------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 5.15.107-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.2/16062 is trying to acquire lock: ffff80001497f498 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x28/0xd8 kernel/locking/semaphore.c:138 but task is already holding lock: ffff80001508f218 (depot_lock){-.-.}-{2:2}, at: stack_depot_save+0x204/0x4a0 lib/stackdepot.c:307 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (depot_lock){-.-.}-{2:2}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xc4/0x14c kernel/locking/spinlock.c:162 stack_depot_save+0x204/0x4a0 lib/stackdepot.c:307 kasan_save_stack+0x54/0x68 mm/kasan/common.c:40 kasan_record_aux_stack+0xd4/0x11c mm/kasan/generic.c:348 irq_work_queue_on+0xcc/0x224 kernel/irq_work.c:101 tell_cpu_to_push+0x1d8/0x408 kernel/sched/rt.c:2149 pull_rt_task kernel/sched/rt.c:2215 [inline] balance_rt+0x268/0x354 kernel/sched/rt.c:1560 put_prev_task_balance kernel/sched/core.c:5620 [inline] __pick_next_task kernel/sched/core.c:5660 [inline] pick_next_task kernel/sched/core.c:6188 [inline] __schedule+0x714/0x1e38 kernel/sched/core.c:6336 schedule+0x11c/0x1c8 kernel/sched/core.c:6455 schedule_timeout+0xb8/0x344 kernel/time/timer.c:1860 unix_wait_for_peer+0x1d8/0x2a8 net/unix/af_unix.c:1315 unix_dgram_sendmsg+0xd88/0x1654 net/unix/af_unix.c:1913 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg net/socket.c:724 [inline] ____sys_sendmsg+0x584/0x870 net/socket.c:2412 ___sys_sendmsg+0x214/0x294 net/socket.c:2466 __sys_sendmmsg+0x23c/0x648 net/socket.c:2552 __do_sys_sendmmsg net/socket.c:2581 [inline] __se_sys_sendmmsg net/socket.c:2578 [inline] __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2578 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 -> #2 (&rq->__lock){-.-.}-{2:2}: _raw_spin_lock_nested+0xb4/0x110 kernel/locking/spinlock.c:368 raw_spin_rq_lock_nested+0x2c/0x44 kernel/sched/core.c:475 raw_spin_rq_lock kernel/sched/sched.h:1325 [inline] rq_lock kernel/sched/sched.h:1620 [inline] task_fork_fair+0x7c/0x23c kernel/sched/fair.c:11372 sched_cgroup_fork+0x334/0x3d8 kernel/sched/core.c:4462 copy_process+0x24d4/0x3750 kernel/fork.c:2312 kernel_clone+0x1d8/0xa58 kernel/fork.c:2601 kernel_thread+0x148/0x1bc kernel/fork.c:2653 rest_init+0x2c/0x38c init/main.c:701 arch_call_rest_init+0x14/0x20 init/main.c:889 start_kernel+0x440/0x600 init/main.c:1144 __primary_switched+0xa8/0xb0 arch/arm64/kernel/head.S:468 -> #1 (&p->pi_lock){-.-.}-{2:2}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xc4/0x14c kernel/locking/spinlock.c:162 try_to_wake_up+0xb0/0xc2c kernel/sched/core.c:4026 wake_up_process+0x18/0x24 kernel/sched/core.c:4211 __up+0x11c/0x148 kernel/locking/semaphore.c:265 up+0x90/0xb0 kernel/locking/semaphore.c:190 __up_console_sem+0x8c/0x100 kernel/printk/printk.c:256 console_unlock+0x1160/0x1394 kernel/printk/printk.c:2750 do_con_write+0x5850/0x597c con_write+0x34/0x58 drivers/tty/vt/vt.c:3295 process_output_block drivers/tty/n_tty.c:592 [inline] n_tty_write+0xae0/0xf38 drivers/tty/n_tty.c:2322 do_tty_write drivers/tty/tty_io.c:1038 [inline] file_tty_write+0x44c/0x758 drivers/tty/tty_io.c:1110 tty_write+0x48/0x58 drivers/tty/tty_io.c:1131 call_write_iter include/linux/fs.h:2103 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0x87c/0xb3c fs/read_write.c:594 ksys_write+0x15c/0x26c fs/read_write.c:647 __do_sys_write fs/read_write.c:659 [inline] __se_sys_write fs/read_write.c:656 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:656 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 -> #0 ((console_sem).lock){-...}-{2:2}: check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain kernel/locking/lockdep.c:3787 [inline] __lock_acquire+0x32cc/0x7620 kernel/locking/lockdep.c:5011 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5622 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xc4/0x14c kernel/locking/spinlock.c:162 down_trylock+0x28/0xd8 kernel/locking/semaphore.c:138 __down_trylock_console_sem+0x80/0x144 kernel/printk/printk.c:239 console_trylock+0xb8/0x1f8 kernel/printk/printk.c:2565 console_trylock_spinning+0x1c/0x280 kernel/printk/printk.c:1867 vprintk_emit+0x120/0x218 kernel/printk/printk.c:2267 vprintk_default+0xa0/0xe4 kernel/printk/printk.c:2279 vprintk+0x218/0x2f0 kernel/printk/printk_safe.c:50 _printk+0xdc/0x128 kernel/printk/printk.c:2289 __warn_printk+0xb4/0x134 kernel/panic.c:710 depot_alloc_stack lib/stackdepot.c:114 [inline] stack_depot_save+0x490/0x4a0 lib/stackdepot.c:312 kasan_save_stack+0x54/0x68 mm/kasan/common.c:40 kasan_record_aux_stack+0xd4/0x11c mm/kasan/generic.c:348 irq_work_queue_on+0xcc/0x224 kernel/irq_work.c:101 rto_push_irq_work_func+0x13c/0x340 kernel/sched/rt.c:2187 irq_work_single+0xbc/0x1e4 kernel/irq_work.c:155 irq_work_run_list kernel/irq_work.c:177 [inline] irq_work_run+0x108/0x25c kernel/irq_work.c:186 do_handle_IPI arch/arm64/kernel/smp.c:925 [inline] ipi_handler+0x108/0x7d4 arch/arm64/kernel/smp.c:948 handle_percpu_devid_irq+0x29c/0x7fc kernel/irq/chip.c:933 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq_desc kernel/irq/irqdesc.c:651 [inline] handle_domain_irq+0xec/0x178 kernel/irq/irqdesc.c:706 gic_handle_irq+0x78/0x1c8 drivers/irqchip/irq-gic-v3.c:757 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:899 do_interrupt_handler+0x74/0x94 arch/arm64/kernel/entry-common.c:267 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:442 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:458 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:580 check_region_inline mm/kasan/generic.c:175 [inline] kasan_check_range+0x34/0x2b4 mm/kasan/generic.c:189 memset+0x58/0x88 mm/kasan/shadow.c:44 arch_stack_walk+0xb0/0x32c arch/arm64/kernel/stacktrace.c:226 stack_trace_save+0xfc/0x1a0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] ____kasan_kmalloc+0xbc/0xfc mm/kasan/common.c:513 __kasan_kmalloc+0x10/0x1c mm/kasan/common.c:522 kasan_kmalloc include/linux/kasan.h:264 [inline] __kmalloc_node_track_caller+0x234/0x448 mm/slub.c:4963 kmalloc_reserve+0xe8/0x270 net/core/skbuff.c:356 __alloc_skb+0x1a4/0x584 net/core/skbuff.c:427 alloc_skb include/linux/skbuff.h:1166 [inline] alloc_skb_with_frags+0xb4/0x58c net/core/skbuff.c:6116 sock_alloc_send_pskb+0x7a8/0x8c0 net/core/sock.c:2497 sock_alloc_send_skb+0x44/0x58 net/core/sock.c:2514 __ip6_append_data+0x2130/0x3560 net/ipv6/ip6_output.c:1650 ip6_append_data+0x1b0/0x2e0 net/ipv6/ip6_output.c:1824 icmp6_send+0x1060/0x1b0c net/ipv6/icmp.c:619 __icmpv6_send include/linux/icmpv6.h:28 [inline] icmpv6_send include/linux/icmpv6.h:49 [inline] ip6_link_failure+0x44/0x4a8 net/ipv6/route.c:2790 dst_link_failure include/net/dst.h:428 [inline] ipip6_tunnel_xmit net/ipv6/sit.c:1045 [inline] sit_tunnel_xmit+0xa6c/0x22bc net/ipv6/sit.c:1082 __netdev_start_xmit include/linux/netdevice.h:5019 [inline] netdev_start_xmit include/linux/netdevice.h:5033 [inline] xmit_one net/core/dev.c:3592 [inline] dev_hard_start_xmit+0x2bc/0x92c net/core/dev.c:3608 __dev_queue_xmit+0x13a8/0x2a6c net/core/dev.c:4223 dev_queue_xmit+0x24/0x34 net/core/dev.c:4256 neigh_connected_output+0x334/0x378 net/core/neighbour.c:1553 neigh_output include/net/neighbour.h:516 [inline] ip6_finish_output2+0x1344/0x1c48 net/ipv6/ip6_output.c:126 __ip6_finish_output+0x518/0x67c net/ipv6/ip6_output.c:191 ip6_finish_output+0x40/0x218 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:449 [inline] ip6_local_out+0x120/0x160 net/ipv6/output_core.c:161 ip6_send_skb+0x118/0x428 net/ipv6/ip6_output.c:1937 udp_v6_send_skb+0x890/0x1444 net/ipv6/udp.c:1253 udpv6_sendmsg+0x19ac/0x291c net/ipv6/udp.c:1551 inet6_sendmsg+0xb4/0xd8 net/ipv6/af_inet6.c:644 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg net/socket.c:724 [inline] ____sys_sendmsg+0x584/0x870 net/socket.c:2412 ___sys_sendmsg+0x214/0x294 net/socket.c:2466 __sys_sendmmsg+0x23c/0x648 net/socket.c:2552 __do_sys_sendmmsg net/socket.c:2581 [inline] __se_sys_sendmmsg net/socket.c:2578 [inline] __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2578 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 other info that might help us debug this: Chain exists of: (console_sem).lock --> &rq->__lock --> depot_lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(depot_lock); lock(&rq->__lock); lock(depot_lock); lock((console_sem).lock); *** DEADLOCK *** 5 locks held by syz-executor.2/16062: #0: ffff800014aa16c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 include/linux/rcupdate.h:268 #1: ffff800014aa16c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 include/linux/rcupdate.h:268 #2: ffff00011eb01660 (k-slock-AF_INET6){+...}-{2:2}, at: spin_trylock include/linux/spinlock.h:373 [inline] #2: ffff00011eb01660 (k-slock-AF_INET6){+...}-{2:2}, at: icmpv6_xmit_lock+0x100/0x188 net/ipv6/icmp.c:118 #3: ffff800014aa1660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c include/linux/rcupdate.h:268 #4: ffff80001508f218 (depot_lock){-.-.}-{2:2}, at: stack_depot_save+0x204/0x4a0 lib/stackdepot.c:307 stack backtrace: CPU: 0 PID: 16062 Comm: syz-executor.2 Not tainted 5.15.107-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 Call trace: dump_backtrace+0x0/0x530 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 print_circular_bug+0x150/0x1b8 kernel/locking/lockdep.c:2011 check_noncircular+0x2cc/0x378 kernel/locking/lockdep.c:2133 check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain kernel/locking/lockdep.c:3787 [inline] __lock_acquire+0x32cc/0x7620 kernel/locking/lockdep.c:5011 lock_acquire+0x240/0x77c kernel/locking/lockdep.c:5622 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xc4/0x14c kernel/locking/spinlock.c:162 down_trylock+0x28/0xd8 kernel/locking/semaphore.c:138 __down_trylock_console_sem+0x80/0x144 kernel/printk/printk.c:239 console_trylock+0xb8/0x1f8 kernel/printk/printk.c:2565 console_trylock_spinning+0x1c/0x280 kernel/printk/printk.c:1867 vprintk_emit+0x120/0x218 kernel/printk/printk.c:2267 vprintk_default+0xa0/0xe4 kernel/printk/printk.c:2279 vprintk+0x218/0x2f0 kernel/printk/printk_safe.c:50 _printk+0xdc/0x128 kernel/printk/printk.c:2289 __warn_printk+0xb4/0x134 kernel/panic.c:710 depot_alloc_stack lib/stackdepot.c:114 [inline] stack_depot_save+0x490/0x4a0 lib/stackdepot.c:312 kasan_save_stack+0x54/0x68 mm/kasan/common.c:40 kasan_record_aux_stack+0xd4/0x11c mm/kasan/generic.c:348 irq_work_queue_on+0xcc/0x224 kernel/irq_work.c:101 rto_push_irq_work_func+0x13c/0x340 kernel/sched/rt.c:2187 irq_work_single+0xbc/0x1e4 kernel/irq_work.c:155 irq_work_run_list kernel/irq_work.c:177 [inline] irq_work_run+0x108/0x25c kernel/irq_work.c:186 do_handle_IPI arch/arm64/kernel/smp.c:925 [inline] ipi_handler+0x108/0x7d4 arch/arm64/kernel/smp.c:948 handle_percpu_devid_irq+0x29c/0x7fc kernel/irq/chip.c:933 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq_desc kernel/irq/irqdesc.c:651 [inline] handle_domain_irq+0xec/0x178 kernel/irq/irqdesc.c:706 gic_handle_irq+0x78/0x1c8 drivers/irqchip/irq-gic-v3.c:757 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:899 do_interrupt_handler+0x74/0x94 arch/arm64/kernel/entry-common.c:267 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:442 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:458 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:580 check_region_inline mm/kasan/generic.c:175 [inline] kasan_check_range+0x34/0x2b4 mm/kasan/generic.c:189 memset+0x58/0x88 mm/kasan/shadow.c:44 arch_stack_walk+0xb0/0x32c arch/arm64/kernel/stacktrace.c:226 stack_trace_save+0xfc/0x1a0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] ____kasan_kmalloc+0xbc/0xfc mm/kasan/common.c:513 __kasan_kmalloc+0x10/0x1c mm/kasan/common.c:522 kasan_kmalloc include/linux/kasan.h:264 [inline] __kmalloc_node_track_caller+0x234/0x448 mm/slub.c:4963 kmalloc_reserve+0xe8/0x270 net/core/skbuff.c:356 __alloc_skb+0x1a4/0x584 net/core/skbuff.c:427 alloc_skb include/linux/skbuff.h:1166 [inline] alloc_skb_with_frags+0xb4/0x58c net/core/skbuff.c:6116 sock_alloc_send_pskb+0x7a8/0x8c0 net/core/sock.c:2497 sock_alloc_send_skb+0x44/0x58 net/core/sock.c:2514 __ip6_append_data+0x2130/0x3560 net/ipv6/ip6_output.c:1650 ip6_append_data+0x1b0/0x2e0 net/ipv6/ip6_output.c:1824 icmp6_send+0x1060/0x1b0c net/ipv6/icmp.c:619 __icmpv6_send include/linux/icmpv6.h:28 [inline] icmpv6_send include/linux/icmpv6.h:49 [inline] ip6_link_failure+0x44/0x4a8 net/ipv6/route.c:2790 dst_link_failure include/net/dst.h:428 [inline] ipip6_tunnel_xmit net/ipv6/sit.c:1045 [inline] sit_tunnel_xmit+0xa6c/0x22bc net/ipv6/sit.c:1082 __netdev_start_xmit include/linux/netdevice.h:5019 [inline] netdev_start_xmit include/linux/netdevice.h:5033 [inline] xmit_one net/core/dev.c:3592 [inline] dev_hard_start_xmit+0x2bc/0x92c net/core/dev.c:3608 __dev_queue_xmit+0x13a8/0x2a6c net/core/dev.c:4223 dev_queue_xmit+0x24/0x34 net/core/dev.c:4256 neigh_connected_output+0x334/0x378 net/core/neighbour.c:1553 neigh_output include/net/neighbour.h:516 [inline] ip6_finish_output2+0x1344/0x1c48 net/ipv6/ip6_output.c:126 __ip6_finish_output+0x518/0x67c net/ipv6/ip6_output.c:191 ip6_finish_output+0x40/0x218 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:449 [inline] ip6_local_out+0x120/0x160 net/ipv6/output_core.c:161 ip6_send_skb+0x118/0x428 net/ipv6/ip6_output.c:1937 udp_v6_send_skb+0x890/0x1444 net/ipv6/udp.c:1253 udpv6_sendmsg+0x19ac/0x291c net/ipv6/udp.c:1551 inet6_sendmsg+0xb4/0xd8 net/ipv6/af_inet6.c:644 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg net/socket.c:724 [inline] ____sys_sendmsg+0x584/0x870 net/socket.c:2412 ___sys_sendmsg+0x214/0x294 net/socket.c:2466 __sys_sendmmsg+0x23c/0x648 net/socket.c:2552 __do_sys_sendmmsg net/socket.c:2581 [inline] __se_sys_sendmmsg net/socket.c:2578 [inline] __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2578 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 Stack depot reached limit capacity WARNING: CPU: 0 PID: 16062 at lib/stackdepot.c:114 stack_depot_save+0x494/0x4a0 lib/stackdepot.c:312 Modules linked in: CPU: 0 PID: 16062 Comm: syz-executor.2 Not tainted 5.15.107-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : stack_depot_save+0x494/0x4a0 lib/stackdepot.c:312 lr : depot_alloc_stack lib/stackdepot.c:114 [inline] lr : stack_depot_save+0x490/0x4a0 lib/stackdepot.c:312 sp : ffff800008007ae0 x29: ffff800008007af0 x28: 00000000000001d0 x27: 00000000000000c0 x26: 0000000000000000 x25: 000000000004823e x24: ffff0001b3000000 x23: 000000003ef4823e x22: 00000000000001b8 x21: 0000000000000000 x20: 0000000000000037 x19: ffff800008007b50 x18: 0000000000010603 x17: ff80800008333ebc x16: ffff800011943d44 x15: ffff800008333ebc x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000000000 x11: ff8080000832b964 x10: 0000000000010602 x9 : d3af93a686d09600 x8 : d3af93a686d09600 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800008007258 x4 : ffff8000149af940 x3 : ffff80000854a4a4 x2 : 0000000000000001 x1 : 0000000100010602 x0 : 0000000000000022 Call trace: stack_depot_save+0x494/0x4a0 lib/stackdepot.c:312 kasan_save_stack+0x54/0x68 mm/kasan/common.c:40 kasan_record_aux_stack+0xd4/0x11c mm/kasan/generic.c:348 irq_work_queue_on+0xcc/0x224 kernel/irq_work.c:101 rto_push_irq_work_func+0x13c/0x340 kernel/sched/rt.c:2187 irq_work_single+0xbc/0x1e4 kernel/irq_work.c:155 irq_work_run_list kernel/irq_work.c:177 [inline] irq_work_run+0x108/0x25c kernel/irq_work.c:186 do_handle_IPI arch/arm64/kernel/smp.c:925 [inline] ipi_handler+0x108/0x7d4 arch/arm64/kernel/smp.c:948 handle_percpu_devid_irq+0x29c/0x7fc kernel/irq/chip.c:933 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq_desc kernel/irq/irqdesc.c:651 [inline] handle_domain_irq+0xec/0x178 kernel/irq/irqdesc.c:706 gic_handle_irq+0x78/0x1c8 drivers/irqchip/irq-gic-v3.c:757 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:899 do_interrupt_handler+0x74/0x94 arch/arm64/kernel/entry-common.c:267 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:442 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:458 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:580 check_region_inline mm/kasan/generic.c:175 [inline] kasan_check_range+0x34/0x2b4 mm/kasan/generic.c:189 memset+0x58/0x88 mm/kasan/shadow.c:44 arch_stack_walk+0xb0/0x32c arch/arm64/kernel/stacktrace.c:226 stack_trace_save+0xfc/0x1a0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:38 [inline] kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] ____kasan_kmalloc+0xbc/0xfc mm/kasan/common.c:513 __kasan_kmalloc+0x10/0x1c mm/kasan/common.c:522 kasan_kmalloc include/linux/kasan.h:264 [inline] __kmalloc_node_track_caller+0x234/0x448 mm/slub.c:4963 kmalloc_reserve+0xe8/0x270 net/core/skbuff.c:356 __alloc_skb+0x1a4/0x584 net/core/skbuff.c:427 alloc_skb include/linux/skbuff.h:1166 [inline] alloc_skb_with_frags+0xb4/0x58c net/core/skbuff.c:6116 sock_alloc_send_pskb+0x7a8/0x8c0 net/core/sock.c:2497 sock_alloc_send_skb+0x44/0x58 net/core/sock.c:2514 __ip6_append_data+0x2130/0x3560 net/ipv6/ip6_output.c:1650 ip6_append_data+0x1b0/0x2e0 net/ipv6/ip6_output.c:1824 icmp6_send+0x1060/0x1b0c net/ipv6/icmp.c:619 __icmpv6_send include/linux/icmpv6.h:28 [inline] icmpv6_send include/linux/icmpv6.h:49 [inline] ip6_link_failure+0x44/0x4a8 net/ipv6/route.c:2790 dst_link_failure include/net/dst.h:428 [inline] ipip6_tunnel_xmit net/ipv6/sit.c:1045 [inline] sit_tunnel_xmit+0xa6c/0x22bc net/ipv6/sit.c:1082 __netdev_start_xmit include/linux/netdevice.h:5019 [inline] netdev_start_xmit include/linux/netdevice.h:5033 [inline] xmit_one net/core/dev.c:3592 [inline] dev_hard_start_xmit+0x2bc/0x92c net/core/dev.c:3608 __dev_queue_xmit+0x13a8/0x2a6c net/core/dev.c:4223 dev_queue_xmit+0x24/0x34 net/core/dev.c:4256 neigh_connected_output+0x334/0x378 net/core/neighbour.c:1553 neigh_output include/net/neighbour.h:516 [inline] ip6_finish_output2+0x1344/0x1c48 net/ipv6/ip6_output.c:126 __ip6_finish_output+0x518/0x67c net/ipv6/ip6_output.c:191 ip6_finish_output+0x40/0x218 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:449 [inline] ip6_local_out+0x120/0x160 net/ipv6/output_core.c:161 ip6_send_skb+0x118/0x428 net/ipv6/ip6_output.c:1937 udp_v6_send_skb+0x890/0x1444 net/ipv6/udp.c:1253 udpv6_sendmsg+0x19ac/0x291c net/ipv6/udp.c:1551 inet6_sendmsg+0xb4/0xd8 net/ipv6/af_inet6.c:644 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg net/socket.c:724 [inline] ____sys_sendmsg+0x584/0x870 net/socket.c:2412 ___sys_sendmsg+0x214/0x294 net/socket.c:2466 __sys_sendmmsg+0x23c/0x648 net/socket.c:2552 __do_sys_sendmmsg net/socket.c:2581 [inline] __se_sys_sendmmsg net/socket.c:2578 [inline] __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2578 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 41541 hardirqs last enabled at (41540): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:81 [inline] hardirqs last enabled at (41540): [] exit_to_kernel_mode+0x100/0x178 arch/arm64/kernel/entry-common.c:91 hardirqs last disabled at (41541): [] enter_el1_irq_or_nmi+0x10/0x1c arch/arm64/kernel/entry-common.c:227 softirqs last enabled at (41488): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31 softirqs last disabled at (41490): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18 ---[ end trace b2534ff6ab50048b ]---