watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz.9.709:8545]
Modules linked in:
irq event stamp: 4102
hardirqs last  enabled at (4101): [<ffff800086852e6c>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline]
hardirqs last  enabled at (4101): [<ffff800086852e6c>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:198
hardirqs last disabled at (4102): [<ffff80008682e430>] __el1_irq arch/arm64/kernel/entry-common.c:506 [inline]
hardirqs last disabled at (4102): [<ffff80008682e430>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:522
softirqs last  enabled at (4086): [<ffff80008030c57c>] softirq_handle_end kernel/softirq.c:468 [inline]
softirqs last  enabled at (4086): [<ffff80008030c57c>] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650
softirqs last disabled at (4081): [<ffff8000800204b0>] __do_softirq+0x14/0x20 kernel/softirq.c:656
CPU: 1 UID: 0 PID: 8545 Comm: syz.9.709 Tainted: G             L      syzkaller #0 PREEMPT 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
pc : _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198
lr : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline]
lr : _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:198
sp : ffff8000926372e0
x29: ffff8000926372e0 x28: 0000000000000000 x27: 0000000000000000
x26: ffff00010209e000 x25: ffff80008e87b220 x24: 0000000000000001
x23: ffff00010209d000 x22: 0000000000000000 x21: 0000000000000000
x20: ffff80008e87b228 x19: 0000000000000000 x18: 1fffe00035beb820
x17: 0000000000000003 x16: ffff0001fea147c0 x15: 0000000000000000
x14: 1fffe00035bf3858 x13: 0000000000000001 x12: 0000000000000000
x11: ffff80008a47fd08 x10: 0000000000000003 x9 : 0000000000000000
x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000801563fc
x2 : 0000000000000006 x1 : ffff0000d6bfd700 x0 : ffff8001255d1000
Call trace:
 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] (P)
 _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198 (P)
 __debug_check_no_obj_freed lib/debugobjects.c:1135 [inline]
 debug_check_no_obj_freed+0x2c8/0x3a4 lib/debugobjects.c:1156
 __free_pages_prepare mm/page_alloc.c:1404 [inline]
 free_unref_folios+0x550/0x13c4 mm/page_alloc.c:2999
 folios_put_refs+0x77c/0x878 mm/swap.c:1008
 free_pages_and_swap_cache+0x370/0x3e8 mm/swap_state.c:404
 __tlb_batch_free_encoded_pages mm/mmu_gather.c:138 [inline]
 tlb_batch_pages_flush mm/mmu_gather.c:151 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:417 [inline]
 tlb_flush_mmu+0xfc/0x34c mm/mmu_gather.c:424
 tlb_finish_mmu+0xf0/0x220 mm/mmu_gather.c:549
 exit_mmap+0x3b4/0xad4 mm/mmap.c:1313
 __mmput+0xe0/0x2e8 kernel/fork.c:1178
 mmput+0x70/0xa8 kernel/fork.c:1201
 exit_mm+0x18c/0x260 kernel/exit.c:582
 do_exit+0x524/0x1a74 kernel/exit.c:964
 do_group_exit+0x198/0x238 kernel/exit.c:1119
 __do_sys_exit_group kernel/exit.c:1130 [inline]
 __se_sys_exit_group kernel/exit.c:1128 [inline]
 pid_child_should_wake+0x0/0x104 kernel/exit.c:1128
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736
 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 4693 Comm: sshd-session Tainted: G             L      syzkaller #0 PREEMPT 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline]
pc : _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198
lr : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline]
lr : _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:198
sp : ffff80008ea16e40
x29: ffff80008ea16e40 x28: dfff800000000000 x27: 0000000004000008
x26: 0000000004000008 x25: 000000000400000c x24: 1fffe000195a60ac
x23: ffff0000cad30560 x22: 0000000000000000 x21: 0000000000000000
x20: ffff0000cad30520 x19: 0000000000000000 x18: 00000000ffffffff
x17: ffff80008a680000 x16: 0000000000000004 x15: ffff80008a209c80
x14: ffff80008a47fd08 x13: 0000000000000001 x12: 0000000000000000
x11: ffff80008a47fd08 x10: 0000000000000003 x9 : 0000000000000000
x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff80008a9948d8 x4 : 0000000000000008 x3 : ffff8000801563fc
x2 : 0000000000000002 x1 : ffff0000d42d0000 x0 : ffff8001255ac000
Call trace:
 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] (P)
 _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198 (P)
 spin_unlock_irqrestore include/linux/spinlock.h:408 [inline]
 xa_destroy+0x178/0x24c lib/xarray.c:2399
 tcp_v4_destroy_sock+0xf8/0x6e4 net/ipv4/tcp_ipv4.c:2425
 inet_csk_destroy_sock+0x144/0x3b8 net/ipv4/inet_connection_sock.c:1273
 tcp_done+0x224/0x2b4 net/ipv4/tcp.c:5105
 tcp_rcv_state_process+0xbb0/0x3a24 net/ipv4/tcp_input.c:7329
 tcp_v4_do_rcv+0x91c/0x1204 net/ipv4/tcp_ipv4.c:1873
 tcp_v4_rcv+0x1e50/0x2624 net/ipv4/tcp_ipv4.c:2246
 ip_protocol_deliver_rcu+0x20c/0x468 net/ipv4/ip_input.c:207
 ip_local_deliver_finish+0x320/0x65c net/ipv4/ip_input.c:241
 NF_HOOK+0x308/0x398 include/linux/netfilter.h:318
 ip_local_deliver+0x128/0x188 net/ipv4/ip_input.c:262
 dst_input include/net/dst.h:480 [inline]
 ip_sublist_rcv_finish+0x1a0/0x234 net/ipv4/ip_input.c:623
 ip_list_rcv_finish net/ipv4/ip_input.c:675 [inline]
 ip_sublist_rcv+0x5fc/0x8cc net/ipv4/ip_input.c:683
 ip_list_rcv+0x37c/0x3d8 net/ipv4/ip_input.c:717
 __netif_receive_skb_list_ptype net/core/dev.c:6245 [inline]
 __netif_receive_skb_list_core+0x4f0/0x67c net/core/dev.c:6292
 __netif_receive_skb_list net/core/dev.c:6344 [inline]
 netif_receive_skb_list_internal+0x748/0xa0c net/core/dev.c:6435
 gro_normal_list include/net/gro.h:523 [inline]
 gro_flush_normal include/net/gro.h:531 [inline]
 napi_complete_done+0x24c/0x62c net/core/dev.c:6803
 gve_napi_poll_dqo+0x284/0x3b4 drivers/net/ethernet/google/gve/gve_main.c:456
 __napi_poll+0xb4/0x328 net/core/dev.c:7733
 napi_poll net/core/dev.c:7796 [inline]
 net_rx_action+0x5b0/0xc14 net/core/dev.c:7953
 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:622
 __do_softirq+0x14/0x20 kernel/softirq.c:656
 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78
 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83
 invoke_softirq kernel/softirq.c:503 [inline]
 __irq_exit_rcu+0x1ac/0x428 kernel/softirq.c:735
 irq_exit_rcu+0x14/0x84 kernel/softirq.c:752
 el0_interrupt+0x80/0x2c0 arch/arm64/kernel/entry-common.c:829
 __el0_irq_handler_common+0x18/0x24 arch/arm64/kernel/entry-common.c:836
 el0t_64_irq_handler+0x10/0x1c arch/arm64/kernel/entry-common.c:841
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:595