watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz.0.198:5876] Modules linked in: irq event stamp: 4549 hardirqs last enabled at (4548): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (4548): [] __arm64_exit_to_kernel_mode+0x70/0xcc arch/arm64/kernel/entry-common.c:98 hardirqs last disabled at (4549): [] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline] hardirqs last disabled at (4549): [] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581 softirqs last enabled at (486): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (486): [] release_sock+0x150/0x228 net/core/sock.c:3879 softirqs last disabled at (492): [] spin_lock_bh include/linux/spinlock.h:353 [inline] softirqs last disabled at (492): [] lock_sock_nested+0x70/0x110 net/core/sock.c:3856 CPU: 0 UID: 0 PID: 5876 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 03400005 (nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : queued_spin_lock_slowpath+0x138/0xb5c kernel/locking/qspinlock.c:219 lr : queued_spin_lock_slowpath+0x144/0xb5c kernel/locking/qspinlock.c:219 sp : ffff800095347600 x29: ffff8000953476a0 x28: ffff0000d2520010 x27: 1fffe00019cdc123 x26: 1fffe0001a4a4002 x25: ffff0000d2520000 x24: dfff800000000000 x23: ffff700012a68ec4 x22: ffff700012a68ee4 x21: ffff0000ce6e0918 x20: ffff0000ce6e0920 x19: ffff0000ce6e0910 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000500 x14: 000000000076b606 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff600019cdc123 x9 : 0000000000000000 x8 : 0000000000000001 x7 : ffff800084bb8a60 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008688dc38 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000001 Call trace: __cmpwait_case_8 arch/arm64/include/asm/cmpxchg.h:231 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:259 [inline] (P) queued_spin_lock_slowpath+0x138/0xb5c kernel/locking/qspinlock.c:219 (P) queued_spin_lock include/asm-generic/qspinlock.h:115 [inline] do_raw_spin_lock+0x21c/0x2d0 kernel/locking/spinlock_debug.c:116 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:183 [inline] _raw_spin_lock_bh+0x50/0x60 kernel/locking/spinlock.c:205 spin_lock_bh include/linux/spinlock.h:353 [inline] lock_sock_nested+0x70/0x110 net/core/sock.c:3856 lock_sock include/net/sock.h:1713 [inline] tipc_sendstream+0x54/0x88 net/tipc/socket.c:1550 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 ____sys_sendmsg+0x3d0/0x6c8 net/socket.c:2713 ___sys_sendmsg+0x198/0x224 net/socket.c:2767 __sys_sendmsg+0x158/0x204 net/socket.c:2799 __do_sys_sendmsg net/socket.c:2804 [inline] __se_sys_sendmsg net/socket.c:2802 [inline] __arm64_sys_sendmsg+0x88/0x9c net/socket.c:2802 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5877 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : should_resched arch/arm64/include/asm/preempt.h:80 [inline] pc : __local_bh_enable_ip+0x150/0x234 kernel/softirq.c:480 lr : __local_bh_enable_ip+0x14c/0x234 kernel/softirq.c:478 sp : ffff8000930a65e0 x29: ffff8000930a65e0 x28: ffff0000ce6e0740 x27: 000000003370f4e4 x26: ffff0000d9991900 x25: ffff8000930a66a0 x24: ffff700012614cd4 x23: dfff800000000000 x22: 1fffe0001b84fb11 x21: ffff8000863aab3c x20: 0000000000000201 x19: ffff0000dc27d888 x18: 00000000ffffffff x17: 0000000000000000 x16: 0000000000000000 x15: ffff800084b99e48 x14: 000000000269bdaa x13: 0000000000000001 x12: 0000000000000003 x11: ffff80008a527e28 x10: 0000000000000003 x9 : 0000000000000001 x8 : 00000000029878b8 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000801556fc x2 : 0000000000000002 x1 : ffff0000dc27d880 x0 : ffff8001254aa000 Call trace: __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable arch/arm64/include/asm/irqflags.h:48 [inline] (P) __local_bh_enable_ip+0x150/0x234 kernel/softirq.c:478 (P) __raw_spin_trylock_bh include/linux/spinlock_api_smp.h:248 [inline] _raw_spin_trylock_bh+0x68/0x80 kernel/locking/spinlock.c:165 spin_trylock_bh include/linux/spinlock.h:431 [inline] tipc_sk_rcv+0x308/0x13f0 net/tipc/socket.c:2501 tipc_node_xmit+0x1c8/0xb9c net/tipc/node.c:1708 tipc_node_xmit_skb net/tipc/node.c:1773 [inline] tipc_node_distr_xmit+0x264/0x370 net/tipc/node.c:1788 tipc_sk_rcv+0xe58/0x13f0 net/tipc/socket.c:2506 tipc_node_xmit+0x1c8/0xb9c net/tipc/node.c:1708 tipc_sk_push_backlog+0x3a0/0x788 net/tipc/socket.c:1314 tipc_sk_conn_proto_rcv net/tipc/socket.c:1371 [inline] tipc_sk_proto_rcv+0x644/0xe1c net/tipc/socket.c:2161 tipc_sk_filter_rcv+0x1c30/0x1e94 net/tipc/socket.c:2357 tipc_sk_enqueue net/tipc/socket.c:2450 [inline] tipc_sk_rcv+0x5b0/0x13f0 net/tipc/socket.c:2502 tipc_node_xmit+0x1c8/0xb9c net/tipc/node.c:1708 tipc_node_xmit_skb net/tipc/node.c:1773 [inline] tipc_node_distr_xmit+0x264/0x370 net/tipc/node.c:1788 tipc_sk_backlog_rcv+0x17c/0x23c net/tipc/socket.c:2417 sk_backlog_rcv include/net/sock.h:1190 [inline] __release_sock+0x174/0x2c0 net/core/sock.c:3270 release_sock+0x174/0x228 net/core/sock.c:3869 sockopt_release_sock net/core/sock.c:1163 [inline] sk_setsockopt+0x20e0/0x2658 net/core/sock.c:1681 sock_setsockopt+0x68/0x80 net/core/sock.c:1688 do_sock_setsockopt+0x1a0/0x330 net/socket.c:2393 __sys_setsockopt+0x104/0x170 net/socket.c:2422 __do_sys_setsockopt net/socket.c:2428 [inline] __se_sys_setsockopt net/socket.c:2425 [inline] __arm64_sys_setsockopt+0xc8/0xe4 net/socket.c:2425 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz.0.198:5877] Modules linked in: irq event stamp: 43566351 hardirqs last enabled at (43566350): [] __local_bh_enable_ip+0x14c/0x234 kernel/softirq.c:478 hardirqs last disabled at (43566351): [] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline] hardirqs last disabled at (43566351): [] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581 softirqs last enabled at (58): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (58): [] tipc_skb_peek_port net/tipc/msg.h:1235 [inline] softirqs last enabled at (58): [] tipc_sk_rcv+0x2ec/0x13f0 net/tipc/socket.c:2496 softirqs last disabled at (60): [] spin_trylock_bh include/linux/spinlock.h:431 [inline] softirqs last disabled at (60): [] tipc_sk_rcv+0x308/0x13f0 net/tipc/socket.c:2501