watchdog: BUG: soft lockup - CPU#1 stuck for 136s! [syz.0.320:6937] Modules linked in: irq event stamp: 15178905 hardirqs last enabled at (15178904): [] irqentry_exit+0x74/0x90 kernel/entry/common.c:214 hardirqs last disabled at (15178905): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1052 softirqs last enabled at (14983204): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last enabled at (14983204): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last enabled at (14983204): [] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 softirqs last disabled at (14983229): [] __do_softirq kernel/softirq.c:656 [inline] softirqs last disabled at (14983229): [] invoke_softirq kernel/softirq.c:496 [inline] softirqs last disabled at (14983229): [] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 CPU: 1 UID: 0 PID: 6937 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:lock_acquire+0x175/0x360 kernel/locking/lockdep.c:5872 Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b cd d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc90000a08398 EFLAGS: 00000206 RAX: e6785f872c216f00 RBX: 0000000000000000 RCX: e6785f872c216f00 RDX: 0000000000000000 RSI: ffffffff8d8f277e RDI: ffffffff8bbf0460 RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 R10: ffffc90000a08048 R11: ffffffff81ac2cc0 R12: 0000000000000002 R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000246 FS: 00007fa96af936c0(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffcddf0bbb8 CR3: 00000000783d4000 CR4: 00000000003526f0 Call Trace: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:867 [inline] class_rcu_constructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0xc2/0x2390 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:77 __kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object mm/kasan/common.c:252 [inline] __kasan_mempool_poison_object+0xad/0x130 mm/kasan/common.c:545 kasan_mempool_poison_object include/linux/kasan.h:362 [inline] napi_skb_cache_put+0x7b/0x730 net/core/skbuff.c:1422 __free_old_xmit+0x2c7/0x650 drivers/net/virtio_net.c:-1 virtnet_free_old_xmit drivers/net/virtio_net.c:639 [inline] free_old_xmit drivers/net/virtio_net.c:1094 [inline] virtnet_poll_tx+0x42b/0x1550 drivers/net/virtio_net.c:3260 __napi_poll+0xc7/0x360 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0x5f7/0xdf0 net/core/dev.c:7784 handle_softirqs+0x286/0x870 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 kernel/kcov.c:222 Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c 8b 91 58 16 00 00 83 fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 5c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 RSP: 0018:ffffc9000420efb8 EFLAGS: 00000246 RAX: ffffffff81c9a68c RBX: 000000000000002c RCX: ffff8880252adac0 RDX: ffffc9000b91a000 RSI: 00000000000040bf RDI: 000000000000002c RBP: ffffc9000420f100 R08: ffffc9000420fe98 R09: 0000000000000000 R10: ffffc9000420f298 R11: fffff52000841e55 R12: 1ffff92000841e08 R13: 000000000000000d R14: ffffc9000420f060 R15: ffffc9000420f080 perf_trace_buf_alloc+0x1c/0x2a0 kernel/trace/trace_event_perf.c:399 do_perf_trace_lock include/trace/events/lock.h:50 [inline] perf_trace_lock+0x18d/0x3b0 include/trace/events/lock.h:50 __do_trace_lock_release include/trace/events/lock.h:69 [inline] trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0x3b2/0x3e0 kernel/locking/lockdep.c:5879 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:897 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x19a9/0x2390 arch/x86/kernel/unwind_orc.c:680 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:56 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:559 __call_rcu_common kernel/rcu/tree.c:3123 [inline] call_rcu+0x157/0x9c0 kernel/rcu/tree.c:3243 context_switch kernel/sched/core.c:5328 [inline] __schedule+0x17a0/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:kasan_quarantine_reduce+0x12/0x160 mm/kasan/quarantine.c:244 Code: eb c2 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 53 48 83 ec 20 48 c7 44 24 18 00 00 00 00 <48> c7 44 24 10 00 00 00 00 48 c7 44 24 08 00 00 00 00 48 c7 04 24 RSP: 0018:ffffc9000420faa0 EFLAGS: 00000286 RAX: 0000000000108301 RBX: ffff88802b016000 RCX: 0000000000000001 RDX: 0000000000000c40 RSI: ffff88802b016000 RDI: ffff88801a027140 RBP: 0000000000000c40 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffff88801a027140 R13: 0000000000001000 R14: ffff88801a027140 R15: 0000000000000001 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4962 [inline] slab_alloc_node mm/slub.c:5272 [inline] __do_kmalloc_node mm/slub.c:5633 [inline] __kmalloc_noprof+0x3c3/0x7f0 mm/slub.c:5646 kmalloc_noprof include/linux/slab.h:961 [inline] tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_number_perm+0x1e8/0x5a0 security/tomoyo/file.c:723 security_file_ioctl+0xcb/0x2d0 security/security.c:2982 __do_sys_ioctl fs/ioctl.c:591 [inline] __se_sys_ioctl+0x47/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa96a18efc9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa96af93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fa96a3e5fa0 RCX: 00007fa96a18efc9 RDX: ffffffffffffffff RSI: 0000000040042408 RDI: 000000000000000c RBP: 00007fa96a211f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa96a3e6038 R14: 00007fa96a3e5fa0 R15: 00007fff9591ecd8 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:io_serial_in+0x77/0xc0 drivers/tty/serial/8250/8250_port.c:400 Code: e8 6e 49 ab fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f fe 10 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 29 34 06 cc 44 89 f9 80 e1 07 RSP: 0018:ffffc9000405ee38 EFLAGS: 00000006 RAX: 1ffffffff335d305 RBX: 00000000000003f9 RCX: 0000000000000000 RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 RBP: ffffc9000405f010 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: ffffffff8514ba40 R12: dffffc0000000000 R13: dffffc0000000000 R14: ffffffff99ae9f00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000562fa2dbd168 CR3: 0000000075110000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000082 DR3: 0000000000000000 DR6: 00000000ffff0ff2 DR7: 0000000000000600 Call Trace: serial_port_in include/linux/serial_core.h:806 [inline] serial8250_console_write+0x584/0x1ba0 drivers/tty/serial/8250/8250_port.c:3306 console_emit_next_record kernel/printk/printk.c:3111 [inline] console_flush_all+0x6f3/0xb10 kernel/printk/printk.c:3199 __console_flush_and_unlock kernel/printk/printk.c:3258 [inline] console_unlock+0xbb/0x190 kernel/printk/printk.c:3298 vprintk_emit+0x4c5/0x590 kernel/printk/printk.c:2423 dev_vprintk_emit+0x337/0x3f0 drivers/base/core.c:4914 dev_printk_emit+0xe0/0x130 drivers/base/core.c:4925 __netdev_printk+0x3d7/0x4d0 net/core/dev.c:12716 netdev_warn+0x10a/0x160 net/core/dev.c:12769 ieee802154_subif_start_xmit+0x136/0x190 net/mac802154/tx.c:232 __netdev_start_xmit include/linux/netdevice.h:5248 [inline] netdev_start_xmit include/linux/netdevice.h:5257 [inline] xmit_one net/core/dev.c:3845 [inline] dev_hard_start_xmit+0x2d7/0x830 net/core/dev.c:3861 sch_direct_xmit+0x241/0x4b0 net/sched/sch_generic.c:344 __dev_xmit_skb net/core/dev.c:4152 [inline] __dev_queue_xmit+0x1857/0x3b50 net/core/dev.c:4729 dev_queue_xmit include/linux/netdevice.h:3365 [inline] tx+0x6b/0x190 drivers/block/aoe/aoenet.c:62 kthread+0x1d0/0x3e0 drivers/block/aoe/aoecmd.c:1241 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245