watchdog: BUG: soft lockup - CPU#1 stuck for 144s! [syz-executor.0:3696] Modules linked in: CPU: 1 PID: 3696 Comm: syz-executor.0 Tainted: G W 6.9.0-rc2-syzkaller-00040-gb1e6ec0a0fd0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] RIP: 0010:arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] RIP: 0010:kvm_wait+0x1b2/0x220 arch/x86/kernel/kvm.c:1059 Code: 75 5d 45 0f b6 3f 45 0f b6 f6 44 89 ff 44 89 f6 e8 43 bf 41 00 45 38 f7 75 1f 66 90 e8 b7 be 41 00 0f 00 2d 90 4b 2b 04 fb f4 d4 fe ff ff e8 a4 be 41 00 e9 ca fe ff ff e8 9a be 41 00 fb e9 RSP: 0018:ffffc90004987980 EFLAGS: 000002d3 RAX: ffffffff813bdbe9 RBX: 0000000000000200 RCX: ffff888113c13300 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 RBP: ffffc90004987a10 R08: ffffffff813bdbdd R09: 1ffff11022761ee8 R10: ffffed1022761ee9 R11: ffffed1022761ee9 R12: dffffc0000000000 R13: 1ffff92000930f30 R14: 0000000000000003 R15: 0000000000000003 FS: 0000555590d7a480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa2125ded58 CR3: 0000000106be4000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pv_wait arch/x86/include/asm/paravirt.h:596 [inline] pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:470 [inline] __pv_queued_spin_lock_slowpath+0x6de/0xdb0 kernel/locking/qspinlock.c:511 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:584 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock include/linux/spinlock.h:187 [inline] __raw_spin_lock_bh include/linux/spinlock_api_smp.h:127 [inline] _raw_spin_lock_bh+0x13d/0x1b0 kernel/locking/spinlock.c:178 spin_lock_bh include/linux/spinlock.h:356 [inline] lock_sock_nested+0x92/0x300 net/core/sock.c:3538 lock_sock include/net/sock.h:1671 [inline] tipc_release+0xc0/0x1380 net/tipc/socket.c:639 __sock_release net/socket.c:659 [inline] sock_close+0xc6/0x240 net/socket.c:1421 __fput+0x3d0/0x840 fs/file_table.c:422 __fput_sync+0x54/0x70 fs/file_table.c:507 __do_sys_close fs/open.c:1556 [inline] __se_sys_close+0x15e/0x1f0 fs/open.c:1541 __x64_sys_close+0x38/0x40 fs/open.c:1541 do_syscall_64+0x5e/0x130 entry_SYSCALL_64_after_hwframe+0x71/0x79 RIP: 0033:0x7fa212a7cc9a Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 RSP: 002b:00007ffc19fa5a90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa212a7cc9a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007fa212bad980 R08: 0000001b31a60000 R09: 00007fa212b8b0b0 R10: 0000000000001adc R11: 0000000000000293 R12: 000000000000e0ee R13: ffffffffffffffff R14: 00007fa212600000 R15: 000000000000ddad Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 3697 Comm: syz-executor.0 Tainted: G W 6.9.0-rc2-syzkaller-00040-gb1e6ec0a0fd0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:__rcu_read_unlock+0xd/0xd0 kernel/rcu/tree_plugin.h:419 Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 <49> bf 00 00 00 00 00 fc ff df 65 4c 8b 34 25 c0 8a 03 00 4d 8d a6 RSP: 0018:ffffc90004dc6808 EFLAGS: 00000293 RAX: ffffffff850ff830 RBX: dffffc0000000000 RCX: ffff888113a22200 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 00000000ffffffff RBP: ffffc90004dc6830 R08: ffffffff850ff826 R09: 1ffff11022761ed0 R10: ffffed1022761ed1 R11: ffffed1022761ed1 R12: ffff888113b0f900 R13: ffff888113b0f600 R14: ffff888113b0f680 R15: 0000000000000004 FS: 00007fa2125ff6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 0000000106be4000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_read_unlock include/linux/rcupdate.h:813 [inline] tipc_sk_lookup+0x547/0x670 net/tipc/socket.c:3006 tipc_sk_rcv+0x45c/0x1b60 net/tipc/socket.c:2494 tipc_node_xmit+0x362/0xe80 net/tipc/node.c:1701 tipc_node_xmit_skb net/tipc/node.c:1766 [inline] tipc_node_distr_xmit+0x36a/0x4d0 net/tipc/node.c:1781 tipc_sk_rcv+0x1212/0x1b60 net/tipc/socket.c:2503 tipc_node_xmit+0x362/0xe80 net/tipc/node.c:1701 tipc_sk_push_backlog net/tipc/socket.c:1316 [inline] tipc_sk_filter_connect net/tipc/socket.c:2257 [inline] tipc_sk_filter_rcv+0x1992/0x33d0 net/tipc/socket.c:2366 tipc_sk_enqueue net/tipc/socket.c:2447 [inline] tipc_sk_rcv+0x815/0x1b60 net/tipc/socket.c:2499 tipc_node_xmit+0x362/0xe80 net/tipc/node.c:1701 tipc_node_xmit_skb net/tipc/node.c:1766 [inline] tipc_node_distr_xmit+0x36a/0x4d0 net/tipc/node.c:1781 tipc_sk_backlog_rcv+0x18b/0x210 net/tipc/socket.c:2414 sk_backlog_rcv+0xb2/0x290 include/net/sock.h:1106 __release_sock net/core/sock.c:2984 [inline] release_sock+0x14a/0x3a0 net/core/sock.c:3550 sk_setsockopt+0x902/0x3230 sock_setsockopt+0x59/0x70 net/core/sock.c:1549 do_sock_setsockopt+0x2f7/0x710 net/socket.c:2307 __sys_setsockopt+0x198/0x240 net/socket.c:2334 __do_sys_setsockopt net/socket.c:2343 [inline] __se_sys_setsockopt net/socket.c:2340 [inline] __x64_sys_setsockopt+0xbf/0xe0 net/socket.c:2340 do_syscall_64+0x5e/0x130 entry_SYSCALL_64_after_hwframe+0x71/0x79 RIP: 0033:0x7fa212a7dda9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa2125ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fa212babf80 RCX: 00007fa212a7dda9 RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003 RBP: 00007fa212aca47a R08: 0000000000000004 R09: 0000000000000000 R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fa212babf80 R15: 00007ffc19fa59c8