program:
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
unshare(0x62040200)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x101, 0x2, 0x8, 0x92b, 0x4000d]}, &(0x7f0000000240)=0x78)
syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
unshare(0x62040200) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x101, 0x2, 0x8, 0x92b, 0x4000d]}, &(0x7f0000000240)=0x78) (async)
syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
[ 68.689880][ T4663] Bluetooth: hci0: command tx timeout
[ 68.792998][ C0]
[ 68.794004][ C0] =============================
[ 68.795892][ C0] [ BUG: Invalid wait context ]
[ 68.797734][ C0] 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 Not tainted
[ 68.800269][ C0] -----------------------------
[ 68.801996][ C0] syz.0.0/5319 is trying to lock:
[ 68.803667][ C0] ffff88805ffd7298 (&zone->lock){-.-.}-{3:3}, at: get_page_from_freelist+0xb3d/0x37a0
[ 68.807242][ C0] other info that might help us debug this:
[ 68.809414][ C0] context-{2:2}
[ 68.810724][ C0] 4 locks held by syz.0.0/5319:
[ 68.812441][ C0] #0: ffffffff8fcb7310 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[ 68.815846][ C0] #1: ffffffff8fcc38c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x50
[ 68.819139][ C0] #2: ffffffff8f0a1740 (fill_pool_map-wait-type-override){+.+.}-{4:4}, at: __debug_object_init+0x389/0x470
[ 68.823398][ C0] #3: ffff88801fc44ad8 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x7d3/0x37a0
[ 68.827072][ C0] stack backtrace:
[ 68.828564][ C0] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0
[ 68.828577][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.828583][ C0] Call Trace:
[ 68.828589][ C0]
[ 68.828594][ C0] dump_stack_lvl+0x241/0x360
[ 68.828608][ C0] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.828618][ C0] ? __pfx__printk+0x10/0x10
[ 68.828629][ C0] ? validate_chain+0x11e/0x5920
[ 68.828636][ C0] __lock_acquire+0x15a8/0x2100
[ 68.828645][ C0] lock_acquire+0x1ed/0x550
[ 68.828656][ C0] ? get_page_from_freelist+0xb3d/0x37a0
[ 68.828669][ C0] ? __pfx_validate_chain+0x10/0x10
[ 68.828678][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 68.828689][ C0] ? validate_chain+0x11e/0x5920
[ 68.828698][ C0] ? validate_chain+0x11e/0x5920
[ 68.828706][ C0] ? __pfx_validate_chain+0x10/0x10
[ 68.828718][ C0] _raw_spin_lock_irqsave+0xd5/0x120
[ 68.828729][ C0] ? get_page_from_freelist+0xb3d/0x37a0
[ 68.828740][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 68.828751][ C0] get_page_from_freelist+0xb3d/0x37a0
[ 68.828772][ C0] __alloc_pages_noprof+0x292/0x710
[ 68.828785][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10
[ 68.828798][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 68.828811][ C0] ? __kernel_text_address+0xd/0x40
[ 68.828820][ C0] ? unwind_get_return_address+0x4d/0x90
[ 68.828834][ C0] alloc_pages_mpol_noprof+0x3e1/0x780
[ 68.828848][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[ 68.828862][ C0] ? stack_trace_save+0x118/0x1d0
[ 68.828871][ C0] ? alloc_pages_noprof+0x43/0x170
[ 68.828880][ C0] stack_depot_save_flags+0x72d/0x940
[ 68.828892][ C0] kasan_save_stack+0x4f/0x60
[ 68.828905][ C0] ? kasan_save_stack+0x3f/0x60
[ 68.828915][ C0] ? __kasan_record_aux_stack+0xac/0xc0
[ 68.828925][ C0] ? task_work_add+0xd9/0x490
[ 68.828938][ C0] ? run_posix_cpu_timers+0x6ac/0x810
[ 68.828946][ C0] ? tick_nohz_handler+0x37c/0x500
[ 68.828957][ C0] ? __hrtimer_run_queues+0x551/0xd30
[ 68.828970][ C0] ? hrtimer_interrupt+0x403/0xa40
[ 68.828982][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420
[ 68.828994][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0
[ 68.829004][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 68.829015][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 68.829024][ C0] ? __rmqueue_pcplist+0x21fd/0x2a90
[ 68.829035][ C0] ? get_page_from_freelist+0x886/0x37a0
[ 68.829046][ C0] ? __alloc_pages_noprof+0x292/0x710
[ 68.829057][ C0] ? alloc_pages_mpol_noprof+0x3e1/0x780
[ 68.829089][ C0] ? stack_depot_save_flags+0x72d/0x940
[ 68.829094][ C0] ? kasan_save_track+0x51/0x80
[ 68.829100][ C0] ? __kasan_slab_alloc+0x66/0x80
[ 68.829107][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380
[ 68.829116][ C0] ? fill_pool+0x260/0x680
[ 68.829124][ C0] ? __debug_object_init+0x3b2/0x470
[ 68.829131][ C0] ? init_timer_key+0x38/0x320
[ 68.829141][ C0] ? ipv6_mc_init_dev+0x235/0xa50
[ 68.829154][ C0] ? ipv6_add_dev+0xc64/0x1220
[ 68.829165][ C0] ? addrconf_notify+0x6a7/0x1020
[ 68.829173][ C0] ? notifier_call_chain+0x1a5/0x3f0
[ 68.829183][ C0] ? register_netdevice+0x1696/0x1b10
[ 68.829195][ C0] ? register_netdev+0x40/0x50
[ 68.829206][ C0] ? loopback_net_init+0x73/0x150
[ 68.829218][ C0] ? ops_init+0x31e/0x590
[ 68.829229][ C0] ? setup_net+0x287/0x9e0
[ 68.829238][ C0] ? copy_net_ns+0x33f/0x570
[ 68.829247][ C0] ? create_new_namespaces+0x425/0x7b0
[ 68.829256][ C0] ? unshare_nsproxy_namespaces+0x124/0x180
[ 68.829266][ C0] ? ksys_unshare+0x57d/0xa70
[ 68.829277][ C0] ? __x64_sys_unshare+0x38/0x40
[ 68.829286][ C0] ? do_syscall_64+0xf3/0x230
[ 68.829297][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.829312][ C0] ? __phys_addr+0xba/0x170
[ 68.829324][ C0] __kasan_record_aux_stack+0xac/0xc0
[ 68.829335][ C0] task_work_add+0xd9/0x490
[ 68.829348][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 68.829359][ C0] ? __pfx_task_work_add+0x10/0x10
[ 68.829374][ C0] run_posix_cpu_timers+0x6ac/0x810
[ 68.829386][ C0] ? __pfx_run_posix_cpu_timers+0x10/0x10
[ 68.829395][ C0] ? sched_balance_trigger+0x51/0x890
[ 68.829410][ C0] tick_nohz_handler+0x37c/0x500
[ 68.829420][ C0] ? __pfx_tick_nohz_handler+0x10/0x10
[ 68.829429][ C0] __hrtimer_run_queues+0x551/0xd30
[ 68.829446][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 68.829459][ C0] ? kvm_clock_get_cycles+0x52/0x70
[ 68.829469][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0
[ 68.829482][ C0] hrtimer_interrupt+0x403/0xa40
[ 68.829500][ C0] __sysvec_apic_timer_interrupt+0x110/0x420
[ 68.829514][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0
[ 68.829525][ C0]
[ 68.829529][ C0]
[ 68.829532][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 68.829542][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[ 68.829549][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 4e 90 2e f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 f3 1c 96 f5 65 8b 05 e4 44 0c 74 85 c0 74 43 48 c7 04 24 0e 36
[ 68.829554][ C0] RSP: 0018:ffffc9000d386c00 EFLAGS: 00000206
[ 68.829562][ C0] RAX: e458efba4ba50100 RBX: 1ffff92001a70d84 RCX: ffffffff819b575a
[ 68.829568][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a9200 RDI: 0000000000000001
[ 68.829574][ C0] RBP: ffffc9000d386c98 R08: ffffffff942f9847 R09: 1ffffffff285f308
[ 68.829580][ C0] R10: dffffc0000000000 R11: fffffbfff285f309 R12: dffffc0000000000
[ 68.829586][ C0] R13: 1ffff92001a70d80 R14: ffffc9000d386c20 R15: 0000000000000246
[ 68.829594][ C0] ? mark_lock+0x9a/0x360
[ 68.829609][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 68.829621][ C0] __rmqueue_pcplist+0x21fd/0x2a90
[ 68.829639][ C0] get_page_from_freelist+0x886/0x37a0
[ 68.829661][ C0] __alloc_pages_noprof+0x292/0x710
[ 68.829673][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10
[ 68.829684][ C0] ? is_bpf_text_address+0x26/0x2a0
[ 68.829698][ C0] ? kernel_text_address+0xa7/0xe0
[ 68.829708][ C0] ? arch_stack_walk+0xfd/0x150
[ 68.829722][ C0] alloc_pages_mpol_noprof+0x3e1/0x780
[ 68.829738][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[ 68.829752][ C0] ? stack_trace_save+0x118/0x1d0
[ 68.829763][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 68.829774][ C0] ? alloc_pages_noprof+0xef/0x170
[ 68.829783][ C0] ? fill_pool+0x260/0x680
[ 68.829793][ C0] stack_depot_save_flags+0x72d/0x940
[ 68.829804][ C0] ? fill_pool+0x260/0x680
[ 68.829812][ C0] kasan_save_track+0x51/0x80
[ 68.829823][ C0] ? kasan_save_track+0x3f/0x80
[ 68.829833][ C0] ? __kasan_slab_alloc+0x66/0x80
[ 68.829844][ C0] ? kmem_cache_alloc_noprof+0x1d9/0x380
[ 68.829852][ C0] ? fill_pool+0x260/0x680
[ 68.829861][ C0] ? __debug_object_init+0x3b2/0x470
[ 68.829869][ C0] ? init_timer_key+0x38/0x320
[ 68.829878][ C0] ? ipv6_mc_init_dev+0x235/0xa50
[ 68.829891][ C0] ? ipv6_add_dev+0xc64/0x1220
[ 68.829901][ C0] ? addrconf_notify+0x6a7/0x1020
[ 68.829907][ C0] ? notifier_call_chain+0x1a5/0x3f0
[ 68.829916][ C0] ? register_netdevice+0x1696/0x1b10
[ 68.829927][ C0] ? register_netdev+0x40/0x50
[ 68.829938][ C0] ? loopback_net_init+0x73/0x150
[ 68.829949][ C0] ? ops_init+0x31e/0x590
[ 68.829957][ C0] ? setup_net+0x287/0x9e0
[ 68.829966][ C0] ? copy_net_ns+0x33f/0x570
[ 68.829974][ C0] ? create_new_namespaces+0x425/0x7b0
[ 68.829984][ C0] ? unshare_nsproxy_namespaces+0x124/0x180
[ 68.829993][ C0] ? ksys_unshare+0x57d/0xa70
[ 68.830002][ C0] ? __x64_sys_unshare+0x38/0x40
[ 68.830012][ C0] ? do_syscall_64+0xf3/0x230
[ 68.830022][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.830041][ C0] __kasan_slab_alloc+0x66/0x80
[ 68.830053][ C0] ? fill_pool+0x241/0x680
[ 68.830061][ C0] kmem_cache_alloc_noprof+0x1d9/0x380
[ 68.830071][ C0] fill_pool+0x260/0x680
[ 68.830086][ C0] ? __pfx_fill_pool_from_freelist+0x10/0x10
[ 68.830097][ C0] ? __pfx_fill_pool+0x10/0x10
[ 68.830107][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 68.830116][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 68.830128][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 68.830139][ C0] ? __debug_object_init+0x389/0x470
[ 68.830147][ C0] __debug_object_init+0x3b2/0x470
[ 68.830158][ C0] ? __pfx___debug_object_init+0x10/0x10
[ 68.830163][ C0] ? __asan_memset+0x23/0x50
[ 68.830170][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 68.830177][ C0] ? __pfx_snmp6_dev_seq_show+0x10/0x10
[ 68.830186][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 68.830192][ C0] init_timer_key+0x38/0x320
[ 68.830198][ C0] ipv6_mc_init_dev+0x235/0xa50
[ 68.830206][ C0] ? ipv6_add_dev+0x9d7/0x1220
[ 68.830213][ C0] ipv6_add_dev+0xc64/0x1220
[ 68.830221][ C0] addrconf_notify+0x6a7/0x1020
[ 68.830227][ C0] notifier_call_chain+0x1a5/0x3f0
[ 68.830234][ C0] register_netdevice+0x1696/0x1b10
[ 68.830242][ C0] ? __pfx_register_netdevice+0x10/0x10
[ 68.830250][ C0] ? alloc_netdev_mqs+0xd54/0x1110
[ 68.830259][ C0] register_netdev+0x40/0x50
[ 68.830270][ C0] loopback_net_init+0x73/0x150
[ 68.830282][ C0] ops_init+0x31e/0x590
[ 68.830292][ C0] ? lockdep_init_map_type+0xa1/0x910
[ 68.830303][ C0] setup_net+0x287/0x9e0
[ 68.830313][ C0] ? __pfx_down_read_killable+0x10/0x10
[ 68.830326][ C0] ? __pfx_setup_net+0x10/0x10
[ 68.830338][ C0] copy_net_ns+0x33f/0x570
[ 68.830349][ C0] create_new_namespaces+0x425/0x7b0
[ 68.830361][ C0] unshare_nsproxy_namespaces+0x124/0x180
[ 68.830373][ C0] ksys_unshare+0x57d/0xa70
[ 68.830385][ C0] ? __pfx_ksys_unshare+0x10/0x10
[ 68.830396][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 68.830408][ C0] ? do_syscall_64+0x100/0x230
[ 68.830420][ C0] __x64_sys_unshare+0x38/0x40
[ 68.830431][ C0] do_syscall_64+0xf3/0x230
[ 68.830441][ C0] ? clear_bhb_loop+0x35/0x90
[ 68.830454][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.830466][ C0] RIP: 0033:0x7f9539d8cd29
[ 68.830478][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.830485][ C0] RSP: 002b:00007f953abec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 68.830495][ C0] RAX: ffffffffffffffda RBX: 00007f9539fa6080 RCX: 00007f9539d8cd29
[ 68.830501][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[ 68.830505][ C0] RBP: 00007f9539e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 68.830508][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.830512][ C0] R13: 0000000000000000 R14: 00007f9539fa6080 R15: 00007ffe5cb66f48
[ 68.830517][ C0]