watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz-executor.5:285] Modules linked in: irq event stamp: 399918 hardirqs last enabled at (399917): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (399918): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (399832): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (399827): [] __irq_exit_rcu+0xc4/0x100 CPU: 1 UID: 0 PID: 285 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:smp_call_function_many_cond+0xa38/0x1110 Code: 31 ff 83 e5 01 89 ee e8 26 71 0b 00 85 ed 74 43 4d 89 ec 4c 89 ed 49 c1 ec 03 83 e5 07 4d 01 fc 83 c5 03 e8 da 75 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 d5 04 00 00 8b 43 08 31 RSP: 0018:ffff8880174276f8 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff88806ce3de20 RCX: ffffffff816880fc RDX: ffff8880141f3700 RSI: ffffffff816880d6 RDI: 0000000000000005 RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 1ffff1100d9e6bb1 R12: ffffed100d9c7bc5 R13: ffff88806ce3de28 R14: 0000000000000001 R15: dffffc0000000000 FS: 000055558c36a400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555583a74c58 CR3: 000000004399e000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x57/0xa0 kvm_flush_tlb_multi+0x1e8/0x320 flush_tlb_mm_range+0x3fc/0x1420 dup_mmap+0xe4a/0x1d10 copy_process+0x3ad5/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4211ad910b Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 RSP: 002b:00007fffa77f68c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4211ad910b RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 000055558c36a400 R10: 000055558c36a6d0 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffa77f69a0 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 287 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__mm_cid_try_get.constprop.0+0x393/0x490 Code: 89 c3 89 c2 89 54 24 68 0f b6 55 00 84 d2 74 09 80 fa 03 0f 8e b0 00 00 00 41 8b 95 d8 00 00 00 39 da 0f 87 38 ff ff ff f3 90 <41> 80 3e 00 0f 85 ad 00 00 00 49 8b 04 24 48 83 f8 ff 75 ba ba 40 RSP: 0018:ffff888018877978 EFLAGS: 00000046 RAX: 0000000000000002 RBX: 0000000000000002 RCX: dffffc0000000000 RDX: 0000000000000002 RSI: 0000000000000004 RDI: ffff8880189dca44 RBP: ffffed100313b94b R08: 0000000000000000 R09: ffffed100313b948 R10: ffff8880189dca47 R11: 1ffff1100d9c6f7b R12: ffff8880189dd350 R13: ffff8880189dc980 R14: ffffed100313ba6a R15: ffff8880189dca44 FS: 0000555556587400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3967acb510 CR3: 000000001c6b4000 CR4: 0000000000350ef0 Call Trace: mm_cid_get.isra.0+0x16a/0x570 __schedule+0x1744/0x3590 schedule+0xdb/0x390 do_nanosleep+0x15e/0x560 hrtimer_nanosleep+0x13a/0x340 common_nsleep+0xaa/0xd0 __x64_sys_clock_nanosleep+0x331/0x470 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f81c10f48e1 Code: Unable to access opcode bytes at 0x7f81c10f48b7. RSP: 002b:00007ffea9f0bb10 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f81c10f48e1 RDX: 00007ffea9f0bb50 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ffea9f0bbdc R08: 0000000000000000 R09: 00007f81c11bf000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 R13: 000000000001d8aa R14: 0000000000000002 R15: 00007ffea9f0bc40 ---------------- Code disassembly (best guess): 0: 31 ff xor %edi,%edi 2: 83 e5 01 and $0x1,%ebp 5: 89 ee mov %ebp,%esi 7: e8 26 71 0b 00 callq 0xb7132 c: 85 ed test %ebp,%ebp e: 74 43 je 0x53 10: 4d 89 ec mov %r13,%r12 13: 4c 89 ed mov %r13,%rbp 16: 49 c1 ec 03 shr $0x3,%r12 1a: 83 e5 07 and $0x7,%ebp 1d: 4d 01 fc add %r15,%r12 20: 83 c5 03 add $0x3,%ebp 23: e8 da 75 0b 00 callq 0xb7602 28: f3 90 pause * 2a: 41 0f b6 04 24 movzbl (%r12),%eax <-- trapping instruction 2f: 40 38 c5 cmp %al,%bpl 32: 7c 08 jl 0x3c 34: 84 c0 test %al,%al 36: 0f 85 d5 04 00 00 jne 0x511 3c: 8b 43 08 mov 0x8(%rbx),%eax 3f: 31 .byte 0x31