watchdog: BUG: soft lockup - CPU#0 stuck for 21s! [syz-executor.6:66801]
Modules linked in:
irq event stamp: 8791961
hardirqs last  enabled at (8791960): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
hardirqs last disabled at (8791961): [<ffffffff844756df>] sysvec_apic_timer_interrupt+0xf/0x90
softirqs last  enabled at (8677198): [<ffffffff8118dd1c>] __irq_exit_rcu+0xcc/0x110
softirqs last disabled at (8677201): [<ffffffff8118dd1c>] __irq_exit_rcu+0xcc/0x110
CPU: 0 PID: 66801 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230220 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:hrtimer_forward+0x4/0x270
Code: e8 a1 22 10 00 4c 89 e0 5b 5d 41 5c e9 89 3e 0e 03 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 41 56 41 55 41 54 55 48 89 d5 53 48 89 fb 48 83 ec 18 48 89
RSP: 0018:ffff88806ce09e00 EFLAGS: 00000216
RAX: 000002759f267509 RBX: ffff88806ce2bb40 RCX: 0000000000000018
RDX: 00000000061a8000 RSI: 000002759f267509 RDI: ffff8880444f7220
RBP: ffff8880444f7220 R08: 0000000000000004 R09: 00000000004d0f70
R10: 00000000004d0f70 R11: 0000000000000001 R12: 0000000000000000
R13: 00000000061a8000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffea851ac18 CR3: 0000000015afa000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 mac80211_hwsim_beacon+0x1b3/0x200
 __hrtimer_run_queues+0x54b/0xcb0
 hrtimer_run_softirq+0x14c/0x310
 __do_softirq+0x258/0x8a2
 __irq_exit_rcu+0xcc/0x110
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x6e/0x90
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:__schedule+0x144b/0x2a90
Code: 00 bf 03 00 00 00 48 c7 82 90 00 00 00 00 00 00 00 e8 f9 d2 16 fd e9 21 f2 ff ff e8 0f 7a 0a fd e9 69 ed ff ff be ff ff ff ff <48> c7 c7 c0 a7 60 85 e8 79 45 ff ff 85 c0 0f 84 00 ed ff ff e8 9c
RSP: 0018:ffff88804d4df5b8 EFLAGS: 00000202
RAX: 0000000000000001 RBX: 0000000000039380 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88804c682420
RBP: ffff88804d4df6c8 R08: 0000000000000000 R09: 00007fc64fa73000
R10: 00007fc64fbca000 R11: 0000000000000001 R12: ffff88806ce39380
R13: ffff88804c681ac0 R14: 0000000000000001 R15: 00007fc64fbca000
 __cond_resched+0x46/0x70
 unmap_page_range+0x1246/0x2da0
 unmap_single_vma+0x194/0x2a0
 unmap_vmas+0x233/0x390
 exit_mmap+0x15b/0x6a0
 mmput+0xd5/0x390
 do_exit+0x9c6/0x2800
 do_group_exit+0xd4/0x2a0
 get_signal+0x23c8/0x2450
 arch_do_signal_or_restart+0x79/0x590
 exit_to_user_mode_prepare+0x122/0x190
 syscall_exit_to_user_mode+0x1d/0x50
 do_syscall_64+0x4c/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fc64fe52b19
Code: Unable to access opcode bytes at 0x7fc64fe52aef.
RSP: 002b:00007fc64d3c8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fc64ff65f68 RCX: 00007fc64fe52b19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc64ff65f68
RBP: 00007fc64ff65f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64ff65f6c
R13: 00007fff48510adf R14: 00007fc64d3c8300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20
----------------
Code disassembly (best guess):
   0:	e8 a1 22 10 00       	callq  0x1022a6
   5:	4c 89 e0             	mov    %r12,%rax
   8:	5b                   	pop    %rbx
   9:	5d                   	pop    %rbp
   a:	41 5c                	pop    %r12
   c:	e9 89 3e 0e 03       	jmpq   0x30e3e9a
  11:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	90                   	nop
  21:	90                   	nop
  22:	90                   	nop
  23:	90                   	nop
  24:	90                   	nop
  25:	90                   	nop
  26:	f3 0f 1e fa          	endbr64
* 2a:	41 57                	push   %r15 <-- trapping instruction
  2c:	41 56                	push   %r14
  2e:	41 55                	push   %r13
  30:	41 54                	push   %r12
  32:	55                   	push   %rbp
  33:	48 89 d5             	mov    %rdx,%rbp
  36:	53                   	push   %rbx
  37:	48 89 fb             	mov    %rdi,%rbx
  3a:	48 83 ec 18          	sub    $0x18,%rsp
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89