program:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x604000)
syz_usb_disconnect(r2)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407e04ffff0000000000010902"], 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='10000', 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0)
write(r5, &(0x7f0000000280)='0', 0x1)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1842, 0x0)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='binder\x00', 0x200000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0)
ioctl$CDROMREADTOCHDR(r1, 0x5305, &(0x7f0000000040)={0x1, 0x6})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f00000040c0)={0x2020}, 0x2020)
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0xf, 0x4}, {0xde5, 0xa9, 0x5, 0x6}]})
[ 102.550400][ T4646] Bluetooth: hci0: command tx timeout
[ 103.034644][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 103.187166][ T9] usb 5-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[ 103.188057][ T9] usb 5-1: config 0 has no interfaces?
[ 103.188079][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 103.211623][ T9] usb 5-1: config 0 descriptor??
[ 103.421827][ T5324] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 103.563931][ T5325] ------------[ cut here ]------------
[ 103.563945][ T5325] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist)
[ 103.563952][ T5325] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: syz.0.0/5325
[ 103.575810][ T5325] Modules linked in:
[ 103.577585][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.581451][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.585877][ T5325] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[ 103.588260][ T5325] Code: b9 8d 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[ 103.596233][ T5325] RSP: 0018:ffffc9000d8e7b58 EFLAGS: 00010206
[ 103.599129][ T5325] RAX: 1ffffd1ffff8a19d RBX: 0000607f73990c00 RCX: dffffc0000000000
[ 103.602883][ T5325] RDX: 0000000000000001 RSI: ffffffff8e4187a4 RDI: 00000000ffffffff
[ 103.606465][ T5325] RBP: ffffe8ffffc50c00 R08: ffffffff907a757f R09: 1ffffffff20f4eaf
[ 103.609917][ T5325] R10: dffffc0000000000 R11: fffffbfff20f4eb0 R12: ffff8880125d2800
[ 103.613400][ T5325] R13: 0000000000000000 R14: ffffe8ffffc50ce8 R15: 1ffffffff1cdd7de
[ 103.617143][ T5325] FS: 00007f368648f6c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000
[ 103.620912][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 103.624181][ T5325] CR2: 00007ffc52559128 CR3: 00000000439c8000 CR4: 0000000000352ef0
[ 103.627990][ T5325] Call Trace:
[ 103.629645][ T5325]
[ 103.630989][ T5325] blk_mq_free_tag_set+0x617/0x790
[ 103.634135][ T5325] loop_add+0x88d/0xb40
[ 103.636569][ T5325] ? __pfx_loop_add+0x10/0x10
[ 103.639163][ T5325] loop_control_ioctl+0x2ed/0x5a0
[ 103.641493][ T5325] ? __fget_files+0x2a/0x420
[ 103.643549][ T5325] ? __pfx_loop_control_ioctl+0x10/0x10
[ 103.646280][ T5325] ? __fget_files+0x2a/0x420
[ 103.648505][ T5325] ? bpf_lsm_file_ioctl+0x9/0x20
[ 103.650832][ T5325] ? __pfx_loop_control_ioctl+0x10/0x10
[ 103.653439][ T5325] __se_sys_ioctl+0xfc/0x170
[ 103.655594][ T5325] do_syscall_64+0x166/0x520
[ 103.657750][ T5325] ? trace_irq_disable+0x3b/0x140
[ 103.659801][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.662210][ T5325] ? clear_bhb_loop+0x70/0xc0
[ 103.664072][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.666819][ T5325] RIP: 0033:0x7f368559e159
[ 103.668631][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.677047][ T5325] RSP: 002b:00007f368648efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 103.680691][ T5325] RAX: ffffffffffffffda RBX: 00007f3685826090 RCX: 00007f368559e159
[ 103.684342][ T5325] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003
[ 103.687910][ T5325] RBP: 00007f368563506b R08: 0000000000000000 R09: 0000000000000000
[ 103.691414][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.695047][ T5325] R13: 00007f3685826128 R14: 00007f3685826090 R15: 00007ffc52558fc8
[ 103.698466][ T5325]
[ 103.699954][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 103.703145][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.707088][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.711684][ T5325] Call Trace:
[ 103.713225][ T5325]
[ 103.714497][ T5325] vpanic+0x56d/0xa60
[ 103.716302][ T5325] ? __pfx__printk+0x10/0x10
[ 103.718303][ T5325] ? __pfx_vpanic+0x10/0x10
[ 103.720338][ T5325] ? is_bpf_text_address+0x292/0x2b0
[ 103.722744][ T5325] ? is_bpf_text_address+0x26/0x2b0
[ 103.725607][ T5325] panic+0xc5/0xd0
[ 103.727474][ T5325] ? __pfx_panic+0x10/0x10
[ 103.729405][ T5325] __warn+0x315/0x4c0
[ 103.731011][ T5325] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 103.733330][ T5325] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 103.735705][ T5325] __report_bug+0x276/0x570
[ 103.737763][ T5325] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 103.740199][ T5325] ? __pfx___report_bug+0x10/0x10
[ 103.742460][ T5325] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.744635][ T5325] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 103.746996][ T5325] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 103.749159][ T5325] report_bug+0x16b/0x220
[ 103.751040][ T5325] ? cleanup_srcu_struct+0x3d6/0x8b0
[ 103.753373][ T5325] ? cleanup_srcu_struct+0x3d8/0x8b0
[ 103.755667][ T5325] handle_bug+0x9c/0x200
[ 103.757562][ T5325] exc_invalid_op+0x1a/0x50
[ 103.759631][ T5325] asm_exc_invalid_op+0x1a/0x20
[ 103.761797][ T5325] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0
[ 103.764433][ T5325] Code: b9 8d 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00
[ 103.772983][ T5325] RSP: 0018:ffffc9000d8e7b58 EFLAGS: 00010206
[ 103.775712][ T5325] RAX: 1ffffd1ffff8a19d RBX: 0000607f73990c00 RCX: dffffc0000000000
[ 103.779320][ T5325] RDX: 0000000000000001 RSI: ffffffff8e4187a4 RDI: 00000000ffffffff
[ 103.782929][ T5325] RBP: ffffe8ffffc50c00 R08: ffffffff907a757f R09: 1ffffffff20f4eaf
[ 103.786490][ T5325] R10: dffffc0000000000 R11: fffffbfff20f4eb0 R12: ffff8880125d2800
[ 103.789676][ T5325] R13: 0000000000000000 R14: ffffe8ffffc50ce8 R15: 1ffffffff1cdd7de
[ 103.792797][ T5325] ? cleanup_srcu_struct+0x34d/0x8b0
[ 103.794985][ T5325] blk_mq_free_tag_set+0x617/0x790
[ 103.797177][ T5325] loop_add+0x88d/0xb40
[ 103.798923][ T5325] ? __pfx_loop_add+0x10/0x10
[ 103.800899][ T5325] loop_control_ioctl+0x2ed/0x5a0
[ 103.803022][ T5325] ? __fget_files+0x2a/0x420
[ 103.805050][ T5325] ? __pfx_loop_control_ioctl+0x10/0x10
[ 103.807629][ T5325] ? __fget_files+0x2a/0x420
[ 103.809741][ T5325] ? bpf_lsm_file_ioctl+0x9/0x20
[ 103.811955][ T5325] ? __pfx_loop_control_ioctl+0x10/0x10
[ 103.814362][ T5325] __se_sys_ioctl+0xfc/0x170
[ 103.816364][ T5325] do_syscall_64+0x166/0x520
[ 103.818370][ T5325] ? trace_irq_disable+0x3b/0x140
[ 103.820513][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.823045][ T5325] ? clear_bhb_loop+0x70/0xc0
[ 103.825031][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.827532][ T5325] RIP: 0033:0x7f368559e159
[ 103.829468][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.838007][ T5325] RSP: 002b:00007f368648efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 103.841746][ T5325] RAX: ffffffffffffffda RBX: 00007f3685826090 RCX: 00007f368559e159
[ 103.845173][ T5325] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000003
[ 103.848628][ T5325] RBP: 00007f368563506b R08: 0000000000000000 R09: 0000000000000000
[ 103.852087][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.855469][ T5325] R13: 00007f3685826128 R14: 00007f3685826090 R15: 00007ffc52558fc8
[ 103.859568][ T5325]
[ 103.861411][ T5325] Kernel Offset: disabled
[ 103.863359][ T5325] Rebooting in 86400 seconds..