program:
r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='0\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x10000, 0x48)
mkdirat(r2, &(0x7f0000000040)='./my_configfs\x00', 0x1ff)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x10000, 0x7}})
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x1}})
[ 95.396170][ T5281] Bluetooth: hci0: command tx timeout
[ 95.688648][ T5317] 0x000000000000-0x000000010000 : ""
[ 95.754013][ T5317] ftl_cs: FTL header not found.
[ 96.111576][ T5318] ------------[ cut here ]------------
[ 96.111586][ T5318] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist)
[ 96.111593][ T5318] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: syz.0.0/5318
[ 96.123610][ T5318] Modules linked in:
[ 96.126250][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 96.130570][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.134883][ T5318] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[ 96.137089][ T5318] Code: b9 8d 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[ 96.144917][ T5318] RSP: 0018:ffffc9000f16f698 EFLAGS: 00010202
[ 96.147515][ T5318] RAX: 1ffffd1ffff8a04d RBX: 0000607f73990180 RCX: dffffc0000000000
[ 96.150799][ T5318] RDX: 0000000000000001 RSI: ffffffff8e418918 RDI: 00000000ffffffff
[ 96.154086][ T5318] RBP: ffffe8ffffc50180 R08: ffffffff907a757f R09: 1ffffffff20f4eaf
[ 96.157363][ T5318] R10: dffffc0000000000 R11: fffffbfff20f4eb0 R12: ffff888052a92800
[ 96.160897][ T5318] R13: 0000000000000000 R14: ffffe8ffffc50268 R15: 1ffffffff1cdd7de
[ 96.164370][ T5318] FS: 00007fea76e946c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000
[ 96.168369][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 96.171235][ T5318] CR2: 000055556a918848 CR3: 0000000012701000 CR4: 0000000000352ef0
[ 96.174239][ T5318] Call Trace:
[ 96.175695][ T5318]
[ 96.177014][ T5318] blk_mq_free_tag_set+0x617/0x790
[ 96.179479][ T5318] blktrans_dev_put+0x9d/0x1e0
[ 96.181721][ T5318] del_mtd_blktrans_dev+0x33b/0x3f0
[ 96.183886][ T5318] blktrans_notify_remove+0xea/0x160
[ 96.186199][ T5318] del_mtd_device+0x9a/0x170
[ 96.188098][ T5318] mtd_del_partition+0xe8/0x110
[ 96.190278][ T5318] mtdchar_blkpg_ioctl+0x20e/0x2c0
[ 96.192522][ T5318] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 96.194976][ T5318] ? rep_movs_alternative+0x30/0xa0
[ 96.197205][ T5318] mtdchar_ioctl+0x14f7/0x1bc0
[ 96.199177][ T5318] ? lockdep_hardirqs_on+0x7b/0x110
[ 96.201383][ T5318] ? __pfx_mtdchar_ioctl+0x10/0x10
[ 96.203575][ T5318] ? do_raw_spin_lock+0x12b/0x2f0
[ 96.206430][ T5318] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 96.210469][ T5318] ? __mutex_lock+0x1096/0x1550
[ 96.213363][ T5318] ? __mutex_lock+0x5d4/0x1550
[ 96.216163][ T5318] ? mtdchar_unlocked_ioctl+0xa1/0xd0
[ 96.218719][ T5318] ? __pfx___mutex_lock+0x10/0x10
[ 96.220638][ T5318] ? __fget_files+0x2a/0x420
[ 96.222596][ T5318] ? __fget_files+0x3a2/0x420
[ 96.224429][ T5318] ? __fget_files+0x2a/0x420
[ 96.226390][ T5318] mtdchar_unlocked_ioctl+0xae/0xd0
[ 96.228652][ T5318] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 96.231612][ T5318] __se_sys_ioctl+0xfc/0x170
[ 96.233635][ T5318] do_syscall_64+0x166/0x520
[ 96.235545][ T5318] ? trace_irq_disable+0x3b/0x140
[ 96.237550][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.240313][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 96.242355][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.245044][ T5318] RIP: 0033:0x7fea75f9e159
[ 96.247005][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.255267][ T5318] RSP: 002b:00007fea76e93fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 96.258956][ T5318] RAX: ffffffffffffffda RBX: 00007fea76226090 RCX: 00007fea75f9e159
[ 96.262448][ T5318] RDX: 0000200000000180 RSI: 0000000000001269 RDI: 0000000000000003
[ 96.265922][ T5318] RBP: 00007fea7603506b R08: 0000000000000000 R09: 0000000000000000
[ 96.269246][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.272802][ T5318] R13: 00007fea76226128 R14: 00007fea76226090 R15: 00007ffc5507cd18
[ 96.276397][ T5318]
[ 96.277887][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 96.281196][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 96.285211][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.290589][ T5318] Call Trace:
[ 96.292511][ T5318]
[ 96.293901][ T5318] vpanic+0x56d/0xa60
[ 96.295774][ T5318] ? __pfx__printk+0x10/0x10
[ 96.297789][ T5318] ? __pfx_vpanic+0x10/0x10
[ 96.299898][ T5318] ? is_bpf_text_address+0x292/0x2b0
[ 96.302268][ T5318] ? is_bpf_text_address+0x26/0x2b0
[ 96.305938][ T5318] panic+0xc5/0xd0
[ 96.307547][ T5318] ? __pfx_panic+0x10/0x10
[ 96.309517][ T5318] __warn+0x315/0x4c0
[ 96.311326][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 96.313713][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 96.316078][ T5318] __report_bug+0x276/0x570
[ 96.318482][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 96.321191][ T5318] ? __pfx___report_bug+0x10/0x10
[ 96.323433][ T5318] ? irqentry_exit+0x218/0x910
[ 96.325499][ T5318] ? lockdep_hardirqs_on+0x7b/0x110
[ 96.327752][ T5318] ? irqentry_exit+0x218/0x910
[ 96.329795][ T5318] ? trace_irq_disable+0x3b/0x140
[ 96.331873][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 96.334117][ T5318] report_bug+0x16b/0x220
[ 96.336058][ T5318] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 96.338368][ T5318] ? cleanup_srcu_struct+0x3d8/0x8b0
[ 96.340589][ T5318] handle_bug+0x9c/0x200
[ 96.342317][ T5318] exc_invalid_op+0x1a/0x50
[ 96.344198][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 96.346294][ T5318] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[ 96.348951][ T5318] Code: b9 8d 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[ 96.357040][ T5318] RSP: 0018:ffffc9000f16f698 EFLAGS: 00010202
[ 96.359823][ T5318] RAX: 1ffffd1ffff8a04d RBX: 0000607f73990180 RCX: dffffc0000000000
[ 96.363181][ T5318] RDX: 0000000000000001 RSI: ffffffff8e418918 RDI: 00000000ffffffff
[ 96.366741][ T5318] RBP: ffffe8ffffc50180 R08: ffffffff907a757f R09: 1ffffffff20f4eaf
[ 96.370335][ T5318] R10: dffffc0000000000 R11: fffffbfff20f4eb0 R12: ffff888052a92800
[ 96.373848][ T5318] R13: 0000000000000000 R14: ffffe8ffffc50268 R15: 1ffffffff1cdd7de
[ 96.377276][ T5318] ? cleanup_srcu_struct+0x34d/0x8b0
[ 96.379496][ T5318] blk_mq_free_tag_set+0x617/0x790
[ 96.381651][ T5318] blktrans_dev_put+0x9d/0x1e0
[ 96.383606][ T5318] del_mtd_blktrans_dev+0x33b/0x3f0
[ 96.385653][ T5318] blktrans_notify_remove+0xea/0x160
[ 96.387779][ T5318] del_mtd_device+0x9a/0x170
[ 96.389910][ T5318] mtd_del_partition+0xe8/0x110
[ 96.392106][ T5318] mtdchar_blkpg_ioctl+0x20e/0x2c0
[ 96.394231][ T5318] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 96.396724][ T5318] ? rep_movs_alternative+0x30/0xa0
[ 96.398965][ T5318] mtdchar_ioctl+0x14f7/0x1bc0
[ 96.400919][ T5318] ? lockdep_hardirqs_on+0x7b/0x110
[ 96.403093][ T5318] ? __pfx_mtdchar_ioctl+0x10/0x10
[ 96.405235][ T5318] ? do_raw_spin_lock+0x12b/0x2f0
[ 96.407431][ T5318] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 96.410026][ T5318] ? __mutex_lock+0x1096/0x1550
[ 96.412187][ T5318] ? __mutex_lock+0x5d4/0x1550
[ 96.414381][ T5318] ? mtdchar_unlocked_ioctl+0xa1/0xd0
[ 96.416987][ T5318] ? __pfx___mutex_lock+0x10/0x10
[ 96.419904][ T5318] ? __fget_files+0x2a/0x420
[ 96.422443][ T5318] ? __fget_files+0x3a2/0x420
[ 96.424652][ T5318] ? __fget_files+0x2a/0x420
[ 96.427060][ T5318] mtdchar_unlocked_ioctl+0xae/0xd0
[ 96.429873][ T5318] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 96.432363][ T5318] __se_sys_ioctl+0xfc/0x170
[ 96.434520][ T5318] do_syscall_64+0x166/0x520
[ 96.436523][ T5318] ? trace_irq_disable+0x3b/0x140
[ 96.438575][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.441176][ T5318] ? clear_bhb_loop+0x70/0xc0
[ 96.443088][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.446368][ T5318] RIP: 0033:0x7fea75f9e159
[ 96.448389][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.456716][ T5318] RSP: 002b:00007fea76e93fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 96.460225][ T5318] RAX: ffffffffffffffda RBX: 00007fea76226090 RCX: 00007fea75f9e159
[ 96.463538][ T5318] RDX: 0000200000000180 RSI: 0000000000001269 RDI: 0000000000000003
[ 96.466916][ T5318] RBP: 00007fea7603506b R08: 0000000000000000 R09: 0000000000000000
[ 96.470156][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.473422][ T5318] R13: 00007fea76226128 R14: 00007fea76226090 R15: 00007ffc5507cd18
[ 96.476974][ T5318]
[ 96.478704][ T5318] Kernel Offset: disabled
[ 96.480498][ T5318] Rebooting in 86400 seconds..