------------[ cut here ]------------ NETDEV WATCHDOG: sl0 (): transmit queue 0 timed out 28140 ms WARNING: CPU: 0 PID: 16486 at net/sched/sch_generic.c:525 dev_watchdog+0x8cd/0x8f0 net/sched/sch_generic.c:525 Modules linked in: CPU: 0 PID: 16486 Comm: udevd Not tainted 6.7.0-rc8-syzkaller-00055-g5eff55d725a4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:dev_watchdog+0x8cd/0x8f0 net/sched/sch_generic.c:525 Code: ef 76 06 01 90 48 8b 5c 24 10 48 89 df e8 0b 32 e6 ff 45 89 e8 89 e9 48 89 de 48 89 c2 48 c7 c7 60 59 ec 8b e8 24 00 c1 f8 90 <0f> 0b 90 90 e9 23 fd ff ff e8 75 bf fa f8 90 0f 0b 90 e9 bc fc ff RSP: 0018:ffffc90000007be0 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff88807960e000 RCX: ffffffff814ca739 RDX: ffff88801c4a2180 RSI: ffffffff814ca746 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 000000000008a098 R12: ffff888029cc3400 R13: 0000000000006dec R14: ffff88807960e548 R15: 0000000100018602 FS: 00007f873d895c80(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f20e8783000 CR3: 0000000084b4a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: call_timer_fn+0x193/0x590 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x764/0xb20 kernel/time/timer.c:2022 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035 __do_softirq+0x21a/0x8de kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:qlist_free_all+0xef/0x1b0 mm/kasan/quarantine.c:182 Code: ff ff ba 10 00 00 00 31 f6 4c 89 f7 e8 0a 12 a3 08 e9 4a ff ff ff e8 50 c1 b0 ff 9c 58 f6 c4 02 0f 85 a8 00 00 00 fb 4d 85 e4 <0f> 85 74 ff ff ff 48 8b 04 24 48 c7 40 08 00 00 00 00 48 c7 00 00 RSP: 0018:ffffc900035bf858 EFLAGS: 00000286 RAX: 0000000000000002 RBX: ffff8880871bddf8 RCX: 1ffffffff23e4b2c RDX: 0000000000000000 RSI: ffffffff8acc9f40 RDI: ffffffff8b2ed960 RBP: 0000000000000200 R08: 0000000000000001 R09: fffffbfff23e23d5 R10: ffffffff91f11eaf R11: ffff888028ce9ac0 R12: ffff888060c57cc0 R13: 0000000000000000 R14: ffff8880871bddf8 R15: ffff888140065000 kasan_quarantine_reduce+0x18e/0x1d0 mm/kasan/quarantine.c:294 __kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:305 kasan_slab_alloc include/linux/kasan.h:188 [inline] slab_post_alloc_hook mm/slab.h:763 [inline] slab_alloc_node mm/slab.c:3237 [inline] __kmem_cache_alloc_node+0x163/0x460 mm/slab.c:3521 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc+0x49/0x90 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] tomoyo_realpath_from_path+0xb9/0x710 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path2_perm+0x365/0x710 security/tomoyo/file.c:923 tomoyo_path_rename+0x102/0x1b0 security/tomoyo/tomoyo.c:299 security_path_rename+0x148/0x230 security/security.c:1828 do_renameat2+0x78b/0xdc0 fs/namei.c:4983 __do_sys_rename fs/namei.c:5042 [inline] __se_sys_rename fs/namei.c:5040 [inline] __x64_sys_rename+0x81/0xa0 fs/namei.c:5040 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f873d49a93b Code: 48 8b 15 f0 64 15 00 83 c8 ff 64 83 3a 15 75 0e 48 8b 7c 24 08 e8 d5 d4 07 00 f7 d8 19 c0 48 83 c4 18 c3 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 be 64 15 00 f7 d8 64 89 02 48 83 RSP: 002b:00007ffd9a4d6538 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f873d49a93b RDX: 000055cb7b07c627 RSI: 00007ffd9a4d6558 RDI: 00007ffd9a4d6958 RBP: 000055ce27e64080 R08: 0000000000000006 R09: 3ecd49bf4e70c75e R10: 000000000000010f R11: 0000000000000202 R12: 000055ce27e675c0 R13: 00007ffd9a4d6558 R14: 00007ffd9a4d6958 R15: 000055ce264dfec8 ---------------- Code disassembly (best guess), 2 bytes skipped: 0: ba 10 00 00 00 mov $0x10,%edx 5: 31 f6 xor %esi,%esi 7: 4c 89 f7 mov %r14,%rdi a: e8 0a 12 a3 08 call 0x8a31219 f: e9 4a ff ff ff jmp 0xffffff5e 14: e8 50 c1 b0 ff call 0xffb0c169 19: 9c pushf 1a: 58 pop %rax 1b: f6 c4 02 test $0x2,%ah 1e: 0f 85 a8 00 00 00 jne 0xcc 24: fb sti 25: 4d 85 e4 test %r12,%r12 * 28: 0f 85 74 ff ff ff jne 0xffffffa2 <-- trapping instruction 2e: 48 8b 04 24 mov (%rsp),%rax 32: 48 c7 40 08 00 00 00 movq $0x0,0x8(%rax) 39: 00 3a: 48 rex.W 3b: c7 .byte 0xc7