program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x20, 0x20)
write(r0, &(0x7f0000000240)='2', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
[ 95.684029][ T4650] Bluetooth: hci0: command tx timeout
[ 95.938201][ T5326] ------------[ cut here ]------------
[ 95.938559][ T5326] !work->func
[ 95.938595][ T5326] WARNING: kernel/workqueue.c:4409 at __flush_work+0xb8f/0xca0, CPU#0: syz.0.0/5326
[ 95.946121][ T5326] Modules linked in:
[ 95.947701][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.951043][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.955369][ T5326] RIP: 0010:__flush_work+0xb8f/0xca0
[ 95.957664][ T5326] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 c5 5a 0a cc e8 60 39 39 00 90 0f 0b 90 e9 7c ff ff ff e8 52 39 39 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 38
[ 95.965569][ T5326] RSP: 0018:ffffc9000fa2fa20 EFLAGS: 00010283
[ 95.968109][ T5326] RAX: ffffffff818e92de RBX: ffff8880409461b0 RCX: 0000000000100000
[ 95.971303][ T5326] RDX: ffffc9000efd1000 RSI: 000000000000083c RDI: 000000000000083d
[ 95.974712][ T5326] RBP: ffffc9000fa2fbd0 R08: ffffffff907a3a7f R09: 1ffffffff20f474f
[ 95.977805][ T5326] R10: dffffc0000000000 R11: fffffbfff20f4750 R12: dffffc0000000000
[ 95.980791][ T5326] R13: 1ffff11008128c36 R14: 1ffff92001f45f4c R15: ffff888040946198
[ 95.984124][ T5326] FS: 00007f40a9c856c0(0000) GS:ffff88808c2cd000(0000) knlGS:0000000000000000
[ 95.987984][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.990794][ T5326] CR2: 00007fcc4f16cfb3 CR3: 0000000012b2d000 CR4: 0000000000352ef0
[ 95.994191][ T5326] Call Trace:
[ 95.995690][ T5326]
[ 95.997027][ T5326] ? trace_contention_end+0x3d/0x140
[ 95.999247][ T5326] ? __mutex_lock+0x30b/0x1550
[ 96.001378][ T5326] ? __pfx___flush_work+0x10/0x10
[ 96.003796][ T5326] ? __mutex_lock+0x30b/0x1550
[ 96.005855][ T5326] ? rcu_is_watching+0x16/0xb0
[ 96.008062][ T5326] ? work_grab_pending+0x3d1/0x930
[ 96.010218][ T5326] ? __cancel_work_sync+0x5c/0x110
[ 96.012377][ T5326] __cancel_work_sync+0xbf/0x110
[ 96.014570][ T5326] f_midi_free+0xac/0x1f0
[ 96.016330][ T5326] config_usb_cfg_unlink+0x236/0x260
[ 96.018575][ T5326] configfs_symlink+0xde9/0x1030
[ 96.022323][ T5326] ? lookup_one_qstr_excl+0x1d4/0x360
[ 96.025361][ T5326] ? make_vfsuid+0x49/0xa0
[ 96.027269][ T5326] ? __pfx_configfs_symlink+0x10/0x10
[ 96.029573][ T5326] ? bpf_lsm_inode_symlink+0x9/0x20
[ 96.031743][ T5326] vfs_symlink+0x18b/0x330
[ 96.033862][ T5326] ? security_path_symlink+0xfd/0x360
[ 96.036259][ T5326] filename_symlinkat+0x1cd/0x410
[ 96.038334][ T5326] ? __pfx_filename_symlinkat+0x10/0x10
[ 96.040557][ T5326] ? do_getname+0x151/0x250
[ 96.042398][ T5326] __se_sys_symlinkat+0x4e/0x2b0
[ 96.044480][ T5326] do_syscall_64+0x166/0x520
[ 96.046187][ T5326] ? trace_irq_disable+0x3b/0x140
[ 96.048320][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.050794][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 96.052842][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.055514][ T5326] RIP: 0033:0x7f40a8d9e159
[ 96.057478][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.065930][ T5326] RSP: 002b:00007f40a9c84fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 96.069656][ T5326] RAX: ffffffffffffffda RBX: 00007f40a9025fa0 RCX: 00007f40a8d9e159
[ 96.073080][ T5326] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000100
[ 96.076598][ T5326] RBP: 00007f40a8e35024 R08: 0000000000000000 R09: 0000000000000000
[ 96.080083][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.083268][ T5326] R13: 00007f40a9026038 R14: 00007f40a9025fa0 R15: 00007ffd102ee448
[ 96.086365][ T5326]
[ 96.087509][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 96.090129][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 96.093487][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.097671][ T5326] Call Trace:
[ 96.099284][ T5326]
[ 96.100545][ T5326] vpanic+0x56d/0xa60
[ 96.102262][ T5326] ? __pfx__printk+0x10/0x10
[ 96.104123][ T5326] ? __pfx_vpanic+0x10/0x10
[ 96.105870][ T5326] ? is_bpf_text_address+0x292/0x2b0
[ 96.107966][ T5326] ? is_bpf_text_address+0x26/0x2b0
[ 96.110081][ T5326] panic+0xc5/0xd0
[ 96.111775][ T5326] ? __pfx_panic+0x10/0x10
[ 96.113819][ T5326] __warn+0x315/0x4c0
[ 96.115638][ T5326] ? __flush_work+0xb8f/0xca0
[ 96.117580][ T5326] ? __flush_work+0xb8f/0xca0
[ 96.119561][ T5326] __report_bug+0x276/0x570
[ 96.121541][ T5326] ? __flush_work+0xb8f/0xca0
[ 96.123610][ T5326] ? __pfx___report_bug+0x10/0x10
[ 96.125599][ T5326] ? __lock_acquire+0x6df/0x2e50
[ 96.127735][ T5326] ? __lock_acquire+0x6df/0x2e50
[ 96.129948][ T5326] ? __flush_work+0xb8f/0xca0
[ 96.131980][ T5326] report_bug+0x16b/0x220
[ 96.133816][ T5326] ? __flush_work+0xb8f/0xca0
[ 96.135793][ T5326] ? __flush_work+0xb91/0xca0
[ 96.137833][ T5326] handle_bug+0x9c/0x200
[ 96.139627][ T5326] exc_invalid_op+0x1a/0x50
[ 96.141523][ T5326] asm_exc_invalid_op+0x1a/0x20
[ 96.143791][ T5326] RIP: 0010:__flush_work+0xb8f/0xca0
[ 96.146122][ T5326] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 c5 5a 0a cc e8 60 39 39 00 90 0f 0b 90 e9 7c ff ff ff e8 52 39 39 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 38
[ 96.154304][ T5326] RSP: 0018:ffffc9000fa2fa20 EFLAGS: 00010283
[ 96.156870][ T5326] RAX: ffffffff818e92de RBX: ffff8880409461b0 RCX: 0000000000100000
[ 96.160148][ T5326] RDX: ffffc9000efd1000 RSI: 000000000000083c RDI: 000000000000083d
[ 96.163324][ T5326] RBP: ffffc9000fa2fbd0 R08: ffffffff907a3a7f R09: 1ffffffff20f474f
[ 96.166626][ T5326] R10: dffffc0000000000 R11: fffffbfff20f4750 R12: dffffc0000000000
[ 96.169994][ T5326] R13: 1ffff11008128c36 R14: 1ffff92001f45f4c R15: ffff888040946198
[ 96.173448][ T5326] ? __flush_work+0xb8e/0xca0
[ 96.175572][ T5326] ? trace_contention_end+0x3d/0x140
[ 96.177910][ T5326] ? __mutex_lock+0x30b/0x1550
[ 96.180009][ T5326] ? __pfx___flush_work+0x10/0x10
[ 96.182211][ T5326] ? __mutex_lock+0x30b/0x1550
[ 96.184278][ T5326] ? rcu_is_watching+0x16/0xb0
[ 96.186341][ T5326] ? work_grab_pending+0x3d1/0x930
[ 96.188563][ T5326] ? __cancel_work_sync+0x5c/0x110
[ 96.190812][ T5326] __cancel_work_sync+0xbf/0x110
[ 96.193025][ T5326] f_midi_free+0xac/0x1f0
[ 96.194852][ T5326] config_usb_cfg_unlink+0x236/0x260
[ 96.197124][ T5326] configfs_symlink+0xde9/0x1030
[ 96.199188][ T5326] ? lookup_one_qstr_excl+0x1d4/0x360
[ 96.201330][ T5326] ? make_vfsuid+0x49/0xa0
[ 96.203073][ T5326] ? __pfx_configfs_symlink+0x10/0x10
[ 96.205144][ T5326] ? bpf_lsm_inode_symlink+0x9/0x20
[ 96.207193][ T5326] vfs_symlink+0x18b/0x330
[ 96.208995][ T5326] ? security_path_symlink+0xfd/0x360
[ 96.211167][ T5326] filename_symlinkat+0x1cd/0x410
[ 96.213204][ T5326] ? __pfx_filename_symlinkat+0x10/0x10
[ 96.215464][ T5326] ? do_getname+0x151/0x250
[ 96.217317][ T5326] __se_sys_symlinkat+0x4e/0x2b0
[ 96.219422][ T5326] do_syscall_64+0x166/0x520
[ 96.221421][ T5326] ? trace_irq_disable+0x3b/0x140
[ 96.223761][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.226284][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 96.228121][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.230505][ T5326] RIP: 0033:0x7f40a8d9e159
[ 96.232384][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.240309][ T5326] RSP: 002b:00007f40a9c84fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 96.244031][ T5326] RAX: ffffffffffffffda RBX: 00007f40a9025fa0 RCX: 00007f40a8d9e159
[ 96.247276][ T5326] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000100
[ 96.250751][ T5326] RBP: 00007f40a8e35024 R08: 0000000000000000 R09: 0000000000000000
[ 96.254289][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.257659][ T5326] R13: 00007f40a9026038 R14: 00007f40a9025fa0 R15: 00007ffd102ee448
[ 96.260996][ T5326]
[ 96.262624][ T5326] Kernel Offset: disabled
[ 96.264520][ T5326] Rebooting in 86400 seconds..