loop7: detected capacity change from 0 to 6 watchdog: BUG: soft lockup - CPU#0 stuck for 21s! [syz-executor.6:14552] Modules linked in: irq event stamp: 4449887 hardirqs last enabled at (4449886): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (4449887): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (4396792): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (4396795): [] irq_exit_rcu+0x94/0xc0 CPU: 0 UID: 0 PID: 14552 Comm: syz-executor.6 Not tainted 6.12.0-rc3-next-20241016 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:unwind_get_return_address+0xe/0xa0 Code: ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df <48> 89 fa 55 48 c1 ea 03 53 48 89 fb 0f b6 04 02 84 c0 74 04 3c 03 RSP: 0018:ffff88806ce09660 EFLAGS: 00000202 RAX: dffffc0000000000 RBX: ffffffff813e8f70 RCX: ffff88806ce09708 RDX: 0000000000000002 RSI: ffff88806ce09700 RDI: ffff88806ce09668 RBP: ffff88806ce09700 R08: 0000000000000001 R09: ffff88806ce096a8 R10: 000000000003c001 R11: 0000000000003f0d R12: ffff88806ce09730 R13: 0000000000000000 R14: ffff888015e09b80 R15: 0000000000000820 FS: 00007f73d7c19700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000010c CR3: 000000002d9fe000 CR4: 0000000000350ef0 Call Trace: arch_stack_walk+0x9d/0xf0 stack_trace_save+0x8f/0xc0 kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_node_noprof+0x14c/0x3e0 __alloc_skb+0x2ad/0x370 skb_copy+0x1d5/0x3b0 mac80211_hwsim_tx_frame_no_nl.isra.0+0xafb/0x1320 mac80211_hwsim_tx_frame+0x1ee/0x2a0 mac80211_hwsim_beacon_tx+0x546/0x950 __iterate_interfaces+0x2cb/0x5d0 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa70 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 irq_exit_rcu+0x94/0xc0 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x4b/0x80 Code: 74 1d a9 00 00 0f 00 75 16 a9 00 00 f0 00 74 05 e9 8a f4 32 03 8b 82 ec 14 00 00 85 c0 75 05 e9 7b f4 32 03 8b 82 c8 14 00 00 <83> f8 02 75 f0 48 8b 8a d0 14 00 00 8b 92 cc 14 00 00 48 8b 01 48 RSP: 0018:ffff88801647fbd8 EFLAGS: 00000246 RAX: 0000000000000002 RBX: 0000000000000002 RCX: 1ffffffff0fde8e4 RDX: ffff888015e09b80 RSI: ffffffff817b32d5 RDI: ffffffff848451c3 RBP: 0000000000000002 R08: 0000000000000001 R09: fffffbfff0fda9de R10: ffffffff87ed4ef7 R11: 00000000000007e0 R12: 0000000000000001 R13: ffffea0000f26d00 R14: ffff88803e352040 R15: dffffc0000000000 mlock_folio_batch+0x1175/0x3350 mlock_drain_local+0x2b6/0x3e0 populate_vma_page_range+0x28f/0x3b0 __mm_populate+0x101/0x3a0 do_mlock+0x406/0x7c0 __x64_sys_mlock2+0xc1/0x100 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f73da6a3b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f73d7c19188 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 RAX: ffffffffffffffda RBX: 00007f73da7b6f60 RCX: 00007f73da6a3b19 RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff7000 RBP: 00007f73da6fdf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd56e4721f R14: 00007f73d7c19300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30 netlink: 'syz-executor.3': attribute type 1 has an invalid length. loop0: detected capacity change from 0 to 6 netlink: 'syz-executor.3': attribute type 1 has an invalid length. loop7: detected capacity change from 0 to 6 ---------------- Code disassembly (best guess): 0: ac lods %ds:(%rsi),%al 1: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 8: 00 00 00 00 c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: f3 0f 1e fa endbr64 20: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 27: fc ff df * 2a: 48 89 fa mov %rdi,%rdx <-- trapping instruction 2d: 55 push %rbp 2e: 48 c1 ea 03 shr $0x3,%rdx 32: 53 push %rbx 33: 48 89 fb mov %rdi,%rbx 36: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax 3a: 84 c0 test %al,%al 3c: 74 04 je 0x42 3e: 3c 03 cmp $0x3,%al