watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.3:6171] Modules linked in: irq event stamp: 37603 hardirqs last enabled at (37602): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline] hardirqs last enabled at (37602): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:94 hardirqs last disabled at (37603): [] __el1_irq arch/arm64/kernel/entry-common.c:470 [inline] hardirqs last disabled at (37603): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (32776): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (33143): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 CPU: 1 PID: 6171 Comm: syz-executor.3 Not tainted 6.4.0-rc4-syzkaller-g3bb1a3e1674b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid+0x68/0x158 lib/list_debug.c:56 lr : __list_del_entry include/linux/list.h:134 [inline] lr : list_move_tail include/linux/list.h:229 [inline] lr : fq_pie_qdisc_dequeue+0x288/0x8ac net/sched/sch_fq_pie.c:248 sp : ffff8000800171e0 x29: ffff8000800171e0 x28: ffff0001241f8620 x27: ffff00012677b2e8 x26: ffff00012677b2f0 x25: dfff800000000000 x24: ffff00012677b2e0 x23: ffff0001241f8610 x22: dfff800000000000 x21: ffff00012677b2e0 x20: ffff00012677b2e0 x19: ffff0001241f8620 x18: ffff800080016e40 x17: 0000000000000000 x16: ffff80008050adf0 x15: 0000000000000302 x14: 0000000000000100 x13: 0000000000000000 x12: 0000000000000001 x11: 0000000000000302 x10: 0000000000000100 x9 : ffff00012677b328 x8 : dead000000000100 x7 : ffff80008041beec x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff00012677b2e0 x1 : 0000000000000000 x0 : ffff0001241f8628 Call trace: __list_del_entry_valid+0x68/0x158 lib/list_debug.c:53 __list_del_entry include/linux/list.h:134 [inline] list_move_tail include/linux/list.h:229 [inline] fq_pie_qdisc_dequeue+0x288/0x8ac net/sched/sch_fq_pie.c:248 dequeue_skb net/sched/sch_generic.c:292 [inline] qdisc_restart net/sched/sch_generic.c:397 [inline] __qdisc_run+0x1fc/0x231c net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3868 [inline] __dev_queue_xmit+0xc80/0x3318 net/core/dev.c:4210 dev_queue_xmit include/linux/netdevice.h:3085 [inline] neigh_connected_output+0x2f8/0x38c net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip6_finish_output2+0xd60/0x1a1c net/ipv6/ip6_output.c:134 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline] ip6_finish_output+0x538/0x8c8 net/ipv6/ip6_output.c:206 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:227 dst_output include/net/dst.h:458 [inline] NF_HOOK include/linux/netfilter.h:303 [inline] ndisc_send_skb+0xc30/0x1790 net/ipv6/ndisc.c:508 ndisc_send_rs+0x47c/0x5d4 net/ipv6/ndisc.c:718 addrconf_rs_timer+0x300/0x58c net/ipv6/addrconf.c:3936 call_timer_fn+0x19c/0x8cc kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x55c/0x734 kernel/time/timer.c:2022 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:2035 __do_softirq+0x2d0/0xd54 kernel/softirq.c:571 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:882 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:650 irq_exit_rcu+0x14/0x84 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:474 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:488 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:493 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:587 __sanitizer_cov_trace_pc+0x8/0x7c kernel/kcov.c:200 check_preemption_disabled+0x38/0xf8 lib/smp_processor_id.c:16 debug_smp_processor_id+0x20/0x2c lib/smp_processor_id.c:60 rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline] rcu_is_watching+0x5c/0x18c kernel/rcu/tree.c:695 trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0x100/0x71c kernel/locking/lockdep.c:5676 rcu_lock_acquire+0x40/0x4c include/linux/rcupdate.h:327 rcu_read_lock include/linux/rcupdate.h:773 [inline] count_memcg_event_mm+0x2c/0x2b8 include/linux/memcontrol.h:1108 mm_account_fault mm/memory.c:5123 [inline] handle_mm_fault+0x10d4/0x48ec mm/memory.c:5259 do_page_fault+0x330/0xcbc arch/arm64/mm/fault.c:614 do_translation_fault+0x94/0xc8 arch/arm64/mm/fault.c:741 do_mem_abort+0x74/0x200 arch/arm64/mm/fault.c:877 el0_da+0x64/0x17c arch/arm64/kernel/entry-common.c:517 el0t_64_sync_handler+0xcc/0xfc arch/arm64/kernel/entry-common.c:668 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591