last executing test programs: 6.502883131s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 6.399453064s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) 6.307783196s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000000010000304000000001fdcdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 6.267314347s ago: executing program 3 (id=5): syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe64e431205f2e760c6966", 0x23) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000180)="3300000008000601010000000001", 0xe) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x12503, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000080)={@any, 0x0, 0x1, 0x2d28, 0x6000, 0x4, "c9613163ca198dd44cc86477109adc2728edce59d783f16589918d192b3fa9a0fb474a529ec97cc0231f112c435a6f97714ec3f5e87ae3538fae2cc3f7449e2f3f88b653cc655b7f60e53ef1e0999e737b505609d0581527712c06768bebec5c494bacb556198735188e8647c2e760784cb29541f5a96d5dc10c62b5d3501b5e"}) 6.093542651s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5.887610016s ago: executing program 3 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') writev(r0, &(0x7f0000000500)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000680)="38f5", 0x2}], 0x2) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a84350014060100000000000000000000000000000000fe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="4d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140090003010e04060d070b001000"], 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xcb}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) 5.835094648s ago: executing program 0 (id=7): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x61c1, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, 0x0) 5.73247321s ago: executing program 0 (id=8): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='6\x00'], 0x2, 0x1548, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) 5.416661278s ago: executing program 0 (id=9): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="4012aa0000008cede7f7"], 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfa}, &(0x7f00000003c0)={0x20, 0x0, 0x2}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x2}}) 4.803946413s ago: executing program 2 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000440)) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) 3.762111979s ago: executing program 2 (id=11): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) memfd_create(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) 3.759576368s ago: executing program 3 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000200)={0x2c}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x448d0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x40, 0x0, 0x9, 0x6, {{0xb, 0x4, 0x2, 0x9, 0x2c, 0x6, 0x0, 0xe6, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x14, 0x92, 0x0, 0x8, [0x6, 0x4, 0x3, 0x10000]}, @ra={0x94, 0x4}]}}}}}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={0x0, @llc={0x1a, 0x20, 0xfc, 0x2, 0xf0, 0x9, @remote}, @xdp={0x2c, 0x1, r6, 0x30}, @nfc={0x27, r7, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)='ip6_vti0\x00', 0xfff, 0x2, 0x7}) r8 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xe9) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x7, 0x0, 0x0, 0x6, 0x9e}, {0x0, 0x6, 0x0, 0x0, 0x9e86}, {0x5e2796afef1a2f31, 0xffff17aa, 0x0, 0x9, 0xfffffffe, 0x80000001, 0x8}, {0x40000001, 0xfffffffe, 0x0, 0x8, 0x3, 0x110, 0x3}]}) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='size\x00', &(0x7f00000000c0)='10M\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r12 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r13, 0x0, 0x34, 0x0, 0x0) write$6lowpan_control(r12, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 1', 0x19) r14 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0xe8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x4a, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000080000007a004000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 3.451106976s ago: executing program 3 (id=13): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.353682328s ago: executing program 0 (id=14): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000200)={0x0, 0x8, 0x2, 0x7ffffffe, 0x10, 0x0, 0x10, 0x2, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 3.115640504s ago: executing program 32 (id=14): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000200)={0x0, 0x8, 0x2, 0x7ffffffe, 0x10, 0x0, 0x10, 0x2, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 3.071193205s ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") sync() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 2.704038324s ago: executing program 2 (id=17): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f80)={0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 234.830625ms ago: executing program 3 (id=18): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 1 (id=19): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$hiddev(r0, &(0x7f0000000040)=""/159, 0x9f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 63.828920][ T5759] cgroup: Unknown subsys name 'net' [ 63.957651][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.362914][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.892919][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.901808][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.911214][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.918994][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.932027][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.940027][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.948030][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.948241][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.963028][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.964590][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.979207][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.981038][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.988388][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.994321][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.000652][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.014517][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.016468][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.022456][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.029674][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.036534][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.042583][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.050106][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.057159][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.071602][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.417569][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 67.545456][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.553662][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.562448][ T5772] bridge_slave_0: entered allmulticast mode [ 67.569905][ T5772] bridge_slave_0: entered promiscuous mode [ 67.596444][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.604482][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.611838][ T5772] bridge_slave_1: entered allmulticast mode [ 67.618919][ T5772] bridge_slave_1: entered promiscuous mode [ 67.663611][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 67.678674][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.693761][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.703886][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 67.743864][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 67.802781][ T5772] team0: Port device team_slave_0 added [ 67.831792][ T5772] team0: Port device team_slave_1 added [ 67.934003][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.943319][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.970998][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.982870][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.990038][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.997399][ T5771] bridge_slave_0: entered allmulticast mode [ 68.004747][ T5771] bridge_slave_0: entered promiscuous mode [ 68.013711][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.021155][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.028371][ T5771] bridge_slave_1: entered allmulticast mode [ 68.035331][ T5771] bridge_slave_1: entered promiscuous mode [ 68.042249][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.049333][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.056799][ T5774] bridge_slave_0: entered allmulticast mode [ 68.063629][ T5774] bridge_slave_0: entered promiscuous mode [ 68.070600][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.080597][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.087780][ T5773] bridge_slave_0: entered allmulticast mode [ 68.095271][ T5773] bridge_slave_0: entered promiscuous mode [ 68.103360][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.110425][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.117667][ T5773] bridge_slave_1: entered allmulticast mode [ 68.124605][ T5773] bridge_slave_1: entered promiscuous mode [ 68.132156][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.139108][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.165230][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.201643][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.211120][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.218251][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.227874][ T5774] bridge_slave_1: entered allmulticast mode [ 68.234725][ T5774] bridge_slave_1: entered promiscuous mode [ 68.271557][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.282976][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.320198][ T5771] team0: Port device team_slave_0 added [ 68.328643][ T5771] team0: Port device team_slave_1 added [ 68.336254][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.347889][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.387679][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.436320][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.443523][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.469612][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.491188][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.498162][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.530957][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.555022][ T5772] hsr_slave_0: entered promiscuous mode [ 68.562075][ T5772] hsr_slave_1: entered promiscuous mode [ 68.572016][ T5773] team0: Port device team_slave_0 added [ 68.580556][ T5774] team0: Port device team_slave_0 added [ 68.607310][ T5773] team0: Port device team_slave_1 added [ 68.615112][ T5774] team0: Port device team_slave_1 added [ 68.693528][ T5771] hsr_slave_0: entered promiscuous mode [ 68.700094][ T5771] hsr_slave_1: entered promiscuous mode [ 68.706703][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.714577][ T5771] Cannot create hsr debugfs directory [ 68.729907][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.737101][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.765619][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.795565][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.802886][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.829151][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.844313][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.851318][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.877423][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.899508][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.906811][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.933218][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.055565][ T5774] hsr_slave_0: entered promiscuous mode [ 69.062091][ T5774] hsr_slave_1: entered promiscuous mode [ 69.068202][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.076345][ T5774] Cannot create hsr debugfs directory [ 69.115706][ T5773] hsr_slave_0: entered promiscuous mode [ 69.122722][ T5773] hsr_slave_1: entered promiscuous mode [ 69.128768][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.136568][ T5773] Cannot create hsr debugfs directory [ 69.142065][ T5779] Bluetooth: hci0: command tx timeout [ 69.142242][ T5779] Bluetooth: hci3: command tx timeout [ 69.147728][ T5783] Bluetooth: hci1: command tx timeout [ 69.153848][ T5786] Bluetooth: hci2: command tx timeout [ 69.399256][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.428757][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.438120][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.474696][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.512921][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.533488][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.551807][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.562443][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.632997][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.650687][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.660558][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.672255][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.784479][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.797984][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.807703][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.829379][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.877815][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.950327][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.985195][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.996274][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.011300][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.018725][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.039176][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.046344][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.086306][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.103822][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.128395][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.135590][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.167226][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.174397][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.187544][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.194671][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.219970][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.227113][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.267363][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.322157][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.355942][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.363076][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.386423][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.393610][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.503340][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.887016][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.900678][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.916075][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.967976][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.032143][ T5772] veth0_vlan: entered promiscuous mode [ 71.050119][ T5774] veth0_vlan: entered promiscuous mode [ 71.084011][ T5772] veth1_vlan: entered promiscuous mode [ 71.105027][ T5774] veth1_vlan: entered promiscuous mode [ 71.124377][ T5771] veth0_vlan: entered promiscuous mode [ 71.144353][ T5773] veth0_vlan: entered promiscuous mode [ 71.168621][ T5773] veth1_vlan: entered promiscuous mode [ 71.203717][ T5774] veth0_macvtap: entered promiscuous mode [ 71.217626][ T5772] veth0_macvtap: entered promiscuous mode [ 71.221419][ T5786] Bluetooth: hci2: command tx timeout [ 71.225247][ T5783] Bluetooth: hci3: command tx timeout [ 71.229319][ T5779] Bluetooth: hci0: command tx timeout [ 71.234312][ T5783] Bluetooth: hci1: command tx timeout [ 71.244826][ T5774] veth1_macvtap: entered promiscuous mode [ 71.256719][ T5772] veth1_macvtap: entered promiscuous mode [ 71.264664][ T5771] veth1_vlan: entered promiscuous mode [ 71.311763][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.319901][ T5773] veth0_macvtap: entered promiscuous mode [ 71.334848][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.346331][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.357795][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.376865][ T5773] veth1_macvtap: entered promiscuous mode [ 71.388213][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.400783][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.411488][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.423816][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.438014][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.447544][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.456320][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.465423][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.492652][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.505288][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.514487][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.523501][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.536281][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.551000][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.551185][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.560828][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.573483][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.578253][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.595449][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.624678][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.638879][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.649859][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.660495][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.672173][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.700087][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.710566][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722945][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.732524][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.746895][ T5771] veth0_macvtap: entered promiscuous mode [ 71.758167][ T5771] veth1_macvtap: entered promiscuous mode [ 71.829368][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.841205][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.851827][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.863521][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.873956][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.884423][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.896228][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.925840][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.934383][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.956690][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.967912][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.977944][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.988722][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.998628][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.009251][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.020311][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.048907][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.058550][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.068302][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.077623][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106752][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.120463][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.184719][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.200953][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.212892][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.220738][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.305578][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.322068][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.345450][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.369837][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.433083][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.457526][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.544779][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.575636][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.703090][ T5840] dummy0: entered promiscuous mode [ 72.710002][ T5840] dummy0: left promiscuous mode [ 72.814561][ T5813] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.903444][ T5842] Bluetooth: MGMT ver 1.22 [ 73.022100][ T5813] usb 2-1: device descriptor read/64, error -71 [ 73.171150][ T5849] syz.3.6 (5849): /proc/5848/oom_adj is deprecated, please use /proc/5848/oom_score_adj instead. [ 73.251805][ T5853] syz.0.8[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.269422][ T5853] loop0: detected capacity change from 0 to 256 [ 73.285073][ T5853] exfat: Deprecated parameter 'utf8' [ 73.302062][ T5786] Bluetooth: hci2: command tx timeout [ 73.307698][ T5779] Bluetooth: hci0: command tx timeout [ 73.313322][ T5786] Bluetooth: hci1: command tx timeout [ 73.319329][ T5775] Bluetooth: hci3: command tx timeout [ 73.367176][ T5853] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 73.391472][ T5813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.491074][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.551356][ T5813] usb 2-1: device descriptor read/64, error -71 [ 73.681218][ T5813] usb usb2-port1: attempt power cycle [ 73.704697][ T5814] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 73.731059][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 73.739213][ T5814] usb 4-1: Product: syz [ 73.750236][ T5814] usb 4-1: SerialNumber: syz [ 73.768071][ T5814] usb 4-1: config 0 descriptor?? [ 74.032407][ T5814] hso 4-1:0.0: Failed to find BULK IN ep [ 74.101880][ T5813] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.152657][ T5813] usb 2-1: device descriptor read/8, error -71 [ 74.325734][ T5814] usb 4-1: USB disconnect, device number 2 [ 75.165314][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.202970][ T5813] usb 2-1: device descriptor read/8, error -71 [ 75.207441][ T5864] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.324765][ T5813] usb usb2-port1: unable to enumerate USB device [ 75.383714][ T5775] Bluetooth: hci3: command tx timeout [ 75.383748][ T5779] Bluetooth: hci2: command tx timeout [ 75.389156][ T5786] Bluetooth: hci0: command tx timeout [ 75.472990][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.841059][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.894233][ T5872] loop1: detected capacity change from 0 to 1024 [ 75.912060][ T5872] EXT4-fs: Ignoring removed bh option [ 75.978531][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.051188][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 76.058208][ T5814] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 76.067468][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.077923][ T5814] usb 4-1: config 0 descriptor?? [ 76.095271][ T5814] usb 4-1: probing VID:PID(0424:012C) [ 76.105698][ T5814] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 76.130922][ T5814] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 76.137425][ T5814] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 76.158442][ T5814] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 76.165350][ T5814] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 76.255560][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.356591][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.375671][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.383843][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.386309][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.452190][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 76.463211][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.476044][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.483738][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.519943][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.561284][ T5811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.649752][ T5814] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 76.664745][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.685848][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.695562][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 76.712884][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.765752][ T23] usb 2-1: config 0 descriptor?? [ 76.792067][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 76.814823][ T5811] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 76.831253][ T5811] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.843175][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.853485][ T5811] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 76.872580][ T5811] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 76.872829][ T5814] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 76.893176][ T5811] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.906878][ T5811] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.922311][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.942579][ T5811] usbtmc: probe of 3-1:16.0 failed with error -22 [ 77.298894][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 77.589744][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.628197][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.653352][ T5879] bridge_slave_0: entered allmulticast mode [ 77.676140][ T5879] bridge_slave_0: entered promiscuous mode [ 77.774106][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.798247][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.830465][ T5879] bridge_slave_1: entered allmulticast mode [ 77.858474][ T5879] bridge_slave_1: entered promiscuous mode [ 78.038024][ T5812] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 78.089407][ T5814] usb 4-1: USB disconnect, device number 3 [ 78.097231][ T5812] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 78.226982][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.250248][ T5814] USB vub300 remote SDIO host controller[0] now disconnected [ 78.288405][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.416372][ T5879] team0: Port device team_slave_0 added [ 78.456496][ T5879] team0: Port device team_slave_1 added [ 78.587704][ T5786] Bluetooth: hci1: command tx timeout [ 78.663334][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.697250][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.785922][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.861365][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.876960][ T5814] usb 2-1: USB disconnect, device number 6 [ 78.915069][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.939394][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.025215][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.151153][ C1] [ 79.153889][ C1] ============================= [ 79.158766][ C1] WARNING: suspicious RCU usage [ 79.163718][ C1] syzkaller #0 Not tainted [ 79.168155][ C1] ----------------------------- [ 79.173067][ C1] kernel/sched/core.c:10174 Illegal context switch in RCU-sched read-side critical section! [ 79.183171][ C1] [ 79.183171][ C1] other info that might help us debug this: [ 79.183171][ C1] [ 79.193455][ C1] [ 79.193455][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 79.201538][ C1] 9 locks held by syz-executor/5774: [ 79.206819][ C1] #0: ffffffff8d1d4ab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x298/0x1e30 [ 79.215737][ C1] #1: ffff888078b1d720 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 79.224768][ C1] #2: ffff888026b65720 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 79.233943][ C1] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 79.243440][ C1] #4: ffff8880762c06d8 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 79.254068][ C1] #5: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 79.263580][ C1] #6: ffff888017c665b8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 79.273950][ C1] #7: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 79.283460][ C1] #8: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 79.293917][ C1] [ 79.293917][ C1] stack backtrace: [ 79.299850][ C1] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 79.307381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.317433][ C1] Call Trace: [ 79.320702][ C1] [ 79.323534][ C1] dump_stack_lvl+0x18c/0x250 [ 79.328205][ C1] ? show_regs_print_info+0x20/0x20 [ 79.333393][ C1] ? load_image+0x420/0x420 [ 79.337886][ C1] lockdep_rcu_suspicious+0x1e1/0x300 [ 79.343250][ C1] __might_resched+0x123/0x5f0 [ 79.348001][ C1] ? __might_sleep+0xe0/0xe0 [ 79.352573][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 79.358458][ C1] ? _raw_spin_unlock+0x40/0x40 [ 79.363312][ C1] ? kasan_set_track+0x5f/0x70 [ 79.368065][ C1] ? kasan_save_free_info+0x28/0x40 [ 79.373270][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 79.378626][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 79.384247][ C1] __flush_work+0x10f/0xac0 [ 79.388740][ C1] ? flush_work+0x20/0x20 [ 79.393065][ C1] ? __timer_delete+0x6b/0x290 [ 79.397814][ C1] ? mark_lock+0x94/0x320 [ 79.402137][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 79.408103][ C1] ? mod_delayed_work_on+0x1c0/0x1c0 [ 79.413375][ C1] ? lock_chain_count+0x20/0x20 [ 79.418224][ C1] ? __cancel_work_timer+0x36e/0x560 [ 79.423517][ C1] __cancel_work_timer+0x3f8/0x560 [ 79.428618][ C1] ? cancel_work_sync+0x20/0x20 [ 79.433461][ C1] ? kobject_put+0x260/0x450 [ 79.438051][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 79.443152][ C1] ? kobject_put+0x421/0x450 [ 79.447730][ C1] mmc_free_host+0x19/0x40 [ 79.452133][ C1] call_timer_fn+0x189/0x540 [ 79.456706][ C1] ? kref_get+0x70/0x70 [ 79.460940][ C1] ? call_timer_fn+0xd2/0x540 [ 79.465617][ C1] ? __run_timers+0x810/0x810 [ 79.470369][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.475554][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 79.480743][ C1] ? kref_get+0x70/0x70 [ 79.484970][ C1] __run_timers+0x570/0x810 [ 79.489472][ C1] ? detach_timer+0x2b0/0x2b0 [ 79.494156][ C1] ? lock_chain_count+0x20/0x20 [ 79.498998][ C1] run_timer_softirq+0x67/0xf0 [ 79.503752][ C1] handle_softirqs+0x27d/0x820 [ 79.508722][ C1] ? read_tsc+0x9/0x20 [ 79.512821][ C1] ? ktime_get+0x24b/0x280 [ 79.517236][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 79.521991][ C1] ? do_softirq+0x1a0/0x1a0 [ 79.526504][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 79.531696][ C1] __irq_exit_rcu+0xd3/0x190 [ 79.536277][ C1] ? irq_exit_rcu+0x20/0x20 [ 79.540809][ C1] irq_exit_rcu+0x9/0x20 [ 79.545042][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 79.550670][ C1] [ 79.553596][ C1] [ 79.556529][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.562512][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 79.567788][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 79.587387][ C1] RSP: 0018:ffffc900046df3a0 EFLAGS: 00000206 [ 79.593446][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3eb5080b501f000 [ 79.601406][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 79.609369][ C1] RBP: ffffc900046df4a8 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 79.617357][ C1] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 1ffff920008dbe80 [ 79.625347][ C1] R13: ffffffff8d1321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 79.633339][ C1] ? read_lock_is_recursive+0x20/0x20 [ 79.638709][ C1] ? page_ext_put+0x9c/0xb0 [ 79.643204][ C1] ? pfn_valid+0xcd/0x420 [ 79.647526][ C1] pfn_valid+0xe9/0x420 [ 79.651688][ C1] ? pfn_valid+0xcd/0x420 [ 79.656005][ C1] page_table_check_set+0x25/0x6e0 [ 79.661104][ C1] copy_page_range+0x24fc/0x3700 [ 79.666047][ C1] ? pfn_valid+0x450/0x450 [ 79.670456][ C1] ? copy_mm+0x1705/0x1e30 [ 79.674857][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 79.679891][ C1] ? down_write+0x16e/0x200 [ 79.684391][ C1] ? up_write+0x1be/0x410 [ 79.688726][ C1] copy_mm+0x1751/0x1e30 [ 79.692963][ C1] ? copy_signal+0x640/0x640 [ 79.697545][ C1] ? __init_rwsem+0x122/0x160 [ 79.702207][ C1] ? copy_signal+0x51f/0x640 [ 79.706787][ C1] copy_process+0x16c9/0x3da0 [ 79.711462][ C1] ? copy_process+0x98e/0x3da0 [ 79.716215][ C1] ? __pidfd_prepare+0x140/0x140 [ 79.721146][ C1] kernel_clone+0x24b/0x8a0 [ 79.725659][ C1] ? create_io_thread+0x190/0x190 [ 79.730670][ C1] ? __might_fault+0xaa/0x120 [ 79.735354][ C1] __x64_sys_clone+0x1b7/0x230 [ 79.740104][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 79.745123][ C1] ? lock_chain_count+0x20/0x20 [ 79.749964][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 79.755151][ C1] do_syscall_64+0x55/0xb0 [ 79.759561][ C1] ? clear_bhb_loop+0x40/0x90 [ 79.764229][ C1] ? clear_bhb_loop+0x40/0x90 [ 79.768887][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.774792][ C1] RIP: 0033:0x7f323a7c6bd2 [ 79.779189][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 79.798805][ C1] RSP: 002b:00007fffc82990a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 79.807219][ C1] RAX: ffffffffffffffda RBX: 00007fffc82990a0 RCX: 00007f323a7c6bd2 [ 79.815200][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 79.823165][ C1] RBP: 00007fffc829922c R08: 0000000000000000 R09: 0000000000000001 [ 79.831145][ C1] R10: 00005555637327d0 R11: 0000000000000246 R12: 0000000000000001 [ 79.839108][ C1] R13: 0000000000000024 R14: 0000000000012fa9 R15: 00007fffc8299280 [ 79.847074][ C1] [ 79.850129][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 79.859151][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5774, name: syz-executor [ 79.868398][ C1] preempt_count: 103, expected: 0 [ 79.873447][ C1] RCU nest depth: 2, expected: 0 [ 79.878388][ C1] 9 locks held by syz-executor/5774: [ 79.883685][ C1] #0: ffffffff8d1d4ab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x298/0x1e30 [ 79.892540][ C1] #1: ffff888078b1d720 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 79.901514][ C1] #2: ffff888026b65720 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 79.910652][ C1] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 79.920223][ C1] #4: ffff8880762c06d8 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 79.930881][ C1] #5: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 79.940383][ C1] #6: ffff888017c665b8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 79.950787][ C1] #7: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 79.960217][ C1] #8: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 79.970670][ C1] Preemption disabled at: [ 79.970677][ C1] [<0000000000000000>] 0x0 [ 79.979419][ C1] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 79.986948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.996988][ C1] Call Trace: [ 80.000259][ C1] [ 80.003090][ C1] dump_stack_lvl+0x18c/0x250 [ 80.007778][ C1] ? show_regs_print_info+0x20/0x20 [ 80.012963][ C1] ? load_image+0x420/0x420 [ 80.017470][ C1] __might_resched+0x48d/0x5f0 [ 80.022254][ C1] ? __might_sleep+0xe0/0xe0 [ 80.026836][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 80.032736][ C1] ? _raw_spin_unlock+0x40/0x40 [ 80.037581][ C1] ? kasan_set_track+0x5f/0x70 [ 80.042335][ C1] ? kasan_save_free_info+0x28/0x40 [ 80.047522][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 80.052791][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 80.058413][ C1] __flush_work+0x10f/0xac0 [ 80.062907][ C1] ? flush_work+0x20/0x20 [ 80.067224][ C1] ? __timer_delete+0x6b/0x290 [ 80.071972][ C1] ? mark_lock+0x94/0x320 [ 80.076308][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 80.082273][ C1] ? mod_delayed_work_on+0x1c0/0x1c0 [ 80.087541][ C1] ? lock_chain_count+0x20/0x20 [ 80.092378][ C1] ? __cancel_work_timer+0x36e/0x560 [ 80.097649][ C1] __cancel_work_timer+0x3f8/0x560 [ 80.102748][ C1] ? cancel_work_sync+0x20/0x20 [ 80.107584][ C1] ? kobject_put+0x260/0x450 [ 80.112158][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 80.117177][ C1] ? kobject_put+0x421/0x450 [ 80.121761][ C1] mmc_free_host+0x19/0x40 [ 80.126166][ C1] call_timer_fn+0x189/0x540 [ 80.130757][ C1] ? kref_get+0x70/0x70 [ 80.134903][ C1] ? call_timer_fn+0xd2/0x540 [ 80.139562][ C1] ? __run_timers+0x810/0x810 [ 80.144228][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.149412][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 80.154593][ C1] ? kref_get+0x70/0x70 [ 80.158733][ C1] __run_timers+0x570/0x810 [ 80.163229][ C1] ? detach_timer+0x2b0/0x2b0 [ 80.167890][ C1] ? lock_chain_count+0x20/0x20 [ 80.172739][ C1] run_timer_softirq+0x67/0xf0 [ 80.177486][ C1] handle_softirqs+0x27d/0x820 [ 80.182323][ C1] ? read_tsc+0x9/0x20 [ 80.186377][ C1] ? ktime_get+0x24b/0x280 [ 80.190790][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 80.195581][ C1] ? do_softirq+0x1a0/0x1a0 [ 80.200069][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 80.205257][ C1] __irq_exit_rcu+0xd3/0x190 [ 80.209835][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.214325][ C1] irq_exit_rcu+0x9/0x20 [ 80.218554][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 80.224176][ C1] [ 80.227111][ C1] [ 80.230042][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.236013][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 80.241289][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 80.260891][ C1] RSP: 0018:ffffc900046df3a0 EFLAGS: 00000206 [ 80.266961][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3eb5080b501f000 [ 80.274937][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 80.282897][ C1] RBP: ffffc900046df4a8 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 80.290905][ C1] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 1ffff920008dbe80 [ 80.298878][ C1] R13: ffffffff8d1321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 80.306853][ C1] ? read_lock_is_recursive+0x20/0x20 [ 80.312221][ C1] ? page_ext_put+0x9c/0xb0 [ 80.316738][ C1] ? pfn_valid+0xcd/0x420 [ 80.321061][ C1] pfn_valid+0xe9/0x420 [ 80.325310][ C1] ? pfn_valid+0xcd/0x420 [ 80.329639][ C1] page_table_check_set+0x25/0x6e0 [ 80.334755][ C1] copy_page_range+0x24fc/0x3700 [ 80.339709][ C1] ? pfn_valid+0x450/0x450 [ 80.344123][ C1] ? copy_mm+0x1705/0x1e30 [ 80.348529][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 80.353552][ C1] ? down_write+0x16e/0x200 [ 80.358043][ C1] ? up_write+0x1be/0x410 [ 80.362359][ C1] copy_mm+0x1751/0x1e30 [ 80.366643][ C1] ? copy_signal+0x640/0x640 [ 80.371244][ C1] ? __init_rwsem+0x122/0x160 [ 80.375907][ C1] ? copy_signal+0x51f/0x640 [ 80.380567][ C1] copy_process+0x16c9/0x3da0 [ 80.385238][ C1] ? copy_process+0x98e/0x3da0 [ 80.390001][ C1] ? __pidfd_prepare+0x140/0x140 [ 80.394929][ C1] kernel_clone+0x24b/0x8a0 [ 80.399421][ C1] ? create_io_thread+0x190/0x190 [ 80.404456][ C1] ? __might_fault+0xaa/0x120 [ 80.409122][ C1] __x64_sys_clone+0x1b7/0x230 [ 80.413873][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 80.418908][ C1] ? lock_chain_count+0x20/0x20 [ 80.423811][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 80.429024][ C1] do_syscall_64+0x55/0xb0 [ 80.433437][ C1] ? clear_bhb_loop+0x40/0x90 [ 80.438107][ C1] ? clear_bhb_loop+0x40/0x90 [ 80.442773][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.448686][ C1] RIP: 0033:0x7f323a7c6bd2 [ 80.453108][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 80.472707][ C1] RSP: 002b:00007fffc82990a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 80.481125][ C1] RAX: ffffffffffffffda RBX: 00007fffc82990a0 RCX: 00007f323a7c6bd2 [ 80.489084][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 80.497041][ C1] RBP: 00007fffc829922c R08: 0000000000000000 R09: 0000000000000001 [ 80.505014][ C1] R10: 00005555637327d0 R11: 0000000000000246 R12: 0000000000000001 [ 80.512973][ C1] R13: 0000000000000024 R14: 0000000000012fa9 R15: 00007fffc8299280 [ 80.520943][ C1] [ 80.524124][ C1] [ 80.526445][ C1] ============================= [ 80.531305][ C1] WARNING: suspicious RCU usage [ 80.536139][ C1] syzkaller #0 Tainted: G W [ 80.542032][ C1] ----------------------------- [ 80.546868][ C1] kernel/rcu/srcutree.c:1377 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 80.558862][ C1] [ 80.558862][ C1] other info that might help us debug this: [ 80.558862][ C1] [ 80.569116][ C1] [ 80.569116][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 80.577202][ C1] 9 locks held by syz-executor/5774: [ 80.582585][ C1] #0: ffffffff8d1d4ab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x298/0x1e30 [ 80.591391][ C1] #1: ffff888078b1d720 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 80.600350][ C1] #2: ffff888026b65720 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 80.609517][ C1] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 80.619054][ C1] #4: ffff8880762c06d8 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 80.629706][ C1] #5: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 80.639215][ C1] #6: ffff888017c665b8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 80.649612][ C1] #7: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 80.659024][ C1] #8: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 80.669560][ C1] [ 80.669560][ C1] stack backtrace: [ 80.675475][ C1] CPU: 1 PID: 5774 Comm: syz-executor Tainted: G W syzkaller #0 [ 80.684486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.694530][ C1] Call Trace: [ 80.697815][ C1] [ 80.700662][ C1] dump_stack_lvl+0x18c/0x250 [ 80.705332][ C1] ? show_regs_print_info+0x20/0x20 [ 80.710518][ C1] ? load_image+0x420/0x420 [ 80.715018][ C1] lockdep_rcu_suspicious+0x1e1/0x300 [ 80.720404][ C1] __synchronize_srcu+0x150/0x3d0 [ 80.725419][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 80.731302][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 80.737014][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 80.742902][ C1] ? _raw_spin_unlock+0x40/0x40 [ 80.747737][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 80.753617][ C1] ? read_tsc+0x9/0x20 [ 80.757668][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 80.763201][ C1] ? synchronize_srcu+0x25a/0x280 [ 80.768768][ C1] wakeup_source_unregister+0x116/0x190 [ 80.774344][ C1] mmc_host_classdev_release+0x47/0x100 [ 80.779887][ C1] ? mmc_free_host+0x40/0x40 [ 80.784471][ C1] device_release+0xbc/0x1e0 [ 80.789053][ C1] kobject_put+0x21b/0x450 [ 80.793461][ C1] call_timer_fn+0x189/0x540 [ 80.798037][ C1] ? kref_get+0x70/0x70 [ 80.802198][ C1] ? call_timer_fn+0xd2/0x540 [ 80.806859][ C1] ? __run_timers+0x810/0x810 [ 80.811522][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.816709][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 80.821889][ C1] ? kref_get+0x70/0x70 [ 80.826026][ C1] __run_timers+0x570/0x810 [ 80.830517][ C1] ? detach_timer+0x2b0/0x2b0 [ 80.835273][ C1] ? lock_chain_count+0x20/0x20 [ 80.840145][ C1] run_timer_softirq+0x67/0xf0 [ 80.844910][ C1] handle_softirqs+0x27d/0x820 [ 80.849664][ C1] ? read_tsc+0x9/0x20 [ 80.853720][ C1] ? ktime_get+0x24b/0x280 [ 80.858127][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 80.862881][ C1] ? do_softirq+0x1a0/0x1a0 [ 80.867369][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 80.872553][ C1] __irq_exit_rcu+0xd3/0x190 [ 80.877145][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.881638][ C1] irq_exit_rcu+0x9/0x20 [ 80.885864][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 80.891483][ C1] [ 80.894421][ C1] [ 80.897333][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.903333][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 80.908607][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 80.928199][ C1] RSP: 0018:ffffc900046df3a0 EFLAGS: 00000206 [ 80.934282][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3eb5080b501f000 [ 80.942246][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 80.950202][ C1] RBP: ffffc900046df4a8 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 80.958159][ C1] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 1ffff920008dbe80 [ 80.966129][ C1] R13: ffffffff8d1321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 80.974102][ C1] ? read_lock_is_recursive+0x20/0x20 [ 80.979464][ C1] ? page_ext_put+0x9c/0xb0 [ 80.983950][ C1] ? pfn_valid+0xcd/0x420 [ 80.988262][ C1] pfn_valid+0xe9/0x420 [ 80.992400][ C1] ? pfn_valid+0xcd/0x420 [ 80.996711][ C1] page_table_check_set+0x25/0x6e0 [ 81.001918][ C1] copy_page_range+0x24fc/0x3700 [ 81.006858][ C1] ? pfn_valid+0x450/0x450 [ 81.011266][ C1] ? copy_mm+0x1705/0x1e30 [ 81.015666][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 81.020676][ C1] ? down_write+0x16e/0x200 [ 81.025169][ C1] ? up_write+0x1be/0x410 [ 81.029481][ C1] copy_mm+0x1751/0x1e30 [ 81.033715][ C1] ? copy_signal+0x640/0x640 [ 81.038304][ C1] ? __init_rwsem+0x122/0x160 [ 81.042967][ C1] ? copy_signal+0x51f/0x640 [ 81.047541][ C1] copy_process+0x16c9/0x3da0 [ 81.052226][ C1] ? copy_process+0x98e/0x3da0 [ 81.056993][ C1] ? __pidfd_prepare+0x140/0x140 [ 81.061921][ C1] kernel_clone+0x24b/0x8a0 [ 81.066427][ C1] ? create_io_thread+0x190/0x190 [ 81.071437][ C1] ? __might_fault+0xaa/0x120 [ 81.076103][ C1] __x64_sys_clone+0x1b7/0x230 [ 81.080883][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 81.085908][ C1] ? lock_chain_count+0x20/0x20 [ 81.090786][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.095973][ C1] do_syscall_64+0x55/0xb0 [ 81.100378][ C1] ? clear_bhb_loop+0x40/0x90 [ 81.105036][ C1] ? clear_bhb_loop+0x40/0x90 [ 81.109697][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.115581][ C1] RIP: 0033:0x7f323a7c6bd2 [ 81.119977][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 81.139590][ C1] RSP: 002b:00007fffc82990a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 81.148047][ C1] RAX: ffffffffffffffda RBX: 00007fffc82990a0 RCX: 00007f323a7c6bd2 [ 81.156012][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 81.163967][ C1] RBP: 00007fffc829922c R08: 0000000000000000 R09: 0000000000000001 [ 81.171925][ C1] R10: 00005555637327d0 R11: 0000000000000246 R12: 0000000000000001 [ 81.179901][ C1] R13: 0000000000000024 R14: 0000000000012fa9 R15: 00007fffc8299280 [ 81.187866][ C1] [ 81.190923][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 81.200189][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5774, name: syz-executor [ 81.209405][ C1] preempt_count: 103, expected: 0 [ 81.214428][ C1] RCU nest depth: 2, expected: 0 [ 81.219341][ C1] 9 locks held by syz-executor/5774: [ 81.224642][ C1] #0: ffffffff8d1d4ab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x298/0x1e30 [ 81.233457][ C1] #1: ffff888078b1d720 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 81.242449][ C1] #2: ffff888026b65720 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 81.251655][ C1] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 81.261143][ C1] #4: ffff8880762c06d8 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 81.271763][ C1] #5: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 81.281251][ C1] #6: ffff888017c665b8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 81.291623][ C1] #7: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 81.301026][ C1] #8: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 81.311464][ C1] Preemption disabled at: [ 81.311471][ C1] [<0000000000000000>] 0x0 [ 81.320187][ C1] CPU: 1 PID: 5774 Comm: syz-executor Tainted: G W syzkaller #0 [ 81.329193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.339236][ C1] Call Trace: [ 81.342503][ C1] [ 81.345335][ C1] dump_stack_lvl+0x18c/0x250 [ 81.350003][ C1] ? show_regs_print_info+0x20/0x20 [ 81.355189][ C1] ? load_image+0x420/0x420 [ 81.359685][ C1] __might_resched+0x48d/0x5f0 [ 81.364440][ C1] ? show_regs_print_info+0x20/0x20 [ 81.369624][ C1] ? __might_sleep+0xe0/0xe0 [ 81.374209][ C1] __synchronize_srcu+0x197/0x3d0 [ 81.379220][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 81.385101][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 81.390810][ C1] ? read_tsc+0x9/0x20 [ 81.394865][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 81.400396][ C1] ? synchronize_srcu+0x25a/0x280 [ 81.405408][ C1] wakeup_source_unregister+0x116/0x190 [ 81.410943][ C1] mmc_host_classdev_release+0x47/0x100 [ 81.416480][ C1] ? mmc_free_host+0x40/0x40 [ 81.421050][ C1] device_release+0xbc/0x1e0 [ 81.425623][ C1] kobject_put+0x21b/0x450 [ 81.430025][ C1] call_timer_fn+0x189/0x540 [ 81.434598][ C1] ? kref_get+0x70/0x70 [ 81.438734][ C1] ? call_timer_fn+0xd2/0x540 [ 81.443397][ C1] ? __run_timers+0x810/0x810 [ 81.448062][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.453248][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.458425][ C1] ? kref_get+0x70/0x70 [ 81.462586][ C1] __run_timers+0x570/0x810 [ 81.467077][ C1] ? detach_timer+0x2b0/0x2b0 [ 81.471757][ C1] ? lock_chain_count+0x20/0x20 [ 81.476604][ C1] run_timer_softirq+0x67/0xf0 [ 81.481350][ C1] handle_softirqs+0x27d/0x820 [ 81.486093][ C1] ? read_tsc+0x9/0x20 [ 81.490142][ C1] ? ktime_get+0x24b/0x280 [ 81.494543][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 81.499293][ C1] ? do_softirq+0x1a0/0x1a0 [ 81.503800][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 81.508982][ C1] __irq_exit_rcu+0xd3/0x190 [ 81.513558][ C1] ? irq_exit_rcu+0x20/0x20 [ 81.518043][ C1] irq_exit_rcu+0x9/0x20 [ 81.522264][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 81.527881][ C1] [ 81.530796][ C1] [ 81.533718][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.539708][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 81.544979][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 81.564577][ C1] RSP: 0018:ffffc900046df3a0 EFLAGS: 00000206 [ 81.570629][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3eb5080b501f000 [ 81.578584][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 81.586548][ C1] RBP: ffffc900046df4a8 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 81.594501][ C1] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 1ffff920008dbe80 [ 81.602454][ C1] R13: ffffffff8d1321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 81.610435][ C1] ? read_lock_is_recursive+0x20/0x20 [ 81.615798][ C1] ? page_ext_put+0x9c/0xb0 [ 81.620287][ C1] ? pfn_valid+0xcd/0x420 [ 81.624600][ C1] pfn_valid+0xe9/0x420 [ 81.628739][ C1] ? pfn_valid+0xcd/0x420 [ 81.633060][ C1] page_table_check_set+0x25/0x6e0 [ 81.638156][ C1] copy_page_range+0x24fc/0x3700 [ 81.643101][ C1] ? pfn_valid+0x450/0x450 [ 81.647522][ C1] ? copy_mm+0x1705/0x1e30 [ 81.651939][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 81.656973][ C1] ? down_write+0x16e/0x200 [ 81.661465][ C1] ? up_write+0x1be/0x410 [ 81.665779][ C1] copy_mm+0x1751/0x1e30 [ 81.670012][ C1] ? copy_signal+0x640/0x640 [ 81.674592][ C1] ? __init_rwsem+0x122/0x160 [ 81.679252][ C1] ? copy_signal+0x51f/0x640 [ 81.683823][ C1] copy_process+0x16c9/0x3da0 [ 81.688490][ C1] ? copy_process+0x98e/0x3da0 [ 81.693240][ C1] ? __pidfd_prepare+0x140/0x140 [ 81.698165][ C1] kernel_clone+0x24b/0x8a0 [ 81.702654][ C1] ? create_io_thread+0x190/0x190 [ 81.707664][ C1] ? __might_fault+0xaa/0x120 [ 81.712348][ C1] __x64_sys_clone+0x1b7/0x230 [ 81.717096][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 81.722109][ C1] ? lock_chain_count+0x20/0x20 [ 81.726963][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.732147][ C1] do_syscall_64+0x55/0xb0 [ 81.736548][ C1] ? clear_bhb_loop+0x40/0x90 [ 81.741209][ C1] ? clear_bhb_loop+0x40/0x90 [ 81.745870][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.751766][ C1] RIP: 0033:0x7f323a7c6bd2 [ 81.756167][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 81.775759][ C1] RSP: 002b:00007fffc82990a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 81.784163][ C1] RAX: ffffffffffffffda RBX: 00007fffc82990a0 RCX: 00007f323a7c6bd2 [ 81.792125][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 81.800100][ C1] RBP: 00007fffc829922c R08: 0000000000000000 R09: 0000000000000001 [ 81.808055][ C1] R10: 00005555637327d0 R11: 0000000000000246 R12: 0000000000000001 [ 81.816010][ C1] R13: 0000000000000024 R14: 0000000000012fa9 R15: 00007fffc8299280 [ 81.823973][ C1] [ 81.827013][ C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc900046d8000, but annotated. [ 81.828022][ C1] [ 81.828026][ C1] ====================================================== [ 81.828029][ C1] WARNING: possible circular locking dependency detected [ 81.828032][ C1] syzkaller #0 Tainted: G W [ 81.828038][ C1] ------------------------------------------------------ [ 81.828040][ C1] syz-executor/5774 is trying to acquire lock: [ 81.828046][ C1] ffffffff8d1263e0 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 81.828075][ C1] [ 81.828075][ C1] but task is already holding lock: [ 81.828077][ C1] ffffffff97511308 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 81.828101][ C1] [ 81.828101][ C1] which lock already depends on the new lock. [ 81.828101][ C1] [ 81.828103][ C1] [ 81.828103][ C1] the existing dependency chain (in reverse order) is: [ 81.828106][ C1] [ 81.828106][ C1] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 81.828117][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 81.828131][ C1] debug_object_activate+0x6c/0x500 [ 81.828142][ C1] insert_work+0x35/0x310 [ 81.828153][ C1] __queue_work+0xbfd/0xfd0 [ 81.828161][ C1] queue_work_on+0x128/0x1f0 [ 81.828169][ C1] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 81.828184][ C1] rcu_init+0x10d/0x160 [ 81.828194][ C1] start_kernel+0x1fd/0x4e0 [ 81.828203][ C1] x86_64_start_reservations+0x2a/0x30 [ 81.828212][ C1] copy_bootdata+0x0/0xd0 [ 81.828219][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 81.828231][ C1] [ 81.828231][ C1] -> #3 (&pool->lock){-.-.}-{2:2}: [ 81.828242][ C1] _raw_spin_lock+0x2e/0x40 [ 81.828253][ C1] __queue_work+0x72f/0xfd0 [ 81.828261][ C1] queue_work_on+0x128/0x1f0 [ 81.828269][ C1] rpm_suspend+0x1133/0x1b60 [ 81.828277][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 81.828284][ C1] __device_attach+0x352/0x420 [ 81.828293][ C1] bus_probe_device+0x180/0x260 [ 81.828305][ C1] device_add+0x87c/0xc40 [ 81.828314][ C1] serial_base_port_add+0x2f6/0x430 [ 81.828325][ C1] serial_core_register_port+0x378/0x20b0 [ 81.828334][ C1] serial8250_register_8250_port+0x15fd/0x1f40 [ 81.828345][ C1] serial_pnp_probe+0x577/0x750 [ 81.828356][ C1] pnp_device_probe+0x305/0x4b0 [ 81.828368][ C1] really_probe+0x247/0xae0 [ 81.828376][ C1] __driver_probe_device+0x1f5/0x390 [ 81.828385][ C1] driver_probe_device+0x4f/0x420 [ 81.828393][ C1] __driver_attach+0x444/0x6d0 [ 81.828402][ C1] bus_for_each_dev+0x235/0x2b0 [ 81.828413][ C1] bus_add_driver+0x340/0x630 [ 81.828425][ C1] driver_register+0x23a/0x310 [ 81.828433][ C1] serial8250_init+0x9a/0x170 [ 81.828442][ C1] do_one_initcall+0x242/0x790 [ 81.828453][ C1] do_initcall_level+0x13d/0x1f0 [ 81.828462][ C1] do_initcalls+0x69/0xd0 [ 81.828471][ C1] kernel_init_freeable+0x3d9/0x560 [ 81.828480][ C1] kernel_init+0x1d/0x1c0 [ 81.828491][ C1] ret_from_fork+0x48/0x80 [ 81.828501][ C1] ret_from_fork_asm+0x11/0x20 [ 81.828512][ C1] [ 81.828512][ C1] -> #2 (&dev->power.lock){-...}-{2:2}: [ 81.828523][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 81.828534][ C1] __pm_runtime_resume+0x10f/0x170 [ 81.828542][ C1] __uart_start+0x171/0x3e0 [ 81.828550][ C1] uart_write+0x449/0x5d0 [ 81.828558][ C1] n_tty_write+0xd3d/0x11e0 [ 81.828570][ C1] file_tty_write+0x529/0x960 [ 81.828581][ C1] vfs_write+0x474/0x9a0 [ 81.828593][ C1] ksys_write+0x151/0x260 [ 81.828604][ C1] do_syscall_64+0x55/0xb0 [ 81.828616][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.828630][ C1] [ 81.828630][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 81.828641][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 81.828652][ C1] serial8250_console_write+0x181/0x18b0 [ 81.828664][ C1] console_flush_all+0x6ad/0xcf0 [ 81.828674][ C1] console_unlock+0xad/0x350 [ 81.828692][ C1] vprintk_emit+0x497/0x610 [ 81.828702][ C1] _printk+0xde/0x130 [ 81.828712][ C1] register_console+0xb96/0xf00 [ 81.828723][ C1] univ8250_console_init+0x45/0x50 [ 81.828731][ C1] console_init+0x17b/0x5d0 [ 81.828740][ C1] start_kernel+0x2c8/0x4e0 [ 81.828749][ C1] x86_64_start_reservations+0x2a/0x30 [ 81.828757][ C1] copy_bootdata+0x0/0xd0 [ 81.828764][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 81.828776][ C1] [ 81.828776][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 81.828787][ C1] __lock_acquire+0x3a07/0x7eb0 [ 81.828796][ C1] lock_acquire+0x19e/0x420 [ 81.828805][ C1] console_flush_all+0x676/0xcf0 [ 81.828815][ C1] console_unlock+0xad/0x350 [ 81.828825][ C1] vprintk_emit+0x497/0x610 [ 81.828834][ C1] _printk+0xde/0x130 [ 81.828843][ C1] __debug_object_init+0x18d/0x450 [ 81.828854][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 81.828865][ C1] wakeup_source_unregister+0x116/0x190 [ 81.828876][ C1] mmc_host_classdev_release+0x47/0x100 [ 81.828885][ C1] device_release+0xbc/0x1e0 [ 81.828896][ C1] kobject_put+0x21b/0x450 [ 81.828906][ C1] call_timer_fn+0x189/0x540 [ 81.828915][ C1] __run_timers+0x570/0x810 [ 81.828923][ C1] run_timer_softirq+0x67/0xf0 [ 81.828930][ C1] handle_softirqs+0x27d/0x820 [ 81.828939][ C1] __irq_exit_rcu+0xd3/0x190 [ 81.828947][ C1] irq_exit_rcu+0x9/0x20 [ 81.828955][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 81.828964][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.828977][ C1] lock_acquire+0x208/0x420 [ 81.828986][ C1] pfn_valid+0xe9/0x420 [ 81.828996][ C1] page_table_check_set+0x25/0x6e0 [ 81.829006][ C1] copy_page_range+0x24fc/0x3700 [ 81.829019][ C1] copy_mm+0x1751/0x1e30 [ 81.829027][ C1] copy_process+0x16c9/0x3da0 [ 81.829036][ C1] kernel_clone+0x24b/0x8a0 [ 81.829045][ C1] __x64_sys_clone+0x1b7/0x230 [ 81.829054][ C1] do_syscall_64+0x55/0xb0 [ 81.829065][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.829077][ C1] [ 81.829077][ C1] other info that might help us debug this: [ 81.829077][ C1] [ 81.829080][ C1] Chain exists of: [ 81.829080][ C1] console_owner --> &pool->lock --> &obj_hash[i].lock [ 81.829080][ C1] [ 81.829093][ C1] Possible unsafe locking scenario: [ 81.829093][ C1] [ 81.829095][ C1] CPU0 CPU1 [ 81.829097][ C1] ---- ---- [ 81.829099][ C1] lock(&obj_hash[i].lock); [ 81.829104][ C1] lock(&pool->lock); [ 81.829110][ C1] lock(&obj_hash[i].lock); [ 81.829116][ C1] lock(console_owner); [ 81.829120][ C1] [ 81.829120][ C1] *** DEADLOCK *** [ 81.829120][ C1] [ 81.829123][ C1] 12 locks held by syz-executor/5774: [ 81.829128][ C1] #0: ffffffff8d1d4ab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x298/0x1e30 [ 81.829150][ C1] #1: ffff888078b1d720 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 81.829171][ C1] #2: ffff888026b65720 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 81.829194][ C1] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 81.829215][ C1] #4: ffff8880762c06d8 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 81.829238][ C1] #5: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 81.829259][ C1] #6: ffff888017c665b8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{2:2}, at: copy_page_range+0xfbc/0x3700 [ 81.829287][ C1] #7: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 81.829309][ C1] #8: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 81.829330][ C1] #9: ffffffff97511308 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 81.829353][ C1] #10: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 81.829375][ C1] #11: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 81.829397][ C1] [ 81.829397][ C1] stack backtrace: [ 81.829400][ C1] CPU: 1 PID: 5774 Comm: syz-executor Tainted: G W syzkaller #0 [ 81.829410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.829416][ C1] Call Trace: [ 81.829419][ C1] [ 81.829423][ C1] dump_stack_lvl+0x18c/0x250 [ 81.829436][ C1] ? load_image+0x420/0x420 [ 81.829447][ C1] ? show_regs_print_info+0x20/0x20 [ 81.829462][ C1] ? print_circular_bug+0x12b/0x1a0 [ 81.829473][ C1] check_noncircular+0x2fc/0x400 [ 81.829486][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 81.829496][ C1] ? lockdep_lock+0xf5/0x230 [ 81.829508][ C1] __lock_acquire+0x3a07/0x7eb0 [ 81.829524][ C1] ? verify_lock_unused+0x140/0x140 [ 81.829539][ C1] lock_acquire+0x19e/0x420 [ 81.829548][ C1] ? console_flush_all+0x10b/0xcf0 [ 81.829561][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 81.829571][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 81.829582][ C1] ? read_lock_is_recursive+0x20/0x20 [ 81.829593][ C1] ? __rwlock_init+0x150/0x150 [ 81.829604][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.829617][ C1] console_flush_all+0x676/0xcf0 [ 81.829627][ C1] ? console_flush_all+0x10b/0xcf0 [ 81.829639][ C1] ? console_flush_all+0x10b/0xcf0 [ 81.829651][ C1] ? is_console_locked+0x20/0x20 [ 81.829665][ C1] console_unlock+0xad/0x350 [ 81.829676][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 81.829693][ C1] vprintk_emit+0x497/0x610 [ 81.829705][ C1] ? printk_sprint+0x460/0x460 [ 81.829716][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 81.829729][ C1] _printk+0xde/0x130 [ 81.829741][ C1] ? load_image+0x420/0x420 [ 81.829751][ C1] ? alloc_object+0x1c/0x640 [ 81.829765][ C1] __debug_object_init+0x18d/0x450 [ 81.829778][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 81.829790][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 81.829802][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 81.829815][ C1] ? read_tsc+0x9/0x20 [ 81.829825][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 81.829836][ C1] ? synchronize_srcu+0x25a/0x280 [ 81.829848][ C1] wakeup_source_unregister+0x116/0x190 [ 81.829860][ C1] mmc_host_classdev_release+0x47/0x100 [ 81.829869][ C1] ? mmc_free_host+0x40/0x40 [ 81.829877][ C1] device_release+0xbc/0x1e0 [ 81.829890][ C1] kobject_put+0x21b/0x450 [ 81.829901][ C1] call_timer_fn+0x189/0x540 [ 81.829910][ C1] ? kref_get+0x70/0x70 [ 81.829920][ C1] ? call_timer_fn+0xd2/0x540 [ 81.829928][ C1] ? __run_timers+0x810/0x810 [ 81.829939][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.829950][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.829960][ C1] ? kref_get+0x70/0x70 [ 81.829969][ C1] __run_timers+0x570/0x810 [ 81.829981][ C1] ? detach_timer+0x2b0/0x2b0 [ 81.829991][ C1] ? lock_chain_count+0x20/0x20 [ 81.830002][ C1] run_timer_softirq+0x67/0xf0 [ 81.830011][ C1] handle_softirqs+0x27d/0x820 [ 81.830020][ C1] ? read_tsc+0x9/0x20 [ 81.830030][ C1] ? ktime_get+0x24b/0x280 [ 81.830040][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 81.830050][ C1] ? do_softirq+0x1a0/0x1a0 [ 81.830060][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 81.830073][ C1] __irq_exit_rcu+0xd3/0x190 [ 81.830082][ C1] ? irq_exit_rcu+0x20/0x20 [ 81.830095][ C1] irq_exit_rcu+0x9/0x20 [ 81.830104][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 81.830114][ C1] [ 81.830117][ C1] [ 81.830120][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.830134][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 81.830145][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 81.830153][ C1] RSP: 0018:ffffc900046df3a0 EFLAGS: 00000206 [ 81.830160][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3eb5080b501f000 [ 81.830167][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 81.830173][ C1] RBP: ffffc900046df4a8 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 81.830180][ C1] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 1ffff920008dbe80 [ 81.830186][ C1] R13: ffffffff8d1321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 81.830198][ C1] ? read_lock_is_recursive+0x20/0x20 [ 81.830210][ C1] ? page_ext_put+0x9c/0xb0 [ 81.830220][ C1] ? pfn_valid+0xcd/0x420 [ 81.830232][ C1] pfn_valid+0xe9/0x420 [ 81.830242][ C1] ? pfn_valid+0xcd/0x420 [ 81.830253][ C1] page_table_check_set+0x25/0x6e0 [ 81.830266][ C1] copy_page_range+0x24fc/0x3700 [ 81.830287][ C1] ? pfn_valid+0x450/0x450 [ 81.830300][ C1] ? copy_mm+0x1705/0x1e30 [ 81.830309][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 81.830320][ C1] ? down_write+0x16e/0x200 [ 81.830332][ C1] ? up_write+0x1be/0x410 [ 81.830341][ C1] copy_mm+0x1751/0x1e30 [ 81.830353][ C1] ? copy_signal+0x640/0x640 [ 81.830366][ C1] ? __init_rwsem+0x122/0x160 [ 81.830375][ C1] ? copy_signal+0x51f/0x640 [ 81.830385][ C1] copy_process+0x16c9/0x3da0 [ 81.830397][ C1] ? copy_process+0x98e/0x3da0 [ 81.830409][ C1] ? __pidfd_prepare+0x140/0x140 [ 81.830421][ C1] kernel_clone+0x24b/0x8a0 [ 81.830432][ C1] ? create_io_thread+0x190/0x190 [ 81.830444][ C1] ? __might_fault+0xaa/0x120 [ 81.830455][ C1] __x64_sys_clone+0x1b7/0x230 [ 81.830466][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 81.830478][ C1] ? lock_chain_count+0x20/0x20 [ 81.830489][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.830500][ C1] do_syscall_64+0x55/0xb0 [ 81.830512][ C1] ? clear_bhb_loop+0x40/0x90 [ 81.830520][ C1] ? clear_bhb_loop+0x40/0x90 [ 81.830529][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.830542][ C1] RIP: 0033:0x7f323a7c6bd2 [ 81.830551][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 81.830558][ C1] RSP: 002b:00007fffc82990a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 81.830566][ C1] RAX: ffffffffffffffda RBX: 00007fffc82990a0 RCX: 00007f323a7c6bd2 [ 81.830573][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 81.830578][ C1] RBP: 00007fffc829922c R08: 0000000000000000 R09: 0000000000000001 [ 81.830584][ C1] R10: 00005555637327d0 R11: 0000000000000246 R12: 0000000000000001 [ 81.830590][ C1] R13: 0000000000000024 R14: 0000000000012fa9 R15: 00007fffc8299280 [ 81.830599][ C1] [ 83.264020][ C1] ------------[ cut here ]------------ [ 83.269462][ C1] WARNING: CPU: 1 PID: 5774 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 83.279024][ C1] Modules linked in: [ 83.282900][ C1] CPU: 1 PID: 5774 Comm: syz-executor Tainted: G W syzkaller #0 [ 83.291927][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.301961][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 83.307838][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f 4b 25 13 48 c7 c1 c0 48 1d 8b 48 c7 c7 20 49 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 f3 98 4b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 83.327426][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 83.333473][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: a3eb5080b501f000 [ 83.341425][ C1] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 83.349376][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 83.357328][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff888027975a20 [ 83.365280][ C1] R13: ffff88805c4b0f18 R14: 0000000000000001 R15: ffffffff8acbe000 [ 83.373234][ C1] FS: 0000555563732500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 83.382142][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.388721][ C1] CR2: 00007f323b5556c8 CR3: 00000000623ab000 CR4: 00000000003506e0 [ 83.396704][ C1] Call Trace: [ 83.399969][ C1] [ 83.402799][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 83.407816][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 83.413693][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 83.419395][ C1] ? read_tsc+0x9/0x20 [ 83.423461][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 83.429003][ C1] ? synchronize_srcu+0x25a/0x280 [ 83.434025][ C1] wakeup_source_unregister+0x116/0x190 [ 83.439561][ C1] mmc_host_classdev_release+0x47/0x100 [ 83.445117][ C1] ? mmc_free_host+0x40/0x40 [ 83.449692][ C1] device_release+0xbc/0x1e0 [ 83.454271][ C1] kobject_put+0x21b/0x450 [ 83.458673][ C1] call_timer_fn+0x189/0x540 [ 83.463244][ C1] ? kref_get+0x70/0x70 [ 83.467380][ C1] ? call_timer_fn+0xd2/0x540 [ 83.472040][ C1] ? __run_timers+0x810/0x810 [ 83.476700][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.481882][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 83.487075][ C1] ? kref_get+0x70/0x70 [ 83.491223][ C1] __run_timers+0x570/0x810 [ 83.495737][ C1] ? detach_timer+0x2b0/0x2b0 [ 83.500411][ C1] ? lock_chain_count+0x20/0x20 [ 83.505261][ C1] run_timer_softirq+0x67/0xf0 [ 83.510014][ C1] handle_softirqs+0x27d/0x820 [ 83.514764][ C1] ? read_tsc+0x9/0x20 [ 83.518818][ C1] ? ktime_get+0x24b/0x280 [ 83.523224][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 83.527968][ C1] ? do_softirq+0x1a0/0x1a0 [ 83.532450][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 83.537647][ C1] __irq_exit_rcu+0xd3/0x190 [ 83.542219][ C1] ? irq_exit_rcu+0x20/0x20 [ 83.546703][ C1] irq_exit_rcu+0x9/0x20 [ 83.550925][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 83.556538][ C1] [ 83.559452][ C1] [ 83.562366][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.568330][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 83.573598][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 83.593195][ C1] RSP: 0018:ffffc900046df3a0 EFLAGS: 00000206 [ 83.599255][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3eb5080b501f000 [ 83.607224][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 83.615179][ C1] RBP: ffffc900046df4a8 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 83.623130][ C1] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 1ffff920008dbe80 [ 83.631083][ C1] R13: ffffffff8d1321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 83.639048][ C1] ? read_lock_is_recursive+0x20/0x20 [ 83.644405][ C1] ? page_ext_put+0x9c/0xb0 [ 83.648893][ C1] ? pfn_valid+0xcd/0x420 [ 83.653205][ C1] pfn_valid+0xe9/0x420 [ 83.657350][ C1] ? pfn_valid+0xcd/0x420 [ 83.661662][ C1] page_table_check_set+0x25/0x6e0 [ 83.666764][ C1] copy_page_range+0x24fc/0x3700 [ 83.671782][ C1] ? pfn_valid+0x450/0x450 [ 83.676190][ C1] ? copy_mm+0x1705/0x1e30 [ 83.680584][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 83.685588][ C1] ? down_write+0x16e/0x200 [ 83.690073][ C1] ? up_write+0x1be/0x410 [ 83.694407][ C1] copy_mm+0x1751/0x1e30 [ 83.698688][ C1] ? copy_signal+0x640/0x640 [ 83.703306][ C1] ? __init_rwsem+0x122/0x160 [ 83.707970][ C1] ? copy_signal+0x51f/0x640 [ 83.712553][ C1] copy_process+0x16c9/0x3da0 [ 83.717241][ C1] ? copy_process+0x98e/0x3da0 [ 83.722006][ C1] ? __pidfd_prepare+0x140/0x140 [ 83.726935][ C1] kernel_clone+0x24b/0x8a0 [ 83.731425][ C1] ? create_io_thread+0x190/0x190 [ 83.736434][ C1] ? __might_fault+0xaa/0x120 [ 83.741099][ C1] __x64_sys_clone+0x1b7/0x230 [ 83.745844][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 83.750857][ C1] ? lock_chain_count+0x20/0x20 [ 83.755777][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 83.760974][ C1] do_syscall_64+0x55/0xb0 [ 83.765398][ C1] ? clear_bhb_loop+0x40/0x90 [ 83.770057][ C1] ? clear_bhb_loop+0x40/0x90 [ 83.774714][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.780594][ C1] RIP: 0033:0x7f323a7c6bd2 [ 83.784990][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 83.804598][ C1] RSP: 002b:00007fffc82990a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 83.813009][ C1] RAX: ffffffffffffffda RBX: 00007fffc82990a0 RCX: 00007f323a7c6bd2 [ 83.820972][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 83.828938][ C1] RBP: 00007fffc829922c R08: 0000000000000000 R09: 0000000000000001 [ 83.836899][ C1] R10: 00005555637327d0 R11: 0000000000000246 R12: 0000000000000001 [ 83.844862][ C1] R13: 0000000000000024 R14: 0000000000012fa9 R15: 00007fffc8299280 [ 83.852840][ C1] [ 83.855845][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.863102][ C1] CPU: 1 PID: 5774 Comm: syz-executor Tainted: G W syzkaller #0 [ 83.872097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.882150][ C1] Call Trace: [ 83.885413][ C1] [ 83.888242][ C1] dump_stack_lvl+0x18c/0x250 [ 83.892913][ C1] ? show_regs_print_info+0x20/0x20 [ 83.898095][ C1] ? load_image+0x420/0x420 [ 83.902586][ C1] panic+0x2ca/0x720 [ 83.906469][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 83.910961][ C1] __warn+0x2e0/0x470 [ 83.914925][ C1] ? __debug_object_init+0x18d/0x450 [ 83.920217][ C1] ? __debug_object_init+0x18d/0x450 [ 83.925486][ C1] report_bug+0x2be/0x4f0 [ 83.929879][ C1] ? __debug_object_init+0x18d/0x450 [ 83.935168][ C1] ? __debug_object_init+0x18d/0x450 [ 83.940436][ C1] ? __debug_object_init+0x18f/0x450 [ 83.945718][ C1] handle_bug+0xcf/0x120 [ 83.949942][ C1] exc_invalid_op+0x1a/0x50 [ 83.954445][ C1] asm_exc_invalid_op+0x1a/0x20 [ 83.959281][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 83.965157][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f 4b 25 13 48 c7 c1 c0 48 1d 8b 48 c7 c7 20 49 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 f3 98 4b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 83.984756][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 83.990815][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: a3eb5080b501f000 [ 83.998777][ C1] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 84.006739][ C1] RBP: dffffc0000000000 R08: ffffc900001f0527 R09: 1ffff9200003e0a4 [ 84.014722][ C1] R10: dffffc0000000000 R11: fffff5200003e0a5 R12: ffff888027975a20 [ 84.022698][ C1] R13: ffff88805c4b0f18 R14: 0000000000000001 R15: ffffffff8acbe000 [ 84.030667][ C1] ? __debug_object_init+0x18d/0x450 [ 84.035946][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 84.040984][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 84.046860][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 84.052563][ C1] ? read_tsc+0x9/0x20 [ 84.056609][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 84.062225][ C1] ? synchronize_srcu+0x25a/0x280 [ 84.067230][ C1] wakeup_source_unregister+0x116/0x190 [ 84.072762][ C1] mmc_host_classdev_release+0x47/0x100 [ 84.078290][ C1] ? mmc_free_host+0x40/0x40 [ 84.082858][ C1] device_release+0xbc/0x1e0 [ 84.087437][ C1] kobject_put+0x21b/0x450 [ 84.091846][ C1] call_timer_fn+0x189/0x540 [ 84.096428][ C1] ? kref_get+0x70/0x70 [ 84.100573][ C1] ? call_timer_fn+0xd2/0x540 [ 84.105228][ C1] ? __run_timers+0x810/0x810 [ 84.109914][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.115108][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 84.120287][ C1] ? kref_get+0x70/0x70 [ 84.124422][ C1] __run_timers+0x570/0x810 [ 84.128916][ C1] ? detach_timer+0x2b0/0x2b0 [ 84.133577][ C1] ? lock_chain_count+0x20/0x20 [ 84.138410][ C1] run_timer_softirq+0x67/0xf0 [ 84.143154][ C1] handle_softirqs+0x27d/0x820 [ 84.147900][ C1] ? read_tsc+0x9/0x20 [ 84.151949][ C1] ? ktime_get+0x24b/0x280 [ 84.156348][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 84.161091][ C1] ? do_softirq+0x1a0/0x1a0 [ 84.165571][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 84.170753][ C1] __irq_exit_rcu+0xd3/0x190 [ 84.175324][ C1] ? irq_exit_rcu+0x20/0x20 [ 84.179804][ C1] irq_exit_rcu+0x9/0x20 [ 84.184022][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 84.189638][ C1] [ 84.192550][ C1] [ 84.195465][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.201429][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 84.206701][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 84.226292][ C1] RSP: 0018:ffffc900046df3a0 EFLAGS: 00000206 [ 84.232342][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a3eb5080b501f000 [ 84.240291][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 84.248260][ C1] RBP: ffffc900046df4a8 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 84.256215][ C1] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 1ffff920008dbe80 [ 84.264168][ C1] R13: ffffffff8d1321a0 R14: 0000000000000246 R15: dffffc0000000000 [ 84.272133][ C1] ? read_lock_is_recursive+0x20/0x20 [ 84.277502][ C1] ? page_ext_put+0x9c/0xb0 [ 84.281987][ C1] ? pfn_valid+0xcd/0x420 [ 84.286315][ C1] pfn_valid+0xe9/0x420 [ 84.290466][ C1] ? pfn_valid+0xcd/0x420 [ 84.294777][ C1] page_table_check_set+0x25/0x6e0 [ 84.299884][ C1] copy_page_range+0x24fc/0x3700 [ 84.304816][ C1] ? pfn_valid+0x450/0x450 [ 84.309217][ C1] ? copy_mm+0x1705/0x1e30 [ 84.313616][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 84.318638][ C1] ? down_write+0x16e/0x200 [ 84.323138][ C1] ? up_write+0x1be/0x410 [ 84.327475][ C1] copy_mm+0x1751/0x1e30 [ 84.331710][ C1] ? copy_signal+0x640/0x640 [ 84.336307][ C1] ? __init_rwsem+0x122/0x160 [ 84.340988][ C1] ? copy_signal+0x51f/0x640 [ 84.345589][ C1] copy_process+0x16c9/0x3da0 [ 84.350259][ C1] ? copy_process+0x98e/0x3da0 [ 84.355008][ C1] ? __pidfd_prepare+0x140/0x140 [ 84.359927][ C1] kernel_clone+0x24b/0x8a0 [ 84.364417][ C1] ? create_io_thread+0x190/0x190 [ 84.369422][ C1] ? __might_fault+0xaa/0x120 [ 84.374084][ C1] __x64_sys_clone+0x1b7/0x230 [ 84.378833][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 84.383841][ C1] ? lock_chain_count+0x20/0x20 [ 84.388674][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 84.393855][ C1] do_syscall_64+0x55/0xb0 [ 84.398253][ C1] ? clear_bhb_loop+0x40/0x90 [ 84.402910][ C1] ? clear_bhb_loop+0x40/0x90 [ 84.407563][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.413454][ C1] RIP: 0033:0x7f323a7c6bd2 [ 84.417853][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 84.437446][ C1] RSP: 002b:00007fffc82990a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 84.445843][ C1] RAX: ffffffffffffffda RBX: 00007fffc82990a0 RCX: 00007f323a7c6bd2 [ 84.453794][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 84.461858][ C1] RBP: 00007fffc829922c R08: 0000000000000000 R09: 0000000000000001 [ 84.469810][ C1] R10: 00005555637327d0 R11: 0000000000000246 R12: 0000000000000001 [ 84.477759][ C1] R13: 0000000000000024 R14: 0000000000012fa9 R15: 00007fffc8299280 [ 84.486165][ C1] [ 84.489426][ C1] Kernel Offset: disabled [ 84.493737][ C1] Rebooting in 86400 seconds..