watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.0:12534]
Modules linked in:
irq event stamp: 5093385
hardirqs last  enabled at (5093384): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
hardirqs last disabled at (5093385): [<ffffffff8442b35f>] sysvec_apic_timer_interrupt+0xf/0xc0
softirqs last  enabled at (5051810): [<ffffffff8118303f>] irq_exit_rcu+0x11f/0x190
softirqs last disabled at (5051813): [<ffffffff8118303f>] irq_exit_rcu+0x11f/0x190
CPU: 1 PID: 12534 Comm: syz-executor.0 Not tainted 6.2.0-rc5-next-20230123 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:lock_is_held_type+0xfc/0x130
Code: 00 0b 87 84 e8 f5 0e 00 00 b8 ff ff ff ff 65 0f c1 05 e8 c6 bf 7b 83 f8 01 75 26 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e6 3e 02 00 45 31 ed eb
RSP: 0018:ffff88806cf09a98 EFLAGS: 00000282
RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000
RBP: ffffffff8560afa0 R08: 0000000000000000 R09: ffffffff85d113d7
R10: fffffbfff0ba227a R11: 0000000000000001 R12: ffff888043acd040
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888043acda18
FS:  00007f154b6df700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbb8879dff8 CR3: 00000000367ec000 CR4: 0000000000350ee0
Call Trace:
 <IRQ>
 rcu_read_lock_sched_held+0x42/0x80
 lock_release+0x56b/0x760
 ieee80211_get_buffered_bc+0x566/0x8a0
 mac80211_hwsim_beacon_tx+0x5c2/0xb10
 __iterate_interfaces+0x2d3/0x580
 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0
 mac80211_hwsim_beacon+0x105/0x200
 __hrtimer_run_queues+0x54b/0xcb0
 hrtimer_run_softirq+0x176/0x350
 __do_softirq+0x274/0x8ff
 irq_exit_rcu+0x11f/0x190
 sysvec_apic_timer_interrupt+0x92/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
Code: be a8 01 00 00 e8 a0 ff ff ff 31 c0 e9 cd 86 fb 02 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 65 8b 05 6d 10 ba 7e 89 c1 48 8b 34 24 81 e1 00 01 00
RSP: 0018:ffff888044bff420 EFLAGS: 00000293
RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff83ab5617
RDX: ffff888043acd040 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000024 R08: 0000000000000005 R09: 0000000000000005
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000051
R13: ffff8880181cc200 R14: 0000000000000001 R15: 0000000000000000
 inet6_netconf_notify_devconf+0x179/0x1b0
 addrconf_sysctl_unregister+0x131/0x1c0
 addrconf_ifdown.isra.0+0x137a/0x1780
 addrconf_notify+0x15d/0x2530
 raw_notifier_call_chain+0xb7/0x110
 call_netdevice_notifiers_info+0xb5/0x130
 unregister_netdevice_many_notify+0x8f4/0x15e0
 default_device_exit_batch+0x453/0x5a0
 ops_exit_list+0x12b/0x180
 setup_net+0x61d/0x9d0
 copy_net_ns+0x321/0x770
 create_new_namespaces+0x3f6/0xb30
 copy_namespaces+0x414/0x500
 copy_process+0x2a5e/0x7390
 kernel_clone+0xeb/0x8c0
 __do_sys_clone3+0x1d5/0x2e0
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f154e169b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f154b6df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 00007f154e27cf60 RCX: 00007f154e169b19
RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00
RBP: 00007f154e1c3f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffebfd5bf9f R14: 00007f154b6df300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20
----------------
Code disassembly (best guess):
   0:	00 0b                	add    %cl,(%rbx)
   2:	87 84 e8 f5 0e 00 00 	xchg   %eax,0xef5(%rax,%rbp,8)
   9:	b8 ff ff ff ff       	mov    $0xffffffff,%eax
   e:	65 0f c1 05 e8 c6 bf 	xadd   %eax,%gs:0x7bbfc6e8(%rip)        # 0x7bbfc6fe
  15:	7b
  16:	83 f8 01             	cmp    $0x1,%eax
  19:	75 26                	jne    0x41
  1b:	48 f7 04 24 00 02 00 	testq  $0x200,(%rsp)
  22:	00
  23:	74 01                	je     0x26
  25:	fb                   	sti
  26:	48 83 c4 08          	add    $0x8,%rsp
* 2a:	44 89 e8             	mov    %r13d,%eax <-- trapping instruction
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	41 5d                	pop    %r13
  33:	41 5e                	pop    %r14
  35:	41 5f                	pop    %r15
  37:	e9 e6 3e 02 00       	jmpq   0x23f22
  3c:	45 31 ed             	xor    %r13d,%r13d
  3f:	eb                   	.byte 0xeb