watchdog: BUG: soft lockup - CPU#1 stuck for 24s! [syz-executor:10758] Modules linked in: irq event stamp: 115493 hardirqs last enabled at (115493): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (115493): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (115492): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:153 [inline] hardirqs last disabled at (115492): [] _raw_spin_lock_irqsave+0x2c/0x7c kernel/locking/spinlock.c:181 softirqs last enabled at (115478): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (115478): [] __devlink_port_type_set+0x488/0x640 net/devlink/port.c:1236 softirqs last disabled at (115476): [] spin_lock_bh include/linux/spinlock.h:353 [inline] softirqs last disabled at (115476): [] __devlink_port_type_set+0x220/0x640 net/devlink/port.c:1217 CPU: 1 UID: 0 PID: 10758 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : lock_acquire+0x168/0x320 arch/arm64/include/asm/irqflags.h:-1 lr : lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline] lr : lock_acquire+0x148/0x320 kernel/locking/lockdep.c:5945 sp : ffff800094a36f10 x29: ffff800094a36f60 x28: 0000000000000000 x27: ffff0000d9923b00 x26: ffff8000897422f8 x25: 0000000000000000 x24: 0000000000000001 x23: 0000000000000002 x22: ffff800089aa2bb0 x21: ffff800080b96c64 x20: 0000000000000000 x19: 0000000000000000 x18: 1fffe000349fbc28 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000197f08 x13: 0000000000000001 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000000003 x9 : 0000000000000000 x8 : 00000000000000c0 x7 : 0000000000000000 x6 : ffff800080483084 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080492fe4 x2 : 0000000100000000 x1 : ffff0000d9923b00 x0 : 0000000000000001 dump_backtrace(regs = 00000000c9365685 tsk = 0000000000000000) Call trace: __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) lock_acquire+0x168/0x320 kernel/locking/lockdep.c:5946 (P) srcu_lock_acquire include/linux/srcu.h:198 [inline] srcu_read_lock+0x50/0x64 include/linux/srcu.h:305 kasan_quarantine_reduce+0x54/0x124 mm/kasan/quarantine.c:259 __kasan_slab_alloc+0x2c/0x88 mm/kasan/common.c:361 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] __kmalloc_cache_noprof+0x274/0x5fc mm/slub.c:5559 _kmalloc_noprof include/linux/slab.h:991 [inline] netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:663 [inline] netdevice_event+0x314/0x7a8 drivers/infiniband/core/roce_gid_mgmt.c:822 notifier_call_chain+0x1a4/0x4cc kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x1760 net/core/dev.c:12564 unregister_netdevice_many net/core/dev.c:12635 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12436 unregister_netdevice include/linux/netdevice.h:3490 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_drv_remove+0x5c/0x114 drivers/net/netdevsim/dev.c:1725 nsim_bus_remove+0x20/0x30 drivers/net/netdevsim/bus.c:427 device_remove+0xc4/0x134 drivers/base/dd.c:616 __device_release_driver drivers/base/dd.c:1349 [inline] device_release_driver_internal+0x124/0x20c drivers/base/dd.c:1372 device_release_driver+0x28/0x38 drivers/base/dd.c:1395 bus_remove_device+0x2d0/0x400 drivers/base/bus.c:664 device_del+0x3ec/0x71c drivers/base/core.c:3965 device_unregister+0x2c/0xf0 drivers/base/core.c:4006 nsim_bus_dev_del+0x60/0x8c drivers/net/netdevsim/bus.c:488 del_device_store+0x24c/0x2d4 drivers/net/netdevsim/bus.c:244 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 6057 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound toggle_allocation_gate pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : csd_lock_wait kernel/smp.c:363 [inline] pc : smp_call_function_many_cond+0x1104/0x14e0 kernel/smp.c:1002 lr : csd_lock_wait kernel/smp.c:363 [inline] lr : smp_call_function_many_cond+0x111c/0x14e0 kernel/smp.c:1002 sp : ffff8000963177c0 x29: ffff800096317900 x28: dfff800000000000 x27: 0000000000000001 x26: 0000000000000001 x25: 0000000000000011 x24: 0000000000000001 x23: ffffffffffffffff x22: 1fffe000349f9e80 x21: ffff0001a4ff9ae8 x20: ffff0000fb60edb8 x19: ffff0001a4fcf400 x18: 00000000f4eda569 x17: 000000000462dd9c x16: dfff800000000000 x15: 0000000000000001 x14: 0000000000000004 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff6000349ff35e x9 : 0000000000000000 x8 : 0000000000000011 x7 : 0000000000000000 x6 : ffff8000801690e0 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008059ee08 x2 : 0000000000000000 x1 : ffff0000fb60d880 x0 : 0000000000000000 dump_backtrace(regs = 00000000b0b60470 tsk = 0000000000000000) Call trace: __cmpwait_case_32 arch/arm64/include/asm/cmpxchg.h:233 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:259 [inline] (P) csd_lock_wait kernel/smp.c:363 [inline] (P) smp_call_function_many_cond+0x1104/0x14e0 kernel/smp.c:1002 (P) smp_call_function kernel/smp.c:1043 [inline] kick_all_cpus_sync+0x34/0x40 kernel/smp.c:1192 arch_jump_label_transform_apply+0x14/0x20 arch/arm64/kernel/jump_label.c:34 __jump_label_update+0x31c/0x344 kernel/jump_label.c:521 jump_label_update+0x428/0x4b8 kernel/jump_label.c:909 static_key_enable_cpuslocked+0x11c/0x220 kernel/jump_label.c:210 static_key_enable+0x24/0x38 kernel/jump_label.c:223 toggle_allocation_gate+0xb8/0x28c mm/kfence/core.c:902 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 wireguard: wg0: Handshake for peer 75 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) wireguard: wg2: Handshake for peer 135 ((einval)) did not complete after 5 seconds, retrying (try 4) wireguard: wg1: Handshake for peer 77 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 9) wireguard: wg2: Handshake for peer 138 ((einval)) did not complete after 5 seconds, retrying (try 4) vxlan1: no route to 0100:0000:0000:0000:0000:0000:0000:0000 wireguard: wg0: Handshake for peer 126 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 3) wireguard: wg2: Handshake for peer 141 ((einval)) did not complete after 5 seconds, retrying (try 5) wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) kobject: 'brport' (000000004e60937b): kobject_cleanup, parent 0000000000000000 kobject: 'brport' (00000000c98c7037): kobject_cleanup, parent 0000000000000000 kobject: 'brport' (00000000c98c7037): calling ktype release kobject: 'brport': free name