INFO: task syz.0.78:7283 blocked for more than 143 seconds. Not tainted 6.14.0-rc3-syzkaller-g29b036be1b0b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.78 state:D stack:26976 pid:7283 tgid:7275 ppid:6656 task_flags:0x400040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 genl_lock net/netlink/genetlink.c:35 [inline] genl_op_lock net/netlink/genetlink.c:60 [inline] genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x206/0x480 net/netlink/af_netlink.c:2533 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1338 netlink_sendmsg+0x8de/0xcb0 net/netlink/af_netlink.c:1882 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:733 __sys_sendto+0x363/0x4c0 net/socket.c:2187 __do_sys_sendto net/socket.c:2194 [inline] __se_sys_sendto net/socket.c:2190 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2190 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6db3b87bbc RSP: 002b:00007f6db2ddbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f6db2ddbfc0 RCX: 00007f6db3b87bbc RDX: 0000000000000020 RSI: 00007f6db2ddc010 RDI: 0000000000000007 RBP: 0000000000000000 R08: 00007f6db2ddbf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 R13: 00007f6db2ddbf68 R14: 00007f6db2ddc010 R15: 0000000000000000 INFO: task syz.1.79:7287 blocked for more than 143 seconds. Not tainted 6.14.0-rc3-syzkaller-g29b036be1b0b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.79 state:D stack:27472 pid:7287 tgid:7281 ppid:6658 task_flags:0x400040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 genl_lock net/netlink/genetlink.c:35 [inline] genl_op_lock net/netlink/genetlink.c:60 [inline] genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x206/0x480 net/netlink/af_netlink.c:2533 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1338 netlink_sendmsg+0x8de/0xcb0 net/netlink/af_netlink.c:1882 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:733 __sys_sendto+0x363/0x4c0 net/socket.c:2187 __do_sys_sendto net/socket.c:2194 [inline] __se_sys_sendto net/socket.c:2190 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2190 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f38ae187bbc RSP: 002b:00007f38ad3baec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f38ad3bafc0 RCX: 00007f38ae187bbc RDX: 0000000000000020 RSI: 00007f38ad3bb010 RDI: 0000000000000007 RBP: 0000000000000000 R08: 00007f38ad3baf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 R13: 00007f38ad3baf68 R14: 00007f38ad3bb010 R15: 0000000000000000 INFO: task syz.4.80:7297 blocked for more than 144 seconds. Not tainted 6.14.0-rc3-syzkaller-g29b036be1b0b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.80 state:D stack:27472 pid:7297 tgid:7290 ppid:6676 task_flags:0x400040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 genl_lock net/netlink/genetlink.c:35 [inline] genl_op_lock net/netlink/genetlink.c:60 [inline] genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x206/0x480 net/netlink/af_netlink.c:2533 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1338 netlink_sendmsg+0x8de/0xcb0 net/netlink/af_netlink.c:1882 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:733 __sys_sendto+0x363/0x4c0 net/socket.c:2187 __do_sys_sendto net/socket.c:2194 [inline] __se_sys_sendto net/socket.c:2190 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2190 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8096d87bbc RSP: 002b:00007f8097aeaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f8097aeafc0 RCX: 00007f8096d87bbc RDX: 0000000000000020 RSI: 00007f8097aeb010 RDI: 0000000000000007 RBP: 0000000000000000 R08: 00007f8097aeaf14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 R13: 00007f8097aeaf68 R14: 00007f8097aeb010 R15: 0000000000000000 INFO: task syz.2.81:7301 blocked for more than 144 seconds. Not tainted 6.14.0-rc3-syzkaller-g29b036be1b0b #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.81 state:D stack:27472 pid:7301 tgid:7294 ppid:6670 task_flags:0x400040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914 __mutex_lock_common kernel/locking/mutex.c:662 [inline] __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730 genl_lock net/netlink/genetlink.c:35 [inline] genl_op_lock net/netlink/genetlink.c:60 [inline] genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 netlink_rcv_skb+0x206/0x480 net/netlink/af_netlink.c:2533 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1338 netlink_sendmsg+0x8de/0xcb0 net/netlink/af_netlink.c:1882 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:733 __sys_sendto+0x363/0x4c0 net/socket.c:2187 __do_sys_sendto net/socket.c:2194 [inline] __se_sys_sendto net/socket.c:2190 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2190 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f776ed87bbc RSP: 002b:00007f776fb60ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f776fb60fc0 RCX: 00007f776ed87bbc RDX: 0000000000000020 RSI: 00007f776fb61010 RDI: 0000000000000007 RBP: 0000000000000000 R08: 00007f776fb60f14 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 R13: 00007f776fb60f68 R14: 00007f776fb61010 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746 3 locks held by kworker/u8:4/62: 2 locks held by getty/5596: #0: ffff888035c8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 drivers/tty/n_tty.c:2211 6 locks held by syz.3.77/7272: 2 locks held by syz.0.78/7283: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz.1.79/7287: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz.4.80/7297: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz.2.81/7301: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7647: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7649: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7652: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7657: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7659: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7700: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7706: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7708: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7709: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7711: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7762: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7763: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7768: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7771: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor/7776: #0: ffffffff8ff39090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ff38f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 net/netlink/genetlink.c:1209 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-g29b036be1b0b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline] watchdog+0x1058/0x10a0 kernel/hung_task.c:399 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.14.0-rc3-syzkaller-g29b036be1b0b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: events_unbound nsim_dev_trap_report_work RIP: 0010:rdtsc_ordered arch/x86/include/asm/msr.h:217 [inline] RIP: 0010:__pvclock_clocksource_read arch/x86/kernel/pvclock.c:77 [inline] RIP: 0010:pvclock_clocksource_read_nowd+0x4a/0xf0 arch/x86/kernel/pvclock.c:120 Code: 89 e1 48 d3 e3 4c 89 2c 24 48 89 d8 48 f7 24 24 48 0f ac d0 20 49 8b 4e 10 41 0f b6 56 1d 41 8b 36 39 ee 89 f5 74 5d 0f 01 f9 <66> 90 48 89 d3 48 c1 e3 20 48 09 c3 49 2b 5e 08 83 e5 fe 45 8b 6e RSP: 0018:ffffc90000a18dd8 EFLAGS: 00000086 RAX: 0000000024161140 RBX: ffffffff8e54fb58 RCX: 0000000000000001 RDX: 0000000000000099 RSI: ffffffff8c80eea0 RDI: ffffffff9344d040 RBP: 0000000000000004 R08: ffffffff815fdbf4 R09: 1ffffffff2079d4e R10: dffffc0000000000 R11: fffffbfff2079d4f R12: ffffc90000a18ea0 R13: 1ffff920001431d0 R14: ffffffff9344d040 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc4fab0208 CR3: 000000000e938000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_sched_clock_read+0x11/0x20 arch/x86/kernel/kvmclock.c:91 sched_clock+0x19/0x70 arch/x86/kernel/tsc.c:287 sched_clock_cpu+0x76/0x490 kernel/sched/clock.c:394 irqtime_account_irq+0x68/0x1d0 kernel/sched/cputime.c:64 account_hardirq_exit include/linux/vtime.h:154 [inline] __irq_exit_rcu+0xba/0x220 kernel/softirq.c:659 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline] sysvec_irq_work+0xa3/0xc0 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738 RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:36 [inline] RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:149 [inline] RIP: 0010:wrmsr arch/x86/include/asm/msr.h:256 [inline] RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:212 Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 93 f4 c2 03 0f 1f RSP: 0018:ffffc9000213f5c8 EFLAGS: 00000246 RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f RBP: 0000000000000000 R08: ffffffff815fda8e R09: 1ffff92000427ea4 R10: dffffc0000000000 R11: fffff52000427ea5 R12: ffffffff8ec52408 R13: 0000000000000000 R14: 2c1008001f8bfbff R15: 0000000000000020 __apic_send_IPI_self arch/x86/include/asm/apic.h:455 [inline] arch_irq_work_raise+0x6f/0x80 arch/x86/kernel/irq_work.c:31 irq_work_queue+0xa7/0x150 kernel/irq_work.c:124 __kfence_alloc+0x2b0/0x400 mm/kfence/core.c:1114 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4148 [inline] kmem_cache_alloc_node_noprof+0x2c8/0x380 mm/slub.c:4216 __alloc_skb+0x1c3/0x440 net/core/skbuff.c:596 alloc_skb include/linux/skbuff.h:1331 [inline] nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:748 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:805 [inline] nsim_dev_trap_report_work+0x261/0xb50 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244