program: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r1 = syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x0, 0x0, 0x2000000000, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d4, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, &(0x7f0000000140)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) socket(0x840000000002, 0x3, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r6, @ANYBLOB='\v\x00\x00'], 0xec}}, 0xc804) [ 94.309680][ T5279] Bluetooth: hci0: command tx timeout [ 94.490336][ T5319] ------------[ cut here ]------------ [ 94.492676][ T5319] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x3dd/0x480 [ 94.497648][ T5319] WARNING: kernel/sched/core.c:9124 at __might_sleep+0x92/0xf0, CPU#0: syz.0.0/5319 [ 94.501646][ T5319] Modules linked in: [ 94.503498][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.507448][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.511761][ T5319] RIP: 0010:__might_sleep+0xac/0xf0 [ 94.513877][ T5319] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 8e 07 c5 0e 43 80 3c 3c 00 74 08 48 89 df e8 af 45 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 94.521970][ T5319] RSP: 0018:ffffc9000f387ae0 EFLAGS: 00010246 [ 94.524797][ T5319] RAX: 0000000000000000 RBX: ffff8880347e6378 RCX: ffffffff819fca0d [ 94.528244][ T5319] RDX: ffffffff819fca0d RSI: 0000000000000002 RDI: ffffffff905b1840 [ 94.531817][ T5319] RBP: 0000000000000002 R08: ffffc9000f387c27 R09: 0000000000000000 [ 94.535370][ T5319] R10: ffffc9000f387c00 R11: fffff52001e70f85 R12: 1ffff110068fcc6f [ 94.538846][ T5319] R13: 000000000000026f R14: ffffffff905b1840 R15: dffffc0000000000 [ 94.542287][ T5319] FS: 00007efce05b36c0(0000) GS:ffff88808c534000(0000) knlGS:0000000000000000 [ 94.545851][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.548435][ T5319] CR2: 00007efce05b2fe8 CR3: 000000001fc83000 CR4: 0000000000352ef0 [ 94.551675][ T5319] Call Trace: [ 94.553080][ T5319] [ 94.554302][ T5319] __mutex_lock+0x118/0x1550 [ 94.556418][ T5319] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.558671][ T5319] ? futex_hash_allocate+0x7fb/0xf00 [ 94.560868][ T5319] ? __pfx___mutex_lock+0x10/0x10 [ 94.562938][ T5319] ? lockdep_hardirqs_on+0x7a/0x110 [ 94.565081][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.567621][ T5319] ? prepare_to_wait_event+0x436/0x480 [ 94.570029][ T5319] futex_hash_allocate+0x7fb/0xf00 [ 94.572251][ T5319] ? __pfx_futex_hash_allocate+0x10/0x10 [ 94.574725][ T5319] ? __pfx_var_wake_function+0x10/0x10 [ 94.577006][ T5319] ? static_key_count+0x41/0x70 [ 94.579370][ T5319] ? security_task_prctl+0x163/0x190 [ 94.582303][ T5319] __se_sys_prctl+0x78c/0x1910 [ 94.584453][ T5319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.587073][ T5319] ? __pfx___se_sys_prctl+0x10/0x10 [ 94.589298][ T5319] ? __x64_sys_prctl+0x20/0xc0 [ 94.591341][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.593985][ T5319] do_syscall_64+0x174/0x580 [ 94.596214][ T5319] ? trace_irq_disable+0x3b/0x140 [ 94.598384][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 94.600406][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.602913][ T5319] RIP: 0033:0x7efce419e0d9 [ 94.604859][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.613167][ T5319] RSP: 002b:00007efce05b2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.616563][ T5319] RAX: ffffffffffffffda RBX: 00007efce4426180 RCX: 00007efce419e0d9 [ 94.619875][ T5319] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 94.623392][ T5319] RBP: 00007efce4235024 R08: 0000000000000000 R09: 0000000000000000 [ 94.626902][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.630332][ T5319] R13: 00007efce4426218 R14: 00007efce4426180 R15: 00007ffff00222c8 [ 94.633774][ T5319] [ 94.635265][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.638256][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.642016][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.645960][ T5319] Call Trace: [ 94.647307][ T5319] [ 94.648451][ T5319] vpanic+0x56c/0xa60 [ 94.650114][ T5319] ? __pfx__printk+0x10/0x10 [ 94.652032][ T5319] ? __pfx_vpanic+0x10/0x10 [ 94.653991][ T5319] ? is_bpf_text_address+0x292/0x2b0 [ 94.656327][ T5319] ? is_bpf_text_address+0x26/0x2b0 [ 94.658593][ T5319] panic+0xc5/0xd0 [ 94.660210][ T5319] ? __pfx_panic+0x10/0x10 [ 94.662201][ T5319] __warn+0x315/0x4c0 [ 94.663944][ T5319] ? __might_sleep+0x92/0xf0 [ 94.665998][ T5319] ? __might_sleep+0x92/0xf0 [ 94.668048][ T5319] __report_bug+0x276/0x570 [ 94.669949][ T5319] ? __might_sleep+0x92/0xf0 [ 94.671815][ T5319] ? __pfx___report_bug+0x10/0x10 [ 94.673835][ T5319] ? prepare_to_wait_event+0x3dd/0x480 [ 94.676110][ T5319] ? prepare_to_wait_event+0x3dd/0x480 [ 94.678397][ T5319] ? __lock_acquire+0x683/0x2cf0 [ 94.680454][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.683028][ T5319] ? stack_depot_save_flags+0x3ec/0x800 [ 94.685408][ T5319] report_bug_entry+0x19a/0x290 [ 94.687498][ T5319] ? __might_sleep+0xac/0xf0 [ 94.689554][ T5319] ? __might_sleep+0xb1/0xf0 [ 94.691586][ T5319] handle_bug+0xce/0x200 [ 94.693467][ T5319] exc_invalid_op+0x1a/0x50 [ 94.695467][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 94.697579][ T5319] RIP: 0010:__might_sleep+0xac/0xf0 [ 94.699704][ T5319] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 8e 07 c5 0e 43 80 3c 3c 00 74 08 48 89 df e8 af 45 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 94.707866][ T5319] RSP: 0018:ffffc9000f387ae0 EFLAGS: 00010246 [ 94.710472][ T5319] RAX: 0000000000000000 RBX: ffff8880347e6378 RCX: ffffffff819fca0d [ 94.713767][ T5319] RDX: ffffffff819fca0d RSI: 0000000000000002 RDI: ffffffff905b1840 [ 94.717141][ T5319] RBP: 0000000000000002 R08: ffffc9000f387c27 R09: 0000000000000000 [ 94.720430][ T5319] R10: ffffc9000f387c00 R11: fffff52001e70f85 R12: 1ffff110068fcc6f [ 94.723789][ T5319] R13: 000000000000026f R14: ffffffff905b1840 R15: dffffc0000000000 [ 94.727192][ T5319] ? prepare_to_wait_event+0x3dd/0x480 [ 94.729463][ T5319] ? prepare_to_wait_event+0x3dd/0x480 [ 94.731739][ T5319] __mutex_lock+0x118/0x1550 [ 94.733681][ T5319] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.736189][ T5319] ? futex_hash_allocate+0x7fb/0xf00 [ 94.738405][ T5319] ? __pfx___mutex_lock+0x10/0x10 [ 94.740519][ T5319] ? lockdep_hardirqs_on+0x7a/0x110 [ 94.742678][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.745099][ T5319] ? prepare_to_wait_event+0x436/0x480 [ 94.747526][ T5319] futex_hash_allocate+0x7fb/0xf00 [ 94.750146][ T5319] ? __pfx_futex_hash_allocate+0x10/0x10 [ 94.753131][ T5319] ? __pfx_var_wake_function+0x10/0x10 [ 94.756110][ T5319] ? static_key_count+0x41/0x70 [ 94.758723][ T5319] ? security_task_prctl+0x163/0x190 [ 94.761711][ T5319] __se_sys_prctl+0x78c/0x1910 [ 94.764088][ T5319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.766521][ T5319] ? __pfx___se_sys_prctl+0x10/0x10 [ 94.768741][ T5319] ? __x64_sys_prctl+0x20/0xc0 [ 94.770825][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.773372][ T5319] do_syscall_64+0x174/0x580 [ 94.775345][ T5319] ? trace_irq_disable+0x3b/0x140 [ 94.777493][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 94.779522][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.782102][ T5319] RIP: 0033:0x7efce419e0d9 [ 94.784043][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.792379][ T5319] RSP: 002b:00007efce05b2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.795951][ T5319] RAX: ffffffffffffffda RBX: 00007efce4426180 RCX: 00007efce419e0d9 [ 94.799366][ T5319] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 94.802797][ T5319] RBP: 00007efce4235024 R08: 0000000000000000 R09: 0000000000000000 [ 94.806195][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.809339][ T5319] R13: 00007efce4426218 R14: 00007efce4426180 R15: 00007ffff00222c8 [ 94.812633][ T5319] [ 94.814337][ T5319] Kernel Offset: disabled [ 94.816040][ T5319] Rebooting in 86400 seconds..