watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [dhcpcd:5293] Modules linked in: irq event stamp: 260592 hardirqs last enabled at (260591): [] seqcount_lockdep_reader_access+0x89/0xc0 include/linux/seqlock.h:75 hardirqs last disabled at (260592): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1062 softirqs last enabled at (260522): [] sockopt_release_sock net/core/sock.c:1164 [inline] softirqs last enabled at (260522): [] sk_setsockopt+0x2912/0x2fe0 net/core/sock.c:1689 softirqs last disabled at (260520): [] spin_lock_bh include/linux/spinlock.h:353 [inline] softirqs last disabled at (260520): [] release_sock+0x2f/0x260 net/core/sock.c:3937 CPU: 0 UID: 0 PID: 5293 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:lock_is_held_type+0x106/0x150 kernel/locking/lockdep.c:6021 Code: 1c 00 00 b8 ff ff ff ff 65 0f c1 05 8c fe a2 08 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cb 10 03 00 cc 90 0f 0b 90 48 c7 RSP: 0018:ffffc9000340ef48 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000004 RDX: 0000000000000000 RSI: ffffffff8e718f45 RDI: ffffffff8c6e7280 RBP: 00000000ffffffff R08: ffffffff81d52f94 R09: 0000000000000000 R10: 6f6c5f646165725f R11: 64656863735f6b63 R12: 0000000000000246 R13: ffff888030859f40 R14: ffffffff8fd5a360 R15: 0000000000000003 FS: 00007fce79afd780(0000) GS:ffff888123a4f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055c1ac7df4f0 CR3: 0000000077886000 CR4: 00000000003526f0 DR0: 0000200000000b00 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: trace_call_bpf+0x1a4/0xb80 kernel/trace/bpf_trace.c:147 perf_trace_run_bpf_submit+0x78/0x170 kernel/events/core.c:11512 do_perf_trace_lock include/trace/events/lock.h:49 [inline] perf_trace_lock+0x32e/0x410 include/trace/events/lock.h:49 __do_trace_lock_release include/trace/events/lock.h:68 [inline] trace_lock_release include/trace/events/lock.h:68 [inline] lock_release+0x396/0x3c0 kernel/locking/lockdep.c:5954 rcu_lock_release include/linux/rcupdate.h:319 [inline] rcu_read_unlock_sched include/linux/rcupdate.h:971 [inline] pfn_valid+0x3bb/0x490 include/linux/mmzone.h:2317 page_table_check_set+0x23/0x590 mm/page_table_check.c:105 page_table_check_ptes_set include/linux/page_table_check.h:83 [inline] set_ptes include/linux/pgtable.h:447 [inline] __copy_present_ptes mm/memory.c:1163 [inline] copy_present_ptes mm/memory.c:1242 [inline] copy_pte_range mm/memory.c:1365 [inline] copy_pmd_range+0x4adc/0x5c00 mm/memory.c:1453 copy_pud_range mm/memory.c:1490 [inline] copy_p4d_range mm/memory.c:1514 [inline] copy_page_range+0xc7d/0x1280 mm/memory.c:1600 dup_mmap+0xf17/0x1dc0 mm/mmap.c:1819 dup_mm kernel/fork.c:1541 [inline] copy_mm+0x115/0x470 kernel/fork.c:1593 copy_process+0x1ecc/0x44b0 kernel/fork.c:2319 kernel_clone+0x2d7/0x940 kernel/fork.c:2783 __do_sys_clone kernel/fork.c:2925 [inline] __se_sys_clone kernel/fork.c:2909 [inline] __x64_sys_clone+0x1b6/0x230 kernel/fork.c:2909 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fce79bd1636 Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 RSP: 002b:00007fffd7f78290 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007fffd7f78298 RCX: 00007fce79bd1636 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 00007fffd7f987e0 R08: 0000000000000000 R09: 0000000000000001 R10: 00007fce79afda50 R11: 0000000000000246 R12: 00007fffd7f783d0 R13: 0000000000000000 R14: 0000000000000000 R15: 000055c188a4eac0 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 7806 Comm: syz.5.471 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:strlen+0xb/0x70 lib/string.c:399 Code: 38 c1 7c db e8 c6 68 49 f6 eb d4 90 0f 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 54 53 <48> c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 RSP: 0018:ffffc90000a08898 EFLAGS: 00000086 RAX: ffffffff8c0e5a00 RBX: ffffffff8fd5a378 RCX: 0000000000000001 RDX: ffffffff81d52f94 RSI: ffffffff8fd5a360 RDI: ffffffff8c0e5a00 RBP: ffffc90000a089a8 R08: 0000000001000001 R09: 0000000000000000 R10: ffffc90000a08aa0 R11: ffffffffa040aa5c R12: dffffc0000000000 R13: ffffffff81d52f94 R14: ffffffff8fc25de0 R15: 1ffff92000141120 FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555762657d0 CR3: 000000002a708000 CR4: 00000000003526f0 DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: __fortify_strlen include/linux/fortify-string.h:218 [inline] trace_event_get_offsets_lock include/trace/events/lock.h:56 [inline] do_perf_trace_lock include/trace/events/lock.h:49 [inline] perf_trace_lock+0xd6/0x410 include/trace/events/lock.h:49 __do_trace_lock_release include/trace/events/lock.h:68 [inline] trace_lock_release include/trace/events/lock.h:68 [inline] lock_release+0x396/0x3c0 kernel/locking/lockdep.c:5954 rcu_lock_release include/linux/rcupdate.h:319 [inline] rcu_read_unlock include/linux/rcupdate.h:880 [inline] trace_call_bpf+0x7c4/0xb80 kernel/trace/bpf_trace.c:149 perf_trace_run_bpf_submit+0x78/0x170 kernel/events/core.c:11512 do_perf_trace_lock include/trace/events/lock.h:49 [inline] perf_trace_lock+0x32e/0x410 include/trace/events/lock.h:49 __do_trace_lock_release include/trace/events/lock.h:68 [inline] trace_lock_release include/trace/events/lock.h:68 [inline] lock_release+0x396/0x3c0 kernel/locking/lockdep.c:5954 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:208 [inline] _raw_spin_unlock_irqrestore+0x1b/0x80 kernel/locking/spinlock.c:221 debug_object_activate+0x2ec/0x420 lib/debugobjects.c:891 debug_hrtimer_activate kernel/time/hrtimer.c:486 [inline] debug_activate kernel/time/hrtimer.c:529 [inline] enqueue_hrtimer+0xa9/0x2c0 kernel/time/hrtimer.c:1137 __run_hrtimer kernel/time/hrtimer.c:2091 [inline] __hrtimer_run_queues+0x4ce/0xa10 kernel/time/hrtimer.c:2132 hrtimer_interrupt+0x4cd/0xaa0 kernel/time/hrtimer.c:2251 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:csd_lock_wait kernel/smp.c:389 [inline] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 kernel/smp.c:1028 Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 67 66 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 52 61 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 38 61 0c 00 RSP: 0018:ffffc90005b371e0 EFLAGS: 00000293 RAX: ffffffff81bc8f18 RBX: ffff8880b8443d68 RCX: ffff8880548c1f40 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90005b37330 R08: ffffffff917c7cbf R09: 1ffffffff22f8f97 R10: dffffc0000000000 R11: fffffbfff22f8f98 R12: 1ffff110170887ad R13: dffffc0000000000 R14: 1ffff1100a91869b R15: 0000000000000000 __flush_tlb_multi arch/x86/include/asm/paravirt.h:46 [inline] flush_tlb_multi arch/x86/mm/tlb.c:1361 [inline] flush_tlb_mm_range+0x910/0x10b0 arch/x86/mm/tlb.c:1435 flush_tlb_page arch/x86/include/asm/tlbflush.h:352 [inline] ptep_clear_flush+0x120/0x170 mm/pgtable-generic.c:116 wp_page_copy mm/memory.c:4039 [inline] do_wp_page+0x3c52/0x4b70 mm/memory.c:4438 handle_pte_fault mm/memory.c:6554 [inline] __handle_mm_fault mm/memory.c:6679 [inline] handle_mm_fault+0x15d7/0x3750 mm/memory.c:6846 do_user_addr_fault+0x7f6/0x1480 arch/x86/mm/fault.c:1394 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0010:__put_user_4+0xd/0x30 arch/x86/lib/putuser.S:74 Code: 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 aa 03 00 90 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90005b37ad0 EFLAGS: 00050202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00005555762657d0 RDX: 0000000000000000 RSI: ffffffff8e718f45 RDI: ffffffff8c6e7280 RBP: dffffc0000000000 R08: ffffc90005b3788f R09: 0000000000000000 R10: ffffc90005b37880 R11: ffffffffa040aa5c R12: dffffc0000000000 R13: 1ffff1100a9184ca R14: ffff8880548c1f40 R15: ffff8880548c2650 mm_release kernel/fork.c:1494 [inline] mm_exit_exec_release+0xe1/0x290 kernel/fork.c:1512 exit_mm+0x50/0x240 kernel/exit.c:556 do_exit+0x6a8/0x2360 kernel/exit.c:967 do_group_exit+0x22d/0x2f0 kernel/exit.c:1123 get_signal+0x1216/0x12c0 kernel/signal.c:3112 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop kernel/entry/common.c:101 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x348/0x9b0 kernel/entry/common.c:152 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f3117273d2e Code: e3 3a 00 48 81 ce ff ff ff 3f 31 c0 eb 1c 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 83 c0 01 48 83 f8 08 0f 84 38 fe ff ff <48> 3b 34 c1 75 ec 48 89 de 48 c1 e0 0a 48 c1 ee 14 81 e6 ff 03 00 RSP: 002b:00007ffe689c9820 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffffff820840ca RCX: 000000110c230000 RDX: 00000000000000ca RSI: ffffffffbfffffff RDI: 0000000000000001 RBP: 0000000000000000 R08: 00007f3117610000 R09: 00007f3117612000 R10: 00000000820840ce R11: 0000000000000001 R12: 00007f3117626128 R13: 0000000000000000 R14: ffffffff820849a0 R15: 00007f3118155720