sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz-executor.6:4626] Modules linked in: irq event stamp: 5051571 hardirqs last enabled at (5051570): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (5051571): [] sysvec_apic_timer_interrupt+0xf/0xc0 softirqs last enabled at (5041904): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (5041917): [] __irq_exit_rcu+0x11b/0x180 CPU: 1 PID: 4626 Comm: syz-executor.6 Not tainted 6.2.0-rc1-next-20221226 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__kasan_slab_alloc+0x5f/0x70 Code: 00 00 74 15 5b 4c 89 e0 5d 41 5c 41 5d e9 2d 0b c4 02 e8 84 30 00 00 eb cf 44 89 ea 4c 89 e6 48 89 ef e8 44 20 00 00 4c 89 e0 <5b> 5d 41 5c 41 5d e9 0a 0b c4 02 66 0f 1f 44 00 00 90 90 90 90 90 RSP: 0018:ffff88806cf09b00 EFLAGS: 00000286 RAX: ffff8880147c9b40 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000000cc317 RSI: ffff88806cf09944 RDI: 0000000000000000 RBP: ffff888008793dc0 R08: 000000000000000f R09: ffff888045264eb0 R10: ffff88806ca618b8 R11: 0000000000000001 R12: ffff8880147c9b40 R13: 0000000000000a20 R14: 0000000000000000 R15: 0000000000000a20 FS: 00007f62d0bdb700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000001fe48000 CR4: 0000000000350ee0 Call Trace: kmem_cache_alloc_node+0x1f5/0x420 __alloc_skb+0x21a/0x310 __netdev_alloc_skb+0x76/0x3e0 __ieee80211_beacon_get+0x3d9/0x1310 ieee80211_beacon_get_tim+0x99/0x4f0 mac80211_hwsim_beacon_tx+0x1d2/0xab0 __iterate_interfaces+0x2d3/0x560 ieee80211_iterate_active_interfaces_atomic+0x74/0x180 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x54b/0xc70 hrtimer_run_softirq+0x176/0x350 __do_softirq+0x1c7/0x8f9 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x9/0x30 sysvec_apic_timer_interrupt+0x92/0xc0 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__unfreeze_partials+0x3c/0x150 Code: f6 41 55 45 31 ed 41 54 55 48 89 fd 31 ff 53 48 83 ec 48 49 8b 47 10 48 89 04 24 49 8b 07 48 c1 e8 3a 4c 8b a4 c5 d0 00 00 00 <4c> 39 e7 74 45 48 85 ff 74 08 4c 89 ee e8 e2 55 c4 02 4c 89 e7 e8 RSP: 0018:ffff88801e02fa30 EFLAGS: 00000256 RAX: 0000000000000000 RBX: ffff88801478b260 RCX: ffffffff812b3b2f RDX: 0000000000000000 RSI: ffffea000038e9c0 RDI: 0000000000000000 RBP: ffff88800844f780 R08: 0000000000000001 R09: ffffffff876328ef R10: fffffbfff0ec651d R11: 0000000000000001 R12: ffff88800844e900 R13: 0000000000000000 R14: 0000000000000000 R15: ffffea000038e9c0 qlist_free_all+0x6d/0x1a0 kasan_quarantine_reduce+0x196/0x230 __kasan_slab_alloc+0x4c/0x70 kmem_cache_alloc_bulk+0x3dc/0x780 mas_alloc_nodes+0x2ff/0x800 mas_preallocate+0x1bf/0x370 mmap_region+0x769/0x1c20 do_mmap+0x82c/0xf50 vm_mmap_pgoff+0x1b3/0x270 ksys_mmap_pgoff+0x3d4/0x500 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f62d3665b62 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 RSP: 002b:00007f62d0bdb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f62d3665b62 RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffb000 RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000010000000 R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000800 R13: 0000000020ffb000 R14: 0000000020000380 R15: 0000000020ffc000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 74 15 je 0x19 4: 5b pop %rbx 5: 4c 89 e0 mov %r12,%rax 8: 5d pop %rbp 9: 41 5c pop %r12 b: 41 5d pop %r13 d: e9 2d 0b c4 02 jmpq 0x2c40b3f 12: e8 84 30 00 00 callq 0x309b 17: eb cf jmp 0xffffffe8 19: 44 89 ea mov %r13d,%edx 1c: 4c 89 e6 mov %r12,%rsi 1f: 48 89 ef mov %rbp,%rdi 22: e8 44 20 00 00 callq 0x206b 27: 4c 89 e0 mov %r12,%rax * 2a: 5b pop %rbx <-- trapping instruction 2b: 5d pop %rbp 2c: 41 5c pop %r12 2e: 41 5d pop %r13 30: e9 0a 0b c4 02 jmpq 0x2c40b3f 35: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop