watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.0:7330] Modules linked in: irq event stamp: 27239689 hardirqs last enabled at (27239688): [] rcu_read_unlock_special+0x2b4/0x3e4 kernel/rcu/tree_plugin.h:690 hardirqs last disabled at (27239689): [] __el1_irq arch/arm64/kernel/entry-common.c:557 [inline] hardirqs last disabled at (27239689): [] el1_interrupt+0x24/0x54 arch/arm64/kernel/entry-common.c:575 softirqs last enabled at (1404): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1404): [] tipc_skb_peek_port net/tipc/msg.h:1235 [inline] softirqs last enabled at (1404): [] tipc_sk_rcv+0x2d8/0x2294 net/tipc/socket.c:2489 softirqs last disabled at (1406): [] spin_trylock_bh include/linux/spinlock.h:411 [inline] softirqs last disabled at (1406): [] tipc_sk_rcv+0x2f4/0x2294 net/tipc/socket.c:2494 CPU: 0 UID: 0 PID: 7330 Comm: syz-executor.0 Not tainted 6.15.0-rc4-syzkaller-00028-ge0f4c8dd9d2d #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : do_raw_spin_trylock+0x144/0x1dc kernel/locking/spinlock_debug.c:135 lr : instrument_atomic_read include/linux/instrumented.h:68 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : queued_spin_trylock include/asm-generic/qspinlock.h:92 [inline] lr : do_raw_spin_trylock+0x78/0x1dc kernel/locking/spinlock_debug.c:123 sp : ffff80009f3e6400 x29: ffff80009f3e6400 x28: 00000000b4740c1f x27: ffff80009f3e65c0 x26: ffff0000c27d4de0 x25: dfff800000000000 x24: ffff80009f3e6950 x23: ffff0000d2fb95c0 x22: ffff80009f3e67e0 x21: ffff80009f3e6940 x20: ffff0000d2fb9780 x19: ffff80008a8880fc x18: 00000000ffffffff x17: ffff800092f13000 x16: ffff80008051fd44 x15: 0000000000000001 x14: 1fffe0001a5f72f0 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001a5f72f1 x10: dfff800000000000 x9 : 2eed8c2c439e5d00 x8 : 2eed8c2c439e5d00 x7 : ffff80008a8947e4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008051fdbc x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000000 Call trace: do_raw_spin_trylock+0x144/0x1dc kernel/locking/spinlock_debug.c:135 (P) __raw_spin_trylock_bh include/linux/spinlock_api_smp.h:173 [inline] _raw_spin_trylock_bh+0x30/0x80 kernel/locking/spinlock.c:146 spin_trylock_bh include/linux/spinlock.h:411 [inline] tipc_sk_rcv+0x2f4/0x2294 net/tipc/socket.c:2494 tipc_node_xmit+0x18c/0xc9c net/tipc/node.c:1701 tipc_node_xmit_skb net/tipc/node.c:1766 [inline] tipc_node_distr_xmit+0x248/0x33c net/tipc/node.c:1781 tipc_sk_rcv+0x1df0/0x2294 net/tipc/socket.c:2499 tipc_node_xmit+0x18c/0xc9c net/tipc/node.c:1701 tipc_sk_push_backlog net/tipc/socket.c:1312 [inline] tipc_sk_filter_connect net/tipc/socket.c:2253 [inline] tipc_sk_filter_rcv+0x1220/0x277c net/tipc/socket.c:2362 tipc_sk_enqueue net/tipc/socket.c:2443 [inline] tipc_sk_rcv+0x628/0x2294 net/tipc/socket.c:2495 tipc_node_xmit+0x18c/0xc9c net/tipc/node.c:1701 tipc_node_xmit_skb net/tipc/node.c:1766 [inline] tipc_node_distr_xmit+0x248/0x33c net/tipc/node.c:1781 tipc_sk_backlog_rcv+0x164/0x214 net/tipc/socket.c:2410 sk_backlog_rcv include/net/sock.h:1132 [inline] __release_sock+0x19c/0x39c net/core/sock.c:3163 release_sock+0x60/0x1ac net/core/sock.c:3717 sockopt_release_sock net/core/sock.c:1157 [inline] sk_setsockopt+0x2174/0x26e4 net/core/sock.c:1654 sock_setsockopt+0x68/0x80 net/core/sock.c:1661 do_sock_setsockopt+0x19c/0x328 net/socket.c:2292 __sys_setsockopt net/socket.c:2321 [inline] __do_sys_setsockopt net/socket.c:2327 [inline] __se_sys_setsockopt net/socket.c:2324 [inline] __arm64_sys_setsockopt+0x170/0x1e0 net/socket.c:2324 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 7328 Comm: syz-executor.0 Not tainted 6.15.0-rc4-syzkaller-00028-ge0f4c8dd9d2d #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queued_spin_lock_slowpath+0x138/0xaec kernel/locking/qspinlock.c:197 lr : queued_spin_lock_slowpath+0x144/0xaec kernel/locking/qspinlock.c:197 sp : ffff80009f1b7820 x29: ffff80009f1b78c0 x28: 1fffe0001a5f72f1 x27: 1fffe00018f19b72 x26: ffff0000c78cdb80 x25: dfff800000000000 x24: ffff700013e36f08 x23: 0000000000000000 x22: ffff0000c78cdb90 x21: ffff0000d2fb9788 x20: ffff0000d2fb9790 x19: ffff0000d2fb9780 x18: 0000000000000000 x17: 0000000000000000 x16: ffff80008051fa78 x15: 0000000000000001 x14: 1fffe0001a5f72f0 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001a5f72f1 x10: dfff800000000000 x9 : 0000000000000000 x8 : 0000000000000001 x7 : ffff80008903b5e0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008adc7494 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000001 Call trace: __cmpwait_case_8 arch/arm64/include/asm/cmpxchg.h:229 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:257 [inline] (P) queued_spin_lock_slowpath+0x138/0xaec kernel/locking/qspinlock.c:197 (P) queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x2a8/0x2cc kernel/locking/spinlock_debug.c:116 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:127 [inline] _raw_spin_lock_bh+0x50/0x60 kernel/locking/spinlock.c:178 spin_lock_bh include/linux/spinlock.h:356 [inline] lock_sock_nested+0x70/0x118 net/core/sock.c:3705 lock_sock include/net/sock.h:1651 [inline] tipc_release+0xac/0x1ac8 net/tipc/socket.c:637 __sock_release net/socket.c:647 [inline] sock_close+0xa0/0x1e4 net/socket.c:1391 __fput+0x340/0x75c fs/file_table.c:465 fput_close_sync+0x100/0x224 fs/file_table.c:570 __do_sys_close fs/open.c:1581 [inline] __se_sys_close fs/open.c:1566 [inline] __arm64_sys_close+0x7c/0x118 fs/open.c:1566 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600