program: mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) [ 95.474824][ T5277] Bluetooth: hci0: command tx timeout [ 97.485583][ T5277] Bluetooth: hci0: command tx timeout [ 97.633771][ T5313] ------------[ cut here ]------------ [ 97.636636][ T5313] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x3dd/0x480 [ 97.641680][ T5313] WARNING: kernel/sched/core.c:9124 at __might_sleep+0x92/0xf0, CPU#0: syz.0.0/5313 [ 97.646256][ T5313] Modules linked in: [ 97.648350][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 97.652402][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.657120][ T5313] RIP: 0010:__might_sleep+0xac/0xf0 [ 97.659463][ T5313] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 9e b0 c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 1f 37 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 97.667625][ T5313] RSP: 0018:ffffc9000dcbfae0 EFLAGS: 00010246 [ 97.670359][ T5313] RAX: 0000000000000000 RBX: ffff8880343c62f0 RCX: ffffffff819fc8cd [ 97.673829][ T5313] RDX: ffffffff819fc8cd RSI: 0000000000000002 RDI: ffffffff905ac010 [ 97.677283][ T5313] RBP: 0000000000000002 R08: ffffc9000dcbfc27 R09: 0000000000000000 [ 97.680677][ T5313] R10: ffffc9000dcbfc00 R11: fffff52001b97f85 R12: 1ffff11006878c5e [ 97.683904][ T5313] R13: 000000000000026f R14: ffffffff905ac010 R15: dffffc0000000000 [ 97.687261][ T5313] FS: 00007fac136636c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 97.690893][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.693675][ T5313] CR2: 00007fe75cb28ad8 CR3: 00000000421c6000 CR4: 0000000000352ef0 [ 97.697071][ T5313] Call Trace: [ 97.698604][ T5313] [ 97.699892][ T5313] __mutex_lock+0x118/0x1550 [ 97.702008][ T5313] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.704724][ T5313] ? futex_hash_allocate+0x7fb/0xf00 [ 97.707299][ T5313] ? __pfx___mutex_lock+0x10/0x10 [ 97.709564][ T5313] ? lockdep_hardirqs_on+0x7a/0x110 [ 97.711873][ T5313] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 97.714315][ T5313] ? prepare_to_wait_event+0x436/0x480 [ 97.716682][ T5313] futex_hash_allocate+0x7fb/0xf00 [ 97.718866][ T5313] ? __pfx_futex_hash_allocate+0x10/0x10 [ 97.721500][ T5313] ? __pfx_var_wake_function+0x10/0x10 [ 97.723867][ T5313] ? static_key_count+0x41/0x70 [ 97.726520][ T5313] ? security_task_prctl+0x163/0x190 [ 97.728930][ T5313] __se_sys_prctl+0x78c/0x1910 [ 97.731094][ T5313] ? __pfx___se_sys_prctl+0x10/0x10 [ 97.733441][ T5313] ? __x64_sys_prctl+0x20/0xc0 [ 97.735865][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.738627][ T5313] do_syscall_64+0x174/0x580 [ 97.740699][ T5313] ? trace_irq_disable+0x3b/0x140 [ 97.742935][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 97.745177][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.747752][ T5313] RIP: 0033:0x7fac1279e0d9 [ 97.749772][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.758501][ T5313] RSP: 002b:00007fac13662fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 97.766968][ T5313] RAX: ffffffffffffffda RBX: 00007fac12a25fa0 RCX: 00007fac1279e0d9 [ 97.770420][ T5313] RDX: 0000000000020000 RSI: 0000000000000001 RDI: 000000000000004e [ 97.773779][ T5313] RBP: 00007fac12835024 R08: 0000000000000000 R09: 0000000000000000 [ 97.777427][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.780759][ T5313] R13: 00007fac12a26038 R14: 00007fac12a25fa0 R15: 00007ffecaa68b68 [ 97.784036][ T5313] [ 97.785477][ T5313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.788494][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 97.792424][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.796774][ T5313] Call Trace: [ 97.798299][ T5313] [ 97.799613][ T5313] vpanic+0x56c/0xa60 [ 97.801392][ T5313] ? __pfx__printk+0x10/0x10 [ 97.803414][ T5313] ? __pfx_vpanic+0x10/0x10 [ 97.805402][ T5313] ? is_bpf_text_address+0x292/0x2b0 [ 97.807721][ T5313] ? is_bpf_text_address+0x26/0x2b0 [ 97.810028][ T5313] panic+0xc5/0xd0 [ 97.811791][ T5313] ? __pfx_panic+0x10/0x10 [ 97.813889][ T5313] __warn+0x315/0x4c0 [ 97.815697][ T5313] ? __might_sleep+0x92/0xf0 [ 97.817596][ T5313] ? __might_sleep+0x92/0xf0 [ 97.819438][ T5313] __report_bug+0x276/0x570 [ 97.821331][ T5313] ? __might_sleep+0x92/0xf0 [ 97.823193][ T5313] ? __pfx___report_bug+0x10/0x10 [ 97.825209][ T5313] ? prepare_to_wait_event+0x3dd/0x480 [ 97.827187][ T5313] ? prepare_to_wait_event+0x3dd/0x480 [ 97.829340][ T5313] ? __lock_acquire+0x683/0x2cf0 [ 97.831331][ T5313] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 97.833704][ T5313] ? stack_depot_save_flags+0x3ec/0x800 [ 97.835943][ T5313] report_bug_entry+0x19a/0x290 [ 97.838000][ T5313] ? __might_sleep+0xac/0xf0 [ 97.839933][ T5313] ? __might_sleep+0xb1/0xf0 [ 97.841964][ T5313] handle_bug+0xce/0x200 [ 97.843676][ T5313] exc_invalid_op+0x1a/0x50 [ 97.845533][ T5313] asm_exc_invalid_op+0x1a/0x20 [ 97.847486][ T5313] RIP: 0010:__might_sleep+0xac/0xf0 [ 97.849651][ T5313] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 9e b0 c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 1f 37 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 97.857851][ T5313] RSP: 0018:ffffc9000dcbfae0 EFLAGS: 00010246 [ 97.860494][ T5313] RAX: 0000000000000000 RBX: ffff8880343c62f0 RCX: ffffffff819fc8cd [ 97.863803][ T5313] RDX: ffffffff819fc8cd RSI: 0000000000000002 RDI: ffffffff905ac010 [ 97.867241][ T5313] RBP: 0000000000000002 R08: ffffc9000dcbfc27 R09: 0000000000000000 [ 97.870633][ T5313] R10: ffffc9000dcbfc00 R11: fffff52001b97f85 R12: 1ffff11006878c5e [ 97.873883][ T5313] R13: 000000000000026f R14: ffffffff905ac010 R15: dffffc0000000000 [ 97.877236][ T5313] ? prepare_to_wait_event+0x3dd/0x480 [ 97.879549][ T5313] ? prepare_to_wait_event+0x3dd/0x480 [ 97.881801][ T5313] __mutex_lock+0x118/0x1550 [ 97.883643][ T5313] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.885630][ T5313] ? futex_hash_allocate+0x7fb/0xf00 [ 97.887709][ T5313] ? __pfx___mutex_lock+0x10/0x10 [ 97.889748][ T5313] ? lockdep_hardirqs_on+0x7a/0x110 [ 97.891887][ T5313] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 97.894394][ T5313] ? prepare_to_wait_event+0x436/0x480 [ 97.896648][ T5313] futex_hash_allocate+0x7fb/0xf00 [ 97.898880][ T5313] ? __pfx_futex_hash_allocate+0x10/0x10 [ 97.901374][ T5313] ? __pfx_var_wake_function+0x10/0x10 [ 97.903707][ T5313] ? static_key_count+0x41/0x70 [ 97.905799][ T5313] ? security_task_prctl+0x163/0x190 [ 97.908092][ T5313] __se_sys_prctl+0x78c/0x1910 [ 97.910232][ T5313] ? __pfx___se_sys_prctl+0x10/0x10 [ 97.912433][ T5313] ? __x64_sys_prctl+0x20/0xc0 [ 97.914461][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.917090][ T5313] do_syscall_64+0x174/0x580 [ 97.919075][ T5313] ? trace_irq_disable+0x3b/0x140 [ 97.921268][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 97.923321][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.925874][ T5313] RIP: 0033:0x7fac1279e0d9 [ 97.927854][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.935989][ T5313] RSP: 002b:00007fac13662fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 97.939491][ T5313] RAX: ffffffffffffffda RBX: 00007fac12a25fa0 RCX: 00007fac1279e0d9 [ 97.942933][ T5313] RDX: 0000000000020000 RSI: 0000000000000001 RDI: 000000000000004e [ 97.948376][ T5313] RBP: 00007fac12835024 R08: 0000000000000000 R09: 0000000000000000 [ 97.951740][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.955196][ T5313] R13: 00007fac12a26038 R14: 00007fac12a25fa0 R15: 00007ffecaa68b68 [ 97.958414][ T5313] [ 97.960058][ T5313] Kernel Offset: disabled [ 97.961768][ T5313] Rebooting in 86400 seconds..