watchdog: BUG: soft lockup - CPU#0 stuck for 24s! [syz-executor.1:18335] Modules linked in: irq event stamp: 2525963 hardirqs last enabled at (2525962): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (2525963): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (2489838): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (2489841): [] irq_exit_rcu+0x94/0xc0 CPU: 0 UID: 0 PID: 18335 Comm: syz-executor.1 Not tainted 6.12.0-rc3-next-20241016 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__kernel_text_address+0xf/0x40 Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 23 ff ff ff 85 c0 <75> 1b 48 81 fb 00 e0 d4 86 72 0c 31 c0 48 81 fb 4a ca ea 86 0f 92 RSP: 0018:ffff88806ce096b0 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff845cc3b1 RCX: 0000000000000001 RDX: 1ffff1100d9c12e6 RSI: ffff88806ce09db0 RDI: ffffffff845cc3b1 RBP: ffff88806ce09730 R08: 0000000000000001 R09: ffff88806ce09718 R10: 000000000003c001 R11: 00000000000b966a R12: ffff88806ce097a0 R13: 0000000000000000 R14: ffff888018acb700 R15: 0000000000000820 FS: 00007efc2f345700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007efc31ee3018 CR3: 00000000375ea000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: unwind_get_return_address+0x59/0xa0 arch_stack_walk+0x9d/0xf0 stack_trace_save+0x8f/0xc0 kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_node_noprof+0x14c/0x3e0 __alloc_skb+0x2ad/0x370 __netdev_alloc_skb+0x7a/0x7a0 __ieee80211_beacon_get+0x3f4/0xfc0 ieee80211_beacon_get_tim+0xa6/0x280 mac80211_hwsim_beacon_tx+0x49b/0x950 __iterate_interfaces+0x2cb/0x5d0 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa70 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 irq_exit_rcu+0x94/0xc0 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:lock_acquire.part.0+0x10e/0x320 Code: b6 c9 e8 35 a7 ff ff b8 ff ff ff ff 48 83 c4 28 65 0f c1 05 2c 88 d2 7e 83 f8 01 0f 85 aa 01 00 00 48 85 ed 0f 85 9b 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 RSP: 0018:ffff88803bc97dd0 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff11007792fbd RCX: 1ffff11007792fa2 RDX: 1ffff11003159827 RSI: 0000000000000001 RDI: 0000000075eab062 RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff0fda9d4 R10: ffffffff87ed4ea7 R11: 0000000000000001 R12: ffffffff85c14f00 R13: ffff888034f984b0 R14: ffffffff8216c09d R15: dffffc0000000000 __do_sys_ioprio_get+0x43e/0x1180 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7efc31dcfb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007efc2f345188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc RAX: ffffffffffffffda RBX: 00007efc31ee2f60 RCX: 00007efc31dcfb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007efc31e29f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd7ebbe80f R14: 00007efc2f345300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30 netlink: 'syz-executor.7': attribute type 1 has an invalid length. netlink: 'syz-executor.7': attribute type 1 has an invalid length. netlink: 'syz-executor.7': attribute type 1 has an invalid length. netlink: 'syz-executor.7': attribute type 1 has an invalid length. Invalid ELF header len 9 audit: type=1400 audit(1729202322.787:29): avc: denied { module_load } for pid=18575 comm="syz-executor.0" path=2F6D656D66643A42DB2F89036CDE62CBB534EDBE4C59B55AE11253F547CCF3E902680BCA2896E143DF1CEA8543FB1013FA0316CD17A280A17AB47295C3409DA6F192237D67D360F7CE7ACBB31ABBC438658EB126D18AE6217F8DEA2C7178A238BF22C765064CB036EB3C24D7BAE501039472ABD44A0373AFF641BF56FA1E778DBF994997D8D2E811C404202864656C6574656429 dev="tmpfs" ino=1155 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 Invalid ELF header len 9 Invalid ELF header len 9 netlink: 'syz-executor.7': attribute type 1 has an invalid length. Invalid ELF header len 9 Invalid ELF header len 9 syz_tun: entered promiscuous mode syz_tun: left promiscuous mode ---------------- Code disassembly (best guess): 0: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1) 7: 00 00 00 a: 90 nop b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 66 0f 1f 00 nopw (%rax) 1f: 53 push %rbx 20: 48 89 fb mov %rdi,%rbx 23: e8 23 ff ff ff callq 0xffffff4b 28: 85 c0 test %eax,%eax * 2a: 75 1b jne 0x47 <-- trapping instruction 2c: 48 81 fb 00 e0 d4 86 cmp $0xffffffff86d4e000,%rbx 33: 72 0c jb 0x41 35: 31 c0 xor %eax,%eax 37: 48 81 fb 4a ca ea 86 cmp $0xffffffff86eaca4a,%rbx 3e: 0f .byte 0xf 3f: 92 xchg %eax,%edx