watchdog: BUG: soft lockup - CPU#0 stuck for 21s! [syz-executor.0:12678] Modules linked in: irq event stamp: 2445339 hardirqs last enabled at (2445338): [] irqentry_exit+0x3b/0x90 hardirqs last disabled at (2445339): [] sysvec_apic_timer_interrupt+0xf/0x80 softirqs last enabled at (2444992): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (2445003): [] __irq_exit_rcu+0xc4/0x100 CPU: 0 UID: 0 PID: 12678 Comm: syz-executor.0 Not tainted 6.13.0-rc1-next-20241203 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__x86_indirect_thunk_rbx+0x6/0x20 Code: 1f 44 00 00 e8 01 00 00 00 cc 48 89 14 24 e9 31 06 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 44 00 00 e8 01 00 00 00 cc <48> 89 1c 24 e9 11 06 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 0f RSP: 0018:ffff88806ce090a0 EFLAGS: 00000282 RAX: ffffffff845a9d38 RBX: ffffffff813f01a0 RCX: 0000000000000001 RDX: 1ffff1100d9c1221 RSI: ffffffff845a9d38 RDI: ffff88806ce09178 RBP: ffff88806ce09148 R08: 0000000000000001 R09: ffff88806ce090f0 R10: 000000000003c001 R11: 00000000000b8051 R12: ffff88806ce09178 R13: 0000000000000000 R14: ffff88803b465280 R15: ffff88806ce096a8 FS: 00007fb3896fc700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb38c1daad8 CR3: 000000000ea50000 CR4: 0000000000350ef0 Call Trace: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc1-next-20241203 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:stack_trace_consume_entry+0xd7/0x170 Code: 02 00 0f 85 9a 00 00 00 8d 45 01 89 43 10 48 8b 03 48 8d 2c e8 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 64 48 89 75 00 8b 43 08 39 43 10 0f 92 c0 48 83 c4 08 5b 5d e9 RSP: 0018:ffff88806cf09628 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: ffff88806cf09710 RCX: 0000000000000001 RDX: 1ffff1100d9e1307 RSI: ffffffff8111be61 RDI: ffff88806cf0971c RBP: ffff88806cf09838 R08: 0000000000000001 R09: ffff88806cf09688 R10: 000000000003c001 R11: 000000000000c599 R12: ffff88806cf09710 R13: 0000000000000000 R14: ffff88800961d280 R15: 0000000000000820 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005563fa5ab458 CR3: 0000000014c86000 CR4: 0000000000350ef0 Call Trace: arch_stack_walk+0x77/0xf0 stack_trace_save+0x8f/0xc0 kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_node_noprof+0x14c/0x3e0 __alloc_skb+0x2ad/0x370 skb_copy+0x1d5/0x3b0 mac80211_hwsim_tx_frame_no_nl.isra.0+0xafb/0x1320 mac80211_hwsim_tx_frame+0x1ee/0x2a0 mac80211_hwsim_beacon_tx+0x546/0x950 __iterate_interfaces+0x2e0/0x650 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x1ab/0xa80 hrtimer_run_softirq+0x14c/0x310 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:default_idle+0x1e/0x30 Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d e9 c5 3d 00 0f 1f 44 00 00 fb f4 e9 7c 2e 02 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 RSP: 0018:ffff8880096cfe68 EFLAGS: 00000206 RAX: 00000000000db8eb RBX: 0000000000000001 RCX: ffffffff8484b837 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff812b16da RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffed100d9e6cba R10: ffff88806cf365d3 R11: 0000000000000000 R12: ffffffff863fac90 R13: 1ffff110012d9fd2 R14: 0000000000000000 R15: 0000000000000000 default_idle_call+0x6d/0xb0 do_idle+0x2fa/0x3b0 cpu_startup_entry+0x4f/0x60 start_secondary+0x1c1/0x220 common_startup_64+0x12c/0x138 loop7: detected capacity change from 0 to 512 EXT4-fs (loop7): failed to parse options in superblock:  EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop7: detected capacity change from 0 to 512 EXT4-fs (loop7): failed to parse options in superblock:  EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop7: detected capacity change from 0 to 512 EXT4-fs (loop7): failed to parse options in superblock:  EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. loop7: detected capacity change from 0 to 512 EXT4-fs (loop7): failed to parse options in superblock:  EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. ieee802154 phy0 wpan0: encryption failed: -22 UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 ieee802154 phy0 wpan0: encryption failed: -22 program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO ieee802154 phy0 wpan0: encryption failed: -22 UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 ieee802154 phy0 wpan0: encryption failed: -22 program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 9pnet_fd: Insufficient options for proto=fd program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 44 00 00 add %r8b,(%rax) 3: e8 01 00 00 00 callq 0x9 8: cc int3 9: 48 89 14 24 mov %rdx,(%rsp) d: e9 31 06 00 00 jmpq 0x643 12: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 19: 00 00 00 00 1d: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) 23: e8 01 00 00 00 callq 0x29 28: cc int3 * 29: 48 89 1c 24 mov %rbx,(%rsp) <-- trapping instruction 2d: e9 11 06 00 00 jmpq 0x643 32: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 39: 00 00 00 00 3d: 66 data16 3e: 0f .byte 0xf