watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.1:9593] Modules linked in: irq event stamp: 91338822 hardirqs last enabled at (91338821): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (91338821): [] _raw_spin_unlock_irqrestore+0x34/0x40 kernel/locking/spinlock.c:191 hardirqs last disabled at (91338822): [] sysvec_apic_timer_interrupt+0xb/0xa0 arch/x86/kernel/apic/apic.c:1095 softirqs last enabled at (169400): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (169343): [] asm_call_irq_on_stack+0x12/0x20 CPU: 0 PID: 9593 Comm: syz-executor.1 Not tainted 5.10.109 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:prepare_to_wait_exclusive+0x62/0x2a0 kernel/sched/wait.c:266 Code: 49 c1 ed 03 48 c7 44 24 20 30 9a 23 81 49 8d 54 05 00 c7 02 f1 f1 f1 f1 c7 42 04 00 f3 f3 f3 48 89 f2 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 91 01 00 00 83 0b 01 4c 89 e7 4c 8d 7b 18 RSP: 0018:ffff88804936fd18 EFLAGS: 00000216 RAX: 0000000000000000 RBX: ffff88804936fe90 RCX: ffffc90011f4d000 RDX: 1ffff1100926dfd2 RSI: ffff88804936fe90 RDI: ffff888034ef7450 RBP: 0000000000000001 R08: 0000000000000000 R09: ffff888034ef735f R10: 0000000000000000 R11: 0000000000000001 R12: ffff888034ef7450 R13: 1ffff1100926dfa5 R14: ffff888034ef7450 R15: ffff888034ef7000 FS: 00007feebbbf3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007feebbbf3718 CR3: 0000000043ae4000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: io_cqring_wait fs/io_uring.c:7064 [inline] __do_sys_io_uring_enter+0x821/0x1900 fs/io_uring.c:9145 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7feebe6bfb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007feebbbf3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa RAX: ffffffffffffffda RBX: 00007feebe7d30e0 RCX: 00007feebe6bfb19 RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007feebe719f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff7ef7f1bf R14: 00007feebbbf3300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 9577 Comm: syz-executor.1 Not tainted 5.10.109 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:193 Code: ff ff ff b8 08 00 00 00 4d 8b 17 49 8b 16 48 0f bd c8 48 63 c9 e9 5e ff ff ff 4c 01 d2 49 89 17 e9 d1 fd ff ff 0f 1f 44 00 00 <48> 8b 34 24 65 48 8b 14 25 80 6f 02 00 65 8b 05 1c c0 c2 7e a9 00 RSP: 0018:ffff8880470afc58 EFLAGS: 00000246 RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff81850d32 RDX: 0000000000000000 RSI: ffff888033d46500 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000000 R09: ffff888044fd835f R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044fd8000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff888044fd8040 FS: 00007feebbc35700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd058cf66b8 CR3: 0000000043ae4000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: __io_cqring_overflow_flush+0x766/0xac0 fs/io_uring.c:1707 io_cqring_overflow_flush fs/io_uring.c:1724 [inline] io_cqring_overflow_flush+0xbd/0x160 fs/io_uring.c:1716 io_cqring_wait fs/io_uring.c:7063 [inline] __do_sys_io_uring_enter+0x80f/0x1900 fs/io_uring.c:9145 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7feebe6bfb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007feebbc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa RAX: ffffffffffffffda RBX: 00007feebe7d2f60 RCX: 00007feebe6bfb19 RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007feebe719f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff7ef7f1bf R14: 00007feebbc35300 R15: 0000000000022000 ---------------- Code disassembly (best guess): 0: 49 c1 ed 03 shr $0x3,%r13 4: 48 c7 44 24 20 30 9a movq $0xffffffff81239a30,0x20(%rsp) b: 23 81 d: 49 8d 54 05 00 lea 0x0(%r13,%rax,1),%rdx 12: c7 02 f1 f1 f1 f1 movl $0xf1f1f1f1,(%rdx) 18: c7 42 04 00 f3 f3 f3 movl $0xf3f3f300,0x4(%rdx) 1f: 48 89 f2 mov %rsi,%rdx 22: 48 c1 ea 03 shr $0x3,%rdx 26: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax * 2a: 84 c0 test %al,%al <-- trapping instruction 2c: 74 08 je 0x36 2e: 3c 03 cmp $0x3,%al 30: 0f 8e 91 01 00 00 jle 0x1c7 36: 83 0b 01 orl $0x1,(%rbx) 39: 4c 89 e7 mov %r12,%rdi 3c: 4c 8d 7b 18 lea 0x18(%rbx),%r15