------------[ cut here ]------------
NETDEV WATCHDOG: sl0 (): transmit queue 0 timed out 28140 ms
WARNING: CPU: 0 PID: 16486 at net/sched/sch_generic.c:525 dev_watchdog+0x8cd/0x8f0 net/sched/sch_generic.c:525
Modules linked in:
CPU: 0 PID: 16486 Comm: udevd Not tainted 6.7.0-rc8-syzkaller-00055-g5eff55d725a4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:dev_watchdog+0x8cd/0x8f0 net/sched/sch_generic.c:525
Code: ef 76 06 01 90 48 8b 5c 24 10 48 89 df e8 0b 32 e6 ff 45 89 e8 89 e9 48 89 de 48 89 c2 48 c7 c7 60 59 ec 8b e8 24 00 c1 f8 90 <0f> 0b 90 90 e9 23 fd ff ff e8 75 bf fa f8 90 0f 0b 90 e9 bc fc ff
RSP: 0018:ffffc90000007be0 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff88807960e000 RCX: ffffffff814ca739
RDX: ffff88801c4a2180 RSI: ffffffff814ca746 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 000000000008a098 R12: ffff888029cc3400
R13: 0000000000006dec R14: ffff88807960e548 R15: 0000000100018602
FS: 00007f873d895c80(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f20e8783000 CR3: 0000000084b4a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
call_timer_fn+0x193/0x590 kernel/time/timer.c:1700
expire_timers kernel/time/timer.c:1751 [inline]
__run_timers+0x764/0xb20 kernel/time/timer.c:2022
run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035
__do_softirq+0x21a/0x8de kernel/softirq.c:553
invoke_softirq kernel/softirq.c:427 [inline]
__irq_exit_rcu kernel/softirq.c:632 [inline]
irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644
sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:qlist_free_all+0xef/0x1b0 mm/kasan/quarantine.c:182
Code: ff ff ba 10 00 00 00 31 f6 4c 89 f7 e8 0a 12 a3 08 e9 4a ff ff ff e8 50 c1 b0 ff 9c 58 f6 c4 02 0f 85 a8 00 00 00 fb 4d 85 e4 <0f> 85 74 ff ff ff 48 8b 04 24 48 c7 40 08 00 00 00 00 48 c7 00 00
RSP: 0018:ffffc900035bf858 EFLAGS: 00000286
RAX: 0000000000000002 RBX: ffff8880871bddf8 RCX: 1ffffffff23e4b2c
RDX: 0000000000000000 RSI: ffffffff8acc9f40 RDI: ffffffff8b2ed960
RBP: 0000000000000200 R08: 0000000000000001 R09: fffffbfff23e23d5
R10: ffffffff91f11eaf R11: ffff888028ce9ac0 R12: ffff888060c57cc0
R13: 0000000000000000 R14: ffff8880871bddf8 R15: ffff888140065000
kasan_quarantine_reduce+0x18e/0x1d0 mm/kasan/quarantine.c:294
__kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:305
kasan_slab_alloc include/linux/kasan.h:188 [inline]
slab_post_alloc_hook mm/slab.h:763 [inline]
slab_alloc_node mm/slab.c:3237 [inline]
__kmem_cache_alloc_node+0x163/0x460 mm/slab.c:3521
__do_kmalloc_node mm/slab_common.c:1006 [inline]
__kmalloc+0x49/0x90 mm/slab_common.c:1020
kmalloc include/linux/slab.h:604 [inline]
tomoyo_realpath_from_path+0xb9/0x710 security/tomoyo/realpath.c:251
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path2_perm+0x365/0x710 security/tomoyo/file.c:923
tomoyo_path_rename+0x102/0x1b0 security/tomoyo/tomoyo.c:299
security_path_rename+0x148/0x230 security/security.c:1828
do_renameat2+0x78b/0xdc0 fs/namei.c:4983
__do_sys_rename fs/namei.c:5042 [inline]
__se_sys_rename fs/namei.c:5040 [inline]
__x64_sys_rename+0x81/0xa0 fs/namei.c:5040
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f873d49a93b
Code: 48 8b 15 f0 64 15 00 83 c8 ff 64 83 3a 15 75 0e 48 8b 7c 24 08 e8 d5 d4 07 00 f7 d8 19 c0 48 83 c4 18 c3 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 be 64 15 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffd9a4d6538 EFLAGS: 00000202 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f873d49a93b
RDX: 000055cb7b07c627 RSI: 00007ffd9a4d6558 RDI: 00007ffd9a4d6958
RBP: 000055ce27e64080 R08: 0000000000000006 R09: 3ecd49bf4e70c75e
R10: 000000000000010f R11: 0000000000000202 R12: 000055ce27e675c0
R13: 00007ffd9a4d6558 R14: 00007ffd9a4d6958 R15: 000055ce264dfec8
----------------
Code disassembly (best guess), 2 bytes skipped:
0: ba 10 00 00 00 mov $0x10,%edx
5: 31 f6 xor %esi,%esi
7: 4c 89 f7 mov %r14,%rdi
a: e8 0a 12 a3 08 call 0x8a31219
f: e9 4a ff ff ff jmp 0xffffff5e
14: e8 50 c1 b0 ff call 0xffb0c169
19: 9c pushf
1a: 58 pop %rax
1b: f6 c4 02 test $0x2,%ah
1e: 0f 85 a8 00 00 00 jne 0xcc
24: fb sti
25: 4d 85 e4 test %r12,%r12
* 28: 0f 85 74 ff ff ff jne 0xffffffa2 <-- trapping instruction
2e: 48 8b 04 24 mov (%rsp),%rax
32: 48 c7 40 08 00 00 00 movq $0x0,0x8(%rax)
39: 00
3a: 48 rex.W
3b: c7 .byte 0xc7