watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz-executor.6:8279] Modules linked in: irq event stamp: 1943239 hardirqs last enabled at (1943238): [] ___slab_alloc+0x4f1/0x1200 hardirqs last disabled at (1943239): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (1923162): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (1923183): [] __irq_exit_rcu+0xc4/0x100 CPU: 1 UID: 0 PID: 8279 Comm: syz-executor.6 Not tainted 6.12.0-next-20241122 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:stack_trace_consume_entry+0x4/0x170 Code: ff ff ff eb c7 e8 2c 96 45 03 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> b8 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 c7 10 48 89 fa RSP: 0018:ffff88806cf09760 EFLAGS: 00000286 RAX: ffffffff845f2be1 RBX: ffffffff813f2420 RCX: 0000000000000001 RDX: 1ffff1100d9e12f8 RSI: ffffffff845f2be1 RDI: ffff88806cf09830 RBP: ffff88806cf09800 R08: 0000000000000001 R09: ffff88806cf097a8 R10: 000000000003c001 R11: 00000000000b9fdc R12: ffff88806cf09830 R13: 0000000000000000 R14: ffff888015f69b80 R15: 0000000000082820 FS: 00007f8e5ca22700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000558114f3fca8 CR3: 0000000031fbe000 CR4: 0000000000350ef0 Call Trace: arch_stack_walk+0x77/0xf0 stack_trace_save+0x8f/0xc0 set_track_prepare+0x36/0x70 __alloc_object+0xf4/0x270 __create_object+0x1d/0x80 kmem_cache_alloc_node_noprof+0x311/0x3e0 kmalloc_reserve+0x189/0x2b0 __alloc_skb+0x162/0x370 skb_copy+0x1d5/0x3b0 mac80211_hwsim_tx_frame_no_nl.isra.0+0xafb/0x1320 mac80211_hwsim_tx_frame+0x1ee/0x2a0 mac80211_hwsim_beacon_tx+0x546/0x950 __iterate_interfaces+0x2e0/0x650 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa70 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__put_partials+0x3/0x110 Code: 85 c0 0f 85 59 ff ff ff 90 0f 0b 90 e9 50 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 85 f6 <0f> 84 f9 00 00 00 41 57 45 31 ff 41 56 49 89 fe 41 55 45 31 ed 41 RSP: 0018:ffff88803ab1f5d8 EFLAGS: 00000282 RAX: 00000000001d586d RBX: ffff88803ec98cb8 RCX: 1ffffffff0fdfecf RDX: 0000000000000000 RSI: ffffea0000c70a80 RDI: ffff888008c4f780 RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fdddf1 R10: ffffffff87eeef8f R11: 0000000000000000 R12: 0000000000000000 R13: ffff88803ab1f618 R14: ffff88800ca6ba68 R15: ffff88800ca6ba68 qlist_free_all+0x50/0x160 kasan_quarantine_reduce+0x19f/0x240 __kasan_kmalloc+0x6f/0x90 __kmalloc_noprof+0x1f7/0x4b0 __register_sysctl_table+0xd51/0x16d0 nf_log_net_init+0x10a/0x380 ops_init+0x1e1/0x650 setup_net+0x1d7/0x7a0 copy_net_ns+0x2e3/0x6f0 create_new_namespaces+0x3f6/0xaf0 copy_namespaces+0x45c/0x580 copy_process+0x2704/0x8e90 kernel_clone+0xeb/0x850 __do_sys_clone3+0x1d9/0x260 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8e5f4acb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8e5ca22188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f8e5f5bff60 RCX: 00007f8e5f4acb19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 RBP: 00007f8e5f506f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdcc9123ef R14: 00007f8e5ca22300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-next-20241122 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:queued_spin_lock_slowpath+0xb3/0xb60 Code: 49 c1 ee 03 41 83 e5 07 48 b8 00 00 00 00 00 fc ff df 49 01 c6 41 83 c5 03 be 04 00 00 00 48 89 ef e8 11 0e 05 fd 41 0f b6 06 <41> 38 c5 7c 08 84 c0 0f 85 48 09 00 00 8b 45 00 89 44 24 38 85 c0 RSP: 0018:ffff88800960f890 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8486f2bf RDX: fffffbfff0c1b639 RSI: 0000000000000004 RDI: ffffffff860db1c0 RBP: ffffffff860db1c0 R08: 0000000000000000 R09: fffffbfff0c1b638 R10: ffffffff860db1c3 R11: 5050505000000011 R12: 1ffff110012c1f13 R13: 0000000000000003 R14: fffffbfff0c1b638 R15: ffff88800960f8c8 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000558114f00898 CR3: 0000000016018000 CR4: 0000000000350ef0 DR0: ffff7fffffff01dd DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: do_raw_spin_lock+0x1de/0x270 mac80211_hwsim_tx_frame_no_nl.isra.0+0x6d1/0x1320 mac80211_hwsim_tx_frame+0x1ee/0x2a0 mac80211_hwsim_beacon_tx+0x546/0x950 __iterate_interfaces+0x2e0/0x650 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa70 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 run_ksoftirqd+0x2e/0x60 smpboot_thread_fn+0x3eb/0x930 kthread+0x2c2/0x3a0 ret_from_fork+0x48/0x80 ret_from_fork_asm+0x1a/0x30 ---------------- Code disassembly (best guess), 3 bytes skipped: 0: eb c7 jmp 0xffffffc9 2: e8 2c 96 45 03 callq 0x3459633 7: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1) e: 00 00 00 11: 66 90 xchg %ax,%ax 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: 90 nop 20: 90 nop 21: 90 nop 22: 90 nop 23: f3 0f 1e fa endbr64 * 27: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction 2e: fc ff df 31: 55 push %rbp 32: 53 push %rbx 33: 48 89 fb mov %rdi,%rbx 36: 48 83 c7 10 add $0x10,%rdi 3a: 48 89 fa mov %rdi,%rdx