watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.5:12757] Modules linked in: irq event stamp: 84343 hardirqs last enabled at (84342): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline] hardirqs last enabled at (84342): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:94 hardirqs last disabled at (84343): [] __el1_irq arch/arm64/kernel/entry-common.c:470 [inline] hardirqs last disabled at (84343): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (79206): [] spin_unlock_bh include/linux/spinlock.h:395 [inline] softirqs last enabled at (79206): [] bdi_register_va+0x508/0x7e8 mm/backing-dev.c:1024 softirqs last disabled at (79371): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 CPU: 1 PID: 12757 Comm: syz-executor.5 Not tainted 6.4.0-rc5-syzkaller-g177239177378 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del include/linux/list.h:114 [inline] pc : __list_del_entry include/linux/list.h:137 [inline] pc : list_move_tail include/linux/list.h:229 [inline] pc : fq_pie_qdisc_dequeue+0x2cc/0x8ac net/sched/sch_fq_pie.c:248 lr : __list_del_entry include/linux/list.h:137 [inline] lr : list_move_tail include/linux/list.h:229 [inline] lr : fq_pie_qdisc_dequeue+0x290/0x8ac net/sched/sch_fq_pie.c:248 sp : ffff800080017210 x29: ffff800080017280 x28: ffff00012cd03000 x27: ffff000129b03ae8 x26: ffff000129b03af0 x25: dfff800000000000 x24: ffff000129b03ae0 x23: ffff00012cd02ff0 x22: 0000000000000040 x21: ffff000129b03ae0 x20: ffff000129b03ae8 x19: ffff000129b03ae0 x18: ffff800080016e40 x17: 0000000000000000 x16: ffff80008050c16c x15: 0000000000000302 x14: 0000000000000100 x13: 0000000000000000 x12: 0000000000000001 x11: 0000000000000302 x10: 0000000000000100 x9 : 0000000000000000 x8 : 0000000000000000 x7 : ffff80008041c668 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff00012cd03000 x1 : 0000000000000000 x0 : ffff00012cd03008 Call trace: __list_del include/linux/list.h:114 [inline] __list_del_entry include/linux/list.h:137 [inline] list_move_tail include/linux/list.h:229 [inline] fq_pie_qdisc_dequeue+0x2cc/0x8ac net/sched/sch_fq_pie.c:248 dequeue_skb net/sched/sch_generic.c:292 [inline] qdisc_restart net/sched/sch_generic.c:397 [inline] __qdisc_run+0x1fc/0x231c net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3868 [inline] __dev_queue_xmit+0xc80/0x3318 net/core/dev.c:4210 dev_queue_xmit include/linux/netdevice.h:3085 [inline] neigh_connected_output+0x2f8/0x38c net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip6_finish_output2+0xd60/0x1a1c net/ipv6/ip6_output.c:134 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline] ip6_finish_output+0x538/0x8c8 net/ipv6/ip6_output.c:206 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:227 dst_output include/net/dst.h:458 [inline] NF_HOOK include/linux/netfilter.h:303 [inline] ndisc_send_skb+0xc30/0x1790 net/ipv6/ndisc.c:508 ndisc_send_rs+0x47c/0x5d4 net/ipv6/ndisc.c:718 addrconf_rs_timer+0x300/0x58c net/ipv6/addrconf.c:3936 call_timer_fn+0x19c/0x8cc kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x55c/0x734 kernel/time/timer.c:2022 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:2035 __do_softirq+0x2d0/0xd54 kernel/softirq.c:571 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:882 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:650 irq_exit_rcu+0x14/0x84 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:474 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:488 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:493 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:587 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:182 [inline] arch_local_irq_restore arch/arm64/include/asm/irqflags.h:202 [inline] console_emit_next_record kernel/printk/printk.c:2884 [inline] console_flush_all+0x670/0xb54 kernel/printk/printk.c:2933 console_unlock+0x148/0x274 kernel/printk/printk.c:3007 vprintk_emit+0x14c/0x2e4 kernel/printk/printk.c:2307 vprintk_default+0xa0/0xe4 kernel/printk/printk.c:2318 vprintk+0x218/0x2f0 kernel/printk/printk_safe.c:50 _printk+0xdc/0x128 kernel/printk/printk.c:2328 _btrfs_printk+0x514/0x534 fs/btrfs/messages.c:244 btrfs_parse_options+0x1b44/0x29d8 fs/btrfs/super.c:699 open_ctree+0xe58/0x24f0 fs/btrfs/disk-io.c:3480 btrfs_fill_super+0x1b4/0x2e4 fs/btrfs/super.c:1156 btrfs_mount_root+0x6f8/0x7f8 fs/btrfs/super.c:1524 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610 vfs_get_tree+0x90/0x274 fs/super.c:1510 fc_mount fs/namespace.c:1035 [inline] vfs_kern_mount+0xdc/0x178 fs/namespace.c:1065 btrfs_mount+0x330/0x9c8 fs/btrfs/super.c:1584 legacy_get_tree+0xd4/0x16c fs/fs_context.c:610 vfs_get_tree+0x90/0x274 fs/super.c:1510 do_new_mount+0x25c/0x8c4 fs/namespace.c:3039 path_mount+0x590/0xe04 fs/namespace.c:3369 do_mount fs/namespace.c:3382 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x244 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:191 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591