watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz-executor.5:6741] Modules linked in: irq event stamp: 8571 hardirqs last enabled at (8570): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline] hardirqs last enabled at (8570): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:94 hardirqs last disabled at (8571): [] __el1_irq arch/arm64/kernel/entry-common.c:468 [inline] hardirqs last disabled at (8571): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:486 softirqs last enabled at (1110): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1159): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 CPU: 0 PID: 6741 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_add_valid+0x28/0x110 lib/list_debug.c:27 lr : __list_add include/linux/list.h:69 [inline] lr : list_add_tail include/linux/list.h:102 [inline] lr : list_move_tail include/linux/list.h:230 [inline] lr : fq_pie_qdisc_dequeue+0x3cc/0x8ac net/sched/sch_fq_pie.c:248 sp : ffff8000080071d0 x29: ffff8000080071d0 x28: ffff00012c2b06d0 x27: ffff0000cb1772e8 x26: ffff0000cb1772f0 x25: dfff800000000000 x24: ffff0000cb1772e0 x23: 0000800000000000 x22: 0000000000000040 x21: ffff0000cb1772e0 x20: ffff0000cb1772e8 x19: ffff0000cb1772e0 x18: ffff800008006e60 x17: 0000000000000000 x16: ffff80000850af6c x15: 0000000000000301 x14: 0000000000000100 x13: 0000000000000000 x12: 0000000000000001 x11: 0000000000000301 x10: 0000000000000100 x9 : 0000000000000000 x8 : 0000000000000000 x7 : ffff80000841c468 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff0000cb1772e0 x1 : ffff0000cb1772e0 x0 : ffff00012c2b06d0 Call trace: __list_add_valid+0x28/0x110 __list_add include/linux/list.h:69 [inline] list_add_tail include/linux/list.h:102 [inline] list_move_tail include/linux/list.h:230 [inline] fq_pie_qdisc_dequeue+0x3cc/0x8ac net/sched/sch_fq_pie.c:248 dequeue_skb net/sched/sch_generic.c:292 [inline] qdisc_restart net/sched/sch_generic.c:397 [inline] __qdisc_run+0x1fc/0x231c net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3868 [inline] __dev_queue_xmit+0xc80/0x3318 net/core/dev.c:4210 dev_queue_xmit include/linux/netdevice.h:3085 [inline] neigh_connected_output+0x2f8/0x38c net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip6_finish_output2+0xd60/0x1a1c net/ipv6/ip6_output.c:134 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline] ip6_finish_output+0x538/0x8c8 net/ipv6/ip6_output.c:206 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:227 dst_output include/net/dst.h:458 [inline] NF_HOOK include/linux/netfilter.h:303 [inline] ndisc_send_skb+0xc30/0x1790 net/ipv6/ndisc.c:508 ndisc_send_rs+0x47c/0x5d4 net/ipv6/ndisc.c:718 addrconf_rs_timer+0x300/0x58c net/ipv6/addrconf.c:3936 call_timer_fn+0x19c/0x8cc kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x55c/0x734 kernel/time/timer.c:2022 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:2035 __do_softirq+0x2d0/0xd54 kernel/softirq.c:571 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:882 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:650 irq_exit_rcu+0x14/0x84 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:587 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:182 [inline] arch_local_irq_restore+0x8/0xc arch/arm64/include/asm/irqflags.h:202 lock_is_held include/linux/lockdep.h:288 [inline] rcu_read_lock_held+0x34/0x50 kernel/rcu/update.c:350 mt_slot lib/maple_tree.c:824 [inline] mtree_range_walk+0x424/0x674 lib/maple_tree.c:2977 mas_state_walk lib/maple_tree.c:3881 [inline] mas_walk+0xa0/0x1a4 lib/maple_tree.c:5109 lock_vma_under_rcu+0x1e4/0x650 mm/memory.c:5279 do_page_fault+0x2e0/0xcbc arch/arm64/mm/fault.c:606 do_translation_fault+0x94/0xc8 arch/arm64/mm/fault.c:742 do_mem_abort+0x74/0x200 arch/arm64/mm/fault.c:878 el0_da+0x64/0x178 arch/arm64/kernel/entry-common.c:515 el0t_64_sync_handler+0xcc/0xf0 arch/arm64/kernel/entry-common.c:658 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591