watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.3:6778] Modules linked in: irq event stamp: 2838945 hardirqs last enabled at (2838944): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (2838945): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (2828260): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (2828263): [] irq_exit_rcu+0x94/0xc0 CPU: 0 UID: 0 PID: 6778 Comm: syz-executor.3 Not tainted 6.12.0-rc5-next-20241104 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 Code: 7e 60 e8 a3 ff ff ff 31 c0 e9 ac ff 33 03 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 60 cd b1 7e 65 8b 05 61 cd b1 RSP: 0018:ffff88806ce08eb0 EFLAGS: 00000292 RAX: 0000000000000000 RBX: ffff8880357f530a RCX: 1ffffffff0fe4261 RDX: ffff888015f19b80 RSI: ffffffff83961562 RDI: ffffffff811a8c51 RBP: ffff88800d004140 R08: 0000000000000001 R09: fffffbfff0fdc5f7 R10: ffffffff87ee2fbf R11: 00000000000c33ea R12: 0000000000000000 R13: ffffed1000e1c53a R14: 0000000000000010 R15: 000000000000000e FS: 00007f6e8f4bc700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020004c00 CR3: 000000003525c000 CR4: 0000000000350ef0 Call Trace: ip_finish_output2+0x758/0x20e0 __ip_finish_output.part.0+0x1bb/0x350 ip_output+0x27f/0x850 ip_local_out+0x359/0x4c0 __ip_queue_xmit+0x770/0x1910 __tcp_transmit_skb+0x2884/0x39a0 __tcp_send_ack.part.0+0x3a6/0x650 tcp_send_ack+0x81/0xa0 __tcp_ack_snd_check+0x188/0xc20 tcp_rcv_established+0x8ab/0x2060 tcp_v4_do_rcv+0x5cf/0xa50 tcp_v4_rcv+0x31a0/0x42d0 ip_protocol_deliver_rcu+0xba/0x480 ip_local_deliver_finish+0x2f0/0x500 ip_local_deliver+0x1a3/0x200 ip_sublist_rcv_finish+0x274/0x570 ip_list_rcv_finish.constprop.0+0x3fe/0x580 ip_list_rcv+0x2c5/0x3e0 __netif_receive_skb_list_core+0x695/0x8d0 netif_receive_skb_list_internal+0x6c2/0xc90 napi_gro_receive+0x994/0xbb0 e1000_clean_rx_irq+0x7e1/0x11a0 e1000_clean+0x960/0x2540 __napi_poll+0xb9/0x540 net_rx_action+0xa06/0xe00 handle_softirqs+0x1b1/0x770 irq_exit_rcu+0x94/0xc0 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:put_cpu_partial+0x10a/0x1b0 Code: 24 28 75 5b 49 c7 44 24 28 00 00 00 00 4c 89 e7 48 8d 35 00 00 00 00 e8 54 9f ab ff 4d 85 ed 74 06 e8 2a 6d d5 ff fb 4d 85 f6 <74> 1c 5b 4c 89 f6 48 89 ef 5d 41 5c 41 5d 41 5e e9 c1 fa ff ff 44 RSP: 0018:ffff888013327280 EFLAGS: 00000246 RAX: 00000000002989f7 RBX: ffffea0000346e00 RCX: 1ffffffff0fde6ae RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81846b56 RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fdc5e9 R10: ffffffff87ee2f4f R11: 0000000000000000 R12: ffff88806ce40350 R13: 0000000000000200 R14: 0000000000000000 R15: ffff88800d1b86f0 qlist_free_all+0x50/0x160 kasan_quarantine_reduce+0x19f/0x240 __kasan_kmalloc+0x6f/0x90 __kmalloc_noprof+0x1f7/0x4b0 kobject_get_path+0xc9/0x1f0 kobject_uevent_env+0x252/0xf90 __kobject_del+0x27c/0x320 kobject_put+0x208/0x260 netdev_queue_update_kobjects+0x3bb/0x4f0 netdev_unregister_kobject+0x15d/0x270 unregister_netdevice_many_notify+0x1087/0x1890 default_device_exit_batch+0x6e6/0x920 ops_exit_list+0x12b/0x180 setup_net+0x492/0x7a0 copy_net_ns+0x2e3/0x6f0 create_new_namespaces+0x3f6/0xaf0 copy_namespaces+0x45c/0x580 copy_process+0x2704/0x8e60 kernel_clone+0xeb/0x850 __do_sys_clone3+0x1d9/0x260 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6e91f46b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6e8f4bc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f6e92059f60 RCX: 00007f6e91f46b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 RBP: 00007f6e91fa0f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd4c0e32af R14: 00007f6e8f4bc300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 247 Comm: sshd Not tainted 6.12.0-rc5-next-20241104 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:queued_spin_lock_slowpath+0x242/0xb60 Code: 02 48 89 e8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 85 08 00 00 b8 01 00 00 00 66 89 45 00 e9 bf fe ff ff 89 44 24 38 f3 90 5b fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 RSP: 0018:ffff8880168578d0 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8485c27f RDX: ffffed1003610999 RSI: 0000000000000004 RDI: ffff88801b084cc0 RBP: ffff88801b084cc0 R08: 0000000000000000 R09: ffffed1003610998 R10: ffff88801b084cc3 R11: 0000000000000001 R12: 1ffff11002d0af1b R13: 0000000000000003 R14: ffffed1003610998 R15: ffff888016857908 FS: 00007fe72dfe2900(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f96a788c448 CR3: 00000000168be000 CR4: 0000000000350ef0 Call Trace: do_raw_spin_lock+0x1de/0x270 lock_sock_nested+0x5f/0xf0 tcp_recvmsg+0xf8/0x630 inet_recvmsg+0x12b/0x6b0 sock_recvmsg+0x198/0x240 sock_read_iter+0x2bb/0x3b0 vfs_read+0xa28/0xbd0 ksys_read+0x1ed/0x250 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe72e4c4e8e Code: c0 e9 b6 fe ff ff 50 48 8d 3d 6e 18 0a 00 e8 b9 e7 01 00 66 0f 1f 84 00 00 00 00 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 RSP: 002b:00007fff09cc8a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007fff09cccb1f RCX: 00007fe72e4c4e8e RDX: 0000000000004000 RSI: 00007fff09cc8a90 RDI: 0000000000000004 RBP: 0000000000000004 R08: 00214f28b9bc6bb0 R09: 00007fe72eb59000 R10: 00007fe72eb59070 R11: 0000000000000246 R12: 000056145629cec0 R13: 00007fff09cc8a90 R14: 0000000000000004 R15: 00005614342d3a80 ---------------- Code disassembly (best guess): 0: 7e 60 jle 0x62 2: e8 a3 ff ff ff callq 0xffffffaa 7: 31 c0 xor %eax,%eax 9: e9 ac ff 33 03 jmpq 0x333ffba e: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 15: 00 00 00 00 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: 90 nop 20: 90 nop 21: 90 nop 22: 90 nop 23: 90 nop 24: 90 nop 25: 90 nop 26: 90 nop 27: 90 nop 28: 90 nop 29: 90 nop * 2a: f3 0f 1e fa endbr64 <-- trapping instruction 2e: 48 8b 34 24 mov (%rsp),%rsi 32: 65 48 8b 15 60 cd b1 mov %gs:0x7eb1cd60(%rip),%rdx # 0x7eb1cd9a 39: 7e 3a: 65 gs 3b: 8b .byte 0x8b 3c: 05 .byte 0x5 3d: 61 (bad) 3e: cd b1 int $0xb1