watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz.2.141:6043]
Modules linked in:
irq event stamp: 4895207
hardirqs last  enabled at (4895206): [<ffffffff8becef08>] irqentry_exit+0x218/0x910
hardirqs last disabled at (4895207): [<ffffffff8becdc2e>] sysvec_apic_timer_interrupt+0xe/0xc0
softirqs last  enabled at (1266): [<ffffffff81898eeb>] __irq_exit_rcu+0xcb/0x220
softirqs last disabled at (1585): [<ffffffff81898eeb>] __irq_exit_rcu+0xcb/0x220
CPU: 0 UID: 0 PID: 6043 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:unwind_next_frame+0x4f4/0x2550
Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48
RSP: 0018:ffffc900000072e0 EFLAGS: 00000a02
RAX: 0000000000000000 RBX: ffffffff91f809f0 RCX: dffffc0000000000
RDX: ffffffff91f809ec RSI: ffffffff92a900d0 RDI: ffffffff8c6e1720
RBP: ffffffff8a911ea6 R08: 0000000000000003 R09: 0000000000000000
R10: ffffc900000073d8 R11: ffffffff81b334c0 R12: ffffffff91f809f4
R13: ffffffff91f809ec R14: ffffc90000007388 R15: ffffffff91f809ec
FS:  00007f49f239f6c0(0000) GS:ffff88818c4ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000029c0 CR3: 000000011e950000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_track+0x3e/0x80
 __kasan_kmalloc+0x93/0xb0
 __kmalloc_noprof+0x36b/0x720
 ___neigh_create+0x6d2/0x22b0
 ip6_finish_output2+0xe0f/0x1460
 ip6_output+0x337/0x540
 ndisc_send_skb+0xcb2/0x1650
 addrconf_rs_timer+0x2d2/0x6c0
 call_timer_fn+0x18d/0x5f0
 __run_timer_base+0x652/0x8b0
 run_timer_softirq+0xb7/0x170
 handle_softirqs+0x226/0x860
 __irq_exit_rcu+0xcb/0x220
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:preempt_schedule_irq+0x46/0x90
Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 f5 60 a7 f5 e8 70 b2 e2 f5 fb bf 01 00 00 00 <e8> 65 a1 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 36 b4 e2 f5 bf 01
RSP: 0018:ffffc90007227d98 EFLAGS: 00000202
RAX: 0000000000000513 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8e46e7e0 RDI: 0000000000000001
RBP: 0000000000000000 R08: ffffffff917ac17f R09: 1ffffffff22f582f
R10: dffffc0000000000 R11: fffffbfff22f5830 R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
 irqentry_exit+0x14f/0x910
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:__se_sys_ioctl+0x82/0x170
Code: 5a 71 ff e9 cf 00 00 00 e8 cb 5a 71 ff 49 c7 c7 f7 ff ff ff e9 d7 00 00 00 4c 89 f7 44 89 ee 44 89 e2 4c 89 f9 e8 ae 0b 00 00 <89> c5 bf fd fd ff ff 89 c6 e8 a0 5f 71 ff 81 fd fd fd ff ff 0f 85
RSP: 0018:ffffc90007227eb8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff88811382aa01 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffff52000e44fcc
RBP: 0000000000000000 R08: ffff888107842b9f R09: 0000000000000000
R10: fffff52000e44f88 R11: ffffed1020f08574 R12: 0000000000005452
R13: 0000000000000003 R14: ffff88811382aa00 R15: 00002000000006c0
 do_syscall_64+0x166/0x520
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f49f159e559
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f49f239f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f49f1826090 RCX: 00007f49f159e559
RDX: 00002000000006c0 RSI: 0000000000005452 RDI: 0000000000000003
RBP: 00007f49f16358b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f49f1826128 R14: 00007f49f1826090 R15: 00007ffd11859d58
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6054 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:pvclock_clocksource_read_nowd+0x42/0xf0
Code: 89 d9 48 d3 e0 83 e5 fe 4c 89 34 24 48 f7 24 24 48 0f ac d0 20 48 8b 4f 10 0f b6 57 1d 8b 37 39 f5 89 f5 74 74 0f ae e8 0f 31 <48> 89 c1 48 89 d0 48 c1 e0 20 48 09 c8 48 2b 47 08 44 8b 77 18 0f
RSP: 0018:ffffc90000a18dc8 EFLAGS: 00000082
RAX: 000000001bc5428e RBX: ffff88823c624260 RCX: ffff88816c8b3c00
RDX: 0000000000000084 RSI: 0000000000000100 RDI: ffffffff949b8040
RBP: 0000000000000004 R08: ffff88823c628283 R09: 1ffff110478c5050
R10: dffffc0000000000 R11: ffffed10478c5051 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffffc90000a18e80 R15: 1ffff920001431cc
FS:  00005555601f1500(0000) GS:ffff8882a7cab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb62fdbdf20 CR3: 00000001b00f6000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 kvm_sched_clock_read+0x11/0x20
 sched_clock+0x18/0x60
 sched_clock_cpu+0x74/0x440
 irqtime_account_irq+0x66/0x260
 handle_softirqs+0x10b/0x860
 __irq_exit_rcu+0xcb/0x220
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_is_held_type+0x106/0x150
Code: 1b 00 00 b8 ff ff ff ff 65 0f c1 05 1c ac aa 08 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 5b 01 03 00 cc 90 0f 0b 90 48 c7
RSP: 0018:ffffc900072a76c0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046
RDX: 0000000000000000 RSI: ffffffff8e6f7641 RDI: ffffffff8c6e1780
RBP: 0000000000000000 R08: ffff88816b0cfd03 R09: 1ffff1102d619fa0
R10: dffffc0000000000 R11: ffffed102d619fa1 R12: 0000000000000246
R13: ffff88816c8b3c00 R14: ffff888168e78f80 R15: 0000000000000000
 __vma_start_write+0x87/0x290
 __split_vma+0x6ee/0xa60
 vma_modify+0x887/0x1f40
 vma_modify_flags+0x2a4/0x3c0
 mprotect_fixup+0x51a/0xad0
 do_mprotect_pkey+0x8e7/0xd10
 __x64_sys_mprotect+0x80/0x90
 do_syscall_64+0x166/0x520
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb62fd9e357
Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff59d72818 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 00007fb62e7f76c0 RCX: 00007fb62fd9e357
RDX: 0000000000000003 RSI: 0000000000800000 RDI: 00007fb62dff8000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000801000 R11: 0000000000000206 R12: 00007fff59d72880
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
