watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.1:4315] Modules linked in: irq event stamp: 216002 hardirqs last enabled at (216001): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (216002): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (216000): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (215995): [] __irq_exit_rcu+0xc4/0x100 CPU: 0 UID: 0 PID: 4315 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:smp_call_function_many_cond+0xa38/0x1110 Code: 31 ff 83 e5 01 89 ee e8 26 71 0b 00 85 ed 74 43 4d 89 ec 4c 89 ed 49 c1 ec 03 83 e5 07 4d 01 fc 83 c5 03 e8 da 75 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 d5 04 00 00 8b 43 08 31 RSP: 0018:ffff88801b84f6f8 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff88806cf3c300 RCX: ffffffff816880fc RDX: ffff888009a7d280 RSI: ffffffff816880d6 RDI: 0000000000000005 RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 1ffff1100d9c6bb1 R12: ffffed100d9e7861 R13: ffff88806cf3c308 R14: 0000000000000001 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f89c5140008 CR3: 000000001c0d6000 CR4: 0000000000350ef0 Call Trace: on_each_cpu_cond_mask+0x57/0xa0 kvm_flush_tlb_multi+0x1e8/0x320 flush_tlb_mm_range+0x3fc/0x1420 tlb_finish_mmu+0x3d5/0x7e0 exit_mmap+0x3a4/0xaa0 mmput+0xd5/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 get_signal+0x2315/0x2340 arch_do_signal_or_restart+0x80/0x790 exit_to_user_mode_loop+0x8b/0x110 do_syscall_64+0x2f7/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa38999eb19 Code: Unable to access opcode bytes at 0x7fa38999eaef. RSP: 002b:00007fa386ef3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fa389ab2028 RCX: 00007fa38999eb19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa389ab2028 RBP: 00007fa389ab2020 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa389ab202c R13: 00007ffededf590f R14: 00007fa386ef3300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 273 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__mm_cid_try_get.constprop.0+0x393/0x490 Code: 89 c3 89 c2 89 54 24 68 0f b6 55 00 84 d2 74 09 80 fa 03 0f 8e b0 00 00 00 41 8b 95 d8 00 00 00 39 da 0f 87 38 ff ff ff f3 90 <41> 80 3e 00 0f 85 ad 00 00 00 49 8b 04 24 48 83 f8 ff 75 ba ba 40 RSP: 0018:ffff888015777978 EFLAGS: 00000046 RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffffffff814673ce RDX: 0000000000000002 RSI: 0000000000000004 RDI: ffff888017de15c4 RBP: ffffed1002fbc2bb R08: 0000000000000000 R09: ffffed1002fbc2b8 R10: ffff888017de15c7 R11: 1ffff1100d9e6f7b R12: ffff888017de1ed0 R13: ffff888017de1500 R14: ffffed1002fbc3da R15: ffff888017de15c4 FS: 000055558034c400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f07720d91f0 CR3: 000000003b3ce000 CR4: 0000000000350ef0 Call Trace: mm_cid_get.isra.0+0x16a/0x570 __schedule+0x1744/0x3590 schedule+0xdb/0x390 do_nanosleep+0x15e/0x560 hrtimer_nanosleep+0x13a/0x340 common_nsleep+0xaa/0xd0 __x64_sys_clock_nanosleep+0x331/0x470 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f26247548e1 Code: Unable to access opcode bytes at 0x7f26247548b7. RSP: 002b:00007fffdc7e4de0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 0000000000000025 RCX: 00007f26247548e1 RDX: 00007fffdc7e4e20 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fffdc7e4eac R08: 0000000000000000 R09: 00007f262481f000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 R13: 0000000000027c14 R14: 0000000000000004 R15: 00007fffdc7e4f10 ---------------- Code disassembly (best guess): 0: 31 ff xor %edi,%edi 2: 83 e5 01 and $0x1,%ebp 5: 89 ee mov %ebp,%esi 7: e8 26 71 0b 00 callq 0xb7132 c: 85 ed test %ebp,%ebp e: 74 43 je 0x53 10: 4d 89 ec mov %r13,%r12 13: 4c 89 ed mov %r13,%rbp 16: 49 c1 ec 03 shr $0x3,%r12 1a: 83 e5 07 and $0x7,%ebp 1d: 4d 01 fc add %r15,%r12 20: 83 c5 03 add $0x3,%ebp 23: e8 da 75 0b 00 callq 0xb7602 28: f3 90 pause * 2a: 41 0f b6 04 24 movzbl (%r12),%eax <-- trapping instruction 2f: 40 38 c5 cmp %al,%bpl 32: 7c 08 jl 0x3c 34: 84 c0 test %al,%al 36: 0f 85 d5 04 00 00 jne 0x511 3c: 8b 43 08 mov 0x8(%rbx),%eax 3f: 31 .byte 0x31