watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.2:7000]
Modules linked in:
irq event stamp: 5462201
hardirqs last  enabled at (5462200): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
hardirqs last disabled at (5462201): [<ffffffff844249df>] sysvec_apic_timer_interrupt+0xf/0xc0
softirqs last  enabled at (5450046): [<ffffffff81181deb>] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (5450049): [<ffffffff81181deb>] __irq_exit_rcu+0x11b/0x180
CPU: 1 PID: 7000 Comm: syz-executor.2 Not tainted 6.2.0-rc3-next-20230112 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:__stack_depot_save+0x4/0x4e0
Code: 02 45 31 c0 44 89 c0 e9 de 94 21 02 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 49 89 ff 41 56 41 89 ce 41 55 45 89 c5 41 54 41 89 d4 55 31
RSP: 0018:ffff88806cf099b8 EFLAGS: 00000246
RAX: 0000000000000021 RBX: 0000000000000001 RCX: 0000000000000800
RDX: 0000000000000000 RSI: 0000000000000021 RDI: ffff88806cf099c0
RBP: ffffffff834df658 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000800
R13: ffff888008441c80 R14: 0000000000000002 R15: ffff888037670e30
FS:  0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc379a10998 CR3: 00000000168e6000 CR4: 0000000000350ee0
Call Trace:
 <IRQ>
 kasan_save_stack+0x35/0x50
 kasan_set_track+0x25/0x30
 kasan_save_free_info+0x2e/0x50
 __kasan_slab_free+0x10a/0x190
 __kmem_cache_free+0xd1/0x2f0
 skb_release_data+0x6d8/0x810
 consume_skb+0xcb/0x170
 mac80211_hwsim_tx_frame+0x1f6/0x2a0
 mac80211_hwsim_beacon_tx+0x566/0xb10
 __iterate_interfaces+0x2d3/0x580
 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0
 mac80211_hwsim_beacon+0x105/0x200
 __hrtimer_run_queues+0x54b/0xcb0
 hrtimer_run_softirq+0x176/0x350
 __do_softirq+0x1c7/0x913
 __irq_exit_rcu+0x11b/0x180
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0x92/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70
Code: c0 e9 1d 23 fb 02 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 3d 16 ba 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 80 89 03 00 a9
RSP: 0018:ffff88801b7bf6e0 EFLAGS: 00000293
RAX: 0000000080000001 RBX: ffffea0001067700 RCX: 0000000000000000
RDX: ffff888046e11ac0 RSI: ffffffff816d7fe6 RDI: 0000000000000007
RBP: ffffea0001067700 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffffea0001067700
R13: 00007f86c2460000 R14: ffff88800e3372f8 R15: dffffc0000000000
 unmap_page_range+0xfb1/0x2ef0
 unmap_single_vma+0x190/0x2a0
 unmap_vmas+0x225/0x370
 exit_mmap+0x158/0x6a0
 mmput+0xd5/0x390
 do_exit+0x99b/0x2780
 do_group_exit+0xd4/0x2a0
 get_signal+0x2255/0x2390
 arch_do_signal_or_restart+0x79/0x5a0
 exit_to_user_mode_prepare+0xf5/0x190
 irqentry_exit_to_user_mode+0x9/0x30
 exc_page_fault+0xc8/0x1a0
 asm_exc_page_fault+0x26/0x30
RIP: 0033:0x7f86c46b17b6
Code: Unable to access opcode bytes at 0x7f86c46b178c.
RSP: 002b:00007f86c1c15fa8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000
RBP: 00007f86c1c16040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000020000100 R14: 00007f86c1c16000 R15: 0000000000000000
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	45 31 c0             	xor    %r8d,%r8d
   3:	44 89 c0             	mov    %r8d,%eax
   6:	e9 de 94 21 02       	jmpq   0x22194e9
   b:	66 2e 0f 1f 84 00 00 	nopw   %cs:0x0(%rax,%rax,1)
  12:	00 00 00
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	90                   	nop
  21:	90                   	nop
  22:	90                   	nop
  23:	90                   	nop
  24:	90                   	nop
  25:	f3 0f 1e fa          	endbr64
* 29:	41 57                	push   %r15 <-- trapping instruction
  2b:	49 89 ff             	mov    %rdi,%r15
  2e:	41 56                	push   %r14
  30:	41 89 ce             	mov    %ecx,%r14d
  33:	41 55                	push   %r13
  35:	45 89 c5             	mov    %r8d,%r13d
  38:	41 54                	push   %r12
  3a:	41 89 d4             	mov    %edx,%r12d
  3d:	55                   	push   %rbp
  3e:	31                   	.byte 0x31