watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [kworker/u8:1:12] Modules linked in: irq event stamp: 28817325 hardirqs last enabled at (28817324): [] ___slab_alloc+0x330/0x14a0 mm/slub.c:3717 hardirqs last disabled at (28817325): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1049 softirqs last enabled at (28815744): [] __do_softirq kernel/softirq.c:595 [inline] softirqs last enabled at (28815744): [] invoke_softirq kernel/softirq.c:435 [inline] softirqs last enabled at (28815744): [] __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662 softirqs last disabled at (28815747): [] __do_softirq kernel/softirq.c:595 [inline] softirqs last disabled at (28815747): [] invoke_softirq kernel/softirq.c:435 [inline] softirqs last disabled at (28815747): [] __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662 CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.14.0-rc3-syzkaller-ga2598045ead9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: events_unbound nsim_dev_trap_report_work RIP: 0010:arch_local_irq_enable arch/x86/include/asm/irqflags.h:97 [inline] RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:155 [inline] RIP: 0010:___slab_alloc+0x4d1/0x14a0 mm/slub.c:3717 Code: 00 02 00 00 0f 84 96 fb ff ff fb 44 89 fa e9 8d fb ff ff e8 01 66 ea 09 f7 c3 00 02 00 00 0f 84 91 fe ff ff fb 44 89 7c 24 10 13 48 c7 43 10 00 00 00 00 4c 89 e7 48 89 de e8 ca 15 00 00 49 RSP: 0018:ffffc90000006dc0 EFLAGS: 00000206 RAX: a08c92ab5f625f00 RBX: 0000000000000246 RCX: ffffffff819d316a RDX: dffffc0000000000 RSI: ffffffff8c2aa4a0 RDI: ffffffff8c810bc0 RBP: 0000000000000000 R08: ffffffff9454c93f R09: 1ffffffff28a9927 R10: dffffc0000000000 R11: fffffbfff28a9928 R12: ffff88801deb78c0 R13: ffffffff821e65d6 R14: ffff8880b8646c00 R15: 00000000ffffffff FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffe00a4f80 CR3: 000000004056a000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000400000000300 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: __slab_alloc+0x58/0xa0 mm/slub.c:3916 __slab_alloc_node mm/slub.c:3991 [inline] slab_alloc_node mm/slub.c:4152 [inline] kmem_cache_alloc_noprof+0x268/0x380 mm/slub.c:4171 skb_clone+0x20c/0x390 net/core/skbuff.c:1994 deliver_clone net/bridge/br_forward.c:125 [inline] maybe_deliver+0x96/0x150 net/bridge/br_forward.c:190 br_flood+0x2e4/0x680 net/bridge/br_forward.c:237 br_handle_frame_finish+0x18d2/0x2000 net/bridge/br_input.c:220 br_nf_hook_thresh+0x472/0x590 br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:282 [inline] br_handle_frame+0x9f3/0x1530 net/bridge/br_input.c:433 __netif_receive_skb_core+0x13e7/0x4540 net/core/dev.c:5793 __netif_receive_skb_one_core net/core/dev.c:5897 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:6012 process_backlog+0x662/0x15b0 net/core/dev.c:6360 __napi_poll+0xcb/0x490 net/core/dev.c:7194 napi_poll net/core/dev.c:7263 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:7385 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline] sysvec_irq_work+0xa3/0xc0 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738 RIP: 0010:should_resched arch/x86/include/asm/preempt.h:103 [inline] RIP: 0010:__local_bh_enable_ip+0x170/0x200 kernel/softirq.c:396 Code: 8c e8 04 a4 85 0a 65 66 8b 05 14 8e 80 7e 66 85 c0 75 5d bf 01 00 00 00 e8 4d 24 0c 00 e8 08 4a 46 00 fb 65 8b 05 d8 8d 80 7e <85> c0 75 05 e8 e7 f5 a6 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c RSP: 0018:ffffc90000117980 EFLAGS: 00000282 RAX: 0000000000000001 RBX: 1ffff92000022f34 RCX: ffffffff819d316a RDX: dffffc0000000000 RSI: ffffffff8c2aa4a0 RDI: ffffffff8c810bc0 RBP: ffffc90000117a38 R08: ffffffff9454c93f R09: 1ffffffff28a9927 R10: dffffc0000000000 R11: fffffbfff28a9928 R12: dffffc0000000000 R13: 1ffff92000022f38 R14: ffffc900001179c0 R15: 0000000000000201 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x7c4/0xb50 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 9465 Comm: kworker/u8:14 Not tainted 6.14.0-rc3-syzkaller-ga2598045ead9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 kernel/smp.c:885 Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 30 f5 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 e0 f0 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 RSP: 0018:ffffc9000b6bf640 EFLAGS: 00000293 RAX: ffffffff81b5d4e5 RBX: 1ffff110170c8c99 RCX: ffff88802801bc00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc9000b6bf840 R08: ffffffff81b5d4b0 R09: 1ffffffff28a9908 R10: dffffc0000000000 R11: fffffbfff28a9909 R12: ffff8880b873fb48 R13: ffff8880b86464c8 R14: ffff8880b873fb40 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3dce8e9870 CR3: 000000000e938000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1052 text_poke_bp_batch+0x9ef/0xb30 text_poke_flush arch/x86/kernel/alternative.c:2519 [inline] text_poke_finish+0x30/0x50 arch/x86/kernel/alternative.c:2526 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate+0xbc/0x260 mm/kfence/core.c:850 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244