syzbot

watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz.0.102:4773]
Modules linked in:
irq event stamp: 5651
hardirqs last  enabled at (5650): [<ffff800011a3ac74>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (5650): [<ffff800011a3ac74>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (5651): [<ffff800011a38dbc>] __el1_irq arch/arm64/kernel/entry-common.c:468 [inline]
hardirqs last disabled at (5651): [<ffff800011a38dbc>] el1_interrupt+0x24/0x54 arch/arm64/kernel/entry-common.c:486
softirqs last  enabled at (1044): [<ffff80000fd560d8>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (1044): [<ffff80000fd560d8>] release_sock+0x16c/0x1bc net/core/sock.c:3522
softirqs last disabled at (1050): [<ffff80000fd694c4>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (1050): [<ffff80000fd694c4>] lock_sock_nested+0x88/0x130 net/core/sock.c:3499
CPU: 0 PID: 4773 Comm: syz.0.102 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : queued_spin_lock_slowpath+0x138/0xc18 kernel/locking/qspinlock.c:383
lr : queued_spin_lock_slowpath+0x144/0xc18 kernel/locking/qspinlock.c:383
sp : ffff8000218a76c0
x29: ffff8000218a7760 x28: ffff800015173008 x27: 1fffe0001893c8d4
x26: 0000000000000001 x25: ffff0000db6a8000 x24: dfff800000000000
x23: ffff700004314edc x22: ffff700004314efc x21: ffff0000c49e46a0
x20: ffff0000c49e46a8 x19: ffff0000c49e4698 x18: 0000000000000000
x17: 0000000000000000 x16: ffff8000082eea88 x15: 0000000000000000
x14: 0000000000000001 x13: 1fffe0001893c8d3 x12: 0000000000000000
x11: 0000000000000000 x10: ffff60001893c8d4 x9 : 0000000000000000
x8 : 0000000000000101 x7 : ffff80000fd694c4 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800011b24db0
x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001
Call trace:
 __cmpwait_case_32 arch/arm64/include/asm/cmpxchg.h:252 [inline]
 __cmpwait arch/arm64/include/asm/cmpxchg.h:278 [inline]
 queued_spin_lock_slowpath+0x138/0xc18 kernel/locking/qspinlock.c:383
 queued_spin_lock include/asm-generic/qspinlock.h:114 [inline]
 do_raw_spin_lock+0x2f4/0x2f8 kernel/locking/spinlock_debug.c:115
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:127 [inline]
 _raw_spin_lock_bh+0x5c/0x6c kernel/locking/spinlock.c:178
 spin_lock_bh include/linux/spinlock.h:356 [inline]
 lock_sock_nested+0x88/0x130 net/core/sock.c:3499
 lock_sock include/net/sock.h:1805 [inline]
 tipc_sendstream+0x50/0x84 net/tipc/socket.c:1549
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585