program: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) write(r2, &(0x7f0000000600)="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", 0xffffffef) sendmsg$key(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) [ 58.310242][ C0] [ 58.311198][ C0] ============================= [ 58.313064][ C0] [ BUG: Invalid wait context ] [ 58.314897][ C0] 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 Not tainted [ 58.317449][ C0] ----------------------------- [ 58.319226][ C0] syz.0.0/5316 is trying to lock: [ 58.321104][ C0] ffff88801fc3aab0 (batched_entropy_u8.lock){-.-.}-{3:3}, at: get_random_u8+0x1a0/0xaa0 [ 58.324970][ C0] other info that might help us debug this: [ 58.327355][ C0] context-{2:2} [ 58.328775][ C0] 1 lock held by syz.0.0/5316: [ 58.330698][ C0] #0: ffff88801fc3e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 58.334661][ C0] stack backtrace: [ 58.336173][ C0] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 58.340007][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.344129][ C0] Call Trace: [ 58.345437][ C0] [ 58.346586][ C0] dump_stack_lvl+0x241/0x360 [ 58.348439][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.350441][ C0] ? __pfx__printk+0x10/0x10 [ 58.352338][ C0] __lock_acquire+0x15a8/0x2100 [ 58.354253][ C0] lock_acquire+0x1ed/0x550 [ 58.355976][ C0] ? get_random_u8+0x1a0/0xaa0 [ 58.357578][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 58.359461][ C0] get_random_u8+0x1bd/0xaa0 [ 58.361127][ C0] ? get_random_u8+0x1a0/0xaa0 [ 58.363095][ C0] ? get_random_u8+0x1a0/0xaa0 [ 58.364860][ C0] ? __pfx_get_random_u8+0x10/0x10 [ 58.366877][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 58.369025][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 58.371041][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 58.373423][ C0] ? kernel_text_address+0xa7/0xe0 [ 58.375423][ C0] ? __kernel_text_address+0xd/0x40 [ 58.377502][ C0] ? unwind_get_return_address+0x4d/0x90 [ 58.379675][ C0] ? arch_stack_walk+0xfd/0x150 [ 58.381562][ C0] kfence_guarded_alloc+0x9c/0xcd0 [ 58.383605][ C0] ? __pfx_kfence_guarded_alloc+0x10/0x10 [ 58.385873][ C0] ? __irq_work_queue_local+0x115/0x410 [ 58.388156][ C0] ? get_alloc_stack_hash+0x3c0/0x760 [ 58.390396][ C0] __kfence_alloc+0x344/0x370 [ 58.392254][ C0] ? __pfx___kfence_alloc+0x10/0x10 [ 58.394333][ C0] ? __kfence_alloc+0x274/0x370 [ 58.396291][ C0] ? __kmalloc_cache_noprof+0x2dd/0x390 [ 58.398480][ C0] ? __set_page_owner+0x55f/0x800 [ 58.400464][ C0] ? post_alloc_hook+0x1f3/0x230 [ 58.402232][ C0] ? get_page_from_freelist+0x365c/0x37a0 [ 58.404244][ C0] ? __alloc_pages_noprof+0x292/0x710 [ 58.406367][ C0] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 58.408461][ C0] ? stack_depot_save_flags+0x666/0x830 [ 58.410634][ C0] ? kasan_save_stack+0x4f/0x60 [ 58.412604][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 58.414664][ C0] ? task_work_add+0xd9/0x490 [ 58.416342][ C0] ? task_tick_fair+0x58c/0x7b0 [ 58.418065][ C0] ? sched_tick+0x21e/0x660 [ 58.419618][ C0] ? update_process_times+0x276/0x2f0 [ 58.421600][ C0] ? tick_nohz_handler+0x37c/0x500 [ 58.423514][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 58.425547][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 58.427425][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 58.429579][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 58.431678][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.433974][ C0] ? __pfx_lock_release+0x10/0x10 [ 58.435804][ C0] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 58.437886][ C0] ? kasan_save_stack+0x4f/0x60 [ 58.439684][ C0] ? task_work_add+0xd9/0x490 [ 58.441442][ C0] __kmalloc_cache_noprof+0x2dd/0x390 [ 58.443548][ C0] ? __set_page_owner+0x55f/0x800 [ 58.445471][ C0] __set_page_owner+0x55f/0x800 [ 58.447382][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 58.449539][ C0] post_alloc_hook+0x1f3/0x230 [ 58.451373][ C0] get_page_from_freelist+0x365c/0x37a0 [ 58.453504][ C0] __alloc_pages_noprof+0x292/0x710 [ 58.455370][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 58.457313][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 58.459182][ C0] ? kernel_text_address+0xa7/0xe0 [ 58.460895][ C0] ? arch_stack_walk+0xfd/0x150 [ 58.462566][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 58.464417][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 58.466551][ C0] ? stack_trace_save+0x118/0x1d0 [ 58.468273][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 58.470132][ C0] ? alloc_pages_noprof+0x43/0x170 [ 58.471919][ C0] stack_depot_save_flags+0x666/0x830 [ 58.473789][ C0] kasan_save_stack+0x4f/0x60 [ 58.475485][ C0] ? kasan_save_stack+0x3f/0x60 [ 58.477407][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 58.479445][ C0] ? task_work_add+0xd9/0x490 [ 58.481086][ C0] ? task_tick_fair+0x58c/0x7b0 [ 58.482983][ C0] ? sched_tick+0x21e/0x660 [ 58.484666][ C0] ? update_process_times+0x276/0x2f0 [ 58.486617][ C0] ? tick_nohz_handler+0x37c/0x500 [ 58.488614][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 58.490726][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 58.492622][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 58.494988][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 58.497218][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.499560][ C0] ? __phys_addr+0xba/0x170 [ 58.501551][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 58.503774][ C0] task_work_add+0xd9/0x490 [ 58.505574][ C0] ? __pfx_task_work_add+0x10/0x10 [ 58.507845][ C0] ? task_scan_start+0x14c/0x430 [ 58.509904][ C0] ? task_scan_start+0x14c/0x430 [ 58.511816][ C0] ? task_scan_start+0x3f5/0x430 [ 58.513646][ C0] task_tick_fair+0x58c/0x7b0 [ 58.515458][ C0] sched_tick+0x21e/0x660 [ 58.517117][ C0] update_process_times+0x276/0x2f0 [ 58.519056][ C0] tick_nohz_handler+0x37c/0x500 [ 58.520840][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 58.522919][ C0] __hrtimer_run_queues+0x551/0xd30 [ 58.524853][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 58.527060][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 58.529196][ C0] ? kvm_clock_get_cycles+0x52/0x70 [ 58.531176][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 58.533510][ C0] hrtimer_interrupt+0x403/0xa40 [ 58.535374][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 58.537685][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 58.539853][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.542445][ C0] RIP: 0033:0x7f0786e57735 [ 58.544012][ C0] Code: 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 <48> 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 24 eb bf 48 39 [ 58.551255][ C0] RSP: 002b:00007ffc35ed0e90 EFLAGS: 00000283 [ 58.553670][ C0] RAX: 00007f0784bb1a68 RBX: 00007f0784bb15d8 RCX: ffffffff81f0cd1e [ 58.556665][ C0] RDX: ffffffff81f0cd1e RSI: ffffffff81f0cd1e RDI: 00007f0784bb1d50 [ 58.559822][ C0] RBP: 00007f0784bb12f8 R08: 00007f0784bb1820 R09: 00007f0787132000 [ 58.563019][ C0] R10: 00007f07849fe008 R11: 0000000000000007 R12: 00007f0784bb12f0 [ 58.566080][ C0] R13: 0000000000000014 R14: 0000000000000032 R15: 00007f07849fe008 [ 58.569772][ C0] ? __folio_rmap_sanity_checks+0xee/0x3a0 [ 58.572110][ C0] ? __folio_rmap_sanity_checks+0xee/0x3a0 [ 58.574284][ C0] ? __folio_rmap_sanity_checks+0xee/0x3a0 [ 58.576518][ C0] [ 58.579594][ T5304] Bluetooth: hci0: command tx timeout