watchdog: BUG: soft lockup - CPU#0 stuck for 25s! [syz.4.760:8652] Modules linked in: irq event stamp: 1278 hardirqs last enabled at (1277): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (1277): [] __arm64_exit_to_kernel_mode+0x64/0x78 arch/arm64/kernel/entry-common.c:60 hardirqs last disabled at (1278): [] __el1_irq arch/arm64/kernel/entry-common.c:527 [inline] hardirqs last disabled at (1278): [] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:543 softirqs last enabled at (1274): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (1274): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:673 softirqs last disabled at (1269): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 CPU: 0 UID: 0 PID: 8652 Comm: syz.4.760 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 03400005 (nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : clear_page+0x34/0x70 arch/arm64/lib/clear_page.S:38 lr : clear_pages include/linux/mm.h:5076 [inline] lr : clear_highpages_kasan_tagged+0xa4/0xd8 mm/page_alloc.c:1225 sp : ffff800097b075c0 x29: ffff800097b075c0 x28: dfff800000000000 x27: 0000000000000200 x26: ffff0000cdea39f8 x25: 0000000000000001 x24: fffffdffc3254a00 x23: ffff800088782000 x22: 1ffff000110f0595 x21: dfff800000000000 x20: ffff0000c9528000 x19: 0000000000000001 x18: 0000000000000000 x17: ffff8000807126c4 x16: ffff800080888b24 x15: ffff80008070d514 x14: ffff800080711684 x13: 0000000000000010 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000000003 x9 : 0000000109528000 x8 : 000f0000c9528000 x7 : ffff800080aee2e8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800097b07530 x2 : 0000000000000004 x1 : 0000000000000040 x0 : ffff0000c9528000 Call trace: clear_page+0x34/0x70 arch/arm64/lib/clear_page.S:37 (P) post_alloc_hook mm/page_alloc.c:1869 [inline] prep_new_page mm/page_alloc.c:1879 [inline] alloc_pages_bulk_noprof+0x4b0/0x7d8 mm/page_alloc.c:5281 ___alloc_pages_bulk mm/kasan/shadow.c:345 [inline] __kasan_populate_vmalloc_do mm/kasan/shadow.c:370 [inline] __kasan_populate_vmalloc+0xc0/0x1d0 mm/kasan/shadow.c:424 kasan_populate_vmalloc include/linux/kasan.h:580 [inline] alloc_vmap_area+0xdf4/0x13e8 mm/vmalloc.c:2145 __get_vm_area_node+0x210/0x32c mm/vmalloc.c:3248 get_vm_area+0x9c/0xd0 mm/vmalloc.c:3290 arena_map_alloc+0x200/0x668 kernel/bpf/arena.c:296 map_create_alloc kernel/bpf/syscall.c:1534 [inline] map_create+0xa6c/0x153c kernel/bpf/syscall.c:1644 __sys_bpf+0x308/0x82c kernel/bpf/syscall.c:6344 __do_sys_bpf kernel/bpf/syscall.c:6486 [inline] __se_sys_bpf kernel/bpf/syscall.c:6483 [inline] __arm64_sys_bpf+0xd0/0xec kernel/bpf/syscall.c:6483 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 14 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound toggle_allocation_gate pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : csd_lock_wait kernel/smp.c:363 [inline] pc : smp_call_function_many_cond+0xfec/0x1590 kernel/smp.c:1002 lr : csd_lock_wait kernel/smp.c:363 [inline] lr : smp_call_function_many_cond+0x1004/0x1590 kernel/smp.c:1002 sp : ffff80008ed877e0 x29: ffff80008ed87920 x28: ffff800088bfa960 x27: 0000000000000011 x26: dfff800000000000 x25: 0000000000000000 x24: ffffffffffffffff x23: ffff800088bfa960 x22: 1fffe00035ba6678 x21: ffff0001add13648 x20: ffff0000c1a25038 x19: ffff0001add333c0 x18: 1fffe00035ba3828 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff600035ba26ca x9 : 0000000000000000 x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000805bafd8 x2 : 0000000000000000 x1 : ffff0000c1a23b00 x0 : 0000000000000000 Call trace: __cmpwait_case_32 arch/arm64/include/asm/cmpxchg.h:233 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:259 [inline] (P) csd_lock_wait kernel/smp.c:363 [inline] (P) smp_call_function_many_cond+0xfec/0x1590 kernel/smp.c:1002 (P) smp_call_function kernel/smp.c:1043 [inline] kick_all_cpus_sync+0x34/0x40 kernel/smp.c:1192 arch_jump_label_transform_apply+0x14/0x20 arch/arm64/kernel/jump_label.c:34 __jump_label_update+0x31c/0x344 kernel/jump_label.c:521 jump_label_update+0x428/0x4b8 kernel/jump_label.c:910 static_key_enable_cpuslocked+0x11c/0x220 kernel/jump_label.c:210 static_key_enable+0x24/0x38 kernel/jump_label.c:223 toggle_allocation_gate+0xb8/0x28c mm/kfence/core.c:902 process_one_work kernel/workqueue.c:3387 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3470 worker_thread+0x798/0xbd0 kernel/workqueue.c:3551 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838