watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz-fuzzer:4355] Modules linked in: irq event stamp: 13617 hardirqs last enabled at (13616): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline] hardirqs last enabled at (13616): [] exit_to_kernel_mode+0xe8/0x118 arch/arm64/kernel/entry-common.c:94 hardirqs last disabled at (13617): [] __el1_irq arch/arm64/kernel/entry-common.c:468 [inline] hardirqs last disabled at (13617): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:486 softirqs last enabled at (6580): [] local_bh_enable+0x10/0x1d0 include/linux/bottom_half.h:32 softirqs last disabled at (6581): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79 CPU: 1 PID: 4355 Comm: syz-fuzzer Not tainted 6.1.33-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del include/linux/list.h:114 [inline] pc : __list_del_entry include/linux/list.h:137 [inline] pc : list_move_tail include/linux/list.h:229 [inline] pc : fq_pie_qdisc_dequeue+0x2cc/0x8ac net/sched/sch_fq_pie.c:248 lr : __list_del_entry include/linux/list.h:137 [inline] lr : list_move_tail include/linux/list.h:229 [inline] lr : fq_pie_qdisc_dequeue+0x290/0x8ac net/sched/sch_fq_pie.c:248 sp : ffff8000080171e0 x29: ffff800008017250 x28: ffff00010f7679f0 x27: ffff0000d2f1f2e8 x26: ffff0000d2f1f2f0 x25: dfff800000000000 x24: ffff0000d2f1f2e0 x23: ffff00010f7679e0 x22: 0000000000000040 x21: ffff0000d2f1f2e0 x20: ffff0000d2f1f2e8 x19: ffff0000d2f1f2e0 x18: ffff800008016ea0 x17: 0000000000000000 x16: ffff8000084fa384 x15: 0000000000000100 x14: 0000000000000000 x13: 0000000000000001 x12: ffff0000d4661bc0 x11: ff808000107141e8 x10: 0000000000000000 x9 : ffff8000107141e8 x8 : 0000000000000000 x7 : ffff80000840686c x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff00010f7679f0 x1 : 0000000000000000 x0 : ffff00010f7679f8 Call trace: __list_del include/linux/list.h:114 [inline] __list_del_entry include/linux/list.h:137 [inline] list_move_tail include/linux/list.h:229 [inline] fq_pie_qdisc_dequeue+0x2cc/0x8ac net/sched/sch_fq_pie.c:248 dequeue_skb net/sched/sch_generic.c:292 [inline] qdisc_restart net/sched/sch_generic.c:397 [inline] __qdisc_run+0x204/0x239c net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3885 [inline] __dev_queue_xmit+0xe14/0x38d8 net/core/dev.c:4227 dev_queue_xmit include/linux/netdevice.h:3018 [inline] neigh_connected_output+0x2f8/0x38c net/core/neighbour.c:1612 neigh_output include/net/neighbour.h:546 [inline] ip6_finish_output2+0xdb4/0x1a98 net/ipv6/ip6_output.c:134 __ip6_finish_output net/ipv6/ip6_output.c:195 [inline] ip6_finish_output+0x538/0x8c8 net/ipv6/ip6_output.c:206 NF_HOOK_COND include/linux/netfilter.h:291 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:227 dst_output include/net/dst.h:444 [inline] NF_HOOK include/linux/netfilter.h:302 [inline] ndisc_send_skb+0xc30/0x1790 net/ipv6/ndisc.c:508 ndisc_send_rs+0x47c/0x5d4 net/ipv6/ndisc.c:718 addrconf_rs_timer+0x300/0x58c net/ipv6/addrconf.c:3936 call_timer_fn+0x1c0/0xa1c kernel/time/timer.c:1474 expire_timers kernel/time/timer.c:1519 [inline] __run_timers+0x554/0x718 kernel/time/timer.c:1790 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1803 __do_softirq+0x30c/0xea0 kernel/softirq.c:571 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:84 do_softirq+0x120/0x20c kernel/softirq.c:472 __local_bh_enable_ip+0x2c0/0x4d0 kernel/softirq.c:396 local_bh_enable+0x28/0x1d0 include/linux/bottom_half.h:33 rcu_read_unlock_bh include/linux/rcupdate.h:817 [inline] ip_finish_output2+0xd40/0x11b4 net/ipv4/ip_output.c:229 __ip_finish_output+0x1b0/0x458 ip_finish_output+0x40/0x268 net/ipv4/ip_output.c:316 NF_HOOK_COND include/linux/netfilter.h:291 [inline] ip_output+0x330/0x49c net/ipv4/ip_output.c:430 dst_output include/net/dst.h:444 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] __ip_queue_xmit+0xe8c/0x1a00 net/ipv4/ip_output.c:532 ip_queue_xmit+0x5c/0x78 net/ipv4/ip_output.c:546 __tcp_transmit_skb+0x1938/0x31fc net/ipv4/tcp_output.c:1402 tcp_transmit_skb net/ipv4/tcp_output.c:1420 [inline] tcp_write_xmit+0x131c/0x4e2c net/ipv4/tcp_output.c:2696 __tcp_push_pending_frames+0x98/0x228 net/ipv4/tcp_output.c:2880 tcp_push+0x448/0x688 net/ipv4/tcp.c:732 tcp_sendmsg_locked+0x2ca8/0x34f8 net/ipv4/tcp.c:1458 tcp_sendmsg+0x40/0x64 net/ipv4/tcp.c:1486 inet_sendmsg+0x15c/0x290 net/ipv4/af_inet.c:830 sock_sendmsg_nosec net/socket.c:716 [inline] sock_sendmsg net/socket.c:736 [inline] sock_write_iter+0x2d8/0x414 net/socket.c:1113 call_write_iter include/linux/fs.h:2205 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x610/0x914 fs/read_write.c:584 ksys_write+0x15c/0x26c fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:646 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581