program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd4}}, 0x4001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000004000280"], 0x28}, 0x1, 0x0, 0x0, 0x86}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl(r5, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff")
syz_usb_control_io(r0, 0x0, 0x0)
[ 108.695868][ T44] Bluetooth: hci0: command tx timeout
[ 109.065104][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 109.217980][ T10] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 109.226445][ T10] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 109.233640][ T10] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 109.244029][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 109.248696][ T10] usb 5-1: Product: syz
[ 109.251026][ T10] usb 5-1: Manufacturer: syz
[ 109.253663][ T10] usb 5-1: SerialNumber: syz
[ 109.282539][ T10] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[ 109.301453][ T10] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[ 109.315649][ T10] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[ 110.116285][ C0]
[ 110.117938][ C0] =============================
[ 110.120546][ C0] [ BUG: Invalid wait context ]
[ 110.123002][ C0] syzkaller #0 Not tainted
[ 110.125427][ C0] -----------------------------
[ 110.128278][ C0] swapper/0/0 is trying to lock:
[ 110.130761][ C0] ffff88801f575bb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 110.135356][ C0] other info that might help us debug this:
[ 110.138645][ C0] context-{2:2}
[ 110.140901][ C0] 1 lock held by swapper/0/0:
[ 110.143472][ C0] #0: ffff88801f576110 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 110.149145][ C0] stack backtrace:
[ 110.150566][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full)
[ 110.150580][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 110.150588][ C0] Call Trace:
[ 110.150596][ C0]
[ 110.150603][ C0] dump_stack_lvl+0xe8/0x150
[ 110.150625][ C0] __lock_acquire+0xe39/0x2cf0
[ 110.150642][ C0] ? __lock_acquire+0x683/0x2cf0
[ 110.150658][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 110.150673][ C0] lock_acquire+0x106/0x350
[ 110.150685][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 110.150697][ C0] ? xa_load+0x1db/0x210
[ 110.150770][ C0] _raw_read_lock_irqsave+0x48/0x60
[ 110.150783][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 110.150794][ C0] kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[ 110.150813][ C0] ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[ 110.150827][ C0] xen_timer_callback+0x109/0x220
[ 110.150839][ C0] ? __pfx_xen_timer_callback+0x10/0x10
[ 110.150850][ C0] __hrtimer_run_queues+0x371/0xa10
[ 110.150864][ C0] hrtimer_interrupt+0x448/0x910
[ 110.150879][ C0] __sysvec_apic_timer_interrupt+0x102/0x430
[ 110.150891][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0
[ 110.150905][ C0]
[ 110.150909][ C0]
[ 110.150913][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 110.150925][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 110.150939][ C0] Code: eb 7c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 ae 16 00 fb f4 4c 07 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 110.150948][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000242
[ 110.150961][ C0] RAX: 00000000000a5d4f RBX: ffffffff819b4450 RCX: 0000000080000001
[ 110.150967][ C0] RDX: 0000000000000001 RSI: ffffffff8e22bc06 RDI: ffffffff8c4bcf80
[ 110.150974][ C0] RBP: ffffffff8e807eb8 R08: ffff88801fc338db R09: 1ffff11003f8671b
[ 110.150981][ C0] R10: dffffc0000000000 R11: ffffed1003f8671c R12: 0000000000000000
[ 110.150987][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000
[ 110.150996][ C0] ? do_idle+0x2e0/0x540
[ 110.151012][ C0] default_idle+0x9/0x20
[ 110.151026][ C0] default_idle_call+0x72/0xb0
[ 110.151039][ C0] do_idle+0x2e0/0x540
[ 110.151049][ C0] ? __pfx_do_idle+0x10/0x10
[ 110.151062][ C0] cpu_startup_entry+0x43/0x60
[ 110.151075][ C0] rest_init+0x2de/0x300
[ 110.151090][ C0] start_kernel+0x392/0x3e0
[ 110.151180][ C0] x86_64_start_reservations+0x24/0x30
[ 110.151194][ C0] x86_64_start_kernel+0x137/0x1b0
[ 110.151204][ C0] common_startup_64+0x13e/0x157
[ 110.151221][ C0]
[ 110.705256][ T44] Bluetooth: hci0: command tx timeout
[ 111.025261][ T5321] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110
[ 111.067193][ T10] usb 5-1: USB disconnect, device number 2
[ 111.080448][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[ 111.100690][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[ 111.113484][ T10] ti_usb_3410_5052 5-1:2.0: device disconnected