ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 watchdog: BUG: soft lockup - CPU#1 stuck for 225s! [kworker/u8:11:6122] Modules linked in: irq event stamp: 4527546 hardirqs last enabled at (4527545): [] irqentry_exit+0x3b/0x90 kernel/entry/common.c:357 hardirqs last disabled at (4527546): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1049 softirqs last enabled at (4527544): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (4527544): [] handle_softirqs+0x5bb/0x8f0 kernel/softirq.c:589 softirqs last disabled at (4527527): [] __do_softirq kernel/softirq.c:595 [inline] softirqs last disabled at (4527527): [] invoke_softirq kernel/softirq.c:435 [inline] softirqs last disabled at (4527527): [] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:662 CPU: 1 UID: 0 PID: 6122 Comm: kworker/u8:11 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:rep_nop arch/x86/include/asm/vdso/processor.h:13 [inline] RIP: 0010:cpu_relax arch/x86/include/asm/vdso/processor.h:18 [inline] RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline] RIP: 0010:smp_call_function_many_cond+0x4c4/0x12c0 kernel/smp.c:885 Code: 92 00 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 6c 05 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 RSP: 0018:ffffc9000afef928 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff8880b8646880 RCX: ffffffff81ada87a RDX: ffff8880261a1e00 RSI: ffffffff81ada854 RDI: 0000000000000005 RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d11 R13: 0000000000000001 R14: ffff8880b873ff80 R15: ffff8880b8646888 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe66cb762d8 CR3: 000000000df80000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1052 on_each_cpu include/linux/smp.h:71 [inline] text_poke_sync arch/x86/kernel/alternative.c:2114 [inline] text_poke_bp_batch+0x22b/0x760 arch/x86/kernel/alternative.c:2324 text_poke_flush arch/x86/kernel/alternative.c:2515 [inline] text_poke_flush arch/x86/kernel/alternative.c:2512 [inline] text_poke_finish+0x30/0x40 arch/x86/kernel/alternative.c:2522 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x1d7/0x400 kernel/jump_label.c:920 static_key_enable_cpuslocked+0x1b7/0x270 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate mm/kfence/core.c:849 [inline] toggle_allocation_gate+0xfc/0x260 mm/kfence/core.c:841 process_one_work+0x9c8/0x1ba0 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3317 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398 kthread+0x3b2/0x750 kernel/kthread.c:464 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 10505 Comm: syz.6.1281 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 RIP: 0010:check_preemption_disabled+0x16/0xe0 lib/smp_processor_id.c:16 Code: ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 4d 3e b0 74 65 8b 05 42 3e b0 74 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c e9 ef a4 bc f5 RSP: 0018:ffffc90000007c18 EFLAGS: 00000096 RAX: 0000000080010003 RBX: 0000000000000000 RCX: ffffffff8195ba6c RDX: fffffbfff20c45e3 RSI: ffffffff8bd32ba0 RDI: ffffffff8bd32be0 RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20c45e2 R10: ffffffff90622f17 R11: 0000000000000001 R12: 0000000000000000 R13: 000000000003da4c R14: 0000000000000001 R15: 0000000000000000 FS: 00007f285b9976c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f601c9762d8 CR3: 0000000056c62000 CR4: 0000000000350ef0 Call Trace: rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] rcu_is_watching+0x12/0xc0 kernel/rcu/tree.c:716 trace_lock_acquire+0x14e/0x1f0 include/trace/events/lock.h:24 lock_acquire+0x2f/0xb0 kernel/locking/lockdep.c:5822 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 debug_object_activate+0x149/0x4a0 lib/debugobjects.c:818 debug_hrtimer_activate kernel/time/hrtimer.c:428 [inline] debug_activate kernel/time/hrtimer.c:469 [inline] enqueue_hrtimer+0x25/0x3c0 kernel/time/hrtimer.c:1075 __run_hrtimer kernel/time/hrtimer.c:1755 [inline] __hrtimer_run_queues+0x903/0xae0 kernel/time/hrtimer.c:1802 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1864 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x112/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:kasan_check_range+0x12/0x1a0 mm/kasan/generic.c:188 Code: 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 <44> 0f b6 c2 48 01 f0 55 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff RSP: 0018:ffffc90004a8f768 EFLAGS: 00000202 RAX: ffff88805892da08 RBX: ffffc90004a8f938 RCX: ffffffff89f80f0e RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805892da08 RBP: 1ffff92000951eef R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90004a8fd98 R13: ffff88805892da00 R14: dffffc0000000000 R15: ffff88805892da08 instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] __scm_recv_common.constprop.0+0x39e/0x630 include/net/scm.h:176 scm_recv_unix include/net/scm.h:214 [inline] __unix_dgram_recvmsg+0x789/0xe50 net/unix/af_unix.c:2511 unix_dgram_recvmsg+0xd0/0x110 net/unix/af_unix.c:2531 sock_recvmsg_nosec net/socket.c:1018 [inline] ____sys_recvmsg+0x5fb/0x6b0 net/socket.c:2786 ___sys_recvmsg+0x115/0x1a0 net/socket.c:2830 do_recvmmsg+0x2f8/0x740 net/socket.c:2925 __sys_recvmmsg net/socket.c:2999 [inline] __do_sys_recvmmsg net/socket.c:3022 [inline] __se_sys_recvmmsg net/socket.c:3015 [inline] __x64_sys_recvmmsg+0x239/0x290 net/socket.c:3015 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f285ab8cda9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f285b997038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: ffffffffffffffda RBX: 00007f285ada6080 RCX: 00007f285ab8cda9 RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 RBP: 00007f285ac0e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f285ada6080 R15: 00007fff29a8e758