------------[ cut here ]------------ NETDEV WATCHDOG: sl1 (): transmit queue 0 timed out WARNING: CPU: 1 PID: 6197 at net/sched/sch_generic.c:526 dev_watchdog+0x6c0/0x700 net/sched/sch_generic.c:525 Modules linked in: CPU: 1 PID: 6197 Comm: syz-executor.3 Not tainted 6.1.83-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 RIP: 0010:dev_watchdog+0x6c0/0x700 net/sched/sch_generic.c:525 Code: ed f8 c6 05 3d 55 c2 05 01 48 8b 1c 24 48 89 df e8 25 62 e5 ff 48 c7 c7 40 d6 e3 8b 48 89 de 48 89 c2 44 89 f1 e8 30 5f b5 f8 <0f> 0b e9 8b fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c1 fb ff RSP: 0018:ffffc900001e0b00 EFLAGS: 00010246 RAX: 7ab7da982662a200 RBX: ffff88805aa18000 RCX: ffff8880279f1dc0 RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00000000ffffc600 R08: ffffffff81527eae R09: ffffed1017324f1c R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100b543089 R13: 00000000ffffc5d2 R14: 0000000000000000 R15: 0000000000000110 FS: 00007eff3e2d26c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c000f19000 CR3: 000000005c6fc000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: call_timer_fn+0x1ad/0x6b0 kernel/time/timer.c:1474 expire_timers kernel/time/timer.c:1519 [inline] __run_timers+0x67c/0x890 kernel/time/timer.c:1790 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1803 __do_softirq+0x2e9/0xa4c kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x155/0x240 kernel/softirq.c:650 irq_exit_rcu+0x5/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:653 RIP: 0010:console_emit_next_record+0xd67/0x1000 kernel/printk/printk.c:2780 Code: 32 1c 00 44 0f b6 74 24 1f 48 83 7c 24 30 00 75 07 e8 6d 32 1c 00 eb 06 e8 66 32 1c 00 fb 48 c7 84 24 a0 00 00 00 0e 36 e0 45 <43> c7 04 2c 00 00 00 00 4b c7 44 2c 0a 00 00 00 00 4b c7 44 2c 12 RSP: 0018:ffffc9000328f360 EFLAGS: 00000283 RAX: ffffffff816e528a RBX: ffffffff816e4fcc RCX: 0000000000040000 RDX: ffffc90003bd1000 RSI: 0000000000005a75 RDI: 0000000000005a76 RBP: ffffc9000328f610 R08: ffffffff816e5262 R09: fffffbfff2092e45 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: 1ffff92000651e80 R14: 0000000000000001 R15: 0000000000000000 console_unlock+0x278/0x7c0 kernel/printk/printk.c:2900 vprintk_emit+0x523/0x740 kernel/printk/printk.c:2297 _printk+0xd1/0x111 kernel/printk/printk.c:2322 __xfs_printk fs/xfs/xfs_message.c:24 [inline] xfs_printk_level+0x1c6/0x310 fs/xfs/xfs_message.c:44 xfs_log_mount+0xce/0x770 xfs_mountfs+0xcbb/0x1f00 fs/xfs/xfs_mount.c:805 xfs_fs_fill_super+0x1145/0x13a0 fs/xfs/xfs_super.c:1681 get_tree_bdev+0x3fe/0x620 fs/super.c:1355 vfs_get_tree+0x88/0x270 fs/super.c:1562 do_new_mount+0x2ba/0xb40 fs/namespace.c:3051 do_mount fs/namespace.c:3394 [inline] __do_sys_mount fs/namespace.c:3602 [inline] __se_sys_mount+0x2d5/0x3c0 fs/namespace.c:3579 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7eff3d47f4aa Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007eff3e2d1ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007eff3e2d1f80 RCX: 00007eff3d47f4aa RDX: 0000000020009800 RSI: 0000000020009840 RDI: 00007eff3e2d1f40 RBP: 0000000020009800 R08: 00007eff3e2d1f80 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020009840 R13: 00007eff3e2d1f40 R14: 000000000000980a R15: 0000000020000040 ---------------- Code disassembly (best guess): 0: 32 1c 00 xor (%rax,%rax,1),%bl 3: 44 0f b6 74 24 1f movzbl 0x1f(%rsp),%r14d 9: 48 83 7c 24 30 00 cmpq $0x0,0x30(%rsp) f: 75 07 jne 0x18 11: e8 6d 32 1c 00 call 0x1c3283 16: eb 06 jmp 0x1e 18: e8 66 32 1c 00 call 0x1c3283 1d: fb sti 1e: 48 c7 84 24 a0 00 00 movq $0x45e0360e,0xa0(%rsp) 25: 00 0e 36 e0 45 * 2a: 43 c7 04 2c 00 00 00 movl $0x0,(%r12,%r13,1) <-- trapping instruction 31: 00 32: 4b c7 44 2c 0a 00 00 movq $0x0,0xa(%r12,%r13,1) 39: 00 00 3b: 4b rex.WXB 3c: c7 .byte 0xc7 3d: 44 2c 12 rex.R sub $0x12,%al