd57165e8edcd118a438d6f41acf75bb4bb8c01dcf697dfdad1abcbc all runs: crashed: BUG: soft lockup in unix_release representative crash: BUG: soft lockup in unix_release, types: [HANG] # git bisect bad 335bac1daae3fd9070d0f9f34d7d7ba708729256 Bisecting: 33 revisions left to test after this (roughly 5 steps) [4b00d0c513da58b68df015968721b11396fe4ab3] selftests: cmsg_ipv6: repeat the exact packet testing commit 4b00d0c513da58b68df015968721b11396fe4ab3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2dfc88d99400e92984ea67ae25c634df96308d0a154bbc5a7369b3fdc7e89b49 all runs: crashed: BUG: soft lockup in unix_release representative crash: BUG: soft lockup in unix_release, types: [HANG] # git bisect bad 4b00d0c513da58b68df015968721b11396fe4ab3 Bisecting: 16 revisions left to test after this (roughly 4 steps) [b3d4f7f2288901ed2392695919b3c0e24c1b4084] nfp: use correct macro for LengthSelect in BAR config testing commit b3d4f7f2288901ed2392695919b3c0e24c1b4084 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ebefd331a4c6fb662eb66e706493690d9c0f219f2e9be43785c26d4400eb3ec2 all runs: OK false negative chance: 0.000 # git bisect good b3d4f7f2288901ed2392695919b3c0e24c1b4084 Bisecting: 8 revisions left to test after this (roughly 3 steps) [645eb54331edb0dc0297c7e37162a3846bf99300] Merge branch 'rxrpc-fixes' testing commit 645eb54331edb0dc0297c7e37162a3846bf99300 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 323d5e32ad0c479de167c187584caf606abc2322738522dcc4abc2b9e742ce68 all runs: OK false negative chance: 0.000 # git bisect good 645eb54331edb0dc0297c7e37162a3846bf99300 Bisecting: 4 revisions left to test after this (roughly 2 steps) [1ce2654d87e2fb91fea83b288bd9b2641045e42a] net: stmmac: xgmac: fix a typo of register name in DPP safety handling testing commit 1ce2654d87e2fb91fea83b288bd9b2641045e42a gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f73f8285449204aded726aadd0baeccb202f2d436254f1dd1130365914cb372a all runs: OK false negative chance: 0.000 # git bisect good 1ce2654d87e2fb91fea83b288bd9b2641045e42a Bisecting: 2 revisions left to test after this (roughly 1 step) [58086721b7781c3e35b19c9b78c8f5a791070ba3] devlink: avoid potential loop in devlink_rel_nested_in_notify_work() testing commit 58086721b7781c3e35b19c9b78c8f5a791070ba3 gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8b1b65e302e152a07ab482772e809ead05366a2d4d43295e81df36d10e957763 all runs: crashed: BUG: soft lockup in unix_release representative crash: BUG: soft lockup in unix_release, types: [HANG] # git bisect bad 58086721b7781c3e35b19c9b78c8f5a791070ba3 Bisecting: 0 revisions left to test after this (roughly 0 steps) [1279f9d9dec2d7462823a18c29ad61359e0a007d] af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. testing commit 1279f9d9dec2d7462823a18c29ad61359e0a007d gcc compiler: gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 884e167226c50e72e87b287805df6186536baacad5ed21a8aec5419a5d71c82d all runs: crashed: BUG: soft lockup in unix_release representative crash: BUG: soft lockup in unix_release, types: [HANG] # git bisect bad 1279f9d9dec2d7462823a18c29ad61359e0a007d 1279f9d9dec2d7462823a18c29ad61359e0a007d is the first bad commit commit 1279f9d9dec2d7462823a18c29ad61359e0a007d Author: Kuniyuki Iwashima Date: Sat Feb 3 10:31:49 2024 -0800 af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. syzbot reported a warning [0] in __unix_gc() with a repro, which creates a socketpair and sends one socket's fd to itself using the peer. socketpair(AF_UNIX, SOCK_STREAM, 0, [3, 4]) = 0 sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\360", iov_len=1}], msg_iovlen=1, msg_control=[{cmsg_len=20, cmsg_level=SOL_SOCKET, cmsg_type=SCM_RIGHTS, cmsg_data=[3]}], msg_controllen=24, msg_flags=0}, MSG_OOB|MSG_PROBE|MSG_DONTWAIT|MSG_ZEROCOPY) = 1 This forms a self-cyclic reference that GC should finally untangle but does not due to lack of MSG_OOB handling, resulting in memory leak. Recently, commit 11498715f266 ("af_unix: Remove io_uring code for GC.") removed io_uring's dead code in GC and revealed the problem. The code was executed at the final stage of GC and unconditionally moved all GC candidates from gc_candidates to gc_inflight_list. That papered over the reported problem by always making the following WARN_ON_ONCE(!list_empty(&gc_candidates)) false. The problem has been there since commit 2aab4b969002 ("af_unix: fix struct pid leaks in OOB support") added full scm support for MSG_OOB while fixing another bug. To fix this problem, we must call kfree_skb() for unix_sk(sk)->oob_skb if the socket still exists in gc_candidates after purging collected skb. Then, we need to set NULL to oob_skb before calling kfree_skb() because it calls last fput() and triggers unix_release_sock(), where we call duplicate kfree_skb(u->oob_skb) if not NULL. Note that the leaked socket remained being linked to a global list, so kmemleak also could not detect it. We need to check /proc/net/protocol to notice the unfreed socket. [0]: WARNING: CPU: 0 PID: 2863 at net/unix/garbage.c:345 __unix_gc+0xc74/0xe80 net/unix/garbage.c:345 Modules linked in: CPU: 0 PID: 2863 Comm: kworker/u4:11 Not tainted 6.8.0-rc1-syzkaller-00583-g1701940b1a02 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Workqueue: events_unbound __unix_gc RIP: 0010:__unix_gc+0xc74/0xe80 net/unix/garbage.c:345 Code: 8b 5c 24 50 e9 86 f8 ff ff e8 f8 e4 22 f8 31 d2 48 c7 c6 30 6a 69 89 4c 89 ef e8 97 ef ff ff e9 80 f9 ff ff e8 dd e4 22 f8 90 <0f> 0b 90 e9 7b fd ff ff 48 89 df e8 5c e7 7c f8 e9 d3 f8 ff ff e8 RSP: 0018:ffffc9000b03fba0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffffc9000b03fc10 RCX: ffffffff816c493e RDX: ffff88802c02d940 RSI: ffffffff896982f3 RDI: ffffc9000b03fb30 RBP: ffffc9000b03fce0 R08: 0000000000000001 R09: fffff52001607f66 R10: 0000000000000003 R11: 0000000000000002 R12: dffffc0000000000 R13: ffffc9000b03fc10 R14: ffffc9000b03fc10 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005559c8677a60 CR3: 000000000d57a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_work+0x889/0x15e0 kernel/workqueue.c:2633 process_scheduled_works kernel/workqueue.c:2706 [inline] worker_thread+0x8b9/0x12a0 kernel/workqueue.c:2787 kthread+0x2c6/0x3b0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:242 Reported-by: syzbot+fa3ef895554bdbfd1183@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=fa3ef895554bdbfd1183 Fixes: 2aab4b969002 ("af_unix: fix struct pid leaks in OOB support") Signed-off-by: Kuniyuki Iwashima Reviewed-by: Eric Dumazet Link: https://lore.kernel.org/r/20240203183149.63573-1-kuniyu@amazon.com Signed-off-by: Jakub Kicinski net/unix/garbage.c | 11 +++++++++++ 1 file changed, 11 insertions(+) accumulated error probability: 0.00 culprit signature: 884e167226c50e72e87b287805df6186536baacad5ed21a8aec5419a5d71c82d parent signature: f73f8285449204aded726aadd0baeccb202f2d436254f1dd1130365914cb372a revisions tested: 22, total time: 4h31m17.492753182s (build: 1h15m16.73026384s, test: 3h3m33.993668671s) first bad commit: 1279f9d9dec2d7462823a18c29ad61359e0a007d af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. recipients (to): ["edumazet@google.com" "kuba@kernel.org" "kuniyu@amazon.com"] recipients (cc): [] crash: BUG: soft lockup in unix_release watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz-executor.0:1856] Modules linked in: CPU: 0 PID: 1856 Comm: syz-executor.0 Not tainted 6.8.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:unix_gc+0x211/0x620 net/unix/garbage.c:318 Code: 89 c3 48 8b ba 70 07 00 00 48 85 ff 74 15 48 c7 82 70 07 00 00 00 00 00 00 be 02 00 00 00 e8 06 87 e7 ff 48 8b 83 30 06 00 00 <48> 8d 8b 30 06 00 00 48 89 da 48 2d 30 06 00 00 48 81 f9 d0 69 87 RSP: 0018:ffffc90000fbfd60 EFLAGS: 00000246 RAX: ffff88810131c9b0 RBX: ffff88810131c380 RCX: ffff88810131c9b0 RDX: ffff88810131c380 RSI: 00000000000347b0 RDI: 0000000000000000 RBP: ffffc90000fbfe20 R08: 0000000000080001 R09: ffff8881056f09e0 R10: 0000000000080000 R11: 0000000000000001 R12: ffffffff828769d0 R13: ffffc90000fbfd90 R14: ffffc90000fbfd80 R15: ffffffff82876aa0 FS: 000055555610e480(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055555610eda8 CR3: 000000010fef8000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: unix_release_sock+0x3b9/0x460 net/unix/af_unix.c:683 unix_release+0x2d/0x40 net/unix/af_unix.c:1064 __sock_release+0x35/0xc0 net/socket.c:659 sock_close+0x13/0x20 net/socket.c:1421 __fput+0x8d/0x2c0 fs/file_table.c:376 __do_sys_close fs/open.c:1554 [inline] __se_sys_close fs/open.c:1539 [inline] __x64_sys_close+0x38/0x80 fs/open.c:1539 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x73/0x180 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7feba1014c9a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 RSP: 002b:00007ffc40ddaac0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007feba1014c9a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 RBP: 0000000000000032 R08: 0000001b33560000 R09: 00007feba1143f8c R10: 00007ffc40ddac10 R11: 0000000000000293 R12: 00007feba0b98450 R13: ffffffffffffffff R14: 00007feba0b98000 R15: 000000000000a312 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] NMI backtrace for cpu 1 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1b/0x30 drivers/acpi/processor_idle.c:112