watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.5:6161] Modules linked in: irq event stamp: 4191289 hardirqs last enabled at (4191288): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (4191289): [] sysvec_apic_timer_interrupt+0xf/0x90 softirqs last enabled at (4161680): [] __irq_exit_rcu+0xcc/0x110 softirqs last disabled at (4161683): [] __irq_exit_rcu+0xcc/0x110 CPU: 0 PID: 6161 Comm: syz-executor.5 Not tainted 6.2.0-rc5-next-20230127 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:kmem_cache_alloc_node+0x4/0x330 Code: 85 1a fe ff ff 0f 1f 44 00 00 e9 10 fe ff ff 0f 0b e8 00 57 c6 02 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 41 56 41 55 41 89 f5 41 54 49 89 fc 55 89 d5 53 48 83 ec 18 RSP: 0018:ffff88806ce09ae8 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 00000000000000c0 RCX: 0000000000000100 RDX: 00000000ffffffff RSI: 0000000000000820 RDI: ffff888008795dc0 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000004 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 00000000ffffffff R14: 0000000000000820 R15: ffff888042dcd430 FS: 00007f2b67fd6700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2c424000 CR3: 000000003e9e6000 CR4: 0000000000350ef0 Call Trace: __alloc_skb+0x21a/0x310 skb_copy+0x13d/0x3f0 mac80211_hwsim_tx_frame_no_nl.isra.0+0xb08/0x1330 mac80211_hwsim_tx_frame+0x1ee/0x2a0 mac80211_hwsim_beacon_tx+0x567/0xb10 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x54b/0xcb0 hrtimer_run_softirq+0x14c/0x310 __do_softirq+0x258/0x8a2 __irq_exit_rcu+0xcc/0x110 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:ip_finish_output2+0x176/0x2120 Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 44 01 f5 0f b6 04 02 83 e5 f0 83 c5 10 84 c0 74 08 3c 01 0f 8e 86 1d 00 00 44 0f b7 73 78 05 00 00 00 44 89 f6 e8 ad 19 bc fd 66 41 83 fe 05 0f 84 bb 08 RSP: 0018:ffff88801eeb7180 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff888010315800 RCX: ffffc900041e8000 RDX: 1ffff11002062b0f RSI: ffffffff838f3e4e RDI: ffff888010315878 RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800d0f6ff0 R13: ffff888042982c00 R14: 0000000000000002 R15: ffff888032ea2000 __ip_finish_output.part.0+0x560/0xd10 ip_output+0x2ec/0x8e0 ip_local_out+0x357/0x4c0 __ip_queue_xmit+0x852/0x1ac0 __tcp_transmit_skb+0x2ad5/0x3540 tcp_connect+0x2f1c/0x45d0 tcp_v4_connect+0x1591/0x1d00 __inet_stream_connect+0x819/0xda0 inet_stream_connect+0x57/0xa0 __sys_connect_file+0x159/0x1a0 io_connect+0x3d0/0x730 io_issue_sqe+0x6a0/0x1260 io_req_task_submit+0xd0/0x220 tctx_task_work+0x1d4/0x980 task_work_run+0x174/0x280 get_signal+0x1d3/0x2450 arch_do_signal_or_restart+0x79/0x590 exit_to_user_mode_prepare+0xeb/0x180 syscall_exit_to_user_mode+0x1d/0x50 do_syscall_64+0x4c/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f2b6aa60b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2b67fd6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa RAX: 0000000000000002 RBX: 00007f2b6ab73f60 RCX: 00007f2b6aa60b19 RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000004 RBP: 00007f2b6aabaf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd354be3cf R14: 00007f2b67fd6300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 6159 Comm: syz-executor.0 Not tainted 6.2.0-rc5-next-20230127 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__lock_acquire+0x131/0x63b0 Code: 24 48 85 c0 0f 84 14 0d 00 00 49 8d b5 58 09 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 f1 48 89 34 24 48 c1 e9 03 0f b6 14 11 <84> d2 74 09 80 fa 03 0f 8e 6e 17 00 00 48 c7 c1 c0 3f a2 87 41 8b RSP: 0018:ffff88806cf095e8 EFLAGS: 00000012 RAX: ffffffff8769c120 RBX: 1ffff1100d9e12ef RCX: 1ffff11002c0e483 RDX: 0000000000000000 RSI: ffff888016072418 RDI: ffffffff85629610 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff888016071ac0 R14: ffffffff85629608 R15: 0000000000000002 FS: 00007fbfdd4ef700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055ca186d6648 CR3: 000000000ddd4000 CR4: 0000000000350ee0 Call Trace: lock_acquire.part.0+0xec/0x320 ktime_get_update_offsets_now+0x9b/0x360 hrtimer_interrupt+0x111/0x750 __sysvec_apic_timer_interrupt+0xff/0x4a0 sysvec_apic_timer_interrupt+0x33/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:queued_spin_lock_slowpath+0x128/0xc50 Code: 00 00 00 65 48 2b 04 25 28 00 00 00 0f 85 d5 09 00 00 48 81 c4 88 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 6e 1f 00 00 f3 90 71 ff ff ff 44 8b 74 24 48 41 81 fe 00 01 00 00 0f 84 e4 00 00 RSP: 0018:ffff88806cf09a28 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff84478edb RDX: fffffbfff0b48f89 RSI: 0000000000000004 RDI: ffffffff85a47c40 RBP: ffffffff85a47c40 R08: 0000000000000000 R09: ffffffff85a47c43 R10: fffffbfff0b48f88 R11: 0000000000000001 R12: 0000000000000003 R13: fffffbfff0b48f88 R14: 0000000000000001 R15: 1ffff1100d9e1346 do_raw_spin_lock+0x1e0/0x270 mac80211_hwsim_tx_frame_no_nl.isra.0+0x6de/0x1330 mac80211_hwsim_tx_frame+0x1ee/0x2a0 mac80211_hwsim_beacon_tx+0x567/0xb10 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x54b/0xcb0 hrtimer_run_softirq+0x14c/0x310 __do_softirq+0x258/0x8a2 __irq_exit_rcu+0xcc/0x110 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:unwind_next_frame+0x384/0x2360 Code: 00 00 84 c0 0f 84 37 05 00 00 48 c7 c1 00 66 4c 85 48 b8 00 00 00 00 00 fc ff df 4c 8d 41 04 4c 89 c2 48 c1 ea 03 0f b6 04 02 <4c> 89 c2 83 e2 07 38 d0 7f 08 84 c0 0f 85 ec 16 00 00 44 0f b6 79 RSP: 0018:ffff888019daef38 EFLAGS: 00000212 RAX: 0000000000000000 RBX: 000000000003453a RCX: ffffffff8646f2be RDX: 1ffffffff0c8de58 RSI: ffffffff8646f2a6 RDI: ffffffff8601467c RBP: ffff888019daf008 R08: ffffffff8646f2c2 R09: ffff888019daeff0 R10: 0000000000038001 R11: 0000000000000001 R12: ffff888019daeff1 R13: ffff888019daefb0 R14: 0000000000000001 R15: ffffffff84453a6e arch_stack_walk+0x87/0xf0 stack_trace_save+0x90/0xd0 kasan_save_stack+0x22/0x50 kasan_set_track+0x25/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc+0x172/0x320 __create_object+0x3c/0xc90 __kmem_cache_alloc_node+0x1ed/0x310 __kmalloc+0x46/0xc0 __register_sysctl_table+0xb35/0x1480 __devinet_sysctl_register+0x15e/0x280 devinet_sysctl_register+0x164/0x230 inetdev_init+0x232/0x510 inetdev_event+0xe80/0x1700 raw_notifier_call_chain+0xb7/0x110 call_netdevice_notifiers_info+0xb5/0x130 register_netdevice+0xf47/0x1530 register_netdev+0x31/0x60 sit_init_net+0x268/0x570 ops_init+0xbb/0x6b0 setup_net+0x3d9/0x990 copy_net_ns+0x321/0x770 create_new_namespaces+0x3f6/0xb30 copy_namespaces+0x414/0x500 copy_process+0x2a5e/0x7390 kernel_clone+0xeb/0x8c0 __do_sys_clone3+0x1d5/0x2e0 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7fbfdff79b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbfdd4ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007fbfe008cf60 RCX: 00007fbfdff79b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 RBP: 00007fbfdffd3f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc0b55ad4f R14: 00007fbfdd4ef300 R15: 0000000000022000 ---------------- Code disassembly (best guess), 5 bytes skipped: 0: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 5: e9 10 fe ff ff jmpq 0xfffffe1a a: 0f 0b ud2 c: e8 00 57 c6 02 callq 0x2c65711 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: 90 nop 20: 90 nop 21: f3 0f 1e fa endbr64 * 25: 41 57 push %r15 <-- trapping instruction 27: 41 56 push %r14 29: 41 55 push %r13 2b: 41 89 f5 mov %esi,%r13d 2e: 41 54 push %r12 30: 49 89 fc mov %rdi,%r12 33: 55 push %rbp 34: 89 d5 mov %edx,%ebp 36: 53 push %rbx 37: 48 83 ec 18 sub $0x18,%rsp