> Source: [sk105729](https://support.checkpoint.com/results/sk/sk105729)

# sk105729 - /var/log/messages shows "kernel: BUG: soft lockup - CPU#0 stuck for 10s! [fw_worker_0:PID]" when using a rule with URI Resource

| Property | Value |
|----------|-------|
| Solution ID | sk105729 |
| Date Created | 2015-04-15 |
| Last Modified | 2015-12-10 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * */var/log/messages* file on Security Gateway shows:  

  `kernel: BUG: soft lockup - CPU#`*N*` stuck for 10s! [fw_worker_0:`*PID*`]`

  *Example* :

  ```
  
  kernel: BUG: soft lockup - CPU#2 stuck for 10s! [fw_worker_1:7208]
  kernel:
  kernel: Pid: 7208, comm: fw_worker_1
  kernel: EIP: 0060:[...] CPU: 2
  kernel: EIP is at ws_stream_queue_make_private+... [fw_1]
  ... ... ...
  kernel: [...] [...] ws_memory_alloc+... [fw_1]
  kernel: [...] [...] ws_connection_read_handler+... [fw_1]
  ```

* */var/log/messages* file on Security Gateway repeatedly shows:  

  `FW-1: fwkbuf_put: kbuf ... cannot hold ... bytes`

* *$FWDIR/conf/ahttpd.elg* file on Security Gateway shows:

  ```
  
  fw_kbuf_put: ioctl(FWKBUF): Cannot allocate memory 
  fw_track_conn: fw_kbuf_put failed 
  fwd_add_to_tracked: fw_track_conn failed: Cannot allocate memory
  ```

## Cause

1. A rule is used with 'URI Resource' in Service column and 'Account' in Track column.
2. Application Control blade is enabled (which by design also performs accounting for connections).

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
