last executing test programs:
2.486049574s ago: executing program 0 (id=1):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f)
read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd0857"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, &(0x7f0000000300)=""/227, 0xe3)
read$char_usb(r2, &(0x7f0000000400)=""/186, 0x110)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf"], 0x0)
syz_usb_disconnect(r4)
syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r5 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_disconnect(r5)
r6 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r6)
syz_usb_disconnect(r5)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0)
2.247939021s ago: executing program 3 (id=4):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
2.078485716s ago: executing program 2 (id=3):
r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
2.059833556s ago: executing program 1 (id=2):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
394.824159ms ago: executing program 1 (id=5):
syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x7)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3}, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
0s ago: executing program 3 (id=6):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000380)={0x20, 0xe}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000003c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000840)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts.
[ 71.654092][ T5766] cgroup: Unknown subsys name 'net'
[ 71.764941][ T5766] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 73.181458][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 74.667103][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 74.676894][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.685426][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 74.695915][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 74.703909][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.712939][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 74.721882][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 74.729804][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 74.738275][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 74.744148][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 74.746121][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 74.759994][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 74.762038][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 74.775369][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 74.783537][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 74.788753][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.798761][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 74.807594][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 74.815383][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 74.822909][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 74.831013][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 74.839218][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.853464][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 74.865667][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 75.221348][ T5778] chnl_net:caif_netlink_parms(): no params data found
[ 75.363887][ T5779] chnl_net:caif_netlink_parms(): no params data found
[ 75.385281][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.393820][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.401668][ T5778] bridge_slave_0: entered allmulticast mode
[ 75.408902][ T5778] bridge_slave_0: entered promiscuous mode
[ 75.425164][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.434771][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.443253][ T5778] bridge_slave_1: entered allmulticast mode
[ 75.451747][ T5778] bridge_slave_1: entered promiscuous mode
[ 75.484052][ T5780] chnl_net:caif_netlink_parms(): no params data found
[ 75.496028][ T5781] chnl_net:caif_netlink_parms(): no params data found
[ 75.510681][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.559396][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.640591][ T5778] team0: Port device team_slave_0 added
[ 75.666678][ T5778] team0: Port device team_slave_1 added
[ 75.731013][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.741246][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.749165][ T5781] bridge_slave_0: entered allmulticast mode
[ 75.757150][ T5781] bridge_slave_0: entered promiscuous mode
[ 75.775628][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.784696][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.792912][ T5781] bridge_slave_1: entered allmulticast mode
[ 75.801955][ T5781] bridge_slave_1: entered promiscuous mode
[ 75.821223][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.828470][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.836721][ T5779] bridge_slave_0: entered allmulticast mode
[ 75.844524][ T5779] bridge_slave_0: entered promiscuous mode
[ 75.853278][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.860923][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.887725][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.908416][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.915648][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.925455][ T5780] bridge_slave_0: entered allmulticast mode
[ 75.933165][ T5780] bridge_slave_0: entered promiscuous mode
[ 75.941237][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.949113][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.956309][ T5779] bridge_slave_1: entered allmulticast mode
[ 75.963890][ T5779] bridge_slave_1: entered promiscuous mode
[ 75.970795][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.978543][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.005601][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.026791][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.034424][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.043310][ T5780] bridge_slave_1: entered allmulticast mode
[ 76.051140][ T5780] bridge_slave_1: entered promiscuous mode
[ 76.074865][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.104789][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.143551][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.164718][ T5781] team0: Port device team_slave_0 added
[ 76.175158][ T5781] team0: Port device team_slave_1 added
[ 76.184130][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.198630][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.235725][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.265659][ T5778] hsr_slave_0: entered promiscuous mode
[ 76.273142][ T5778] hsr_slave_1: entered promiscuous mode
[ 76.303631][ T5779] team0: Port device team_slave_0 added
[ 76.315912][ T5779] team0: Port device team_slave_1 added
[ 76.323285][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.333210][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.368480][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.393613][ T5780] team0: Port device team_slave_0 added
[ 76.421776][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.429303][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.456037][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.477632][ T5780] team0: Port device team_slave_1 added
[ 76.509826][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.517085][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.543697][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.574232][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.581976][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.608298][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.633178][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.640304][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.667681][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.701068][ T5781] hsr_slave_0: entered promiscuous mode
[ 76.709877][ T5781] hsr_slave_1: entered promiscuous mode
[ 76.716322][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 76.725424][ T5781] Cannot create hsr debugfs directory
[ 76.758176][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.765531][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.793394][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.826613][ T5779] hsr_slave_0: entered promiscuous mode
[ 76.835843][ T5779] hsr_slave_1: entered promiscuous mode
[ 76.842828][ T5791] Bluetooth: hci3: command tx timeout
[ 76.851808][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 76.860443][ T5779] Cannot create hsr debugfs directory
[ 76.918032][ T5791] Bluetooth: hci0: command tx timeout
[ 76.918919][ T5786] Bluetooth: hci2: command tx timeout
[ 76.924151][ T5089] Bluetooth: hci1: command tx timeout
[ 77.016339][ T5780] hsr_slave_0: entered promiscuous mode
[ 77.024407][ T5780] hsr_slave_1: entered promiscuous mode
[ 77.030941][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 77.038969][ T5780] Cannot create hsr debugfs directory
[ 77.300723][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.321155][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.348547][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.361081][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.440320][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 77.455739][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 77.466304][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 77.478345][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 77.590039][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 77.601103][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 77.611703][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 77.622661][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 77.749361][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 77.761117][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 77.772127][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 77.792325][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 77.829151][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.862805][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.912510][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.919876][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.950687][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.959302][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.977515][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.989842][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.044367][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.074105][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.081874][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.099612][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.125551][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.133280][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.163323][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.174799][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.210162][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.218047][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.261815][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.309494][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.377047][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.384613][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.426794][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.434038][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.744218][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.826332][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.900630][ T5778] veth0_vlan: entered promiscuous mode
[ 78.927601][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.929480][ T5089] Bluetooth: hci3: command tx timeout
[ 78.951240][ T5778] veth1_vlan: entered promiscuous mode
[ 78.999266][ T5089] Bluetooth: hci1: command tx timeout
[ 79.004824][ T5089] Bluetooth: hci2: command tx timeout
[ 79.010987][ T5791] Bluetooth: hci0: command tx timeout
[ 79.020854][ T5779] veth0_vlan: entered promiscuous mode
[ 79.032710][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.065250][ T5781] veth0_vlan: entered promiscuous mode
[ 79.095606][ T5778] veth0_macvtap: entered promiscuous mode
[ 79.107076][ T5781] veth1_vlan: entered promiscuous mode
[ 79.124640][ T5779] veth1_vlan: entered promiscuous mode
[ 79.146014][ T5778] veth1_macvtap: entered promiscuous mode
[ 79.216423][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.250138][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.264080][ T5780] veth0_vlan: entered promiscuous mode
[ 79.285693][ T5781] veth0_macvtap: entered promiscuous mode
[ 79.295563][ T5779] veth0_macvtap: entered promiscuous mode
[ 79.304030][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.313837][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.324214][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.333789][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.346748][ T5780] veth1_vlan: entered promiscuous mode
[ 79.363284][ T5779] veth1_macvtap: entered promiscuous mode
[ 79.388551][ T5781] veth1_macvtap: entered promiscuous mode
[ 79.405442][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 79.417227][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.431096][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.466231][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 79.482540][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.494529][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 79.505316][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.516980][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.542652][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 79.553779][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.565595][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.575649][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 79.586789][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.598088][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 79.608887][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.621208][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.634806][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.648348][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.660357][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.669631][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.691650][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.702603][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.713143][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.726413][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.763234][ T5780] veth0_macvtap: entered promiscuous mode
[ 79.811437][ T5780] veth1_macvtap: entered promiscuous mode
[ 79.855270][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.867516][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.924504][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 79.941205][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.953818][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 79.969548][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 79.982187][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 79.995546][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 80.007393][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.039140][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.050288][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.065986][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 80.076867][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 80.088110][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 80.099228][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 80.111070][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 80.124080][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 80.137436][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.156898][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.170953][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.181518][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.190902][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.284622][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.307683][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.346728][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.369196][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.456819][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.472742][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.508715][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.517366][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.531401][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.561285][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.655474][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.666449][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.728629][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 80.925669][ T5819] usb 1-1: Using ep0 maxpacket: 32
[ 80.936897][ T5819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 80.951176][ T5819] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 80.962251][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 80.970759][ T5819] usb 1-1: Product: syz
[ 80.975091][ T5819] usb 1-1: Manufacturer: syz
[ 80.982200][ T5819] usb 1-1: SerialNumber: syz
[ 80.990729][ T5819] usb 1-1: config 0 descriptor??
[ 80.999206][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 81.006570][ T5838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 81.007684][ T5089] Bluetooth: hci3: command tx timeout
[ 81.045918][ T5819] hub 1-1:0.0: bad descriptor, ignoring hub
[ 81.053230][ T5819] hub: probe of 1-1:0.0 failed with error -5
[ 81.078441][ T5089] Bluetooth: hci2: command tx timeout
[ 81.084619][ T5791] Bluetooth: hci1: command tx timeout
[ 81.084630][ T5786] Bluetooth: hci0: command tx timeout
[ 81.128057][ T5842] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 81.230749][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 81.241444][ T5839] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 81.249701][ T1197] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 81.252339][ T5839] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 81.270464][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 81.295512][ T5839] usb 4-1: probing VID:PID(0424:012C)
[ 81.310808][ T5842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 81.323230][ T5839] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[ 81.335713][ T5839] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[ 81.342437][ T5842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 81.352761][ T5839] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[ 81.359723][ T5842] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 81.368968][ T5839] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04
[ 81.375494][ T5839] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 81.383410][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 81.442226][ T1197] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 81.455052][ T1197] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 81.471066][ T1197] usb 2-1: config 0 interface 0 has no altsetting 0
[ 81.483215][ T1197] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00
[ 81.492882][ T1197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 81.505493][ T1197] usb 2-1: config 0 descriptor??
[ 81.704346][ T5839] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[ 81.756149][ T5838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.767667][ T5838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.913947][ T5839] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[ 81.928099][ T1197] usbhid 2-1:0.0: can't add hid device: -71
[ 81.935527][ T1197] usbhid: probe of 2-1:0.0 failed with error -71
[ 81.953165][ T1197] usb 2-1: USB disconnect, device number 2
[ 82.094517][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.103660][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.325717][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.335661][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.417054][ T5842] pegasus: probe of 3-1:1.0 failed with error -121
[ 82.622171][ T5784] usb 3-1: USB disconnect, device number 2
[ 82.751643][ T5839] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 82.778235][ T5839] usb 4-1: USB disconnect, device number 2
[ 82.788211][ T5842] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 82.799211][ T5839] USB vub300 remote SDIO host controller[0] now disconnected
[ 82.928571][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414
[ 82.946839][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1
[ 82.955624][ C1] preempt_count: 101, expected: 0
[ 82.960910][ C1] RCU nest depth: 0, expected: 0
[ 82.965870][ C1] 1 lock held by swapper/1/0:
[ 82.970714][ C1] #0: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540
[ 82.981297][ C1] Preemption disabled at:
[ 82.981311][ C1] [<0000000000000000>] 0x0
[ 82.990126][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 82.997172][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 83.007260][ C1] Call Trace:
[ 83.010560][ C1]
[ 83.013427][ C1] dump_stack_lvl+0x18c/0x250
[ 83.018117][ C1] ? show_regs_print_info+0x20/0x20
[ 83.023350][ C1] ? load_image+0x420/0x420
[ 83.027976][ C1] __might_resched+0x48d/0x5f0
[ 83.032778][ C1] ? __might_sleep+0xe0/0xe0
[ 83.037370][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 83.043281][ C1] ? _raw_spin_unlock+0x40/0x40
[ 83.048700][ C1] ? kasan_set_track+0x5f/0x70
[ 83.054200][ C1] ? kasan_save_free_info+0x28/0x40
[ 83.060122][ C1] ? ____kasan_slab_free+0x126/0x1f0
[ 83.068874][ C1] ? slab_free_freelist_hook+0x130/0x1a0
[ 83.076395][ C1] __flush_work+0x10f/0xac0
[ 83.082066][ C1] ? flush_work+0x20/0x20
[ 83.086857][ C1] ? __timer_delete+0x6b/0x290
[ 83.091850][ C1] ? mark_lock+0x94/0x320
[ 83.096568][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 83.103118][ C1] ? mod_delayed_work_on+0x1c0/0x1c0
[ 83.108879][ C1] ? lock_chain_count+0x20/0x20
[ 83.114846][ C1] ? __cancel_work_timer+0x36e/0x560
[ 83.120593][ C1] __cancel_work_timer+0x3f8/0x560
[ 83.126035][ C1] ? cancel_work_sync+0x20/0x20
[ 83.131022][ C1] ? kobject_put+0x260/0x450
[ 83.135836][ C1] ? __kmem_cache_free+0xba/0x1f0
[ 83.141286][ C1] ? kobject_put+0x421/0x450
[ 83.146906][ C1] mmc_free_host+0x19/0x30
[ 83.151782][ C1] call_timer_fn+0x189/0x540
[ 83.157025][ C1] ? kref_get+0x70/0x70
[ 83.158862][ T5786] Bluetooth: hci0: command tx timeout
[ 83.161276][ C1] ? call_timer_fn+0xd2/0x540
[ 83.171607][ C1] ? __run_timers+0x810/0x810
[ 83.176370][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 83.181736][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 83.187511][ C1] ? kref_get+0x70/0x70
[ 83.191692][ C1] __run_timers+0x570/0x810
[ 83.197371][ C1] ? detach_timer+0x2b0/0x2b0
[ 83.202193][ C1] ? lock_chain_count+0x20/0x20
[ 83.207233][ C1] run_timer_softirq+0x67/0xf0
[ 83.212030][ C1] handle_softirqs+0x27d/0x820
[ 83.216819][ C1] ? read_tsc+0x9/0x20
[ 83.221101][ C1] ? ktime_get+0x24b/0x280
[ 83.225634][ C1] ? __irq_exit_rcu+0xd3/0x190
[ 83.230457][ C1] ? do_softirq+0x1a0/0x1a0
[ 83.235027][ C1] ? irqtime_account_irq+0xb6/0x1c0
[ 83.240292][ C1] __irq_exit_rcu+0xd3/0x190
[ 83.245604][ C1] ? irq_exit_rcu+0x20/0x20
[ 83.250269][ C1] irq_exit_rcu+0x9/0x20
[ 83.254588][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 83.260377][ C1]
[ 83.263330][ C1]
[ 83.266286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 83.272525][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 83.278292][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9
[ 83.297938][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6
[ 83.304017][ C1] RAX: 042fde2edbb3a500 RBX: ffffffff81630d54 RCX: 042fde2edbb3a500
[ 83.312023][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0
[ 83.320361][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75
[ 83.329320][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8
[ 83.337487][ C1] R13: dffffc0000000000 R14: 1ffff110037cc780 R15: 0000000000000000
[ 83.345561][ C1] ? do_idle+0x334/0x5c0
[ 83.349831][ C1] default_idle+0x13/0x20
[ 83.355435][ C1] default_idle_call+0x6c/0xa0
[ 83.362132][ C1] do_idle+0x334/0x5c0
[ 83.366303][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 83.372039][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 83.377987][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 83.383400][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 83.389333][ C1] ? _raw_spin_unlock+0x40/0x40
[ 83.394256][ C1] cpu_startup_entry+0x43/0x60
[ 83.399338][ C1] start_secondary+0xee/0xf0
[ 83.404140][ C1] secondary_startup_64_no_verify+0x179/0x17b
[ 83.410291][ C1]
[ 83.413620][ C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc90000180000, but annotated.
[ 83.414827][ C1]
[ 83.414833][ C1] ======================================================
[ 83.414837][ C1] WARNING: possible circular locking dependency detected
[ 83.414843][ C1] syzkaller #0 Tainted: G W
[ 83.414854][ C1] ------------------------------------------------------
[ 83.414860][ C1] swapper/1/0 is trying to acquire lock:
[ 83.414868][ C1] ffffffff8d1260a0 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0
[ 83.414918][ C1]
[ 83.414918][ C1] but task is already holding lock:
[ 83.414922][ C1] ffffffff9750e368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450
[ 83.414965][ C1]
[ 83.414965][ C1] which lock already depends on the new lock.
[ 83.414965][ C1]
[ 83.414970][ C1]
[ 83.414970][ C1] the existing dependency chain (in reverse order) is:
[ 83.414975][ C1]
[ 83.414975][ C1] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}:
[ 83.414997][ C1] _raw_spin_lock_irqsave+0xb4/0x100
[ 83.415025][ C1] debug_object_activate+0x6c/0x500
[ 83.415046][ C1] insert_work+0x35/0x310
[ 83.415065][ C1] __queue_work+0xbfd/0xfd0
[ 83.415080][ C1] queue_work_on+0x128/0x1f0
[ 83.415096][ C1] start_poll_synchronize_rcu_expedited+0x105/0x140
[ 83.415125][ C1] rcu_init+0x10d/0x160
[ 83.415148][ C1] start_kernel+0x1fd/0x4e0
[ 83.415170][ C1] x86_64_start_reservations+0x2a/0x30
[ 83.415192][ C1] copy_bootdata+0x0/0xd0
[ 83.415210][ C1] secondary_startup_64_no_verify+0x179/0x17b
[ 83.415243][ C1]
[ 83.415243][ C1] -> #3 (&pool->lock){-.-.}-{2:2}:
[ 83.415265][ C1] _raw_spin_lock+0x2e/0x40
[ 83.415288][ C1] __queue_work+0x72f/0xfd0
[ 83.415303][ C1] queue_work_on+0x128/0x1f0
[ 83.415319][ C1] rpm_suspend+0x1133/0x1b60
[ 83.415342][ C1] __pm_runtime_idle+0x12f/0x1a0
[ 83.415363][ C1] __device_attach+0x352/0x420
[ 83.415387][ C1] bus_probe_device+0x180/0x260
[ 83.415408][ C1] device_add+0x87c/0xc40
[ 83.415425][ C1] serial_base_port_add+0x2f6/0x430
[ 83.415442][ C1] serial_core_register_port+0x378/0x20b0
[ 83.415468][ C1] serial8250_register_8250_port+0x15fd/0x1f40
[ 83.415488][ C1] serial_pnp_probe+0x577/0x750
[ 83.415510][ C1] pnp_device_probe+0x305/0x4b0
[ 83.415528][ C1] really_probe+0x247/0xae0
[ 83.415542][ C1] __driver_probe_device+0x1f5/0x390
[ 83.415566][ C1] driver_probe_device+0x4f/0x420
[ 83.415581][ C1] __driver_attach+0x444/0x6d0
[ 83.415601][ C1] bus_for_each_dev+0x235/0x2b0
[ 83.415620][ C1] bus_add_driver+0x340/0x630
[ 83.415638][ C1] driver_register+0x23a/0x310
[ 83.415653][ C1] serial8250_init+0x9a/0x170
[ 83.415675][ C1] do_one_initcall+0x242/0x790
[ 83.415697][ C1] do_initcall_level+0x13d/0x1f0
[ 83.415720][ C1] do_initcalls+0x69/0xd0
[ 83.415743][ C1] kernel_init_freeable+0x3d9/0x560
[ 83.415767][ C1] kernel_init+0x1d/0x1c0
[ 83.415791][ C1] ret_from_fork+0x48/0x80
[ 83.415811][ C1] ret_from_fork_asm+0x11/0x20
[ 83.415832][ C1]
[ 83.415832][ C1] -> #2 (&dev->power.lock){-...}-{2:2}:
[ 83.415856][ C1] _raw_spin_lock_irqsave+0xb4/0x100
[ 83.415880][ C1] __pm_runtime_resume+0x10f/0x170
[ 83.415902][ C1] __uart_start+0x171/0x3e0
[ 83.415915][ C1] uart_write+0x449/0x5d0
[ 83.415928][ C1] n_tty_write+0xd3d/0x11e0
[ 83.415949][ C1] file_tty_write+0x529/0x960
[ 83.415967][ C1] vfs_write+0x474/0x9a0
[ 83.415988][ C1] ksys_write+0x151/0x260
[ 83.416009][ C1] do_syscall_64+0x55/0xb0
[ 83.416025][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 83.416044][ C1]
[ 83.416044][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}:
[ 83.416065][ C1] _raw_spin_lock_irqsave+0xb4/0x100
[ 83.416090][ C1] serial8250_console_write+0x181/0x18b0
[ 83.416112][ C1] console_flush_all+0x6ad/0xcf0
[ 83.416132][ C1] console_unlock+0xad/0x350
[ 83.416151][ C1] vprintk_emit+0x497/0x610
[ 83.416169][ C1] _printk+0xde/0x130
[ 83.416197][ C1] register_console+0xb96/0xf00
[ 83.416223][ C1] univ8250_console_init+0x45/0x50
[ 83.416244][ C1] console_init+0x17b/0x5d0
[ 83.416267][ C1] start_kernel+0x2c8/0x4e0
[ 83.416288][ C1] x86_64_start_reservations+0x2a/0x30
[ 83.416309][ C1] copy_bootdata+0x0/0xd0
[ 83.416328][ C1] secondary_startup_64_no_verify+0x179/0x17b
[ 83.416350][ C1]
[ 83.416350][ C1] -> #0 (console_owner){..-.}-{0:0}:
[ 83.416372][ C1] __lock_acquire+0x37ef/0x7d80
[ 83.416390][ C1] lock_acquire+0x19e/0x420
[ 83.416408][ C1] console_flush_all+0x676/0xcf0
[ 83.416428][ C1] console_unlock+0xad/0x350
[ 83.416447][ C1] vprintk_emit+0x497/0x610
[ 83.416465][ C1] _printk+0xde/0x130
[ 83.416488][ C1] __debug_object_init+0x18d/0x450
[ 83.416508][ C1] __synchronize_srcu+0x2ae/0x3d0
[ 83.416528][ C1] wakeup_source_unregister+0x116/0x190
[ 83.416547][ C1] mmc_host_classdev_release+0x47/0x100
[ 83.416569][ C1] device_release+0xbc/0x1e0
[ 83.416590][ C1] kobject_put+0x21b/0x450
[ 83.416612][ C1] call_timer_fn+0x189/0x540
[ 83.416628][ C1] __run_timers+0x570/0x810
[ 83.416643][ C1] run_timer_softirq+0x67/0xf0
[ 83.416658][ C1] handle_softirqs+0x27d/0x820
[ 83.416676][ C1] __irq_exit_rcu+0xd3/0x190
[ 83.416693][ C1] irq_exit_rcu+0x9/0x20
[ 83.416709][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 83.416730][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 83.416750][ C1] pv_native_safe_halt+0xf/0x10
[ 83.416772][ C1] default_idle+0x13/0x20
[ 83.416796][ C1] default_idle_call+0x6c/0xa0
[ 83.416819][ C1] do_idle+0x334/0x5c0
[ 83.416837][ C1] cpu_startup_entry+0x43/0x60
[ 83.416857][ C1] start_secondary+0xee/0xf0
[ 83.416873][ C1] secondary_startup_64_no_verify+0x179/0x17b
[ 83.416896][ C1]
[ 83.416896][ C1] other info that might help us debug this:
[ 83.416896][ C1]
[ 83.416900][ C1] Chain exists of:
[ 83.416900][ C1] console_owner --> &pool->lock --> &obj_hash[i].lock
[ 83.416900][ C1]
[ 83.416927][ C1] Possible unsafe locking scenario:
[ 83.416927][ C1]
[ 83.416931][ C1] CPU0 CPU1
[ 83.416934][ C1] ---- ----
[ 83.416938][ C1] lock(&obj_hash[i].lock);
[ 83.416947][ C1] lock(&pool->lock);
[ 83.416958][ C1] lock(&obj_hash[i].lock);
[ 83.416969][ C1] lock(console_owner);
[ 83.416979][ C1]
[ 83.416979][ C1] *** DEADLOCK ***
[ 83.416979][ C1]
[ 83.416982][ C1] 4 locks held by swapper/1/0:
[ 83.416992][ C1] #0: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540
[ 83.417033][ C1] #1: ffffffff9750e368 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450
[ 83.417076][ C1] #2: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130
[ 83.417122][ C1] #3: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0
[ 83.417165][ C1]
[ 83.417165][ C1] stack backtrace:
[ 83.417171][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0
[ 83.417189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 83.417198][ C1] Call Trace:
[ 83.417205][ C1]
[ 83.417211][ C1] dump_stack_lvl+0x18c/0x250
[ 83.417239][ C1] ? load_image+0x420/0x420
[ 83.417264][ C1] ? show_regs_print_info+0x20/0x20
[ 83.417285][ C1] ? print_circular_bug+0x12b/0x1a0
[ 83.417308][ C1] check_noncircular+0x2fc/0x400
[ 83.417333][ C1] ? print_deadlock_bug+0x5d0/0x5d0
[ 83.417354][ C1] ? lockdep_lock+0xf5/0x230
[ 83.417378][ C1] __lock_acquire+0x37ef/0x7d80
[ 83.417408][ C1] ? verify_lock_unused+0x140/0x140
[ 83.417436][ C1] lock_acquire+0x19e/0x420
[ 83.417455][ C1] ? console_flush_all+0x10b/0xcf0
[ 83.417481][ C1] ? __lock_acquire+0x7d80/0x7d80
[ 83.417499][ C1] ? do_raw_spin_lock+0x11f/0x2b0
[ 83.417522][ C1] ? read_lock_is_recursive+0x20/0x20
[ 83.417543][ C1] ? __rwlock_init+0x150/0x150
[ 83.417567][ C1] ? do_raw_spin_unlock+0x121/0x230
[ 83.417589][ C1] console_flush_all+0x676/0xcf0
[ 83.417608][ C1] ? console_flush_all+0x10b/0xcf0
[ 83.417628][ C1] ? console_flush_all+0x10b/0xcf0
[ 83.417653][ C1] ? is_console_locked+0x20/0x20
[ 83.417680][ C1] console_unlock+0xad/0x350
[ 83.417703][ C1] ? other_cpu_in_panic+0xf0/0xf0
[ 83.417728][ C1] vprintk_emit+0x497/0x610
[ 83.417750][ C1] ? printk_sprint+0x460/0x460
[ 83.417774][ C1] ? do_raw_spin_lock+0x11f/0x2b0
[ 83.417800][ C1] _printk+0xde/0x130
[ 83.417828][ C1] ? load_image+0x420/0x420
[ 83.417858][ C1] ? alloc_object+0x1c/0x640
[ 83.417876][ C1] ? lock_release+0x8c0/0x8c0
[ 83.417898][ C1] __debug_object_init+0x18d/0x450
[ 83.417920][ C1] __synchronize_srcu+0x2ae/0x3d0
[ 83.417941][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 83.417965][ C1] ? synchronize_srcu_expedited+0x20/0x20
[ 83.417992][ C1] ? read_tsc+0x9/0x20
[ 83.418011][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0
[ 83.418034][ C1] ? synchronize_srcu+0x25a/0x280
[ 83.418059][ C1] wakeup_source_unregister+0x116/0x190
[ 83.418081][ C1] mmc_host_classdev_release+0x47/0x100
[ 83.418107][ C1] ? mmc_free_host+0x30/0x30
[ 83.418129][ C1] device_release+0xbc/0x1e0
[ 83.418151][ C1] kobject_put+0x21b/0x450
[ 83.418177][ C1] call_timer_fn+0x189/0x540
[ 83.418193][ C1] ? kref_get+0x70/0x70
[ 83.418224][ C1] ? call_timer_fn+0xd2/0x540
[ 83.418241][ C1] ? __run_timers+0x810/0x810
[ 83.418264][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 83.418291][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 83.418315][ C1] ? kref_get+0x70/0x70
[ 83.418341][ C1] __run_timers+0x570/0x810
[ 83.418366][ C1] ? detach_timer+0x2b0/0x2b0
[ 83.418386][ C1] ? lock_chain_count+0x20/0x20
[ 83.418410][ C1] run_timer_softirq+0x67/0xf0
[ 83.418428][ C1] handle_softirqs+0x27d/0x820
[ 83.418446][ C1] ? read_tsc+0x9/0x20
[ 83.418465][ C1] ? ktime_get+0x24b/0x280
[ 83.418487][ C1] ? __irq_exit_rcu+0xd3/0x190
[ 83.418507][ C1] ? do_softirq+0x1a0/0x1a0
[ 83.418527][ C1] ? irqtime_account_irq+0xb6/0x1c0
[ 83.418553][ C1] __irq_exit_rcu+0xd3/0x190
[ 83.418571][ C1] ? irq_exit_rcu+0x20/0x20
[ 83.418593][ C1] irq_exit_rcu+0x9/0x20
[ 83.418610][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 83.418635][ C1]
[ 83.418640][ C1]
[ 83.418645][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 83.418664][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 83.418689][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9
[ 83.418704][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6
[ 83.418718][ C1] RAX: 042fde2edbb3a500 RBX: ffffffff81630d54 RCX: 042fde2edbb3a500
[ 83.418732][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0
[ 83.418745][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75
[ 83.418758][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8
[ 83.418772][ C1] R13: dffffc0000000000 R14: 1ffff110037cc780 R15: 0000000000000000
[ 83.418787][ C1] ? do_idle+0x334/0x5c0
[ 83.418812][ C1] default_idle+0x13/0x20
[ 83.418837][ C1] default_idle_call+0x6c/0xa0
[ 83.418863][ C1] do_idle+0x334/0x5c0
[ 83.418887][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 83.418909][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 83.418937][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 83.418961][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 83.418988][ C1] ? _raw_spin_unlock+0x40/0x40
[ 83.419016][ C1] cpu_startup_entry+0x43/0x60
[ 83.419037][ C1] start_secondary+0xee/0xf0
[ 83.419057][ C1] secondary_startup_64_no_verify+0x179/0x17b
[ 83.419088][ C1]
[ 84.679194][ C1] ------------[ cut here ]------------
[ 84.685140][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450
[ 84.694505][ C1] Modules linked in:
[ 84.698407][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0
[ 84.707607][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 84.717664][ C1] RIP: 0010:__debug_object_init+0x18d/0x450
[ 84.723661][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f fe 25 13 48 c7 c1 80 3b 1d 8b 48 c7 c7 e0 3b 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 93 db 48 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f
[ 84.743448][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046
[ 84.749783][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 042fde2edbb3a500
[ 84.757756][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000
[ 84.765739][ C1] RBP: dffffc0000000000 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[ 84.773828][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88801be63c20
[ 84.781804][ C1] R13: ffff88805e67e3f0 R14: 0000000000000001 R15: ffffffff8acbdf00
[ 84.789970][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 84.799348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 84.806030][ C1] CR2: 0000001b2e01dff8 CR3: 0000000062cce000 CR4: 00000000003506e0
[ 84.814731][ C1] Call Trace:
[ 84.819075][ C1]
[ 84.822375][ C1] __synchronize_srcu+0x2ae/0x3d0
[ 84.828206][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 84.835259][ C1] ? synchronize_srcu_expedited+0x20/0x20
[ 84.841176][ C1] ? read_tsc+0x9/0x20
[ 84.845393][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0
[ 84.851403][ C1] ? synchronize_srcu+0x25a/0x280
[ 84.856660][ C1] wakeup_source_unregister+0x116/0x190
[ 84.862402][ C1] mmc_host_classdev_release+0x47/0x100
[ 84.868727][ C1] ? mmc_free_host+0x30/0x30
[ 84.874316][ C1] device_release+0xbc/0x1e0
[ 84.879163][ C1] kobject_put+0x21b/0x450
[ 84.885063][ C1] call_timer_fn+0x189/0x540
[ 84.889658][ C1] ? kref_get+0x70/0x70
[ 84.893845][ C1] ? call_timer_fn+0xd2/0x540
[ 84.899137][ C1] ? __run_timers+0x810/0x810
[ 84.903820][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 84.909226][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 84.914428][ C1] ? kref_get+0x70/0x70
[ 84.918633][ C1] __run_timers+0x570/0x810
[ 84.923348][ C1] ? detach_timer+0x2b0/0x2b0
[ 84.928218][ C1] ? lock_chain_count+0x20/0x20
[ 84.933292][ C1] run_timer_softirq+0x67/0xf0
[ 84.938167][ C1] handle_softirqs+0x27d/0x820
[ 84.942960][ C1] ? read_tsc+0x9/0x20
[ 84.947543][ C1] ? ktime_get+0x24b/0x280
[ 84.952154][ C1] ? __irq_exit_rcu+0xd3/0x190
[ 84.957053][ C1] ? do_softirq+0x1a0/0x1a0
[ 84.961680][ C1] ? irqtime_account_irq+0xb6/0x1c0
[ 84.966882][ C1] __irq_exit_rcu+0xd3/0x190
[ 84.971570][ C1] ? irq_exit_rcu+0x20/0x20
[ 84.976543][ C1] irq_exit_rcu+0x9/0x20
[ 84.981069][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 84.986730][ C1]
[ 84.989674][ C1]
[ 84.992607][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 84.999139][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 85.005025][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9
[ 85.025776][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6
[ 85.032277][ C1] RAX: 042fde2edbb3a500 RBX: ffffffff81630d54 RCX: 042fde2edbb3a500
[ 85.040979][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0
[ 85.049068][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75
[ 85.057108][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8
[ 85.065080][ C1] R13: dffffc0000000000 R14: 1ffff110037cc780 R15: 0000000000000000
[ 85.074945][ C1] ? do_idle+0x334/0x5c0
[ 85.080081][ C1] default_idle+0x13/0x20
[ 85.087098][ C1] default_idle_call+0x6c/0xa0
[ 85.093090][ C1] do_idle+0x334/0x5c0
[ 85.098839][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 85.104507][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 85.111903][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 85.117218][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 85.123871][ C1] ? _raw_spin_unlock+0x40/0x40
[ 85.128943][ C1] cpu_startup_entry+0x43/0x60
[ 85.135668][ C1] start_secondary+0xee/0xf0
[ 85.140509][ C1] secondary_startup_64_no_verify+0x179/0x17b
[ 85.147371][ C1]
[ 85.150488][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.158473][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0
[ 85.171438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 85.183279][ C1] Call Trace:
[ 85.187007][ C1]
[ 85.190666][ C1] dump_stack_lvl+0x18c/0x250
[ 85.196017][ C1] ? show_regs_print_info+0x20/0x20
[ 85.201954][ C1] ? load_image+0x420/0x420
[ 85.206892][ C1] panic+0x2ca/0x720
[ 85.211050][ C1] ? bpf_jit_dump+0xd0/0xd0
[ 85.216855][ C1] ? secondary_startup_64_no_verify+0x179/0x17b
[ 85.225305][ C1] __warn+0x2e0/0x470
[ 85.230146][ C1] ? __debug_object_init+0x18d/0x450
[ 85.237632][ C1] ? __debug_object_init+0x18d/0x450
[ 85.243284][ C1] report_bug+0x2be/0x4f0
[ 85.248179][ C1] ? __debug_object_init+0x18d/0x450
[ 85.254264][ C1] ? __debug_object_init+0x18d/0x450
[ 85.260264][ C1] ? __debug_object_init+0x18f/0x450
[ 85.266456][ C1] handle_bug+0xcf/0x120
[ 85.271428][ C1] exc_invalid_op+0x1a/0x50
[ 85.276636][ C1] asm_exc_invalid_op+0x1a/0x20
[ 85.282109][ C1] RIP: 0010:__debug_object_init+0x18d/0x450
[ 85.288516][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 6f fe 25 13 48 c7 c1 80 3b 1d 8b 48 c7 c7 e0 3b 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 93 db 48 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f
[ 85.310420][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046
[ 85.316941][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 042fde2edbb3a500
[ 85.326102][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000
[ 85.334882][ C1] RBP: dffffc0000000000 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[ 85.343662][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88801be63c20
[ 85.353451][ C1] R13: ffff88805e67e3f0 R14: 0000000000000001 R15: ffffffff8acbdf00
[ 85.361737][ C1] ? __debug_object_init+0x18d/0x450
[ 85.367075][ C1] __synchronize_srcu+0x2ae/0x3d0
[ 85.372137][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 85.378083][ C1] ? synchronize_srcu_expedited+0x20/0x20
[ 85.383998][ C1] ? read_tsc+0x9/0x20
[ 85.388119][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0
[ 85.393695][ C1] ? synchronize_srcu+0x25a/0x280
[ 85.398731][ C1] wakeup_source_unregister+0x116/0x190
[ 85.404297][ C1] mmc_host_classdev_release+0x47/0x100
[ 85.409878][ C1] ? mmc_free_host+0x30/0x30
[ 85.414560][ C1] device_release+0xbc/0x1e0
[ 85.419242][ C1] kobject_put+0x21b/0x450
[ 85.423763][ C1] call_timer_fn+0x189/0x540
[ 85.428402][ C1] ? kref_get+0x70/0x70
[ 85.432590][ C1] ? call_timer_fn+0xd2/0x540
[ 85.437284][ C1] ? __run_timers+0x810/0x810
[ 85.442259][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 85.447783][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 85.453349][ C1] ? kref_get+0x70/0x70
[ 85.461599][ C1] __run_timers+0x570/0x810
[ 85.466137][ C1] ? detach_timer+0x2b0/0x2b0
[ 85.470818][ C1] ? lock_chain_count+0x20/0x20
[ 85.475678][ C1] run_timer_softirq+0x67/0xf0
[ 85.480451][ C1] handle_softirqs+0x27d/0x820
[ 85.485217][ C1] ? read_tsc+0x9/0x20
[ 85.489917][ C1] ? ktime_get+0x24b/0x280
[ 85.494615][ C1] ? __irq_exit_rcu+0xd3/0x190
[ 85.499377][ C1] ? do_softirq+0x1a0/0x1a0
[ 85.503918][ C1] ? irqtime_account_irq+0xb6/0x1c0
[ 85.509325][ C1] __irq_exit_rcu+0xd3/0x190
[ 85.514404][ C1] ? irq_exit_rcu+0x20/0x20
[ 85.518953][ C1] irq_exit_rcu+0x9/0x20
[ 85.523249][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 85.528944][ C1]
[ 85.531903][ C1]
[ 85.534996][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 85.541836][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 85.547691][ C1] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9
[ 85.567524][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6
[ 85.574370][ C1] RAX: 042fde2edbb3a500 RBX: ffffffff81630d54 RCX: 042fde2edbb3a500
[ 85.582433][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0
[ 85.590973][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75
[ 85.599216][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8
[ 85.609818][ C1] R13: dffffc0000000000 R14: 1ffff110037cc780 R15: 0000000000000000
[ 85.617976][ C1] ? do_idle+0x334/0x5c0
[ 85.622234][ C1] default_idle+0x13/0x20
[ 85.626572][ C1] default_idle_call+0x6c/0xa0
[ 85.631346][ C1] do_idle+0x334/0x5c0
[ 85.635472][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 85.640781][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 85.646965][ C1] ? lockdep_hardirqs_on+0x98/0x150
[ 85.652171][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 85.658075][ C1] ? _raw_spin_unlock+0x40/0x40
[ 85.663030][ C1] cpu_startup_entry+0x43/0x60
[ 85.667805][ C1] start_secondary+0xee/0xf0
[ 85.672403][ C1] secondary_startup_64_no_verify+0x179/0x17b
[ 85.678554][ C1]
[ 85.681886][ C1] Kernel Offset: disabled
[ 85.686213][ C1] Rebooting in 86400 seconds..