program: timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {r2, r3+60000000}}, 0x0) unshare(0x40000000) [ 71.742329][ T5303] Bluetooth: hci0: command tx timeout [ 71.840892][ C0] [ 71.841871][ C0] ============================= [ 71.843516][ C0] [ BUG: Invalid wait context ] [ 71.845186][ C0] 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 Not tainted [ 71.847566][ C0] ----------------------------- [ 71.849237][ C0] syz.0.0/5317 is trying to lock: [ 71.850927][ C0] ffff88805ffd7298 (&zone->lock){-.-.}-{3:3}, at: get_page_from_freelist+0xb3d/0x37a0 [ 71.854150][ C0] other info that might help us debug this: [ 71.856218][ C0] context-{2:2} [ 71.857537][ C0] 5 locks held by syz.0.0/5317: [ 71.859384][ C0] #0: ffffffff8fcb7710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 71.862882][ C0] #1: ffffffff8fcc3bc8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x13/0x50 [ 71.866340][ C0] #2: ffff88801fc3d4d8 (lock){+.+.}-{3:3}, at: __radix_tree_preload+0x80/0x860 [ 71.869670][ C0] #3: ffffffff8eac2678 (kernfs_idr_lock){+.+.}-{3:3}, at: __kernfs_new_node+0x109/0x870 [ 71.873531][ C0] #4: ffff88801fc44b18 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x7d3/0x37a0 [ 71.877023][ C0] stack backtrace: [ 71.878450][ C0] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 71.878460][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.878466][ C0] Call Trace: [ 71.878472][ C0] [ 71.878477][ C0] dump_stack_lvl+0x241/0x360 [ 71.878497][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.878510][ C0] ? __pfx__printk+0x10/0x10 [ 71.878520][ C0] ? __find_rr_leaf+0x747/0x8e0 [ 71.878532][ C0] __lock_acquire+0x15a8/0x2100 [ 71.878548][ C0] lock_acquire+0x1ed/0x550 [ 71.878557][ C0] ? get_page_from_freelist+0xb3d/0x37a0 [ 71.878568][ C0] ? stack_trace_save+0x118/0x1d0 [ 71.878577][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 71.878587][ C0] ? __asan_memset+0x23/0x50 [ 71.878595][ C0] ? unwind_next_frame+0x193b/0x22d0 [ 71.878610][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 71.878620][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 71.878631][ C0] ? get_page_from_freelist+0xb3d/0x37a0 [ 71.878641][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 71.878652][ C0] get_page_from_freelist+0xb3d/0x37a0 [ 71.878671][ C0] __alloc_pages_noprof+0x292/0x710 [ 71.878688][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.878700][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.878711][ C0] ? __kernel_text_address+0xd/0x40 [ 71.878724][ C0] ? unwind_get_return_address+0x4d/0x90 [ 71.878735][ C0] alloc_pages_mpol_noprof+0x3e1/0x780 [ 71.878751][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 71.878763][ C0] ? stack_trace_save+0x118/0x1d0 [ 71.878772][ C0] ? alloc_pages_noprof+0x43/0x170 [ 71.878784][ C0] stack_depot_save_flags+0x72d/0x940 [ 71.878849][ C0] kasan_save_stack+0x4f/0x60 [ 71.878860][ C0] ? kasan_save_stack+0x3f/0x60 [ 71.878868][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 71.878876][ C0] ? task_work_add+0xd9/0x490 [ 71.878888][ C0] ? run_posix_cpu_timers+0x6ac/0x810 [ 71.878901][ C0] ? tick_nohz_handler+0x37c/0x500 [ 71.878910][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 71.878922][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 71.878934][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 71.878946][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 71.878957][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.878971][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 71.878980][ C0] ? __rmqueue_pcplist+0x21fd/0x2a90 [ 71.878989][ C0] ? get_page_from_freelist+0x886/0x37a0 [ 71.878999][ C0] ? __alloc_pages_noprof+0x292/0x710 [ 71.879008][ C0] ? alloc_pages_mpol_noprof+0x3e1/0x780 [ 71.879019][ C0] ? stack_depot_save_flags+0x72d/0x940 [ 71.879027][ C0] ? kasan_save_track+0x51/0x80 [ 71.879036][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 71.879046][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380 [ 71.879058][ C0] ? radix_tree_node_alloc+0x19a/0x3c0 [ 71.879068][ C0] ? idr_get_free+0x296/0xab0 [ 71.879076][ C0] ? idr_alloc_u32+0x195/0x330 [ 71.879084][ C0] ? idr_alloc_cyclic+0x106/0x300 [ 71.879092][ C0] ? __kernfs_new_node+0x12d/0x870 [ 71.879101][ C0] ? kernfs_new_node+0x137/0x240 [ 71.879110][ C0] ? __kernfs_create_file+0x49/0x2e0 [ 71.879124][ C0] ? sysfs_add_file_mode_ns+0x24a/0x310 [ 71.879132][ C0] ? internal_create_group+0x782/0x12d0 [ 71.879142][ C0] ? sysfs_create_groups+0x56/0x120 [ 71.879151][ C0] ? device_add_attrs+0xe5/0x600 [ 71.879163][ C0] ? device_add+0x576/0xbf0 [ 71.879173][ C0] ? netdev_register_kobject+0x157/0x2e0 [ 71.879186][ C0] ? register_netdevice+0x12c5/0x1b00 [ 71.879198][ C0] ? register_netdev+0x3b/0x50 [ 71.879206][ C0] ? loopback_net_init+0x73/0x150 [ 71.879217][ C0] ? ops_init+0x31e/0x590 [ 71.879228][ C0] ? setup_net+0x287/0x9e0 [ 71.879239][ C0] ? copy_net_ns+0x33f/0x570 [ 71.879250][ C0] ? create_new_namespaces+0x425/0x7b0 [ 71.879259][ C0] ? unshare_nsproxy_namespaces+0x124/0x180 [ 71.879268][ C0] ? ksys_unshare+0x57d/0xa70 [ 71.879279][ C0] ? __x64_sys_unshare+0x38/0x40 [ 71.879288][ C0] ? do_syscall_64+0xf3/0x230 [ 71.879299][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.879316][ C0] ? __phys_addr+0xba/0x170 [ 71.879328][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 71.879338][ C0] task_work_add+0xd9/0x490 [ 71.879350][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 71.879360][ C0] ? __pfx_task_work_add+0x10/0x10 [ 71.879374][ C0] run_posix_cpu_timers+0x6ac/0x810 [ 71.879388][ C0] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 71.879401][ C0] ? sched_balance_trigger+0x51/0x890 [ 71.879416][ C0] tick_nohz_handler+0x37c/0x500 [ 71.879426][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 71.879436][ C0] __hrtimer_run_queues+0x551/0xd30 [ 71.879453][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 71.879465][ C0] ? kvm_clock_get_cycles+0x52/0x70 [ 71.879479][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 71.879491][ C0] hrtimer_interrupt+0x403/0xa40 [ 71.879509][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 71.879522][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 71.879534][ C0] [ 71.879538][ C0] [ 71.879542][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.879555][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 71.879567][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e 0f 34 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 73 c0 9b f5 65 8b 05 24 e5 31 74 85 c0 74 43 48 c7 04 24 0e 36 [ 71.879575][ C0] RSP: 0018:ffffc9000d476780 EFLAGS: 00000206 [ 71.879586][ C0] RAX: e5884b41edbc1d00 RBX: 1ffff92001a8ecf4 RCX: ffffffff817b5ada [ 71.879593][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a9420 RDI: 0000000000000001 [ 71.879600][ C0] RBP: ffffc9000d476818 R08: ffffffff942d0847 R09: 1ffffffff285a108 [ 71.879607][ C0] R10: dffffc0000000000 R11: fffffbfff285a109 R12: dffffc0000000000 [ 71.879614][ C0] R13: 1ffff92001a8ecf0 R14: ffffc9000d4767a0 R15: 0000000000000246 [ 71.879623][ C0] ? mark_lock+0x9a/0x360 [ 71.879636][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 71.879648][ C0] __rmqueue_pcplist+0x21fd/0x2a90 [ 71.879667][ C0] get_page_from_freelist+0x886/0x37a0 [ 71.879696][ C0] __alloc_pages_noprof+0x292/0x710 [ 71.879707][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.879719][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.879730][ C0] ? __kernel_text_address+0xd/0x40 [ 71.879742][ C0] ? unwind_get_return_address+0x4d/0x90 [ 71.879754][ C0] alloc_pages_mpol_noprof+0x3e1/0x780 [ 71.879768][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 71.879780][ C0] ? stack_trace_save+0x118/0x1d0 [ 71.879790][ C0] ? alloc_pages_noprof+0xef/0x170 [ 71.879802][ C0] ? radix_tree_node_alloc+0x19a/0x3c0 [ 71.879813][ C0] stack_depot_save_flags+0x72d/0x940 [ 71.879823][ C0] ? validate_chain+0x11e/0x5920 [ 71.879836][ C0] ? radix_tree_node_alloc+0x19a/0x3c0 [ 71.879847][ C0] kasan_save_track+0x51/0x80 [ 71.879858][ C0] ? kasan_save_track+0x3f/0x80 [ 71.879867][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 71.879876][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380 [ 71.879889][ C0] ? radix_tree_node_alloc+0x19a/0x3c0 [ 71.879900][ C0] ? idr_get_free+0x296/0xab0 [ 71.879908][ C0] ? idr_alloc_u32+0x195/0x330 [ 71.879918][ C0] ? idr_alloc_cyclic+0x106/0x300 [ 71.879927][ C0] ? __kernfs_new_node+0x12d/0x870 [ 71.879938][ C0] ? kernfs_new_node+0x137/0x240 [ 71.879948][ C0] ? __kernfs_create_file+0x49/0x2e0 [ 71.879960][ C0] ? sysfs_add_file_mode_ns+0x24a/0x310 [ 71.879968][ C0] ? internal_create_group+0x782/0x12d0 [ 71.879978][ C0] ? sysfs_create_groups+0x56/0x120 [ 71.879988][ C0] ? device_add_attrs+0xe5/0x600 [ 71.879999][ C0] ? device_add+0x576/0xbf0 [ 71.880011][ C0] ? netdev_register_kobject+0x157/0x2e0 [ 71.880023][ C0] ? register_netdevice+0x12c5/0x1b00 [ 71.880037][ C0] ? register_netdev+0x3b/0x50 [ 71.880046][ C0] ? loopback_net_init+0x73/0x150 [ 71.880057][ C0] ? ops_init+0x31e/0x590 [ 71.880069][ C0] ? setup_net+0x287/0x9e0 [ 71.880080][ C0] ? copy_net_ns+0x33f/0x570 [ 71.880092][ C0] ? create_new_namespaces+0x425/0x7b0 [ 71.880101][ C0] ? unshare_nsproxy_namespaces+0x124/0x180 [ 71.880111][ C0] ? ksys_unshare+0x57d/0xa70 [ 71.880121][ C0] ? __x64_sys_unshare+0x38/0x40 [ 71.880130][ C0] ? do_syscall_64+0xf3/0x230 [ 71.880142][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.880160][ C0] __kasan_slab_alloc+0x66/0x80 [ 71.880172][ C0] kmem_cache_alloc_noprof+0x1d9/0x380 [ 71.880186][ C0] radix_tree_node_alloc+0x19a/0x3c0 [ 71.880199][ C0] idr_get_free+0x296/0xab0 [ 71.880213][ C0] idr_alloc_u32+0x195/0x330 [ 71.880226][ C0] ? __pfx_idr_alloc_u32+0x10/0x10 [ 71.880239][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 71.880249][ C0] idr_alloc_cyclic+0x106/0x300 [ 71.880260][ C0] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 71.880268][ C0] ? __radix_tree_preload+0x71c/0x860 [ 71.880277][ C0] ? __radix_tree_preload+0x80/0x860 [ 71.880287][ C0] __kernfs_new_node+0x12d/0x870 [ 71.880301][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 71.880312][ C0] ? __pfx_up_write+0x10/0x10 [ 71.880323][ C0] kernfs_new_node+0x137/0x240 [ 71.880335][ C0] __kernfs_create_file+0x49/0x2e0 [ 71.880349][ C0] sysfs_add_file_mode_ns+0x24a/0x310 [ 71.880361][ C0] internal_create_group+0x782/0x12d0 [ 71.880374][ C0] ? __pfx_up_write+0x10/0x10 [ 71.880381][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 71.880395][ C0] sysfs_create_groups+0x56/0x120 [ 71.880407][ C0] device_add_attrs+0xe5/0x600 [ 71.880418][ C0] ? __pfx_device_add_attrs+0x10/0x10 [ 71.880431][ C0] device_add+0x576/0xbf0 [ 71.880443][ C0] ? device_initialize+0x266/0x460 [ 71.880455][ C0] netdev_register_kobject+0x157/0x2e0 [ 71.880470][ C0] register_netdevice+0x12c5/0x1b00 [ 71.880488][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 71.880510][ C0] ? sized_strscpy+0x9a/0x2b0 [ 71.880523][ C0] ? alloc_netdev_mqs+0xcd0/0x1080 [ 71.880532][ C0] register_netdev+0x3b/0x50 [ 71.880541][ C0] loopback_net_init+0x73/0x150 [ 71.880551][ C0] ops_init+0x31e/0x590 [ 71.880561][ C0] ? lockdep_init_map_type+0xa1/0x910 [ 71.880570][ C0] setup_net+0x287/0x9e0 [ 71.880581][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 71.880595][ C0] ? __pfx_setup_net+0x10/0x10 [ 71.880608][ C0] copy_net_ns+0x33f/0x570 [ 71.880621][ C0] create_new_namespaces+0x425/0x7b0 [ 71.880632][ C0] unshare_nsproxy_namespaces+0x124/0x180 [ 71.880639][ C0] ksys_unshare+0x57d/0xa70 [ 71.880649][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 71.880658][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.880668][ C0] ? do_syscall_64+0x100/0x230 [ 71.880687][ C0] __x64_sys_unshare+0x38/0x40 [ 71.880697][ C0] do_syscall_64+0xf3/0x230 [ 71.880707][ C0] ? clear_bhb_loop+0x35/0x90 [ 71.880721][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.880735][ C0] RIP: 0033:0x7fdb2f785d29 [ 71.880745][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.880753][ C0] RSP: 002b:00007fdb30696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 71.880764][ C0] RAX: ffffffffffffffda RBX: 00007fdb2f975fa0 RCX: 00007fdb2f785d29 [ 71.880772][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 71.880778][ C0] RBP: 00007fdb2f801b08 R08: 0000000000000000 R09: 0000000000000000 [ 71.880784][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.880789][ C0] R13: 0000000000000000 R14: 00007fdb2f975fa0 R15: 00007ffc013d1668 [ 71.880798][ C0]