watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.4:8190]
Modules linked in:
irq event stamp: 2505615
hardirqs last  enabled at (2505614): [<ffffffff848397ab>] irqentry_exit+0x3b/0x90
hardirqs last disabled at (2505615): [<ffffffff8483816f>] sysvec_apic_timer_interrupt+0xf/0x80
softirqs last  enabled at (2503316): [<ffffffff811a851c>] handle_softirqs+0x50c/0x770
softirqs last disabled at (2503321): [<ffffffff811a8f24>] irq_exit_rcu+0x94/0xc0
CPU: 0 UID: 0 PID: 8190 Comm: syz-executor.4 Not tainted 6.12.0-rc5-next-20241104 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:lock_is_held_type+0xe3/0x120
Code: 31 c0 44 39 f0 41 0f 94 c0 b8 ff ff ff ff 65 0f c1 05 c9 f9 7e 7b 83 f8 01 75 2e 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 c0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7b 48 02 00 44 89 c0 e9
RSP: 0018:ffff88806ce09bf8 EFLAGS: 00000282
RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffff888015978168 RDI: ffff88800e305db0
RBP: ffff888015978168 R08: 0000000000000001 R09: ffffed100d9c1378
R10: 0000000000000001 R11: 00000000000c33ea R12: ffff88800e305280
R13: ffff88800e305cc0 R14: 00000000ffffffff R15: ffff88800e305db0
FS:  00007f87c413a700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555594506c58 CR3: 0000000033af8000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 cfg80211_put_bss+0x1d5/0x280
 ieee80211_scan_rx+0x4ae/0xac0
 ieee80211_rx_list+0x1e38/0x2840
 ieee80211_rx_napi+0xdc/0x3b0
 ieee80211_handle_queued_frames+0xd9/0x130
 tasklet_action_common+0x235/0x3b0
 handle_softirqs+0x1b1/0x770
 irq_exit_rcu+0x94/0xc0
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50
Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 86 50 aa fc 48 89 ef e8 8e c3 aa fc 80 e7 02 74 06 e8 54 1e d4 fc fb 65 ff 0d 94 ec 7d 7b <74> 07 5b 5d e9 a3 1e 00 00 0f 1f 44 00 00 5b 5d e9 97 1e 00 00 0f
RSP: 0018:ffff8880418a7550 EFLAGS: 00000246
RAX: 0000000000263297 RBX: 0000000000000246 RCX: 1ffffffff0fde6ae
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8485ba2c
RBP: ffff888008c4e900 R08: 0000000000000001 R09: fffffbfff0fdc5e9
R10: ffffffff87ee2f4f R11: 00000000000007e0 R12: 0000000000000000
R13: 0000000000000000 R14: ffff888008c4f780 R15: 0000000000000246
 __put_partials+0xc4/0x110
 qlist_free_all+0x50/0x160
 kasan_quarantine_reduce+0x19f/0x240
 __kasan_kmalloc+0x6f/0x90
 __kmalloc_noprof+0x1f7/0x4b0
 kmalloc_array_noprof+0x42/0x70
 ext4_find_extent+0x6fe/0x9b0
 ext4_ext_map_blocks+0x1cc/0x5ac0
 ext4_map_query_blocks+0x82/0x2d0
 ext4_map_blocks+0x282/0x14d0
 ext4_append+0x1b7/0x540
 ext4_init_new_dir+0x262/0x4c0
 ext4_mkdir+0x3d2/0xb30
 vfs_mkdir+0x291/0x4f0
 do_mkdirat+0x1a4/0x320
 __x64_sys_mkdir+0xf3/0x140
 do_syscall_64+0xbf/0x1d0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f87c6bc3c27
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f87c4139fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87c6bc3c27
RDX: 0000000004000000 RSI: 00000000000001ff RDI: 0000000020000100
RBP: 00007f87c413a040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000020000100 R14: 00007f87c413a000 R15: 0000000000000000
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30
----------------
Code disassembly (best guess):
   0:	31 c0                	xor    %eax,%eax
   2:	44 39 f0             	cmp    %r14d,%eax
   5:	41 0f 94 c0          	sete   %r8b
   9:	b8 ff ff ff ff       	mov    $0xffffffff,%eax
   e:	65 0f c1 05 c9 f9 7e 	xadd   %eax,%gs:0x7b7ef9c9(%rip)        # 0x7b7ef9df
  15:	7b
  16:	83 f8 01             	cmp    $0x1,%eax
  19:	75 2e                	jne    0x49
  1b:	48 f7 04 24 00 02 00 	testq  $0x200,(%rsp)
  22:	00
  23:	74 01                	je     0x26
  25:	fb                   	sti
  26:	48 83 c4 08          	add    $0x8,%rsp
* 2a:	44 89 c0             	mov    %r8d,%eax <-- trapping instruction
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	41 5d                	pop    %r13
  33:	41 5e                	pop    %r14
  35:	41 5f                	pop    %r15
  37:	e9 7b 48 02 00       	jmpq   0x248b7
  3c:	44 89 c0             	mov    %r8d,%eax
  3f:	e9                   	.byte 0xe9