program: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) [ 94.528319][ T4641] Bluetooth: hci0: command tx timeout [ 94.619656][ T5316] ------------[ cut here ]------------ [ 94.621686][ T5316] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x3dd/0x480 [ 94.626852][ T5316] WARNING: kernel/sched/core.c:9161 at __might_sleep+0x92/0xf0, CPU#0: syz.0.0/5316 [ 94.631468][ T5316] Modules linked in: [ 94.633800][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.637881][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.642096][ T5316] RIP: 0010:__might_sleep+0xac/0xf0 [ 94.644737][ T5316] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 6e e9 e5 0e 43 80 3c 3c 00 74 08 48 89 df e8 ef 73 a2 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 94.653053][ T5316] RSP: 0018:ffffc9000e2bfae0 EFLAGS: 00010246 [ 94.655592][ T5316] RAX: 0000000000000000 RBX: ffff888033223e00 RCX: ffffffff819fafdd [ 94.659364][ T5316] RDX: ffffffff819fafdd RSI: 0000000000000002 RDI: ffffffff907bf290 [ 94.663187][ T5316] RBP: 0000000000000002 R08: ffffc9000e2bfc27 R09: 0000000000000000 [ 94.666794][ T5316] R10: ffffc9000e2bfc00 R11: fffff52001c57f85 R12: 1ffff110066447c0 [ 94.670379][ T5316] R13: 000000000000026f R14: ffffffff907bf290 R15: dffffc0000000000 [ 94.673931][ T5316] FS: 00007f8e20a336c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 94.677998][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.680776][ T5316] CR2: 00007f8e1fe20138 CR3: 000000000bf98000 CR4: 0000000000352ef0 [ 94.684930][ T5316] Call Trace: [ 94.686523][ T5316] [ 94.687834][ T5316] __mutex_lock+0x118/0x1550 [ 94.689728][ T5316] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.691981][ T5316] ? futex_hash_allocate+0x7fb/0xf00 [ 94.694383][ T5316] ? __pfx___mutex_lock+0x10/0x10 [ 94.696553][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.699070][ T5316] ? prepare_to_wait_event+0x436/0x480 [ 94.701408][ T5316] futex_hash_allocate+0x7fb/0xf00 [ 94.703845][ T5316] ? __pfx_futex_hash_allocate+0x10/0x10 [ 94.706224][ T5316] ? __pfx_var_wake_function+0x10/0x10 [ 94.708549][ T5316] ? static_key_count+0x41/0x70 [ 94.710578][ T5316] ? security_task_prctl+0x163/0x190 [ 94.712947][ T5316] __se_sys_prctl+0x78c/0x1910 [ 94.714994][ T5316] ? __pfx___se_sys_prctl+0x10/0x10 [ 94.717156][ T5316] ? __x64_sys_prctl+0x20/0xc0 [ 94.719156][ T5316] do_syscall_64+0x166/0x520 [ 94.721094][ T5316] ? trace_irq_disable+0x3b/0x140 [ 94.723348][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.725995][ T5316] ? clear_bhb_loop+0x70/0xc0 [ 94.728004][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.730407][ T5316] RIP: 0033:0x7f8e1fb9e0d9 [ 94.732487][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.740722][ T5316] RSP: 002b:00007f8e20a32fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.744370][ T5316] RAX: ffffffffffffffda RBX: 00007f8e1fe25fa0 RCX: 00007f8e1fb9e0d9 [ 94.747651][ T5316] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000000000004e [ 94.750852][ T5316] RBP: 00007f8e1fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 94.754446][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.758129][ T5316] R13: 00007f8e1fe26038 R14: 00007f8e1fe25fa0 R15: 00007ffd65dad908 [ 94.761816][ T5316] [ 94.763322][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.766567][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.770406][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.774688][ T5316] Call Trace: [ 94.776087][ T5316] [ 94.777257][ T5316] vpanic+0x56d/0xa60 [ 94.778859][ T5316] ? __pfx__printk+0x10/0x10 [ 94.780857][ T5316] ? __pfx_vpanic+0x10/0x10 [ 94.782838][ T5316] ? is_bpf_text_address+0x292/0x2b0 [ 94.785052][ T5316] ? is_bpf_text_address+0x26/0x2b0 [ 94.787259][ T5316] panic+0xc5/0xd0 [ 94.788923][ T5316] ? __pfx_panic+0x10/0x10 [ 94.790853][ T5316] __warn+0x315/0x4c0 [ 94.792634][ T5316] ? __might_sleep+0x92/0xf0 [ 94.794547][ T5316] ? __might_sleep+0x92/0xf0 [ 94.796480][ T5316] __report_bug+0x276/0x570 [ 94.798383][ T5316] ? __might_sleep+0x92/0xf0 [ 94.800411][ T5316] ? __pfx___report_bug+0x10/0x10 [ 94.802533][ T5316] ? prepare_to_wait_event+0x3dd/0x480 [ 94.804909][ T5316] ? prepare_to_wait_event+0x3dd/0x480 [ 94.807251][ T5316] ? __lock_acquire+0x683/0x2cf0 [ 94.809395][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.811881][ T5316] ? stack_depot_save_flags+0x404/0x7f0 [ 94.814279][ T5316] report_bug_entry+0x19b/0x290 [ 94.816408][ T5316] ? __might_sleep+0xac/0xf0 [ 94.818304][ T5316] ? __might_sleep+0xb1/0xf0 [ 94.820229][ T5316] handle_bug+0xce/0x200 [ 94.822076][ T5316] exc_invalid_op+0x1a/0x50 [ 94.823981][ T5316] asm_exc_invalid_op+0x1a/0x20 [ 94.826023][ T5316] RIP: 0010:__might_sleep+0xac/0xf0 [ 94.828244][ T5316] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 6e e9 e5 0e 43 80 3c 3c 00 74 08 48 89 df e8 ef 73 a2 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 94.835987][ T5316] RSP: 0018:ffffc9000e2bfae0 EFLAGS: 00010246 [ 94.838352][ T5316] RAX: 0000000000000000 RBX: ffff888033223e00 RCX: ffffffff819fafdd [ 94.841302][ T5316] RDX: ffffffff819fafdd RSI: 0000000000000002 RDI: ffffffff907bf290 [ 94.844659][ T5316] RBP: 0000000000000002 R08: ffffc9000e2bfc27 R09: 0000000000000000 [ 94.847913][ T5316] R10: ffffc9000e2bfc00 R11: fffff52001c57f85 R12: 1ffff110066447c0 [ 94.851304][ T5316] R13: 000000000000026f R14: ffffffff907bf290 R15: dffffc0000000000 [ 94.854730][ T5316] ? prepare_to_wait_event+0x3dd/0x480 [ 94.857051][ T5316] ? prepare_to_wait_event+0x3dd/0x480 [ 94.859350][ T5316] __mutex_lock+0x118/0x1550 [ 94.861367][ T5316] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.863544][ T5316] ? futex_hash_allocate+0x7fb/0xf00 [ 94.865771][ T5316] ? __pfx___mutex_lock+0x10/0x10 [ 94.867735][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.870226][ T5316] ? prepare_to_wait_event+0x436/0x480 [ 94.872576][ T5316] futex_hash_allocate+0x7fb/0xf00 [ 94.874666][ T5316] ? __pfx_futex_hash_allocate+0x10/0x10 [ 94.877092][ T5316] ? __pfx_var_wake_function+0x10/0x10 [ 94.879393][ T5316] ? static_key_count+0x41/0x70 [ 94.881416][ T5316] ? security_task_prctl+0x163/0x190 [ 94.883625][ T5316] __se_sys_prctl+0x78c/0x1910 [ 94.885729][ T5316] ? __pfx___se_sys_prctl+0x10/0x10 [ 94.887948][ T5316] ? __x64_sys_prctl+0x20/0xc0 [ 94.889979][ T5316] do_syscall_64+0x166/0x520 [ 94.891874][ T5316] ? trace_irq_disable+0x3b/0x140 [ 94.894012][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.896598][ T5316] ? clear_bhb_loop+0x70/0xc0 [ 94.898604][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.901103][ T5316] RIP: 0033:0x7f8e1fb9e0d9 [ 94.903106][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.911259][ T5316] RSP: 002b:00007f8e20a32fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.914914][ T5316] RAX: ffffffffffffffda RBX: 00007f8e1fe25fa0 RCX: 00007f8e1fb9e0d9 [ 94.918290][ T5316] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000000000004e [ 94.921662][ T5316] RBP: 00007f8e1fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 94.925075][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.928340][ T5316] R13: 00007f8e1fe26038 R14: 00007f8e1fe25fa0 R15: 00007ffd65dad908 [ 94.931655][ T5316] [ 94.933391][ T5316] Kernel Offset: disabled [ 94.935161][ T5316] Rebooting in 86400 seconds..