watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.2:4926] Modules linked in: irq event stamp: 5261305 hardirqs last enabled at (5261304): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (5261305): [] sysvec_apic_timer_interrupt+0xf/0x90 softirqs last enabled at (5247178): [] irq_exit_rcu+0x93/0xc0 softirqs last disabled at (5247181): [] irq_exit_rcu+0x93/0xc0 CPU: 0 PID: 4926 Comm: syz-executor.2 Not tainted 6.4.0-rc3-next-20230525 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:unwind_next_frame+0x12d9/0x2480 Code: 48 89 e9 48 c1 e9 03 80 3c 01 00 0f 85 af 0f 00 00 48 b8 00 00 00 00 00 fc ff df 49 89 57 58 4c 89 e2 48 c1 ea 03 80 3c 02 00 <0f> 85 6f 0f 00 00 49 8d 7f 68 4d 89 77 60 48 b8 00 00 00 00 00 fc RSP: 0018:ffff88806ce09858 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff1100d9c1324 RDX: 1ffff1100d9c1325 RSI: ffff88804495ff58 RDI: ffff88804495fff0 RBP: ffff88806ce09920 R08: ffffffff864b2f90 R09: ffffffff864b2f94 R10: 0000000000038001 R11: 00000000000b6519 R12: ffff88806ce09928 R13: ffff88806ce09910 R14: ffff88804495ff58 R15: ffff88806ce098c8 FS: 00007f20379c6700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff58750fe0 CR3: 0000000016dae000 CR4: 0000000000350ef0 Call Trace: arch_stack_walk+0x87/0xf0 stack_trace_save+0x90/0xd0 kasan_save_stack+0x22/0x50 __kasan_record_aux_stack+0x95/0xb0 __call_rcu_common.constprop.0+0x6a/0xb90 kmem_cache_free+0xb9/0x4a0 kfree_skbmem+0xef/0x1b0 consume_skb+0x126/0x2e0 mac80211_hwsim_tx_frame+0x1f6/0x2a0 mac80211_hwsim_beacon_tx+0x427/0x730 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x59d/0xb60 hrtimer_run_softirq+0x14c/0x310 __do_softirq+0x1b7/0x7d4 irq_exit_rcu+0x93/0xc0 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:free_unref_page_prepare+0x766/0xc60 Code: 00 00 48 89 04 24 eb 41 e9 f1 00 00 00 48 89 d0 48 c1 e8 03 80 3c 08 00 0f 85 9c 03 00 00 48 8b 02 48 89 d6 48 25 00 00 80 ff <48> c1 ee 03 80 3c 0e 00 0f 85 bf 03 00 00 48 89 02 48 83 c2 40 48 RSP: 0018:ffff88804495f658 EFLAGS: 00000206 RAX: 0100000000000000 RBX: 0000000000045f60 RCX: dffffc0000000000 RDX: ffffea000117d880 RSI: ffffea000117d880 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: fffff9400022fb16 R10: ffffea000117d8b7 R11: 1ffff1100d9c69af R12: 0000000000000003 R13: ffffea000117d808 R14: 0000000000000000 R15: ffffea000117d800 free_unref_page+0x53/0x220 __unfreeze_partials+0x130/0x150 qlist_free_all+0x6d/0x1a0 kasan_quarantine_reduce+0x199/0x230 __kasan_slab_alloc+0x49/0x70 __kmem_cache_alloc_node+0x17e/0x310 kmalloc_trace+0x26/0xc0 addrconf_init_net+0x172/0x8f0 ops_init+0xbb/0x6b0 setup_net+0x3d9/0x990 copy_net_ns+0x321/0x770 create_new_namespaces+0x3f6/0xb30 copy_namespaces+0x414/0x500 copy_process+0x2b78/0x73b0 kernel_clone+0xeb/0x7d0 __do_sys_clone3+0x1d5/0x250 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f203a450b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f20379c6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f203a563f60 RCX: 00007f203a450b19 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 RBP: 00007f203a4aaf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe0b8daa9f R14: 00007f20379c6300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 ---------------- Code disassembly (best guess): 0: 48 89 e9 mov %rbp,%rcx 3: 48 c1 e9 03 shr $0x3,%rcx 7: 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) b: 0f 85 af 0f 00 00 jne 0xfc0 11: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 18: fc ff df 1b: 49 89 57 58 mov %rdx,0x58(%r15) 1f: 4c 89 e2 mov %r12,%rdx 22: 48 c1 ea 03 shr $0x3,%rdx 26: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) * 2a: 0f 85 6f 0f 00 00 jne 0xf9f <-- trapping instruction 30: 49 8d 7f 68 lea 0x68(%r15),%rdi 34: 4d 89 77 60 mov %r14,0x60(%r15) 38: 48 rex.W 39: b8 00 00 00 00 mov $0x0,%eax 3e: 00 fc add %bh,%ah