Extracting prog: 4m34.94356898s Minimizing prog: 55m34.577676964s Simplifying prog options: 9m25.936310851s Extracting C: 1m46.954048617s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program crashed: BUG: soft lockup in sys_clone single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched program crashed: BUG: soft lockup in smp_call_function a never seen crash title: BUG: soft lockup in smp_call_function, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free a never seen crash title: unregister_netdevice: waiting for DEV to become free, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) program did not crash reproducing took 1h11m22.411618631s repro crashed as (corrupted=false): watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [udevd:6033] Modules linked in: irq event stamp: 1088602 hardirqs last enabled at (1088601): [] lruvec_stat_mod_folio include/linux/vmstat.h:557 [inline] hardirqs last enabled at (1088601): [] lruvec_stat_add_folio include/linux/vmstat.h:615 [inline] hardirqs last enabled at (1088601): [] pagetable_pud_ctor include/linux/mm.h:3166 [inline] hardirqs last enabled at (1088601): [] __pud_alloc_one_noprof include/asm-generic/pgalloc.h:178 [inline] hardirqs last enabled at (1088601): [] pud_alloc_one_noprof include/asm-generic/pgalloc.h:195 [inline] hardirqs last enabled at (1088601): [] __pud_alloc+0x1c0/0x5b8 mm/memory.c:6341 hardirqs last disabled at (1088602): [] __el1_irq arch/arm64/kernel/entry-common.c:557 [inline] hardirqs last disabled at (1088602): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:575 softirqs last enabled at (1088508): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1088506): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 CPU: 1 UID: 0 PID: 6033 Comm: udevd Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : save_return_addr+0xa0/0xdc arch/arm64/kernel/return_address.c:25 lr : save_return_addr+0x60/0xdc arch/arm64/kernel/return_address.c:29 sp : ffff8000a2d36ac0 x29: ffff8000a2d36ac0 x28: 1ffff00011e599e8 x27: 00000000f2000000 x26: ffff80008f2cc000 x25: 1ffff000145a6da0 x24: 1ffff000145a6d80 x23: 1ffff000145a6d81 x22: dfff800000000000 x21: 0000000000000000 x20: ffff8000801471d8 x19: ffff8000a2d36c00 x18: 0000000000000000 x17: 0000000000000000 x16: ffff80008b6ab704 x15: 0000000000000001 x14: 1ffff00011f340ca x13: ffff8000a2d38000 x12: ffff8000a2d36cb0 x11: ffff8000a2d36ce0 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : 0000000000000000 x7 : ffff800080a92c7c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : ffff0000c2d41e40 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: save_return_addr+0xa0/0xdc arch/arm64/kernel/return_address.c:32 (P) arch_kunwind_consume_entry arch/arm64/kernel/stacktrace.c:375 [inline] do_kunwind arch/arm64/kernel/stacktrace.c:290 [inline] kunwind_stack_walk arch/arm64/kernel/stacktrace.c:363 [inline] arch_stack_walk+0x2d4/0x478 arch/arm64/kernel/stacktrace.c:387 return_address+0xcc/0x16c arch/arm64/kernel/return_address.c:42 get_lock_parent_ip include/linux/ftrace.h:1001 [inline] preempt_latency_start kernel/sched/core.c:5829 [inline] preempt_count_add+0x100/0x2f8 kernel/sched/core.c:5854 __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] _raw_spin_lock+0x20/0x60 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] __pud_alloc+0x2a8/0x5b8 mm/memory.c:6345 pud_alloc include/linux/mm.h:2856 [inline] copy_pud_range+0x795c/0x8064 mm/memory.c:1278 copy_p4d_range mm/memory.c:1322 [inline] copy_page_range+0x5fc/0xc4c mm/memory.c:1420 dup_mmap kernel/fork.c:748 [inline] dup_mm kernel/fork.c:1691 [inline] copy_mm+0xe68/0x1b58 kernel/fork.c:1743 copy_process+0x1568/0x3250 kernel/fork.c:2394 kernel_clone+0x1d8/0x82c kernel/fork.c:2806 __do_sys_clone kernel/fork.c:2949 [inline] __se_sys_clone kernel/fork.c:2917 [inline] __arm64_sys_clone+0x1f8/0x24c kernel/fork.c:2917 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 671 Comm: kworker/u8:6 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events_unbound toggle_allocation_gate pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_local_irq_enable arch/arm64/include/asm/irqflags.h:48 [inline] pc : handle_softirqs+0x1f4/0xd34 kernel/softirq.c:545 lr : handle_softirqs+0x1ec/0xd34 kernel/softirq.c:545 sp : ffff800080007f00 x29: ffff800080007f80 x28: 00000000000001c6 x27: 1fffe00018e60b59 x26: ffff0001b3822428 x25: ffff0000c7305ad0 x24: ffff0000c7305ac8 x23: ffff0000c7305aec x22: dfff800000000000 x21: ffff80008f8eb1cc x20: 00000000ffffc5bd x19: ffff0001b37f7580 x18: 1fffe000366fc67e x17: ffff800123ef8000 x16: ffff8000804642d0 x15: 0000000000000001 x14: 1ffff00012ea4778 x13: ffff800080008000 x12: 0000000000000003 x11: 0000000000000101 x10: 0000800000000000 x9 : 0000000000000000 x8 : 00000000000fcac0 x7 : ffff80008058ebfc x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff80008b757e80 x0 : ffff800123ef8000 Call trace: __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable arch/arm64/include/asm/irqflags.h:48 [inline] (P) handle_softirqs+0x1f4/0xd34 kernel/softirq.c:545 (P) __do_softirq+0x14/0x20 kernel/softirq.c:595 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:442 [inline] __irq_exit_rcu+0x1d8/0x544 kernel/softirq.c:662 irq_exit_rcu+0x14/0x84 kernel/softirq.c:678 __el1_irq arch/arm64/kernel/entry-common.c:561 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:575 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:580 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __cmpwait_case_32 arch/arm64/include/asm/cmpxchg.h:231 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:257 [inline] (P) csd_lock_wait kernel/smp.c:340 [inline] (P) smp_call_function_many_cond+0x19c8/0x32a8 kernel/smp.c:884 (P) smp_call_function_many kernel/smp.c:908 [inline] smp_call_function kernel/smp.c:930 [inline] kick_all_cpus_sync+0x40/0xa0 kernel/smp.c:1075 arch_jump_label_transform_apply+0x14/0x20 arch/arm64/kernel/jump_label.c:34 __jump_label_update+0x30c/0x334 kernel/jump_label.c:521 jump_label_update+0x30c/0x3bc kernel/jump_label.c:920 static_key_disable_cpuslocked+0xf4/0x1f0 kernel/jump_label.c:240 static_key_disable+0x24/0x38 kernel/jump_label.c:248 toggle_allocation_gate+0x1c4/0x264 mm/kfence/core.c:854 process_one_work+0x7a8/0x15cc kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3317 [inline] worker_thread+0x97c/0xeec kernel/workqueue.c:3398 kthread+0x288/0x310 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 final repro crashed as (corrupted=false): watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [udevd:6033] Modules linked in: irq event stamp: 1088602 hardirqs last enabled at (1088601): [] lruvec_stat_mod_folio include/linux/vmstat.h:557 [inline] hardirqs last enabled at (1088601): [] lruvec_stat_add_folio include/linux/vmstat.h:615 [inline] hardirqs last enabled at (1088601): [] pagetable_pud_ctor include/linux/mm.h:3166 [inline] hardirqs last enabled at (1088601): [] __pud_alloc_one_noprof include/asm-generic/pgalloc.h:178 [inline] hardirqs last enabled at (1088601): [] pud_alloc_one_noprof include/asm-generic/pgalloc.h:195 [inline] hardirqs last enabled at (1088601): [] __pud_alloc+0x1c0/0x5b8 mm/memory.c:6341 hardirqs last disabled at (1088602): [] __el1_irq arch/arm64/kernel/entry-common.c:557 [inline] hardirqs last disabled at (1088602): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:575 softirqs last enabled at (1088508): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1088506): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 CPU: 1 UID: 0 PID: 6033 Comm: udevd Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : save_return_addr+0xa0/0xdc arch/arm64/kernel/return_address.c:25 lr : save_return_addr+0x60/0xdc arch/arm64/kernel/return_address.c:29 sp : ffff8000a2d36ac0 x29: ffff8000a2d36ac0 x28: 1ffff00011e599e8 x27: 00000000f2000000 x26: ffff80008f2cc000 x25: 1ffff000145a6da0 x24: 1ffff000145a6d80 x23: 1ffff000145a6d81 x22: dfff800000000000 x21: 0000000000000000 x20: ffff8000801471d8 x19: ffff8000a2d36c00 x18: 0000000000000000 x17: 0000000000000000 x16: ffff80008b6ab704 x15: 0000000000000001 x14: 1ffff00011f340ca x13: ffff8000a2d38000 x12: ffff8000a2d36cb0 x11: ffff8000a2d36ce0 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : 0000000000000000 x7 : ffff800080a92c7c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : ffff0000c2d41e40 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: save_return_addr+0xa0/0xdc arch/arm64/kernel/return_address.c:32 (P) arch_kunwind_consume_entry arch/arm64/kernel/stacktrace.c:375 [inline] do_kunwind arch/arm64/kernel/stacktrace.c:290 [inline] kunwind_stack_walk arch/arm64/kernel/stacktrace.c:363 [inline] arch_stack_walk+0x2d4/0x478 arch/arm64/kernel/stacktrace.c:387 return_address+0xcc/0x16c arch/arm64/kernel/return_address.c:42 get_lock_parent_ip include/linux/ftrace.h:1001 [inline] preempt_latency_start kernel/sched/core.c:5829 [inline] preempt_count_add+0x100/0x2f8 kernel/sched/core.c:5854 __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] _raw_spin_lock+0x20/0x60 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] __pud_alloc+0x2a8/0x5b8 mm/memory.c:6345 pud_alloc include/linux/mm.h:2856 [inline] copy_pud_range+0x795c/0x8064 mm/memory.c:1278 copy_p4d_range mm/memory.c:1322 [inline] copy_page_range+0x5fc/0xc4c mm/memory.c:1420 dup_mmap kernel/fork.c:748 [inline] dup_mm kernel/fork.c:1691 [inline] copy_mm+0xe68/0x1b58 kernel/fork.c:1743 copy_process+0x1568/0x3250 kernel/fork.c:2394 kernel_clone+0x1d8/0x82c kernel/fork.c:2806 __do_sys_clone kernel/fork.c:2949 [inline] __se_sys_clone kernel/fork.c:2917 [inline] __arm64_sys_clone+0x1f8/0x24c kernel/fork.c:2917 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 671 Comm: kworker/u8:6 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events_unbound toggle_allocation_gate pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_local_irq_enable arch/arm64/include/asm/irqflags.h:48 [inline] pc : handle_softirqs+0x1f4/0xd34 kernel/softirq.c:545 lr : handle_softirqs+0x1ec/0xd34 kernel/softirq.c:545 sp : ffff800080007f00 x29: ffff800080007f80 x28: 00000000000001c6 x27: 1fffe00018e60b59 x26: ffff0001b3822428 x25: ffff0000c7305ad0 x24: ffff0000c7305ac8 x23: ffff0000c7305aec x22: dfff800000000000 x21: ffff80008f8eb1cc x20: 00000000ffffc5bd x19: ffff0001b37f7580 x18: 1fffe000366fc67e x17: ffff800123ef8000 x16: ffff8000804642d0 x15: 0000000000000001 x14: 1ffff00012ea4778 x13: ffff800080008000 x12: 0000000000000003 x11: 0000000000000101 x10: 0000800000000000 x9 : 0000000000000000 x8 : 00000000000fcac0 x7 : ffff80008058ebfc x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff80008b757e80 x0 : ffff800123ef8000 Call trace: __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable arch/arm64/include/asm/irqflags.h:48 [inline] (P) handle_softirqs+0x1f4/0xd34 kernel/softirq.c:545 (P) __do_softirq+0x14/0x20 kernel/softirq.c:595 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:442 [inline] __irq_exit_rcu+0x1d8/0x544 kernel/softirq.c:662 irq_exit_rcu+0x14/0x84 kernel/softirq.c:678 __el1_irq arch/arm64/kernel/entry-common.c:561 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:575 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:580 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __cmpwait_case_32 arch/arm64/include/asm/cmpxchg.h:231 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:257 [inline] (P) csd_lock_wait kernel/smp.c:340 [inline] (P) smp_call_function_many_cond+0x19c8/0x32a8 kernel/smp.c:884 (P) smp_call_function_many kernel/smp.c:908 [inline] smp_call_function kernel/smp.c:930 [inline] kick_all_cpus_sync+0x40/0xa0 kernel/smp.c:1075 arch_jump_label_transform_apply+0x14/0x20 arch/arm64/kernel/jump_label.c:34 __jump_label_update+0x30c/0x334 kernel/jump_label.c:521 jump_label_update+0x30c/0x3bc kernel/jump_label.c:920 static_key_disable_cpuslocked+0xf4/0x1f0 kernel/jump_label.c:240 static_key_disable+0x24/0x38 kernel/jump_label.c:248 toggle_allocation_gate+0x1c4/0x264 mm/kfence/core.c:854 process_one_work+0x7a8/0x15cc kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3317 [inline] worker_thread+0x97c/0xeec kernel/workqueue.c:3398 kthread+0x288/0x310 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862