watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz-executor.6:4844] Modules linked in: irq event stamp: 117646840 hardirqs last enabled at (117646839): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (117646839): [] _raw_spin_unlock_irqrestore+0x34/0x40 kernel/locking/spinlock.c:191 hardirqs last disabled at (117646840): [] sysvec_apic_timer_interrupt+0xb/0xa0 arch/x86/kernel/apic/apic.c:1095 softirqs last enabled at (84426): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (84325): [] asm_call_irq_on_stack+0x12/0x20 CPU: 0 PID: 4844 Comm: syz-executor.6 Not tainted 5.10.105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:91 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:108 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:134 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:165 [inline] RIP: 0010:check_memory_region_inline mm/kasan/generic.c:183 [inline] RIP: 0010:check_memory_region+0x18c/0x1e0 mm/kasan/generic.c:192 Code: 07 49 39 c1 7d 89 41 bb 01 00 00 00 5b 5d 44 89 d8 41 5c c3 48 85 d2 74 ed 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 df 80 38 00 <74> f2 e9 34 ff ff ff 48 29 c3 48 89 da 49 89 d3 49 c1 fb 3f 49 c1 RSP: 0018:ffff888045897d80 EFLAGS: 00000246 RAX: ffffed1008b76c69 RBX: ffffed1008b76c6a RCX: ffffffff8186d3a4 RDX: ffffed1008b76c6a RSI: 0000000000000004 RDI: ffff888045bb634c RBP: ffffed1008b76c69 R08: 0000000000000000 R09: ffff888045bb634f R10: ffffed1008b76c69 R11: 0000000000000001 R12: 0000000000000000 R13: ffff888045bb6000 R14: ffff888045bb6450 R15: ffff888045bb6000 FS: 00007f4caf948700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d624000 CR3: 0000000046a4e000 CR4: 0000000000350ef0 Call Trace: instrument_atomic_read include/linux/instrumented.h:71 [inline] atomic_read include/asm-generic/atomic-instrumented.h:27 [inline] io_should_wake fs/io_uring.c:6974 [inline] io_cqring_wait fs/io_uring.c:7062 [inline] __do_sys_io_uring_enter+0xee4/0x1900 fs/io_uring.c:9133 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f4cb23d2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4caf948188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa RAX: ffffffffffffffda RBX: 00007f4cb24e5f60 RCX: 00007f4cb23d2b19 RDX: 0000000010000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007f4cb242cf6d R08: 0000000020000040 R09: 0000000000000008 R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd8b77045f R14: 00007f4caf948300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4845 Comm: syz-executor.5 Not tainted 5.10.105 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:check_memory_region+0x170/0x1e0 mm/kasan/generic.c:193 Code: 75 0b 48 89 da 48 29 c2 e9 28 ff ff ff 48 89 d0 49 39 c2 75 96 49 0f be 02 41 83 e1 07 49 39 c1 7d 89 41 bb 01 00 00 00 5b 5d <44> 89 d8 41 5c c3 48 85 d2 74 ed 48 01 ea eb 09 48 83 c0 01 48 39 RSP: 0018:ffff8880446b7c50 EFLAGS: 00000046 RAX: ffffed1008b76e8b RBX: ffff888045bb7450 RCX: ffffffff81275c02 RDX: ffffed1008b76e8b RSI: 0000000000000004 RDI: ffff888045bb7450 RBP: 1ffff110088d6f8d R08: 0000000000000001 R09: ffff888045bb7453 R10: ffffed1008b76e8a R11: 0000000000000001 R12: ffff888045bb7458 R13: ffff888045bb7460 R14: ffff888045bb7450 R15: ffff8880446b7ea8 FS: 00007f9700e38700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc8398273a4 CR3: 00000000436d6000 CR4: 0000000000350ee0 Call Trace: instrument_atomic_read_write include/linux/instrumented.h:101 [inline] atomic_try_cmpxchg_acquire include/asm-generic/atomic-instrumented.h:705 [inline] queued_spin_lock include/asm-generic/qspinlock.h:82 [inline] do_raw_spin_lock+0x112/0x260 kernel/locking/spinlock_debug.c:113 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:117 [inline] _raw_spin_lock_irqsave+0x3e/0x50 kernel/locking/spinlock.c:159 prepare_to_wait_exclusive+0x7d/0x2a0 kernel/sched/wait.c:267 io_cqring_wait fs/io_uring.c:7052 [inline] __do_sys_io_uring_enter+0x821/0x1900 fs/io_uring.c:9133 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f97038c2b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9700e38188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa RAX: ffffffffffffffda RBX: 00007f97039d5f60 RCX: 00007f97038c2b19 RDX: 0000000010000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007f970391cf6d R08: 0000000020000040 R09: 0000000000000008 R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffea0ec9faf R14: 00007f9700e38300 R15: 0000000000022000 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 49 39 c1 cmp %rax,%r9 3: 7d 89 jge 0xffffff8e 5: 41 bb 01 00 00 00 mov $0x1,%r11d b: 5b pop %rbx c: 5d pop %rbp d: 44 89 d8 mov %r11d,%eax 10: 41 5c pop %r12 12: c3 retq 13: 48 85 d2 test %rdx,%rdx 16: 74 ed je 0x5 18: 48 01 ea add %rbp,%rdx 1b: eb 09 jmp 0x26 1d: 48 83 c0 01 add $0x1,%rax 21: 48 39 d0 cmp %rdx,%rax 24: 74 df je 0x5 26: 80 38 00 cmpb $0x0,(%rax) * 29: 74 f2 je 0x1d <-- trapping instruction 2b: e9 34 ff ff ff jmpq 0xffffff64 30: 48 29 c3 sub %rax,%rbx 33: 48 89 da mov %rbx,%rdx 36: 49 89 d3 mov %rdx,%r11 39: 49 c1 fb 3f sar $0x3f,%r11 3d: 49 rex.WB 3e: c1 .byte 0xc1