program: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_a, @device_b, @random="576e17fe77ff", {0x1, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x800, 0x5e, @random=0x9c, @val={0x1, 0x7, [{0x12, 0x1}, {0x3e0367dd8c773520, 0x1}, {0x24}, {0x4}, {0xc, 0x1}, {0x18}, {0x60}]}, @void, [{0xdd, 0xa3, "acc00bc8fae18f52c3217a8b9c84df055193c7ddfdf4437f392da9989d81905e9ec31fbd996a26fbf1f378010267660ea77aa6288fcc77fa504ff677375265539bb77a7c20683a87b5446e1231d2e7138745da0d6f619d84416b14264a11d99ad5443e7686413d856f2d5f46884ee004fbcecb5085b84e5581a9d78e8db09ed87ed00829d5787f3f2c15d7c92c5c53c837f1261f65d327d1e9ab7f01250fe5b6c4e921"}, {0xdd, 0x3f, "0596c43f34c0ef1d53b1f5f7a638f00f6daa2265475441a7a9a972e00c5a4411725148b9caf3d2bbd561b2c793af89afcb4ef066206a6b48a6e8475b68c792"}, {0xdd, 0x2f, "8f1296d57f4e193e9d21036a07511544ba8da474bef0ef3360c7d7a6ba3575d72f020f4f9386b1a0fe63470122f30c"}, {0xdd, 0xca, "fb46d87e86891e01038fb027237ecd232b659381b98d0b22e72894d4a3e6ddc9f3989b7d91528452eb3261246e0338443e73fc1814427071638cbe97b403d727bbfc89f9334ef28dda1791eda013c88dd9e56e0022feb5188ec0d2fba96a8cc53bd3a6bc0ae9932efe00aa04a25ed9c1c1e7d431652d5eefdaf98ffffc61c958b3352226ba07f31ef30f842d970004cdea0cfa3fc9fee1573a5e92f43ee4f6d0387711f9ed5fb882235a3c637cb860055ca2a5eb7c406ee359972ce84695f857fac33d566b22459cdfb2"}, {0xdd, 0x49, "fe2c0ae1db09769060cdb6b2d6df9134023135675e986c85548888222299532cd5bdeeb5fc94b6a4addc79f44deedaefe2d90c84d8eccecf7862ad1325a0ca082568d91e2abf81ea38"}]}, 0x259) (async) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_a, @device_b, @random="576e17fe77ff", {0x1, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x800, 0x5e, @random=0x9c, @val={0x1, 0x7, [{0x12, 0x1}, {0x3e0367dd8c773520, 0x1}, {0x24}, {0x4}, {0xc, 0x1}, {0x18}, {0x60}]}, @void, [{0xdd, 0xa3, "acc00bc8fae18f52c3217a8b9c84df055193c7ddfdf4437f392da9989d81905e9ec31fbd996a26fbf1f378010267660ea77aa6288fcc77fa504ff677375265539bb77a7c20683a87b5446e1231d2e7138745da0d6f619d84416b14264a11d99ad5443e7686413d856f2d5f46884ee004fbcecb5085b84e5581a9d78e8db09ed87ed00829d5787f3f2c15d7c92c5c53c837f1261f65d327d1e9ab7f01250fe5b6c4e921"}, {0xdd, 0x3f, "0596c43f34c0ef1d53b1f5f7a638f00f6daa2265475441a7a9a972e00c5a4411725148b9caf3d2bbd561b2c793af89afcb4ef066206a6b48a6e8475b68c792"}, {0xdd, 0x2f, "8f1296d57f4e193e9d21036a07511544ba8da474bef0ef3360c7d7a6ba3575d72f020f4f9386b1a0fe63470122f30c"}, {0xdd, 0xca, "fb46d87e86891e01038fb027237ecd232b659381b98d0b22e72894d4a3e6ddc9f3989b7d91528452eb3261246e0338443e73fc1814427071638cbe97b403d727bbfc89f9334ef28dda1791eda013c88dd9e56e0022feb5188ec0d2fba96a8cc53bd3a6bc0ae9932efe00aa04a25ed9c1c1e7d431652d5eefdaf98ffffc61c958b3352226ba07f31ef30f842d970004cdea0cfa3fc9fee1573a5e92f43ee4f6d0387711f9ed5fb882235a3c637cb860055ca2a5eb7c406ee359972ce84695f857fac33d566b22459cdfb2"}, {0xdd, 0x49, "fe2c0ae1db09769060cdb6b2d6df9134023135675e986c85548888222299532cd5bdeeb5fc94b6a4addc79f44deedaefe2d90c84d8eccecf7862ad1325a0ca082568d91e2abf81ea38"}]}, 0x259) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000700)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f}, @device_b, @device_b, @random="05c63e3b0dca", {0x1}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x200, 0x58, @default, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x4, 0x0, {0x9, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x8, 0xd}}, [{0xdd, 0x4c, "a2146bbc45853f889aaaab0b06ebef2d554aef993ddae428f84265f5577beb1e7b4c2ec1123207fd4e3a0543f7a43e60168de9d4395e612c379ba4005793c230823ff65c9dd46b19f98c8944"}, {0xdd, 0xde, "693293bc848296aecd61183d504a272022b873cae1e7d39171e4e9f63686a76e3bdea7d803b044cc4e54365137cdf0fd19db244a7c5c517ad2725920978cd607f21d86e54a1bff2f5339fd6cd7b9f7208c6be3a9fd6afdceded465519d62bbcc5f4f044f6cb8b23b253838ec4335104e7cf57248652a9216cd5eda6135f4de3b582dcf27e4bd5012367a6644fe623540d28eb7d1e09fbc493a06724d29bd7ed0db91162b847dadb6e992bf231e671ab87122e9eb709c2d0c0df1ca5e05434dda9812c1087b40721c3f8c6895b80646b4ed0eac844d2c3118c91ec97bdc07"}, {0xdd, 0x22, "d6fe7088fd75aebf5e5496a8e8e2207ecff9e6800021a4f6248e96673eadffe4751e"}, {0xdd, 0x6, "53856a46046d"}, {0xdd, 0x94, "04c636e946936313cab0fe96809be9b6ad75aa4095ed7b3aff662ed39ff2cb3d4b1c17589c26f18b33ae2761ba2a249cc0757c89376f1d275aa03b4c784b570dc14046da75bff6d3d134fab5c846de9d127253e2c32b7997272a30962c081c6b39ad60acfa5ec22fd770662072568faded107f70aca6d3787c8ff1b08eb8b65dddc13ae73afef092bdec77ed8dba656295019463"}, {0xdd, 0xf7, "97b4e5980b398c64ca488240cb6db9519fada99862f81b58a19fb956fb56e6d266b4bfb32935440d4d871de5e0ed6bec6324f5aaa65ccad7da1f53302e7a45edfcabc5db73df3ca3f94f50785ad1199c872dad2195e880fb2ca61a8f46061590ac4816a1f4afbd87cfcba1f9e1db632eb3db2015f10f74503d2e59102683836d473bc2f2648cd717d4d429c1d801a71f83384ea134169696099d61a9012cd68452b76b4acb6111bde6cc42b472e5d5438940542cc49001bebd77f3d3035ef855a4a0324c3805126efec0cae61ec4abfe0b080c1326cdb2af8ba6175538afaba38e7e2ca6b8583f478cc6c934c9ed09f84e4beee812481a"}, {0xdd, 0x96, "fa47203256fe20e6f7eae4c446b286ee00e53d61f9f7da76894ae9a99c47312a98869038256b8dc4e5e284a62e2ca71e942c9f608078e8331399145f292249a6b4ed0cc4aabcfe999f5befa5bf0018acae0b020f19023737b138299c9dba73d5e167a4de4ec75271bf6d44b4509ab49ec8047bb6a2429db939e100f9f20a6267de62015c1bd64bf26888aaaa16ba052a3d059573afb5"}]}, 0x3bf) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_80211_inject_frame(&(0x7f0000000200), &(0x7f0000000240)=@ctrl_frame=@pspoll={{}, @default, @random="02c384aedd1a", @broadcast}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000140)='oom_score_adj\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000001800)={0xffff, 0x6, 0xa, @multicast, 'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "93d7"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x82, 0x3, &(0x7f0000000200)='\x00\x00\x00') (async) syz_usb_ep_write(r4, 0x82, 0x3, &(0x7f0000000200)='\x00\x00\x00') syz_usb_ep_write(r4, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") (async) syz_usb_ep_write(r4, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") syz_usb_ep_write(r4, 0x81, 0xb, &(0x7f0000000140)="0b00020002000000010001") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/greybus/devices/1-svc/watchdog_action\x00', 0x2, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/greybus/devices/1-svc/watchdog_action\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='reset\n', 0x6) (async) write(r5, &(0x7f0000000300)='reset\n', 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)="653aa3c2184ee1c5b6170607265d8155c6ae6d7967728e75702f6d796576656e582073", 0x23) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) [ 94.328634][ T4647] Bluetooth: hci0: command tx timeout [ 94.513582][ T5315] loop0: detected capacity change from 0 to 8192 [ 94.515917][ T5315] ======================================================= [ 94.515917][ T5315] WARNING: The mand mount option has been deprecated and [ 94.515917][ T5315] and is ignored by this kernel. Remove the mand [ 94.515917][ T5315] option from the mount to silence this warning. [ 94.515917][ T5315] ======================================================= [ 94.555014][ T5315] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.599922][ T5315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.606543][ T5316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.625699][ T5315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.628405][ T5315] xt_TCPMSS: Only works on TCP SYN packets [ 94.637229][ T5316] xt_TCPMSS: Only works on TCP SYN packets [ 94.717476][ T5316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.009445][ T1365] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.160238][ T1365] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 95.162028][ T1365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 95.162047][ T1365] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 95.164224][ T1365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.164239][ T1365] usb 5-1: Product: syz [ 95.164246][ T1365] usb 5-1: Manufacturer: syz [ 95.164282][ T1365] usb 5-1: SerialNumber: syz [ 95.203047][ T5315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.407882][ T1365] usb 5-1: Limiting number of CPorts to U8_MAX [ 96.012057][ C0] usb 5-1: invalid arpc response id received: 0 [ 96.211768][ T43] greybus 1-svc: unexpected request 0x01 received (state 1) [ 96.211900][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 96.211996][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 96.398846][ T4647] Bluetooth: hci0: command tx timeout [ 96.417268][ T77] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 96.417362][ T77] ------------[ cut here ]------------ [ 96.417429][ T77] ODEBUG: free active (active state 0) object: ffff888051a686f0 object type: timer_list hint: gb_operation_timeout+0x0/0x110 [ 96.417613][ T77] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: kworker/u4:5/77 [ 96.434433][ T77] Modules linked in: [ 96.436336][ T77] CPU: 0 UID: 0 PID: 77 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full) [ 96.440459][ T77] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.444884][ T77] Workqueue: greybus1:svc gb_svc_process_deferred_request [ 96.448102][ T77] RIP: 0010:debug_print_object+0x18a/0x230 [ 96.450924][ T77] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 4d af 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 33 d0 8c 0c 48 83 c4 10 5b 41 5c [ 96.459306][ T77] RSP: 0018:ffffc90000e677e0 EFLAGS: 00010246 [ 96.461964][ T77] RAX: 1ffffffff181f08c RBX: dffffc0000000000 RCX: 0000000000000000 [ 96.465447][ T77] RDX: ffffffff8c6df440 RSI: ffffffff8c6deec0 RDI: ffffffff9185bb80 [ 96.468998][ T77] RBP: ffffffff8c6df440 R08: ffff888051a686f0 R09: ffffffff8c0f97c0 [ 96.472537][ T77] R10: dffffc0000000000 R11: ffffffff81b3f620 R12: 0000000000000000 [ 96.475928][ T77] R13: ffffffff9185bb80 R14: ffff888051a686f0 R15: ffffffff8c0f8460 [ 96.479860][ T77] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 96.484020][ T77] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.487066][ T77] CR2: 00007fe02e3f3f98 CR3: 0000000040cb8000 CR4: 0000000000352ef0 [ 96.490572][ T77] Call Trace: [ 96.492210][ T77] [ 96.493604][ T77] ? __pfx_gb_operation_timeout+0x10/0x10 [ 96.496217][ T77] ? __pfx_gb_operation_timeout+0x10/0x10 [ 96.498848][ T77] debug_check_no_obj_freed+0x2e3/0x450 [ 96.501441][ T77] ? gb_operation_sync_timeout+0x1c7/0x270 [ 96.504147][ T77] kmem_cache_free+0xfd/0x650 [ 96.506445][ T77] gb_operation_sync_timeout+0x1c7/0x270 [ 96.509401][ T77] gb_svc_process_deferred_request+0x5f3/0x1150 [ 96.512103][ T77] ? __pfx_gb_svc_process_deferred_request+0x10/0x10 [ 96.514919][ T77] ? rcu_is_watching+0x16/0xb0 [ 96.517027][ T77] ? process_scheduled_works+0x97a/0x1630 [ 96.519626][ T77] process_scheduled_works+0xc3d/0x1630 [ 96.521999][ T77] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.524524][ T77] ? assign_work+0x3cf/0x5d0 [ 96.526490][ T77] worker_thread+0xa47/0xfb0 [ 96.528604][ T77] ? __kthread_parkme+0x71/0x1f0 [ 96.530816][ T77] kthread+0x38b/0x480 [ 96.532608][ T77] ? __pfx_worker_thread+0x10/0x10 [ 96.534895][ T77] ? __pfx_kthread+0x10/0x10 [ 96.536915][ T77] ret_from_fork+0x514/0xb70 [ 96.538838][ T77] ? __pfx_ret_from_fork+0x10/0x10 [ 96.540935][ T77] ? __switch_to+0xc89/0x1420 [ 96.542922][ T77] ? __pfx_kthread+0x10/0x10 [ 96.544859][ T77] ret_from_fork_asm+0x1a/0x30 [ 96.546928][ T77] [ 96.548291][ T77] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.551208][ T77] CPU: 0 UID: 0 PID: 77 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full) [ 96.555075][ T77] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.559384][ T77] Workqueue: greybus1:svc gb_svc_process_deferred_request [ 96.562572][ T77] Call Trace: [ 96.564027][ T77] [ 96.565414][ T77] vpanic+0x56d/0xa60 [ 96.567324][ T77] ? __pfx__printk+0x10/0x10 [ 96.569446][ T77] ? __pfx_vpanic+0x10/0x10 [ 96.571519][ T77] ? is_bpf_text_address+0x292/0x2b0 [ 96.573915][ T77] ? is_bpf_text_address+0x26/0x2b0 [ 96.576335][ T77] panic+0xc5/0xd0 [ 96.578072][ T77] ? __pfx_panic+0x10/0x10 [ 96.580077][ T77] ? ret_from_fork_asm+0x1a/0x30 [ 96.582257][ T77] __warn+0x315/0x4c0 [ 96.583999][ T77] ? debug_print_object+0xec/0x230 [ 96.586238][ T77] ? debug_print_object+0xec/0x230 [ 96.588528][ T77] __report_bug+0x276/0x570 [ 96.590776][ T77] ? debug_print_object+0xec/0x230 [ 96.592916][ T77] ? __pfx___report_bug+0x10/0x10 [ 96.594922][ T77] ? __lock_acquire+0x747/0x2de0 [ 96.596762][ T77] ? process_scheduled_works+0xc3d/0x1630 [ 96.598758][ T77] ? worker_thread+0xa47/0xfb0 [ 96.600466][ T77] ? kthread+0x38b/0x480 [ 96.602030][ T77] report_bug_entry+0x19b/0x290 [ 96.603910][ T77] ? debug_print_object+0x18a/0x230 [ 96.606108][ T77] ? debug_print_object+0x18f/0x230 [ 96.608211][ T77] handle_bug+0xce/0x200 [ 96.610185][ T77] exc_invalid_op+0x1a/0x50 [ 96.611882][ T77] asm_exc_invalid_op+0x1a/0x20 [ 96.613940][ T77] RIP: 0010:debug_print_object+0x18a/0x230 [ 96.616603][ T77] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 4d af 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 33 d0 8c 0c 48 83 c4 10 5b 41 5c [ 96.625210][ T77] RSP: 0018:ffffc90000e677e0 EFLAGS: 00010246 [ 96.627931][ T77] RAX: 1ffffffff181f08c RBX: dffffc0000000000 RCX: 0000000000000000 [ 96.631528][ T77] RDX: ffffffff8c6df440 RSI: ffffffff8c6deec0 RDI: ffffffff9185bb80 [ 96.634975][ T77] RBP: ffffffff8c6df440 R08: ffff888051a686f0 R09: ffffffff8c0f97c0 [ 96.638390][ T77] R10: dffffc0000000000 R11: ffffffff81b3f620 R12: 0000000000000000 [ 96.641539][ T77] R13: ffffffff9185bb80 R14: ffff888051a686f0 R15: ffffffff8c0f8460 [ 96.644593][ T77] ? __pfx_timer_debug_hint+0x10/0x10 [ 96.647347][ T77] ? __pfx_gb_operation_timeout+0x10/0x10 [ 96.649660][ T77] ? __pfx_gb_operation_timeout+0x10/0x10 [ 96.652156][ T77] debug_check_no_obj_freed+0x2e3/0x450 [ 96.654686][ T77] ? gb_operation_sync_timeout+0x1c7/0x270 [ 96.657317][ T77] kmem_cache_free+0xfd/0x650 [ 96.659453][ T77] gb_operation_sync_timeout+0x1c7/0x270 [ 96.662042][ T77] gb_svc_process_deferred_request+0x5f3/0x1150 [ 96.664855][ T77] ? __pfx_gb_svc_process_deferred_request+0x10/0x10 [ 96.667831][ T77] ? rcu_is_watching+0x16/0xb0 [ 96.669962][ T77] ? process_scheduled_works+0x97a/0x1630 [ 96.672538][ T77] process_scheduled_works+0xc3d/0x1630 [ 96.674979][ T77] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.677602][ T77] ? assign_work+0x3cf/0x5d0 [ 96.679624][ T77] worker_thread+0xa47/0xfb0 [ 96.681662][ T77] ? __kthread_parkme+0x71/0x1f0 [ 96.683672][ T77] kthread+0x38b/0x480 [ 96.685530][ T77] ? __pfx_worker_thread+0x10/0x10 [ 96.687754][ T77] ? __pfx_kthread+0x10/0x10 [ 96.689664][ T77] ret_from_fork+0x514/0xb70 [ 96.691678][ T77] ? __pfx_ret_from_fork+0x10/0x10 [ 96.693966][ T77] ? __switch_to+0xc89/0x1420 [ 96.696130][ T77] ? __pfx_kthread+0x10/0x10 [ 96.698174][ T77] ret_from_fork_asm+0x1a/0x30 [ 96.700340][ T77] [ 96.702166][ T77] Kernel Offset: disabled [ 96.704101][ T77] Rebooting in 86400 seconds..