watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz.9.709:8545] Modules linked in: irq event stamp: 4102 hardirqs last enabled at (4101): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] hardirqs last enabled at (4101): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:198 hardirqs last disabled at (4102): [] __el1_irq arch/arm64/kernel/entry-common.c:506 [inline] hardirqs last disabled at (4102): [] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:522 softirqs last enabled at (4086): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (4086): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (4081): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 CPU: 1 UID: 0 PID: 8545 Comm: syz.9.709 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] pc : _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198 lr : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] lr : _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:198 sp : ffff8000926372e0 x29: ffff8000926372e0 x28: 0000000000000000 x27: 0000000000000000 x26: ffff00010209e000 x25: ffff80008e87b220 x24: 0000000000000001 x23: ffff00010209d000 x22: 0000000000000000 x21: 0000000000000000 x20: ffff80008e87b228 x19: 0000000000000000 x18: 1fffe00035beb820 x17: 0000000000000003 x16: ffff0001fea147c0 x15: 0000000000000000 x14: 1fffe00035bf3858 x13: 0000000000000001 x12: 0000000000000000 x11: ffff80008a47fd08 x10: 0000000000000003 x9 : 0000000000000000 x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000801563fc x2 : 0000000000000006 x1 : ffff0000d6bfd700 x0 : ffff8001255d1000 Call trace: __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] (P) _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198 (P) __debug_check_no_obj_freed lib/debugobjects.c:1135 [inline] debug_check_no_obj_freed+0x2c8/0x3a4 lib/debugobjects.c:1156 __free_pages_prepare mm/page_alloc.c:1404 [inline] free_unref_folios+0x550/0x13c4 mm/page_alloc.c:2999 folios_put_refs+0x77c/0x878 mm/swap.c:1008 free_pages_and_swap_cache+0x370/0x3e8 mm/swap_state.c:404 __tlb_batch_free_encoded_pages mm/mmu_gather.c:138 [inline] tlb_batch_pages_flush mm/mmu_gather.c:151 [inline] tlb_flush_mmu_free mm/mmu_gather.c:417 [inline] tlb_flush_mmu+0xfc/0x34c mm/mmu_gather.c:424 tlb_finish_mmu+0xf0/0x220 mm/mmu_gather.c:549 exit_mmap+0x3b4/0xad4 mm/mmap.c:1313 __mmput+0xe0/0x2e8 kernel/fork.c:1178 mmput+0x70/0xa8 kernel/fork.c:1201 exit_mm+0x18c/0x260 kernel/exit.c:582 do_exit+0x524/0x1a74 kernel/exit.c:964 do_group_exit+0x198/0x238 kernel/exit.c:1119 __do_sys_exit_group kernel/exit.c:1130 [inline] __se_sys_exit_group kernel/exit.c:1128 [inline] pid_child_should_wake+0x0/0x104 kernel/exit.c:1128 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 4693 Comm: sshd-session Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] pc : _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198 lr : __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] lr : _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:198 sp : ffff80008ea16e40 x29: ffff80008ea16e40 x28: dfff800000000000 x27: 0000000004000008 x26: 0000000004000008 x25: 000000000400000c x24: 1fffe000195a60ac x23: ffff0000cad30560 x22: 0000000000000000 x21: 0000000000000000 x20: ffff0000cad30520 x19: 0000000000000000 x18: 00000000ffffffff x17: ffff80008a680000 x16: 0000000000000004 x15: ffff80008a209c80 x14: ffff80008a47fd08 x13: 0000000000000001 x12: 0000000000000000 x11: ffff80008a47fd08 x10: 0000000000000003 x9 : 0000000000000000 x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff80008a9948d8 x4 : 0000000000000008 x3 : ffff8000801563fc x2 : 0000000000000002 x1 : ffff0000d42d0000 x0 : ffff8001255ac000 Call trace: __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] (P) _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198 (P) spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] xa_destroy+0x178/0x24c lib/xarray.c:2399 tcp_v4_destroy_sock+0xf8/0x6e4 net/ipv4/tcp_ipv4.c:2425 inet_csk_destroy_sock+0x144/0x3b8 net/ipv4/inet_connection_sock.c:1273 tcp_done+0x224/0x2b4 net/ipv4/tcp.c:5105 tcp_rcv_state_process+0xbb0/0x3a24 net/ipv4/tcp_input.c:7329 tcp_v4_do_rcv+0x91c/0x1204 net/ipv4/tcp_ipv4.c:1873 tcp_v4_rcv+0x1e50/0x2624 net/ipv4/tcp_ipv4.c:2246 ip_protocol_deliver_rcu+0x20c/0x468 net/ipv4/ip_input.c:207 ip_local_deliver_finish+0x320/0x65c net/ipv4/ip_input.c:241 NF_HOOK+0x308/0x398 include/linux/netfilter.h:318 ip_local_deliver+0x128/0x188 net/ipv4/ip_input.c:262 dst_input include/net/dst.h:480 [inline] ip_sublist_rcv_finish+0x1a0/0x234 net/ipv4/ip_input.c:623 ip_list_rcv_finish net/ipv4/ip_input.c:675 [inline] ip_sublist_rcv+0x5fc/0x8cc net/ipv4/ip_input.c:683 ip_list_rcv+0x37c/0x3d8 net/ipv4/ip_input.c:717 __netif_receive_skb_list_ptype net/core/dev.c:6245 [inline] __netif_receive_skb_list_core+0x4f0/0x67c net/core/dev.c:6292 __netif_receive_skb_list net/core/dev.c:6344 [inline] netif_receive_skb_list_internal+0x748/0xa0c net/core/dev.c:6435 gro_normal_list include/net/gro.h:523 [inline] gro_flush_normal include/net/gro.h:531 [inline] napi_complete_done+0x24c/0x62c net/core/dev.c:6803 gve_napi_poll_dqo+0x284/0x3b4 drivers/net/ethernet/google/gve/gve_main.c:456 __napi_poll+0xb4/0x328 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0x5b0/0xc14 net/core/dev.c:7953 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:622 __do_softirq+0x14/0x20 kernel/softirq.c:656 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 invoke_softirq kernel/softirq.c:503 [inline] __irq_exit_rcu+0x1ac/0x428 kernel/softirq.c:735 irq_exit_rcu+0x14/0x84 kernel/softirq.c:752 el0_interrupt+0x80/0x2c0 arch/arm64/kernel/entry-common.c:829 __el0_irq_handler_common+0x18/0x24 arch/arm64/kernel/entry-common.c:836 el0t_64_irq_handler+0x10/0x1c arch/arm64/kernel/entry-common.c:841 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:595