watchdog: BUG: soft lockup - CPU#1 stuck for 23s! [syz-executor.6:5729]
Modules linked in:
irq event stamp: 3378235
hardirqs last  enabled at (3378234): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
hardirqs last disabled at (3378235): [<ffffffff8453631f>] sysvec_apic_timer_interrupt+0xf/0x90
softirqs last  enabled at (3370268): [<ffffffff8118ff53>] irq_exit_rcu+0x93/0xc0
softirqs last disabled at (3370271): [<ffffffff8118ff53>] irq_exit_rcu+0x93/0xc0
CPU: 1 PID: 5729 Comm: syz-executor.6 Not tainted 6.5.0-rc1-next-20230714 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:kcov_remote_stop+0x2c3/0x560
Code: 02 00 00 49 c7 44 24 28 00 00 00 00 48 c7 c6 2c 7c 4c 81 4c 89 e7 e8 dc 46 e1 ff 4d 85 ed 74 a9 e8 22 3c 07 00 fb 48 83 c4 20 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 1e 62 09 03 41 80 7e 60 00 0f 84
RSP: 0018:ffff88806cf09c60 EFLAGS: 00000286
RAX: 0000000000338c1a RBX: ffff888043bb1b40 RCX: ffffffff812d209f
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff814c7c4e
RBP: ffff88806cf2c4a8 R08: 0000000000000001 R09: fffffbfff0efa775
R10: ffffffff877d3baf R11: 0000000000000001 R12: ffff88806cf2c4a8
R13: 0000000000000200 R14: ffff88800e1e2968 R15: ffffffff814c79da
FS:  00007fb65cce8700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7d39461718 CR3: 0000000041284000 CR4: 0000000000350ee0
Call Trace:
 <IRQ>
 ieee80211_rx_list+0x644/0x2d10
 ieee80211_rx_napi+0xde/0x3c0
 ieee80211_tasklet_handler+0xd6/0x130
 tasklet_action_common.constprop.0+0x267/0x700
 __do_softirq+0x1b7/0x7d4
 irq_exit_rcu+0x93/0xc0
 sysvec_apic_timer_interrupt+0x6e/0x90
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:_raw_spin_unlock_irqrestore+0x34/0x50
Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 c6 0e d8 fc 48 89 ef e8 8e 8c d8 fc 80 e7 02 74 06 e8 04 04 fe fc fb 65 ff 0d 94 d6 ad 7b <74> 07 5b 5d e9 03 2a 00 00 0f 1f 44 00 00 5b 5d e9 f7 29 00 00 0f
RSP: 0018:ffff88804478fd78 EFLAGS: 00000246
RAX: 0000000000116e1b RBX: 0000000000000282 RCX: ffffffff812d209f
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8455b46c
RBP: ffff8880422f5400 R08: 0000000000000001 R09: fffffbfff0efa775
R10: ffffffff877d3baf R11: 0000000000000001 R12: 0000000000000282
R13: ffff888043bb1b40 R14: 0000000000000000 R15: ffff88801a3470d0
 __do_sys_perf_event_open+0x1904/0x2a60
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x6e/0xd8
RIP: 0033:0x7fb65f772b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb65cce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 00007fb65f885f60 RCX: 00007fb65f772b19
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280
RBP: 00007fb65f7ccf6d R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc9f419f4f R14: 00007fb65cce8300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20
----------------
Code disassembly (best guess):
   0:	02 00                	add    (%rax),%al
   2:	00 49 c7             	add    %cl,-0x39(%rcx)
   5:	44 24 28             	rex.R and $0x28,%al
   8:	00 00                	add    %al,(%rax)
   a:	00 00                	add    %al,(%rax)
   c:	48 c7 c6 2c 7c 4c 81 	mov    $0xffffffff814c7c2c,%rsi
  13:	4c 89 e7             	mov    %r12,%rdi
  16:	e8 dc 46 e1 ff       	callq  0xffe146f7
  1b:	4d 85 ed             	test   %r13,%r13
  1e:	74 a9                	je     0xffffffc9
  20:	e8 22 3c 07 00       	callq  0x73c47
  25:	fb                   	sti
  26:	48 83 c4 20          	add    $0x20,%rsp
* 2a:	5b                   	pop    %rbx <-- trapping instruction
  2b:	5d                   	pop    %rbp
  2c:	41 5c                	pop    %r12
  2e:	41 5d                	pop    %r13
  30:	41 5e                	pop    %r14
  32:	41 5f                	pop    %r15
  34:	e9 1e 62 09 03       	jmpq   0x3096257
  39:	41 80 7e 60 00       	cmpb   $0x0,0x60(%r14)
  3e:	0f                   	.byte 0xf
  3f:	84                   	.byte 0x84