watchdog: BUG: soft lockup - CPU#0 stuck for 21s! [syz-executor.7:64193] Modules linked in: irq event stamp: 8439303 hardirqs last enabled at (8439302): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (8439303): [] sysvec_apic_timer_interrupt+0xf/0x90 softirqs last enabled at (8437836): [] irq_exit_rcu+0x93/0xc0 softirqs last disabled at (8437839): [] irq_exit_rcu+0x93/0xc0 CPU: 0 PID: 64193 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 16 a7 d2 fc 48 89 ef e8 ce 2a d3 fc 80 e7 02 74 06 e8 94 b5 f8 fc fb 65 ff 0d 24 44 a8 7b <74> 07 5b 5d e9 13 2a 00 00 0f 1f 44 00 00 5b 5d e9 07 2a 00 00 0f RSP: 0018:ffff88806ce09868 EFLAGS: 00000202 RAX: 000000000080c5e0 RBX: 0000000000000246 RCX: ffffffff812d4b5f RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff845b46dc RBP: ffff88804b3594e0 R08: 0000000000000001 R09: fffffbfff0efe575 R10: ffffffff877f2baf R11: 0000000000000001 R12: dffffc0000000000 R13: ffff8880423fc000 R14: ffff888041940650 R15: ffff88806ce09d70 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fabd0161545 CR3: 0000000034c0a000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: ieee80211_rx_handlers+0x59af/0x9230 ieee80211_prepare_and_rx_handle+0x218a/0x59c0 ieee80211_rx_for_interface+0x10e/0x200 ieee80211_rx_list+0x1e34/0x2d10 ieee80211_rx_napi+0xde/0x3c0 ieee80211_tasklet_handler+0xd6/0x130 tasklet_action_common.constprop.0+0x267/0x700 __do_softirq+0x1b7/0x7d4 irq_exit_rcu+0x93/0xc0 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:folio_batch_move_lru+0x273/0x570 Code: 48 c1 ea 03 0f b6 04 02 84 c0 74 06 0f 8e fe 02 00 00 41 0f b6 6d 00 e8 eb c7 e5 ff 49 8d 7d 08 89 ee e8 40 ed ff ff 4c 89 ea <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 06 RSP: 0018:ffff88804c36f8f0 EFLAGS: 00000286 RAX: 0000000000000000 RBX: ffff888019b8b000 RCX: ffffffff812e71f3 RDX: ffff88806ce350b0 RSI: 0000000000000004 RDI: ffff88806ce40180 RBP: 0000000000000008 R08: 0000000000000000 R09: ffffed100d9c8030 R10: ffff88806ce40183 R11: 1ffff1100d9c69b7 R12: 0000000000000008 R13: ffff88806ce350b0 R14: dffffc0000000000 R15: ffffffff8166f870 lru_add_drain_cpu+0x518/0x720 lru_add_drain+0xd6/0x390 exit_mmap+0x137/0x9b0 mmput+0xd5/0x390 do_exit+0x99f/0x2740 do_group_exit+0xd4/0x2a0 get_signal+0x2693/0x2720 arch_do_signal_or_restart+0x79/0x590 exit_to_user_mode_prepare+0xeb/0x180 syscall_exit_to_user_mode+0x1d/0x50 do_syscall_64+0x4c/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 RIP: 0033:0x7f97f6ba8b19 Code: Unable to access opcode bytes at 0x7f97f6ba8aef. RSP: 002b:00007f97f411e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: 0000000000000006 RBX: 00007f97f6cbbf60 RCX: 00007f97f6ba8b19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 RBP: 00007f97f6c02f6d R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcb20fad3f R14: 00007f97f411e300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 Process accounting resumed audit: type=1326 audit(2000000077.802:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=65464 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97f6ba8b19 code=0x0 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 18 53 48 sbb %dl,0x48(%rbx) 3: 89 f3 mov %esi,%ebx 5: 48 8b 74 24 10 mov 0x10(%rsp),%rsi a: e8 16 a7 d2 fc callq 0xfcd2a725 f: 48 89 ef mov %rbp,%rdi 12: e8 ce 2a d3 fc callq 0xfcd32ae5 17: 80 e7 02 and $0x2,%bh 1a: 74 06 je 0x22 1c: e8 94 b5 f8 fc callq 0xfcf8b5b5 21: fb sti 22: 65 ff 0d 24 44 a8 7b decl %gs:0x7ba84424(%rip) # 0x7ba8444d * 29: 74 07 je 0x32 <-- trapping instruction 2b: 5b pop %rbx 2c: 5d pop %rbp 2d: e9 13 2a 00 00 jmpq 0x2a45 32: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 37: 5b pop %rbx 38: 5d pop %rbp 39: e9 07 2a 00 00 jmpq 0x2a45 3e: 0f .byte 0xf