net_ratelimit: 28 callbacks suppressed net_ratelimit: 64 callbacks suppressed watchdog: BUG: soft lockup - CPU#1 stuck for 24s! [syz.0.275:5628] Modules linked in: irq event stamp: 42816 hardirqs last enabled at (42815): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (42815): [] __arm64_exit_to_kernel_mode+0x64/0x78 arch/arm64/kernel/entry-common.c:60 hardirqs last disabled at (42816): [] __el1_irq arch/arm64/kernel/entry-common.c:527 [inline] hardirqs last disabled at (42816): [] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:543 softirqs last enabled at (42806): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (42806): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:673 softirqs last disabled at (42775): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 CPU: 1 UID: 0 PID: 5628 Comm: syz.0.275 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : csd_lock_wait kernel/smp.c:363 [inline] pc : csd_lock kernel/smp.c:396 [inline] pc : smp_call_function_many_cond+0x73c/0x1590 kernel/smp.c:944 lr : csd_lock_wait kernel/smp.c:363 [inline] lr : csd_lock kernel/smp.c:396 [inline] lr : smp_call_function_many_cond+0x754/0x1590 kernel/smp.c:944 sp : ffff8000a8b67580 x29: ffff8000a8b676c0 x28: ffff800088b9a960 x27: 0000000000000011 x26: dfff800000000000 x25: 1ffff0001117352c x24: 0000000000000000 x23: ffff800088b9a960 x22: ffff0001add7f648 x21: ffff0001add7f640 x20: ffff0000c4cbb2b8 x19: 0000000000000000 x18: ffff8000952fb074 x17: ffff8000952fb072 x16: ffff8000952fb071 x15: ffff8000952fb06c x14: 00000000006be979 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000805bc8e4 x2 : 0000000000000000 x1 : ffff0000c4cb9d80 x0 : 0000000000000001 Call trace: __cmpwait_case_32 arch/arm64/include/asm/cmpxchg.h:233 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:259 [inline] (P) csd_lock_wait kernel/smp.c:363 [inline] (P) csd_lock kernel/smp.c:396 [inline] (P) smp_call_function_many_cond+0x73c/0x1590 kernel/smp.c:944 (P) smp_call_function kernel/smp.c:1043 [inline] kick_all_cpus_sync+0x34/0x40 kernel/smp.c:1192 flush_icache_range arch/arm64/include/asm/cacheflush.h:105 [inline] __text_poke+0xd8/0xf8 arch/arm64/kernel/patching.c:129 aarch64_insn_copy+0x3c/0x50 arch/arm64/kernel/patching.c:160 bpf_arch_text_copy+0x34/0x54 arch/arm64/net/bpf_jit_comp.c:2403 bpf_jit_binary_pack_finalize+0x44/0xf0 kernel/bpf/core.c:1243 bpf_int_jit_compile+0xd4c/0x1184 arch/arm64/net/bpf_jit_comp.c:2323 bpf_prog_jit_compile kernel/bpf/core.c:2634 [inline] __bpf_prog_select_runtime+0x3a0/0x728 kernel/bpf/core.c:2684 bpf_prog_select_runtime+0x2c/0x3c kernel/bpf/core.c:2724 bpf_migrate_filter net/core/filter.c:1322 [inline] bpf_prepare_filter+0xc74/0xdac net/core/filter.c:1370 bpf_prog_create_from_user+0x1c4/0x26c net/core/filter.c:1464 seccomp_prepare_filter kernel/seccomp.c:701 [inline] seccomp_prepare_user_filter kernel/seccomp.c:738 [inline] seccomp_set_mode_filter kernel/seccomp.c:1988 [inline] do_seccomp+0x6fc/0xbfc kernel/seccomp.c:2108 __do_sys_seccomp kernel/seccomp.c:2127 [inline] __se_sys_seccomp kernel/seccomp.c:2124 [inline] __arm64_sys_seccomp+0x84/0x98 kernel/seccomp.c:2124 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5565 Comm: syz.1.248 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : unwind_find_stack+0x134/0x150 arch/arm64/include/asm/stacktrace/common.h:89 lr : unwind_find_stack+0x134/0x150 arch/arm64/include/asm/stacktrace/common.h:79 sp : ffff8000a8b063d0 x29: ffff8000a8b063d0 x28: ffff800088b9a960 x27: ffff0000c75b5880 x26: ffff80008539b8e4 x25: ffff8000a8b06468 x24: ffff8000a8b08000 x23: ffff8000a8b068a0 x22: ffff8000a8b06418 x21: 0000000000000010 x20: ffff8000a8b06428 x19: ffff8000a8b06890 x18: 1fffe00035bac428 x17: ff00000020200000 x16: ffffffffcc45010a x15: ff00000020200000 x14: 000000000156e933 x13: 000000000000001b x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000080000 x8 : ffff80009b137000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff80008015301c x2 : ffff8000a8b08000 x1 : ffff0000c75b5880 x0 : 0000000000000001 Call trace: unwind_find_stack+0x134/0x150 arch/arm64/include/asm/stacktrace/common.h:79 (P) kunwind_next_frame_record arch/arm64/kernel/stacktrace.c:227 [inline] kunwind_next arch/arm64/kernel/stacktrace.c:266 [inline] do_kunwind arch/arm64/kernel/stacktrace.c:295 [inline] kunwind_stack_walk arch/arm64/kernel/stacktrace.c:366 [inline] arch_stack_walk+0x238/0x328 arch/arm64/kernel/stacktrace.c:390 stack_trace_save+0x9c/0xf0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x40/0x78 mm/kasan/common.c:78 kasan_save_alloc_info+0x40/0x50 mm/kasan/generic.c:570 poison_kmalloc_redzone mm/kasan/common.c:398 [inline] __kasan_kmalloc+0x9c/0xb4 mm/kasan/common.c:415 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5414 [inline] __kmalloc_noprof+0x34c/0x6c8 mm/slub.c:5439 _kmalloc_noprof include/linux/slab.h:995 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] hash_netportnet4_resize+0x950/0x1868 net/netfilter/ipset/ip_set_hash_gen.h:841 call_ad+0x294/0x764 net/netfilter/ipset/ip_set_core.c:1777 ip_set_ad+0x670/0x7c0 net/netfilter/ipset/ip_set_core.c:1861 ip_set_uadd+0x74/0x8c net/netfilter/ipset/ip_set_core.c:1884 nfnetlink_rcv_msg+0xad8/0x1044 net/netfilter/nfnetlink.c:300 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 nfnetlink_rcv+0x218/0x16ec net/netfilter/nfnetlink.c:667 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 ____sys_sendmsg+0x3d0/0x6c8 net/socket.c:2713 ___sys_sendmsg+0x198/0x224 net/socket.c:2767 __sys_sendmsg+0x158/0x204 net/socket.c:2799 __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __arm64_sys_sendmsg+0x88/0x9c net/socket.c:2802 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 net_ratelimit: 195 callbacks suppressed