watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.2:6448] Modules linked in: irq event stamp: 10565 hardirqs last enabled at (10564): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:81 [inline] hardirqs last enabled at (10564): [] exit_to_kernel_mode+0x100/0x178 arch/arm64/kernel/entry-common.c:91 hardirqs last disabled at (10565): [] enter_el1_irq_or_nmi+0x10/0x1c arch/arm64/kernel/entry-common.c:227 softirqs last enabled at (876): [] softirq_handle_end kernel/softirq.c:401 [inline] softirqs last enabled at (876): [] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587 softirqs last disabled at (4839): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (4839): [] invoke_softirq kernel/softirq.c:439 [inline] softirqs last disabled at (4839): [] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636 CPU: 0 PID: 6448 Comm: syz-executor.2 Not tainted 5.15.116-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid+0x2c/0x150 lib/list_debug.c:46 lr : __list_del_entry include/linux/list.h:132 [inline] lr : list_move_tail include/linux/list.h:227 [inline] lr : fq_pie_qdisc_dequeue+0x288/0x874 net/sched/sch_fq_pie.c:248 sp : ffff800008007100 x29: ffff800008007100 x28: ffff000106ad9dc0 x27: 1fffe00020d5b3b6 x26: dfff800000000000 x25: ffff0000d54152e8 x24: ffff0000d54152f0 x23: ffff000106ad9db0 x22: ffff0000d54152e0 x21: dfff800000000000 x20: 0000000000000000 x19: ffff000106ad9dc0 x18: 0000000000000504 x17: ff8080000ff527ac x16: 0000000000000000 x15: ffff80000ff527ac x14: 0000000000000001 x13: ffffffffffffffff x12: 0000000000000100 x11: ff80800010098b18 x10: 0000000000000000 x9 : ffff0000d5415328 x8 : 0000000000000000 x7 : ffff80000fd8c024 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff0000d54152e0 x1 : 0000000000000000 x0 : ffff000106ad9dc8 Call trace: __list_del_entry_valid+0x2c/0x150 lib/list_debug.c:46 __list_del_entry include/linux/list.h:132 [inline] list_move_tail include/linux/list.h:227 [inline] fq_pie_qdisc_dequeue+0x288/0x874 net/sched/sch_fq_pie.c:248 dequeue_skb net/sched/sch_generic.c:292 [inline] qdisc_restart net/sched/sch_generic.c:397 [inline] __qdisc_run+0x1ec/0x1fc0 net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3879 [inline] __dev_queue_xmit+0x1068/0x2a6c net/core/dev.c:4190 dev_queue_xmit+0x24/0x34 net/core/dev.c:4258 neigh_connected_output+0x334/0x378 net/core/neighbour.c:1553 neigh_output include/net/neighbour.h:516 [inline] ip6_finish_output2+0x1344/0x1c48 net/ipv6/ip6_output.c:126 __ip6_finish_output+0x518/0x67c net/ipv6/ip6_output.c:191 ip6_finish_output+0x40/0x218 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:449 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] ndisc_send_skb+0xbf8/0x1788 net/ipv6/ndisc.c:508 ndisc_send_rs+0x494/0x5fc net/ipv6/ndisc.c:702 addrconf_rs_timer+0x308/0x5a8 net/ipv6/addrconf.c:3932 call_timer_fn+0x19c/0x8f0 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x554/0x718 kernel/time/timer.c:1737 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1750 __do_softirq+0x344/0xe20 kernel/softirq.c:558 do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] invoke_softirq kernel/softirq.c:439 [inline] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636 irq_exit+0x14/0x88 kernel/softirq.c:660 handle_domain_irq+0xf4/0x178 kernel/irq/irqdesc.c:710 gic_handle_irq+0x78/0x1c8 drivers/irqchip/irq-gic-v3.c:757 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:899 do_interrupt_handler+0x74/0x94 arch/arm64/kernel/entry-common.c:267 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:442 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:458 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:580 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] _raw_spin_unlock_irqrestore+0xbc/0x158 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:418 [inline] unlock_page_lruvec_irqrestore include/linux/memcontrol.h:1533 [inline] __pagevec_lru_add+0x1378/0x16a4 mm/swap.c:1055 lru_cache_add+0x488/0x738 mm/swap.c:453 lru_cache_add_inactive_or_unevictable+0x130/0x344 mm/swap.c:484 do_anonymous_page mm/memory.c:3835 [inline] handle_pte_fault mm/memory.c:4606 [inline] __handle_mm_fault mm/memory.c:4743 [inline] handle_mm_fault+0x2b10/0x33c4 mm/memory.c:4841 __do_page_fault arch/arm64/mm/fault.c:505 [inline] do_page_fault+0x700/0xb60 arch/arm64/mm/fault.c:605 do_translation_fault+0xe8/0x138 arch/arm64/mm/fault.c:686 do_mem_abort+0x70/0x1d8 arch/arm64/mm/fault.c:819 el0_da+0x94/0x20c arch/arm64/kernel/entry-common.c:482 el0t_64_sync_handler+0xc0/0xe4 arch/arm64/kernel/entry-common.c:617 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584