loop2: detected capacity change from 0 to 512
EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
watchdog: BUG: soft lockup - CPU#0 stuck for 25s! [syz-executor.6:8918]
Modules linked in:
irq event stamp: 2549727
hardirqs last  enabled at (2549726): [<ffffffff84a514db>] irqentry_exit+0x3b/0x90
hardirqs last disabled at (2549727): [<ffffffff84a4fe9f>] sysvec_apic_timer_interrupt+0xf/0x80
softirqs last  enabled at (2533316): [<ffffffff813a960c>] handle_softirqs+0x50c/0x770
softirqs last disabled at (2533333): [<ffffffff813a99a4>] __irq_exit_rcu+0xc4/0x100
CPU: 0 UID: 0 PID: 8918 Comm: syz-executor.6 Not tainted 6.13.0-rc1-next-20241206 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:kcov_remote_stop+0x263/0x490
Code: e4 75 1d 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c1 68 35 03 e8 7c fb 07 00 e9 ff fd ff ff e8 22 fd 07 00 fb 48 83 c4 18 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 9e 68 35 03 41 80 7d 60 00 0f 84
RSP: 0018:ffff88806ce09c78 EFLAGS: 00000286
RAX: 000000000026e77e RBX: ffff88803c839bc0 RCX: 1ffffffff0fdfcae
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8171ee2e
RBP: ffff88806ce2da88 R08: 0000000000000001 R09: fffffbfff0fddbe9
R10: ffffffff87eedf4f R11: ffffffff8171ec37 R12: 0000000000000200
R13: 0000000000000000 R14: ffff8880326f28a8 R15: ffff8880142f8c40
FS:  00007f581e552700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055617ff6c300 CR3: 000000000c186000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 ieee80211_rx_list+0x63d/0x2840
 ieee80211_rx_napi+0xdc/0x3b0
 ieee80211_handle_queued_frames+0xd9/0x130
 tasklet_action_common+0x235/0x3b0
 handle_softirqs+0x1b1/0x770
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:put_cpu_partial+0x10a/0x1b0
Code: 24 28 75 5b 49 c7 44 24 28 00 00 00 00 4c 89 e7 48 8d 35 00 00 00 00 e8 f4 a9 ab ff 4d 85 ed 74 06 e8 da 71 d5 ff fb 4d 85 f6 <74> 1c 5b 4c 89 f6 48 89 ef 5d 41 5c 41 5d 41 5e e9 c1 fa ff ff 44
RSP: 0018:ffff88803ee47810 EFLAGS: 00000286
RAX: 000000000026a7d3 RBX: ffffea0000b6a300 RCX: 1ffffffff0fdfcae
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81a47976
RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fddbe9
R10: ffffffff87eedf4f R11: 0000000000000000 R12: ffff88806ce40390
R13: 0000000000000200 R14: ffffea000066bd00 R15: ffff88802da8cb90
 qlist_free_all+0x50/0x160
 kasan_quarantine_reduce+0x19f/0x240
 __kasan_slab_alloc+0x49/0x70
 kmem_cache_alloc_noprof+0x13d/0x3d0
 anon_vma_fork+0xe6/0x630
 dup_mm+0x13a9/0x1ed0
 copy_process+0x704c/0x70e0
 kernel_clone+0xeb/0x850
 __do_sys_clone3+0x1d9/0x260
 do_syscall_64+0xbf/0x1d0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5820ffdb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f581e552188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 00007f5821111020 RCX: 00007f5820ffdb19
RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000640
RBP: 00007f5821057f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe7168f9ef R14: 00007f581e552300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30
Bluetooth: hci0: command 0x0406 tx timeout
Bluetooth: hci4: command 0x0406 tx timeout
Bluetooth: hci6: command 0x0406 tx timeout
Bluetooth: hci3: command 0x0406 tx timeout
Bluetooth: hci5: command 0x0406 tx timeout
----------------
Code disassembly (best guess):
   0:	e4 75                	in     $0x75,%al
   2:	1d 48 83 c4 18       	sbb    $0x18c48348,%eax
   7:	5b                   	pop    %rbx
   8:	5d                   	pop    %rbp
   9:	41 5c                	pop    %r12
   b:	41 5d                	pop    %r13
   d:	41 5e                	pop    %r14
   f:	41 5f                	pop    %r15
  11:	e9 c1 68 35 03       	jmpq   0x33568d7
  16:	e8 7c fb 07 00       	callq  0x7fb97
  1b:	e9 ff fd ff ff       	jmpq   0xfffffe1f
  20:	e8 22 fd 07 00       	callq  0x7fd47
  25:	fb                   	sti
  26:	48 83 c4 18          	add    $0x18,%rsp
* 2a:	5b                   	pop    %rbx <-- trapping instruction
  2b:	5d                   	pop    %rbp
  2c:	41 5c                	pop    %r12
  2e:	41 5d                	pop    %r13
  30:	41 5e                	pop    %r14
  32:	41 5f                	pop    %r15
  34:	e9 9e 68 35 03       	jmpq   0x33568d7
  39:	41 80 7d 60 00       	cmpb   $0x0,0x60(%r13)
  3e:	0f                   	.byte 0xf
  3f:	84                   	.byte 0x84