watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.1:22362] Modules linked in: irq event stamp: 2892793 hardirqs last enabled at (2892792): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (2892793): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (2816750): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (2816753): [] __irq_exit_rcu+0xc4/0x100 CPU: 0 UID: 0 PID: 22362 Comm: syz-executor.1 Not tainted 6.13.0-rc3-next-20241217 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:unwind_next_frame+0x71/0x2490 Code: 00 00 00 fc ff df 49 8d 6f 58 48 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 07 1a 00 00 49 8b 47 58 4d 8d 6f 48 4c 89 ea 48 89 04 24 <48> c1 ea 03 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 d3 19 RSP: 0018:ffff88806ce097c0 EFLAGS: 00000246 RAX: ffffffff81000130 RBX: 0000000000000001 RCX: 0000000000000001 RDX: ffff88806ce09878 RSI: ffffffff81000130 RDI: ffff88806ce09830 RBP: ffff88806ce09888 R08: 0000000000000001 R09: ffff88806ce09870 R10: 000000000003aa6a R11: 00000000000c22bb R12: ffff88806ce098f8 R13: ffff88806ce09878 R14: ffff8880165bb780 R15: ffff88806ce09830 FS: 00007f5984ac0700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555564c23c58 CR3: 000000002a06c000 CR4: 0000000000350ef0 Call Trace: arch_stack_walk+0x87/0xf0 stack_trace_save+0x8f/0xc0 kasan_save_stack+0x24/0x50 kasan_record_aux_stack+0x89/0xa0 __call_rcu_common.constprop.0+0x6a/0xaa0 kmem_cache_free+0x2ae/0x470 kfree_skbmem+0x18a/0x1f0 consume_skb+0xdd/0x160 mac80211_hwsim_tx_frame+0x1f6/0x2a0 mac80211_hwsim_beacon_tx+0x546/0x950 __iterate_interfaces+0x2e0/0x650 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa80 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__kasan_check_read+0x8/0x20 Code: af a6 ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f6 31 d2 e9 bf f0 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f RSP: 0018:ffff888039fc7af8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffffff857ea2d0 RCX: ffffffff81a34757 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffea0000c569b0 RBP: 0000000000000003 R08: 0000000000000000 R09: fffff9400018ad2e R10: ffffea0000c56977 R11: 00000000000007e0 R12: 0000000000000001 R13: ffffea0000c56808 R14: ffffea0000c56800 R15: ffffea0000c56980 free_frozen_pages+0xa27/0xe40 __put_partials+0xd8/0x110 qlist_free_all+0x50/0x160 kasan_quarantine_reduce+0x19f/0x240 __kasan_slab_alloc+0x49/0x70 kmem_cache_alloc_noprof+0x13d/0x3d0 __alloc_object+0x2f/0x270 __create_object+0x1d/0x80 kmem_cache_alloc_noprof+0x300/0x3d0 getname_flags.part.0+0x48/0x550 getname+0x8f/0xd0 do_sys_openat2+0xec/0x1d0 __x64_sys_openat+0x143/0x200 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f598754ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5984ac0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f598765df60 RCX: 00007f598754ab19 RDX: 00000000000026e1 RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007f59875a4f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe6ec225bf R14: 00007f5984ac0300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30 program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO Bluetooth: hci7: command 0x0406 tx timeout Bluetooth: hci0: command 0x0406 tx timeout Bluetooth: hci1: command 0x0406 tx timeout Bluetooth: hci4: command 0x0406 tx timeout Bluetooth: hci2: command 0x0406 tx timeout Bluetooth: hci5: command 0x0406 tx timeout Bluetooth: hci3: command 0x0406 tx timeout program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO loop2: detected capacity change from 0 to 4096 EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 47925 (only 16 groups) EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop2: detected capacity change from 0 to 4096 EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop2: detected capacity change from 0 to 4096 EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 47925 (only 16 groups) loop2: detected capacity change from 0 to 4096 EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. ---------------- Code disassembly (best guess), 5 bytes skipped: 0: df 49 8d fisttps -0x73(%rcx) 3: 6f outsl %ds:(%rsi),(%dx) 4: 58 pop %rax 5: 48 89 ea mov %rbp,%rdx 8: 48 c1 ea 03 shr $0x3,%rdx c: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 10: 0f 85 07 1a 00 00 jne 0x1a1d 16: 49 8b 47 58 mov 0x58(%r15),%rax 1a: 4d 8d 6f 48 lea 0x48(%r15),%r13 1e: 4c 89 ea mov %r13,%rdx 21: 48 89 04 24 mov %rax,(%rsp) * 25: 48 c1 ea 03 shr $0x3,%rdx <-- trapping instruction 29: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 30: fc ff df 33: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 37: 0f .byte 0xf 38: 85 d3 test %edx,%ebx 3a: 19 .byte 0x19