blk_print_req_error: 16 callbacks suppressed I/O error, dev loop2, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.0:13976] Modules linked in: irq event stamp: 9853043 hardirqs last enabled at (9853042): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (9853043): [] sysvec_apic_timer_interrupt+0xf/0xc0 softirqs last enabled at (9790180): [] irq_exit_rcu+0x11f/0x190 softirqs last disabled at (9790183): [] irq_exit_rcu+0x11f/0x190 CPU: 1 PID: 13976 Comm: syz-executor.0 Not tainted 6.2.0-rc4-next-20230118 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:kfree+0x76/0x190 Code: 48 c1 03 48 01 d0 48 c1 e8 0c 48 c1 e0 06 48 03 05 67 48 c1 03 48 8b 50 08 48 89 c7 f6 c2 01 0f 85 00 01 00 00 66 90 48 8b 07 c4 02 0f 84 fb 00 00 00 48 8b 54 24 08 48 8b 7f 08 48 89 ee 5d RSP: 0018:ffff88806cf09c48 EFLAGS: 00000202 RAX: 0100000000010200 RBX: 0000000000000000 RCX: 0000000000000001 RDX: ffffea0001128b01 RSI: 0000000000000102 RDI: ffffea0001128b00 RBP: ffff888044a2e000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044a2e000 R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880438d0e30 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f79d1780860 CR3: 0000000005482000 CR4: 0000000000350ee0 Call Trace: skb_release_data+0x6ab/0x7e0 consume_skb+0xcb/0x170 mac80211_hwsim_tx_frame+0x1f6/0x2a0 mac80211_hwsim_beacon_tx+0x566/0xb10 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x54b/0xcb0 hrtimer_run_softirq+0x176/0x350 __do_softirq+0x274/0x8ff irq_exit_rcu+0x11f/0x190 sysvec_apic_timer_interrupt+0x92/0xc0 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:unmap_page_range+0xdc8/0x2d90 Code: db 0f 84 20 fd ff ff e8 c6 04 dc ff 48 8d 43 08 48 89 44 24 50 48 c1 e8 03 42 80 3c 30 00 0f 85 1f 16 00 00 48 8b 6b 08 31 ff <49> 89 ec 41 83 e4 01 4c 89 e6 e8 f9 00 dc ff 4d 85 e4 0f 85 7f 05 RSP: 0018:ffff88800fc87700 EFLAGS: 00000246 RAX: 1ffffd40001f5df9 RBX: ffffea0000faefc0 RCX: 0000000000000000 RDX: ffff88800c5fd040 RSI: ffffffff816d7daa RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 800000003ebbf007 R13: ffff88800fc87ad8 R14: dffffc0000000000 R15: 00007feeae800000 unmap_single_vma+0x190/0x2a0 unmap_vmas+0x225/0x370 exit_mmap+0x158/0x6a0 mmput+0xd5/0x390 do_exit+0x99b/0x2780 do_group_exit+0xd4/0x2a0 get_signal+0x2255/0x2390 arch_do_signal_or_restart+0x79/0x5a0 exit_to_user_mode_prepare+0xf5/0x190 syscall_exit_to_user_mode+0x1d/0x50 do_syscall_64+0x4c/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7feeaf4e6b19 Code: Unable to access opcode bytes at 0x7feeaf4e6aef. RSP: 002b:00007feeaca3b188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: 0000000000000004 RBX: 00007feeaf5fa020 RCX: 00007feeaf4e6b19 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 RBP: 00007feeaf540f6d R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffd971880f R14: 00007feeaca3b300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 ---------------- Code disassembly (best guess): 0: 48 c1 03 48 rolq $0x48,(%rbx) 4: 01 d0 add %edx,%eax 6: 48 c1 e8 0c shr $0xc,%rax a: 48 c1 e0 06 shl $0x6,%rax e: 48 03 05 67 48 c1 03 add 0x3c14867(%rip),%rax # 0x3c1487c 15: 48 8b 50 08 mov 0x8(%rax),%rdx 19: 48 89 c7 mov %rax,%rdi 1c: f6 c2 01 test $0x1,%dl 1f: 0f 85 00 01 00 00 jne 0x125 25: 66 90 xchg %ax,%ax 27: 48 8b 07 mov (%rdi),%rax * 2a: f6 c4 02 test $0x2,%ah <-- trapping instruction 2d: 0f 84 fb 00 00 00 je 0x12e 33: 48 8b 54 24 08 mov 0x8(%rsp),%rdx 38: 48 8b 7f 08 mov 0x8(%rdi),%rdi 3c: 48 89 ee mov %rbp,%rsi 3f: 5d pop %rbp