watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.1.1253:9590] Modules linked in: irq event stamp: 1027245 hardirqs last enabled at (1027244): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (1027244): [] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:542 [inline] hardirqs last enabled at (1027244): [] irqentry_exit+0x24d/0xa00 kernel/entry/common.c:167 hardirqs last disabled at (1027245): [] sysvec_apic_timer_interrupt+0xe/0xc0 arch/x86/kernel/apic/apic.c:1062 softirqs last enabled at (5976): [] tipc_sendstream+0x59/0x70 net/tipc/socket.c:1551 softirqs last disabled at (5980): [] spin_lock_bh include/linux/spinlock.h:348 [inline] softirqs last disabled at (5980): [] lock_sock_nested+0x5f/0xf0 net/core/sock.c:3844 CPU: 0 UID: 0 PID: 9590 Comm: syz.1.1253 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:430 [inline] RIP: 0010:__pv_queued_spin_lock_slowpath+0x438/0xc00 kernel/locking/qspinlock.c:325 Code: 89 8c 24 80 00 00 00 41 0f b6 45 00 44 38 f8 7f 08 84 c0 0f 85 c8 06 00 00 0f b6 03 84 c0 0f 84 84 00 00 00 f3 90 41 83 ec 01 <75> ce 48 b8 00 00 00 00 00 fc ff df 48 8b 74 24 20 48 89 f2 83 e6 RSP: 0018:ffffc9000e7d77e8 EFLAGS: 00000202 RAX: 0000000000000003 RBX: ffff8880334ead50 RCX: 0000000000000100 RDX: 0000000000000001 RSI: ffffffff81b68e0a RDI: ffffffff8c1e7380 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000004e68 R13: ffffed100669d5aa R14: ffff8880b843c600 R15: 0000000000000000 FS: 00007fec56cf76c0(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9495e83798 CR3: 0000000021fc5000 CR4: 0000000000350ef0 Call Trace: pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:35 [inline] queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:66 [inline] queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x1e0/0x260 kernel/locking/spinlock_debug.c:116 spin_lock_bh include/linux/spinlock.h:348 [inline] lock_sock_nested+0x5f/0xf0 net/core/sock.c:3844 lock_sock include/net/sock.h:1713 [inline] tipc_sendstream+0x41/0x70 net/tipc/socket.c:1549 sock_sendmsg_nosec net/socket.c:775 [inline] __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2684 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2738 __sys_sendmmsg+0x20c/0x440 net/socket.c:2827 __do_sys_sendmmsg net/socket.c:2854 [inline] __se_sys_sendmmsg net/socket.c:2851 [inline] __x64_sys_sendmmsg+0x9c/0x100 net/socket.c:2851 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fec55d9ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fec56cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007fec56016090 RCX: 00007fec55d9ce59 RDX: 04000000000001cd RSI: 0000200000005280 RDI: 0000000000000004 RBP: 00007fec55e32e6f R08: 0000000000000000 R09: 0000000000000000 R10: 000000001008c811 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fec56016128 R14: 00007fec56016090 R15: 00007fff04ae2fb8 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 9576 Comm: syz.1.1253 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:__kasan_check_read+0x8/0x20 mm/kasan/shadow.c:31 Code: fe 90 0f 0b 90 48 83 c4 60 5b 5d 41 5c e9 ab 61 97 fe 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f6 31 d2 e9 0f f3 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f RSP: 0018:ffffc9000c80ecc8 EFLAGS: 00000056 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8211abbf RDX: 0000000000000202 RSI: 0000000000000008 RDI: ffffffff90dbb290 RBP: ffffffff8b3d52f1 R08: 0000000000000000 R09: fffffbfff21b7652 R10: ffffffff90dbb297 R11: 0000000000000000 R12: ffffc9000c80f070 R13: 0000000000000001 R14: 000000005cd0834f R15: dffffc0000000000 FS: 000055556eb25500(0000) GS:ffff8881243e7000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 0000000021fc5000 CR4: 0000000000350ef0 Call Trace: instrument_atomic_read include/linux/instrumented.h:82 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] cpumask_test_cpu include/linux/cpumask.h:651 [inline] cpu_online include/linux/cpumask.h:1233 [inline] trace_irq_enable.constprop.0+0x2f/0x160 include/trace/events/preemptirq.h:40 trace_hardirqs_on+0x26/0x40 kernel/trace/trace_preemptirq.c:73 __local_bh_enable_ip+0x9e/0x120 kernel/softirq.c:455 spin_unlock_bh include/linux/spinlock.h:396 [inline] tipc_skb_peek_port net/tipc/msg.h:1235 [inline] tipc_sk_rcv+0x2e1/0x1c80 net/tipc/socket.c:2495 tipc_node_xmit+0x23e/0xfb0 net/tipc/node.c:1701 tipc_node_xmit_skb+0xf5/0x160 net/tipc/node.c:1766 tipc_sk_rcv+0x16cc/0x1c80 net/tipc/socket.c:2526 tipc_node_xmit+0x23e/0xfb0 net/tipc/node.c:1701 tipc_sk_push_backlog+0x318/0xa00 net/tipc/socket.c:1313 tipc_sk_filter_connect net/tipc/socket.c:2259 [inline] tipc_sk_filter_rcv+0x95d/0x3250 net/tipc/socket.c:2368 tipc_sk_enqueue net/tipc/socket.c:2449 [inline] tipc_sk_rcv+0xe90/0x1c80 net/tipc/socket.c:2501 tipc_node_xmit+0x23e/0xfb0 net/tipc/node.c:1701 tipc_node_xmit_skb net/tipc/node.c:1766 [inline] tipc_node_distr_xmit+0x177/0x3c0 net/tipc/node.c:1781 tipc_sk_backlog_rcv+0x16f/0x1e0 net/tipc/socket.c:2416 sk_backlog_rcv include/net/sock.h:1190 [inline] __release_sock+0x3a2/0x440 net/core/sock.c:3258 release_sock+0x1e5/0x280 net/core/sock.c:3857 tipc_release+0xb42/0x1640 net/tipc/socket.c:651 __sock_release+0xb3/0x260 net/socket.c:710 sock_close+0x1c/0x30 net/socket.c:1501 __fput+0x3ff/0xb50 fs/file_table.c:512 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1d8/0x6f0 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x666/0x870 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fec55d9ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff04ae3118 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fec56017da0 RCX: 00007fec55d9ce59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fec56017da0 R08: 0000000000000006 R09: 0000000000000000 R10: 00007fec56017cb0 R11: 0000000000000246 R12: 0000000000070604 R13: 00007fec5601609c R14: 0000000000070597 R15: 00007fff04ae3220