watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.1:9929] Modules linked in: irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x1dba/0x6df0 softirqs last enabled at (0): [] copy_process+0x1dfe/0x6df0 softirqs last disabled at (0): [<0000000000000000>] 0x0 CPU: 0 PID: 9929 Comm: syz-executor.1 Tainted: G B 6.0.0-rc4-next-20220908 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__sanitizer_cov_trace_pc+0xd/0x70 Code: a8 01 00 00 e8 b4 ff ff ff 31 c0 e9 fd 16 1a 03 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 8b 05 69 4a bc 7e 89 c1 48 8b 34 24 <81> e1 00 01 00 00 65 48 8b 14 25 c0 6e 02 00 a9 00 01 ff 00 74 0e RSP: 0018:ffff88806ce09cc8 EFLAGS: 00000202 RAX: 0000000000000100 RBX: 0000000000000001 RCX: 0000000000000100 RDX: ffff888045840000 RSI: ffffffff8217d615 RDI: 0000000000000001 RBP: ffff88800e639c10 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88800e5b8a00 R15: ffffe8ffffc03000 FS: 00007f8b327a7700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e238000 CR3: 000000004302c000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: sbitmap_queue_clear+0xa5/0x210 blk_mq_put_tag+0xd8/0x160 __blk_mq_free_request+0x2e0/0x380 blk_mq_free_request+0x35d/0x500 __blk_mq_end_request+0x358/0x580 scsi_end_request+0x472/0x9a0 scsi_io_completion+0xbc/0x2050 scsi_complete+0x114/0x560 blk_complete_reqs+0xb2/0xf0 __do_softirq+0x1c8/0x8d0 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x5/0x20 common_interrupt+0xa4/0xc0 asm_common_interrupt+0x22/0x40 RIP: 0010:unwind_get_return_address+0xa/0xa0 Code: ff ff ff e8 f8 d2 66 00 eb ac e8 f1 d2 66 00 e9 75 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 b8 00 00 00 00 00 fc ff df <48> 89 fa 55 48 c1 ea 03 53 48 89 fb 0f b6 04 02 84 c0 74 04 3c 03 RSP: 0018:ffff888038ee75a0 EFLAGS: 00000202 RAX: dffffc0000000000 RBX: ffffffff8135b8f0 RCX: ffff888038ee7648 RDX: 0000000000000001 RSI: ffff888038ee7640 RDI: ffff888038ee75a8 RBP: ffff888038ee7640 R08: ffffffff85e2ba08 R09: ffffffff85e2ba0c R10: ffffed10071dcec2 R11: ffff888038ee75e8 R12: ffff888038ee7670 R13: 0000000000000000 R14: ffff888045840000 R15: ffff888007c41b40 arch_stack_walk+0x99/0xf0 stack_trace_save+0x8c/0xc0 kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x95/0xb0 call_rcu+0x6a/0xa30 __kmem_cache_free+0x91/0x400 iter_file_splice_write+0x23d/0xca0 direct_splice_actor+0x10f/0x170 splice_direct_to_actor+0x336/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f8b35231b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8b327a7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f8b35344f60 RCX: 00007f8b35231b19 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 RBP: 00007f8b3528bf6d R08: 0000000000000000 R09: 0000000000000000 R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd31ce6a3f R14: 00007f8b327a7300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.0.0-rc4-next-20220908 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__sbq_wake_up+0x3d/0x3d0 Code: 83 ec 08 e8 15 63 2e ff be 04 00 00 00 48 89 ef e8 58 c6 60 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 <48> 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f7 02 00 00 41 RSP: 0018:ffff88806cf09c90 EFLAGS: 00000216 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff8217c108 RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88800e639c40 RBP: ffff88800e639c40 R08: 0000000000000000 R09: ffff88800e639c43 R10: ffffed1001cc7388 R11: 0000000000000001 R12: ffff88800e639c10 R13: 0000000000000001 R14: ffff88800e5b8a00 R15: ffffe8ffffd03000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2de2a000 CR3: 000000000ffba000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: sbitmap_queue_clear+0xad/0x210 blk_mq_put_tag+0xd8/0x160 __blk_mq_free_request+0x2e0/0x380 blk_mq_free_request+0x35d/0x500 __blk_mq_end_request+0x358/0x580 scsi_end_request+0x472/0x9a0 scsi_io_completion+0xbc/0x2050 scsi_complete+0x114/0x560 blk_complete_reqs+0xb2/0xf0 __do_softirq+0x1c8/0x8d0 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x5/0x20 sysvec_call_function_single+0x8e/0xc0 asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:default_idle+0xb/0x10 Code: c2 fe ff 4c 89 e2 48 89 ef 31 f6 5d 41 5c e9 cc f9 18 fe cc cc cc cc cc cc cc cc cc cc cc cc eb 07 0f 00 2d d7 dc 5c 00 fb f4 70 9d 3a 00 41 54 be 08 00 00 00 53 65 48 8b 1c 25 c0 6e 02 00 RSP: 0018:ffff888008677e58 EFLAGS: 00000246 RAX: ffffffff84259d80 RBX: ffff88800863d040 RCX: ffffffff8423baf2 RDX: ffffed100d9e676d RSI: 0000000000000001 RDI: ffffffff8425a233 RBP: 0000000000000001 R08: 0000000000000000 R09: ffff88806cf33b63 R10: ffffed100d9e676c R11: 0000000000000001 R12: ffffed10010c7a08 R13: ffffffff85b012d0 R14: 0000000000000000 R15: dffffc0000000000 default_idle_call+0x84/0xc0 do_idle+0x3bd/0x530 cpu_startup_entry+0x14/0x20 start_secondary+0x1c8/0x220 secondary_startup_64_no_verify+0xe0/0xeb ---------------- Code disassembly (best guess): 0: a8 01 test $0x1,%al 2: 00 00 add %al,(%rax) 4: e8 b4 ff ff ff callq 0xffffffbd 9: 31 c0 xor %eax,%eax b: e9 fd 16 1a 03 jmpq 0x31a170d 10: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 17: 00 00 00 00 1b: 66 90 xchg %ax,%ax 1d: 65 8b 05 69 4a bc 7e mov %gs:0x7ebc4a69(%rip),%eax # 0x7ebc4a8d 24: 89 c1 mov %eax,%ecx 26: 48 8b 34 24 mov (%rsp),%rsi * 2a: 81 e1 00 01 00 00 and $0x100,%ecx <-- trapping instruction 30: 65 48 8b 14 25 c0 6e mov %gs:0x26ec0,%rdx 37: 02 00 39: a9 00 01 ff 00 test $0xff0100,%eax 3e: 74 0e je 0x4e