watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.4:7483]
Modules linked in:
irq event stamp: 3177675
hardirqs last  enabled at (3177674): [<ffffffff8484f78b>] irqentry_exit+0x3b/0x90
hardirqs last disabled at (3177675): [<ffffffff8484e14f>] sysvec_apic_timer_interrupt+0xf/0x80
softirqs last  enabled at (3155500): [<ffffffff811a97cc>] handle_softirqs+0x50c/0x770
softirqs last disabled at (3155503): [<ffffffff811a9b64>] __irq_exit_rcu+0xc4/0x100
CPU: 1 UID: 0 PID: 7483 Comm: syz-executor.4 Not tainted 6.12.0-next-20241125 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:unwind_next_frame+0x1141/0x2490
Code: eb f1 ff ff 4c 89 ff 4c 89 0c 24 c6 05 27 61 68 06 01 e8 32 e8 ff ff 4c 8b 0c 24 e9 cf f1 ff ff 48 b8 00 00 00 00 00 fc ff df <49> 8d 7f 50 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 83 0c 00 00 48
RSP: 0018:ffff88806cf09018 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff86bf0954
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffff88806cf090e0 R08: ffffffff86bf0958 R09: ffff88806cf090c8
R10: 000000000003c001 R11: 00000000000c1ada R12: ffff88806cf090e8
R13: ffff88806cf090d0 R14: 0000000000000004 R15: ffff88806cf09088
FS:  00007f7aa9ef6700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055cb13c734f8 CR3: 000000003f012000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 arch_stack_walk+0x87/0xf0
 stack_trace_save+0x8f/0xc0
 kasan_save_stack+0x24/0x50
 kasan_save_track+0x14/0x30
 kasan_save_free_info+0x3a/0x60
 __kasan_slab_free+0x38/0x50
 kfree+0x132/0x480
 ieee80211_inform_bss+0x7f6/0x10b0
 cfg80211_inform_single_bss_data+0x7fe/0x1c50
 cfg80211_inform_bss_data+0x20f/0x3510
 cfg80211_inform_bss_frame_data+0x250/0x690
 ieee80211_bss_info_update+0x2f6/0xa90
 ieee80211_scan_rx+0x474/0xac0
 ieee80211_rx_list+0x1e38/0x2840
 ieee80211_rx_napi+0xdc/0x3b0
 ieee80211_handle_queued_frames+0xd9/0x130
 tasklet_action_common+0x235/0x3b0
 handle_softirqs+0x1b1/0x770
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:__put_partials+0xc4/0x110
Code: ff ff ff ff e8 ed 4d 00 03 85 c0 0f 85 78 ff ff ff 90 0f 0b 90 e9 6f ff ff ff 48 85 ed 74 0b 4c 89 fe 48 89 ef e8 bc 78 02 03 <4d> 85 ed 74 14 4c 89 ee 4d 8b 6d 10 4c 89 f7 e8 38 fc ff ff 4d 85
RSP: 0018:ffff888041327bd8 EFLAGS: 00000246
RAX: 00000000002fb0af RBX: ffffea000103c600 RCX: 1ffffffff0fe00cf
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84871a6c
RBP: ffff888009400a80 R08: 0000000000000001 R09: fffffbfff0fddff1
R10: ffffffff87eeff8f R11: 00000000000007e0 R12: 0000000000000000
R13: ffffea000103c600 R14: ffff888009404280 R15: 0000000000000246
 qlist_free_all+0x50/0x160
 kasan_quarantine_reduce+0x19f/0x240
 __kasan_slab_alloc+0x49/0x70
 kmem_cache_alloc_noprof+0x13d/0x3d0
 security_file_alloc+0x35/0x130
 init_file+0x95/0x490
 alloc_empty_file+0x94/0x1e0
 alloc_file_pseudo+0x139/0x200
 sock_alloc_file+0x53/0x1d0
 __sys_socket+0x1bc/0x260
 __x64_sys_socket+0x73/0xb0
 do_syscall_64+0xbf/0x1d0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7aac980b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7aa9ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 00007f7aaca93f60 RCX: 00007f7aac980b19
RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
RBP: 00007f7aac9daf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffc513116f R14: 00007f7aa9ef6300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30
----------------
Code disassembly (best guess), 3 bytes skipped:
   0:	ff 4c 89 ff          	decl   -0x1(%rcx,%rcx,4)
   4:	4c 89 0c 24          	mov    %r9,(%rsp)
   8:	c6 05 27 61 68 06 01 	movb   $0x1,0x6686127(%rip)        # 0x6686136
   f:	e8 32 e8 ff ff       	callq  0xffffe846
  14:	4c 8b 0c 24          	mov    (%rsp),%r9
  18:	e9 cf f1 ff ff       	jmpq   0xfffff1ec
  1d:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  24:	fc ff df
* 27:	49 8d 7f 50          	lea    0x50(%r15),%rdi <-- trapping instruction
  2b:	48 89 fa             	mov    %rdi,%rdx
  2e:	48 c1 ea 03          	shr    $0x3,%rdx
  32:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
  36:	0f 85 83 0c 00 00    	jne    0xcbf
  3c:	48                   	rex.W