watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.5:7333] Modules linked in: irq event stamp: 98489 hardirqs last enabled at (98488): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline] hardirqs last enabled at (98488): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:94 hardirqs last disabled at (98489): [] __el1_irq arch/arm64/kernel/entry-common.c:470 [inline] hardirqs last disabled at (98489): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (89824): [] softirq_handle_end kernel/softirq.c:414 [inline] softirqs last enabled at (89824): [] __do_softirq+0xac0/0xd54 kernel/softirq.c:600 softirqs last disabled at (93095): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 CPU: 1 PID: 7333 Comm: syz-executor.5 Not tainted 6.4.0-rc4-syzkaller-gcd6bd67ad7ab #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : tb_switch_find_vse_cap+0x5530/0xb358 lr : __list_del_entry include/linux/list.h:137 [inline] lr : list_move_tail include/linux/list.h:229 [inline] lr : fq_pie_qdisc_dequeue+0x290/0x8ac net/sched/sch_fq_pie.c:248 sp : ffff800080017210 x29: ffff800080017280 x28: ffff000124392570 x27: ffff000122c8d2e8 x26: ffff000122c8d2f0 x25: dfff800000000000 x24: ffff000122c8d2e0 x23: ffff000124392560 x22: 0000000000000040 x21: 1fffe000248724ac x20: 0000000000000000 x19: 0000000000000000 x18: ffff800080016e40 x17: 0000000000000000 x16: ffff80008050adf0 x15: 0000000000000302 x14: 0000000000000100 x13: 0000000000000000 x12: 0000000000000001 x11: 0000000000000302 x10: 0000000000000100 x9 : ffff000122c8d328 x8 : 0000000000000000 x7 : ffff80008041beec x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff000124392570 x1 : 0000000000000000 x0 : 0000000000000001 Call trace: tb_switch_find_vse_cap+0x5530/0xb358 dequeue_skb net/sched/sch_generic.c:292 [inline] qdisc_restart net/sched/sch_generic.c:397 [inline] __qdisc_run+0x1fc/0x231c net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3868 [inline] __dev_queue_xmit+0xc80/0x3318 net/core/dev.c:4210 dev_queue_xmit include/linux/netdevice.h:3085 [inline] neigh_connected_output+0x2f8/0x38c net/core/neighbour.c:1581 neigh_output include/net/neighbour.h:544 [inline] ip6_finish_output2+0xd60/0x1a1c net/ipv6/ip6_output.c:134 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline] ip6_finish_output+0x538/0x8c8 net/ipv6/ip6_output.c:206 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:227 dst_output include/net/dst.h:458 [inline] NF_HOOK include/linux/netfilter.h:303 [inline] ndisc_send_skb+0xc30/0x1790 net/ipv6/ndisc.c:508 ndisc_send_rs+0x47c/0x5d4 net/ipv6/ndisc.c:718 addrconf_rs_timer+0x300/0x58c net/ipv6/addrconf.c:3936 call_timer_fn+0x19c/0x8cc kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x55c/0x734 kernel/time/timer.c:2022 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:2035 __do_softirq+0x2d0/0xd54 kernel/softirq.c:571 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:882 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:650 irq_exit_rcu+0x14/0x84 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:474 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:488 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:493 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:587 __sanitizer_cov_trace_pc+0x58/0x7c kernel/kcov.c:212 next_map_page mm/filemap.c:3479 [inline] filemap_map_pages+0xd60/0x1204 mm/filemap.c:3551 do_fault_around mm/memory.c:4493 [inline] do_read_fault mm/memory.c:4525 [inline] do_fault mm/memory.c:4659 [inline] do_pte_missing mm/memory.c:3647 [inline] handle_pte_fault mm/memory.c:4947 [inline] __handle_mm_fault mm/memory.c:5089 [inline] handle_mm_fault+0x31e4/0x48ec mm/memory.c:5243 faultin_page mm/gup.c:925 [inline] __get_user_pages+0x4c4/0xa94 mm/gup.c:1147 populate_vma_page_range+0x26c/0x35c mm/gup.c:1543 __mm_populate+0x240/0x3d8 mm/gup.c:1652 mm_populate include/linux/mm.h:3153 [inline] vm_mmap_pgoff+0x2a4/0x3b8 mm/util.c:548 ksys_mmap_pgoff+0xd0/0x5b0 mm/mmap.c:1440 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xf8/0x110 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591