watchdog: BUG: soft lockup - CPU#0 stuck for 21s! [syz-executor.5:11297] Modules linked in: irq event stamp: 4978973 hardirqs last enabled at (4978972): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (4978973): [] sysvec_apic_timer_interrupt+0xf/0x90 softirqs last enabled at (4975472): [] irq_exit_rcu+0x93/0xc0 softirqs last disabled at (4975475): [] irq_exit_rcu+0x93/0xc0 CPU: 0 PID: 11297 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230720 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 Code: c0 e9 49 97 09 03 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 ad eb b6 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 00 8b 03 00 a9 RSP: 0018:ffff88806ce09ca8 EFLAGS: 00000282 RAX: 0000000000000100 RBX: ffff88803cba0e20 RCX: 0000000000000100 RDX: ffff88803cba36b8 RSI: ffff8880315f4500 RDI: ffff88803cba0e20 RBP: ffff8880315f4500 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880315f4500 R13: ffff88803cba36b8 R14: 0000000000000000 R15: ffff88803cba0e70 FS: 00007fefd6f94700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fefd9a6cb98 CR3: 0000000042f98000 CR4: 0000000000350ef0 Call Trace: mac80211_hwsim_monitor_rx+0x1d/0x810 mac80211_hwsim_tx_frame+0xde/0x2a0 mac80211_hwsim_beacon_tx+0x427/0x730 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x59d/0xb60 hrtimer_run_softirq+0x14c/0x310 __do_softirq+0x1b7/0x7d4 irq_exit_rcu+0x93/0xc0 sysvec_apic_timer_interrupt+0x6e/0x90 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:put_cpu_partial+0x107/0x1b0 Code: 39 45 28 75 5e 48 c7 45 28 00 00 00 00 48 c7 c6 e2 1c 81 81 48 89 ef e8 27 bf ac ff 48 85 db 74 06 e8 4d c3 d2 ff fb 4d 85 f6 <74> 1e 5b 4c 89 f6 5d 4c 89 e7 41 5c 41 5d 41 5e 41 5f e9 12 fa ff RSP: 0018:ffff888044b47a40 EFLAGS: 00000286 RAX: 000000000048a201 RBX: 0000000000000200 RCX: ffffffff812d399f RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81811d03 RBP: ffff88806ce40d60 R08: 0000000000000001 R09: fffffbfff0efaf65 R10: ffffffff877d7b2f R11: 0000000000000001 R12: ffff8880087ba3c0 R13: ffffea0001093a00 R14: ffffea0001106c00 R15: 0000000000000001 qlist_free_all+0x6d/0x1a0 kasan_quarantine_reduce+0x199/0x230 __kasan_slab_alloc+0x49/0x70 kmem_cache_alloc+0x17b/0x390 __create_object+0x3c/0xc90 kmem_cache_alloc+0x21f/0x390 alloc_empty_file+0x76/0x1e0 alloc_file+0x5e/0x800 alloc_file_pseudo+0x16e/0x260 anon_inode_getfile+0xb4/0x1e0 __do_sys_perf_event_open+0x17c2/0x2ae0 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 RIP: 0033:0x7fefd9a1eb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fefd6f94188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a RAX: ffffffffffffffda RBX: 00007fefd9b31f60 RCX: 00007fefd9a1eb19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001840 RBP: 00007fefd9a78f6d R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffef278321f R14: 00007fefd6f94300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 Bluetooth: hci1: command 0x0406 tx timeout ---------------- Code disassembly (best guess): 0: c0 e9 49 shr $0x49,%cl 3: 97 xchg %eax,%edi 4: 09 03 or %eax,(%rbx) 6: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1) d: 00 00 f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: 90 nop 1c: 90 nop 1d: 90 nop 1e: 90 nop 1f: f3 0f 1e fa endbr64 23: 65 8b 05 ad eb b6 7e mov %gs:0x7eb6ebad(%rip),%eax # 0x7eb6ebd7 * 2a: 89 c1 mov %eax,%ecx <-- trapping instruction 2c: 48 8b 34 24 mov (%rsp),%rsi 30: 81 e1 00 01 00 00 and $0x100,%ecx 36: 65 48 8b 14 25 00 8b mov %gs:0x38b00,%rdx 3d: 03 00 3f: a9 .byte 0xa9