watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.3:7946]
Modules linked in:
irq event stamp: 3705637
hardirqs last  enabled at (3705636): [<ffffffff8482356b>] irqentry_exit+0x3b/0x90
hardirqs last disabled at (3705637): [<ffffffff84821f2f>] sysvec_apic_timer_interrupt+0xf/0x80
softirqs last  enabled at (3693408): [<ffffffff811a7dec>] handle_softirqs+0x50c/0x770
softirqs last disabled at (3693433): [<ffffffff811a87f4>] irq_exit_rcu+0x94/0xc0
CPU: 0 UID: 0 PID: 7946 Comm: syz-executor.3 Not tainted 6.12.0-rc3-next-20241016 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:ieee802_11_parse_elems_full+0x9ac/0x15a0
Code: 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 70 0a 00 00 48 8b 7c 24 10 89 47 10 e8 04 da f2 fc <48> 8b 74 24 18 48 8b 7c 24 10 e8 f5 e4 ff ff 48 8b 54 24 68 48 b8
RSP: 0018:ffff88806ce09280 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff88803eb77800 RCX: 1ffff11007d6ef02
RDX: ffff888040571b80 RSI: ffffffff845ea21c RDI: ffff88803eb77800
RBP: ffff88806ce094d0 R08: 0000000000000000 R09: ffffed100d9c1240
R10: 0000000000000000 R11: 00000000000c2f81 R12: ffff88806ce094d8
R13: 0000000000000398 R14: ffff88803eb77800 R15: ffff888019ad8700
FS:  00007fadb5a24700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000563e163ad230 CR3: 00000000133ac000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 ieee80211_inform_bss+0xf7/0x10b0
 cfg80211_inform_single_bss_data+0x7fe/0x1c50
 cfg80211_inform_bss_data+0x20f/0x3510
 cfg80211_inform_bss_frame_data+0x250/0x690
 ieee80211_bss_info_update+0x2f6/0xa90
 ieee80211_scan_rx+0x474/0xac0
 ieee80211_rx_list+0x21ec/0x2cf0
 ieee80211_rx_napi+0xdc/0x3b0
 ieee80211_handle_queued_frames+0xd9/0x130
 tasklet_action_common+0x235/0x3b0
 handle_softirqs+0x1b1/0x770
 irq_exit_rcu+0x94/0xc0
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:put_cpu_partial+0x10a/0x1b0
Code: 24 28 75 5b 49 c7 44 24 28 00 00 00 00 4c 89 e7 48 8d 35 00 00 00 00 e8 b4 ff ab ff 4d 85 ed 74 06 e8 ca 7f d5 ff fb 4d 85 f6 <74> 1c 5b 4c 89 f6 48 89 ef 5d 41 5c 41 5d 41 5e e9 c1 fa ff ff 44
RSP: 0018:ffff88803f3374e0 EFLAGS: 00000246
RAX: 0000000000385b77 RBX: ffffea00003de440 RCX: 1ffffffff0fdca53
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8183f876
RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fda9d9
R10: ffffffff87ed4ecf R11: 00000000000c2f81 R12: ffff88806ce40350
R13: 0000000000000200 R14: 0000000000000000 R15: ffff88800f791b90
 qlist_free_all+0x50/0x160
 kasan_quarantine_reduce+0x19c/0x230
 __kasan_kmalloc+0x6f/0x90
 __kmalloc_noprof+0x1f7/0x4b0
 __register_sysctl_table+0xd51/0x16d0
 __addrconf_sysctl_register+0x17f/0x340
 addrconf_init_net+0x4f9/0x8d0
 ops_init+0x1e1/0x650
 setup_net+0x1d7/0x7a0
 copy_net_ns+0x2e3/0x6f0
 create_new_namespaces+0x3f6/0xaf0
 copy_namespaces+0x45c/0x580
 copy_process+0x2704/0x8e00
 kernel_clone+0xeb/0x850
 __do_sys_clone3+0x1d5/0x250
 do_syscall_64+0xbf/0x1d0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fadb84aeb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fadb5a24188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 00007fadb85c1f60 RCX: 00007fadb84aeb19
RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00
RBP: 00007fadb8508f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc5597546f R14: 00007fadb5a24300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30
----------------
Code disassembly (best guess), 4 bytes skipped:
   0:	df 48 89             	fisttps -0x77(%rax)
   3:	f9                   	stc
   4:	48 c1 e9 03          	shr    $0x3,%rcx
   8:	0f b6 14 11          	movzbl (%rcx,%rdx,1),%edx
   c:	84 d2                	test   %dl,%dl
   e:	74 09                	je     0x19
  10:	80 fa 03             	cmp    $0x3,%dl
  13:	0f 8e 70 0a 00 00    	jle    0xa89
  19:	48 8b 7c 24 10       	mov    0x10(%rsp),%rdi
  1e:	89 47 10             	mov    %eax,0x10(%rdi)
  21:	e8 04 da f2 fc       	callq  0xfcf2da2a
* 26:	48 8b 74 24 18       	mov    0x18(%rsp),%rsi <-- trapping instruction
  2b:	48 8b 7c 24 10       	mov    0x10(%rsp),%rdi
  30:	e8 f5 e4 ff ff       	callq  0xffffe52a
  35:	48 8b 54 24 68       	mov    0x68(%rsp),%rdx
  3a:	48                   	rex.W
  3b:	b8                   	.byte 0xb8