watchdog: BUG: soft lockup - CPU#1 stuck for 21s! [syz-executor.7:14583] Modules linked in: irq event stamp: 2865915 hardirqs last enabled at (2865914): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (2865915): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (2862234): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (2862241): [] __irq_exit_rcu+0xc4/0x100 CPU: 1 UID: 0 PID: 14583 Comm: syz-executor.7 Not tainted 6.13.0-rc2-next-20241212 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__orc_find+0x8f/0xf0 Code: d8 48 c1 e8 03 42 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 50 48 63 03 48 01 d8 48 39 c1 73 b0 4c 8d 63 fc <4c> 39 e5 76 b3 4d 29 ee 49 c1 fe 02 4b 8d 04 76 48 8d 04 46 48 83 RSP: 0018:ffff88806cf08f00 EFLAGS: 00000283 RAX: ffffffff812d1b90 RBX: ffffffff86449930 RCX: ffffffff812d1b32 RDX: 0000000000000000 RSI: ffffffff86781794 RDI: ffffffff8644992c RBP: ffffffff8644992c R08: ffffffff86781794 R09: ffff88806cf09048 R10: 000000000003a7f3 R11: 0000000000004332 R12: ffffffff8644992c R13: ffffffff8644992c R14: ffffffff8644992c R15: dffffc0000000000 FS: 00007fd98c979700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2c72b000 CR3: 000000002b9f0000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: unwind_next_frame+0x2b7/0x2490 __unwind_start+0x517/0x7c0 arch_stack_walk+0x63/0xf0 stack_trace_save+0x8f/0xc0 set_track_prepare+0x36/0x70 __alloc_object+0xf4/0x270 __create_object+0x1d/0x80 __kmalloc_noprof+0x37e/0x4b0 ieee802_11_parse_elems_full+0xec/0x15a0 ieee80211_inform_bss+0xf7/0x10b0 cfg80211_inform_single_bss_data+0x7fe/0x1c70 cfg80211_inform_bss_data+0x20f/0x3510 cfg80211_inform_bss_frame_data+0x250/0x6a0 ieee80211_bss_info_update+0x2f6/0xa90 ieee80211_scan_rx+0x474/0xac0 ieee80211_rx_list+0x1e38/0x2840 ieee80211_rx_napi+0xdc/0x3b0 ieee80211_handle_queued_frames+0xd9/0x130 tasklet_action_common+0x235/0x3b0 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 66 af a8 fc 48 89 ef e8 ce 1d a9 fc 80 e7 02 74 06 e8 d4 75 d2 fc fb 65 ff 0d d4 1e 5c 7b <74> 07 5b 5d e9 a3 1e 00 00 0f 1f 44 00 00 5b 5d e9 97 1e 00 00 0f RSP: 0018:ffff888039f7f440 EFLAGS: 00000246 RAX: 00000000002bac9f RBX: 0000000000000296 RCX: 1ffffffff0fe0450 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84a7882c RBP: ffff88801ea07c90 R08: 0000000000000001 R09: fffffbfff0fddde2 R10: ffffffff87eeef17 R11: 0000000000000000 R12: ffff888039f7f59c R13: ffff888039f7f620 R14: dffffc0000000000 R15: ffff888039f7f660 folios_put_refs+0x2e1/0x480 free_pages_and_swap_cache+0x3bb/0x430 __tlb_batch_free_encoded_pages+0xfa/0x2b0 tlb_finish_mmu+0x16d/0x7e0 exit_mmap+0x3aa/0xac0 mmput+0xd1/0x2d0 dup_mm+0x1012/0x1fb0 copy_process+0x704c/0x70e0 kernel_clone+0xeb/0x850 __do_sys_fork+0x80/0xc0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd98f403b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd98c979188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 RAX: ffffffffffffffda RBX: 00007fd98f516f60 RCX: 00007fd98f403b19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fd98f45df6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc6f01ca3f R14: 00007fd98c979300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.13.0-rc2-next-20241212 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events_power_efficient gc_worker RIP: 0010:__lock_acquire+0x9bb/0x4360 Code: 45 85 d2 74 13 4c 89 fe 48 89 ef e8 8f e2 ff ff 85 c0 0f 84 7d f7 ff ff ba 08 00 00 00 4c 89 fe 48 89 ef e8 77 e2 ff ff 85 c0 <0f> 84 65 f7 ff ff 48 c7 c2 40 aa 28 88 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffff8880095cf948 EFLAGS: 00000002 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ffffffff0fe2e80 RDX: dffffc0000000000 RSI: 0000000000000200 RDI: ffffffff87f17400 RBP: ffff8880095b9bc0 R08: 0000000000000000 R09: fffffbfff0fddde8 R10: ffffffff87eeef47 R11: 0000000000000000 R12: 0000000000000001 R13: ffff8880095ba6a2 R14: 0000000000000000 R15: ffff8880095ba680 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd8b6f373d0 CR3: 000000000ca34000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: lock_acquire.part.0+0xeb/0x320 gc_worker+0x9cb/0x16d0 process_one_work+0x8ee/0x1a10 worker_thread+0x674/0xe70 kthread+0x3ab/0x720 ret_from_fork+0x48/0x80 ret_from_fork_asm+0x1a/0x30 ---------------- Code disassembly (best guess): 0: d8 48 c1 fmuls -0x3f(%rax) 3: e8 03 42 0f b6 callq 0xb60f420b 8: 14 38 adc $0x38,%al a: 48 89 d8 mov %rbx,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 50 jne 0x6b 1b: 48 63 03 movslq (%rbx),%rax 1e: 48 01 d8 add %rbx,%rax 21: 48 39 c1 cmp %rax,%rcx 24: 73 b0 jae 0xffffffd6 26: 4c 8d 63 fc lea -0x4(%rbx),%r12 * 2a: 4c 39 e5 cmp %r12,%rbp <-- trapping instruction 2d: 76 b3 jbe 0xffffffe2 2f: 4d 29 ee sub %r13,%r14 32: 49 c1 fe 02 sar $0x2,%r14 36: 4b 8d 04 76 lea (%r14,%r14,2),%rax 3a: 48 8d 04 46 lea (%rsi,%rax,2),%rax 3e: 48 rex.W 3f: 83 .byte 0x83