copy_process+0x3ab7/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.4:4356] Modules linked in: irq event stamp: 187156 hardirqs last enabled at (187155): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (187156): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (187132): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (187091): [] __irq_exit_rcu+0xc4/0x100 CPU: 0 UID: 0 PID: 4356 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:smp_call_function_many_cond+0xa38/0x1110 Code: 31 ff 83 e5 01 89 ee e8 f6 61 0b 00 85 ed 74 43 4d 89 ec 4c 89 ed 49 c1 ec 03 83 e5 07 4d 01 fc 83 c5 03 e8 aa 66 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 d5 04 00 00 8b 43 08 31 RSP: 0018:ffff88803c04f6f8 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff88806cf3c300 RCX: ffffffff816880fc RDX: ffff88803b6fb700 RSI: ffffffff816880d6 RDI: 0000000000000005 RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 1ffff1100d9c6bb1 R12: ffffed100d9e7861 R13: ffff88806cf3c308 R14: 0000000000000001 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffff8c3ff8 CR3: 000000003afca000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x57/0xa0 kvm_flush_tlb_multi+0x1e8/0x320 flush_tlb_mm_range+0x3fc/0x1420 tlb_finish_mmu+0x3d5/0x7e0 exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f212b576b19 Code: Unable to access opcode bytes at 0x7f212b576aef. RSP: 002b:00007f2128aec218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f212b689f68 RCX: 00007f212b576b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f212b689f68 RBP: 00007f212b689f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f212b689f6c R13: 00007ffc8cd47d6f R14: 00007f2128aec300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__mm_cid_try_get.constprop.0+0x393/0x490 Code: 89 c3 89 c2 89 54 24 68 0f b6 55 00 84 d2 74 09 80 fa 03 0f 8e b0 00 00 00 41 8b 95 d8 00 00 00 39 da 0f 87 38 ff ff ff f3 90 <41> 80 3e 00 0f 85 ad 00 00 00 49 8b 04 24 48 83 f8 ff 75 ba ba 40 RSP: 0018:ffff888009747b28 EFLAGS: 00000046 RAX: 0000000000000002 RBX: 0000000000000002 RCX: dffffc0000000000 RDX: 0000000000000002 RSI: 0000000000000008 RDI: ffff88803e4a9450 RBP: ffffed1007c9516b R08: 0000000000000001 R09: ffffed1007c9528a R10: ffff88803e4a9457 R11: 1ffff1100d9e6f7b R12: ffff88803e4a9450 R13: ffff88803e4a8a80 R14: ffffed1007c9528a R15: ffff88803e4a8b44 FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f173f402344 CR3: 000000003cdac000 CR4: 0000000000350ef0 Call Trace: mm_cid_get.isra.0+0x16a/0x570 __schedule+0x1744/0x3590 schedule+0xdb/0x390 smpboot_thread_fn+0x67c/0x9d0 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 ---------------- Code disassembly (best guess): 0: 31 ff xor %edi,%edi 2: 83 e5 01 and $0x1,%ebp 5: 89 ee mov %ebp,%esi 7: e8 f6 61 0b 00 callq 0xb6202 c: 85 ed test %ebp,%ebp e: 74 43 je 0x53 10: 4d 89 ec mov %r13,%r12 13: 4c 89 ed mov %r13,%rbp 16: 49 c1 ec 03 shr $0x3,%r12 1a: 83 e5 07 and $0x7,%ebp 1d: 4d 01 fc add %r15,%r12 20: 83 c5 03 add $0x3,%ebp 23: e8 aa 66 0b 00 callq 0xb66d2 28: f3 90 pause * 2a: 41 0f b6 04 24 movzbl (%r12),%eax <-- trapping instruction 2f: 40 38 c5 cmp %al,%bpl 32: 7c 08 jl 0x3c 34: 84 c0 test %al,%al 36: 0f 85 d5 04 00 00 jne 0x511 3c: 8b 43 08 mov 0x8(%rbx),%eax 3f: 31 .byte 0x31