EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. audit: type=1326 audit(1689441253.414:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4033 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fede31d7b19 code=0x0 watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz-executor.3:4001] Modules linked in: irq event stamp: 2727745 hardirqs last enabled at (2727744): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (2727745): [] sysvec_apic_timer_interrupt+0xf/0x90 softirqs last enabled at (74976): [] irq_exit_rcu+0x93/0xc0 softirqs last disabled at (74979): [] irq_exit_rcu+0x93/0xc0 CPU: 0 PID: 4001 Comm: syz-executor.3 Not tainted 6.5.0-rc1-next-20230714 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50 Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 c6 0e d8 fc 48 89 ef e8 8e 8c d8 fc 80 e7 02 74 06 e8 04 04 fe fc fb 65 ff 0d 94 d6 ad 7b <74> 07 5b 5d e9 03 2a 00 00 0f 1f 44 00 00 5b 5d e9 f7 29 00 00 0f RSP: 0018:ffff88806ce09a68 EFLAGS: 00000202 RAX: 00000000000fb044 RBX: 0000000000000246 RCX: ffffffff812d209f RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8455b46c RBP: ffffffff856d9ac0 R08: 0000000000000001 R09: fffffbfff0efa775 R10: ffffffff877d3baf R11: 0000000000000001 R12: ffff888008fed280 R13: 0000000000082820 R14: 0000000000082820 R15: 0000000000000000 FS: 00007f668590e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2c322000 CR3: 000000000c6fe000 CR4: 0000000000350ef0 Call Trace: kmem_cache_alloc_node+0x23d/0x3b0 kmalloc_reserve+0x169/0x270 __alloc_skb+0x129/0x330 __netdev_alloc_skb+0x72/0x370 __ieee80211_beacon_get+0x3f6/0xfc0 ieee80211_beacon_get_tim+0xa1/0x550 mac80211_hwsim_beacon_tx+0x402/0x730 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x59d/0xb60 hrtimer_run_softirq+0x14c/0x310 __do_softirq+0x1b7/0x7d4 irq_exit_rcu+0x93/0xc0 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:generic_exec_single+0x90/0x540 Code: 76 95 92 04 0f 92 c3 31 ff 89 de e8 1a e2 0a 00 84 db 0f 84 f4 03 00 00 e8 cd e6 0a 00 4c 89 e6 89 ef 45 31 e4 e8 10 fb ff ff bb e6 0a 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e e9 eb 4c 14 03 e8 RSP: 0018:ffff888043c67b10 EFLAGS: 00000206 RAX: 0000000000000287 RBX: 0000000000000200 RCX: ffffffff812d209f RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81419347 RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff0efa775 R10: ffffffff877d3baf R11: 0000000000000001 R12: 0000000000000000 R13: ffff888043c67c38 R14: ffff888043c67b88 R15: ffff88800f500014 smp_call_function_single+0x327/0x410 task_function_call+0xe5/0x180 perf_install_in_context+0x2cb/0x570 __do_sys_perf_event_open+0x18bf/0x2a60 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 RIP: 0033:0x7f6688398b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f668590e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 00007f66884abf60 RCX: 00007f6688398b19 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000580 RBP: 00007f66883f2f6d R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff26dc407f R14: 00007f668590e300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 18 53 48 sbb %dl,0x48(%rbx) 3: 89 f3 mov %esi,%ebx 5: 48 8b 74 24 10 mov 0x10(%rsp),%rsi a: e8 c6 0e d8 fc callq 0xfcd80ed5 f: 48 89 ef mov %rbp,%rdi 12: e8 8e 8c d8 fc callq 0xfcd88ca5 17: 80 e7 02 and $0x2,%bh 1a: 74 06 je 0x22 1c: e8 04 04 fe fc callq 0xfcfe0425 21: fb sti 22: 65 ff 0d 94 d6 ad 7b decl %gs:0x7badd694(%rip) # 0x7badd6bd * 29: 74 07 je 0x32 <-- trapping instruction 2b: 5b pop %rbx 2c: 5d pop %rbp 2d: e9 03 2a 00 00 jmpq 0x2a35 32: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 37: 5b pop %rbx 38: 5d pop %rbp 39: e9 f7 29 00 00 jmpq 0x2a35 3e: 0f .byte 0xf