watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.2:9654] Modules linked in: irq event stamp: 3619083 hardirqs last enabled at (3619082): [<ffffffff87400976>] restore_regs_and_return_to_kernel+0x0/0x2a hardirqs last disabled at (3619083): [<ffffffff874018ae>] apic_timer_interrupt+0x8e/0xa0 arch/x86/entry/entry_64.S:793 softirqs last enabled at (82654): [<ffffffff868b1f15>] dccp_sendmsg+0x1d5/0x890 net/dccp/proto.c:784 softirqs last disabled at (82735): [<ffffffff81321cf3>] invoke_softirq kernel/softirq.c:368 [inline] softirqs last disabled at (82735): [<ffffffff81321cf3>] irq_exit+0x193/0x240 kernel/softirq.c:409 CPU: 0 PID: 9654 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 task: ffff8880a03b0080 task.stack: ffff88806b248000 RIP: 0010:is_module_text_address+0x0/0x50 kernel/module.c:4355 RSP: 0018:ffff8880ba4078a0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff10 RAX: 0000000000000001 RBX: 00007f699a247279 RCX: 1ffffffff1198fac RDX: 0000000000000000 RSI: ffffffff87cd0400 RDI: 00007f699a247279 RBP: 00007f699a247279 R08: ffffffff8ae14b34 R09: ffffffff8ae14b35 R10: 00000000001465ab R11: 0000000000000001 R12: ffff8880ba407980 R13: 0000000000000000 R14: ffff8880b5538900 R15: 00000000000000e8 FS: 00007f6998bbc700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555555613708 CR3: 00000000a1136000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <IRQ> kernel_text_address kernel/extable.c:144 [inline] kernel_text_address+0x62/0xf0 kernel/extable.c:120 __kernel_text_address+0x9/0x30 kernel/extable.c:105 unwind_get_return_address arch/x86/kernel/unwind_orc.c:252 [inline] unwind_get_return_address+0x51/0x90 arch/x86/kernel/unwind_orc.c:247 __save_stack_trace+0xa0/0x160 arch/x86/kernel/stacktrace.c:45 save_stack mm/kasan/kasan.c:447 [inline] set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:551 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc_node mm/slab.c:3333 [inline] kmem_cache_alloc_node+0x133/0x410 mm/slab.c:3640 __alloc_skb+0x5c/0x510 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:980 [inline] ndisc_alloc_skb+0x134/0x310 net/ipv6/ndisc.c:402 ndisc_send_rs+0x2ec/0x630 net/ipv6/ndisc.c:661 addrconf_rs_timer+0x2bb/0x5a0 net/ipv6/addrconf.c:3773 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1280 expire_timers+0x232/0x4d0 kernel/time/timer.c:1319 __run_timers kernel/time/timer.c:1637 [inline] run_timer_softirq+0x1d5/0x5a0 kernel/time/timer.c:1650 __do_softirq+0x24d/0x9ff kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x193/0x240 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:638 [inline] smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1106 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 </IRQ> RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:slab_alloc_node mm/slab.c:3327 [inline] RIP: 0010:kmem_cache_alloc_node+0x30c/0x410 mm/slab.c:3640 RSP: 0018:ffff88806b24f748 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 RAX: 0000000000000007 RBX: 00000000014000c0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000286 RBP: ffff8880b5538900 R08: ffffffff8b9c29f8 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff R13: ffff88809ee5d3c0 R14: 00000000014000c0 R15: ffff8880b5538900 __alloc_skb+0x5c/0x510 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:980 [inline] alloc_skb_with_frags+0x85/0x500 net/core/skbuff.c:5259 sock_alloc_send_pskb+0x577/0x6d0 net/core/sock.c:2101 dccp_sendmsg+0x1e8/0x890 net/dccp/proto.c:785 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 ___sys_sendmsg+0x326/0x800 net/socket.c:2062 __sys_sendmmsg+0x129/0x330 net/socket.c:2152 SYSC_sendmmsg net/socket.c:2183 [inline] SyS_sendmmsg+0x2f/0x50 net/socket.c:2178 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f699a247279 RSP: 002b:00007f6998bbc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f699a359f80 RCX: 00007f699a247279 RDX: 04000000000000d0 RSI: 0000000020003d40 RDI: 0000000000000007 RBP: 00007f699a2a1189 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd164aa79f R14: 00007f6998bbc300 R15: 0000000000022000 Code: 89 c7 74 21 e8 b2 16 ff ff bf 01 00 00 00 e8 68 3f eb ff 65 8b 05 c1 9b b4 7e 85 c0 75 ca e8 5c 38 b2 ff 5d c3 0f 0b 0f 1f 40 00 <41> 54 55 48 89 fd bf 01 00 00 00 e8 70 40 eb ff 48 89 ef e8 38 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 9643 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 task: ffff88809f4684c0 task.stack: ffff88806b0a8000 RIP: 0010:rcu_irq_enter+0x60/0x150 kernel/rcu/tree.c:1022 RSP: 0018:ffff8880ba5076f8 EFLAGS: 00000006 RAX: 0000000000000001 RBX: 000000000002ca80 RCX: 0000000000000001 RDX: 0000000000000100 RSI: ffffffff87cd0400 RDI: ffffffff87cd0440 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f56c5ff4700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f147ad23718 CR3: 00000000a2753000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <IRQ> irq_enter+0x6/0xd0 kernel/softirq.c:342 ipi_entering_ack_irq arch/x86/include/asm/apic.h:631 [inline] smp_irq_work_interrupt+0x9/0x4e0 arch/x86/kernel/irq_work.c:18 irq_work_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:824 RIP: 0010:preempt_count_add+0x64/0x170 kernel/sched/core.c:3110 RSP: 0018:ffff8880ba5077f8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff09 RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 1ffffffff17d99b0 RSI: ffff8880ba5077c0 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 R10: ffff8880ba507e60 R11: 0000000000000001 R12: ffff8880ba507958 R13: ffff8880ba507908 R14: ffff88813fe74940 R15: ffff8880ba5078d0 unwind_next_frame+0xc2/0x17d0 arch/x86/kernel/unwind_orc.c:333 __save_stack_trace+0x90/0x160 arch/x86/kernel/stacktrace.c:44 save_stack mm/kasan/kasan.c:447 [inline] set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:551 slab_post_alloc_hook mm/slab.h:442 [inline] slab_alloc_node mm/slab.c:3333 [inline] kmem_cache_alloc_node_trace+0x13d/0x400 mm/slab.c:3659 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node_track_caller+0x38/0x70 mm/slab.c:3696 __kmalloc_reserve net/core/skbuff.c:137 [inline] __alloc_skb+0x96/0x510 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:980 [inline] ndisc_alloc_skb+0x134/0x310 net/ipv6/ndisc.c:402 ndisc_send_rs+0x2ec/0x630 net/ipv6/ndisc.c:661 addrconf_rs_timer+0x2bb/0x5a0 net/ipv6/addrconf.c:3773 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1280 expire_timers+0x232/0x4d0 kernel/time/timer.c:1319 __run_timers kernel/time/timer.c:1637 [inline] run_timer_softirq+0x1d5/0x5a0 kernel/time/timer.c:1650 __do_softirq+0x24d/0x9ff kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x193/0x240 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:638 [inline] smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1106 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 </IRQ> RIP: 0010:dccp_feat_signal_nn_change+0x0/0x6c0 net/dccp/feat.c:807 RSP: 0018:ffff88806b0af750 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff10 RAX: 0000000000040000 RBX: dffffc0000000000 RCX: ffffc900073de000 RDX: 0000000000000001 RSI: 0000000000000005 RDI: ffff88809a1d00c0 RBP: ffff8880a13945c0 R08: 0000000000000004 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 R13: ffff88809a1d0890 R14: 0000000000000014 R15: ffff88806b170e80 ccid2_new_ack net/dccp/ccids/ccid2.c:469 [inline] ccid2_hc_tx_packet_recv+0x16a0/0x2290 net/dccp/ccids/ccid2.c:633 ccid_hc_tx_packet_recv net/dccp/ccid.h:192 [inline] dccp_deliver_input_to_ccids+0x1ca/0x240 net/dccp/input.c:186 dccp_rcv_established net/dccp/input.c:378 [inline] dccp_rcv_established+0xdb/0x140 net/dccp/input.c:368 dccp_v6_do_rcv+0x7ff/0xa40 net/dccp/ipv6.c:611 sk_backlog_rcv include/net/sock.h:923 [inline] __release_sock+0x12a/0x350 net/core/sock.c:2284 release_sock+0x54/0x1b0 net/core/sock.c:2822 dccp_sendmsg+0x4eb/0x890 net/dccp/proto.c:813 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 ___sys_sendmsg+0x326/0x800 net/socket.c:2062 __sys_sendmmsg+0x129/0x330 net/socket.c:2152 SYSC_sendmmsg net/socket.c:2183 [inline] SyS_sendmmsg+0x2f/0x50 net/socket.c:2178 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f56c767f279 RSP: 002b:00007f56c5ff4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f56c7791f80 RCX: 00007f56c767f279 RDX: 04000000000000d0 RSI: 0000000020003d40 RDI: 0000000000000007 RBP: 00007f56c76d9189 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbf74946f R14: 00007f56c5ff4300 R15: 0000000000022000 Code: 00 48 83 3d a2 57 a9 07 00 0f 84 db 00 00 00 9c 58 0f 1f 44 00 00 f6 c4 02 0f 85 9c 00 00 00 e8 e7 cb d2 01 48 c7 c3 80 ca 02 00 <48> ba 00 00 00 00 00 fc ff df 89 c0 48 8d 3c c5 60 7d cc 88 48