last executing test programs: 3.708315095s ago: executing program 3 (id=4): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_evm(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), &(0x7f0000000480)=@v2={0x5, 0x1, 0x3, 0x31d}, 0x9, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 3.450491652s ago: executing program 3 (id=5): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) 3.301362956s ago: executing program 1 (id=2): r0 = inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x90, 0x0) write$FUSE_ENTRY(r3, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x3, {0x4, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x4919}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 2.931130035s ago: executing program 1 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, r2, 0x4}) 2.257253832s ago: executing program 1 (id=9): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="600e0f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.95001693s ago: executing program 2 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000c80)={0x40, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x885}, 0x0) 1.880870362s ago: executing program 0 (id=13): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1.783288584s ago: executing program 2 (id=14): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000540)="857ec1", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)='0', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000f80)="f1", 0x1}], 0x1}}], 0x5, 0x40480c0) 1.689409797s ago: executing program 0 (id=15): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000cc0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x2, 0xd74, 0x67, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x79}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x9, 0x0, 0x1, 0x2, 0x0, 0xca}, 0x2, {0xe, 0x0, 0x1, 0x12, 0x1, 0x0, 0x1, 0x1}}}}}}}}}, 0x0) 1.438376563s ago: executing program 2 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="000300"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) socket$nl_netfilter(0x10, 0x3, 0xc) 1.352424725s ago: executing program 0 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@random="c5bb36c76521", @random="fad1e0480100", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x39, 0x58, 0x64, 0x0, 0xa4, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0xa, 0x1, 0x16, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x1, {0x10da0}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x8, 0x1, 0x1, 0x2, 0x1, 0xff}, 0x2, {0x6, 0x7, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 1.19047435s ago: executing program 2 (id=18): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xf7b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc2}}) 1.088471982s ago: executing program 0 (id=19): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 818.538889ms ago: executing program 3 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 446.992638ms ago: executing program 3 (id=21): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380), &(0x7f0000000480)=0x8) 437.987918ms ago: executing program 2 (id=22): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x48, 0x3e, 0x9, 0x9, 0xa0, 0x84, 0x4, 0x0, 0x3, 0x2, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r1, 0x2, 0x7eb, 0x5, 0x2, 0x9, 0x55ca, 0xc, {r1, @in6={{0xa, 0x4e22, 0x7, @empty, 0x7}}, 0x8a42, 0x5, 0x7, 0xfffffffa}}, &(0x7f0000000300)=0xb0) 386.33988ms ago: executing program 0 (id=23): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x163042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x4}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000340)=0x1) write$ppp(r0, &(0x7f0000000500)="1e088c", 0x3) 127.372506ms ago: executing program 2 (id=24): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000280)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1c4) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 113.431967ms ago: executing program 3 (id=25): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24044005) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x2, 0x3) 0s ago: executing program 0 (id=26): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004110}, 0x8004) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 75.118719][ T5768] cgroup: Unknown subsys name 'net' [ 75.249438][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.975202][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.595644][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.612859][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.641297][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.650652][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.659105][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.663668][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.667476][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.674859][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.681384][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.689214][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.695746][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.702460][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.709686][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.716127][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.722630][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.733378][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.737788][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.745158][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.753957][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.759113][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.765395][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.773271][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.787458][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.802703][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.278530][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.338720][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 79.376004][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 79.440420][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 79.516972][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.527213][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.534648][ T5782] bridge_slave_0: entered allmulticast mode [ 79.541615][ T5782] bridge_slave_0: entered promiscuous mode [ 79.552103][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.559278][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.566903][ T5782] bridge_slave_1: entered allmulticast mode [ 79.574412][ T5782] bridge_slave_1: entered promiscuous mode [ 79.680320][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.687637][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.695405][ T5779] bridge_slave_0: entered allmulticast mode [ 79.702597][ T5779] bridge_slave_0: entered promiscuous mode [ 79.713752][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.726556][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.750506][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.758140][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.765698][ T5780] bridge_slave_0: entered allmulticast mode [ 79.773316][ T5780] bridge_slave_0: entered promiscuous mode [ 79.780971][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.788383][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.795830][ T5780] bridge_slave_1: entered allmulticast mode [ 79.803422][ T5780] bridge_slave_1: entered promiscuous mode [ 79.810635][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.818045][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.826173][ T5779] bridge_slave_1: entered allmulticast mode [ 79.833728][ T5779] bridge_slave_1: entered promiscuous mode [ 79.903324][ T5782] team0: Port device team_slave_0 added [ 79.912696][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.922232][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.929369][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.938544][ T5781] bridge_slave_0: entered allmulticast mode [ 79.946001][ T5781] bridge_slave_0: entered promiscuous mode [ 79.967855][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.979876][ T5782] team0: Port device team_slave_1 added [ 79.988830][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.996325][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.003787][ T5781] bridge_slave_1: entered allmulticast mode [ 80.010605][ T5781] bridge_slave_1: entered promiscuous mode [ 80.019540][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.071122][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.094027][ T5779] team0: Port device team_slave_0 added [ 80.123997][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.134342][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.141413][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.168214][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.183681][ T5779] team0: Port device team_slave_1 added [ 80.201084][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.211498][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.221131][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.250125][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.283342][ T5780] team0: Port device team_slave_0 added [ 80.328486][ T5780] team0: Port device team_slave_1 added [ 80.347835][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.354958][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.381297][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.435119][ T5781] team0: Port device team_slave_0 added [ 80.441736][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.449171][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.476188][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.492391][ T5782] hsr_slave_0: entered promiscuous mode [ 80.498732][ T5782] hsr_slave_1: entered promiscuous mode [ 80.509618][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.516641][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.543196][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.556888][ T5781] team0: Port device team_slave_1 added [ 80.572523][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.579538][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.606173][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.683646][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.690634][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.717507][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.735318][ T5779] hsr_slave_0: entered promiscuous mode [ 80.742268][ T5779] hsr_slave_1: entered promiscuous mode [ 80.748582][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.757014][ T5779] Cannot create hsr debugfs directory [ 80.775845][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.782928][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.809285][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.823431][ T5786] Bluetooth: hci3: command tx timeout [ 80.877843][ T5780] hsr_slave_0: entered promiscuous mode [ 80.887428][ T5780] hsr_slave_1: entered promiscuous mode [ 80.893165][ T5786] Bluetooth: hci1: command tx timeout [ 80.898828][ T5786] Bluetooth: hci2: command tx timeout [ 80.902254][ T51] Bluetooth: hci0: command tx timeout [ 80.910689][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.918394][ T5780] Cannot create hsr debugfs directory [ 81.057600][ T5781] hsr_slave_0: entered promiscuous mode [ 81.065256][ T5781] hsr_slave_1: entered promiscuous mode [ 81.071752][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.079897][ T5781] Cannot create hsr debugfs directory [ 81.368338][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.397351][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.415704][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.427584][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.487401][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.509645][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.540559][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.568170][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.618325][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.636467][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.649503][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.672983][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.754330][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.767096][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.788588][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.801332][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.870948][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.927035][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.967466][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.978846][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.986346][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.028900][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.036422][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.074642][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.091396][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.116776][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.124247][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.138534][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.145913][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.181096][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.205826][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.213358][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.239481][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.246769][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.340420][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.447156][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.483992][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.491280][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.556804][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.564089][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.876743][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.892582][ T5784] Bluetooth: hci3: command tx timeout [ 82.910513][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.972189][ T5784] Bluetooth: hci0: command tx timeout [ 82.973873][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.977648][ T5784] Bluetooth: hci2: command tx timeout [ 82.991977][ T51] Bluetooth: hci1: command tx timeout [ 83.120066][ T5779] veth0_vlan: entered promiscuous mode [ 83.140014][ T5779] veth1_vlan: entered promiscuous mode [ 83.185224][ T5782] veth0_vlan: entered promiscuous mode [ 83.202907][ T5780] veth0_vlan: entered promiscuous mode [ 83.214233][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.233839][ T5779] veth0_macvtap: entered promiscuous mode [ 83.244971][ T5779] veth1_macvtap: entered promiscuous mode [ 83.262502][ T5782] veth1_vlan: entered promiscuous mode [ 83.271857][ T5780] veth1_vlan: entered promiscuous mode [ 83.311744][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.352859][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.366670][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.376865][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.386332][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395756][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.435499][ T5782] veth0_macvtap: entered promiscuous mode [ 83.481202][ T5782] veth1_macvtap: entered promiscuous mode [ 83.489352][ T5781] veth0_vlan: entered promiscuous mode [ 83.499784][ T5780] veth0_macvtap: entered promiscuous mode [ 83.541680][ T5780] veth1_macvtap: entered promiscuous mode [ 83.579090][ T5781] veth1_vlan: entered promiscuous mode [ 83.596276][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.608283][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.624464][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.636640][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.648516][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.659257][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.670018][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.686182][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.723565][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.736693][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.739564][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.745017][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.764350][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.777670][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.794077][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.804277][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.815113][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.826233][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.861845][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.873741][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.882759][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.891588][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.907936][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.918013][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.926988][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.935773][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.967094][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.976471][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.072971][ T5781] veth0_macvtap: entered promiscuous mode [ 84.123416][ T5781] veth1_macvtap: entered promiscuous mode [ 84.135686][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.170204][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.286354][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.298418][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.316983][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.347314][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.357694][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.368660][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.384585][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.398296][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.416378][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.447684][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.482052][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.493602][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.505357][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.515456][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.526045][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.538086][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.569004][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.611988][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.621476][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.641950][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657242][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.679559][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.740326][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.765043][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.822615][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.861846][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.878705][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.972204][ T5784] Bluetooth: hci3: command tx timeout [ 85.009803][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.023548][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 85.043396][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.052280][ T51] Bluetooth: hci0: command tx timeout [ 85.053750][ T5786] Bluetooth: hci1: command tx timeout [ 85.057778][ T5784] Bluetooth: hci2: command tx timeout [ 85.073764][ T5823] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 85.089140][ T5823] usb 4-1: config 0 has no interface number 0 [ 85.102654][ T5823] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 85.116087][ T5823] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.127788][ T5823] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 85.141204][ T5823] usb 4-1: config 0 interface 196 has no altsetting 0 [ 85.153769][ T5823] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 85.154087][ T5854] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 85.167877][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.172476][ T5856] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.190167][ T5823] usb 4-1: Product: syz [ 85.213313][ T5823] usb 4-1: Manufacturer: syz [ 85.218195][ T5823] usb 4-1: SerialNumber: syz [ 85.261173][ T5823] usb 4-1: config 0 descriptor?? [ 85.293068][ T5847] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.382168][ T5861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.016256][ T5823] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 86.034108][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.078427][ T5823] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 86.239681][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 86.259803][ T5825] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 86.311992][ T5825] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 86.331659][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.373761][ T5825] usb 2-1: probing VID:PID(0424:012C) [ 86.412630][ T5825] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 86.429642][ T5825] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 86.436354][ T5850] usb 4-1: USB disconnect, device number 2 [ 86.483155][ T5825] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 86.503436][ T5825] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 86.525964][ T5825] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 86.597245][ T5850] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 86.688247][ T5891] Illegal XDP return value 737029881 on prog (id 3) dev syz_tun, expect packet loss! [ 86.789267][ T5894] syz.2.18[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.816245][ T5825] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 86.860243][ T5894] loop2: detected capacity change from 0 to 512 [ 87.028034][ T5825] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 87.052400][ T5784] Bluetooth: hci3: command tx timeout [ 87.116090][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.132221][ T5784] Bluetooth: hci2: command tx timeout [ 87.132302][ T5786] Bluetooth: hci0: command tx timeout [ 87.143716][ T5784] Bluetooth: hci1: command tx timeout [ 87.162564][ T5894] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.356436][ T5894] EXT4-fs (loop2): shut down requested (2) [ 87.482790][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.880436][ T5825] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 87.953982][ T5825] usb 2-1: USB disconnect, device number 2 [ 87.960346][ T5923] loop2: detected capacity change from 0 to 1024 [ 87.986708][ T5825] USB vub300 remote SDIO host controller[0] now disconnected [ 88.092388][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 88.109362][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27, name: kworker/1:1 [ 88.118492][ C1] preempt_count: 100, expected: 0 [ 88.123611][ C1] RCU nest depth: 1, expected: 0 [ 88.128698][ C1] 4 locks held by kworker/1:1/27: [ 88.133921][ C1] #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 88.147375][ C1] #1: ffffc90000a2fd00 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 88.160807][ C1] #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: gc_worker+0x266/0x14a0 [ 88.170007][ C1] #3: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 88.180699][ C1] Preemption disabled at: [ 88.180716][ C1] [] handle_softirqs+0x101/0x820 [ 88.191703][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted syzkaller #0 [ 88.199021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.209177][ C1] Workqueue: events_power_efficient gc_worker [ 88.215274][ C1] Call Trace: [ 88.218564][ C1] [ 88.221511][ C1] dump_stack_lvl+0x18c/0x250 [ 88.226208][ C1] ? show_regs_print_info+0x20/0x20 [ 88.231423][ C1] ? load_image+0x420/0x420 [ 88.235942][ C1] ? handle_softirqs+0x101/0x820 [ 88.240975][ C1] __might_resched+0x48d/0x5f0 [ 88.246024][ C1] ? handle_softirqs+0x101/0x820 [ 88.250974][ C1] ? __might_sleep+0xe0/0xe0 [ 88.255585][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 88.261488][ C1] ? _raw_spin_unlock+0x40/0x40 [ 88.266358][ C1] ? kasan_set_track+0x5f/0x70 [ 88.271231][ C1] ? kasan_save_free_info+0x28/0x40 [ 88.276443][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 88.281741][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 88.287400][ C1] __flush_work+0x10f/0xac0 [ 88.291934][ C1] ? flush_work+0x20/0x20 [ 88.296310][ C1] ? __timer_delete+0x6b/0x290 [ 88.301100][ C1] ? mark_lock+0x94/0x320 [ 88.305444][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 88.311701][ C1] ? mod_delayed_work_on+0x1c0/0x1c0 [ 88.317086][ C1] ? lock_chain_count+0x20/0x20 [ 88.322040][ C1] ? __cancel_work_timer+0x36e/0x560 [ 88.327513][ C1] __cancel_work_timer+0x3f8/0x560 [ 88.332641][ C1] ? cancel_work_sync+0x20/0x20 [ 88.337501][ C1] ? kobject_put+0x260/0x450 [ 88.342118][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 88.347185][ C1] ? kobject_put+0x421/0x450 [ 88.351799][ C1] mmc_free_host+0x19/0x30 [ 88.356232][ C1] call_timer_fn+0x189/0x540 [ 88.361092][ C1] ? kref_get+0x70/0x70 [ 88.365255][ C1] ? call_timer_fn+0xd2/0x540 [ 88.369941][ C1] ? __run_timers+0x810/0x810 [ 88.374634][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.379947][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 88.385267][ C1] ? kref_get+0x70/0x70 [ 88.389471][ C1] __run_timers+0x570/0x810 [ 88.394006][ C1] ? detach_timer+0x2b0/0x2b0 [ 88.398701][ C1] ? lock_chain_count+0x20/0x20 [ 88.403657][ C1] run_timer_softirq+0x67/0xf0 [ 88.408439][ C1] handle_softirqs+0x27d/0x820 [ 88.413362][ C1] ? read_tsc+0x9/0x20 [ 88.417447][ C1] ? ktime_get+0x24b/0x280 [ 88.421881][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 88.426668][ C1] ? do_softirq+0x1a0/0x1a0 [ 88.431279][ C1] __irq_exit_rcu+0xd3/0x190 [ 88.435919][ C1] ? irq_exit_rcu+0x20/0x20 [ 88.440633][ C1] irq_exit_rcu+0x9/0x20 [ 88.445058][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 88.450708][ C1] [ 88.453646][ C1] [ 88.456588][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.462586][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 88.467888][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 88.487522][ C1] RSP: 0018:ffffc90000a2f940 EFLAGS: 00000206 [ 88.493606][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6798e017a4da7700 [ 88.501590][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 88.509812][ C1] RBP: ffffc90000a2fa48 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 88.517796][ C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000145f34 [ 88.525786][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 88.533793][ C1] ? __might_sleep+0xe0/0xe0 [ 88.538402][ C1] ? read_lock_is_recursive+0x20/0x20 [ 88.543804][ C1] gc_worker+0x28a/0x14a0 [ 88.548144][ C1] ? gc_worker+0x266/0x14a0 [ 88.552671][ C1] ? gc_worker+0x266/0x14a0 [ 88.557184][ C1] ? init_conntrack+0xe20/0xe20 [ 88.562046][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.567257][ C1] ? process_scheduled_works+0x975/0x1600 [ 88.573000][ C1] ? process_scheduled_works+0x975/0x1600 [ 88.578850][ C1] process_scheduled_works+0xa60/0x1600 [ 88.584440][ C1] ? worker_attach_to_pool+0x370/0x370 [ 88.589934][ C1] ? assign_work+0x3cc/0x5d0 [ 88.594543][ C1] worker_thread+0xa5e/0xfe0 [ 88.599169][ C1] kthread+0x2fa/0x390 [ 88.603253][ C1] ? pr_cont_work+0x550/0x550 [ 88.607948][ C1] ? kthread_blkcg+0xd0/0xd0 [ 88.612547][ C1] ret_from_fork+0x48/0x80 [ 88.616978][ C1] ? kthread_blkcg+0xd0/0xd0 [ 88.621585][ C1] ret_from_fork_asm+0x11/0x20 [ 88.626378][ C1] [ 88.629645][ C1] [ 88.632038][ C1] ============================= [ 88.637181][ C1] WARNING: suspicious RCU usage [ 88.641263][ T5923] ======================================================= [ 88.641263][ T5923] WARNING: The mand mount option has been deprecated and [ 88.641263][ T5923] and is ignored by this kernel. Remove the mand [ 88.641263][ T5923] option from the mount to silence this warning. [ 88.641263][ T5923] ======================================================= [ 88.642130][ C1] syzkaller #0 Tainted: G W [ 88.642165][ C1] ----------------------------- [ 88.642173][ C1] kernel/rcu/srcutree.c:1377 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 88.642188][ C1] [ 88.642188][ C1] other info that might help us debug this: [ 88.642188][ C1] [ 88.642196][ C1] [ 88.642196][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 88.642211][ C1] 4 locks held by kworker/1:1/27: [ 88.724997][ C1] #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 88.737652][ C1] #1: ffffc90000a2fd00 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 88.750673][ C1] #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: gc_worker+0x266/0x14a0 [ 88.759858][ C1] #3: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 88.770416][ C1] [ 88.770416][ C1] stack backtrace: [ 88.776449][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Tainted: G W syzkaller #0 [ 88.785236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.795391][ C1] Workqueue: events_power_efficient gc_worker [ 88.801480][ C1] Call Trace: [ 88.804768][ C1] [ 88.807627][ C1] dump_stack_lvl+0x18c/0x250 [ 88.812339][ C1] ? show_regs_print_info+0x20/0x20 [ 88.817563][ C1] ? load_image+0x420/0x420 [ 88.822098][ C1] lockdep_rcu_suspicious+0x1e1/0x300 [ 88.827547][ C1] __synchronize_srcu+0x150/0x3d0 [ 88.832775][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 88.838683][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 88.844416][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 88.850320][ C1] ? _raw_spin_unlock+0x40/0x40 [ 88.855182][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 88.861100][ C1] ? read_tsc+0x9/0x20 [ 88.865355][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 88.871003][ C1] ? synchronize_srcu+0x25a/0x280 [ 88.876070][ C1] wakeup_source_unregister+0x116/0x190 [ 88.881631][ C1] mmc_host_classdev_release+0x47/0x100 [ 88.887209][ C1] ? mmc_free_host+0x30/0x30 [ 88.891813][ C1] device_release+0xbc/0x1e0 [ 88.896438][ C1] kobject_put+0x21b/0x450 [ 88.900965][ C1] call_timer_fn+0x189/0x540 [ 88.905569][ C1] ? kref_get+0x70/0x70 [ 88.909753][ C1] ? call_timer_fn+0xd2/0x540 [ 88.914449][ C1] ? __run_timers+0x810/0x810 [ 88.919231][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.924452][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 88.929759][ C1] ? kref_get+0x70/0x70 [ 88.933930][ C1] __run_timers+0x570/0x810 [ 88.938452][ C1] ? detach_timer+0x2b0/0x2b0 [ 88.943153][ C1] ? lock_chain_count+0x20/0x20 [ 88.948022][ C1] run_timer_softirq+0x67/0xf0 [ 88.952885][ C1] handle_softirqs+0x27d/0x820 [ 88.957655][ C1] ? read_tsc+0x9/0x20 [ 88.961731][ C1] ? ktime_get+0x24b/0x280 [ 88.966248][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 88.971025][ C1] ? do_softirq+0x1a0/0x1a0 [ 88.975560][ C1] __irq_exit_rcu+0xd3/0x190 [ 88.980246][ C1] ? irq_exit_rcu+0x20/0x20 [ 88.984858][ C1] irq_exit_rcu+0x9/0x20 [ 88.989112][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 88.994780][ C1] [ 88.997720][ C1] [ 89.000682][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.006756][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 89.012261][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 89.032004][ C1] RSP: 0018:ffffc90000a2f940 EFLAGS: 00000206 [ 89.038089][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6798e017a4da7700 [ 89.046250][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 89.054340][ C1] RBP: ffffc90000a2fa48 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 89.062422][ C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000145f34 [ 89.070404][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 89.078414][ C1] ? __might_sleep+0xe0/0xe0 [ 89.083122][ C1] ? read_lock_is_recursive+0x20/0x20 [ 89.088524][ C1] gc_worker+0x28a/0x14a0 [ 89.092871][ C1] ? gc_worker+0x266/0x14a0 [ 89.097397][ C1] ? gc_worker+0x266/0x14a0 [ 89.101921][ C1] ? init_conntrack+0xe20/0xe20 [ 89.106821][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.112057][ C1] ? process_scheduled_works+0x975/0x1600 [ 89.117805][ C1] ? process_scheduled_works+0x975/0x1600 [ 89.123734][ C1] process_scheduled_works+0xa60/0x1600 [ 89.129324][ C1] ? worker_attach_to_pool+0x370/0x370 [ 89.134812][ C1] ? assign_work+0x3cc/0x5d0 [ 89.139514][ C1] worker_thread+0xa5e/0xfe0 [ 89.144140][ C1] kthread+0x2fa/0x390 [ 89.148338][ C1] ? pr_cont_work+0x550/0x550 [ 89.153030][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.157728][ C1] ret_from_fork+0x48/0x80 [ 89.162260][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.166861][ C1] ret_from_fork_asm+0x11/0x20 [ 89.171736][ C1] [ 89.174813][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 89.184170][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27, name: kworker/1:1 [ 89.193192][ C1] preempt_count: 100, expected: 0 [ 89.198277][ C1] RCU nest depth: 1, expected: 0 [ 89.203273][ C1] 4 locks held by kworker/1:1/27: [ 89.208325][ C1] #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 89.221387][ C1] #1: ffffc90000a2fd00 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 89.234470][ C1] #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: gc_worker+0x266/0x14a0 [ 89.243873][ C1] #3: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 89.254531][ C1] Preemption disabled at: [ 89.254546][ C1] [] handle_softirqs+0x101/0x820 [ 89.265477][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Tainted: G W syzkaller #0 [ 89.274314][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.284420][ C1] Workqueue: events_power_efficient gc_worker [ 89.290725][ C1] Call Trace: [ 89.294046][ C1] [ 89.297054][ C1] dump_stack_lvl+0x18c/0x250 [ 89.301789][ C1] ? show_regs_print_info+0x20/0x20 [ 89.307052][ C1] ? load_image+0x420/0x420 [ 89.311659][ C1] ? handle_softirqs+0x101/0x820 [ 89.316678][ C1] __might_resched+0x48d/0x5f0 [ 89.321493][ C1] ? show_regs_print_info+0x20/0x20 [ 89.326823][ C1] ? handle_softirqs+0x101/0x820 [ 89.331776][ C1] ? __might_sleep+0xe0/0xe0 [ 89.336478][ C1] __synchronize_srcu+0x197/0x3d0 [ 89.341516][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 89.347504][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 89.353340][ C1] ? read_tsc+0x9/0x20 [ 89.357430][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 89.362990][ C1] ? synchronize_srcu+0x25a/0x280 [ 89.368039][ C1] wakeup_source_unregister+0x116/0x190 [ 89.373606][ C1] mmc_host_classdev_release+0x47/0x100 [ 89.379182][ C1] ? mmc_free_host+0x30/0x30 [ 89.384244][ C1] device_release+0xbc/0x1e0 [ 89.388850][ C1] kobject_put+0x21b/0x450 [ 89.393290][ C1] call_timer_fn+0x189/0x540 [ 89.397889][ C1] ? kref_get+0x70/0x70 [ 89.402058][ C1] ? call_timer_fn+0xd2/0x540 [ 89.406744][ C1] ? __run_timers+0x810/0x810 [ 89.411436][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.416720][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 89.422077][ C1] ? kref_get+0x70/0x70 [ 89.426254][ C1] __run_timers+0x570/0x810 [ 89.430779][ C1] ? detach_timer+0x2b0/0x2b0 [ 89.435478][ C1] ? lock_chain_count+0x20/0x20 [ 89.440448][ C1] run_timer_softirq+0x67/0xf0 [ 89.445233][ C1] handle_softirqs+0x27d/0x820 [ 89.450003][ C1] ? read_tsc+0x9/0x20 [ 89.454342][ C1] ? ktime_get+0x24b/0x280 [ 89.458949][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 89.463732][ C1] ? do_softirq+0x1a0/0x1a0 [ 89.468261][ C1] __irq_exit_rcu+0xd3/0x190 [ 89.472860][ C1] ? irq_exit_rcu+0x20/0x20 [ 89.477640][ C1] irq_exit_rcu+0x9/0x20 [ 89.482008][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 89.487660][ C1] [ 89.490619][ C1] [ 89.493559][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.499548][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 89.504871][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 89.524582][ C1] RSP: 0018:ffffc90000a2f940 EFLAGS: 00000206 [ 89.530668][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6798e017a4da7700 [ 89.538655][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 89.546723][ C1] RBP: ffffc90000a2fa48 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 89.554711][ C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000145f34 [ 89.562694][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 89.570784][ C1] ? __might_sleep+0xe0/0xe0 [ 89.575400][ C1] ? read_lock_is_recursive+0x20/0x20 [ 89.580881][ C1] gc_worker+0x28a/0x14a0 [ 89.585225][ C1] ? gc_worker+0x266/0x14a0 [ 89.589750][ C1] ? gc_worker+0x266/0x14a0 [ 89.594273][ C1] ? init_conntrack+0xe20/0xe20 [ 89.599227][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.604437][ C1] ? process_scheduled_works+0x975/0x1600 [ 89.610171][ C1] ? process_scheduled_works+0x975/0x1600 [ 89.615911][ C1] process_scheduled_works+0xa60/0x1600 [ 89.621493][ C1] ? worker_attach_to_pool+0x370/0x370 [ 89.626984][ C1] ? assign_work+0x3cc/0x5d0 [ 89.631767][ C1] worker_thread+0xa5e/0xfe0 [ 89.636393][ C1] kthread+0x2fa/0x390 [ 89.640558][ C1] ? pr_cont_work+0x550/0x550 [ 89.645249][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.650023][ C1] ret_from_fork+0x48/0x80 [ 89.654543][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.659160][ C1] ret_from_fork_asm+0x11/0x20 [ 89.663946][ C1] [ 89.667019][ C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc90000a28000, but annotated. [ 89.668078][ C1] [ 89.668084][ C1] ====================================================== [ 89.668089][ C1] WARNING: possible circular locking dependency detected [ 89.668096][ C1] syzkaller #0 Tainted: G W [ 89.668106][ C1] ------------------------------------------------------ [ 89.668111][ C1] kworker/1:1/27 is trying to acquire lock: [ 89.668120][ C1] ffffffff8d1260a0 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 89.668178][ C1] [ 89.668178][ C1] but task is already holding lock: [ 89.668182][ C1] ffffffff97510368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 89.668226][ C1] [ 89.668226][ C1] which lock already depends on the new lock. [ 89.668226][ C1] [ 89.668231][ C1] [ 89.668231][ C1] the existing dependency chain (in reverse order) is: [ 89.668235][ C1] [ 89.668235][ C1] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 89.668256][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 89.668272][ C1] debug_object_activate+0x6c/0x500 [ 89.668288][ C1] insert_work+0x35/0x310 [ 89.668306][ C1] __queue_work+0xbfd/0xfd0 [ 89.668318][ C1] queue_work_on+0x128/0x1f0 [ 89.668331][ C1] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 89.668354][ C1] rcu_init+0x10d/0x160 [ 89.668371][ C1] start_kernel+0x1fd/0x4e0 [ 89.668387][ C1] x86_64_start_reservations+0x2a/0x30 [ 89.668408][ C1] copy_bootdata+0x0/0xd0 [ 89.668429][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 89.668451][ C1] [ 89.668451][ C1] -> #3 (&pool->lock){-.-.}-{2:2}: [ 89.668473][ C1] _raw_spin_lock+0x2e/0x40 [ 89.668486][ C1] __queue_work+0x72f/0xfd0 [ 89.668500][ C1] queue_work_on+0x128/0x1f0 [ 89.668514][ C1] rpm_suspend+0x1133/0x1b60 [ 89.668534][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 89.668555][ C1] __device_attach+0x352/0x420 [ 89.668578][ C1] bus_probe_device+0x180/0x260 [ 89.668595][ C1] device_add+0x87c/0xc40 [ 89.668611][ C1] serial_base_port_add+0x2f6/0x430 [ 89.668628][ C1] serial_core_register_port+0x378/0x20b0 [ 89.668651][ C1] serial8250_register_8250_port+0x15fd/0x1f40 [ 89.668669][ C1] serial_pnp_probe+0x577/0x750 [ 89.668687][ C1] pnp_device_probe+0x305/0x4b0 [ 89.668705][ C1] really_probe+0x247/0xae0 [ 89.668719][ C1] __driver_probe_device+0x1f5/0x390 [ 89.668742][ C1] driver_probe_device+0x4f/0x420 [ 89.668756][ C1] __driver_attach+0x444/0x6d0 [ 89.668779][ C1] bus_for_each_dev+0x235/0x2b0 [ 89.668799][ C1] bus_add_driver+0x340/0x630 [ 89.668820][ C1] driver_register+0x23a/0x310 [ 89.668832][ C1] serial8250_init+0x9a/0x170 [ 89.668845][ C1] do_one_initcall+0x242/0x790 [ 89.668864][ C1] do_initcall_level+0x13d/0x1f0 [ 89.668878][ C1] do_initcalls+0x69/0xd0 [ 89.668892][ C1] kernel_init_freeable+0x3d9/0x560 [ 89.668906][ C1] kernel_init+0x1d/0x1c0 [ 89.668919][ C1] ret_from_fork+0x48/0x80 [ 89.668937][ C1] ret_from_fork_asm+0x11/0x20 [ 89.668955][ C1] [ 89.668955][ C1] -> #2 (&dev->power.lock){-...}-{2:2}: [ 89.668978][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 89.668992][ C1] __pm_runtime_resume+0x10f/0x170 [ 89.669011][ C1] __uart_start+0x171/0x3e0 [ 89.669024][ C1] uart_write+0x449/0x5d0 [ 89.669037][ C1] n_tty_write+0xd3d/0x11e0 [ 89.669055][ C1] file_tty_write+0x529/0x960 [ 89.669070][ C1] vfs_write+0x474/0x9a0 [ 89.669088][ C1] ksys_write+0x151/0x260 [ 89.669107][ C1] do_syscall_64+0x55/0xb0 [ 89.669122][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.669140][ C1] [ 89.669140][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 89.669170][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 89.669182][ C1] serial8250_console_write+0x181/0x18b0 [ 89.669201][ C1] console_flush_all+0x6ad/0xcf0 [ 89.669220][ C1] console_unlock+0xad/0x350 [ 89.669235][ C1] vprintk_emit+0x497/0x610 [ 89.669252][ C1] _printk+0xde/0x130 [ 89.669264][ C1] register_console+0xb96/0xf00 [ 89.669282][ C1] univ8250_console_init+0x45/0x50 [ 89.669305][ C1] console_init+0x17b/0x5d0 [ 89.669319][ C1] start_kernel+0x2c8/0x4e0 [ 89.669333][ C1] x86_64_start_reservations+0x2a/0x30 [ 89.669354][ C1] copy_bootdata+0x0/0xd0 [ 89.669373][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 89.669392][ C1] [ 89.669392][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 89.669413][ C1] __lock_acquire+0x37ef/0x7d80 [ 89.669431][ C1] lock_acquire+0x19e/0x420 [ 89.669449][ C1] console_flush_all+0x676/0xcf0 [ 89.669469][ C1] console_unlock+0xad/0x350 [ 89.669484][ C1] vprintk_emit+0x497/0x610 [ 89.669501][ C1] _printk+0xde/0x130 [ 89.669512][ C1] __debug_object_init+0x18d/0x450 [ 89.669531][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 89.669549][ C1] wakeup_source_unregister+0x116/0x190 [ 89.669562][ C1] mmc_host_classdev_release+0x47/0x100 [ 89.669583][ C1] device_release+0xbc/0x1e0 [ 89.669600][ C1] kobject_put+0x21b/0x450 [ 89.669618][ C1] call_timer_fn+0x189/0x540 [ 89.669633][ C1] __run_timers+0x570/0x810 [ 89.669645][ C1] run_timer_softirq+0x67/0xf0 [ 89.669659][ C1] handle_softirqs+0x27d/0x820 [ 89.669673][ C1] __irq_exit_rcu+0xd3/0x190 [ 89.669688][ C1] irq_exit_rcu+0x9/0x20 [ 89.669702][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 89.669722][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.669741][ C1] lock_acquire+0x208/0x420 [ 89.669757][ C1] gc_worker+0x28a/0x14a0 [ 89.669776][ C1] process_scheduled_works+0xa60/0x1600 [ 89.669796][ C1] worker_thread+0xa5e/0xfe0 [ 89.669815][ C1] kthread+0x2fa/0x390 [ 89.669828][ C1] ret_from_fork+0x48/0x80 [ 89.669846][ C1] ret_from_fork_asm+0x11/0x20 [ 89.669866][ C1] [ 89.669866][ C1] other info that might help us debug this: [ 89.669866][ C1] [ 89.669871][ C1] Chain exists of: [ 89.669871][ C1] console_owner --> &pool->lock --> &obj_hash[i].lock [ 89.669871][ C1] [ 89.669898][ C1] Possible unsafe locking scenario: [ 89.669898][ C1] [ 89.669903][ C1] CPU0 CPU1 [ 89.669907][ C1] ---- ---- [ 89.669911][ C1] lock(&obj_hash[i].lock); [ 89.669921][ C1] lock(&pool->lock); [ 89.669933][ C1] lock(&obj_hash[i].lock); [ 89.669945][ C1] lock(console_owner); [ 89.669955][ C1] [ 89.669955][ C1] *** DEADLOCK *** [ 89.669955][ C1] [ 89.669959][ C1] 7 locks held by kworker/1:1/27: [ 89.669970][ C1] #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 89.670017][ C1] #1: ffffc90000a2fd00 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 89.670062][ C1] #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: gc_worker+0x266/0x14a0 [ 89.670104][ C1] #3: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 89.670142][ C1] #4: ffffffff97510368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 89.670193][ C1] #5: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 89.670230][ C1] #6: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 89.670274][ C1] [ 89.670274][ C1] stack backtrace: [ 89.670280][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Tainted: G W syzkaller #0 [ 89.670298][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.670308][ C1] Workqueue: events_power_efficient gc_worker [ 89.670329][ C1] Call Trace: [ 89.670336][ C1] [ 89.670343][ C1] dump_stack_lvl+0x18c/0x250 [ 89.670364][ C1] ? load_image+0x420/0x420 [ 89.670381][ C1] ? show_regs_print_info+0x20/0x20 [ 89.670404][ C1] ? print_circular_bug+0x12b/0x1a0 [ 89.670429][ C1] check_noncircular+0x2fc/0x400 [ 89.670454][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 89.670474][ C1] ? lockdep_lock+0xf5/0x230 [ 89.670499][ C1] __lock_acquire+0x37ef/0x7d80 [ 89.670531][ C1] ? verify_lock_unused+0x140/0x140 [ 89.670561][ C1] lock_acquire+0x19e/0x420 [ 89.670580][ C1] ? console_flush_all+0x10b/0xcf0 [ 89.670603][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 89.670622][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 89.670645][ C1] ? read_lock_is_recursive+0x20/0x20 [ 89.670664][ C1] ? __rwlock_init+0x150/0x150 [ 89.670687][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 89.670712][ C1] console_flush_all+0x676/0xcf0 [ 89.670733][ C1] ? console_flush_all+0x10b/0xcf0 [ 89.670755][ C1] ? console_flush_all+0x10b/0xcf0 [ 89.670781][ C1] ? is_console_locked+0x20/0x20 [ 89.670807][ C1] console_unlock+0xad/0x350 [ 89.670827][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 89.670854][ C1] vprintk_emit+0x497/0x610 [ 89.670875][ C1] ? printk_sprint+0x460/0x460 [ 89.670899][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 89.670924][ C1] _printk+0xde/0x130 [ 89.670942][ C1] ? load_image+0x420/0x420 [ 89.670957][ C1] ? alloc_object+0x1c/0x640 [ 89.670982][ C1] __debug_object_init+0x18d/0x450 [ 89.671006][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 89.671029][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 89.671048][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 89.671075][ C1] ? read_tsc+0x9/0x20 [ 89.671093][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 89.671115][ C1] ? synchronize_srcu+0x25a/0x280 [ 89.671138][ C1] wakeup_source_unregister+0x116/0x190 [ 89.671165][ C1] mmc_host_classdev_release+0x47/0x100 [ 89.671189][ C1] ? mmc_free_host+0x30/0x30 [ 89.671211][ C1] device_release+0xbc/0x1e0 [ 89.671234][ C1] kobject_put+0x21b/0x450 [ 89.671261][ C1] call_timer_fn+0x189/0x540 [ 89.671279][ C1] ? kref_get+0x70/0x70 [ 89.671302][ C1] ? call_timer_fn+0xd2/0x540 [ 89.671320][ C1] ? __run_timers+0x810/0x810 [ 89.671341][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.671358][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 89.671381][ C1] ? kref_get+0x70/0x70 [ 89.671405][ C1] __run_timers+0x570/0x810 [ 89.671429][ C1] ? detach_timer+0x2b0/0x2b0 [ 89.671449][ C1] ? lock_chain_count+0x20/0x20 [ 89.671472][ C1] run_timer_softirq+0x67/0xf0 [ 89.671490][ C1] handle_softirqs+0x27d/0x820 [ 89.671507][ C1] ? read_tsc+0x9/0x20 [ 89.671525][ C1] ? ktime_get+0x24b/0x280 [ 89.671547][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 89.671567][ C1] ? do_softirq+0x1a0/0x1a0 [ 89.671589][ C1] __irq_exit_rcu+0xd3/0x190 [ 89.671606][ C1] ? irq_exit_rcu+0x20/0x20 [ 89.671626][ C1] irq_exit_rcu+0x9/0x20 [ 89.671643][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 89.671666][ C1] [ 89.671671][ C1] [ 89.671677][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.671698][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 89.671720][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 89.671735][ C1] RSP: 0018:ffffc90000a2f940 EFLAGS: 00000206 [ 89.671750][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6798e017a4da7700 [ 89.671762][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 89.671774][ C1] RBP: ffffc90000a2fa48 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 89.671786][ C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000145f34 [ 89.671799][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 89.671822][ C1] ? __might_sleep+0xe0/0xe0 [ 89.671843][ C1] ? read_lock_is_recursive+0x20/0x20 [ 89.671873][ C1] gc_worker+0x28a/0x14a0 [ 89.671890][ C1] ? gc_worker+0x266/0x14a0 [ 89.671913][ C1] ? gc_worker+0x266/0x14a0 [ 89.671933][ C1] ? init_conntrack+0xe20/0xe20 [ 89.671952][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.671969][ C1] ? process_scheduled_works+0x975/0x1600 [ 89.671991][ C1] ? process_scheduled_works+0x975/0x1600 [ 89.672014][ C1] process_scheduled_works+0xa60/0x1600 [ 89.672047][ C1] ? worker_attach_to_pool+0x370/0x370 [ 89.672072][ C1] ? assign_work+0x3cc/0x5d0 [ 89.672096][ C1] worker_thread+0xa5e/0xfe0 [ 89.672126][ C1] kthread+0x2fa/0x390 [ 89.672141][ C1] ? pr_cont_work+0x550/0x550 [ 89.672167][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.672182][ C1] ret_from_fork+0x48/0x80 [ 89.672199][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.672212][ C1] ret_from_fork_asm+0x11/0x20 [ 89.672240][ C1] [ 90.937985][ C1] ------------[ cut here ]------------ [ 90.943458][ C1] WARNING: CPU: 1 PID: 27 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 90.952853][ C1] Modules linked in: [ 90.956755][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Tainted: G W syzkaller #0 [ 90.965538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.975708][ C1] Workqueue: events_power_efficient gc_worker [ 90.981806][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 90.987802][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 7f 11 26 13 48 c7 c1 00 3c 1d 8b 48 c7 c7 60 3c 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 a3 5e 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 91.007501][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 91.013688][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 6798e017a4da7700 [ 91.021668][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 91.029651][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 91.037638][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff88801ce43c20 [ 91.045617][ C1] R13: ffff88805dc79310 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 91.053691][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 91.062775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.069375][ C1] CR2: 00007fe4437a9000 CR3: 000000002eae6000 CR4: 00000000003506e0 [ 91.077350][ C1] Call Trace: [ 91.080639][ C1] [ 91.083489][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 91.088545][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 91.094475][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 91.100204][ C1] ? read_tsc+0x9/0x20 [ 91.104308][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 91.110040][ C1] ? synchronize_srcu+0x25a/0x280 [ 91.115098][ C1] wakeup_source_unregister+0x116/0x190 [ 91.120686][ C1] mmc_host_classdev_release+0x47/0x100 [ 91.126303][ C1] ? mmc_free_host+0x30/0x30 [ 91.130913][ C1] device_release+0xbc/0x1e0 [ 91.135613][ C1] kobject_put+0x21b/0x450 [ 91.140331][ C1] call_timer_fn+0x189/0x540 [ 91.144930][ C1] ? kref_get+0x70/0x70 [ 91.149109][ C1] ? call_timer_fn+0xd2/0x540 [ 91.153790][ C1] ? __run_timers+0x810/0x810 [ 91.158564][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.163779][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 91.169032][ C1] ? kref_get+0x70/0x70 [ 91.173243][ C1] __run_timers+0x570/0x810 [ 91.177760][ C1] ? detach_timer+0x2b0/0x2b0 [ 91.182448][ C1] ? lock_chain_count+0x20/0x20 [ 91.187318][ C1] run_timer_softirq+0x67/0xf0 [ 91.192090][ C1] handle_softirqs+0x27d/0x820 [ 91.196868][ C1] ? read_tsc+0x9/0x20 [ 91.200946][ C1] ? ktime_get+0x24b/0x280 [ 91.205368][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 91.210147][ C1] ? do_softirq+0x1a0/0x1a0 [ 91.214662][ C1] __irq_exit_rcu+0xd3/0x190 [ 91.219262][ C1] ? irq_exit_rcu+0x20/0x20 [ 91.223783][ C1] irq_exit_rcu+0x9/0x20 [ 91.228033][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 91.233686][ C1] [ 91.236712][ C1] [ 91.239668][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.245682][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 91.251156][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 91.270773][ C1] RSP: 0018:ffffc90000a2f940 EFLAGS: 00000206 [ 91.276851][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6798e017a4da7700 [ 91.284831][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 91.292809][ C1] RBP: ffffc90000a2fa48 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 91.300859][ C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000145f34 [ 91.308837][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 91.316836][ C1] ? __might_sleep+0xe0/0xe0 [ 91.321436][ C1] ? read_lock_is_recursive+0x20/0x20 [ 91.326819][ C1] gc_worker+0x28a/0x14a0 [ 91.331246][ C1] ? gc_worker+0x266/0x14a0 [ 91.335865][ C1] ? gc_worker+0x266/0x14a0 [ 91.340460][ C1] ? init_conntrack+0xe20/0xe20 [ 91.345576][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.350785][ C1] ? process_scheduled_works+0x975/0x1600 [ 91.356525][ C1] ? process_scheduled_works+0x975/0x1600 [ 91.362251][ C1] process_scheduled_works+0xa60/0x1600 [ 91.367814][ C1] ? worker_attach_to_pool+0x370/0x370 [ 91.373354][ C1] ? assign_work+0x3cc/0x5d0 [ 91.377952][ C1] worker_thread+0xa5e/0xfe0 [ 91.382606][ C1] kthread+0x2fa/0x390 [ 91.386683][ C1] ? pr_cont_work+0x550/0x550 [ 91.391364][ C1] ? kthread_blkcg+0xd0/0xd0 [ 91.395957][ C1] ret_from_fork+0x48/0x80 [ 91.400376][ C1] ? kthread_blkcg+0xd0/0xd0 [ 91.404969][ C1] ret_from_fork_asm+0x11/0x20 [ 91.409774][ C1] [ 91.412806][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.420094][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Tainted: G W syzkaller #0 [ 91.428858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.439028][ C1] Workqueue: events_power_efficient gc_worker [ 91.445114][ C1] Call Trace: [ 91.448398][ C1] [ 91.451244][ C1] dump_stack_lvl+0x18c/0x250 [ 91.455935][ C1] ? show_regs_print_info+0x20/0x20 [ 91.461175][ C1] ? load_image+0x420/0x420 [ 91.465695][ C1] panic+0x2ca/0x720 [ 91.469782][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 91.474384][ C1] ? ret_from_fork_asm+0x11/0x20 [ 91.479331][ C1] __warn+0x2e0/0x470 [ 91.483342][ C1] ? __debug_object_init+0x18d/0x450 [ 91.488632][ C1] ? __debug_object_init+0x18d/0x450 [ 91.493919][ C1] report_bug+0x2be/0x4f0 [ 91.498254][ C1] ? __debug_object_init+0x18d/0x450 [ 91.503744][ C1] ? __debug_object_init+0x18d/0x450 [ 91.509044][ C1] ? __debug_object_init+0x18f/0x450 [ 91.514350][ C1] handle_bug+0xcf/0x120 [ 91.518604][ C1] exc_invalid_op+0x1a/0x50 [ 91.523174][ C1] asm_exc_invalid_op+0x1a/0x20 [ 91.528053][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 91.533962][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 7f 11 26 13 48 c7 c1 00 3c 1d 8b 48 c7 c7 60 3c 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 a3 5e 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 91.553662][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 91.559821][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 6798e017a4da7700 [ 91.567811][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 91.575799][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 91.583774][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff88801ce43c20 [ 91.591923][ C1] R13: ffff88805dc79310 R14: 0000000000000001 R15: ffffffff8acbdf00 [ 91.600077][ C1] ? __debug_object_init+0x18d/0x450 [ 91.605638][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 91.610756][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 91.616772][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 91.622858][ C1] ? read_tsc+0x9/0x20 [ 91.626954][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 91.632537][ C1] ? synchronize_srcu+0x25a/0x280 [ 91.637660][ C1] wakeup_source_unregister+0x116/0x190 [ 91.643245][ C1] mmc_host_classdev_release+0x47/0x100 [ 91.648817][ C1] ? mmc_free_host+0x30/0x30 [ 91.653509][ C1] device_release+0xbc/0x1e0 [ 91.658109][ C1] kobject_put+0x21b/0x450 [ 91.662537][ C1] call_timer_fn+0x189/0x540 [ 91.667219][ C1] ? kref_get+0x70/0x70 [ 91.671579][ C1] ? call_timer_fn+0xd2/0x540 [ 91.676270][ C1] ? __run_timers+0x810/0x810 [ 91.680958][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.686186][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 91.691393][ C1] ? kref_get+0x70/0x70 [ 91.695560][ C1] __run_timers+0x570/0x810 [ 91.700592][ C1] ? detach_timer+0x2b0/0x2b0 [ 91.705274][ C1] ? lock_chain_count+0x20/0x20 [ 91.710127][ C1] run_timer_softirq+0x67/0xf0 [ 91.714893][ C1] handle_softirqs+0x27d/0x820 [ 91.719667][ C1] ? read_tsc+0x9/0x20 [ 91.723741][ C1] ? ktime_get+0x24b/0x280 [ 91.728193][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 91.733048][ C1] ? do_softirq+0x1a0/0x1a0 [ 91.737556][ C1] __irq_exit_rcu+0xd3/0x190 [ 91.742154][ C1] ? irq_exit_rcu+0x20/0x20 [ 91.746660][ C1] irq_exit_rcu+0x9/0x20 [ 91.750901][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 91.756542][ C1] [ 91.759474][ C1] [ 91.762405][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.768392][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 91.773694][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 91.793653][ C1] RSP: 0018:ffffc90000a2f940 EFLAGS: 00000206 [ 91.799736][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6798e017a4da7700 [ 91.807888][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d3360 [ 91.815877][ C1] RBP: ffffc90000a2fa48 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 91.823950][ C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: 1ffff92000145f34 [ 91.831928][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 91.839917][ C1] ? __might_sleep+0xe0/0xe0 [ 91.844613][ C1] ? read_lock_is_recursive+0x20/0x20 [ 91.850179][ C1] gc_worker+0x28a/0x14a0 [ 91.854540][ C1] ? gc_worker+0x266/0x14a0 [ 91.859141][ C1] ? gc_worker+0x266/0x14a0 [ 91.863750][ C1] ? init_conntrack+0xe20/0xe20 [ 91.868698][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.873905][ C1] ? process_scheduled_works+0x975/0x1600 [ 91.879731][ C1] ? process_scheduled_works+0x975/0x1600 [ 91.885562][ C1] process_scheduled_works+0xa60/0x1600 [ 91.891304][ C1] ? worker_attach_to_pool+0x370/0x370 [ 91.896782][ C1] ? assign_work+0x3cc/0x5d0 [ 91.901381][ C1] worker_thread+0xa5e/0xfe0 [ 91.905987][ C1] kthread+0x2fa/0x390 [ 91.910061][ C1] ? pr_cont_work+0x550/0x550 [ 91.914781][ C1] ? kthread_blkcg+0xd0/0xd0 [ 91.919483][ C1] ret_from_fork+0x48/0x80 [ 91.923923][ C1] ? kthread_blkcg+0xd0/0xd0 [ 91.928513][ C1] ret_from_fork_asm+0x11/0x20 [ 91.933381][ C1] [ 91.936643][ C1] Kernel Offset: disabled [ 91.940970][ C1] Rebooting in 86400 seconds..