blktrace: Concurrent blktraces are not allowed on sg0
netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'.
watchdog: BUG: soft lockup - CPU#1 stuck for 21s! [syz-executor.7:5836]
Modules linked in:
irq event stamp: 5861791
hardirqs last  enabled at (5861790): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
hardirqs last disabled at (5861791): [<ffffffff843defdf>] sysvec_apic_timer_interrupt+0xf/0xc0
softirqs last  enabled at (5846536): [<ffffffff8118238b>] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (5846539): [<ffffffff8118238b>] __irq_exit_rcu+0x11b/0x180
CPU: 1 PID: 5836 Comm: syz-executor.7 Not tainted 6.1.0-rc5-next-20221117 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:__create_object+0x394/0xc00
Code: 00 00 00 00 e8 ed e0 a9 02 e8 48 ef ff ff 49 8d bf c8 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 <84> d2 74 09 80 fa 03 0f 8e 80 05 00 00 41 89 87 c8 00 00 00 48 c7
RSP: 0018:ffff88806cf09ac8 EFLAGS: 00000216
RAX: 00000000059b01b2 RBX: 00000000000000f0 RCX: 1ffff11001ef108b
RDX: 0000000000000000 RSI: ffff88806cf09a4c RDI: ffff88800f788458
RBP: ffff88803ec95780 R08: 000000000000000b R09: ffff8880311519b0
R10: ffff88806ca79c18 R11: 0000000000038001 R12: ffff88800f7883d8
R13: 0000000000000000 R14: ffff88800f78846c R15: ffff88800f788390
FS:  0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3b3916c890 CR3: 0000000009a66000 CR4: 0000000000350ee0
Call Trace:
 <IRQ>
 kmem_cache_alloc_node+0x282/0x420
 __alloc_skb+0x21a/0x310
 __netdev_alloc_skb+0x76/0x3e0
 __ieee80211_beacon_get+0x3de/0x1380
 ieee80211_beacon_get_tim+0x99/0x4f0
 mac80211_hwsim_beacon_tx+0x1d2/0xab0
 __iterate_interfaces+0x2d3/0x560
 ieee80211_iterate_active_interfaces_atomic+0x74/0x180
 mac80211_hwsim_beacon+0x105/0x200
 __hrtimer_run_queues+0x541/0xb50
 hrtimer_run_softirq+0x176/0x350
 __do_softirq+0x1c7/0x8f9
 __irq_exit_rcu+0x11b/0x180
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0x92/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_is_held_type+0xfc/0x130
Code: 20 fe 86 84 e8 b5 0e 00 00 b8 ff ff ff ff 65 0f c1 05 48 8a c4 7b 83 f8 01 75 26 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 46 42 02 00 45 31 ed eb
RSP: 0018:ffff888042957578 EFLAGS: 00000286
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffffff85608400 R08: 0000000000000006 R09: 00007f3adbb0c000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800ffa1ac0
R13: 0000000000000000 R14: 00000000ffffffff R15: ffff88800ffa2420
 __schedule+0x157/0x25d0
 preempt_schedule_common+0x45/0xc0
 __cond_resched+0x1b/0x30
 unmap_page_range+0xd7d/0x2c10
 unmap_single_vma+0x190/0x2a0
 unmap_vmas+0x226/0x380
 exit_mmap+0x158/0x680
 mmput+0xd5/0x390
 do_exit+0x99b/0x2720
 do_group_exit+0xd4/0x2a0
 get_signal+0x21a5/0x22e0
 arch_do_signal_or_restart+0x79/0x5a0
 exit_to_user_mode_prepare+0x131/0x1a0
 syscall_exit_to_user_mode+0x1d/0x50
 do_syscall_64+0x4c/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f3addbb8c27
Code: Unable to access opcode bytes at 0x7f3addbb8bfd.
RSP: 002b:00007f3adb12efa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3addbb8c27
RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100
RBP: 00007f3adb12f040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000020000100 R14: 00007f3adb12f000 R15: 0000000000000000
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	00 00                	add    %al,(%rax)
   4:	e8 ed e0 a9 02       	callq  0x2a9e0f6
   9:	e8 48 ef ff ff       	callq  0xffffef56
   e:	49 8d bf c8 00 00 00 	lea    0xc8(%r15),%rdi
  15:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  1c:	fc ff df
  1f:	48 89 f9             	mov    %rdi,%rcx
  22:	48 c1 e9 03          	shr    $0x3,%rcx
  26:	0f b6 14 11          	movzbl (%rcx,%rdx,1),%edx
* 2a:	84 d2                	test   %dl,%dl <-- trapping instruction
  2c:	74 09                	je     0x37
  2e:	80 fa 03             	cmp    $0x3,%dl
  31:	0f 8e 80 05 00 00    	jle    0x5b7
  37:	41 89 87 c8 00 00 00 	mov    %eax,0xc8(%r15)
  3e:	48                   	rex.W
  3f:	c7                   	.byte 0xc7