hpet: Lost 1 RTC interrupts
hpet: Lost 2 RTC interrupts
watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz-executor.6:13906]
Modules linked in:
irq event stamp: 6017611
hardirqs last  enabled at (6017610): [<ffffffff84a7c70b>] irqentry_exit+0x3b/0x90
hardirqs last disabled at (6017611): [<ffffffff84a7b0cf>] sysvec_apic_timer_interrupt+0xf/0x80
softirqs last  enabled at (5974574): [<ffffffff813a9aec>] handle_softirqs+0x50c/0x770
softirqs last disabled at (5974597): [<ffffffff813a9e84>] __irq_exit_rcu+0xc4/0x100
CPU: 0 UID: 0 PID: 13906 Comm: syz-executor.6 Not tainted 6.13.0-rc3-next-20241218 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:kmem_cache_alloc_noprof+0xe0/0x3d0
Code: 00 84 c9 0f 85 3d 01 00 00 41 83 fb ff 0f 85 23 01 00 00 41 bb ff ff ff ff 41 8b 44 24 28 49 8b 34 24 48 8d 4a 40 49 8b 1c 00 <4c> 89 c0 65 48 0f c7 0e 75 a2 41 8b 44 24 28 0f 0d 0c 03 4c 89 44
RSP: 0018:ffff88806ce09930 EFLAGS: 00000246
RAX: 0000000000000070 RBX: ffff888038c02a68 RCX: 0000000011f17dc0
RDX: 0000000011f17d80 RSI: 0000000000040370 RDI: ffff88801db5b780
RBP: ffff88806ce09990 R08: ffff888038c025c8 R09: 0000000000000000
R10: 0000000000000000 R11: 00000000ffffffff R12: ffff888008c4f780
R13: 0000000000092820 R14: 00000000000000e8 R15: ffffffff81aeddef
FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe370215760 CR3: 000000000f2be000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 __alloc_object+0x2f/0x270
 __create_object+0x1d/0x80
 kmem_cache_alloc_node_noprof+0x311/0x3e0
 kmalloc_reserve+0x189/0x2b0
 __alloc_skb+0x162/0x370
 __netdev_alloc_skb+0x7a/0x7c0
 __ieee80211_beacon_get+0x3f4/0xfc0
 ieee80211_beacon_get_tim+0xa6/0x280
 mac80211_hwsim_beacon_tx+0x49b/0x950
 __iterate_interfaces+0x2e0/0x650
 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
 mac80211_hwsim_beacon+0x105/0x200
 __hrtimer_run_queues+0x1ab/0xa80
 hrtimer_run_softirq+0x14c/0x310
 handle_softirqs+0x1b1/0x770
 __irq_exit_rcu+0xc4/0x100
 irq_exit_rcu+0x9/0x20
 sysvec_apic_timer_interrupt+0x70/0x80
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:qlist_free_all+0x28/0x160
Code: 90 90 48 8b 07 48 85 c0 0f 84 41 01 00 00 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 55 53 eb 3e 48 63 95 c0 00 00 00 48 8b 18 <48> 89 ef 48 29 d0 48 89 c6 49 89 c6 e8 77 f0 ff ff 49 89 c7 66 90
RSP: 0018:ffff888015aff4b0 EFLAGS: 00000246
RAX: ffff888018f5e4a0 RBX: ffff888036777128 RCX: ffffea000063d780
RDX: 0000000000000000 RSI: ffff888008c4f780 RDI: 0000000000080000
RBP: ffff888008c4f780 R08: ffff88803a8ce000 R09: 0000000000120010
R10: ffffea0000ea3300 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888015aff4e8 R14: ffff88803a8ce000 R15: ffff88803a8ce178
 kasan_quarantine_reduce+0x19f/0x240
 __kasan_slab_alloc+0x49/0x70
 kmem_cache_alloc_node_noprof+0x14c/0x3e0
 __alloc_skb+0x2ad/0x370
 inet_netconf_notify_devconf+0xe1/0x260
 inetdev_event+0xf92/0x1860
 raw_notifier_call_chain+0xd6/0x140
 call_netdevice_notifiers_info+0xbe/0x140
 unregister_netdevice_many_notify+0x6eb/0x1890
 unregister_netdevice_queue+0x224/0x2e0
 __tun_detach+0xfa4/0x1290
 tun_chr_close+0xc2/0x230
 __fput+0x401/0xb50
 task_work_run+0x173/0x280
 do_exit+0xaba/0x2a40
 do_group_exit+0xd3/0x2a0
 get_signal+0x2240/0x2320
 arch_do_signal_or_restart+0x81/0x780
 syscall_exit_to_user_mode+0x123/0x1e0
 do_syscall_64+0xcc/0x1d0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe4e1e69b19
Code: Unable to access opcode bytes at 0x7fe4e1e69aef.
RSP: 002b:00007fe4df3df188 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: fffffffffffffff7 RBX: 00007fe4e1f7cf60 RCX: 00007fe4e1e69b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
RBP: 00007fe4e1ec3f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd860547ef R14: 00007fe4df3df300 R15: 0000000000022000
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at default_idle+0x1e/0x30
hpet: Lost 4 RTC interrupts
----------------
Code disassembly (best guess):
   0:	00 84 c9 0f 85 3d 01 	add    %al,0x13d850f(%rcx,%rcx,8)
   7:	00 00                	add    %al,(%rax)
   9:	41 83 fb ff          	cmp    $0xffffffff,%r11d
   d:	0f 85 23 01 00 00    	jne    0x136
  13:	41 bb ff ff ff ff    	mov    $0xffffffff,%r11d
  19:	41 8b 44 24 28       	mov    0x28(%r12),%eax
  1e:	49 8b 34 24          	mov    (%r12),%rsi
  22:	48 8d 4a 40          	lea    0x40(%rdx),%rcx
  26:	49 8b 1c 00          	mov    (%r8,%rax,1),%rbx
* 2a:	4c 89 c0             	mov    %r8,%rax <-- trapping instruction
  2d:	65 48 0f c7 0e       	cmpxchg16b %gs:(%rsi)
  32:	75 a2                	jne    0xffffffd6
  34:	41 8b 44 24 28       	mov    0x28(%r12),%eax
  39:	0f 0d 0c 03          	prefetchw (%rbx,%rax,1)
  3d:	4c                   	rex.WR
  3e:	89                   	.byte 0x89
  3f:	44                   	rex.R