ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 watchdog: BUG: soft lockup - CPU#0 stuck for 226s! [kworker/u8:18:9401] Modules linked in: irq event stamp: 2673278 hardirqs last enabled at (2673277): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (2673277): [] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:542 [inline] hardirqs last enabled at (2673277): [] irqentry_exit+0x24d/0xa10 kernel/entry/common.c:167 hardirqs last disabled at (2673278): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1062 softirqs last enabled at (2673276): [] __do_softirq kernel/softirq.c:679 [inline] softirqs last enabled at (2673276): [] invoke_softirq kernel/softirq.c:519 [inline] softirqs last enabled at (2673276): [] __irq_exit_rcu+0x194/0x210 kernel/softirq.c:767 softirqs last disabled at (2673195): [] __do_softirq kernel/softirq.c:679 [inline] softirqs last disabled at (2673195): [] invoke_softirq kernel/softirq.c:519 [inline] softirqs last disabled at (2673195): [] __irq_exit_rcu+0x194/0x210 kernel/softirq.c:767 CPU: 0 UID: 0 PID: 9401 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:csd_lock_wait kernel/smp.c:363 [inline] RIP: 0010:csd_lock kernel/smp.c:396 [inline] RIP: 0010:smp_call_function_many_cond+0x57c/0x18c0 kernel/smp.c:944 Code: 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 1b c3 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 31 ff 41 83 e6 RSP: 0018:ffffc900043af8a0 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff8880b8541a40 RCX: 0000000000000001 RDX: ffff888028bb1f40 RSI: ffffffff81ff0bd5 RDI: ffff888028bb1f40 RBP: ffff8880b8541a48 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 R13: ffffed10170a8349 R14: 0000000000000001 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2cdfe51000 CR3: 000000000eb96000 CR4: 0000000000350ef0 Call Trace: on_each_cpu include/linux/smp.h:71 [inline] smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2602 [inline] smp_text_poke_batch_finish+0x337/0xc60 arch/x86/kernel/alternative.c:2812 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x37a/0x550 kernel/jump_label.c:910 static_key_enable_cpuslocked+0x1bc/0x270 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate mm/kfence/core.c:902 [inline] toggle_allocation_gate+0xfe/0x2d0 mm/kfence/core.c:894 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396 process_scheduled_works kernel/workqueue.c:3479 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 RIP: 0010:find_held_lock+0x17/0x80 kernel/locking/lockdep.c:5365 Code: 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 41 89 d6 41 55 49 89 cd 41 54 49 89 f4 55 8d 6a ff 48 63 c5 53 <48> 8d 04 80 48 8d 9c c7 b0 0b 00 00 48 89 df e8 a5 12 e8 09 85 c0 RSP: 0018:ffffc90000a18d58 EFLAGS: 00000002 RAX: 0000000000000000 RBX: ffff88807c79e2c0 RCX: ffffc90000a18d94 RDX: 0000000000000001 RSI: ffff88807c79e2c0 RDI: ffff88801f2e5dc0 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807c79e2c0 R13: ffffc90000a18d94 R14: 0000000000000001 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123c61000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff3d1c2e20 CR3: 000000007f1ac000 CR4: 0000000000350ef0 Call Trace: __lock_release kernel/locking/lockdep.c:5554 [inline] lock_release kernel/locking/lockdep.c:5930 [inline] lock_release+0xd9/0x310 kernel/locking/lockdep.c:5916 __raw_spin_unlock include/linux/spinlock_api_smp.h:199 [inline] _raw_spin_unlock+0x16/0x50 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] advance_sched+0x6a2/0xd20 net/sched/sch_taprio.c:989 __run_hrtimer kernel/time/hrtimer.c:2067 [inline] __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124 hrtimer_interrupt+0x441/0xaa0 kernel/time/hrtimer.c:2243 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x109/0x470 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 38 9d 02 e9 6e ba 41 f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 16 1d 00 fb f4 47 ba 41 f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 RAX: 0000000001f236e9 RBX: ffff88801f2e5dc0 RCX: ffffffff8bcea115 RDX: 0000000000000001 RSI: ffffffff8e3f1693 RDI: ffffffff8c622480 RBP: ffffed1003e5cbb8 R08: 0000000000000001 R09: ffffed10170a67bd R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158