last executing test programs: 5.153074309s ago: executing program 0 (id=79): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRES32], 0x13, 0x5515, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ftruncate(r0, 0x4a8e) 4.790035509s ago: executing program 2 (id=81): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000013c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 4.711639081s ago: executing program 2 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 4.521801146s ago: executing program 2 (id=85): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 4.295337902s ago: executing program 2 (id=86): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xd8b, 0xc, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x30, 0xff, 0x9}}}}}]}}]}}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)={0x11, 0x5, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x9, 0x6, [0x9, 0x5b8, 0x5, 0x9]}}, @enc_lim={0x4, 0x1, 0x1}]}, 0x38) 3.919944921s ago: executing program 0 (id=88): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x18, 0xf, "ee4ef9677ff3f932698ca9fd6e8aee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.00191005s ago: executing program 2 (id=91): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x44085) 1.758573235s ago: executing program 2 (id=92): r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 1.671239298s ago: executing program 3 (id=93): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0xfe, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e31, 0x1, @loopback, 0x7ffffffc}, 0x1c) listen(r0, 0x8) 1.610088399s ago: executing program 1 (id=94): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 1.536868111s ago: executing program 3 (id=95): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.429696224s ago: executing program 1 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 1.073919103s ago: executing program 1 (id=97): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000005c0)={0x7f, "42fce3753785259206be0000000000000000005600", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000280)=0xffffabe6) 938.595826ms ago: executing program 3 (id=98): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @local, 0x1b}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001240)="7b62945da65d934746c62127fe5f8dea297500d531af3d82a6660c404efb3d6218b5705af0b3cf2f446282ea5a43626f311c3caac11af2273194a7c9792a95245285c1b081d57c759398e010e28c3ff1ad6a39397eb54c7bd56354a5655fa08b143dd80e1ffd976335fdba870f53439b6b75c24eb44b44c28fb21a922d23ac3acee7955767f0ede9e6d818fa8b9f7b0042c00afd311a964b8aeec39c5a6ff0589ba532823880b47da1c86d22c0fb882b70e5cd3e59954a2b699ee1a4dab4139a11ab8a2c071c01aa7ee90d0153ff81185d437d4aa3700d9a73", 0xfdef}, {0x0}], 0x3) 870.792528ms ago: executing program 1 (id=99): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc) 745.960611ms ago: executing program 0 (id=100): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r1, 0x1, 0x0) getdents64(r1, &(0x7f00000003c0)=""/31, 0x1f) 610.513614ms ago: executing program 1 (id=101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 574.894126ms ago: executing program 0 (id=102): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) ppoll(&(0x7f0000000140)=[{r1, 0xc}, {r0, 0x4180}], 0x2, 0x0, 0x0, 0x0) 510.038977ms ago: executing program 3 (id=103): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x3f, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 284.519173ms ago: executing program 3 (id=104): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007a80)=[{{0x0, 0x0, 0x0}, 0x810f}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x7dbb, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 270.337303ms ago: executing program 1 (id=105): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf32(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460b397a2dd4000000000000000300060007000000ba03000038000000e50100000180ffff0600200003"], 0x58) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 214.080594ms ago: executing program 0 (id=106): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8900, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000001c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x5, r1, 0x0, &(0x7f00000017c0)="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", 0x1000, 0x20000000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 132.165216ms ago: executing program 0 (id=107): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) 0s ago: executing program 3 (id=108): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 76.578219][ T5759] cgroup: Unknown subsys name 'net' [ 76.709553][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.628999][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.184599][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.207961][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.220536][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.235126][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.243410][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.251664][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.272564][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.281405][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.303565][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.322055][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.323248][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.338409][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.348520][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.365086][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.373175][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.381038][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.389638][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.403353][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.410496][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.418671][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.426440][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.442182][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.457268][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.464919][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.838312][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.906151][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 81.067978][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 81.094733][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.104039][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.111355][ T5775] bridge_slave_0: entered allmulticast mode [ 81.118619][ T5775] bridge_slave_0: entered promiscuous mode [ 81.149290][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.158448][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.165925][ T5775] bridge_slave_1: entered allmulticast mode [ 81.173904][ T5775] bridge_slave_1: entered promiscuous mode [ 81.221994][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.229342][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.241280][ T5771] bridge_slave_0: entered allmulticast mode [ 81.249104][ T5771] bridge_slave_0: entered promiscuous mode [ 81.269421][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.283171][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.314901][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.322394][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.329685][ T5771] bridge_slave_1: entered allmulticast mode [ 81.338044][ T5771] bridge_slave_1: entered promiscuous mode [ 81.358960][ T5775] team0: Port device team_slave_0 added [ 81.387196][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.399195][ T5775] team0: Port device team_slave_1 added [ 81.463785][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.471659][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.498222][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.513410][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.534238][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.542376][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.549662][ T5780] bridge_slave_0: entered allmulticast mode [ 81.557103][ T5780] bridge_slave_0: entered promiscuous mode [ 81.567588][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.575357][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.583005][ T5780] bridge_slave_1: entered allmulticast mode [ 81.589924][ T5780] bridge_slave_1: entered promiscuous mode [ 81.598031][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.607813][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.637867][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.655188][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.772514][ T5771] team0: Port device team_slave_0 added [ 81.782329][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.803854][ T5771] team0: Port device team_slave_1 added [ 81.816257][ T5775] hsr_slave_0: entered promiscuous mode [ 81.823349][ T5775] hsr_slave_1: entered promiscuous mode [ 81.832860][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.842800][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.849978][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.858937][ T5779] bridge_slave_0: entered allmulticast mode [ 81.866117][ T5779] bridge_slave_0: entered promiscuous mode [ 81.919683][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.926996][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.934435][ T5779] bridge_slave_1: entered allmulticast mode [ 81.941373][ T5779] bridge_slave_1: entered promiscuous mode [ 81.959553][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.967022][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.996100][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.009000][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.016293][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.048169][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.065493][ T5780] team0: Port device team_slave_0 added [ 82.084286][ T5780] team0: Port device team_slave_1 added [ 82.146275][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.158749][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.187692][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.194772][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.221158][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.263460][ T5779] team0: Port device team_slave_0 added [ 82.270584][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.277814][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.305747][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.337897][ T5779] team0: Port device team_slave_1 added [ 82.362648][ T5778] Bluetooth: hci1: command tx timeout [ 82.386093][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.393388][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.420162][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.441963][ T5778] Bluetooth: hci0: command tx timeout [ 82.456873][ T5771] hsr_slave_0: entered promiscuous mode [ 82.463728][ T5771] hsr_slave_1: entered promiscuous mode [ 82.469926][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.477852][ T5771] Cannot create hsr debugfs directory [ 82.484190][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.491170][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.521128][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.532523][ T5778] Bluetooth: hci3: command tx timeout [ 82.537993][ T51] Bluetooth: hci2: command tx timeout [ 82.568125][ T5780] hsr_slave_0: entered promiscuous mode [ 82.575041][ T5780] hsr_slave_1: entered promiscuous mode [ 82.581178][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.589155][ T5780] Cannot create hsr debugfs directory [ 82.736832][ T5779] hsr_slave_0: entered promiscuous mode [ 82.743431][ T5779] hsr_slave_1: entered promiscuous mode [ 82.749808][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.758173][ T5779] Cannot create hsr debugfs directory [ 82.991140][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.015366][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.026864][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.062713][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.163352][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.186865][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.196942][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.215347][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.280513][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.292466][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.306593][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.317907][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.383563][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.423119][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.435603][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.457712][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.553303][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.589752][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.612915][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.640521][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.648051][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.674738][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.694110][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.701548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.758337][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.765578][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.783358][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.790553][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.805507][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.844018][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.879644][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.935904][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.960238][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.967556][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.005605][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.012919][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.026675][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.034061][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.060248][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.067584][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.099958][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.332549][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.443429][ T51] Bluetooth: hci1: command tx timeout [ 84.479608][ T5775] veth0_vlan: entered promiscuous mode [ 84.523125][ T51] Bluetooth: hci0: command tx timeout [ 84.593913][ T5775] veth1_vlan: entered promiscuous mode [ 84.603548][ T51] Bluetooth: hci3: command tx timeout [ 84.609053][ T51] Bluetooth: hci2: command tx timeout [ 84.731585][ T5775] veth0_macvtap: entered promiscuous mode [ 84.750940][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.768203][ T5775] veth1_macvtap: entered promiscuous mode [ 84.801594][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.828101][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.857534][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.876933][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.918655][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.929248][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.938480][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.947971][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.991549][ T5771] veth0_vlan: entered promiscuous mode [ 85.065173][ T5771] veth1_vlan: entered promiscuous mode [ 85.106887][ T5779] veth0_vlan: entered promiscuous mode [ 85.153117][ T5779] veth1_vlan: entered promiscuous mode [ 85.173572][ T5780] veth0_vlan: entered promiscuous mode [ 85.192813][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.194592][ T5780] veth1_vlan: entered promiscuous mode [ 85.201047][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.283979][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.293346][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.333186][ T5779] veth0_macvtap: entered promiscuous mode [ 85.340922][ T5771] veth0_macvtap: entered promiscuous mode [ 85.370586][ T5771] veth1_macvtap: entered promiscuous mode [ 85.396769][ T5779] veth1_macvtap: entered promiscuous mode [ 85.444778][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.456542][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.468821][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.481041][ T5780] veth0_macvtap: entered promiscuous mode [ 85.505474][ T5780] veth1_macvtap: entered promiscuous mode [ 85.525677][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.551955][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.586243][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.628013][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.651064][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.663557][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.690937][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.708276][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.724768][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.737787][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.747989][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.757862][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.787112][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.804476][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.814858][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.828101][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.840478][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.869653][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.878781][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.901997][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.911174][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.974535][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.987899][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.998241][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.009481][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.019443][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.030044][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.043730][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.090674][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.102359][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.112984][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.124476][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.134384][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.145448][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.157334][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.196296][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.207975][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.216860][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.225832][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.235928][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.304588][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.312699][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.389774][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.398054][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.418088][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.429778][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.447390][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 86.466123][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.506139][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 86.522819][ T51] Bluetooth: hci1: command tx timeout [ 86.537645][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.566019][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.583455][ T5814] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 86.597904][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.602820][ T51] Bluetooth: hci0: command tx timeout [ 86.608560][ T5814] usb 2-1: Product: syz [ 86.664685][ T5814] usb 2-1: Manufacturer: syz [ 86.669395][ T5814] usb 2-1: SerialNumber: syz [ 86.682852][ T51] Bluetooth: hci3: command tx timeout [ 86.688026][ T5778] Bluetooth: hci2: command tx timeout [ 86.693803][ T5827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.707256][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.718739][ T5827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.724346][ T5814] usb 2-1: config 0 descriptor?? [ 86.727097][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.024539][ T5814] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 87.322398][ T5859] syz.3.10[5859]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.362470][ T5859] loop3: detected capacity change from 0 to 256 [ 87.388275][ T5843] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 87.389733][ T5859] exfat: Deprecated parameter 'utf8' [ 87.431689][ T5859] exfat: Deprecated parameter 'namecase' [ 87.496096][ T5814] usb 2-1: USB disconnect, device number 2 [ 87.605031][ T5859] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d) [ 87.825381][ T5868] loop0: detected capacity change from 0 to 128 [ 87.919857][ T5868] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.031019][ T5868] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.061374][ T5868] capability: warning: `syz.0.14' uses deprecated v2 capabilities in a way that may be insecure [ 88.215396][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.603273][ T51] Bluetooth: hci1: command tx timeout [ 88.682053][ T51] Bluetooth: hci0: command tx timeout [ 88.762664][ T51] Bluetooth: hci2: command tx timeout [ 88.768999][ T51] Bluetooth: hci3: command tx timeout [ 88.781929][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.972087][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 88.991572][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 89.020723][ T28] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 89.032282][ T5761] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.047488][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.080951][ T28] usb 1-1: Product: syz [ 89.094133][ T28] usb 1-1: Manufacturer: syz [ 89.114109][ T28] usb 1-1: SerialNumber: syz [ 89.133586][ T28] usb 1-1: config 0 descriptor?? [ 89.166203][ T28] hub 1-1:0.0: bad descriptor, ignoring hub [ 89.192515][ T28] hub: probe of 1-1:0.0 failed with error -5 [ 89.228831][ T28] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 89.242229][ T5761] usb 2-1: Using ep0 maxpacket: 32 [ 89.257970][ T5761] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.281829][ T5761] usb 2-1: config 0 has no interface number 0 [ 89.327945][ T5761] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 89.356539][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.391743][ C0] sched: RT throttling activated [ 89.414193][ T5761] usb 2-1: Product: syz [ 89.445379][ T5761] usb 2-1: Manufacturer: syz [ 89.466637][ T5761] usb 2-1: SerialNumber: syz [ 89.527726][ T5761] usb 2-1: config 0 descriptor?? [ 89.656313][ T5761] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 89.697010][ T5883] loop3: detected capacity change from 0 to 131072 [ 89.710244][ T5883] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 89.719266][ T5883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.724705][ T5761] usb 2-1: selecting invalid altsetting 1 [ 89.738565][ T5883] F2FS-fs (loop3): invalid crc value [ 89.766219][ T5761] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 89.789176][ T5883] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.855291][ T5883] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.862762][ T5883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 89.897616][ T5761] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.926462][ T5883] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 89.934993][ T5761] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 90.015851][ T5761] usb 2-1: media controller created [ 90.028851][ T5815] usb 1-1: USB disconnect, device number 2 [ 90.144365][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.207024][ T5761] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 90.226234][ T5761] zl10353_read_register: readreg error (reg=127, ret==-71) [ 90.247943][ T5761] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 90.355312][ T5761] usb 2-1: USB disconnect, device number 3 [ 90.443196][ T5782] Bluetooth: hci4: command 0x1003 tx timeout [ 90.443297][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.748328][ T5900] svc: failed to register nfsdv3 RPC service (errno 111). [ 90.773661][ T5900] svc: failed to register nfsaclv3 RPC service (errno 111). [ 90.858759][ T5904] loop0: detected capacity change from 0 to 128 [ 90.947026][ T5904] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.003321][ T5904] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.224898][ T5908] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 91.262320][ T5908] netlink: 'syz.3.26': attribute type 2 has an invalid length. [ 91.270137][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 91.516926][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.753312][ T5902] loop1: detected capacity change from 0 to 32768 [ 92.160153][ T5910] loop2: detected capacity change from 0 to 32768 [ 92.175337][ T5910] ======================================================= [ 92.175337][ T5910] WARNING: The mand mount option has been deprecated and [ 92.175337][ T5910] and is ignored by this kernel. Remove the mand [ 92.175337][ T5910] option from the mount to silence this warning. [ 92.175337][ T5910] ======================================================= [ 92.335639][ T5910] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.534620][ T23] cfg80211: failed to load regulatory.db [ 92.725367][ T5910] syz.2.27 (5910) used greatest stack depth: 18840 bytes left [ 92.773931][ T5915] loop0: detected capacity change from 0 to 40427 [ 92.794156][ T5915] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 92.801562][ T5915] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 92.869334][ T5915] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(2560) blocks(2560) [ 92.899294][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 92.914161][ T5915] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 93.065657][ T5915] overlayfs: invalid origin (0000) [ 94.064319][ T5952] loop1: detected capacity change from 0 to 256 [ 94.905575][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.913814][ T5813] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.117628][ T5813] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 95.129162][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.139846][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.157961][ T5812] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 95.169096][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.179952][ T5812] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 95.190698][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.205512][ T5812] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 95.219822][ T5812] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 95.230454][ T5813] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.240111][ T5813] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.249011][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.257881][ T5813] usb 2-1: Manufacturer: syz [ 95.267747][ T5813] usb 2-1: config 0 descriptor?? [ 95.282257][ T5957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.302495][ T5957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.315301][ T5812] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 95.334798][ T5812] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 95.344020][ T5812] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 95.366994][ T5812] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 95.404756][ T5812] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 95.419517][ T5812] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 95.442247][ T5812] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 95.735218][ T5813] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 95.752744][ T5813] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 95.812637][ T5813] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 95.843078][ T5812] usb 4-1: USB disconnect, device number 2 [ 95.863959][ T5812] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 95.901483][ T5812] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 95.966343][ T5812] keyspan 4-1:1.0: device disconnected [ 96.008716][ T5980] loop2: detected capacity change from 0 to 64 [ 96.030352][ T23] usb 2-1: USB disconnect, device number 4 [ 96.210440][ T5982] fido_id[5982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 96.401202][ T5987] macsec1: entered allmulticast mode [ 96.408594][ T5987] veth1_macvtap: entered allmulticast mode [ 96.422131][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 96.427853][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.613047][ T5987] veth1_macvtap (unregistering): left allmulticast mode [ 96.778219][ T5995] loop1: detected capacity change from 0 to 1024 [ 96.872472][ T5997] loop3: detected capacity change from 0 to 512 [ 96.966414][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.037587][ T5997] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.150233][ T49] hfsplus: b-tree write err: -5, ino 8 [ 97.184298][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.493349][ T6009] 9pnet: p9_errstr2errno: server reported unknown error [ 97.517498][ T6014] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 97.602802][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.626456][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 97.692580][ T6018] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 97.821823][ T5888] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.844189][ T5888] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.850558][ T6021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.868929][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.875343][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 97.884449][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 97.900500][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 97.919128][ T5888] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.928825][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.937109][ T5888] usb 2-1: Product: syz [ 97.942966][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.945151][ T5888] usb 2-1: Manufacturer: syz [ 97.971133][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 97.977843][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 97.997926][ T5888] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 98.008792][ T5888] cdc_wdm 2-1:1.0: Unknown control protocol [ 98.124738][ T5813] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 98.135394][ T5813] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.149250][ T5813] usb 3-1: config 2 interface 0 has no altsetting 0 [ 98.158286][ T5813] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 98.167877][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.176416][ T5813] usb 3-1: Product: syz [ 98.180808][ T5813] usb 3-1: Manufacturer: syz [ 98.186282][ T5813] usb 3-1: SerialNumber: syz [ 98.361987][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.395302][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 98.402072][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 98.408918][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 98.416729][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 98.423415][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 98.429953][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 98.436673][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 98.443011][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 98.449652][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 98.459408][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 98.466093][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 98.472611][ T23] usb 2-1: USB disconnect, device number 5 [ 98.480269][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 98.487028][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 98.493245][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 98.502093][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.580164][ T5813] usb 3-1: USB disconnect, device number 2 [ 98.601874][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 98.629865][ T5888] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 98.647970][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.664061][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.683541][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.710417][ T5888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.730257][ T5888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.740665][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.975987][ T5888] usb 4-1: GET_CAPABILITIES returned 0 [ 98.982450][ T5888] usbtmc 4-1:16.0: can't read capabilities [ 99.213889][ T6029] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 99.526196][ T6050] input: syz0 as /devices/virtual/input/input5 [ 99.596800][ T6038] loop0: detected capacity change from 0 to 40427 [ 99.633935][ T6038] F2FS-fs (loop0): invalid crc value [ 99.655701][ T6038] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.828004][ T6038] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.000915][ T5779] syz-executor: attempt to access beyond end of device [ 100.000915][ T5779] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.035543][ T5779] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.101892][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.292021][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 100.317034][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 100.347820][ T23] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 100.371834][ T23] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 100.402762][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.415748][ T23] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 100.435288][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.463602][ T23] usb 3-1: config 0 descriptor?? [ 100.737593][ T6059] loop1: detected capacity change from 0 to 40427 [ 100.810308][ T6059] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7 [ 100.832097][ T6059] F2FS-fs (loop1): invalid crc value [ 100.850386][ T6059] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.963838][ T23] input: HID 0925:8866 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0925:8866.0002/input/input6 [ 101.019788][ T6059] F2FS-fs (loop1): Start checkpoint disabled! [ 101.072005][ T6059] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 101.127552][ T23] smartjoyplus 0003:0925:8866.0002: input,hidraw0: USB HID vd.8b Joystick [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 101.171452][ T5815] usb 4-1: USB disconnect, device number 3 [ 101.203683][ T23] smartjoyplus 0003:0925:8866.0002: no output reports found [ 101.233333][ T5813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.277722][ T23] usb 3-1: USB disconnect, device number 3 [ 101.374722][ T6059] syz.1.87: attempt to access beyond end of device [ 101.374722][ T6059] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.410546][ T6065] fido_id[6065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 101.463930][ T5813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 101.481336][ T5813] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 101.496809][ T5813] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 101.506414][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.554933][ T5813] usb 1-1: probing VID:PID(0424:012C) [ 101.580214][ T5813] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 101.597057][ T5813] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 101.611818][ T5813] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 101.625275][ T5813] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 101.630474][ T11] kworker/u4:0: attempt to access beyond end of device [ 101.630474][ T11] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 101.641800][ T5813] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 101.665127][ T11] kworker/u4:0: attempt to access beyond end of device [ 101.665127][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 101.693156][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 101.700370][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 101.960041][ T5813] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 102.160823][ T5813] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 103.031943][ T5813] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 103.091532][ T5813] usb 1-1: USB disconnect, device number 3 [ 103.112561][ T5815] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 103.236133][ T5813] USB vub300 remote SDIO host controller[0] now disconnected [ 103.846297][ T6108] process 'syz.1.105' launched './file0' with NULL argv: empty string added [ 103.967057][ T6113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 103.974076][ T6113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.025554][ T6113] vhci_hcd vhci_hcd.0: Device attached [ 104.052974][ T6116] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 104.059824][ T6116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.078269][ T6116] vhci_hcd vhci_hcd.0: Device attached [ 104.091614][ T6113] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 104.098330][ T6113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.107136][ T6113] vhci_hcd vhci_hcd.0: Device attached [ 104.132328][ C0] [ 104.135117][ C0] ============================= [ 104.140024][ C0] WARNING: suspicious RCU usage [ 104.143135][ T6113] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(8) [ 104.144954][ C0] syzkaller #0 Not tainted [ 104.151600][ T6113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.156088][ C0] ----------------------------- [ 104.168811][ C0] kernel/sched/core.c:10174 Illegal context switch in RCU-sched read-side critical section! [ 104.179247][ C0] [ 104.179247][ C0] other info that might help us debug this: [ 104.179247][ C0] [ 104.189665][ C0] [ 104.189665][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 104.197962][ C0] 5 locks held by syz.3.108/6120: [ 104.203718][ C0] #0: ffff88807db0c420 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 104.213703][ C0] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 104.223532][ C0] #2: ffff8880307f9a98 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 104.228327][ T6113] vhci_hcd vhci_hcd.0: Device attached [ 104.234898][ C0] #3: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 104.234980][ C0] #4: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 104.261321][ C0] [ 104.261321][ C0] stack backtrace: [ 104.267726][ C0] CPU: 0 PID: 6120 Comm: syz.3.108 Not tainted syzkaller #0 [ 104.275166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.283426][ T6116] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 104.285898][ C0] Call Trace: [ 104.285912][ C0] [ 104.292966][ T6116] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.296250][ C0] dump_stack_lvl+0x18c/0x250 [ 104.299583][ T23] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 104.306738][ C0] ? show_regs_print_info+0x20/0x20 [ 104.306768][ C0] ? load_image+0x420/0x420 [ 104.306802][ C0] lockdep_rcu_suspicious+0x1e1/0x300 [ 104.306831][ C0] __might_resched+0x123/0x5f0 [ 104.340929][ C0] ? __might_sleep+0xe0/0xe0 [ 104.345862][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 104.351274][ T6116] vhci_hcd vhci_hcd.0: Device attached [ 104.351958][ C0] ? _raw_spin_unlock+0x40/0x40 [ 104.351985][ C0] ? kasan_set_track+0x5f/0x70 [ 104.352006][ C0] ? kasan_save_free_info+0x28/0x40 [ 104.352029][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 104.377812][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 104.382355][ T6123] vhci_hcd: connection closed [ 104.383579][ C0] __flush_work+0x10f/0xac0 [ 104.383623][ C0] ? flush_work+0x20/0x20 [ 104.397414][ C0] ? __timer_delete+0x6b/0x290 [ 104.399210][ T6115] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 104.402227][ C0] ? mark_lock+0x94/0x320 [ 104.402266][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.402289][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 104.402309][ C0] ? lock_chain_count+0x20/0x20 [ 104.402333][ C0] ? __cancel_work_timer+0x36e/0x560 [ 104.402356][ C0] __cancel_work_timer+0x3f8/0x560 [ 104.402381][ C0] ? cancel_work_sync+0x20/0x20 [ 104.411941][ T6117] vhci_hcd: connection closed [ 104.413409][ C0] ? kobject_put+0x260/0x450 [ 104.434646][ T11] vhci_hcd: stop threads [ 104.435629][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 104.451248][ T6121] vhci_hcd: connection closed [ 104.455186][ C0] ? kobject_put+0x421/0x450 [ 104.455236][ C0] mmc_free_host+0x19/0x30 [ 104.455263][ C0] call_timer_fn+0x189/0x540 [ 104.470687][ T11] vhci_hcd: release socket [ 104.474085][ C0] ? kref_get+0x70/0x70 [ 104.474124][ C0] ? call_timer_fn+0xd2/0x540 [ 104.474145][ C0] ? __run_timers+0x810/0x810 [ 104.474173][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.474193][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 104.474217][ C0] ? kref_get+0x70/0x70 [ 104.474242][ C0] __run_timers+0x570/0x810 [ 104.474278][ C0] ? detach_timer+0x2b0/0x2b0 [ 104.494891][ T11] vhci_hcd: disconnect device [ 104.496753][ C0] ? lock_chain_count+0x20/0x20 [ 104.527969][ T11] vhci_hcd: stop threads [ 104.530142][ C0] run_timer_softirq+0x67/0xf0 [ 104.530179][ C0] handle_softirqs+0x27d/0x820 [ 104.549120][ C0] ? read_tsc+0x9/0x20 [ 104.553336][ C0] ? ktime_get+0x24b/0x280 [ 104.557465][ T11] vhci_hcd: release socket [ 104.557887][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 104.557922][ C0] ? do_softirq+0x1a0/0x1a0 [ 104.570778][ T6125] vhci_hcd: connection closed [ 104.572911][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 104.572949][ C0] __irq_exit_rcu+0xd3/0x190 [ 104.572971][ C0] ? irq_exit_rcu+0x20/0x20 [ 104.572998][ C0] irq_exit_rcu+0x9/0x20 [ 104.573015][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 104.599246][ T11] vhci_hcd: disconnect device [ 104.604091][ C0] [ 104.604103][ C0] [ 104.604111][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.604142][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 104.604169][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e 65 8b 0d d1 31 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 104.604183][ C0] RSP: 0018:ffffc900053f7420 EFLAGS: 00000246 [ 104.604202][ C0] RAX: ffffffff81eb18f9 RBX: ffffffff81eb167d RCX: 0000000080000002 [ 104.604216][ C0] RDX: ffff88801feebc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 104.604228][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 104.604241][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 104.604254][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fff9180 [ 104.604271][ C0] ? pfn_valid+0xcd/0x420 [ 104.604296][ C0] ? pfn_valid+0x349/0x420 [ 104.615223][ T11] vhci_hcd: stop threads [ 104.615249][ C0] pfn_valid+0x349/0x420 [ 104.637572][ T11] vhci_hcd: release socket [ 104.649534][ C0] page_table_check_clear+0x1e/0x6a0 [ 104.649572][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 104.649597][ C0] unmap_page_range+0x1c35/0x32f0 [ 104.649652][ C0] ? copy_page_range+0x3700/0x3700 [ 104.649691][ C0] unmap_vmas+0x286/0x3f0 [ 104.678632][ T11] vhci_hcd: disconnect device [ 104.680476][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 104.680520][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 104.761121][ C0] exit_mmap+0x238/0xb90 [ 104.765428][ C0] ? exit_mm_release+0x1a/0x30 [ 104.770361][ C0] ? vm_brk+0x30/0x30 [ 104.774412][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 104.780213][ C0] ? uprobe_clear_state+0x278/0x290 [ 104.785577][ C0] __mmput+0x118/0x3a0 [ 104.789701][ C0] exit_mm+0x23f/0x340 [ 104.793828][ C0] ? sysctl_delayacct+0x220/0x220 [ 104.799445][ C0] ? do_exit+0x2530/0x2530 [ 104.803932][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 104.808858][ C0] do_exit+0x909/0x2530 [ 104.813096][ C0] ? put_task_struct+0xc0/0xc0 [ 104.817925][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.823971][ C0] ? get_signal+0x100e/0x1390 [ 104.828805][ C0] ? lock_chain_count+0x20/0x20 [ 104.833840][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 104.839198][ C0] do_group_exit+0x22d/0x2f0 [ 104.843583][ T11] vhci_hcd: stop threads [ 104.843877][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 104.848238][ T11] vhci_hcd: release socket [ 104.853348][ C0] get_signal+0x12a6/0x1390 [ 104.853412][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 104.853443][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 104.853465][ C0] ? get_sigframe_size+0x20/0x20 [ 104.853505][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 104.853535][ C0] exit_to_user_mode_loop+0x70/0x110 [ 104.860952][ T11] vhci_hcd: disconnect device [ 104.862478][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 104.862520][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 104.862550][ C0] do_syscall_64+0x61/0xb0 [ 104.862568][ C0] ? clear_bhb_loop+0x40/0x90 [ 104.862590][ C0] ? clear_bhb_loop+0x40/0x90 [ 104.862611][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.862632][ C0] RIP: 0033:0x7f64a359e159 [ 104.876394][ T11] vhci_hcd: stop threads [ 104.879327][ C0] Code: Unable to access opcode bytes at 0x7f64a359e12f. [ 104.879343][ C0] RSP: 002b:00007f64a43980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.879369][ C0] RAX: 0000000000000001 RBX: 00007f64a3825fa8 RCX: 00007f64a359e159 [ 104.879383][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64a3825fac [ 104.912292][ T11] vhci_hcd: release socket [ 104.915810][ C0] RBP: 00007f64a3825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 104.915844][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.915856][ C0] R13: 00007f64a3826038 R14: 00007fff05f25290 R15: 00007fff05f25378 [ 104.915888][ C0] [ 104.941354][ T11] vhci_hcd: disconnect device [ 104.942561][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 105.013159][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6120, name: syz.3.108 [ 105.022736][ C0] preempt_count: 102, expected: 0 [ 105.028107][ C0] RCU nest depth: 1, expected: 0 [ 105.033501][ C0] 5 locks held by syz.3.108/6120: [ 105.039009][ C0] #0: ffff88807db0c420 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 105.048324][ C0] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 105.057935][ C0] #2: ffff8880307f9a98 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 105.068731][ C0] #3: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 105.078687][ C0] #4: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 105.089279][ C0] Preemption disabled at: [ 105.089294][ C0] [<0000000000000000>] 0x0 [ 105.098162][ C0] CPU: 0 PID: 6120 Comm: syz.3.108 Not tainted syzkaller #0 [ 105.105496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.116302][ C0] Call Trace: [ 105.119632][ C0] [ 105.122522][ C0] dump_stack_lvl+0x18c/0x250 [ 105.127262][ C0] ? show_regs_print_info+0x20/0x20 [ 105.132529][ C0] ? load_image+0x420/0x420 [ 105.137194][ C0] __might_resched+0x48d/0x5f0 [ 105.142025][ C0] ? __might_sleep+0xe0/0xe0 [ 105.146681][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 105.152632][ C0] ? _raw_spin_unlock+0x40/0x40 [ 105.157546][ C0] ? kasan_set_track+0x5f/0x70 [ 105.162363][ C0] ? kasan_save_free_info+0x28/0x40 [ 105.167608][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 105.172956][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 105.178830][ C0] __flush_work+0x10f/0xac0 [ 105.183403][ C0] ? flush_work+0x20/0x20 [ 105.187842][ C0] ? __timer_delete+0x6b/0x290 [ 105.192667][ C0] ? mark_lock+0x94/0x320 [ 105.197407][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.203447][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 105.208789][ C0] ? lock_chain_count+0x20/0x20 [ 105.213701][ C0] ? __cancel_work_timer+0x36e/0x560 [ 105.219308][ C0] __cancel_work_timer+0x3f8/0x560 [ 105.224762][ C0] ? cancel_work_sync+0x20/0x20 [ 105.229679][ C0] ? kobject_put+0x260/0x450 [ 105.234329][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 105.239432][ C0] ? kobject_put+0x421/0x450 [ 105.244115][ C0] mmc_free_host+0x19/0x30 [ 105.248592][ C0] call_timer_fn+0x189/0x540 [ 105.253246][ C0] ? kref_get+0x70/0x70 [ 105.257464][ C0] ? call_timer_fn+0xd2/0x540 [ 105.262290][ C0] ? __run_timers+0x810/0x810 [ 105.267196][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.272496][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 105.277872][ C0] ? kref_get+0x70/0x70 [ 105.282103][ C0] __run_timers+0x570/0x810 [ 105.286687][ C0] ? detach_timer+0x2b0/0x2b0 [ 105.291428][ C0] ? lock_chain_count+0x20/0x20 [ 105.296519][ C0] run_timer_softirq+0x67/0xf0 [ 105.301344][ C0] handle_softirqs+0x27d/0x820 [ 105.306347][ C0] ? read_tsc+0x9/0x20 [ 105.310483][ C0] ? ktime_get+0x24b/0x280 [ 105.314962][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 105.319921][ C0] ? do_softirq+0x1a0/0x1a0 [ 105.324570][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 105.329891][ C0] __irq_exit_rcu+0xd3/0x190 [ 105.334736][ C0] ? irq_exit_rcu+0x20/0x20 [ 105.339321][ C0] irq_exit_rcu+0x9/0x20 [ 105.343661][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 105.349457][ C0] [ 105.352425][ C0] [ 105.355396][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.361433][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 105.368330][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e 65 8b 0d d1 31 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 105.389039][ C0] RSP: 0018:ffffc900053f7420 EFLAGS: 00000246 [ 105.395166][ C0] RAX: ffffffff81eb18f9 RBX: ffffffff81eb167d RCX: 0000000080000002 [ 105.403396][ C0] RDX: ffff88801feebc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 105.411514][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 105.419629][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 105.427657][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fff9180 [ 105.436040][ C0] ? pfn_valid+0xcd/0x420 [ 105.440601][ C0] ? pfn_valid+0x349/0x420 [ 105.445367][ C0] pfn_valid+0x349/0x420 [ 105.449689][ C0] page_table_check_clear+0x1e/0x6a0 [ 105.455043][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 105.461088][ C0] unmap_page_range+0x1c35/0x32f0 [ 105.466257][ C0] ? copy_page_range+0x3700/0x3700 [ 105.471635][ C0] unmap_vmas+0x286/0x3f0 [ 105.476384][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 105.481745][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 105.486845][ C0] exit_mmap+0x238/0xb90 [ 105.491165][ C0] ? exit_mm_release+0x1a/0x30 [ 105.496248][ C0] ? vm_brk+0x30/0x30 [ 105.500907][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 105.506746][ C0] ? uprobe_clear_state+0x278/0x290 [ 105.512809][ C0] __mmput+0x118/0x3a0 [ 105.517750][ C0] exit_mm+0x23f/0x340 [ 105.522390][ C0] ? sysctl_delayacct+0x220/0x220 [ 105.528099][ C0] ? do_exit+0x2530/0x2530 [ 105.533179][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 105.538689][ C0] do_exit+0x909/0x2530 [ 105.543081][ C0] ? put_task_struct+0xc0/0xc0 [ 105.547910][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.553944][ C0] ? get_signal+0x100e/0x1390 [ 105.558850][ C0] ? lock_chain_count+0x20/0x20 [ 105.563760][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 105.569015][ C0] do_group_exit+0x22d/0x2f0 [ 105.573942][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 105.579695][ C0] get_signal+0x12a6/0x1390 [ 105.584713][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 105.590603][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 105.596656][ C0] ? get_sigframe_size+0x20/0x20 [ 105.601700][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 105.607211][ C0] exit_to_user_mode_loop+0x70/0x110 [ 105.612803][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 105.618489][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 105.624186][ C0] do_syscall_64+0x61/0xb0 [ 105.628667][ C0] ? clear_bhb_loop+0x40/0x90 [ 105.633393][ C0] ? clear_bhb_loop+0x40/0x90 [ 105.638314][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.644345][ C0] RIP: 0033:0x7f64a359e159 [ 105.648838][ C0] Code: Unable to access opcode bytes at 0x7f64a359e12f. [ 105.656599][ C0] RSP: 002b:00007f64a43980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.665166][ C0] RAX: 0000000000000001 RBX: 00007f64a3825fa8 RCX: 00007f64a359e159 [ 105.673266][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64a3825fac [ 105.681371][ C0] RBP: 00007f64a3825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 105.689997][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.698302][ C0] R13: 00007f64a3826038 R14: 00007fff05f25290 R15: 00007fff05f25378 [ 105.706911][ C0] [ 105.710858][ C0] [ 105.713267][ C0] ============================= [ 105.718149][ C0] WARNING: suspicious RCU usage [ 105.723248][ C0] syzkaller #0 Tainted: G W [ 105.729465][ C0] ----------------------------- [ 105.734382][ C0] kernel/rcu/srcutree.c:1377 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 105.747046][ C0] [ 105.747046][ C0] other info that might help us debug this: [ 105.747046][ C0] [ 105.757360][ C0] [ 105.757360][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 105.765509][ C0] 5 locks held by syz.3.108/6120: [ 105.770576][ C0] #0: ffff88807db0c420 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 105.779824][ C0] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 105.789696][ C0] #2: ffff8880307f9a98 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 105.800561][ C0] #3: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 105.810216][ C0] #4: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 105.820816][ C0] [ 105.820816][ C0] stack backtrace: [ 105.826995][ C0] CPU: 0 PID: 6120 Comm: syz.3.108 Tainted: G W syzkaller #0 [ 105.835819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.846000][ C0] Call Trace: [ 105.849401][ C0] [ 105.852289][ C0] dump_stack_lvl+0x18c/0x250 [ 105.857217][ C0] ? show_regs_print_info+0x20/0x20 [ 105.862435][ C0] ? load_image+0x420/0x420 [ 105.866959][ C0] lockdep_rcu_suspicious+0x1e1/0x300 [ 105.872446][ C0] __synchronize_srcu+0x150/0x3d0 [ 105.877679][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 105.883580][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 105.889486][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 105.895587][ C0] ? _raw_spin_unlock+0x40/0x40 [ 105.900453][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 105.906378][ C0] ? read_tsc+0x9/0x20 [ 105.910818][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 105.916758][ C0] ? synchronize_srcu+0x25a/0x280 [ 105.922213][ C0] wakeup_source_unregister+0x116/0x190 [ 105.927903][ C0] mmc_host_classdev_release+0x47/0x100 [ 105.933473][ C0] ? mmc_free_host+0x30/0x30 [ 105.938260][ C0] device_release+0xbc/0x1e0 [ 105.943013][ C0] kobject_put+0x21b/0x450 [ 105.947598][ C0] call_timer_fn+0x189/0x540 [ 105.952256][ C0] ? kref_get+0x70/0x70 [ 105.956497][ C0] ? call_timer_fn+0xd2/0x540 [ 105.961226][ C0] ? __run_timers+0x810/0x810 [ 105.966060][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.971479][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 105.976873][ C0] ? kref_get+0x70/0x70 [ 105.981818][ C0] __run_timers+0x570/0x810 [ 105.986361][ C0] ? detach_timer+0x2b0/0x2b0 [ 105.991141][ C0] ? lock_chain_count+0x20/0x20 [ 105.996022][ C0] run_timer_softirq+0x67/0xf0 [ 106.000961][ C0] handle_softirqs+0x27d/0x820 [ 106.005765][ C0] ? read_tsc+0x9/0x20 [ 106.009841][ C0] ? ktime_get+0x24b/0x280 [ 106.014271][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 106.019060][ C0] ? do_softirq+0x1a0/0x1a0 [ 106.024554][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 106.029881][ C0] __irq_exit_rcu+0xd3/0x190 [ 106.034588][ C0] ? irq_exit_rcu+0x20/0x20 [ 106.039120][ C0] irq_exit_rcu+0x9/0x20 [ 106.043460][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.049118][ C0] [ 106.052074][ C0] [ 106.055124][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.061112][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 106.067968][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e 65 8b 0d d1 31 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 106.087709][ C0] RSP: 0018:ffffc900053f7420 EFLAGS: 00000246 [ 106.093807][ C0] RAX: ffffffff81eb18f9 RBX: ffffffff81eb167d RCX: 0000000080000002 [ 106.102081][ C0] RDX: ffff88801feebc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 106.110135][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 106.118282][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 106.126372][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fff9180 [ 106.134397][ C0] ? pfn_valid+0xcd/0x420 [ 106.138758][ C0] ? pfn_valid+0x349/0x420 [ 106.143230][ C0] pfn_valid+0x349/0x420 [ 106.147723][ C0] page_table_check_clear+0x1e/0x6a0 [ 106.153075][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 106.159175][ C0] unmap_page_range+0x1c35/0x32f0 [ 106.164339][ C0] ? copy_page_range+0x3700/0x3700 [ 106.169481][ C0] unmap_vmas+0x286/0x3f0 [ 106.174284][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 106.179530][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 106.184646][ C0] exit_mmap+0x238/0xb90 [ 106.189186][ C0] ? exit_mm_release+0x1a/0x30 [ 106.193970][ C0] ? vm_brk+0x30/0x30 [ 106.197963][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 106.203648][ C0] ? uprobe_clear_state+0x278/0x290 [ 106.208901][ C0] __mmput+0x118/0x3a0 [ 106.213029][ C0] exit_mm+0x23f/0x340 [ 106.217153][ C0] ? sysctl_delayacct+0x220/0x220 [ 106.222326][ C0] ? do_exit+0x2530/0x2530 [ 106.226771][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 106.231645][ C0] do_exit+0x909/0x2530 [ 106.235858][ C0] ? put_task_struct+0xc0/0xc0 [ 106.240659][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 106.247126][ C0] ? get_signal+0x100e/0x1390 [ 106.252201][ C0] ? lock_chain_count+0x20/0x20 [ 106.257280][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 106.262316][ C0] do_group_exit+0x22d/0x2f0 [ 106.266917][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 106.272150][ C0] get_signal+0x12a6/0x1390 [ 106.276819][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 106.282431][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 106.288357][ C0] ? get_sigframe_size+0x20/0x20 [ 106.293320][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.298883][ C0] exit_to_user_mode_loop+0x70/0x110 [ 106.304266][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 106.309932][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 106.315517][ C0] do_syscall_64+0x61/0xb0 [ 106.319970][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.324680][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.329475][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.335495][ C0] RIP: 0033:0x7f64a359e159 [ 106.339921][ C0] Code: Unable to access opcode bytes at 0x7f64a359e12f. [ 106.346965][ C0] RSP: 002b:00007f64a43980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.355388][ C0] RAX: 0000000000000001 RBX: 00007f64a3825fa8 RCX: 00007f64a359e159 [ 106.363409][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64a3825fac [ 106.371411][ C0] RBP: 00007f64a3825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 106.379439][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.387418][ C0] R13: 00007f64a3826038 R14: 00007fff05f25290 R15: 00007fff05f25378 [ 106.395408][ C0] [ 106.398511][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 106.407893][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6120, name: syz.3.108 [ 106.416978][ C0] preempt_count: 102, expected: 0 [ 106.422054][ C0] RCU nest depth: 1, expected: 0 [ 106.427134][ C0] 5 locks held by syz.3.108/6120: [ 106.432221][ C0] #0: ffff88807db0c420 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 106.441440][ C0] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 106.451028][ C0] #2: ffff8880307f9a98 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 106.461792][ C0] #3: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 106.471288][ C0] #4: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 106.481904][ C0] Preemption disabled at: [ 106.481929][ C0] [<0000000000000000>] 0x0 [ 106.490706][ C0] CPU: 0 PID: 6120 Comm: syz.3.108 Tainted: G W syzkaller #0 [ 106.499489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.509741][ C0] Call Trace: [ 106.513031][ C0] [ 106.515988][ C0] dump_stack_lvl+0x18c/0x250 [ 106.520811][ C0] ? show_regs_print_info+0x20/0x20 [ 106.526038][ C0] ? load_image+0x420/0x420 [ 106.530559][ C0] __might_resched+0x48d/0x5f0 [ 106.535515][ C0] ? show_regs_print_info+0x20/0x20 [ 106.540788][ C0] ? __might_sleep+0xe0/0xe0 [ 106.545509][ C0] __synchronize_srcu+0x197/0x3d0 [ 106.550549][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 106.556485][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 106.562258][ C0] ? read_tsc+0x9/0x20 [ 106.566481][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 106.572157][ C0] ? synchronize_srcu+0x25a/0x280 [ 106.577430][ C0] wakeup_source_unregister+0x116/0x190 [ 106.583264][ C0] mmc_host_classdev_release+0x47/0x100 [ 106.588844][ C0] ? mmc_free_host+0x30/0x30 [ 106.593495][ C0] device_release+0xbc/0x1e0 [ 106.598215][ C0] kobject_put+0x21b/0x450 [ 106.602709][ C0] call_timer_fn+0x189/0x540 [ 106.607351][ C0] ? kref_get+0x70/0x70 [ 106.611534][ C0] ? call_timer_fn+0xd2/0x540 [ 106.616222][ C0] ? __run_timers+0x810/0x810 [ 106.620944][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.626191][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 106.631438][ C0] ? kref_get+0x70/0x70 [ 106.635618][ C0] __run_timers+0x570/0x810 [ 106.640163][ C0] ? detach_timer+0x2b0/0x2b0 [ 106.644867][ C0] ? lock_chain_count+0x20/0x20 [ 106.649749][ C0] run_timer_softirq+0x67/0xf0 [ 106.654550][ C0] handle_softirqs+0x27d/0x820 [ 106.659324][ C0] ? read_tsc+0x9/0x20 [ 106.663664][ C0] ? ktime_get+0x24b/0x280 [ 106.668093][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 106.672882][ C0] ? do_softirq+0x1a0/0x1a0 [ 106.677430][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 106.682764][ C0] __irq_exit_rcu+0xd3/0x190 [ 106.687491][ C0] ? irq_exit_rcu+0x20/0x20 [ 106.692120][ C0] irq_exit_rcu+0x9/0x20 [ 106.696475][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.702226][ C0] [ 106.705183][ C0] [ 106.708230][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.714258][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 106.721162][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e 65 8b 0d d1 31 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 106.741214][ C0] RSP: 0018:ffffc900053f7420 EFLAGS: 00000246 [ 106.747946][ C0] RAX: ffffffff81eb18f9 RBX: ffffffff81eb167d RCX: 0000000080000002 [ 106.755958][ C0] RDX: ffff88801feebc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 106.763975][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 106.771968][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 106.779970][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fff9180 [ 106.787955][ C0] ? pfn_valid+0xcd/0x420 [ 106.792400][ C0] ? pfn_valid+0x349/0x420 [ 106.796849][ C0] pfn_valid+0x349/0x420 [ 106.801113][ C0] page_table_check_clear+0x1e/0x6a0 [ 106.806406][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 106.812509][ C0] unmap_page_range+0x1c35/0x32f0 [ 106.817626][ C0] ? copy_page_range+0x3700/0x3700 [ 106.822757][ C0] unmap_vmas+0x286/0x3f0 [ 106.827109][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 106.832334][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 106.837429][ C0] exit_mmap+0x238/0xb90 [ 106.841855][ C0] ? exit_mm_release+0x1a/0x30 [ 106.846661][ C0] ? vm_brk+0x30/0x30 [ 106.850654][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 106.856343][ C0] ? uprobe_clear_state+0x278/0x290 [ 106.861613][ C0] __mmput+0x118/0x3a0 [ 106.865689][ C0] exit_mm+0x23f/0x340 [ 106.869865][ C0] ? sysctl_delayacct+0x220/0x220 [ 106.874896][ C0] ? do_exit+0x2530/0x2530 [ 106.879372][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 106.884333][ C0] do_exit+0x909/0x2530 [ 106.888646][ C0] ? put_task_struct+0xc0/0xc0 [ 106.893479][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 106.899586][ C0] ? get_signal+0x100e/0x1390 [ 106.904439][ C0] ? lock_chain_count+0x20/0x20 [ 106.909328][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 106.914555][ C0] do_group_exit+0x22d/0x2f0 [ 106.919176][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 106.924408][ C0] get_signal+0x12a6/0x1390 [ 106.929018][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 106.934665][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 106.940776][ C0] ? get_sigframe_size+0x20/0x20 [ 106.945757][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.951804][ C0] exit_to_user_mode_loop+0x70/0x110 [ 106.957183][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 106.962755][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 106.968414][ C0] do_syscall_64+0x61/0xb0 [ 106.972909][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.977904][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.982665][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.988578][ C0] RIP: 0033:0x7f64a359e159 [ 106.993021][ C0] Code: Unable to access opcode bytes at 0x7f64a359e12f. [ 107.000124][ C0] RSP: 002b:00007f64a43980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.008573][ C0] RAX: 0000000000000001 RBX: 00007f64a3825fa8 RCX: 00007f64a359e159 [ 107.016555][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64a3825fac [ 107.024538][ C0] RBP: 00007f64a3825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 107.032567][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.040632][ C0] R13: 00007f64a3826038 R14: 00007fff05f25290 R15: 00007fff05f25378 [ 107.048721][ C0] [ 107.051931][ C0] ODEBUG: object ffffc900000079c0 is NOT on stack ffffc900053f0000, but annotated. [ 107.055651][ C0] [ 107.055664][ C0] ====================================================== [ 107.055669][ C0] WARNING: possible circular locking dependency detected [ 107.055675][ C0] syzkaller #0 Tainted: G W [ 107.055686][ C0] ------------------------------------------------------ [ 107.055691][ C0] syz.3.108/6120 is trying to acquire lock: [ 107.055702][ C0] ffffffff8d1263e0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 107.055756][ C0] [ 107.055756][ C0] but task is already holding lock: [ 107.055760][ C0] ffffffff9754f290 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 107.055797][ C0] [ 107.055797][ C0] which lock already depends on the new lock. [ 107.055797][ C0] [ 107.055801][ C0] [ 107.055801][ C0] the existing dependency chain (in reverse order) is: [ 107.055805][ C0] [ 107.055805][ C0] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 107.055824][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 107.055843][ C0] debug_object_activate+0x6c/0x500 [ 107.055861][ C0] insert_work+0x35/0x310 [ 107.055881][ C0] __queue_work+0xbfd/0xfd0 [ 107.055894][ C0] queue_work_on+0x128/0x1f0 [ 107.055906][ C0] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 107.055931][ C0] rcu_init+0x10d/0x160 [ 107.055950][ C0] start_kernel+0x1fd/0x4e0 [ 107.055967][ C0] x86_64_start_reservations+0x2a/0x30 [ 107.055991][ C0] copy_bootdata+0x0/0xd0 [ 107.056014][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 107.056034][ C0] [ 107.056034][ C0] -> #3 (&pool->lock){-.-.}-{2:2}: [ 107.056057][ C0] _raw_spin_lock+0x2e/0x40 [ 107.056071][ C0] __queue_work+0x72f/0xfd0 [ 107.056106][ C0] queue_work_on+0x128/0x1f0 [ 107.056122][ C0] rpm_suspend+0x1133/0x1b60 [ 107.056147][ C0] __pm_runtime_idle+0x12f/0x1a0 [ 107.056168][ C0] __device_attach+0x352/0x420 [ 107.056194][ C0] bus_probe_device+0x180/0x260 [ 107.056216][ C0] device_add+0x87c/0xc40 [ 107.056233][ C0] serial_base_port_add+0x2f6/0x430 [ 107.056263][ C0] serial_core_register_port+0x378/0x20b0 [ 107.056278][ C0] serial8250_register_8250_port+0x15fd/0x1f40 [ 107.056308][ C0] serial_pnp_probe+0x577/0x750 [ 107.056326][ C0] pnp_device_probe+0x305/0x4b0 [ 107.056348][ C0] really_probe+0x247/0xae0 [ 107.056361][ C0] __driver_probe_device+0x1f5/0x390 [ 107.056408][ C0] driver_probe_device+0x4f/0x420 [ 107.056429][ C0] __driver_attach+0x444/0x6d0 [ 107.056461][ C0] bus_for_each_dev+0x235/0x2b0 [ 107.056480][ C0] bus_add_driver+0x340/0x630 [ 107.056500][ C0] driver_register+0x23a/0x310 [ 107.056522][ C0] serial8250_init+0x9a/0x170 [ 107.056539][ C0] do_one_initcall+0x242/0x790 [ 107.056558][ C0] do_initcall_level+0x13d/0x1f0 [ 107.056575][ C0] do_initcalls+0x69/0xd0 [ 107.056592][ C0] kernel_init_freeable+0x3d9/0x560 [ 107.056609][ C0] kernel_init+0x1d/0x1c0 [ 107.056624][ C0] ret_from_fork+0x48/0x80 [ 107.056645][ C0] ret_from_fork_asm+0x11/0x20 [ 107.056665][ C0] [ 107.056665][ C0] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 107.056689][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 107.056704][ C0] __pm_runtime_resume+0x10f/0x170 [ 107.056725][ C0] __uart_start+0x171/0x3e0 [ 107.056737][ C0] uart_write+0x449/0x5d0 [ 107.056749][ C0] n_tty_write+0xd3d/0x11e0 [ 107.056789][ C0] file_tty_write+0x529/0x960 [ 107.056808][ C0] vfs_write+0x474/0x9a0 [ 107.056844][ C0] ksys_write+0x151/0x260 [ 107.056865][ C0] do_syscall_64+0x55/0xb0 [ 107.056883][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.056900][ C0] [ 107.056900][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 107.056922][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 107.056936][ C0] serial8250_console_write+0x181/0x18b0 [ 107.056957][ C0] console_flush_all+0x6ad/0xcf0 [ 107.056976][ C0] console_unlock+0xad/0x350 [ 107.056995][ C0] vprintk_emit+0x497/0x610 [ 107.057013][ C0] _printk+0xde/0x130 [ 107.057027][ C0] register_console+0xb96/0xf00 [ 107.057047][ C0] univ8250_console_init+0x45/0x50 [ 107.057062][ C0] console_init+0x17b/0x5d0 [ 107.057078][ C0] start_kernel+0x2c8/0x4e0 [ 107.057093][ C0] x86_64_start_reservations+0x2a/0x30 [ 107.057116][ C0] copy_bootdata+0x0/0xd0 [ 107.057137][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 107.057157][ C0] [ 107.057157][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 107.057180][ C0] __lock_acquire+0x37ef/0x7d80 [ 107.057198][ C0] lock_acquire+0x19e/0x420 [ 107.057215][ C0] console_flush_all+0x676/0xcf0 [ 107.057251][ C0] console_unlock+0xad/0x350 [ 107.057278][ C0] vprintk_emit+0x497/0x610 [ 107.057296][ C0] _printk+0xde/0x130 [ 107.057310][ C0] __debug_object_init+0x18d/0x450 [ 107.057328][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 107.057348][ C0] wakeup_source_unregister+0x116/0x190 [ 107.057365][ C0] mmc_host_classdev_release+0x47/0x100 [ 107.057398][ C0] device_release+0xbc/0x1e0 [ 107.057417][ C0] kobject_put+0x21b/0x450 [ 107.057440][ C0] call_timer_fn+0x189/0x540 [ 107.057457][ C0] __run_timers+0x570/0x810 [ 107.057472][ C0] run_timer_softirq+0x67/0xf0 [ 107.057487][ C0] handle_softirqs+0x27d/0x820 [ 107.057504][ C0] __irq_exit_rcu+0xd3/0x190 [ 107.057519][ C0] irq_exit_rcu+0x9/0x20 [ 107.057552][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 107.057575][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.057594][ C0] __sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 107.057616][ C0] pfn_valid+0x349/0x420 [ 107.057636][ C0] page_table_check_clear+0x1e/0x6a0 [ 107.057656][ C0] unmap_page_range+0x1c35/0x32f0 [ 107.057679][ C0] unmap_vmas+0x286/0x3f0 [ 107.057710][ C0] exit_mmap+0x238/0xb90 [ 107.057731][ C0] __mmput+0x118/0x3a0 [ 107.057745][ C0] exit_mm+0x23f/0x340 [ 107.057767][ C0] do_exit+0x909/0x2530 [ 107.057789][ C0] do_group_exit+0x22d/0x2f0 [ 107.057811][ C0] get_signal+0x12a6/0x1390 [ 107.057826][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 107.057851][ C0] exit_to_user_mode_loop+0x70/0x110 [ 107.057872][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 107.057894][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 107.057917][ C0] do_syscall_64+0x61/0xb0 [ 107.057933][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.057951][ C0] [ 107.057951][ C0] other info that might help us debug this: [ 107.057951][ C0] [ 107.057956][ C0] Chain exists of: [ 107.057956][ C0] console_owner --> &pool->lock --> &obj_hash[i].lock [ 107.057956][ C0] [ 107.057981][ C0] Possible unsafe locking scenario: [ 107.057981][ C0] [ 107.057985][ C0] CPU0 CPU1 [ 107.057988][ C0] ---- ---- [ 107.057991][ C0] lock(&obj_hash[i].lock); [ 107.058002][ C0] lock(&pool->lock); [ 107.058012][ C0] lock(&obj_hash[i].lock); [ 107.058023][ C0] lock(console_owner); [ 107.058034][ C0] [ 107.058034][ C0] *** DEADLOCK *** [ 107.058034][ C0] [ 107.058038][ C0] 8 locks held by syz.3.108/6120: [ 107.058048][ C0] #0: ffff88807db0c420 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 107.058107][ C0] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 107.058148][ C0] #2: ffff8880307f9a98 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 107.058192][ C0] #3: ffffffff8d1321a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 107.058253][ C0] #4: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 107.058294][ C0] #5: ffffffff9754f290 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 107.058346][ C0] #6: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 107.058384][ C0] #7: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 107.058429][ C0] [ 107.058429][ C0] stack backtrace: [ 107.058435][ C0] CPU: 0 PID: 6120 Comm: syz.3.108 Tainted: G W syzkaller #0 [ 107.058454][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.058464][ C0] Call Trace: [ 107.058471][ C0] [ 107.058479][ C0] dump_stack_lvl+0x18c/0x250 [ 107.058501][ C0] ? load_image+0x420/0x420 [ 107.058518][ C0] ? show_regs_print_info+0x20/0x20 [ 107.058552][ C0] ? print_circular_bug+0x12b/0x1a0 [ 107.058576][ C0] check_noncircular+0x2fc/0x400 [ 107.058602][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 107.058632][ C0] ? lockdep_lock+0xf5/0x230 [ 107.058657][ C0] __lock_acquire+0x37ef/0x7d80 [ 107.058700][ C0] ? verify_lock_unused+0x140/0x140 [ 107.058736][ C0] lock_acquire+0x19e/0x420 [ 107.058754][ C0] ? console_flush_all+0x10b/0xcf0 [ 107.058779][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 107.058813][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 107.058843][ C0] ? read_lock_is_recursive+0x20/0x20 [ 107.058873][ C0] ? __rwlock_init+0x150/0x150 [ 107.058896][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 107.058921][ C0] console_flush_all+0x676/0xcf0 [ 107.058942][ C0] ? console_flush_all+0x10b/0xcf0 [ 107.058970][ C0] ? console_flush_all+0x10b/0xcf0 [ 107.058997][ C0] ? is_console_locked+0x20/0x20 [ 107.059034][ C0] console_unlock+0xad/0x350 [ 107.059055][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 107.059087][ C0] vprintk_emit+0x497/0x610 [ 107.059117][ C0] ? printk_sprint+0x460/0x460 [ 107.059140][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 107.059165][ C0] _printk+0xde/0x130 [ 107.059185][ C0] ? load_image+0x420/0x420 [ 107.059208][ C0] ? alloc_object+0x1c/0x640 [ 107.059233][ C0] __debug_object_init+0x18d/0x450 [ 107.059266][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 107.059290][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 107.059308][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 107.059351][ C0] ? read_tsc+0x9/0x20 [ 107.059369][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 107.059389][ C0] ? synchronize_srcu+0x25a/0x280 [ 107.059413][ C0] wakeup_source_unregister+0x116/0x190 [ 107.059435][ C0] mmc_host_classdev_release+0x47/0x100 [ 107.059459][ C0] ? mmc_free_host+0x30/0x30 [ 107.059479][ C0] device_release+0xbc/0x1e0 [ 107.059497][ C0] kobject_put+0x21b/0x450 [ 107.059521][ C0] call_timer_fn+0x189/0x540 [ 107.059539][ C0] ? kref_get+0x70/0x70 [ 107.059562][ C0] ? call_timer_fn+0xd2/0x540 [ 107.059579][ C0] ? __run_timers+0x810/0x810 [ 107.059600][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.059617][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 107.059639][ C0] ? kref_get+0x70/0x70 [ 107.059663][ C0] __run_timers+0x570/0x810 [ 107.059687][ C0] ? detach_timer+0x2b0/0x2b0 [ 107.059707][ C0] ? lock_chain_count+0x20/0x20 [ 107.059728][ C0] run_timer_softirq+0x67/0xf0 [ 107.059745][ C0] handle_softirqs+0x27d/0x820 [ 107.059764][ C0] ? read_tsc+0x9/0x20 [ 107.059791][ C0] ? ktime_get+0x24b/0x280 [ 107.059816][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 107.059836][ C0] ? do_softirq+0x1a0/0x1a0 [ 107.059854][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 107.059879][ C0] __irq_exit_rcu+0xd3/0x190 [ 107.059896][ C0] ? irq_exit_rcu+0x20/0x20 [ 107.059925][ C0] irq_exit_rcu+0x9/0x20 [ 107.059949][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 107.059975][ C0] [ 107.059980][ C0] [ 107.059986][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.060008][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 107.060036][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e 65 8b 0d d1 31 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 107.060050][ C0] RSP: 0018:ffffc900053f7420 EFLAGS: 00000246 [ 107.060066][ C0] RAX: ffffffff81eb18f9 RBX: ffffffff81eb167d RCX: 0000000080000002 [ 107.060078][ C0] RDX: ffff88801feebc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 107.060112][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 107.060124][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 107.060136][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fff9180 [ 107.060150][ C0] ? pfn_valid+0xcd/0x420 [ 107.060171][ C0] ? pfn_valid+0x349/0x420 [ 107.060212][ C0] pfn_valid+0x349/0x420 [ 107.060255][ C0] page_table_check_clear+0x1e/0x6a0 [ 107.060277][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 107.060301][ C0] unmap_page_range+0x1c35/0x32f0 [ 107.060358][ C0] ? copy_page_range+0x3700/0x3700 [ 107.060393][ C0] unmap_vmas+0x286/0x3f0 [ 107.060417][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 107.060440][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 107.060464][ C0] exit_mmap+0x238/0xb90 [ 107.060502][ C0] ? exit_mm_release+0x1a/0x30 [ 107.060522][ C0] ? vm_brk+0x30/0x30 [ 107.060553][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 107.060586][ C0] ? uprobe_clear_state+0x278/0x290 [ 107.060661][ C0] __mmput+0x118/0x3a0 [ 107.060681][ C0] exit_mm+0x23f/0x340 [ 107.060705][ C0] ? sysctl_delayacct+0x220/0x220 [ 107.060723][ C0] ? do_exit+0x2530/0x2530 [ 107.060746][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 107.060768][ C0] do_exit+0x909/0x2530 [ 107.060796][ C0] ? put_task_struct+0xc0/0xc0 [ 107.060820][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 107.060841][ C0] ? get_signal+0x100e/0x1390 [ 107.060859][ C0] ? lock_chain_count+0x20/0x20 [ 107.060916][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 107.060934][ C0] do_group_exit+0x22d/0x2f0 [ 107.060960][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 107.060984][ C0] get_signal+0x12a6/0x1390 [ 107.061010][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 107.061038][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 107.061057][ C0] ? get_sigframe_size+0x20/0x20 [ 107.061089][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 107.061115][ C0] exit_to_user_mode_loop+0x70/0x110 [ 107.061160][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 107.061185][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 107.061207][ C0] do_syscall_64+0x61/0xb0 [ 107.061225][ C0] ? clear_bhb_loop+0x40/0x90 [ 107.061269][ C0] ? clear_bhb_loop+0x40/0x90 [ 107.061290][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.061310][ C0] RIP: 0033:0x7f64a359e159 [ 107.061326][ C0] Code: Unable to access opcode bytes at 0x7f64a359e12f. [ 107.061333][ C0] RSP: 002b:00007f64a43980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.061351][ C0] RAX: 0000000000000001 RBX: 00007f64a3825fa8 RCX: 00007f64a359e159 [ 107.061363][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64a3825fac [ 107.061384][ C0] RBP: 00007f64a3825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 107.061409][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.061419][ C0] R13: 00007f64a3826038 R14: 00007fff05f25290 R15: 00007fff05f25378 [ 107.061439][ C0] [ 108.559801][ C0] ------------[ cut here ]------------ [ 108.565264][ C0] WARNING: CPU: 0 PID: 6120 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 108.575011][ C0] Modules linked in: [ 108.579099][ C0] CPU: 0 PID: 6120 Comm: syz.3.108 Tainted: G W syzkaller #0 [ 108.588261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.598353][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 108.604455][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f f9 25 13 48 c7 c1 80 3e 1d 8b 48 c7 c7 e0 3e 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 53 76 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 108.624281][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 108.630714][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: 8ae23982aaadad00 [ 108.638778][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 108.646848][ C0] RBP: dffffc0000000000 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 108.654824][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88801feebc20 [ 108.662793][ C0] R13: ffff888029d86818 R14: 0000000000000001 R15: ffffffff8acbe000 [ 108.670764][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 108.679703][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.686396][ C0] CR2: 0000001b2dc20ff8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 108.694488][ C0] Call Trace: [ 108.697790][ C0] [ 108.700638][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 108.705672][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 108.711567][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 108.717294][ C0] ? read_tsc+0x9/0x20 [ 108.721369][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 108.726934][ C0] ? synchronize_srcu+0x25a/0x280 [ 108.731996][ C0] wakeup_source_unregister+0x116/0x190 [ 108.737588][ C0] mmc_host_classdev_release+0x47/0x100 [ 108.743165][ C0] ? mmc_free_host+0x30/0x30 [ 108.747936][ C0] device_release+0xbc/0x1e0 [ 108.752535][ C0] kobject_put+0x21b/0x450 [ 108.756963][ C0] call_timer_fn+0x189/0x540 [ 108.761567][ C0] ? kref_get+0x70/0x70 [ 108.765823][ C0] ? call_timer_fn+0xd2/0x540 [ 108.770533][ C0] ? __run_timers+0x810/0x810 [ 108.775311][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.780520][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 108.785759][ C0] ? kref_get+0x70/0x70 [ 108.789931][ C0] __run_timers+0x570/0x810 [ 108.794465][ C0] ? detach_timer+0x2b0/0x2b0 [ 108.799164][ C0] ? lock_chain_count+0x20/0x20 [ 108.804031][ C0] run_timer_softirq+0x67/0xf0 [ 108.808798][ C0] handle_softirqs+0x27d/0x820 [ 108.813631][ C0] ? read_tsc+0x9/0x20 [ 108.817737][ C0] ? ktime_get+0x24b/0x280 [ 108.822177][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 108.826940][ C0] ? do_softirq+0x1a0/0x1a0 [ 108.831441][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 108.836732][ C0] __irq_exit_rcu+0xd3/0x190 [ 108.841322][ C0] ? irq_exit_rcu+0x20/0x20 [ 108.845828][ C0] irq_exit_rcu+0x9/0x20 [ 108.850077][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 108.855804][ C0] [ 108.858735][ C0] [ 108.861665][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.867684][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 108.874728][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e 65 8b 0d d1 31 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 108.894441][ C0] RSP: 0018:ffffc900053f7420 EFLAGS: 00000246 [ 108.900721][ C0] RAX: ffffffff81eb18f9 RBX: ffffffff81eb167d RCX: 0000000080000002 [ 108.908956][ C0] RDX: ffff88801feebc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 108.916945][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 108.924963][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 108.933045][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fff9180 [ 108.941163][ C0] ? pfn_valid+0xcd/0x420 [ 108.945626][ C0] ? pfn_valid+0x349/0x420 [ 108.950113][ C0] pfn_valid+0x349/0x420 [ 108.954402][ C0] page_table_check_clear+0x1e/0x6a0 [ 108.959776][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 108.965757][ C0] unmap_page_range+0x1c35/0x32f0 [ 108.970878][ C0] ? copy_page_range+0x3700/0x3700 [ 108.976028][ C0] unmap_vmas+0x286/0x3f0 [ 108.980366][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 108.985577][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 108.990629][ C0] exit_mmap+0x238/0xb90 [ 108.994892][ C0] ? exit_mm_release+0x1a/0x30 [ 108.999670][ C0] ? vm_brk+0x30/0x30 [ 109.003672][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 109.009506][ C0] ? uprobe_clear_state+0x278/0x290 [ 109.014755][ C0] __mmput+0x118/0x3a0 [ 109.018836][ C0] exit_mm+0x23f/0x340 [ 109.023083][ C0] ? sysctl_delayacct+0x220/0x220 [ 109.028208][ C0] ? do_exit+0x2530/0x2530 [ 109.032630][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 109.037486][ C0] do_exit+0x909/0x2530 [ 109.041661][ C0] ? put_task_struct+0xc0/0xc0 [ 109.046448][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.052442][ C0] ? get_signal+0x100e/0x1390 [ 109.057295][ C0] ? lock_chain_count+0x20/0x20 [ 109.062253][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 109.067276][ C0] do_group_exit+0x22d/0x2f0 [ 109.071997][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 109.077323][ C0] get_signal+0x12a6/0x1390 [ 109.081861][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 109.087523][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 109.093418][ C0] ? get_sigframe_size+0x20/0x20 [ 109.098366][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 109.103848][ C0] exit_to_user_mode_loop+0x70/0x110 [ 109.109336][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 109.114901][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 109.120471][ C0] do_syscall_64+0x61/0xb0 [ 109.124902][ C0] ? clear_bhb_loop+0x40/0x90 [ 109.129684][ C0] ? clear_bhb_loop+0x40/0x90 [ 109.134438][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.140433][ C0] RIP: 0033:0x7f64a359e159 [ 109.144876][ C0] Code: Unable to access opcode bytes at 0x7f64a359e12f. [ 109.151905][ C0] RSP: 002b:00007f64a43980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.160395][ C0] RAX: 0000000000000001 RBX: 00007f64a3825fa8 RCX: 00007f64a359e159 [ 109.168562][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64a3825fac [ 109.176578][ C0] RBP: 00007f64a3825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 109.184651][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.192662][ C0] R13: 00007f64a3826038 R14: 00007fff05f25290 R15: 00007fff05f25378 [ 109.200747][ C0] [ 109.203820][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.211276][ C0] CPU: 0 PID: 6120 Comm: syz.3.108 Tainted: G W syzkaller #0 [ 109.220246][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.230346][ C0] Call Trace: [ 109.233642][ C0] [ 109.236490][ C0] dump_stack_lvl+0x18c/0x250 [ 109.241206][ C0] ? show_regs_print_info+0x20/0x20 [ 109.246600][ C0] ? load_image+0x420/0x420 [ 109.251115][ C0] panic+0x2ca/0x720 [ 109.255024][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 109.259538][ C0] __warn+0x2e0/0x470 [ 109.263531][ C0] ? __debug_object_init+0x18d/0x450 [ 109.268820][ C0] ? __debug_object_init+0x18d/0x450 [ 109.274103][ C0] report_bug+0x2be/0x4f0 [ 109.278463][ C0] ? __debug_object_init+0x18d/0x450 [ 109.283755][ C0] ? __debug_object_init+0x18d/0x450 [ 109.289039][ C0] ? __debug_object_init+0x18f/0x450 [ 109.294339][ C0] handle_bug+0xcf/0x120 [ 109.298585][ C0] exc_invalid_op+0x1a/0x50 [ 109.303348][ C0] asm_exc_invalid_op+0x1a/0x20 [ 109.308402][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 109.314320][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f f9 25 13 48 c7 c1 80 3e 1d 8b 48 c7 c7 e0 3e 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 53 76 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 109.334577][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 109.340639][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: 8ae23982aaadad00 [ 109.348784][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 109.356764][ C0] RBP: dffffc0000000000 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 109.364827][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88801feebc20 [ 109.372813][ C0] R13: ffff888029d86818 R14: 0000000000000001 R15: ffffffff8acbe000 [ 109.380810][ C0] ? __debug_object_init+0x18d/0x450 [ 109.386113][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 109.391165][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 109.397273][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 109.403119][ C0] ? read_tsc+0x9/0x20 [ 109.407210][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 109.412939][ C0] ? synchronize_srcu+0x25a/0x280 [ 109.417969][ C0] wakeup_source_unregister+0x116/0x190 [ 109.423528][ C0] mmc_host_classdev_release+0x47/0x100 [ 109.429075][ C0] ? mmc_free_host+0x30/0x30 [ 109.433668][ C0] device_release+0xbc/0x1e0 [ 109.438290][ C0] kobject_put+0x21b/0x450 [ 109.442831][ C0] call_timer_fn+0x189/0x540 [ 109.447622][ C0] ? kref_get+0x70/0x70 [ 109.451854][ C0] ? call_timer_fn+0xd2/0x540 [ 109.456912][ C0] ? __run_timers+0x810/0x810 [ 109.461603][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.466836][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 109.472053][ C0] ? kref_get+0x70/0x70 [ 109.476235][ C0] __run_timers+0x570/0x810 [ 109.480937][ C0] ? detach_timer+0x2b0/0x2b0 [ 109.481840][ T23] vhci_hcd: vhci_device speed not set [ 109.491061][ C0] ? lock_chain_count+0x20/0x20 [ 109.495937][ C0] run_timer_softirq+0x67/0xf0 [ 109.500773][ C0] handle_softirqs+0x27d/0x820 [ 109.505580][ C0] ? read_tsc+0x9/0x20 [ 109.509783][ C0] ? ktime_get+0x24b/0x280 [ 109.514208][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 109.518974][ C0] ? do_softirq+0x1a0/0x1a0 [ 109.523566][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 109.528891][ C0] __irq_exit_rcu+0xd3/0x190 [ 109.533532][ C0] ? irq_exit_rcu+0x20/0x20 [ 109.538427][ C0] irq_exit_rcu+0x9/0x20 [ 109.542758][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 109.548484][ C0] [ 109.551488][ C0] [ 109.554631][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.560903][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90 [ 109.568202][ C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 d0 31 7c 7e 65 8b 0d d1 31 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 [ 109.588081][ C0] RSP: 0018:ffffc900053f7420 EFLAGS: 00000246 [ 109.594527][ C0] RAX: ffffffff81eb18f9 RBX: ffffffff81eb167d RCX: 0000000080000002 [ 109.602517][ C0] RDX: ffff88801feebc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 109.611120][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223dea0 [ 109.619100][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 109.627072][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fff9180 [ 109.635045][ C0] ? pfn_valid+0xcd/0x420 [ 109.639467][ C0] ? pfn_valid+0x349/0x420 [ 109.643890][ C0] pfn_valid+0x349/0x420 [ 109.648135][ C0] page_table_check_clear+0x1e/0x6a0 [ 109.653435][ C0] ? __page_table_check_pte_clear+0x43/0x70 [ 109.659366][ C0] unmap_page_range+0x1c35/0x32f0 [ 109.664405][ C0] ? copy_page_range+0x3700/0x3700 [ 109.669555][ C0] unmap_vmas+0x286/0x3f0 [ 109.673892][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 109.679101][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 109.684156][ C0] exit_mmap+0x238/0xb90 [ 109.688406][ C0] ? exit_mm_release+0x1a/0x30 [ 109.693169][ C0] ? vm_brk+0x30/0x30 [ 109.697166][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 109.702831][ C0] ? uprobe_clear_state+0x278/0x290 [ 109.708064][ C0] __mmput+0x118/0x3a0 [ 109.712155][ C0] exit_mm+0x23f/0x340 [ 109.716260][ C0] ? sysctl_delayacct+0x220/0x220 [ 109.721298][ C0] ? do_exit+0x2530/0x2530 [ 109.725814][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 109.730854][ C0] do_exit+0x909/0x2530 [ 109.735013][ C0] ? put_task_struct+0xc0/0xc0 [ 109.739777][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.745838][ C0] ? get_signal+0x100e/0x1390 [ 109.750600][ C0] ? lock_chain_count+0x20/0x20 [ 109.755629][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 109.761142][ C0] do_group_exit+0x22d/0x2f0 [ 109.766602][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 109.771853][ C0] get_signal+0x12a6/0x1390 [ 109.776386][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 109.781963][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 109.788472][ C0] ? get_sigframe_size+0x20/0x20 [ 109.793429][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 109.798893][ C0] exit_to_user_mode_loop+0x70/0x110 [ 109.804285][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 109.809841][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 109.815507][ C0] do_syscall_64+0x61/0xb0 [ 109.820034][ C0] ? clear_bhb_loop+0x40/0x90 [ 109.824882][ C0] ? clear_bhb_loop+0x40/0x90 [ 109.829653][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.835829][ C0] RIP: 0033:0x7f64a359e159 [ 109.840247][ C0] Code: Unable to access opcode bytes at 0x7f64a359e12f. [ 109.847259][ C0] RSP: 002b:00007f64a43980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.855685][ C0] RAX: 0000000000000001 RBX: 00007f64a3825fa8 RCX: 00007f64a359e159 [ 109.863671][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64a3825fac [ 109.871646][ C0] RBP: 00007f64a3825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 109.879828][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.887823][ C0] R13: 00007f64a3826038 R14: 00007fff05f25290 R15: 00007fff05f25378 [ 109.895973][ C0] [ 109.899280][ C0] Kernel Offset: disabled [ 109.903624][ C0] Rebooting in 86400 seconds..