No source specified watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz-executor.6:12020] Modules linked in: irq event stamp: 3090765 hardirqs last enabled at (3090764): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (3090765): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (3053276): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (3053279): [] __irq_exit_rcu+0xc4/0x100 CPU: 0 UID: 0 PID: 12020 Comm: syz-executor.6 Not tainted 6.12.0-next-20241120 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:arch_stack_walk+0x79/0xf0 Code: 00 00 4c 89 ea 4c 89 f6 48 8d bd 68 ff ff ff e8 7d aa 07 00 8b 95 68 ff ff ff 85 d2 75 24 eb 36 4c 89 e7 e8 39 e8 79 03 84 c0 <74> 2a 48 8d bd 68 ff ff ff e8 b9 85 07 00 8b 85 68 ff ff ff 85 c0 RSP: 0018:ffff88806ce095e8 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff813f2420 RCX: 0000000000000001 RDX: 1ffff1100d9c12f3 RSI: ffffffff81405feb RDI: ffff88806ce096bc RBP: ffff88806ce09680 R08: 0000000000000001 R09: ffff88806ce09628 R10: 000000000003c001 R11: 00000000000821a6 R12: ffff88806ce096b0 R13: 0000000000000000 R14: ffff88800bcd8000 R15: 0000000000092820 FS: 00007ff629da5700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555de36a2618 CR3: 000000003e79c000 CR4: 0000000000350ef0 Call Trace: stack_trace_save+0x8f/0xc0 kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_noprof+0x13d/0x3d0 __alloc_object+0x2f/0x270 __create_object+0x1d/0x80 kmem_cache_alloc_node_noprof+0x311/0x3e0 __alloc_skb+0x2ad/0x370 __netdev_alloc_skb+0x7a/0x7c0 __ieee80211_beacon_get+0x3f4/0xfc0 ieee80211_beacon_get_tim+0xa6/0x280 mac80211_hwsim_beacon_tx+0x49b/0x950 __iterate_interfaces+0x2e0/0x650 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa70 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:qlist_free_all+0x28/0x160 Code: 90 90 48 8b 07 48 85 c0 0f 84 41 01 00 00 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 55 53 eb 3e 48 63 95 c0 00 00 00 48 8b 18 <48> 89 ef 48 29 d0 48 89 c6 49 89 c6 e8 e7 f0 ff ff 49 89 c7 66 90 RSP: 0018:ffff8880152b7b60 EFLAGS: 00000246 RAX: ffff88800d63ccb8 RBX: ffff88800d33b940 RCX: ffffea0000358f00 RDX: 0000000000000000 RSI: ffff888008c4f780 RDI: ffffffff8184a686 RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fdd9f1 R10: ffffffff87eecf8f R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880152b7b98 R14: ffff88800d63c940 R15: ffff88800d63c940 kasan_quarantine_reduce+0x19f/0x240 __kasan_slab_alloc+0x49/0x70 kmem_cache_alloc_noprof+0x13d/0x3d0 __alloc_object+0x2f/0x270 __create_object+0x1d/0x80 kmem_cache_alloc_lru_noprof+0x303/0x3c0 __d_alloc+0x31/0x990 d_alloc_pseudo+0x1d/0xc0 alloc_file_pseudo+0xcc/0x200 __shmem_file_setup+0x214/0x310 __do_sys_memfd_create+0x4d7/0x980 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff62c82fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff629da4f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff62c82fb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff62c8890fb RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000000000 R15: 0000000020000080 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 4c 89 ea mov %r13,%rdx 5: 4c 89 f6 mov %r14,%rsi 8: 48 8d bd 68 ff ff ff lea -0x98(%rbp),%rdi f: e8 7d aa 07 00 callq 0x7aa91 14: 8b 95 68 ff ff ff mov -0x98(%rbp),%edx 1a: 85 d2 test %edx,%edx 1c: 75 24 jne 0x42 1e: eb 36 jmp 0x56 20: 4c 89 e7 mov %r12,%rdi 23: e8 39 e8 79 03 callq 0x379e861 28: 84 c0 test %al,%al * 2a: 74 2a je 0x56 <-- trapping instruction 2c: 48 8d bd 68 ff ff ff lea -0x98(%rbp),%rdi 33: e8 b9 85 07 00 callq 0x785f1 38: 8b 85 68 ff ff ff mov -0x98(%rbp),%eax 3e: 85 c0 test %eax,%eax