syzbot


WARNING in console_unlock (2)

Status: auto-closed as invalid on 2022/07/28 17:43
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 151d, last: 151d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in console_unlock 2 283d 283d 0/24 auto-closed as invalid on 2022/02/16 18:35

Sample crash report:
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
Modules linked in:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 21 at include/trace/events/printk.h:10 trace_console_rcuidle include/trace/events/printk.h:10 [inline]
WARNING: CPU: 1 PID: 21 at include/trace/events/printk.h:10 call_console_drivers kernel/printk/printk.c:1925 [inline]
WARNING: CPU: 1 PID: 21 at include/trace/events/printk.h:10 console_unlock+0xcd0/0xdd0 kernel/printk/printk.c:2774
Modules linked in:
CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 5.18.0-rc3-syzkaller-01537-g20b87e7c29df #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:trace_console_rcuidle include/trace/events/printk.h:10 [inline]
RIP: 0010:call_console_drivers kernel/printk/printk.c:1925 [inline]
RIP: 0010:console_unlock+0xcd0/0xdd0 kernel/printk/printk.c:2774
Code: 38 fd ff ff e8 21 58 19 00 c7 05 b7 f7 fa 0e 00 00 00 00 48 8b bc 24 68 01 00 00 e8 1a cf ff ff e9 29 ff ff ff e8 00 58 19 00 <0f> 0b e9 6a fd ff ff 48 89 ef e8 11 6b 65 00 e9 21 f5 ff ff e8 d7
RSP: 0018:fffffe0000053d10 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000100000 RCX: 0000000000000100
RDX: ffff888011991d00 RSI: ffffffff815fd0a0 RDI: 0000000000000003
RBP: fffffe0000053da8 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff815fce09 R11: 0000000000000000 R12: 000000000000000f
R13: 0000000000000000 R14: fffffe0000053d68 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc90000daffc8 CR3: 000000001afce000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <#DF>
 console_unblank+0xfc/0x130 kernel/printk/printk.c:2843
 bust_spinlocks+0x60/0xe0 lib/bust_spinlocks.c:28
 oops_end+0x2b/0xf0 arch/x86/kernel/dumpstack.c:355
 handle_stack_overflow+0x98/0xd0 arch/x86/kernel/traps.c:401
 exc_double_fault+0x147/0x180 arch/x86/kernel/traps.c:538
 asm_exc_double_fault+0x1e/0x40 arch/x86/include/asm/idtentry.h:615
RIP: 0010:mark_lock.part.0+0x26/0x1910 kernel/locking/lockdep.c:4566
Code: 00 00 00 90 41 57 41 56 41 55 41 89 d5 48 ba 00 00 00 00 00 fc ff df 41 54 49 89 f4 55 53 48 81 ec 38 01 00 00 48 8d 5c 24 38 <48> 89 3c 24 48 c7 44 24 38 b3 8a b5 41 48 c1 eb 03 48 c7 44 24 40
RSP: 0018:ffffc90000daffd0 EFLAGS: 00010082
RAX: 0000000000000007 RBX: ffffc90000db0008 RCX: ffffffff815d3a02
RDX: dffffc0000000000 RSI: ffff8880119929e0 RDI: ffff888011991d00
RBP: ffff888011992a02 R08: 0000000000000000 R09: ffffffff9005e987
R10: fffffbfff200bd30 R11: 0000000000000001 R12: ffff8880119929e0
R13: 0000000000000004 R14: 0000000000000001 R15: dffffc0000000000
 </#DF>
 <TASK>
 mark_lock kernel/locking/lockdep.c:4571 [inline]
 mark_usage kernel/locking/lockdep.c:4502 [inline]
 __lock_acquire+0x11e7/0x56c0 kernel/locking/lockdep.c:4983
 lock_acquire kernel/locking/lockdep.c:5641 [inline]
 lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5606
 local_lock_acquire include/linux/local_lock_internal.h:29 [inline]
 rmqueue_pcplist mm/page_alloc.c:3677 [inline]
 rmqueue mm/page_alloc.c:3715 [inline]
 get_page_from_freelist+0x11cb/0x3e00 mm/page_alloc.c:4179
 __alloc_pages+0x1b2/0x500 mm/page_alloc.c:5408
 alloc_pages+0x1aa/0x310 mm/mempolicy.c:2272
 alloc_slab_page mm/slub.c:1799 [inline]
 allocate_slab+0x26c/0x3c0 mm/slub.c:1944
 new_slab mm/slub.c:2004 [inline]
 ___slab_alloc+0x8df/0xf20 mm/slub.c:3005
 __slab_alloc.constprop.0+0x4d/0xa0 mm/slub.c:3092
 slab_alloc_node mm/slub.c:3183 [inline]
 __kmalloc_node_track_caller+0x2cb/0x360 mm/slub.c:4947
 kmalloc_reserve net/core/skbuff.c:354 [inline]
 pskb_expand_head+0x15e/0x1070 net/core/skbuff.c:1701
 __skb_cow include/linux/skbuff.h:3516 [inline]
 skb_cow_head include/linux/skbuff.h:3550 [inline]
 gre_tap_xmit+0x3bb/0x630 net/ipv4/ip_gre.c:738
 __netdev_start_xmit include/linux/netdevice.h:4739 [inline]
 netdev_start_xmit include/linux/netdevice.h:4753 [inline]
 xmit_one net/core/dev.c:3537 [inline]
 dev_hard_start_xmit+0x1eb/0x920 net/core/dev.c:3553
 sch_direct_xmit+0x19f/0xbe0 net/sched/sch_generic.c:342
 __dev_xmit_skb net/core/dev.c:3764 [inline]
 __dev_queue_xmit+0x1572/0x3b10 net/core/dev.c:4173
 br_dev_queue_push_xmit+0x268/0x740 net/bridge/br_forward.c:53
 br_nf_dev_queue_xmit+0x5f7/0x1f00 net/bridge/br_netfilter_hooks.c:807
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_post_routing+0xf6d/0x1b90 net/bridge/br_netfilter_hooks.c:853
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0xc5/0x1f0 net/netfilter/core.c:620
 nf_hook+0x3d4/0x680 include/linux/netfilter.h:262
 NF_HOOK include/linux/netfilter.h:305 [inline]
 br_forward_finish+0xd4/0x130 net/bridge/br_forward.c:66
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_forward_finish+0x7d6/0xc60 net/bridge/br_netfilter_hooks.c:564
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:634 [inline]
 br_nf_forward_ip+0x1094/0x1cf0 net/bridge/br_netfilter_hooks.c:575
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0xc5/0x1f0 net/netfilter/core.c:620
 nf_hook+0x3d4/0x680 include/linux/netfilter.h:262
 NF_HOOK include/linux/netfilter.h:305 [inline]
 __br_forward+0x19a/0x580 net/bridge/br_forward.c:115
 deliver_clone net/bridge/br_forward.c:131 [inline]
 maybe_deliver+0x331/0x430 net/bridge/br_forward.c:189
 br_flood+0x13a/0x460 net/bridge/br_forward.c:231
 br_handle_frame_finish+0x112b/0x1a80 net/bridge/br_input.c:186
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 netif_receive_skb_internal net/core/dev.c:5641 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5700
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0xc6e/0x1a80 net/bridge/br_input.c:192
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1024
 br_nf_pre_routing_finish+0x909/0x1ad0 net/bridge/br_netfilter_hooks.c:422
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_nf_pre_routing+0xae3/0x1f00 net/bridge/br_netfilter_hooks.c:531
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:248 [inline]
 br_handle_frame+0x8df/0x1280 net/bridge/br_input.c:392
 __netif_receive_skb_core+0xa8d/0x3a20 net/core/dev.c:5335
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5439
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5555
 process_backlog+0x3a0/0x7c0 net/core/dev.c:5883
 __napi_poll+0xb3/0x6e0 net/core/dev.c:6449
 napi_poll net/core/dev.c:6516 [inline]
 net_rx_action+0x9de/0xd90 net/core/dev.c:6625
 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558
 run_ksoftirqd kernel/softirq.c:921 [inline]
 run_ksoftirqd+0x2d/0x60 kernel/softirq.c:913
 smpboot_thread_fn+0x645/0x9c0 kernel/smpboot.c:164
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	00 90 41 57 41 56    	add    %dl,0x56415741(%rax)
   8:	41 55                	push   %r13
   a:	41 89 d5             	mov    %edx,%r13d
   d:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  14:	fc ff df
  17:	41 54                	push   %r12
  19:	49 89 f4             	mov    %rsi,%r12
  1c:	55                   	push   %rbp
  1d:	53                   	push   %rbx
  1e:	48 81 ec 38 01 00 00 	sub    $0x138,%rsp
  25:	48 8d 5c 24 38       	lea    0x38(%rsp),%rbx
* 2a:	48 89 3c 24          	mov    %rdi,(%rsp) <-- trapping instruction
  2e:	48 c7 44 24 38 b3 8a 	movq   $0x41b58ab3,0x38(%rsp)
  35:	b5 41
  37:	48 c1 eb 03          	shr    $0x3,%rbx
  3b:	48                   	rex.W
  3c:	c7                   	.byte 0xc7
  3d:	44 24 40             	rex.R and $0x40,%al

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-bpf-next-kasan-gce 2022/04/29 17:35 bpf-next 20b87e7c29df 44a5ca63 .config log report info WARNING in console_unlock
* Struck through repros no longer work on HEAD.