watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.3:10913]
Modules linked in:
irq event stamp: 2820419
hardirqs last  enabled at (2820418): [<ffffffff8485078b>] irqentry_exit+0x3b/0x90
hardirqs last disabled at (2820419): [<ffffffff8484f14f>] sysvec_apic_timer_interrupt+0xf/0x80
softirqs last  enabled at (2692506): [<ffffffff811a97cc>] handle_softirqs+0x50c/0x770
softirqs last disabled at (2692509): [<ffffffff811a9b64>] __irq_exit_rcu+0xc4/0x100
CPU: 0 UID: 0 PID: 10913 Comm: syz-executor.3 Not tainted 6.12.0-next-20241126 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80
Code: 7e 60 e8 a3 ff ff ff 31 c0 e9 1c 47 35 03 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 34 24 65 48 8b 15 90 a4 b1 7e 65 8b 05 91 a4 b1
RSP: 0018:ffff88806ce09410 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff8880167a1e1d RCX: ffffffff8435a6b4
RDX: ffff88800f135280 RSI: 0000000000000006 RDI: 0000000000000000
RBP: ffff88800e45da1d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000006 R11: dd6c604830043200 R12: 0000000000000000
R13: 0000000000000006 R14: 0000000000000006 R15: 0000000000000000
FS:  00007fa2a8f1d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001840 CR3: 0000000035df4000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 cmp_bss.part.0+0x750/0x850
 rb_find_bss+0x1d2/0x290
 __cfg80211_bss_update+0xb7/0x1fe0
 cfg80211_inform_single_bss_data+0x6e2/0x1c50
 cfg80211_inform_bss_data+0x20f/0x3510
 cfg80211_inform_bss_frame_data+0x250/0x690
 ieee80211_bss_info_update+0x2f6/0xa90
 ieee80211_scan_rx+0x474/0xac0
 ieee80211_rx_list+0x1e38/0x2840
 ieee80211_rx_napi+0xdc/0x3b0
 ieee80211_handle_queued_frames+0xd9/0x130
 tasklet_action_common+0x235/0x3b0
 handle_softirqs+0x1b1/0x770
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50
Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 66 0e a9 fc 48 89 ef e8 6e 81 a9 fc 80 e7 02 74 06 e8 e4 da d2 fc fb 65 ff 0d 54 7c 7c 7b <74> 07 5b 5d e9 a3 1e 00 00 0f 1f 44 00 00 5b 5d e9 97 1e 00 00 0f
RSP: 0018:ffff8880165d7b58 EFLAGS: 00000202
RAX: 00000000002658eb RBX: 0000000000000206 RCX: 1ffffffff0fe310d
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84872a6c
RBP: ffff88802d80dbe0 R08: 0000000000000001 R09: fffffbfff0fddff8
R10: ffffffff87eeffc7 R11: 0000000000000001 R12: ffff88802d80dbe0
R13: ffff88802d80d294 R14: ffff88802d80d280 R15: 0000000000000000
 try_to_wake_up+0x813/0x1880
 wake_up_q+0x91/0x140
 __mutex_unlock_slowpath+0x217/0x630
 __do_sys_perf_event_open+0x188a/0x2b00
 do_syscall_64+0xbf/0x1d0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa2ab9a7b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa2a8f1d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007fa2ababaf60 RCX: 00007fa2ab9a7b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001600
RBP: 00007fa2aba01f6d R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc6383ff7f R14: 00007fa2a8f1d300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30
----------------
Code disassembly (best guess):
   0:	7e 60                	jle    0x62
   2:	e8 a3 ff ff ff       	callq  0xffffffaa
   7:	31 c0                	xor    %eax,%eax
   9:	e9 1c 47 35 03       	jmpq   0x335472a
   e:	66 66 2e 0f 1f 84 00 	data16 nopw %cs:0x0(%rax,%rax,1)
  15:	00 00 00 00
  19:	90                   	nop
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	90                   	nop
  21:	90                   	nop
  22:	90                   	nop
  23:	90                   	nop
  24:	90                   	nop
  25:	90                   	nop
  26:	90                   	nop
  27:	90                   	nop
  28:	90                   	nop
  29:	90                   	nop
* 2a:	f3 0f 1e fa          	endbr64 <-- trapping instruction
  2e:	48 8b 34 24          	mov    (%rsp),%rsi
  32:	65 48 8b 15 90 a4 b1 	mov    %gs:0x7eb1a490(%rip),%rdx        # 0x7eb1a4ca
  39:	7e
  3a:	65                   	gs
  3b:	8b                   	.byte 0x8b
  3c:	05                   	.byte 0x5
  3d:	91                   	xchg   %eax,%ecx
  3e:	a4                   	movsb  %ds:(%rsi),%es:(%rdi)
  3f:	b1                   	.byte 0xb1