tmpfs: Unknown parameter '܏wN>l\ a_gqK0i(2p2?1SGb$Ք gZ!03𭔢R' watchdog: BUG: soft lockup - CPU#1 stuck for 24s! [syz-executor.5:4176] Modules linked in: irq event stamp: 5203959 hardirqs last enabled at (5203958): [] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635 hardirqs last disabled at (5203959): [] sysvec_apic_timer_interrupt+0xb/0xa0 arch/x86/kernel/apic/apic.c:1106 softirqs last enabled at (175064): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (175067): [] asm_call_irq_on_stack+0x12/0x20 CPU: 1 PID: 4176 Comm: syz-executor.5 Not tainted 5.10.228 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:ip6t_do_table+0x9ed/0x1340 net/ipv6/netfilter/ip6_tables.c:335 Code: 00 0f 85 1b 09 00 00 4d 8b 6c 24 08 4d 85 ed 0f 84 30 05 00 00 e8 23 55 c6 fd 49 8d 7d 30 48 89 f8 48 c1 e8 03 42 80 3c 38 00 <0f> 85 d1 08 00 00 49 83 7d 30 00 0f 84 28 02 00 00 e8 fd 54 c6 fd RSP: 0018:ffff88806cf096f8 EFLAGS: 00000246 RAX: 1ffffffff0acfec6 RBX: ffff88801f376040 RCX: ffffffff837a6890 RDX: ffff888045dd3480 RSI: ffffffff837a695d RDI: ffffffff8567f630 RBP: ffff88801f3760f0 R08: 0000000000000001 R09: ffffffff8686a6e7 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801f3760e8 R13: ffffffff8567f600 R14: 0000000000021faa R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d522000 CR3: 0000000044340000 CR4: 0000000000350ee0 Call Trace: ip6table_mangle_hook+0x104/0x7b0 net/ipv6/netfilter/ip6table_mangle.c:75 nf_hook_entry_hookfn include/linux/netfilter.h:136 [inline] nf_hook_slow+0xc8/0x1e0 net/netfilter/core.c:584 nf_hook_slow_list+0x17b/0x3a0 net/netfilter/core.c:622 NF_HOOK_LIST.constprop.0+0x1b0/0x3a0 include/linux/netfilter.h:332 ip6_sublist_rcv net/ipv6/ip6_input.c:309 [inline] ipv6_list_rcv+0x2b9/0x3c0 net/ipv6/ip6_input.c:346 __netif_receive_skb_list_ptype net/core/dev.c:5422 [inline] __netif_receive_skb_list_core+0x4ca/0x8e0 net/core/dev.c:5470 __netif_receive_skb_list net/core/dev.c:5522 [inline] netif_receive_skb_list_internal+0x6ca/0xcd0 net/core/dev.c:5632 netif_receive_skb_list+0x54/0x370 net/core/dev.c:5684 ieee80211_rx_napi+0x35a/0x3c0 net/mac80211/rx.c:4871 ieee80211_rx include/net/mac80211.h:4502 [inline] ieee80211_tasklet_handler+0xd3/0x130 net/mac80211/main.c:235 tasklet_action_common.constprop.0+0x244/0x2f0 kernel/softirq.c:560 __do_softirq+0x1b8/0x7c9 kernel/softirq.c:298 asm_call_irq_on_stack+0x12/0x20 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:393 [inline] __irq_exit_rcu kernel/softirq.c:423 [inline] irq_exit_rcu+0x114/0x1b0 kernel/softirq.c:435 sysvec_apic_timer_interrupt+0x43/0xa0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635 RIP: 0010:kasan_mem_to_shadow include/linux/kasan.h:34 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:135 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:165 [inline] RIP: 0010:check_memory_region_inline mm/kasan/generic.c:183 [inline] RIP: 0010:check_memory_region+0x46/0x1f0 mm/kasan/generic.c:192 Code: 00 e9 c0 00 00 00 48 b8 00 00 00 00 00 00 00 ff 48 39 f8 0f 87 c0 00 00 00 49 83 e9 01 48 89 fd 48 b8 00 00 00 00 00 fc ff df <4d> 89 ca 48 c1 ed 03 49 c1 ea 03 48 01 c5 49 01 c2 48 89 e8 49 8d RSP: 0018:ffff88801f20f740 EFLAGS: 00000282 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8160080c RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea000110a8b0 RBP: ffffea000110a8b0 R08: 0000000000000000 R09: ffffea000110a8b3 R10: 0000000000000000 R11: 0000000000000001 R12: ffffea000110a8b0 R13: ffff88800c7858c8 R14: dffffc0000000000 R15: 00007feb88d1a000 instrument_atomic_read include/linux/instrumented.h:71 [inline] atomic_read include/asm-generic/atomic-instrumented.h:27 [inline] page_mapcount include/linux/mm.h:837 [inline] zap_pte_range mm/memory.c:1288 [inline] zap_pmd_range mm/memory.c:1404 [inline] zap_pud_range mm/memory.c:1433 [inline] zap_p4d_range mm/memory.c:1454 [inline] unmap_page_range+0x13ac/0x1fe0 mm/memory.c:1475 unmap_single_vma+0x198/0x300 mm/memory.c:1520 unmap_vmas+0x16d/0x300 mm/memory.c:1552 exit_mmap+0x27f/0x4f0 mm/mmap.c:3235 __mmput kernel/fork.c:1101 [inline] mmput+0xca/0x340 kernel/fork.c:1122 exit_mm kernel/exit.c:536 [inline] do_exit+0xa96/0x2600 kernel/exit.c:847 do_group_exit+0x125/0x310 kernel/exit.c:982 get_signal+0x4bc/0x2350 kernel/signal.c:2762 arch_do_signal_or_restart+0x2b7/0x1990 arch/x86/kernel/signal.c:805 handle_signal_work kernel/entry/common.c:145 [inline] exit_to_user_mode_loop kernel/entry/common.c:169 [inline] exit_to_user_mode_prepare+0x10f/0x190 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x38/0x1d0 kernel/entry/common.c:274 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7feb8ae11b19 Code: Unable to access opcode bytes at RIP 0x7feb8ae11aef. RSP: 002b:00007feb88387218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 00007feb8af24f68 RCX: 00007feb8ae11b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb8af24f68 RBP: 00007feb8af24f60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb8af24f6c R13: 00007ffd1fe8e54f R14: 00007feb88387300 R15: 0000000000022000 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:60 [inline] NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:103 [inline] NMI backtrace for cpu 0 skipped: idling at default_idle+0xe/0x20 arch/x86/kernel/process.c:706 ---------------- Code disassembly (best guess): 0: 00 0f add %cl,(%rdi) 2: 85 1b test %ebx,(%rbx) 4: 09 00 or %eax,(%rax) 6: 00 4d 8b add %cl,-0x75(%rbp) 9: 6c insb (%dx),%es:(%rdi) a: 24 08 and $0x8,%al c: 4d 85 ed test %r13,%r13 f: 0f 84 30 05 00 00 je 0x545 15: e8 23 55 c6 fd callq 0xfdc6553d 1a: 49 8d 7d 30 lea 0x30(%r13),%rdi 1e: 48 89 f8 mov %rdi,%rax 21: 48 c1 e8 03 shr $0x3,%rax 25: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) * 2a: 0f 85 d1 08 00 00 jne 0x901 <-- trapping instruction 30: 49 83 7d 30 00 cmpq $0x0,0x30(%r13) 35: 0f 84 28 02 00 00 je 0x263 3b: e8 fd 54 c6 fd callq 0xfdc6553d