watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [aoe_tx0:2413] Modules linked in: irq event stamp: 69470849 hardirqs last enabled at (69470848): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (69470848): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (69470849): [] __enter_from_kernel_mode arch/arm64/kernel/entry-common.c:43 [inline] hardirqs last disabled at (69470849): [] enter_from_kernel_mode+0x14/0x34 arch/arm64/kernel/entry-common.c:50 softirqs last enabled at (1216): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1220): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 CPU: 0 UID: 0 PID: 2413 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] pc : _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:194 lr : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] lr : _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 sp : ffff8000a25f76f0 x29: ffff8000a25f76f0 x28: ffff00010d05a070 x27: 0000000000000000 x26: ffff00010d05a000 x25: ffff00010d05a0d8 x24: dfff800000000000 x23: 0000000000000003 x22: 0000000000000000 x21: ffff8000913a3e40 x20: ffff8000978b4dc0 x19: 0000000000000000 x18: 00000000ffffffff x17: ffff800093524000 x16: ffff800080528e24 x15: 0000000000000001 x14: 1ffff00012f169b8 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093323be8 x10: 0000000000000003 x9 : 0000000000000000 x8 : 00000000000000c0 x7 : ffff800083e16b00 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000002 x1 : ffff80008eddb55d x0 : ffff80010c595000 Call trace: __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] (P) _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:194 (P) spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] uart_port_unlock_irqrestore include/linux/serial_core.h:788 [inline] uart_port_unlock_deref+0x108/0x2ec drivers/tty/serial/serial_core.c:91 uart_write+0xc4/0x130 drivers/tty/serial/serial_core.c:629 handle_tx+0x200/0x5fc drivers/net/caif/caif_serial.c:222 caif_xmit+0x108/0x150 drivers/net/caif/caif_serial.c:268 __netdev_start_xmit include/linux/netdevice.h:5222 [inline] netdev_start_xmit include/linux/netdevice.h:5231 [inline] xmit_one net/core/dev.c:3839 [inline] dev_hard_start_xmit+0x2b0/0x890 net/core/dev.c:3855 __dev_queue_xmit+0x1600/0x32a8 net/core/dev.c:4725 dev_queue_xmit include/linux/netdevice.h:3361 [inline] tx+0x9c/0x1cc drivers/block/aoe/aoenet.c:62 kthread+0x164/0x354 drivers/block/aoe/aoecmd.c:1241 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Workqueue: events_unbound cfg80211_wiphy_work pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __preempt_count_dec_and_test arch/arm64/include/asm/preempt.h:61 [inline] pc : lockdep_enabled kernel/locking/lockdep.c:121 [inline] pc : lock_release+0xa0/0x39c kernel/locking/lockdep.c:5881 lr : trace_lock_release include/trace/events/lock.h:69 [inline] lr : lock_release+0x68/0x39c kernel/locking/lockdep.c:5879 sp : ffff800080016e90 x29: ffff800080016ea0 x28: ffff700010002de4 x27: 0000000000000001 x26: ffff0000d5d10e80 x25: ffff80008f726570 x24: 0000000000000000 x23: 0000000000000000 x22: ffff80008f7e1000 x21: ffff80008f9c92e0 x20: ffff0000c1c5bd00 x19: ffff800089ab1f20 x18: 00000000473cc880 x17: ffff0001fea8c8b0 x16: ffff80008b0155d8 x15: ffff700010002dc2 x14: 0000000000000000 x13: 0000000000000003 x12: 0000000000ff0100 x11: ffff0000c1c5bd00 x10: 0000000000000003 x9 : ffff80008f7349b8 x8 : ffff80010c5b9000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010 x2 : ffff800080016f40 x1 : ffff80008b668440 x0 : 0000000000000001 Call trace: __percpu_read_32 arch/arm64/include/asm/percpu.h:125 [inline] (P) lockdep_enabled kernel/locking/lockdep.c:121 [inline] (P) lock_release+0xa0/0x39c kernel/locking/lockdep.c:5881 (P) rcu_lock_release+0x30/0x194 include/linux/rcupdate.h:341 rcu_read_unlock include/linux/rcupdate.h:871 [inline] nf_hook+0x2a8/0x334 include/linux/netfilter.h:275 NF_HOOK_COND include/linux/netfilter.h:306 [inline] ip_output+0x230/0x384 net/ipv4/ip_output.c:436 dst_output include/net/dst.h:461 [inline] ip_local_out+0x120/0x15c net/ipv4/ip_output.c:129 synproxy_send_tcp+0x3b8/0x59c net/netfilter/nf_synproxy_core.c:439 synproxy_send_client_synack+0x660/0xb38 net/netfilter/nf_synproxy_core.c:484 nft_synproxy_eval_v4+0x17c/0x2b8 net/netfilter/nft_synproxy.c:59 nft_synproxy_do_eval+0x2c0/0x484 net/netfilter/nft_synproxy.c:141 nft_synproxy_eval+0x34/0x48 net/netfilter/nft_synproxy.c:247 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] nft_do_chain+0x3e8/0x12fc net/netfilter/nf_tables_core.c:285 nft_do_chain_inet+0x208/0x2d8 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xb4/0x21c net/netfilter/core.c:623 nf_hook include/linux/netfilter.h:273 [inline] NF_HOOK+0x1c8/0x358 include/linux/netfilter.h:316 ip_local_deliver+0x120/0x194 net/ipv4/ip_input.c:260 dst_input include/net/dst.h:471 [inline] ip_rcv_finish+0x21c/0x248 net/ipv4/ip_input.c:454 NF_HOOK+0x2c4/0x358 include/linux/netfilter.h:318 ip_rcv+0x7c/0x9c net/ipv4/ip_input.c:574 __netif_receive_skb_one_core net/core/dev.c:5991 [inline] __netif_receive_skb+0xcc/0x2a8 net/core/dev.c:6104 process_backlog+0x60c/0x10e4 net/core/dev.c:6456 __napi_poll+0xb4/0x310 net/core/dev.c:7506 napi_poll net/core/dev.c:7569 [inline] net_rx_action+0x5f4/0xd58 net/core/dev.c:7696 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:68 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:73 do_softirq+0x90/0xf8 kernel/softirq.c:480 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] cfg80211_inform_single_bss_data+0xf54/0x1744 net/wireless/scan.c:2396 cfg80211_inform_bss_data+0x1ac/0x2fcc net/wireless/scan.c:3235 cfg80211_inform_bss_frame_data+0x32c/0x738 net/wireless/scan.c:3326 ieee80211_bss_info_update+0x640/0x8b8 net/mac80211/scan.c:226 ieee80211_rx_bss_info net/mac80211/ibss.c:1094 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1573 [inline] ieee80211_ibss_rx_queued_mgmt+0x13bc/0x240c net/mac80211/ibss.c:1600 ieee80211_iface_process_skb net/mac80211/iface.c:1699 [inline] ieee80211_iface_work+0x754/0x106c net/mac80211/iface.c:1753 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844