watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz-executor.3:6431] CPU#0 Utilization every 22s during lockup: #1: 12% system, 1% softirq, 100% hardirq, 0% idle #2: 13% system, 1% softirq, 100% hardirq, 0% idle #3: 13% system, 1% softirq, 100% hardirq, 0% idle #4: 13% system, 1% softirq, 100% hardirq, 0% idle #5: 13% system, 1% softirq, 100% hardirq, 0% idle CPU#0 Detect HardIRQ Time exceeds 50%. Most frequent HardIRQs: #1: 35 irq#31 Modules linked in: irq event stamp: 174681 hardirqs last enabled at (174680): [] kcov_remote_start+0x3d1/0x6e0 kernel/kcov.c:922 hardirqs last disabled at (174681): [] sysvec_apic_timer_interrupt+0xe/0xb0 arch/x86/kernel/apic/apic.c:1043 softirqs last enabled at (12852): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (12852): [] handle_softirqs+0x5be/0x8f0 kernel/softirq.c:582 softirqs last disabled at (12855): [] __do_softirq kernel/softirq.c:588 [inline] softirqs last disabled at (12855): [] invoke_softirq kernel/softirq.c:428 [inline] softirqs last disabled at (12855): [] __irq_exit_rcu kernel/softirq.c:637 [inline] softirqs last disabled at (12855): [] irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649 CPU: 0 PID: 6431 Comm: syz-executor.3 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 kernel/kcov.c:290 Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 RSP: 0018:ffffc90000007ac0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffff888034de8ca8 RCX: ffffffff8a54ec89 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 1ffff92000000f5d R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000005 R12: ffff888011cf8e20 R13: ffff888038b96150 R14: ffff888011cfb318 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff025094ff8 CR3: 000000000d97a000 CR4: 0000000000350ef0 Call Trace: rcu_read_lock include/linux/rcupdate.h:782 [inline] ieee80211_bss_info_update+0x7b9/0xab0 net/mac80211/scan.c:192 ieee80211_scan_rx+0x47c/0xad0 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5222 [inline] ieee80211_rx_list+0x1be1/0x2e90 net/mac80211/rx.c:5459 ieee80211_rx_napi+0xdd/0x400 net/mac80211/rx.c:5482 ieee80211_rx include/net/mac80211.h:5093 [inline] ieee80211_handle_queued_frames+0xd5/0x130 net/mac80211/main.c:437 tasklet_action_common.constprop.0+0x24f/0x3e0 kernel/softirq.c:785 handle_softirqs+0x219/0x8f0 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:arch_atomic_add_return arch/x86/include/asm/atomic.h:85 [inline] RIP: 0010:raw_atomic_sub_return include/linux/atomic/atomic-arch-fallback.h:787 [inline] RIP: 0010:raw_atomic_dec_return include/linux/atomic/atomic-arch-fallback.h:1238 [inline] RIP: 0010:atomic_dec_return include/linux/atomic/atomic-instrumented.h:611 [inline] RIP: 0010:page_table_check_clear.part.0+0x370/0x540 mm/page_table_check.c:87 Code: 08 e8 74 e0 98 ff 8b 44 24 08 85 c0 0f 85 f6 00 00 00 e8 63 e5 98 ff 48 8d 7b 04 be 04 00 00 00 e8 c5 6b f5 ff b8 ff ff ff ff 0f c1 43 04 8d 58 ff 31 ff 89 de e8 3f e0 98 ff 85 db 0f 89 7d RSP: 0018:ffffc900099e75c8 EFLAGS: 00000246 RAX: 00000000ffffffff RBX: ffff888018572e08 RCX: ffffffff81f6494b RDX: ffffed10030ae5c2 RSI: 0000000000000004 RDI: ffff888018572e0c RBP: ffff888018572dc0 R08: 0000000000000001 R09: ffffed10030ae5c1 R10: ffff888018572e0f R11: 0000000000000003 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 page_table_check_clear mm/page_table_check.c:70 [inline] __page_table_check_pte_clear+0x31c/0x570 mm/page_table_check.c:160 page_table_check_pte_clear include/linux/page_table_check.h:49 [inline] ptep_get_and_clear_full arch/x86/include/asm/pgtable.h:1279 [inline] get_and_clear_full_ptes include/linux/pgtable.h:678 [inline] zap_present_folio_ptes mm/memory.c:1481 [inline] zap_present_ptes mm/memory.c:1570 [inline] zap_pte_range mm/memory.c:1612 [inline] zap_pmd_range mm/memory.c:1730 [inline] zap_pud_range mm/memory.c:1759 [inline] zap_p4d_range mm/memory.c:1780 [inline] unmap_page_range+0x258a/0x41e0 mm/memory.c:1801 unmap_single_vma+0x194/0x2b0 mm/memory.c:1847 unmap_vmas+0x22f/0x490 mm/memory.c:1891 exit_mmap+0x1b8/0xb20 mm/mmap.c:3341 __mmput+0x12a/0x4d0 kernel/fork.c:1346 mmput+0x62/0x70 kernel/fork.c:1368 exit_mm kernel/exit.c:565 [inline] do_exit+0x9b7/0x2ba0 kernel/exit.c:861 do_group_exit+0xd3/0x2a0 kernel/exit.c:1023 get_signal+0x2616/0x2710 kernel/signal.c:2909 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x14a/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe5bbe7cea9 Code: Unable to access opcode bytes at 0x7fe5bbe7ce7f. RSP: 002b:00007fe5bb9ff178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fe5bbfb41f8 RCX: 00007fe5bbe7cea9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5bbfb41f8 RBP: 00007fe5bbfb41f0 R08: 00007fe5bb9ff6c0 R09: 00007fe5bb9ff6c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bbfb41fc R13: 000000000000006e R14: 00007ffd215b7020 R15: 00007ffd215b7108 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] NMI backtrace for cpu 1 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 drivers/acpi/processor_idle.c:112