device lo left promiscuous mode device lo entered promiscuous mode watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.7:64497] Modules linked in: irq event stamp: 7840079 hardirqs last enabled at (7840078): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (7840079): [] sysvec_apic_timer_interrupt+0xf/0x90 softirqs last enabled at (7771798): [] __irq_exit_rcu+0xcc/0x110 softirqs last disabled at (7771801): [] __irq_exit_rcu+0xcc/0x110 CPU: 1 PID: 64497 Comm: syz-executor.7 Not tainted 6.2.0-rc6-next-20230203 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__stack_depot_save+0x44/0x460 Code: 30 65 48 8b 04 25 28 00 00 00 48 89 44 24 28 31 c0 48 c7 44 24 20 00 00 00 00 e8 a7 9b 13 ff 85 c0 74 09 80 3d dc 92 bb 05 00 <74> 29 31 c0 48 8b 54 24 28 65 48 2b 14 25 28 00 00 00 0f 85 fe 03 RSP: 0018:ffff88806cf09980 EFLAGS: 00000246 RAX: 000000000000000b RBX: 1ffff1100d9e133d RCX: 0000000000000001 RDX: 0000000000000800 RSI: 0000000000000010 RDI: ffff88806cf09a58 RBP: 00000000000000f0 R08: ffffffff8647b18a R09: ffff88806cf098f0 R10: 0000000000038001 R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000800 R14: ffff88806cf09a08 R15: ffff8880095045f0 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7be913b008 CR3: 000000001625c000 CR4: 0000000000350ee0 Call Trace: set_track_prepare+0x85/0xd0 __create_object+0x3b2/0xc90 kmem_cache_alloc_node+0x215/0x330 __alloc_skb+0x21a/0x310 __netdev_alloc_skb+0x72/0x370 __ieee80211_beacon_get+0x3d9/0x13c0 ieee80211_beacon_get_tim+0x99/0x540 mac80211_hwsim_beacon_tx+0x1d3/0xb10 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x54b/0xcb0 hrtimer_run_softirq+0x14c/0x310 __do_softirq+0x258/0x8a2 __irq_exit_rcu+0xcc/0x110 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:vm_normal_page+0x4/0x2e0 Code: 38 10 00 eb bd 48 c7 c7 10 a0 48 85 e8 b5 38 10 00 e9 07 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 41 56 41 55 49 89 f5 41 54 49 89 fc 55 53 48 bb 00 00 00 00 RSP: 0018:ffff888030dbf6e8 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 8000000000000007 RCX: 0000000000000000 RDX: 800000003e2bd007 RSI: 00007fbdc9adb000 RDI: ffff88801c3a9000 RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 800000003e2bd007 R13: ffff888030dbfad8 R14: dffffc0000000000 R15: 00007fbdc9c00000 unmap_page_range+0xc80/0x2da0 unmap_single_vma+0x194/0x2a0 unmap_vmas+0x233/0x390 exit_mmap+0x15b/0x6a0 mmput+0xd5/0x390 do_exit+0x9c6/0x2800 do_group_exit+0xd4/0x2a0 get_signal+0x23c8/0x2450 arch_do_signal_or_restart+0x79/0x590 exit_to_user_mode_prepare+0xeb/0x180 syscall_exit_to_user_mode+0x1d/0x50 do_syscall_64+0x4c/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7fbdcacb9b19 Code: Unable to access opcode bytes at 0x7fbdcacb9aef. RSP: 002b:00007fbdc822f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fbdcadccf68 RCX: 00007fbdcacb9b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbdcadccf68 RBP: 00007fbdcadccf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdcadccf6c R13: 00007fffad644aef R14: 00007fbdc822f300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 ---------------- Code disassembly (best guess): 0: 30 65 48 xor %ah,0x48(%rbp) 3: 8b 04 25 28 00 00 00 mov 0x28,%eax a: 48 89 44 24 28 mov %rax,0x28(%rsp) f: 31 c0 xor %eax,%eax 11: 48 c7 44 24 20 00 00 movq $0x0,0x20(%rsp) 18: 00 00 1a: e8 a7 9b 13 ff callq 0xff139bc6 1f: 85 c0 test %eax,%eax 21: 74 09 je 0x2c 23: 80 3d dc 92 bb 05 00 cmpb $0x0,0x5bb92dc(%rip) # 0x5bb9306 * 2a: 74 29 je 0x55 <-- trapping instruction 2c: 31 c0 xor %eax,%eax 2e: 48 8b 54 24 28 mov 0x28(%rsp),%rdx 33: 65 48 2b 14 25 28 00 sub %gs:0x28,%rdx 3a: 00 00 3c: 0f .byte 0xf 3d: 85 fe test %edi,%esi 3f: 03 .byte 0x3