watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz.0.40:5009] Modules linked in: irq event stamp: 31545065 hardirqs last enabled at (31545064): [] __local_bh_enable_ip+0x1f8/0x37c kernel/softirq.c:406 hardirqs last disabled at (31545065): [] enter_el1_irq_or_nmi+0x10/0x1c arch/arm64/kernel/entry-common.c:227 softirqs last enabled at (84): [] spin_unlock_bh include/linux/spinlock.h:409 [inline] softirqs last enabled at (84): [] tipc_skb_peek_port net/tipc/msg.h:1258 [inline] softirqs last enabled at (84): [] tipc_sk_rcv+0x284/0x2240 net/tipc/socket.c:2493 softirqs last disabled at (86): [] spin_trylock_bh include/linux/spinlock.h:424 [inline] softirqs last disabled at (86): [] tipc_sk_rcv+0x2a0/0x2240 net/tipc/socket.c:2498 CPU: 0 PID: 5009 Comm: syz.0.40 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : __refcount_add include/linux/refcount.h:198 [inline] pc : __refcount_inc include/linux/refcount.h:250 [inline] pc : refcount_inc include/linux/refcount.h:267 [inline] pc : sock_hold include/net/sock.h:743 [inline] pc : tipc_sk_lookup+0x670/0x89c net/tipc/socket.c:3003 lr : __lse_atomic_fetch_add_relaxed arch/arm64/include/asm/atomic_lse.h:52 [inline] lr : arch_atomic_fetch_add_relaxed arch/arm64/include/asm/atomic.h:49 [inline] lr : atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:112 [inline] lr : __refcount_add include/linux/refcount.h:193 [inline] lr : __refcount_inc include/linux/refcount.h:250 [inline] lr : refcount_inc include/linux/refcount.h:267 [inline] lr : sock_hold include/net/sock.h:743 [inline] lr : tipc_sk_lookup+0x668/0x89c net/tipc/socket.c:3003 sp : ffff80001fef62a0 x29: ffff80001fef6340 x28: 0000000000000004 x27: ffff0000cf0d1ab0 x26: ffff0000ccef44f8 x25: 1fffe0001a040a29 x24: dfff800000000000 x23: 0000000000000528 x22: ffff0000d020514e x21: 0000000000000004 x20: ffff0000cf0d1580 x19: ffff0000cf0d1500 x18: 0000000000000402 x17: 0000000000000000 x16: ffff8000082c18dc x15: ffff80000f6eac8c x14: 0000000000000001 x13: 1fffe00019e1a2b0 x12: 0000000000ff0100 x11: 0000000000000201 x10: 0000000000000000 x9 : ffff800010d85854 x8 : ffff0000c10a3680 x7 : ffff800010d8fcb0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800010d85848 x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: __lse_atomic_fetch_add_relaxed arch/arm64/include/asm/atomic_lse.h:52 [inline] arch_atomic_fetch_add_relaxed arch/arm64/include/asm/atomic.h:49 [inline] atomic_fetch_add_relaxed include/linux/atomic/atomic-instrumented.h:112 [inline] __refcount_add include/linux/refcount.h:193 [inline] __refcount_inc include/linux/refcount.h:250 [inline] refcount_inc include/linux/refcount.h:267 [inline] sock_hold include/net/sock.h:743 [inline] tipc_sk_lookup+0x670/0x89c net/tipc/socket.c:3003 tipc_sk_rcv+0x290/0x2240 net/tipc/socket.c:2494 tipc_node_xmit+0x1c0/0xdf8 net/tipc/node.c:1703 tipc_node_xmit_skb net/tipc/node.c:1768 [inline] tipc_node_distr_xmit+0x260/0x364 net/tipc/node.c:1783 tipc_sk_rcv+0x1d60/0x2240 net/tipc/socket.c:2503 tipc_node_xmit+0x1c0/0xdf8 net/tipc/node.c:1703 tipc_sk_push_backlog+0x398/0x740 net/tipc/socket.c:1316 tipc_sk_conn_proto_rcv net/tipc/socket.c:1370 [inline] tipc_sk_proto_rcv+0x780/0x13bc net/tipc/socket.c:2158 tipc_sk_filter_rcv+0x2608/0x287c net/tipc/socket.c:2354 tipc_sk_enqueue net/tipc/socket.c:2447 [inline] tipc_sk_rcv+0x5d0/0x2240 net/tipc/socket.c:2499 tipc_node_xmit+0x1c0/0xdf8 net/tipc/node.c:1703 tipc_node_xmit_skb net/tipc/node.c:1768 [inline] tipc_node_distr_xmit+0x260/0x364 net/tipc/node.c:1783 tipc_sk_backlog_rcv+0x17c/0x244 net/tipc/socket.c:2414 sk_backlog_rcv include/net/sock.h:1080 [inline] __release_sock+0x1b4/0x3b4 net/core/sock.c:2731 release_sock+0x60/0x258 net/core/sock.c:3274 sock_setsockopt+0x1908/0x1e54 net/core/sock.c:1379 __sys_setsockopt+0x294/0x36c net/socket.c:2208 __do_sys_setsockopt net/socket.c:2223 [inline] __se_sys_setsockopt net/socket.c:2220 [inline] __arm64_sys_setsockopt+0xb8/0xd4 net/socket.c:2220 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584