watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.0:13357] Modules linked in: irq event stamp: 40098623 hardirqs last enabled at (40098622): [] __local_bh_enable_ip+0x224/0x44c kernel/softirq.c:387 hardirqs last disabled at (40098623): [] __el1_irq arch/arm64/kernel/entry-common.c:557 [inline] hardirqs last disabled at (40098623): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:575 softirqs last enabled at (1388): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1388): [] tipc_skb_peek_port net/tipc/msg.h:1235 [inline] softirqs last enabled at (1388): [] tipc_sk_rcv+0x34c/0x1878 net/tipc/socket.c:2489 softirqs last disabled at (1390): [] spin_trylock_bh include/linux/spinlock.h:411 [inline] softirqs last disabled at (1390): [] tipc_sk_rcv+0x36c/0x1878 net/tipc/socket.c:2494 CPU: 0 UID: 0 PID: 13357 Comm: syz-executor.0 Not tainted 6.13.0-rc2-syzkaller-00031-g2e7aff49b5da #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_spin_unlock kernel/locking/spinlock_debug.c:100 [inline] pc : do_raw_spin_unlock+0x48/0x7e0 kernel/locking/spinlock_debug.c:141 lr : __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:166 [inline] lr : _raw_spin_unlock_bh+0x30/0x4c kernel/locking/spinlock.c:210 sp : ffff80009e2a62a0 x29: ffff80009e2a62c0 x28: ffff80009e2a64c0 x27: ffff0000d59f8000 x26: dfff800000000000 x25: ffff80009e2a6850 x24: ffff0000dce9f700 x23: ffff80009e2a6550 x22: 0000000034c4b13f x21: ffff80009e2a6840 x20: ffff80009e2a685c x19: ffff80009e2a6858 x18: ffff80009e2a6340 x17: 000000000001a86c x16: ffff80008047a6fc x15: ffff700013c54c50 x14: 1ffff00013c54c50 x13: 0000000000000004 x12: ffffffffffffffff x11: ffff700013c54c50 x10: 0000000000000003 x9 : 0000000000000007 x8 : 0000000000000000 x7 : ffff80008b11b8b8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008047a2bc x2 : 0000000000000001 x1 : ffff80008b738040 x0 : ffff80009e2a6858 Call trace: debug_spin_unlock kernel/locking/spinlock_debug.c:100 [inline] (P) do_raw_spin_unlock+0x48/0x7e0 kernel/locking/spinlock_debug.c:141 (P) __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:166 [inline] (L) _raw_spin_unlock_bh+0x30/0x4c kernel/locking/spinlock.c:210 (L) __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:166 [inline] _raw_spin_unlock_bh+0x30/0x4c kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] tipc_skb_peek_port net/tipc/msg.h:1235 [inline] tipc_sk_rcv+0x34c/0x1878 net/tipc/socket.c:2489 tipc_node_xmit+0x1b0/0xdb4 net/tipc/node.c:1701 tipc_node_xmit_skb net/tipc/node.c:1766 [inline] tipc_node_distr_xmit+0x28c/0x3a4 net/tipc/node.c:1781 tipc_sk_rcv+0x1268/0x1878 net/tipc/socket.c:2499 tipc_node_xmit+0x1b0/0xdb4 net/tipc/node.c:1701 tipc_sk_push_backlog net/tipc/socket.c:1312 [inline] tipc_sk_filter_connect net/tipc/socket.c:2253 [inline] tipc_sk_filter_rcv+0x13d4/0x2c6c net/tipc/socket.c:2362 tipc_sk_enqueue net/tipc/socket.c:2443 [inline] tipc_sk_rcv+0x824/0x1878 net/tipc/socket.c:2495 tipc_node_xmit+0x1b0/0xdb4 net/tipc/node.c:1701 tipc_node_xmit_skb net/tipc/node.c:1766 [inline] tipc_node_distr_xmit+0x28c/0x3a4 net/tipc/node.c:1781 tipc_sk_backlog_rcv+0x164/0x214 net/tipc/socket.c:2410 sk_backlog_rcv include/net/sock.h:1121 [inline] __release_sock+0x1a8/0x3d8 net/core/sock.c:3083 release_sock+0x68/0x1b8 net/core/sock.c:3637 sk_setsockopt+0xc7c/0x3150 sock_setsockopt+0x68/0x80 net/core/sock.c:1634 do_sock_setsockopt+0x238/0x4e0 net/socket.c:2309 __sys_setsockopt net/socket.c:2338 [inline] __do_sys_setsockopt net/socket.c:2344 [inline] __se_sys_setsockopt net/socket.c:2341 [inline] __arm64_sys_setsockopt+0x170/0x1e0 net/socket.c:2341 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 13355 Comm: syz-executor.0 Not tainted 6.13.0-rc2-syzkaller-00031-g2e7aff49b5da #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queued_spin_lock_slowpath+0x15c/0xd04 kernel/locking/qspinlock.c:380 lr : queued_spin_lock_slowpath+0x168/0xd04 kernel/locking/qspinlock.c:380 sp : ffff80009e2b7880 x29: ffff80009e2b7940 x28: 1fffe0001b9d3f18 x27: dfff800000000000 x26: 1ffff00013c56f3c x25: ffff80009e2b78c0 x24: dfff800000000000 x23: ffff80009e2b7900 x22: ffff700013c56f18 x21: 0000000000000001 x20: 1ffff00013c56f20 x19: ffff0000dce9f8c0 x18: 0000000000000000 x17: 0000000000000000 x16: ffff800080bedc90 x15: 0000000000000001 x14: 1fffe0001b9d3f18 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b9d3f19 x10: 1fffe0001b9d3f18 x9 : 0000000000000000 x8 : 0000000000000001 x7 : ffff80008976ea84 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008b6aa9c4 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000001 Call trace: __cmpwait_case_8 arch/arm64/include/asm/cmpxchg.h:229 [inline] (P) __cmpwait arch/arm64/include/asm/cmpxchg.h:257 [inline] (P) queued_spin_lock_slowpath+0x15c/0xd04 kernel/locking/qspinlock.c:380 (P) queued_spin_lock_slowpath+0x168/0xd04 kernel/locking/qspinlock.c:380 (L) queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x2ec/0x334 kernel/locking/spinlock_debug.c:116 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:127 [inline] _raw_spin_lock_bh+0x50/0x60 kernel/locking/spinlock.c:178 spin_lock_bh include/linux/spinlock.h:356 [inline] lock_sock_nested+0x74/0x11c net/core/sock.c:3625 lock_sock include/net/sock.h:1617 [inline] tipc_release+0xa8/0x1468 net/tipc/socket.c:637 __sock_release net/socket.c:640 [inline] sock_close+0xa4/0x1e8 net/socket.c:1408 __fput+0x1bc/0x75c fs/file_table.c:450 __fput_sync+0xc8/0x118 fs/file_table.c:535 __do_sys_close fs/open.c:1554 [inline] __se_sys_close fs/open.c:1539 [inline] __arm64_sys_close+0x154/0x1e0 fs/open.c:1539 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600