random: crng reseeded on system resumption watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz-executor.4:15771] Modules linked in: irq event stamp: 5448743 hardirqs last enabled at (5448742): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (5448743): [] sysvec_apic_timer_interrupt+0xf/0x90 softirqs last enabled at (5284920): [] irq_exit_rcu+0x93/0xc0 softirqs last disabled at (5284923): [] irq_exit_rcu+0x93/0xc0 CPU: 1 PID: 15771 Comm: syz-executor.4 Not tainted 6.5.0-rc6-next-20230816 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__orc_find+0xa1/0x130 Code: f1 39 00 48 89 e8 48 29 d8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 f8 4c 8d 3c 83 4c 89 fa 48 c1 ea 03 42 0f b6 0c 32 <4c> 89 fa 83 e2 07 83 c2 03 38 ca 7c 04 84 c9 75 71 49 63 17 4c 89 RSP: 0018:ffff88806cf09620 EFLAGS: 00000217 RAX: 0000000000000001 RBX: ffffffff85e16e18 RCX: 0000000000000000 RDX: 1ffffffff0bc2dc3 RSI: ffffffff8113ab5a RDI: 0000000000000005 RBP: ffffffff85e16e24 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff818363b8 R13: ffffffff818363b8 R14: dffffc0000000000 R15: ffffffff85e16e1c FS: 00007fa31635c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31f2c000 CR3: 000000000c30e000 CR4: 0000000000350ee0 Call Trace: unwind_next_frame+0x31d/0x25d0 arch_stack_walk+0xe6/0x160 stack_trace_save+0x90/0xd0 kasan_save_stack+0x22/0x50 kasan_set_track+0x25/0x30 __kasan_slab_alloc+0x59/0x70 kmem_cache_alloc_node+0x199/0x3b0 kmalloc_reserve+0x169/0x270 __alloc_skb+0x129/0x330 __netdev_alloc_skb+0x72/0x370 __ieee80211_beacon_get+0x3f6/0xfc0 ieee80211_beacon_get_tim+0xa1/0x550 mac80211_hwsim_beacon_tx+0x402/0x730 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x59d/0xb60 hrtimer_run_softirq+0x14c/0x310 __do_softirq+0x1b7/0x7d4 irq_exit_rcu+0x93/0xc0 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:put_cpu_partial+0x107/0x1b0 Code: 39 45 28 75 5e 48 c7 45 28 00 00 00 00 48 c7 c6 72 bc 82 81 48 89 ef e8 d7 eb ab ff 48 85 db 74 06 e8 fd 1c d2 ff fb 4d 85 f6 <74> 1e 5b 4c 89 f6 5d 4c 89 e7 41 5c 41 5d 41 5e 41 5f e9 12 fa ff RSP: 0018:ffff888041cbf6c0 EFLAGS: 00000246 RAX: 0000000000244a33 RBX: 0000000000000200 RCX: ffffffff812e05df RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8182bc93 RBP: ffff88806cf3e0e0 R08: 0000000000000001 R09: fffffbfff0ee9f6d R10: ffffffff8774fb6f R11: 0000000000000001 R12: ffff88800844f780 R13: ffffea000055c9c0 R14: 0000000000000000 R15: 0000000000000005 qlist_free_all+0x6d/0x1a0 kasan_quarantine_reduce+0x199/0x230 __kasan_slab_alloc+0x49/0x70 kmem_cache_alloc+0x17b/0x390 jbd2__journal_start+0x194/0x810 __ext4_journal_start_sb+0x3d7/0x560 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1aa/0xc10 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 step_into+0x1291/0x2000 walk_component+0xf5/0x5b0 link_path_walk.part.0+0x76e/0xd90 path_parentat+0xa8/0x1b0 __filename_parentat+0x1dd/0x620 filename_create+0xa3/0x4a0 do_mkdirat+0x98/0x2d0 __x64_sys_mkdirat+0x119/0x180 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x73/0xdd RIP: 0033:0x7fa318de6b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa31635c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007fa318ef9f60 RCX: 00007fa318de6b19 RDX: 00000000000001ff RSI: 0000000020000040 RDI: ffffffffffffff9c RBP: 00007fa318e40f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc74d7a77f R14: 00007fa31635c300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30 random: crng reseeded on system resumption random: crng reseeded on system resumption random: crng reseeded on system resumption syz-executor.1[15835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set syz-executor.1[15838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set random: crng reseeded on system resumption random: crng reseeded on system resumption ---------------- Code disassembly (best guess): 0: f1 icebp 1: 39 00 cmp %eax,(%rax) 3: 48 89 e8 mov %rbp,%rax 6: 48 29 d8 sub %rbx,%rax 9: 48 89 c2 mov %rax,%rdx c: 48 c1 e8 3f shr $0x3f,%rax 10: 48 c1 fa 02 sar $0x2,%rdx 14: 48 01 d0 add %rdx,%rax 17: 48 d1 f8 sar %rax 1a: 4c 8d 3c 83 lea (%rbx,%rax,4),%r15 1e: 4c 89 fa mov %r15,%rdx 21: 48 c1 ea 03 shr $0x3,%rdx 25: 42 0f b6 0c 32 movzbl (%rdx,%r14,1),%ecx * 2a: 4c 89 fa mov %r15,%rdx <-- trapping instruction 2d: 83 e2 07 and $0x7,%edx 30: 83 c2 03 add $0x3,%edx 33: 38 ca cmp %cl,%dl 35: 7c 04 jl 0x3b 37: 84 c9 test %cl,%cl 39: 75 71 jne 0xac 3b: 49 63 17 movslq (%r15),%rdx 3e: 4c rex.WR 3f: 89 .byte 0x89