------------[ cut here ]------------ NETDEV WATCHDOG: bnep0 (): transmit queue 0 timed out WARNING: CPU: 1 PID: 5160 at net/sched/sch_generic.c:478 dev_watchdog+0x89c/0xb4c net/sched/sch_generic.c:477 Modules linked in: CPU: 1 PID: 5160 Comm: syz.7.256 Not tainted 5.15.178-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : dev_watchdog+0x89c/0xb4c net/sched/sch_generic.c:477 lr : dev_watchdog+0x89c/0xb4c net/sched/sch_generic.c:477 sp : ffff800008017ab0 x29: ffff800008017b00 x28: ffffffffffffff56 x27: ffff0000c2b50000 x26: 0000000000000002 x25: 0000000000000000 x24: 0000000000000000 x23: ffff0000c2b50440 x22: ffff0000c2b50540 x21: dfff800000000000 x20: 00000000ffffb00e x19: ffff800016fd0000 x18: 0000000000000102 x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff x14: ffff0000d7a93680 x13: 0000000000000001 x12: 0000000000000001 x11: 0000000000000101 x10: 0000000000000000 x9 : 0ff1c194e1222b00 x8 : 0ff1c194e1222b00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800008017218 x4 : ffff800014c50660 x3 : ffff8000085568c0 x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000035 Call trace: dev_watchdog+0x89c/0xb4c net/sched/sch_generic.c:477 call_timer_fn+0x19c/0x8f0 kernel/time/timer.c:1451 expire_timers kernel/time/timer.c:1496 [inline] __run_timers+0x554/0x718 kernel/time/timer.c:1767 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1780 handle_softirqs+0x384/0xdbc kernel/softirq.c:558 __do_softirq kernel/softirq.c:592 [inline] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] invoke_softirq kernel/softirq.c:439 [inline] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641 irq_exit+0x14/0x88 kernel/softirq.c:665 handle_domain_irq+0xf4/0x178 kernel/irq/irqdesc.c:711 gic_handle_irq+0x78/0x1c8 drivers/irqchip/irq-gic-v3.c:765 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:899 do_interrupt_handler+0x74/0x94 arch/arm64/kernel/entry-common.c:267 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:454 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:470 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:522 __memset+0xcc/0x1c0 arch/arm64/lib/memset.S:123 __kasan_poison_pages+0x48/0x58 mm/kasan/common.c:120 kasan_poison_pages include/linux/kasan.h:156 [inline] free_pages_prepare mm/page_alloc.c:1368 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x358/0xe30 mm/page_alloc.c:3317 free_unref_page+0x78/0x204 mm/page_alloc.c:3396 free_the_page mm/page_alloc.c:705 [inline] __free_pages+0x180/0x1d4 mm/page_alloc.c:5541 __free_slab+0x180/0x394 mm/slub.c:2000 free_slab mm/slub.c:2015 [inline] discard_slab+0x68/0xe0 mm/slub.c:2021 __unfreeze_partials+0x158/0x198 mm/slub.c:2507 put_cpu_partial+0x1a8/0x218 mm/slub.c:2587 __slab_free+0x178/0x248 mm/slub.c:3368 do_slab_free mm/slub.c:3487 [inline] ___cache_free+0x170/0x1b8 mm/slub.c:3506 qlink_free+0x5c/0xac mm/kasan/quarantine.c:157 qlist_free_all+0x40/0xa8 mm/kasan/quarantine.c:176 kasan_quarantine_reduce+0x124/0x130 mm/kasan/quarantine.c:283 __kasan_slab_alloc+0x34/0xcc mm/kasan/common.c:444 kasan_slab_alloc include/linux/kasan.h:254 [inline] slab_post_alloc_hook+0x74/0x3f4 mm/slab.h:519 slab_alloc_node mm/slub.c:3220 [inline] slab_alloc mm/slub.c:3228 [inline] kmem_cache_alloc+0x1dc/0x45c mm/slub.c:3233 ptlock_alloc mm/memory.c:5554 [inline] ptlock_init include/linux/mm.h:2230 [inline] pgtable_pte_page_ctor include/linux/mm.h:2257 [inline] __pte_alloc_one include/asm-generic/pgalloc.h:66 [inline] pte_alloc_one+0x78/0x258 include/asm-generic/pgalloc.h:85 __pte_alloc+0x84/0x2c4 mm/memory.c:439 do_anonymous_page mm/memory.c:3804 [inline] handle_pte_fault mm/memory.c:4646 [inline] __handle_mm_fault mm/memory.c:4783 [inline] handle_mm_fault+0x2ca8/0x33a8 mm/memory.c:4881 __do_page_fault arch/arm64/mm/fault.c:505 [inline] do_page_fault+0x700/0xb60 arch/arm64/mm/fault.c:605 do_translation_fault+0xe8/0x138 arch/arm64/mm/fault.c:686 do_mem_abort+0x70/0x1d8 arch/arm64/mm/fault.c:819 el0_da+0x94/0x20c arch/arm64/kernel/entry-common.c:494 el0t_64_sync_handler+0xc0/0xe4 arch/arm64/kernel/entry-common.c:629 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 24173 hardirqs last enabled at (24172): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (24173): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (22240): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31 softirqs last disabled at (24079): [] __do_softirq kernel/softirq.c:592 [inline] softirqs last disabled at (24079): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (24079): [] invoke_softirq kernel/softirq.c:439 [inline] softirqs last disabled at (24079): [] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641 ---[ end trace a7f9e696de1e0f4d ]---