UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list Bluetooth: hci1: command 0x0406 tx timeout Bluetooth: hci3: command 0x0406 tx timeout Bluetooth: hci7: command 0x0406 tx timeout Bluetooth: hci5: command 0x0406 tx timeout watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.3:9397] Modules linked in: irq event stamp: 2860927 hardirqs last enabled at (2860926): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (2860927): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (2832436): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (2832445): [] __irq_exit_rcu+0xc4/0x100 CPU: 1 UID: 0 PID: 9397 Comm: syz-executor.3 Not tainted 6.12.0-next-20241128 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 Code: bf 03 00 00 00 e9 48 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 1a fe ff ff 66 2e 0f 1f 84 00 00 00 RSP: 0018:ffff88806cf09c00 EFLAGS: 00000246 RAX: 0000000000000007 RBX: ffff88800cf6d8c0 RCX: ffffffff83901867 RDX: 0000000000000000 RSI: 0000000000000140 RDI: 0000000000000140 RBP: 0000000000000140 R08: 0000000000000000 R09: fffffbfff0c7f3e2 R10: 0000000000000000 R11: 00000057b7288982 R12: ffff8880304fc300 R13: ffff8880304fc470 R14: 0000000000000000 R15: ffff8880347a0e70 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555ca575d618 CR3: 000000000e728000 CR4: 0000000000350ef0 Call Trace: skb_release_data+0x7c7/0x990 consume_skb+0xd0/0x160 mac80211_hwsim_tx_frame+0x1f6/0x2a0 mac80211_hwsim_beacon_tx+0x546/0x950 __iterate_interfaces+0x2e0/0x650 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa80 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:___pmd_free_tlb+0x1c6/0x2a0 Code: 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 b4 45 3c 00 4d 85 e4 75 5d e8 4a 42 3c 00 44 89 ea be 26 00 00 00 48 89 ef e8 ba f6 77 00 35 42 3c 00 48 89 df 48 89 ee e8 aa 67 67 00 90 5b 5d 41 5c 41 RSP: 0018:ffff88803ff9f7b0 EFLAGS: 00000202 RAX: 00000000002b383b RBX: ffff88803ff9fad0 RCX: 1ffffffff0fe0447 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8115c19d RBP: ffffea0000ff30c0 R08: 0000000000000001 R09: fffffbfff0fdddf2 R10: ffffffff87eeef97 R11: 00000000000c3a23 R12: 0000000000000200 R13: 00000000ffffffff R14: 00007fd75d325fff R15: 00007fd75d326000 free_pgd_range+0xa09/0x1260 free_pgtables+0x619/0x8e0 exit_mmap+0x3a2/0xac0 mmput+0xd5/0x390 do_exit+0x9ae/0x2a40 do_group_exit+0xd3/0x2a0 get_signal+0x2240/0x2320 arch_do_signal_or_restart+0x81/0x780 syscall_exit_to_user_mode+0x123/0x1e0 do_syscall_64+0xcc/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd75c2d2b19 Code: Unable to access opcode bytes at 0x7fd75c2d2aef. RSP: 002b:00007fd759848188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: 0000000000000007 RBX: 00007fd75c3e5f60 RCX: 00007fd75c2d2b19 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 RBP: 00007fd75c32cf6d R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc55924f8f R14: 00007fd759848300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30 ---------------- Code disassembly (best guess): 0: bf 03 00 00 00 mov $0x3,%edi 5: e9 48 fe ff ff jmpq 0xfffffe52 a: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1) 11: 00 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: 90 nop 20: 90 nop 21: 90 nop 22: f3 0f 1e fa endbr64 26: 48 8b 0c 24 mov (%rsp),%rcx * 2a: 89 f2 mov %esi,%edx <-- trapping instruction 2c: 89 fe mov %edi,%esi 2e: bf 05 00 00 00 mov $0x5,%edi 33: e9 1a fe ff ff jmpq 0xfffffe52 38: 66 data16 39: 2e cs 3a: 0f .byte 0xf 3b: 1f (bad) 3c: 84 00 test %al,(%rax)