0] ? prepare_to_wait_event+0x129/0x650 [ 3519.720013][ C0] schedule+0xd0/0x2a0 [ 3519.724074][ C0] cec_thread_func+0x6d7/0xd40 [ 3519.728842][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3519.734475][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3519.740270][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3519.746236][ C0] ? finish_wait+0x260/0x260 [ 3519.750829][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3519.755844][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3519.761463][ C0] kthread+0x388/0x470 [ 3519.765520][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3519.771225][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3519.776932][ C0] ret_from_fork+0x24/0x30 [ 3519.781331][ C0] vivid-013-cec I30784 3321 2 0x80004000 [ 3519.787676][ C0] Call Trace: [ 3519.790970][ C0] __schedule+0x8f3/0x1fc0 [ 3519.795391][ C0] ? rescuer_thread+0x691/0xbc0 [ 3519.800236][ C0] ? firmware_map_remove+0x19d/0x19d [ 3519.805509][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3519.810533][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3519.815737][ C0] schedule+0xd0/0x2a0 [ 3519.819801][ C0] rescuer_thread+0x6ed/0xbc0 [ 3519.824484][ C0] ? worker_thread+0xe20/0xe20 [ 3519.829272][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3519.834382][ C0] ? worker_thread+0xe20/0xe20 [ 3519.839137][ C0] kthread+0x388/0x470 [ 3519.843182][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3519.848887][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3519.854595][ C0] ret_from_fork+0x24/0x30 [ 3519.858996][ C0] cec-vivid-013-v S30600 3322 2 0x80004000 [ 3519.865316][ C0] Call Trace: [ 3519.868612][ C0] __schedule+0x8f3/0x1fc0 [ 3519.873033][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3519.879011][ C0] ? firmware_map_remove+0x19d/0x19d [ 3519.884283][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3519.889773][ C0] schedule+0xd0/0x2a0 [ 3519.893846][ C0] cec_thread_func+0x6d7/0xd40 [ 3519.898598][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3519.904231][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3519.910064][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3519.916057][ C0] ? finish_wait+0x260/0x260 [ 3519.920643][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3519.925673][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3519.931312][ C0] kthread+0x388/0x470 [ 3519.935390][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3519.941083][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3519.946794][ C0] ret_from_fork+0x24/0x30 [ 3519.951203][ C0] cec-vivid-013-v S30808 3323 2 0x80004000 [ 3519.957628][ C0] Call Trace: [ 3519.960908][ C0] __schedule+0x8f3/0x1fc0 [ 3519.965315][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3519.971286][ C0] ? firmware_map_remove+0x19d/0x19d [ 3519.976551][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3519.981993][ C0] schedule+0xd0/0x2a0 [ 3519.986063][ C0] cec_thread_func+0x6d7/0xd40 [ 3519.990839][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3519.996473][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3520.002255][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.008227][ C0] ? finish_wait+0x260/0x260 [ 3520.012825][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.017844][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.023453][ C0] kthread+0x388/0x470 [ 3520.027510][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.033215][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.038922][ C0] ret_from_fork+0x24/0x30 [ 3520.043320][ C0] vivid-014-cec I30784 3337 2 0x80004000 [ 3520.049667][ C0] Call Trace: [ 3520.052948][ C0] __schedule+0x8f3/0x1fc0 [ 3520.057352][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.062194][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.067468][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.072480][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.077667][ C0] schedule+0xd0/0x2a0 [ 3520.081713][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.086398][ C0] ? worker_thread+0xe20/0xe20 [ 3520.091168][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.096181][ C0] ? worker_thread+0xe20/0xe20 [ 3520.100933][ C0] kthread+0x388/0x470 [ 3520.104992][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.110714][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.116424][ C0] ret_from_fork+0x24/0x30 [ 3520.120823][ C0] cec-vivid-014-v S30808 3338 2 0x80004000 [ 3520.127140][ C0] Call Trace: [ 3520.130443][ C0] __schedule+0x8f3/0x1fc0 [ 3520.134855][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.140815][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.146097][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3520.151567][ C0] schedule+0xd0/0x2a0 [ 3520.155629][ C0] cec_thread_func+0x6d7/0xd40 [ 3520.160375][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.165993][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3520.171791][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.177748][ C0] ? finish_wait+0x260/0x260 [ 3520.182319][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.187335][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.192964][ C0] kthread+0x388/0x470 [ 3520.197029][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.202724][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.208433][ C0] ret_from_fork+0x24/0x30 [ 3520.212855][ C0] cec-vivid-014-v S30808 3339 2 0x80004000 [ 3520.219175][ C0] Call Trace: [ 3520.222454][ C0] __schedule+0x8f3/0x1fc0 [ 3520.226861][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.232833][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.238104][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3520.243548][ C0] schedule+0xd0/0x2a0 [ 3520.247615][ C0] cec_thread_func+0x6d7/0xd40 [ 3520.252375][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.257991][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3520.263777][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.269762][ C0] ? finish_wait+0x260/0x260 [ 3520.274362][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.279378][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.285002][ C0] kthread+0x388/0x470 [ 3520.289071][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.294777][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.300488][ C0] ret_from_fork+0x24/0x30 [ 3520.304910][ C0] vivid-015-cec I30784 3353 2 0x80004000 [ 3520.311256][ C0] Call Trace: [ 3520.314529][ C0] __schedule+0x8f3/0x1fc0 [ 3520.318941][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.323771][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.329044][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.334059][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.339238][ C0] schedule+0xd0/0x2a0 [ 3520.343314][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.347999][ C0] ? worker_thread+0xe20/0xe20 [ 3520.352771][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.357784][ C0] ? worker_thread+0xe20/0xe20 [ 3520.362525][ C0] kthread+0x388/0x470 [ 3520.366582][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.372296][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.378006][ C0] ret_from_fork+0x24/0x30 [ 3520.382434][ C0] cec-vivid-015-v S30600 3354 2 0x80004000 [ 3520.388767][ C0] Call Trace: [ 3520.392047][ C0] __schedule+0x8f3/0x1fc0 [ 3520.396441][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.402399][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.407690][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3520.413141][ C0] schedule+0xd0/0x2a0 [ 3520.417197][ C0] cec_thread_func+0x6d7/0xd40 [ 3520.421945][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.427562][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3520.433371][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.439329][ C0] ? finish_wait+0x260/0x260 [ 3520.443912][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.448931][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.454565][ C0] kthread+0x388/0x470 [ 3520.458624][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.464327][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.470049][ C0] ret_from_fork+0x24/0x30 [ 3520.474473][ C0] cec-vivid-015-v S30808 3355 2 0x80004000 [ 3520.480803][ C0] Call Trace: [ 3520.484070][ C0] __schedule+0x8f3/0x1fc0 [ 3520.488480][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.494464][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.499733][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3520.505209][ C0] schedule+0xd0/0x2a0 [ 3520.509286][ C0] cec_thread_func+0x6d7/0xd40 [ 3520.514051][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.519674][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3520.525470][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3520.531437][ C0] ? finish_wait+0x260/0x260 [ 3520.536024][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.541039][ C0] ? cec_s_phys_addr_from_edid+0xd0/0xd0 [ 3520.546664][ C0] kthread+0x388/0x470 [ 3520.550733][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.556437][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.562132][ C0] ret_from_fork+0x24/0x30 [ 3520.566550][ C0] raid5wq I30784 3385 2 0x80004000 [ 3520.572915][ C0] Call Trace: [ 3520.576201][ C0] __schedule+0x8f3/0x1fc0 [ 3520.580595][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.585442][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.590732][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.595748][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.600925][ C0] schedule+0xd0/0x2a0 [ 3520.604987][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.609695][ C0] ? worker_thread+0xe20/0xe20 [ 3520.614484][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.619506][ C0] ? worker_thread+0xe20/0xe20 [ 3520.624268][ C0] kthread+0x388/0x470 [ 3520.628337][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.634042][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.639754][ C0] ret_from_fork+0x24/0x30 [ 3520.644154][ C0] bcache I30784 3387 2 0x80004000 [ 3520.650492][ C0] Call Trace: [ 3520.653783][ C0] __schedule+0x8f3/0x1fc0 [ 3520.658178][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.663008][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.668280][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.673293][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.678472][ C0] schedule+0xd0/0x2a0 [ 3520.682522][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.687205][ C0] ? worker_thread+0xe20/0xe20 [ 3520.691977][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.696994][ C0] ? worker_thread+0xe20/0xe20 [ 3520.701752][ C0] kthread+0x388/0x470 [ 3520.705819][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.711524][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.717221][ C0] ret_from_fork+0x24/0x30 [ 3520.721620][ C0] bch_journal I30672 3388 2 0x80004000 [ 3520.727961][ C0] Call Trace: [ 3520.731256][ C0] __schedule+0x8f3/0x1fc0 [ 3520.735651][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.740489][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.745765][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.750790][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.755978][ C0] schedule+0xd0/0x2a0 [ 3520.760036][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.764718][ C0] ? worker_thread+0xe20/0xe20 [ 3520.769488][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.774507][ C0] ? worker_thread+0xe20/0xe20 [ 3520.779257][ C0] kthread+0x388/0x470 [ 3520.783302][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.789012][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.794721][ C0] ret_from_fork+0x24/0x30 [ 3520.799122][ C0] dm_bufio_cache I30280 3390 2 0x80004000 [ 3520.805484][ C0] Call Trace: [ 3520.808782][ C0] __schedule+0x8f3/0x1fc0 [ 3520.813189][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.818022][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.823282][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.828298][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.833487][ C0] schedule+0xd0/0x2a0 [ 3520.837551][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.842214][ C0] ? worker_thread+0xe20/0xe20 [ 3520.846976][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.852000][ C0] ? worker_thread+0xe20/0xe20 [ 3520.856756][ C0] kthread+0x388/0x470 [ 3520.860826][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.866532][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.872241][ C0] ret_from_fork+0x24/0x30 [ 3520.876641][ C0] kmpathd I30784 3391 2 0x80004000 [ 3520.882972][ C0] Call Trace: [ 3520.886257][ C0] __schedule+0x8f3/0x1fc0 [ 3520.890691][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.895548][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.900839][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.905855][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.911041][ C0] schedule+0xd0/0x2a0 [ 3520.915108][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.919796][ C0] ? worker_thread+0xe20/0xe20 [ 3520.924558][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3520.929581][ C0] ? worker_thread+0xe20/0xe20 [ 3520.934360][ C0] kthread+0x388/0x470 [ 3520.938421][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.944132][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3520.949845][ C0] ret_from_fork+0x24/0x30 [ 3520.954280][ C0] kmpath_handlerd I30784 3392 2 0x80004000 [ 3520.960629][ C0] Call Trace: [ 3520.963908][ C0] __schedule+0x8f3/0x1fc0 [ 3520.968319][ C0] ? rescuer_thread+0x691/0xbc0 [ 3520.973161][ C0] ? firmware_map_remove+0x19d/0x19d [ 3520.978432][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3520.983443][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3520.988633][ C0] schedule+0xd0/0x2a0 [ 3520.992705][ C0] rescuer_thread+0x6ed/0xbc0 [ 3520.997375][ C0] ? worker_thread+0xe20/0xe20 [ 3521.002120][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.007135][ C0] ? worker_thread+0xe20/0xe20 [ 3521.011903][ C0] kthread+0x388/0x470 [ 3521.015976][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.021680][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.027391][ C0] ret_from_fork+0x24/0x30 [ 3521.031819][ C0] rdma_cm I30784 3411 2 0x80004000 [ 3521.038179][ C0] Call Trace: [ 3521.041448][ C0] __schedule+0x8f3/0x1fc0 [ 3521.045857][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.050711][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.055998][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.061001][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.066190][ C0] schedule+0xd0/0x2a0 [ 3521.070262][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.074935][ C0] ? worker_thread+0xe20/0xe20 [ 3521.079680][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.084692][ C0] ? worker_thread+0xe20/0xe20 [ 3521.089455][ C0] kthread+0x388/0x470 [ 3521.093537][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.099245][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.104963][ C0] ret_from_fork+0x24/0x30 [ 3521.109396][ C0] mlx4_ib I30784 3415 2 0x80004000 [ 3521.115763][ C0] Call Trace: [ 3521.119051][ C0] __schedule+0x8f3/0x1fc0 [ 3521.123498][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.129137][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.134433][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.139470][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.144672][ C0] schedule+0xd0/0x2a0 [ 3521.148751][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.153428][ C0] ? worker_thread+0xe20/0xe20 [ 3521.158175][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.163173][ C0] ? worker_thread+0xe20/0xe20 [ 3521.167930][ C0] kthread+0x388/0x470 [ 3521.171991][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.177688][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.183396][ C0] ret_from_fork+0x24/0x30 [ 3521.187816][ C0] mlx4_ib_mcg I30784 3416 2 0x80004000 [ 3521.194179][ C0] Call Trace: [ 3521.197465][ C0] __schedule+0x8f3/0x1fc0 [ 3521.201859][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.206704][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.211980][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.216998][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.222174][ C0] schedule+0xd0/0x2a0 [ 3521.226239][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.230933][ C0] ? worker_thread+0xe20/0xe20 [ 3521.235693][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.240693][ C0] ? worker_thread+0xe20/0xe20 [ 3521.245450][ C0] kthread+0x388/0x470 [ 3521.249521][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.255245][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.260954][ C0] ret_from_fork+0x24/0x30 [ 3521.265377][ C0] srp_remove I30784 3417 2 0x80004000 [ 3521.271730][ C0] Call Trace: [ 3521.275010][ C0] __schedule+0x8f3/0x1fc0 [ 3521.279408][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.284274][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.289565][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.294580][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.299759][ C0] schedule+0xd0/0x2a0 [ 3521.303819][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.308514][ C0] ? worker_thread+0xe20/0xe20 [ 3521.313286][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.318299][ C0] ? worker_thread+0xe20/0xe20 [ 3521.323041][ C0] kthread+0x388/0x470 [ 3521.327100][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.332826][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.338529][ C0] ret_from_fork+0x24/0x30 [ 3521.342941][ C0] siw_cm_wq I29968 3420 2 0x80004000 [ 3521.349297][ C0] Call Trace: [ 3521.352608][ C0] __schedule+0x8f3/0x1fc0 [ 3521.357028][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.361861][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.367139][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.372164][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.377349][ C0] schedule+0xd0/0x2a0 [ 3521.381399][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.386083][ C0] ? worker_thread+0xe20/0xe20 [ 3521.390851][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.395878][ C0] ? worker_thread+0xe20/0xe20 [ 3521.400631][ C0] kthread+0x388/0x470 [ 3521.404690][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.410406][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.416124][ C0] ret_from_fork+0x24/0x30 [ 3521.420533][ C0] siw_tx/0 S30344 3421 2 0x80004000 [ 3521.426848][ C0] Call Trace: [ 3521.430138][ C0] __schedule+0x8f3/0x1fc0 [ 3521.434558][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3521.440542][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.445820][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3521.451295][ C0] schedule+0xd0/0x2a0 [ 3521.455408][ C0] siw_run_sq+0x286/0x440 [ 3521.459737][ C0] ? siw_stop_tx_thread+0x90/0x90 [ 3521.464749][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3521.470560][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3521.476529][ C0] ? finish_wait+0x260/0x260 [ 3521.481111][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.486125][ C0] ? siw_stop_tx_thread+0x90/0x90 [ 3521.491154][ C0] kthread+0x388/0x470 [ 3521.495198][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.500902][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.506612][ C0] ret_from_fork+0x24/0x30 [ 3521.511023][ C0] qat_device_rese I30280 3426 2 0x80004000 [ 3521.517363][ C0] Call Trace: [ 3521.520643][ C0] __schedule+0x8f3/0x1fc0 [ 3521.525046][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.529901][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.535174][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.540187][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.545382][ C0] schedule+0xd0/0x2a0 [ 3521.549456][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.554129][ C0] ? worker_thread+0xe20/0xe20 [ 3521.558893][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.563909][ C0] ? worker_thread+0xe20/0xe20 [ 3521.568662][ C0] kthread+0x388/0x470 [ 3521.572718][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.578429][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.584138][ C0] ret_from_fork+0x24/0x30 [ 3521.588573][ C0] qat_pf2vf_resp_ I30784 3427 2 0x80004000 [ 3521.594934][ C0] Call Trace: [ 3521.598211][ C0] __schedule+0x8f3/0x1fc0 [ 3521.602602][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.607448][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.612737][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.617740][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.622918][ C0] schedule+0xd0/0x2a0 [ 3521.626988][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.631659][ C0] ? worker_thread+0xe20/0xe20 [ 3521.636404][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.641413][ C0] ? worker_thread+0xe20/0xe20 [ 3521.646169][ C0] kthread+0x388/0x470 [ 3521.650255][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.655979][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.661700][ C0] ret_from_fork+0x24/0x30 [ 3521.666131][ C0] adf_vf_stop_wq I30784 3428 2 0x80004000 [ 3521.672489][ C0] Call Trace: [ 3521.675791][ C0] __schedule+0x8f3/0x1fc0 [ 3521.680207][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.685055][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.690341][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.695364][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.700553][ C0] schedule+0xd0/0x2a0 [ 3521.704616][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.709308][ C0] ? worker_thread+0xe20/0xe20 [ 3521.714062][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.719066][ C0] ? worker_thread+0xe20/0xe20 [ 3521.723807][ C0] kthread+0x388/0x470 [ 3521.727865][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.733574][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.739286][ C0] ret_from_fork+0x24/0x30 [ 3521.743699][ C0] ion_system_heap S30312 3526 2 0x80004000 [ 3521.750019][ C0] Call Trace: [ 3521.753301][ C0] __schedule+0x8f3/0x1fc0 [ 3521.757767][ C0] ? ion_heap_deferred_free+0x354/0x590 [ 3521.763299][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.768575][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.773588][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 3521.778510][ C0] schedule+0xd0/0x2a0 [ 3521.782577][ C0] ion_heap_deferred_free+0x3b8/0x590 [ 3521.788000][ C0] ? ion_heap_shrink_scan+0x1c0/0x1c0 [ 3521.793359][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3521.799160][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3521.805134][ C0] ? finish_wait+0x260/0x260 [ 3521.809762][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.814796][ C0] ? ion_heap_shrink_scan+0x1c0/0x1c0 [ 3521.820164][ C0] kthread+0x388/0x470 [ 3521.824232][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.829972][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.835684][ C0] ret_from_fork+0x24/0x30 [ 3521.840086][ C0] ipv6_addrconf I30576 3657 2 0x80004000 [ 3521.846431][ C0] Call Trace: [ 3521.849725][ C0] __schedule+0x8f3/0x1fc0 [ 3521.854154][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.858988][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.864265][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.869310][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.874511][ C0] schedule+0xd0/0x2a0 [ 3521.878582][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.883244][ C0] ? worker_thread+0xe20/0xe20 [ 3521.888006][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.893020][ C0] ? worker_thread+0xe20/0xe20 [ 3521.897775][ C0] kthread+0x388/0x470 [ 3521.901831][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.907540][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.913260][ C0] ret_from_fork+0x24/0x30 [ 3521.917672][ C0] dsa_ordered I30784 3678 2 0x80004000 [ 3521.924016][ C0] Call Trace: [ 3521.927301][ C0] __schedule+0x8f3/0x1fc0 [ 3521.931705][ C0] ? rescuer_thread+0x691/0xbc0 [ 3521.936536][ C0] ? firmware_map_remove+0x19d/0x19d [ 3521.941815][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3521.946829][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3521.952017][ C0] schedule+0xd0/0x2a0 [ 3521.956170][ C0] rescuer_thread+0x6ed/0xbc0 [ 3521.960831][ C0] ? worker_thread+0xe20/0xe20 [ 3521.965591][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3521.970611][ C0] ? worker_thread+0xe20/0xe20 [ 3521.975376][ C0] kthread+0x388/0x470 [ 3521.979435][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.985143][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3521.990865][ C0] ret_from_fork+0x24/0x30 [ 3521.995297][ C0] krfcommd S29800 3775 2 0x80004000 [ 3522.001639][ C0] Call Trace: [ 3522.004920][ C0] __schedule+0x8f3/0x1fc0 [ 3522.009406][ C0] ? rfcomm_run+0x2b3/0x3d30 [ 3522.013992][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.019270][ C0] ? lock_downgrade+0x840/0x840 [ 3522.024098][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3522.030101][ C0] schedule+0xd0/0x2a0 [ 3522.034172][ C0] schedule_timeout+0x55b/0x850 [ 3522.039006][ C0] ? usleep_range+0x160/0x160 [ 3522.043671][ C0] ? lock_downgrade+0x840/0x840 [ 3522.048516][ C0] ? mutex_trylock+0x2c0/0x2c0 [ 3522.053268][ C0] ? rfcomm_run+0x283/0x3d30 [ 3522.057841][ C0] ? __mutex_unlock_slowpath+0xe2/0x660 [ 3522.063367][ C0] wait_woken+0x131/0x250 [ 3522.067685][ C0] ? woken_wake_function+0x70/0x70 [ 3522.072789][ C0] rfcomm_run+0x15c4/0x3d30 [ 3522.077277][ C0] ? find_held_lock+0x2d/0x110 [ 3522.082020][ C0] ? rfcomm_check_accept+0x180/0x180 [ 3522.087304][ C0] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 3522.093116][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3522.098907][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3522.104898][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.109926][ C0] ? rfcomm_check_accept+0x180/0x180 [ 3522.115204][ C0] kthread+0x388/0x470 [ 3522.119250][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.124963][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.130686][ C0] ret_from_fork+0x24/0x30 [ 3522.135097][ C0] kkcmd I30784 3780 2 0x80004000 [ 3522.141425][ C0] Call Trace: [ 3522.144707][ C0] __schedule+0x8f3/0x1fc0 [ 3522.149121][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.153972][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.159324][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.164341][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.169542][ C0] schedule+0xd0/0x2a0 [ 3522.173609][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.178272][ C0] ? worker_thread+0xe20/0xe20 [ 3522.183015][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.188028][ C0] ? worker_thread+0xe20/0xe20 [ 3522.192801][ C0] kthread+0x388/0x470 [ 3522.196869][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.202579][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.208307][ C0] ret_from_fork+0x24/0x30 [ 3522.212722][ C0] kstrp I30784 3781 2 0x80004000 [ 3522.219067][ C0] Call Trace: [ 3522.222361][ C0] __schedule+0x8f3/0x1fc0 [ 3522.226786][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.231640][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.236921][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.241939][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.247132][ C0] schedule+0xd0/0x2a0 [ 3522.251198][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.255897][ C0] ? worker_thread+0xe20/0xe20 [ 3522.260642][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.265656][ C0] ? worker_thread+0xe20/0xe20 [ 3522.270420][ C0] kthread+0x388/0x470 [ 3522.274478][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.280181][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.285888][ C0] ret_from_fork+0x24/0x30 [ 3522.290323][ C0] krdsd I30784 3782 2 0x80004000 [ 3522.296687][ C0] Call Trace: [ 3522.299990][ C0] __schedule+0x8f3/0x1fc0 [ 3522.304409][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.309268][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.314553][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.319611][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.324805][ C0] schedule+0xd0/0x2a0 [ 3522.328879][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.333568][ C0] ? worker_thread+0xe20/0xe20 [ 3522.338358][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.343380][ C0] ? worker_thread+0xe20/0xe20 [ 3522.348136][ C0] kthread+0x388/0x470 [ 3522.352204][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.358070][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.363797][ C0] ret_from_fork+0x24/0x30 [ 3522.368215][ C0] rds_mr_flushd I30784 3783 2 0x80004000 [ 3522.374572][ C0] Call Trace: [ 3522.377844][ C0] __schedule+0x8f3/0x1fc0 [ 3522.382246][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.387093][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.392380][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.397395][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.402591][ C0] schedule+0xd0/0x2a0 [ 3522.406656][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.411328][ C0] ? worker_thread+0xe20/0xe20 [ 3522.416072][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.421081][ C0] ? worker_thread+0xe20/0xe20 [ 3522.425835][ C0] kthread+0x388/0x470 [ 3522.429902][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.435617][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.441329][ C0] ret_from_fork+0x24/0x30 [ 3522.445748][ C0] ceph-msgr I30784 3792 2 0x80004000 [ 3522.452097][ C0] Call Trace: [ 3522.455379][ C0] __schedule+0x8f3/0x1fc0 [ 3522.459786][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.464635][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.469918][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.474946][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.480133][ C0] schedule+0xd0/0x2a0 [ 3522.484192][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.488873][ C0] ? worker_thread+0xe20/0xe20 [ 3522.493652][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.498658][ C0] ? worker_thread+0xe20/0xe20 [ 3522.503411][ C0] kthread+0x388/0x470 [ 3522.507470][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.513180][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.518878][ C0] ret_from_fork+0x24/0x30 [ 3522.523287][ C0] bat_events I30576 3793 2 0x80004000 [ 3522.529630][ C0] Call Trace: [ 3522.532909][ C0] __schedule+0x8f3/0x1fc0 [ 3522.537304][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.542134][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.547408][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.552433][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.557639][ C0] schedule+0xd0/0x2a0 [ 3522.561696][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.566382][ C0] ? worker_thread+0xe20/0xe20 [ 3522.571167][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.576179][ C0] ? worker_thread+0xe20/0xe20 [ 3522.580917][ C0] kthread+0x388/0x470 [ 3522.584974][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.590695][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.596401][ C0] ret_from_fork+0x24/0x30 [ 3522.600799][ C0] zswap-shrink I30784 3816 2 0x80004000 [ 3522.607143][ C0] Call Trace: [ 3522.610532][ C0] __schedule+0x8f3/0x1fc0 [ 3522.614967][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.619815][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.625090][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.630113][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.635303][ C0] schedule+0xd0/0x2a0 [ 3522.639351][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.644027][ C0] ? worker_thread+0xe20/0xe20 [ 3522.648789][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.653800][ C0] ? worker_thread+0xe20/0xe20 [ 3522.658542][ C0] kthread+0x388/0x470 [ 3522.662584][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.668290][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.673997][ C0] ret_from_fork+0x24/0x30 [ 3522.678403][ C0] kafsd I30784 3817 2 0x80004000 [ 3522.684747][ C0] Call Trace: [ 3522.688042][ C0] __schedule+0x8f3/0x1fc0 [ 3522.692447][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.697292][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.702564][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.707577][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.712763][ C0] schedule+0xd0/0x2a0 [ 3522.716814][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.721484][ C0] ? worker_thread+0xe20/0xe20 [ 3522.726264][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.731276][ C0] ? worker_thread+0xe20/0xe20 [ 3522.736035][ C0] kthread+0x388/0x470 [ 3522.740079][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.745785][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.751508][ C0] ret_from_fork+0x24/0x30 [ 3522.755908][ C0] kafs_lockd I30784 3818 2 0x80004000 [ 3522.762248][ C0] Call Trace: [ 3522.765530][ C0] __schedule+0x8f3/0x1fc0 [ 3522.769977][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.774837][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.780112][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.785130][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.790332][ C0] schedule+0xd0/0x2a0 [ 3522.794392][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.799052][ C0] ? worker_thread+0xe20/0xe20 [ 3522.803794][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.808807][ C0] ? worker_thread+0xe20/0xe20 [ 3522.813575][ C0] kthread+0x388/0x470 [ 3522.817619][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.823311][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.829025][ C0] ret_from_fork+0x24/0x30 [ 3522.833436][ C0] kworker/0:10 I26064 3838 2 0x80004000 [ 3522.839766][ C0] Workqueue: 0x0 (wg-crypt-wg1) [ 3522.844681][ C0] Call Trace: [ 3522.847970][ C0] __schedule+0x8f3/0x1fc0 [ 3522.852392][ C0] ? worker_thread+0x240/0xe20 [ 3522.857150][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.862421][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.867610][ C0] schedule+0xd0/0x2a0 [ 3522.871679][ C0] worker_thread+0x245/0xe20 [ 3522.876262][ C0] ? process_one_work+0x16a0/0x16a0 [ 3522.881436][ C0] kthread+0x388/0x470 [ 3522.885492][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.891197][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.896908][ C0] ret_from_fork+0x24/0x30 [ 3522.901318][ C0] ext4-rsv-conver I30784 3839 2 0x80004000 [ 3522.907664][ C0] Call Trace: [ 3522.910955][ C0] __schedule+0x8f3/0x1fc0 [ 3522.915361][ C0] ? rescuer_thread+0x691/0xbc0 [ 3522.920204][ C0] ? firmware_map_remove+0x19d/0x19d [ 3522.925479][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3522.930502][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3522.935710][ C0] schedule+0xd0/0x2a0 [ 3522.939770][ C0] rescuer_thread+0x6ed/0xbc0 [ 3522.944450][ C0] ? worker_thread+0xe20/0xe20 [ 3522.949220][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3522.954246][ C0] ? worker_thread+0xe20/0xe20 [ 3522.959011][ C0] kthread+0x388/0x470 [ 3522.963054][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.968758][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3522.974481][ C0] ret_from_fork+0x24/0x30 [ 3522.978894][ C0] systemd-journal S23864 3859 1 0x00000100 [ 3522.985219][ C0] Call Trace: [ 3522.988514][ C0] __schedule+0x8f3/0x1fc0 [ 3522.992918][ C0] ? print_usage_bug+0x240/0x240 [ 3522.997835][ C0] ? firmware_map_remove+0x19d/0x19d [ 3523.003109][ C0] ? mark_held_locks+0x9f/0xe0 [ 3523.007890][ C0] schedule+0xd0/0x2a0 [ 3523.012065][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3523.018122][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3523.023905][ C0] ? lock_downgrade+0x840/0x840 [ 3523.028744][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3523.034887][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3523.040162][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.046134][ C0] ep_poll+0xcef/0xf00 [ 3523.050218][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3523.055498][ C0] ? __secure_computing+0x104/0x360 [ 3523.060683][ C0] ? finish_wait+0x260/0x260 [ 3523.065269][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 3523.070827][ C0] do_epoll_wait+0x209/0x260 [ 3523.075408][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 3523.080410][ C0] do_syscall_64+0xf6/0x7d0 [ 3523.084909][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3523.090799][ C0] RIP: 0033:0x7fc83ddcf2e3 [ 3523.095222][ C0] Code: Bad RIP value. [ 3523.099277][ C0] RSP: 002b:00007ffda3b7aa48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 3523.107670][ C0] RAX: ffffffffffffffda RBX: 000055cc541da1e0 RCX: 00007fc83ddcf2e3 [ 3523.115638][ C0] RDX: 0000000000000013 RSI: 00007ffda3b7aa50 RDI: 0000000000000008 [ 3523.123598][ C0] RBP: 00007ffda3b7ac40 R08: 00007ffda3bbf080 R09: 000000005edfce54 [ 3523.131550][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda3b7aa50 [ 3523.139528][ C0] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005a7aa821dab8c [ 3523.147509][ C0] systemd-udevd S23128 3873 1 0x00000100 [ 3523.153846][ C0] Call Trace: [ 3523.157121][ C0] __schedule+0x8f3/0x1fc0 [ 3523.161517][ C0] ? firmware_map_remove+0x19d/0x19d [ 3523.166800][ C0] schedule+0xd0/0x2a0 [ 3523.170872][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3523.176939][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3523.182726][ C0] ? lock_downgrade+0x840/0x840 [ 3523.187580][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3523.192951][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3523.198214][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.204173][ C0] ep_poll+0xcef/0xf00 [ 3523.208238][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3523.213513][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3523.219477][ C0] ? __secure_computing+0x104/0x360 [ 3523.224668][ C0] ? finish_wait+0x260/0x260 [ 3523.229267][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 3523.234818][ C0] do_epoll_wait+0x209/0x260 [ 3523.239397][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 3523.244416][ C0] do_syscall_64+0xf6/0x7d0 [ 3523.248924][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3523.254803][ C0] RIP: 0033:0x7f4f6b52e2e3 [ 3523.259199][ C0] Code: 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 29 54 2b 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 0b c2 00 00 48 89 04 24 [ 3523.278782][ C0] RSP: 002b:00007ffe71124ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 3523.287179][ C0] RAX: ffffffffffffffda RBX: 0000556ecfb000e0 RCX: 00007f4f6b52e2e3 [ 3523.295143][ C0] RDX: 000000000000000d RSI: 00007ffe71124eb0 RDI: 000000000000000a [ 3523.303090][ C0] RBP: 00007ffe71125050 R08: 0000000000000008 R09: 0000000000000db8 [ 3523.311047][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe71124eb0 [ 3523.319010][ C0] R13: 0000000000000001 R14: ffffffffffffffff R15: 0000000000000000 [ 3523.326990][ C0] systemd-timesyn S26128 4587 1 0x00000100 [ 3523.333317][ C0] Call Trace: [ 3523.336589][ C0] __schedule+0x8f3/0x1fc0 [ 3523.341177][ C0] ? firmware_map_remove+0x19d/0x19d [ 3523.346471][ C0] schedule+0xd0/0x2a0 [ 3523.350546][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3523.356604][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3523.362385][ C0] ? ep_scan_ready_list+0x602/0x960 [ 3523.367583][ C0] ? lock_downgrade+0x840/0x840 [ 3523.372424][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3523.377531][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3523.382794][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.388766][ C0] ep_poll+0xcef/0xf00 [ 3523.392830][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3523.398094][ C0] ? __fget_files+0x32f/0x500 [ 3523.402745][ C0] ? ksys_dup3+0x3c0/0x3c0 [ 3523.407150][ C0] ? finish_wait+0x260/0x260 [ 3523.411747][ C0] do_epoll_wait+0x209/0x260 [ 3523.416328][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 3523.421334][ C0] do_syscall_64+0xf6/0x7d0 [ 3523.425833][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3523.431725][ C0] RIP: 0033:0x7fdadc45d303 [ 3523.436139][ C0] Code: Bad RIP value. [ 3523.440180][ C0] RSP: 002b:00007ffe089d7ca0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8 [ 3523.448574][ C0] RAX: ffffffffffffffda RBX: 0000560ddc8fb8f0 RCX: 00007fdadc45d303 [ 3523.456541][ C0] RDX: 0000000000000006 RSI: 00007ffe089d7cb0 RDI: 0000000000000004 [ 3523.464499][ C0] RBP: 00007ffe089d7e00 R08: 0000000000000000 R09: 000000000000000d [ 3523.472458][ C0] R10: 00000000ffffffff R11: 0000000000000293 R12: 00007ffe089d7cb0 [ 3523.480425][ C0] R13: 0000000000000001 R14: ffffffffffffffff R15: 0000000000000000 [ 3523.488422][ C0] sd-resolve S28456 4738 1 0x00000100 [ 3523.494757][ C0] Call Trace: [ 3523.498039][ C0] __schedule+0x8f3/0x1fc0 [ 3523.502435][ C0] ? firmware_map_remove+0x19d/0x19d [ 3523.507712][ C0] ? find_held_lock+0x2d/0x110 [ 3523.512470][ C0] schedule+0xd0/0x2a0 [ 3523.516529][ C0] schedule_timeout+0x55b/0x850 [ 3523.521358][ C0] ? usleep_range+0x160/0x160 [ 3523.526029][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.532018][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3523.537835][ C0] ? prepare_to_wait_exclusive+0x121/0x2c0 [ 3523.543618][ C0] ? prepare_to_wait+0x2b0/0x2b0 [ 3523.548541][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3523.554346][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.560322][ C0] __skb_wait_for_more_packets+0x30d/0x5c0 [ 3523.566123][ C0] ? __skb_free_datagram_locked+0x480/0x480 [ 3523.572007][ C0] ? __mutex_unlock_slowpath+0xe2/0x660 [ 3523.577530][ C0] ? proto_seq_start+0x50/0x50 [ 3523.582269][ C0] ? skb_segment.cold+0x29/0x29 [ 3523.587116][ C0] ? find_held_lock+0x2d/0x110 [ 3523.591925][ C0] unix_dgram_recvmsg+0x21d/0xf10 [ 3523.596967][ C0] ? unix_stream_sendmsg+0x920/0x920 [ 3523.602239][ C0] ? aa_label_sk_perm+0x89/0xe0 [ 3523.607094][ C0] ? aa_af_perm+0x260/0x260 [ 3523.611584][ C0] ? ksys_dup3+0x3c0/0x3c0 [ 3523.615999][ C0] ? sendmsg_copy_msghdr+0x70/0x70 [ 3523.621103][ C0] ? security_socket_recvmsg+0x8e/0xc0 [ 3523.626552][ C0] ? unix_stream_sendmsg+0x920/0x920 [ 3523.631840][ C0] sock_recvmsg+0xca/0x110 [ 3523.636236][ C0] __sys_recvfrom+0x1be/0x2f0 [ 3523.640889][ C0] ? __ia32_sys_send+0x100/0x100 [ 3523.645812][ C0] ? ksys_dup3+0x3c0/0x3c0 [ 3523.650252][ C0] ? __secure_computing+0x104/0x360 [ 3523.655458][ C0] ? syscall_trace_enter+0x41d/0xd10 [ 3523.660749][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 3523.666297][ C0] __x64_sys_recvfrom+0xdd/0x1b0 [ 3523.671238][ C0] do_syscall_64+0xf6/0x7d0 [ 3523.675734][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3523.681611][ C0] RIP: 0033:0x7fdadc72351f [ 3523.686027][ C0] Code: Bad RIP value. [ 3523.690083][ C0] RSP: 002b:00007fdad9e9eaa0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3523.698752][ C0] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fdadc72351f [ 3523.706706][ C0] RDX: 0000000000002800 RSI: 00007fdad9e9eca0 RDI: 0000000000000007 [ 3523.714664][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3523.722612][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3523.730568][ C0] R13: 0000000000002800 R14: 00007fdad9e9eca0 R15: 00007fdad9ea3ca0 [ 3523.738557][ C0] dhclient S26968 4739 1 0x00000000 [ 3523.744893][ C0] Call Trace: [ 3523.748188][ C0] __schedule+0x8f3/0x1fc0 [ 3523.752612][ C0] ? firmware_map_remove+0x19d/0x19d [ 3523.757875][ C0] ? free_object+0x70/0x70 [ 3523.762267][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3523.767200][ C0] schedule+0xd0/0x2a0 [ 3523.771259][ C0] schedule_hrtimeout_range_clock+0x166/0x340 [ 3523.777321][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3523.783121][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.789098][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3523.795081][ C0] ? __pollwait+0x24f/0x430 [ 3523.799561][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.805626][ C0] ? packet_poll+0x2f9/0x4c0 [ 3523.810232][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3523.816563][ C0] ? pollwake+0x200/0x200 [ 3523.820902][ C0] do_select+0x1220/0x16f0 [ 3523.825345][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3523.831061][ C0] ? mark_lock+0x11f/0xdd0 [ 3523.835466][ C0] ? print_usage_bug+0x240/0x240 [ 3523.840382][ C0] ? poll_freewait+0x250/0x250 [ 3523.845137][ C0] ? poll_freewait+0x250/0x250 [ 3523.849920][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3523.855906][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3523.861863][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3523.867839][ C0] ? find_held_lock+0x2d/0x110 [ 3523.872601][ C0] ? __might_fault+0x11f/0x1d0 [ 3523.877372][ C0] ? lock_downgrade+0x840/0x840 [ 3523.882208][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3523.887149][ C0] ? __might_fault+0x190/0x1d0 [ 3523.891919][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3523.896855][ C0] core_sys_select+0x3ba/0x8e0 [ 3523.901596][ C0] ? do_compat_pselect+0x210/0x210 [ 3523.906707][ C0] ? find_held_lock+0x2d/0x110 [ 3523.911461][ C0] ? find_held_lock+0x2d/0x110 [ 3523.916202][ C0] ? lock_downgrade+0x840/0x840 [ 3523.921040][ C0] ? __might_fault+0x11f/0x1d0 [ 3523.925801][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3523.930647][ C0] ? timespec64_add_safe+0x189/0x210 [ 3523.935919][ C0] ? nsec_to_clock_t+0x30/0x30 [ 3523.940669][ C0] kern_select+0x13d/0x1c0 [ 3523.945075][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3523.950018][ C0] ? vmacache_update+0xce/0x140 [ 3523.954861][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3523.960297][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3523.966275][ C0] __x64_sys_select+0xba/0x150 [ 3523.971061][ C0] do_syscall_64+0xf6/0x7d0 [ 3523.975571][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3523.981453][ C0] RIP: 0033:0x7fc0b8ca85e3 [ 3523.985864][ C0] Code: Bad RIP value. [ 3523.989923][ C0] RSP: 002b:00007ffc937bc0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3523.998319][ C0] RAX: ffffffffffffffda RBX: 00007fc0b978a010 RCX: 00007fc0b8ca85e3 [ 3524.006275][ C0] RDX: 00007fc0b9789210 RSI: 00007fc0b9789110 RDI: 0000000000000007 [ 3524.014253][ C0] RBP: 00007ffc937bc0e8 R08: 00007ffc937bc100 R09: 0000000000000002 [ 3524.022211][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc937bc100 [ 3524.030166][ C0] R13: 00007ffc937bc0f0 R14: 00007ffc937bc0f8 R15: 0000000000000000 [ 3524.038139][ C0] cron S23864 6685 1 0x00000000 [ 3524.044454][ C0] Call Trace: [ 3524.047752][ C0] __schedule+0x8f3/0x1fc0 [ 3524.052174][ C0] ? firmware_map_remove+0x19d/0x19d [ 3524.057716][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.063684][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3524.068620][ C0] schedule+0xd0/0x2a0 [ 3524.072680][ C0] do_nanosleep+0x21f/0x640 [ 3524.077166][ C0] ? schedule_timeout_idle+0x80/0x80 [ 3524.082428][ C0] ? memset+0x20/0x40 [ 3524.086401][ C0] ? __hrtimer_init+0x13b/0x270 [ 3524.091277][ C0] hrtimer_nanosleep+0x1df/0x3a0 [ 3524.096206][ C0] ? nanosleep_copyout+0x100/0x100 [ 3524.101293][ C0] ? _copy_from_user+0x13c/0x1a0 [ 3524.106223][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3524.112202][ C0] ? put_old_itimerspec32+0x1d0/0x1d0 [ 3524.117567][ C0] __x64_sys_nanosleep+0x1dc/0x260 [ 3524.122667][ C0] ? hrtimer_nanosleep+0x3a0/0x3a0 [ 3524.127766][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.133747][ C0] ? do_syscall_64+0x21/0x7d0 [ 3524.138416][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.144398][ C0] do_syscall_64+0xf6/0x7d0 [ 3524.148915][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3524.154799][ C0] RIP: 0033:0x7f6981996270 [ 3524.159200][ C0] Code: Bad RIP value. [ 3524.163241][ C0] RSP: 002b:00007ffcf0f061c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 3524.171960][ C0] RAX: ffffffffffffffda RBX: fffffffffffffeb0 RCX: 00007f6981996270 [ 3524.179923][ C0] RDX: 00007ffcf0f96080 RSI: 00007ffcf0f061d0 RDI: 00007ffcf0f061d0 [ 3524.187880][ C0] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000001 [ 3524.195849][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3524.203810][ C0] R13: 00007ffcf0f06320 R14: 0000000000000000 R15: 0000000000000000 [ 3524.211788][ C0] rsyslogd S23128 6688 1 0x00000000 [ 3524.218113][ C0] Call Trace: [ 3524.221386][ C0] __schedule+0x8f3/0x1fc0 [ 3524.225820][ C0] ? firmware_map_remove+0x19d/0x19d [ 3524.231092][ C0] ? free_object+0x70/0x70 [ 3524.235490][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3524.240408][ C0] schedule+0xd0/0x2a0 [ 3524.244470][ C0] schedule_hrtimeout_range_clock+0x166/0x340 [ 3524.250539][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3524.256339][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3524.262296][ C0] ? set_normalized_timespec64+0x65/0xc0 [ 3524.267918][ C0] ? select_estimate_accuracy+0x24b/0x320 [ 3524.273666][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3524.279978][ C0] ? pollwake+0x200/0x200 [ 3524.284299][ C0] ? rcu_read_lock_held_common+0xa0/0xa0 [ 3524.289937][ C0] do_select+0x1220/0x16f0 [ 3524.294387][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3524.300110][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3524.306175][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3524.312764][ C0] ? mark_lock+0x11f/0xdd0 [ 3524.317161][ C0] ? print_usage_bug+0x240/0x240 [ 3524.322093][ C0] ? mark_lock+0x11f/0xdd0 [ 3524.326504][ C0] ? find_held_lock+0x2d/0x110 [ 3524.331275][ C0] ? __lock_acquire+0xc6c/0x48a0 [ 3524.336206][ C0] ? print_usage_bug+0x240/0x240 [ 3524.341123][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3524.347104][ C0] ? mark_lock+0x11f/0xdd0 [ 3524.351511][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3524.356518][ C0] ? find_held_lock+0x2d/0x110 [ 3524.361259][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3524.366190][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3524.371636][ C0] ? lock_downgrade+0x840/0x840 [ 3524.376470][ C0] ? rcu_read_lock_held_common+0xa0/0xa0 [ 3524.382098][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3524.387036][ C0] core_sys_select+0x3ba/0x8e0 [ 3524.391803][ C0] ? do_compat_pselect+0x210/0x210 [ 3524.396895][ C0] ? find_held_lock+0x2d/0x110 [ 3524.401661][ C0] ? find_held_lock+0x2d/0x110 [ 3524.406416][ C0] ? lock_downgrade+0x840/0x840 [ 3524.411265][ C0] ? __might_fault+0x11f/0x1d0 [ 3524.416038][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3524.420885][ C0] ? timespec64_add_safe+0x189/0x210 [ 3524.426160][ C0] ? nsec_to_clock_t+0x30/0x30 [ 3524.430946][ C0] kern_select+0x13d/0x1c0 [ 3524.435366][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3524.440303][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3524.445752][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.451736][ C0] __x64_sys_select+0xba/0x150 [ 3524.456482][ C0] do_syscall_64+0xf6/0x7d0 [ 3524.460965][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3524.466845][ C0] RIP: 0033:0x7fb4bcd1f603 [ 3524.471256][ C0] Code: Bad RIP value. [ 3524.475295][ C0] RSP: 002b:00007ffc62c3e750 EFLAGS: 00000293 ORIG_RAX: 0000000000000017 [ 3524.483678][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4bcd1f603 [ 3524.491625][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 3524.499571][ C0] RBP: 0000558201158040 R08: 00007ffc62c3e770 R09: 0000000000000000 [ 3524.507530][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffc62c3e770 [ 3524.515504][ C0] R13: 0000558201158008 R14: 00007ffc62c3e768 R15: 0000000000000000 [ 3524.523463][ C0] in:imuxsock S27824 6691 1 0x00000000 [ 3524.529777][ C0] Call Trace: [ 3524.533060][ C0] __schedule+0x8f3/0x1fc0 [ 3524.537486][ C0] ? firmware_map_remove+0x19d/0x19d [ 3524.542762][ C0] ? find_held_lock+0x2d/0x110 [ 3524.547525][ C0] schedule+0xd0/0x2a0 [ 3524.551597][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3524.557655][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3524.563437][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3524.569226][ C0] ? poll_initwait+0x180/0x180 [ 3524.573979][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.579935][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3524.585729][ C0] ? __pollwait+0x24f/0x430 [ 3524.590236][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3524.596549][ C0] ? pollwake+0x200/0x200 [ 3524.600857][ C0] do_select+0x1220/0x16f0 [ 3524.605299][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3524.611006][ C0] ? mark_lock+0x11f/0xdd0 [ 3524.615405][ C0] ? poll_freewait+0x250/0x250 [ 3524.620146][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3524.625179][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3524.631165][ C0] ? find_held_lock+0x2d/0x110 [ 3524.635929][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3524.641912][ C0] ? try_to_wake_up+0x66d/0x1630 [ 3524.646845][ C0] ? find_held_lock+0x2d/0x110 [ 3524.651599][ C0] ? __might_fault+0x11f/0x1d0 [ 3524.656358][ C0] ? lock_downgrade+0x840/0x840 [ 3524.661183][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3524.666137][ C0] ? __might_fault+0x190/0x1d0 [ 3524.670920][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3524.675843][ C0] core_sys_select+0x3ba/0x8e0 [ 3524.680584][ C0] ? do_compat_pselect+0x210/0x210 [ 3524.685790][ C0] ? futex_exit_release+0x60/0x60 [ 3524.690826][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3524.695681][ C0] ? poll_schedule_timeout.constprop.0+0x1e0/0x1e0 [ 3524.702171][ C0] ? __fget_light+0x20e/0x270 [ 3524.706845][ C0] ? fput_many+0x2f/0x1a0 [ 3524.711164][ C0] kern_select+0x13d/0x1c0 [ 3524.715571][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3524.720490][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3524.725939][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.731922][ C0] __x64_sys_select+0xba/0x150 [ 3524.736674][ C0] do_syscall_64+0xf6/0x7d0 [ 3524.741157][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3524.747034][ C0] RIP: 0033:0x7fb4bcd1f603 [ 3524.751458][ C0] Code: Bad RIP value. [ 3524.755509][ C0] RSP: 002b:00007fb4bb9ced20 EFLAGS: 00000293 ORIG_RAX: 0000000000000017 [ 3524.763892][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb4bcd1f603 [ 3524.771850][ C0] RDX: 0000000000000000 RSI: 00007fb4bb9ced40 RDI: 0000000000000004 [ 3524.779819][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000004000001 [ 3524.787785][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3524.795744][ C0] R13: 0000000000000001 R14: 00007fb4bb9ced40 R15: 0000000000000003 [ 3524.803710][ C0] in:imklog S27856 6692 1 0x00000000 [ 3524.810027][ C0] Call Trace: [ 3524.813311][ C0] __schedule+0x8f3/0x1fc0 [ 3524.817707][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.823674][ C0] ? firmware_map_remove+0x19d/0x19d [ 3524.828950][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3524.834404][ C0] schedule+0xd0/0x2a0 [ 3524.838464][ C0] do_syslog+0x13e0/0x16d0 [ 3524.842861][ C0] ? find_held_lock+0x2d/0x110 [ 3524.847614][ C0] ? log_buf_vmcoreinfo_setup+0x140/0x140 [ 3524.853338][ C0] ? finish_wait+0x260/0x260 [ 3524.857984][ C0] ? fsnotify_parent+0xbf/0x2d0 [ 3524.862867][ C0] kmsg_read+0x90/0xb0 [ 3524.866926][ C0] ? kmsg_release+0x20/0x20 [ 3524.871441][ C0] proc_reg_read+0x161/0x370 [ 3524.876026][ C0] ? proc_reg_write+0x370/0x370 [ 3524.880886][ C0] ? security_file_permission+0x8c/0x470 [ 3524.886510][ C0] ? proc_reg_write+0x370/0x370 [ 3524.891346][ C0] __vfs_read+0x76/0x100 [ 3524.895580][ C0] vfs_read+0x1f0/0x420 [ 3524.899714][ C0] ksys_read+0x12d/0x250 [ 3524.903943][ C0] ? kernel_write+0x120/0x120 [ 3524.908608][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.914583][ C0] ? do_syscall_64+0x21/0x7d0 [ 3524.919249][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3524.925222][ C0] do_syscall_64+0xf6/0x7d0 [ 3524.929818][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3524.935710][ C0] RIP: 0033:0x7fb4bdc1122d [ 3524.940110][ C0] Code: Bad RIP value. [ 3524.944162][ C0] RSP: 002b:00007fb4bb5ad580 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 3524.952558][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4bdc1122d [ 3524.960516][ C0] RDX: 0000000000001fa0 RSI: 00007fb4bb5adda0 RDI: 0000000000000004 [ 3524.968489][ C0] RBP: 0000558202f8e9d0 R08: 0000000000000000 R09: 0000000000000000 [ 3524.976446][ C0] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fb4bb5adda0 [ 3524.984403][ C0] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fb4bb5aeff1 [ 3524.993506][ C0] rs:main Q:Reg S26968 6693 1 0x00000000 [ 3524.999815][ C0] Call Trace: [ 3525.003088][ C0] __schedule+0x8f3/0x1fc0 [ 3525.007494][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3525.012771][ C0] ? firmware_map_remove+0x19d/0x19d [ 3525.018097][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3525.023537][ C0] schedule+0xd0/0x2a0 [ 3525.027598][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3525.032699][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3525.038174][ C0] ? ext4_buffered_write_iter+0x22f/0x450 [ 3525.043876][ C0] futex_wait+0x1e2/0x550 [ 3525.048202][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3525.053229][ C0] ? up_write+0x148/0x470 [ 3525.057550][ C0] do_futex+0x15f/0x1ad0 [ 3525.061776][ C0] ? futex_exit_release+0x60/0x60 [ 3525.066786][ C0] ? ksys_write+0x212/0x250 [ 3525.071294][ C0] ? lock_downgrade+0x840/0x840 [ 3525.076138][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3525.081589][ C0] ? __mutex_unlock_slowpath+0xe2/0x660 [ 3525.087133][ C0] __x64_sys_futex+0x376/0x4f0 [ 3525.091901][ C0] ? fput_many+0x2f/0x1a0 [ 3525.096219][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3525.100714][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3525.106179][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.112171][ C0] ? do_syscall_64+0x21/0x7d0 [ 3525.116855][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.122815][ C0] do_syscall_64+0xf6/0x7d0 [ 3525.127315][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3525.133220][ C0] RIP: 0033:0x7fb4bdc0e17f [ 3525.137621][ C0] Code: Bad RIP value. [ 3525.141671][ C0] RSP: 002b:00007fb4bb1ccc70 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3525.150241][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4bdc0e17f [ 3525.158202][ C0] RDX: 00000000000015c9 RSI: 0000000000000080 RDI: 0000558202f8b28c [ 3525.166157][ C0] RBP: 0000558202f8b288 R08: 0000558202f8b000 R09: 0000000000000ae4 [ 3525.174115][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4bb1cccd0 [ 3525.182068][ C0] R13: 0000000000000000 R14: 0000558201147290 R15: 0000000000000000 [ 3525.190049][ C0] agetty S27304 6694 1 0x00000000 [ 3525.196388][ C0] Call Trace: [ 3525.199670][ C0] __schedule+0x8f3/0x1fc0 [ 3525.204080][ C0] ? firmware_map_remove+0x19d/0x19d [ 3525.209379][ C0] ? lock_downgrade+0x840/0x840 [ 3525.214232][ C0] ? mark_held_locks+0x9f/0xe0 [ 3525.218978][ C0] schedule+0xd0/0x2a0 [ 3525.223030][ C0] schedule_timeout+0x55b/0x850 [ 3525.227955][ C0] ? n_tty_read+0x15a8/0x1b30 [ 3525.232631][ C0] ? usleep_range+0x160/0x160 [ 3525.237300][ C0] ? lock_release+0x800/0x800 [ 3525.241953][ C0] ? lock_downgrade+0x840/0x840 [ 3525.246800][ C0] ? print_usage_bug+0x240/0x240 [ 3525.251743][ C0] ? up_read+0x1ab/0x750 [ 3525.255980][ C0] wait_woken+0x131/0x250 [ 3525.260293][ C0] ? woken_wake_function+0x70/0x70 [ 3525.265407][ C0] n_tty_read+0x15bc/0x1b30 [ 3525.269936][ C0] ? __ldsem_down_read_nested+0xf3/0x850 [ 3525.275588][ C0] ? __ldsem_down_write_nested+0x8f0/0x8f0 [ 3525.281377][ C0] ? copy_from_read_buf+0x500/0x500 [ 3525.286586][ C0] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 3525.292385][ C0] tty_read+0x190/0x290 [ 3525.296518][ C0] ? copy_from_read_buf+0x500/0x500 [ 3525.301692][ C0] ? tty_poll+0x180/0x180 [ 3525.306010][ C0] __vfs_read+0x76/0x100 [ 3525.310253][ C0] vfs_read+0x1f0/0x420 [ 3525.314409][ C0] ksys_read+0x12d/0x250 [ 3525.318643][ C0] ? kernel_write+0x120/0x120 [ 3525.323295][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.329286][ C0] ? do_syscall_64+0x21/0x7d0 [ 3525.333950][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.339920][ C0] do_syscall_64+0xf6/0x7d0 [ 3525.344418][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3525.350309][ C0] RIP: 0033:0x7fafe3dd2910 [ 3525.354733][ C0] Code: Bad RIP value. [ 3525.358783][ C0] RSP: 002b:00007ffeceee9578 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3525.367174][ C0] RAX: ffffffffffffffda RBX: 00007ffeceee95df RCX: 00007fafe3dd2910 [ 3525.375137][ C0] RDX: 0000000000000001 RSI: 00007ffeceee95df RDI: 0000000000000000 [ 3525.383083][ C0] RBP: 000000000000001e R08: ffffffffffffff98 R09: 00007ffeceee8430 [ 3525.391031][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3525.398994][ C0] R13: 00005561511a6900 R14: 00007ffeceee95e0 R15: 0000000000000012 [ 3525.406974][ C0] agetty S23864 6695 1 0x00000000 [ 3525.413308][ C0] Call Trace: [ 3525.416580][ C0] __schedule+0x8f3/0x1fc0 [ 3525.420995][ C0] ? firmware_map_remove+0x19d/0x19d [ 3525.426275][ C0] ? lock_acquire+0x1f2/0x8f0 [ 3525.430950][ C0] ? add_wait_queue+0x44/0x150 [ 3525.435707][ C0] schedule+0xd0/0x2a0 [ 3525.439766][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3525.445824][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3525.451617][ C0] ? find_held_lock+0x2d/0x110 [ 3525.456362][ C0] ? inotify_poll+0xc2/0xf0 [ 3525.460845][ C0] ? lock_downgrade+0x840/0x840 [ 3525.465683][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3525.470714][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3525.477029][ C0] ? pollwake+0x200/0x200 [ 3525.481337][ C0] do_select+0x1220/0x16f0 [ 3525.485778][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3525.491485][ C0] ? mark_lock+0x11f/0xdd0 [ 3525.495897][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3525.502465][ C0] ? poll_freewait+0x250/0x250 [ 3525.507221][ C0] ? poll_freewait+0x250/0x250 [ 3525.511995][ C0] ? poll_freewait+0x250/0x250 [ 3525.516768][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3525.522739][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3525.528716][ C0] ? find_held_lock+0x2d/0x110 [ 3525.533483][ C0] ? __might_fault+0x11f/0x1d0 [ 3525.538235][ C0] ? lock_downgrade+0x840/0x840 [ 3525.543060][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3525.548021][ C0] ? __might_fault+0x190/0x1d0 [ 3525.552787][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3525.557698][ C0] core_sys_select+0x3ba/0x8e0 [ 3525.562450][ C0] ? do_compat_pselect+0x210/0x210 [ 3525.567547][ C0] ? find_held_lock+0x2d/0x110 [ 3525.572308][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3525.578090][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.584047][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3525.589840][ C0] ? debug_object_active_state+0x294/0x360 [ 3525.595635][ C0] ? debug_object_deactivate+0x320/0x320 [ 3525.601272][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3525.607252][ C0] kern_select+0x13d/0x1c0 [ 3525.611657][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3525.616573][ C0] ? unlock_page_memcg+0x60/0x60 [ 3525.621487][ C0] ? ___might_sleep+0x15a/0x2b0 [ 3525.626331][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3525.631803][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.637786][ C0] __x64_sys_select+0xba/0x150 [ 3525.642529][ C0] do_syscall_64+0xf6/0x7d0 [ 3525.647030][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3525.652922][ C0] RIP: 0033:0x7ff008c8c5e3 [ 3525.657321][ C0] Code: Bad RIP value. [ 3525.661376][ C0] RSP: 002b:00007ffcfe14e5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3525.669774][ C0] RAX: ffffffffffffffda RBX: 00007ffcfe14e610 RCX: 00007ff008c8c5e3 [ 3525.677732][ C0] RDX: 0000000000000000 RSI: 00007ffcfe14e6d0 RDI: 0000000000000005 [ 3525.685689][ C0] RBP: 00007ffcfe14e600 R08: 0000000000000000 R09: 00007ffcfe14e690 [ 3525.693656][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfe14e5f4 [ 3525.701602][ C0] R13: 00007ffcfe14e750 R14: 00007ffcfe14e650 R15: 0000000000000000 [ 3525.709580][ C0] sshd S26968 6698 1 0x00000000 [ 3525.715908][ C0] Call Trace: [ 3525.719179][ C0] __schedule+0x8f3/0x1fc0 [ 3525.723577][ C0] ? firmware_map_remove+0x19d/0x19d [ 3525.728849][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 3525.733776][ C0] ? lock_downgrade+0x840/0x840 [ 3525.738625][ C0] schedule+0xd0/0x2a0 [ 3525.742685][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3525.748759][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3525.754569][ C0] ? __pollwait+0x24f/0x430 [ 3525.759064][ C0] ? poll_initwait+0x180/0x180 [ 3525.763836][ C0] ? tcp_poll+0x471/0xe10 [ 3525.768154][ C0] ? do_select+0x3de/0x16f0 [ 3525.772655][ C0] ? tcp_ioctl+0x7d0/0x7d0 [ 3525.777065][ C0] ? debug_smp_processor_id+0x2a/0x185 [ 3525.782501][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3525.788814][ C0] ? pollwake+0x200/0x200 [ 3525.793149][ C0] do_select+0x1220/0x16f0 [ 3525.797559][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3525.803254][ C0] ? mark_lock+0x11f/0xdd0 [ 3525.807662][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3525.814239][ C0] ? poll_freewait+0x250/0x250 [ 3525.819002][ C0] ? poll_freewait+0x250/0x250 [ 3525.823764][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3525.829738][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3525.835710][ C0] ? find_held_lock+0x2d/0x110 [ 3525.840464][ C0] ? __might_fault+0x11f/0x1d0 [ 3525.845225][ C0] ? lock_downgrade+0x840/0x840 [ 3525.850096][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3525.855029][ C0] ? __might_fault+0x190/0x1d0 [ 3525.859771][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3525.864692][ C0] core_sys_select+0x3ba/0x8e0 [ 3525.869459][ C0] ? do_compat_pselect+0x210/0x210 [ 3525.874573][ C0] ? find_held_lock+0x2d/0x110 [ 3525.879322][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3525.885116][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.891085][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3525.896880][ C0] ? debug_object_active_state+0x294/0x360 [ 3525.902676][ C0] ? debug_object_deactivate+0x320/0x320 [ 3525.908300][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3525.914281][ C0] kern_select+0x13d/0x1c0 [ 3525.918688][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3525.923610][ C0] ? unlock_page_memcg+0x60/0x60 [ 3525.928551][ C0] ? ___might_sleep+0x15a/0x2b0 [ 3525.933393][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3525.938829][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3525.944803][ C0] __x64_sys_select+0xba/0x150 [ 3525.949571][ C0] do_syscall_64+0xf6/0x7d0 [ 3525.954085][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3525.959954][ C0] RIP: 0033:0x7f708ce0c5e3 [ 3525.964364][ C0] Code: Bad RIP value. [ 3525.968423][ C0] RSP: 002b:00007fff6e53e288 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3525.976834][ C0] RAX: ffffffffffffffda RBX: 0000555626734f30 RCX: 00007f708ce0c5e3 [ 3525.984789][ C0] RDX: 0000000000000000 RSI: 0000555626734f30 RDI: 0000000000000007 [ 3525.992745][ C0] RBP: 0000000000000064 R08: 0000000000000000 R09: 0000000000000010 [ 3526.000694][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6e53e504 [ 3526.008649][ C0] R13: 0000000000000000 R14: 0000555626075ce8 R15: 0000000000000063 [ 3526.016620][ C0] agetty S26448 6700 1 0x00000000 [ 3526.022937][ C0] Call Trace: [ 3526.026223][ C0] __schedule+0x8f3/0x1fc0 [ 3526.030645][ C0] ? firmware_map_remove+0x19d/0x19d [ 3526.035918][ C0] ? lock_downgrade+0x840/0x840 [ 3526.040755][ C0] ? mark_held_locks+0x9f/0xe0 [ 3526.045515][ C0] schedule+0xd0/0x2a0 [ 3526.049588][ C0] schedule_timeout+0x55b/0x850 [ 3526.054438][ C0] ? n_tty_read+0x15a8/0x1b30 [ 3526.059116][ C0] ? usleep_range+0x160/0x160 [ 3526.063769][ C0] ? lock_release+0x800/0x800 [ 3526.068433][ C0] ? lock_downgrade+0x840/0x840 [ 3526.073280][ C0] ? print_usage_bug+0x240/0x240 [ 3526.078197][ C0] ? up_read+0x1ab/0x750 [ 3526.082416][ C0] wait_woken+0x131/0x250 [ 3526.086735][ C0] ? woken_wake_function+0x70/0x70 [ 3526.091852][ C0] n_tty_read+0x15bc/0x1b30 [ 3526.096351][ C0] ? __ldsem_down_read_nested+0xf3/0x850 [ 3526.101960][ C0] ? __ldsem_down_write_nested+0x8f0/0x8f0 [ 3526.107757][ C0] ? copy_from_read_buf+0x500/0x500 [ 3526.112947][ C0] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 3526.118735][ C0] tty_read+0x190/0x290 [ 3526.122864][ C0] ? copy_from_read_buf+0x500/0x500 [ 3526.128050][ C0] ? tty_poll+0x180/0x180 [ 3526.132365][ C0] __vfs_read+0x76/0x100 [ 3526.136592][ C0] vfs_read+0x1f0/0x420 [ 3526.140740][ C0] ksys_read+0x12d/0x250 [ 3526.144973][ C0] ? kernel_write+0x120/0x120 [ 3526.149654][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.155624][ C0] ? do_syscall_64+0x21/0x7d0 [ 3526.160275][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.166248][ C0] do_syscall_64+0xf6/0x7d0 [ 3526.170753][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3526.176630][ C0] RIP: 0033:0x7f07c4dcd910 [ 3526.181031][ C0] Code: Bad RIP value. [ 3526.185081][ C0] RSP: 002b:00007ffdb3e4f1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3526.193493][ C0] RAX: ffffffffffffffda RBX: 00007ffdb3e4f24f RCX: 00007f07c4dcd910 [ 3526.201441][ C0] RDX: 0000000000000001 RSI: 00007ffdb3e4f24f RDI: 0000000000000000 [ 3526.209398][ C0] RBP: 000000000000001e R08: ffffffffffffff98 R09: 00007ffdb3e4e0a0 [ 3526.217358][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3526.225317][ C0] R13: 000055e7897c8900 R14: 00007ffdb3e4f250 R15: 0000000000000012 [ 3526.233289][ C0] agetty S23128 6702 1 0x00000000 [ 3526.239611][ C0] Call Trace: [ 3526.242882][ C0] __schedule+0x8f3/0x1fc0 [ 3526.247316][ C0] ? firmware_map_remove+0x19d/0x19d [ 3526.252600][ C0] ? lock_acquire+0x1f2/0x8f0 [ 3526.257255][ C0] ? add_wait_queue+0x44/0x150 [ 3526.261998][ C0] schedule+0xd0/0x2a0 [ 3526.266062][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3526.272162][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3526.277996][ C0] ? find_held_lock+0x2d/0x110 [ 3526.282756][ C0] ? inotify_poll+0xc2/0xf0 [ 3526.287280][ C0] ? lock_downgrade+0x840/0x840 [ 3526.292137][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3526.297154][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3526.303459][ C0] ? pollwake+0x200/0x200 [ 3526.307786][ C0] do_select+0x1220/0x16f0 [ 3526.312235][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3526.317943][ C0] ? mark_lock+0x11f/0xdd0 [ 3526.322341][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3526.328921][ C0] ? poll_freewait+0x250/0x250 [ 3526.333674][ C0] ? poll_freewait+0x250/0x250 [ 3526.338425][ C0] ? poll_freewait+0x250/0x250 [ 3526.343181][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3526.349162][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3526.355142][ C0] ? find_held_lock+0x2d/0x110 [ 3526.359895][ C0] ? __might_fault+0x11f/0x1d0 [ 3526.364656][ C0] ? lock_downgrade+0x840/0x840 [ 3526.369503][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3526.374438][ C0] ? __might_fault+0x190/0x1d0 [ 3526.379189][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3526.384099][ C0] core_sys_select+0x3ba/0x8e0 [ 3526.388867][ C0] ? do_compat_pselect+0x210/0x210 [ 3526.393986][ C0] ? find_held_lock+0x2d/0x110 [ 3526.398740][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3526.404537][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.410520][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3526.416331][ C0] ? debug_object_active_state+0x294/0x360 [ 3526.422129][ C0] ? debug_object_deactivate+0x320/0x320 [ 3526.427753][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3526.433726][ C0] kern_select+0x13d/0x1c0 [ 3526.438140][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3526.443053][ C0] ? unlock_page_memcg+0x60/0x60 [ 3526.447978][ C0] ? ___might_sleep+0x15a/0x2b0 [ 3526.452819][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3526.458257][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.464216][ C0] __x64_sys_select+0xba/0x150 [ 3526.468997][ C0] do_syscall_64+0xf6/0x7d0 [ 3526.473491][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3526.479360][ C0] RIP: 0033:0x7f1a1a1e95e3 [ 3526.483759][ C0] Code: Bad RIP value. [ 3526.487805][ C0] RSP: 002b:00007ffe88b1cb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3526.496207][ C0] RAX: ffffffffffffffda RBX: 00007ffe88b1cbb0 RCX: 00007f1a1a1e95e3 [ 3526.504153][ C0] RDX: 0000000000000000 RSI: 00007ffe88b1cc70 RDI: 0000000000000005 [ 3526.512117][ C0] RBP: 00007ffe88b1cba0 R08: 0000000000000000 R09: 00007ffe88b1cc30 [ 3526.520090][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe88b1cb94 [ 3526.528062][ C0] R13: 00007ffe88b1ccf0 R14: 00007ffe88b1cbf0 R15: 0000000000000000 [ 3526.536035][ C0] agetty S26272 6703 1 0x00000000 [ 3526.542352][ C0] Call Trace: [ 3526.545642][ C0] __schedule+0x8f3/0x1fc0 [ 3526.550070][ C0] ? firmware_map_remove+0x19d/0x19d [ 3526.555881][ C0] ? lock_downgrade+0x840/0x840 [ 3526.560724][ C0] ? mark_held_locks+0x9f/0xe0 [ 3526.565487][ C0] schedule+0xd0/0x2a0 [ 3526.569562][ C0] schedule_timeout+0x55b/0x850 [ 3526.574401][ C0] ? n_tty_read+0x15a8/0x1b30 [ 3526.579067][ C0] ? usleep_range+0x160/0x160 [ 3526.583730][ C0] ? lock_release+0x800/0x800 [ 3526.588395][ C0] ? lock_downgrade+0x840/0x840 [ 3526.593250][ C0] ? print_usage_bug+0x240/0x240 [ 3526.598179][ C0] ? up_read+0x1ab/0x750 [ 3526.602412][ C0] wait_woken+0x131/0x250 [ 3526.606732][ C0] ? woken_wake_function+0x70/0x70 [ 3526.611848][ C0] n_tty_read+0x15bc/0x1b30 [ 3526.616369][ C0] ? __ldsem_down_read_nested+0xf3/0x850 [ 3526.622001][ C0] ? __ldsem_down_write_nested+0x8f0/0x8f0 [ 3526.627797][ C0] ? copy_from_read_buf+0x500/0x500 [ 3526.633002][ C0] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 3526.638803][ C0] tty_read+0x190/0x290 [ 3526.642935][ C0] ? copy_from_read_buf+0x500/0x500 [ 3526.648128][ C0] ? tty_poll+0x180/0x180 [ 3526.652461][ C0] __vfs_read+0x76/0x100 [ 3526.656698][ C0] vfs_read+0x1f0/0x420 [ 3526.660832][ C0] ksys_read+0x12d/0x250 [ 3526.665061][ C0] ? kernel_write+0x120/0x120 [ 3526.669737][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.675722][ C0] ? do_syscall_64+0x21/0x7d0 [ 3526.680374][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.686367][ C0] do_syscall_64+0xf6/0x7d0 [ 3526.690876][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3526.696757][ C0] RIP: 0033:0x7f9adb1f7910 [ 3526.701155][ C0] Code: Bad RIP value. [ 3526.705205][ C0] RSP: 002b:00007ffc9bea65b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3526.713602][ C0] RAX: ffffffffffffffda RBX: 00007ffc9bea661f RCX: 00007f9adb1f7910 [ 3526.721551][ C0] RDX: 0000000000000001 RSI: 00007ffc9bea661f RDI: 0000000000000000 [ 3526.729510][ C0] RBP: 000000000000001e R08: ffffffffffffff98 R09: 00007ffc9bea5470 [ 3526.737481][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3526.745438][ C0] R13: 00005572532e5900 R14: 00007ffc9bea6620 R15: 0000000000000012 [ 3526.753410][ C0] agetty S26640 6704 1 0x00000000 [ 3526.759731][ C0] Call Trace: [ 3526.763012][ C0] __schedule+0x8f3/0x1fc0 [ 3526.767431][ C0] ? firmware_map_remove+0x19d/0x19d [ 3526.772708][ C0] ? lock_acquire+0x1f2/0x8f0 [ 3526.777366][ C0] ? add_wait_queue+0x44/0x150 [ 3526.782115][ C0] schedule+0xd0/0x2a0 [ 3526.786183][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3526.792253][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3526.798045][ C0] ? find_held_lock+0x2d/0x110 [ 3526.802787][ C0] ? inotify_poll+0xc2/0xf0 [ 3526.807287][ C0] ? lock_downgrade+0x840/0x840 [ 3526.812133][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3526.817141][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3526.823442][ C0] ? pollwake+0x200/0x200 [ 3526.827875][ C0] do_select+0x1220/0x16f0 [ 3526.832312][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3526.838021][ C0] ? mark_lock+0x11f/0xdd0 [ 3526.842419][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3526.849003][ C0] ? poll_freewait+0x250/0x250 [ 3526.853768][ C0] ? poll_freewait+0x250/0x250 [ 3526.858524][ C0] ? poll_freewait+0x250/0x250 [ 3526.863295][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3526.869286][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3526.875258][ C0] ? find_held_lock+0x2d/0x110 [ 3526.880001][ C0] ? __might_fault+0x11f/0x1d0 [ 3526.884757][ C0] ? lock_downgrade+0x840/0x840 [ 3526.889604][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3526.894552][ C0] ? __might_fault+0x190/0x1d0 [ 3526.899295][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3526.904204][ C0] core_sys_select+0x3ba/0x8e0 [ 3526.908979][ C0] ? do_compat_pselect+0x210/0x210 [ 3526.914079][ C0] ? find_held_lock+0x2d/0x110 [ 3526.918830][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3526.924624][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.930619][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3526.936428][ C0] ? debug_object_active_state+0x294/0x360 [ 3526.942224][ C0] ? debug_object_deactivate+0x320/0x320 [ 3526.947851][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3526.953842][ C0] kern_select+0x13d/0x1c0 [ 3526.958246][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3526.963161][ C0] ? unlock_page_memcg+0x60/0x60 [ 3526.968088][ C0] ? ___might_sleep+0x15a/0x2b0 [ 3526.972937][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3526.978372][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3526.984344][ C0] __x64_sys_select+0xba/0x150 [ 3526.989122][ C0] do_syscall_64+0xf6/0x7d0 [ 3526.993630][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3526.999500][ C0] RIP: 0033:0x7f7eff2e75e3 [ 3527.003898][ C0] Code: Bad RIP value. [ 3527.007948][ C0] RSP: 002b:00007ffdc73d3d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3527.016357][ C0] RAX: ffffffffffffffda RBX: 00007ffdc73d3db0 RCX: 00007f7eff2e75e3 [ 3527.024326][ C0] RDX: 0000000000000000 RSI: 00007ffdc73d3e70 RDI: 0000000000000005 [ 3527.032288][ C0] RBP: 00007ffdc73d3da0 R08: 0000000000000000 R09: 00007ffdc73d3e30 [ 3527.040235][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc73d3d94 [ 3527.048192][ C0] R13: 00007ffdc73d3ef0 R14: 00007ffdc73d3df0 R15: 0000000000000000 [ 3527.056185][ C0] sshd S26112 6785 6698 0x00000000 [ 3527.062525][ C0] Call Trace: [ 3527.065810][ C0] __schedule+0x8f3/0x1fc0 [ 3527.070233][ C0] ? firmware_map_remove+0x19d/0x19d [ 3527.075518][ C0] ? free_object+0x70/0x70 [ 3527.079943][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3527.084895][ C0] schedule+0xd0/0x2a0 [ 3527.088967][ C0] schedule_hrtimeout_range_clock+0x166/0x340 [ 3527.095024][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3527.100808][ C0] ? lock_downgrade+0x840/0x840 [ 3527.105650][ C0] ? __pollwait+0x24f/0x430 [ 3527.110161][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3527.116157][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.122119][ C0] poll_schedule_timeout.constprop.0+0x107/0x1e0 [ 3527.128437][ C0] ? pollwake+0x200/0x200 [ 3527.132759][ C0] do_select+0x1220/0x16f0 [ 3527.137179][ C0] ? select_estimate_accuracy+0x320/0x320 [ 3527.142878][ C0] ? mark_lock+0x11f/0xdd0 [ 3527.147297][ C0] ? poll_freewait+0x250/0x250 [ 3527.152156][ C0] ? poll_freewait+0x250/0x250 [ 3527.156899][ C0] ? poll_freewait+0x250/0x250 [ 3527.161659][ C0] ? poll_freewait+0x250/0x250 [ 3527.166418][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3527.172409][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3527.178412][ C0] ? find_held_lock+0x2d/0x110 [ 3527.183155][ C0] ? __might_fault+0x11f/0x1d0 [ 3527.187919][ C0] ? lock_downgrade+0x840/0x840 [ 3527.192767][ C0] ? core_sys_select+0x1d6/0x8e0 [ 3527.197700][ C0] ? __might_fault+0x190/0x1d0 [ 3527.202464][ C0] ? core_sys_select+0x3ba/0x8e0 [ 3527.207387][ C0] core_sys_select+0x3ba/0x8e0 [ 3527.212143][ C0] ? do_compat_pselect+0x210/0x210 [ 3527.217235][ C0] ? find_held_lock+0x2d/0x110 [ 3527.221980][ C0] ? find_held_lock+0x2d/0x110 [ 3527.226736][ C0] ? lock_downgrade+0x840/0x840 [ 3527.231579][ C0] ? __might_fault+0x11f/0x1d0 [ 3527.236358][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3527.241186][ C0] ? timespec64_add_safe+0x189/0x210 [ 3527.246466][ C0] ? nsec_to_clock_t+0x30/0x30 [ 3527.251229][ C0] kern_select+0x13d/0x1c0 [ 3527.255665][ C0] ? core_sys_select+0x8e0/0x8e0 [ 3527.260749][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3527.266195][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.272186][ C0] __x64_sys_select+0xba/0x150 [ 3527.276948][ C0] do_syscall_64+0xf6/0x7d0 [ 3527.281446][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3527.287326][ C0] RIP: 0033:0x7f309ac545e3 [ 3527.291745][ C0] Code: Bad RIP value. [ 3527.295798][ C0] RSP: 002b:00007fff166b98c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3527.304213][ C0] RAX: ffffffffffffffda RBX: 00005630f3993b20 RCX: 00007f309ac545e3 [ 3527.312162][ C0] RDX: 00005630f399f3a0 RSI: 00005630f3993b20 RDI: 000000000000000c [ 3527.320109][ C0] RBP: 00005630f2c98a88 R08: 00007fff166b9950 R09: 0000000000006000 [ 3527.328095][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3527.336067][ C0] R13: 00007fff166b992f R14: 00005630f2a53be7 R15: 0000000000000003 [ 3527.347776][ C0] syz-fuzzer S27304 6791 6785 0x00000000 [ 3527.354103][ C0] Call Trace: [ 3527.357393][ C0] __schedule+0x8f3/0x1fc0 [ 3527.361797][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3527.367077][ C0] ? firmware_map_remove+0x19d/0x19d [ 3527.372350][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3527.377790][ C0] schedule+0xd0/0x2a0 [ 3527.381851][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3527.386952][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3527.392424][ C0] futex_wait+0x1e2/0x550 [ 3527.396745][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3527.401746][ C0] ? wake_up_q+0xc1/0x140 [ 3527.406063][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3527.411267][ C0] ? futex_wake+0x153/0x480 [ 3527.415776][ C0] do_futex+0x15f/0x1ad0 [ 3527.420015][ C0] ? find_held_lock+0x2d/0x110 [ 3527.424769][ C0] ? __set_current_blocked+0xcc/0x110 [ 3527.430140][ C0] ? futex_exit_release+0x60/0x60 [ 3527.435170][ C0] ? find_held_lock+0x2d/0x110 [ 3527.439912][ C0] ? __might_fault+0x11f/0x1d0 [ 3527.444696][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.450686][ C0] ? lock_downgrade+0x840/0x840 [ 3527.455538][ C0] ? _raw_spin_unlock_irq+0x55/0x80 [ 3527.460711][ C0] ? __set_current_blocked+0x6a/0x110 [ 3527.466092][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3527.471545][ C0] __x64_sys_futex+0x376/0x4f0 [ 3527.476303][ C0] ? __x64_sys_rt_sigprocmask+0x1f5/0x290 [ 3527.482010][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3527.486506][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3527.491977][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.497948][ C0] ? do_syscall_64+0x21/0x7d0 [ 3527.502616][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.508590][ C0] do_syscall_64+0xf6/0x7d0 [ 3527.513087][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3527.518966][ C0] RIP: 0033:0x460c23 [ 3527.522856][ C0] Code: Bad RIP value. [ 3527.526906][ C0] RSP: 002b:00007fff78da84f0 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 3527.535318][ C0] RAX: ffffffffffffffda RBX: 0000000001698a80 RCX: 0000000000460c23 [ 3527.543264][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001698bc8 [ 3527.551226][ C0] RBP: 00007fff78da8538 R08: 0000000000000000 R09: 0000000000000000 [ 3527.559173][ C0] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000000000ff [ 3527.567128][ C0] R13: 0000000000000000 R14: 0000000000acfb94 R15: 0000000000000000 [ 3527.575101][ C0] syz-fuzzer S28848 6792 6785 0x00000000 [ 3527.581410][ C0] Call Trace: [ 3527.584695][ C0] __schedule+0x8f3/0x1fc0 [ 3527.589120][ C0] ? firmware_map_remove+0x19d/0x19d [ 3527.594406][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3527.599347][ C0] schedule+0xd0/0x2a0 [ 3527.603394][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3527.608513][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3527.613985][ C0] futex_wait+0x1e2/0x550 [ 3527.618296][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3527.623295][ C0] ? mark_lock+0x11f/0xdd0 [ 3527.627707][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3527.633728][ C0] do_futex+0x15f/0x1ad0 [ 3527.637967][ C0] ? __might_fault+0x11f/0x1d0 [ 3527.642715][ C0] ? futex_exit_release+0x60/0x60 [ 3527.647728][ C0] ? __x64_sys_futex+0x43a/0x4f0 [ 3527.652723][ C0] ? lock_release+0x800/0x800 [ 3527.657379][ C0] ? lock_downgrade+0x840/0x840 [ 3527.662235][ C0] ? __might_fault+0x190/0x1d0 [ 3527.667016][ C0] ? ktime_get+0xff/0x2f0 [ 3527.671335][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.677327][ C0] ? ktime_get+0x1f8/0x2f0 [ 3527.681729][ C0] __x64_sys_futex+0x376/0x4f0 [ 3527.686489][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3527.690988][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3527.696434][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.702401][ C0] ? do_syscall_64+0x21/0x7d0 [ 3527.707071][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.713041][ C0] do_syscall_64+0xf6/0x7d0 [ 3527.717525][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3527.723403][ C0] RIP: 0033:0x460c23 [ 3527.727292][ C0] Code: Bad RIP value. [ 3527.731344][ C0] RSP: 002b:000000c000051e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3527.739730][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000460c23 [ 3527.747684][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001697f90 [ 3527.755642][ C0] RBP: 000000c000051ee0 R08: 0000000000000000 R09: 0000000000000000 [ 3527.763587][ C0] R10: 000000c000051ed0 R11: 0000000000000246 R12: 00000000004338c0 [ 3527.771535][ C0] R13: 0000000000000000 R14: 0000000000acfeb4 R15: 0000000000000000 [ 3527.779495][ C0] syz-fuzzer S28976 6793 6785 0x00000000 [ 3527.785810][ C0] Call Trace: [ 3527.789110][ C0] __schedule+0x8f3/0x1fc0 [ 3527.793515][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3527.798779][ C0] ? firmware_map_remove+0x19d/0x19d [ 3527.804053][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3527.809513][ C0] schedule+0xd0/0x2a0 [ 3527.813625][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3527.818760][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3527.824202][ C0] futex_wait+0x1e2/0x550 [ 3527.828528][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3527.833583][ C0] ? wake_up_q+0xc1/0x140 [ 3527.837931][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3527.843107][ C0] ? futex_wake+0x153/0x480 [ 3527.847619][ C0] ? __free_object+0x8b3/0xee0 [ 3527.852381][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.858352][ C0] do_futex+0x15f/0x1ad0 [ 3527.862573][ C0] ? free_obj_work+0x760/0x760 [ 3527.867323][ C0] ? lock_downgrade+0x840/0x840 [ 3527.872169][ C0] ? futex_exit_release+0x60/0x60 [ 3527.877211][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.883170][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3527.888987][ C0] ? free_object+0x5/0x70 [ 3527.893306][ C0] ? hrtimer_nanosleep+0x211/0x3a0 [ 3527.898408][ C0] ? nanosleep_copyout+0x100/0x100 [ 3527.903507][ C0] ? _copy_from_user+0x13c/0x1a0 [ 3527.908431][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3527.913923][ C0] __x64_sys_futex+0x376/0x4f0 [ 3527.918667][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3527.923149][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3527.928595][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.934582][ C0] ? do_syscall_64+0x21/0x7d0 [ 3527.939251][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3527.945225][ C0] do_syscall_64+0xf6/0x7d0 [ 3527.949736][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3527.955622][ C0] RIP: 0033:0x460c23 [ 3527.959514][ C0] Code: Bad RIP value. [ 3527.963554][ C0] RSP: 002b:000000c00003b6d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 3527.971942][ C0] RAX: ffffffffffffffda RBX: 000000c000042380 RCX: 0000000000460c23 [ 3527.979913][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000016b5120 [ 3527.987870][ C0] RBP: 000000c00003b720 R08: 0000000000000000 R09: 0000000000000000 [ 3527.995828][ C0] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 3528.003787][ C0] R13: 0000000000000000 R14: 0000000000acfb94 R15: 0000000000000000 [ 3528.011746][ C0] syz-fuzzer S25848 6794 6785 0x00000000 [ 3528.018053][ C0] Call Trace: [ 3528.021333][ C0] __schedule+0x8f3/0x1fc0 [ 3528.025737][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3528.031020][ C0] ? firmware_map_remove+0x19d/0x19d [ 3528.036302][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3528.041756][ C0] schedule+0xd0/0x2a0 [ 3528.045820][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3528.050933][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3528.056389][ C0] futex_wait+0x1e2/0x550 [ 3528.060699][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3528.065727][ C0] ? __local_bh_enable_ip+0x159/0x270 [ 3528.071103][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.077084][ C0] ? tcp_sendmsg+0x36/0x40 [ 3528.081478][ C0] ? tcp_sendmsg+0x36/0x40 [ 3528.085892][ C0] ? __local_bh_enable_ip+0x159/0x270 [ 3528.091251][ C0] ? tcp_sendmsg+0x36/0x40 [ 3528.095654][ C0] ? sock_sendmsg+0x120/0x120 [ 3528.100324][ C0] do_futex+0x15f/0x1ad0 [ 3528.104563][ C0] ? __fget_files+0x30d/0x500 [ 3528.109240][ C0] ? new_sync_write+0x493/0x650 [ 3528.114077][ C0] ? futex_exit_release+0x60/0x60 [ 3528.119076][ C0] ? new_sync_read+0x6d0/0x6d0 [ 3528.123831][ C0] ? rcu_read_lock_held_common+0xa0/0xa0 [ 3528.129453][ C0] ? fsnotify+0x7df/0xb50 [ 3528.133785][ C0] ? apparmor_path_rmdir+0x30/0x30 [ 3528.138870][ C0] ? fsnotify_parent+0xbf/0x2d0 [ 3528.143710][ C0] ? fsnotify_first_mark+0x200/0x200 [ 3528.149017][ C0] __x64_sys_futex+0x376/0x4f0 [ 3528.153775][ C0] ? fput_many+0x2f/0x1a0 [ 3528.158084][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3528.162568][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3528.168035][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.174003][ C0] ? do_syscall_64+0x21/0x7d0 [ 3528.178657][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.184631][ C0] do_syscall_64+0xf6/0x7d0 [ 3528.189135][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3528.195013][ C0] RIP: 0033:0x460c23 [ 3528.198905][ C0] Code: Bad RIP value. [ 3528.202942][ C0] RSP: 002b:000000c00004dee8 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 3528.211331][ C0] RAX: ffffffffffffffda RBX: 000000c000042700 RCX: 0000000000460c23 [ 3528.219299][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000c000042848 [ 3528.227258][ C0] RBP: 000000c00004df30 R08: 0000000000000000 R09: 0000000000000000 [ 3528.235218][ C0] R10: 0000000000000000 R11: 0000000000000286 R12: 000000000000011e [ 3528.243166][ C0] R13: 000000c000446000 R14: 000000000000000f R15: 00000000000002ec [ 3528.251141][ C0] syz-fuzzer S25760 6795 6785 0x00000000 [ 3528.257451][ C0] Call Trace: [ 3528.260737][ C0] __schedule+0x8f3/0x1fc0 [ 3528.265153][ C0] ? firmware_map_remove+0x19d/0x19d [ 3528.270443][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3528.275379][ C0] schedule+0xd0/0x2a0 [ 3528.279435][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3528.284539][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3528.290013][ C0] futex_wait+0x1e2/0x550 [ 3528.294351][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3528.299366][ C0] ? mark_lock+0x11f/0xdd0 [ 3528.303763][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3528.309763][ C0] do_futex+0x15f/0x1ad0 [ 3528.314001][ C0] ? __might_fault+0x11f/0x1d0 [ 3528.318786][ C0] ? futex_exit_release+0x60/0x60 [ 3528.323786][ C0] ? __x64_sys_futex+0x43a/0x4f0 [ 3528.328716][ C0] ? lock_release+0x800/0x800 [ 3528.333382][ C0] ? lock_downgrade+0x840/0x840 [ 3528.338246][ C0] ? __might_fault+0x190/0x1d0 [ 3528.342991][ C0] ? ktime_get+0xff/0x2f0 [ 3528.347310][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.353324][ C0] ? ktime_get+0x1f8/0x2f0 [ 3528.357750][ C0] __x64_sys_futex+0x376/0x4f0 [ 3528.362492][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3528.366986][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3528.372432][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.378404][ C0] ? do_syscall_64+0x21/0x7d0 [ 3528.383084][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.389059][ C0] do_syscall_64+0xf6/0x7d0 [ 3528.393553][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3528.399432][ C0] RIP: 0033:0x460c23 [ 3528.403309][ C0] Code: Bad RIP value. [ 3528.407359][ C0] RSP: 002b:000000c0000406a0 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca [ 3528.415759][ C0] RAX: ffffffffffffffda RBX: 0000000024f341b7 RCX: 0000000000460c23 [ 3528.423705][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000169c060 [ 3528.431654][ C0] RBP: 000000c0000406e8 R08: 0000000000000000 R09: 0000000000000000 [ 3528.439600][ C0] R10: 000000c0000406d8 R11: 0000000000000206 R12: 0000033ba9128727 [ 3528.447556][ C0] R13: 0000000000000001 R14: 0000033ba9128727 R15: 0000000000000000 [ 3528.455527][ C0] syz-fuzzer S23504 6796 6785 0x00000000 [ 3528.461836][ C0] Call Trace: [ 3528.465124][ C0] __schedule+0x8f3/0x1fc0 [ 3528.469549][ C0] ? firmware_map_remove+0x19d/0x19d [ 3528.474864][ C0] schedule+0xd0/0x2a0 [ 3528.478929][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3528.484999][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3528.490814][ C0] ? lock_downgrade+0x840/0x840 [ 3528.495659][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3528.500748][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3528.506028][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.512015][ C0] ep_poll+0xcef/0xf00 [ 3528.516079][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3528.521344][ C0] ? __fget_files+0x32f/0x500 [ 3528.526038][ C0] ? ksys_dup3+0x3c0/0x3c0 [ 3528.530455][ C0] ? finish_wait+0x260/0x260 [ 3528.535074][ C0] ? __x64_sys_futex+0x376/0x4f0 [ 3528.540024][ C0] do_epoll_wait+0x209/0x260 [ 3528.544605][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.550601][ C0] __x64_sys_epoll_pwait+0x133/0x2e0 [ 3528.555892][ C0] do_syscall_64+0xf6/0x7d0 [ 3528.560390][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3528.566286][ C0] RIP: 0033:0x460dd0 [ 3528.570186][ C0] Code: Bad RIP value. [ 3528.574239][ C0] RSP: 002b:000000c0000e3860 EFLAGS: 00000202 ORIG_RAX: 0000000000000119 [ 3528.582624][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000460dd0 [ 3528.590585][ C0] RDX: 0000000000000080 RSI: 000000c0000e38a0 RDI: 0000000000000005 [ 3528.598545][ C0] RBP: 000000c0000e3ea0 R08: 0000000000000000 R09: 000000c017610000 [ 3528.606500][ C0] R10: 00000000ffffffff R11: 0000000000000202 R12: 00000000000000f1 [ 3528.614470][ C0] R13: 0000000000000000 R14: 0000000000acfb1e R15: 0000000000000000 [ 3528.622442][ C0] syz-fuzzer S25848 6797 6785 0x00000000 [ 3528.628759][ C0] Call Trace: [ 3528.632042][ C0] __schedule+0x8f3/0x1fc0 [ 3528.636456][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3528.641720][ C0] ? firmware_map_remove+0x19d/0x19d [ 3528.646999][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3528.652460][ C0] schedule+0xd0/0x2a0 [ 3528.656507][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3528.661594][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3528.667087][ C0] ? lock_downgrade+0x840/0x840 [ 3528.671927][ C0] futex_wait+0x1e2/0x550 [ 3528.676246][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3528.681248][ C0] ? wait_for_completion+0x270/0x270 [ 3528.686557][ C0] do_futex+0x15f/0x1ad0 [ 3528.690804][ C0] ? __fget_files+0x30d/0x500 [ 3528.695487][ C0] ? new_sync_read+0x46e/0x6d0 [ 3528.700245][ C0] ? futex_exit_release+0x60/0x60 [ 3528.705258][ C0] ? vfs_dedupe_file_range+0x760/0x760 [ 3528.710747][ C0] ? security_file_permission+0x8c/0x470 [ 3528.716374][ C0] __x64_sys_futex+0x376/0x4f0 [ 3528.721116][ C0] ? fput_many+0x2f/0x1a0 [ 3528.725435][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3528.729946][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3528.735395][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.741354][ C0] ? do_syscall_64+0x21/0x7d0 [ 3528.746039][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.752016][ C0] do_syscall_64+0xf6/0x7d0 [ 3528.756560][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3528.762462][ C0] RIP: 0033:0x460c23 [ 3528.766351][ C0] Code: Bad RIP value. [ 3528.770410][ C0] RSP: 002b:000000c0000dddf8 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 3528.778807][ C0] RAX: ffffffffffffffda RBX: 000000c000042a80 RCX: 0000000000460c23 [ 3528.786766][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000c000042bc8 [ 3528.794725][ C0] RBP: 000000c0000dde40 R08: 0000000000000000 R09: 0000000000000000 [ 3528.802672][ C0] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 3528.810630][ C0] R13: 0000000000000001 R14: 000000c004329260 R15: 0000000000000000 [ 3528.818604][ C0] syz-fuzzer S29792 6804 6785 0x00000000 [ 3528.824922][ C0] Call Trace: [ 3528.828218][ C0] __schedule+0x8f3/0x1fc0 [ 3528.832637][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3528.837906][ C0] ? firmware_map_remove+0x19d/0x19d [ 3528.843170][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3528.848624][ C0] schedule+0xd0/0x2a0 [ 3528.852685][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3528.857773][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3528.863210][ C0] futex_wait+0x1e2/0x550 [ 3528.867538][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3528.872553][ C0] ? mark_lock+0x11f/0xdd0 [ 3528.876950][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3528.881966][ C0] ? mark_lock+0x11f/0xdd0 [ 3528.886398][ C0] do_futex+0x15f/0x1ad0 [ 3528.890649][ C0] ? __lock_acquire+0xc6c/0x48a0 [ 3528.895591][ C0] ? futex_exit_release+0x60/0x60 [ 3528.900591][ C0] ? lock_downgrade+0x840/0x840 [ 3528.905446][ C0] ? recalc_sigpending+0x9c/0xe0 [ 3528.910387][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3528.916355][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3528.921527][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.927524][ C0] ? find_held_lock+0x2d/0x110 [ 3528.932298][ C0] __x64_sys_futex+0x376/0x4f0 [ 3528.937069][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3528.941573][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3528.947028][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.952999][ C0] ? do_syscall_64+0x21/0x7d0 [ 3528.957655][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3528.963613][ C0] do_syscall_64+0xf6/0x7d0 [ 3528.968128][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3528.974014][ C0] RIP: 0033:0x460c23 [ 3528.977897][ C0] Code: Bad RIP value. [ 3528.981943][ C0] RSP: 002b:000000c0002f5f00 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 3528.990336][ C0] RAX: ffffffffffffffda RBX: 000000c000042e00 RCX: 0000000000460c23 [ 3528.998307][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000016b4fd8 [ 3529.006281][ C0] RBP: 000000c0002f5f48 R08: 0000000000000000 R09: 0000000000000000 [ 3529.014252][ C0] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000004338c0 [ 3529.022210][ C0] R13: 0000000000000000 R14: 0000000000acfeb4 R15: 0000000000000000 [ 3529.030191][ C0] syz-fuzzer S23896 6805 6785 0x00000000 [ 3529.036534][ C0] Call Trace: [ 3529.039819][ C0] __schedule+0x8f3/0x1fc0 [ 3529.044221][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3529.049502][ C0] ? firmware_map_remove+0x19d/0x19d [ 3529.054794][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3529.060245][ C0] schedule+0xd0/0x2a0 [ 3529.064302][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3529.069415][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3529.074863][ C0] ? mark_lock+0x11f/0xdd0 [ 3529.079254][ C0] ? find_held_lock+0x2d/0x110 [ 3529.084003][ C0] futex_wait+0x1e2/0x550 [ 3529.088329][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3529.093352][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3529.098364][ C0] ? finish_task_switch+0x147/0x750 [ 3529.103536][ C0] ? finish_task_switch+0x119/0x750 [ 3529.108739][ C0] ? __free_object+0x8b3/0xee0 [ 3529.113507][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.119479][ C0] do_futex+0x15f/0x1ad0 [ 3529.123701][ C0] ? free_obj_work+0x760/0x760 [ 3529.128452][ C0] ? lock_downgrade+0x840/0x840 [ 3529.133293][ C0] ? futex_exit_release+0x60/0x60 [ 3529.138308][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.144277][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3529.150092][ C0] ? free_object+0x5/0x70 [ 3529.154410][ C0] ? hrtimer_nanosleep+0x211/0x3a0 [ 3529.159497][ C0] ? nanosleep_copyout+0x100/0x100 [ 3529.164599][ C0] ? _copy_from_user+0x13c/0x1a0 [ 3529.169546][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3529.175005][ C0] __x64_sys_futex+0x376/0x4f0 [ 3529.179749][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3529.184231][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3529.189680][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.195652][ C0] ? do_syscall_64+0x21/0x7d0 [ 3529.200304][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.206393][ C0] do_syscall_64+0xf6/0x7d0 [ 3529.210902][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3529.216782][ C0] RIP: 0033:0x460c23 [ 3529.220660][ C0] Code: Bad RIP value. [ 3529.224708][ C0] RSP: 002b:000000c00004fdf8 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 3529.233145][ C0] RAX: ffffffffffffffda RBX: 000000c000043180 RCX: 0000000000460c23 [ 3529.241093][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000c0000432c8 [ 3529.249053][ C0] RBP: 000000c00004fe40 R08: 0000000000000000 R09: 0000000000000000 [ 3529.257022][ C0] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 3529.264992][ C0] R13: 0000000000000001 R14: 000000c00717b2c0 R15: 0000000000000000 [ 3529.272998][ C0] syz-fuzzer S25848 6806 6785 0x00000000 [ 3529.279324][ C0] Call Trace: [ 3529.282597][ C0] __schedule+0x8f3/0x1fc0 [ 3529.287007][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3529.292328][ C0] ? firmware_map_remove+0x19d/0x19d [ 3529.297594][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3529.303061][ C0] schedule+0xd0/0x2a0 [ 3529.307125][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3529.312225][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3529.317668][ C0] futex_wait+0x1e2/0x550 [ 3529.321979][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3529.326998][ C0] ? rcu_read_lock_any_held+0xcd/0xf0 [ 3529.332360][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 3529.337627][ C0] ? __this_cpu_preempt_check+0x28/0x190 [ 3529.343241][ C0] ? __sb_end_write+0x101/0x1d0 [ 3529.348106][ C0] do_futex+0x15f/0x1ad0 [ 3529.352343][ C0] ? __fget_files+0x30d/0x500 [ 3529.357002][ C0] ? new_sync_write+0x493/0x650 [ 3529.361846][ C0] ? futex_exit_release+0x60/0x60 [ 3529.366858][ C0] ? new_sync_read+0x6d0/0x6d0 [ 3529.371625][ C0] ? rcu_read_lock_held_common+0xa0/0xa0 [ 3529.377265][ C0] ? fsnotify+0x7df/0xb50 [ 3529.381586][ C0] ? apparmor_path_rmdir+0x30/0x30 [ 3529.386685][ C0] ? fsnotify_parent+0xbf/0x2d0 [ 3529.391562][ C0] ? fsnotify_first_mark+0x200/0x200 [ 3529.396859][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3529.402300][ C0] __x64_sys_futex+0x376/0x4f0 [ 3529.407058][ C0] ? fput_many+0x2f/0x1a0 [ 3529.411375][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3529.415875][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3529.421311][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.427282][ C0] ? do_syscall_64+0x21/0x7d0 [ 3529.431959][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.437934][ C0] do_syscall_64+0xf6/0x7d0 [ 3529.442420][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3529.448316][ C0] RIP: 0033:0x460c23 [ 3529.452209][ C0] Code: Bad RIP value. [ 3529.456251][ C0] RSP: 002b:000000c0002f3ee8 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 3529.464645][ C0] RAX: ffffffffffffffda RBX: 000000c000043500 RCX: 0000000000460c23 [ 3529.472620][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000c000043648 [ 3529.480580][ C0] RBP: 000000c0002f3f30 R08: 0000000000000000 R09: 0000000000000000 [ 3529.488554][ C0] R10: 0000000000000000 R11: 0000000000000286 R12: 00000000000000f1 [ 3529.496515][ C0] R13: 0000000000000000 R14: 0000000000acfb1e R15: 0000000000000000 [ 3529.504499][ C0] syz-fuzzer S26280 9780 6785 0x00000000 [ 3529.510857][ C0] Call Trace: [ 3529.514163][ C0] __schedule+0x8f3/0x1fc0 [ 3529.518564][ C0] ? firmware_map_remove+0x19d/0x19d [ 3529.523843][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3529.528775][ C0] schedule+0xd0/0x2a0 [ 3529.532835][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3529.537924][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3529.543362][ C0] futex_wait+0x1e2/0x550 [ 3529.547690][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3529.552703][ C0] ? mark_lock+0x11f/0xdd0 [ 3529.557099][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3529.563072][ C0] do_futex+0x15f/0x1ad0 [ 3529.567310][ C0] ? __might_fault+0x11f/0x1d0 [ 3529.572076][ C0] ? futex_exit_release+0x60/0x60 [ 3529.577079][ C0] ? __x64_sys_futex+0x43a/0x4f0 [ 3529.581997][ C0] ? lock_release+0x800/0x800 [ 3529.586667][ C0] ? lock_downgrade+0x840/0x840 [ 3529.591519][ C0] ? __might_fault+0x190/0x1d0 [ 3529.596274][ C0] ? ktime_get+0xff/0x2f0 [ 3529.600580][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.606557][ C0] ? ktime_get+0x1f8/0x2f0 [ 3529.610982][ C0] __x64_sys_futex+0x376/0x4f0 [ 3529.615739][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3529.620224][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3529.625672][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.631639][ C0] ? do_syscall_64+0x21/0x7d0 [ 3529.636311][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.642281][ C0] do_syscall_64+0xf6/0x7d0 [ 3529.646778][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3529.652657][ C0] RIP: 0033:0x460c23 [ 3529.656538][ C0] Code: Bad RIP value. [ 3529.660578][ C0] RSP: 002b:000000c00003bea0 EFLAGS: 00000202 ORIG_RAX: 00000000000000ca [ 3529.668971][ C0] RAX: ffffffffffffffda RBX: 0000000016aaf9ae RCX: 0000000000460c23 [ 3529.676946][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000169bfe0 [ 3529.684907][ C0] RBP: 000000c00003bee8 R08: 0000000000000000 R09: 0000000000000000 [ 3529.692880][ C0] R10: 000000c00003bed8 R11: 0000000000000202 R12: 00000330f7b90ad7 [ 3529.700831][ C0] R13: 0000000000000001 R14: 00000330f7b90ad7 R15: 00000000000002c3 [ 3529.708826][ C0] syz-executor.0 S27304 6808 6797 0x00000000 [ 3529.715162][ C0] Call Trace: [ 3529.718447][ C0] __schedule+0x8f3/0x1fc0 [ 3529.722849][ C0] ? do_wait+0x581/0xa00 [ 3529.727089][ C0] ? firmware_map_remove+0x19d/0x19d [ 3529.732361][ C0] ? release_task+0x15a0/0x15a0 [ 3529.737210][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3529.743007][ C0] schedule+0xd0/0x2a0 [ 3529.747065][ C0] do_wait+0x63c/0xa00 [ 3529.751123][ C0] ? wait_consider_task+0x37a0/0x37a0 [ 3529.756499][ C0] kernel_wait4+0x14c/0x260 [ 3529.760981][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 3529.766106][ C0] ? task_stopped_code+0x180/0x180 [ 3529.771229][ C0] ? lock_downgrade+0x840/0x840 [ 3529.776061][ C0] __do_sys_wait4+0x147/0x160 [ 3529.780715][ C0] ? kernel_wait4+0x260/0x260 [ 3529.785387][ C0] ? up_read+0x1ab/0x750 [ 3529.789633][ C0] ? down_read_nested+0x420/0x420 [ 3529.794658][ C0] ? vmacache_update+0xce/0x140 [ 3529.799520][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3529.804965][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.810954][ C0] ? do_syscall_64+0x21/0x7d0 [ 3529.815640][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.821601][ C0] do_syscall_64+0xf6/0x7d0 [ 3529.826099][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3529.831991][ C0] RIP: 0033:0x41690a [ 3529.835898][ C0] Code: Bad RIP value. [ 3529.839939][ C0] RSP: 002b:00007ffd2d10f188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 3529.848335][ C0] RAX: ffffffffffffffda RBX: 0000000000001a99 RCX: 000000000041690a [ 3529.856310][ C0] RDX: 0000000040000000 RSI: 00007ffd2d10f194 RDI: ffffffffffffffff [ 3529.864270][ C0] RBP: 00000000000000f8 R08: 0000000000000001 R09: 0000000000000001 [ 3529.872240][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004185d0 [ 3529.880199][ C0] R13: 00007ffd2d10f418 R14: 0000000000000000 R15: 0000000000000000 [ 3529.888179][ C0] syz-executor.0 S23784 6809 6808 0x00000000 [ 3529.894513][ C0] Call Trace: [ 3529.897797][ C0] __schedule+0x8f3/0x1fc0 [ 3529.902206][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.908184][ C0] ? firmware_map_remove+0x19d/0x19d [ 3529.913477][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3529.918937][ C0] schedule+0xd0/0x2a0 [ 3529.922986][ C0] pipe_read+0xa02/0x1050 [ 3529.927320][ C0] ? pipe_ioctl+0x250/0x250 [ 3529.931820][ C0] ? finish_wait+0x260/0x260 [ 3529.936394][ C0] ? debug_object_active_state+0x294/0x360 [ 3529.942196][ C0] new_sync_read+0x5b5/0x6d0 [ 3529.946777][ C0] ? vfs_dedupe_file_range+0x760/0x760 [ 3529.952231][ C0] ? debug_object_active_state+0x294/0x360 [ 3529.958024][ C0] ? security_file_permission+0x8c/0x470 [ 3529.963650][ C0] __vfs_read+0xc9/0x100 [ 3529.967885][ C0] vfs_read+0x1f0/0x420 [ 3529.972035][ C0] ksys_read+0x1ee/0x250 [ 3529.976271][ C0] ? kernel_write+0x120/0x120 [ 3529.980949][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.986930][ C0] ? do_syscall_64+0x21/0x7d0 [ 3529.991596][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3529.997557][ C0] do_syscall_64+0xf6/0x7d0 [ 3530.002057][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3530.007935][ C0] RIP: 0033:0x4165e0 [ 3530.011828][ C0] Code: Bad RIP value. [ 3530.015870][ C0] RSP: 002b:0000000000c9fda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3530.024267][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000004165e0 [ 3530.032226][ C0] RDX: 0000000000000038 RSI: 0000000000788020 RDI: 00000000000000f9 [ 3530.040197][ C0] RBP: 0000000000001e17 R08: 00000000000003b8 R09: 0000000000004000 [ 3530.048153][ C0] R10: 000000000073f640 R11: 0000000000000246 R12: 0000000000000000 [ 3530.056120][ C0] R13: 0000000000c9fde0 R14: 000000000035832d R15: 0000000000c9fdf0 [ 3530.064091][ C0] bond0 I30816 6838 2 0x80004000 [ 3530.070436][ C0] Call Trace: [ 3530.073722][ C0] __schedule+0x8f3/0x1fc0 [ 3530.078136][ C0] ? rescuer_thread+0x691/0xbc0 [ 3530.082966][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.088238][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3530.093254][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3530.098450][ C0] schedule+0xd0/0x2a0 [ 3530.102521][ C0] rescuer_thread+0x6ed/0xbc0 [ 3530.107204][ C0] ? worker_thread+0xe20/0xe20 [ 3530.111968][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3530.116970][ C0] ? worker_thread+0xe20/0xe20 [ 3530.121711][ C0] kthread+0x388/0x470 [ 3530.125770][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.131487][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.137210][ C0] ret_from_fork+0x24/0x30 [ 3530.141633][ C0] wg-crypt-wg0 I30816 6921 2 0x80004000 [ 3530.147983][ C0] Call Trace: [ 3530.151266][ C0] __schedule+0x8f3/0x1fc0 [ 3530.155676][ C0] ? rescuer_thread+0x691/0xbc0 [ 3530.160543][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.165840][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3530.170866][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3530.176056][ C0] schedule+0xd0/0x2a0 [ 3530.180125][ C0] rescuer_thread+0x6ed/0xbc0 [ 3530.184809][ C0] ? worker_thread+0xe20/0xe20 [ 3530.189580][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3530.194612][ C0] ? worker_thread+0xe20/0xe20 [ 3530.199355][ C0] kthread+0x388/0x470 [ 3530.203411][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.209117][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.214826][ C0] ret_from_fork+0x24/0x30 [ 3530.219227][ C0] syz-executor.1 S27224 6922 6797 0x00000000 [ 3530.225541][ C0] Call Trace: [ 3530.228841][ C0] __schedule+0x8f3/0x1fc0 [ 3530.233244][ C0] ? do_wait+0x581/0xa00 [ 3530.237496][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.242756][ C0] ? release_task+0x15a0/0x15a0 [ 3530.247599][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3530.253399][ C0] schedule+0xd0/0x2a0 [ 3530.257448][ C0] do_wait+0x63c/0xa00 [ 3530.261505][ C0] ? wait_consider_task+0x37a0/0x37a0 [ 3530.266881][ C0] kernel_wait4+0x14c/0x260 [ 3530.271384][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 3530.276511][ C0] ? task_stopped_code+0x180/0x180 [ 3530.281607][ C0] ? lock_downgrade+0x840/0x840 [ 3530.286453][ C0] __do_sys_wait4+0x147/0x160 [ 3530.291128][ C0] ? kernel_wait4+0x260/0x260 [ 3530.295801][ C0] ? up_read+0x1ab/0x750 [ 3530.300023][ C0] ? down_read_nested+0x420/0x420 [ 3530.305043][ C0] ? vmacache_update+0xce/0x140 [ 3530.309900][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3530.315353][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.321315][ C0] ? do_syscall_64+0x21/0x7d0 [ 3530.325986][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.331981][ C0] do_syscall_64+0xf6/0x7d0 [ 3530.336468][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3530.342344][ C0] RIP: 0033:0x41690a [ 3530.346236][ C0] Code: Bad RIP value. [ 3530.350296][ C0] RSP: 002b:00007ffcfd883b08 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 3530.358695][ C0] RAX: ffffffffffffffda RBX: 0000000000001b25 RCX: 000000000041690a [ 3530.366653][ C0] RDX: 0000000040000000 RSI: 00007ffcfd883b14 RDI: ffffffffffffffff [ 3530.374625][ C0] RBP: 00000000000000f8 R08: 0000000000000001 R09: 0000000000000001 [ 3530.382685][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004185d0 [ 3530.390641][ C0] R13: 00007ffcfd883d98 R14: 0000000000000000 R15: 0000000000000000 [ 3530.398618][ C0] wg-crypt-wg1 I30816 6925 2 0x80004000 [ 3530.404962][ C0] Call Trace: [ 3530.408259][ C0] __schedule+0x8f3/0x1fc0 [ 3530.412665][ C0] ? rescuer_thread+0x691/0xbc0 [ 3530.417529][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.422790][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3530.427804][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3530.433014][ C0] schedule+0xd0/0x2a0 [ 3530.437066][ C0] rescuer_thread+0x6ed/0xbc0 [ 3530.441732][ C0] ? worker_thread+0xe20/0xe20 [ 3530.446493][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3530.451515][ C0] ? worker_thread+0xe20/0xe20 [ 3530.456273][ C0] kthread+0x388/0x470 [ 3530.460321][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.466031][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.471758][ C0] ret_from_fork+0x24/0x30 [ 3530.476179][ C0] wg-crypt-wg2 I30816 6928 2 0x80004000 [ 3530.482515][ C0] Call Trace: [ 3530.485805][ C0] __schedule+0x8f3/0x1fc0 [ 3530.490226][ C0] ? rescuer_thread+0x691/0xbc0 [ 3530.495070][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.500332][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3530.505351][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3530.510549][ C0] schedule+0xd0/0x2a0 [ 3530.514610][ C0] rescuer_thread+0x6ed/0xbc0 [ 3530.519273][ C0] ? worker_thread+0xe20/0xe20 [ 3530.524068][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3530.529096][ C0] ? worker_thread+0xe20/0xe20 [ 3530.533856][ C0] kthread+0x388/0x470 [ 3530.537916][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.543611][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3530.549325][ C0] ret_from_fork+0x24/0x30 [ 3530.553747][ C0] syz-executor.1 S24128 6949 6922 0x00000000 [ 3530.560078][ C0] Call Trace: [ 3530.563366][ C0] __schedule+0x8f3/0x1fc0 [ 3530.567777][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.573763][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.579028][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3530.584486][ C0] schedule+0xd0/0x2a0 [ 3530.588561][ C0] pipe_read+0xa02/0x1050 [ 3530.592885][ C0] ? pipe_ioctl+0x250/0x250 [ 3530.597394][ C0] ? finish_wait+0x260/0x260 [ 3530.601963][ C0] ? debug_object_active_state+0x294/0x360 [ 3530.607766][ C0] new_sync_read+0x5b5/0x6d0 [ 3530.612361][ C0] ? vfs_dedupe_file_range+0x760/0x760 [ 3530.617810][ C0] ? debug_object_active_state+0x294/0x360 [ 3530.623599][ C0] ? security_file_permission+0x8c/0x470 [ 3530.629227][ C0] __vfs_read+0xc9/0x100 [ 3530.633472][ C0] vfs_read+0x1f0/0x420 [ 3530.637609][ C0] ksys_read+0x1ee/0x250 [ 3530.641828][ C0] ? kernel_write+0x120/0x120 [ 3530.646493][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.652478][ C0] ? do_syscall_64+0x21/0x7d0 [ 3530.657136][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.663095][ C0] do_syscall_64+0xf6/0x7d0 [ 3530.667598][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3530.673478][ C0] RIP: 0033:0x4165e0 [ 3530.677361][ C0] Code: Bad RIP value. [ 3530.681411][ C0] RSP: 002b:0000000000c9fda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3530.689807][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004165e0 [ 3530.697778][ C0] RDX: 0000000000000038 RSI: 0000000000788020 RDI: 00000000000000f9 [ 3530.705864][ C0] RBP: 0000000000003920 R08: 0000000000006000 R09: 0000000000004000 [ 3530.713827][ C0] R10: 0000000000c9f740 R11: 0000000000000246 R12: 0000000000000000 [ 3530.721787][ C0] R13: 0000000000c9fde0 R14: 0000000000358547 R15: 0000000000c9fdf0 [ 3530.729768][ C0] syz-executor.2 S27304 6992 6805 0x00000000 [ 3530.736097][ C0] Call Trace: [ 3530.739371][ C0] __schedule+0x8f3/0x1fc0 [ 3530.743777][ C0] ? do_wait+0x581/0xa00 [ 3530.748017][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.753289][ C0] ? release_task+0x15a0/0x15a0 [ 3530.758126][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3530.763913][ C0] schedule+0xd0/0x2a0 [ 3530.767971][ C0] do_wait+0x63c/0xa00 [ 3530.772031][ C0] ? wait_consider_task+0x37a0/0x37a0 [ 3530.777385][ C0] kernel_wait4+0x14c/0x260 [ 3530.781876][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 3530.786983][ C0] ? task_stopped_code+0x180/0x180 [ 3530.792100][ C0] ? lock_downgrade+0x840/0x840 [ 3530.796967][ C0] __do_sys_wait4+0x147/0x160 [ 3530.801634][ C0] ? kernel_wait4+0x260/0x260 [ 3530.806308][ C0] ? up_read+0x1ab/0x750 [ 3530.810550][ C0] ? down_read_nested+0x420/0x420 [ 3530.815606][ C0] ? vmacache_update+0xce/0x140 [ 3530.820456][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3530.825916][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.831888][ C0] ? do_syscall_64+0x21/0x7d0 [ 3530.836547][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.842507][ C0] do_syscall_64+0xf6/0x7d0 [ 3530.847009][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3530.852889][ C0] RIP: 0033:0x41690a [ 3530.856770][ C0] Code: Bad RIP value. [ 3530.860811][ C0] RSP: 002b:00007ffc8a2c9fa8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 3530.869206][ C0] RAX: ffffffffffffffda RBX: 0000000000001b53 RCX: 000000000041690a [ 3530.877179][ C0] RDX: 0000000040000000 RSI: 00007ffc8a2c9fb4 RDI: ffffffffffffffff [ 3530.885140][ C0] RBP: 00000000000000f8 R08: 0000000000000001 R09: 0000000000000001 [ 3530.893097][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004185d0 [ 3530.901050][ C0] R13: 00007ffc8a2ca238 R14: 0000000000000000 R15: 0000000000000000 [ 3530.909049][ C0] syz-executor.2 S22280 6995 6992 0x00000000 [ 3530.915387][ C0] Call Trace: [ 3530.918659][ C0] __schedule+0x8f3/0x1fc0 [ 3530.923056][ C0] ? firmware_map_remove+0x19d/0x19d [ 3530.928330][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3530.934308][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3530.939258][ C0] schedule+0xd0/0x2a0 [ 3530.943329][ C0] do_nanosleep+0x21f/0x640 [ 3530.947844][ C0] ? schedule_timeout_idle+0x80/0x80 [ 3530.953149][ C0] ? memset+0x20/0x40 [ 3530.957143][ C0] ? __hrtimer_init+0x13b/0x270 [ 3530.961992][ C0] hrtimer_nanosleep+0x1df/0x3a0 [ 3530.966923][ C0] ? nanosleep_copyout+0x100/0x100 [ 3530.972026][ C0] ? _copy_from_user+0x13c/0x1a0 [ 3530.976955][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3530.982911][ C0] ? put_old_itimerspec32+0x1d0/0x1d0 [ 3530.988280][ C0] ? __this_cpu_preempt_check+0x84/0x190 [ 3530.993904][ C0] __x64_sys_nanosleep+0x1dc/0x260 [ 3530.999007][ C0] ? hrtimer_nanosleep+0x3a0/0x3a0 [ 3531.004092][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.010068][ C0] ? do_syscall_64+0x21/0x7d0 [ 3531.014764][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.020752][ C0] do_syscall_64+0xf6/0x7d0 [ 3531.025281][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3531.031183][ C0] RIP: 0033:0x45af70 [ 3531.035073][ C0] Code: Bad RIP value. [ 3531.039150][ C0] RSP: 002b:0000000000c9fd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 3531.047544][ C0] RAX: ffffffffffffffda RBX: 0000000000358923 RCX: 000000000045af70 [ 3531.055604][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000c9fd90 [ 3531.063550][ C0] RBP: 0000000000001c41 R08: 0000000000000001 R09: 00000000023c9940 [ 3531.071497][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 3531.079444][ C0] R13: 0000000000c9fde0 R14: 0000000000358353 R15: 0000000000c9fdf0 [ 3531.087424][ C0] bond0 I30816 7032 2 0x80004000 [ 3531.093772][ C0] Call Trace: [ 3531.097063][ C0] __schedule+0x8f3/0x1fc0 [ 3531.101511][ C0] ? rescuer_thread+0x691/0xbc0 [ 3531.106364][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.111637][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3531.116639][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3531.121815][ C0] schedule+0xd0/0x2a0 [ 3531.125878][ C0] rescuer_thread+0x6ed/0xbc0 [ 3531.130574][ C0] ? worker_thread+0xe20/0xe20 [ 3531.135354][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3531.140358][ C0] ? worker_thread+0xe20/0xe20 [ 3531.145120][ C0] kthread+0x388/0x470 [ 3531.149196][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.154954][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.160663][ C0] ret_from_fork+0x24/0x30 [ 3531.165103][ C0] syz-executor.3 S27304 7125 6806 0x00000000 [ 3531.171445][ C0] Call Trace: [ 3531.174717][ C0] __schedule+0x8f3/0x1fc0 [ 3531.179141][ C0] ? do_wait+0x581/0xa00 [ 3531.183368][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.188644][ C0] ? release_task+0x15a0/0x15a0 [ 3531.193496][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3531.199283][ C0] schedule+0xd0/0x2a0 [ 3531.203349][ C0] do_wait+0x63c/0xa00 [ 3531.207433][ C0] ? wait_consider_task+0x37a0/0x37a0 [ 3531.212797][ C0] kernel_wait4+0x14c/0x260 [ 3531.217289][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 3531.222378][ C0] ? task_stopped_code+0x180/0x180 [ 3531.227486][ C0] ? lock_downgrade+0x840/0x840 [ 3531.232327][ C0] __do_sys_wait4+0x147/0x160 [ 3531.236995][ C0] ? kernel_wait4+0x260/0x260 [ 3531.241657][ C0] ? up_read+0x1ab/0x750 [ 3531.245894][ C0] ? down_read_nested+0x420/0x420 [ 3531.250938][ C0] ? vmacache_update+0xce/0x140 [ 3531.255805][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3531.261265][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.267236][ C0] ? do_syscall_64+0x21/0x7d0 [ 3531.271902][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.277866][ C0] do_syscall_64+0xf6/0x7d0 [ 3531.282356][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3531.288237][ C0] RIP: 0033:0x41690a [ 3531.292154][ C0] Code: Bad RIP value. [ 3531.296196][ C0] RSP: 002b:00007ffc22d1bad8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 3531.304600][ C0] RAX: ffffffffffffffda RBX: 0000000000001c17 RCX: 000000000041690a [ 3531.312567][ C0] RDX: 0000000040000000 RSI: 00007ffc22d1bae4 RDI: ffffffffffffffff [ 3531.320524][ C0] RBP: 00000000000000f8 R08: 0000000000000001 R09: 0000000000000001 [ 3531.328479][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004185d0 [ 3531.336446][ C0] R13: 00007ffc22d1bd68 R14: 0000000000000000 R15: 0000000000000000 [ 3531.344437][ C0] wg-crypt-wg0 I30816 7150 2 0x80004000 [ 3531.350802][ C0] Call Trace: [ 3531.354087][ C0] __schedule+0x8f3/0x1fc0 [ 3531.358484][ C0] ? rescuer_thread+0x691/0xbc0 [ 3531.363315][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.368594][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3531.373607][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3531.378783][ C0] schedule+0xd0/0x2a0 [ 3531.382844][ C0] rescuer_thread+0x6ed/0xbc0 [ 3531.387530][ C0] ? worker_thread+0xe20/0xe20 [ 3531.392287][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3531.397301][ C0] ? worker_thread+0xe20/0xe20 [ 3531.402042][ C0] kthread+0x388/0x470 [ 3531.406112][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.411830][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.417538][ C0] ret_from_fork+0x24/0x30 [ 3531.421948][ C0] bond0 I30696 7154 2 0x80004000 [ 3531.428301][ C0] Call Trace: [ 3531.431597][ C0] __schedule+0x8f3/0x1fc0 [ 3531.436007][ C0] ? rescuer_thread+0x691/0xbc0 [ 3531.440840][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.446112][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3531.451136][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3531.456342][ C0] schedule+0xd0/0x2a0 [ 3531.460408][ C0] rescuer_thread+0x6ed/0xbc0 [ 3531.465111][ C0] ? worker_thread+0xe20/0xe20 [ 3531.469880][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3531.474911][ C0] ? worker_thread+0xe20/0xe20 [ 3531.479680][ C0] kthread+0x388/0x470 [ 3531.483725][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.489429][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.495137][ C0] ret_from_fork+0x24/0x30 [ 3531.499537][ C0] wg-crypt-wg1 I30672 7188 2 0x80004000 [ 3531.505882][ C0] Call Trace: [ 3531.509176][ C0] __schedule+0x8f3/0x1fc0 [ 3531.513581][ C0] ? rescuer_thread+0x691/0xbc0 [ 3531.518426][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.523693][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3531.528716][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3531.533917][ C0] schedule+0xd0/0x2a0 [ 3531.537967][ C0] rescuer_thread+0x6ed/0xbc0 [ 3531.542634][ C0] ? worker_thread+0xe20/0xe20 [ 3531.547400][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3531.552416][ C0] ? worker_thread+0xe20/0xe20 [ 3531.557192][ C0] kthread+0x388/0x470 [ 3531.561241][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.566948][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.572671][ C0] ret_from_fork+0x24/0x30 [ 3531.577099][ C0] syz-executor.3 S24128 7191 7125 0x00000000 [ 3531.583413][ C0] Call Trace: [ 3531.586708][ C0] __schedule+0x8f3/0x1fc0 [ 3531.591163][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.596445][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.602434][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3531.607373][ C0] schedule+0xd0/0x2a0 [ 3531.611449][ C0] do_nanosleep+0x21f/0x640 [ 3531.615933][ C0] ? schedule_timeout_idle+0x80/0x80 [ 3531.621211][ C0] ? memset+0x20/0x40 [ 3531.625185][ C0] ? __hrtimer_init+0x13b/0x270 [ 3531.630042][ C0] hrtimer_nanosleep+0x1df/0x3a0 [ 3531.634973][ C0] ? nanosleep_copyout+0x100/0x100 [ 3531.640063][ C0] ? _copy_from_user+0x13c/0x1a0 [ 3531.644993][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3531.650976][ C0] ? put_old_itimerspec32+0x1d0/0x1d0 [ 3531.656333][ C0] ? __this_cpu_preempt_check+0x84/0x190 [ 3531.661968][ C0] __x64_sys_nanosleep+0x1dc/0x260 [ 3531.667073][ C0] ? hrtimer_nanosleep+0x3a0/0x3a0 [ 3531.672184][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.678154][ C0] ? do_syscall_64+0x21/0x7d0 [ 3531.682808][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.688784][ C0] do_syscall_64+0xf6/0x7d0 [ 3531.693289][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3531.699168][ C0] RIP: 0033:0x45af70 [ 3531.703056][ C0] Code: Bad RIP value. [ 3531.707104][ C0] RSP: 002b:0000000000c9fd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 3531.715504][ C0] RAX: ffffffffffffffda RBX: 000000000035899a RCX: 000000000045af70 [ 3531.723454][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000c9fd90 [ 3531.731398][ C0] RBP: 0000000000002531 R08: 0000000000000001 R09: 0000000001078940 [ 3531.739358][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3531.747337][ C0] R13: 0000000000c9fde0 R14: 00000000003583ca R15: 0000000000c9fdf0 [ 3531.755310][ C0] wg-crypt-wg2 I30672 7224 2 0x80004000 [ 3531.761660][ C0] Call Trace: [ 3531.764951][ C0] __schedule+0x8f3/0x1fc0 [ 3531.769371][ C0] ? rescuer_thread+0x691/0xbc0 [ 3531.774214][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.779493][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3531.784509][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3531.789721][ C0] schedule+0xd0/0x2a0 [ 3531.793792][ C0] rescuer_thread+0x6ed/0xbc0 [ 3531.798456][ C0] ? worker_thread+0xe20/0xe20 [ 3531.803203][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3531.808218][ C0] ? worker_thread+0xe20/0xe20 [ 3531.812974][ C0] kthread+0x388/0x470 [ 3531.817025][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.822719][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3531.828429][ C0] ret_from_fork+0x24/0x30 [ 3531.832839][ C0] syz-executor.4 S27304 7274 6796 0x00000000 [ 3531.839146][ C0] Call Trace: [ 3531.842431][ C0] __schedule+0x8f3/0x1fc0 [ 3531.846851][ C0] ? do_wait+0x581/0xa00 [ 3531.851097][ C0] ? firmware_map_remove+0x19d/0x19d [ 3531.856372][ C0] ? release_task+0x15a0/0x15a0 [ 3531.861209][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3531.867012][ C0] schedule+0xd0/0x2a0 [ 3531.871070][ C0] do_wait+0x63c/0xa00 [ 3531.875118][ C0] ? wait_consider_task+0x37a0/0x37a0 [ 3531.880484][ C0] kernel_wait4+0x14c/0x260 [ 3531.884978][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 3531.890101][ C0] ? task_stopped_code+0x180/0x180 [ 3531.895220][ C0] ? lock_downgrade+0x840/0x840 [ 3531.900062][ C0] __do_sys_wait4+0x147/0x160 [ 3531.904724][ C0] ? kernel_wait4+0x260/0x260 [ 3531.909402][ C0] ? up_read+0x1ab/0x750 [ 3531.913631][ C0] ? down_read_nested+0x420/0x420 [ 3531.918634][ C0] ? vmacache_update+0xce/0x140 [ 3531.923474][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3531.929094][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.935061][ C0] ? do_syscall_64+0x21/0x7d0 [ 3531.939714][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3531.945688][ C0] do_syscall_64+0xf6/0x7d0 [ 3531.950197][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3531.956077][ C0] RIP: 0033:0x41690a [ 3531.959968][ C0] Code: Bad RIP value. [ 3531.964010][ C0] RSP: 002b:00007fffa91e72a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 3531.972405][ C0] RAX: ffffffffffffffda RBX: 0000000000001c77 RCX: 000000000041690a [ 3531.980352][ C0] RDX: 0000000040000000 RSI: 00007fffa91e72b4 RDI: ffffffffffffffff [ 3531.988309][ C0] RBP: 00000000000000f8 R08: 0000000000000001 R09: 0000000000000001 [ 3531.996272][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004185d0 [ 3532.004231][ C0] R13: 00007fffa91e7538 R14: 0000000000000000 R15: 0000000000000000 [ 3532.012211][ C0] wg-crypt-wg0 I30696 7279 2 0x80004000 [ 3532.018562][ C0] Call Trace: [ 3532.021844][ C0] __schedule+0x8f3/0x1fc0 [ 3532.026271][ C0] ? rescuer_thread+0x691/0xbc0 [ 3532.031132][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.036409][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3532.041410][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3532.046600][ C0] schedule+0xd0/0x2a0 [ 3532.050691][ C0] rescuer_thread+0x6ed/0xbc0 [ 3532.055384][ C0] ? worker_thread+0xe20/0xe20 [ 3532.060152][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3532.065174][ C0] ? worker_thread+0xe20/0xe20 [ 3532.069940][ C0] kthread+0x388/0x470 [ 3532.073996][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.079704][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.085415][ C0] ret_from_fork+0x24/0x30 [ 3532.089842][ C0] syz-executor.4 S23808 7287 7274 0x00000000 [ 3532.096168][ C0] Call Trace: [ 3532.099446][ C0] __schedule+0x8f3/0x1fc0 [ 3532.103837][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.109813][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.115099][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3532.120553][ C0] schedule+0xd0/0x2a0 [ 3532.124616][ C0] pipe_read+0xa02/0x1050 [ 3532.128957][ C0] ? pipe_ioctl+0x250/0x250 [ 3532.133456][ C0] ? finish_wait+0x260/0x260 [ 3532.138043][ C0] ? debug_object_active_state+0x294/0x360 [ 3532.143849][ C0] new_sync_read+0x5b5/0x6d0 [ 3532.148436][ C0] ? vfs_dedupe_file_range+0x760/0x760 [ 3532.153889][ C0] ? debug_object_active_state+0x294/0x360 [ 3532.159680][ C0] ? security_file_permission+0x8c/0x470 [ 3532.165306][ C0] __vfs_read+0xc9/0x100 [ 3532.169549][ C0] vfs_read+0x1f0/0x420 [ 3532.173695][ C0] ksys_read+0x1ee/0x250 [ 3532.177917][ C0] ? kernel_write+0x120/0x120 [ 3532.182572][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.188543][ C0] ? do_syscall_64+0x21/0x7d0 [ 3532.193222][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.199181][ C0] do_syscall_64+0xf6/0x7d0 [ 3532.203864][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3532.209740][ C0] RIP: 0033:0x4165e0 [ 3532.213643][ C0] Code: Bad RIP value. [ 3532.217685][ C0] RSP: 002b:0000000000c9fda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3532.226097][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004165e0 [ 3532.234067][ C0] RDX: 0000000000000038 RSI: 0000000000788020 RDI: 00000000000000f9 [ 3532.242014][ C0] RBP: 0000000000001fbb R08: 00000000000003b8 R09: 0000000000004000 [ 3532.249975][ C0] R10: 000000000073f640 R11: 0000000000000246 R12: 0000000000000000 [ 3532.257934][ C0] R13: 0000000000c9fde0 R14: 00000000003584bd R15: 0000000000c9fdf0 [ 3532.265918][ C0] wg-crypt-wg1 I29968 7289 2 0x80004000 [ 3532.272303][ C0] Call Trace: [ 3532.275580][ C0] __schedule+0x8f3/0x1fc0 [ 3532.279982][ C0] ? rescuer_thread+0x691/0xbc0 [ 3532.284834][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.290117][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3532.295134][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3532.300323][ C0] schedule+0xd0/0x2a0 [ 3532.304386][ C0] rescuer_thread+0x6ed/0xbc0 [ 3532.309082][ C0] ? worker_thread+0xe20/0xe20 [ 3532.313842][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3532.318844][ C0] ? worker_thread+0xe20/0xe20 [ 3532.323603][ C0] kthread+0x388/0x470 [ 3532.327673][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.333392][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.339114][ C0] ret_from_fork+0x24/0x30 [ 3532.343540][ C0] wg-crypt-wg2 I29896 7294 2 0x80004000 [ 3532.349914][ C0] Call Trace: [ 3532.353203][ C0] __schedule+0x8f3/0x1fc0 [ 3532.357612][ C0] ? rescuer_thread+0x691/0xbc0 [ 3532.362471][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.367759][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3532.372790][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3532.378006][ C0] schedule+0xd0/0x2a0 [ 3532.382087][ C0] rescuer_thread+0x6ed/0xbc0 [ 3532.386779][ C0] ? worker_thread+0xe20/0xe20 [ 3532.391534][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3532.396549][ C0] ? worker_thread+0xe20/0xe20 [ 3532.401303][ C0] kthread+0x388/0x470 [ 3532.405363][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.411079][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.416791][ C0] ret_from_fork+0x24/0x30 [ 3532.421202][ C0] syz-executor.5 S27304 7323 6806 0x00000000 [ 3532.427511][ C0] Call Trace: [ 3532.430782][ C0] __schedule+0x8f3/0x1fc0 [ 3532.435187][ C0] ? do_wait+0x581/0xa00 [ 3532.439439][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.444720][ C0] ? release_task+0x15a0/0x15a0 [ 3532.449563][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3532.455366][ C0] schedule+0xd0/0x2a0 [ 3532.459435][ C0] do_wait+0x63c/0xa00 [ 3532.463496][ C0] ? wait_consider_task+0x37a0/0x37a0 [ 3532.468874][ C0] kernel_wait4+0x14c/0x260 [ 3532.473367][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 3532.478474][ C0] ? task_stopped_code+0x180/0x180 [ 3532.483576][ C0] ? lock_downgrade+0x840/0x840 [ 3532.488406][ C0] __do_sys_wait4+0x147/0x160 [ 3532.493059][ C0] ? kernel_wait4+0x260/0x260 [ 3532.497726][ C0] ? up_read+0x1ab/0x750 [ 3532.501957][ C0] ? down_read_nested+0x420/0x420 [ 3532.506963][ C0] ? vmacache_update+0xce/0x140 [ 3532.511800][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3532.517250][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.523221][ C0] ? do_syscall_64+0x21/0x7d0 [ 3532.527876][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.533846][ C0] do_syscall_64+0xf6/0x7d0 [ 3532.538347][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3532.544243][ C0] RIP: 0033:0x41690a [ 3532.548132][ C0] Code: Bad RIP value. [ 3532.552194][ C0] RSP: 002b:00007fff7708c298 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 3532.560597][ C0] RAX: ffffffffffffffda RBX: 0000000000001cb6 RCX: 000000000041690a [ 3532.568580][ C0] RDX: 0000000040000000 RSI: 00007fff7708c2a4 RDI: ffffffffffffffff [ 3532.576539][ C0] RBP: 00000000000000f8 R08: 0000000000000001 R09: 0000000000000001 [ 3532.584499][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004185d0 [ 3532.592457][ C0] R13: 00007fff7708c528 R14: 0000000000000000 R15: 0000000000000000 [ 3532.600454][ C0] syz-executor.5 S23864 7350 7323 0x00000000 [ 3532.606783][ C0] Call Trace: [ 3532.610054][ C0] __schedule+0x8f3/0x1fc0 [ 3532.614467][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.620452][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.625726][ C0] ? prepare_to_wait_event+0x129/0x650 [ 3532.631164][ C0] schedule+0xd0/0x2a0 [ 3532.635223][ C0] pipe_read+0xa02/0x1050 [ 3532.639569][ C0] ? pipe_ioctl+0x250/0x250 [ 3532.644070][ C0] ? finish_wait+0x260/0x260 [ 3532.648641][ C0] ? debug_object_active_state+0x294/0x360 [ 3532.654444][ C0] new_sync_read+0x5b5/0x6d0 [ 3532.659041][ C0] ? vfs_dedupe_file_range+0x760/0x760 [ 3532.664509][ C0] ? debug_object_active_state+0x294/0x360 [ 3532.670314][ C0] ? security_file_permission+0x8c/0x470 [ 3532.675940][ C0] __vfs_read+0xc9/0x100 [ 3532.680180][ C0] vfs_read+0x1f0/0x420 [ 3532.684337][ C0] ksys_read+0x1ee/0x250 [ 3532.688569][ C0] ? kernel_write+0x120/0x120 [ 3532.693222][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.699193][ C0] ? do_syscall_64+0x21/0x7d0 [ 3532.703855][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3532.709813][ C0] do_syscall_64+0xf6/0x7d0 [ 3532.714296][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3532.720182][ C0] RIP: 0033:0x4165e0 [ 3532.724086][ C0] Code: Bad RIP value. [ 3532.728126][ C0] RSP: 002b:0000000000c9fda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3532.736517][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004165e0 [ 3532.744481][ C0] RDX: 0000000000000038 RSI: 0000000000788020 RDI: 00000000000000f9 [ 3532.752428][ C0] RBP: 0000000000002671 R08: 00000000000003b8 R09: 0000000000004000 [ 3532.760382][ C0] R10: 000000000073f640 R11: 0000000000000246 R12: 0000000000000000 [ 3532.768341][ C0] R13: 0000000000c9fde0 R14: 0000000000358502 R15: 0000000000c9fdf0 [ 3532.776318][ C0] bond0 I30784 7369 2 0x80004000 [ 3532.782684][ C0] Call Trace: [ 3532.785965][ C0] __schedule+0x8f3/0x1fc0 [ 3532.790358][ C0] ? rescuer_thread+0x691/0xbc0 [ 3532.795205][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.800490][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3532.805503][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3532.810684][ C0] schedule+0xd0/0x2a0 [ 3532.814756][ C0] rescuer_thread+0x6ed/0xbc0 [ 3532.819449][ C0] ? worker_thread+0xe20/0xe20 [ 3532.824215][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3532.829220][ C0] ? worker_thread+0xe20/0xe20 [ 3532.833973][ C0] kthread+0x388/0x470 [ 3532.838039][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.843759][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.849458][ C0] ret_from_fork+0x24/0x30 [ 3532.853858][ C0] bond0 I30784 7512 2 0x80004000 [ 3532.860202][ C0] Call Trace: [ 3532.863482][ C0] __schedule+0x8f3/0x1fc0 [ 3532.867878][ C0] ? rescuer_thread+0x691/0xbc0 [ 3532.872713][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.877986][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3532.883027][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3532.888206][ C0] schedule+0xd0/0x2a0 [ 3532.892256][ C0] rescuer_thread+0x6ed/0xbc0 [ 3532.896940][ C0] ? worker_thread+0xe20/0xe20 [ 3532.901695][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3532.906695][ C0] ? worker_thread+0xe20/0xe20 [ 3532.911434][ C0] kthread+0x388/0x470 [ 3532.915490][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.921194][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.926907][ C0] ret_from_fork+0x24/0x30 [ 3532.931305][ C0] wg-crypt-wg0 I29968 7553 2 0x80004000 [ 3532.937647][ C0] Call Trace: [ 3532.940929][ C0] __schedule+0x8f3/0x1fc0 [ 3532.945324][ C0] ? rescuer_thread+0x691/0xbc0 [ 3532.950154][ C0] ? firmware_map_remove+0x19d/0x19d [ 3532.955427][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3532.960454][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3532.965657][ C0] schedule+0xd0/0x2a0 [ 3532.969721][ C0] rescuer_thread+0x6ed/0xbc0 [ 3532.974405][ C0] ? worker_thread+0xe20/0xe20 [ 3532.979194][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3532.984204][ C0] ? worker_thread+0xe20/0xe20 [ 3532.988962][ C0] kthread+0x388/0x470 [ 3532.993026][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3532.998733][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.004450][ C0] ret_from_fork+0x24/0x30 [ 3533.008855][ C0] wg-crypt-wg1 I30784 7594 2 0x80004000 [ 3533.015210][ C0] Call Trace: [ 3533.018507][ C0] __schedule+0x8f3/0x1fc0 [ 3533.022920][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.027761][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.033026][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.038046][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.043247][ C0] schedule+0xd0/0x2a0 [ 3533.047297][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.051967][ C0] ? worker_thread+0xe20/0xe20 [ 3533.056730][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.061744][ C0] ? worker_thread+0xe20/0xe20 [ 3533.066500][ C0] kthread+0x388/0x470 [ 3533.070548][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.076257][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.081968][ C0] ret_from_fork+0x24/0x30 [ 3533.086373][ C0] wg-crypt-wg2 I30784 7597 2 0x80004000 [ 3533.092716][ C0] Call Trace: [ 3533.096003][ C0] __schedule+0x8f3/0x1fc0 [ 3533.100423][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.105282][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.110563][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.115579][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.120767][ C0] schedule+0xd0/0x2a0 [ 3533.124830][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.129535][ C0] ? worker_thread+0xe20/0xe20 [ 3533.134293][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.139307][ C0] ? worker_thread+0xe20/0xe20 [ 3533.144058][ C0] kthread+0x388/0x470 [ 3533.148126][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.153831][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.159563][ C0] ret_from_fork+0x24/0x30 [ 3533.163963][ C0] wg-crypt-wg0 I30816 7660 2 0x80004000 [ 3533.170336][ C0] Call Trace: [ 3533.173605][ C0] __schedule+0x8f3/0x1fc0 [ 3533.178009][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.182855][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.188127][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.193170][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.198381][ C0] schedule+0xd0/0x2a0 [ 3533.202428][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.207115][ C0] ? worker_thread+0xe20/0xe20 [ 3533.211870][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.216883][ C0] ? worker_thread+0xe20/0xe20 [ 3533.221635][ C0] kthread+0x388/0x470 [ 3533.225690][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.231392][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.237103][ C0] ret_from_fork+0x24/0x30 [ 3533.241513][ C0] bond0 I29896 7671 2 0x80004000 [ 3533.247860][ C0] Call Trace: [ 3533.251144][ C0] __schedule+0x8f3/0x1fc0 [ 3533.255551][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.260424][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.265707][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.270722][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.275905][ C0] schedule+0xd0/0x2a0 [ 3533.279956][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.284649][ C0] ? worker_thread+0xe20/0xe20 [ 3533.289421][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.294447][ C0] ? worker_thread+0xe20/0xe20 [ 3533.299230][ C0] kthread+0x388/0x470 [ 3533.303276][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.308986][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.314707][ C0] ret_from_fork+0x24/0x30 [ 3533.319121][ C0] wg-crypt-wg1 I30784 7712 2 0x80004000 [ 3533.325469][ C0] Call Trace: [ 3533.328784][ C0] __schedule+0x8f3/0x1fc0 [ 3533.333187][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.338020][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.343282][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.348297][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.353498][ C0] schedule+0xd0/0x2a0 [ 3533.357548][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.362210][ C0] ? worker_thread+0xe20/0xe20 [ 3533.366968][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.372006][ C0] ? worker_thread+0xe20/0xe20 [ 3533.376748][ C0] kthread+0x388/0x470 [ 3533.380793][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.386498][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.392207][ C0] ret_from_fork+0x24/0x30 [ 3533.396606][ C0] wg-crypt-wg2 I30280 7715 2 0x80004000 [ 3533.402945][ C0] Call Trace: [ 3533.406227][ C0] __schedule+0x8f3/0x1fc0 [ 3533.410631][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.415474][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.420748][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.425764][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.430964][ C0] schedule+0xd0/0x2a0 [ 3533.435045][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.439728][ C0] ? worker_thread+0xe20/0xe20 [ 3533.444493][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.449519][ C0] ? worker_thread+0xe20/0xe20 [ 3533.454275][ C0] kthread+0x388/0x470 [ 3533.458325][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.464021][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.469729][ C0] ret_from_fork+0x24/0x30 [ 3533.474140][ C0] wg-crypt-wg0 I30816 7827 2 0x80004000 [ 3533.480480][ C0] Call Trace: [ 3533.483749][ C0] __schedule+0x8f3/0x1fc0 [ 3533.488153][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.493007][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.498270][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.503270][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.508461][ C0] schedule+0xd0/0x2a0 [ 3533.512524][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.517192][ C0] ? worker_thread+0xe20/0xe20 [ 3533.521949][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.526967][ C0] ? worker_thread+0xe20/0xe20 [ 3533.531737][ C0] kthread+0x388/0x470 [ 3533.535793][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.541514][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.547226][ C0] ret_from_fork+0x24/0x30 [ 3533.551640][ C0] wg-crypt-wg1 I30816 7832 2 0x80004000 [ 3533.557973][ C0] Call Trace: [ 3533.561239][ C0] __schedule+0x8f3/0x1fc0 [ 3533.565643][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.570589][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.575862][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.580864][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.586056][ C0] schedule+0xd0/0x2a0 [ 3533.590116][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.594799][ C0] ? worker_thread+0xe20/0xe20 [ 3533.599571][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.604585][ C0] ? worker_thread+0xe20/0xe20 [ 3533.609349][ C0] kthread+0x388/0x470 [ 3533.613404][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.619099][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.624809][ C0] ret_from_fork+0x24/0x30 [ 3533.629236][ C0] wg-crypt-wg2 I30856 7835 2 0x80004000 [ 3533.635590][ C0] Call Trace: [ 3533.638879][ C0] __schedule+0x8f3/0x1fc0 [ 3533.643281][ C0] ? rescuer_thread+0x691/0xbc0 [ 3533.648149][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.653435][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3533.658451][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.663639][ C0] schedule+0xd0/0x2a0 [ 3533.667703][ C0] rescuer_thread+0x6ed/0xbc0 [ 3533.672394][ C0] ? worker_thread+0xe20/0xe20 [ 3533.677193][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3533.682206][ C0] ? worker_thread+0xe20/0xe20 [ 3533.686959][ C0] kthread+0x388/0x470 [ 3533.691032][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.696728][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.702435][ C0] ret_from_fork+0x24/0x30 [ 3533.706852][ C0] kworker/1:5 I22400 8134 2 0x80004000 [ 3533.713204][ C0] Workqueue: 0x0 (events) [ 3533.717606][ C0] Call Trace: [ 3533.720886][ C0] __schedule+0x8f3/0x1fc0 [ 3533.725292][ C0] ? worker_thread+0x240/0xe20 [ 3533.730051][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.735333][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3533.740531][ C0] schedule+0xd0/0x2a0 [ 3533.744594][ C0] worker_thread+0x245/0xe20 [ 3533.749197][ C0] ? process_one_work+0x16a0/0x16a0 [ 3533.754396][ C0] kthread+0x388/0x470 [ 3533.758453][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.764144][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3533.769856][ C0] ret_from_fork+0x24/0x30 [ 3533.774280][ C0] syz-executor.4 S29824 9020 7287 0x00000000 [ 3533.780603][ C0] Call Trace: [ 3533.783870][ C0] __schedule+0x8f3/0x1fc0 [ 3533.788275][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3533.793563][ C0] ? firmware_map_remove+0x19d/0x19d [ 3533.798843][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3533.804278][ C0] schedule+0xd0/0x2a0 [ 3533.808340][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3533.813452][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3533.818907][ C0] futex_wait+0x1e2/0x550 [ 3533.823216][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3533.828231][ C0] ? print_usage_bug+0x240/0x240 [ 3533.833158][ C0] ? hash_futex+0x10/0x200 [ 3533.837565][ C0] ? futex_wake+0x153/0x480 [ 3533.842066][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3533.848047][ C0] ? mark_lock+0x11f/0xdd0 [ 3533.852477][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3533.858453][ C0] do_futex+0x15f/0x1ad0 [ 3533.862680][ C0] ? find_held_lock+0x2d/0x110 [ 3533.867440][ C0] ? futex_exit_release+0x60/0x60 [ 3533.872468][ C0] ? lock_downgrade+0x840/0x840 [ 3533.877315][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3533.882159][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3533.888142][ C0] ? __might_fault+0x190/0x1d0 [ 3533.892907][ C0] ? _copy_to_user+0x126/0x160 [ 3533.897686][ C0] __x64_sys_futex+0x376/0x4f0 [ 3533.902442][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3533.906939][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3533.912391][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3533.918353][ C0] ? do_syscall_64+0x21/0x7d0 [ 3533.923017][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3533.928998][ C0] do_syscall_64+0xf6/0x7d0 [ 3533.933493][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3533.939371][ C0] RIP: 0033:0x45ca69 [ 3533.943249][ C0] Code: Bad RIP value. [ 3533.947297][ C0] RSP: 002b:00007f36b5624cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3533.955718][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3533.963666][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3533.971613][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3533.979562][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3533.987538][ C0] R13: 0000000000c9fb6f R14: 00007f36b56259c0 R15: 000000000078bf0c [ 3533.995531][ C0] syz-executor.2 S29824 9061 6995 0x00000000 [ 3534.001857][ C0] Call Trace: [ 3534.005151][ C0] __schedule+0x8f3/0x1fc0 [ 3534.009570][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3534.014866][ C0] ? firmware_map_remove+0x19d/0x19d [ 3534.020141][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3534.025595][ C0] schedule+0xd0/0x2a0 [ 3534.029673][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3534.034785][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3534.040235][ C0] futex_wait+0x1e2/0x550 [ 3534.044574][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3534.049597][ C0] ? print_usage_bug+0x240/0x240 [ 3534.054536][ C0] ? hash_futex+0x10/0x200 [ 3534.058968][ C0] ? futex_wake+0x153/0x480 [ 3534.063468][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.069440][ C0] ? mark_lock+0x11f/0xdd0 [ 3534.073859][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.079818][ C0] do_futex+0x15f/0x1ad0 [ 3534.084060][ C0] ? find_held_lock+0x2d/0x110 [ 3534.088819][ C0] ? futex_exit_release+0x60/0x60 [ 3534.093834][ C0] ? lock_downgrade+0x840/0x840 [ 3534.098664][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3534.103491][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.109475][ C0] ? __might_fault+0x190/0x1d0 [ 3534.114232][ C0] ? _copy_to_user+0x126/0x160 [ 3534.118985][ C0] __x64_sys_futex+0x376/0x4f0 [ 3534.123745][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3534.128256][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3534.133705][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.139684][ C0] ? do_syscall_64+0x21/0x7d0 [ 3534.144366][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.150344][ C0] do_syscall_64+0xf6/0x7d0 [ 3534.154844][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3534.160723][ C0] RIP: 0033:0x45ca69 [ 3534.164616][ C0] Code: Bad RIP value. [ 3534.168677][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3534.177076][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3534.185038][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3534.192998][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3534.200948][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3534.208907][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3534.216900][ C0] syz-executor.1 S29824 9081 6949 0x00000000 [ 3534.223228][ C0] Call Trace: [ 3534.226519][ C0] __schedule+0x8f3/0x1fc0 [ 3534.230945][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3534.236229][ C0] ? firmware_map_remove+0x19d/0x19d [ 3534.241495][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3534.246954][ C0] schedule+0xd0/0x2a0 [ 3534.251059][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3534.256150][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3534.261590][ C0] futex_wait+0x1e2/0x550 [ 3534.265914][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3534.270972][ C0] ? print_usage_bug+0x240/0x240 [ 3534.275896][ C0] ? hash_futex+0x10/0x200 [ 3534.280334][ C0] ? futex_wake+0x153/0x480 [ 3534.284847][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.290813][ C0] ? mark_lock+0x11f/0xdd0 [ 3534.295226][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.301203][ C0] do_futex+0x15f/0x1ad0 [ 3534.305448][ C0] ? find_held_lock+0x2d/0x110 [ 3534.310219][ C0] ? futex_exit_release+0x60/0x60 [ 3534.315251][ C0] ? lock_downgrade+0x840/0x840 [ 3534.320101][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3534.324944][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.330938][ C0] ? __might_fault+0x190/0x1d0 [ 3534.335692][ C0] ? _copy_to_user+0x126/0x160 [ 3534.340453][ C0] __x64_sys_futex+0x376/0x4f0 [ 3534.345214][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3534.349718][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3534.355175][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.361145][ C0] ? do_syscall_64+0x21/0x7d0 [ 3534.365812][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.371781][ C0] do_syscall_64+0xf6/0x7d0 [ 3534.376290][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3534.382171][ C0] RIP: 0033:0x45ca69 [ 3534.386064][ C0] Code: Bad RIP value. [ 3534.390131][ C0] RSP: 002b:00007f441e918cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3534.398519][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3534.406477][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3534.414442][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3534.422398][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3534.430354][ C0] R13: 0000000000c9fb6f R14: 00007f441e9199c0 R15: 000000000078bf0c [ 3534.438327][ C0] syz-executor.3 S29824 9177 7191 0x00000000 [ 3534.444646][ C0] Call Trace: [ 3534.447946][ C0] __schedule+0x8f3/0x1fc0 [ 3534.452356][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3534.457634][ C0] ? firmware_map_remove+0x19d/0x19d [ 3534.462899][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3534.468354][ C0] schedule+0xd0/0x2a0 [ 3534.472424][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3534.477514][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3534.482956][ C0] futex_wait+0x1e2/0x550 [ 3534.487284][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3534.492298][ C0] ? print_usage_bug+0x240/0x240 [ 3534.497225][ C0] ? hash_futex+0x10/0x200 [ 3534.501628][ C0] ? futex_wake+0x153/0x480 [ 3534.506138][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.512119][ C0] ? mark_lock+0x11f/0xdd0 [ 3534.516520][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.522480][ C0] do_futex+0x15f/0x1ad0 [ 3534.526728][ C0] ? find_held_lock+0x2d/0x110 [ 3534.531480][ C0] ? futex_exit_release+0x60/0x60 [ 3534.536494][ C0] ? lock_downgrade+0x840/0x840 [ 3534.541338][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3534.546183][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.552159][ C0] ? __might_fault+0x190/0x1d0 [ 3534.556932][ C0] ? _copy_to_user+0x126/0x160 [ 3534.561691][ C0] __x64_sys_futex+0x376/0x4f0 [ 3534.566449][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3534.570942][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3534.576465][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.582430][ C0] ? do_syscall_64+0x21/0x7d0 [ 3534.587103][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.593085][ C0] do_syscall_64+0xf6/0x7d0 [ 3534.597573][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3534.603480][ C0] RIP: 0033:0x45ca69 [ 3534.607371][ C0] Code: Bad RIP value. [ 3534.611423][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3534.619808][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3534.627764][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3534.635757][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3534.643717][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3534.651683][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3534.659645][ C0] syz-executor.3 S29824 9196 7191 0x00000000 [ 3534.665964][ C0] Call Trace: [ 3534.669270][ C0] __schedule+0x8f3/0x1fc0 [ 3534.673676][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3534.678955][ C0] ? firmware_map_remove+0x19d/0x19d [ 3534.684247][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3534.689699][ C0] schedule+0xd0/0x2a0 [ 3534.693760][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3534.698850][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3534.704303][ C0] futex_wait+0x1e2/0x550 [ 3534.708640][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3534.713678][ C0] ? print_usage_bug+0x240/0x240 [ 3534.718603][ C0] ? hash_futex+0x10/0x200 [ 3534.723002][ C0] ? futex_wake+0x153/0x480 [ 3534.727512][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.733480][ C0] ? mark_lock+0x11f/0xdd0 [ 3534.737890][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.743855][ C0] do_futex+0x15f/0x1ad0 [ 3534.748100][ C0] ? find_held_lock+0x2d/0x110 [ 3534.752865][ C0] ? futex_exit_release+0x60/0x60 [ 3534.757869][ C0] ? lock_downgrade+0x840/0x840 [ 3534.762712][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3534.767553][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.773528][ C0] ? __might_fault+0x190/0x1d0 [ 3534.778289][ C0] ? _copy_to_user+0x126/0x160 [ 3534.783058][ C0] __x64_sys_futex+0x376/0x4f0 [ 3534.787821][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3534.792316][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3534.797766][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.803722][ C0] ? do_syscall_64+0x21/0x7d0 [ 3534.808389][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.814372][ C0] do_syscall_64+0xf6/0x7d0 [ 3534.818882][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3534.824763][ C0] RIP: 0033:0x45ca69 [ 3534.828663][ C0] Code: Bad RIP value. [ 3534.832735][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3534.841121][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3534.849075][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3534.857050][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3534.865012][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3534.872990][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3534.880953][ C0] syz-executor.2 S29824 9306 6995 0x00000000 [ 3534.887274][ C0] Call Trace: [ 3534.890587][ C0] __schedule+0x8f3/0x1fc0 [ 3534.895009][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3534.900286][ C0] ? firmware_map_remove+0x19d/0x19d [ 3534.905581][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3534.911031][ C0] schedule+0xd0/0x2a0 [ 3534.915092][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3534.920190][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3534.925643][ C0] futex_wait+0x1e2/0x550 [ 3534.929964][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3534.934993][ C0] ? print_usage_bug+0x240/0x240 [ 3534.939929][ C0] ? hash_futex+0x10/0x200 [ 3534.944333][ C0] ? futex_wake+0x153/0x480 [ 3534.948853][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.954832][ C0] ? mark_lock+0x11f/0xdd0 [ 3534.959236][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3534.965212][ C0] do_futex+0x15f/0x1ad0 [ 3534.969468][ C0] ? find_held_lock+0x2d/0x110 [ 3534.974233][ C0] ? futex_exit_release+0x60/0x60 [ 3534.979248][ C0] ? lock_downgrade+0x840/0x840 [ 3534.984093][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3534.988937][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3534.994932][ C0] ? __might_fault+0x190/0x1d0 [ 3534.999690][ C0] ? _copy_to_user+0x126/0x160 [ 3535.004455][ C0] __x64_sys_futex+0x376/0x4f0 [ 3535.009228][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3535.013720][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3535.019174][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.025144][ C0] ? do_syscall_64+0x21/0x7d0 [ 3535.029820][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.035793][ C0] do_syscall_64+0xf6/0x7d0 [ 3535.040276][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3535.046152][ C0] RIP: 0033:0x45ca69 [ 3535.050043][ C0] Code: Bad RIP value. [ 3535.054083][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3535.062479][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3535.070427][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3535.078376][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3535.086337][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3535.094301][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3535.102273][ C0] syz-executor.3 S28544 9618 7191 0x00000000 [ 3535.108590][ C0] Call Trace: [ 3535.111873][ C0] __schedule+0x8f3/0x1fc0 [ 3535.116269][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3535.121548][ C0] ? firmware_map_remove+0x19d/0x19d [ 3535.126826][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3535.132293][ C0] schedule+0xd0/0x2a0 [ 3535.136343][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3535.141443][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3535.146909][ C0] futex_wait+0x1e2/0x550 [ 3535.151235][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3535.156240][ C0] ? print_usage_bug+0x240/0x240 [ 3535.161157][ C0] ? hash_futex+0x10/0x200 [ 3535.165564][ C0] ? futex_wake+0x153/0x480 [ 3535.170065][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.176035][ C0] ? trace_hardirqs_off+0x50/0x220 [ 3535.181166][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.187162][ C0] do_futex+0x15f/0x1ad0 [ 3535.191411][ C0] ? find_held_lock+0x2d/0x110 [ 3535.196176][ C0] ? futex_exit_release+0x60/0x60 [ 3535.201210][ C0] ? compat_rw_copy_check_uvector+0x4a0/0x4a0 [ 3535.207267][ C0] ? lock_downgrade+0x840/0x840 [ 3535.212106][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3535.216948][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.222939][ C0] ? __might_fault+0x190/0x1d0 [ 3535.227702][ C0] ? _copy_to_user+0x126/0x160 [ 3535.232459][ C0] __x64_sys_futex+0x376/0x4f0 [ 3535.237205][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3535.241687][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3535.247136][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.253105][ C0] ? do_syscall_64+0x21/0x7d0 [ 3535.257773][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.263744][ C0] do_syscall_64+0xf6/0x7d0 [ 3535.268252][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3535.274151][ C0] RIP: 0033:0x45ca69 [ 3535.278034][ C0] Code: Bad RIP value. [ 3535.282075][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3535.290499][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3535.298449][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3535.306406][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3535.314372][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3535.322331][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3535.331265][ C0] syz-executor.2 S29824 9844 6995 0x00000000 [ 3535.337596][ C0] Call Trace: [ 3535.340869][ C0] __schedule+0x8f3/0x1fc0 [ 3535.345279][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3535.350557][ C0] ? firmware_map_remove+0x19d/0x19d [ 3535.355825][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3535.361262][ C0] schedule+0xd0/0x2a0 [ 3535.365330][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3535.370431][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3535.375886][ C0] ? find_held_lock+0x2d/0x110 [ 3535.380647][ C0] futex_wait+0x1e2/0x550 [ 3535.384979][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3535.390020][ C0] ? print_usage_bug+0x240/0x240 [ 3535.394963][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3535.400157][ C0] ? futex_wake+0x153/0x480 [ 3535.404666][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.410647][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3535.416455][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.422438][ C0] do_futex+0x15f/0x1ad0 [ 3535.426686][ C0] ? find_held_lock+0x2d/0x110 [ 3535.431442][ C0] ? futex_exit_release+0x60/0x60 [ 3535.436461][ C0] ? lock_downgrade+0x840/0x840 [ 3535.441304][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3535.446146][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.452119][ C0] ? __might_fault+0x190/0x1d0 [ 3535.456863][ C0] ? _copy_to_user+0x126/0x160 [ 3535.461610][ C0] __x64_sys_futex+0x376/0x4f0 [ 3535.466371][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3535.470866][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3535.476302][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.482257][ C0] ? do_syscall_64+0x21/0x7d0 [ 3535.486922][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.492892][ C0] do_syscall_64+0xf6/0x7d0 [ 3535.497378][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3535.503263][ C0] RIP: 0033:0x45ca69 [ 3535.507157][ C0] Code: Bad RIP value. [ 3535.511209][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3535.519618][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3535.527575][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3535.535542][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3535.543543][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3535.551502][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3535.559476][ C0] syz-executor.2 S29824 9891 6995 0x00000000 [ 3535.565815][ C0] Call Trace: [ 3535.569117][ C0] __schedule+0x8f3/0x1fc0 [ 3535.573534][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3535.578803][ C0] ? firmware_map_remove+0x19d/0x19d [ 3535.584064][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3535.589539][ C0] schedule+0xd0/0x2a0 [ 3535.593602][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3535.598718][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3535.604152][ C0] ? find_held_lock+0x2d/0x110 [ 3535.608914][ C0] futex_wait+0x1e2/0x550 [ 3535.613245][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3535.618249][ C0] ? print_usage_bug+0x240/0x240 [ 3535.623173][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3535.628364][ C0] ? futex_wake+0x153/0x480 [ 3535.632878][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.638851][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3535.644647][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.650617][ C0] do_futex+0x15f/0x1ad0 [ 3535.654860][ C0] ? find_held_lock+0x2d/0x110 [ 3535.659616][ C0] ? futex_exit_release+0x60/0x60 [ 3535.664635][ C0] ? lock_downgrade+0x840/0x840 [ 3535.669485][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3535.674377][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.680357][ C0] ? __might_fault+0x190/0x1d0 [ 3535.685116][ C0] ? _copy_to_user+0x126/0x160 [ 3535.689889][ C0] __x64_sys_futex+0x376/0x4f0 [ 3535.694657][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3535.699149][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3535.704598][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.710595][ C0] ? do_syscall_64+0x21/0x7d0 [ 3535.715261][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.721252][ C0] do_syscall_64+0xf6/0x7d0 [ 3535.725751][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3535.731667][ C0] RIP: 0033:0x45ca69 [ 3535.735576][ C0] Code: Bad RIP value. [ 3535.739646][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3535.748045][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3535.756004][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3535.763961][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3535.771908][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3535.779856][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3535.787834][ C0] syz-executor.2 S29824 9923 6995 0x00000000 [ 3535.794160][ C0] Call Trace: [ 3535.797435][ C0] __schedule+0x8f3/0x1fc0 [ 3535.801837][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3535.807123][ C0] ? firmware_map_remove+0x19d/0x19d [ 3535.812398][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3535.817836][ C0] schedule+0xd0/0x2a0 [ 3535.821900][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3535.827018][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3535.832480][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.838448][ C0] futex_wait+0x1e2/0x550 [ 3535.842775][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3535.847789][ C0] ? print_usage_bug+0x240/0x240 [ 3535.852717][ C0] ? hash_futex+0x10/0x200 [ 3535.857127][ C0] ? futex_wake+0x153/0x480 [ 3535.861628][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.867596][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3535.873411][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3535.879385][ C0] do_futex+0x15f/0x1ad0 [ 3535.883610][ C0] ? find_held_lock+0x2d/0x110 [ 3535.888368][ C0] ? futex_exit_release+0x60/0x60 [ 3535.893399][ C0] ? lock_downgrade+0x840/0x840 [ 3535.898230][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3535.903057][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.909043][ C0] ? __might_fault+0x190/0x1d0 [ 3535.913799][ C0] ? _copy_to_user+0x126/0x160 [ 3535.918546][ C0] __x64_sys_futex+0x376/0x4f0 [ 3535.923290][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3535.927787][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3535.933234][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.939205][ C0] ? do_syscall_64+0x21/0x7d0 [ 3535.943857][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3535.949832][ C0] do_syscall_64+0xf6/0x7d0 [ 3535.954342][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3535.960232][ C0] RIP: 0033:0x45ca69 [ 3535.964110][ C0] Code: Bad RIP value. [ 3535.968160][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3535.976570][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3535.984540][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3535.992539][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3536.000517][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3536.008473][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3536.016468][ C0] syz-executor.2 S29824 9958 6995 0x00000000 [ 3536.022801][ C0] Call Trace: [ 3536.026086][ C0] __schedule+0x8f3/0x1fc0 [ 3536.030524][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3536.035806][ C0] ? firmware_map_remove+0x19d/0x19d [ 3536.041093][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3536.046588][ C0] schedule+0xd0/0x2a0 [ 3536.050661][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3536.055768][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3536.061220][ C0] futex_wait+0x1e2/0x550 [ 3536.065551][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3536.070565][ C0] ? print_usage_bug+0x240/0x240 [ 3536.075495][ C0] ? hash_futex+0x10/0x200 [ 3536.079909][ C0] ? futex_wake+0x153/0x480 [ 3536.084426][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.090407][ C0] ? mark_lock+0x11f/0xdd0 [ 3536.094818][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.100790][ C0] do_futex+0x15f/0x1ad0 [ 3536.105041][ C0] ? find_held_lock+0x2d/0x110 [ 3536.109815][ C0] ? futex_exit_release+0x60/0x60 [ 3536.114847][ C0] ? lock_downgrade+0x840/0x840 [ 3536.119716][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3536.124557][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.130539][ C0] ? __might_fault+0x190/0x1d0 [ 3536.135298][ C0] ? _copy_to_user+0x126/0x160 [ 3536.140098][ C0] __x64_sys_futex+0x376/0x4f0 [ 3536.144865][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3536.149360][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3536.154809][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.160782][ C0] ? do_syscall_64+0x21/0x7d0 [ 3536.165457][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.171447][ C0] do_syscall_64+0xf6/0x7d0 [ 3536.175945][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3536.181829][ C0] RIP: 0033:0x45ca69 [ 3536.185719][ C0] Code: Bad RIP value. [ 3536.189783][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3536.198183][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3536.206139][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3536.214110][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3536.222066][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3536.230026][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3536.238013][ C0] syz-executor.2 S29824 9995 6995 0x00000000 [ 3536.244337][ C0] Call Trace: [ 3536.247635][ C0] __schedule+0x8f3/0x1fc0 [ 3536.252042][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3536.257329][ C0] ? firmware_map_remove+0x19d/0x19d [ 3536.262601][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3536.268062][ C0] schedule+0xd0/0x2a0 [ 3536.272123][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3536.277216][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3536.282657][ C0] futex_wait+0x1e2/0x550 [ 3536.287007][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3536.292032][ C0] ? print_usage_bug+0x240/0x240 [ 3536.296970][ C0] ? hash_futex+0x10/0x200 [ 3536.301393][ C0] ? futex_wake+0x153/0x480 [ 3536.305914][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.311896][ C0] ? mark_lock+0x11f/0xdd0 [ 3536.316325][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.322306][ C0] do_futex+0x15f/0x1ad0 [ 3536.326550][ C0] ? find_held_lock+0x2d/0x110 [ 3536.331307][ C0] ? futex_exit_release+0x60/0x60 [ 3536.336324][ C0] ? lock_downgrade+0x840/0x840 [ 3536.341166][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3536.346111][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.352098][ C0] ? __might_fault+0x190/0x1d0 [ 3536.356841][ C0] ? _copy_to_user+0x126/0x160 [ 3536.361584][ C0] __x64_sys_futex+0x376/0x4f0 [ 3536.366351][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3536.370842][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3536.376286][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.382255][ C0] ? do_syscall_64+0x21/0x7d0 [ 3536.386924][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.392905][ C0] do_syscall_64+0xf6/0x7d0 [ 3536.397403][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3536.403283][ C0] RIP: 0033:0x45ca69 [ 3536.407177][ C0] Code: Bad RIP value. [ 3536.411229][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3536.419619][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3536.427575][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3536.435542][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3536.443512][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3536.451462][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3536.459441][ C0] syz-executor.0 S28976 10022 6809 0x00000000 [ 3536.465760][ C0] Call Trace: [ 3536.469042][ C0] __schedule+0x8f3/0x1fc0 [ 3536.473439][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3536.478711][ C0] ? firmware_map_remove+0x19d/0x19d [ 3536.483980][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3536.489417][ C0] schedule+0xd0/0x2a0 [ 3536.493464][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3536.498556][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3536.503995][ C0] futex_wait+0x1e2/0x550 [ 3536.508327][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3536.513345][ C0] ? print_usage_bug+0x240/0x240 [ 3536.518283][ C0] ? hash_futex+0x10/0x200 [ 3536.522729][ C0] ? futex_wake+0x153/0x480 [ 3536.527242][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.533241][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.539216][ C0] do_futex+0x15f/0x1ad0 [ 3536.543461][ C0] ? find_held_lock+0x2d/0x110 [ 3536.548240][ C0] ? futex_exit_release+0x60/0x60 [ 3536.553268][ C0] ? lock_downgrade+0x840/0x840 [ 3536.558124][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3536.562951][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.568941][ C0] ? __might_fault+0x190/0x1d0 [ 3536.573697][ C0] ? _copy_to_user+0x126/0x160 [ 3536.578447][ C0] __x64_sys_futex+0x376/0x4f0 [ 3536.583198][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3536.587699][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3536.593158][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.599119][ C0] ? do_syscall_64+0x21/0x7d0 [ 3536.603777][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.609741][ C0] do_syscall_64+0xf6/0x7d0 [ 3536.614243][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3536.620113][ C0] RIP: 0033:0x45ca69 [ 3536.623993][ C0] Code: Bad RIP value. [ 3536.628046][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3536.636475][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3536.644478][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3536.652462][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3536.660417][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3536.668377][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3536.676373][ C0] syz-executor.2 S29816 10051 6995 0x00000000 [ 3536.682703][ C0] Call Trace: [ 3536.685995][ C0] __schedule+0x8f3/0x1fc0 [ 3536.690403][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3536.695684][ C0] ? firmware_map_remove+0x19d/0x19d [ 3536.700964][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3536.706419][ C0] schedule+0xd0/0x2a0 [ 3536.710498][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3536.715623][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3536.721073][ C0] futex_wait+0x1e2/0x550 [ 3536.725397][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3536.730430][ C0] ? print_usage_bug+0x240/0x240 [ 3536.735360][ C0] ? hash_futex+0x10/0x200 [ 3536.739788][ C0] ? futex_wake+0x153/0x480 [ 3536.744279][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.750252][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.756227][ C0] do_futex+0x15f/0x1ad0 [ 3536.760465][ C0] ? find_held_lock+0x2d/0x110 [ 3536.765222][ C0] ? futex_exit_release+0x60/0x60 [ 3536.770236][ C0] ? lock_downgrade+0x840/0x840 [ 3536.775079][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3536.779921][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.785921][ C0] ? __might_fault+0x190/0x1d0 [ 3536.790675][ C0] ? _copy_to_user+0x126/0x160 [ 3536.795440][ C0] __x64_sys_futex+0x376/0x4f0 [ 3536.800196][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3536.804702][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3536.810163][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.816135][ C0] ? do_syscall_64+0x21/0x7d0 [ 3536.820800][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3536.826774][ C0] do_syscall_64+0xf6/0x7d0 [ 3536.831271][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3536.837150][ C0] RIP: 0033:0x45ca69 [ 3536.841046][ C0] Code: Bad RIP value. [ 3536.845097][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3536.853497][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3536.861444][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3536.869400][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3536.877369][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3536.885326][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3536.893308][ C0] syz-executor.2 S29736 10091 6995 0x00000000 [ 3536.899645][ C0] Call Trace: [ 3536.902915][ C0] __schedule+0x8f3/0x1fc0 [ 3536.907329][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3536.912717][ C0] ? firmware_map_remove+0x19d/0x19d [ 3536.917998][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3536.923466][ C0] schedule+0xd0/0x2a0 [ 3536.927533][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3536.932635][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3536.938081][ C0] futex_wait+0x1e2/0x550 [ 3536.942404][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3536.947420][ C0] ? print_usage_bug+0x240/0x240 [ 3536.952357][ C0] ? mark_lock+0x11f/0xdd0 [ 3536.956765][ C0] ? hash_futex+0x10/0x200 [ 3536.961186][ C0] ? futex_wake+0x153/0x480 [ 3536.965695][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.971664][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3536.977638][ C0] do_futex+0x15f/0x1ad0 [ 3536.981876][ C0] ? find_held_lock+0x2d/0x110 [ 3536.986632][ C0] ? futex_exit_release+0x60/0x60 [ 3536.991656][ C0] ? lock_downgrade+0x840/0x840 [ 3536.996501][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3537.001354][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.007338][ C0] ? __might_fault+0x190/0x1d0 [ 3537.012094][ C0] ? _copy_to_user+0x126/0x160 [ 3537.016858][ C0] __x64_sys_futex+0x376/0x4f0 [ 3537.021628][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3537.026177][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3537.031645][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.040994][ C0] ? do_syscall_64+0x21/0x7d0 [ 3537.045663][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.051633][ C0] do_syscall_64+0xf6/0x7d0 [ 3537.056146][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3537.062031][ C0] RIP: 0033:0x45ca69 [ 3537.065926][ C0] Code: Bad RIP value. [ 3537.069986][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3537.078383][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3537.086359][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3537.094337][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3537.102297][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3537.110279][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3537.118242][ C0] syz-executor.2 S29824 10295 6995 0x00000000 [ 3537.124559][ C0] Call Trace: [ 3537.127853][ C0] __schedule+0x8f3/0x1fc0 [ 3537.132260][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3537.137526][ C0] ? firmware_map_remove+0x19d/0x19d [ 3537.142800][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3537.148257][ C0] schedule+0xd0/0x2a0 [ 3537.152318][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3537.157409][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3537.162847][ C0] futex_wait+0x1e2/0x550 [ 3537.167175][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3537.172228][ C0] ? print_usage_bug+0x240/0x240 [ 3537.177161][ C0] ? hash_futex+0x10/0x200 [ 3537.181570][ C0] ? futex_wake+0x153/0x480 [ 3537.186081][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.192047][ C0] ? mark_lock+0x11f/0xdd0 [ 3537.196454][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.202434][ C0] do_futex+0x15f/0x1ad0 [ 3537.206676][ C0] ? find_held_lock+0x2d/0x110 [ 3537.211431][ C0] ? futex_exit_release+0x60/0x60 [ 3537.216455][ C0] ? lock_downgrade+0x840/0x840 [ 3537.221296][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3537.226138][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.232112][ C0] ? __might_fault+0x190/0x1d0 [ 3537.236855][ C0] ? _copy_to_user+0x126/0x160 [ 3537.241615][ C0] __x64_sys_futex+0x376/0x4f0 [ 3537.246371][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3537.250864][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3537.256310][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.262290][ C0] ? do_syscall_64+0x21/0x7d0 [ 3537.266965][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.272948][ C0] do_syscall_64+0xf6/0x7d0 [ 3537.277457][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3537.283338][ C0] RIP: 0033:0x45ca69 [ 3537.287240][ C0] Code: Bad RIP value. [ 3537.291296][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3537.299681][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3537.307636][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3537.315601][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3537.323595][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3537.331545][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3537.339525][ C0] syz-executor.2 S29824 10318 6995 0x00000000 [ 3537.345862][ C0] Call Trace: [ 3537.349146][ C0] __schedule+0x8f3/0x1fc0 [ 3537.353579][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3537.358845][ C0] ? firmware_map_remove+0x19d/0x19d [ 3537.364135][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3537.369572][ C0] schedule+0xd0/0x2a0 [ 3537.373619][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3537.378711][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3537.384171][ C0] futex_wait+0x1e2/0x550 [ 3537.388502][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3537.393520][ C0] ? print_usage_bug+0x240/0x240 [ 3537.398452][ C0] ? hash_futex+0x10/0x200 [ 3537.402877][ C0] ? futex_wake+0x153/0x480 [ 3537.407385][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.413361][ C0] ? mark_lock+0x11f/0xdd0 [ 3537.417788][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.423770][ C0] do_futex+0x15f/0x1ad0 [ 3537.428022][ C0] ? find_held_lock+0x2d/0x110 [ 3537.432790][ C0] ? futex_exit_release+0x60/0x60 [ 3537.437808][ C0] ? lock_downgrade+0x840/0x840 [ 3537.442638][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3537.447478][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.453453][ C0] ? __might_fault+0x190/0x1d0 [ 3537.458197][ C0] ? _copy_to_user+0x126/0x160 [ 3537.462943][ C0] __x64_sys_futex+0x376/0x4f0 [ 3537.467704][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3537.472197][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3537.477632][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.483588][ C0] ? do_syscall_64+0x21/0x7d0 [ 3537.488255][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.494236][ C0] do_syscall_64+0xf6/0x7d0 [ 3537.498722][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3537.504626][ C0] RIP: 0033:0x45ca69 [ 3537.508528][ C0] Code: Bad RIP value. [ 3537.512583][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3537.520981][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3537.528940][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3537.536899][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3537.544856][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3537.552814][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3537.560774][ C0] syz-executor.2 S29824 10353 6995 0x00000000 [ 3537.567092][ C0] Call Trace: [ 3537.570388][ C0] __schedule+0x8f3/0x1fc0 [ 3537.574794][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3537.580075][ C0] ? firmware_map_remove+0x19d/0x19d [ 3537.585352][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3537.590801][ C0] schedule+0xd0/0x2a0 [ 3537.594865][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3537.599976][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3537.605434][ C0] futex_wait+0x1e2/0x550 [ 3537.609767][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3537.614791][ C0] ? print_usage_bug+0x240/0x240 [ 3537.619719][ C0] ? hash_futex+0x10/0x200 [ 3537.624113][ C0] ? futex_wake+0x153/0x480 [ 3537.628623][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.634601][ C0] ? mark_lock+0x11f/0xdd0 [ 3537.639011][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.644989][ C0] do_futex+0x15f/0x1ad0 [ 3537.649229][ C0] ? find_held_lock+0x2d/0x110 [ 3537.653970][ C0] ? futex_exit_release+0x60/0x60 [ 3537.658972][ C0] ? lock_downgrade+0x840/0x840 [ 3537.663812][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3537.668651][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.674644][ C0] ? __might_fault+0x190/0x1d0 [ 3537.679398][ C0] ? _copy_to_user+0x126/0x160 [ 3537.684142][ C0] __x64_sys_futex+0x376/0x4f0 [ 3537.688899][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3537.693381][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3537.698818][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.704803][ C0] ? do_syscall_64+0x21/0x7d0 [ 3537.709467][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.715440][ C0] do_syscall_64+0xf6/0x7d0 [ 3537.719942][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3537.725839][ C0] RIP: 0033:0x45ca69 [ 3537.729741][ C0] Code: Bad RIP value. [ 3537.733793][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3537.742188][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3537.750145][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3537.758102][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3537.766058][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3537.774035][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3537.784811][ C0] syz-executor.2 S29824 10359 6995 0x00000000 [ 3537.791150][ C0] Call Trace: [ 3537.794434][ C0] __schedule+0x8f3/0x1fc0 [ 3537.798844][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3537.804118][ C0] ? firmware_map_remove+0x19d/0x19d [ 3537.809384][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3537.814835][ C0] schedule+0xd0/0x2a0 [ 3537.818895][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3537.823983][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3537.829428][ C0] ? find_held_lock+0x2d/0x110 [ 3537.834198][ C0] futex_wait+0x1e2/0x550 [ 3537.838508][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3537.843509][ C0] ? print_usage_bug+0x240/0x240 [ 3537.848437][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3537.853633][ C0] ? futex_wake+0x153/0x480 [ 3537.858144][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.864111][ C0] ? mark_lock+0x11f/0xdd0 [ 3537.868518][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3537.874504][ C0] do_futex+0x15f/0x1ad0 [ 3537.878741][ C0] ? find_held_lock+0x2d/0x110 [ 3537.883481][ C0] ? futex_exit_release+0x60/0x60 [ 3537.888497][ C0] ? lock_downgrade+0x840/0x840 [ 3537.893339][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3537.898181][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.904152][ C0] ? __might_fault+0x190/0x1d0 [ 3537.908896][ C0] ? _copy_to_user+0x126/0x160 [ 3537.913656][ C0] __x64_sys_futex+0x376/0x4f0 [ 3537.918400][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3537.922893][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3537.928341][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.934311][ C0] ? do_syscall_64+0x21/0x7d0 [ 3537.938978][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3537.944953][ C0] do_syscall_64+0xf6/0x7d0 [ 3537.949483][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3537.955387][ C0] RIP: 0033:0x45ca69 [ 3537.959277][ C0] Code: Bad RIP value. [ 3537.963315][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3537.971701][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3537.979648][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3537.987607][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3537.995575][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3538.003532][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3538.011492][ C0] syz-executor.2 S29824 10373 6995 0x00000000 [ 3538.017817][ C0] Call Trace: [ 3538.021087][ C0] __schedule+0x8f3/0x1fc0 [ 3538.025493][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3538.030770][ C0] ? firmware_map_remove+0x19d/0x19d [ 3538.036053][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3538.041502][ C0] schedule+0xd0/0x2a0 [ 3538.045614][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3538.050728][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3538.056201][ C0] futex_wait+0x1e2/0x550 [ 3538.060557][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3538.065604][ C0] ? print_usage_bug+0x240/0x240 [ 3538.070531][ C0] ? hash_futex+0x10/0x200 [ 3538.074938][ C0] ? futex_wake+0x153/0x480 [ 3538.079440][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.085405][ C0] ? mark_lock+0x11f/0xdd0 [ 3538.089812][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.095784][ C0] do_futex+0x15f/0x1ad0 [ 3538.100045][ C0] ? find_held_lock+0x2d/0x110 [ 3538.104804][ C0] ? futex_exit_release+0x60/0x60 [ 3538.109818][ C0] ? lock_downgrade+0x840/0x840 [ 3538.114659][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3538.119497][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.125476][ C0] ? __might_fault+0x190/0x1d0 [ 3538.130241][ C0] ? _copy_to_user+0x126/0x160 [ 3538.135010][ C0] __x64_sys_futex+0x376/0x4f0 [ 3538.139768][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3538.144261][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3538.149699][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.155690][ C0] ? do_syscall_64+0x21/0x7d0 [ 3538.160356][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.166332][ C0] do_syscall_64+0xf6/0x7d0 [ 3538.170867][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3538.176737][ C0] RIP: 0033:0x45ca69 [ 3538.180615][ C0] Code: Bad RIP value. [ 3538.184666][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3538.193066][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3538.201014][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3538.208993][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3538.216951][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3538.224924][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3538.232910][ C0] syz-executor.2 S29824 10391 6995 0x00000000 [ 3538.239221][ C0] Call Trace: [ 3538.242493][ C0] __schedule+0x8f3/0x1fc0 [ 3538.246902][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3538.252176][ C0] ? firmware_map_remove+0x19d/0x19d [ 3538.257483][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3538.262922][ C0] schedule+0xd0/0x2a0 [ 3538.266999][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3538.272103][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3538.277560][ C0] futex_wait+0x1e2/0x550 [ 3538.281917][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3538.286932][ C0] ? print_usage_bug+0x240/0x240 [ 3538.291872][ C0] ? hash_futex+0x10/0x200 [ 3538.296284][ C0] ? futex_wake+0x153/0x480 [ 3538.300807][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.306784][ C0] ? mark_lock+0x11f/0xdd0 [ 3538.311230][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.317190][ C0] do_futex+0x15f/0x1ad0 [ 3538.321415][ C0] ? find_held_lock+0x2d/0x110 [ 3538.326171][ C0] ? futex_exit_release+0x60/0x60 [ 3538.331186][ C0] ? lock_downgrade+0x840/0x840 [ 3538.336017][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3538.340846][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.346827][ C0] ? __might_fault+0x190/0x1d0 [ 3538.351597][ C0] ? _copy_to_user+0x126/0x160 [ 3538.356348][ C0] __x64_sys_futex+0x376/0x4f0 [ 3538.361091][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3538.365605][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3538.371062][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.377060][ C0] ? do_syscall_64+0x21/0x7d0 [ 3538.381738][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.387716][ C0] do_syscall_64+0xf6/0x7d0 [ 3538.392224][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3538.398103][ C0] RIP: 0033:0x45ca69 [ 3538.401987][ C0] Code: Bad RIP value. [ 3538.406038][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3538.414462][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3538.422427][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3538.430384][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3538.438345][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3538.446301][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3538.454305][ C0] syz-executor.2 S29824 10409 6995 0x00000000 [ 3538.460652][ C0] Call Trace: [ 3538.463938][ C0] __schedule+0x8f3/0x1fc0 [ 3538.468346][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3538.473622][ C0] ? firmware_map_remove+0x19d/0x19d [ 3538.478888][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3538.484352][ C0] schedule+0xd0/0x2a0 [ 3538.488428][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3538.493539][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3538.499031][ C0] futex_wait+0x1e2/0x550 [ 3538.503342][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3538.508376][ C0] ? print_usage_bug+0x240/0x240 [ 3538.513321][ C0] ? hash_futex+0x10/0x200 [ 3538.517731][ C0] ? futex_wake+0x153/0x480 [ 3538.522228][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.528196][ C0] ? mark_lock+0x11f/0xdd0 [ 3538.532602][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.538562][ C0] do_futex+0x15f/0x1ad0 [ 3538.542798][ C0] ? find_held_lock+0x2d/0x110 [ 3538.547554][ C0] ? futex_exit_release+0x60/0x60 [ 3538.552582][ C0] ? lock_downgrade+0x840/0x840 [ 3538.557410][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3538.562237][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.568219][ C0] ? __might_fault+0x190/0x1d0 [ 3538.572976][ C0] ? _copy_to_user+0x126/0x160 [ 3538.577725][ C0] __x64_sys_futex+0x376/0x4f0 [ 3538.582469][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3538.586970][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3538.592425][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.598388][ C0] ? do_syscall_64+0x21/0x7d0 [ 3538.603061][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.609037][ C0] do_syscall_64+0xf6/0x7d0 [ 3538.613571][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3538.619444][ C0] RIP: 0033:0x45ca69 [ 3538.623324][ C0] Code: Bad RIP value. [ 3538.627374][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3538.635789][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3538.643747][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3538.651695][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3538.659644][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3538.667602][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3538.675588][ C0] syz-executor.2 S29824 10424 6995 0x00000000 [ 3538.681898][ C0] Call Trace: [ 3538.685184][ C0] __schedule+0x8f3/0x1fc0 [ 3538.689605][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3538.694898][ C0] ? firmware_map_remove+0x19d/0x19d [ 3538.700174][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3538.705626][ C0] schedule+0xd0/0x2a0 [ 3538.709699][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3538.714811][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3538.720276][ C0] futex_wait+0x1e2/0x550 [ 3538.724624][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3538.729649][ C0] ? print_usage_bug+0x240/0x240 [ 3538.734595][ C0] ? hash_futex+0x10/0x200 [ 3538.739004][ C0] ? futex_wake+0x153/0x480 [ 3538.743494][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.749460][ C0] ? mark_lock+0x11f/0xdd0 [ 3538.753877][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.759836][ C0] do_futex+0x15f/0x1ad0 [ 3538.764062][ C0] ? find_held_lock+0x2d/0x110 [ 3538.768817][ C0] ? futex_exit_release+0x60/0x60 [ 3538.773842][ C0] ? lock_downgrade+0x840/0x840 [ 3538.778674][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3538.783500][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.789480][ C0] ? __might_fault+0x190/0x1d0 [ 3538.794244][ C0] ? _copy_to_user+0x126/0x160 [ 3538.799007][ C0] __x64_sys_futex+0x376/0x4f0 [ 3538.803748][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3538.808244][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3538.813706][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.819667][ C0] ? do_syscall_64+0x21/0x7d0 [ 3538.824327][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3538.830316][ C0] do_syscall_64+0xf6/0x7d0 [ 3538.834812][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3538.840697][ C0] RIP: 0033:0x45ca69 [ 3538.844592][ C0] Code: Bad RIP value. [ 3538.848653][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3538.857053][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3538.865011][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3538.874029][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3538.881996][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3538.889951][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3538.897940][ C0] syz-executor.2 S29824 10430 6995 0x00000000 [ 3538.904265][ C0] Call Trace: [ 3538.907549][ C0] __schedule+0x8f3/0x1fc0 [ 3538.911968][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3538.917253][ C0] ? firmware_map_remove+0x19d/0x19d [ 3538.922516][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3538.927970][ C0] schedule+0xd0/0x2a0 [ 3538.932049][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3538.937153][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3538.942602][ C0] futex_wait+0x1e2/0x550 [ 3538.946928][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3538.951965][ C0] ? print_usage_bug+0x240/0x240 [ 3538.956905][ C0] ? hash_futex+0x10/0x200 [ 3538.961310][ C0] ? futex_wake+0x153/0x480 [ 3538.965821][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.971798][ C0] ? mark_lock+0x11f/0xdd0 [ 3538.976196][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3538.982153][ C0] do_futex+0x15f/0x1ad0 [ 3538.986398][ C0] ? find_held_lock+0x2d/0x110 [ 3538.991152][ C0] ? futex_exit_release+0x60/0x60 [ 3538.996169][ C0] ? lock_downgrade+0x840/0x840 [ 3539.000999][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3539.005838][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.011813][ C0] ? __might_fault+0x190/0x1d0 [ 3539.016558][ C0] ? _copy_to_user+0x126/0x160 [ 3539.021303][ C0] __x64_sys_futex+0x376/0x4f0 [ 3539.026062][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3539.030586][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3539.041764][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.047736][ C0] ? do_syscall_64+0x21/0x7d0 [ 3539.052411][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.058395][ C0] do_syscall_64+0xf6/0x7d0 [ 3539.062879][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3539.068777][ C0] RIP: 0033:0x45ca69 [ 3539.072675][ C0] Code: Bad RIP value. [ 3539.076728][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3539.085120][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3539.093077][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3539.101037][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3539.109002][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3539.116960][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3539.124940][ C0] syz-executor.2 S29824 10441 6995 0x00000000 [ 3539.131273][ C0] Call Trace: [ 3539.134543][ C0] __schedule+0x8f3/0x1fc0 [ 3539.138939][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3539.144304][ C0] ? firmware_map_remove+0x19d/0x19d [ 3539.149593][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3539.155080][ C0] schedule+0xd0/0x2a0 [ 3539.159142][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3539.164233][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3539.169698][ C0] futex_wait+0x1e2/0x550 [ 3539.174021][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3539.179025][ C0] ? print_usage_bug+0x240/0x240 [ 3539.183946][ C0] ? hash_futex+0x10/0x200 [ 3539.188361][ C0] ? futex_wake+0x153/0x480 [ 3539.192861][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.198823][ C0] ? mark_lock+0x11f/0xdd0 [ 3539.203221][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.209196][ C0] do_futex+0x15f/0x1ad0 [ 3539.213436][ C0] ? find_held_lock+0x2d/0x110 [ 3539.218179][ C0] ? futex_exit_release+0x60/0x60 [ 3539.223207][ C0] ? lock_downgrade+0x840/0x840 [ 3539.228070][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3539.232914][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.238926][ C0] ? __might_fault+0x190/0x1d0 [ 3539.243674][ C0] ? _copy_to_user+0x126/0x160 [ 3539.248437][ C0] __x64_sys_futex+0x376/0x4f0 [ 3539.253194][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3539.257692][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3539.263174][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.269145][ C0] ? do_syscall_64+0x21/0x7d0 [ 3539.273856][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.279854][ C0] do_syscall_64+0xf6/0x7d0 [ 3539.284357][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3539.290255][ C0] RIP: 0033:0x45ca69 [ 3539.294146][ C0] Code: Bad RIP value. [ 3539.298230][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3539.306624][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3539.314586][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3539.322544][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3539.330506][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3539.338473][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3539.346461][ C0] syz-executor.2 S28800 10457 6995 0x00000000 [ 3539.352792][ C0] Call Trace: [ 3539.356063][ C0] __schedule+0x8f3/0x1fc0 [ 3539.360488][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3539.365770][ C0] ? firmware_map_remove+0x19d/0x19d [ 3539.371057][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3539.376507][ C0] schedule+0xd0/0x2a0 [ 3539.380579][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3539.385682][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3539.391131][ C0] futex_wait+0x1e2/0x550 [ 3539.395458][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3539.400473][ C0] ? print_usage_bug+0x240/0x240 [ 3539.405406][ C0] ? hash_futex+0x10/0x200 [ 3539.409821][ C0] ? futex_wake+0x153/0x480 [ 3539.414325][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.420297][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.426274][ C0] do_futex+0x15f/0x1ad0 [ 3539.430530][ C0] ? find_held_lock+0x2d/0x110 [ 3539.435285][ C0] ? futex_exit_release+0x60/0x60 [ 3539.440300][ C0] ? lock_downgrade+0x840/0x840 [ 3539.445145][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3539.449993][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.455981][ C0] ? __might_fault+0x190/0x1d0 [ 3539.460722][ C0] ? _copy_to_user+0x126/0x160 [ 3539.465484][ C0] __x64_sys_futex+0x376/0x4f0 [ 3539.470273][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3539.474782][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3539.480230][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.486202][ C0] ? do_syscall_64+0x21/0x7d0 [ 3539.490882][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.496853][ C0] do_syscall_64+0xf6/0x7d0 [ 3539.501349][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3539.507229][ C0] RIP: 0033:0x45ca69 [ 3539.511129][ C0] Code: Bad RIP value. [ 3539.515190][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3539.523747][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3539.531703][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3539.539665][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3539.547620][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3539.555646][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3539.563605][ C0] syz-executor.2 S28800 10519 6995 0x00000000 [ 3539.569920][ C0] Call Trace: [ 3539.573218][ C0] __schedule+0x8f3/0x1fc0 [ 3539.577614][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3539.582880][ C0] ? firmware_map_remove+0x19d/0x19d [ 3539.588159][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3539.593607][ C0] schedule+0xd0/0x2a0 [ 3539.597673][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3539.602760][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3539.608218][ C0] futex_wait+0x1e2/0x550 [ 3539.612538][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3539.617559][ C0] ? print_usage_bug+0x240/0x240 [ 3539.622489][ C0] ? kernel_text_address+0x6e/0xe0 [ 3539.627589][ C0] ? hash_futex+0x10/0x200 [ 3539.631997][ C0] ? futex_wake+0x153/0x480 [ 3539.636495][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.642449][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 3539.648244][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.654212][ C0] do_futex+0x15f/0x1ad0 [ 3539.658443][ C0] ? find_held_lock+0x2d/0x110 [ 3539.663187][ C0] ? futex_exit_release+0x60/0x60 [ 3539.668206][ C0] ? lock_downgrade+0x840/0x840 [ 3539.673046][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3539.677876][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.683848][ C0] ? __might_fault+0x190/0x1d0 [ 3539.688601][ C0] ? _copy_to_user+0x126/0x160 [ 3539.693360][ C0] __x64_sys_futex+0x376/0x4f0 [ 3539.698105][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3539.702604][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3539.708051][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.714024][ C0] ? do_syscall_64+0x21/0x7d0 [ 3539.718690][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.724684][ C0] do_syscall_64+0xf6/0x7d0 [ 3539.729193][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3539.735087][ C0] RIP: 0033:0x45ca69 [ 3539.738978][ C0] Code: Bad RIP value. [ 3539.743029][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3539.751413][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3539.759359][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3539.767322][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3539.775282][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3539.783228][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3539.791202][ C0] syz-executor.2 S28800 10567 6995 0x00000000 [ 3539.797512][ C0] Call Trace: [ 3539.800782][ C0] __schedule+0x8f3/0x1fc0 [ 3539.805188][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3539.810488][ C0] ? firmware_map_remove+0x19d/0x19d [ 3539.815779][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3539.821228][ C0] schedule+0xd0/0x2a0 [ 3539.825290][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3539.830401][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3539.835868][ C0] futex_wait+0x1e2/0x550 [ 3539.840210][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3539.845230][ C0] ? print_usage_bug+0x240/0x240 [ 3539.850164][ C0] ? kernel_text_address+0x6e/0xe0 [ 3539.855264][ C0] ? hash_futex+0x10/0x200 [ 3539.859657][ C0] ? futex_wake+0x153/0x480 [ 3539.864142][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.870106][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 3539.875902][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3539.881860][ C0] do_futex+0x15f/0x1ad0 [ 3539.886109][ C0] ? find_held_lock+0x2d/0x110 [ 3539.890874][ C0] ? futex_exit_release+0x60/0x60 [ 3539.895898][ C0] ? lock_downgrade+0x840/0x840 [ 3539.900725][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3539.905570][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.911546][ C0] ? __might_fault+0x190/0x1d0 [ 3539.916290][ C0] ? _copy_to_user+0x126/0x160 [ 3539.921048][ C0] __x64_sys_futex+0x376/0x4f0 [ 3539.925816][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3539.930325][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3539.935771][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.941725][ C0] ? do_syscall_64+0x21/0x7d0 [ 3539.946389][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3539.952376][ C0] do_syscall_64+0xf6/0x7d0 [ 3539.956869][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3539.962745][ C0] RIP: 0033:0x45ca69 [ 3539.966634][ C0] Code: Bad RIP value. [ 3539.970693][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3539.979093][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3539.987056][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3539.995022][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3540.002981][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3540.010939][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3540.018909][ C0] syz-executor.4 S27304 10596 7287 0x00000000 [ 3540.025225][ C0] Call Trace: [ 3540.028522][ C0] __schedule+0x8f3/0x1fc0 [ 3540.032928][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3540.038195][ C0] ? firmware_map_remove+0x19d/0x19d [ 3540.043460][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3540.048912][ C0] schedule+0xd0/0x2a0 [ 3540.052986][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3540.058083][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3540.063527][ C0] futex_wait+0x1e2/0x550 [ 3540.067888][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3540.072905][ C0] ? print_usage_bug+0x240/0x240 [ 3540.077834][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3540.082832][ C0] ? hash_futex+0x10/0x200 [ 3540.087235][ C0] ? futex_wake+0x153/0x480 [ 3540.091733][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.097704][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.103663][ C0] do_futex+0x15f/0x1ad0 [ 3540.107907][ C0] ? find_held_lock+0x2d/0x110 [ 3540.112671][ C0] ? futex_exit_release+0x60/0x60 [ 3540.117680][ C0] ? lock_downgrade+0x840/0x840 [ 3540.122514][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3540.127359][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.133332][ C0] ? __might_fault+0x190/0x1d0 [ 3540.138076][ C0] ? _copy_to_user+0x126/0x160 [ 3540.142846][ C0] __x64_sys_futex+0x376/0x4f0 [ 3540.147611][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3540.152120][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3540.157570][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.163555][ C0] ? do_syscall_64+0x21/0x7d0 [ 3540.168223][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.174195][ C0] do_syscall_64+0xf6/0x7d0 [ 3540.178680][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3540.184557][ C0] RIP: 0033:0x45ca69 [ 3540.188456][ C0] Code: Bad RIP value. [ 3540.192508][ C0] RSP: 002b:00007f36b5624cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3540.200894][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3540.208848][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3540.216807][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3540.224764][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3540.232722][ C0] R13: 0000000000c9fb6f R14: 00007f36b56259c0 R15: 000000000078bf0c [ 3540.240692][ C0] syz-executor.2 S29824 10617 6995 0x00000000 [ 3540.247013][ C0] Call Trace: [ 3540.250309][ C0] __schedule+0x8f3/0x1fc0 [ 3540.254730][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3540.260013][ C0] ? firmware_map_remove+0x19d/0x19d [ 3540.265291][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3540.270760][ C0] schedule+0xd0/0x2a0 [ 3540.274843][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3540.279952][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3540.285420][ C0] futex_wait+0x1e2/0x550 [ 3540.289754][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3540.294791][ C0] ? print_usage_bug+0x240/0x240 [ 3540.299727][ C0] ? hash_futex+0x10/0x200 [ 3540.304118][ C0] ? futex_wake+0x153/0x480 [ 3540.308630][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.314599][ C0] ? mark_lock+0x11f/0xdd0 [ 3540.318996][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.324994][ C0] do_futex+0x15f/0x1ad0 [ 3540.329249][ C0] ? find_held_lock+0x2d/0x110 [ 3540.334002][ C0] ? futex_exit_release+0x60/0x60 [ 3540.339020][ C0] ? lock_downgrade+0x840/0x840 [ 3540.343858][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3540.348697][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.354700][ C0] ? __might_fault+0x190/0x1d0 [ 3540.359455][ C0] ? _copy_to_user+0x126/0x160 [ 3540.364210][ C0] __x64_sys_futex+0x376/0x4f0 [ 3540.368976][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3540.373487][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3540.378962][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.384977][ C0] ? do_syscall_64+0x21/0x7d0 [ 3540.389655][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.395624][ C0] do_syscall_64+0xf6/0x7d0 [ 3540.400118][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3540.406000][ C0] RIP: 0033:0x45ca69 [ 3540.409902][ C0] Code: Bad RIP value. [ 3540.413954][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3540.422426][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3540.430381][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3540.438341][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3540.446315][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3540.454288][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3540.462250][ C0] syz-executor.2 S29824 10642 6995 0x00000000 [ 3540.468568][ C0] Call Trace: [ 3540.471864][ C0] __schedule+0x8f3/0x1fc0 [ 3540.476282][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3540.481561][ C0] ? firmware_map_remove+0x19d/0x19d [ 3540.486862][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3540.492310][ C0] schedule+0xd0/0x2a0 [ 3540.496367][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3540.501456][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3540.506910][ C0] futex_wait+0x1e2/0x550 [ 3540.511247][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3540.516268][ C0] ? print_usage_bug+0x240/0x240 [ 3540.521183][ C0] ? hash_futex+0x10/0x200 [ 3540.525587][ C0] ? futex_wake+0x153/0x480 [ 3540.530111][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.536102][ C0] ? mark_lock+0x11f/0xdd0 [ 3540.540509][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.546498][ C0] do_futex+0x15f/0x1ad0 [ 3540.550754][ C0] ? find_held_lock+0x2d/0x110 [ 3540.555508][ C0] ? futex_exit_release+0x60/0x60 [ 3540.560511][ C0] ? lock_downgrade+0x840/0x840 [ 3540.565355][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3540.570206][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.576181][ C0] ? __might_fault+0x190/0x1d0 [ 3540.580921][ C0] ? _copy_to_user+0x126/0x160 [ 3540.585688][ C0] __x64_sys_futex+0x376/0x4f0 [ 3540.590460][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3540.594971][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3540.600406][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.606376][ C0] ? do_syscall_64+0x21/0x7d0 [ 3540.611058][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.617049][ C0] do_syscall_64+0xf6/0x7d0 [ 3540.621541][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3540.627419][ C0] RIP: 0033:0x45ca69 [ 3540.631324][ C0] Code: Bad RIP value. [ 3540.635365][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3540.643750][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3540.651697][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3540.659658][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3540.667613][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3540.675587][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3540.683556][ C0] syz-executor.2 S29824 10659 6995 0x00000000 [ 3540.689871][ C0] Call Trace: [ 3540.693152][ C0] __schedule+0x8f3/0x1fc0 [ 3540.697557][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3540.702836][ C0] ? firmware_map_remove+0x19d/0x19d [ 3540.708116][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3540.713570][ C0] schedule+0xd0/0x2a0 [ 3540.717619][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3540.722707][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3540.728162][ C0] futex_wait+0x1e2/0x550 [ 3540.732481][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3540.737494][ C0] ? print_usage_bug+0x240/0x240 [ 3540.742409][ C0] ? hash_futex+0x10/0x200 [ 3540.746816][ C0] ? futex_wake+0x153/0x480 [ 3540.751317][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.757277][ C0] ? mark_lock+0x11f/0xdd0 [ 3540.761673][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.767647][ C0] do_futex+0x15f/0x1ad0 [ 3540.771885][ C0] ? find_held_lock+0x2d/0x110 [ 3540.776647][ C0] ? futex_exit_release+0x60/0x60 [ 3540.781663][ C0] ? lock_downgrade+0x840/0x840 [ 3540.786522][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3540.791390][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.797356][ C0] ? __might_fault+0x190/0x1d0 [ 3540.802100][ C0] ? _copy_to_user+0x126/0x160 [ 3540.806871][ C0] __x64_sys_futex+0x376/0x4f0 [ 3540.811645][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3540.816139][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3540.821587][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.827564][ C0] ? do_syscall_64+0x21/0x7d0 [ 3540.832241][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3540.838212][ C0] do_syscall_64+0xf6/0x7d0 [ 3540.842703][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3540.848585][ C0] RIP: 0033:0x45ca69 [ 3540.854125][ C0] Code: Bad RIP value. [ 3540.858195][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3540.866589][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3540.874548][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3540.882495][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3540.890448][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3540.898419][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3540.906398][ C0] syz-executor.2 S29824 10671 6995 0x00000000 [ 3540.912728][ C0] Call Trace: [ 3540.916013][ C0] __schedule+0x8f3/0x1fc0 [ 3540.920424][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3540.925707][ C0] ? firmware_map_remove+0x19d/0x19d [ 3540.930992][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3540.936445][ C0] schedule+0xd0/0x2a0 [ 3540.940493][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3540.945593][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3540.951050][ C0] ? find_held_lock+0x2d/0x110 [ 3540.955813][ C0] futex_wait+0x1e2/0x550 [ 3540.960123][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3540.965137][ C0] ? print_usage_bug+0x240/0x240 [ 3540.970082][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3540.975273][ C0] ? futex_wake+0x153/0x480 [ 3540.979760][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.985726][ C0] ? mark_lock+0x11f/0xdd0 [ 3540.990142][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3540.996110][ C0] do_futex+0x15f/0x1ad0 [ 3541.000334][ C0] ? find_held_lock+0x2d/0x110 [ 3541.005098][ C0] ? futex_exit_release+0x60/0x60 [ 3541.010123][ C0] ? lock_downgrade+0x840/0x840 [ 3541.014981][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3541.019838][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.025833][ C0] ? __might_fault+0x190/0x1d0 [ 3541.030595][ C0] ? _copy_to_user+0x126/0x160 [ 3541.035389][ C0] __x64_sys_futex+0x376/0x4f0 [ 3541.040179][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3541.044688][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3541.050163][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.056148][ C0] ? do_syscall_64+0x21/0x7d0 [ 3541.060831][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.066819][ C0] do_syscall_64+0xf6/0x7d0 [ 3541.071329][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3541.077220][ C0] RIP: 0033:0x45ca69 [ 3541.081098][ C0] Code: Bad RIP value. [ 3541.085146][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3541.093551][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3541.101497][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3541.109451][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3541.117448][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3541.125407][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3541.133403][ C0] syz-executor.2 S29824 10688 6995 0x00000000 [ 3541.139733][ C0] Call Trace: [ 3541.143014][ C0] __schedule+0x8f3/0x1fc0 [ 3541.147420][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3541.152695][ C0] ? firmware_map_remove+0x19d/0x19d [ 3541.157959][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3541.163394][ C0] schedule+0xd0/0x2a0 [ 3541.167475][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3541.172589][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3541.178028][ C0] futex_wait+0x1e2/0x550 [ 3541.182336][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3541.187361][ C0] ? hash_futex+0x10/0x200 [ 3541.191766][ C0] ? futex_wake+0x153/0x480 [ 3541.196254][ C0] ? preempt_schedule_irq+0xee/0x150 [ 3541.201515][ C0] do_futex+0x15f/0x1ad0 [ 3541.205759][ C0] ? find_held_lock+0x2d/0x110 [ 3541.210522][ C0] ? futex_exit_release+0x60/0x60 [ 3541.215537][ C0] ? lock_downgrade+0x840/0x840 [ 3541.220376][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3541.225218][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.231193][ C0] ? __might_fault+0x190/0x1d0 [ 3541.235950][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3541.241399][ C0] __x64_sys_futex+0x376/0x4f0 [ 3541.246182][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3541.250691][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3541.256136][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.262122][ C0] ? do_syscall_64+0x21/0x7d0 [ 3541.266795][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.272785][ C0] do_syscall_64+0xf6/0x7d0 [ 3541.277293][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3541.283176][ C0] RIP: 0033:0x45ca69 [ 3541.287069][ C0] Code: Bad RIP value. [ 3541.291122][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3541.299507][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3541.307464][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3541.315421][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3541.323379][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3541.331340][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3541.339299][ C0] syz-executor.2 S29824 10725 6995 0x00000000 [ 3541.345639][ C0] Call Trace: [ 3541.348935][ C0] __schedule+0x8f3/0x1fc0 [ 3541.353341][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3541.358609][ C0] ? firmware_map_remove+0x19d/0x19d [ 3541.363875][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3541.369329][ C0] schedule+0xd0/0x2a0 [ 3541.373404][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3541.378509][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3541.383946][ C0] ? find_held_lock+0x2d/0x110 [ 3541.388706][ C0] futex_wait+0x1e2/0x550 [ 3541.393039][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3541.398063][ C0] ? print_usage_bug+0x240/0x240 [ 3541.402977][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3541.408167][ C0] ? futex_wake+0x153/0x480 [ 3541.412676][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3541.418641][ C0] ? mark_lock+0x11f/0xdd0 [ 3541.423066][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3541.429040][ C0] do_futex+0x15f/0x1ad0 [ 3541.433282][ C0] ? find_held_lock+0x2d/0x110 [ 3541.438025][ C0] ? futex_exit_release+0x60/0x60 [ 3541.443030][ C0] ? lock_downgrade+0x840/0x840 [ 3541.447898][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3541.452747][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.458714][ C0] ? __might_fault+0x190/0x1d0 [ 3541.463456][ C0] ? _copy_to_user+0x126/0x160 [ 3541.468222][ C0] __x64_sys_futex+0x376/0x4f0 [ 3541.472978][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3541.477461][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3541.482895][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.488867][ C0] ? do_syscall_64+0x21/0x7d0 [ 3541.493535][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.499514][ C0] do_syscall_64+0xf6/0x7d0 [ 3541.503995][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3541.509871][ C0] RIP: 0033:0x45ca69 [ 3541.513773][ C0] Code: Bad RIP value. [ 3541.517814][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3541.526207][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3541.534166][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3541.542120][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3541.550077][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3541.558053][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3541.566032][ C0] syz-executor.2 S29824 10734 6995 0x00000000 [ 3541.572364][ C0] Call Trace: [ 3541.575649][ C0] __schedule+0x8f3/0x1fc0 [ 3541.580061][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3541.585341][ C0] ? firmware_map_remove+0x19d/0x19d [ 3541.590629][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3541.596093][ C0] schedule+0xd0/0x2a0 [ 3541.600155][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3541.605256][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3541.610721][ C0] futex_wait+0x1e2/0x550 [ 3541.615041][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3541.620050][ C0] ? print_usage_bug+0x240/0x240 [ 3541.624978][ C0] ? hash_futex+0x10/0x200 [ 3541.629391][ C0] ? futex_wake+0x153/0x480 [ 3541.633897][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3541.639851][ C0] ? mark_lock+0x11f/0xdd0 [ 3541.644246][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3541.650238][ C0] do_futex+0x15f/0x1ad0 [ 3541.654491][ C0] ? find_held_lock+0x2d/0x110 [ 3541.659246][ C0] ? futex_exit_release+0x60/0x60 [ 3541.664248][ C0] ? lock_downgrade+0x840/0x840 [ 3541.669091][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3541.673931][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.679894][ C0] ? __might_fault+0x190/0x1d0 [ 3541.684650][ C0] ? _copy_to_user+0x126/0x160 [ 3541.689434][ C0] __x64_sys_futex+0x376/0x4f0 [ 3541.694200][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3541.698696][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3541.704139][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.710108][ C0] ? do_syscall_64+0x21/0x7d0 [ 3541.714773][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.720740][ C0] do_syscall_64+0xf6/0x7d0 [ 3541.725237][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3541.731116][ C0] RIP: 0033:0x45ca69 [ 3541.735028][ C0] Code: Bad RIP value. [ 3541.739087][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3541.747480][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3541.755440][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3541.763393][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3541.771344][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3541.779309][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3541.787306][ C0] syz-executor.2 S29824 10747 6995 0x00000000 [ 3541.793656][ C0] Call Trace: [ 3541.796945][ C0] __schedule+0x8f3/0x1fc0 [ 3541.801341][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3541.806627][ C0] ? firmware_map_remove+0x19d/0x19d [ 3541.811902][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3541.817347][ C0] schedule+0xd0/0x2a0 [ 3541.821395][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3541.826505][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3541.831970][ C0] ? find_held_lock+0x2d/0x110 [ 3541.836721][ C0] futex_wait+0x1e2/0x550 [ 3541.841032][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3541.846073][ C0] ? print_usage_bug+0x240/0x240 [ 3541.851018][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3541.856202][ C0] ? futex_wake+0x153/0x480 [ 3541.860691][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3541.866658][ C0] ? mark_lock+0x11f/0xdd0 [ 3541.871094][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3541.877059][ C0] do_futex+0x15f/0x1ad0 [ 3541.881284][ C0] ? find_held_lock+0x2d/0x110 [ 3541.886053][ C0] ? futex_exit_release+0x60/0x60 [ 3541.891090][ C0] ? lock_downgrade+0x840/0x840 [ 3541.895981][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3541.900811][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.906810][ C0] ? __might_fault+0x190/0x1d0 [ 3541.911575][ C0] ? _copy_to_user+0x126/0x160 [ 3541.916380][ C0] __x64_sys_futex+0x376/0x4f0 [ 3541.921139][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3541.925648][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3541.931109][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.937079][ C0] ? do_syscall_64+0x21/0x7d0 [ 3541.941736][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3541.947712][ C0] do_syscall_64+0xf6/0x7d0 [ 3541.952210][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3541.958092][ C0] RIP: 0033:0x45ca69 [ 3541.961970][ C0] Code: Bad RIP value. [ 3541.966020][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3541.974432][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3541.982394][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3541.990371][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3541.998342][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3542.006298][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3542.014295][ C0] syz-executor.2 S29864 10772 6995 0x00000000 [ 3542.020611][ C0] Call Trace: [ 3542.023883][ C0] __schedule+0x8f3/0x1fc0 [ 3542.028289][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3542.033585][ C0] ? firmware_map_remove+0x19d/0x19d [ 3542.038862][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3542.044309][ C0] schedule+0xd0/0x2a0 [ 3542.048375][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3542.053475][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3542.058931][ C0] futex_wait+0x1e2/0x550 [ 3542.063250][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3542.068267][ C0] ? print_usage_bug+0x240/0x240 [ 3542.073195][ C0] ? hash_futex+0x10/0x200 [ 3542.077603][ C0] ? futex_wake+0x153/0x480 [ 3542.082103][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.088069][ C0] ? mark_lock+0x11f/0xdd0 [ 3542.092476][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.098433][ C0] do_futex+0x15f/0x1ad0 [ 3542.102660][ C0] ? find_held_lock+0x2d/0x110 [ 3542.107419][ C0] ? futex_exit_release+0x60/0x60 [ 3542.112450][ C0] ? lock_downgrade+0x840/0x840 [ 3542.117281][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3542.122111][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.128093][ C0] ? __might_fault+0x190/0x1d0 [ 3542.132864][ C0] ? _copy_to_user+0x126/0x160 [ 3542.137620][ C0] __x64_sys_futex+0x376/0x4f0 [ 3542.142365][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3542.146862][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3542.152316][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.158283][ C0] ? do_syscall_64+0x21/0x7d0 [ 3542.162937][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.168911][ C0] do_syscall_64+0xf6/0x7d0 [ 3542.173407][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3542.179286][ C0] RIP: 0033:0x45ca69 [ 3542.183169][ C0] Code: Bad RIP value. [ 3542.187218][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3542.195615][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3542.203560][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3542.211510][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3542.219458][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3542.227415][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3542.235407][ C0] syz-executor.2 S29824 10784 6995 0x00000000 [ 3542.241761][ C0] Call Trace: [ 3542.245049][ C0] __schedule+0x8f3/0x1fc0 [ 3542.249465][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3542.254778][ C0] ? firmware_map_remove+0x19d/0x19d [ 3542.260065][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3542.265529][ C0] schedule+0xd0/0x2a0 [ 3542.269601][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3542.274703][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3542.280151][ C0] futex_wait+0x1e2/0x550 [ 3542.284477][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3542.289504][ C0] ? print_usage_bug+0x240/0x240 [ 3542.294441][ C0] ? hash_futex+0x10/0x200 [ 3542.298836][ C0] ? futex_wake+0x153/0x480 [ 3542.303321][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.309287][ C0] ? mark_lock+0x11f/0xdd0 [ 3542.313693][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.319651][ C0] do_futex+0x15f/0x1ad0 [ 3542.323879][ C0] ? find_held_lock+0x2d/0x110 [ 3542.328639][ C0] ? futex_exit_release+0x60/0x60 [ 3542.333654][ C0] ? lock_downgrade+0x840/0x840 [ 3542.338485][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3542.343322][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.349306][ C0] ? __might_fault+0x190/0x1d0 [ 3542.354059][ C0] ? _copy_to_user+0x126/0x160 [ 3542.358820][ C0] __x64_sys_futex+0x376/0x4f0 [ 3542.363563][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3542.368070][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3542.373517][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.379474][ C0] ? do_syscall_64+0x21/0x7d0 [ 3542.384127][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.390107][ C0] do_syscall_64+0xf6/0x7d0 [ 3542.394605][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3542.400502][ C0] RIP: 0033:0x45ca69 [ 3542.404391][ C0] Code: Bad RIP value. [ 3542.408451][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3542.416851][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3542.424809][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3542.432768][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3542.440719][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3542.448683][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3542.456674][ C0] syz-executor.2 S29824 10831 6995 0x00000000 [ 3542.463009][ C0] Call Trace: [ 3542.466306][ C0] __schedule+0x8f3/0x1fc0 [ 3542.470723][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3542.476016][ C0] ? firmware_map_remove+0x19d/0x19d [ 3542.481311][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3542.486765][ C0] schedule+0xd0/0x2a0 [ 3542.490836][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3542.495936][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3542.501374][ C0] futex_wait+0x1e2/0x550 [ 3542.505700][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3542.510723][ C0] ? print_usage_bug+0x240/0x240 [ 3542.515675][ C0] ? hash_futex+0x10/0x200 [ 3542.520071][ C0] ? futex_wake+0x153/0x480 [ 3542.524575][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.530555][ C0] ? mark_lock+0x11f/0xdd0 [ 3542.534973][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.540942][ C0] do_futex+0x15f/0x1ad0 [ 3542.545192][ C0] ? find_held_lock+0x2d/0x110 [ 3542.549959][ C0] ? futex_exit_release+0x60/0x60 [ 3542.554989][ C0] ? lock_downgrade+0x840/0x840 [ 3542.559842][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3542.564682][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.570675][ C0] ? __might_fault+0x190/0x1d0 [ 3542.575428][ C0] ? _copy_to_user+0x126/0x160 [ 3542.580172][ C0] __x64_sys_futex+0x376/0x4f0 [ 3542.584933][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3542.589444][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3542.594892][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.600852][ C0] ? do_syscall_64+0x21/0x7d0 [ 3542.605525][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.611516][ C0] do_syscall_64+0xf6/0x7d0 [ 3542.616017][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3542.621885][ C0] RIP: 0033:0x45ca69 [ 3542.625773][ C0] Code: Bad RIP value. [ 3542.629830][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3542.638240][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3542.646198][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3542.654168][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3542.662127][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3542.670082][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3542.678056][ C0] syz-executor.2 S29824 10844 6995 0x00000000 [ 3542.684371][ C0] Call Trace: [ 3542.687666][ C0] __schedule+0x8f3/0x1fc0 [ 3542.692075][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3542.697347][ C0] ? firmware_map_remove+0x19d/0x19d [ 3542.702608][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3542.708063][ C0] schedule+0xd0/0x2a0 [ 3542.712130][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3542.717218][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3542.722656][ C0] futex_wait+0x1e2/0x550 [ 3542.726981][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3542.732003][ C0] ? print_usage_bug+0x240/0x240 [ 3542.736919][ C0] ? hash_futex+0x10/0x200 [ 3542.741321][ C0] ? futex_wake+0x153/0x480 [ 3542.745836][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.751815][ C0] ? mark_lock+0x11f/0xdd0 [ 3542.756210][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.762168][ C0] do_futex+0x15f/0x1ad0 [ 3542.766415][ C0] ? find_held_lock+0x2d/0x110 [ 3542.771169][ C0] ? futex_exit_release+0x60/0x60 [ 3542.776206][ C0] ? lock_downgrade+0x840/0x840 [ 3542.781059][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3542.785903][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.791897][ C0] ? __might_fault+0x190/0x1d0 [ 3542.796652][ C0] ? _copy_to_user+0x126/0x160 [ 3542.801396][ C0] __x64_sys_futex+0x376/0x4f0 [ 3542.806158][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3542.810665][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3542.816134][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.822107][ C0] ? do_syscall_64+0x21/0x7d0 [ 3542.826777][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3542.832764][ C0] do_syscall_64+0xf6/0x7d0 [ 3542.837248][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3542.843126][ C0] RIP: 0033:0x45ca69 [ 3542.847016][ C0] Code: Bad RIP value. [ 3542.851077][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3542.859487][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3542.867445][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3542.875416][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3542.883371][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3542.891325][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3542.899314][ C0] syz-executor.2 S29824 10849 6995 0x00000000 [ 3542.905630][ C0] Call Trace: [ 3542.908926][ C0] __schedule+0x8f3/0x1fc0 [ 3542.913333][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3542.918601][ C0] ? firmware_map_remove+0x19d/0x19d [ 3542.923865][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3542.929317][ C0] schedule+0xd0/0x2a0 [ 3542.933378][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3542.938465][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3542.943920][ C0] futex_wait+0x1e2/0x550 [ 3542.948259][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3542.953273][ C0] ? print_usage_bug+0x240/0x240 [ 3542.958189][ C0] ? hash_futex+0x10/0x200 [ 3542.962585][ C0] ? futex_wake+0x153/0x480 [ 3542.967099][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.973084][ C0] ? mark_lock+0x11f/0xdd0 [ 3542.977480][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3542.983449][ C0] do_futex+0x15f/0x1ad0 [ 3542.987782][ C0] ? find_held_lock+0x2d/0x110 [ 3542.992536][ C0] ? futex_exit_release+0x60/0x60 [ 3542.997539][ C0] ? lock_downgrade+0x840/0x840 [ 3543.002368][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3543.007210][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.013184][ C0] ? __might_fault+0x190/0x1d0 [ 3543.017925][ C0] ? _copy_to_user+0x126/0x160 [ 3543.022679][ C0] __x64_sys_futex+0x376/0x4f0 [ 3543.027444][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3543.032054][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3543.037511][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.043477][ C0] ? do_syscall_64+0x21/0x7d0 [ 3543.048143][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.054126][ C0] do_syscall_64+0xf6/0x7d0 [ 3543.058621][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3543.064499][ C0] RIP: 0033:0x45ca69 [ 3543.068400][ C0] Code: Bad RIP value. [ 3543.072451][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3543.080835][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3543.088805][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3543.096780][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3543.104736][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3543.112699][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3543.120659][ C0] syz-executor.2 S29824 10855 6995 0x00000000 [ 3543.126996][ C0] Call Trace: [ 3543.130292][ C0] __schedule+0x8f3/0x1fc0 [ 3543.134708][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3543.139988][ C0] ? firmware_map_remove+0x19d/0x19d [ 3543.145268][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3543.150728][ C0] schedule+0xd0/0x2a0 [ 3543.154801][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3543.159889][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3543.165345][ C0] futex_wait+0x1e2/0x550 [ 3543.169678][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3543.174692][ C0] ? print_usage_bug+0x240/0x240 [ 3543.179618][ C0] ? hash_futex+0x10/0x200 [ 3543.184025][ C0] ? futex_wake+0x153/0x480 [ 3543.188542][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.194520][ C0] ? mark_lock+0x11f/0xdd0 [ 3543.198913][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.204886][ C0] do_futex+0x15f/0x1ad0 [ 3543.209139][ C0] ? find_held_lock+0x2d/0x110 [ 3543.213910][ C0] ? futex_exit_release+0x60/0x60 [ 3543.218913][ C0] ? lock_downgrade+0x840/0x840 [ 3543.223742][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3543.228581][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.234556][ C0] ? __might_fault+0x190/0x1d0 [ 3543.239308][ C0] ? _copy_to_user+0x126/0x160 [ 3543.244056][ C0] __x64_sys_futex+0x376/0x4f0 [ 3543.248816][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3543.253316][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3543.258755][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.264726][ C0] ? do_syscall_64+0x21/0x7d0 [ 3543.269404][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.275375][ C0] do_syscall_64+0xf6/0x7d0 [ 3543.279857][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3543.285734][ C0] RIP: 0033:0x45ca69 [ 3543.289635][ C0] Code: Bad RIP value. [ 3543.293686][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3543.302116][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3543.310075][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3543.318044][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3543.326011][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3543.333971][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3543.341933][ C0] syz-executor.2 S29824 10873 6995 0x00000000 [ 3543.348338][ C0] Call Trace: [ 3543.351621][ C0] __schedule+0x8f3/0x1fc0 [ 3543.356046][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3543.361326][ C0] ? firmware_map_remove+0x19d/0x19d [ 3543.366602][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3543.372071][ C0] schedule+0xd0/0x2a0 [ 3543.376123][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3543.381222][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3543.386675][ C0] futex_wait+0x1e2/0x550 [ 3543.391010][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3543.396025][ C0] ? print_usage_bug+0x240/0x240 [ 3543.400950][ C0] ? hash_futex+0x10/0x200 [ 3543.405356][ C0] ? futex_wake+0x153/0x480 [ 3543.409875][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.415854][ C0] ? mark_lock+0x11f/0xdd0 [ 3543.420375][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.426350][ C0] do_futex+0x15f/0x1ad0 [ 3543.430605][ C0] ? find_held_lock+0x2d/0x110 [ 3543.435372][ C0] ? futex_exit_release+0x60/0x60 [ 3543.440396][ C0] ? lock_downgrade+0x840/0x840 [ 3543.445238][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3543.450090][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.456073][ C0] ? __might_fault+0x190/0x1d0 [ 3543.460827][ C0] ? _copy_to_user+0x126/0x160 [ 3543.465592][ C0] __x64_sys_futex+0x376/0x4f0 [ 3543.470364][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3543.474858][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3543.480294][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.486264][ C0] ? do_syscall_64+0x21/0x7d0 [ 3543.490938][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.496922][ C0] do_syscall_64+0xf6/0x7d0 [ 3543.501429][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3543.507322][ C0] RIP: 0033:0x45ca69 [ 3543.511210][ C0] Code: Bad RIP value. [ 3543.515251][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3543.523634][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3543.531596][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3543.539557][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3543.547514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3543.555483][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3543.563456][ C0] syz-executor.2 S29824 10881 6995 0x00000000 [ 3543.569775][ C0] Call Trace: [ 3543.573059][ C0] __schedule+0x8f3/0x1fc0 [ 3543.577482][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3543.582776][ C0] ? firmware_map_remove+0x19d/0x19d [ 3543.588072][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3543.593526][ C0] schedule+0xd0/0x2a0 [ 3543.597576][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3543.602664][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3543.608129][ C0] futex_wait+0x1e2/0x550 [ 3543.612454][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3543.617478][ C0] ? print_usage_bug+0x240/0x240 [ 3543.622403][ C0] ? hash_futex+0x10/0x200 [ 3543.626811][ C0] ? futex_wake+0x153/0x480 [ 3543.631325][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.637280][ C0] ? mark_lock+0x11f/0xdd0 [ 3543.641685][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.647670][ C0] do_futex+0x15f/0x1ad0 [ 3543.651921][ C0] ? find_held_lock+0x2d/0x110 [ 3543.656665][ C0] ? futex_exit_release+0x60/0x60 [ 3543.661681][ C0] ? lock_downgrade+0x840/0x840 [ 3543.666520][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3543.671390][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.677365][ C0] ? __might_fault+0x190/0x1d0 [ 3543.682112][ C0] ? _copy_to_user+0x126/0x160 [ 3543.686893][ C0] __x64_sys_futex+0x376/0x4f0 [ 3543.691661][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3543.696168][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3543.701606][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.707575][ C0] ? do_syscall_64+0x21/0x7d0 [ 3543.712253][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.718212][ C0] do_syscall_64+0xf6/0x7d0 [ 3543.722692][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3543.728569][ C0] RIP: 0033:0x45ca69 [ 3543.732478][ C0] Code: Bad RIP value. [ 3543.736536][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3543.744944][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3543.752916][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3543.760863][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3543.768820][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3543.776781][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3543.784759][ C0] syz-executor.2 S29824 10888 6995 0x00000000 [ 3543.791093][ C0] Call Trace: [ 3543.794397][ C0] __schedule+0x8f3/0x1fc0 [ 3543.798816][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3543.804080][ C0] ? firmware_map_remove+0x19d/0x19d [ 3543.809366][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3543.814833][ C0] schedule+0xd0/0x2a0 [ 3543.818899][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3543.824013][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3543.829487][ C0] futex_wait+0x1e2/0x550 [ 3543.833810][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3543.838812][ C0] ? print_usage_bug+0x240/0x240 [ 3543.843731][ C0] ? hash_futex+0x10/0x200 [ 3543.848141][ C0] ? futex_wake+0x153/0x480 [ 3543.852642][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.858608][ C0] ? mark_lock+0x11f/0xdd0 [ 3543.863008][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3543.868982][ C0] do_futex+0x15f/0x1ad0 [ 3543.873221][ C0] ? find_held_lock+0x2d/0x110 [ 3543.877969][ C0] ? futex_exit_release+0x60/0x60 [ 3543.883015][ C0] ? lock_downgrade+0x840/0x840 [ 3543.887857][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3543.892706][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.898704][ C0] ? __might_fault+0x190/0x1d0 [ 3543.903446][ C0] ? _copy_to_user+0x126/0x160 [ 3543.908212][ C0] __x64_sys_futex+0x376/0x4f0 [ 3543.912981][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3543.917475][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3543.922912][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.928903][ C0] ? do_syscall_64+0x21/0x7d0 [ 3543.933573][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3543.939534][ C0] do_syscall_64+0xf6/0x7d0 [ 3543.944028][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3543.949905][ C0] RIP: 0033:0x45ca69 [ 3543.953794][ C0] Code: Bad RIP value. [ 3543.957835][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3543.966247][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3543.974204][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3543.982150][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3543.990112][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3543.998073][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3544.006052][ C0] syz-executor.2 S29824 10898 6995 0x00000000 [ 3544.012384][ C0] Call Trace: [ 3544.015669][ C0] __schedule+0x8f3/0x1fc0 [ 3544.020092][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3544.025384][ C0] ? firmware_map_remove+0x19d/0x19d [ 3544.030688][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3544.036135][ C0] schedule+0xd0/0x2a0 [ 3544.040196][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3544.045297][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3544.050761][ C0] futex_wait+0x1e2/0x550 [ 3544.055084][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3544.060090][ C0] ? print_usage_bug+0x240/0x240 [ 3544.065023][ C0] ? hash_futex+0x10/0x200 [ 3544.069442][ C0] ? futex_wake+0x153/0x480 [ 3544.073941][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.079896][ C0] ? mark_lock+0x11f/0xdd0 [ 3544.084288][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.090260][ C0] do_futex+0x15f/0x1ad0 [ 3544.094512][ C0] ? find_held_lock+0x2d/0x110 [ 3544.099267][ C0] ? futex_exit_release+0x60/0x60 [ 3544.104282][ C0] ? lock_downgrade+0x840/0x840 [ 3544.109127][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3544.113968][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.119933][ C0] ? __might_fault+0x190/0x1d0 [ 3544.124690][ C0] ? _copy_to_user+0x126/0x160 [ 3544.129472][ C0] __x64_sys_futex+0x376/0x4f0 [ 3544.134228][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3544.138743][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3544.144179][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.150152][ C0] ? do_syscall_64+0x21/0x7d0 [ 3544.154817][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.160788][ C0] do_syscall_64+0xf6/0x7d0 [ 3544.165289][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3544.171174][ C0] RIP: 0033:0x45ca69 [ 3544.175058][ C0] Code: Bad RIP value. [ 3544.179097][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3544.187493][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3544.195453][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3544.203403][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3544.211362][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3544.224028][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3544.231997][ C0] syz-executor.2 S28904 10901 6995 0x00000000 [ 3544.238338][ C0] Call Trace: [ 3544.241613][ C0] __schedule+0x8f3/0x1fc0 [ 3544.246024][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3544.251302][ C0] ? firmware_map_remove+0x19d/0x19d [ 3544.256602][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3544.262042][ C0] schedule+0xd0/0x2a0 [ 3544.266107][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3544.271225][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3544.276670][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.282639][ C0] futex_wait+0x1e2/0x550 [ 3544.286973][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3544.291994][ C0] ? finish_task_switch+0x147/0x750 [ 3544.297170][ C0] ? hash_futex+0x10/0x200 [ 3544.301563][ C0] ? futex_wake+0x153/0x480 [ 3544.306136][ C0] ? perf_sched_cb_inc+0x250/0x250 [ 3544.311274][ C0] ? finish_task_switch+0x147/0x750 [ 3544.316464][ C0] ? finish_task_switch+0x119/0x750 [ 3544.321643][ C0] do_futex+0x15f/0x1ad0 [ 3544.325885][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3544.331346][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.337327][ C0] ? retint_kernel+0x2b/0x2b [ 3544.341897][ C0] ? trace_hardirqs_on_caller+0x64/0x240 [ 3544.347523][ C0] ? futex_exit_release+0x60/0x60 [ 3544.352549][ C0] ? preempt_schedule_irq+0xee/0x150 [ 3544.357855][ C0] ? retint_kernel+0x2b/0x2b [ 3544.362427][ C0] ? _copy_to_user+0xe6/0x160 [ 3544.367092][ C0] ? _copy_to_user+0xf0/0x160 [ 3544.371789][ C0] ? _copy_to_user+0xf0/0x160 [ 3544.376446][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3544.381885][ C0] __x64_sys_futex+0x376/0x4f0 [ 3544.386649][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3544.391144][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3544.396591][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.402550][ C0] ? do_syscall_64+0x21/0x7d0 [ 3544.407217][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.413189][ C0] do_syscall_64+0xf6/0x7d0 [ 3544.417673][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3544.423640][ C0] RIP: 0033:0x45ca69 [ 3544.427532][ C0] Code: Bad RIP value. [ 3544.431603][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3544.440024][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3544.447980][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3544.455983][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3544.463951][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3544.471914][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3544.479874][ C0] syz-executor.2 S29824 10916 6995 0x00000000 [ 3544.486190][ C0] Call Trace: [ 3544.489485][ C0] __schedule+0x8f3/0x1fc0 [ 3544.493907][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3544.499183][ C0] ? firmware_map_remove+0x19d/0x19d [ 3544.504461][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3544.509948][ C0] schedule+0xd0/0x2a0 [ 3544.514028][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3544.519122][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3544.524585][ C0] futex_wait+0x1e2/0x550 [ 3544.528921][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3544.533936][ C0] ? print_usage_bug+0x240/0x240 [ 3544.538867][ C0] ? hash_futex+0x10/0x200 [ 3544.543330][ C0] ? futex_wake+0x153/0x480 [ 3544.547851][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.553819][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.559778][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.565751][ C0] do_futex+0x15f/0x1ad0 [ 3544.570017][ C0] ? find_held_lock+0x2d/0x110 [ 3544.574773][ C0] ? futex_exit_release+0x60/0x60 [ 3544.579776][ C0] ? lock_downgrade+0x840/0x840 [ 3544.584617][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3544.589465][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.595464][ C0] ? __might_fault+0x190/0x1d0 [ 3544.600222][ C0] ? _copy_to_user+0x126/0x160 [ 3544.604985][ C0] __x64_sys_futex+0x376/0x4f0 [ 3544.609759][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3544.614253][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3544.619707][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.625679][ C0] ? do_syscall_64+0x21/0x7d0 [ 3544.630352][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.636321][ C0] do_syscall_64+0xf6/0x7d0 [ 3544.640814][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3544.646691][ C0] RIP: 0033:0x45ca69 [ 3544.650593][ C0] Code: Bad RIP value. [ 3544.654652][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3544.663050][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3544.671010][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3544.678997][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3544.686954][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3544.694915][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3544.702886][ C0] syz-executor.2 S29824 10949 6995 0x00000000 [ 3544.709200][ C0] Call Trace: [ 3544.712483][ C0] __schedule+0x8f3/0x1fc0 [ 3544.716890][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3544.722154][ C0] ? firmware_map_remove+0x19d/0x19d [ 3544.727432][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3544.732881][ C0] schedule+0xd0/0x2a0 [ 3544.736929][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3544.742016][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3544.747469][ C0] futex_wait+0x1e2/0x550 [ 3544.751790][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3544.756795][ C0] ? print_usage_bug+0x240/0x240 [ 3544.761709][ C0] ? hash_futex+0x10/0x200 [ 3544.766113][ C0] ? futex_wake+0x153/0x480 [ 3544.770634][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.776618][ C0] ? mark_lock+0x11f/0xdd0 [ 3544.781016][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.786995][ C0] do_futex+0x15f/0x1ad0 [ 3544.791247][ C0] ? find_held_lock+0x2d/0x110 [ 3544.796007][ C0] ? futex_exit_release+0x60/0x60 [ 3544.801017][ C0] ? lock_downgrade+0x840/0x840 [ 3544.805861][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3544.810708][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.816683][ C0] ? __might_fault+0x190/0x1d0 [ 3544.821424][ C0] ? _copy_to_user+0x126/0x160 [ 3544.826187][ C0] __x64_sys_futex+0x376/0x4f0 [ 3544.830956][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3544.835467][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3544.840900][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.846871][ C0] ? do_syscall_64+0x21/0x7d0 [ 3544.851537][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3544.857598][ C0] do_syscall_64+0xf6/0x7d0 [ 3544.862081][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3544.867962][ C0] RIP: 0033:0x45ca69 [ 3544.871863][ C0] Code: Bad RIP value. [ 3544.875922][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3544.884321][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3544.892272][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3544.900231][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3544.908185][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3544.916143][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3544.924115][ C0] syz-executor.2 S29824 10956 6995 0x00000000 [ 3544.930448][ C0] Call Trace: [ 3544.933744][ C0] __schedule+0x8f3/0x1fc0 [ 3544.938141][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3544.943428][ C0] ? firmware_map_remove+0x19d/0x19d [ 3544.948723][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3544.954171][ C0] schedule+0xd0/0x2a0 [ 3544.958220][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3544.963314][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3544.968770][ C0] futex_wait+0x1e2/0x550 [ 3544.973103][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3544.978106][ C0] ? print_usage_bug+0x240/0x240 [ 3544.983025][ C0] ? hash_futex+0x10/0x200 [ 3544.987436][ C0] ? futex_wake+0x153/0x480 [ 3544.991951][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3544.997934][ C0] ? mark_lock+0x11f/0xdd0 [ 3545.002326][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3545.008299][ C0] do_futex+0x15f/0x1ad0 [ 3545.012556][ C0] ? find_held_lock+0x2d/0x110 [ 3545.017318][ C0] ? futex_exit_release+0x60/0x60 [ 3545.022320][ C0] ? lock_downgrade+0x840/0x840 [ 3545.027161][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3545.032006][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.037981][ C0] ? __might_fault+0x190/0x1d0 [ 3545.042741][ C0] ? _copy_to_user+0x126/0x160 [ 3545.047529][ C0] __x64_sys_futex+0x376/0x4f0 [ 3545.052286][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3545.056771][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3545.062206][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.068179][ C0] ? do_syscall_64+0x21/0x7d0 [ 3545.072843][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.078821][ C0] do_syscall_64+0xf6/0x7d0 [ 3545.083304][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3545.089186][ C0] RIP: 0033:0x45ca69 [ 3545.093079][ C0] Code: Bad RIP value. [ 3545.097135][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3545.105530][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3545.113488][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3545.121435][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3545.129388][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3545.137384][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3545.145368][ C0] syz-executor.2 S29824 10964 6995 0x00000000 [ 3545.151711][ C0] Call Trace: [ 3545.154983][ C0] __schedule+0x8f3/0x1fc0 [ 3545.159381][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3545.164662][ C0] ? firmware_map_remove+0x19d/0x19d [ 3545.169948][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3545.175399][ C0] schedule+0xd0/0x2a0 [ 3545.179449][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3545.184550][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3545.190018][ C0] futex_wait+0x1e2/0x550 [ 3545.194355][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3545.199384][ C0] ? print_usage_bug+0x240/0x240 [ 3545.204298][ C0] ? hash_futex+0x10/0x200 [ 3545.208707][ C0] ? futex_wake+0x153/0x480 [ 3545.213205][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3545.219160][ C0] ? mark_lock+0x11f/0xdd0 [ 3545.223564][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3545.229536][ C0] do_futex+0x15f/0x1ad0 [ 3545.233773][ C0] ? find_held_lock+0x2d/0x110 [ 3545.238515][ C0] ? futex_exit_release+0x60/0x60 [ 3545.243517][ C0] ? lock_downgrade+0x840/0x840 [ 3545.248356][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3545.253194][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.259171][ C0] ? __might_fault+0x190/0x1d0 [ 3545.263912][ C0] ? _copy_to_user+0x126/0x160 [ 3545.268681][ C0] __x64_sys_futex+0x376/0x4f0 [ 3545.273445][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3545.277931][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3545.283365][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.289336][ C0] ? do_syscall_64+0x21/0x7d0 [ 3545.294001][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.299958][ C0] do_syscall_64+0xf6/0x7d0 [ 3545.304454][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3545.310345][ C0] RIP: 0033:0x45ca69 [ 3545.314235][ C0] Code: Bad RIP value. [ 3545.318277][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3545.326671][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3545.334639][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3545.342601][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3545.350558][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3545.358519][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3545.366498][ C0] syz-executor.2 S29824 10978 6995 0x00000000 [ 3545.372844][ C0] Call Trace: [ 3545.376117][ C0] __schedule+0x8f3/0x1fc0 [ 3545.380514][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3545.385796][ C0] ? firmware_map_remove+0x19d/0x19d [ 3545.391090][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3545.396541][ C0] schedule+0xd0/0x2a0 [ 3545.400589][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3545.405693][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3545.411158][ C0] futex_wait+0x1e2/0x550 [ 3545.415495][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3545.420512][ C0] ? print_usage_bug+0x240/0x240 [ 3545.425442][ C0] ? hash_futex+0x10/0x200 [ 3545.429863][ C0] ? futex_wake+0x153/0x480 [ 3545.434379][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3545.440349][ C0] ? mark_lock+0x11f/0xdd0 [ 3545.444781][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3545.450770][ C0] do_futex+0x15f/0x1ad0 [ 3545.455008][ C0] ? find_held_lock+0x2d/0x110 [ 3545.459749][ C0] ? futex_exit_release+0x60/0x60 [ 3545.464764][ C0] ? lock_downgrade+0x840/0x840 [ 3545.469614][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3545.474456][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.480429][ C0] ? __might_fault+0x190/0x1d0 [ 3545.485190][ C0] ? _copy_to_user+0x126/0x160 [ 3545.489964][ C0] __x64_sys_futex+0x376/0x4f0 [ 3545.494739][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3545.499237][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3545.504686][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.510667][ C0] ? do_syscall_64+0x21/0x7d0 [ 3545.515358][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.521339][ C0] do_syscall_64+0xf6/0x7d0 [ 3545.525837][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3545.531731][ C0] RIP: 0033:0x45ca69 [ 3545.535637][ C0] Code: Bad RIP value. [ 3545.539693][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3545.548091][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3545.556171][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3545.564155][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3545.572107][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3545.580067][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3545.588068][ C0] syz-executor.2 S29824 10990 6995 0x00000000 [ 3545.594404][ C0] Call Trace: [ 3545.597704][ C0] __schedule+0x8f3/0x1fc0 [ 3545.602102][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3545.607407][ C0] ? firmware_map_remove+0x19d/0x19d [ 3545.612700][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3545.618187][ C0] schedule+0xd0/0x2a0 [ 3545.622267][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3545.627370][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3545.632841][ C0] futex_wait+0x1e2/0x550 [ 3545.637161][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3545.642191][ C0] ? print_usage_bug+0x240/0x240 [ 3545.647127][ C0] ? hash_futex+0x10/0x200 [ 3545.651544][ C0] ? futex_wake+0x153/0x480 [ 3545.656075][ C0] ? do_wp_page+0x512/0x1440 [ 3545.660660][ C0] do_futex+0x15f/0x1ad0 [ 3545.664908][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3545.670112][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3545.674952][ C0] ? futex_exit_release+0x60/0x60 [ 3545.679969][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3545.684817][ C0] ? lock_downgrade+0x840/0x840 [ 3545.689666][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3545.694688][ C0] __x64_sys_futex+0x376/0x4f0 [ 3545.699446][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3545.703935][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3545.709390][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.715374][ C0] ? do_syscall_64+0x21/0x7d0 [ 3545.720032][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.726015][ C0] do_syscall_64+0xf6/0x7d0 [ 3545.730529][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3545.736407][ C0] RIP: 0033:0x45ca69 [ 3545.740287][ C0] Code: Bad RIP value. [ 3545.744339][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3545.752739][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3545.760687][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3545.768645][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3545.776606][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3545.784562][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3545.792537][ C0] syz-executor.2 S29824 11027 6995 0x00000000 [ 3545.798848][ C0] Call Trace: [ 3545.802122][ C0] __schedule+0x8f3/0x1fc0 [ 3545.806550][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3545.811828][ C0] ? firmware_map_remove+0x19d/0x19d [ 3545.817105][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3545.822551][ C0] schedule+0xd0/0x2a0 [ 3545.826616][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3545.831717][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3545.837165][ C0] futex_wait+0x1e2/0x550 [ 3545.841484][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3545.846500][ C0] ? print_usage_bug+0x240/0x240 [ 3545.851445][ C0] ? hash_futex+0x10/0x200 [ 3545.855862][ C0] ? futex_wake+0x153/0x480 [ 3545.860354][ C0] ? do_wp_page+0x512/0x1440 [ 3545.864939][ C0] do_futex+0x15f/0x1ad0 [ 3545.869216][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3545.874419][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3545.879257][ C0] ? futex_exit_release+0x60/0x60 [ 3545.884272][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3545.889120][ C0] ? lock_downgrade+0x840/0x840 [ 3545.893979][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3545.898993][ C0] __x64_sys_futex+0x376/0x4f0 [ 3545.903755][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3545.908269][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3545.913731][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.919691][ C0] ? do_syscall_64+0x21/0x7d0 [ 3545.924344][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3545.930328][ C0] do_syscall_64+0xf6/0x7d0 [ 3545.934822][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3545.940688][ C0] RIP: 0033:0x45ca69 [ 3545.944579][ C0] Code: Bad RIP value. [ 3545.948645][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3545.957043][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3545.965003][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3545.972978][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3545.980927][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3545.991134][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3545.999097][ C0] syz-executor.2 S29824 11066 6995 0x00000000 [ 3546.005413][ C0] Call Trace: [ 3546.008710][ C0] __schedule+0x8f3/0x1fc0 [ 3546.013117][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3546.018388][ C0] ? firmware_map_remove+0x19d/0x19d [ 3546.023662][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3546.029120][ C0] schedule+0xd0/0x2a0 [ 3546.033185][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3546.038286][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3546.043735][ C0] futex_wait+0x1e2/0x550 [ 3546.048068][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3546.053092][ C0] ? print_usage_bug+0x240/0x240 [ 3546.058030][ C0] ? hash_futex+0x10/0x200 [ 3546.062424][ C0] ? futex_wake+0x153/0x480 [ 3546.066939][ C0] ? do_wp_page+0x512/0x1440 [ 3546.071521][ C0] do_futex+0x15f/0x1ad0 [ 3546.075749][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3546.080938][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3546.085783][ C0] ? futex_exit_release+0x60/0x60 [ 3546.090831][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3546.095687][ C0] ? lock_downgrade+0x840/0x840 [ 3546.100514][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3546.105552][ C0] __x64_sys_futex+0x376/0x4f0 [ 3546.110324][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3546.114819][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3546.120252][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.126232][ C0] ? do_syscall_64+0x21/0x7d0 [ 3546.130910][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.136898][ C0] do_syscall_64+0xf6/0x7d0 [ 3546.141407][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3546.147298][ C0] RIP: 0033:0x45ca69 [ 3546.151203][ C0] Code: Bad RIP value. [ 3546.155264][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3546.163674][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3546.171662][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3546.179634][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3546.187603][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3546.195572][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3546.203567][ C0] syz-executor.2 S29824 11100 6995 0x00000000 [ 3546.209888][ C0] Call Trace: [ 3546.213187][ C0] __schedule+0x8f3/0x1fc0 [ 3546.217585][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3546.222851][ C0] ? firmware_map_remove+0x19d/0x19d [ 3546.228131][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3546.233592][ C0] schedule+0xd0/0x2a0 [ 3546.237652][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3546.242740][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3546.248186][ C0] ? find_held_lock+0x2d/0x110 [ 3546.252956][ C0] futex_wait+0x1e2/0x550 [ 3546.257286][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3546.262295][ C0] ? print_usage_bug+0x240/0x240 [ 3546.267241][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3546.272485][ C0] ? futex_wake+0x153/0x480 [ 3546.276979][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.282934][ C0] ? mark_lock+0x11f/0xdd0 [ 3546.287365][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.293337][ C0] do_futex+0x15f/0x1ad0 [ 3546.297578][ C0] ? find_held_lock+0x2d/0x110 [ 3546.302323][ C0] ? futex_exit_release+0x60/0x60 [ 3546.307350][ C0] ? lock_downgrade+0x840/0x840 [ 3546.312205][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3546.317054][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.323021][ C0] ? __might_fault+0x190/0x1d0 [ 3546.327776][ C0] ? _copy_to_user+0x126/0x160 [ 3546.332577][ C0] __x64_sys_futex+0x376/0x4f0 [ 3546.337340][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3546.341821][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3546.347270][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.353238][ C0] ? do_syscall_64+0x21/0x7d0 [ 3546.357894][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.363861][ C0] do_syscall_64+0xf6/0x7d0 [ 3546.368362][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3546.374242][ C0] RIP: 0033:0x45ca69 [ 3546.378122][ C0] Code: Bad RIP value. [ 3546.382162][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3546.390554][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3546.398512][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3546.406468][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3546.414433][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3546.422406][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3546.430387][ C0] syz-executor.2 S29824 11143 6995 0x00000000 [ 3546.436716][ C0] Call Trace: [ 3546.439998][ C0] __schedule+0x8f3/0x1fc0 [ 3546.444410][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3546.449720][ C0] ? firmware_map_remove+0x19d/0x19d [ 3546.454999][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3546.460453][ C0] schedule+0xd0/0x2a0 [ 3546.464514][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3546.469627][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3546.475077][ C0] futex_wait+0x1e2/0x550 [ 3546.479401][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3546.484427][ C0] ? print_usage_bug+0x240/0x240 [ 3546.489373][ C0] ? hash_futex+0x10/0x200 [ 3546.493781][ C0] ? futex_wake+0x153/0x480 [ 3546.498281][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.504244][ C0] ? mark_lock+0x11f/0xdd0 [ 3546.508652][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.514639][ C0] do_futex+0x15f/0x1ad0 [ 3546.518878][ C0] ? find_held_lock+0x2d/0x110 [ 3546.523626][ C0] ? futex_exit_release+0x60/0x60 [ 3546.528646][ C0] ? lock_downgrade+0x840/0x840 [ 3546.533489][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3546.538335][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.544308][ C0] ? __might_fault+0x190/0x1d0 [ 3546.549062][ C0] ? _copy_to_user+0x126/0x160 [ 3546.553819][ C0] __x64_sys_futex+0x376/0x4f0 [ 3546.558579][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3546.563074][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3546.568536][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.574532][ C0] ? do_syscall_64+0x21/0x7d0 [ 3546.579197][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.585188][ C0] do_syscall_64+0xf6/0x7d0 [ 3546.589705][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3546.595607][ C0] RIP: 0033:0x45ca69 [ 3546.599500][ C0] Code: Bad RIP value. [ 3546.603542][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3546.611933][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3546.619924][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3546.627895][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3546.635866][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3546.643840][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3546.651812][ C0] syz-executor.2 S29824 11178 6995 0x00000000 [ 3546.658122][ C0] Call Trace: [ 3546.661393][ C0] __schedule+0x8f3/0x1fc0 [ 3546.665799][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3546.671118][ C0] ? firmware_map_remove+0x19d/0x19d [ 3546.676404][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3546.681841][ C0] schedule+0xd0/0x2a0 [ 3546.685905][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3546.691024][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3546.696505][ C0] futex_wait+0x1e2/0x550 [ 3546.700829][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3546.705861][ C0] ? print_usage_bug+0x240/0x240 [ 3546.710803][ C0] ? hash_futex+0x10/0x200 [ 3546.715208][ C0] ? futex_wake+0x153/0x480 [ 3546.719708][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.725689][ C0] ? mark_lock+0x11f/0xdd0 [ 3546.730108][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.736077][ C0] do_futex+0x15f/0x1ad0 [ 3546.740303][ C0] ? find_held_lock+0x2d/0x110 [ 3546.745062][ C0] ? futex_exit_release+0x60/0x60 [ 3546.750094][ C0] ? lock_downgrade+0x840/0x840 [ 3546.754936][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3546.759765][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.765773][ C0] ? __might_fault+0x190/0x1d0 [ 3546.770546][ C0] ? _copy_to_user+0x126/0x160 [ 3546.775305][ C0] __x64_sys_futex+0x376/0x4f0 [ 3546.780054][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3546.784559][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3546.790024][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.795997][ C0] ? do_syscall_64+0x21/0x7d0 [ 3546.800663][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.806655][ C0] do_syscall_64+0xf6/0x7d0 [ 3546.811151][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3546.817026][ C0] RIP: 0033:0x45ca69 [ 3546.820904][ C0] Code: Bad RIP value. [ 3546.824951][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3546.833361][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3546.841309][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3546.849264][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3546.857224][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3546.865181][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3546.873153][ C0] syz-executor.2 S29816 11446 6995 0x00000000 [ 3546.879461][ C0] Call Trace: [ 3546.882733][ C0] __schedule+0x8f3/0x1fc0 [ 3546.887140][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3546.892432][ C0] ? firmware_map_remove+0x19d/0x19d [ 3546.897697][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3546.903133][ C0] schedule+0xd0/0x2a0 [ 3546.907194][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3546.912292][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3546.917731][ C0] futex_wait+0x1e2/0x550 [ 3546.922040][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3546.927061][ C0] ? print_usage_bug+0x240/0x240 [ 3546.931988][ C0] ? hash_futex+0x10/0x200 [ 3546.936399][ C0] ? futex_wake+0x153/0x480 [ 3546.940887][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.946861][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3546.952830][ C0] do_futex+0x15f/0x1ad0 [ 3546.957065][ C0] ? find_held_lock+0x2d/0x110 [ 3546.961806][ C0] ? futex_exit_release+0x60/0x60 [ 3546.966824][ C0] ? lock_downgrade+0x840/0x840 [ 3546.971677][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3546.976520][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3546.982482][ C0] ? __might_fault+0x190/0x1d0 [ 3546.987236][ C0] ? _copy_to_user+0x126/0x160 [ 3546.992017][ C0] __x64_sys_futex+0x376/0x4f0 [ 3546.996774][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3547.001268][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3547.006732][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.012714][ C0] ? do_syscall_64+0x21/0x7d0 [ 3547.017370][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.023329][ C0] do_syscall_64+0xf6/0x7d0 [ 3547.027829][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3547.033728][ C0] RIP: 0033:0x45ca69 [ 3547.037622][ C0] Code: Bad RIP value. [ 3547.041663][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3547.050058][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3547.058032][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3547.065991][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3547.073964][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3547.081915][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3547.089898][ C0] syz-executor.2 S29824 11489 6995 0x00000000 [ 3547.096227][ C0] Call Trace: [ 3547.099510][ C0] __schedule+0x8f3/0x1fc0 [ 3547.103905][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3547.109188][ C0] ? firmware_map_remove+0x19d/0x19d [ 3547.114479][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3547.119934][ C0] schedule+0xd0/0x2a0 [ 3547.123993][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3547.129142][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3547.134608][ C0] futex_wait+0x1e2/0x550 [ 3547.138919][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3547.143933][ C0] ? print_usage_bug+0x240/0x240 [ 3547.148870][ C0] ? hash_futex+0x10/0x200 [ 3547.153305][ C0] ? futex_wake+0x153/0x480 [ 3547.157796][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.163763][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.169741][ C0] do_futex+0x15f/0x1ad0 [ 3547.173992][ C0] ? find_held_lock+0x2d/0x110 [ 3547.179785][ C0] ? futex_exit_release+0x60/0x60 [ 3547.184806][ C0] ? lock_downgrade+0x840/0x840 [ 3547.189663][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3547.194503][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.200479][ C0] ? __might_fault+0x190/0x1d0 [ 3547.205254][ C0] ? _copy_to_user+0x126/0x160 [ 3547.210038][ C0] __x64_sys_futex+0x376/0x4f0 [ 3547.214796][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3547.219279][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3547.224740][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.230719][ C0] ? do_syscall_64+0x21/0x7d0 [ 3547.235397][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.241366][ C0] do_syscall_64+0xf6/0x7d0 [ 3547.245865][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3547.251760][ C0] RIP: 0033:0x45ca69 [ 3547.255640][ C0] Code: Bad RIP value. [ 3547.259686][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3547.268101][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3547.276105][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3547.284067][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3547.292023][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3547.299999][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3547.307978][ C0] syz-executor.2 S29816 11527 6995 0x00000000 [ 3547.314308][ C0] Call Trace: [ 3547.317578][ C0] __schedule+0x8f3/0x1fc0 [ 3547.321972][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3547.327251][ C0] ? firmware_map_remove+0x19d/0x19d [ 3547.332525][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3547.337962][ C0] schedule+0xd0/0x2a0 [ 3547.342009][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3547.347115][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3547.352565][ C0] futex_wait+0x1e2/0x550 [ 3547.356875][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3547.361874][ C0] ? print_usage_bug+0x240/0x240 [ 3547.366801][ C0] ? hash_futex+0x10/0x200 [ 3547.371220][ C0] ? futex_wake+0x153/0x480 [ 3547.375720][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.381676][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.387648][ C0] do_futex+0x15f/0x1ad0 [ 3547.391900][ C0] ? find_held_lock+0x2d/0x110 [ 3547.396644][ C0] ? futex_exit_release+0x60/0x60 [ 3547.401646][ C0] ? lock_downgrade+0x840/0x840 [ 3547.406488][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3547.411340][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.417332][ C0] ? __might_fault+0x190/0x1d0 [ 3547.422116][ C0] ? _copy_to_user+0x126/0x160 [ 3547.426881][ C0] __x64_sys_futex+0x376/0x4f0 [ 3547.431649][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3547.436144][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3547.441590][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.447560][ C0] ? do_syscall_64+0x21/0x7d0 [ 3547.452236][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.458211][ C0] do_syscall_64+0xf6/0x7d0 [ 3547.462695][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3547.468593][ C0] RIP: 0033:0x45ca69 [ 3547.472483][ C0] Code: Bad RIP value. [ 3547.476522][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3547.484915][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3547.492871][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3547.500829][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3547.508799][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3547.516810][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3547.524789][ C0] syz-executor.2 S29824 11605 6995 0x00000000 [ 3547.531116][ C0] Call Trace: [ 3547.534398][ C0] __schedule+0x8f3/0x1fc0 [ 3547.538805][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3547.544069][ C0] ? firmware_map_remove+0x19d/0x19d [ 3547.549349][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3547.554810][ C0] schedule+0xd0/0x2a0 [ 3547.558857][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3547.563954][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3547.569407][ C0] futex_wait+0x1e2/0x550 [ 3547.573743][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3547.578760][ C0] ? print_usage_bug+0x240/0x240 [ 3547.583676][ C0] ? hash_futex+0x10/0x200 [ 3547.588083][ C0] ? futex_wake+0x153/0x480 [ 3547.592599][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.598569][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.604539][ C0] do_futex+0x15f/0x1ad0 [ 3547.608798][ C0] ? find_held_lock+0x2d/0x110 [ 3547.613563][ C0] ? futex_exit_release+0x60/0x60 [ 3547.618567][ C0] ? lock_downgrade+0x840/0x840 [ 3547.623394][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3547.628232][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.634207][ C0] ? __might_fault+0x190/0x1d0 [ 3547.638949][ C0] ? _copy_to_user+0x126/0x160 [ 3547.643694][ C0] __x64_sys_futex+0x376/0x4f0 [ 3547.648453][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3547.652946][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3547.658393][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.664368][ C0] ? do_syscall_64+0x21/0x7d0 [ 3547.669046][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.675017][ C0] do_syscall_64+0xf6/0x7d0 [ 3547.679500][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3547.685377][ C0] RIP: 0033:0x45ca69 [ 3547.689275][ C0] Code: Bad RIP value. [ 3547.693325][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3547.701713][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3547.709685][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3547.717658][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3547.725614][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3547.733572][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3547.741533][ C0] syz-executor.2 S29824 11673 6995 0x00000000 [ 3547.747848][ C0] Call Trace: [ 3547.751137][ C0] __schedule+0x8f3/0x1fc0 [ 3547.755543][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3547.760833][ C0] ? firmware_map_remove+0x19d/0x19d [ 3547.766115][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3547.771562][ C0] schedule+0xd0/0x2a0 [ 3547.775622][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3547.780720][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3547.786180][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.792151][ C0] futex_wait+0x1e2/0x550 [ 3547.796462][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3547.801502][ C0] ? print_usage_bug+0x240/0x240 [ 3547.806432][ C0] ? hash_futex+0x10/0x200 [ 3547.810846][ C0] ? futex_wake+0x153/0x480 [ 3547.815345][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.821310][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3547.827113][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3547.833084][ C0] do_futex+0x15f/0x1ad0 [ 3547.837323][ C0] ? find_held_lock+0x2d/0x110 [ 3547.842238][ C0] ? futex_exit_release+0x60/0x60 [ 3547.847255][ C0] ? lock_downgrade+0x840/0x840 [ 3547.852119][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3547.856957][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.862916][ C0] ? __might_fault+0x190/0x1d0 [ 3547.867671][ C0] ? _copy_to_user+0x126/0x160 [ 3547.872443][ C0] __x64_sys_futex+0x376/0x4f0 [ 3547.877208][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3547.881701][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3547.887147][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.893121][ C0] ? do_syscall_64+0x21/0x7d0 [ 3547.897778][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3547.903748][ C0] do_syscall_64+0xf6/0x7d0 [ 3547.908243][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3547.914131][ C0] RIP: 0033:0x45ca69 [ 3547.918011][ C0] Code: Bad RIP value. [ 3547.922067][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3547.930465][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3547.938422][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3547.946379][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3547.954346][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3547.962304][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3547.970282][ C0] syz-executor.2 S29816 11731 6995 0x00000000 [ 3547.976618][ C0] Call Trace: [ 3547.979919][ C0] __schedule+0x8f3/0x1fc0 [ 3547.984312][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3547.989608][ C0] ? firmware_map_remove+0x19d/0x19d [ 3547.994899][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3548.000336][ C0] schedule+0xd0/0x2a0 [ 3548.004398][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3548.009511][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3548.014977][ C0] futex_wait+0x1e2/0x550 [ 3548.019287][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3548.024287][ C0] ? print_usage_bug+0x240/0x240 [ 3548.029216][ C0] ? hash_futex+0x10/0x200 [ 3548.033631][ C0] ? futex_wake+0x153/0x480 [ 3548.038145][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.044117][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.050087][ C0] do_futex+0x15f/0x1ad0 [ 3548.054341][ C0] ? find_held_lock+0x2d/0x110 [ 3548.059098][ C0] ? futex_exit_release+0x60/0x60 [ 3548.064119][ C0] ? lock_downgrade+0x840/0x840 [ 3548.068964][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3548.073802][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.079766][ C0] ? __might_fault+0x190/0x1d0 [ 3548.084520][ C0] ? _copy_to_user+0x126/0x160 [ 3548.089296][ C0] __x64_sys_futex+0x376/0x4f0 [ 3548.094065][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3548.098547][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3548.103979][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.109964][ C0] ? do_syscall_64+0x21/0x7d0 [ 3548.114633][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.120624][ C0] do_syscall_64+0xf6/0x7d0 [ 3548.125125][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3548.131014][ C0] RIP: 0033:0x45ca69 [ 3548.134941][ C0] Code: Bad RIP value. [ 3548.138990][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3548.147390][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3548.155405][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3548.163380][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3548.171342][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3548.179310][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3548.187383][ C0] syz-executor.0 S29824 11886 6809 0x00000000 [ 3548.193716][ C0] Call Trace: [ 3548.197006][ C0] __schedule+0x8f3/0x1fc0 [ 3548.201405][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3548.206696][ C0] ? firmware_map_remove+0x19d/0x19d [ 3548.211990][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3548.217435][ C0] schedule+0xd0/0x2a0 [ 3548.221488][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3548.226591][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3548.232043][ C0] futex_wait+0x1e2/0x550 [ 3548.236359][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3548.241366][ C0] ? print_usage_bug+0x240/0x240 [ 3548.246296][ C0] ? hash_futex+0x10/0x200 [ 3548.250722][ C0] ? futex_wake+0x153/0x480 [ 3548.255265][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.261263][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.267247][ C0] do_futex+0x15f/0x1ad0 [ 3548.271491][ C0] ? find_held_lock+0x2d/0x110 [ 3548.276280][ C0] ? futex_exit_release+0x60/0x60 [ 3548.281328][ C0] ? lock_downgrade+0x840/0x840 [ 3548.286172][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3548.291023][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.297003][ C0] ? __might_fault+0x190/0x1d0 [ 3548.301753][ C0] ? _copy_to_user+0x126/0x160 [ 3548.306520][ C0] __x64_sys_futex+0x376/0x4f0 [ 3548.311298][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3548.315796][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3548.321262][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.327232][ C0] ? do_syscall_64+0x21/0x7d0 [ 3548.331907][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.337869][ C0] do_syscall_64+0xf6/0x7d0 [ 3548.342352][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3548.348232][ C0] RIP: 0033:0x45ca69 [ 3548.352121][ C0] Code: Bad RIP value. [ 3548.356182][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3548.364592][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3548.372550][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3548.380508][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3548.388481][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3548.396455][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3548.404431][ C0] syz-executor.0 S29824 11937 6809 0x00000000 [ 3548.410770][ C0] Call Trace: [ 3548.414056][ C0] __schedule+0x8f3/0x1fc0 [ 3548.418454][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3548.423717][ C0] ? firmware_map_remove+0x19d/0x19d [ 3548.429003][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3548.434483][ C0] schedule+0xd0/0x2a0 [ 3548.438547][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3548.443635][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3548.449100][ C0] futex_wait+0x1e2/0x550 [ 3548.453429][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3548.458438][ C0] ? wake_up_q+0xc1/0x140 [ 3548.462750][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3548.467941][ C0] ? futex_wake+0x153/0x480 [ 3548.472442][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.478404][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3548.484197][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.490173][ C0] do_futex+0x15f/0x1ad0 [ 3548.494429][ C0] ? find_held_lock+0x2d/0x110 [ 3548.499189][ C0] ? futex_exit_release+0x60/0x60 [ 3548.504202][ C0] ? lock_downgrade+0x840/0x840 [ 3548.509045][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3548.513902][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.519865][ C0] ? __might_fault+0x190/0x1d0 [ 3548.524618][ C0] ? _copy_to_user+0x126/0x160 [ 3548.529394][ C0] __x64_sys_futex+0x376/0x4f0 [ 3548.534149][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3548.538649][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3548.544083][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.550051][ C0] ? do_syscall_64+0x21/0x7d0 [ 3548.554717][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.560674][ C0] do_syscall_64+0xf6/0x7d0 [ 3548.565172][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3548.571055][ C0] RIP: 0033:0x45ca69 [ 3548.574949][ C0] Code: Bad RIP value. [ 3548.578988][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3548.587382][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3548.595339][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3548.603294][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3548.611249][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3548.619230][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3548.627214][ C0] syz-executor.0 S29824 11980 6809 0x00000000 [ 3548.633543][ C0] Call Trace: [ 3548.636817][ C0] __schedule+0x8f3/0x1fc0 [ 3548.641221][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3548.646519][ C0] ? firmware_map_remove+0x19d/0x19d [ 3548.651795][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3548.657232][ C0] schedule+0xd0/0x2a0 [ 3548.661292][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3548.666393][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3548.671843][ C0] futex_wait+0x1e2/0x550 [ 3548.676156][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3548.681158][ C0] ? wake_up_q+0xc1/0x140 [ 3548.685474][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3548.690671][ C0] ? futex_wake+0x153/0x480 [ 3548.695192][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.701169][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3548.706976][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.712952][ C0] do_futex+0x15f/0x1ad0 [ 3548.717181][ C0] ? find_held_lock+0x2d/0x110 [ 3548.721939][ C0] ? futex_exit_release+0x60/0x60 [ 3548.726958][ C0] ? lock_downgrade+0x840/0x840 [ 3548.731828][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3548.736668][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.742630][ C0] ? __might_fault+0x190/0x1d0 [ 3548.747664][ C0] ? _copy_to_user+0x126/0x160 [ 3548.752436][ C0] __x64_sys_futex+0x376/0x4f0 [ 3548.757190][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3548.761673][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3548.767119][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.773097][ C0] ? do_syscall_64+0x21/0x7d0 [ 3548.777783][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.783754][ C0] do_syscall_64+0xf6/0x7d0 [ 3548.788250][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3548.794128][ C0] RIP: 0033:0x45ca69 [ 3548.798011][ C0] Code: Bad RIP value. [ 3548.802050][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3548.810443][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3548.818403][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3548.826362][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3548.834319][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3548.842266][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3548.850244][ C0] syz-executor.0 S29824 12044 6809 0x00000000 [ 3548.856578][ C0] Call Trace: [ 3548.859862][ C0] __schedule+0x8f3/0x1fc0 [ 3548.864255][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3548.869537][ C0] ? firmware_map_remove+0x19d/0x19d [ 3548.874813][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3548.880262][ C0] schedule+0xd0/0x2a0 [ 3548.884308][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3548.889408][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3548.894861][ C0] futex_wait+0x1e2/0x550 [ 3548.899174][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3548.904173][ C0] ? print_usage_bug+0x240/0x240 [ 3548.909102][ C0] ? hash_futex+0x10/0x200 [ 3548.913517][ C0] ? futex_wake+0x153/0x480 [ 3548.918034][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.923994][ C0] ? mark_lock+0x11f/0xdd0 [ 3548.928420][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3548.934404][ C0] do_futex+0x15f/0x1ad0 [ 3548.938644][ C0] ? find_held_lock+0x2d/0x110 [ 3548.943396][ C0] ? futex_exit_release+0x60/0x60 [ 3548.948414][ C0] ? lock_downgrade+0x840/0x840 [ 3548.953253][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3548.958081][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.964042][ C0] ? __might_fault+0x190/0x1d0 [ 3548.968796][ C0] ? _copy_to_user+0x126/0x160 [ 3548.973568][ C0] __x64_sys_futex+0x376/0x4f0 [ 3548.978313][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3548.982805][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3548.988250][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3548.994218][ C0] ? do_syscall_64+0x21/0x7d0 [ 3548.998876][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.004849][ C0] do_syscall_64+0xf6/0x7d0 [ 3549.009355][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3549.015242][ C0] RIP: 0033:0x45ca69 [ 3549.019132][ C0] Code: Bad RIP value. [ 3549.023172][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3549.031572][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3549.039518][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3549.047474][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3549.055462][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3549.063421][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3549.071380][ C0] syz-executor.0 S29824 12131 6809 0x00000000 [ 3549.077700][ C0] Call Trace: [ 3549.080970][ C0] __schedule+0x8f3/0x1fc0 [ 3549.085484][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3549.090778][ C0] ? firmware_map_remove+0x19d/0x19d [ 3549.096054][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3549.101490][ C0] schedule+0xd0/0x2a0 [ 3549.105553][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3549.110679][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3549.116146][ C0] futex_wait+0x1e2/0x550 [ 3549.120468][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3549.125481][ C0] ? print_usage_bug+0x240/0x240 [ 3549.130420][ C0] ? hash_futex+0x10/0x200 [ 3549.134839][ C0] ? futex_wake+0x153/0x480 [ 3549.139346][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.145843][ C0] ? mark_lock+0x11f/0xdd0 [ 3549.150264][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.156277][ C0] do_futex+0x15f/0x1ad0 [ 3549.160504][ C0] ? find_held_lock+0x2d/0x110 [ 3549.165270][ C0] ? futex_exit_release+0x60/0x60 [ 3549.170301][ C0] ? lock_downgrade+0x840/0x840 [ 3549.175143][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3549.179973][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.185957][ C0] ? __might_fault+0x190/0x1d0 [ 3549.190727][ C0] ? _copy_to_user+0x126/0x160 [ 3549.195495][ C0] __x64_sys_futex+0x376/0x4f0 [ 3549.200257][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3549.204754][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3549.210227][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.216217][ C0] ? do_syscall_64+0x21/0x7d0 [ 3549.220872][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.226846][ C0] do_syscall_64+0xf6/0x7d0 [ 3549.231342][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3549.237216][ C0] RIP: 0033:0x45ca69 [ 3549.241112][ C0] Code: Bad RIP value. [ 3549.245161][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3549.253559][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3549.261508][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3549.269465][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3549.277833][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3549.285791][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3549.293773][ C0] syz-executor.0 S29824 12587 6809 0x00000000 [ 3549.300091][ C0] Call Trace: [ 3549.303361][ C0] __schedule+0x8f3/0x1fc0 [ 3549.307767][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3549.313047][ C0] ? firmware_map_remove+0x19d/0x19d [ 3549.318311][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3549.323783][ C0] schedule+0xd0/0x2a0 [ 3549.327848][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3549.332977][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3549.338417][ C0] futex_wait+0x1e2/0x550 [ 3549.342725][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3549.347759][ C0] ? print_usage_bug+0x240/0x240 [ 3549.352688][ C0] ? hash_futex+0x10/0x200 [ 3549.357085][ C0] ? futex_wake+0x153/0x480 [ 3549.361571][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.367538][ C0] ? mark_lock+0x11f/0xdd0 [ 3549.371943][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.377933][ C0] do_futex+0x15f/0x1ad0 [ 3549.382159][ C0] ? find_held_lock+0x2d/0x110 [ 3549.386916][ C0] ? futex_exit_release+0x60/0x60 [ 3549.391943][ C0] ? lock_downgrade+0x840/0x840 [ 3549.396802][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3549.401629][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.407614][ C0] ? __might_fault+0x190/0x1d0 [ 3549.412378][ C0] ? _copy_to_user+0x126/0x160 [ 3549.417138][ C0] __x64_sys_futex+0x376/0x4f0 [ 3549.421882][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3549.426377][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3549.431822][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.437797][ C0] ? do_syscall_64+0x21/0x7d0 [ 3549.442471][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.448448][ C0] do_syscall_64+0xf6/0x7d0 [ 3549.452945][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3549.458829][ C0] RIP: 0033:0x45ca69 [ 3549.462719][ C0] Code: Bad RIP value. [ 3549.466768][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3549.475167][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3549.483112][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3549.491071][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3549.499034][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3549.506997][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3549.515001][ C0] syz-executor.0 S28976 12596 6809 0x00000000 [ 3549.521345][ C0] Call Trace: [ 3549.524634][ C0] __schedule+0x8f3/0x1fc0 [ 3549.529060][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3549.534335][ C0] ? firmware_map_remove+0x19d/0x19d [ 3549.539602][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3549.545057][ C0] schedule+0xd0/0x2a0 [ 3549.549127][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3549.554225][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3549.559664][ C0] futex_wait+0x1e2/0x550 [ 3549.563975][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3549.568995][ C0] ? print_usage_bug+0x240/0x240 [ 3549.573921][ C0] ? hash_futex+0x10/0x200 [ 3549.578315][ C0] ? futex_wake+0x153/0x480 [ 3549.582803][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.588775][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.594759][ C0] do_futex+0x15f/0x1ad0 [ 3549.599003][ C0] ? find_held_lock+0x2d/0x110 [ 3549.603745][ C0] ? futex_exit_release+0x60/0x60 [ 3549.608766][ C0] ? lock_downgrade+0x840/0x840 [ 3549.613608][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3549.618448][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.624426][ C0] ? __might_fault+0x190/0x1d0 [ 3549.629196][ C0] ? _copy_to_user+0x126/0x160 [ 3549.633984][ C0] __x64_sys_futex+0x376/0x4f0 [ 3549.638747][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3549.643230][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3549.648682][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.654663][ C0] ? do_syscall_64+0x21/0x7d0 [ 3549.659330][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.665337][ C0] do_syscall_64+0xf6/0x7d0 [ 3549.669877][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3549.675806][ C0] RIP: 0033:0x45ca69 [ 3549.679687][ C0] Code: Bad RIP value. [ 3549.683727][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3549.692111][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3549.700065][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3549.708022][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3549.715993][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3549.723966][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3549.731928][ C0] syz-executor.0 S28976 12601 6809 0x00000000 [ 3549.738257][ C0] Call Trace: [ 3549.741554][ C0] __schedule+0x8f3/0x1fc0 [ 3549.745972][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3549.751248][ C0] ? firmware_map_remove+0x19d/0x19d [ 3549.756514][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3549.761951][ C0] schedule+0xd0/0x2a0 [ 3549.766013][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3549.771117][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3549.776735][ C0] futex_wait+0x1e2/0x550 [ 3549.781043][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3549.786058][ C0] ? print_usage_bug+0x240/0x240 [ 3549.791006][ C0] ? hash_futex+0x10/0x200 [ 3549.795411][ C0] ? futex_wake+0x153/0x480 [ 3549.799904][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.805880][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3549.811849][ C0] do_futex+0x15f/0x1ad0 [ 3549.816094][ C0] ? find_held_lock+0x2d/0x110 [ 3549.820854][ C0] ? futex_exit_release+0x60/0x60 [ 3549.825874][ C0] ? lock_downgrade+0x840/0x840 [ 3549.830729][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3549.835568][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.841544][ C0] ? __might_fault+0x190/0x1d0 [ 3549.846320][ C0] ? _copy_to_user+0x126/0x160 [ 3549.851095][ C0] __x64_sys_futex+0x376/0x4f0 [ 3549.855854][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3549.860337][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3549.865785][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.871768][ C0] ? do_syscall_64+0x21/0x7d0 [ 3549.876424][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3549.882384][ C0] do_syscall_64+0xf6/0x7d0 [ 3549.886882][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3549.892773][ C0] RIP: 0033:0x45ca69 [ 3549.896654][ C0] Code: Bad RIP value. [ 3549.900695][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3549.909091][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3549.917058][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3549.925017][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3549.932978][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3549.941029][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3549.949013][ C0] syz-executor.0 S29824 12637 6809 0x00000000 [ 3549.955351][ C0] Call Trace: [ 3549.958650][ C0] __schedule+0x8f3/0x1fc0 [ 3549.963060][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3549.968345][ C0] ? firmware_map_remove+0x19d/0x19d [ 3549.973640][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3549.979081][ C0] schedule+0xd0/0x2a0 [ 3549.983149][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3549.988255][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3549.993712][ C0] ? find_held_lock+0x2d/0x110 [ 3549.998482][ C0] futex_wait+0x1e2/0x550 [ 3550.002793][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3550.007808][ C0] ? print_usage_bug+0x240/0x240 [ 3550.012747][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3550.017923][ C0] ? futex_wake+0x153/0x480 [ 3550.022424][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.028399][ C0] ? mark_lock+0x11f/0xdd0 [ 3550.032851][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.038830][ C0] do_futex+0x15f/0x1ad0 [ 3550.043072][ C0] ? find_held_lock+0x2d/0x110 [ 3550.047829][ C0] ? futex_exit_release+0x60/0x60 [ 3550.052856][ C0] ? lock_downgrade+0x840/0x840 [ 3550.057700][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3550.062529][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.068510][ C0] ? __might_fault+0x190/0x1d0 [ 3550.073263][ C0] ? _copy_to_user+0x126/0x160 [ 3550.078050][ C0] __x64_sys_futex+0x376/0x4f0 [ 3550.082827][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3550.087337][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3550.092790][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.098750][ C0] ? do_syscall_64+0x21/0x7d0 [ 3550.103421][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.109396][ C0] do_syscall_64+0xf6/0x7d0 [ 3550.113891][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3550.119762][ C0] RIP: 0033:0x45ca69 [ 3550.123663][ C0] Code: Bad RIP value. [ 3550.127714][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3550.136133][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3550.144089][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3550.152048][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3550.160040][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3550.168001][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3550.175997][ C0] syz-executor.0 S29824 12653 6809 0x00000000 [ 3550.182339][ C0] Call Trace: [ 3550.185630][ C0] __schedule+0x8f3/0x1fc0 [ 3550.190071][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3550.195383][ C0] ? firmware_map_remove+0x19d/0x19d [ 3550.200646][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3550.206099][ C0] schedule+0xd0/0x2a0 [ 3550.210173][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3550.215274][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3550.220714][ C0] ? find_held_lock+0x2d/0x110 [ 3550.225474][ C0] futex_wait+0x1e2/0x550 [ 3550.229810][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3550.234830][ C0] ? print_usage_bug+0x240/0x240 [ 3550.239756][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3550.244963][ C0] ? futex_wake+0x153/0x480 [ 3550.249485][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.255468][ C0] ? mark_lock+0x11f/0xdd0 [ 3550.259874][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.265848][ C0] do_futex+0x15f/0x1ad0 [ 3550.270115][ C0] ? find_held_lock+0x2d/0x110 [ 3550.275357][ C0] ? futex_exit_release+0x60/0x60 [ 3550.280365][ C0] ? lock_downgrade+0x840/0x840 [ 3550.285223][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3550.290076][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.296051][ C0] ? __might_fault+0x190/0x1d0 [ 3550.300795][ C0] ? _copy_to_user+0x126/0x160 [ 3550.305558][ C0] __x64_sys_futex+0x376/0x4f0 [ 3550.310328][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3550.314820][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3550.320254][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.326226][ C0] ? do_syscall_64+0x21/0x7d0 [ 3550.330900][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.336876][ C0] do_syscall_64+0xf6/0x7d0 [ 3550.341372][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3550.347249][ C0] RIP: 0033:0x45ca69 [ 3550.351172][ C0] Code: Bad RIP value. [ 3550.355315][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3550.363700][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3550.371655][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3550.379625][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3550.387593][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3550.395573][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3550.403548][ C0] syz-executor.0 S29824 12706 6809 0x00000000 [ 3550.409866][ C0] Call Trace: [ 3550.413151][ C0] __schedule+0x8f3/0x1fc0 [ 3550.417558][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3550.422834][ C0] ? firmware_map_remove+0x19d/0x19d [ 3550.428111][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3550.433563][ C0] schedule+0xd0/0x2a0 [ 3550.438394][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3550.443496][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3550.448954][ C0] futex_wait+0x1e2/0x550 [ 3550.453277][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3550.458283][ C0] ? print_usage_bug+0x240/0x240 [ 3550.463201][ C0] ? hash_futex+0x10/0x200 [ 3550.467615][ C0] ? futex_wake+0x153/0x480 [ 3550.472113][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.478072][ C0] ? mark_lock+0x11f/0xdd0 [ 3550.482486][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.488461][ C0] do_futex+0x15f/0x1ad0 [ 3550.492714][ C0] ? find_held_lock+0x2d/0x110 [ 3550.497467][ C0] ? futex_exit_release+0x60/0x60 [ 3550.502470][ C0] ? lock_downgrade+0x840/0x840 [ 3550.507317][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3550.512174][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.518149][ C0] ? __might_fault+0x190/0x1d0 [ 3550.522890][ C0] ? _copy_to_user+0x126/0x160 [ 3550.527652][ C0] __x64_sys_futex+0x376/0x4f0 [ 3550.532407][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3550.536906][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3550.542357][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.548330][ C0] ? do_syscall_64+0x21/0x7d0 [ 3550.553016][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.558975][ C0] do_syscall_64+0xf6/0x7d0 [ 3550.563463][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3550.569340][ C0] RIP: 0033:0x45ca69 [ 3550.573239][ C0] Code: Bad RIP value. [ 3550.577290][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3550.585716][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3550.593686][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3550.601643][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3550.609621][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3550.617585][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3550.625566][ C0] syz-executor.0 S28904 12727 6809 0x00000000 [ 3550.631896][ C0] Call Trace: [ 3550.635183][ C0] __schedule+0x8f3/0x1fc0 [ 3550.639591][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3550.644871][ C0] ? firmware_map_remove+0x19d/0x19d [ 3550.650161][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3550.655622][ C0] schedule+0xd0/0x2a0 [ 3550.659668][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3550.664767][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3550.670236][ C0] futex_wait+0x1e2/0x550 [ 3550.674571][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3550.679597][ C0] ? print_usage_bug+0x240/0x240 [ 3550.684528][ C0] ? hash_futex+0x10/0x200 [ 3550.688945][ C0] ? futex_wake+0x153/0x480 [ 3550.693447][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.699416][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.705407][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.711406][ C0] do_futex+0x15f/0x1ad0 [ 3550.715672][ C0] ? find_held_lock+0x2d/0x110 [ 3550.720443][ C0] ? futex_exit_release+0x60/0x60 [ 3550.725462][ C0] ? lock_downgrade+0x840/0x840 [ 3550.730323][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3550.735184][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.741159][ C0] ? __might_fault+0x190/0x1d0 [ 3550.745917][ C0] ? _copy_to_user+0x126/0x160 [ 3550.750712][ C0] __x64_sys_futex+0x376/0x4f0 [ 3550.755469][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3550.759953][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3550.765400][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.771370][ C0] ? do_syscall_64+0x21/0x7d0 [ 3550.776039][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.782024][ C0] do_syscall_64+0xf6/0x7d0 [ 3550.786557][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3550.792438][ C0] RIP: 0033:0x45ca69 [ 3550.796338][ C0] Code: Bad RIP value. [ 3550.800388][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3550.808782][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3550.816747][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3550.824707][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3550.832668][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3550.840641][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3550.848635][ C0] syz-executor.0 S29824 12736 6809 0x00000000 [ 3550.854970][ C0] Call Trace: [ 3550.858726][ C0] __schedule+0x8f3/0x1fc0 [ 3550.863132][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3550.868416][ C0] ? firmware_map_remove+0x19d/0x19d [ 3550.873716][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3550.879156][ C0] schedule+0xd0/0x2a0 [ 3550.883227][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3550.888356][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3550.893811][ C0] futex_wait+0x1e2/0x550 [ 3550.898133][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3550.903146][ C0] ? print_usage_bug+0x240/0x240 [ 3550.908076][ C0] ? hash_futex+0x10/0x200 [ 3550.912479][ C0] ? futex_wake+0x153/0x480 [ 3550.916969][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.922929][ C0] ? mark_lock+0x11f/0xdd0 [ 3550.927343][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3550.933315][ C0] do_futex+0x15f/0x1ad0 [ 3550.937557][ C0] ? find_held_lock+0x2d/0x110 [ 3550.942300][ C0] ? futex_exit_release+0x60/0x60 [ 3550.947324][ C0] ? lock_downgrade+0x840/0x840 [ 3550.952180][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3550.957027][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.963092][ C0] ? __might_fault+0x190/0x1d0 [ 3550.967846][ C0] ? _copy_to_user+0x126/0x160 [ 3550.972614][ C0] __x64_sys_futex+0x376/0x4f0 [ 3550.977371][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3550.981854][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3550.987322][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3550.993294][ C0] ? do_syscall_64+0x21/0x7d0 [ 3550.997950][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.003909][ C0] do_syscall_64+0xf6/0x7d0 [ 3551.008416][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3551.014296][ C0] RIP: 0033:0x45ca69 [ 3551.018175][ C0] Code: Bad RIP value. [ 3551.022216][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3551.030614][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3551.038587][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3551.046545][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3551.054514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3551.062476][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3551.070454][ C0] syz-executor.0 S29824 12767 6809 0x00000000 [ 3551.076783][ C0] Call Trace: [ 3551.080053][ C0] __schedule+0x8f3/0x1fc0 [ 3551.084458][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3551.089766][ C0] ? firmware_map_remove+0x19d/0x19d [ 3551.095057][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3551.100506][ C0] schedule+0xd0/0x2a0 [ 3551.104587][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3551.109721][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3551.115188][ C0] futex_wait+0x1e2/0x550 [ 3551.119497][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3551.124512][ C0] ? print_usage_bug+0x240/0x240 [ 3551.129456][ C0] ? hash_futex+0x10/0x200 [ 3551.133905][ C0] ? futex_wake+0x153/0x480 [ 3551.138403][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.144365][ C0] ? mark_lock+0x11f/0xdd0 [ 3551.148798][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.154806][ C0] do_futex+0x15f/0x1ad0 [ 3551.159040][ C0] ? find_held_lock+0x2d/0x110 [ 3551.163785][ C0] ? futex_exit_release+0x60/0x60 [ 3551.168805][ C0] ? lock_downgrade+0x840/0x840 [ 3551.173646][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3551.178494][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.184562][ C0] ? __might_fault+0x190/0x1d0 [ 3551.189330][ C0] ? _copy_to_user+0x126/0x160 [ 3551.194089][ C0] __x64_sys_futex+0x376/0x4f0 [ 3551.198836][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3551.203342][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3551.208799][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.214773][ C0] ? do_syscall_64+0x21/0x7d0 [ 3551.219432][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.225418][ C0] do_syscall_64+0xf6/0x7d0 [ 3551.229935][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3551.235817][ C0] RIP: 0033:0x45ca69 [ 3551.239714][ C0] Code: Bad RIP value. [ 3551.243758][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3551.252156][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3551.260147][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3551.268113][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3551.276096][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3551.284059][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3551.292029][ C0] syz-executor.0 S29824 12774 6809 0x00000000 [ 3551.298353][ C0] Call Trace: [ 3551.301636][ C0] __schedule+0x8f3/0x1fc0 [ 3551.306051][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3551.311343][ C0] ? firmware_map_remove+0x19d/0x19d [ 3551.316609][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3551.322228][ C0] schedule+0xd0/0x2a0 [ 3551.326290][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3551.331406][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3551.336852][ C0] futex_wait+0x1e2/0x550 [ 3551.341163][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3551.346177][ C0] ? print_usage_bug+0x240/0x240 [ 3551.351119][ C0] ? hash_futex+0x10/0x200 [ 3551.355530][ C0] ? futex_wake+0x153/0x480 [ 3551.360049][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.366017][ C0] ? mark_lock+0x11f/0xdd0 [ 3551.370439][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.376427][ C0] do_futex+0x15f/0x1ad0 [ 3551.380652][ C0] ? find_held_lock+0x2d/0x110 [ 3551.385408][ C0] ? futex_exit_release+0x60/0x60 [ 3551.390438][ C0] ? lock_downgrade+0x840/0x840 [ 3551.395279][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3551.400106][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.406088][ C0] ? __might_fault+0x190/0x1d0 [ 3551.410853][ C0] ? _copy_to_user+0x126/0x160 [ 3551.415611][ C0] __x64_sys_futex+0x376/0x4f0 [ 3551.420366][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3551.424862][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3551.430320][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.436290][ C0] ? do_syscall_64+0x21/0x7d0 [ 3551.440956][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.446938][ C0] do_syscall_64+0xf6/0x7d0 [ 3551.451447][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3551.457330][ C0] RIP: 0033:0x45ca69 [ 3551.461208][ C0] Code: Bad RIP value. [ 3551.465255][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3551.473657][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3551.481608][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3551.489564][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3551.497530][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3551.505489][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3551.513473][ C0] syz-executor.0 S29824 12783 6809 0x00000000 [ 3551.519793][ C0] Call Trace: [ 3551.523064][ C0] __schedule+0x8f3/0x1fc0 [ 3551.527491][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3551.532789][ C0] ? firmware_map_remove+0x19d/0x19d [ 3551.538060][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3551.543506][ C0] schedule+0xd0/0x2a0 [ 3551.547658][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3551.552779][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3551.558215][ C0] ? find_held_lock+0x2d/0x110 [ 3551.562966][ C0] futex_wait+0x1e2/0x550 [ 3551.567292][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3551.572313][ C0] ? print_usage_bug+0x240/0x240 [ 3551.577244][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3551.582430][ C0] ? futex_wake+0x153/0x480 [ 3551.586952][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.592951][ C0] ? mark_lock+0x11f/0xdd0 [ 3551.597348][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.603324][ C0] do_futex+0x15f/0x1ad0 [ 3551.607580][ C0] ? find_held_lock+0x2d/0x110 [ 3551.612349][ C0] ? futex_exit_release+0x60/0x60 [ 3551.617367][ C0] ? lock_downgrade+0x840/0x840 [ 3551.622219][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3551.627062][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.633036][ C0] ? __might_fault+0x190/0x1d0 [ 3551.637779][ C0] ? _copy_to_user+0x126/0x160 [ 3551.642533][ C0] __x64_sys_futex+0x376/0x4f0 [ 3551.647303][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3551.651815][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3551.657251][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.663217][ C0] ? do_syscall_64+0x21/0x7d0 [ 3551.667881][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.673867][ C0] do_syscall_64+0xf6/0x7d0 [ 3551.678364][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3551.684230][ C0] RIP: 0033:0x45ca69 [ 3551.688120][ C0] Code: Bad RIP value. [ 3551.692184][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3551.700583][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3551.708554][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3551.716514][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3551.724476][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3551.732441][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3551.740419][ C0] syz-executor.0 S28800 12820 6809 0x00000000 [ 3551.746736][ C0] Call Trace: [ 3551.750039][ C0] __schedule+0x8f3/0x1fc0 [ 3551.754457][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3551.759734][ C0] ? firmware_map_remove+0x19d/0x19d [ 3551.765016][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3551.770491][ C0] schedule+0xd0/0x2a0 [ 3551.774549][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3551.779650][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3551.785106][ C0] futex_wait+0x1e2/0x550 [ 3551.789441][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3551.794465][ C0] ? print_usage_bug+0x240/0x240 [ 3551.799403][ C0] ? kernel_text_address+0x6e/0xe0 [ 3551.804506][ C0] ? hash_futex+0x10/0x200 [ 3551.808923][ C0] ? futex_wake+0x153/0x480 [ 3551.813423][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.819388][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 3551.825198][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3551.831179][ C0] do_futex+0x15f/0x1ad0 [ 3551.835418][ C0] ? find_held_lock+0x2d/0x110 [ 3551.840160][ C0] ? futex_exit_release+0x60/0x60 [ 3551.845181][ C0] ? lock_downgrade+0x840/0x840 [ 3551.850038][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3551.854878][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.860840][ C0] ? __might_fault+0x190/0x1d0 [ 3551.865596][ C0] ? _copy_to_user+0x126/0x160 [ 3551.870369][ C0] __x64_sys_futex+0x376/0x4f0 [ 3551.875137][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3551.879618][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3551.885068][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.891050][ C0] ? do_syscall_64+0x21/0x7d0 [ 3551.895722][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3551.901694][ C0] do_syscall_64+0xf6/0x7d0 [ 3551.906193][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3551.912078][ C0] RIP: 0033:0x45ca69 [ 3551.915981][ C0] Code: Bad RIP value. [ 3551.920039][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3551.928432][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3551.936418][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3551.944400][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3551.952359][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3551.960318][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3551.968316][ C0] syz-executor.0 S28800 12872 6809 0x00000000 [ 3551.974660][ C0] Call Trace: [ 3551.977944][ C0] __schedule+0x8f3/0x1fc0 [ 3551.982338][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3551.987622][ C0] ? firmware_map_remove+0x19d/0x19d [ 3551.992898][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3551.998336][ C0] schedule+0xd0/0x2a0 [ 3552.002385][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3552.007488][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3552.012936][ C0] futex_wait+0x1e2/0x550 [ 3552.017250][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3552.022255][ C0] ? print_usage_bug+0x240/0x240 [ 3552.027184][ C0] ? kernel_text_address+0x6e/0xe0 [ 3552.032298][ C0] ? hash_futex+0x10/0x200 [ 3552.036705][ C0] ? futex_wake+0x153/0x480 [ 3552.041195][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.047161][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 3552.052971][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.058942][ C0] do_futex+0x15f/0x1ad0 [ 3552.063181][ C0] ? find_held_lock+0x2d/0x110 [ 3552.067937][ C0] ? futex_exit_release+0x60/0x60 [ 3552.072950][ C0] ? lock_downgrade+0x840/0x840 [ 3552.077781][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3552.082616][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.088597][ C0] ? __might_fault+0x190/0x1d0 [ 3552.093363][ C0] ? _copy_to_user+0x126/0x160 [ 3552.098113][ C0] __x64_sys_futex+0x376/0x4f0 [ 3552.102859][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3552.107356][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3552.112802][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.118761][ C0] ? do_syscall_64+0x21/0x7d0 [ 3552.123415][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.129398][ C0] do_syscall_64+0xf6/0x7d0 [ 3552.133896][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3552.139807][ C0] RIP: 0033:0x45ca69 [ 3552.143690][ C0] Code: Bad RIP value. [ 3552.147743][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3552.156155][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3552.164115][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3552.172065][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3552.180023][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3552.187977][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3552.195967][ C0] syz-executor.0 S29824 12971 6809 0x00000000 [ 3552.202282][ C0] Call Trace: [ 3552.205570][ C0] __schedule+0x8f3/0x1fc0 [ 3552.210011][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3552.215318][ C0] ? firmware_map_remove+0x19d/0x19d [ 3552.220592][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3552.226045][ C0] schedule+0xd0/0x2a0 [ 3552.230115][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3552.235227][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3552.240695][ C0] futex_wait+0x1e2/0x550 [ 3552.245032][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3552.250063][ C0] ? print_usage_bug+0x240/0x240 [ 3552.254992][ C0] ? hash_futex+0x10/0x200 [ 3552.259388][ C0] ? futex_wake+0x153/0x480 [ 3552.263878][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.269850][ C0] ? mark_lock+0x11f/0xdd0 [ 3552.274281][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.280244][ C0] do_futex+0x15f/0x1ad0 [ 3552.284490][ C0] ? find_held_lock+0x2d/0x110 [ 3552.289258][ C0] ? futex_exit_release+0x60/0x60 [ 3552.294275][ C0] ? lock_downgrade+0x840/0x840 [ 3552.299105][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3552.303938][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.309925][ C0] ? __might_fault+0x190/0x1d0 [ 3552.314681][ C0] ? _copy_to_user+0x126/0x160 [ 3552.319440][ C0] __x64_sys_futex+0x376/0x4f0 [ 3552.324182][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3552.328694][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3552.334146][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.340134][ C0] ? do_syscall_64+0x21/0x7d0 [ 3552.344798][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.350789][ C0] do_syscall_64+0xf6/0x7d0 [ 3552.355300][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3552.361189][ C0] RIP: 0033:0x45ca69 [ 3552.365087][ C0] Code: Bad RIP value. [ 3552.369151][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3552.377567][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3552.385526][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3552.393495][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3552.401443][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3552.409401][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3552.417375][ C0] syz-executor.0 S29824 13005 6809 0x00000000 [ 3552.423685][ C0] Call Trace: [ 3552.426974][ C0] __schedule+0x8f3/0x1fc0 [ 3552.431395][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3552.436665][ C0] ? firmware_map_remove+0x19d/0x19d [ 3552.441932][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3552.447390][ C0] schedule+0xd0/0x2a0 [ 3552.451451][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3552.456562][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3552.462012][ C0] ? find_held_lock+0x2d/0x110 [ 3552.466788][ C0] futex_wait+0x1e2/0x550 [ 3552.471131][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3552.476150][ C0] ? print_usage_bug+0x240/0x240 [ 3552.481069][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3552.486262][ C0] ? futex_wake+0x153/0x480 [ 3552.490785][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.496752][ C0] ? mark_lock+0x11f/0xdd0 [ 3552.501150][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.507128][ C0] do_futex+0x15f/0x1ad0 [ 3552.511365][ C0] ? find_held_lock+0x2d/0x110 [ 3552.516114][ C0] ? futex_exit_release+0x60/0x60 [ 3552.521128][ C0] ? lock_downgrade+0x840/0x840 [ 3552.525973][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3552.530841][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.536833][ C0] ? __might_fault+0x190/0x1d0 [ 3552.541576][ C0] ? _copy_to_user+0x126/0x160 [ 3552.546343][ C0] __x64_sys_futex+0x376/0x4f0 [ 3552.551114][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3552.555613][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3552.561051][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.567022][ C0] ? do_syscall_64+0x21/0x7d0 [ 3552.571712][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.577685][ C0] do_syscall_64+0xf6/0x7d0 [ 3552.582181][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3552.588057][ C0] RIP: 0033:0x45ca69 [ 3552.591970][ C0] Code: Bad RIP value. [ 3552.596022][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3552.604439][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3552.612417][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3552.620383][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3552.628344][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3552.636324][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3552.644298][ C0] syz-executor.0 S29824 13019 6809 0x00000000 [ 3552.650617][ C0] Call Trace: [ 3552.653903][ C0] __schedule+0x8f3/0x1fc0 [ 3552.658301][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3552.663578][ C0] ? firmware_map_remove+0x19d/0x19d [ 3552.668856][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3552.674316][ C0] schedule+0xd0/0x2a0 [ 3552.678382][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3552.683472][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3552.688933][ C0] futex_wait+0x1e2/0x550 [ 3552.693258][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3552.698436][ C0] ? print_usage_bug+0x240/0x240 [ 3552.703361][ C0] ? hash_futex+0x10/0x200 [ 3552.707768][ C0] ? futex_wake+0x153/0x480 [ 3552.712288][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.718254][ C0] ? mark_lock+0x11f/0xdd0 [ 3552.722647][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.728624][ C0] do_futex+0x15f/0x1ad0 [ 3552.732863][ C0] ? find_held_lock+0x2d/0x110 [ 3552.737607][ C0] ? futex_exit_release+0x60/0x60 [ 3552.742610][ C0] ? lock_downgrade+0x840/0x840 [ 3552.747452][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3552.752303][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.758267][ C0] ? __might_fault+0x190/0x1d0 [ 3552.763011][ C0] ? _copy_to_user+0x126/0x160 [ 3552.767776][ C0] __x64_sys_futex+0x376/0x4f0 [ 3552.772533][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3552.777018][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3552.782469][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.788441][ C0] ? do_syscall_64+0x21/0x7d0 [ 3552.793131][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.799097][ C0] do_syscall_64+0xf6/0x7d0 [ 3552.803587][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3552.809466][ C0] RIP: 0033:0x45ca69 [ 3552.813354][ C0] Code: Bad RIP value. [ 3552.817403][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3552.825813][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3552.833772][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3552.841728][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3552.849772][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3552.857741][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3552.865735][ C0] syz-executor.0 S29824 13038 6809 0x00000000 [ 3552.872064][ C0] Call Trace: [ 3552.875343][ C0] __schedule+0x8f3/0x1fc0 [ 3552.879742][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3552.885040][ C0] ? firmware_map_remove+0x19d/0x19d [ 3552.890327][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3552.895819][ C0] schedule+0xd0/0x2a0 [ 3552.899960][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3552.905093][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3552.910552][ C0] ? find_held_lock+0x2d/0x110 [ 3552.915312][ C0] futex_wait+0x1e2/0x550 [ 3552.919624][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3552.924640][ C0] ? print_usage_bug+0x240/0x240 [ 3552.929583][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3552.934786][ C0] ? futex_wake+0x153/0x480 [ 3552.939305][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.945273][ C0] ? mark_lock+0x11f/0xdd0 [ 3552.949692][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3552.955660][ C0] do_futex+0x15f/0x1ad0 [ 3552.959900][ C0] ? find_held_lock+0x2d/0x110 [ 3552.964655][ C0] ? futex_exit_release+0x60/0x60 [ 3552.969700][ C0] ? lock_downgrade+0x840/0x840 [ 3552.974540][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3552.979378][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3552.985359][ C0] ? __might_fault+0x190/0x1d0 [ 3552.990123][ C0] ? _copy_to_user+0x126/0x160 [ 3552.994883][ C0] __x64_sys_futex+0x376/0x4f0 [ 3552.999629][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3553.004112][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3553.009561][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.015640][ C0] ? do_syscall_64+0x21/0x7d0 [ 3553.020309][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.026286][ C0] do_syscall_64+0xf6/0x7d0 [ 3553.030798][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3553.036697][ C0] RIP: 0033:0x45ca69 [ 3553.040589][ C0] Code: Bad RIP value. [ 3553.044639][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3553.053053][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3553.061001][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3553.068956][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3553.076916][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3553.084874][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3553.092846][ C0] syz-executor.0 S29824 13086 6809 0x00000000 [ 3553.099167][ C0] Call Trace: [ 3553.102439][ C0] __schedule+0x8f3/0x1fc0 [ 3553.106846][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3553.112145][ C0] ? firmware_map_remove+0x19d/0x19d [ 3553.117450][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3553.122899][ C0] schedule+0xd0/0x2a0 [ 3553.126964][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3553.132086][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3553.137555][ C0] ? find_held_lock+0x2d/0x110 [ 3553.142335][ C0] futex_wait+0x1e2/0x550 [ 3553.146664][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3553.151708][ C0] ? print_usage_bug+0x240/0x240 [ 3553.156640][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3553.161818][ C0] ? futex_wake+0x153/0x480 [ 3553.166328][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.172294][ C0] ? mark_lock+0x11f/0xdd0 [ 3553.176694][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.182662][ C0] do_futex+0x15f/0x1ad0 [ 3553.186930][ C0] ? find_held_lock+0x2d/0x110 [ 3553.191684][ C0] ? futex_exit_release+0x60/0x60 [ 3553.196690][ C0] ? lock_downgrade+0x840/0x840 [ 3553.201519][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3553.206365][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.212337][ C0] ? __might_fault+0x190/0x1d0 [ 3553.217093][ C0] ? _copy_to_user+0x126/0x160 [ 3553.221853][ C0] __x64_sys_futex+0x376/0x4f0 [ 3553.226614][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3553.231120][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3553.236569][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.242545][ C0] ? do_syscall_64+0x21/0x7d0 [ 3553.247219][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.253191][ C0] do_syscall_64+0xf6/0x7d0 [ 3553.257681][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3553.263549][ C0] RIP: 0033:0x45ca69 [ 3553.267439][ C0] Code: Bad RIP value. [ 3553.271492][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3553.279881][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3553.287856][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3553.295816][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3553.303763][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3553.311726][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3553.319686][ C0] syz-executor.0 S29824 13101 6809 0x00000000 [ 3553.326005][ C0] Call Trace: [ 3553.329303][ C0] __schedule+0x8f3/0x1fc0 [ 3553.333710][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3553.338978][ C0] ? firmware_map_remove+0x19d/0x19d [ 3553.344265][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3553.349721][ C0] schedule+0xd0/0x2a0 [ 3553.353782][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3553.358881][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3553.364316][ C0] futex_wait+0x1e2/0x550 [ 3553.368649][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3553.373665][ C0] ? print_usage_bug+0x240/0x240 [ 3553.378579][ C0] ? hash_futex+0x10/0x200 [ 3553.382972][ C0] ? futex_wake+0x153/0x480 [ 3553.387486][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.393451][ C0] ? mark_lock+0x11f/0xdd0 [ 3553.397850][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.403806][ C0] do_futex+0x15f/0x1ad0 [ 3553.408049][ C0] ? find_held_lock+0x2d/0x110 [ 3553.412801][ C0] ? futex_exit_release+0x60/0x60 [ 3553.417804][ C0] ? lock_downgrade+0x840/0x840 [ 3553.422641][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3553.427478][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.433454][ C0] ? __might_fault+0x190/0x1d0 [ 3553.438207][ C0] ? _copy_to_user+0x126/0x160 [ 3553.442954][ C0] __x64_sys_futex+0x376/0x4f0 [ 3553.447717][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3553.452242][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3553.457703][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.463670][ C0] ? do_syscall_64+0x21/0x7d0 [ 3553.468337][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.474307][ C0] do_syscall_64+0xf6/0x7d0 [ 3553.478794][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3553.484672][ C0] RIP: 0033:0x45ca69 [ 3553.488570][ C0] Code: Bad RIP value. [ 3553.492621][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3553.501009][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3553.508963][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3553.516949][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3553.524907][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3553.532888][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3553.540861][ C0] syz-executor.0 S29824 13115 6809 0x00000000 [ 3553.547180][ C0] Call Trace: [ 3553.550482][ C0] __schedule+0x8f3/0x1fc0 [ 3553.554900][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3553.560190][ C0] ? firmware_map_remove+0x19d/0x19d [ 3553.565497][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3553.570967][ C0] schedule+0xd0/0x2a0 [ 3553.575052][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3553.580141][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3553.585601][ C0] futex_wait+0x1e2/0x550 [ 3553.589942][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3553.594972][ C0] ? print_usage_bug+0x240/0x240 [ 3553.599895][ C0] ? hash_futex+0x10/0x200 [ 3553.604287][ C0] ? futex_wake+0x153/0x480 [ 3553.608793][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.614759][ C0] ? mark_lock+0x11f/0xdd0 [ 3553.619152][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.625212][ C0] do_futex+0x15f/0x1ad0 [ 3553.629465][ C0] ? find_held_lock+0x2d/0x110 [ 3553.634217][ C0] ? futex_exit_release+0x60/0x60 [ 3553.639231][ C0] ? lock_downgrade+0x840/0x840 [ 3553.644061][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3553.648901][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.654902][ C0] ? __might_fault+0x190/0x1d0 [ 3553.659668][ C0] ? _copy_to_user+0x126/0x160 [ 3553.664452][ C0] __x64_sys_futex+0x376/0x4f0 [ 3553.669227][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3553.673723][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3553.679163][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.685134][ C0] ? do_syscall_64+0x21/0x7d0 [ 3553.689821][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.695807][ C0] do_syscall_64+0xf6/0x7d0 [ 3553.700306][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3553.706213][ C0] RIP: 0033:0x45ca69 [ 3553.710128][ C0] Code: Bad RIP value. [ 3553.714199][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3553.722603][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3553.730559][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3553.738531][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3553.746490][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3553.754467][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3553.762453][ C0] syz-executor.0 S29824 13150 6809 0x00000000 [ 3553.768779][ C0] Call Trace: [ 3553.772064][ C0] __schedule+0x8f3/0x1fc0 [ 3553.776463][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3553.781729][ C0] ? firmware_map_remove+0x19d/0x19d [ 3553.787030][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3553.792516][ C0] schedule+0xd0/0x2a0 [ 3553.796588][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3553.801700][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3553.807259][ C0] ? find_held_lock+0x2d/0x110 [ 3553.812034][ C0] futex_wait+0x1e2/0x550 [ 3553.816394][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3553.821425][ C0] ? print_usage_bug+0x240/0x240 [ 3553.826366][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3553.831577][ C0] ? futex_wake+0x153/0x480 [ 3553.836124][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.842156][ C0] ? mark_lock+0x11f/0xdd0 [ 3553.846573][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3553.852557][ C0] do_futex+0x15f/0x1ad0 [ 3553.856792][ C0] ? find_held_lock+0x2d/0x110 [ 3553.861546][ C0] ? futex_exit_release+0x60/0x60 [ 3553.866566][ C0] ? lock_downgrade+0x840/0x840 [ 3553.871405][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3553.876232][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.882203][ C0] ? __might_fault+0x190/0x1d0 [ 3553.886959][ C0] ? _copy_to_user+0x126/0x160 [ 3553.891739][ C0] __x64_sys_futex+0x376/0x4f0 [ 3553.896512][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3553.901024][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3553.906487][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.912472][ C0] ? do_syscall_64+0x21/0x7d0 [ 3553.917129][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3553.923096][ C0] do_syscall_64+0xf6/0x7d0 [ 3553.927599][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3553.933478][ C0] RIP: 0033:0x45ca69 [ 3553.937358][ C0] Code: Bad RIP value. [ 3553.941397][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3553.949791][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3553.957750][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3553.965707][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3553.973939][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3553.981902][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3553.989900][ C0] syz-executor.0 S29824 13165 6809 0x00000000 [ 3553.996230][ C0] Call Trace: [ 3553.999512][ C0] __schedule+0x8f3/0x1fc0 [ 3554.003918][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3554.009211][ C0] ? firmware_map_remove+0x19d/0x19d [ 3554.014504][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3554.019973][ C0] schedule+0xd0/0x2a0 [ 3554.024032][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3554.029139][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3554.034598][ C0] futex_wait+0x1e2/0x550 [ 3554.038911][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3554.043927][ C0] ? print_usage_bug+0x240/0x240 [ 3554.048865][ C0] ? hash_futex+0x10/0x200 [ 3554.053271][ C0] ? futex_wake+0x153/0x480 [ 3554.057794][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.063748][ C0] ? mark_lock+0x11f/0xdd0 [ 3554.068161][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.074132][ C0] do_futex+0x15f/0x1ad0 [ 3554.078392][ C0] ? find_held_lock+0x2d/0x110 [ 3554.083136][ C0] ? futex_exit_release+0x60/0x60 [ 3554.088156][ C0] ? lock_downgrade+0x840/0x840 [ 3554.093004][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3554.097833][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.103806][ C0] ? __might_fault+0x190/0x1d0 [ 3554.108563][ C0] ? _copy_to_user+0x126/0x160 [ 3554.113336][ C0] __x64_sys_futex+0x376/0x4f0 [ 3554.118092][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3554.122583][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3554.128032][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.134004][ C0] ? do_syscall_64+0x21/0x7d0 [ 3554.138659][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.144640][ C0] do_syscall_64+0xf6/0x7d0 [ 3554.149146][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3554.155023][ C0] RIP: 0033:0x45ca69 [ 3554.158900][ C0] Code: Bad RIP value. [ 3554.162936][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3554.171321][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3554.179269][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3554.187224][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3554.195181][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3554.203126][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3554.211103][ C0] syz-executor.0 S29824 13185 6809 0x00000000 [ 3554.217433][ C0] Call Trace: [ 3554.220704][ C0] __schedule+0x8f3/0x1fc0 [ 3554.225109][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3554.230406][ C0] ? firmware_map_remove+0x19d/0x19d [ 3554.235735][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3554.241176][ C0] schedule+0xd0/0x2a0 [ 3554.245283][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3554.250403][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3554.255857][ C0] futex_wait+0x1e2/0x550 [ 3554.260166][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3554.265181][ C0] ? print_usage_bug+0x240/0x240 [ 3554.270119][ C0] ? hash_futex+0x10/0x200 [ 3554.274563][ C0] ? futex_wake+0x153/0x480 [ 3554.279057][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.285029][ C0] ? mark_lock+0x11f/0xdd0 [ 3554.289451][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.295443][ C0] do_futex+0x15f/0x1ad0 [ 3554.299669][ C0] ? find_held_lock+0x2d/0x110 [ 3554.304425][ C0] ? futex_exit_release+0x60/0x60 [ 3554.309456][ C0] ? lock_downgrade+0x840/0x840 [ 3554.314294][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3554.319134][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.325113][ C0] ? __might_fault+0x190/0x1d0 [ 3554.329900][ C0] ? _copy_to_user+0x126/0x160 [ 3554.334684][ C0] __x64_sys_futex+0x376/0x4f0 [ 3554.339444][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3554.343924][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3554.349372][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.355354][ C0] ? do_syscall_64+0x21/0x7d0 [ 3554.360022][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.366005][ C0] do_syscall_64+0xf6/0x7d0 [ 3554.370514][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3554.376392][ C0] RIP: 0033:0x45ca69 [ 3554.380279][ C0] Code: Bad RIP value. [ 3554.384318][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3554.392703][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3554.400650][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3554.408606][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3554.416565][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3554.424521][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3554.432581][ C0] syz-executor.0 S29824 13195 6809 0x00000000 [ 3554.438896][ C0] Call Trace: [ 3554.442169][ C0] __schedule+0x8f3/0x1fc0 [ 3554.446607][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3554.451908][ C0] ? firmware_map_remove+0x19d/0x19d [ 3554.457184][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3554.462642][ C0] schedule+0xd0/0x2a0 [ 3554.466708][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3554.471856][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3554.477331][ C0] futex_wait+0x1e2/0x550 [ 3554.481645][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3554.486659][ C0] ? print_usage_bug+0x240/0x240 [ 3554.491585][ C0] ? hash_futex+0x10/0x200 [ 3554.495980][ C0] ? futex_wake+0x153/0x480 [ 3554.500468][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.506438][ C0] ? mark_lock+0x11f/0xdd0 [ 3554.510875][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.516859][ C0] do_futex+0x15f/0x1ad0 [ 3554.521107][ C0] ? find_held_lock+0x2d/0x110 [ 3554.525867][ C0] ? futex_exit_release+0x60/0x60 [ 3554.530897][ C0] ? lock_downgrade+0x840/0x840 [ 3554.535739][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3554.540565][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.546566][ C0] ? __might_fault+0x190/0x1d0 [ 3554.551336][ C0] ? _copy_to_user+0x126/0x160 [ 3554.556158][ C0] __x64_sys_futex+0x376/0x4f0 [ 3554.561623][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3554.566121][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3554.571570][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.577534][ C0] ? do_syscall_64+0x21/0x7d0 [ 3554.582187][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.588159][ C0] do_syscall_64+0xf6/0x7d0 [ 3554.592657][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3554.598524][ C0] RIP: 0033:0x45ca69 [ 3554.602400][ C0] Code: Bad RIP value. [ 3554.606447][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3554.614848][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3554.622795][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3554.630751][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3554.638735][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3554.646717][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3554.654711][ C0] syz-executor.0 S29824 13202 6809 0x00000000 [ 3554.661035][ C0] Call Trace: [ 3554.664306][ C0] __schedule+0x8f3/0x1fc0 [ 3554.668713][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3554.673991][ C0] ? firmware_map_remove+0x19d/0x19d [ 3554.679266][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3554.684719][ C0] schedule+0xd0/0x2a0 [ 3554.688798][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3554.693911][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3554.699352][ C0] futex_wait+0x1e2/0x550 [ 3554.703674][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3554.708698][ C0] ? print_usage_bug+0x240/0x240 [ 3554.713627][ C0] ? hash_futex+0x10/0x200 [ 3554.718035][ C0] ? futex_wake+0x153/0x480 [ 3554.722531][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.728501][ C0] ? mark_lock+0x11f/0xdd0 [ 3554.732911][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.738881][ C0] do_futex+0x15f/0x1ad0 [ 3554.743204][ C0] ? find_held_lock+0x2d/0x110 [ 3554.747962][ C0] ? futex_exit_release+0x60/0x60 [ 3554.753008][ C0] ? lock_downgrade+0x840/0x840 [ 3554.757838][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3554.762707][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.768693][ C0] ? __might_fault+0x190/0x1d0 [ 3554.773446][ C0] ? _copy_to_user+0x126/0x160 [ 3554.778209][ C0] __x64_sys_futex+0x376/0x4f0 [ 3554.782953][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3554.787458][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3554.793000][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.798971][ C0] ? do_syscall_64+0x21/0x7d0 [ 3554.803624][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.809603][ C0] do_syscall_64+0xf6/0x7d0 [ 3554.814102][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3554.820004][ C0] RIP: 0033:0x45ca69 [ 3554.823885][ C0] Code: Bad RIP value. [ 3554.827934][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3554.836361][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3554.844307][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3554.852268][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3554.860223][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3554.868186][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3554.876171][ C0] syz-executor.0 S29824 13213 6809 0x00000000 [ 3554.882481][ C0] Call Trace: [ 3554.885788][ C0] __schedule+0x8f3/0x1fc0 [ 3554.890228][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3554.895507][ C0] ? firmware_map_remove+0x19d/0x19d [ 3554.900770][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3554.906227][ C0] schedule+0xd0/0x2a0 [ 3554.910303][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3554.915405][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3554.920853][ C0] futex_wait+0x1e2/0x550 [ 3554.925228][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3554.930277][ C0] ? print_usage_bug+0x240/0x240 [ 3554.935221][ C0] ? hash_futex+0x10/0x200 [ 3554.939640][ C0] ? futex_wake+0x153/0x480 [ 3554.944140][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.950105][ C0] ? mark_lock+0x11f/0xdd0 [ 3554.954514][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3554.960484][ C0] do_futex+0x15f/0x1ad0 [ 3554.964730][ C0] ? find_held_lock+0x2d/0x110 [ 3554.969494][ C0] ? futex_exit_release+0x60/0x60 [ 3554.974520][ C0] ? lock_downgrade+0x840/0x840 [ 3554.979362][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3554.984188][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3554.990173][ C0] ? __might_fault+0x190/0x1d0 [ 3554.994943][ C0] ? _copy_to_user+0x126/0x160 [ 3554.999707][ C0] __x64_sys_futex+0x376/0x4f0 [ 3555.004472][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3555.008980][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3555.014461][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.020443][ C0] ? do_syscall_64+0x21/0x7d0 [ 3555.025122][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.031112][ C0] do_syscall_64+0xf6/0x7d0 [ 3555.035635][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3555.041504][ C0] RIP: 0033:0x45ca69 [ 3555.045395][ C0] Code: Bad RIP value. [ 3555.049453][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3555.057850][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3555.065832][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3555.073792][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3555.081740][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3555.089698][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3555.097670][ C0] syz-executor.0 S29824 13231 6809 0x00000000 [ 3555.103982][ C0] Call Trace: [ 3555.107268][ C0] __schedule+0x8f3/0x1fc0 [ 3555.111700][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3555.116981][ C0] ? firmware_map_remove+0x19d/0x19d [ 3555.122250][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3555.127704][ C0] schedule+0xd0/0x2a0 [ 3555.131775][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3555.136911][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3555.142383][ C0] futex_wait+0x1e2/0x550 [ 3555.146717][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3555.151735][ C0] ? print_usage_bug+0x240/0x240 [ 3555.156653][ C0] ? hash_futex+0x10/0x200 [ 3555.161045][ C0] ? futex_wake+0x153/0x480 [ 3555.165560][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.171528][ C0] ? mark_lock+0x11f/0xdd0 [ 3555.175947][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.181921][ C0] do_futex+0x15f/0x1ad0 [ 3555.186175][ C0] ? find_held_lock+0x2d/0x110 [ 3555.190943][ C0] ? futex_exit_release+0x60/0x60 [ 3555.195958][ C0] ? lock_downgrade+0x840/0x840 [ 3555.200786][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3555.205629][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.211635][ C0] ? __might_fault+0x190/0x1d0 [ 3555.216407][ C0] ? _copy_to_user+0x126/0x160 [ 3555.221900][ C0] __x64_sys_futex+0x376/0x4f0 [ 3555.226665][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3555.231164][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3555.236619][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.242593][ C0] ? do_syscall_64+0x21/0x7d0 [ 3555.247261][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.253248][ C0] do_syscall_64+0xf6/0x7d0 [ 3555.257738][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3555.263606][ C0] RIP: 0033:0x45ca69 [ 3555.267495][ C0] Code: Bad RIP value. [ 3555.271547][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3555.279941][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3555.287914][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3555.295887][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3555.303832][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3555.311779][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3555.319741][ C0] syz-executor.3 S29824 13232 7191 0x00000000 [ 3555.326065][ C0] Call Trace: [ 3555.329367][ C0] __schedule+0x8f3/0x1fc0 [ 3555.333773][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3555.339040][ C0] ? firmware_map_remove+0x19d/0x19d [ 3555.344319][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3555.349776][ C0] schedule+0xd0/0x2a0 [ 3555.353854][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3555.358943][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3555.364386][ C0] futex_wait+0x1e2/0x550 [ 3555.368726][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3555.373740][ C0] ? print_usage_bug+0x240/0x240 [ 3555.378655][ C0] ? hash_futex+0x10/0x200 [ 3555.383047][ C0] ? futex_wake+0x153/0x480 [ 3555.387561][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.393527][ C0] ? mark_lock+0x11f/0xdd0 [ 3555.397935][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.403893][ C0] do_futex+0x15f/0x1ad0 [ 3555.408143][ C0] ? find_held_lock+0x2d/0x110 [ 3555.412898][ C0] ? futex_exit_release+0x60/0x60 [ 3555.417912][ C0] ? lock_downgrade+0x840/0x840 [ 3555.422751][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3555.427593][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.433572][ C0] ? __might_fault+0x190/0x1d0 [ 3555.438329][ C0] ? _copy_to_user+0x126/0x160 [ 3555.443089][ C0] __x64_sys_futex+0x376/0x4f0 [ 3555.447849][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3555.452345][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3555.457784][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.463745][ C0] ? do_syscall_64+0x21/0x7d0 [ 3555.468412][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.474387][ C0] do_syscall_64+0xf6/0x7d0 [ 3555.478884][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3555.484761][ C0] RIP: 0033:0x45ca69 [ 3555.488664][ C0] Code: Bad RIP value. [ 3555.492714][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3555.501100][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3555.509084][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3555.517045][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3555.525008][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3555.532966][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3555.540928][ C0] syz-executor.0 S29824 13262 6809 0x00000000 [ 3555.547247][ C0] Call Trace: [ 3555.550545][ C0] __schedule+0x8f3/0x1fc0 [ 3555.554954][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3555.560232][ C0] ? firmware_map_remove+0x19d/0x19d [ 3555.565515][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3555.570980][ C0] schedule+0xd0/0x2a0 [ 3555.575043][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3555.580144][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3555.585601][ C0] futex_wait+0x1e2/0x550 [ 3555.589936][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3555.594950][ C0] ? print_usage_bug+0x240/0x240 [ 3555.599863][ C0] ? hash_futex+0x10/0x200 [ 3555.605748][ C0] ? futex_wake+0x153/0x480 [ 3555.610287][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.616264][ C0] ? mark_lock+0x11f/0xdd0 [ 3555.620658][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.626631][ C0] do_futex+0x15f/0x1ad0 [ 3555.630886][ C0] ? find_held_lock+0x2d/0x110 [ 3555.635643][ C0] ? futex_exit_release+0x60/0x60 [ 3555.640646][ C0] ? lock_downgrade+0x840/0x840 [ 3555.645490][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3555.650349][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.656341][ C0] ? __might_fault+0x190/0x1d0 [ 3555.661100][ C0] ? _copy_to_user+0x126/0x160 [ 3555.665864][ C0] __x64_sys_futex+0x376/0x4f0 [ 3555.670632][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3555.675150][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3555.680598][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.686574][ C0] ? do_syscall_64+0x21/0x7d0 [ 3555.691243][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.697206][ C0] do_syscall_64+0xf6/0x7d0 [ 3555.701691][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3555.707568][ C0] RIP: 0033:0x45ca69 [ 3555.711470][ C0] Code: Bad RIP value. [ 3555.715511][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3555.723906][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3555.731853][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3555.739801][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3555.747757][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3555.755719][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3555.763689][ C0] syz-executor.3 S29824 13267 7191 0x00000000 [ 3555.770005][ C0] Call Trace: [ 3555.773305][ C0] __schedule+0x8f3/0x1fc0 [ 3555.777704][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3555.782977][ C0] ? firmware_map_remove+0x19d/0x19d [ 3555.788256][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3555.793720][ C0] schedule+0xd0/0x2a0 [ 3555.797770][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3555.802869][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3555.808324][ C0] futex_wait+0x1e2/0x550 [ 3555.812645][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3555.817650][ C0] ? print_usage_bug+0x240/0x240 [ 3555.822567][ C0] ? hash_futex+0x10/0x200 [ 3555.826977][ C0] ? futex_wake+0x153/0x480 [ 3555.831478][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.837432][ C0] ? mark_lock+0x11f/0xdd0 [ 3555.841828][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3555.847802][ C0] do_futex+0x15f/0x1ad0 [ 3555.852044][ C0] ? find_held_lock+0x2d/0x110 [ 3555.856807][ C0] ? futex_exit_release+0x60/0x60 [ 3555.861808][ C0] ? lock_downgrade+0x840/0x840 [ 3555.866653][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3555.871504][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.877478][ C0] ? __might_fault+0x190/0x1d0 [ 3555.882220][ C0] ? _copy_to_user+0x126/0x160 [ 3555.886984][ C0] __x64_sys_futex+0x376/0x4f0 [ 3555.891741][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3555.896265][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3555.901719][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.907698][ C0] ? do_syscall_64+0x21/0x7d0 [ 3555.912380][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3555.918340][ C0] do_syscall_64+0xf6/0x7d0 [ 3555.922833][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3555.928717][ C0] RIP: 0033:0x45ca69 [ 3555.932608][ C0] Code: Bad RIP value. [ 3555.936653][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3555.945047][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3555.953010][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3555.960958][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3555.968916][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3555.976883][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3555.984875][ C0] syz-executor.0 S29824 13280 6809 0x00000000 [ 3555.991211][ C0] Call Trace: [ 3555.994511][ C0] __schedule+0x8f3/0x1fc0 [ 3555.998921][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3556.004200][ C0] ? firmware_map_remove+0x19d/0x19d [ 3556.009479][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3556.014932][ C0] schedule+0xd0/0x2a0 [ 3556.018983][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3556.024079][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3556.029535][ C0] futex_wait+0x1e2/0x550 [ 3556.033869][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3556.038872][ C0] ? print_usage_bug+0x240/0x240 [ 3556.043791][ C0] ? hash_futex+0x10/0x200 [ 3556.048198][ C0] ? futex_wake+0x153/0x480 [ 3556.052698][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.058656][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.064631][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.070633][ C0] do_futex+0x15f/0x1ad0 [ 3556.074870][ C0] ? find_held_lock+0x2d/0x110 [ 3556.079611][ C0] ? futex_exit_release+0x60/0x60 [ 3556.084626][ C0] ? lock_downgrade+0x840/0x840 [ 3556.089476][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3556.094316][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.100298][ C0] ? __might_fault+0x190/0x1d0 [ 3556.105061][ C0] ? _copy_to_user+0x126/0x160 [ 3556.109839][ C0] __x64_sys_futex+0x376/0x4f0 [ 3556.114627][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3556.119225][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3556.124697][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.130685][ C0] ? do_syscall_64+0x21/0x7d0 [ 3556.135360][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.141320][ C0] do_syscall_64+0xf6/0x7d0 [ 3556.145827][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3556.151709][ C0] RIP: 0033:0x45ca69 [ 3556.155590][ C0] Code: Bad RIP value. [ 3556.159631][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3556.168024][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3556.176027][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3556.183998][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3556.191979][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3556.199930][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3556.207912][ C0] syz-executor.3 S29824 13287 7191 0x00000000 [ 3556.214256][ C0] Call Trace: [ 3556.217531][ C0] __schedule+0x8f3/0x1fc0 [ 3556.221940][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3556.227223][ C0] ? firmware_map_remove+0x19d/0x19d [ 3556.232513][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3556.237982][ C0] schedule+0xd0/0x2a0 [ 3556.242035][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3556.247138][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3556.252590][ C0] futex_wait+0x1e2/0x550 [ 3556.256900][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3556.261902][ C0] ? print_usage_bug+0x240/0x240 [ 3556.266840][ C0] ? hash_futex+0x10/0x200 [ 3556.271262][ C0] ? futex_wake+0x153/0x480 [ 3556.275757][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.281714][ C0] ? mark_lock+0x11f/0xdd0 [ 3556.286125][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.292099][ C0] do_futex+0x15f/0x1ad0 [ 3556.296327][ C0] ? find_held_lock+0x2d/0x110 [ 3556.301068][ C0] ? futex_exit_release+0x60/0x60 [ 3556.306111][ C0] ? lock_downgrade+0x840/0x840 [ 3556.310972][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3556.315830][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.321805][ C0] ? __might_fault+0x190/0x1d0 [ 3556.326559][ C0] ? _copy_to_user+0x126/0x160 [ 3556.331327][ C0] __x64_sys_futex+0x376/0x4f0 [ 3556.336089][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3556.340586][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3556.346034][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.352025][ C0] ? do_syscall_64+0x21/0x7d0 [ 3556.356694][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.362664][ C0] do_syscall_64+0xf6/0x7d0 [ 3556.367162][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3556.373044][ C0] RIP: 0033:0x45ca69 [ 3556.376936][ C0] Code: Bad RIP value. [ 3556.380985][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3556.389400][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3556.397375][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3556.405338][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3556.413308][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3556.421259][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3556.429237][ C0] syz-executor.0 S28904 13293 6809 0x00000000 [ 3556.435570][ C0] Call Trace: [ 3556.438856][ C0] __schedule+0x8f3/0x1fc0 [ 3556.443251][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3556.448537][ C0] ? firmware_map_remove+0x19d/0x19d [ 3556.453813][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3556.459264][ C0] schedule+0xd0/0x2a0 [ 3556.463318][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3556.468433][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3556.473897][ C0] futex_wait+0x1e2/0x550 [ 3556.478220][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3556.483237][ C0] ? print_usage_bug+0x240/0x240 [ 3556.488165][ C0] ? hash_futex+0x10/0x200 [ 3556.492570][ C0] ? futex_wake+0x153/0x480 [ 3556.497060][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.503015][ C0] ? mark_lock+0x11f/0xdd0 [ 3556.507424][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.513435][ C0] do_futex+0x15f/0x1ad0 [ 3556.517672][ C0] ? find_held_lock+0x2d/0x110 [ 3556.522427][ C0] ? futex_exit_release+0x60/0x60 [ 3556.527447][ C0] ? lock_downgrade+0x840/0x840 [ 3556.532298][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3556.537141][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.543137][ C0] ? __might_fault+0x190/0x1d0 [ 3556.547903][ C0] ? _copy_to_user+0x126/0x160 [ 3556.552683][ C0] __x64_sys_futex+0x376/0x4f0 [ 3556.557438][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3556.561941][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3556.567412][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.573384][ C0] ? do_syscall_64+0x21/0x7d0 [ 3556.578047][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.584010][ C0] do_syscall_64+0xf6/0x7d0 [ 3556.588511][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3556.594416][ C0] RIP: 0033:0x45ca69 [ 3556.598306][ C0] Code: Bad RIP value. [ 3556.602356][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3556.610749][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3556.618709][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3556.626671][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3556.634662][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3556.642660][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3556.650647][ C0] syz-executor.0 S29824 13317 6809 0x00000000 [ 3556.656979][ C0] Call Trace: [ 3556.660267][ C0] __schedule+0x8f3/0x1fc0 [ 3556.664674][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3556.669967][ C0] ? firmware_map_remove+0x19d/0x19d [ 3556.675273][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3556.680735][ C0] schedule+0xd0/0x2a0 [ 3556.684797][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3556.689908][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3556.695363][ C0] futex_wait+0x1e2/0x550 [ 3556.699685][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3556.704701][ C0] ? print_usage_bug+0x240/0x240 [ 3556.709641][ C0] ? hash_futex+0x10/0x200 [ 3556.714046][ C0] ? futex_wake+0x153/0x480 [ 3556.718550][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.724537][ C0] ? mark_lock+0x11f/0xdd0 [ 3556.728987][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.734964][ C0] do_futex+0x15f/0x1ad0 [ 3556.739202][ C0] ? find_held_lock+0x2d/0x110 [ 3556.743950][ C0] ? futex_exit_release+0x60/0x60 [ 3556.748970][ C0] ? lock_downgrade+0x840/0x840 [ 3556.753814][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3556.758644][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.764644][ C0] ? __might_fault+0x190/0x1d0 [ 3556.769411][ C0] ? _copy_to_user+0x126/0x160 [ 3556.774178][ C0] __x64_sys_futex+0x376/0x4f0 [ 3556.778925][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3556.783408][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3556.788856][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.794837][ C0] ? do_syscall_64+0x21/0x7d0 [ 3556.799490][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.805462][ C0] do_syscall_64+0xf6/0x7d0 [ 3556.809972][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3556.815868][ C0] RIP: 0033:0x45ca69 [ 3556.819758][ C0] Code: Bad RIP value. [ 3556.823795][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3556.832266][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3556.840217][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3556.848189][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3556.856166][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3556.864124][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3556.872105][ C0] syz-executor.2 S29824 13321 6995 0x00000000 [ 3556.878450][ C0] Call Trace: [ 3556.881731][ C0] __schedule+0x8f3/0x1fc0 [ 3556.886140][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3556.891435][ C0] ? firmware_map_remove+0x19d/0x19d [ 3556.896741][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3556.902180][ C0] schedule+0xd0/0x2a0 [ 3556.906248][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3556.911358][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3556.916798][ C0] futex_wait+0x1e2/0x550 [ 3556.921124][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3556.926141][ C0] ? print_usage_bug+0x240/0x240 [ 3556.931100][ C0] ? hash_futex+0x10/0x200 [ 3556.935547][ C0] ? futex_wake+0x153/0x480 [ 3556.940055][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.946022][ C0] ? mark_lock+0x11f/0xdd0 [ 3556.950440][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3556.956410][ C0] do_futex+0x15f/0x1ad0 [ 3556.960636][ C0] ? find_held_lock+0x2d/0x110 [ 3556.965391][ C0] ? futex_exit_release+0x60/0x60 [ 3556.970419][ C0] ? lock_downgrade+0x840/0x840 [ 3556.975270][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3556.980128][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3556.986112][ C0] ? __might_fault+0x190/0x1d0 [ 3556.990876][ C0] ? _copy_to_user+0x126/0x160 [ 3556.995652][ C0] __x64_sys_futex+0x376/0x4f0 [ 3557.000411][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3557.004909][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3557.010366][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.016347][ C0] ? do_syscall_64+0x21/0x7d0 [ 3557.021022][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.027009][ C0] do_syscall_64+0xf6/0x7d0 [ 3557.031503][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3557.037372][ C0] RIP: 0033:0x45ca69 [ 3557.041253][ C0] Code: Bad RIP value. [ 3557.045301][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3557.053699][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3557.061656][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3557.069631][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3557.077603][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3557.085562][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3557.093541][ C0] syz-executor.3 S29824 13328 7191 0x00000000 [ 3557.099891][ C0] Call Trace: [ 3557.103164][ C0] __schedule+0x8f3/0x1fc0 [ 3557.107572][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3557.112869][ C0] ? firmware_map_remove+0x19d/0x19d [ 3557.118159][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3557.123607][ C0] schedule+0xd0/0x2a0 [ 3557.127672][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3557.132788][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3557.138239][ C0] futex_wait+0x1e2/0x550 [ 3557.142564][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3557.147582][ C0] ? print_usage_bug+0x240/0x240 [ 3557.152524][ C0] ? hash_futex+0x10/0x200 [ 3557.156920][ C0] ? futex_wake+0x153/0x480 [ 3557.161412][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.167380][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.173367][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.179342][ C0] do_futex+0x15f/0x1ad0 [ 3557.183588][ C0] ? find_held_lock+0x2d/0x110 [ 3557.188348][ C0] ? futex_exit_release+0x60/0x60 [ 3557.193365][ C0] ? lock_downgrade+0x840/0x840 [ 3557.198196][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3557.203033][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.209023][ C0] ? __might_fault+0x190/0x1d0 [ 3557.213788][ C0] ? _copy_to_user+0x126/0x160 [ 3557.218553][ C0] __x64_sys_futex+0x376/0x4f0 [ 3557.223297][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3557.227794][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3557.233252][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.239229][ C0] ? do_syscall_64+0x21/0x7d0 [ 3557.243882][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.249856][ C0] do_syscall_64+0xf6/0x7d0 [ 3557.254364][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3557.260235][ C0] RIP: 0033:0x45ca69 [ 3557.264141][ C0] Code: Bad RIP value. [ 3557.268204][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3557.276642][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3557.284597][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3557.292556][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3557.300507][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3557.308467][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3557.316446][ C0] syz-executor.0 S29824 13330 6809 0x00000000 [ 3557.322774][ C0] Call Trace: [ 3557.326063][ C0] __schedule+0x8f3/0x1fc0 [ 3557.330485][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3557.335763][ C0] ? firmware_map_remove+0x19d/0x19d [ 3557.341034][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3557.346486][ C0] schedule+0xd0/0x2a0 [ 3557.350558][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3557.355658][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3557.361097][ C0] futex_wait+0x1e2/0x550 [ 3557.365421][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3557.370447][ C0] ? print_usage_bug+0x240/0x240 [ 3557.375375][ C0] ? hash_futex+0x10/0x200 [ 3557.379779][ C0] ? futex_wake+0x153/0x480 [ 3557.384266][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.390230][ C0] ? mark_lock+0x11f/0xdd0 [ 3557.394637][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.400594][ C0] do_futex+0x15f/0x1ad0 [ 3557.404836][ C0] ? find_held_lock+0x2d/0x110 [ 3557.409605][ C0] ? futex_exit_release+0x60/0x60 [ 3557.414635][ C0] ? lock_downgrade+0x840/0x840 [ 3557.419479][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3557.424303][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.430284][ C0] ? __might_fault+0x190/0x1d0 [ 3557.435054][ C0] ? _copy_to_user+0x126/0x160 [ 3557.439816][ C0] __x64_sys_futex+0x376/0x4f0 [ 3557.444597][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3557.449106][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3557.454567][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.460530][ C0] ? do_syscall_64+0x21/0x7d0 [ 3557.465200][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.471186][ C0] do_syscall_64+0xf6/0x7d0 [ 3557.475678][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3557.481557][ C0] RIP: 0033:0x45ca69 [ 3557.485447][ C0] Code: Bad RIP value. [ 3557.489508][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3557.497906][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3557.505863][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3557.513833][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3557.521781][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3557.529741][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3557.537724][ C0] syz-executor.0 S29824 13341 6809 0x00000000 [ 3557.544035][ C0] Call Trace: [ 3557.547331][ C0] __schedule+0x8f3/0x1fc0 [ 3557.551747][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3557.557048][ C0] ? firmware_map_remove+0x19d/0x19d [ 3557.562322][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3557.567776][ C0] schedule+0xd0/0x2a0 [ 3557.571837][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3557.576925][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3557.582362][ C0] futex_wait+0x1e2/0x550 [ 3557.586689][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3557.591701][ C0] ? print_usage_bug+0x240/0x240 [ 3557.596617][ C0] ? hash_futex+0x10/0x200 [ 3557.601014][ C0] ? futex_wake+0x153/0x480 [ 3557.605526][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.611501][ C0] ? mark_lock+0x11f/0xdd0 [ 3557.615906][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.621863][ C0] do_futex+0x15f/0x1ad0 [ 3557.626106][ C0] ? find_held_lock+0x2d/0x110 [ 3557.630872][ C0] ? futex_exit_release+0x60/0x60 [ 3557.635901][ C0] ? lock_downgrade+0x840/0x840 [ 3557.640761][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3557.645609][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.651584][ C0] ? __might_fault+0x190/0x1d0 [ 3557.656339][ C0] ? _copy_to_user+0x126/0x160 [ 3557.661101][ C0] __x64_sys_futex+0x376/0x4f0 [ 3557.665862][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3557.670368][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3557.675823][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.681780][ C0] ? do_syscall_64+0x21/0x7d0 [ 3557.686446][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.692428][ C0] do_syscall_64+0xf6/0x7d0 [ 3557.696911][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3557.702775][ C0] RIP: 0033:0x45ca69 [ 3557.706661][ C0] Code: Bad RIP value. [ 3557.710718][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3557.719114][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3557.727071][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3557.735041][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3557.743001][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3557.750963][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3557.758946][ C0] syz-executor.2 S29824 13344 6995 0x00000000 [ 3557.765265][ C0] Call Trace: [ 3557.768565][ C0] __schedule+0x8f3/0x1fc0 [ 3557.772996][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3557.778279][ C0] ? firmware_map_remove+0x19d/0x19d [ 3557.783553][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3557.789003][ C0] schedule+0xd0/0x2a0 [ 3557.793081][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3557.798171][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3557.803607][ C0] futex_wait+0x1e2/0x550 [ 3557.807944][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3557.812957][ C0] ? wake_up_q+0xc1/0x140 [ 3557.817277][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3557.822468][ C0] ? futex_wake+0x153/0x480 [ 3557.826992][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.832966][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3557.838759][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3557.844732][ C0] do_futex+0x15f/0x1ad0 [ 3557.848987][ C0] ? find_held_lock+0x2d/0x110 [ 3557.853743][ C0] ? futex_exit_release+0x60/0x60 [ 3557.858749][ C0] ? lock_downgrade+0x840/0x840 [ 3557.863579][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3557.868419][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.874397][ C0] ? __might_fault+0x190/0x1d0 [ 3557.879151][ C0] ? _copy_to_user+0x126/0x160 [ 3557.883897][ C0] __x64_sys_futex+0x376/0x4f0 [ 3557.888656][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3557.893150][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3557.898584][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.904553][ C0] ? do_syscall_64+0x21/0x7d0 [ 3557.909231][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3557.915215][ C0] do_syscall_64+0xf6/0x7d0 [ 3557.919708][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3557.925585][ C0] RIP: 0033:0x45ca69 [ 3557.929492][ C0] Code: Bad RIP value. [ 3557.933554][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3557.941940][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3557.949897][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3557.957870][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3557.965844][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3557.973806][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3557.981777][ C0] syz-executor.0 S29824 13351 6809 0x00000000 [ 3557.988094][ C0] Call Trace: [ 3557.991389][ C0] __schedule+0x8f3/0x1fc0 [ 3557.995820][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3558.001087][ C0] ? firmware_map_remove+0x19d/0x19d [ 3558.006366][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3558.011832][ C0] schedule+0xd0/0x2a0 [ 3558.015883][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3558.021057][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3558.026512][ C0] futex_wait+0x1e2/0x550 [ 3558.030849][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3558.035863][ C0] ? print_usage_bug+0x240/0x240 [ 3558.040778][ C0] ? hash_futex+0x10/0x200 [ 3558.045184][ C0] ? futex_wake+0x153/0x480 [ 3558.049704][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.055681][ C0] ? mark_lock+0x11f/0xdd0 [ 3558.060098][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.066083][ C0] do_futex+0x15f/0x1ad0 [ 3558.070355][ C0] ? find_held_lock+0x2d/0x110 [ 3558.075128][ C0] ? futex_exit_release+0x60/0x60 [ 3558.080159][ C0] ? lock_downgrade+0x840/0x840 [ 3558.085000][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3558.089857][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.095851][ C0] ? __might_fault+0x190/0x1d0 [ 3558.100607][ C0] ? _copy_to_user+0x126/0x160 [ 3558.105372][ C0] __x64_sys_futex+0x376/0x4f0 [ 3558.110151][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3558.114666][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3558.120107][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.126081][ C0] ? do_syscall_64+0x21/0x7d0 [ 3558.130759][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.136753][ C0] do_syscall_64+0xf6/0x7d0 [ 3558.141265][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3558.147145][ C0] RIP: 0033:0x45ca69 [ 3558.151043][ C0] Code: Bad RIP value. [ 3558.155097][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3558.163603][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3558.171593][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3558.179581][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3558.187542][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3558.195524][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3558.203500][ C0] syz-executor.0 S29824 13360 6809 0x00000000 [ 3558.209825][ C0] Call Trace: [ 3558.213129][ C0] __schedule+0x8f3/0x1fc0 [ 3558.217570][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3558.222849][ C0] ? firmware_map_remove+0x19d/0x19d [ 3558.228157][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3558.233649][ C0] schedule+0xd0/0x2a0 [ 3558.237725][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3558.242815][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3558.248272][ C0] futex_wait+0x1e2/0x550 [ 3558.252593][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3558.257615][ C0] ? print_usage_bug+0x240/0x240 [ 3558.262531][ C0] ? hash_futex+0x10/0x200 [ 3558.266937][ C0] ? futex_wake+0x153/0x480 [ 3558.271460][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.277422][ C0] ? mark_lock+0x11f/0xdd0 [ 3558.281818][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.287798][ C0] do_futex+0x15f/0x1ad0 [ 3558.292060][ C0] ? find_held_lock+0x2d/0x110 [ 3558.296850][ C0] ? futex_exit_release+0x60/0x60 [ 3558.301855][ C0] ? lock_downgrade+0x840/0x840 [ 3558.306696][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3558.311536][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.317503][ C0] ? __might_fault+0x190/0x1d0 [ 3558.322251][ C0] ? _copy_to_user+0x126/0x160 [ 3558.327016][ C0] __x64_sys_futex+0x376/0x4f0 [ 3558.331772][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3558.336254][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3558.341691][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.347669][ C0] ? do_syscall_64+0x21/0x7d0 [ 3558.352337][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.358296][ C0] do_syscall_64+0xf6/0x7d0 [ 3558.362798][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3558.368676][ C0] RIP: 0033:0x45ca69 [ 3558.372568][ C0] Code: Bad RIP value. [ 3558.376611][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3558.385025][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3558.393002][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3558.400951][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3558.408907][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3558.416866][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3558.424866][ C0] syz-executor.3 S29824 13362 7191 0x00000000 [ 3558.431204][ C0] Call Trace: [ 3558.434503][ C0] __schedule+0x8f3/0x1fc0 [ 3558.438906][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3558.444190][ C0] ? firmware_map_remove+0x19d/0x19d [ 3558.449471][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3558.454938][ C0] schedule+0xd0/0x2a0 [ 3558.459000][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3558.464091][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3558.469554][ C0] futex_wait+0x1e2/0x550 [ 3558.473876][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3558.478879][ C0] ? print_usage_bug+0x240/0x240 [ 3558.483804][ C0] ? hash_futex+0x10/0x200 [ 3558.488213][ C0] ? futex_wake+0x153/0x480 [ 3558.492735][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.498690][ C0] ? mark_lock+0x11f/0xdd0 [ 3558.503120][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.509125][ C0] do_futex+0x15f/0x1ad0 [ 3558.513375][ C0] ? find_held_lock+0x2d/0x110 [ 3558.518140][ C0] ? futex_exit_release+0x60/0x60 [ 3558.523158][ C0] ? lock_downgrade+0x840/0x840 [ 3558.528002][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3558.532842][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.538820][ C0] ? __might_fault+0x190/0x1d0 [ 3558.543565][ C0] ? _copy_to_user+0x126/0x160 [ 3558.548331][ C0] __x64_sys_futex+0x376/0x4f0 [ 3558.553099][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3558.557582][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3558.563034][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.569026][ C0] ? do_syscall_64+0x21/0x7d0 [ 3558.573692][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.579652][ C0] do_syscall_64+0xf6/0x7d0 [ 3558.584132][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3558.590017][ C0] RIP: 0033:0x45ca69 [ 3558.593926][ C0] Code: Bad RIP value. [ 3558.597986][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3558.606380][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3558.614359][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3558.622334][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3558.630295][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3558.638271][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3558.646252][ C0] syz-executor.0 S29824 13372 6809 0x00000000 [ 3558.652592][ C0] Call Trace: [ 3558.655882][ C0] __schedule+0x8f3/0x1fc0 [ 3558.660277][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3558.665562][ C0] ? firmware_map_remove+0x19d/0x19d [ 3558.670870][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3558.676330][ C0] schedule+0xd0/0x2a0 [ 3558.680391][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3558.685497][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3558.690976][ C0] futex_wait+0x1e2/0x550 [ 3558.695299][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3558.700313][ C0] ? print_usage_bug+0x240/0x240 [ 3558.705247][ C0] ? hash_futex+0x10/0x200 [ 3558.709662][ C0] ? futex_wake+0x153/0x480 [ 3558.714165][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.720130][ C0] ? mark_lock+0x11f/0xdd0 [ 3558.724544][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.730529][ C0] do_futex+0x15f/0x1ad0 [ 3558.734791][ C0] ? find_held_lock+0x2d/0x110 [ 3558.739568][ C0] ? futex_exit_release+0x60/0x60 [ 3558.744587][ C0] ? lock_downgrade+0x840/0x840 [ 3558.749441][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3558.754292][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.760274][ C0] ? __might_fault+0x190/0x1d0 [ 3558.765029][ C0] ? _copy_to_user+0x126/0x160 [ 3558.769802][ C0] __x64_sys_futex+0x376/0x4f0 [ 3558.774572][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3558.779080][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3558.784529][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.790510][ C0] ? do_syscall_64+0x21/0x7d0 [ 3558.795176][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.801135][ C0] do_syscall_64+0xf6/0x7d0 [ 3558.805636][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3558.811515][ C0] RIP: 0033:0x45ca69 [ 3558.815396][ C0] Code: Bad RIP value. [ 3558.819438][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3558.827831][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3558.835801][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3558.843747][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3558.851718][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3558.859677][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3558.867676][ C0] syz-executor.0 S29824 13390 6809 0x00000000 [ 3558.874019][ C0] Call Trace: [ 3558.877297][ C0] __schedule+0x8f3/0x1fc0 [ 3558.881691][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3558.886974][ C0] ? firmware_map_remove+0x19d/0x19d [ 3558.892251][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3558.897690][ C0] schedule+0xd0/0x2a0 [ 3558.901737][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3558.906838][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3558.912305][ C0] futex_wait+0x1e2/0x550 [ 3558.916616][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3558.921618][ C0] ? print_usage_bug+0x240/0x240 [ 3558.926547][ C0] ? hash_futex+0x10/0x200 [ 3558.930965][ C0] ? futex_wake+0x153/0x480 [ 3558.935465][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.941418][ C0] ? mark_lock+0x11f/0xdd0 [ 3558.945829][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3558.951812][ C0] do_futex+0x15f/0x1ad0 [ 3558.956069][ C0] ? find_held_lock+0x2d/0x110 [ 3558.960829][ C0] ? futex_exit_release+0x60/0x60 [ 3558.965847][ C0] ? lock_downgrade+0x840/0x840 [ 3558.970718][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3558.975596][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3558.981574][ C0] ? __might_fault+0x190/0x1d0 [ 3558.986351][ C0] ? _copy_to_user+0x126/0x160 [ 3558.991125][ C0] __x64_sys_futex+0x376/0x4f0 [ 3558.995889][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3559.000382][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3559.005832][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.011815][ C0] ? do_syscall_64+0x21/0x7d0 [ 3559.016488][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.022456][ C0] do_syscall_64+0xf6/0x7d0 [ 3559.026954][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3559.032836][ C0] RIP: 0033:0x45ca69 [ 3559.036730][ C0] Code: Bad RIP value. [ 3559.040770][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3559.049168][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3559.057128][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3559.065089][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3559.073051][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3559.081000][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3559.088982][ C0] syz-executor.0 S29824 13404 6809 0x00000000 [ 3559.095320][ C0] Call Trace: [ 3559.098626][ C0] __schedule+0x8f3/0x1fc0 [ 3559.103073][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3559.108368][ C0] ? firmware_map_remove+0x19d/0x19d [ 3559.113645][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3559.119083][ C0] schedule+0xd0/0x2a0 [ 3559.123132][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3559.128234][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3559.133720][ C0] futex_wait+0x1e2/0x550 [ 3559.138088][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3559.143098][ C0] ? print_usage_bug+0x240/0x240 [ 3559.148031][ C0] ? hash_futex+0x10/0x200 [ 3559.152438][ C0] ? futex_wake+0x153/0x480 [ 3559.156937][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3559.162903][ C0] ? mark_lock+0x11f/0xdd0 [ 3559.167318][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3559.173289][ C0] do_futex+0x15f/0x1ad0 [ 3559.177535][ C0] ? find_held_lock+0x2d/0x110 [ 3559.182294][ C0] ? futex_exit_release+0x60/0x60 [ 3559.187320][ C0] ? lock_downgrade+0x840/0x840 [ 3559.192170][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3559.197002][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.202965][ C0] ? __might_fault+0x190/0x1d0 [ 3559.207726][ C0] ? _copy_to_user+0x126/0x160 [ 3559.212484][ C0] __x64_sys_futex+0x376/0x4f0 [ 3559.217230][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3559.221721][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3559.227173][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.233173][ C0] ? do_syscall_64+0x21/0x7d0 [ 3559.237844][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.243804][ C0] do_syscall_64+0xf6/0x7d0 [ 3559.248304][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3559.254182][ C0] RIP: 0033:0x45ca69 [ 3559.258077][ C0] Code: Bad RIP value. [ 3559.262117][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3559.270512][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3559.278476][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3559.286442][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3559.294455][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3559.302416][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3559.310395][ C0] syz-executor.0 S29824 13410 6809 0x00000000 [ 3559.316751][ C0] Call Trace: [ 3559.320028][ C0] __schedule+0x8f3/0x1fc0 [ 3559.324433][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3559.329726][ C0] ? firmware_map_remove+0x19d/0x19d [ 3559.335049][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3559.340493][ C0] schedule+0xd0/0x2a0 [ 3559.344553][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3559.349666][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3559.355117][ C0] futex_wait+0x1e2/0x550 [ 3559.359426][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3559.364438][ C0] ? print_usage_bug+0x240/0x240 [ 3559.369380][ C0] ? hash_futex+0x10/0x200 [ 3559.373798][ C0] ? futex_wake+0x153/0x480 [ 3559.378297][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3559.384246][ C0] ? mark_lock+0x11f/0xdd0 [ 3559.390134][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3559.396120][ C0] do_futex+0x15f/0x1ad0 [ 3559.400360][ C0] ? find_held_lock+0x2d/0x110 [ 3559.405134][ C0] ? futex_exit_release+0x60/0x60 [ 3559.410161][ C0] ? lock_downgrade+0x840/0x840 [ 3559.415046][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3559.419914][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.425898][ C0] ? __might_fault+0x190/0x1d0 [ 3559.430669][ C0] ? _copy_to_user+0x126/0x160 [ 3559.435468][ C0] __x64_sys_futex+0x376/0x4f0 [ 3559.440217][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3559.444716][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3559.450175][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.456154][ C0] ? do_syscall_64+0x21/0x7d0 [ 3559.460809][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.466787][ C0] do_syscall_64+0xf6/0x7d0 [ 3559.471284][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3559.477200][ C0] RIP: 0033:0x45ca69 [ 3559.481080][ C0] Code: Bad RIP value. [ 3559.485128][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3559.493526][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3559.501475][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3559.509435][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3559.517398][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3559.525357][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3559.533334][ C0] syz-executor.0 S29824 13418 6809 0x00000000 [ 3559.539645][ C0] Call Trace: [ 3559.542918][ C0] __schedule+0x8f3/0x1fc0 [ 3559.547329][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3559.552607][ C0] ? firmware_map_remove+0x19d/0x19d [ 3559.557883][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3559.563330][ C0] schedule+0xd0/0x2a0 [ 3559.567394][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3559.572496][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3559.577951][ C0] futex_wait+0x1e2/0x550 [ 3559.582270][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3559.587293][ C0] ? print_usage_bug+0x240/0x240 [ 3559.592219][ C0] ? hash_futex+0x10/0x200 [ 3559.596612][ C0] ? futex_wake+0x153/0x480 [ 3559.601101][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3559.607072][ C0] ? mark_lock+0x11f/0xdd0 [ 3559.611491][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3559.617478][ C0] do_futex+0x15f/0x1ad0 [ 3559.621706][ C0] ? find_held_lock+0x2d/0x110 [ 3559.626462][ C0] ? futex_exit_release+0x60/0x60 [ 3559.631475][ C0] ? lock_downgrade+0x840/0x840 [ 3559.636319][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3559.641160][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.647145][ C0] ? __might_fault+0x190/0x1d0 [ 3559.651900][ C0] ? _copy_to_user+0x126/0x160 [ 3559.656647][ C0] __x64_sys_futex+0x376/0x4f0 [ 3559.661392][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3559.665889][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3559.671335][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.677314][ C0] ? do_syscall_64+0x21/0x7d0 [ 3559.681982][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.687956][ C0] do_syscall_64+0xf6/0x7d0 [ 3559.692450][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3559.698518][ C0] RIP: 0033:0x45ca69 [ 3559.702409][ C0] Code: Bad RIP value. [ 3559.706460][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3559.714869][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3559.722829][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3559.730804][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3559.738766][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3559.746725][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3559.754708][ C0] syz-executor.0 S29824 13445 6809 0x00000000 [ 3559.761018][ C0] Call Trace: [ 3559.764288][ C0] __schedule+0x8f3/0x1fc0 [ 3559.768713][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3559.773989][ C0] ? firmware_map_remove+0x19d/0x19d [ 3559.779254][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3559.784709][ C0] schedule+0xd0/0x2a0 [ 3559.788779][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3559.793879][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3559.799314][ C0] ? find_held_lock+0x2d/0x110 [ 3559.804056][ C0] futex_wait+0x1e2/0x550 [ 3559.808381][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3559.813396][ C0] ? print_usage_bug+0x240/0x240 [ 3559.818314][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3559.823499][ C0] ? futex_wake+0x153/0x480 [ 3559.828014][ C0] ? do_wp_page+0x512/0x1440 [ 3559.832596][ C0] do_futex+0x15f/0x1ad0 [ 3559.836822][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3559.842000][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3559.846840][ C0] ? futex_exit_release+0x60/0x60 [ 3559.851857][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3559.856704][ C0] ? lock_downgrade+0x840/0x840 [ 3559.861530][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3559.866581][ C0] __x64_sys_futex+0x376/0x4f0 [ 3559.871336][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3559.875820][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3559.881255][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.887225][ C0] ? do_syscall_64+0x21/0x7d0 [ 3559.891897][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3559.897871][ C0] do_syscall_64+0xf6/0x7d0 [ 3559.902355][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3559.908233][ C0] RIP: 0033:0x45ca69 [ 3559.912130][ C0] Code: Bad RIP value. [ 3559.916173][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3559.924566][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3559.932528][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3559.940476][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3559.948435][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3559.956394][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3559.964374][ C0] syz-executor.0 S29824 13482 6809 0x00000000 [ 3559.970701][ C0] Call Trace: [ 3559.974003][ C0] __schedule+0x8f3/0x1fc0 [ 3559.978414][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3559.983677][ C0] ? firmware_map_remove+0x19d/0x19d [ 3559.988957][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3559.994413][ C0] schedule+0xd0/0x2a0 [ 3559.998487][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3560.003585][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3560.009046][ C0] futex_wait+0x1e2/0x550 [ 3560.013368][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3560.018374][ C0] ? print_usage_bug+0x240/0x240 [ 3560.023290][ C0] ? hash_futex+0x10/0x200 [ 3560.027700][ C0] ? futex_wake+0x153/0x480 [ 3560.032203][ C0] ? do_wp_page+0x512/0x1440 [ 3560.036775][ C0] do_futex+0x15f/0x1ad0 [ 3560.041010][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3560.046203][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3560.051055][ C0] ? futex_exit_release+0x60/0x60 [ 3560.056089][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3560.060942][ C0] ? lock_downgrade+0x840/0x840 [ 3560.065783][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3560.070825][ C0] __x64_sys_futex+0x376/0x4f0 [ 3560.075596][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3560.080094][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3560.085543][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.091515][ C0] ? do_syscall_64+0x21/0x7d0 [ 3560.096169][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.102137][ C0] do_syscall_64+0xf6/0x7d0 [ 3560.106639][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3560.112521][ C0] RIP: 0033:0x45ca69 [ 3560.116400][ C0] Code: Bad RIP value. [ 3560.120440][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3560.128838][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3560.136813][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3560.144818][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3560.152778][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3560.160758][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3560.168740][ C0] syz-executor.0 S29824 13565 6809 0x00000000 [ 3560.175074][ C0] Call Trace: [ 3560.178345][ C0] __schedule+0x8f3/0x1fc0 [ 3560.182740][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3560.188025][ C0] ? firmware_map_remove+0x19d/0x19d [ 3560.193308][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3560.198751][ C0] schedule+0xd0/0x2a0 [ 3560.202815][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3560.207917][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3560.213368][ C0] futex_wait+0x1e2/0x550 [ 3560.217689][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3560.222703][ C0] ? print_usage_bug+0x240/0x240 [ 3560.227633][ C0] ? hash_futex+0x10/0x200 [ 3560.232040][ C0] ? futex_wake+0x153/0x480 [ 3560.236534][ C0] ? do_wp_page+0x512/0x1440 [ 3560.241109][ C0] do_futex+0x15f/0x1ad0 [ 3560.245355][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3560.250557][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3560.255398][ C0] ? futex_exit_release+0x60/0x60 [ 3560.260420][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3560.265285][ C0] ? lock_downgrade+0x840/0x840 [ 3560.270148][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3560.275204][ C0] __x64_sys_futex+0x376/0x4f0 [ 3560.279967][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3560.284460][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3560.289919][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.295902][ C0] ? do_syscall_64+0x21/0x7d0 [ 3560.300571][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.306550][ C0] do_syscall_64+0xf6/0x7d0 [ 3560.311059][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3560.316938][ C0] RIP: 0033:0x45ca69 [ 3560.320858][ C0] Code: Bad RIP value. [ 3560.324905][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3560.333305][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3560.341265][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3560.349221][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3560.357179][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3560.365151][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3560.373124][ C0] syz-executor.0 S29824 13629 6809 0x00000000 [ 3560.379436][ C0] Call Trace: [ 3560.382709][ C0] __schedule+0x8f3/0x1fc0 [ 3560.387121][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3560.392416][ C0] ? firmware_map_remove+0x19d/0x19d [ 3560.397710][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3560.403147][ C0] schedule+0xd0/0x2a0 [ 3560.407209][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3560.412321][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3560.417784][ C0] futex_wait+0x1e2/0x550 [ 3560.422105][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3560.427120][ C0] ? print_usage_bug+0x240/0x240 [ 3560.432049][ C0] ? hash_futex+0x10/0x200 [ 3560.436443][ C0] ? futex_wake+0x153/0x480 [ 3560.440932][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3560.446899][ C0] ? mark_lock+0x11f/0xdd0 [ 3560.451306][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3560.457374][ C0] do_futex+0x15f/0x1ad0 [ 3560.461612][ C0] ? find_held_lock+0x2d/0x110 [ 3560.466371][ C0] ? futex_exit_release+0x60/0x60 [ 3560.471404][ C0] ? lock_downgrade+0x840/0x840 [ 3560.476234][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3560.481087][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.487074][ C0] ? __might_fault+0x190/0x1d0 [ 3560.491838][ C0] ? _copy_to_user+0x126/0x160 [ 3560.496684][ C0] __x64_sys_futex+0x376/0x4f0 [ 3560.501441][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3560.505937][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3560.511399][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.517363][ C0] ? do_syscall_64+0x21/0x7d0 [ 3560.522035][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.528010][ C0] do_syscall_64+0xf6/0x7d0 [ 3560.532510][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3560.538397][ C0] RIP: 0033:0x45ca69 [ 3560.542276][ C0] Code: Bad RIP value. [ 3560.546328][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3560.554743][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3560.562688][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3560.570642][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3560.578616][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3560.586572][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3560.594563][ C0] syz-executor.0 S29824 13689 6809 0x00000000 [ 3560.600892][ C0] Call Trace: [ 3560.604160][ C0] __schedule+0x8f3/0x1fc0 [ 3560.608567][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3560.613844][ C0] ? firmware_map_remove+0x19d/0x19d [ 3560.619109][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3560.624561][ C0] schedule+0xd0/0x2a0 [ 3560.628637][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3560.633759][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3560.639199][ C0] futex_wait+0x1e2/0x550 [ 3560.643525][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3560.648559][ C0] ? print_usage_bug+0x240/0x240 [ 3560.653486][ C0] ? hash_futex+0x10/0x200 [ 3560.657896][ C0] ? futex_wake+0x153/0x480 [ 3560.662383][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3560.668350][ C0] ? mark_lock+0x11f/0xdd0 [ 3560.672789][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3560.678771][ C0] do_futex+0x15f/0x1ad0 [ 3560.682999][ C0] ? find_held_lock+0x2d/0x110 [ 3560.687957][ C0] ? futex_exit_release+0x60/0x60 [ 3560.692982][ C0] ? lock_downgrade+0x840/0x840 [ 3560.697810][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3560.702633][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.708616][ C0] ? __might_fault+0x190/0x1d0 [ 3560.713389][ C0] ? _copy_to_user+0x126/0x160 [ 3560.718152][ C0] __x64_sys_futex+0x376/0x4f0 [ 3560.722908][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3560.727410][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3560.732856][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.738815][ C0] ? do_syscall_64+0x21/0x7d0 [ 3560.743468][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.749443][ C0] do_syscall_64+0xf6/0x7d0 [ 3560.753943][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3560.759814][ C0] RIP: 0033:0x45ca69 [ 3560.763706][ C0] Code: Bad RIP value. [ 3560.767754][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3560.776165][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3560.784120][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3560.792067][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3560.800018][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3560.807975][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3560.815981][ C0] syz-executor.2 S29824 13772 6995 0x00000000 [ 3560.822297][ C0] Call Trace: [ 3560.825587][ C0] __schedule+0x8f3/0x1fc0 [ 3560.830095][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3560.835377][ C0] ? firmware_map_remove+0x19d/0x19d [ 3560.840641][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3560.846098][ C0] schedule+0xd0/0x2a0 [ 3560.850172][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3560.855274][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3560.860725][ C0] futex_wait+0x1e2/0x550 [ 3560.865055][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3560.870080][ C0] ? print_usage_bug+0x240/0x240 [ 3560.875017][ C0] ? hash_futex+0x10/0x200 [ 3560.879422][ C0] ? futex_wake+0x153/0x480 [ 3560.883908][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3560.889874][ C0] ? mark_lock+0x11f/0xdd0 [ 3560.894279][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3560.900237][ C0] do_futex+0x15f/0x1ad0 [ 3560.904478][ C0] ? find_held_lock+0x2d/0x110 [ 3560.909256][ C0] ? futex_exit_release+0x60/0x60 [ 3560.914270][ C0] ? lock_downgrade+0x840/0x840 [ 3560.919112][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3560.923939][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.929968][ C0] ? __might_fault+0x190/0x1d0 [ 3560.934737][ C0] ? _copy_to_user+0x126/0x160 [ 3560.939518][ C0] __x64_sys_futex+0x376/0x4f0 [ 3560.944273][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3560.948768][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3560.954225][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.960183][ C0] ? do_syscall_64+0x21/0x7d0 [ 3560.964849][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3560.970834][ C0] do_syscall_64+0xf6/0x7d0 [ 3560.975342][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3560.981210][ C0] RIP: 0033:0x45ca69 [ 3560.985098][ C0] Code: Bad RIP value. [ 3560.989157][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3560.997567][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3561.005539][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3561.013498][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3561.021446][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3561.029403][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3561.037377][ C0] syz-executor.0 S29824 13817 6809 0x00000000 [ 3561.043687][ C0] Call Trace: [ 3561.046972][ C0] __schedule+0x8f3/0x1fc0 [ 3561.051399][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3561.056676][ C0] ? firmware_map_remove+0x19d/0x19d [ 3561.061941][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3561.067397][ C0] schedule+0xd0/0x2a0 [ 3561.071473][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3561.076573][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3561.082027][ C0] futex_wait+0x1e2/0x550 [ 3561.086352][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3561.091364][ C0] ? print_usage_bug+0x240/0x240 [ 3561.096291][ C0] ? hash_futex+0x10/0x200 [ 3561.100709][ C0] ? futex_wake+0x153/0x480 [ 3561.105217][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.111207][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.117166][ C0] do_futex+0x15f/0x1ad0 [ 3561.121399][ C0] ? find_held_lock+0x2d/0x110 [ 3561.126154][ C0] ? futex_exit_release+0x60/0x60 [ 3561.131181][ C0] ? lock_downgrade+0x840/0x840 [ 3561.136039][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3561.140877][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.146863][ C0] ? __might_fault+0x190/0x1d0 [ 3561.151627][ C0] ? _copy_to_user+0x126/0x160 [ 3561.156402][ C0] __x64_sys_futex+0x376/0x4f0 [ 3561.161161][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3561.165660][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3561.171115][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.177126][ C0] ? do_syscall_64+0x21/0x7d0 [ 3561.181819][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.187825][ C0] do_syscall_64+0xf6/0x7d0 [ 3561.192327][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3561.198215][ C0] RIP: 0033:0x45ca69 [ 3561.202103][ C0] Code: Bad RIP value. [ 3561.206151][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3561.214557][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3561.222529][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3561.230486][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3561.238464][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3561.246423][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3561.254428][ C0] syz-executor.0 S29824 13870 6809 0x00000000 [ 3561.260760][ C0] Call Trace: [ 3561.264031][ C0] __schedule+0x8f3/0x1fc0 [ 3561.268444][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3561.273744][ C0] ? firmware_map_remove+0x19d/0x19d [ 3561.279015][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3561.284647][ C0] schedule+0xd0/0x2a0 [ 3561.288726][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3561.293844][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3561.299283][ C0] futex_wait+0x1e2/0x550 [ 3561.303594][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3561.308632][ C0] ? print_usage_bug+0x240/0x240 [ 3561.313560][ C0] ? hash_futex+0x10/0x200 [ 3561.317966][ C0] ? futex_wake+0x153/0x480 [ 3561.322466][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.328441][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.334418][ C0] do_futex+0x15f/0x1ad0 [ 3561.338670][ C0] ? find_held_lock+0x2d/0x110 [ 3561.343412][ C0] ? futex_exit_release+0x60/0x60 [ 3561.348431][ C0] ? lock_downgrade+0x840/0x840 [ 3561.353272][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3561.358116][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.364076][ C0] ? __might_fault+0x190/0x1d0 [ 3561.368830][ C0] ? _copy_to_user+0x126/0x160 [ 3561.373587][ C0] __x64_sys_futex+0x376/0x4f0 [ 3561.378330][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3561.382823][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3561.388270][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.394238][ C0] ? do_syscall_64+0x21/0x7d0 [ 3561.398903][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.404879][ C0] do_syscall_64+0xf6/0x7d0 [ 3561.409384][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3561.415276][ C0] RIP: 0033:0x45ca69 [ 3561.419168][ C0] Code: Bad RIP value. [ 3561.423218][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3561.431603][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3561.439563][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3561.447518][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3561.455477][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3561.463428][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3561.471389][ C0] syz-executor.2 S29824 13879 6995 0x00000000 [ 3561.477701][ C0] Call Trace: [ 3561.480986][ C0] __schedule+0x8f3/0x1fc0 [ 3561.485395][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3561.490710][ C0] ? firmware_map_remove+0x19d/0x19d [ 3561.496008][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3561.501461][ C0] schedule+0xd0/0x2a0 [ 3561.505527][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3561.510643][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3561.516095][ C0] ? find_held_lock+0x2d/0x110 [ 3561.520841][ C0] futex_wait+0x1e2/0x550 [ 3561.525167][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3561.530192][ C0] ? print_usage_bug+0x240/0x240 [ 3561.535118][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3561.540291][ C0] ? futex_wake+0x153/0x480 [ 3561.544800][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.550774][ C0] ? mark_lock+0x11f/0xdd0 [ 3561.555183][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.561142][ C0] do_futex+0x15f/0x1ad0 [ 3561.565388][ C0] ? find_held_lock+0x2d/0x110 [ 3561.570154][ C0] ? futex_exit_release+0x60/0x60 [ 3561.575181][ C0] ? lock_downgrade+0x840/0x840 [ 3561.580044][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3561.584885][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.590898][ C0] ? __might_fault+0x190/0x1d0 [ 3561.595664][ C0] ? _copy_to_user+0x126/0x160 [ 3561.600426][ C0] __x64_sys_futex+0x376/0x4f0 [ 3561.605193][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3561.609700][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3561.615157][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.621166][ C0] ? do_syscall_64+0x21/0x7d0 [ 3561.625833][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.631844][ C0] do_syscall_64+0xf6/0x7d0 [ 3561.636330][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3561.642229][ C0] RIP: 0033:0x45ca69 [ 3561.646118][ C0] Code: Bad RIP value. [ 3561.650175][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3561.658571][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3561.666525][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3561.674492][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3561.682458][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3561.690412][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3561.698385][ C0] syz-executor.0 S29816 13924 6809 0x00000000 [ 3561.704702][ C0] Call Trace: [ 3561.708008][ C0] __schedule+0x8f3/0x1fc0 [ 3561.712426][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3561.717701][ C0] ? firmware_map_remove+0x19d/0x19d [ 3561.722967][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3561.728427][ C0] schedule+0xd0/0x2a0 [ 3561.732500][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3561.737646][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3561.743094][ C0] futex_wait+0x1e2/0x550 [ 3561.747425][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3561.752439][ C0] ? print_usage_bug+0x240/0x240 [ 3561.757373][ C0] ? hash_futex+0x10/0x200 [ 3561.761763][ C0] ? futex_wake+0x153/0x480 [ 3561.766272][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.772244][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3561.778205][ C0] do_futex+0x15f/0x1ad0 [ 3561.782429][ C0] ? find_held_lock+0x2d/0x110 [ 3561.787186][ C0] ? futex_exit_release+0x60/0x60 [ 3561.792202][ C0] ? lock_downgrade+0x840/0x840 [ 3561.797045][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3561.801870][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.807851][ C0] ? __might_fault+0x190/0x1d0 [ 3561.812615][ C0] ? _copy_to_user+0x126/0x160 [ 3561.817374][ C0] __x64_sys_futex+0x376/0x4f0 [ 3561.822121][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3561.826615][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3561.832065][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.838037][ C0] ? do_syscall_64+0x21/0x7d0 [ 3561.842690][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.848664][ C0] do_syscall_64+0xf6/0x7d0 [ 3561.854635][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3561.860513][ C0] RIP: 0033:0x45ca69 [ 3561.864391][ C0] Code: Bad RIP value. [ 3561.868444][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3561.876843][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3561.884799][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3561.892767][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3561.900714][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3561.908669][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3561.916652][ C0] kvm-nx-lpage-re S29512 13975 2 0x80004000 [ 3561.922972][ C0] Call Trace: [ 3561.926276][ C0] __schedule+0x8f3/0x1fc0 [ 3561.930707][ C0] ? firmware_map_remove+0x19d/0x19d [ 3561.936009][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3561.941795][ C0] schedule+0xd0/0x2a0 [ 3561.945858][ C0] schedule_timeout+0x35c/0x850 [ 3561.950714][ C0] ? usleep_range+0x160/0x160 [ 3561.955396][ C0] ? kvm_nx_lpage_recovery_worker+0x56e/0x790 [ 3561.961450][ C0] ? __next_timer_interrupt+0x190/0x190 [ 3561.966994][ C0] ? kmem_cache_free+0x262/0x320 [ 3561.971927][ C0] kvm_nx_lpage_recovery_worker+0x1d3/0x790 [ 3561.977802][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3561.982901][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3561.988695][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3561.994671][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3561.999686][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 3562.004873][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3562.009980][ C0] ? kvm_exit+0x80/0x80 [ 3562.014138][ C0] kthread+0x388/0x470 [ 3562.018185][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3562.023878][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3562.029588][ C0] ret_from_fork+0x24/0x30 [ 3562.034011][ C0] syz-executor.0 S29824 13976 6809 0x00000000 [ 3562.040321][ C0] Call Trace: [ 3562.043592][ C0] __schedule+0x8f3/0x1fc0 [ 3562.048005][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3562.053286][ C0] ? firmware_map_remove+0x19d/0x19d [ 3562.058552][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3562.064005][ C0] schedule+0xd0/0x2a0 [ 3562.068068][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3562.073183][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3562.078622][ C0] futex_wait+0x1e2/0x550 [ 3562.082930][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3562.087948][ C0] ? print_usage_bug+0x240/0x240 [ 3562.092875][ C0] ? hash_futex+0x10/0x200 [ 3562.097270][ C0] ? futex_wake+0x153/0x480 [ 3562.101764][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.107738][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.113724][ C0] do_futex+0x15f/0x1ad0 [ 3562.117951][ C0] ? find_held_lock+0x2d/0x110 [ 3562.122704][ C0] ? futex_exit_release+0x60/0x60 [ 3562.127721][ C0] ? lock_downgrade+0x840/0x840 [ 3562.132577][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3562.137409][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.143374][ C0] ? __might_fault+0x190/0x1d0 [ 3562.148129][ C0] ? _copy_to_user+0x126/0x160 [ 3562.152922][ C0] __x64_sys_futex+0x376/0x4f0 [ 3562.157678][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3562.162160][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3562.167612][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.173597][ C0] ? do_syscall_64+0x21/0x7d0 [ 3562.178252][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.184219][ C0] do_syscall_64+0xf6/0x7d0 [ 3562.188717][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3562.194611][ C0] RIP: 0033:0x45ca69 [ 3562.198493][ C0] Code: Bad RIP value. [ 3562.202533][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3562.210927][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3562.218897][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3562.226861][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3562.234822][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3562.242803][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3562.250783][ C0] syz-executor.2 S29616 13990 6995 0x00000000 [ 3562.257113][ C0] Call Trace: [ 3562.260413][ C0] __schedule+0x8f3/0x1fc0 [ 3562.264820][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3562.270110][ C0] ? firmware_map_remove+0x19d/0x19d [ 3562.275401][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3562.280861][ C0] schedule+0xd0/0x2a0 [ 3562.284929][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3562.290047][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3562.295517][ C0] futex_wait+0x1e2/0x550 [ 3562.299907][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3562.304928][ C0] ? wake_up_q+0xc1/0x140 [ 3562.309254][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3562.314453][ C0] ? futex_wake+0x153/0x480 [ 3562.318966][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.324991][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.330999][ C0] do_futex+0x15f/0x1ad0 [ 3562.335239][ C0] ? find_held_lock+0x2d/0x110 [ 3562.339989][ C0] ? futex_exit_release+0x60/0x60 [ 3562.345015][ C0] ? lock_downgrade+0x840/0x840 [ 3562.349867][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3562.354714][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.360703][ C0] ? __might_fault+0x190/0x1d0 [ 3562.365460][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3562.370933][ C0] __x64_sys_futex+0x376/0x4f0 [ 3562.375701][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3562.380185][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3562.385634][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.391620][ C0] ? do_syscall_64+0x21/0x7d0 [ 3562.396286][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.402278][ C0] do_syscall_64+0xf6/0x7d0 [ 3562.406778][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3562.412673][ C0] RIP: 0033:0x45ca69 [ 3562.416560][ C0] Code: Bad RIP value. [ 3562.420601][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3562.429025][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3562.437125][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3562.445100][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3562.453067][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3562.461017][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3562.469022][ C0] syz-executor.0 S29824 14045 6809 0x00000000 [ 3562.475387][ C0] Call Trace: [ 3562.478674][ C0] __schedule+0x8f3/0x1fc0 [ 3562.483088][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3562.488377][ C0] ? firmware_map_remove+0x19d/0x19d [ 3562.493671][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3562.499112][ C0] schedule+0xd0/0x2a0 [ 3562.503162][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3562.508264][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3562.513729][ C0] futex_wait+0x1e2/0x550 [ 3562.518050][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3562.523079][ C0] ? print_usage_bug+0x240/0x240 [ 3562.528014][ C0] ? hash_futex+0x10/0x200 [ 3562.532431][ C0] ? futex_wake+0x153/0x480 [ 3562.536922][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.542881][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.548857][ C0] do_futex+0x15f/0x1ad0 [ 3562.553107][ C0] ? find_held_lock+0x2d/0x110 [ 3562.557866][ C0] ? futex_exit_release+0x60/0x60 [ 3562.562869][ C0] ? lock_downgrade+0x840/0x840 [ 3562.567710][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3562.572548][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.578526][ C0] ? __might_fault+0x190/0x1d0 [ 3562.583273][ C0] ? _copy_to_user+0x126/0x160 [ 3562.588053][ C0] __x64_sys_futex+0x376/0x4f0 [ 3562.592837][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3562.597334][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3562.602767][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.608738][ C0] ? do_syscall_64+0x21/0x7d0 [ 3562.613415][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.619386][ C0] do_syscall_64+0xf6/0x7d0 [ 3562.623876][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3562.629755][ C0] RIP: 0033:0x45ca69 [ 3562.633659][ C0] Code: Bad RIP value. [ 3562.637702][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3562.646119][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3562.654092][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3562.662055][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3562.670018][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3562.678002][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3562.685990][ C0] syz-executor.2 S29816 14311 6995 0x00000000 [ 3562.692327][ C0] Call Trace: [ 3562.695625][ C0] __schedule+0x8f3/0x1fc0 [ 3562.700056][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3562.705338][ C0] ? firmware_map_remove+0x19d/0x19d [ 3562.710748][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3562.716213][ C0] schedule+0xd0/0x2a0 [ 3562.720317][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3562.725423][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3562.730897][ C0] ? find_held_lock+0x2d/0x110 [ 3562.735706][ C0] futex_wait+0x1e2/0x550 [ 3562.740028][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3562.745044][ C0] ? print_usage_bug+0x240/0x240 [ 3562.749987][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3562.755186][ C0] ? futex_wake+0x153/0x480 [ 3562.759691][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.765668][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.771656][ C0] do_futex+0x15f/0x1ad0 [ 3562.775883][ C0] ? find_held_lock+0x2d/0x110 [ 3562.780630][ C0] ? futex_exit_release+0x60/0x60 [ 3562.785647][ C0] ? lock_downgrade+0x840/0x840 [ 3562.790495][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3562.795353][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.801332][ C0] ? __might_fault+0x190/0x1d0 [ 3562.806091][ C0] ? _copy_to_user+0x126/0x160 [ 3562.810868][ C0] __x64_sys_futex+0x376/0x4f0 [ 3562.815625][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3562.820109][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3562.825559][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.831544][ C0] ? do_syscall_64+0x21/0x7d0 [ 3562.836210][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3562.842182][ C0] do_syscall_64+0xf6/0x7d0 [ 3562.846678][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3562.852558][ C0] RIP: 0033:0x45ca69 [ 3562.856437][ C0] Code: Bad RIP value. [ 3562.860477][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3562.868872][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3562.876831][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3562.884788][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3562.892751][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3562.900707][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3562.908725][ C0] syz-executor.2 S29824 14524 6995 0x00000000 [ 3562.915137][ C0] Call Trace: [ 3562.918425][ C0] __schedule+0x8f3/0x1fc0 [ 3562.922820][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3562.928102][ C0] ? firmware_map_remove+0x19d/0x19d [ 3562.933377][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3562.938817][ C0] schedule+0xd0/0x2a0 [ 3562.942867][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3562.947966][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3562.953420][ C0] futex_wait+0x1e2/0x550 [ 3562.957744][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3562.962746][ C0] ? print_usage_bug+0x240/0x240 [ 3562.967676][ C0] ? hash_futex+0x10/0x200 [ 3562.972079][ C0] ? futex_wake+0x153/0x480 [ 3562.976568][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.982534][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3562.988503][ C0] do_futex+0x15f/0x1ad0 [ 3562.992751][ C0] ? find_held_lock+0x2d/0x110 [ 3562.997505][ C0] ? futex_exit_release+0x60/0x60 [ 3563.002509][ C0] ? lock_downgrade+0x840/0x840 [ 3563.007352][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3563.012220][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.018189][ C0] ? __might_fault+0x190/0x1d0 [ 3563.022931][ C0] ? _copy_to_user+0x126/0x160 [ 3563.027699][ C0] __x64_sys_futex+0x376/0x4f0 [ 3563.032468][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3563.036961][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3563.042396][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.048383][ C0] ? do_syscall_64+0x21/0x7d0 [ 3563.053065][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.059047][ C0] do_syscall_64+0xf6/0x7d0 [ 3563.063529][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3563.069406][ C0] RIP: 0033:0x45ca69 [ 3563.073307][ C0] Code: Bad RIP value. [ 3563.077352][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3563.085760][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3563.093718][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3563.101667][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3563.109629][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3563.117599][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3563.125598][ C0] syz-executor.2 S29824 14683 6995 0x00000000 [ 3563.131937][ C0] Call Trace: [ 3563.135249][ C0] __schedule+0x8f3/0x1fc0 [ 3563.139701][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3563.144991][ C0] ? firmware_map_remove+0x19d/0x19d [ 3563.150287][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3563.155754][ C0] schedule+0xd0/0x2a0 [ 3563.159831][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3563.164936][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3563.170403][ C0] futex_wait+0x1e2/0x550 [ 3563.174740][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3563.179794][ C0] ? print_usage_bug+0x240/0x240 [ 3563.184727][ C0] ? hash_futex+0x10/0x200 [ 3563.189146][ C0] ? futex_wake+0x153/0x480 [ 3563.193684][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.199641][ C0] ? mark_lock+0x11f/0xdd0 [ 3563.204035][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.210026][ C0] do_futex+0x15f/0x1ad0 [ 3563.214265][ C0] ? find_held_lock+0x2d/0x110 [ 3563.219027][ C0] ? futex_exit_release+0x60/0x60 [ 3563.224035][ C0] ? lock_downgrade+0x840/0x840 [ 3563.228875][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3563.233736][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.239702][ C0] ? __might_fault+0x190/0x1d0 [ 3563.244456][ C0] ? _copy_to_user+0x126/0x160 [ 3563.249244][ C0] __x64_sys_futex+0x376/0x4f0 [ 3563.254032][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3563.258530][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3563.263977][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.269959][ C0] ? do_syscall_64+0x21/0x7d0 [ 3563.274652][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.280612][ C0] do_syscall_64+0xf6/0x7d0 [ 3563.285114][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3563.291005][ C0] RIP: 0033:0x45ca69 [ 3563.294901][ C0] Code: Bad RIP value. [ 3563.298943][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3563.307357][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3563.315333][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3563.323291][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3563.331243][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3563.339193][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3563.347180][ C0] syz-executor.2 S29032 14825 6995 0x00000000 [ 3563.353511][ C0] Call Trace: [ 3563.356787][ C0] __schedule+0x8f3/0x1fc0 [ 3563.361195][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3563.366484][ C0] ? firmware_map_remove+0x19d/0x19d [ 3563.371761][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3563.377219][ C0] schedule+0xd0/0x2a0 [ 3563.381270][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3563.386373][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3563.391822][ C0] futex_wait+0x1e2/0x550 [ 3563.396134][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3563.401136][ C0] ? wake_up_q+0xc1/0x140 [ 3563.405452][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3563.410650][ C0] ? futex_wake+0x153/0x480 [ 3563.415151][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.421120][ C0] ? mark_lock+0x11f/0xdd0 [ 3563.425529][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.431498][ C0] do_futex+0x15f/0x1ad0 [ 3563.435729][ C0] ? find_held_lock+0x2d/0x110 [ 3563.440481][ C0] ? futex_exit_release+0x60/0x60 [ 3563.445500][ C0] ? lock_downgrade+0x840/0x840 [ 3563.450354][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3563.455206][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.461189][ C0] ? __might_fault+0x190/0x1d0 [ 3563.465945][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3563.471416][ C0] __x64_sys_futex+0x376/0x4f0 [ 3563.476176][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3563.480659][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3563.486110][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.492098][ C0] ? do_syscall_64+0x21/0x7d0 [ 3563.496763][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.502725][ C0] do_syscall_64+0xf6/0x7d0 [ 3563.507240][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3563.513132][ C0] RIP: 0033:0x45ca69 [ 3563.517013][ C0] Code: Bad RIP value. [ 3563.521059][ C0] RSP: 002b:00007f5043407cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3563.529451][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3563.537422][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3563.545394][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3563.553367][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3563.561325][ C0] R13: 0000000000c9fb6f R14: 00007f50434089c0 R15: 000000000078c04c [ 3563.569308][ C0] syz-executor.3 S29816 15025 7191 0x00000000 [ 3563.575644][ C0] Call Trace: [ 3563.578932][ C0] __schedule+0x8f3/0x1fc0 [ 3563.583328][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3563.588609][ C0] ? firmware_map_remove+0x19d/0x19d [ 3563.593897][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3563.599337][ C0] schedule+0xd0/0x2a0 [ 3563.603387][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3563.608490][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3563.613947][ C0] futex_wait+0x1e2/0x550 [ 3563.618258][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3563.623270][ C0] ? print_usage_bug+0x240/0x240 [ 3563.628203][ C0] ? hash_futex+0x10/0x200 [ 3563.632611][ C0] ? futex_wake+0x153/0x480 [ 3563.637109][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.643077][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.649055][ C0] do_futex+0x15f/0x1ad0 [ 3563.653294][ C0] ? find_held_lock+0x2d/0x110 [ 3563.658040][ C0] ? futex_exit_release+0x60/0x60 [ 3563.663047][ C0] ? lock_downgrade+0x840/0x840 [ 3563.667888][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3563.672741][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.678707][ C0] ? __might_fault+0x190/0x1d0 [ 3563.683449][ C0] ? _copy_to_user+0x126/0x160 [ 3563.688230][ C0] __x64_sys_futex+0x376/0x4f0 [ 3563.693014][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3563.697514][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3563.702947][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.708938][ C0] ? do_syscall_64+0x21/0x7d0 [ 3563.713620][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.719580][ C0] do_syscall_64+0xf6/0x7d0 [ 3563.724064][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3563.729940][ C0] RIP: 0033:0x45ca69 [ 3563.733832][ C0] Code: Bad RIP value. [ 3563.737886][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3563.746280][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3563.754251][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3563.762198][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3563.770156][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3563.778119][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3563.786101][ C0] syz-executor.3 S29824 15087 7191 0x00000000 [ 3563.792431][ C0] Call Trace: [ 3563.795739][ C0] __schedule+0x8f3/0x1fc0 [ 3563.800166][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3563.805449][ C0] ? firmware_map_remove+0x19d/0x19d [ 3563.810738][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3563.816201][ C0] schedule+0xd0/0x2a0 [ 3563.820273][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3563.825378][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3563.830845][ C0] futex_wait+0x1e2/0x550 [ 3563.835181][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3563.840186][ C0] ? print_usage_bug+0x240/0x240 [ 3563.845122][ C0] ? hash_futex+0x10/0x200 [ 3563.849537][ C0] ? futex_wake+0x153/0x480 [ 3563.854041][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.860004][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3563.865977][ C0] do_futex+0x15f/0x1ad0 [ 3563.870232][ C0] ? find_held_lock+0x2d/0x110 [ 3563.874998][ C0] ? futex_exit_release+0x60/0x60 [ 3563.880001][ C0] ? lock_downgrade+0x840/0x840 [ 3563.884859][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3563.889798][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.895792][ C0] ? __might_fault+0x190/0x1d0 [ 3563.900559][ C0] ? _copy_to_user+0x126/0x160 [ 3563.905324][ C0] __x64_sys_futex+0x376/0x4f0 [ 3563.910098][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3563.914610][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3563.920049][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.926021][ C0] ? do_syscall_64+0x21/0x7d0 [ 3563.930730][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3563.936718][ C0] do_syscall_64+0xf6/0x7d0 [ 3563.941200][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3563.947078][ C0] RIP: 0033:0x45ca69 [ 3563.950975][ C0] Code: Bad RIP value. [ 3563.955027][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3563.963417][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3563.971366][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3563.979326][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3563.987289][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3563.995249][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3564.003210][ C0] syz-executor.3 S29824 15118 7191 0x00000000 [ 3564.009525][ C0] Call Trace: [ 3564.012809][ C0] __schedule+0x8f3/0x1fc0 [ 3564.017210][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3564.022489][ C0] ? firmware_map_remove+0x19d/0x19d [ 3564.027770][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3564.033218][ C0] schedule+0xd0/0x2a0 [ 3564.037270][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3564.042368][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3564.047827][ C0] futex_wait+0x1e2/0x550 [ 3564.052148][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3564.057158][ C0] ? print_usage_bug+0x240/0x240 [ 3564.062083][ C0] ? hash_futex+0x10/0x200 [ 3564.066490][ C0] ? futex_wake+0x153/0x480 [ 3564.071008][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.076992][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.082949][ C0] do_futex+0x15f/0x1ad0 [ 3564.087193][ C0] ? find_held_lock+0x2d/0x110 [ 3564.091955][ C0] ? futex_exit_release+0x60/0x60 [ 3564.096983][ C0] ? lock_downgrade+0x840/0x840 [ 3564.101827][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3564.106682][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.112656][ C0] ? __might_fault+0x190/0x1d0 [ 3564.117404][ C0] ? _copy_to_user+0x126/0x160 [ 3564.122164][ C0] __x64_sys_futex+0x376/0x4f0 [ 3564.126938][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3564.131453][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3564.136902][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.142861][ C0] ? do_syscall_64+0x21/0x7d0 [ 3564.147555][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.153541][ C0] do_syscall_64+0xf6/0x7d0 [ 3564.158044][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3564.163912][ C0] RIP: 0033:0x45ca69 [ 3564.167803][ C0] Code: Bad RIP value. [ 3564.171870][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3564.180253][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3564.188294][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3564.200245][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3564.208202][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3564.216174][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3564.224148][ C0] syz-executor.3 S29824 15205 7191 0x00000000 [ 3564.230469][ C0] Call Trace: [ 3564.233767][ C0] __schedule+0x8f3/0x1fc0 [ 3564.238165][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3564.243441][ C0] ? firmware_map_remove+0x19d/0x19d [ 3564.248749][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3564.254293][ C0] schedule+0xd0/0x2a0 [ 3564.258359][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3564.263448][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3564.268904][ C0] futex_wait+0x1e2/0x550 [ 3564.273232][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3564.278244][ C0] ? print_usage_bug+0x240/0x240 [ 3564.283161][ C0] ? hash_futex+0x10/0x200 [ 3564.287569][ C0] ? futex_wake+0x153/0x480 [ 3564.292105][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.298071][ C0] ? mark_lock+0x11f/0xdd0 [ 3564.302477][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.308452][ C0] do_futex+0x15f/0x1ad0 [ 3564.312730][ C0] ? find_held_lock+0x2d/0x110 [ 3564.317476][ C0] ? futex_exit_release+0x60/0x60 [ 3564.322477][ C0] ? lock_downgrade+0x840/0x840 [ 3564.327328][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3564.332165][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.338129][ C0] ? __might_fault+0x190/0x1d0 [ 3564.342872][ C0] ? _copy_to_user+0x126/0x160 [ 3564.347635][ C0] __x64_sys_futex+0x376/0x4f0 [ 3564.352421][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3564.356915][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3564.362351][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.368339][ C0] ? do_syscall_64+0x21/0x7d0 [ 3564.373031][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.379018][ C0] do_syscall_64+0xf6/0x7d0 [ 3564.383503][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3564.389380][ C0] RIP: 0033:0x45ca69 [ 3564.393272][ C0] Code: Bad RIP value. [ 3564.397338][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3564.405750][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3564.413708][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3564.421653][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3564.429610][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3564.437569][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3564.445550][ C0] syz-executor.2 S29816 15240 6995 0x00000000 [ 3564.451887][ C0] Call Trace: [ 3564.455186][ C0] __schedule+0x8f3/0x1fc0 [ 3564.459597][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3564.464881][ C0] ? firmware_map_remove+0x19d/0x19d [ 3564.470167][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3564.475628][ C0] schedule+0xd0/0x2a0 [ 3564.479691][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3564.484792][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3564.490261][ C0] futex_wait+0x1e2/0x550 [ 3564.494582][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3564.499595][ C0] ? print_usage_bug+0x240/0x240 [ 3564.504525][ C0] ? hash_futex+0x10/0x200 [ 3564.508948][ C0] ? futex_wake+0x153/0x480 [ 3564.513459][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.519414][ C0] ? mark_lock+0x11f/0xdd0 [ 3564.523819][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.529793][ C0] do_futex+0x15f/0x1ad0 [ 3564.534032][ C0] ? find_held_lock+0x2d/0x110 [ 3564.538778][ C0] ? futex_exit_release+0x60/0x60 [ 3564.543781][ C0] ? lock_downgrade+0x840/0x840 [ 3564.548655][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3564.553494][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.559458][ C0] ? __might_fault+0x190/0x1d0 [ 3564.564200][ C0] ? _copy_to_user+0x126/0x160 [ 3564.568963][ C0] __x64_sys_futex+0x376/0x4f0 [ 3564.573723][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3564.578208][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3564.583641][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.589611][ C0] ? do_syscall_64+0x21/0x7d0 [ 3564.594279][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.600251][ C0] do_syscall_64+0xf6/0x7d0 [ 3564.604748][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3564.610637][ C0] RIP: 0033:0x45ca69 [ 3564.614543][ C0] Code: Bad RIP value. [ 3564.618597][ C0] RSP: 002b:00007f50433e6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3564.627012][ C0] RAX: ffffffffffffffda RBX: 000000000078c0e8 RCX: 000000000045ca69 [ 3564.634971][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c0e8 [ 3564.642965][ C0] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 3564.650930][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c0ec [ 3564.658889][ C0] R13: 0000000000c9fb6f R14: 00007f50433e79c0 R15: 000000000078c0ec [ 3564.666870][ C0] syz-executor.3 S29824 15261 7191 0x00000000 [ 3564.673199][ C0] Call Trace: [ 3564.676472][ C0] __schedule+0x8f3/0x1fc0 [ 3564.680879][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3564.686159][ C0] ? firmware_map_remove+0x19d/0x19d [ 3564.691432][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3564.696885][ C0] schedule+0xd0/0x2a0 [ 3564.700942][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3564.706044][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3564.711494][ C0] futex_wait+0x1e2/0x550 [ 3564.715805][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3564.720826][ C0] ? print_usage_bug+0x240/0x240 [ 3564.725849][ C0] ? hash_futex+0x10/0x200 [ 3564.730265][ C0] ? futex_wake+0x153/0x480 [ 3564.734766][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.740719][ C0] ? mark_lock+0x11f/0xdd0 [ 3564.745126][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.751108][ C0] do_futex+0x15f/0x1ad0 [ 3564.755345][ C0] ? find_held_lock+0x2d/0x110 [ 3564.760087][ C0] ? futex_exit_release+0x60/0x60 [ 3564.765102][ C0] ? lock_downgrade+0x840/0x840 [ 3564.769973][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3564.774839][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.780827][ C0] ? __might_fault+0x190/0x1d0 [ 3564.785586][ C0] ? _copy_to_user+0x126/0x160 [ 3564.790361][ C0] __x64_sys_futex+0x376/0x4f0 [ 3564.795132][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3564.799624][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3564.805069][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.811058][ C0] ? do_syscall_64+0x21/0x7d0 [ 3564.815725][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3564.821683][ C0] do_syscall_64+0xf6/0x7d0 [ 3564.826181][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3564.832077][ C0] RIP: 0033:0x45ca69 [ 3564.835956][ C0] Code: Bad RIP value. [ 3564.840024][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3564.848416][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3564.856376][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3564.864322][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3564.872270][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3564.880230][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3564.888209][ C0] syz-executor.3 S29824 15301 7191 0x00000000 [ 3564.894546][ C0] Call Trace: [ 3564.897830][ C0] __schedule+0x8f3/0x1fc0 [ 3564.902236][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3564.907518][ C0] ? firmware_map_remove+0x19d/0x19d [ 3564.912811][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3564.918260][ C0] schedule+0xd0/0x2a0 [ 3564.922320][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3564.927421][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3564.932869][ C0] ? find_held_lock+0x2d/0x110 [ 3564.937614][ C0] futex_wait+0x1e2/0x550 [ 3564.941923][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3564.946939][ C0] ? print_usage_bug+0x240/0x240 [ 3564.951881][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3564.957075][ C0] ? futex_wake+0x153/0x480 [ 3564.961578][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.967544][ C0] ? mark_lock+0x11f/0xdd0 [ 3564.971950][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.977932][ C0] do_futex+0x15f/0x1ad0 [ 3564.982156][ C0] ? find_held_lock+0x2d/0x110 [ 3564.986910][ C0] ? futex_exit_release+0x60/0x60 [ 3564.991938][ C0] ? lock_downgrade+0x840/0x840 [ 3564.996770][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3565.001598][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.007579][ C0] ? __might_fault+0x190/0x1d0 [ 3565.012358][ C0] ? _copy_to_user+0x126/0x160 [ 3565.017117][ C0] __x64_sys_futex+0x376/0x4f0 [ 3565.021874][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3565.026371][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3565.031833][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.037804][ C0] ? do_syscall_64+0x21/0x7d0 [ 3565.042470][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.048444][ C0] do_syscall_64+0xf6/0x7d0 [ 3565.052969][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3565.058851][ C0] RIP: 0033:0x45ca69 [ 3565.062740][ C0] Code: Bad RIP value. [ 3565.066790][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3565.075205][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3565.083152][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3565.091109][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3565.099069][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3565.107025][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3565.115045][ C0] syz-executor.0 S29824 15569 6809 0x00000000 [ 3565.121377][ C0] Call Trace: [ 3565.124666][ C0] __schedule+0x8f3/0x1fc0 [ 3565.129080][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3565.134357][ C0] ? firmware_map_remove+0x19d/0x19d [ 3565.139688][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3565.145161][ C0] schedule+0xd0/0x2a0 [ 3565.149240][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3565.154341][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3565.159795][ C0] futex_wait+0x1e2/0x550 [ 3565.164115][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3565.169134][ C0] ? print_usage_bug+0x240/0x240 [ 3565.174065][ C0] ? hash_futex+0x10/0x200 [ 3565.178462][ C0] ? futex_wake+0x153/0x480 [ 3565.182951][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.188934][ C0] ? mark_lock+0x11f/0xdd0 [ 3565.193341][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.199299][ C0] do_futex+0x15f/0x1ad0 [ 3565.203522][ C0] ? find_held_lock+0x2d/0x110 [ 3565.208277][ C0] ? futex_exit_release+0x60/0x60 [ 3565.213291][ C0] ? lock_downgrade+0x840/0x840 [ 3565.218123][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3565.222960][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.228943][ C0] ? __might_fault+0x190/0x1d0 [ 3565.233714][ C0] ? _copy_to_user+0x126/0x160 [ 3565.238474][ C0] __x64_sys_futex+0x376/0x4f0 [ 3565.243229][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3565.247724][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3565.253169][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.259143][ C0] ? do_syscall_64+0x21/0x7d0 [ 3565.263798][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.269778][ C0] do_syscall_64+0xf6/0x7d0 [ 3565.274299][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3565.280171][ C0] RIP: 0033:0x45ca69 [ 3565.284079][ C0] Code: Bad RIP value. [ 3565.288127][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3565.296526][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3565.304481][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3565.312440][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3565.320396][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3565.328354][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3565.336347][ C0] syz-executor.2 S29816 15699 6995 0x00000000 [ 3565.342701][ C0] Call Trace: [ 3565.346005][ C0] __schedule+0x8f3/0x1fc0 [ 3565.350423][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3565.355714][ C0] ? firmware_map_remove+0x19d/0x19d [ 3565.361013][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3565.366467][ C0] schedule+0xd0/0x2a0 [ 3565.370540][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3565.375641][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3565.381111][ C0] futex_wait+0x1e2/0x550 [ 3565.385435][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3565.390461][ C0] ? print_usage_bug+0x240/0x240 [ 3565.395410][ C0] ? hash_futex+0x10/0x200 [ 3565.399804][ C0] ? futex_wake+0x153/0x480 [ 3565.404291][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.410260][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.416247][ C0] do_futex+0x15f/0x1ad0 [ 3565.420486][ C0] ? find_held_lock+0x2d/0x110 [ 3565.425246][ C0] ? futex_exit_release+0x60/0x60 [ 3565.430271][ C0] ? lock_downgrade+0x840/0x840 [ 3565.435126][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3565.439969][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.445959][ C0] ? __might_fault+0x190/0x1d0 [ 3565.450750][ C0] ? _copy_to_user+0x126/0x160 [ 3565.455510][ C0] __x64_sys_futex+0x376/0x4f0 [ 3565.460262][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3565.464758][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3565.470220][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.476188][ C0] ? do_syscall_64+0x21/0x7d0 [ 3565.480841][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.486813][ C0] do_syscall_64+0xf6/0x7d0 [ 3565.491309][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3565.497189][ C0] RIP: 0033:0x45ca69 [ 3565.501068][ C0] Code: Bad RIP value. [ 3565.505116][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3565.513516][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3565.521464][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3565.529419][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3565.537378][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3565.545338][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3565.553314][ C0] syz-executor.2 S29824 15942 6995 0x00000000 [ 3565.559644][ C0] Call Trace: [ 3565.562926][ C0] __schedule+0x8f3/0x1fc0 [ 3565.567333][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3565.572610][ C0] ? firmware_map_remove+0x19d/0x19d [ 3565.577878][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3565.583333][ C0] schedule+0xd0/0x2a0 [ 3565.587395][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3565.592507][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3565.597953][ C0] futex_wait+0x1e2/0x550 [ 3565.602266][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3565.607287][ C0] ? print_usage_bug+0x240/0x240 [ 3565.612229][ C0] ? hash_futex+0x10/0x200 [ 3565.616637][ C0] ? futex_wake+0x153/0x480 [ 3565.621124][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.627091][ C0] ? mark_lock+0x11f/0xdd0 [ 3565.631496][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.637454][ C0] do_futex+0x15f/0x1ad0 [ 3565.641690][ C0] ? find_held_lock+0x2d/0x110 [ 3565.646447][ C0] ? futex_exit_release+0x60/0x60 [ 3565.651464][ C0] ? lock_downgrade+0x840/0x840 [ 3565.656308][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3565.661178][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.667161][ C0] ? __might_fault+0x190/0x1d0 [ 3565.671929][ C0] ? _copy_to_user+0x126/0x160 [ 3565.676689][ C0] __x64_sys_futex+0x376/0x4f0 [ 3565.681444][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3565.685944][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3565.691405][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.697377][ C0] ? do_syscall_64+0x21/0x7d0 [ 3565.702043][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.708026][ C0] do_syscall_64+0xf6/0x7d0 [ 3565.712531][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3565.718400][ C0] RIP: 0033:0x45ca69 [ 3565.722299][ C0] Code: Bad RIP value. [ 3565.726349][ C0] RSP: 002b:00007f5043407cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3565.734758][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3565.742730][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3565.750685][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3565.758654][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3565.766610][ C0] R13: 0000000000c9fb6f R14: 00007f50434089c0 R15: 000000000078c04c [ 3565.774598][ C0] syz-executor.2 S29824 15981 6995 0x00000000 [ 3565.780930][ C0] Call Trace: [ 3565.784200][ C0] __schedule+0x8f3/0x1fc0 [ 3565.788608][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3565.793885][ C0] ? firmware_map_remove+0x19d/0x19d [ 3565.799150][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3565.804600][ C0] schedule+0xd0/0x2a0 [ 3565.808676][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3565.813791][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3565.819237][ C0] ? find_held_lock+0x2d/0x110 [ 3565.823979][ C0] futex_wait+0x1e2/0x550 [ 3565.828311][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3565.833324][ C0] ? print_usage_bug+0x240/0x240 [ 3565.838251][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3565.843426][ C0] ? futex_wake+0x153/0x480 [ 3565.847954][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.853927][ C0] ? mark_lock+0x11f/0xdd0 [ 3565.858343][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3565.864304][ C0] do_futex+0x15f/0x1ad0 [ 3565.868548][ C0] ? find_held_lock+0x2d/0x110 [ 3565.873301][ C0] ? futex_exit_release+0x60/0x60 [ 3565.878306][ C0] ? lock_downgrade+0x840/0x840 [ 3565.883133][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3565.887973][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.893957][ C0] ? __might_fault+0x190/0x1d0 [ 3565.898702][ C0] ? _copy_to_user+0x126/0x160 [ 3565.903458][ C0] __x64_sys_futex+0x376/0x4f0 [ 3565.908221][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3565.912725][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3565.918183][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.924150][ C0] ? do_syscall_64+0x21/0x7d0 [ 3565.928818][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3565.934791][ C0] do_syscall_64+0xf6/0x7d0 [ 3565.939274][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3565.945150][ C0] RIP: 0033:0x45ca69 [ 3565.949049][ C0] Code: Bad RIP value. [ 3565.953100][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3565.961498][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3565.969452][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3565.977424][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3565.985379][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3565.993338][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3566.001301][ C0] syz-executor.2 S29824 15996 6995 0x00000000 [ 3566.007616][ C0] Call Trace: [ 3566.010913][ C0] __schedule+0x8f3/0x1fc0 [ 3566.015329][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3566.020607][ C0] ? firmware_map_remove+0x19d/0x19d [ 3566.025887][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3566.031336][ C0] schedule+0xd0/0x2a0 [ 3566.035402][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3566.040491][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3566.045945][ C0] futex_wait+0x1e2/0x550 [ 3566.050281][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3566.055293][ C0] ? print_usage_bug+0x240/0x240 [ 3566.060207][ C0] ? hash_futex+0x10/0x200 [ 3566.064637][ C0] ? futex_wake+0x153/0x480 [ 3566.069157][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.075137][ C0] ? mark_lock+0x11f/0xdd0 [ 3566.079542][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.085512][ C0] do_futex+0x15f/0x1ad0 [ 3566.089765][ C0] ? find_held_lock+0x2d/0x110 [ 3566.094531][ C0] ? futex_exit_release+0x60/0x60 [ 3566.099546][ C0] ? lock_downgrade+0x840/0x840 [ 3566.104384][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3566.109224][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.115200][ C0] ? __might_fault+0x190/0x1d0 [ 3566.119942][ C0] ? _copy_to_user+0x126/0x160 [ 3566.124704][ C0] __x64_sys_futex+0x376/0x4f0 [ 3566.129475][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3566.133970][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3566.139422][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.145397][ C0] ? do_syscall_64+0x21/0x7d0 [ 3566.150090][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.156064][ C0] do_syscall_64+0xf6/0x7d0 [ 3566.160559][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3566.166436][ C0] RIP: 0033:0x45ca69 [ 3566.170335][ C0] Code: Bad RIP value. [ 3566.174383][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3566.182783][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3566.190740][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3566.198698][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3566.206675][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3566.214681][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3566.222656][ C0] syz-executor.2 S29824 16008 6995 0x00000000 [ 3566.228971][ C0] Call Trace: [ 3566.232356][ C0] __schedule+0x8f3/0x1fc0 [ 3566.236755][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3566.242057][ C0] ? firmware_map_remove+0x19d/0x19d [ 3566.247334][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3566.252799][ C0] schedule+0xd0/0x2a0 [ 3566.256854][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3566.261942][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3566.267405][ C0] futex_wait+0x1e2/0x550 [ 3566.271742][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3566.276772][ C0] ? print_usage_bug+0x240/0x240 [ 3566.281689][ C0] ? hash_futex+0x10/0x200 [ 3566.286100][ C0] ? futex_wake+0x153/0x480 [ 3566.290619][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.296587][ C0] ? mark_lock+0x11f/0xdd0 [ 3566.300986][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.306967][ C0] do_futex+0x15f/0x1ad0 [ 3566.311221][ C0] ? find_held_lock+0x2d/0x110 [ 3566.315992][ C0] ? futex_exit_release+0x60/0x60 [ 3566.321035][ C0] ? lock_downgrade+0x840/0x840 [ 3566.325886][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3566.331867][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.337850][ C0] ? __might_fault+0x190/0x1d0 [ 3566.342594][ C0] ? _copy_to_user+0x126/0x160 [ 3566.347357][ C0] __x64_sys_futex+0x376/0x4f0 [ 3566.352124][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3566.356629][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3566.362074][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.368068][ C0] ? do_syscall_64+0x21/0x7d0 [ 3566.372736][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.378713][ C0] do_syscall_64+0xf6/0x7d0 [ 3566.383207][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3566.389084][ C0] RIP: 0033:0x45ca69 [ 3566.392977][ C0] Code: Bad RIP value. [ 3566.397016][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3566.405410][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3566.413385][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3566.421335][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3566.429293][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3566.437253][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3566.445255][ C0] syz-executor.2 S29824 16209 6995 0x00000000 [ 3566.451584][ C0] Call Trace: [ 3566.454871][ C0] __schedule+0x8f3/0x1fc0 [ 3566.459290][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3566.464584][ C0] ? firmware_map_remove+0x19d/0x19d [ 3566.469874][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3566.475326][ C0] schedule+0xd0/0x2a0 [ 3566.479375][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3566.484472][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3566.489937][ C0] futex_wait+0x1e2/0x550 [ 3566.494258][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3566.499261][ C0] ? print_usage_bug+0x240/0x240 [ 3566.504175][ C0] ? hash_futex+0x10/0x200 [ 3566.508601][ C0] ? futex_wake+0x153/0x480 [ 3566.513116][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.519088][ C0] ? mark_lock+0x11f/0xdd0 [ 3566.523482][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.529451][ C0] do_futex+0x15f/0x1ad0 [ 3566.533689][ C0] ? find_held_lock+0x2d/0x110 [ 3566.538432][ C0] ? futex_exit_release+0x60/0x60 [ 3566.543545][ C0] ? lock_downgrade+0x840/0x840 [ 3566.548388][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3566.553226][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.559209][ C0] ? __might_fault+0x190/0x1d0 [ 3566.563962][ C0] ? _copy_to_user+0x126/0x160 [ 3566.568724][ C0] __x64_sys_futex+0x376/0x4f0 [ 3566.573479][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3566.577962][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3566.583395][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.589365][ C0] ? do_syscall_64+0x21/0x7d0 [ 3566.594032][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.600020][ C0] do_syscall_64+0xf6/0x7d0 [ 3566.604517][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3566.610407][ C0] RIP: 0033:0x45ca69 [ 3566.614298][ C0] Code: Bad RIP value. [ 3566.618339][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3566.626734][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3566.634707][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3566.642653][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3566.650608][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3566.658573][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3566.666551][ C0] syz-executor.2 S29824 16219 6995 0x00000000 [ 3566.672880][ C0] Call Trace: [ 3566.676513][ C0] __schedule+0x8f3/0x1fc0 [ 3566.680909][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3566.686189][ C0] ? firmware_map_remove+0x19d/0x19d [ 3566.691464][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3566.696906][ C0] schedule+0xd0/0x2a0 [ 3566.700957][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3566.706058][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3566.711510][ C0] futex_wait+0x1e2/0x550 [ 3566.715830][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3566.720832][ C0] ? print_usage_bug+0x240/0x240 [ 3566.725767][ C0] ? hash_futex+0x10/0x200 [ 3566.730183][ C0] ? futex_wake+0x153/0x480 [ 3566.734690][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.740644][ C0] ? mark_lock+0x11f/0xdd0 [ 3566.745053][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.751034][ C0] do_futex+0x15f/0x1ad0 [ 3566.755292][ C0] ? find_held_lock+0x2d/0x110 [ 3566.760072][ C0] ? futex_exit_release+0x60/0x60 [ 3566.765096][ C0] ? lock_downgrade+0x840/0x840 [ 3566.769951][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3566.774804][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.780795][ C0] ? __might_fault+0x190/0x1d0 [ 3566.785555][ C0] ? _copy_to_user+0x126/0x160 [ 3566.790330][ C0] __x64_sys_futex+0x376/0x4f0 [ 3566.795088][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3566.799571][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3566.805039][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.811024][ C0] ? do_syscall_64+0x21/0x7d0 [ 3566.815703][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3566.821663][ C0] do_syscall_64+0xf6/0x7d0 [ 3566.826179][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3566.832058][ C0] RIP: 0033:0x45ca69 [ 3566.835952][ C0] Code: Bad RIP value. [ 3566.839999][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3566.848391][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3566.856349][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3566.864294][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3566.872249][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3566.880221][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3566.888201][ C0] syz-executor.2 S29824 16332 6995 0x00000000 [ 3566.894534][ C0] Call Trace: [ 3566.897818][ C0] __schedule+0x8f3/0x1fc0 [ 3566.902223][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3566.907503][ C0] ? firmware_map_remove+0x19d/0x19d [ 3566.912791][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3566.918240][ C0] schedule+0xd0/0x2a0 [ 3566.922289][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3566.927391][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3566.932848][ C0] ? find_held_lock+0x2d/0x110 [ 3566.937591][ C0] futex_wait+0x1e2/0x550 [ 3566.941898][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3566.946908][ C0] ? print_usage_bug+0x240/0x240 [ 3566.951835][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3566.957012][ C0] ? futex_wake+0x153/0x480 [ 3566.961501][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3566.967474][ C0] do_futex+0x15f/0x1ad0 [ 3566.971718][ C0] ? find_held_lock+0x2d/0x110 [ 3566.976549][ C0] ? finish_task_switch+0x147/0x750 [ 3566.981723][ C0] ? futex_exit_release+0x60/0x60 [ 3566.986736][ C0] ? lock_downgrade+0x840/0x840 [ 3566.991586][ C0] ? perf_sched_cb_inc+0x250/0x250 [ 3566.996686][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3567.001880][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.007869][ C0] ? _raw_spin_unlock_irq+0x55/0x80 [ 3567.013056][ C0] ? finish_task_switch+0x147/0x750 [ 3567.018237][ C0] ? finish_task_switch+0x119/0x750 [ 3567.023418][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3567.028875][ C0] __x64_sys_futex+0x376/0x4f0 [ 3567.033643][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3567.038240][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3567.043708][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.049708][ C0] ? do_syscall_64+0x21/0x7d0 [ 3567.054374][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.060334][ C0] do_syscall_64+0xf6/0x7d0 [ 3567.064852][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3567.070739][ C0] RIP: 0033:0x45ca69 [ 3567.074663][ C0] Code: Bad RIP value. [ 3567.078976][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3567.087377][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3567.095346][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3567.103307][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3567.111255][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3567.119218][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3567.127196][ C0] syz-executor.3 S29824 16392 7191 0x00000000 [ 3567.133536][ C0] Call Trace: [ 3567.136812][ C0] __schedule+0x8f3/0x1fc0 [ 3567.141210][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3567.146499][ C0] ? firmware_map_remove+0x19d/0x19d [ 3567.151780][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3567.157255][ C0] schedule+0xd0/0x2a0 [ 3567.161340][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3567.166442][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3567.171919][ C0] futex_wait+0x1e2/0x550 [ 3567.176246][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3567.181261][ C0] ? print_usage_bug+0x240/0x240 [ 3567.186195][ C0] ? hash_futex+0x10/0x200 [ 3567.190612][ C0] ? futex_wake+0x153/0x480 [ 3567.195137][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.201107][ C0] ? mark_lock+0x11f/0xdd0 [ 3567.205515][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.211501][ C0] do_futex+0x15f/0x1ad0 [ 3567.215762][ C0] ? find_held_lock+0x2d/0x110 [ 3567.220505][ C0] ? futex_exit_release+0x60/0x60 [ 3567.225522][ C0] ? lock_downgrade+0x840/0x840 [ 3567.230376][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3567.235232][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.241194][ C0] ? __might_fault+0x190/0x1d0 [ 3567.245948][ C0] ? _copy_to_user+0x126/0x160 [ 3567.250721][ C0] __x64_sys_futex+0x376/0x4f0 [ 3567.255500][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3567.259990][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3567.265438][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.271409][ C0] ? do_syscall_64+0x21/0x7d0 [ 3567.276111][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.282073][ C0] do_syscall_64+0xf6/0x7d0 [ 3567.286570][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3567.292448][ C0] RIP: 0033:0x45ca69 [ 3567.296329][ C0] Code: Bad RIP value. [ 3567.300369][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3567.308761][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3567.316721][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3567.324676][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3567.332635][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3567.340582][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3567.348561][ C0] syz-executor.3 S29824 16398 7191 0x00000000 [ 3567.354889][ C0] Call Trace: [ 3567.358178][ C0] __schedule+0x8f3/0x1fc0 [ 3567.362585][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3567.367896][ C0] ? firmware_map_remove+0x19d/0x19d [ 3567.373172][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3567.378610][ C0] schedule+0xd0/0x2a0 [ 3567.382658][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3567.387758][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3567.393209][ C0] futex_wait+0x1e2/0x550 [ 3567.397520][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3567.402524][ C0] ? print_usage_bug+0x240/0x240 [ 3567.407453][ C0] ? hash_futex+0x10/0x200 [ 3567.411860][ C0] ? futex_wake+0x153/0x480 [ 3567.416374][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.422349][ C0] ? mark_lock+0x11f/0xdd0 [ 3567.426769][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.432762][ C0] do_futex+0x15f/0x1ad0 [ 3567.437017][ C0] ? find_held_lock+0x2d/0x110 [ 3567.441761][ C0] ? futex_exit_release+0x60/0x60 [ 3567.446796][ C0] ? lock_downgrade+0x840/0x840 [ 3567.451647][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3567.456485][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.462462][ C0] ? __might_fault+0x190/0x1d0 [ 3567.467233][ C0] ? _copy_to_user+0x126/0x160 [ 3567.472000][ C0] __x64_sys_futex+0x376/0x4f0 [ 3567.476745][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3567.481227][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3567.486675][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.492643][ C0] ? do_syscall_64+0x21/0x7d0 [ 3567.497317][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.503288][ C0] do_syscall_64+0xf6/0x7d0 [ 3567.507786][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3567.513682][ C0] RIP: 0033:0x45ca69 [ 3567.517560][ C0] Code: Bad RIP value. [ 3567.521601][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3567.529996][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3567.537956][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3567.545912][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3567.553872][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3567.561836][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3567.569815][ C0] syz-executor.3 S29824 16404 7191 0x00000000 [ 3567.576144][ C0] Call Trace: [ 3567.579418][ C0] __schedule+0x8f3/0x1fc0 [ 3567.583815][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3567.589096][ C0] ? firmware_map_remove+0x19d/0x19d [ 3567.594373][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3567.599822][ C0] schedule+0xd0/0x2a0 [ 3567.603886][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3567.608989][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3567.614457][ C0] ? find_held_lock+0x2d/0x110 [ 3567.619214][ C0] futex_wait+0x1e2/0x550 [ 3567.623522][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3567.628540][ C0] ? print_usage_bug+0x240/0x240 [ 3567.633467][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3567.638660][ C0] ? futex_wake+0x153/0x480 [ 3567.643162][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.649129][ C0] ? mark_lock+0x11f/0xdd0 [ 3567.653544][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.659510][ C0] do_futex+0x15f/0x1ad0 [ 3567.663736][ C0] ? find_held_lock+0x2d/0x110 [ 3567.668517][ C0] ? futex_exit_release+0x60/0x60 [ 3567.673533][ C0] ? lock_downgrade+0x840/0x840 [ 3567.678383][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3567.683210][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.689192][ C0] ? __might_fault+0x190/0x1d0 [ 3567.693959][ C0] ? _copy_to_user+0x126/0x160 [ 3567.698706][ C0] __x64_sys_futex+0x376/0x4f0 [ 3567.703451][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3567.707960][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3567.713407][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.719375][ C0] ? do_syscall_64+0x21/0x7d0 [ 3567.724044][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.730021][ C0] do_syscall_64+0xf6/0x7d0 [ 3567.734539][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3567.740421][ C0] RIP: 0033:0x45ca69 [ 3567.744297][ C0] Code: Bad RIP value. [ 3567.748348][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3567.756757][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3567.764726][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3567.772684][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3567.780631][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3567.788590][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3567.796560][ C0] syz-executor.3 S29824 16413 7191 0x00000000 [ 3567.802883][ C0] Call Trace: [ 3567.806168][ C0] __schedule+0x8f3/0x1fc0 [ 3567.810586][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3567.815882][ C0] ? firmware_map_remove+0x19d/0x19d [ 3567.821146][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3567.826598][ C0] schedule+0xd0/0x2a0 [ 3567.830696][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3567.835809][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3567.841243][ C0] ? find_held_lock+0x2d/0x110 [ 3567.846003][ C0] futex_wait+0x1e2/0x550 [ 3567.850339][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3567.855367][ C0] ? print_usage_bug+0x240/0x240 [ 3567.860295][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3567.865491][ C0] ? futex_wake+0x153/0x480 [ 3567.870029][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.875998][ C0] ? mark_lock+0x11f/0xdd0 [ 3567.880394][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3567.886396][ C0] do_futex+0x15f/0x1ad0 [ 3567.890655][ C0] ? find_held_lock+0x2d/0x110 [ 3567.895426][ C0] ? futex_exit_release+0x60/0x60 [ 3567.900430][ C0] ? lock_downgrade+0x840/0x840 [ 3567.905270][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3567.910135][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.916108][ C0] ? __might_fault+0x190/0x1d0 [ 3567.920937][ C0] ? _copy_to_user+0x126/0x160 [ 3567.925699][ C0] __x64_sys_futex+0x376/0x4f0 [ 3567.930466][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3567.934993][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3567.940445][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.946415][ C0] ? do_syscall_64+0x21/0x7d0 [ 3567.951092][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3567.957060][ C0] do_syscall_64+0xf6/0x7d0 [ 3567.961542][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3567.967418][ C0] RIP: 0033:0x45ca69 [ 3567.971314][ C0] Code: Bad RIP value. [ 3567.975377][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3567.983793][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3567.991756][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3567.999720][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3568.007675][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3568.015651][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3568.023612][ C0] syz-executor.3 S29824 16417 7191 0x00000000 [ 3568.029929][ C0] Call Trace: [ 3568.033217][ C0] __schedule+0x8f3/0x1fc0 [ 3568.037621][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3568.042891][ C0] ? firmware_map_remove+0x19d/0x19d [ 3568.048177][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3568.053630][ C0] schedule+0xd0/0x2a0 [ 3568.057686][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3568.062781][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3568.068242][ C0] futex_wait+0x1e2/0x550 [ 3568.072566][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3568.077599][ C0] ? print_usage_bug+0x240/0x240 [ 3568.082536][ C0] ? hash_futex+0x10/0x200 [ 3568.086946][ C0] ? futex_wake+0x153/0x480 [ 3568.091470][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.097442][ C0] ? mark_lock+0x11f/0xdd0 [ 3568.101854][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.107833][ C0] do_futex+0x15f/0x1ad0 [ 3568.112092][ C0] ? find_held_lock+0x2d/0x110 [ 3568.116867][ C0] ? futex_exit_release+0x60/0x60 [ 3568.121878][ C0] ? lock_downgrade+0x840/0x840 [ 3568.126724][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3568.131582][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.137583][ C0] ? __might_fault+0x190/0x1d0 [ 3568.142347][ C0] ? _copy_to_user+0x126/0x160 [ 3568.147142][ C0] __x64_sys_futex+0x376/0x4f0 [ 3568.151897][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3568.156398][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3568.161842][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.167815][ C0] ? do_syscall_64+0x21/0x7d0 [ 3568.172483][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.178444][ C0] do_syscall_64+0xf6/0x7d0 [ 3568.182926][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3568.188804][ C0] RIP: 0033:0x45ca69 [ 3568.192720][ C0] Code: Bad RIP value. [ 3568.196762][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3568.205157][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3568.213115][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3568.221063][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3568.229025][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3568.236986][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3568.244972][ C0] syz-executor.3 S29824 16420 7191 0x00000000 [ 3568.251306][ C0] Call Trace: [ 3568.254579][ C0] __schedule+0x8f3/0x1fc0 [ 3568.258989][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3568.264278][ C0] ? firmware_map_remove+0x19d/0x19d [ 3568.269561][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3568.275060][ C0] schedule+0xd0/0x2a0 [ 3568.279116][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3568.284218][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3568.289677][ C0] futex_wait+0x1e2/0x550 [ 3568.294008][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3568.299033][ C0] ? print_usage_bug+0x240/0x240 [ 3568.303950][ C0] ? hash_futex+0x10/0x200 [ 3568.308365][ C0] ? futex_wake+0x153/0x480 [ 3568.312885][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.318861][ C0] ? mark_lock+0x11f/0xdd0 [ 3568.323271][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.329243][ C0] do_futex+0x15f/0x1ad0 [ 3568.333497][ C0] ? find_held_lock+0x2d/0x110 [ 3568.338242][ C0] ? futex_exit_release+0x60/0x60 [ 3568.343246][ C0] ? lock_downgrade+0x840/0x840 [ 3568.348096][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3568.352959][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.358936][ C0] ? __might_fault+0x190/0x1d0 [ 3568.363679][ C0] ? _copy_to_user+0x126/0x160 [ 3568.368450][ C0] __x64_sys_futex+0x376/0x4f0 [ 3568.373206][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3568.377696][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3568.383146][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.389114][ C0] ? do_syscall_64+0x21/0x7d0 [ 3568.393788][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.399763][ C0] do_syscall_64+0xf6/0x7d0 [ 3568.404245][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3568.410128][ C0] RIP: 0033:0x45ca69 [ 3568.414036][ C0] Code: Bad RIP value. [ 3568.418077][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3568.426469][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3568.434428][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3568.442387][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3568.450355][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3568.458323][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3568.466314][ C0] syz-executor.3 S29824 16446 7191 0x00000000 [ 3568.472643][ C0] Call Trace: [ 3568.475916][ C0] __schedule+0x8f3/0x1fc0 [ 3568.480322][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3568.485601][ C0] ? firmware_map_remove+0x19d/0x19d [ 3568.490920][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3568.496390][ C0] schedule+0xd0/0x2a0 [ 3568.500441][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3568.505541][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3568.511030][ C0] futex_wait+0x1e2/0x550 [ 3568.515376][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3568.520404][ C0] ? print_usage_bug+0x240/0x240 [ 3568.525335][ C0] ? hash_futex+0x10/0x200 [ 3568.529753][ C0] ? futex_wake+0x153/0x480 [ 3568.534256][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.540219][ C0] ? mark_lock+0x11f/0xdd0 [ 3568.544631][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.550618][ C0] do_futex+0x15f/0x1ad0 [ 3568.554855][ C0] ? find_held_lock+0x2d/0x110 [ 3568.559597][ C0] ? futex_exit_release+0x60/0x60 [ 3568.564626][ C0] ? lock_downgrade+0x840/0x840 [ 3568.569479][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3568.574315][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.580290][ C0] ? __might_fault+0x190/0x1d0 [ 3568.585058][ C0] ? _copy_to_user+0x126/0x160 [ 3568.589830][ C0] __x64_sys_futex+0x376/0x4f0 [ 3568.594599][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3568.599103][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3568.604551][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.610529][ C0] ? do_syscall_64+0x21/0x7d0 [ 3568.615194][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.621154][ C0] do_syscall_64+0xf6/0x7d0 [ 3568.625652][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3568.631540][ C0] RIP: 0033:0x45ca69 [ 3568.635457][ C0] Code: Bad RIP value. [ 3568.639522][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3568.647916][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3568.655884][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3568.663853][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3568.671819][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3568.679777][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3568.687756][ C0] syz-executor.3 S29824 16467 7191 0x00000000 [ 3568.694093][ C0] Call Trace: [ 3568.697364][ C0] __schedule+0x8f3/0x1fc0 [ 3568.701768][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3568.707049][ C0] ? firmware_map_remove+0x19d/0x19d [ 3568.712324][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3568.717762][ C0] schedule+0xd0/0x2a0 [ 3568.721809][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3568.726913][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3568.732360][ C0] futex_wait+0x1e2/0x550 [ 3568.736671][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3568.741683][ C0] ? print_usage_bug+0x240/0x240 [ 3568.746610][ C0] ? hash_futex+0x10/0x200 [ 3568.751034][ C0] ? futex_wake+0x153/0x480 [ 3568.755554][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.761507][ C0] ? mark_lock+0x11f/0xdd0 [ 3568.765916][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.771903][ C0] do_futex+0x15f/0x1ad0 [ 3568.776143][ C0] ? find_held_lock+0x2d/0x110 [ 3568.780902][ C0] ? futex_exit_release+0x60/0x60 [ 3568.785918][ C0] ? lock_downgrade+0x840/0x840 [ 3568.790768][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3568.795617][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.801579][ C0] ? __might_fault+0x190/0x1d0 [ 3568.806334][ C0] ? _copy_to_user+0x126/0x160 [ 3568.811125][ C0] __x64_sys_futex+0x376/0x4f0 [ 3568.815902][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3568.820394][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3568.825849][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.831856][ C0] ? do_syscall_64+0x21/0x7d0 [ 3568.836546][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3568.842531][ C0] do_syscall_64+0xf6/0x7d0 [ 3568.847028][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3568.852908][ C0] RIP: 0033:0x45ca69 [ 3568.856800][ C0] Code: Bad RIP value. [ 3568.860862][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3568.869272][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3568.877246][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3568.885205][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3568.893195][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3568.901148][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3568.909143][ C0] syz-executor.3 S29824 16485 7191 0x00000000 [ 3568.915474][ C0] Call Trace: [ 3568.918744][ C0] __schedule+0x8f3/0x1fc0 [ 3568.923195][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3568.928482][ C0] ? firmware_map_remove+0x19d/0x19d [ 3568.933758][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3568.939197][ C0] schedule+0xd0/0x2a0 [ 3568.943246][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3568.948349][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3568.953825][ C0] futex_wait+0x1e2/0x550 [ 3568.958140][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3568.963152][ C0] ? print_usage_bug+0x240/0x240 [ 3568.968086][ C0] ? hash_futex+0x10/0x200 [ 3568.972502][ C0] ? futex_wake+0x153/0x480 [ 3568.977010][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.983004][ C0] ? mark_lock+0x11f/0xdd0 [ 3568.987414][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3568.993384][ C0] do_futex+0x15f/0x1ad0 [ 3568.997669][ C0] ? find_held_lock+0x2d/0x110 [ 3569.002443][ C0] ? futex_exit_release+0x60/0x60 [ 3569.007463][ C0] ? lock_downgrade+0x840/0x840 [ 3569.012303][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3569.017166][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.023172][ C0] ? __might_fault+0x190/0x1d0 [ 3569.027932][ C0] ? _copy_to_user+0x126/0x160 [ 3569.032689][ C0] __x64_sys_futex+0x376/0x4f0 [ 3569.037434][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3569.041919][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3569.047367][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.053340][ C0] ? do_syscall_64+0x21/0x7d0 [ 3569.058000][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.063978][ C0] do_syscall_64+0xf6/0x7d0 [ 3569.068488][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3569.074368][ C0] RIP: 0033:0x45ca69 [ 3569.078246][ C0] Code: Bad RIP value. [ 3569.082298][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3569.090690][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3569.098664][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3569.106638][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3569.114599][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3569.122544][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3569.130586][ C0] syz-executor.3 S29824 16497 7191 0x00000000 [ 3569.137021][ C0] Call Trace: [ 3569.140335][ C0] __schedule+0x8f3/0x1fc0 [ 3569.144744][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3569.150036][ C0] ? firmware_map_remove+0x19d/0x19d [ 3569.155314][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3569.160755][ C0] schedule+0xd0/0x2a0 [ 3569.164820][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3569.169929][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3569.175398][ C0] futex_wait+0x1e2/0x550 [ 3569.179722][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3569.184740][ C0] ? print_usage_bug+0x240/0x240 [ 3569.189703][ C0] ? hash_futex+0x10/0x200 [ 3569.194109][ C0] ? futex_wake+0x153/0x480 [ 3569.198599][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.204568][ C0] ? mark_lock+0x11f/0xdd0 [ 3569.208996][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.214967][ C0] do_futex+0x15f/0x1ad0 [ 3569.219209][ C0] ? find_held_lock+0x2d/0x110 [ 3569.223961][ C0] ? futex_exit_release+0x60/0x60 [ 3569.228983][ C0] ? lock_downgrade+0x840/0x840 [ 3569.233846][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3569.238688][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.244696][ C0] ? __might_fault+0x190/0x1d0 [ 3569.249496][ C0] ? _copy_to_user+0x126/0x160 [ 3569.254256][ C0] __x64_sys_futex+0x376/0x4f0 [ 3569.259020][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3569.263500][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3569.268945][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.274963][ C0] ? do_syscall_64+0x21/0x7d0 [ 3569.279629][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.285612][ C0] do_syscall_64+0xf6/0x7d0 [ 3569.290127][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3569.296035][ C0] RIP: 0033:0x45ca69 [ 3569.299957][ C0] Code: Bad RIP value. [ 3569.304009][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3569.312398][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3569.320367][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3569.328335][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3569.336311][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3569.344284][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3569.352283][ C0] syz-executor.3 S29824 16501 7191 0x00000000 [ 3569.358622][ C0] Call Trace: [ 3569.361927][ C0] __schedule+0x8f3/0x1fc0 [ 3569.366350][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3569.371650][ C0] ? firmware_map_remove+0x19d/0x19d [ 3569.376947][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3569.382430][ C0] schedule+0xd0/0x2a0 [ 3569.386508][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3569.391628][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3569.397110][ C0] futex_wait+0x1e2/0x550 [ 3569.401454][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3569.406504][ C0] ? print_usage_bug+0x240/0x240 [ 3569.411447][ C0] ? hash_futex+0x10/0x200 [ 3569.415868][ C0] ? futex_wake+0x153/0x480 [ 3569.420396][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.426416][ C0] ? mark_lock+0x11f/0xdd0 [ 3569.430839][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.436829][ C0] do_futex+0x15f/0x1ad0 [ 3569.441097][ C0] ? find_held_lock+0x2d/0x110 [ 3569.445892][ C0] ? futex_exit_release+0x60/0x60 [ 3569.450927][ C0] ? lock_downgrade+0x840/0x840 [ 3569.455785][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3569.460650][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.466655][ C0] ? __might_fault+0x190/0x1d0 [ 3569.471426][ C0] ? _copy_to_user+0x126/0x160 [ 3569.476203][ C0] __x64_sys_futex+0x376/0x4f0 [ 3569.480980][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3569.485490][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3569.490970][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.496953][ C0] ? do_syscall_64+0x21/0x7d0 [ 3569.501668][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.507660][ C0] do_syscall_64+0xf6/0x7d0 [ 3569.512173][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3569.518090][ C0] RIP: 0033:0x45ca69 [ 3569.521995][ C0] Code: Bad RIP value. [ 3569.526056][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3569.534479][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3569.542459][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3569.550454][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3569.558422][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3569.566410][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3569.574406][ C0] syz-executor.3 S29824 16523 7191 0x00000000 [ 3569.581007][ C0] Call Trace: [ 3569.584318][ C0] __schedule+0x8f3/0x1fc0 [ 3569.588741][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3569.594046][ C0] ? firmware_map_remove+0x19d/0x19d [ 3569.599349][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3569.604816][ C0] schedule+0xd0/0x2a0 [ 3569.608891][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3569.614010][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3569.619468][ C0] ? find_held_lock+0x2d/0x110 [ 3569.624245][ C0] futex_wait+0x1e2/0x550 [ 3569.628602][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3569.633630][ C0] ? print_usage_bug+0x240/0x240 [ 3569.638561][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3569.643749][ C0] ? futex_wake+0x153/0x480 [ 3569.648270][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.654254][ C0] ? mark_lock+0x11f/0xdd0 [ 3569.658650][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.664627][ C0] do_futex+0x15f/0x1ad0 [ 3569.668897][ C0] ? find_held_lock+0x2d/0x110 [ 3569.673667][ C0] ? futex_exit_release+0x60/0x60 [ 3569.678682][ C0] ? lock_downgrade+0x840/0x840 [ 3569.683527][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3569.688369][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.694358][ C0] ? __might_fault+0x190/0x1d0 [ 3569.699115][ C0] ? _copy_to_user+0x126/0x160 [ 3569.703877][ C0] __x64_sys_futex+0x376/0x4f0 [ 3569.708644][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3569.713152][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3569.718592][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.724563][ C0] ? do_syscall_64+0x21/0x7d0 [ 3569.729251][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.735256][ C0] do_syscall_64+0xf6/0x7d0 [ 3569.739756][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3569.745640][ C0] RIP: 0033:0x45ca69 [ 3569.749566][ C0] Code: Bad RIP value. [ 3569.753624][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3569.762011][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3569.769986][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3569.777968][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3569.785930][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3569.793888][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3569.801862][ C0] syz-executor.3 S28800 16542 7191 0x00000000 [ 3569.808184][ C0] Call Trace: [ 3569.811472][ C0] __schedule+0x8f3/0x1fc0 [ 3569.815880][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3569.821166][ C0] ? firmware_map_remove+0x19d/0x19d [ 3569.826458][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3569.831909][ C0] schedule+0xd0/0x2a0 [ 3569.835959][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3569.841053][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3569.846515][ C0] ? find_held_lock+0x2d/0x110 [ 3569.851295][ C0] futex_wait+0x1e2/0x550 [ 3569.855633][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3569.860667][ C0] ? print_usage_bug+0x240/0x240 [ 3569.865604][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3569.870811][ C0] ? futex_wake+0x153/0x480 [ 3569.875333][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.881306][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3569.887290][ C0] do_futex+0x15f/0x1ad0 [ 3569.891535][ C0] ? find_held_lock+0x2d/0x110 [ 3569.896294][ C0] ? futex_exit_release+0x60/0x60 [ 3569.901319][ C0] ? lock_downgrade+0x840/0x840 [ 3569.906164][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3569.911022][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.916992][ C0] ? __might_fault+0x190/0x1d0 [ 3569.921739][ C0] ? _copy_to_user+0x126/0x160 [ 3569.926509][ C0] __x64_sys_futex+0x376/0x4f0 [ 3569.931264][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3569.935781][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3569.941238][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.947215][ C0] ? do_syscall_64+0x21/0x7d0 [ 3569.951915][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3569.957893][ C0] do_syscall_64+0xf6/0x7d0 [ 3569.962388][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3569.968266][ C0] RIP: 0033:0x45ca69 [ 3569.972156][ C0] Code: Bad RIP value. [ 3569.976203][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3569.984614][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3569.992608][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3570.000558][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3570.008513][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3570.016473][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3570.024458][ C0] syz-executor.2 S29824 16574 6995 0x00000000 [ 3570.030790][ C0] Call Trace: [ 3570.034066][ C0] __schedule+0x8f3/0x1fc0 [ 3570.038474][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3570.043739][ C0] ? firmware_map_remove+0x19d/0x19d [ 3570.049023][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3570.054487][ C0] schedule+0xd0/0x2a0 [ 3570.058566][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3570.063673][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3570.069138][ C0] futex_wait+0x1e2/0x550 [ 3570.073479][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3570.078494][ C0] ? print_usage_bug+0x240/0x240 [ 3570.083418][ C0] ? hash_futex+0x10/0x200 [ 3570.087823][ C0] ? futex_wake+0x153/0x480 [ 3570.092338][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.098302][ C0] ? mark_lock+0x11f/0xdd0 [ 3570.102709][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.108706][ C0] do_futex+0x15f/0x1ad0 [ 3570.112985][ C0] ? find_held_lock+0x2d/0x110 [ 3570.117733][ C0] ? futex_exit_release+0x60/0x60 [ 3570.122735][ C0] ? lock_downgrade+0x840/0x840 [ 3570.127576][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3570.132455][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.138426][ C0] ? __might_fault+0x190/0x1d0 [ 3570.143206][ C0] ? _copy_to_user+0x126/0x160 [ 3570.147975][ C0] __x64_sys_futex+0x376/0x4f0 [ 3570.152749][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3570.157271][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3570.163061][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.169033][ C0] ? do_syscall_64+0x21/0x7d0 [ 3570.173698][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.179660][ C0] do_syscall_64+0xf6/0x7d0 [ 3570.184143][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3570.190024][ C0] RIP: 0033:0x45ca69 [ 3570.194005][ C0] Code: Bad RIP value. [ 3570.198056][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3570.206467][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3570.214447][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3570.222407][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3570.230354][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3570.238303][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3570.246302][ C0] syz-executor.2 S29256 16607 6995 0x00000000 [ 3570.252643][ C0] Call Trace: [ 3570.255935][ C0] __schedule+0x8f3/0x1fc0 [ 3570.260350][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3570.265656][ C0] ? firmware_map_remove+0x19d/0x19d [ 3570.270939][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3570.276402][ C0] schedule+0xd0/0x2a0 [ 3570.280465][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3570.285571][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3570.291050][ C0] futex_wait+0x1e2/0x550 [ 3570.295389][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3570.300447][ C0] ? print_usage_bug+0x240/0x240 [ 3570.305385][ C0] ? hash_futex+0x10/0x200 [ 3570.309808][ C0] ? futex_wake+0x153/0x480 [ 3570.314322][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.320277][ C0] ? mark_lock+0x11f/0xdd0 [ 3570.324685][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.330672][ C0] do_futex+0x15f/0x1ad0 [ 3570.334914][ C0] ? find_held_lock+0x2d/0x110 [ 3570.339666][ C0] ? futex_exit_release+0x60/0x60 [ 3570.344683][ C0] ? lock_downgrade+0x840/0x840 [ 3570.349541][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3570.354381][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.360366][ C0] ? __might_fault+0x190/0x1d0 [ 3570.365119][ C0] ? _copy_to_user+0x126/0x160 [ 3570.369894][ C0] __x64_sys_futex+0x376/0x4f0 [ 3570.374663][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3570.379155][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3570.384602][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.390584][ C0] ? do_syscall_64+0x21/0x7d0 [ 3570.395250][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.401228][ C0] do_syscall_64+0xf6/0x7d0 [ 3570.405726][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3570.411726][ C0] RIP: 0033:0x45ca69 [ 3570.415623][ C0] Code: Bad RIP value. [ 3570.419678][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3570.428070][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3570.436037][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3570.444013][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3570.451983][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3570.459946][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3570.467930][ C0] syz-executor.3 S28800 16608 7191 0x00000000 [ 3570.474261][ C0] Call Trace: [ 3570.477535][ C0] __schedule+0x8f3/0x1fc0 [ 3570.481952][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3570.487242][ C0] ? firmware_map_remove+0x19d/0x19d [ 3570.492547][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3570.497986][ C0] schedule+0xd0/0x2a0 [ 3570.502034][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3570.507137][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3570.512591][ C0] futex_wait+0x1e2/0x550 [ 3570.516915][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3570.521920][ C0] ? print_usage_bug+0x240/0x240 [ 3570.526847][ C0] ? kernel_text_address+0x6e/0xe0 [ 3570.531960][ C0] ? hash_futex+0x10/0x200 [ 3570.536382][ C0] ? futex_wake+0x153/0x480 [ 3570.540912][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.546892][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 3570.552689][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.558650][ C0] do_futex+0x15f/0x1ad0 [ 3570.562909][ C0] ? find_held_lock+0x2d/0x110 [ 3570.567666][ C0] ? futex_exit_release+0x60/0x60 [ 3570.572679][ C0] ? lock_downgrade+0x840/0x840 [ 3570.577530][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3570.582388][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.588395][ C0] ? __might_fault+0x190/0x1d0 [ 3570.593149][ C0] ? _copy_to_user+0x126/0x160 [ 3570.597909][ C0] __x64_sys_futex+0x376/0x4f0 [ 3570.602664][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3570.607160][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3570.612608][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.618580][ C0] ? do_syscall_64+0x21/0x7d0 [ 3570.623248][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.629224][ C0] do_syscall_64+0xf6/0x7d0 [ 3570.633721][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3570.639590][ C0] RIP: 0033:0x45ca69 [ 3570.643468][ C0] Code: Bad RIP value. [ 3570.647518][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3570.655918][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3570.663893][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3570.671869][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3570.679816][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3570.687789][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3570.695779][ C0] syz-executor.3 S28800 16655 7191 0x00000000 [ 3570.702111][ C0] Call Trace: [ 3570.705399][ C0] __schedule+0x8f3/0x1fc0 [ 3570.709816][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3570.715107][ C0] ? firmware_map_remove+0x19d/0x19d [ 3570.720380][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3570.725833][ C0] schedule+0xd0/0x2a0 [ 3570.729925][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3570.735045][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3570.740508][ C0] ? find_held_lock+0x2d/0x110 [ 3570.745271][ C0] futex_wait+0x1e2/0x550 [ 3570.749609][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3570.754634][ C0] ? print_usage_bug+0x240/0x240 [ 3570.759562][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3570.764752][ C0] ? futex_wake+0x153/0x480 [ 3570.769269][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.775251][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.781220][ C0] do_futex+0x15f/0x1ad0 [ 3570.785463][ C0] ? find_held_lock+0x2d/0x110 [ 3570.790218][ C0] ? futex_exit_release+0x60/0x60 [ 3570.795234][ C0] ? lock_downgrade+0x840/0x840 [ 3570.800074][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3570.804913][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.810886][ C0] ? __might_fault+0x190/0x1d0 [ 3570.815639][ C0] ? _copy_to_user+0x126/0x160 [ 3570.820396][ C0] __x64_sys_futex+0x376/0x4f0 [ 3570.825155][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3570.829660][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3570.835118][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.841088][ C0] ? do_syscall_64+0x21/0x7d0 [ 3570.845760][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3570.851731][ C0] do_syscall_64+0xf6/0x7d0 [ 3570.856227][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3570.862125][ C0] RIP: 0033:0x45ca69 [ 3570.866021][ C0] Code: Bad RIP value. [ 3570.870080][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3570.878503][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3570.886461][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3570.894420][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3570.902370][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3570.910333][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3570.918305][ C0] syz-executor.3 S29824 16682 7191 0x00000000 [ 3570.924638][ C0] Call Trace: [ 3570.927935][ C0] __schedule+0x8f3/0x1fc0 [ 3570.932342][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3570.937611][ C0] ? firmware_map_remove+0x19d/0x19d [ 3570.942875][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3570.948343][ C0] schedule+0xd0/0x2a0 [ 3570.952413][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3570.957514][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3570.962960][ C0] futex_wait+0x1e2/0x550 [ 3570.967293][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3570.972310][ C0] ? print_usage_bug+0x240/0x240 [ 3570.977239][ C0] ? hash_futex+0x10/0x200 [ 3570.981643][ C0] ? futex_wake+0x153/0x480 [ 3570.986156][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3570.992121][ C0] ? mark_lock+0x11f/0xdd0 [ 3570.996530][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.002508][ C0] do_futex+0x15f/0x1ad0 [ 3571.006755][ C0] ? find_held_lock+0x2d/0x110 [ 3571.011521][ C0] ? futex_exit_release+0x60/0x60 [ 3571.016525][ C0] ? lock_downgrade+0x840/0x840 [ 3571.021353][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3571.026191][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.032165][ C0] ? __might_fault+0x190/0x1d0 [ 3571.036908][ C0] ? _copy_to_user+0x126/0x160 [ 3571.041655][ C0] __x64_sys_futex+0x376/0x4f0 [ 3571.046417][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3571.050910][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3571.056357][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.062327][ C0] ? do_syscall_64+0x21/0x7d0 [ 3571.066992][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.072977][ C0] do_syscall_64+0xf6/0x7d0 [ 3571.077466][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3571.083333][ C0] RIP: 0033:0x45ca69 [ 3571.087222][ C0] Code: Bad RIP value. [ 3571.091275][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3571.099673][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3571.107629][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3571.115601][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3571.123571][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3571.131519][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3571.139502][ C0] syz-executor.3 S29824 16692 7191 0x00000000 [ 3571.145844][ C0] Call Trace: [ 3571.149143][ C0] __schedule+0x8f3/0x1fc0 [ 3571.153592][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3571.158860][ C0] ? firmware_map_remove+0x19d/0x19d [ 3571.164125][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3571.169579][ C0] schedule+0xd0/0x2a0 [ 3571.173658][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3571.178748][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3571.184186][ C0] futex_wait+0x1e2/0x550 [ 3571.188513][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3571.193529][ C0] ? print_usage_bug+0x240/0x240 [ 3571.198448][ C0] ? hash_futex+0x10/0x200 [ 3571.202837][ C0] ? futex_wake+0x153/0x480 [ 3571.207346][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.213320][ C0] ? mark_lock+0x11f/0xdd0 [ 3571.217723][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.223679][ C0] do_futex+0x15f/0x1ad0 [ 3571.227923][ C0] ? find_held_lock+0x2d/0x110 [ 3571.232680][ C0] ? futex_exit_release+0x60/0x60 [ 3571.237696][ C0] ? lock_downgrade+0x840/0x840 [ 3571.242535][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3571.247392][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.253378][ C0] ? __might_fault+0x190/0x1d0 [ 3571.258126][ C0] ? _copy_to_user+0x126/0x160 [ 3571.262874][ C0] __x64_sys_futex+0x376/0x4f0 [ 3571.267636][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3571.272153][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3571.277623][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.283617][ C0] ? do_syscall_64+0x21/0x7d0 [ 3571.288286][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.294260][ C0] do_syscall_64+0xf6/0x7d0 [ 3571.298775][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3571.304654][ C0] RIP: 0033:0x45ca69 [ 3571.308552][ C0] Code: Bad RIP value. [ 3571.312632][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3571.321048][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3571.329006][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3571.336973][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3571.344945][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3571.352908][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3571.360878][ C0] syz-executor.3 S29824 16701 7191 0x00000000 [ 3571.367193][ C0] Call Trace: [ 3571.370475][ C0] __schedule+0x8f3/0x1fc0 [ 3571.374883][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3571.380161][ C0] ? firmware_map_remove+0x19d/0x19d [ 3571.385442][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3571.390906][ C0] schedule+0xd0/0x2a0 [ 3571.394983][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3571.400083][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3571.405542][ C0] futex_wait+0x1e2/0x550 [ 3571.409879][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3571.414906][ C0] ? print_usage_bug+0x240/0x240 [ 3571.419835][ C0] ? hash_futex+0x10/0x200 [ 3571.424228][ C0] ? futex_wake+0x153/0x480 [ 3571.428740][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.434736][ C0] ? mark_lock+0x11f/0xdd0 [ 3571.439145][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.445118][ C0] do_futex+0x15f/0x1ad0 [ 3571.449374][ C0] ? find_held_lock+0x2d/0x110 [ 3571.454139][ C0] ? futex_exit_release+0x60/0x60 [ 3571.459143][ C0] ? lock_downgrade+0x840/0x840 [ 3571.463971][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3571.468815][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.474806][ C0] ? __might_fault+0x190/0x1d0 [ 3571.479560][ C0] ? _copy_to_user+0x126/0x160 [ 3571.484304][ C0] __x64_sys_futex+0x376/0x4f0 [ 3571.489065][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3571.493558][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3571.499010][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.505002][ C0] ? do_syscall_64+0x21/0x7d0 [ 3571.509681][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.515669][ C0] do_syscall_64+0xf6/0x7d0 [ 3571.520180][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3571.526058][ C0] RIP: 0033:0x45ca69 [ 3571.529959][ C0] Code: Bad RIP value. [ 3571.534023][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3571.542421][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3571.550367][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3571.558324][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3571.566280][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3571.574238][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3571.582215][ C0] syz-executor.3 S29824 16707 7191 0x00000000 [ 3571.588552][ C0] Call Trace: [ 3571.591846][ C0] __schedule+0x8f3/0x1fc0 [ 3571.596242][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3571.601526][ C0] ? firmware_map_remove+0x19d/0x19d [ 3571.606806][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3571.612270][ C0] schedule+0xd0/0x2a0 [ 3571.616330][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3571.621418][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3571.626877][ C0] futex_wait+0x1e2/0x550 [ 3571.631211][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3571.636238][ C0] ? print_usage_bug+0x240/0x240 [ 3571.641167][ C0] ? hash_futex+0x10/0x200 [ 3571.645574][ C0] ? futex_wake+0x153/0x480 [ 3571.650077][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.656043][ C0] ? mark_lock+0x11f/0xdd0 [ 3571.660450][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.666425][ C0] do_futex+0x15f/0x1ad0 [ 3571.670661][ C0] ? find_held_lock+0x2d/0x110 [ 3571.675418][ C0] ? futex_exit_release+0x60/0x60 [ 3571.680431][ C0] ? lock_downgrade+0x840/0x840 [ 3571.685271][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3571.690110][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.696074][ C0] ? __might_fault+0x190/0x1d0 [ 3571.700817][ C0] ? _copy_to_user+0x126/0x160 [ 3571.705602][ C0] __x64_sys_futex+0x376/0x4f0 [ 3571.710358][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3571.714856][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3571.720306][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.726278][ C0] ? do_syscall_64+0x21/0x7d0 [ 3571.730964][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.736949][ C0] do_syscall_64+0xf6/0x7d0 [ 3571.741449][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3571.747327][ C0] RIP: 0033:0x45ca69 [ 3571.751220][ C0] Code: Bad RIP value. [ 3571.755285][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3571.763682][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3571.771649][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3571.779608][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3571.787564][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3571.795530][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3571.803503][ C0] syz-executor.3 S29824 16735 7191 0x00000000 [ 3571.809819][ C0] Call Trace: [ 3571.813101][ C0] __schedule+0x8f3/0x1fc0 [ 3571.817510][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3571.822773][ C0] ? firmware_map_remove+0x19d/0x19d [ 3571.828054][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3571.833503][ C0] schedule+0xd0/0x2a0 [ 3571.837564][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3571.842651][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3571.848107][ C0] futex_wait+0x1e2/0x550 [ 3571.852441][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3571.857445][ C0] ? print_usage_bug+0x240/0x240 [ 3571.862360][ C0] ? hash_futex+0x10/0x200 [ 3571.866766][ C0] ? futex_wake+0x153/0x480 [ 3571.871265][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.877218][ C0] ? mark_lock+0x11f/0xdd0 [ 3571.881613][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3571.887603][ C0] do_futex+0x15f/0x1ad0 [ 3571.891839][ C0] ? find_held_lock+0x2d/0x110 [ 3571.896616][ C0] ? futex_exit_release+0x60/0x60 [ 3571.901631][ C0] ? lock_downgrade+0x840/0x840 [ 3571.906477][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3571.911316][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.917286][ C0] ? __might_fault+0x190/0x1d0 [ 3571.922030][ C0] ? _copy_to_user+0x126/0x160 [ 3571.926795][ C0] __x64_sys_futex+0x376/0x4f0 [ 3571.931552][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3571.936049][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3571.941497][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.947469][ C0] ? do_syscall_64+0x21/0x7d0 [ 3571.952131][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3571.958092][ C0] do_syscall_64+0xf6/0x7d0 [ 3571.962586][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3571.968466][ C0] RIP: 0033:0x45ca69 [ 3571.972354][ C0] Code: Bad RIP value. [ 3571.976403][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3571.984811][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3571.992780][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3572.000727][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3572.008682][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3572.016640][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3572.024617][ C0] syz-executor.3 S29824 16754 7191 0x00000000 [ 3572.030947][ C0] Call Trace: [ 3572.034216][ C0] __schedule+0x8f3/0x1fc0 [ 3572.038629][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3572.043894][ C0] ? firmware_map_remove+0x19d/0x19d [ 3572.049177][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3572.054642][ C0] schedule+0xd0/0x2a0 [ 3572.058704][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3572.063792][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3572.069249][ C0] futex_wait+0x1e2/0x550 [ 3572.073585][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3572.078589][ C0] ? print_usage_bug+0x240/0x240 [ 3572.083515][ C0] ? hash_futex+0x10/0x200 [ 3572.087923][ C0] ? futex_wake+0x153/0x480 [ 3572.092422][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.098378][ C0] ? mark_lock+0x11f/0xdd0 [ 3572.102772][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.108749][ C0] do_futex+0x15f/0x1ad0 [ 3572.112994][ C0] ? find_held_lock+0x2d/0x110 [ 3572.117737][ C0] ? futex_exit_release+0x60/0x60 [ 3572.122739][ C0] ? lock_downgrade+0x840/0x840 [ 3572.127582][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3572.132433][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.138409][ C0] ? __might_fault+0x190/0x1d0 [ 3572.143151][ C0] ? _copy_to_user+0x126/0x160 [ 3572.147915][ C0] __x64_sys_futex+0x376/0x4f0 [ 3572.152672][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3572.157169][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3572.162634][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.168602][ C0] ? do_syscall_64+0x21/0x7d0 [ 3572.173268][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.179245][ C0] do_syscall_64+0xf6/0x7d0 [ 3572.183745][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3572.189622][ C0] RIP: 0033:0x45ca69 [ 3572.193526][ C0] Code: Bad RIP value. [ 3572.197592][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3572.205993][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3572.213954][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3572.221920][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3572.229875][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3572.237833][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3572.245813][ C0] syz-executor.3 S29824 16763 7191 0x00000000 [ 3572.252142][ C0] Call Trace: [ 3572.255427][ C0] __schedule+0x8f3/0x1fc0 [ 3572.259835][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3572.265117][ C0] ? firmware_map_remove+0x19d/0x19d [ 3572.270409][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3572.275866][ C0] schedule+0xd0/0x2a0 [ 3572.279914][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3572.285030][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3572.290501][ C0] futex_wait+0x1e2/0x550 [ 3572.294840][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3572.299857][ C0] ? print_usage_bug+0x240/0x240 [ 3572.304910][ C0] ? hash_futex+0x10/0x200 [ 3572.309327][ C0] ? futex_wake+0x153/0x480 [ 3572.313838][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.319796][ C0] ? mark_lock+0x11f/0xdd0 [ 3572.324195][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.330155][ C0] do_futex+0x15f/0x1ad0 [ 3572.334392][ C0] ? find_held_lock+0x2d/0x110 [ 3572.339147][ C0] ? futex_exit_release+0x60/0x60 [ 3572.344153][ C0] ? lock_downgrade+0x840/0x840 [ 3572.348994][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3572.353838][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.359822][ C0] ? __might_fault+0x190/0x1d0 [ 3572.364576][ C0] ? _copy_to_user+0x126/0x160 [ 3572.369351][ C0] __x64_sys_futex+0x376/0x4f0 [ 3572.374107][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3572.378607][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3572.384067][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.390042][ C0] ? do_syscall_64+0x21/0x7d0 [ 3572.394718][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.400691][ C0] do_syscall_64+0xf6/0x7d0 [ 3572.405188][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3572.411068][ C0] RIP: 0033:0x45ca69 [ 3572.414959][ C0] Code: Bad RIP value. [ 3572.419027][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3572.427423][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3572.435407][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3572.443379][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3572.451339][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3572.459298][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3572.467283][ C0] syz-executor.3 S29824 16798 7191 0x00000000 [ 3572.473612][ C0] Call Trace: [ 3572.476884][ C0] __schedule+0x8f3/0x1fc0 [ 3572.481280][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3572.486562][ C0] ? firmware_map_remove+0x19d/0x19d [ 3572.491852][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3572.497307][ C0] schedule+0xd0/0x2a0 [ 3572.501358][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3572.506461][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3572.511914][ C0] futex_wait+0x1e2/0x550 [ 3572.516225][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3572.521226][ C0] ? print_usage_bug+0x240/0x240 [ 3572.526154][ C0] ? hash_futex+0x10/0x200 [ 3572.530559][ C0] ? futex_wake+0x153/0x480 [ 3572.535071][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.541057][ C0] ? mark_lock+0x11f/0xdd0 [ 3572.545472][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.551442][ C0] do_futex+0x15f/0x1ad0 [ 3572.555689][ C0] ? find_held_lock+0x2d/0x110 [ 3572.560443][ C0] ? futex_exit_release+0x60/0x60 [ 3572.565461][ C0] ? lock_downgrade+0x840/0x840 [ 3572.570300][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3572.575137][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.581120][ C0] ? __might_fault+0x190/0x1d0 [ 3572.585874][ C0] ? _copy_to_user+0x126/0x160 [ 3572.590630][ C0] __x64_sys_futex+0x376/0x4f0 [ 3572.595391][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3572.599887][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3572.605333][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.611302][ C0] ? do_syscall_64+0x21/0x7d0 [ 3572.615970][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.621956][ C0] do_syscall_64+0xf6/0x7d0 [ 3572.626462][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3572.632341][ C0] RIP: 0033:0x45ca69 [ 3572.636218][ C0] Code: Bad RIP value. [ 3572.640256][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3572.648650][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3572.656606][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3572.664560][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3572.672517][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3572.680474][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3572.688454][ C0] syz-executor.3 S29824 16817 7191 0x00000000 [ 3572.694791][ C0] Call Trace: [ 3572.698087][ C0] __schedule+0x8f3/0x1fc0 [ 3572.702493][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3572.707781][ C0] ? firmware_map_remove+0x19d/0x19d [ 3572.713069][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3572.718518][ C0] schedule+0xd0/0x2a0 [ 3572.722567][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3572.727686][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3572.733137][ C0] futex_wait+0x1e2/0x550 [ 3572.737447][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3572.742451][ C0] ? print_usage_bug+0x240/0x240 [ 3572.747397][ C0] ? hash_futex+0x10/0x200 [ 3572.751817][ C0] ? futex_wake+0x153/0x480 [ 3572.756313][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.762265][ C0] ? mark_lock+0x11f/0xdd0 [ 3572.766675][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.772659][ C0] do_futex+0x15f/0x1ad0 [ 3572.776888][ C0] ? find_held_lock+0x2d/0x110 [ 3572.781636][ C0] ? futex_exit_release+0x60/0x60 [ 3572.786656][ C0] ? lock_downgrade+0x840/0x840 [ 3572.791496][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3572.796323][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.802284][ C0] ? __might_fault+0x190/0x1d0 [ 3572.807063][ C0] ? _copy_to_user+0x126/0x160 [ 3572.811820][ C0] __x64_sys_futex+0x376/0x4f0 [ 3572.816581][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3572.821094][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3572.826541][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.832510][ C0] ? do_syscall_64+0x21/0x7d0 [ 3572.837166][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3572.843141][ C0] do_syscall_64+0xf6/0x7d0 [ 3572.847640][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3572.853533][ C0] RIP: 0033:0x45ca69 [ 3572.857424][ C0] Code: Bad RIP value. [ 3572.861476][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3572.869867][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3572.877826][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3572.885783][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3572.893738][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3572.901692][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3572.909667][ C0] syz-executor.3 S29824 16835 7191 0x00000000 [ 3572.916010][ C0] Call Trace: [ 3572.919290][ C0] __schedule+0x8f3/0x1fc0 [ 3572.923682][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3572.928962][ C0] ? firmware_map_remove+0x19d/0x19d [ 3572.934247][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3572.939697][ C0] schedule+0xd0/0x2a0 [ 3572.943756][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3572.948861][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3572.954321][ C0] futex_wait+0x1e2/0x550 [ 3572.958633][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3572.963636][ C0] ? print_usage_bug+0x240/0x240 [ 3572.968570][ C0] ? hash_futex+0x10/0x200 [ 3572.972977][ C0] ? futex_wake+0x153/0x480 [ 3572.977469][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.983422][ C0] ? mark_lock+0x11f/0xdd0 [ 3572.987829][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3572.993808][ C0] do_futex+0x15f/0x1ad0 [ 3572.998039][ C0] ? find_held_lock+0x2d/0x110 [ 3573.002781][ C0] ? futex_exit_release+0x60/0x60 [ 3573.007799][ C0] ? lock_downgrade+0x840/0x840 [ 3573.012637][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3573.017466][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.023428][ C0] ? __might_fault+0x190/0x1d0 [ 3573.028184][ C0] ? _copy_to_user+0x126/0x160 [ 3573.032953][ C0] __x64_sys_futex+0x376/0x4f0 [ 3573.037698][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3573.042182][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3573.047630][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.053599][ C0] ? do_syscall_64+0x21/0x7d0 [ 3573.058266][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.064226][ C0] do_syscall_64+0xf6/0x7d0 [ 3573.068725][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3573.074604][ C0] RIP: 0033:0x45ca69 [ 3573.078482][ C0] Code: Bad RIP value. [ 3573.082518][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3573.090910][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3573.098883][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3573.106840][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3573.114818][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3573.122768][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3573.130753][ C0] syz-executor.2 S29824 16874 6995 0x00000000 [ 3573.137087][ C0] Call Trace: [ 3573.140362][ C0] __schedule+0x8f3/0x1fc0 [ 3573.144772][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3573.150071][ C0] ? firmware_map_remove+0x19d/0x19d [ 3573.155351][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3573.160791][ C0] schedule+0xd0/0x2a0 [ 3573.164858][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3573.169972][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3573.175440][ C0] futex_wait+0x1e2/0x550 [ 3573.179815][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3573.184832][ C0] ? print_usage_bug+0x240/0x240 [ 3573.189775][ C0] ? hash_futex+0x10/0x200 [ 3573.194191][ C0] ? futex_wake+0x153/0x480 [ 3573.198691][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.204658][ C0] ? mark_lock+0x11f/0xdd0 [ 3573.209080][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.215051][ C0] do_futex+0x15f/0x1ad0 [ 3573.219278][ C0] ? find_held_lock+0x2d/0x110 [ 3573.224021][ C0] ? futex_exit_release+0x60/0x60 [ 3573.229053][ C0] ? lock_downgrade+0x840/0x840 [ 3573.233905][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3573.238737][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.244719][ C0] ? __might_fault+0x190/0x1d0 [ 3573.249487][ C0] ? _copy_to_user+0x126/0x160 [ 3573.254245][ C0] __x64_sys_futex+0x376/0x4f0 [ 3573.259014][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3573.263497][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3573.268945][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.274938][ C0] ? do_syscall_64+0x21/0x7d0 [ 3573.279638][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.285620][ C0] do_syscall_64+0xf6/0x7d0 [ 3573.290130][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3573.296055][ C0] RIP: 0033:0x45ca69 [ 3573.299932][ C0] Code: Bad RIP value. [ 3573.303971][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3573.312356][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3573.320304][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3573.328261][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3573.336238][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3573.344185][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3573.352145][ C0] syz-executor.3 S29824 16880 7191 0x00000000 [ 3573.358466][ C0] Call Trace: [ 3573.361747][ C0] __schedule+0x8f3/0x1fc0 [ 3573.366161][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3573.371479][ C0] ? firmware_map_remove+0x19d/0x19d [ 3573.376755][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3573.382191][ C0] schedule+0xd0/0x2a0 [ 3573.386260][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3573.391375][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3573.396821][ C0] ? find_held_lock+0x2d/0x110 [ 3573.401563][ C0] futex_wait+0x1e2/0x550 [ 3573.405889][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3573.410913][ C0] ? print_usage_bug+0x240/0x240 [ 3573.415852][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3573.421049][ C0] ? futex_wake+0x153/0x480 [ 3573.425566][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.431533][ C0] ? mark_lock+0x11f/0xdd0 [ 3573.435970][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.441930][ C0] do_futex+0x15f/0x1ad0 [ 3573.446186][ C0] ? find_held_lock+0x2d/0x110 [ 3573.450955][ C0] ? futex_exit_release+0x60/0x60 [ 3573.456003][ C0] ? lock_downgrade+0x840/0x840 [ 3573.460865][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3573.465708][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.471682][ C0] ? __might_fault+0x190/0x1d0 [ 3573.476447][ C0] ? _copy_to_user+0x126/0x160 [ 3573.481208][ C0] __x64_sys_futex+0x376/0x4f0 [ 3573.485971][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3573.490477][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3573.495938][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.501909][ C0] ? do_syscall_64+0x21/0x7d0 [ 3573.506576][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.512564][ C0] do_syscall_64+0xf6/0x7d0 [ 3573.517061][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3573.522930][ C0] RIP: 0033:0x45ca69 [ 3573.526821][ C0] Code: Bad RIP value. [ 3573.530880][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3573.544052][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3573.551999][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3573.559946][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3573.567921][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3573.575890][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3573.583873][ C0] syz-executor.3 S29824 16892 7191 0x00000000 [ 3573.590191][ C0] Call Trace: [ 3573.593488][ C0] __schedule+0x8f3/0x1fc0 [ 3573.597906][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3573.603168][ C0] ? firmware_map_remove+0x19d/0x19d [ 3573.608447][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3573.613896][ C0] schedule+0xd0/0x2a0 [ 3573.617957][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3573.623043][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3573.628486][ C0] ? find_held_lock+0x2d/0x110 [ 3573.633243][ C0] futex_wait+0x1e2/0x550 [ 3573.637553][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3573.642555][ C0] ? print_usage_bug+0x240/0x240 [ 3573.647499][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3573.652686][ C0] ? futex_wake+0x153/0x480 [ 3573.657194][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.663160][ C0] ? mark_lock+0x11f/0xdd0 [ 3573.667569][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.673555][ C0] do_futex+0x15f/0x1ad0 [ 3573.677783][ C0] ? find_held_lock+0x2d/0x110 [ 3573.682524][ C0] ? futex_exit_release+0x60/0x60 [ 3573.687542][ C0] ? lock_downgrade+0x840/0x840 [ 3573.692381][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3573.697211][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.703186][ C0] ? __might_fault+0x190/0x1d0 [ 3573.707946][ C0] ? _copy_to_user+0x126/0x160 [ 3573.712703][ C0] __x64_sys_futex+0x376/0x4f0 [ 3573.717450][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3573.721930][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3573.727377][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.733346][ C0] ? do_syscall_64+0x21/0x7d0 [ 3573.738020][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.743992][ C0] do_syscall_64+0xf6/0x7d0 [ 3573.748490][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3573.754380][ C0] RIP: 0033:0x45ca69 [ 3573.758275][ C0] Code: Bad RIP value. [ 3573.762316][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3573.770709][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3573.778678][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3573.786634][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3573.794607][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3573.802555][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3573.810554][ C0] syz-executor.3 S29824 16901 7191 0x00000000 [ 3573.816884][ C0] Call Trace: [ 3573.820158][ C0] __schedule+0x8f3/0x1fc0 [ 3573.824565][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3573.829857][ C0] ? firmware_map_remove+0x19d/0x19d [ 3573.835138][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3573.840589][ C0] schedule+0xd0/0x2a0 [ 3573.844650][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3573.849763][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3573.855223][ C0] ? find_held_lock+0x2d/0x110 [ 3573.859967][ C0] futex_wait+0x1e2/0x550 [ 3573.864274][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3573.869289][ C0] ? print_usage_bug+0x240/0x240 [ 3573.874216][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3573.879400][ C0] ? futex_wake+0x153/0x480 [ 3573.883888][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.889853][ C0] ? mark_lock+0x11f/0xdd0 [ 3573.894271][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3573.900241][ C0] do_futex+0x15f/0x1ad0 [ 3573.904496][ C0] ? find_held_lock+0x2d/0x110 [ 3573.909266][ C0] ? futex_exit_release+0x60/0x60 [ 3573.914283][ C0] ? lock_downgrade+0x840/0x840 [ 3573.919116][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3573.923950][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.929948][ C0] ? __might_fault+0x190/0x1d0 [ 3573.934716][ C0] ? _copy_to_user+0x126/0x160 [ 3573.939475][ C0] __x64_sys_futex+0x376/0x4f0 [ 3573.944230][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3573.948727][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3573.954174][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.960150][ C0] ? do_syscall_64+0x21/0x7d0 [ 3573.964827][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3573.970810][ C0] do_syscall_64+0xf6/0x7d0 [ 3573.975337][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3573.981217][ C0] RIP: 0033:0x45ca69 [ 3573.985109][ C0] Code: Bad RIP value. [ 3573.989173][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3573.997584][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3574.005645][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3574.013605][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3574.021551][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3574.029511][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3574.037521][ C0] syz-executor.3 S29824 16904 7191 0x00000000 [ 3574.043842][ C0] Call Trace: [ 3574.047129][ C0] __schedule+0x8f3/0x1fc0 [ 3574.051547][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3574.056824][ C0] ? firmware_map_remove+0x19d/0x19d [ 3574.062087][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3574.067542][ C0] schedule+0xd0/0x2a0 [ 3574.071619][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3574.076717][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3574.082154][ C0] ? find_held_lock+0x2d/0x110 [ 3574.086916][ C0] futex_wait+0x1e2/0x550 [ 3574.091243][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3574.096264][ C0] ? print_usage_bug+0x240/0x240 [ 3574.102323][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3574.107522][ C0] ? futex_wake+0x153/0x480 [ 3574.112023][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.117996][ C0] ? mark_lock+0x11f/0xdd0 [ 3574.122393][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.128367][ C0] do_futex+0x15f/0x1ad0 [ 3574.132623][ C0] ? find_held_lock+0x2d/0x110 [ 3574.137377][ C0] ? futex_exit_release+0x60/0x60 [ 3574.142405][ C0] ? lock_downgrade+0x840/0x840 [ 3574.147251][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3574.152097][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.158071][ C0] ? __might_fault+0x190/0x1d0 [ 3574.162813][ C0] ? _copy_to_user+0x126/0x160 [ 3574.167577][ C0] __x64_sys_futex+0x376/0x4f0 [ 3574.172331][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3574.176814][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3574.182245][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.188214][ C0] ? do_syscall_64+0x21/0x7d0 [ 3574.192878][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.198836][ C0] do_syscall_64+0xf6/0x7d0 [ 3574.203319][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3574.209197][ C0] RIP: 0033:0x45ca69 [ 3574.213102][ C0] Code: Bad RIP value. [ 3574.217146][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3574.225541][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3574.233498][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3574.241445][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3574.249422][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3574.257392][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3574.265377][ C0] syz-executor.3 S29824 16926 7191 0x00000000 [ 3574.271719][ C0] Call Trace: [ 3574.275015][ C0] __schedule+0x8f3/0x1fc0 [ 3574.279418][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3574.284701][ C0] ? firmware_map_remove+0x19d/0x19d [ 3574.289999][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3574.295456][ C0] schedule+0xd0/0x2a0 [ 3574.299504][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3574.304620][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3574.310105][ C0] futex_wait+0x1e2/0x550 [ 3574.314469][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3574.319490][ C0] ? print_usage_bug+0x240/0x240 [ 3574.324421][ C0] ? hash_futex+0x10/0x200 [ 3574.328829][ C0] ? futex_wake+0x153/0x480 [ 3574.333372][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.339328][ C0] ? mark_lock+0x11f/0xdd0 [ 3574.343736][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.349728][ C0] do_futex+0x15f/0x1ad0 [ 3574.353964][ C0] ? find_held_lock+0x2d/0x110 [ 3574.358711][ C0] ? futex_exit_release+0x60/0x60 [ 3574.363711][ C0] ? lock_downgrade+0x840/0x840 [ 3574.368551][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3574.373388][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.379351][ C0] ? __might_fault+0x190/0x1d0 [ 3574.384094][ C0] ? _copy_to_user+0x126/0x160 [ 3574.388864][ C0] __x64_sys_futex+0x376/0x4f0 [ 3574.393632][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3574.398126][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3574.403559][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.409554][ C0] ? do_syscall_64+0x21/0x7d0 [ 3574.414219][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.420188][ C0] do_syscall_64+0xf6/0x7d0 [ 3574.424688][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3574.430585][ C0] RIP: 0033:0x45ca69 [ 3574.434494][ C0] Code: Bad RIP value. [ 3574.438548][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3574.446943][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3574.454916][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3574.462901][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3574.470862][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3574.478822][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3574.486802][ C0] syz-executor.3 S29824 16934 7191 0x00000000 [ 3574.493131][ C0] Call Trace: [ 3574.496403][ C0] __schedule+0x8f3/0x1fc0 [ 3574.500817][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3574.506098][ C0] ? firmware_map_remove+0x19d/0x19d [ 3574.511374][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3574.516830][ C0] schedule+0xd0/0x2a0 [ 3574.520918][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3574.526021][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3574.531515][ C0] futex_wait+0x1e2/0x550 [ 3574.535834][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3574.540849][ C0] ? print_usage_bug+0x240/0x240 [ 3574.545786][ C0] ? hash_futex+0x10/0x200 [ 3574.550202][ C0] ? futex_wake+0x153/0x480 [ 3574.554701][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.560656][ C0] ? mark_lock+0x11f/0xdd0 [ 3574.565065][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.571053][ C0] do_futex+0x15f/0x1ad0 [ 3574.575312][ C0] ? find_held_lock+0x2d/0x110 [ 3574.580080][ C0] ? futex_exit_release+0x60/0x60 [ 3574.585111][ C0] ? lock_downgrade+0x840/0x840 [ 3574.589961][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3574.594814][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.600801][ C0] ? __might_fault+0x190/0x1d0 [ 3574.605565][ C0] ? _copy_to_user+0x126/0x160 [ 3574.610337][ C0] __x64_sys_futex+0x376/0x4f0 [ 3574.615114][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3574.619625][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3574.625075][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.631059][ C0] ? do_syscall_64+0x21/0x7d0 [ 3574.635729][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.641701][ C0] do_syscall_64+0xf6/0x7d0 [ 3574.646201][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3574.652079][ C0] RIP: 0033:0x45ca69 [ 3574.655975][ C0] Code: Bad RIP value. [ 3574.660015][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3574.668410][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3574.676368][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3574.684313][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3574.692269][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3574.700238][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3574.708226][ C0] syz-executor.3 S29824 16946 7191 0x00000000 [ 3574.714561][ C0] Call Trace: [ 3574.717859][ C0] __schedule+0x8f3/0x1fc0 [ 3574.722255][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3574.727537][ C0] ? firmware_map_remove+0x19d/0x19d [ 3574.732812][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3574.738247][ C0] schedule+0xd0/0x2a0 [ 3574.742292][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3574.747391][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3574.752841][ C0] futex_wait+0x1e2/0x550 [ 3574.757151][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3574.762151][ C0] ? print_usage_bug+0x240/0x240 [ 3574.767081][ C0] ? hash_futex+0x10/0x200 [ 3574.771491][ C0] ? futex_wake+0x153/0x480 [ 3574.775999][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.781988][ C0] ? mark_lock+0x11f/0xdd0 [ 3574.786397][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3574.792380][ C0] do_futex+0x15f/0x1ad0 [ 3574.796625][ C0] ? find_held_lock+0x2d/0x110 [ 3574.801383][ C0] ? futex_exit_release+0x60/0x60 [ 3574.806401][ C0] ? lock_downgrade+0x840/0x840 [ 3574.811247][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3574.816089][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.822073][ C0] ? __might_fault+0x190/0x1d0 [ 3574.826852][ C0] ? _copy_to_user+0x126/0x160 [ 3574.831608][ C0] __x64_sys_futex+0x376/0x4f0 [ 3574.836366][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3574.840847][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3574.846292][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.852262][ C0] ? do_syscall_64+0x21/0x7d0 [ 3574.856928][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3574.862886][ C0] do_syscall_64+0xf6/0x7d0 [ 3574.867387][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3574.873266][ C0] RIP: 0033:0x45ca69 [ 3574.877144][ C0] Code: Bad RIP value. [ 3574.881185][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3574.889593][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3574.897551][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3574.905507][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3574.913473][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3574.921432][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3574.929429][ C0] syz-executor.3 S29824 16953 7191 0x00000000 [ 3574.935757][ C0] Call Trace: [ 3574.939028][ C0] __schedule+0x8f3/0x1fc0 [ 3574.943422][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3574.948704][ C0] ? firmware_map_remove+0x19d/0x19d [ 3574.953981][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3574.959432][ C0] schedule+0xd0/0x2a0 [ 3574.963489][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3574.968588][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3574.974039][ C0] futex_wait+0x1e2/0x550 [ 3574.978361][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3574.983361][ C0] ? print_usage_bug+0x240/0x240 [ 3574.988297][ C0] ? hash_futex+0x10/0x200 [ 3574.992704][ C0] ? futex_wake+0x153/0x480 [ 3574.997192][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.003159][ C0] ? mark_lock+0x11f/0xdd0 [ 3575.007568][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.013535][ C0] do_futex+0x15f/0x1ad0 [ 3575.017779][ C0] ? find_held_lock+0x2d/0x110 [ 3575.022535][ C0] ? futex_exit_release+0x60/0x60 [ 3575.027555][ C0] ? lock_downgrade+0x840/0x840 [ 3575.032407][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3575.037243][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.043208][ C0] ? __might_fault+0x190/0x1d0 [ 3575.047974][ C0] ? _copy_to_user+0x126/0x160 [ 3575.052729][ C0] __x64_sys_futex+0x376/0x4f0 [ 3575.057473][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3575.061959][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3575.067405][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.073375][ C0] ? do_syscall_64+0x21/0x7d0 [ 3575.078029][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.083987][ C0] do_syscall_64+0xf6/0x7d0 [ 3575.088491][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3575.094369][ C0] RIP: 0033:0x45ca69 [ 3575.098247][ C0] Code: Bad RIP value. [ 3575.102288][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3575.110683][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3575.118674][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3575.126635][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3575.134606][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3575.142590][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3575.150572][ C0] syz-executor.3 S29824 16993 7191 0x00000000 [ 3575.156922][ C0] Call Trace: [ 3575.160194][ C0] __schedule+0x8f3/0x1fc0 [ 3575.164604][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3575.169900][ C0] ? firmware_map_remove+0x19d/0x19d [ 3575.175176][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3575.180613][ C0] schedule+0xd0/0x2a0 [ 3575.184675][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3575.189788][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3575.195235][ C0] ? find_held_lock+0x2d/0x110 [ 3575.199980][ C0] futex_wait+0x1e2/0x550 [ 3575.204288][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3575.209302][ C0] ? print_usage_bug+0x240/0x240 [ 3575.214264][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3575.219443][ C0] ? futex_wake+0x153/0x480 [ 3575.223931][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.229897][ C0] ? mark_lock+0x11f/0xdd0 [ 3575.234316][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.240280][ C0] do_futex+0x15f/0x1ad0 [ 3575.244525][ C0] ? find_held_lock+0x2d/0x110 [ 3575.249295][ C0] ? futex_exit_release+0x60/0x60 [ 3575.254339][ C0] ? lock_downgrade+0x840/0x840 [ 3575.259175][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3575.264002][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.269984][ C0] ? __might_fault+0x190/0x1d0 [ 3575.274737][ C0] ? _copy_to_user+0x126/0x160 [ 3575.279515][ C0] __x64_sys_futex+0x376/0x4f0 [ 3575.284259][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3575.288757][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3575.294227][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.300195][ C0] ? do_syscall_64+0x21/0x7d0 [ 3575.304863][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.310850][ C0] do_syscall_64+0xf6/0x7d0 [ 3575.315346][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3575.321213][ C0] RIP: 0033:0x45ca69 [ 3575.325104][ C0] Code: Bad RIP value. [ 3575.329167][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3575.337565][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3575.345521][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3575.353568][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3575.361529][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3575.369485][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3575.377458][ C0] syz-executor.3 S29824 17008 7191 0x00000000 [ 3575.383777][ C0] Call Trace: [ 3575.387064][ C0] __schedule+0x8f3/0x1fc0 [ 3575.391471][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3575.396822][ C0] ? firmware_map_remove+0x19d/0x19d [ 3575.402097][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3575.407574][ C0] schedule+0xd0/0x2a0 [ 3575.411656][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3575.416756][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3575.422191][ C0] ? find_held_lock+0x2d/0x110 [ 3575.426950][ C0] futex_wait+0x1e2/0x550 [ 3575.431271][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3575.436283][ C0] ? print_usage_bug+0x240/0x240 [ 3575.441198][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3575.446393][ C0] ? futex_wake+0x153/0x480 [ 3575.450914][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.456892][ C0] ? mark_lock+0x11f/0xdd0 [ 3575.461311][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.467294][ C0] do_futex+0x15f/0x1ad0 [ 3575.471531][ C0] ? find_held_lock+0x2d/0x110 [ 3575.476287][ C0] ? futex_exit_release+0x60/0x60 [ 3575.481293][ C0] ? lock_downgrade+0x840/0x840 [ 3575.486134][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3575.490993][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.496987][ C0] ? __might_fault+0x190/0x1d0 [ 3575.501741][ C0] ? _copy_to_user+0x126/0x160 [ 3575.506503][ C0] __x64_sys_futex+0x376/0x4f0 [ 3575.511272][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3575.515757][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3575.521189][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.527163][ C0] ? do_syscall_64+0x21/0x7d0 [ 3575.531828][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.537787][ C0] do_syscall_64+0xf6/0x7d0 [ 3575.542269][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3575.548148][ C0] RIP: 0033:0x45ca69 [ 3575.552070][ C0] Code: Bad RIP value. [ 3575.556112][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3575.564504][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3575.572472][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3575.580432][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3575.588389][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3575.596348][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3575.604318][ C0] syz-executor.3 S29824 17012 7191 0x00000000 [ 3575.610633][ C0] Call Trace: [ 3575.613915][ C0] __schedule+0x8f3/0x1fc0 [ 3575.618312][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3575.623586][ C0] ? firmware_map_remove+0x19d/0x19d [ 3575.628864][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3575.634323][ C0] schedule+0xd0/0x2a0 [ 3575.638386][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3575.643487][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3575.648944][ C0] futex_wait+0x1e2/0x550 [ 3575.653272][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3575.658277][ C0] ? print_usage_bug+0x240/0x240 [ 3575.663194][ C0] ? hash_futex+0x10/0x200 [ 3575.667604][ C0] ? futex_wake+0x153/0x480 [ 3575.672113][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.678070][ C0] ? mark_lock+0x11f/0xdd0 [ 3575.682477][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.688449][ C0] do_futex+0x15f/0x1ad0 [ 3575.692687][ C0] ? find_held_lock+0x2d/0x110 [ 3575.697432][ C0] ? futex_exit_release+0x60/0x60 [ 3575.702436][ C0] ? lock_downgrade+0x840/0x840 [ 3575.707284][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3575.712136][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.718120][ C0] ? __might_fault+0x190/0x1d0 [ 3575.722872][ C0] ? _copy_to_user+0x126/0x160 [ 3575.727635][ C0] __x64_sys_futex+0x376/0x4f0 [ 3575.732391][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3575.736886][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3575.742433][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.748405][ C0] ? do_syscall_64+0x21/0x7d0 [ 3575.753084][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.759056][ C0] do_syscall_64+0xf6/0x7d0 [ 3575.763549][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3575.769429][ C0] RIP: 0033:0x45ca69 [ 3575.773321][ C0] Code: Bad RIP value. [ 3575.777362][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3575.785761][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3575.793751][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3575.801725][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3575.809687][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3575.817657][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3575.825647][ C0] syz-executor.3 S29824 17019 7191 0x00000000 [ 3575.831994][ C0] Call Trace: [ 3575.835265][ C0] __schedule+0x8f3/0x1fc0 [ 3575.839658][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3575.844940][ C0] ? firmware_map_remove+0x19d/0x19d [ 3575.850228][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3575.855675][ C0] schedule+0xd0/0x2a0 [ 3575.859720][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3575.864823][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3575.870281][ C0] ? find_held_lock+0x2d/0x110 [ 3575.875039][ C0] futex_wait+0x1e2/0x550 [ 3575.879346][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3575.884344][ C0] ? print_usage_bug+0x240/0x240 [ 3575.889272][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3575.894501][ C0] ? futex_wake+0x153/0x480 [ 3575.899002][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.904967][ C0] ? mark_lock+0x11f/0xdd0 [ 3575.909386][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3575.915371][ C0] do_futex+0x15f/0x1ad0 [ 3575.919626][ C0] ? find_held_lock+0x2d/0x110 [ 3575.924377][ C0] ? futex_exit_release+0x60/0x60 [ 3575.929395][ C0] ? lock_downgrade+0x840/0x840 [ 3575.934234][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3575.939059][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.945045][ C0] ? __might_fault+0x190/0x1d0 [ 3575.949809][ C0] ? _copy_to_user+0x126/0x160 [ 3575.954574][ C0] __x64_sys_futex+0x376/0x4f0 [ 3575.959316][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3575.963797][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3575.969244][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.975212][ C0] ? do_syscall_64+0x21/0x7d0 [ 3575.979863][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3575.985838][ C0] do_syscall_64+0xf6/0x7d0 [ 3575.990345][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3575.996224][ C0] RIP: 0033:0x45ca69 [ 3576.000101][ C0] Code: Bad RIP value. [ 3576.004141][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3576.012536][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3576.020496][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3576.028450][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3576.036423][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3576.044378][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3576.052336][ C0] syz-executor.3 S29824 17030 7191 0x00000000 [ 3576.058646][ C0] Call Trace: [ 3576.061916][ C0] __schedule+0x8f3/0x1fc0 [ 3576.066321][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3576.071613][ C0] ? firmware_map_remove+0x19d/0x19d [ 3576.076879][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3576.082314][ C0] schedule+0xd0/0x2a0 [ 3576.086377][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3576.091475][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3576.096914][ C0] futex_wait+0x1e2/0x550 [ 3576.101222][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3576.106237][ C0] ? print_usage_bug+0x240/0x240 [ 3576.111174][ C0] ? hash_futex+0x10/0x200 [ 3576.115611][ C0] ? futex_wake+0x153/0x480 [ 3576.120126][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.126094][ C0] ? mark_lock+0x11f/0xdd0 [ 3576.130523][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.136511][ C0] do_futex+0x15f/0x1ad0 [ 3576.140759][ C0] ? find_held_lock+0x2d/0x110 [ 3576.145524][ C0] ? futex_exit_release+0x60/0x60 [ 3576.150568][ C0] ? lock_downgrade+0x840/0x840 [ 3576.155452][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3576.160282][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.166264][ C0] ? __might_fault+0x190/0x1d0 [ 3576.171031][ C0] ? _copy_to_user+0x126/0x160 [ 3576.175790][ C0] __x64_sys_futex+0x376/0x4f0 [ 3576.180535][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3576.185034][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3576.190507][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.196478][ C0] ? do_syscall_64+0x21/0x7d0 [ 3576.201135][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.207108][ C0] do_syscall_64+0xf6/0x7d0 [ 3576.211604][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3576.217474][ C0] RIP: 0033:0x45ca69 [ 3576.221352][ C0] Code: Bad RIP value. [ 3576.225408][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3576.233824][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3576.241780][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3576.249756][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3576.257726][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3576.265691][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3576.273667][ C0] syz-executor.3 S29824 17045 7191 0x00000000 [ 3576.279979][ C0] Call Trace: [ 3576.283260][ C0] __schedule+0x8f3/0x1fc0 [ 3576.287667][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3576.292951][ C0] ? firmware_map_remove+0x19d/0x19d [ 3576.298220][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3576.303658][ C0] schedule+0xd0/0x2a0 [ 3576.307722][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3576.312833][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3576.318273][ C0] futex_wait+0x1e2/0x550 [ 3576.322593][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3576.327608][ C0] ? print_usage_bug+0x240/0x240 [ 3576.332533][ C0] ? hash_futex+0x10/0x200 [ 3576.336939][ C0] ? futex_wake+0x153/0x480 [ 3576.341443][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.347411][ C0] ? mark_lock+0x11f/0xdd0 [ 3576.351816][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.357773][ C0] do_futex+0x15f/0x1ad0 [ 3576.361996][ C0] ? find_held_lock+0x2d/0x110 [ 3576.366755][ C0] ? futex_exit_release+0x60/0x60 [ 3576.371783][ C0] ? lock_downgrade+0x840/0x840 [ 3576.376612][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3576.381438][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.387417][ C0] ? __might_fault+0x190/0x1d0 [ 3576.392173][ C0] ? _copy_to_user+0x126/0x160 [ 3576.396934][ C0] __x64_sys_futex+0x376/0x4f0 [ 3576.401690][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3576.406185][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3576.411629][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.417589][ C0] ? do_syscall_64+0x21/0x7d0 [ 3576.422253][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.428227][ C0] do_syscall_64+0xf6/0x7d0 [ 3576.432722][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3576.438602][ C0] RIP: 0033:0x45ca69 [ 3576.442478][ C0] Code: Bad RIP value. [ 3576.446530][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3576.454961][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3576.463011][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3576.470970][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3576.478929][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3576.486884][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3576.494865][ C0] syz-executor.3 S29824 17054 7191 0x00000000 [ 3576.501176][ C0] Call Trace: [ 3576.504466][ C0] __schedule+0x8f3/0x1fc0 [ 3576.508902][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3576.514180][ C0] ? firmware_map_remove+0x19d/0x19d [ 3576.519456][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3576.524908][ C0] schedule+0xd0/0x2a0 [ 3576.528979][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3576.534081][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3576.539521][ C0] futex_wait+0x1e2/0x550 [ 3576.543844][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3576.548865][ C0] ? print_usage_bug+0x240/0x240 [ 3576.553795][ C0] ? hash_futex+0x10/0x200 [ 3576.558189][ C0] ? futex_wake+0x153/0x480 [ 3576.562679][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.568643][ C0] ? mark_lock+0x11f/0xdd0 [ 3576.573060][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.579023][ C0] do_futex+0x15f/0x1ad0 [ 3576.583259][ C0] ? find_held_lock+0x2d/0x110 [ 3576.588019][ C0] ? futex_exit_release+0x60/0x60 [ 3576.593036][ C0] ? lock_downgrade+0x840/0x840 [ 3576.597890][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3576.602725][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.608708][ C0] ? __might_fault+0x190/0x1d0 [ 3576.613477][ C0] ? _copy_to_user+0x126/0x160 [ 3576.618224][ C0] __x64_sys_futex+0x376/0x4f0 [ 3576.622970][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3576.627467][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3576.632917][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.638877][ C0] ? do_syscall_64+0x21/0x7d0 [ 3576.643543][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.649515][ C0] do_syscall_64+0xf6/0x7d0 [ 3576.654012][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3576.659880][ C0] RIP: 0033:0x45ca69 [ 3576.663772][ C0] Code: Bad RIP value. [ 3576.667840][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3576.676240][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3576.684186][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3576.692148][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3576.700109][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3576.708075][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3576.716044][ C0] syz-executor.3 S29824 17081 7191 0x00000000 [ 3576.722352][ C0] Call Trace: [ 3576.725634][ C0] __schedule+0x8f3/0x1fc0 [ 3576.730050][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3576.735337][ C0] ? firmware_map_remove+0x19d/0x19d [ 3576.740612][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3576.746066][ C0] schedule+0xd0/0x2a0 [ 3576.750140][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3576.755256][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3576.760712][ C0] futex_wait+0x1e2/0x550 [ 3576.765036][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3576.770063][ C0] ? print_usage_bug+0x240/0x240 [ 3576.775010][ C0] ? hash_futex+0x10/0x200 [ 3576.779452][ C0] ? futex_wake+0x153/0x480 [ 3576.783977][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.789954][ C0] ? mark_lock+0x11f/0xdd0 [ 3576.794361][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3576.800321][ C0] do_futex+0x15f/0x1ad0 [ 3576.804565][ C0] ? find_held_lock+0x2d/0x110 [ 3576.809352][ C0] ? futex_exit_release+0x60/0x60 [ 3576.814368][ C0] ? lock_downgrade+0x840/0x840 [ 3576.819197][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3576.824023][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.830002][ C0] ? __might_fault+0x190/0x1d0 [ 3576.834754][ C0] ? _copy_to_user+0x126/0x160 [ 3576.839509][ C0] __x64_sys_futex+0x376/0x4f0 [ 3576.844252][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3576.848748][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3576.854206][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.860165][ C0] ? do_syscall_64+0x21/0x7d0 [ 3576.864856][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3576.870839][ C0] do_syscall_64+0xf6/0x7d0 [ 3576.875335][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3576.881211][ C0] RIP: 0033:0x45ca69 [ 3576.885189][ C0] Code: Bad RIP value. [ 3576.889251][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3576.897658][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3576.905615][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3576.913575][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3576.921533][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3576.929490][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3576.937461][ C0] syz-executor.3 S28904 17090 7191 0x00000000 [ 3576.943772][ C0] Call Trace: [ 3576.947079][ C0] __schedule+0x8f3/0x1fc0 [ 3576.951500][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3576.956777][ C0] ? firmware_map_remove+0x19d/0x19d [ 3576.962050][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3576.967503][ C0] schedule+0xd0/0x2a0 [ 3576.971561][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3576.976648][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3576.982092][ C0] ? find_held_lock+0x2d/0x110 [ 3576.986851][ C0] futex_wait+0x1e2/0x550 [ 3576.991186][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3576.996213][ C0] ? print_usage_bug+0x240/0x240 [ 3577.001142][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3577.006330][ C0] ? futex_wake+0x153/0x480 [ 3577.010852][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.016848][ C0] ? mark_lock+0x11f/0xdd0 [ 3577.021256][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.027231][ C0] do_futex+0x15f/0x1ad0 [ 3577.031472][ C0] ? find_held_lock+0x2d/0x110 [ 3577.036227][ C0] ? futex_exit_release+0x60/0x60 [ 3577.041232][ C0] ? lock_downgrade+0x840/0x840 [ 3577.046076][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3577.050929][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.056917][ C0] ? __might_fault+0x190/0x1d0 [ 3577.061659][ C0] ? _copy_to_user+0x126/0x160 [ 3577.066422][ C0] __x64_sys_futex+0x376/0x4f0 [ 3577.071181][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3577.075669][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3577.081106][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.087086][ C0] ? do_syscall_64+0x21/0x7d0 [ 3577.091757][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.097718][ C0] do_syscall_64+0xf6/0x7d0 [ 3577.102198][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3577.108080][ C0] RIP: 0033:0x45ca69 [ 3577.111998][ C0] Code: Bad RIP value. [ 3577.116051][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3577.124442][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3577.132400][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3577.140366][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3577.148328][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3577.156303][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3577.164293][ C0] syz-executor.2 S29824 17139 6995 0x00000000 [ 3577.170610][ C0] Call Trace: [ 3577.173894][ C0] __schedule+0x8f3/0x1fc0 [ 3577.178328][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3577.183592][ C0] ? firmware_map_remove+0x19d/0x19d [ 3577.188869][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3577.194317][ C0] schedule+0xd0/0x2a0 [ 3577.198365][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3577.203449][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3577.208904][ C0] futex_wait+0x1e2/0x550 [ 3577.213226][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3577.218267][ C0] ? print_usage_bug+0x240/0x240 [ 3577.223183][ C0] ? hash_futex+0x10/0x200 [ 3577.227591][ C0] ? futex_wake+0x153/0x480 [ 3577.232091][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.238048][ C0] ? mark_lock+0x11f/0xdd0 [ 3577.242485][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.248456][ C0] do_futex+0x15f/0x1ad0 [ 3577.252692][ C0] ? find_held_lock+0x2d/0x110 [ 3577.257436][ C0] ? futex_exit_release+0x60/0x60 [ 3577.262440][ C0] ? lock_downgrade+0x840/0x840 [ 3577.267287][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3577.272126][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.278095][ C0] ? __might_fault+0x190/0x1d0 [ 3577.282838][ C0] ? _copy_to_user+0x126/0x160 [ 3577.287601][ C0] __x64_sys_futex+0x376/0x4f0 [ 3577.292395][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3577.296883][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3577.302318][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.308290][ C0] ? do_syscall_64+0x21/0x7d0 [ 3577.312965][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.318924][ C0] do_syscall_64+0xf6/0x7d0 [ 3577.323409][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3577.329285][ C0] RIP: 0033:0x45ca69 [ 3577.333185][ C0] Code: Bad RIP value. [ 3577.337250][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3577.345651][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3577.353611][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3577.361558][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3577.369514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3577.377472][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3577.385451][ C0] syz-executor.2 S29816 17871 6995 0x00000000 [ 3577.391780][ C0] Call Trace: [ 3577.395059][ C0] __schedule+0x8f3/0x1fc0 [ 3577.399453][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3577.404732][ C0] ? firmware_map_remove+0x19d/0x19d [ 3577.410054][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3577.415506][ C0] schedule+0xd0/0x2a0 [ 3577.419554][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3577.424652][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3577.430121][ C0] futex_wait+0x1e2/0x550 [ 3577.434452][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3577.439470][ C0] ? print_usage_bug+0x240/0x240 [ 3577.444405][ C0] ? hash_futex+0x10/0x200 [ 3577.448814][ C0] ? futex_wake+0x153/0x480 [ 3577.453314][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.459270][ C0] ? mark_lock+0x11f/0xdd0 [ 3577.463663][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.469653][ C0] do_futex+0x15f/0x1ad0 [ 3577.473900][ C0] ? find_held_lock+0x2d/0x110 [ 3577.478642][ C0] ? futex_exit_release+0x60/0x60 [ 3577.483654][ C0] ? lock_downgrade+0x840/0x840 [ 3577.488494][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3577.493332][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.499308][ C0] ? __might_fault+0x190/0x1d0 [ 3577.504051][ C0] ? _copy_to_user+0x126/0x160 [ 3577.508813][ C0] __x64_sys_futex+0x376/0x4f0 [ 3577.513572][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3577.518056][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3577.523490][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.529459][ C0] ? do_syscall_64+0x21/0x7d0 [ 3577.534135][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.540103][ C0] do_syscall_64+0xf6/0x7d0 [ 3577.544614][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3577.550502][ C0] RIP: 0033:0x45ca69 [ 3577.554396][ C0] Code: Bad RIP value. [ 3577.558435][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3577.566829][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3577.574798][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3577.582758][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3577.590713][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3577.598701][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3577.606680][ C0] syz-executor.2 S29824 18210 6995 0x00000000 [ 3577.613007][ C0] Call Trace: [ 3577.616285][ C0] __schedule+0x8f3/0x1fc0 [ 3577.620681][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3577.625964][ C0] ? firmware_map_remove+0x19d/0x19d [ 3577.631241][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3577.636677][ C0] schedule+0xd0/0x2a0 [ 3577.640983][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3577.646084][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3577.651532][ C0] futex_wait+0x1e2/0x550 [ 3577.655859][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3577.660875][ C0] ? print_usage_bug+0x240/0x240 [ 3577.665821][ C0] ? hash_futex+0x10/0x200 [ 3577.670236][ C0] ? futex_wake+0x153/0x480 [ 3577.674755][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.680727][ C0] ? mark_lock+0x11f/0xdd0 [ 3577.685135][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3577.691116][ C0] do_futex+0x15f/0x1ad0 [ 3577.695352][ C0] ? find_held_lock+0x2d/0x110 [ 3577.700108][ C0] ? futex_exit_release+0x60/0x60 [ 3577.705129][ C0] ? lock_downgrade+0x840/0x840 [ 3577.709978][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3577.714816][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.720776][ C0] ? __might_fault+0x190/0x1d0 [ 3577.725528][ C0] ? _copy_to_user+0x126/0x160 [ 3577.730302][ C0] __x64_sys_futex+0x376/0x4f0 [ 3577.735075][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3577.739569][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3577.745017][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.751019][ C0] ? do_syscall_64+0x21/0x7d0 [ 3577.755689][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.761646][ C0] do_syscall_64+0xf6/0x7d0 [ 3577.766142][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3577.772041][ C0] RIP: 0033:0x45ca69 [ 3577.775943][ C0] Code: Bad RIP value. [ 3577.779982][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3577.788375][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3577.796338][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3577.804294][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3577.812241][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3577.820196][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3577.828185][ C0] syz-executor.3 S29824 18255 7191 0x00000000 [ 3577.834519][ C0] Call Trace: [ 3577.837803][ C0] __schedule+0x8f3/0x1fc0 [ 3577.842197][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3577.847476][ C0] ? firmware_map_remove+0x19d/0x19d [ 3577.852766][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3577.858212][ C0] schedule+0xd0/0x2a0 [ 3577.862272][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3577.867380][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3577.872829][ C0] futex_wait+0x1e2/0x550 [ 3577.877152][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3577.882159][ C0] ? print_usage_bug+0x240/0x240 [ 3577.887089][ C0] ? hash_futex+0x10/0x200 [ 3577.891492][ C0] ? futex_wake+0x153/0x480 [ 3577.896004][ C0] ? do_wp_page+0x512/0x1440 [ 3577.900595][ C0] do_futex+0x15f/0x1ad0 [ 3577.904840][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3577.910061][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3577.914902][ C0] ? futex_exit_release+0x60/0x60 [ 3577.919905][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3577.924753][ C0] ? lock_downgrade+0x840/0x840 [ 3577.929596][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3577.934615][ C0] __x64_sys_futex+0x376/0x4f0 [ 3577.939356][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3577.943848][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3577.949292][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.955260][ C0] ? do_syscall_64+0x21/0x7d0 [ 3577.959912][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3577.965884][ C0] do_syscall_64+0xf6/0x7d0 [ 3577.970388][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3577.976270][ C0] RIP: 0033:0x45ca69 [ 3577.980155][ C0] Code: Bad RIP value. [ 3577.984206][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3577.992599][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3578.000568][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3578.008524][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3578.016484][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3578.024441][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3578.032412][ C0] syz-executor.3 S29824 18318 7191 0x00000000 [ 3578.038720][ C0] Call Trace: [ 3578.041990][ C0] __schedule+0x8f3/0x1fc0 [ 3578.046401][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3578.051676][ C0] ? firmware_map_remove+0x19d/0x19d [ 3578.056940][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3578.062385][ C0] schedule+0xd0/0x2a0 [ 3578.066446][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3578.071544][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3578.076977][ C0] ? find_held_lock+0x2d/0x110 [ 3578.081732][ C0] futex_wait+0x1e2/0x550 [ 3578.086060][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3578.091084][ C0] ? print_usage_bug+0x240/0x240 [ 3578.096038][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3578.101229][ C0] ? futex_wake+0x153/0x480 [ 3578.105744][ C0] ? do_wp_page+0x512/0x1440 [ 3578.110339][ C0] do_futex+0x15f/0x1ad0 [ 3578.114591][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3578.119797][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3578.124637][ C0] ? futex_exit_release+0x60/0x60 [ 3578.129679][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3578.134556][ C0] ? lock_downgrade+0x840/0x840 [ 3578.139430][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3578.144449][ C0] __x64_sys_futex+0x376/0x4f0 [ 3578.149216][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3578.153727][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3578.159162][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.165133][ C0] ? do_syscall_64+0x21/0x7d0 [ 3578.169809][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.175792][ C0] do_syscall_64+0xf6/0x7d0 [ 3578.180276][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3578.186154][ C0] RIP: 0033:0x45ca69 [ 3578.190055][ C0] Code: Bad RIP value. [ 3578.194105][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3578.202488][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3578.210464][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3578.218423][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3578.226402][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3578.234367][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3578.242359][ C0] syz-executor.2 S29824 18340 6995 0x00000000 [ 3578.248681][ C0] Call Trace: [ 3578.251989][ C0] __schedule+0x8f3/0x1fc0 [ 3578.256389][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3578.269576][ C0] ? firmware_map_remove+0x19d/0x19d [ 3578.274857][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3578.280330][ C0] schedule+0xd0/0x2a0 [ 3578.284407][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3578.289512][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3578.294975][ C0] futex_wait+0x1e2/0x550 [ 3578.300177][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3578.305195][ C0] ? print_usage_bug+0x240/0x240 [ 3578.310135][ C0] ? hash_futex+0x10/0x200 [ 3578.314552][ C0] ? futex_wake+0x153/0x480 [ 3578.319092][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3578.325059][ C0] ? mark_lock+0x11f/0xdd0 [ 3578.329482][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3578.335465][ C0] do_futex+0x15f/0x1ad0 [ 3578.339705][ C0] ? find_held_lock+0x2d/0x110 [ 3578.344447][ C0] ? futex_exit_release+0x60/0x60 [ 3578.349465][ C0] ? lock_downgrade+0x840/0x840 [ 3578.354307][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3578.359133][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.365132][ C0] ? __might_fault+0x190/0x1d0 [ 3578.369897][ C0] ? _copy_to_user+0x126/0x160 [ 3578.374658][ C0] __x64_sys_futex+0x376/0x4f0 [ 3578.379417][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3578.383907][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3578.389353][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.395325][ C0] ? do_syscall_64+0x21/0x7d0 [ 3578.399995][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.405970][ C0] do_syscall_64+0xf6/0x7d0 [ 3578.410485][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3578.416365][ C0] RIP: 0033:0x45ca69 [ 3578.420242][ C0] Code: Bad RIP value. [ 3578.424281][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3578.432676][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3578.440635][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3578.448590][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3578.456560][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3578.464516][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3578.472490][ C0] syz-executor.2 S25016 18354 6995 0x00000000 [ 3578.478810][ C0] Call Trace: [ 3578.482082][ C0] __schedule+0x8f3/0x1fc0 [ 3578.486488][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3578.491764][ C0] ? firmware_map_remove+0x19d/0x19d [ 3578.497030][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3578.502466][ C0] schedule+0xd0/0x2a0 [ 3578.506527][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3578.511627][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3578.517062][ C0] ? find_held_lock+0x2d/0x110 [ 3578.521815][ C0] futex_wait+0x1e2/0x550 [ 3578.526140][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3578.531165][ C0] ? print_usage_bug+0x240/0x240 [ 3578.536108][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3578.541315][ C0] ? futex_wake+0x153/0x480 [ 3578.545827][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3578.551794][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3578.557765][ C0] do_futex+0x15f/0x1ad0 [ 3578.561996][ C0] ? find_held_lock+0x2d/0x110 [ 3578.566771][ C0] ? futex_exit_release+0x60/0x60 [ 3578.571787][ C0] ? lock_downgrade+0x840/0x840 [ 3578.576632][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3578.581465][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.587447][ C0] ? __might_fault+0x190/0x1d0 [ 3578.592201][ C0] ? _copy_to_user+0x126/0x160 [ 3578.596952][ C0] __x64_sys_futex+0x376/0x4f0 [ 3578.601696][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3578.606191][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3578.611635][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.617593][ C0] ? do_syscall_64+0x21/0x7d0 [ 3578.622249][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.628223][ C0] do_syscall_64+0xf6/0x7d0 [ 3578.632717][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3578.638595][ C0] RIP: 0033:0x45ca69 [ 3578.642477][ C0] Code: Bad RIP value. [ 3578.646549][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3578.654955][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3578.662903][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3578.670858][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3578.678817][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3578.686772][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3578.694757][ C0] syz-executor.3 S29824 18370 7191 0x00000000 [ 3578.701065][ C0] Call Trace: [ 3578.704347][ C0] __schedule+0x8f3/0x1fc0 [ 3578.708763][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3578.714136][ C0] ? firmware_map_remove+0x19d/0x19d [ 3578.719410][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3578.724862][ C0] schedule+0xd0/0x2a0 [ 3578.728935][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3578.734050][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3578.739492][ C0] futex_wait+0x1e2/0x550 [ 3578.743816][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3578.748858][ C0] ? print_usage_bug+0x240/0x240 [ 3578.753786][ C0] ? hash_futex+0x10/0x200 [ 3578.758208][ C0] ? futex_wake+0x153/0x480 [ 3578.762706][ C0] ? do_wp_page+0x512/0x1440 [ 3578.767298][ C0] do_futex+0x15f/0x1ad0 [ 3578.771554][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3578.776746][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3578.781587][ C0] ? futex_exit_release+0x60/0x60 [ 3578.786609][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3578.791451][ C0] ? lock_downgrade+0x840/0x840 [ 3578.796276][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3578.801285][ C0] __x64_sys_futex+0x376/0x4f0 [ 3578.806044][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3578.810549][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3578.816018][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.822004][ C0] ? do_syscall_64+0x21/0x7d0 [ 3578.826677][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3578.832648][ C0] do_syscall_64+0xf6/0x7d0 [ 3578.837151][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3578.843019][ C0] RIP: 0033:0x45ca69 [ 3578.846912][ C0] Code: Bad RIP value. [ 3578.850971][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3578.859381][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3578.867350][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3578.875332][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3578.883288][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3578.891245][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3578.899219][ C0] syz-executor.3 S29824 18399 7191 0x00000000 [ 3578.905537][ C0] Call Trace: [ 3578.908893][ C0] __schedule+0x8f3/0x1fc0 [ 3578.913325][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3578.918604][ C0] ? firmware_map_remove+0x19d/0x19d [ 3578.923867][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3578.929323][ C0] schedule+0xd0/0x2a0 [ 3578.933399][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3578.938502][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3578.943978][ C0] futex_wait+0x1e2/0x550 [ 3578.948312][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3578.953336][ C0] ? print_usage_bug+0x240/0x240 [ 3578.958264][ C0] ? hash_futex+0x10/0x200 [ 3578.962656][ C0] ? futex_wake+0x153/0x480 [ 3578.967166][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3578.973131][ C0] ? mark_lock+0x11f/0xdd0 [ 3578.977538][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3578.983516][ C0] do_futex+0x15f/0x1ad0 [ 3578.987780][ C0] ? find_held_lock+0x2d/0x110 [ 3578.992537][ C0] ? futex_exit_release+0x60/0x60 [ 3578.997556][ C0] ? lock_downgrade+0x840/0x840 [ 3579.002401][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3579.007243][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.013223][ C0] ? __might_fault+0x190/0x1d0 [ 3579.017965][ C0] ? _copy_to_user+0x126/0x160 [ 3579.022710][ C0] __x64_sys_futex+0x376/0x4f0 [ 3579.027470][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3579.031964][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3579.037413][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.043369][ C0] ? do_syscall_64+0x21/0x7d0 [ 3579.048034][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.054020][ C0] do_syscall_64+0xf6/0x7d0 [ 3579.058504][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3579.064372][ C0] RIP: 0033:0x45ca69 [ 3579.068261][ C0] Code: Bad RIP value. [ 3579.072312][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3579.080698][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3579.088655][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3579.096621][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3579.104577][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3579.112559][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3579.120534][ C0] syz-executor.2 S27464 18402 6995 0x00000000 [ 3579.126851][ C0] Call Trace: [ 3579.130145][ C0] __schedule+0x8f3/0x1fc0 [ 3579.134564][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3579.139948][ C0] ? firmware_map_remove+0x19d/0x19d [ 3579.145234][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3579.150699][ C0] schedule+0xd0/0x2a0 [ 3579.154761][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3579.159878][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3579.165337][ C0] futex_wait+0x1e2/0x550 [ 3579.169674][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3579.174698][ C0] ? print_usage_bug+0x240/0x240 [ 3579.179626][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3579.184641][ C0] ? hash_futex+0x10/0x200 [ 3579.189147][ C0] ? futex_wake+0x153/0x480 [ 3579.193652][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.199614][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.205590][ C0] do_futex+0x15f/0x1ad0 [ 3579.209864][ C0] ? find_held_lock+0x2d/0x110 [ 3579.214629][ C0] ? futex_exit_release+0x60/0x60 [ 3579.219647][ C0] ? lock_downgrade+0x840/0x840 [ 3579.224480][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3579.229333][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.235339][ C0] ? __might_fault+0x190/0x1d0 [ 3579.240090][ C0] ? _copy_to_user+0x126/0x160 [ 3579.244852][ C0] __x64_sys_futex+0x376/0x4f0 [ 3579.249618][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3579.254126][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3579.259596][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.265571][ C0] ? do_syscall_64+0x21/0x7d0 [ 3579.270256][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.276232][ C0] do_syscall_64+0xf6/0x7d0 [ 3579.280751][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3579.286629][ C0] RIP: 0033:0x45ca69 [ 3579.290528][ C0] Code: Bad RIP value. [ 3579.294582][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3579.302966][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3579.310921][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3579.318879][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3579.326836][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3579.334809][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3579.342766][ C0] syz-executor.2 S29824 18453 6995 0x00000000 [ 3579.349079][ C0] Call Trace: [ 3579.352361][ C0] __schedule+0x8f3/0x1fc0 [ 3579.356757][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3579.362026][ C0] ? firmware_map_remove+0x19d/0x19d [ 3579.367306][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3579.372768][ C0] schedule+0xd0/0x2a0 [ 3579.376818][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3579.381913][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3579.387385][ C0] futex_wait+0x1e2/0x550 [ 3579.391707][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3579.396720][ C0] ? print_usage_bug+0x240/0x240 [ 3579.401633][ C0] ? hash_futex+0x10/0x200 [ 3579.406046][ C0] ? futex_wake+0x153/0x480 [ 3579.410563][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.416538][ C0] ? mark_lock+0x11f/0xdd0 [ 3579.420946][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.426919][ C0] do_futex+0x15f/0x1ad0 [ 3579.431182][ C0] ? find_held_lock+0x2d/0x110 [ 3579.435949][ C0] ? futex_exit_release+0x60/0x60 [ 3579.440971][ C0] ? lock_downgrade+0x840/0x840 [ 3579.445814][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3579.450661][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.456654][ C0] ? __might_fault+0x190/0x1d0 [ 3579.461440][ C0] ? _copy_to_user+0x126/0x160 [ 3579.466209][ C0] __x64_sys_futex+0x376/0x4f0 [ 3579.470983][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3579.475492][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3579.480936][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.486907][ C0] ? do_syscall_64+0x21/0x7d0 [ 3579.491571][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.497530][ C0] do_syscall_64+0xf6/0x7d0 [ 3579.502018][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3579.507895][ C0] RIP: 0033:0x45ca69 [ 3579.511783][ C0] Code: Bad RIP value. [ 3579.515835][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3579.524228][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3579.532184][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3579.540153][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3579.548108][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3579.556077][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3579.564051][ C0] syz-executor.3 S29824 18458 7191 0x00000000 [ 3579.570365][ C0] Call Trace: [ 3579.573647][ C0] __schedule+0x8f3/0x1fc0 [ 3579.578044][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3579.583308][ C0] ? firmware_map_remove+0x19d/0x19d [ 3579.588586][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3579.594050][ C0] schedule+0xd0/0x2a0 [ 3579.598101][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3579.603188][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3579.608656][ C0] ? find_held_lock+0x2d/0x110 [ 3579.613423][ C0] futex_wait+0x1e2/0x550 [ 3579.617732][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3579.622744][ C0] ? print_usage_bug+0x240/0x240 [ 3579.627673][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3579.632860][ C0] ? futex_wake+0x153/0x480 [ 3579.637352][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.643312][ C0] ? mark_lock+0x11f/0xdd0 [ 3579.647725][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.653698][ C0] do_futex+0x15f/0x1ad0 [ 3579.657944][ C0] ? find_held_lock+0x2d/0x110 [ 3579.662709][ C0] ? futex_exit_release+0x60/0x60 [ 3579.667726][ C0] ? lock_downgrade+0x840/0x840 [ 3579.672566][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3579.677392][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.683353][ C0] ? __might_fault+0x190/0x1d0 [ 3579.688108][ C0] ? _copy_to_user+0x126/0x160 [ 3579.692877][ C0] __x64_sys_futex+0x376/0x4f0 [ 3579.697622][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3579.702102][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3579.707549][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.713528][ C0] ? do_syscall_64+0x21/0x7d0 [ 3579.718271][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.724237][ C0] do_syscall_64+0xf6/0x7d0 [ 3579.728737][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3579.734619][ C0] RIP: 0033:0x45ca69 [ 3579.738510][ C0] Code: Bad RIP value. [ 3579.742560][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3579.750953][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3579.758911][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3579.766867][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3579.774838][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3579.782803][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3579.790779][ C0] syz-executor.3 S29824 18525 7191 0x00000000 [ 3579.797104][ C0] Call Trace: [ 3579.800375][ C0] __schedule+0x8f3/0x1fc0 [ 3579.804780][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3579.810071][ C0] ? firmware_map_remove+0x19d/0x19d [ 3579.815362][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3579.820822][ C0] schedule+0xd0/0x2a0 [ 3579.824883][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3579.830002][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3579.835463][ C0] futex_wait+0x1e2/0x550 [ 3579.839771][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3579.844804][ C0] ? print_usage_bug+0x240/0x240 [ 3579.849744][ C0] ? hash_futex+0x10/0x200 [ 3579.854147][ C0] ? futex_wake+0x153/0x480 [ 3579.858638][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.864602][ C0] ? mark_lock+0x11f/0xdd0 [ 3579.869027][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3579.875100][ C0] do_futex+0x15f/0x1ad0 [ 3579.879339][ C0] ? find_held_lock+0x2d/0x110 [ 3579.884090][ C0] ? futex_exit_release+0x60/0x60 [ 3579.889108][ C0] ? lock_downgrade+0x840/0x840 [ 3579.893946][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3579.898787][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.904777][ C0] ? __might_fault+0x190/0x1d0 [ 3579.909540][ C0] ? _copy_to_user+0x126/0x160 [ 3579.914296][ C0] __x64_sys_futex+0x376/0x4f0 [ 3579.919044][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3579.923533][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3579.928977][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.934949][ C0] ? do_syscall_64+0x21/0x7d0 [ 3579.939602][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3579.945576][ C0] do_syscall_64+0xf6/0x7d0 [ 3579.950087][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3579.955966][ C0] RIP: 0033:0x45ca69 [ 3579.959847][ C0] Code: Bad RIP value. [ 3579.963902][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3579.972299][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3579.980265][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3579.988228][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3579.996187][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3580.004152][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3580.012113][ C0] syz-executor.2 S29824 18608 6995 0x00000000 [ 3580.018440][ C0] Call Trace: [ 3580.021719][ C0] __schedule+0x8f3/0x1fc0 [ 3580.026125][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3580.031426][ C0] ? firmware_map_remove+0x19d/0x19d [ 3580.036715][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3580.042153][ C0] schedule+0xd0/0x2a0 [ 3580.046215][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3580.051330][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3580.056775][ C0] ? find_held_lock+0x2d/0x110 [ 3580.061524][ C0] futex_wait+0x1e2/0x550 [ 3580.065851][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3580.070875][ C0] ? print_usage_bug+0x240/0x240 [ 3580.075819][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3580.081095][ C0] ? futex_wake+0x153/0x480 [ 3580.085634][ C0] ? do_wp_page+0x512/0x1440 [ 3580.090244][ C0] do_futex+0x15f/0x1ad0 [ 3580.094488][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3580.099739][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3580.104579][ C0] ? futex_exit_release+0x60/0x60 [ 3580.109621][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3580.114490][ C0] ? lock_downgrade+0x840/0x840 [ 3580.119328][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3580.124336][ C0] __x64_sys_futex+0x376/0x4f0 [ 3580.129094][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3580.133589][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3580.139061][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.145038][ C0] ? do_syscall_64+0x21/0x7d0 [ 3580.149715][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.155689][ C0] do_syscall_64+0xf6/0x7d0 [ 3580.160173][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3580.166070][ C0] RIP: 0033:0x45ca69 [ 3580.169971][ C0] Code: Bad RIP value. [ 3580.174039][ C0] RSP: 002b:00007f5043428cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3580.182425][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3580.190380][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3580.198338][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3580.206295][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3580.214256][ C0] R13: 0000000000c9fb6f R14: 00007f50434299c0 R15: 000000000078bfac [ 3580.222217][ C0] syz-executor.0 S29824 18635 6809 0x00000000 [ 3580.228534][ C0] Call Trace: [ 3580.231835][ C0] __schedule+0x8f3/0x1fc0 [ 3580.236231][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3580.241506][ C0] ? firmware_map_remove+0x19d/0x19d [ 3580.246784][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3580.252247][ C0] schedule+0xd0/0x2a0 [ 3580.256305][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3580.261392][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3580.266846][ C0] futex_wait+0x1e2/0x550 [ 3580.271180][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3580.276233][ C0] ? print_usage_bug+0x240/0x240 [ 3580.281181][ C0] ? hash_futex+0x10/0x200 [ 3580.285591][ C0] ? futex_wake+0x153/0x480 [ 3580.290110][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.296089][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.302073][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.308048][ C0] do_futex+0x15f/0x1ad0 [ 3580.312289][ C0] ? find_held_lock+0x2d/0x110 [ 3580.317063][ C0] ? futex_exit_release+0x60/0x60 [ 3580.322076][ C0] ? lock_downgrade+0x840/0x840 [ 3580.326919][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3580.331756][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.337727][ C0] ? __might_fault+0x190/0x1d0 [ 3580.342477][ C0] ? _copy_to_user+0x126/0x160 [ 3580.347240][ C0] __x64_sys_futex+0x376/0x4f0 [ 3580.352014][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3580.356513][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3580.361947][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.367915][ C0] ? do_syscall_64+0x21/0x7d0 [ 3580.372595][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.378556][ C0] do_syscall_64+0xf6/0x7d0 [ 3580.383042][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3580.388922][ C0] RIP: 0033:0x45ca69 [ 3580.392835][ C0] Code: Bad RIP value. [ 3580.396892][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3580.405288][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3580.413258][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3580.421216][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3580.429176][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3580.437138][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3580.445124][ C0] syz-executor.3 S29816 18851 7191 0x00000000 [ 3580.451452][ C0] Call Trace: [ 3580.454749][ C0] __schedule+0x8f3/0x1fc0 [ 3580.459147][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3580.464424][ C0] ? firmware_map_remove+0x19d/0x19d [ 3580.469720][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3580.475260][ C0] schedule+0xd0/0x2a0 [ 3580.479312][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3580.484403][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3580.489849][ C0] ? find_held_lock+0x2d/0x110 [ 3580.494609][ C0] futex_wait+0x1e2/0x550 [ 3580.498919][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3580.503918][ C0] ? print_usage_bug+0x240/0x240 [ 3580.508845][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3580.514035][ C0] ? futex_wake+0x153/0x480 [ 3580.518529][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.524519][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.530509][ C0] do_futex+0x15f/0x1ad0 [ 3580.534766][ C0] ? find_held_lock+0x2d/0x110 [ 3580.539524][ C0] ? futex_exit_release+0x60/0x60 [ 3580.544541][ C0] ? lock_downgrade+0x840/0x840 [ 3580.549397][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3580.554255][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.560220][ C0] ? __might_fault+0x190/0x1d0 [ 3580.564974][ C0] ? _copy_to_user+0x126/0x160 [ 3580.569768][ C0] __x64_sys_futex+0x376/0x4f0 [ 3580.574538][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3580.579033][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3580.584466][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.590447][ C0] ? do_syscall_64+0x21/0x7d0 [ 3580.595115][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.601090][ C0] do_syscall_64+0xf6/0x7d0 [ 3580.605600][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3580.611479][ C0] RIP: 0033:0x45ca69 [ 3580.615361][ C0] Code: Bad RIP value. [ 3580.619414][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3580.627808][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3580.636375][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3580.644326][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3580.652290][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3580.660254][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3580.668254][ C0] syz-executor.3 S29824 18901 7191 0x00000000 [ 3580.674585][ C0] Call Trace: [ 3580.677876][ C0] __schedule+0x8f3/0x1fc0 [ 3580.682272][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3580.687558][ C0] ? firmware_map_remove+0x19d/0x19d [ 3580.692854][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3580.698300][ C0] schedule+0xd0/0x2a0 [ 3580.702352][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3580.707475][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3580.712930][ C0] futex_wait+0x1e2/0x550 [ 3580.717238][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3580.722245][ C0] ? print_usage_bug+0x240/0x240 [ 3580.727171][ C0] ? hash_futex+0x10/0x200 [ 3580.731595][ C0] ? futex_wake+0x153/0x480 [ 3580.736131][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.742103][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.748075][ C0] do_futex+0x15f/0x1ad0 [ 3580.752311][ C0] ? find_held_lock+0x2d/0x110 [ 3580.757124][ C0] ? futex_exit_release+0x60/0x60 [ 3580.762133][ C0] ? lock_downgrade+0x840/0x840 [ 3580.766975][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3580.771812][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.777777][ C0] ? __might_fault+0x190/0x1d0 [ 3580.782531][ C0] ? _copy_to_user+0x126/0x160 [ 3580.787302][ C0] __x64_sys_futex+0x376/0x4f0 [ 3580.792071][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3580.796557][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3580.801993][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.807966][ C0] ? do_syscall_64+0x21/0x7d0 [ 3580.812633][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.818595][ C0] do_syscall_64+0xf6/0x7d0 [ 3580.823081][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3580.828959][ C0] RIP: 0033:0x45ca69 [ 3580.832865][ C0] Code: Bad RIP value. [ 3580.836906][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3580.845302][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3580.853270][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3580.861231][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3580.869187][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3580.877161][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3580.885141][ C0] syz-executor.3 S29816 18944 7191 0x00000000 [ 3580.891469][ C0] Call Trace: [ 3580.894741][ C0] __schedule+0x8f3/0x1fc0 [ 3580.899135][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3580.904399][ C0] ? firmware_map_remove+0x19d/0x19d [ 3580.909676][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3580.915128][ C0] schedule+0xd0/0x2a0 [ 3580.919177][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3580.924265][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3580.929723][ C0] futex_wait+0x1e2/0x550 [ 3580.934045][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3580.939062][ C0] ? print_usage_bug+0x240/0x240 [ 3580.943989][ C0] ? hash_futex+0x10/0x200 [ 3580.948395][ C0] ? futex_wake+0x153/0x480 [ 3580.952897][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.958856][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3580.964831][ C0] do_futex+0x15f/0x1ad0 [ 3580.969085][ C0] ? find_held_lock+0x2d/0x110 [ 3580.973836][ C0] ? futex_exit_release+0x60/0x60 [ 3580.978841][ C0] ? lock_downgrade+0x840/0x840 [ 3580.983682][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3580.988534][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3580.994546][ C0] ? __might_fault+0x190/0x1d0 [ 3580.999302][ C0] ? _copy_to_user+0x126/0x160 [ 3581.004048][ C0] __x64_sys_futex+0x376/0x4f0 [ 3581.008809][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3581.013319][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3581.018775][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.024837][ C0] ? do_syscall_64+0x21/0x7d0 [ 3581.029513][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.035506][ C0] do_syscall_64+0xf6/0x7d0 [ 3581.040608][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3581.046502][ C0] RIP: 0033:0x45ca69 [ 3581.050407][ C0] Code: Bad RIP value. [ 3581.054459][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3581.062845][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3581.070801][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3581.078780][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3581.086740][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3581.094698][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3581.102672][ C0] syz-executor.0 S29824 18948 6809 0x00000000 [ 3581.108992][ C0] Call Trace: [ 3581.112275][ C0] __schedule+0x8f3/0x1fc0 [ 3581.116686][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3581.121951][ C0] ? firmware_map_remove+0x19d/0x19d [ 3581.127230][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3581.132692][ C0] schedule+0xd0/0x2a0 [ 3581.136785][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3581.141876][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3581.147338][ C0] futex_wait+0x1e2/0x550 [ 3581.151701][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3581.156705][ C0] ? print_usage_bug+0x240/0x240 [ 3581.161621][ C0] ? hash_futex+0x10/0x200 [ 3581.166033][ C0] ? futex_wake+0x153/0x480 [ 3581.170551][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.176533][ C0] ? mark_lock+0x11f/0xdd0 [ 3581.181011][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.186992][ C0] do_futex+0x15f/0x1ad0 [ 3581.191247][ C0] ? find_held_lock+0x2d/0x110 [ 3581.196018][ C0] ? futex_exit_release+0x60/0x60 [ 3581.201037][ C0] ? lock_downgrade+0x840/0x840 [ 3581.205883][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3581.210733][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.216728][ C0] ? __might_fault+0x190/0x1d0 [ 3581.221473][ C0] ? _copy_to_user+0x126/0x160 [ 3581.226241][ C0] __x64_sys_futex+0x376/0x4f0 [ 3581.231014][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3581.235512][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3581.240952][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.246921][ C0] ? do_syscall_64+0x21/0x7d0 [ 3581.251592][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.257557][ C0] do_syscall_64+0xf6/0x7d0 [ 3581.262073][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3581.267956][ C0] RIP: 0033:0x45ca69 [ 3581.271847][ C0] Code: Bad RIP value. [ 3581.275888][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3581.284279][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3581.292240][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3581.300199][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3581.308154][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3581.316150][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3581.324120][ C0] syz-executor.3 S29816 18997 7191 0x00000000 [ 3581.330438][ C0] Call Trace: [ 3581.333732][ C0] __schedule+0x8f3/0x1fc0 [ 3581.338128][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3581.343406][ C0] ? firmware_map_remove+0x19d/0x19d [ 3581.348684][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3581.354133][ C0] schedule+0xd0/0x2a0 [ 3581.358183][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3581.363281][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3581.368739][ C0] futex_wait+0x1e2/0x550 [ 3581.373072][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3581.378075][ C0] ? print_usage_bug+0x240/0x240 [ 3581.383000][ C0] ? hash_futex+0x10/0x200 [ 3581.387415][ C0] ? futex_wake+0x153/0x480 [ 3581.391924][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.397886][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.403844][ C0] do_futex+0x15f/0x1ad0 [ 3581.408089][ C0] ? find_held_lock+0x2d/0x110 [ 3581.412865][ C0] ? futex_exit_release+0x60/0x60 [ 3581.417872][ C0] ? lock_downgrade+0x840/0x840 [ 3581.422725][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3581.427589][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.433570][ C0] ? __might_fault+0x190/0x1d0 [ 3581.438315][ C0] ? _copy_to_user+0x126/0x160 [ 3581.443063][ C0] __x64_sys_futex+0x376/0x4f0 [ 3581.447826][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3581.452319][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3581.457756][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.463711][ C0] ? do_syscall_64+0x21/0x7d0 [ 3581.468378][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.474349][ C0] do_syscall_64+0xf6/0x7d0 [ 3581.478842][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3581.484720][ C0] RIP: 0033:0x45ca69 [ 3581.488619][ C0] Code: Bad RIP value. [ 3581.492769][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3581.501164][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3581.509123][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3581.517084][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3581.525047][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3581.533022][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3581.541005][ C0] syz-executor.3 S28904 19034 7191 0x00000000 [ 3581.547356][ C0] Call Trace: [ 3581.550651][ C0] __schedule+0x8f3/0x1fc0 [ 3581.555058][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3581.560336][ C0] ? firmware_map_remove+0x19d/0x19d [ 3581.565622][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3581.571089][ C0] schedule+0xd0/0x2a0 [ 3581.575150][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3581.580240][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3581.585688][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.591670][ C0] futex_wait+0x1e2/0x550 [ 3581.595982][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3581.601006][ C0] ? print_usage_bug+0x240/0x240 [ 3581.605937][ C0] ? hash_futex+0x10/0x200 [ 3581.610351][ C0] ? futex_wake+0x153/0x480 [ 3581.614890][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.620860][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3581.626657][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.632627][ C0] do_futex+0x15f/0x1ad0 [ 3581.636854][ C0] ? find_held_lock+0x2d/0x110 [ 3581.641594][ C0] ? futex_exit_release+0x60/0x60 [ 3581.646611][ C0] ? lock_downgrade+0x840/0x840 [ 3581.651466][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3581.656297][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.662259][ C0] ? __might_fault+0x190/0x1d0 [ 3581.667019][ C0] ? _copy_to_user+0x126/0x160 [ 3581.671801][ C0] __x64_sys_futex+0x376/0x4f0 [ 3581.676550][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3581.681042][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3581.686488][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.692468][ C0] ? do_syscall_64+0x21/0x7d0 [ 3581.697128][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.703097][ C0] do_syscall_64+0xf6/0x7d0 [ 3581.707595][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3581.713487][ C0] RIP: 0033:0x45ca69 [ 3581.717367][ C0] Code: Bad RIP value. [ 3581.721420][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3581.729902][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3581.737871][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3581.745828][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3581.753786][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3581.761731][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3581.769728][ C0] syz-executor.0 S29816 19128 6809 0x00000000 [ 3581.776070][ C0] Call Trace: [ 3581.779341][ C0] __schedule+0x8f3/0x1fc0 [ 3581.783734][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3581.789022][ C0] ? firmware_map_remove+0x19d/0x19d [ 3581.794310][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3581.799758][ C0] schedule+0xd0/0x2a0 [ 3581.803806][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3581.808908][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3581.814356][ C0] futex_wait+0x1e2/0x550 [ 3581.818666][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3581.823665][ C0] ? print_usage_bug+0x240/0x240 [ 3581.828594][ C0] ? hash_futex+0x10/0x200 [ 3581.833001][ C0] ? futex_wake+0x153/0x480 [ 3581.837490][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.843447][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3581.849418][ C0] do_futex+0x15f/0x1ad0 [ 3581.853655][ C0] ? find_held_lock+0x2d/0x110 [ 3581.858398][ C0] ? futex_exit_release+0x60/0x60 [ 3581.863398][ C0] ? lock_downgrade+0x840/0x840 [ 3581.868239][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3581.873077][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.879040][ C0] ? __might_fault+0x190/0x1d0 [ 3581.883780][ C0] ? _copy_to_user+0x126/0x160 [ 3581.888540][ C0] __x64_sys_futex+0x376/0x4f0 [ 3581.893294][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3581.897793][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3581.903236][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.909206][ C0] ? do_syscall_64+0x21/0x7d0 [ 3581.913870][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3581.919830][ C0] do_syscall_64+0xf6/0x7d0 [ 3581.924322][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3581.930203][ C0] RIP: 0033:0x45ca69 [ 3581.934093][ C0] Code: Bad RIP value. [ 3581.938136][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3581.946529][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3581.954496][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3581.962515][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3581.970476][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3581.978443][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3581.986434][ C0] syz-executor.0 S28904 19156 6809 0x00000000 [ 3581.992797][ C0] Call Trace: [ 3581.996068][ C0] __schedule+0x8f3/0x1fc0 [ 3582.000464][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3582.005743][ C0] ? firmware_map_remove+0x19d/0x19d [ 3582.011040][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3582.016489][ C0] schedule+0xd0/0x2a0 [ 3582.020547][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3582.025645][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3582.031100][ C0] ? find_held_lock+0x2d/0x110 [ 3582.035879][ C0] futex_wait+0x1e2/0x550 [ 3582.040189][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3582.045202][ C0] ? print_usage_bug+0x240/0x240 [ 3582.050139][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3582.055339][ C0] ? futex_wake+0x153/0x480 [ 3582.059864][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.065844][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.071828][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.077787][ C0] do_futex+0x15f/0x1ad0 [ 3582.082020][ C0] ? find_held_lock+0x2d/0x110 [ 3582.086775][ C0] ? futex_exit_release+0x60/0x60 [ 3582.091789][ C0] ? lock_downgrade+0x840/0x840 [ 3582.096619][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3582.101447][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.107428][ C0] ? __might_fault+0x190/0x1d0 [ 3582.112182][ C0] ? _copy_to_user+0x126/0x160 [ 3582.116941][ C0] __x64_sys_futex+0x376/0x4f0 [ 3582.121684][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3582.126180][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3582.131640][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.137609][ C0] ? do_syscall_64+0x21/0x7d0 [ 3582.142260][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.148232][ C0] do_syscall_64+0xf6/0x7d0 [ 3582.152726][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3582.158603][ C0] RIP: 0033:0x45ca69 [ 3582.162482][ C0] Code: Bad RIP value. [ 3582.166531][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3582.174934][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3582.182890][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3582.190845][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3582.198803][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3582.206757][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3582.214745][ C0] syz-executor.0 S29824 19172 6809 0x00000000 [ 3582.221051][ C0] Call Trace: [ 3582.224334][ C0] __schedule+0x8f3/0x1fc0 [ 3582.228741][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3582.234025][ C0] ? firmware_map_remove+0x19d/0x19d [ 3582.239290][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3582.244758][ C0] schedule+0xd0/0x2a0 [ 3582.248829][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3582.253929][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3582.259386][ C0] futex_wait+0x1e2/0x550 [ 3582.263694][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3582.268722][ C0] ? print_usage_bug+0x240/0x240 [ 3582.273699][ C0] ? hash_futex+0x10/0x200 [ 3582.278103][ C0] ? futex_wake+0x153/0x480 [ 3582.282599][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.288572][ C0] ? mark_lock+0x11f/0xdd0 [ 3582.293002][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.298967][ C0] do_futex+0x15f/0x1ad0 [ 3582.303193][ C0] ? find_held_lock+0x2d/0x110 [ 3582.307948][ C0] ? futex_exit_release+0x60/0x60 [ 3582.312961][ C0] ? lock_downgrade+0x840/0x840 [ 3582.317815][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3582.322658][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.328658][ C0] ? __might_fault+0x190/0x1d0 [ 3582.333424][ C0] ? _copy_to_user+0x126/0x160 [ 3582.338199][ C0] __x64_sys_futex+0x376/0x4f0 [ 3582.342957][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3582.347471][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3582.352916][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.358875][ C0] ? do_syscall_64+0x21/0x7d0 [ 3582.363529][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.369501][ C0] do_syscall_64+0xf6/0x7d0 [ 3582.373999][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3582.379869][ C0] RIP: 0033:0x45ca69 [ 3582.383745][ C0] Code: Bad RIP value. [ 3582.387793][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3582.396235][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3582.404192][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3582.412150][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3582.420107][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3582.428065][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3582.436037][ C0] syz-executor.0 S29824 19594 6809 0x00000000 [ 3582.442347][ C0] Call Trace: [ 3582.445635][ C0] __schedule+0x8f3/0x1fc0 [ 3582.450054][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3582.455332][ C0] ? firmware_map_remove+0x19d/0x19d [ 3582.460604][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3582.466056][ C0] schedule+0xd0/0x2a0 [ 3582.470129][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3582.475229][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3582.480664][ C0] ? find_held_lock+0x2d/0x110 [ 3582.485426][ C0] futex_wait+0x1e2/0x550 [ 3582.489759][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3582.494784][ C0] ? print_usage_bug+0x240/0x240 [ 3582.499759][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3582.504949][ C0] ? futex_wake+0x153/0x480 [ 3582.509467][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.515448][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.521429][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.527420][ C0] do_futex+0x15f/0x1ad0 [ 3582.531655][ C0] ? find_held_lock+0x2d/0x110 [ 3582.536400][ C0] ? futex_exit_release+0x60/0x60 [ 3582.541412][ C0] ? lock_downgrade+0x840/0x840 [ 3582.546272][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3582.551122][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.557116][ C0] ? __might_fault+0x190/0x1d0 [ 3582.561857][ C0] ? _copy_to_user+0x126/0x160 [ 3582.566619][ C0] __x64_sys_futex+0x376/0x4f0 [ 3582.571384][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3582.575866][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3582.581300][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.587274][ C0] ? do_syscall_64+0x21/0x7d0 [ 3582.591955][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.597922][ C0] do_syscall_64+0xf6/0x7d0 [ 3582.602403][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3582.608281][ C0] RIP: 0033:0x45ca69 [ 3582.612182][ C0] Code: Bad RIP value. [ 3582.616232][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3582.624625][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3582.632601][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3582.640569][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3582.648526][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3582.656486][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3582.664447][ C0] syz-executor.0 S26912 19598 6809 0x00000000 [ 3582.670762][ C0] Call Trace: [ 3582.674052][ C0] __schedule+0x8f3/0x1fc0 [ 3582.678454][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3582.683731][ C0] ? firmware_map_remove+0x19d/0x19d [ 3582.689014][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3582.694463][ C0] schedule+0xd0/0x2a0 [ 3582.698515][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3582.703652][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3582.709099][ C0] ? find_held_lock+0x2d/0x110 [ 3582.713869][ C0] futex_wait+0x1e2/0x550 [ 3582.718179][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3582.723182][ C0] ? print_usage_bug+0x240/0x240 [ 3582.728114][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3582.733399][ C0] ? futex_wake+0x153/0x480 [ 3582.737905][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.743885][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.749856][ C0] do_futex+0x15f/0x1ad0 [ 3582.754103][ C0] ? find_held_lock+0x2d/0x110 [ 3582.758858][ C0] ? futex_exit_release+0x60/0x60 [ 3582.763858][ C0] ? lock_downgrade+0x840/0x840 [ 3582.768700][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3582.773539][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.779514][ C0] ? __might_fault+0x190/0x1d0 [ 3582.784264][ C0] ? _copy_to_user+0x126/0x160 [ 3582.789034][ C0] __x64_sys_futex+0x376/0x4f0 [ 3582.793800][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3582.798296][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3582.803729][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.809697][ C0] ? do_syscall_64+0x21/0x7d0 [ 3582.814362][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3582.820334][ C0] do_syscall_64+0xf6/0x7d0 [ 3582.824831][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3582.830721][ C0] RIP: 0033:0x45ca69 [ 3582.834613][ C0] Code: Bad RIP value. [ 3582.838652][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3582.847045][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3582.855008][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3582.862962][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3582.870919][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3582.878877][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3582.886856][ C0] syz-executor.0 S28720 19702 6809 0x00000000 [ 3582.893184][ C0] Call Trace: [ 3582.896476][ C0] __schedule+0x8f3/0x1fc0 [ 3582.901391][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3582.906672][ C0] ? firmware_map_remove+0x19d/0x19d [ 3582.911967][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3582.917424][ C0] schedule+0xd0/0x2a0 [ 3582.921474][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3582.926574][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3582.932035][ C0] ? find_held_lock+0x2d/0x110 [ 3582.936800][ C0] futex_wait+0x1e2/0x550 [ 3582.941138][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3582.946151][ C0] ? print_usage_bug+0x240/0x240 [ 3582.951088][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3582.956291][ C0] ? futex_wake+0x153/0x480 [ 3582.960791][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.966756][ C0] ? page_fault+0x39/0x40 [ 3582.971086][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3582.977056][ C0] do_futex+0x15f/0x1ad0 [ 3582.981283][ C0] ? find_held_lock+0x2d/0x110 [ 3582.986038][ C0] ? futex_exit_release+0x60/0x60 [ 3582.991064][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3582.996522][ C0] ? lock_downgrade+0x840/0x840 [ 3583.001362][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3583.006214][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.012188][ C0] ? __might_fault+0x190/0x1d0 [ 3583.016944][ C0] ? _copy_to_user+0x126/0x160 [ 3583.021716][ C0] __x64_sys_futex+0x376/0x4f0 [ 3583.026494][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3583.031004][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3583.036449][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.042405][ C0] ? do_syscall_64+0x21/0x7d0 [ 3583.047072][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.053157][ C0] do_syscall_64+0xf6/0x7d0 [ 3583.057655][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3583.063542][ C0] RIP: 0033:0x45ca69 [ 3583.067431][ C0] Code: Bad RIP value. [ 3583.071490][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3583.079887][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3583.087843][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3583.095810][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3583.103778][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3583.111741][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3583.119714][ C0] syz-executor.0 S26912 19849 6809 0x00000000 [ 3583.126030][ C0] Call Trace: [ 3583.129325][ C0] __schedule+0x8f3/0x1fc0 [ 3583.133732][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3583.139005][ C0] ? firmware_map_remove+0x19d/0x19d [ 3583.144272][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3583.149726][ C0] schedule+0xd0/0x2a0 [ 3583.153814][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3583.158905][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3583.164343][ C0] futex_wait+0x1e2/0x550 [ 3583.168668][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3583.173698][ C0] ? print_usage_bug+0x240/0x240 [ 3583.178617][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3583.183795][ C0] ? hash_futex+0x10/0x200 [ 3583.188200][ C0] ? futex_wake+0x153/0x480 [ 3583.192712][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3583.198670][ C0] ? netdev_run_todo+0x50c/0x760 [ 3583.203586][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3583.209559][ C0] do_futex+0x15f/0x1ad0 [ 3583.213810][ C0] ? find_held_lock+0x2d/0x110 [ 3583.218575][ C0] ? futex_exit_release+0x60/0x60 [ 3583.223592][ C0] ? lock_downgrade+0x840/0x840 [ 3583.228434][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3583.233275][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.239247][ C0] ? __might_fault+0x190/0x1d0 [ 3583.243995][ C0] ? _copy_to_user+0x126/0x160 [ 3583.248766][ C0] __x64_sys_futex+0x376/0x4f0 [ 3583.253524][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3583.258056][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3583.263494][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.269471][ C0] ? do_syscall_64+0x21/0x7d0 [ 3583.274145][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.280142][ C0] do_syscall_64+0xf6/0x7d0 [ 3583.284642][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3583.290533][ C0] RIP: 0033:0x45ca69 [ 3583.294424][ C0] Code: Bad RIP value. [ 3583.298465][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3583.306859][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3583.314824][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3583.322774][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3583.330747][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3583.338707][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3583.346692][ C0] kvm-nx-lpage-re S29544 19851 2 0x80004000 [ 3583.353045][ C0] Call Trace: [ 3583.356320][ C0] __schedule+0x8f3/0x1fc0 [ 3583.360719][ C0] ? firmware_map_remove+0x19d/0x19d [ 3583.366014][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3583.371824][ C0] schedule+0xd0/0x2a0 [ 3583.375936][ C0] schedule_timeout+0x35c/0x850 [ 3583.380781][ C0] ? usleep_range+0x160/0x160 [ 3583.385470][ C0] ? kvm_nx_lpage_recovery_worker+0x56e/0x790 [ 3583.391526][ C0] ? __next_timer_interrupt+0x190/0x190 [ 3583.397057][ C0] ? finish_task_switch+0x147/0x750 [ 3583.402235][ C0] kvm_nx_lpage_recovery_worker+0x1d3/0x790 [ 3583.408125][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3583.413239][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3583.419028][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.425006][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3583.430038][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 3583.435223][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3583.440310][ C0] ? kvm_exit+0x80/0x80 [ 3583.444444][ C0] kthread+0x388/0x470 [ 3583.448502][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3583.454219][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3583.459917][ C0] ret_from_fork+0x24/0x30 [ 3583.464318][ C0] syz-executor.0 S29824 19922 6809 0x00000000 [ 3583.470630][ C0] Call Trace: [ 3583.473911][ C0] __schedule+0x8f3/0x1fc0 [ 3583.478307][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3583.483577][ C0] ? firmware_map_remove+0x19d/0x19d [ 3583.488856][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3583.494304][ C0] schedule+0xd0/0x2a0 [ 3583.498353][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3583.503443][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3583.508918][ C0] futex_wait+0x1e2/0x550 [ 3583.513242][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3583.518246][ C0] ? print_usage_bug+0x240/0x240 [ 3583.523160][ C0] ? hash_futex+0x10/0x200 [ 3583.527600][ C0] ? futex_wake+0x153/0x480 [ 3583.532105][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3583.538341][ C0] ? mark_lock+0x11f/0xdd0 [ 3583.542739][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3583.548714][ C0] do_futex+0x15f/0x1ad0 [ 3583.552970][ C0] ? find_held_lock+0x2d/0x110 [ 3583.557727][ C0] ? futex_exit_release+0x60/0x60 [ 3583.562918][ C0] ? lock_downgrade+0x840/0x840 [ 3583.567762][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3583.572622][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.578592][ C0] ? __might_fault+0x190/0x1d0 [ 3583.583353][ C0] ? _copy_to_user+0x126/0x160 [ 3583.588116][ C0] __x64_sys_futex+0x376/0x4f0 [ 3583.592887][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3583.597372][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3583.602807][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.608798][ C0] ? do_syscall_64+0x21/0x7d0 [ 3583.613465][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.619427][ C0] do_syscall_64+0xf6/0x7d0 [ 3583.623939][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3583.629816][ C0] RIP: 0033:0x45ca69 [ 3583.633728][ C0] Code: Bad RIP value. [ 3583.637786][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3583.646180][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3583.654158][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3583.662204][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3583.670162][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3583.678138][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3583.686119][ C0] syz-executor.0 S29736 19948 6809 0x00000000 [ 3583.692489][ C0] Call Trace: [ 3583.695761][ C0] __schedule+0x8f3/0x1fc0 [ 3583.700172][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3583.705452][ C0] ? firmware_map_remove+0x19d/0x19d [ 3583.710832][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3583.716285][ C0] schedule+0xd0/0x2a0 [ 3583.720340][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3583.725533][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3583.731009][ C0] futex_wait+0x1e2/0x550 [ 3583.735335][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3583.740344][ C0] ? print_usage_bug+0x240/0x240 [ 3583.745268][ C0] ? mark_lock+0x11f/0xdd0 [ 3583.749713][ C0] ? hash_futex+0x10/0x200 [ 3583.754120][ C0] ? futex_wake+0x153/0x480 [ 3583.758637][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3583.764612][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3583.770601][ C0] do_futex+0x15f/0x1ad0 [ 3583.774841][ C0] ? find_held_lock+0x2d/0x110 [ 3583.779621][ C0] ? futex_exit_release+0x60/0x60 [ 3583.784641][ C0] ? lock_downgrade+0x840/0x840 [ 3583.789495][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3583.794371][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.800371][ C0] ? __might_fault+0x190/0x1d0 [ 3583.805131][ C0] ? _copy_to_user+0x126/0x160 [ 3583.809904][ C0] __x64_sys_futex+0x376/0x4f0 [ 3583.814694][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3583.819232][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3583.824722][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.830712][ C0] ? do_syscall_64+0x21/0x7d0 [ 3583.835493][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3583.841480][ C0] do_syscall_64+0xf6/0x7d0 [ 3583.845979][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3583.851873][ C0] RIP: 0033:0x45ca69 [ 3583.855754][ C0] Code: Bad RIP value. [ 3583.859793][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3583.868214][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3583.876173][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3583.884120][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3583.892342][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3583.900303][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3583.908282][ C0] kworker/u4:0 I24768 20102 2 0x80004000 [ 3583.914740][ C0] Workqueue: 0x0 (bat_events) [ 3583.919693][ C0] Call Trace: [ 3583.922987][ C0] __schedule+0x8f3/0x1fc0 [ 3583.927484][ C0] ? worker_thread+0x240/0xe20 [ 3583.932256][ C0] ? firmware_map_remove+0x19d/0x19d [ 3583.937561][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3583.942564][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3583.947757][ C0] schedule+0xd0/0x2a0 [ 3583.951861][ C0] worker_thread+0x245/0xe20 [ 3583.956583][ C0] ? process_one_work+0x16a0/0x16a0 [ 3583.961865][ C0] kthread+0x388/0x470 [ 3583.965923][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3583.971647][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3583.977351][ C0] ret_from_fork+0x24/0x30 [ 3583.981764][ C0] syz-executor.0 S29824 20188 6809 0x00000000 [ 3583.988088][ C0] Call Trace: [ 3583.991369][ C0] __schedule+0x8f3/0x1fc0 [ 3583.995767][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3584.001033][ C0] ? firmware_map_remove+0x19d/0x19d [ 3584.006320][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3584.011797][ C0] schedule+0xd0/0x2a0 [ 3584.015849][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3584.020937][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3584.026396][ C0] futex_wait+0x1e2/0x550 [ 3584.030731][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3584.035762][ C0] ? print_usage_bug+0x240/0x240 [ 3584.040716][ C0] ? hash_futex+0x10/0x200 [ 3584.045126][ C0] ? futex_wake+0x153/0x480 [ 3584.049646][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.055733][ C0] ? mark_lock+0x11f/0xdd0 [ 3584.060288][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.066447][ C0] do_futex+0x15f/0x1ad0 [ 3584.070720][ C0] ? find_held_lock+0x2d/0x110 [ 3584.075512][ C0] ? futex_exit_release+0x60/0x60 [ 3584.080554][ C0] ? lock_downgrade+0x840/0x840 [ 3584.085398][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3584.090511][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.096486][ C0] ? __might_fault+0x190/0x1d0 [ 3584.101244][ C0] ? _copy_to_user+0x126/0x160 [ 3584.106011][ C0] __x64_sys_futex+0x376/0x4f0 [ 3584.110796][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3584.115292][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3584.120787][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.126762][ C0] ? do_syscall_64+0x21/0x7d0 [ 3584.131482][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.137468][ C0] do_syscall_64+0xf6/0x7d0 [ 3584.142074][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3584.147975][ C0] RIP: 0033:0x45ca69 [ 3584.151886][ C0] Code: Bad RIP value. [ 3584.155941][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3584.164327][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3584.172301][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3584.180281][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3584.188263][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3584.196239][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3584.204200][ C0] syz-executor.3 S29824 20288 7191 0x00000000 [ 3584.210520][ C0] Call Trace: [ 3584.213804][ C0] __schedule+0x8f3/0x1fc0 [ 3584.218216][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3584.223499][ C0] ? firmware_map_remove+0x19d/0x19d [ 3584.228797][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3584.234601][ C0] schedule+0xd0/0x2a0 [ 3584.238668][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3584.243756][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3584.249212][ C0] futex_wait+0x1e2/0x550 [ 3584.253534][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3584.258540][ C0] ? print_usage_bug+0x240/0x240 [ 3584.263477][ C0] ? hash_futex+0x10/0x200 [ 3584.267884][ C0] ? futex_wake+0x153/0x480 [ 3584.272399][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.278396][ C0] ? mark_lock+0x11f/0xdd0 [ 3584.282793][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.288768][ C0] do_futex+0x15f/0x1ad0 [ 3584.300142][ C0] ? find_held_lock+0x2d/0x110 [ 3584.304907][ C0] ? futex_exit_release+0x60/0x60 [ 3584.309935][ C0] ? lock_downgrade+0x840/0x840 [ 3584.314780][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3584.319718][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.325756][ C0] ? __might_fault+0x190/0x1d0 [ 3584.330526][ C0] ? _copy_to_user+0x126/0x160 [ 3584.335299][ C0] __x64_sys_futex+0x376/0x4f0 [ 3584.340046][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3584.344565][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3584.350367][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.356338][ C0] ? do_syscall_64+0x21/0x7d0 [ 3584.361011][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.367515][ C0] do_syscall_64+0xf6/0x7d0 [ 3584.372031][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3584.377930][ C0] RIP: 0033:0x45ca69 [ 3584.382512][ C0] Code: Bad RIP value. [ 3584.386563][ C0] RSP: 002b:00007f2c9c893cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3584.394967][ C0] RAX: ffffffffffffffda RBX: 000000000078c0e8 RCX: 000000000045ca69 [ 3584.402931][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c0e8 [ 3584.410887][ C0] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 3584.418846][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c0ec [ 3584.426804][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8949c0 R15: 000000000078c0ec [ 3584.434978][ C0] syz-executor.3 S29824 20306 7191 0x00000000 [ 3584.441288][ C0] Call Trace: [ 3584.444574][ C0] __schedule+0x8f3/0x1fc0 [ 3584.449024][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3584.454304][ C0] ? firmware_map_remove+0x19d/0x19d [ 3584.459573][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3584.465028][ C0] schedule+0xd0/0x2a0 [ 3584.469187][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3584.474312][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3584.479773][ C0] futex_wait+0x1e2/0x550 [ 3584.484256][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3584.489269][ C0] ? print_usage_bug+0x240/0x240 [ 3584.494213][ C0] ? hash_futex+0x10/0x200 [ 3584.498622][ C0] ? futex_wake+0x153/0x480 [ 3584.503127][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.509549][ C0] ? mark_lock+0x11f/0xdd0 [ 3584.513975][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.520384][ C0] do_futex+0x15f/0x1ad0 [ 3584.524631][ C0] ? find_held_lock+0x2d/0x110 [ 3584.529402][ C0] ? futex_exit_release+0x60/0x60 [ 3584.534437][ C0] ? lock_downgrade+0x840/0x840 [ 3584.539286][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3584.544114][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.550095][ C0] ? __might_fault+0x190/0x1d0 [ 3584.554870][ C0] ? _copy_to_user+0x126/0x160 [ 3584.559635][ C0] __x64_sys_futex+0x376/0x4f0 [ 3584.564381][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3584.568878][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3584.574325][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.581067][ C0] ? do_syscall_64+0x21/0x7d0 [ 3584.585741][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.591733][ C0] do_syscall_64+0xf6/0x7d0 [ 3584.596245][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3584.602115][ C0] RIP: 0033:0x45ca69 [ 3584.606025][ C0] Code: Bad RIP value. [ 3584.610091][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3584.618513][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3584.626472][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3584.634439][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3584.642404][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3584.650368][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3584.658346][ C0] syz-executor.3 S29824 20312 7191 0x00000000 [ 3584.664687][ C0] Call Trace: [ 3584.668003][ C0] __schedule+0x8f3/0x1fc0 [ 3584.672411][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3584.677679][ C0] ? firmware_map_remove+0x19d/0x19d [ 3584.682943][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3584.688396][ C0] schedule+0xd0/0x2a0 [ 3584.692458][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3584.697570][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3584.703013][ C0] futex_wait+0x1e2/0x550 [ 3584.707342][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3584.712361][ C0] ? print_usage_bug+0x240/0x240 [ 3584.717285][ C0] ? hash_futex+0x10/0x200 [ 3584.721679][ C0] ? futex_wake+0x153/0x480 [ 3584.726190][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.732157][ C0] ? mark_lock+0x11f/0xdd0 [ 3584.736568][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.742531][ C0] do_futex+0x15f/0x1ad0 [ 3584.746775][ C0] ? find_held_lock+0x2d/0x110 [ 3584.751645][ C0] ? futex_exit_release+0x60/0x60 [ 3584.756651][ C0] ? lock_downgrade+0x840/0x840 [ 3584.761494][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3584.766337][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.772329][ C0] ? __might_fault+0x190/0x1d0 [ 3584.777073][ C0] ? _copy_to_user+0x126/0x160 [ 3584.781817][ C0] __x64_sys_futex+0x376/0x4f0 [ 3584.786605][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3584.791115][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3584.796579][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.802586][ C0] ? do_syscall_64+0x21/0x7d0 [ 3584.807262][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3584.813249][ C0] do_syscall_64+0xf6/0x7d0 [ 3584.817820][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3584.823688][ C0] RIP: 0033:0x45ca69 [ 3584.827583][ C0] Code: Bad RIP value. [ 3584.831676][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3584.840088][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3584.848511][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3584.856484][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3584.864463][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3584.872411][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3584.880405][ C0] syz-executor.3 S29824 20325 7191 0x00000000 [ 3584.886723][ C0] Call Trace: [ 3584.890032][ C0] __schedule+0x8f3/0x1fc0 [ 3584.894470][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3584.899767][ C0] ? firmware_map_remove+0x19d/0x19d [ 3584.905048][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3584.910596][ C0] schedule+0xd0/0x2a0 [ 3584.914687][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3584.919787][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3584.925233][ C0] ? find_held_lock+0x2d/0x110 [ 3584.930004][ C0] futex_wait+0x1e2/0x550 [ 3584.934326][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3584.939333][ C0] ? print_usage_bug+0x240/0x240 [ 3584.944336][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3584.949546][ C0] ? futex_wake+0x153/0x480 [ 3584.954048][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.960003][ C0] ? mark_lock+0x11f/0xdd0 [ 3584.964395][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3584.970366][ C0] do_futex+0x15f/0x1ad0 [ 3584.974620][ C0] ? find_held_lock+0x2d/0x110 [ 3584.979981][ C0] ? futex_exit_release+0x60/0x60 [ 3584.984998][ C0] ? lock_downgrade+0x840/0x840 [ 3584.989866][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3584.994705][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.000668][ C0] ? __might_fault+0x190/0x1d0 [ 3585.005423][ C0] ? _copy_to_user+0x126/0x160 [ 3585.010221][ C0] __x64_sys_futex+0x376/0x4f0 [ 3585.015027][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3585.019527][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3585.024975][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.030980][ C0] ? do_syscall_64+0x21/0x7d0 [ 3585.035650][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.041624][ C0] do_syscall_64+0xf6/0x7d0 [ 3585.046123][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3585.052018][ C0] RIP: 0033:0x45ca69 [ 3585.055955][ C0] Code: Bad RIP value. [ 3585.059997][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3585.068412][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3585.076370][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3585.084315][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3585.092261][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3585.100215][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3585.108203][ C0] syz-executor.3 S29824 20355 7191 0x00000000 [ 3585.114534][ C0] Call Trace: [ 3585.117831][ C0] __schedule+0x8f3/0x1fc0 [ 3585.122226][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3585.127510][ C0] ? firmware_map_remove+0x19d/0x19d [ 3585.132786][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3585.138265][ C0] schedule+0xd0/0x2a0 [ 3585.142344][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3585.147451][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3585.152935][ C0] ? find_held_lock+0x2d/0x110 [ 3585.157681][ C0] futex_wait+0x1e2/0x550 [ 3585.162004][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3585.167037][ C0] ? print_usage_bug+0x240/0x240 [ 3585.171965][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3585.177167][ C0] ? futex_wake+0x153/0x480 [ 3585.181666][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.187631][ C0] ? mark_lock+0x11f/0xdd0 [ 3585.192036][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.197995][ C0] do_futex+0x15f/0x1ad0 [ 3585.202219][ C0] ? find_held_lock+0x2d/0x110 [ 3585.206974][ C0] ? futex_exit_release+0x60/0x60 [ 3585.211996][ C0] ? lock_downgrade+0x840/0x840 [ 3585.216846][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3585.221686][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.227669][ C0] ? __might_fault+0x190/0x1d0 [ 3585.232423][ C0] ? _copy_to_user+0x126/0x160 [ 3585.237174][ C0] __x64_sys_futex+0x376/0x4f0 [ 3585.241960][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3585.246459][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3585.251921][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.257924][ C0] ? do_syscall_64+0x21/0x7d0 [ 3585.262589][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.268570][ C0] do_syscall_64+0xf6/0x7d0 [ 3585.273078][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3585.278957][ C0] RIP: 0033:0x45ca69 [ 3585.282835][ C0] Code: Bad RIP value. [ 3585.286883][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3585.295296][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3585.303243][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3585.311199][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3585.319175][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3585.327131][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3585.335102][ C0] syz-executor.0 S29824 20371 6809 0x00000000 [ 3585.341427][ C0] Call Trace: [ 3585.344712][ C0] __schedule+0x8f3/0x1fc0 [ 3585.349128][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3585.354419][ C0] ? firmware_map_remove+0x19d/0x19d [ 3585.359685][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3585.365137][ C0] schedule+0xd0/0x2a0 [ 3585.369215][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3585.374326][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3585.379783][ C0] futex_wait+0x1e2/0x550 [ 3585.384092][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3585.389121][ C0] ? print_usage_bug+0x240/0x240 [ 3585.394059][ C0] ? hash_futex+0x10/0x200 [ 3585.398463][ C0] ? futex_wake+0x153/0x480 [ 3585.402959][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.408927][ C0] ? mark_lock+0x11f/0xdd0 [ 3585.413347][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.419353][ C0] do_futex+0x15f/0x1ad0 [ 3585.423586][ C0] ? find_held_lock+0x2d/0x110 [ 3585.428346][ C0] ? futex_exit_release+0x60/0x60 [ 3585.433392][ C0] ? lock_downgrade+0x840/0x840 [ 3585.438223][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3585.443048][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.449032][ C0] ? __might_fault+0x190/0x1d0 [ 3585.453790][ C0] ? _copy_to_user+0x126/0x160 [ 3585.458579][ C0] __x64_sys_futex+0x376/0x4f0 [ 3585.463481][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3585.467986][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3585.473443][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.479411][ C0] ? do_syscall_64+0x21/0x7d0 [ 3585.484061][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.490033][ C0] do_syscall_64+0xf6/0x7d0 [ 3585.494540][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3585.500451][ C0] RIP: 0033:0x45ca69 [ 3585.504329][ C0] Code: Bad RIP value. [ 3585.508377][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3585.516777][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3585.524740][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3585.532701][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3585.540648][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3585.548603][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3585.556613][ C0] syz-executor.0 S29824 20407 6809 0x00000000 [ 3585.562923][ C0] Call Trace: [ 3585.566211][ C0] __schedule+0x8f3/0x1fc0 [ 3585.570629][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3585.575922][ C0] ? firmware_map_remove+0x19d/0x19d [ 3585.581218][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3585.586671][ C0] schedule+0xd0/0x2a0 [ 3585.590741][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3585.595854][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3585.601303][ C0] ? find_held_lock+0x2d/0x110 [ 3585.606066][ C0] futex_wait+0x1e2/0x550 [ 3585.610403][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3585.615414][ C0] ? print_usage_bug+0x240/0x240 [ 3585.620330][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3585.625518][ C0] ? futex_wake+0x153/0x480 [ 3585.630042][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.636031][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.641989][ C0] do_futex+0x15f/0x1ad0 [ 3585.646233][ C0] ? find_held_lock+0x2d/0x110 [ 3585.650997][ C0] ? futex_exit_release+0x60/0x60 [ 3585.656016][ C0] ? lock_downgrade+0x840/0x840 [ 3585.660858][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3585.665716][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.671689][ C0] ? __might_fault+0x190/0x1d0 [ 3585.676440][ C0] ? _copy_to_user+0x126/0x160 [ 3585.681193][ C0] __x64_sys_futex+0x376/0x4f0 [ 3585.685956][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3585.690461][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3585.695907][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.701863][ C0] ? do_syscall_64+0x21/0x7d0 [ 3585.706528][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.712522][ C0] do_syscall_64+0xf6/0x7d0 [ 3585.717025][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3585.722893][ C0] RIP: 0033:0x45ca69 [ 3585.726805][ C0] Code: Bad RIP value. [ 3585.730865][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3585.739265][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3585.747225][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3585.755195][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3585.763149][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3585.771108][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3585.779087][ C0] syz-executor.0 S29336 20451 6809 0x00000000 [ 3585.785407][ C0] Call Trace: [ 3585.788703][ C0] __schedule+0x8f3/0x1fc0 [ 3585.793126][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3585.798404][ C0] ? firmware_map_remove+0x19d/0x19d [ 3585.803670][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3585.809123][ C0] schedule+0xd0/0x2a0 [ 3585.813192][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3585.818284][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3585.823726][ C0] futex_wait+0x1e2/0x550 [ 3585.828065][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3585.833081][ C0] ? print_usage_bug+0x240/0x240 [ 3585.838000][ C0] ? hash_futex+0x10/0x200 [ 3585.842393][ C0] ? futex_wake+0x153/0x480 [ 3585.846905][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.852889][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3585.858848][ C0] do_futex+0x15f/0x1ad0 [ 3585.863081][ C0] ? find_held_lock+0x2d/0x110 [ 3585.867837][ C0] ? futex_exit_release+0x60/0x60 [ 3585.872866][ C0] ? lock_downgrade+0x840/0x840 [ 3585.877696][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3585.882535][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.888517][ C0] ? __might_fault+0x190/0x1d0 [ 3585.893270][ C0] ? _copy_to_user+0x126/0x160 [ 3585.898019][ C0] __x64_sys_futex+0x376/0x4f0 [ 3585.902766][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3585.907269][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3585.912748][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.918730][ C0] ? do_syscall_64+0x21/0x7d0 [ 3585.923406][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3585.929382][ C0] do_syscall_64+0xf6/0x7d0 [ 3585.933877][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3585.939745][ C0] RIP: 0033:0x45ca69 [ 3585.943624][ C0] Code: Bad RIP value. [ 3585.947673][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3585.956081][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3585.964039][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3585.972002][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3585.979952][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3585.987908][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3585.995893][ C0] syz-executor.0 S29824 20555 6809 0x00000000 [ 3586.002203][ C0] Call Trace: [ 3586.005491][ C0] __schedule+0x8f3/0x1fc0 [ 3586.009909][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3586.017546][ C0] ? firmware_map_remove+0x19d/0x19d [ 3586.022811][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3586.028264][ C0] schedule+0xd0/0x2a0 [ 3586.032339][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3586.037430][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3586.042874][ C0] ? find_held_lock+0x2d/0x110 [ 3586.047648][ C0] futex_wait+0x1e2/0x550 [ 3586.051969][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3586.056984][ C0] ? print_usage_bug+0x240/0x240 [ 3586.061912][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3586.067099][ C0] ? futex_wake+0x153/0x480 [ 3586.071599][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.077566][ C0] ? mark_lock+0x11f/0xdd0 [ 3586.081959][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.087948][ C0] do_futex+0x15f/0x1ad0 [ 3586.092186][ C0] ? find_held_lock+0x2d/0x110 [ 3586.096942][ C0] ? futex_exit_release+0x60/0x60 [ 3586.101945][ C0] ? lock_downgrade+0x840/0x840 [ 3586.106784][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3586.111620][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.117593][ C0] ? __might_fault+0x190/0x1d0 [ 3586.122344][ C0] ? _copy_to_user+0x126/0x160 [ 3586.127117][ C0] __x64_sys_futex+0x376/0x4f0 [ 3586.131891][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3586.136402][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3586.141859][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.147893][ C0] ? do_syscall_64+0x21/0x7d0 [ 3586.152610][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.158618][ C0] do_syscall_64+0xf6/0x7d0 [ 3586.163102][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3586.168979][ C0] RIP: 0033:0x45ca69 [ 3586.172879][ C0] Code: Bad RIP value. [ 3586.176924][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3586.185319][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3586.193318][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3586.201267][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3586.209223][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3586.217191][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3586.225184][ C0] syz-executor.0 S28904 20564 6809 0x00000000 [ 3586.231528][ C0] Call Trace: [ 3586.234817][ C0] __schedule+0x8f3/0x1fc0 [ 3586.239227][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3586.244502][ C0] ? firmware_map_remove+0x19d/0x19d [ 3586.249811][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3586.255279][ C0] schedule+0xd0/0x2a0 [ 3586.259363][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3586.264463][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3586.269918][ C0] futex_wait+0x1e2/0x550 [ 3586.274241][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3586.279267][ C0] ? print_usage_bug+0x240/0x240 [ 3586.284185][ C0] ? hash_futex+0x10/0x200 [ 3586.288595][ C0] ? futex_wake+0x153/0x480 [ 3586.293096][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.299051][ C0] ? mark_lock+0x11f/0xdd0 [ 3586.303444][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.309415][ C0] do_futex+0x15f/0x1ad0 [ 3586.313652][ C0] ? find_held_lock+0x2d/0x110 [ 3586.318436][ C0] ? futex_exit_release+0x60/0x60 [ 3586.323437][ C0] ? lock_downgrade+0x840/0x840 [ 3586.328280][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3586.333116][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.339086][ C0] ? __might_fault+0x190/0x1d0 [ 3586.343825][ C0] ? _copy_to_user+0x126/0x160 [ 3586.348595][ C0] __x64_sys_futex+0x376/0x4f0 [ 3586.353369][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3586.357862][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3586.363306][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.369277][ C0] ? do_syscall_64+0x21/0x7d0 [ 3586.373940][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.379923][ C0] do_syscall_64+0xf6/0x7d0 [ 3586.384419][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3586.390313][ C0] RIP: 0033:0x45ca69 [ 3586.394207][ C0] Code: Bad RIP value. [ 3586.398264][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3586.406680][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3586.414654][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3586.422615][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3586.430575][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3586.438542][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3586.446524][ C0] syz-executor.3 S29824 20658 7191 0x00000000 [ 3586.452872][ C0] Call Trace: [ 3586.456159][ C0] __schedule+0x8f3/0x1fc0 [ 3586.460585][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3586.465868][ C0] ? firmware_map_remove+0x19d/0x19d [ 3586.471157][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3586.476608][ C0] schedule+0xd0/0x2a0 [ 3586.480660][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3586.485769][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3586.491230][ C0] ? find_held_lock+0x2d/0x110 [ 3586.496010][ C0] futex_wait+0x1e2/0x550 [ 3586.500321][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3586.505337][ C0] ? print_usage_bug+0x240/0x240 [ 3586.510279][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3586.515490][ C0] ? futex_wake+0x153/0x480 [ 3586.519977][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.525949][ C0] ? mark_lock+0x11f/0xdd0 [ 3586.530369][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.536341][ C0] do_futex+0x15f/0x1ad0 [ 3586.540582][ C0] ? find_held_lock+0x2d/0x110 [ 3586.545337][ C0] ? futex_exit_release+0x60/0x60 [ 3586.550365][ C0] ? lock_downgrade+0x840/0x840 [ 3586.555204][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3586.560032][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.566019][ C0] ? __might_fault+0x190/0x1d0 [ 3586.570788][ C0] ? _copy_to_user+0x126/0x160 [ 3586.575547][ C0] __x64_sys_futex+0x376/0x4f0 [ 3586.580300][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3586.584798][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3586.590256][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.596226][ C0] ? do_syscall_64+0x21/0x7d0 [ 3586.600881][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.606856][ C0] do_syscall_64+0xf6/0x7d0 [ 3586.611350][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3586.617216][ C0] RIP: 0033:0x45ca69 [ 3586.621096][ C0] Code: Bad RIP value. [ 3586.625145][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3586.633555][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3586.641515][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3586.649471][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3586.657430][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3586.665405][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3586.673387][ C0] syz-executor.3 S29824 20705 7191 0x00000000 [ 3586.679700][ C0] Call Trace: [ 3586.682971][ C0] __schedule+0x8f3/0x1fc0 [ 3586.687381][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3586.692662][ C0] ? firmware_map_remove+0x19d/0x19d [ 3586.697951][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3586.703389][ C0] schedule+0xd0/0x2a0 [ 3586.707464][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3586.712567][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3586.718013][ C0] futex_wait+0x1e2/0x550 [ 3586.722325][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3586.727342][ C0] ? print_usage_bug+0x240/0x240 [ 3586.732269][ C0] ? hash_futex+0x10/0x200 [ 3586.736668][ C0] ? futex_wake+0x153/0x480 [ 3586.741172][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.747142][ C0] ? do_wp_page+0x512/0x1440 [ 3586.751721][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.757680][ C0] do_futex+0x15f/0x1ad0 [ 3586.761917][ C0] ? find_held_lock+0x2d/0x110 [ 3586.766673][ C0] ? futex_exit_release+0x60/0x60 [ 3586.771712][ C0] ? lock_downgrade+0x840/0x840 [ 3586.776554][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3586.781381][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.787364][ C0] ? __might_fault+0x190/0x1d0 [ 3586.792129][ C0] ? _copy_to_user+0x126/0x160 [ 3586.796891][ C0] __x64_sys_futex+0x376/0x4f0 [ 3586.801646][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3586.806145][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3586.811618][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.817601][ C0] ? do_syscall_64+0x21/0x7d0 [ 3586.822256][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3586.828230][ C0] do_syscall_64+0xf6/0x7d0 [ 3586.832725][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3586.838610][ C0] RIP: 0033:0x45ca69 [ 3586.842491][ C0] Code: Bad RIP value. [ 3586.846541][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3586.854939][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3586.863407][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3586.871354][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3586.879301][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3586.887265][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3586.895258][ C0] syz-executor.0 S29824 20708 6809 0x00000000 [ 3586.901600][ C0] Call Trace: [ 3586.904888][ C0] __schedule+0x8f3/0x1fc0 [ 3586.909307][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3586.914597][ C0] ? firmware_map_remove+0x19d/0x19d [ 3586.919895][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3586.925367][ C0] schedule+0xd0/0x2a0 [ 3586.929453][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3586.934566][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3586.940113][ C0] ? find_held_lock+0x2d/0x110 [ 3586.944873][ C0] futex_wait+0x1e2/0x550 [ 3586.949220][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3586.954266][ C0] ? print_usage_bug+0x240/0x240 [ 3586.959191][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3586.964387][ C0] ? futex_wake+0x153/0x480 [ 3586.968914][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.974885][ C0] ? do_wp_page+0x512/0x1440 [ 3586.979454][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3586.985445][ C0] do_futex+0x15f/0x1ad0 [ 3586.989702][ C0] ? find_held_lock+0x2d/0x110 [ 3586.994454][ C0] ? futex_exit_release+0x60/0x60 [ 3586.999470][ C0] ? lock_downgrade+0x840/0x840 [ 3587.004300][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3587.009140][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.015130][ C0] ? __might_fault+0x190/0x1d0 [ 3587.019883][ C0] ? _copy_to_user+0x126/0x160 [ 3587.024645][ C0] __x64_sys_futex+0x376/0x4f0 [ 3587.029418][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3587.033923][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3587.039358][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.045329][ C0] ? do_syscall_64+0x21/0x7d0 [ 3587.050006][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.055998][ C0] do_syscall_64+0xf6/0x7d0 [ 3587.060503][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3587.066387][ C0] RIP: 0033:0x45ca69 [ 3587.070286][ C0] Code: Bad RIP value. [ 3587.074336][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3587.082728][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3587.090687][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3587.098658][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3587.106616][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3587.114583][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3587.122554][ C0] syz-executor.0 S29824 20714 6809 0x00000000 [ 3587.128874][ C0] Call Trace: [ 3587.132160][ C0] __schedule+0x8f3/0x1fc0 [ 3587.136561][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3587.141904][ C0] ? firmware_map_remove+0x19d/0x19d [ 3587.147188][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3587.152674][ C0] schedule+0xd0/0x2a0 [ 3587.156815][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3587.161903][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3587.167364][ C0] futex_wait+0x1e2/0x550 [ 3587.171685][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3587.176701][ C0] ? print_usage_bug+0x240/0x240 [ 3587.181649][ C0] ? hash_futex+0x10/0x200 [ 3587.186071][ C0] ? futex_wake+0x153/0x480 [ 3587.190594][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.196562][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3587.202345][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.208334][ C0] do_futex+0x15f/0x1ad0 [ 3587.212587][ C0] ? find_held_lock+0x2d/0x110 [ 3587.217330][ C0] ? futex_exit_release+0x60/0x60 [ 3587.222359][ C0] ? lock_downgrade+0x840/0x840 [ 3587.227202][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3587.232056][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.238033][ C0] ? __might_fault+0x190/0x1d0 [ 3587.242804][ C0] ? _copy_to_user+0x126/0x160 [ 3587.247566][ C0] __x64_sys_futex+0x376/0x4f0 [ 3587.252336][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3587.256845][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3587.262292][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.268265][ C0] ? do_syscall_64+0x21/0x7d0 [ 3587.272932][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.278902][ C0] do_syscall_64+0xf6/0x7d0 [ 3587.283387][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3587.289263][ C0] RIP: 0033:0x45ca69 [ 3587.293169][ C0] Code: Bad RIP value. [ 3587.297210][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3587.305603][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3587.313573][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3587.321522][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3587.329479][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3587.337438][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3587.345419][ C0] syz-executor.3 S29824 20746 7191 0x00000000 [ 3587.351746][ C0] Call Trace: [ 3587.355035][ C0] __schedule+0x8f3/0x1fc0 [ 3587.359456][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3587.364739][ C0] ? firmware_map_remove+0x19d/0x19d [ 3587.370031][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3587.375500][ C0] schedule+0xd0/0x2a0 [ 3587.379562][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3587.384678][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3587.390183][ C0] futex_wait+0x1e2/0x550 [ 3587.394581][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3587.399604][ C0] ? print_usage_bug+0x240/0x240 [ 3587.404577][ C0] ? hash_futex+0x10/0x200 [ 3587.409024][ C0] ? futex_wake+0x153/0x480 [ 3587.413527][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.419501][ C0] ? do_wp_page+0x512/0x1440 [ 3587.424083][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.430058][ C0] do_futex+0x15f/0x1ad0 [ 3587.434296][ C0] ? find_held_lock+0x2d/0x110 [ 3587.439055][ C0] ? futex_exit_release+0x60/0x60 [ 3587.444057][ C0] ? lock_downgrade+0x840/0x840 [ 3587.448899][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3587.453751][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.459727][ C0] ? __might_fault+0x190/0x1d0 [ 3587.464469][ C0] ? _copy_to_user+0x126/0x160 [ 3587.469234][ C0] __x64_sys_futex+0x376/0x4f0 [ 3587.473994][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3587.478494][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3587.483932][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.489921][ C0] ? do_syscall_64+0x21/0x7d0 [ 3587.494599][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.500573][ C0] do_syscall_64+0xf6/0x7d0 [ 3587.505071][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3587.510974][ C0] RIP: 0033:0x45ca69 [ 3587.514869][ C0] Code: Bad RIP value. [ 3587.518921][ C0] RSP: 002b:00007f2c9c893cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3587.527329][ C0] RAX: ffffffffffffffda RBX: 000000000078c0e8 RCX: 000000000045ca69 [ 3587.535288][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c0e8 [ 3587.543232][ C0] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 3587.551185][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c0ec [ 3587.559142][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8949c0 R15: 000000000078c0ec [ 3587.567118][ C0] syz-executor.0 S29824 20749 6809 0x00000000 [ 3587.573458][ C0] Call Trace: [ 3587.576747][ C0] __schedule+0x8f3/0x1fc0 [ 3587.581169][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3587.586452][ C0] ? firmware_map_remove+0x19d/0x19d [ 3587.591746][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3587.597193][ C0] schedule+0xd0/0x2a0 [ 3587.601242][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3587.606343][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3587.611794][ C0] futex_wait+0x1e2/0x550 [ 3587.616108][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3587.621123][ C0] ? print_usage_bug+0x240/0x240 [ 3587.626082][ C0] ? hash_futex+0x10/0x200 [ 3587.630520][ C0] ? futex_wake+0x153/0x480 [ 3587.635027][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.641073][ C0] ? mark_lock+0x11f/0xdd0 [ 3587.645531][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.651527][ C0] do_futex+0x15f/0x1ad0 [ 3587.655786][ C0] ? find_held_lock+0x2d/0x110 [ 3587.660562][ C0] ? futex_exit_release+0x60/0x60 [ 3587.665603][ C0] ? lock_downgrade+0x840/0x840 [ 3587.670457][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3587.675296][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.681257][ C0] ? __might_fault+0x190/0x1d0 [ 3587.686022][ C0] ? _copy_to_user+0x126/0x160 [ 3587.690798][ C0] __x64_sys_futex+0x376/0x4f0 [ 3587.695567][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3587.700050][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3587.705494][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.711463][ C0] ? do_syscall_64+0x21/0x7d0 [ 3587.716115][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.722085][ C0] do_syscall_64+0xf6/0x7d0 [ 3587.726586][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3587.732468][ C0] RIP: 0033:0x45ca69 [ 3587.736355][ C0] Code: Bad RIP value. [ 3587.740431][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3587.748827][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3587.756788][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3587.764744][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3587.772705][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3587.780665][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3587.788645][ C0] syz-executor.0 S29824 20800 6809 0x00000000 [ 3587.794979][ C0] Call Trace: [ 3587.798277][ C0] __schedule+0x8f3/0x1fc0 [ 3587.802677][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3587.807980][ C0] ? firmware_map_remove+0x19d/0x19d [ 3587.813264][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3587.818704][ C0] schedule+0xd0/0x2a0 [ 3587.822760][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3587.827863][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3587.833323][ C0] ? find_held_lock+0x2d/0x110 [ 3587.838070][ C0] futex_wait+0x1e2/0x550 [ 3587.842379][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3587.847399][ C0] ? print_usage_bug+0x240/0x240 [ 3587.852328][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3587.857524][ C0] ? futex_wake+0x153/0x480 [ 3587.862036][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.868007][ C0] ? mark_lock+0x11f/0xdd0 [ 3587.872411][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3587.878370][ C0] do_futex+0x15f/0x1ad0 [ 3587.882593][ C0] ? find_held_lock+0x2d/0x110 [ 3587.887355][ C0] ? futex_exit_release+0x60/0x60 [ 3587.892386][ C0] ? lock_downgrade+0x840/0x840 [ 3587.897226][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3587.902097][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.908083][ C0] ? __might_fault+0x190/0x1d0 [ 3587.912867][ C0] ? _copy_to_user+0x126/0x160 [ 3587.917623][ C0] __x64_sys_futex+0x376/0x4f0 [ 3587.922364][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3587.926865][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3587.932313][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.938270][ C0] ? do_syscall_64+0x21/0x7d0 [ 3587.942955][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3587.948929][ C0] do_syscall_64+0xf6/0x7d0 [ 3587.953425][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3587.959291][ C0] RIP: 0033:0x45ca69 [ 3587.963169][ C0] Code: Bad RIP value. [ 3587.967216][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3587.975628][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3587.983585][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3587.991547][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3587.999496][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3588.007453][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3588.015442][ C0] syz-executor.3 S29824 20901 7191 0x00000000 [ 3588.021776][ C0] Call Trace: [ 3588.025064][ C0] __schedule+0x8f3/0x1fc0 [ 3588.029479][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3588.034755][ C0] ? firmware_map_remove+0x19d/0x19d [ 3588.040029][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3588.045498][ C0] schedule+0xd0/0x2a0 [ 3588.049587][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3588.054716][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3588.060159][ C0] ? find_held_lock+0x2d/0x110 [ 3588.064918][ C0] futex_wait+0x1e2/0x550 [ 3588.069253][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3588.074270][ C0] ? print_usage_bug+0x240/0x240 [ 3588.079189][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3588.084405][ C0] ? futex_wake+0x153/0x480 [ 3588.088916][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.094887][ C0] ? mark_lock+0x11f/0xdd0 [ 3588.099283][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.105259][ C0] do_futex+0x15f/0x1ad0 [ 3588.109516][ C0] ? find_held_lock+0x2d/0x110 [ 3588.114307][ C0] ? futex_exit_release+0x60/0x60 [ 3588.119322][ C0] ? lock_downgrade+0x840/0x840 [ 3588.124150][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3588.128996][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.134993][ C0] ? __might_fault+0x190/0x1d0 [ 3588.139749][ C0] ? _copy_to_user+0x126/0x160 [ 3588.144497][ C0] __x64_sys_futex+0x376/0x4f0 [ 3588.149281][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3588.153794][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3588.159247][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.165221][ C0] ? do_syscall_64+0x21/0x7d0 [ 3588.169936][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.175910][ C0] do_syscall_64+0xf6/0x7d0 [ 3588.180397][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3588.186278][ C0] RIP: 0033:0x45ca69 [ 3588.190183][ C0] Code: Bad RIP value. [ 3588.194234][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3588.202621][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3588.210577][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3588.218546][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3588.226514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3588.234478][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3588.242443][ C0] syz-executor.0 S27520 20902 6809 0x00000000 [ 3588.248763][ C0] Call Trace: [ 3588.252047][ C0] __schedule+0x8f3/0x1fc0 [ 3588.256444][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3588.261740][ C0] ? firmware_map_remove+0x19d/0x19d [ 3588.267032][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3588.272519][ C0] schedule+0xd0/0x2a0 [ 3588.276577][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3588.281667][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3588.287128][ C0] futex_wait+0x1e2/0x550 [ 3588.291452][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3588.296466][ C0] ? print_usage_bug+0x240/0x240 [ 3588.301439][ C0] ? netlink_unicast+0x740/0x740 [ 3588.306370][ C0] ? hash_futex+0x10/0x200 [ 3588.310786][ C0] ? futex_wake+0x153/0x480 [ 3588.315308][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.321266][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.327240][ C0] do_futex+0x15f/0x1ad0 [ 3588.331514][ C0] ? find_held_lock+0x2d/0x110 [ 3588.336271][ C0] ? futex_exit_release+0x60/0x60 [ 3588.341285][ C0] ? lock_downgrade+0x840/0x840 [ 3588.346127][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3588.350979][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.356970][ C0] ? __might_fault+0x190/0x1d0 [ 3588.361713][ C0] ? _copy_to_user+0x126/0x160 [ 3588.366475][ C0] __x64_sys_futex+0x376/0x4f0 [ 3588.371256][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3588.375741][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3588.381174][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.387159][ C0] ? do_syscall_64+0x21/0x7d0 [ 3588.391835][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.397795][ C0] do_syscall_64+0xf6/0x7d0 [ 3588.402277][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3588.408153][ C0] RIP: 0033:0x45ca69 [ 3588.412042][ C0] Code: Bad RIP value. [ 3588.416095][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3588.424478][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3588.432434][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3588.440380][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3588.448335][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3588.456299][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3588.464270][ C0] syz-executor.3 S29736 20924 7191 0x00000000 [ 3588.470586][ C0] Call Trace: [ 3588.473869][ C0] __schedule+0x8f3/0x1fc0 [ 3588.478264][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3588.483528][ C0] ? firmware_map_remove+0x19d/0x19d [ 3588.488823][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3588.494286][ C0] schedule+0xd0/0x2a0 [ 3588.498337][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3588.503433][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3588.508887][ C0] futex_wait+0x1e2/0x550 [ 3588.513210][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3588.518212][ C0] ? wake_up_q+0xc1/0x140 [ 3588.522514][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3588.527702][ C0] ? futex_wake+0x153/0x480 [ 3588.532201][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.538177][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.544137][ C0] do_futex+0x15f/0x1ad0 [ 3588.548382][ C0] ? find_held_lock+0x2d/0x110 [ 3588.553149][ C0] ? futex_exit_release+0x60/0x60 [ 3588.558174][ C0] ? lock_downgrade+0x840/0x840 [ 3588.563101][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3588.567940][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.573928][ C0] ? __might_fault+0x190/0x1d0 [ 3588.578673][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3588.584113][ C0] __x64_sys_futex+0x376/0x4f0 [ 3588.588874][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3588.593366][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3588.598809][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.604778][ C0] ? do_syscall_64+0x21/0x7d0 [ 3588.609470][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.615472][ C0] do_syscall_64+0xf6/0x7d0 [ 3588.619977][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3588.625871][ C0] RIP: 0033:0x45ca69 [ 3588.629770][ C0] Code: Bad RIP value. [ 3588.633820][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3588.642204][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3588.650160][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3588.658118][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3588.666074][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3588.674033][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3588.681992][ C0] syz-executor.0 S26912 20976 6809 0x00000000 [ 3588.688314][ C0] Call Trace: [ 3588.691611][ C0] __schedule+0x8f3/0x1fc0 [ 3588.696012][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3588.701279][ C0] ? firmware_map_remove+0x19d/0x19d [ 3588.706556][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3588.712031][ C0] schedule+0xd0/0x2a0 [ 3588.716091][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3588.721190][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3588.726648][ C0] futex_wait+0x1e2/0x550 [ 3588.730981][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3588.735998][ C0] ? print_usage_bug+0x240/0x240 [ 3588.740924][ C0] ? hash_futex+0x10/0x200 [ 3588.745331][ C0] ? futex_wake+0x153/0x480 [ 3588.749850][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.755819][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.761786][ C0] do_futex+0x15f/0x1ad0 [ 3588.766091][ C0] ? find_held_lock+0x2d/0x110 [ 3588.770867][ C0] ? futex_exit_release+0x60/0x60 [ 3588.775881][ C0] ? lock_downgrade+0x840/0x840 [ 3588.780709][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3588.785547][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.791540][ C0] ? __might_fault+0x190/0x1d0 [ 3588.796306][ C0] ? _copy_to_user+0x126/0x160 [ 3588.801063][ C0] __x64_sys_futex+0x376/0x4f0 [ 3588.805822][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3588.810326][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3588.815787][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.821747][ C0] ? do_syscall_64+0x21/0x7d0 [ 3588.826413][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3588.832393][ C0] do_syscall_64+0xf6/0x7d0 [ 3588.836889][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3588.842755][ C0] RIP: 0033:0x45ca69 [ 3588.846655][ C0] Code: Bad RIP value. [ 3588.850730][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3588.859135][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3588.867093][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3588.875062][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3588.883039][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3588.890997][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3588.898974][ C0] syz-executor.0 S29824 21136 6809 0x00000000 [ 3588.905295][ C0] Call Trace: [ 3588.908590][ C0] __schedule+0x8f3/0x1fc0 [ 3588.913006][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3588.918282][ C0] ? firmware_map_remove+0x19d/0x19d [ 3588.923544][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3588.928995][ C0] schedule+0xd0/0x2a0 [ 3588.933062][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3588.938152][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3588.943590][ C0] futex_wait+0x1e2/0x550 [ 3588.947915][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3588.952927][ C0] ? print_usage_bug+0x240/0x240 [ 3588.957842][ C0] ? hash_futex+0x10/0x200 [ 3588.962245][ C0] ? futex_wake+0x153/0x480 [ 3588.966778][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.972755][ C0] ? mark_lock+0x11f/0xdd0 [ 3588.977150][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3588.983123][ C0] do_futex+0x15f/0x1ad0 [ 3588.987385][ C0] ? find_held_lock+0x2d/0x110 [ 3588.992151][ C0] ? futex_exit_release+0x60/0x60 [ 3588.997180][ C0] ? lock_downgrade+0x840/0x840 [ 3589.002031][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3589.006873][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.012864][ C0] ? __might_fault+0x190/0x1d0 [ 3589.017619][ C0] ? _copy_to_user+0x126/0x160 [ 3589.022365][ C0] __x64_sys_futex+0x376/0x4f0 [ 3589.027123][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3589.031631][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3589.037074][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.043037][ C0] ? do_syscall_64+0x21/0x7d0 [ 3589.047719][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.053702][ C0] do_syscall_64+0xf6/0x7d0 [ 3589.058190][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3589.064059][ C0] RIP: 0033:0x45ca69 [ 3589.067951][ C0] Code: Bad RIP value. [ 3589.072005][ C0] RSP: 002b:00007f2cee953cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3589.080393][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3589.088348][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3589.096346][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3589.104308][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3589.112255][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9549c0 R15: 000000000078c04c [ 3589.120216][ C0] syz-executor.3 S29824 21179 7191 0x00000000 [ 3589.126532][ C0] Call Trace: [ 3589.129826][ C0] __schedule+0x8f3/0x1fc0 [ 3589.134241][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3589.139529][ C0] ? firmware_map_remove+0x19d/0x19d [ 3589.144811][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3589.150276][ C0] schedule+0xd0/0x2a0 [ 3589.154337][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3589.159454][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3589.164900][ C0] ? find_held_lock+0x2d/0x110 [ 3589.169670][ C0] futex_wait+0x1e2/0x550 [ 3589.174017][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3589.179035][ C0] ? print_usage_bug+0x240/0x240 [ 3589.183952][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3589.189157][ C0] ? futex_wake+0x153/0x480 [ 3589.193658][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.199612][ C0] ? mark_lock+0x11f/0xdd0 [ 3589.204013][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.209987][ C0] do_futex+0x15f/0x1ad0 [ 3589.214230][ C0] ? find_held_lock+0x2d/0x110 [ 3589.218973][ C0] ? futex_exit_release+0x60/0x60 [ 3589.223974][ C0] ? lock_downgrade+0x840/0x840 [ 3589.228815][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3589.233653][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.239617][ C0] ? __might_fault+0x190/0x1d0 [ 3589.244367][ C0] ? _copy_to_user+0x126/0x160 [ 3589.249128][ C0] __x64_sys_futex+0x376/0x4f0 [ 3589.253897][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3589.258396][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3589.263845][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.269822][ C0] ? do_syscall_64+0x21/0x7d0 [ 3589.274518][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.280502][ C0] do_syscall_64+0xf6/0x7d0 [ 3589.285005][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3589.290900][ C0] RIP: 0033:0x45ca69 [ 3589.294788][ C0] Code: Bad RIP value. [ 3589.298830][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3589.307223][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3589.315196][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3589.323168][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3589.331123][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3589.339107][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3589.347099][ C0] syz-executor.3 S29824 21227 7191 0x00000000 [ 3589.353427][ C0] Call Trace: [ 3589.356700][ C0] __schedule+0x8f3/0x1fc0 [ 3589.361097][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3589.366381][ C0] ? firmware_map_remove+0x19d/0x19d [ 3589.371656][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3589.377096][ C0] schedule+0xd0/0x2a0 [ 3589.381160][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3589.386289][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3589.391745][ C0] ? find_held_lock+0x2d/0x110 [ 3589.396497][ C0] futex_wait+0x1e2/0x550 [ 3589.400825][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3589.405842][ C0] ? print_usage_bug+0x240/0x240 [ 3589.410792][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3589.415982][ C0] ? futex_wake+0x153/0x480 [ 3589.420480][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.426449][ C0] ? mark_lock+0x11f/0xdd0 [ 3589.430876][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.436860][ C0] do_futex+0x15f/0x1ad0 [ 3589.441096][ C0] ? find_held_lock+0x2d/0x110 [ 3589.445881][ C0] ? futex_exit_release+0x60/0x60 [ 3589.450921][ C0] ? lock_downgrade+0x840/0x840 [ 3589.455766][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3589.460598][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.466581][ C0] ? __might_fault+0x190/0x1d0 [ 3589.471335][ C0] ? _copy_to_user+0x126/0x160 [ 3589.476084][ C0] __x64_sys_futex+0x376/0x4f0 [ 3589.480837][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3589.485333][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3589.490803][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.496954][ C0] ? do_syscall_64+0x21/0x7d0 [ 3589.501607][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.507585][ C0] do_syscall_64+0xf6/0x7d0 [ 3589.512093][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3589.517962][ C0] RIP: 0033:0x45ca69 [ 3589.521843][ C0] Code: Bad RIP value. [ 3589.525892][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3589.534303][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3589.542262][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3589.550219][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3589.558191][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3589.566149][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3589.574137][ C0] syz-executor.3 S29824 21249 7191 0x00000000 [ 3589.580458][ C0] Call Trace: [ 3589.583741][ C0] __schedule+0x8f3/0x1fc0 [ 3589.588151][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3589.593427][ C0] ? firmware_map_remove+0x19d/0x19d [ 3589.598704][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3589.604152][ C0] schedule+0xd0/0x2a0 [ 3589.608215][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3589.613315][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3589.618761][ C0] futex_wait+0x1e2/0x550 [ 3589.623077][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3589.628093][ C0] ? print_usage_bug+0x240/0x240 [ 3589.641197][ C0] ? hash_futex+0x10/0x200 [ 3589.645606][ C0] ? futex_wake+0x153/0x480 [ 3589.650135][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.656101][ C0] ? mark_lock+0x11f/0xdd0 [ 3589.660507][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.666482][ C0] do_futex+0x15f/0x1ad0 [ 3589.670740][ C0] ? find_held_lock+0x2d/0x110 [ 3589.675492][ C0] ? futex_exit_release+0x60/0x60 [ 3589.680496][ C0] ? lock_downgrade+0x840/0x840 [ 3589.685345][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3589.690194][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.696168][ C0] ? __might_fault+0x190/0x1d0 [ 3589.700909][ C0] ? _copy_to_user+0x126/0x160 [ 3589.705670][ C0] __x64_sys_futex+0x376/0x4f0 [ 3589.710455][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3589.714949][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3589.720384][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.726374][ C0] ? do_syscall_64+0x21/0x7d0 [ 3589.731081][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.737051][ C0] do_syscall_64+0xf6/0x7d0 [ 3589.741539][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3589.747417][ C0] RIP: 0033:0x45ca69 [ 3589.751316][ C0] Code: Bad RIP value. [ 3589.755376][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3589.763776][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3589.771740][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3589.779690][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3589.787646][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3589.795619][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3589.803590][ C0] syz-executor.3 S29824 21261 7191 0x00000000 [ 3589.809909][ C0] Call Trace: [ 3589.813205][ C0] __schedule+0x8f3/0x1fc0 [ 3589.817604][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3589.822870][ C0] ? firmware_map_remove+0x19d/0x19d [ 3589.828148][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3589.833598][ C0] schedule+0xd0/0x2a0 [ 3589.837648][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3589.842739][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3589.848186][ C0] ? find_held_lock+0x2d/0x110 [ 3589.852959][ C0] futex_wait+0x1e2/0x550 [ 3589.857274][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3589.862276][ C0] ? print_usage_bug+0x240/0x240 [ 3589.867218][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3589.872434][ C0] ? futex_wake+0x153/0x480 [ 3589.876934][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.882887][ C0] ? mark_lock+0x11f/0xdd0 [ 3589.887298][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3589.893269][ C0] do_futex+0x15f/0x1ad0 [ 3589.897505][ C0] ? find_held_lock+0x2d/0x110 [ 3589.902263][ C0] ? futex_exit_release+0x60/0x60 [ 3589.907295][ C0] ? lock_downgrade+0x840/0x840 [ 3589.912142][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3589.916996][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.922993][ C0] ? __might_fault+0x190/0x1d0 [ 3589.927748][ C0] ? _copy_to_user+0x126/0x160 [ 3589.932504][ C0] __x64_sys_futex+0x376/0x4f0 [ 3589.937256][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3589.941739][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3589.947187][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.953180][ C0] ? do_syscall_64+0x21/0x7d0 [ 3589.957868][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3589.963827][ C0] do_syscall_64+0xf6/0x7d0 [ 3589.968326][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3589.974205][ C0] RIP: 0033:0x45ca69 [ 3589.978085][ C0] Code: Bad RIP value. [ 3589.982127][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3589.990593][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3589.998552][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3590.006509][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3590.014465][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3590.022413][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3590.030392][ C0] syz-executor.3 S29256 21309 7191 0x00000000 [ 3590.036722][ C0] Call Trace: [ 3590.040012][ C0] __schedule+0x8f3/0x1fc0 [ 3590.044427][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3590.049713][ C0] ? firmware_map_remove+0x19d/0x19d [ 3590.055001][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3590.060472][ C0] schedule+0xd0/0x2a0 [ 3590.064526][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3590.069640][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3590.075089][ C0] futex_wait+0x1e2/0x550 [ 3590.079397][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3590.084398][ C0] ? print_usage_bug+0x240/0x240 [ 3590.089332][ C0] ? hash_futex+0x10/0x200 [ 3590.093754][ C0] ? futex_wake+0x153/0x480 [ 3590.098268][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.104231][ C0] ? mark_lock+0x11f/0xdd0 [ 3590.108640][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.114625][ C0] do_futex+0x15f/0x1ad0 [ 3590.118861][ C0] ? find_held_lock+0x2d/0x110 [ 3590.123628][ C0] ? futex_exit_release+0x60/0x60 [ 3590.128656][ C0] ? lock_downgrade+0x840/0x840 [ 3590.133494][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3590.138322][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.144284][ C0] ? __might_fault+0x190/0x1d0 [ 3590.149057][ C0] ? _copy_to_user+0x126/0x160 [ 3590.153829][ C0] __x64_sys_futex+0x376/0x4f0 [ 3590.158574][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3590.163055][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3590.168501][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.174473][ C0] ? do_syscall_64+0x21/0x7d0 [ 3590.179129][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.185103][ C0] do_syscall_64+0xf6/0x7d0 [ 3590.189638][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3590.195548][ C0] RIP: 0033:0x45ca69 [ 3590.199456][ C0] Code: Bad RIP value. [ 3590.203495][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3590.211880][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3590.219845][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3590.227801][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3590.235764][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3590.243717][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3590.251716][ C0] syz-executor.0 S28976 21335 6809 0x00000000 [ 3590.258029][ C0] Call Trace: [ 3590.261328][ C0] __schedule+0x8f3/0x1fc0 [ 3590.265737][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3590.271036][ C0] ? firmware_map_remove+0x19d/0x19d [ 3590.276314][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3590.281755][ C0] schedule+0xd0/0x2a0 [ 3590.285825][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3590.290945][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3590.296413][ C0] ? find_held_lock+0x2d/0x110 [ 3590.301197][ C0] futex_wait+0x1e2/0x550 [ 3590.305534][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3590.310558][ C0] ? print_usage_bug+0x240/0x240 [ 3590.315486][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3590.320682][ C0] ? futex_wake+0x153/0x480 [ 3590.325199][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.331186][ C0] ? mark_lock+0x11f/0xdd0 [ 3590.335629][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.341592][ C0] do_futex+0x15f/0x1ad0 [ 3590.345840][ C0] ? find_held_lock+0x2d/0x110 [ 3590.350963][ C0] ? futex_exit_release+0x60/0x60 [ 3590.355995][ C0] ? lock_downgrade+0x840/0x840 [ 3590.360838][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3590.365679][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.371654][ C0] ? __might_fault+0x190/0x1d0 [ 3590.376410][ C0] ? _copy_to_user+0x126/0x160 [ 3590.381178][ C0] __x64_sys_futex+0x376/0x4f0 [ 3590.385949][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3590.390462][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3590.395910][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.401868][ C0] ? do_syscall_64+0x21/0x7d0 [ 3590.406535][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.412508][ C0] do_syscall_64+0xf6/0x7d0 [ 3590.417013][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3590.422897][ C0] RIP: 0033:0x45ca69 [ 3590.426815][ C0] Code: Bad RIP value. [ 3590.430878][ C0] RSP: 002b:00007f2cee953cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3590.439277][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3590.447240][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3590.455221][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3590.463180][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3590.471136][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9549c0 R15: 000000000078c04c [ 3590.479109][ C0] syz-executor.3 S29816 21510 7191 0x00000000 [ 3590.485425][ C0] Call Trace: [ 3590.488722][ C0] __schedule+0x8f3/0x1fc0 [ 3590.493142][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3590.498407][ C0] ? firmware_map_remove+0x19d/0x19d [ 3590.503673][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3590.509126][ C0] schedule+0xd0/0x2a0 [ 3590.513196][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3590.518286][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3590.523720][ C0] ? find_held_lock+0x2d/0x110 [ 3590.528482][ C0] futex_wait+0x1e2/0x550 [ 3590.532820][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3590.537852][ C0] ? print_usage_bug+0x240/0x240 [ 3590.542778][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3590.547970][ C0] ? futex_wake+0x153/0x480 [ 3590.552497][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.558479][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.564500][ C0] do_futex+0x15f/0x1ad0 [ 3590.568784][ C0] ? find_held_lock+0x2d/0x110 [ 3590.573560][ C0] ? futex_exit_release+0x60/0x60 [ 3590.578582][ C0] ? lock_downgrade+0x840/0x840 [ 3590.583423][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3590.588263][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.594247][ C0] ? __might_fault+0x190/0x1d0 [ 3590.598993][ C0] ? _copy_to_user+0x126/0x160 [ 3590.603739][ C0] __x64_sys_futex+0x376/0x4f0 [ 3590.608499][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3590.613004][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3590.618441][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.624408][ C0] ? do_syscall_64+0x21/0x7d0 [ 3590.629076][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.635062][ C0] do_syscall_64+0xf6/0x7d0 [ 3590.639562][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3590.645440][ C0] RIP: 0033:0x45ca69 [ 3590.649342][ C0] Code: Bad RIP value. [ 3590.653402][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3590.661787][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3590.669742][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3590.677716][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3590.685671][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3590.693629][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3590.701590][ C0] syz-executor.0 S28800 21654 6809 0x00000000 [ 3590.707924][ C0] Call Trace: [ 3590.711222][ C0] __schedule+0x8f3/0x1fc0 [ 3590.715624][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3590.720902][ C0] ? firmware_map_remove+0x19d/0x19d [ 3590.726181][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3590.731628][ C0] schedule+0xd0/0x2a0 [ 3590.735691][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3590.740780][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3590.746226][ C0] ? find_held_lock+0x2d/0x110 [ 3590.751003][ C0] futex_wait+0x1e2/0x550 [ 3590.755330][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3590.760346][ C0] ? print_usage_bug+0x240/0x240 [ 3590.765277][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3590.770479][ C0] ? futex_wake+0x153/0x480 [ 3590.774980][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.780954][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3590.786927][ C0] do_futex+0x15f/0x1ad0 [ 3590.791180][ C0] ? find_held_lock+0x2d/0x110 [ 3590.795950][ C0] ? futex_exit_release+0x60/0x60 [ 3590.800951][ C0] ? lock_downgrade+0x840/0x840 [ 3590.805794][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3590.810643][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.816622][ C0] ? __might_fault+0x190/0x1d0 [ 3590.821363][ C0] ? _copy_to_user+0x126/0x160 [ 3590.826127][ C0] __x64_sys_futex+0x376/0x4f0 [ 3590.830897][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3590.835405][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3590.840839][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.846809][ C0] ? do_syscall_64+0x21/0x7d0 [ 3590.851506][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3590.857502][ C0] do_syscall_64+0xf6/0x7d0 [ 3590.861990][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3590.867871][ C0] RIP: 0033:0x45ca69 [ 3590.871760][ C0] Code: Bad RIP value. [ 3590.875811][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3590.884212][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3590.892160][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3590.900107][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3590.908063][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3590.916042][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3590.924000][ C0] syz-executor.3 S29616 21761 7191 0x00000000 [ 3590.930337][ C0] Call Trace: [ 3590.933620][ C0] __schedule+0x8f3/0x1fc0 [ 3590.938020][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3590.943294][ C0] ? firmware_map_remove+0x19d/0x19d [ 3590.948569][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3590.954037][ C0] schedule+0xd0/0x2a0 [ 3590.958100][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3590.963185][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3590.968631][ C0] ? find_held_lock+0x2d/0x110 [ 3590.973399][ C0] futex_wait+0x1e2/0x550 [ 3590.977719][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3590.982730][ C0] ? print_usage_bug+0x240/0x240 [ 3590.987659][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3590.992859][ C0] ? futex_wake+0x153/0x480 [ 3590.997359][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.003327][ C0] ? page_fault+0x39/0x40 [ 3591.007651][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.013621][ C0] do_futex+0x15f/0x1ad0 [ 3591.017853][ C0] ? find_held_lock+0x2d/0x110 [ 3591.022604][ C0] ? futex_exit_release+0x60/0x60 [ 3591.027670][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3591.033130][ C0] ? lock_downgrade+0x840/0x840 [ 3591.037961][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3591.042786][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.048767][ C0] ? __might_fault+0x190/0x1d0 [ 3591.053536][ C0] ? _copy_to_user+0x126/0x160 [ 3591.058302][ C0] __x64_sys_futex+0x376/0x4f0 [ 3591.063061][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3591.067557][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3591.073008][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.078970][ C0] ? do_syscall_64+0x21/0x7d0 [ 3591.083635][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.089608][ C0] do_syscall_64+0xf6/0x7d0 [ 3591.094120][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3591.099998][ C0] RIP: 0033:0x45ca69 [ 3591.103902][ C0] Code: Bad RIP value. [ 3591.107951][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3591.116351][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3591.124308][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3591.132265][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3591.140217][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3591.148176][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3591.156164][ C0] syz-executor.0 S29824 21773 6809 0x00000000 [ 3591.162483][ C0] Call Trace: [ 3591.165773][ C0] __schedule+0x8f3/0x1fc0 [ 3591.170190][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3591.175467][ C0] ? firmware_map_remove+0x19d/0x19d [ 3591.180731][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3591.186186][ C0] schedule+0xd0/0x2a0 [ 3591.190266][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3591.195366][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3591.200815][ C0] futex_wait+0x1e2/0x550 [ 3591.205141][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3591.210166][ C0] ? print_usage_bug+0x240/0x240 [ 3591.215109][ C0] ? hash_futex+0x10/0x200 [ 3591.219505][ C0] ? futex_wake+0x153/0x480 [ 3591.224005][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.229987][ C0] ? mark_lock+0x11f/0xdd0 [ 3591.234404][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.240362][ C0] do_futex+0x15f/0x1ad0 [ 3591.244604][ C0] ? find_held_lock+0x2d/0x110 [ 3591.249372][ C0] ? futex_exit_release+0x60/0x60 [ 3591.254385][ C0] ? lock_downgrade+0x840/0x840 [ 3591.259223][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3591.264116][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.270110][ C0] ? __might_fault+0x190/0x1d0 [ 3591.274872][ C0] ? _copy_to_user+0x126/0x160 [ 3591.279625][ C0] __x64_sys_futex+0x376/0x4f0 [ 3591.284382][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3591.288877][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3591.294402][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.300367][ C0] ? do_syscall_64+0x21/0x7d0 [ 3591.305068][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.311073][ C0] do_syscall_64+0xf6/0x7d0 [ 3591.315584][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3591.321466][ C0] RIP: 0033:0x45ca69 [ 3591.325363][ C0] Code: Bad RIP value. [ 3591.329421][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3591.337827][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3591.345793][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3591.353753][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3591.361703][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3591.369659][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3591.377631][ C0] syz-executor.0 S29824 21821 6809 0x00000000 [ 3591.383940][ C0] Call Trace: [ 3591.387225][ C0] __schedule+0x8f3/0x1fc0 [ 3591.391654][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3591.396922][ C0] ? firmware_map_remove+0x19d/0x19d [ 3591.402188][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3591.407642][ C0] schedule+0xd0/0x2a0 [ 3591.411715][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3591.416826][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3591.422296][ C0] ? find_held_lock+0x2d/0x110 [ 3591.427066][ C0] futex_wait+0x1e2/0x550 [ 3591.431401][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3591.436415][ C0] ? print_usage_bug+0x240/0x240 [ 3591.441331][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3591.446521][ C0] ? futex_wake+0x153/0x480 [ 3591.451043][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.457010][ C0] ? mark_lock+0x11f/0xdd0 [ 3591.461405][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.467382][ C0] do_futex+0x15f/0x1ad0 [ 3591.471619][ C0] ? find_held_lock+0x2d/0x110 [ 3591.476362][ C0] ? futex_exit_release+0x60/0x60 [ 3591.481376][ C0] ? lock_downgrade+0x840/0x840 [ 3591.486218][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3591.491069][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.497046][ C0] ? __might_fault+0x190/0x1d0 [ 3591.501801][ C0] ? _copy_to_user+0x126/0x160 [ 3591.506565][ C0] __x64_sys_futex+0x376/0x4f0 [ 3591.511335][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3591.515847][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3591.521295][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.527271][ C0] ? do_syscall_64+0x21/0x7d0 [ 3591.531936][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.537898][ C0] do_syscall_64+0xf6/0x7d0 [ 3591.542380][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3591.548272][ C0] RIP: 0033:0x45ca69 [ 3591.552167][ C0] Code: Bad RIP value. [ 3591.556223][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3591.564619][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3591.572578][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3591.580528][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3591.588487][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3591.596445][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3591.604404][ C0] syz-executor.0 S29824 21835 6809 0x00000000 [ 3591.610720][ C0] Call Trace: [ 3591.614003][ C0] __schedule+0x8f3/0x1fc0 [ 3591.618412][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3591.623687][ C0] ? firmware_map_remove+0x19d/0x19d [ 3591.628965][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3591.634429][ C0] schedule+0xd0/0x2a0 [ 3591.638490][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3591.643579][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3591.649029][ C0] ? find_held_lock+0x2d/0x110 [ 3591.653784][ C0] futex_wait+0x1e2/0x550 [ 3591.658098][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3591.663102][ C0] ? print_usage_bug+0x240/0x240 [ 3591.668031][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3591.673234][ C0] ? futex_wake+0x153/0x480 [ 3591.677724][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.683679][ C0] ? mark_lock+0x11f/0xdd0 [ 3591.688091][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.694063][ C0] do_futex+0x15f/0x1ad0 [ 3591.698292][ C0] ? find_held_lock+0x2d/0x110 [ 3591.703047][ C0] ? futex_exit_release+0x60/0x60 [ 3591.708064][ C0] ? lock_downgrade+0x840/0x840 [ 3591.712919][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3591.717760][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.723737][ C0] ? __might_fault+0x190/0x1d0 [ 3591.728509][ C0] ? _copy_to_user+0x126/0x160 [ 3591.733271][ C0] __x64_sys_futex+0x376/0x4f0 [ 3591.738053][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3591.742571][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3591.748018][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.753990][ C0] ? do_syscall_64+0x21/0x7d0 [ 3591.758648][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.764623][ C0] do_syscall_64+0xf6/0x7d0 [ 3591.769135][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3591.775023][ C0] RIP: 0033:0x45ca69 [ 3591.778912][ C0] Code: Bad RIP value. [ 3591.782956][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3591.791348][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3591.799309][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3591.807268][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3591.815232][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3591.823177][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3591.831242][ C0] syz-executor.3 S28800 21843 7191 0x00000000 [ 3591.837588][ C0] Call Trace: [ 3591.840859][ C0] __schedule+0x8f3/0x1fc0 [ 3591.845267][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3591.850561][ C0] ? firmware_map_remove+0x19d/0x19d [ 3591.855850][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3591.861296][ C0] schedule+0xd0/0x2a0 [ 3591.865358][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3591.870473][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3591.875925][ C0] futex_wait+0x1e2/0x550 [ 3591.880235][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3591.885248][ C0] ? print_usage_bug+0x240/0x240 [ 3591.890182][ C0] ? kernel_text_address+0x6e/0xe0 [ 3591.895290][ C0] ? hash_futex+0x10/0x200 [ 3591.899683][ C0] ? futex_wake+0x153/0x480 [ 3591.904176][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.910143][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 3591.915946][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3591.921920][ C0] do_futex+0x15f/0x1ad0 [ 3591.926170][ C0] ? find_held_lock+0x2d/0x110 [ 3591.930935][ C0] ? futex_exit_release+0x60/0x60 [ 3591.935952][ C0] ? lock_downgrade+0x840/0x840 [ 3591.940783][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3591.945641][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.951631][ C0] ? __might_fault+0x190/0x1d0 [ 3591.956386][ C0] ? _copy_to_user+0x126/0x160 [ 3591.961166][ C0] __x64_sys_futex+0x376/0x4f0 [ 3591.965926][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3591.970431][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3591.975909][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.981883][ C0] ? do_syscall_64+0x21/0x7d0 [ 3591.986551][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3591.992525][ C0] do_syscall_64+0xf6/0x7d0 [ 3591.997011][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3592.002879][ C0] RIP: 0033:0x45ca69 [ 3592.006772][ C0] Code: Bad RIP value. [ 3592.010833][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3592.019232][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3592.027189][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3592.035168][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3592.043118][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3592.051074][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3592.059048][ C0] syz-executor.0 S29824 21923 6809 0x00000000 [ 3592.065367][ C0] Call Trace: [ 3592.068665][ C0] __schedule+0x8f3/0x1fc0 [ 3592.073080][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3592.078368][ C0] ? firmware_map_remove+0x19d/0x19d [ 3592.083648][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3592.089102][ C0] schedule+0xd0/0x2a0 [ 3592.093175][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3592.098266][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3592.103717][ C0] futex_wait+0x1e2/0x550 [ 3592.108047][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3592.113118][ C0] ? print_usage_bug+0x240/0x240 [ 3592.118039][ C0] ? hash_futex+0x10/0x200 [ 3592.122472][ C0] ? futex_wake+0x153/0x480 [ 3592.126990][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.132956][ C0] ? mark_lock+0x11f/0xdd0 [ 3592.137400][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.143377][ C0] do_futex+0x15f/0x1ad0 [ 3592.147628][ C0] ? find_held_lock+0x2d/0x110 [ 3592.152384][ C0] ? futex_exit_release+0x60/0x60 [ 3592.157389][ C0] ? lock_downgrade+0x840/0x840 [ 3592.162229][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3592.167071][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.173047][ C0] ? __might_fault+0x190/0x1d0 [ 3592.177790][ C0] ? _copy_to_user+0x126/0x160 [ 3592.182532][ C0] __x64_sys_futex+0x376/0x4f0 [ 3592.187292][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3592.191785][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3592.197219][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.203200][ C0] ? do_syscall_64+0x21/0x7d0 [ 3592.207884][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.213854][ C0] do_syscall_64+0xf6/0x7d0 [ 3592.218337][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3592.224212][ C0] RIP: 0033:0x45ca69 [ 3592.228105][ C0] Code: Bad RIP value. [ 3592.232160][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3592.240553][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3592.248524][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3592.256493][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3592.264450][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3592.272399][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3592.280365][ C0] syz-executor.0 S29824 22016 6809 0x00000000 [ 3592.286690][ C0] Call Trace: [ 3592.289994][ C0] __schedule+0x8f3/0x1fc0 [ 3592.294441][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3592.299709][ C0] ? firmware_map_remove+0x19d/0x19d [ 3592.304998][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3592.310464][ C0] schedule+0xd0/0x2a0 [ 3592.314526][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3592.319637][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3592.325106][ C0] futex_wait+0x1e2/0x550 [ 3592.329442][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3592.334472][ C0] ? print_usage_bug+0x240/0x240 [ 3592.339414][ C0] ? hash_futex+0x10/0x200 [ 3592.343833][ C0] ? futex_wake+0x153/0x480 [ 3592.348353][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.354321][ C0] ? mark_lock+0x11f/0xdd0 [ 3592.358718][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.364708][ C0] do_futex+0x15f/0x1ad0 [ 3592.368966][ C0] ? find_held_lock+0x2d/0x110 [ 3592.373735][ C0] ? futex_exit_release+0x60/0x60 [ 3592.378762][ C0] ? lock_downgrade+0x840/0x840 [ 3592.383610][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3592.388469][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.394444][ C0] ? __might_fault+0x190/0x1d0 [ 3592.399187][ C0] ? _copy_to_user+0x126/0x160 [ 3592.403944][ C0] __x64_sys_futex+0x376/0x4f0 [ 3592.408704][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3592.413199][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3592.418656][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.424629][ C0] ? do_syscall_64+0x21/0x7d0 [ 3592.429315][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.435297][ C0] do_syscall_64+0xf6/0x7d0 [ 3592.439782][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3592.445661][ C0] RIP: 0033:0x45ca69 [ 3592.449566][ C0] Code: Bad RIP value. [ 3592.453627][ C0] RSP: 002b:00007f2cee932cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3592.462026][ C0] RAX: ffffffffffffffda RBX: 000000000078c0e8 RCX: 000000000045ca69 [ 3592.469987][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c0e8 [ 3592.477946][ C0] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 3592.485901][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c0ec [ 3592.493857][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9339c0 R15: 000000000078c0ec [ 3592.501816][ C0] syz-executor.0 S26912 22041 6809 0x00000000 [ 3592.508136][ C0] Call Trace: [ 3592.511438][ C0] __schedule+0x8f3/0x1fc0 [ 3592.515845][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3592.521110][ C0] ? firmware_map_remove+0x19d/0x19d [ 3592.526391][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3592.531854][ C0] schedule+0xd0/0x2a0 [ 3592.535914][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3592.541002][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3592.546455][ C0] futex_wait+0x1e2/0x550 [ 3592.550787][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3592.555800][ C0] ? print_usage_bug+0x240/0x240 [ 3592.560712][ C0] ? netlink_unicast+0x740/0x740 [ 3592.565635][ C0] ? hash_futex+0x10/0x200 [ 3592.570050][ C0] ? futex_wake+0x153/0x480 [ 3592.574564][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.580534][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.586509][ C0] do_futex+0x15f/0x1ad0 [ 3592.590762][ C0] ? find_held_lock+0x2d/0x110 [ 3592.595514][ C0] ? futex_exit_release+0x60/0x60 [ 3592.600514][ C0] ? lock_downgrade+0x840/0x840 [ 3592.605354][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3592.610202][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.616194][ C0] ? __might_fault+0x190/0x1d0 [ 3592.620949][ C0] ? _copy_to_user+0x126/0x160 [ 3592.625713][ C0] __x64_sys_futex+0x376/0x4f0 [ 3592.630481][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3592.634985][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3592.640434][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.646403][ C0] ? do_syscall_64+0x21/0x7d0 [ 3592.651078][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.657046][ C0] do_syscall_64+0xf6/0x7d0 [ 3592.661530][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3592.667405][ C0] RIP: 0033:0x45ca69 [ 3592.671292][ C0] Code: Bad RIP value. [ 3592.675332][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3592.683714][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3592.691658][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3592.699607][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3592.707584][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3592.715544][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3592.723504][ C0] syz-executor.0 S29256 22077 6809 0x00000000 [ 3592.729820][ C0] Call Trace: [ 3592.733123][ C0] __schedule+0x8f3/0x1fc0 [ 3592.737530][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3592.742805][ C0] ? firmware_map_remove+0x19d/0x19d [ 3592.748102][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3592.753557][ C0] schedule+0xd0/0x2a0 [ 3592.757619][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3592.762718][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3592.768175][ C0] futex_wait+0x1e2/0x550 [ 3592.772497][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3592.777499][ C0] ? print_usage_bug+0x240/0x240 [ 3592.782414][ C0] ? hash_futex+0x10/0x200 [ 3592.786818][ C0] ? futex_wake+0x153/0x480 [ 3592.791321][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.797278][ C0] ? mark_lock+0x11f/0xdd0 [ 3592.801671][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3592.807642][ C0] do_futex+0x15f/0x1ad0 [ 3592.811880][ C0] ? find_held_lock+0x2d/0x110 [ 3592.816638][ C0] ? futex_exit_release+0x60/0x60 [ 3592.821652][ C0] ? lock_downgrade+0x840/0x840 [ 3592.826512][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3592.831376][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.837343][ C0] ? __might_fault+0x190/0x1d0 [ 3592.842084][ C0] ? _copy_to_user+0x126/0x160 [ 3592.846849][ C0] __x64_sys_futex+0x376/0x4f0 [ 3592.851617][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3592.856120][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3592.861568][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.867537][ C0] ? do_syscall_64+0x21/0x7d0 [ 3592.872214][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3592.878173][ C0] do_syscall_64+0xf6/0x7d0 [ 3592.882662][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3592.888539][ C0] RIP: 0033:0x45ca69 [ 3592.892429][ C0] Code: Bad RIP value. [ 3592.896484][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3592.904878][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3592.912845][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3592.920804][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3592.928760][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3592.936719][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3592.944697][ C0] syz-executor.0 S29824 22149 6809 0x00000000 [ 3592.951033][ C0] Call Trace: [ 3592.954318][ C0] __schedule+0x8f3/0x1fc0 [ 3592.958714][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3592.963991][ C0] ? firmware_map_remove+0x19d/0x19d [ 3592.969288][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3592.974738][ C0] schedule+0xd0/0x2a0 [ 3592.978784][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3592.983872][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3592.989326][ C0] futex_wait+0x1e2/0x550 [ 3592.993657][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3592.998673][ C0] ? print_usage_bug+0x240/0x240 [ 3593.003587][ C0] ? hash_futex+0x10/0x200 [ 3593.007992][ C0] ? futex_wake+0x153/0x480 [ 3593.012504][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.018460][ C0] ? mark_lock+0x11f/0xdd0 [ 3593.022868][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.028841][ C0] do_futex+0x15f/0x1ad0 [ 3593.033079][ C0] ? find_held_lock+0x2d/0x110 [ 3593.037824][ C0] ? futex_exit_release+0x60/0x60 [ 3593.042826][ C0] ? lock_downgrade+0x840/0x840 [ 3593.047667][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3593.052505][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.058467][ C0] ? __might_fault+0x190/0x1d0 [ 3593.063206][ C0] ? _copy_to_user+0x126/0x160 [ 3593.067968][ C0] __x64_sys_futex+0x376/0x4f0 [ 3593.072725][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3593.077206][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3593.082655][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.088624][ C0] ? do_syscall_64+0x21/0x7d0 [ 3593.093302][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.099275][ C0] do_syscall_64+0xf6/0x7d0 [ 3593.103758][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3593.109642][ C0] RIP: 0033:0x45ca69 [ 3593.113534][ C0] Code: Bad RIP value. [ 3593.117592][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3593.125986][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3593.133945][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3593.141907][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3593.149862][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3593.157821][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3593.165819][ C0] syz-executor.3 S29824 22344 7191 0x00000000 [ 3593.172157][ C0] Call Trace: [ 3593.175456][ C0] __schedule+0x8f3/0x1fc0 [ 3593.179867][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3593.185150][ C0] ? firmware_map_remove+0x19d/0x19d [ 3593.190441][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3593.195894][ C0] schedule+0xd0/0x2a0 [ 3593.199955][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3593.205055][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3593.210510][ C0] ? find_held_lock+0x2d/0x110 [ 3593.215272][ C0] futex_wait+0x1e2/0x550 [ 3593.219614][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3593.224632][ C0] ? print_usage_bug+0x240/0x240 [ 3593.229571][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3593.234758][ C0] ? futex_wake+0x153/0x480 [ 3593.239245][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.245211][ C0] ? mark_lock+0x11f/0xdd0 [ 3593.249629][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.255598][ C0] do_futex+0x15f/0x1ad0 [ 3593.259863][ C0] ? find_held_lock+0x2d/0x110 [ 3593.264617][ C0] ? futex_exit_release+0x60/0x60 [ 3593.269656][ C0] ? lock_downgrade+0x840/0x840 [ 3593.274502][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3593.279372][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.285383][ C0] ? __might_fault+0x190/0x1d0 [ 3593.290149][ C0] ? _copy_to_user+0x126/0x160 [ 3593.294942][ C0] __x64_sys_futex+0x376/0x4f0 [ 3593.299717][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3593.304287][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3593.309732][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.315714][ C0] ? do_syscall_64+0x21/0x7d0 [ 3593.320384][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.326361][ C0] do_syscall_64+0xf6/0x7d0 [ 3593.330868][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3593.336748][ C0] RIP: 0033:0x45ca69 [ 3593.340629][ C0] Code: Bad RIP value. [ 3593.344675][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3593.353088][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3593.361048][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3593.369027][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3593.376985][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3593.384946][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3593.392937][ C0] syz-executor.3 S29824 22493 7191 0x00000000 [ 3593.399291][ C0] Call Trace: [ 3593.402577][ C0] __schedule+0x8f3/0x1fc0 [ 3593.406983][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3593.412281][ C0] ? firmware_map_remove+0x19d/0x19d [ 3593.417573][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3593.423052][ C0] schedule+0xd0/0x2a0 [ 3593.427117][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3593.432217][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3593.437668][ C0] futex_wait+0x1e2/0x550 [ 3593.441980][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3593.447009][ C0] ? print_usage_bug+0x240/0x240 [ 3593.451956][ C0] ? hash_futex+0x10/0x200 [ 3593.456370][ C0] ? futex_wake+0x153/0x480 [ 3593.460861][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.466828][ C0] ? mark_lock+0x11f/0xdd0 [ 3593.471249][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.477234][ C0] do_futex+0x15f/0x1ad0 [ 3593.481469][ C0] ? find_held_lock+0x2d/0x110 [ 3593.486227][ C0] ? futex_exit_release+0x60/0x60 [ 3593.491253][ C0] ? lock_downgrade+0x840/0x840 [ 3593.496109][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3593.500966][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.506967][ C0] ? __might_fault+0x190/0x1d0 [ 3593.511744][ C0] ? _copy_to_user+0x126/0x160 [ 3593.516493][ C0] __x64_sys_futex+0x376/0x4f0 [ 3593.521254][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3593.525751][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3593.531205][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.537190][ C0] ? do_syscall_64+0x21/0x7d0 [ 3593.541856][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.547848][ C0] do_syscall_64+0xf6/0x7d0 [ 3593.552351][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3593.558221][ C0] RIP: 0033:0x45ca69 [ 3593.562102][ C0] Code: Bad RIP value. [ 3593.566151][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3593.574558][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3593.582528][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3593.590484][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3593.598453][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3593.606497][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3593.614470][ C0] syz-executor.3 S29824 22706 7191 0x00000000 [ 3593.620780][ C0] Call Trace: [ 3593.624050][ C0] __schedule+0x8f3/0x1fc0 [ 3593.628476][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3593.633752][ C0] ? firmware_map_remove+0x19d/0x19d [ 3593.639025][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3593.644461][ C0] schedule+0xd0/0x2a0 [ 3593.648522][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3593.653621][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3593.659073][ C0] futex_wait+0x1e2/0x550 [ 3593.663380][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3593.668395][ C0] ? print_usage_bug+0x240/0x240 [ 3593.673321][ C0] ? hash_futex+0x10/0x200 [ 3593.677714][ C0] ? futex_wake+0x153/0x480 [ 3593.682200][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.688163][ C0] ? mark_lock+0x11f/0xdd0 [ 3593.692570][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.698540][ C0] do_futex+0x15f/0x1ad0 [ 3593.702765][ C0] ? find_held_lock+0x2d/0x110 [ 3593.707519][ C0] ? futex_exit_release+0x60/0x60 [ 3593.712534][ C0] ? lock_downgrade+0x840/0x840 [ 3593.717365][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3593.722191][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.728171][ C0] ? __might_fault+0x190/0x1d0 [ 3593.732925][ C0] ? _copy_to_user+0x126/0x160 [ 3593.737689][ C0] __x64_sys_futex+0x376/0x4f0 [ 3593.742436][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3593.746931][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3593.752384][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.758358][ C0] ? do_syscall_64+0x21/0x7d0 [ 3593.763026][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.769006][ C0] do_syscall_64+0xf6/0x7d0 [ 3593.773500][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3593.779367][ C0] RIP: 0033:0x45ca69 [ 3593.783261][ C0] Code: Bad RIP value. [ 3593.787310][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3593.795718][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3593.803676][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3593.811625][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3593.819592][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3593.827551][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3593.835520][ C0] syz-executor.0 S29816 22719 6809 0x00000000 [ 3593.841828][ C0] Call Trace: [ 3593.845117][ C0] __schedule+0x8f3/0x1fc0 [ 3593.849536][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3593.854827][ C0] ? firmware_map_remove+0x19d/0x19d [ 3593.860092][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3593.865553][ C0] schedule+0xd0/0x2a0 [ 3593.869624][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3593.874722][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3593.880159][ C0] futex_wait+0x1e2/0x550 [ 3593.884465][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3593.889479][ C0] ? print_usage_bug+0x240/0x240 [ 3593.894419][ C0] ? hash_futex+0x10/0x200 [ 3593.898811][ C0] ? futex_wake+0x153/0x480 [ 3593.903297][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.909269][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3593.915238][ C0] do_futex+0x15f/0x1ad0 [ 3593.919462][ C0] ? find_held_lock+0x2d/0x110 [ 3593.924200][ C0] ? futex_exit_release+0x60/0x60 [ 3593.929217][ C0] ? lock_downgrade+0x840/0x840 [ 3593.934057][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3593.938884][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.944868][ C0] ? __might_fault+0x190/0x1d0 [ 3593.949632][ C0] ? _copy_to_user+0x126/0x160 [ 3593.954392][ C0] __x64_sys_futex+0x376/0x4f0 [ 3593.959138][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3593.963620][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3593.969068][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.975036][ C0] ? do_syscall_64+0x21/0x7d0 [ 3593.979700][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3593.985677][ C0] do_syscall_64+0xf6/0x7d0 [ 3593.990186][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3593.996064][ C0] RIP: 0033:0x45ca69 [ 3593.999958][ C0] Code: Bad RIP value. [ 3594.003997][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3594.012385][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3594.020332][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3594.028287][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3594.036244][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3594.044201][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3594.052177][ C0] syz-executor.3 S29384 22862 7191 0x00000000 [ 3594.058503][ C0] Call Trace: [ 3594.061771][ C0] __schedule+0x8f3/0x1fc0 [ 3594.066176][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3594.071470][ C0] ? firmware_map_remove+0x19d/0x19d [ 3594.076747][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3594.082196][ C0] schedule+0xd0/0x2a0 [ 3594.086257][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3594.091357][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3594.096795][ C0] futex_wait+0x1e2/0x550 [ 3594.101103][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3594.106115][ C0] ? print_usage_bug+0x240/0x240 [ 3594.111053][ C0] ? hash_futex+0x10/0x200 [ 3594.115457][ C0] ? futex_wake+0x153/0x480 [ 3594.119954][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.125923][ C0] ? page_fault+0x39/0x40 [ 3594.130253][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.136238][ C0] do_futex+0x15f/0x1ad0 [ 3594.140489][ C0] ? find_held_lock+0x2d/0x110 [ 3594.145249][ C0] ? futex_exit_release+0x60/0x60 [ 3594.150276][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3594.155757][ C0] ? lock_downgrade+0x840/0x840 [ 3594.160611][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3594.165449][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.171422][ C0] ? __might_fault+0x190/0x1d0 [ 3594.176178][ C0] ? _copy_to_user+0x126/0x160 [ 3594.180939][ C0] __x64_sys_futex+0x376/0x4f0 [ 3594.185701][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3594.190205][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3594.195660][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.201618][ C0] ? do_syscall_64+0x21/0x7d0 [ 3594.206283][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.212267][ C0] do_syscall_64+0xf6/0x7d0 [ 3594.216763][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3594.222643][ C0] RIP: 0033:0x45ca69 [ 3594.226534][ C0] Code: Bad RIP value. [ 3594.230593][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3594.239020][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3594.246998][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3594.255126][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3594.263082][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3594.271042][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3594.279023][ C0] syz-executor.0 S29824 22898 6809 0x00000000 [ 3594.285353][ C0] Call Trace: [ 3594.288661][ C0] __schedule+0x8f3/0x1fc0 [ 3594.293079][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3594.298358][ C0] ? firmware_map_remove+0x19d/0x19d [ 3594.303623][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3594.309080][ C0] schedule+0xd0/0x2a0 [ 3594.313143][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3594.318234][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3594.323667][ C0] ? find_held_lock+0x2d/0x110 [ 3594.328517][ C0] futex_wait+0x1e2/0x550 [ 3594.332838][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3594.337840][ C0] ? print_usage_bug+0x240/0x240 [ 3594.342755][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3594.347945][ C0] ? futex_wake+0x153/0x480 [ 3594.352460][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.358415][ C0] ? mark_lock+0x11f/0xdd0 [ 3594.362808][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.368778][ C0] do_futex+0x15f/0x1ad0 [ 3594.373016][ C0] ? find_held_lock+0x2d/0x110 [ 3594.377779][ C0] ? futex_exit_release+0x60/0x60 [ 3594.382792][ C0] ? lock_downgrade+0x840/0x840 [ 3594.387637][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3594.392476][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.398441][ C0] ? __might_fault+0x190/0x1d0 [ 3594.403184][ C0] ? _copy_to_user+0x126/0x160 [ 3594.407949][ C0] __x64_sys_futex+0x376/0x4f0 [ 3594.412704][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3594.417186][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3594.422619][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.428590][ C0] ? do_syscall_64+0x21/0x7d0 [ 3594.433268][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.439240][ C0] do_syscall_64+0xf6/0x7d0 [ 3594.443736][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3594.449612][ C0] RIP: 0033:0x45ca69 [ 3594.453501][ C0] Code: Bad RIP value. [ 3594.457548][ C0] RSP: 002b:00007f2cee995cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3594.465958][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3594.473930][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3594.481875][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3594.489832][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3594.497791][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9969c0 R15: 000000000078bf0c [ 3594.505771][ C0] syz-executor.0 S28800 22905 6809 0x00000000 [ 3594.512125][ C0] Call Trace: [ 3594.515428][ C0] __schedule+0x8f3/0x1fc0 [ 3594.519824][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3594.525105][ C0] ? firmware_map_remove+0x19d/0x19d [ 3594.530392][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3594.535855][ C0] schedule+0xd0/0x2a0 [ 3594.539915][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3594.545016][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3594.550474][ C0] ? find_held_lock+0x2d/0x110 [ 3594.555229][ C0] futex_wait+0x1e2/0x550 [ 3594.559547][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3594.564557][ C0] ? print_usage_bug+0x240/0x240 [ 3594.569498][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3594.574689][ C0] ? futex_wake+0x153/0x480 [ 3594.579176][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.585244][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 3594.591055][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.597046][ C0] do_futex+0x15f/0x1ad0 [ 3594.601296][ C0] ? find_held_lock+0x2d/0x110 [ 3594.606061][ C0] ? futex_exit_release+0x60/0x60 [ 3594.611086][ C0] ? lock_downgrade+0x840/0x840 [ 3594.615939][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3594.620792][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.626775][ C0] ? __might_fault+0x190/0x1d0 [ 3594.631526][ C0] ? _copy_to_user+0x126/0x160 [ 3594.636276][ C0] __x64_sys_futex+0x376/0x4f0 [ 3594.641030][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3594.645532][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3594.650986][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.656963][ C0] ? do_syscall_64+0x21/0x7d0 [ 3594.661616][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.667591][ C0] do_syscall_64+0xf6/0x7d0 [ 3594.672101][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3594.677981][ C0] RIP: 0033:0x45ca69 [ 3594.681866][ C0] Code: Bad RIP value. [ 3594.685929][ C0] RSP: 002b:00007f2cee974cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3594.694336][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3594.702293][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3594.710270][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3594.718231][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3594.726205][ C0] R13: 0000000000c9fb6f R14: 00007f2cee9759c0 R15: 000000000078bfac [ 3594.734176][ C0] syz-executor.3 S29824 23233 7191 0x00000000 [ 3594.740485][ C0] Call Trace: [ 3594.743756][ C0] __schedule+0x8f3/0x1fc0 [ 3594.748163][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3594.753440][ C0] ? firmware_map_remove+0x19d/0x19d [ 3594.758707][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3594.764146][ C0] schedule+0xd0/0x2a0 [ 3594.768206][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3594.773305][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3594.778741][ C0] ? find_held_lock+0x2d/0x110 [ 3594.783482][ C0] futex_wait+0x1e2/0x550 [ 3594.787823][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3594.792836][ C0] ? print_usage_bug+0x240/0x240 [ 3594.797752][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3594.802936][ C0] ? futex_wake+0x153/0x480 [ 3594.807445][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.813410][ C0] ? mark_lock+0x11f/0xdd0 [ 3594.817807][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3594.823775][ C0] do_futex+0x15f/0x1ad0 [ 3594.828016][ C0] ? find_held_lock+0x2d/0x110 [ 3594.832774][ C0] ? futex_exit_release+0x60/0x60 [ 3594.837778][ C0] ? lock_downgrade+0x840/0x840 [ 3594.842606][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3594.847446][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.853419][ C0] ? __might_fault+0x190/0x1d0 [ 3594.858174][ C0] ? _copy_to_user+0x126/0x160 [ 3594.862933][ C0] __x64_sys_futex+0x376/0x4f0 [ 3594.867692][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3594.872185][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3594.877619][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.883575][ C0] ? do_syscall_64+0x21/0x7d0 [ 3594.888239][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3594.894209][ C0] do_syscall_64+0xf6/0x7d0 [ 3594.898703][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3594.904580][ C0] RIP: 0033:0x45ca69 [ 3594.908499][ C0] Code: Bad RIP value. [ 3594.912563][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3594.920947][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3594.928921][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3594.936893][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3594.944849][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3594.952817][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3594.960788][ C0] syz-executor.3 S29824 23900 7191 0x00000000 [ 3594.967119][ C0] Call Trace: [ 3594.970413][ C0] __schedule+0x8f3/0x1fc0 [ 3594.974817][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3594.980082][ C0] ? firmware_map_remove+0x19d/0x19d [ 3594.985359][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3594.990819][ C0] schedule+0xd0/0x2a0 [ 3594.994877][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3594.999983][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3595.005432][ C0] ? find_held_lock+0x2d/0x110 [ 3595.010203][ C0] futex_wait+0x1e2/0x550 [ 3595.014523][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3595.019533][ C0] ? print_usage_bug+0x240/0x240 [ 3595.024450][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3595.029643][ C0] ? futex_wake+0x153/0x480 [ 3595.034142][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.040136][ C0] ? mark_lock+0x11f/0xdd0 [ 3595.044535][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.050519][ C0] do_futex+0x15f/0x1ad0 [ 3595.054774][ C0] ? find_held_lock+0x2d/0x110 [ 3595.059530][ C0] ? futex_exit_release+0x60/0x60 [ 3595.064556][ C0] ? lock_downgrade+0x840/0x840 [ 3595.069412][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3595.074251][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.080215][ C0] ? __might_fault+0x190/0x1d0 [ 3595.084977][ C0] ? _copy_to_user+0x126/0x160 [ 3595.089751][ C0] __x64_sys_futex+0x376/0x4f0 [ 3595.094505][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3595.098987][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3595.104422][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.110393][ C0] ? do_syscall_64+0x21/0x7d0 [ 3595.115072][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.121045][ C0] do_syscall_64+0xf6/0x7d0 [ 3595.125540][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3595.131420][ C0] RIP: 0033:0x45ca69 [ 3595.135303][ C0] Code: Bad RIP value. [ 3595.139343][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3595.147739][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3595.155737][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3595.163712][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3595.171667][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3595.179654][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3595.187632][ C0] syz-executor.3 S29824 24006 7191 0x00000000 [ 3595.193960][ C0] Call Trace: [ 3595.197249][ C0] __schedule+0x8f3/0x1fc0 [ 3595.201646][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3595.206927][ C0] ? firmware_map_remove+0x19d/0x19d [ 3595.212219][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3595.217671][ C0] schedule+0xd0/0x2a0 [ 3595.221721][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3595.226822][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3595.232284][ C0] futex_wait+0x1e2/0x550 [ 3595.236608][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3595.241618][ C0] ? print_usage_bug+0x240/0x240 [ 3595.246547][ C0] ? hash_futex+0x10/0x200 [ 3595.250965][ C0] ? futex_wake+0x153/0x480 [ 3595.255489][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.261457][ C0] ? mark_lock+0x11f/0xdd0 [ 3595.265869][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.271836][ C0] do_futex+0x15f/0x1ad0 [ 3595.276104][ C0] ? find_held_lock+0x2d/0x110 [ 3595.280863][ C0] ? futex_exit_release+0x60/0x60 [ 3595.285884][ C0] ? lock_downgrade+0x840/0x840 [ 3595.290736][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3595.295582][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.301547][ C0] ? __might_fault+0x190/0x1d0 [ 3595.306306][ C0] ? _copy_to_user+0x126/0x160 [ 3595.311103][ C0] __x64_sys_futex+0x376/0x4f0 [ 3595.315860][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3595.320353][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3595.325805][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.331774][ C0] ? do_syscall_64+0x21/0x7d0 [ 3595.336432][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.342392][ C0] do_syscall_64+0xf6/0x7d0 [ 3595.346892][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3595.352771][ C0] RIP: 0033:0x45ca69 [ 3595.356652][ C0] Code: Bad RIP value. [ 3595.360705][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3595.369099][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3595.377059][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3595.385026][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3595.393001][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3595.400977][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3595.408969][ C0] syz-executor.3 S29824 24038 7191 0x00000000 [ 3595.415314][ C0] Call Trace: [ 3595.418598][ C0] __schedule+0x8f3/0x1fc0 [ 3595.422997][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3595.428278][ C0] ? firmware_map_remove+0x19d/0x19d [ 3595.433556][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3595.439021][ C0] schedule+0xd0/0x2a0 [ 3595.443069][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3595.448170][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3595.453615][ C0] ? find_held_lock+0x2d/0x110 [ 3595.458360][ C0] futex_wait+0x1e2/0x550 [ 3595.462667][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3595.467701][ C0] ? print_usage_bug+0x240/0x240 [ 3595.472629][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3595.477816][ C0] ? futex_wake+0x153/0x480 [ 3595.482314][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.488367][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3595.494161][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.500134][ C0] do_futex+0x15f/0x1ad0 [ 3595.504371][ C0] ? find_held_lock+0x2d/0x110 [ 3595.509130][ C0] ? futex_exit_release+0x60/0x60 [ 3595.514156][ C0] ? lock_downgrade+0x840/0x840 [ 3595.519002][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3595.523840][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.529823][ C0] ? __might_fault+0x190/0x1d0 [ 3595.534586][ C0] ? _copy_to_user+0x126/0x160 [ 3595.539346][ C0] __x64_sys_futex+0x376/0x4f0 [ 3595.544090][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3595.548586][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3595.554044][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.560020][ C0] ? do_syscall_64+0x21/0x7d0 [ 3595.564691][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.570696][ C0] do_syscall_64+0xf6/0x7d0 [ 3595.575205][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3595.581090][ C0] RIP: 0033:0x45ca69 [ 3595.584986][ C0] Code: Bad RIP value. [ 3595.589058][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3595.597474][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3595.605432][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3595.613392][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3595.621339][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3595.629296][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3595.637272][ C0] syz-executor.3 S29816 24425 7191 0x00000000 [ 3595.643582][ C0] Call Trace: [ 3595.646873][ C0] __schedule+0x8f3/0x1fc0 [ 3595.651297][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3595.656591][ C0] ? firmware_map_remove+0x19d/0x19d [ 3595.661864][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3595.667319][ C0] schedule+0xd0/0x2a0 [ 3595.671378][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3595.676481][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3595.681914][ C0] ? find_held_lock+0x2d/0x110 [ 3595.686676][ C0] futex_wait+0x1e2/0x550 [ 3595.691015][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3595.696043][ C0] ? print_usage_bug+0x240/0x240 [ 3595.700982][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3595.706178][ C0] ? futex_wake+0x153/0x480 [ 3595.710698][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.716669][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.722627][ C0] do_futex+0x15f/0x1ad0 [ 3595.726890][ C0] ? find_held_lock+0x2d/0x110 [ 3595.731660][ C0] ? futex_exit_release+0x60/0x60 [ 3595.736674][ C0] ? lock_downgrade+0x840/0x840 [ 3595.741518][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3595.746358][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.752347][ C0] ? __might_fault+0x190/0x1d0 [ 3595.757090][ C0] ? _copy_to_user+0x126/0x160 [ 3595.761832][ C0] __x64_sys_futex+0x376/0x4f0 [ 3595.766593][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3595.771097][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3595.776560][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.782518][ C0] ? do_syscall_64+0x21/0x7d0 [ 3595.787187][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.793182][ C0] do_syscall_64+0xf6/0x7d0 [ 3595.797674][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3595.803552][ C0] RIP: 0033:0x45ca69 [ 3595.807447][ C0] Code: Bad RIP value. [ 3595.811506][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3595.819921][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3595.827896][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3595.835854][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3595.843800][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3595.851745][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3595.859707][ C0] syz-executor.3 S29824 24456 7191 0x00000000 [ 3595.866032][ C0] Call Trace: [ 3595.869332][ C0] __schedule+0x8f3/0x1fc0 [ 3595.873740][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3595.879008][ C0] ? firmware_map_remove+0x19d/0x19d [ 3595.884304][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3595.889756][ C0] schedule+0xd0/0x2a0 [ 3595.893853][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3595.898946][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3595.904383][ C0] futex_wait+0x1e2/0x550 [ 3595.908706][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3595.913719][ C0] ? print_usage_bug+0x240/0x240 [ 3595.918635][ C0] ? hash_futex+0x10/0x200 [ 3595.923029][ C0] ? futex_wake+0x153/0x480 [ 3595.927540][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.933506][ C0] ? mark_lock+0x11f/0xdd0 [ 3595.937936][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3595.943894][ C0] do_futex+0x15f/0x1ad0 [ 3595.948139][ C0] ? find_held_lock+0x2d/0x110 [ 3595.952906][ C0] ? futex_exit_release+0x60/0x60 [ 3595.957909][ C0] ? lock_downgrade+0x840/0x840 [ 3595.962738][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3595.967579][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3595.973565][ C0] ? __might_fault+0x190/0x1d0 [ 3595.978308][ C0] ? _copy_to_user+0x126/0x160 [ 3595.983053][ C0] __x64_sys_futex+0x376/0x4f0 [ 3595.987815][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3595.992309][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3595.997744][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.003703][ C0] ? do_syscall_64+0x21/0x7d0 [ 3596.008373][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.014343][ C0] do_syscall_64+0xf6/0x7d0 [ 3596.018845][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3596.024723][ C0] RIP: 0033:0x45ca69 [ 3596.028626][ C0] Code: Bad RIP value. [ 3596.032687][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3596.041086][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3596.049064][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3596.057039][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3596.064997][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3596.072976][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3596.080936][ C0] syz-executor.3 S29824 24524 7191 0x00000000 [ 3596.087256][ C0] Call Trace: [ 3596.090566][ C0] __schedule+0x8f3/0x1fc0 [ 3596.094974][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3596.100239][ C0] ? firmware_map_remove+0x19d/0x19d [ 3596.105519][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3596.111000][ C0] schedule+0xd0/0x2a0 [ 3596.115080][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3596.120177][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3596.125636][ C0] futex_wait+0x1e2/0x550 [ 3596.129974][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3596.135005][ C0] ? print_usage_bug+0x240/0x240 [ 3596.139977][ C0] ? hash_futex+0x10/0x200 [ 3596.144377][ C0] ? futex_wake+0x153/0x480 [ 3596.148912][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.154888][ C0] ? mark_lock+0x11f/0xdd0 [ 3596.159296][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.165270][ C0] do_futex+0x15f/0x1ad0 [ 3596.169522][ C0] ? find_held_lock+0x2d/0x110 [ 3596.174275][ C0] ? futex_exit_release+0x60/0x60 [ 3596.179277][ C0] ? lock_downgrade+0x840/0x840 [ 3596.184105][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3596.188969][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.194945][ C0] ? __might_fault+0x190/0x1d0 [ 3596.199687][ C0] ? _copy_to_user+0x126/0x160 [ 3596.204429][ C0] __x64_sys_futex+0x376/0x4f0 [ 3596.209189][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3596.213697][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3596.219135][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.225108][ C0] ? do_syscall_64+0x21/0x7d0 [ 3596.229790][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.235761][ C0] do_syscall_64+0xf6/0x7d0 [ 3596.240253][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3596.246133][ C0] RIP: 0033:0x45ca69 [ 3596.250039][ C0] Code: Bad RIP value. [ 3596.254104][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3596.262528][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3596.270499][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3596.278495][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3596.286454][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3596.294594][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3596.302568][ C0] syz-executor.3 S29824 24577 7191 0x00000000 [ 3596.308883][ C0] Call Trace: [ 3596.312165][ C0] __schedule+0x8f3/0x1fc0 [ 3596.316562][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3596.321861][ C0] ? firmware_map_remove+0x19d/0x19d [ 3596.327137][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3596.332586][ C0] schedule+0xd0/0x2a0 [ 3596.336634][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3596.341734][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3596.347207][ C0] futex_wait+0x1e2/0x550 [ 3596.351534][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3596.356551][ C0] ? print_usage_bug+0x240/0x240 [ 3596.361481][ C0] ? hash_futex+0x10/0x200 [ 3596.365889][ C0] ? futex_wake+0x153/0x480 [ 3596.370410][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.376382][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.382352][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.388339][ C0] do_futex+0x15f/0x1ad0 [ 3596.392589][ C0] ? find_held_lock+0x2d/0x110 [ 3596.397332][ C0] ? futex_exit_release+0x60/0x60 [ 3596.402333][ C0] ? lock_downgrade+0x840/0x840 [ 3596.407176][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3596.412017][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.417984][ C0] ? __might_fault+0x190/0x1d0 [ 3596.422724][ C0] ? _copy_to_user+0x126/0x160 [ 3596.427507][ C0] __x64_sys_futex+0x376/0x4f0 [ 3596.432260][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3596.436754][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3596.442188][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.448161][ C0] ? do_syscall_64+0x21/0x7d0 [ 3596.452828][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.458789][ C0] do_syscall_64+0xf6/0x7d0 [ 3596.463271][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3596.469147][ C0] RIP: 0033:0x45ca69 [ 3596.473048][ C0] Code: Bad RIP value. [ 3596.477111][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3596.485505][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3596.493478][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3596.501427][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3596.509390][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3596.517350][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3596.525348][ C0] syz-executor.3 S26912 24611 7191 0x00000000 [ 3596.531674][ C0] Call Trace: [ 3596.534962][ C0] __schedule+0x8f3/0x1fc0 [ 3596.539385][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3596.544677][ C0] ? firmware_map_remove+0x19d/0x19d [ 3596.549973][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3596.555433][ C0] schedule+0xd0/0x2a0 [ 3596.559490][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3596.564598][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3596.570071][ C0] futex_wait+0x1e2/0x550 [ 3596.574395][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3596.579398][ C0] ? print_usage_bug+0x240/0x240 [ 3596.584329][ C0] ? hash_futex+0x10/0x200 [ 3596.588738][ C0] ? futex_wake+0x153/0x480 [ 3596.593252][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.599216][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.605190][ C0] do_futex+0x15f/0x1ad0 [ 3596.609444][ C0] ? find_held_lock+0x2d/0x110 [ 3596.614195][ C0] ? futex_exit_release+0x60/0x60 [ 3596.619210][ C0] ? lock_downgrade+0x840/0x840 [ 3596.624039][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3596.628882][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.634857][ C0] ? __might_fault+0x190/0x1d0 [ 3596.639597][ C0] ? _copy_to_user+0x126/0x160 [ 3596.644378][ C0] __x64_sys_futex+0x376/0x4f0 [ 3596.649140][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3596.653634][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3596.659070][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.665045][ C0] ? do_syscall_64+0x21/0x7d0 [ 3596.669719][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.675725][ C0] do_syscall_64+0xf6/0x7d0 [ 3596.680208][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3596.686087][ C0] RIP: 0033:0x45ca69 [ 3596.689987][ C0] Code: Bad RIP value. [ 3596.694043][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3596.702427][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3596.710381][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3596.718339][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3596.726293][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3596.734250][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3596.742211][ C0] syz-executor.3 S29792 24654 7191 0x00000000 [ 3596.748536][ C0] Call Trace: [ 3596.751817][ C0] __schedule+0x8f3/0x1fc0 [ 3596.756214][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3596.761488][ C0] ? firmware_map_remove+0x19d/0x19d [ 3596.766776][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3596.772238][ C0] schedule+0xd0/0x2a0 [ 3596.776288][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3596.781373][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3596.786818][ C0] ? find_held_lock+0x2d/0x110 [ 3596.791572][ C0] futex_wait+0x1e2/0x550 [ 3596.795895][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3596.800911][ C0] ? print_usage_bug+0x240/0x240 [ 3596.805842][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3596.811046][ C0] ? futex_wake+0x153/0x480 [ 3596.815590][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.821561][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3596.827532][ C0] do_futex+0x15f/0x1ad0 [ 3596.831783][ C0] ? find_held_lock+0x2d/0x110 [ 3596.836538][ C0] ? futex_exit_release+0x60/0x60 [ 3596.841540][ C0] ? lock_downgrade+0x840/0x840 [ 3596.846383][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3596.851220][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.857201][ C0] ? __might_fault+0x190/0x1d0 [ 3596.861945][ C0] ? _copy_to_user+0x126/0x160 [ 3596.866713][ C0] __x64_sys_futex+0x376/0x4f0 [ 3596.871483][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3596.875978][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3596.881508][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.887480][ C0] ? do_syscall_64+0x21/0x7d0 [ 3596.892144][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3596.898102][ C0] do_syscall_64+0xf6/0x7d0 [ 3596.902599][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3596.908476][ C0] RIP: 0033:0x45ca69 [ 3596.912374][ C0] Code: Bad RIP value. [ 3596.916425][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3596.924839][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3596.932821][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3596.940789][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3596.948745][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3596.956712][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3596.964719][ C0] syz-executor.3 S29864 24683 7191 0x00000000 [ 3596.971078][ C0] Call Trace: [ 3596.974374][ C0] __schedule+0x8f3/0x1fc0 [ 3596.978770][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3596.984044][ C0] ? firmware_map_remove+0x19d/0x19d [ 3596.989320][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3596.994781][ C0] schedule+0xd0/0x2a0 [ 3596.998828][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3597.003924][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3597.009376][ C0] ? find_held_lock+0x2d/0x110 [ 3597.014151][ C0] futex_wait+0x1e2/0x550 [ 3597.018478][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3597.023479][ C0] ? print_usage_bug+0x240/0x240 [ 3597.028421][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3597.033619][ C0] ? futex_wake+0x153/0x480 [ 3597.038109][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.044072][ C0] ? mark_lock+0x11f/0xdd0 [ 3597.048481][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.054462][ C0] do_futex+0x15f/0x1ad0 [ 3597.058687][ C0] ? find_held_lock+0x2d/0x110 [ 3597.063430][ C0] ? futex_exit_release+0x60/0x60 [ 3597.068445][ C0] ? lock_downgrade+0x840/0x840 [ 3597.073295][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3597.078123][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.084084][ C0] ? __might_fault+0x190/0x1d0 [ 3597.088838][ C0] ? _copy_to_user+0x126/0x160 [ 3597.093682][ C0] __x64_sys_futex+0x376/0x4f0 [ 3597.098442][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3597.102925][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3597.108372][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.114352][ C0] ? do_syscall_64+0x21/0x7d0 [ 3597.119006][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.124987][ C0] do_syscall_64+0xf6/0x7d0 [ 3597.129505][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3597.135391][ C0] RIP: 0033:0x45ca69 [ 3597.139271][ C0] Code: Bad RIP value. [ 3597.143314][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3597.151711][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3597.159670][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3597.167632][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3597.175591][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3597.183573][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3597.191536][ C0] syz-executor.4 S29824 24823 7287 0x00000000 [ 3597.197851][ C0] Call Trace: [ 3597.201129][ C0] __schedule+0x8f3/0x1fc0 [ 3597.205536][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3597.210830][ C0] ? firmware_map_remove+0x19d/0x19d [ 3597.216115][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3597.221556][ C0] schedule+0xd0/0x2a0 [ 3597.225622][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3597.230734][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3597.236201][ C0] futex_wait+0x1e2/0x550 [ 3597.240527][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3597.245543][ C0] ? print_usage_bug+0x240/0x240 [ 3597.250481][ C0] ? hash_futex+0x10/0x200 [ 3597.254900][ C0] ? futex_wake+0x153/0x480 [ 3597.259440][ C0] ? do_wp_page+0x512/0x1440 [ 3597.264051][ C0] do_futex+0x15f/0x1ad0 [ 3597.268293][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3597.273489][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3597.278326][ C0] ? futex_exit_release+0x60/0x60 [ 3597.283332][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3597.288186][ C0] ? lock_downgrade+0x840/0x840 [ 3597.293025][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3597.298072][ C0] __x64_sys_futex+0x376/0x4f0 [ 3597.302816][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3597.307316][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3597.312788][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.318746][ C0] ? do_syscall_64+0x21/0x7d0 [ 3597.323402][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.329378][ C0] do_syscall_64+0xf6/0x7d0 [ 3597.333885][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3597.339758][ C0] RIP: 0033:0x45ca69 [ 3597.343643][ C0] Code: Bad RIP value. [ 3597.347694][ C0] RSP: 002b:00007f36b5603cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3597.356093][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3597.364040][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3597.372005][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3597.379964][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3597.387922][ C0] R13: 0000000000c9fb6f R14: 00007f36b56049c0 R15: 000000000078bfac [ 3597.395895][ C0] syz-executor.4 S29096 24858 7287 0x00000000 [ 3597.402218][ C0] Call Trace: [ 3597.405503][ C0] __schedule+0x8f3/0x1fc0 [ 3597.409920][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3597.422404][ C0] ? firmware_map_remove+0x19d/0x19d [ 3597.427682][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3597.433132][ C0] schedule+0xd0/0x2a0 [ 3597.437211][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3597.442317][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3597.447770][ C0] ? find_held_lock+0x2d/0x110 [ 3597.452527][ C0] futex_wait+0x1e2/0x550 [ 3597.456854][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3597.461888][ C0] ? print_usage_bug+0x240/0x240 [ 3597.466822][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3597.472013][ C0] ? futex_wake+0x153/0x480 [ 3597.476525][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.482511][ C0] ? mark_lock+0x11f/0xdd0 [ 3597.486920][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.492888][ C0] do_futex+0x15f/0x1ad0 [ 3597.497132][ C0] ? find_held_lock+0x2d/0x110 [ 3597.501905][ C0] ? futex_exit_release+0x60/0x60 [ 3597.506924][ C0] ? lock_downgrade+0x840/0x840 [ 3597.511763][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3597.516604][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.522568][ C0] ? __might_fault+0x190/0x1d0 [ 3597.527323][ C0] ? _copy_to_user+0x126/0x160 [ 3597.532085][ C0] __x64_sys_futex+0x376/0x4f0 [ 3597.536831][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3597.541314][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3597.546761][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.552744][ C0] ? do_syscall_64+0x21/0x7d0 [ 3597.557398][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.563356][ C0] do_syscall_64+0xf6/0x7d0 [ 3597.567855][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3597.573741][ C0] RIP: 0033:0x45ca69 [ 3597.577641][ C0] Code: Bad RIP value. [ 3597.581702][ C0] RSP: 002b:00007f36b5624cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3597.590130][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3597.598106][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3597.606064][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3597.614031][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3597.621980][ C0] R13: 0000000000c9fb6f R14: 00007f36b56259c0 R15: 000000000078bf0c [ 3597.629960][ C0] syz-executor.4 S29096 24860 7287 0x00000000 [ 3597.636287][ C0] Call Trace: [ 3597.639567][ C0] __schedule+0x8f3/0x1fc0 [ 3597.643965][ C0] ? firmware_map_remove+0x19d/0x19d [ 3597.649243][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3597.654708][ C0] schedule+0xd0/0x2a0 [ 3597.658773][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3597.663862][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3597.669310][ C0] ? find_held_lock+0x2d/0x110 [ 3597.674069][ C0] futex_wait+0x1e2/0x550 [ 3597.678380][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3597.683380][ C0] ? print_usage_bug+0x240/0x240 [ 3597.688317][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3597.693505][ C0] ? futex_wake+0x153/0x480 [ 3597.697995][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.703952][ C0] ? do_wp_page+0x512/0x1440 [ 3597.708533][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.714504][ C0] do_futex+0x15f/0x1ad0 [ 3597.718739][ C0] ? find_held_lock+0x2d/0x110 [ 3597.723491][ C0] ? futex_exit_release+0x60/0x60 [ 3597.728508][ C0] ? lock_downgrade+0x840/0x840 [ 3597.733347][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3597.738181][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.744143][ C0] ? __might_fault+0x190/0x1d0 [ 3597.748901][ C0] ? _copy_to_user+0x126/0x160 [ 3597.753658][ C0] __x64_sys_futex+0x376/0x4f0 [ 3597.758402][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3597.762900][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3597.768345][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.774321][ C0] ? do_syscall_64+0x21/0x7d0 [ 3597.778975][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.784956][ C0] do_syscall_64+0xf6/0x7d0 [ 3597.789466][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3597.795345][ C0] RIP: 0033:0x45ca69 [ 3597.799233][ C0] Code: Bad RIP value. [ 3597.803278][ C0] RSP: 002b:00007f36b5624cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3597.811671][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3597.819635][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3597.827594][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3597.835572][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3597.843532][ C0] R13: 0000000000c9fb6f R14: 00007f36b56259c0 R15: 000000000078bf0c [ 3597.851494][ C0] syz-executor.3 S29616 24915 7191 0x00000000 [ 3597.857802][ C0] Call Trace: [ 3597.861097][ C0] __schedule+0x8f3/0x1fc0 [ 3597.865504][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3597.870795][ C0] ? firmware_map_remove+0x19d/0x19d [ 3597.876083][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3597.881566][ C0] schedule+0xd0/0x2a0 [ 3597.885629][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3597.890744][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3597.896205][ C0] ? find_held_lock+0x2d/0x110 [ 3597.900981][ C0] futex_wait+0x1e2/0x550 [ 3597.905308][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3597.910334][ C0] ? print_usage_bug+0x240/0x240 [ 3597.915279][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3597.920471][ C0] ? futex_wake+0x153/0x480 [ 3597.924983][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.930958][ C0] ? page_fault+0x39/0x40 [ 3597.935279][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3597.941237][ C0] do_futex+0x15f/0x1ad0 [ 3597.945481][ C0] ? find_held_lock+0x2d/0x110 [ 3597.950245][ C0] ? futex_exit_release+0x60/0x60 [ 3597.955258][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3597.960690][ C0] ? lock_downgrade+0x840/0x840 [ 3597.965532][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3597.970381][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3597.976356][ C0] ? __might_fault+0x190/0x1d0 [ 3597.981098][ C0] ? _copy_to_user+0x126/0x160 [ 3597.985859][ C0] __x64_sys_futex+0x376/0x4f0 [ 3597.990629][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3597.995124][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3598.000561][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.006531][ C0] ? do_syscall_64+0x21/0x7d0 [ 3598.011208][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.017181][ C0] do_syscall_64+0xf6/0x7d0 [ 3598.021662][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3598.027538][ C0] RIP: 0033:0x45ca69 [ 3598.031439][ C0] Code: Bad RIP value. [ 3598.035505][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3598.043914][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3598.051865][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3598.059813][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3598.067769][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3598.075728][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3598.083687][ C0] syz-executor.3 S29128 25092 7191 0x00000000 [ 3598.090009][ C0] Call Trace: [ 3598.093292][ C0] __schedule+0x8f3/0x1fc0 [ 3598.097709][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3598.102989][ C0] ? firmware_map_remove+0x19d/0x19d [ 3598.108268][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3598.113720][ C0] schedule+0xd0/0x2a0 [ 3598.117772][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3598.122860][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3598.128315][ C0] futex_wait+0x1e2/0x550 [ 3598.132651][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3598.137655][ C0] ? wake_up_q+0xc1/0x140 [ 3598.141961][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3598.147150][ C0] ? futex_wake+0x153/0x480 [ 3598.151651][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.157607][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.163564][ C0] do_futex+0x15f/0x1ad0 [ 3598.167809][ C0] ? find_held_lock+0x2d/0x110 [ 3598.172577][ C0] ? futex_exit_release+0x60/0x60 [ 3598.177579][ C0] ? lock_downgrade+0x840/0x840 [ 3598.182425][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3598.187269][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.193252][ C0] ? __might_fault+0x190/0x1d0 [ 3598.198023][ C0] ? _copy_to_user+0x126/0x160 [ 3598.202777][ C0] __x64_sys_futex+0x376/0x4f0 [ 3598.207533][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3598.212035][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3598.217469][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.223426][ C0] ? do_syscall_64+0x21/0x7d0 [ 3598.228100][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.234095][ C0] do_syscall_64+0xf6/0x7d0 [ 3598.238597][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3598.244466][ C0] RIP: 0033:0x45ca69 [ 3598.248355][ C0] Code: Bad RIP value. [ 3598.252412][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3598.260822][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3598.268778][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3598.276766][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3598.284723][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3598.292711][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3598.300710][ C0] syz-executor.3 S29824 25217 7191 0x00000000 [ 3598.307032][ C0] Call Trace: [ 3598.310329][ C0] __schedule+0x8f3/0x1fc0 [ 3598.314756][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3598.320031][ C0] ? firmware_map_remove+0x19d/0x19d [ 3598.325310][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3598.330771][ C0] schedule+0xd0/0x2a0 [ 3598.334844][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3598.339961][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3598.345416][ C0] futex_wait+0x1e2/0x550 [ 3598.349750][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3598.354774][ C0] ? print_usage_bug+0x240/0x240 [ 3598.359701][ C0] ? hash_futex+0x10/0x200 [ 3598.364094][ C0] ? futex_wake+0x153/0x480 [ 3598.368604][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.374581][ C0] ? mark_lock+0x11f/0xdd0 [ 3598.378988][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.384959][ C0] do_futex+0x15f/0x1ad0 [ 3598.389230][ C0] ? find_held_lock+0x2d/0x110 [ 3598.393983][ C0] ? futex_exit_release+0x60/0x60 [ 3598.398996][ C0] ? lock_downgrade+0x840/0x840 [ 3598.403851][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3598.408694][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.414703][ C0] ? __might_fault+0x190/0x1d0 [ 3598.419450][ C0] ? _copy_to_user+0x126/0x160 [ 3598.424196][ C0] __x64_sys_futex+0x376/0x4f0 [ 3598.428959][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3598.433474][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3598.438909][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.444900][ C0] ? do_syscall_64+0x21/0x7d0 [ 3598.449579][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.455562][ C0] do_syscall_64+0xf6/0x7d0 [ 3598.460046][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3598.465934][ C0] RIP: 0033:0x45ca69 [ 3598.469836][ C0] Code: Bad RIP value. [ 3598.473887][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3598.482273][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3598.490230][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3598.498191][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3598.506147][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3598.514123][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3598.522083][ C0] syz-executor.3 S29824 25260 7191 0x00000000 [ 3598.528397][ C0] Call Trace: [ 3598.531695][ C0] __schedule+0x8f3/0x1fc0 [ 3598.536106][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3598.541384][ C0] ? firmware_map_remove+0x19d/0x19d [ 3598.546664][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3598.552112][ C0] schedule+0xd0/0x2a0 [ 3598.556174][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3598.561278][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3598.566737][ C0] futex_wait+0x1e2/0x550 [ 3598.571079][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3598.576106][ C0] ? print_usage_bug+0x240/0x240 [ 3598.581034][ C0] ? hash_futex+0x10/0x200 [ 3598.585462][ C0] ? futex_wake+0x153/0x480 [ 3598.589997][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.595964][ C0] ? mark_lock+0x11f/0xdd0 [ 3598.600360][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.606331][ C0] do_futex+0x15f/0x1ad0 [ 3598.610585][ C0] ? find_held_lock+0x2d/0x110 [ 3598.615352][ C0] ? futex_exit_release+0x60/0x60 [ 3598.620379][ C0] ? lock_downgrade+0x840/0x840 [ 3598.625233][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3598.630083][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.636063][ C0] ? __might_fault+0x190/0x1d0 [ 3598.640816][ C0] ? _copy_to_user+0x126/0x160 [ 3598.645580][ C0] __x64_sys_futex+0x376/0x4f0 [ 3598.650366][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3598.654859][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3598.660294][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.666268][ C0] ? do_syscall_64+0x21/0x7d0 [ 3598.670952][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.676934][ C0] do_syscall_64+0xf6/0x7d0 [ 3598.681417][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3598.687295][ C0] RIP: 0033:0x45ca69 [ 3598.691194][ C0] Code: Bad RIP value. [ 3598.695254][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3598.703665][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3598.711612][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3598.719561][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3598.727533][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3598.735502][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3598.743471][ C0] syz-executor.3 S29816 25278 7191 0x00000000 [ 3598.749807][ C0] Call Trace: [ 3598.753090][ C0] __schedule+0x8f3/0x1fc0 [ 3598.757497][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3598.762775][ C0] ? firmware_map_remove+0x19d/0x19d [ 3598.768060][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3598.773510][ C0] schedule+0xd0/0x2a0 [ 3598.777576][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3598.782665][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3598.788119][ C0] futex_wait+0x1e2/0x550 [ 3598.792440][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3598.797444][ C0] ? wake_up_q+0xc1/0x140 [ 3598.801748][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3598.806934][ C0] ? futex_wake+0x153/0x480 [ 3598.811436][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.817391][ C0] ? mark_lock+0x11f/0xdd0 [ 3598.821787][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3598.827759][ C0] do_futex+0x15f/0x1ad0 [ 3598.832005][ C0] ? find_held_lock+0x2d/0x110 [ 3598.836763][ C0] ? futex_exit_release+0x60/0x60 [ 3598.841766][ C0] ? lock_downgrade+0x840/0x840 [ 3598.846607][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3598.851460][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.857430][ C0] ? __might_fault+0x190/0x1d0 [ 3598.862170][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3598.867627][ C0] __x64_sys_futex+0x376/0x4f0 [ 3598.872382][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3598.876876][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3598.882318][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.888290][ C0] ? do_syscall_64+0x21/0x7d0 [ 3598.892965][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3598.898936][ C0] do_syscall_64+0xf6/0x7d0 [ 3598.903418][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3598.909297][ C0] RIP: 0033:0x45ca69 [ 3598.913187][ C0] Code: Bad RIP value. [ 3598.917228][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3598.925631][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3598.933588][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3598.941548][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3598.949503][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3598.957462][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3598.965440][ C0] syz-executor.3 S29824 25320 7191 0x00000000 [ 3598.971767][ C0] Call Trace: [ 3598.975039][ C0] __schedule+0x8f3/0x1fc0 [ 3598.979444][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3598.984725][ C0] ? firmware_map_remove+0x19d/0x19d [ 3598.990018][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3598.995487][ C0] schedule+0xd0/0x2a0 [ 3598.999552][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3599.004653][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3599.010108][ C0] ? find_held_lock+0x2d/0x110 [ 3599.014880][ C0] futex_wait+0x1e2/0x550 [ 3599.019205][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3599.024207][ C0] ? print_usage_bug+0x240/0x240 [ 3599.029137][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3599.034322][ C0] ? futex_wake+0x153/0x480 [ 3599.038819][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3599.044791][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3599.050776][ C0] do_futex+0x15f/0x1ad0 [ 3599.055027][ C0] ? find_held_lock+0x2d/0x110 [ 3599.059786][ C0] ? futex_exit_release+0x60/0x60 [ 3599.064803][ C0] ? lock_downgrade+0x840/0x840 [ 3599.069654][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3599.074492][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.080456][ C0] ? __might_fault+0x190/0x1d0 [ 3599.085211][ C0] ? _copy_to_user+0x126/0x160 [ 3599.089985][ C0] __x64_sys_futex+0x376/0x4f0 [ 3599.094754][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3599.099248][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3599.104695][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.110681][ C0] ? do_syscall_64+0x21/0x7d0 [ 3599.115347][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.121304][ C0] do_syscall_64+0xf6/0x7d0 [ 3599.125800][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3599.131696][ C0] RIP: 0033:0x45ca69 [ 3599.135592][ C0] Code: Bad RIP value. [ 3599.139644][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3599.148050][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3599.156025][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3599.163981][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3599.171928][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3599.179876][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3599.187854][ C0] syz-executor.3 S29816 25495 7191 0x00000000 [ 3599.194197][ C0] Call Trace: [ 3599.197470][ C0] __schedule+0x8f3/0x1fc0 [ 3599.201865][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3599.207146][ C0] ? firmware_map_remove+0x19d/0x19d [ 3599.212422][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3599.217876][ C0] schedule+0xd0/0x2a0 [ 3599.221937][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3599.227043][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3599.232490][ C0] ? find_held_lock+0x2d/0x110 [ 3599.237261][ C0] futex_wait+0x1e2/0x550 [ 3599.241570][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3599.246585][ C0] ? print_usage_bug+0x240/0x240 [ 3599.251519][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3599.256694][ C0] ? futex_wake+0x153/0x480 [ 3599.261180][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3599.267161][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3599.273151][ C0] do_futex+0x15f/0x1ad0 [ 3599.277396][ C0] ? find_held_lock+0x2d/0x110 [ 3599.282139][ C0] ? futex_exit_release+0x60/0x60 [ 3599.287159][ C0] ? lock_downgrade+0x840/0x840 [ 3599.292018][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3599.296846][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.302823][ C0] ? __might_fault+0x190/0x1d0 [ 3599.307581][ C0] ? _copy_to_user+0x126/0x160 [ 3599.312338][ C0] __x64_sys_futex+0x376/0x4f0 [ 3599.317083][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3599.321565][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3599.327018][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.332998][ C0] ? do_syscall_64+0x21/0x7d0 [ 3599.337664][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.343644][ C0] do_syscall_64+0xf6/0x7d0 [ 3599.348142][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3599.354020][ C0] RIP: 0033:0x45ca69 [ 3599.357914][ C0] Code: Bad RIP value. [ 3599.361953][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3599.370349][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3599.378309][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3599.386265][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3599.394224][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3599.402169][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3599.410149][ C0] kworker/u4:1 I24768 1262 2 0x80004000 [ 3599.416518][ C0] Workqueue: 0x0 (events_unbound) [ 3599.421616][ C0] Call Trace: [ 3599.424901][ C0] __schedule+0x8f3/0x1fc0 [ 3599.429318][ C0] ? worker_thread+0x240/0xe20 [ 3599.434098][ C0] ? firmware_map_remove+0x19d/0x19d [ 3599.439367][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3599.444371][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3599.449561][ C0] schedule+0xd0/0x2a0 [ 3599.453642][ C0] worker_thread+0x245/0xe20 [ 3599.458234][ C0] ? process_one_work+0x16a0/0x16a0 [ 3599.463423][ C0] kthread+0x388/0x470 [ 3599.467481][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.473203][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.478902][ C0] ret_from_fork+0x24/0x30 [ 3599.483315][ C0] kworker/1:4 I22624 9268 2 0x80004000 [ 3599.489669][ C0] Workqueue: 0x0 (wg-crypt-wg1) [ 3599.494599][ C0] Call Trace: [ 3599.497880][ C0] __schedule+0x8f3/0x1fc0 [ 3599.502272][ C0] ? worker_thread+0x240/0xe20 [ 3599.507049][ C0] ? firmware_map_remove+0x19d/0x19d [ 3599.512327][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3599.517524][ C0] schedule+0xd0/0x2a0 [ 3599.521589][ C0] worker_thread+0x245/0xe20 [ 3599.526182][ C0] ? process_one_work+0x16a0/0x16a0 [ 3599.531371][ C0] kthread+0x388/0x470 [ 3599.535428][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.541126][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.546838][ C0] ret_from_fork+0x24/0x30 [ 3599.551270][ C0] kworker/0:5 R running task 22600 14285 2 0x80004000 [ 3599.559186][ C0] Workqueue: 0x0 (events) [ 3599.563574][ C0] Call Trace: [ 3599.566856][ C0] __schedule+0x8f3/0x1fc0 [ 3599.571272][ C0] ? worker_thread+0x240/0xe20 [ 3599.576044][ C0] ? firmware_map_remove+0x19d/0x19d [ 3599.581336][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3599.586527][ C0] schedule+0xd0/0x2a0 [ 3599.590598][ C0] worker_thread+0x245/0xe20 [ 3599.595183][ C0] ? process_one_work+0x16a0/0x16a0 [ 3599.600358][ C0] kthread+0x388/0x470 [ 3599.604410][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.610114][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.615823][ C0] ret_from_fork+0x24/0x30 [ 3599.620234][ C0] kworker/u4:4 I25184 14667 2 0x80004000 [ 3599.626674][ C0] Workqueue: bat_events batadv_nc_worker [ 3599.632295][ C0] Call Trace: [ 3599.635580][ C0] __schedule+0x8f3/0x1fc0 [ 3599.639971][ C0] ? worker_thread+0x240/0xe20 [ 3599.644730][ C0] ? firmware_map_remove+0x19d/0x19d [ 3599.650111][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 3599.655048][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3599.660257][ C0] schedule+0xd0/0x2a0 [ 3599.664345][ C0] worker_thread+0x245/0xe20 [ 3599.668949][ C0] ? process_one_work+0x16a0/0x16a0 [ 3599.674135][ C0] kthread+0x388/0x470 [ 3599.678181][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.683876][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.689585][ C0] ret_from_fork+0x24/0x30 [ 3599.693997][ C0] kworker/1:1 D23160 2697 2 0x80004000 [ 3599.700316][ C0] Workqueue: usb_hub_wq hub_event [ 3599.705320][ C0] Call Trace: [ 3599.708635][ C0] __schedule+0x8f3/0x1fc0 [ 3599.713044][ C0] ? firmware_map_remove+0x19d/0x19d [ 3599.718328][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.724299][ C0] schedule+0xd0/0x2a0 [ 3599.728446][ C0] usb_kill_urb+0x21b/0x2b0 [ 3599.732942][ C0] ? usb_poison_urb+0x290/0x290 [ 3599.737782][ C0] ? finish_wait+0x260/0x260 [ 3599.742364][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3599.747552][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.753523][ C0] usb_hcd_flush_endpoint+0x24e/0x2c0 [ 3599.758875][ C0] usb_disable_endpoint+0x198/0x240 [ 3599.764050][ C0] usb_disable_interface+0x115/0x1a0 [ 3599.769340][ C0] usb_unbind_interface+0x3b0/0x8a0 [ 3599.774614][ C0] ? __pm_runtime_idle+0xd1/0x320 [ 3599.779633][ C0] ? usb_autoresume_device+0x60/0x60 [ 3599.784941][ C0] device_release_driver_internal+0x432/0x500 [ 3599.791033][ C0] bus_remove_device+0x2dc/0x4a0 [ 3599.795962][ C0] device_del+0x481/0xd30 [ 3599.800270][ C0] ? device_link_remove+0x110/0x110 [ 3599.805483][ C0] ? usb_remove_ep_devs+0x3e/0x80 [ 3599.810508][ C0] ? remove_intf_ep_devs+0x13f/0x1d0 [ 3599.815786][ C0] usb_disable_device+0x211/0x690 [ 3599.820790][ C0] usb_disconnect+0x284/0x8d0 [ 3599.825463][ C0] hub_event+0x17ca/0x38f0 [ 3599.829908][ C0] ? hub_port_debounce+0x260/0x260 [ 3599.835011][ C0] ? __queue_work+0x730/0x1280 [ 3599.839767][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3599.845222][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3599.850769][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3599.856741][ C0] process_one_work+0x965/0x16a0 [ 3599.861660][ C0] ? lock_release+0x800/0x800 [ 3599.866325][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 3599.871686][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 3599.876632][ C0] worker_thread+0x96/0xe20 [ 3599.881131][ C0] ? process_one_work+0x16a0/0x16a0 [ 3599.886320][ C0] kthread+0x388/0x470 [ 3599.890385][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.896106][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3599.901818][ C0] ret_from_fork+0x24/0x30 [ 3599.906236][ C0] kvm-nx-lpage-re S29472 10137 2 0x80004000 [ 3599.912563][ C0] Call Trace: [ 3599.915846][ C0] __schedule+0x8f3/0x1fc0 [ 3599.920242][ C0] ? firmware_map_remove+0x19d/0x19d [ 3599.925518][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3599.931312][ C0] schedule+0xd0/0x2a0 [ 3599.935362][ C0] schedule_timeout+0x35c/0x850 [ 3599.940203][ C0] ? usleep_range+0x160/0x160 [ 3599.944870][ C0] ? kvm_nx_lpage_recovery_worker+0x56e/0x790 [ 3599.950936][ C0] ? __next_timer_interrupt+0x190/0x190 [ 3599.956575][ C0] ? finish_task_switch+0x147/0x750 [ 3599.961753][ C0] kvm_nx_lpage_recovery_worker+0x1d3/0x790 [ 3599.967645][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3599.972746][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3599.978530][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3599.984490][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3599.989509][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 3599.994694][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3599.999781][ C0] ? kvm_exit+0x80/0x80 [ 3600.003913][ C0] kthread+0x388/0x470 [ 3600.007971][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3600.013686][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3600.019395][ C0] ret_from_fork+0x24/0x30 [ 3600.023796][ C0] syz-executor.3 S28904 10164 7191 0x00000000 [ 3600.030112][ C0] Call Trace: [ 3600.033392][ C0] __schedule+0x8f3/0x1fc0 [ 3600.037790][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3600.043058][ C0] ? firmware_map_remove+0x19d/0x19d [ 3600.048340][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3600.053790][ C0] schedule+0xd0/0x2a0 [ 3600.057841][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3600.062930][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3600.068388][ C0] futex_wait+0x1e2/0x550 [ 3600.072722][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3600.077740][ C0] ? print_usage_bug+0x240/0x240 [ 3600.082654][ C0] ? hash_futex+0x10/0x200 [ 3600.087062][ C0] ? futex_wake+0x153/0x480 [ 3600.091584][ C0] ? do_wp_page+0x512/0x1440 [ 3600.096171][ C0] do_futex+0x15f/0x1ad0 [ 3600.100421][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3600.105611][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3600.110466][ C0] ? futex_exit_release+0x60/0x60 [ 3600.115497][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3600.120414][ C0] ? lock_downgrade+0x840/0x840 [ 3600.125263][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3600.130305][ C0] __x64_sys_futex+0x376/0x4f0 [ 3600.135063][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3600.139552][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3600.145002][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.151002][ C0] ? do_syscall_64+0x21/0x7d0 [ 3600.155673][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.161633][ C0] do_syscall_64+0xf6/0x7d0 [ 3600.166132][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3600.172012][ C0] RIP: 0033:0x45ca69 [ 3600.175901][ C0] Code: Bad RIP value. [ 3600.179942][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3600.188334][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3600.196307][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3600.204252][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3600.212222][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3600.220191][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3600.228187][ C0] syz-executor.3 S28904 10166 7191 0x00000000 [ 3600.234515][ C0] Call Trace: [ 3600.237795][ C0] __schedule+0x8f3/0x1fc0 [ 3600.242199][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3600.247481][ C0] ? firmware_map_remove+0x19d/0x19d [ 3600.252757][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3600.258195][ C0] schedule+0xd0/0x2a0 [ 3600.262265][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3600.267372][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3600.272823][ C0] futex_wait+0x1e2/0x550 [ 3600.277143][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3600.282147][ C0] ? print_usage_bug+0x240/0x240 [ 3600.287079][ C0] ? hash_futex+0x10/0x200 [ 3600.291484][ C0] ? futex_wake+0x153/0x480 [ 3600.295972][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3600.301947][ C0] ? do_wp_page+0x512/0x1440 [ 3600.306526][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3600.312495][ C0] do_futex+0x15f/0x1ad0 [ 3600.316740][ C0] ? find_held_lock+0x2d/0x110 [ 3600.321507][ C0] ? futex_exit_release+0x60/0x60 [ 3600.326526][ C0] ? lock_downgrade+0x840/0x840 [ 3600.331373][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3600.336214][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.342190][ C0] ? __might_fault+0x190/0x1d0 [ 3600.346945][ C0] ? _copy_to_user+0x126/0x160 [ 3600.351700][ C0] __x64_sys_futex+0x376/0x4f0 [ 3600.356445][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3600.360934][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3600.366380][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.372348][ C0] ? do_syscall_64+0x21/0x7d0 [ 3600.377034][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.383000][ C0] do_syscall_64+0xf6/0x7d0 [ 3600.387498][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3600.393382][ C0] RIP: 0033:0x45ca69 [ 3600.397266][ C0] Code: Bad RIP value. [ 3600.401318][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3600.409712][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3600.417671][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3600.425630][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3600.433613][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3600.441581][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3600.449560][ C0] kvm-nx-lpage-re S29872 10173 2 0x80004000 [ 3600.455895][ C0] Call Trace: [ 3600.459179][ C0] __schedule+0x8f3/0x1fc0 [ 3600.463576][ C0] ? firmware_map_remove+0x19d/0x19d [ 3600.468855][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3600.474658][ C0] schedule+0xd0/0x2a0 [ 3600.478709][ C0] schedule_timeout+0x35c/0x850 [ 3600.483546][ C0] ? usleep_range+0x160/0x160 [ 3600.488215][ C0] ? kvm_nx_lpage_recovery_worker+0x56e/0x790 [ 3600.494272][ C0] ? __next_timer_interrupt+0x190/0x190 [ 3600.499799][ C0] ? finish_task_switch+0x147/0x750 [ 3600.505007][ C0] kvm_nx_lpage_recovery_worker+0x1d3/0x790 [ 3600.510912][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3600.516033][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3600.521842][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.527825][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3600.532842][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 3600.538038][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3600.543142][ C0] ? kvm_exit+0x80/0x80 [ 3600.547307][ C0] kthread+0x388/0x470 [ 3600.551363][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3600.557058][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3600.562755][ C0] ret_from_fork+0x24/0x30 [ 3600.567174][ C0] syz-executor.3 S28976 10210 7191 0x00000000 [ 3600.573502][ C0] Call Trace: [ 3600.576770][ C0] __schedule+0x8f3/0x1fc0 [ 3600.581161][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3600.586441][ C0] ? firmware_map_remove+0x19d/0x19d [ 3600.591717][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3600.597169][ C0] schedule+0xd0/0x2a0 [ 3600.601228][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3600.606329][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3600.611774][ C0] ? find_held_lock+0x2d/0x110 [ 3600.616564][ C0] futex_wait+0x1e2/0x550 [ 3600.620877][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3600.625891][ C0] ? print_usage_bug+0x240/0x240 [ 3600.630829][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3600.636018][ C0] ? futex_wake+0x153/0x480 [ 3600.640513][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3600.646487][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3600.652477][ C0] do_futex+0x15f/0x1ad0 [ 3600.656722][ C0] ? find_held_lock+0x2d/0x110 [ 3600.661469][ C0] ? futex_exit_release+0x60/0x60 [ 3600.666489][ C0] ? lock_downgrade+0x840/0x840 [ 3600.671341][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3600.676179][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.682146][ C0] ? __might_fault+0x190/0x1d0 [ 3600.686910][ C0] ? _copy_to_user+0x126/0x160 [ 3600.691667][ C0] __x64_sys_futex+0x376/0x4f0 [ 3600.696430][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3600.700934][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3600.706413][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.712396][ C0] ? do_syscall_64+0x21/0x7d0 [ 3600.717054][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.723017][ C0] do_syscall_64+0xf6/0x7d0 [ 3600.727516][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3600.733405][ C0] RIP: 0033:0x45ca69 [ 3600.737312][ C0] Code: Bad RIP value. [ 3600.741362][ C0] RSP: 002b:00007f2c9c8b4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3600.749756][ C0] RAX: ffffffffffffffda RBX: 000000000078c048 RCX: 000000000045ca69 [ 3600.757715][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078c048 [ 3600.765674][ C0] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 3600.773632][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3600.781580][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8b59c0 R15: 000000000078c04c [ 3600.789561][ C0] syz-executor.3 S29824 10211 7191 0x00000000 [ 3600.795889][ C0] Call Trace: [ 3600.799159][ C0] __schedule+0x8f3/0x1fc0 [ 3600.803563][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3600.808847][ C0] ? firmware_map_remove+0x19d/0x19d [ 3600.814138][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3600.819575][ C0] schedule+0xd0/0x2a0 [ 3600.823634][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3600.828733][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3600.834180][ C0] ? find_held_lock+0x2d/0x110 [ 3600.838926][ C0] futex_wait+0x1e2/0x550 [ 3600.843232][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3600.848245][ C0] ? print_usage_bug+0x240/0x240 [ 3600.853174][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3600.858361][ C0] ? futex_wake+0x153/0x480 [ 3600.862859][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3600.868847][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3600.874832][ C0] do_futex+0x15f/0x1ad0 [ 3600.879057][ C0] ? find_held_lock+0x2d/0x110 [ 3600.883806][ C0] ? futex_exit_release+0x60/0x60 [ 3600.888822][ C0] ? lock_downgrade+0x840/0x840 [ 3600.893661][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3600.898487][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.904447][ C0] ? __might_fault+0x190/0x1d0 [ 3600.909225][ C0] ? _copy_to_user+0x126/0x160 [ 3600.913993][ C0] __x64_sys_futex+0x376/0x4f0 [ 3600.918756][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3600.923236][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3600.928681][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.934665][ C0] ? do_syscall_64+0x21/0x7d0 [ 3600.939345][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3600.945320][ C0] do_syscall_64+0xf6/0x7d0 [ 3600.949849][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3600.955727][ C0] RIP: 0033:0x45ca69 [ 3600.959602][ C0] Code: Bad RIP value. [ 3600.963638][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3600.972026][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3600.979973][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3600.987928][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3600.995894][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3601.003856][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3601.011829][ C0] kvm-nx-lpage-re S28624 10226 2 0x80004000 [ 3601.018139][ C0] Call Trace: [ 3601.021408][ C0] __schedule+0x8f3/0x1fc0 [ 3601.025823][ C0] ? firmware_map_remove+0x19d/0x19d [ 3601.031114][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3601.036919][ C0] schedule+0xd0/0x2a0 [ 3601.040966][ C0] schedule_timeout+0x35c/0x850 [ 3601.045810][ C0] ? usleep_range+0x160/0x160 [ 3601.050486][ C0] ? kvm_nx_lpage_recovery_worker+0x56e/0x790 [ 3601.056542][ C0] ? __next_timer_interrupt+0x190/0x190 [ 3601.062080][ C0] ? finish_task_switch+0x147/0x750 [ 3601.067285][ C0] kvm_nx_lpage_recovery_worker+0x1d3/0x790 [ 3601.073179][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3601.078270][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3601.084055][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.090040][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3601.095072][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 3601.100258][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3601.105358][ C0] ? kvm_exit+0x80/0x80 [ 3601.109516][ C0] kthread+0x388/0x470 [ 3601.113574][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3601.119279][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3601.124991][ C0] ret_from_fork+0x24/0x30 [ 3601.129426][ C0] syz-executor.3 S28904 10240 7191 0x00000000 [ 3601.135752][ C0] Call Trace: [ 3601.139052][ C0] __schedule+0x8f3/0x1fc0 [ 3601.143450][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3601.148734][ C0] ? firmware_map_remove+0x19d/0x19d [ 3601.154023][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3601.159475][ C0] schedule+0xd0/0x2a0 [ 3601.163523][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3601.168647][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3601.174109][ C0] ? find_held_lock+0x2d/0x110 [ 3601.178854][ C0] futex_wait+0x1e2/0x550 [ 3601.183176][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3601.188192][ C0] ? print_usage_bug+0x240/0x240 [ 3601.193121][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3601.198300][ C0] ? futex_wake+0x153/0x480 [ 3601.202794][ C0] ? do_wp_page+0x512/0x1440 [ 3601.207380][ C0] do_futex+0x15f/0x1ad0 [ 3601.211620][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3601.216800][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3601.221647][ C0] ? futex_exit_release+0x60/0x60 [ 3601.226669][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3601.231510][ C0] ? lock_downgrade+0x840/0x840 [ 3601.236338][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3601.241356][ C0] __x64_sys_futex+0x376/0x4f0 [ 3601.246120][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3601.250624][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3601.256112][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.262069][ C0] ? do_syscall_64+0x21/0x7d0 [ 3601.266736][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.272707][ C0] do_syscall_64+0xf6/0x7d0 [ 3601.277221][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3601.283102][ C0] RIP: 0033:0x45ca69 [ 3601.286993][ C0] Code: Bad RIP value. [ 3601.291061][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3601.299460][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3601.307417][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3601.315391][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3601.323348][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3601.331304][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3601.339277][ C0] syz-executor.3 S29824 10265 7191 0x00000000 [ 3601.345662][ C0] Call Trace: [ 3601.348958][ C0] __schedule+0x8f3/0x1fc0 [ 3601.353367][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3601.358645][ C0] ? firmware_map_remove+0x19d/0x19d [ 3601.363909][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3601.369381][ C0] schedule+0xd0/0x2a0 [ 3601.373440][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3601.378529][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3601.383967][ C0] futex_wait+0x1e2/0x550 [ 3601.388291][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3601.393304][ C0] ? print_usage_bug+0x240/0x240 [ 3601.398235][ C0] ? hash_futex+0x10/0x200 [ 3601.402625][ C0] ? futex_wake+0x153/0x480 [ 3601.407142][ C0] ? do_wp_page+0x512/0x1440 [ 3601.411739][ C0] do_futex+0x15f/0x1ad0 [ 3601.415986][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3601.421183][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3601.426031][ C0] ? futex_exit_release+0x60/0x60 [ 3601.431072][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3601.435950][ C0] ? lock_downgrade+0x840/0x840 [ 3601.440790][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3601.445822][ C0] __x64_sys_futex+0x376/0x4f0 [ 3601.450591][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3601.455086][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3601.460533][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.466504][ C0] ? do_syscall_64+0x21/0x7d0 [ 3601.471181][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.477152][ C0] do_syscall_64+0xf6/0x7d0 [ 3601.481647][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3601.487522][ C0] RIP: 0033:0x45ca69 [ 3601.491429][ C0] Code: Bad RIP value. [ 3601.495477][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3601.503873][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3601.511835][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3601.519793][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3601.527749][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3601.535708][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3601.543678][ C0] kvm-nx-lpage-re S28720 10293 2 0x80004000 [ 3601.549991][ C0] Call Trace: [ 3601.553274][ C0] __schedule+0x8f3/0x1fc0 [ 3601.557683][ C0] ? firmware_map_remove+0x19d/0x19d [ 3601.562946][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3601.568746][ C0] schedule+0xd0/0x2a0 [ 3601.572808][ C0] schedule_timeout+0x35c/0x850 [ 3601.577648][ C0] ? usleep_range+0x160/0x160 [ 3601.582312][ C0] ? kvm_nx_lpage_recovery_worker+0x56e/0x790 [ 3601.588372][ C0] ? __next_timer_interrupt+0x190/0x190 [ 3601.593925][ C0] ? finish_task_switch+0x147/0x750 [ 3601.599116][ C0] kvm_nx_lpage_recovery_worker+0x1d3/0x790 [ 3601.605008][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3601.610136][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3601.615931][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.621892][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3601.626909][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 3601.632096][ C0] ? kvm_mmu_pte_write+0xdb0/0xdb0 [ 3601.637193][ C0] ? kvm_exit+0x80/0x80 [ 3601.641433][ C0] kthread+0x388/0x470 [ 3601.645509][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3601.651223][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3601.656936][ C0] ret_from_fork+0x24/0x30 [ 3601.661371][ C0] syz-executor.3 S29824 10309 7191 0x00000000 [ 3601.667709][ C0] Call Trace: [ 3601.671001][ C0] __schedule+0x8f3/0x1fc0 [ 3601.675424][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3601.680689][ C0] ? firmware_map_remove+0x19d/0x19d [ 3601.685969][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3601.691417][ C0] schedule+0xd0/0x2a0 [ 3601.695477][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3601.700565][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3601.706019][ C0] futex_wait+0x1e2/0x550 [ 3601.710358][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3601.715372][ C0] ? print_usage_bug+0x240/0x240 [ 3601.720288][ C0] ? hash_futex+0x10/0x200 [ 3601.724693][ C0] ? futex_wake+0x153/0x480 [ 3601.729219][ C0] ? do_wp_page+0x512/0x1440 [ 3601.733800][ C0] do_futex+0x15f/0x1ad0 [ 3601.738045][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3601.743238][ C0] ? _raw_spin_unlock+0x24/0x40 [ 3601.748080][ C0] ? futex_exit_release+0x60/0x60 [ 3601.753112][ C0] ? do_page_fault+0x5ad/0x13d4 [ 3601.757957][ C0] ? lock_downgrade+0x840/0x840 [ 3601.762784][ C0] ? handle_mm_fault+0xcbc/0x3c10 [ 3601.767814][ C0] __x64_sys_futex+0x376/0x4f0 [ 3601.772584][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3601.777084][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3601.782550][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.788521][ C0] ? do_syscall_64+0x21/0x7d0 [ 3601.793185][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.799161][ C0] do_syscall_64+0xf6/0x7d0 [ 3601.803655][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3601.809533][ C0] RIP: 0033:0x45ca69 [ 3601.813438][ C0] Code: Bad RIP value. [ 3601.817487][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3601.825896][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3601.833870][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3601.841828][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3601.849783][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3601.857759][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3601.865737][ C0] syz-executor.3 S29824 10341 7191 0x00000000 [ 3601.872068][ C0] Call Trace: [ 3601.875352][ C0] __schedule+0x8f3/0x1fc0 [ 3601.879760][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3601.885042][ C0] ? firmware_map_remove+0x19d/0x19d [ 3601.890336][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3601.895784][ C0] schedule+0xd0/0x2a0 [ 3601.899831][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3601.904954][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3601.910420][ C0] futex_wait+0x1e2/0x550 [ 3601.914743][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3601.919746][ C0] ? print_usage_bug+0x240/0x240 [ 3601.924674][ C0] ? hash_futex+0x10/0x200 [ 3601.929093][ C0] ? futex_wake+0x153/0x480 [ 3601.933596][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3601.939555][ C0] ? do_wp_page+0x512/0x1440 [ 3601.944120][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3601.950096][ C0] do_futex+0x15f/0x1ad0 [ 3601.954333][ C0] ? find_held_lock+0x2d/0x110 [ 3601.959076][ C0] ? futex_exit_release+0x60/0x60 [ 3601.964089][ C0] ? lock_downgrade+0x840/0x840 [ 3601.968931][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3601.973780][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3601.979765][ C0] ? __might_fault+0x190/0x1d0 [ 3601.984507][ C0] ? _copy_to_user+0x126/0x160 [ 3601.989271][ C0] __x64_sys_futex+0x376/0x4f0 [ 3601.994027][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3601.998517][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3602.003947][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.009918][ C0] ? do_syscall_64+0x21/0x7d0 [ 3602.014617][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.020600][ C0] do_syscall_64+0xf6/0x7d0 [ 3602.025095][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3602.030980][ C0] RIP: 0033:0x45ca69 [ 3602.034871][ C0] Code: Bad RIP value. [ 3602.038909][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3602.047311][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3602.055280][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3602.063250][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3602.071207][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3602.079197][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3602.087175][ C0] syz-executor.3 S29824 15629 7191 0x00000000 [ 3602.093512][ C0] Call Trace: [ 3602.096786][ C0] __schedule+0x8f3/0x1fc0 [ 3602.101366][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3602.106646][ C0] ? firmware_map_remove+0x19d/0x19d [ 3602.111934][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3602.117372][ C0] schedule+0xd0/0x2a0 [ 3602.121430][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3602.126554][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3602.132018][ C0] ? find_held_lock+0x2d/0x110 [ 3602.136764][ C0] futex_wait+0x1e2/0x550 [ 3602.141087][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3602.146106][ C0] ? print_usage_bug+0x240/0x240 [ 3602.151053][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3602.156273][ C0] ? futex_wake+0x153/0x480 [ 3602.160762][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.166744][ C0] ? mark_lock+0x11f/0xdd0 [ 3602.171163][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.177146][ C0] do_futex+0x15f/0x1ad0 [ 3602.181372][ C0] ? find_held_lock+0x2d/0x110 [ 3602.186129][ C0] ? futex_exit_release+0x60/0x60 [ 3602.191159][ C0] ? lock_downgrade+0x840/0x840 [ 3602.196028][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3602.200856][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.206839][ C0] ? __might_fault+0x190/0x1d0 [ 3602.211605][ C0] ? _copy_to_user+0x126/0x160 [ 3602.216364][ C0] __x64_sys_futex+0x376/0x4f0 [ 3602.221136][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3602.225631][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3602.231089][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.237070][ C0] ? do_syscall_64+0x21/0x7d0 [ 3602.241735][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.247712][ C0] do_syscall_64+0xf6/0x7d0 [ 3602.252205][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3602.258073][ C0] RIP: 0033:0x45ca69 [ 3602.261951][ C0] Code: Bad RIP value. [ 3602.265998][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3602.274406][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3602.282356][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3602.290313][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3602.298275][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3602.306234][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3602.314210][ C0] syz-executor.3 S28712 15677 7191 0x00000000 [ 3602.320532][ C0] Call Trace: [ 3602.323806][ C0] __schedule+0x8f3/0x1fc0 [ 3602.328217][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3602.333493][ C0] ? firmware_map_remove+0x19d/0x19d [ 3602.338787][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3602.344222][ C0] schedule+0xd0/0x2a0 [ 3602.348283][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3602.353381][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3602.358824][ C0] ? find_held_lock+0x2d/0x110 [ 3602.363566][ C0] futex_wait+0x1e2/0x550 [ 3602.367890][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3602.372946][ C0] ? print_usage_bug+0x240/0x240 [ 3602.377888][ C0] ? arch_stack_walk+0x97/0xf0 [ 3602.382630][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3602.387820][ C0] ? futex_wake+0x153/0x480 [ 3602.392323][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.398291][ C0] ? mark_lock+0x11f/0xdd0 [ 3602.402694][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.408669][ C0] do_futex+0x15f/0x1ad0 [ 3602.412944][ C0] ? find_held_lock+0x2d/0x110 [ 3602.417698][ C0] ? futex_exit_release+0x60/0x60 [ 3602.422709][ C0] ? lock_downgrade+0x840/0x840 [ 3602.427551][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3602.432401][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.438390][ C0] ? __might_fault+0x190/0x1d0 [ 3602.443131][ C0] ? _copy_to_user+0x126/0x160 [ 3602.447893][ C0] __x64_sys_futex+0x376/0x4f0 [ 3602.452650][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3602.457151][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3602.462604][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.468577][ C0] ? do_syscall_64+0x21/0x7d0 [ 3602.473245][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.479209][ C0] do_syscall_64+0xf6/0x7d0 [ 3602.483698][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3602.489585][ C0] RIP: 0033:0x45ca69 [ 3602.493480][ C0] Code: Bad RIP value. [ 3602.497545][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3602.505943][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3602.513907][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3602.521858][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3602.529819][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3602.537792][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3602.545833][ C0] syz-executor.3 S28400 15748 7191 0x00000000 [ 3602.552177][ C0] Call Trace: [ 3602.555457][ C0] __schedule+0x8f3/0x1fc0 [ 3602.559860][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3602.565193][ C0] ? firmware_map_remove+0x19d/0x19d [ 3602.570488][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3602.575952][ C0] schedule+0xd0/0x2a0 [ 3602.580014][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3602.585122][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3602.590585][ C0] ? find_held_lock+0x2d/0x110 [ 3602.595349][ C0] futex_wait+0x1e2/0x550 [ 3602.599699][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3602.604724][ C0] ? print_usage_bug+0x240/0x240 [ 3602.609673][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3602.614872][ C0] ? futex_wake+0x153/0x480 [ 3602.619369][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.625350][ C0] ? mark_lock+0x11f/0xdd0 [ 3602.629779][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.635777][ C0] do_futex+0x15f/0x1ad0 [ 3602.640051][ C0] ? find_held_lock+0x2d/0x110 [ 3602.644818][ C0] ? futex_exit_release+0x60/0x60 [ 3602.649860][ C0] ? lock_downgrade+0x840/0x840 [ 3602.654715][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3602.659570][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.665564][ C0] ? __might_fault+0x190/0x1d0 [ 3602.670339][ C0] ? _copy_to_user+0x126/0x160 [ 3602.675109][ C0] __x64_sys_futex+0x376/0x4f0 [ 3602.679882][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3602.684375][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3602.689997][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.695997][ C0] ? do_syscall_64+0x21/0x7d0 [ 3602.700716][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.706705][ C0] do_syscall_64+0xf6/0x7d0 [ 3602.711225][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3602.717116][ C0] RIP: 0033:0x45ca69 [ 3602.721051][ C0] Code: Bad RIP value. [ 3602.725110][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3602.733661][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3602.741624][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3602.749595][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3602.757567][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3602.765667][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3602.773973][ C0] syz-executor.3 S29824 15750 7191 0x00000000 [ 3602.780306][ C0] Call Trace: [ 3602.783863][ C0] __schedule+0x8f3/0x1fc0 [ 3602.788289][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3602.793587][ C0] ? firmware_map_remove+0x19d/0x19d [ 3602.798868][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3602.804323][ C0] schedule+0xd0/0x2a0 [ 3602.808403][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3602.813520][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3602.819065][ C0] futex_wait+0x1e2/0x550 [ 3602.823392][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3602.828549][ C0] ? wake_up_q+0xc1/0x140 [ 3602.832935][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3602.838129][ C0] ? futex_wake+0x153/0x480 [ 3602.842635][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.848618][ C0] ? mark_lock+0x11f/0xdd0 [ 3602.853200][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3602.859348][ C0] do_futex+0x15f/0x1ad0 [ 3602.863593][ C0] ? find_held_lock+0x2d/0x110 [ 3602.868365][ C0] ? futex_exit_release+0x60/0x60 [ 3602.873451][ C0] ? lock_downgrade+0x840/0x840 [ 3602.878466][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3602.883357][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.889357][ C0] ? __might_fault+0x190/0x1d0 [ 3602.894126][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3602.899583][ C0] __x64_sys_futex+0x376/0x4f0 [ 3602.904343][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3602.908856][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3602.914436][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.920664][ C0] ? do_syscall_64+0x21/0x7d0 [ 3602.925352][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3602.931540][ C0] do_syscall_64+0xf6/0x7d0 [ 3602.936144][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3602.942086][ C0] RIP: 0033:0x45ca69 [ 3602.946123][ C0] Code: Bad RIP value. [ 3602.950198][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3602.958676][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3602.966652][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3602.974634][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3602.982660][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3602.990769][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3602.998841][ C0] syz-executor.3 S29824 16373 7191 0x00000000 [ 3603.005173][ C0] Call Trace: [ 3603.008483][ C0] __schedule+0x8f3/0x1fc0 [ 3603.012906][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3603.018191][ C0] ? firmware_map_remove+0x19d/0x19d [ 3603.023478][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3603.028947][ C0] schedule+0xd0/0x2a0 [ 3603.033023][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3603.038127][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3603.043576][ C0] ? find_held_lock+0x2d/0x110 [ 3603.048351][ C0] futex_wait+0x1e2/0x550 [ 3603.052743][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3603.057761][ C0] ? print_usage_bug+0x240/0x240 [ 3603.062800][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3603.068005][ C0] ? futex_wake+0x153/0x480 [ 3603.072536][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.078517][ C0] ? do_wp_page+0x512/0x1440 [ 3603.083103][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.089094][ C0] do_futex+0x15f/0x1ad0 [ 3603.093366][ C0] ? find_held_lock+0x2d/0x110 [ 3603.098139][ C0] ? futex_exit_release+0x60/0x60 [ 3603.103157][ C0] ? lock_downgrade+0x840/0x840 [ 3603.108013][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3603.112868][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.118846][ C0] ? __might_fault+0x190/0x1d0 [ 3603.123794][ C0] ? _copy_to_user+0x126/0x160 [ 3603.128581][ C0] __x64_sys_futex+0x376/0x4f0 [ 3603.133432][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3603.137934][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3603.143497][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.149609][ C0] ? do_syscall_64+0x21/0x7d0 [ 3603.154504][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.160625][ C0] do_syscall_64+0xf6/0x7d0 [ 3603.165254][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3603.171158][ C0] RIP: 0033:0x45ca69 [ 3603.175076][ C0] Code: Bad RIP value. [ 3603.179237][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3603.187653][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3603.195634][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3603.203608][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3603.211713][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3603.219989][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3603.227987][ C0] syz-executor.3 S28904 17461 7191 0x00000000 [ 3603.234336][ C0] Call Trace: [ 3603.237744][ C0] __schedule+0x8f3/0x1fc0 [ 3603.242347][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3603.247719][ C0] ? firmware_map_remove+0x19d/0x19d [ 3603.253016][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3603.258614][ C0] schedule+0xd0/0x2a0 [ 3603.262753][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3603.268037][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3603.273507][ C0] futex_wait+0x1e2/0x550 [ 3603.277908][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3603.283124][ C0] ? print_usage_bug+0x240/0x240 [ 3603.288354][ C0] ? hash_futex+0x10/0x200 [ 3603.292794][ C0] ? futex_wake+0x153/0x480 [ 3603.297401][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.303499][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.309493][ C0] do_futex+0x15f/0x1ad0 [ 3603.313834][ C0] ? find_held_lock+0x2d/0x110 [ 3603.318684][ C0] ? futex_exit_release+0x60/0x60 [ 3603.323705][ C0] ? lock_downgrade+0x840/0x840 [ 3603.328653][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3603.333568][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.339694][ C0] ? __might_fault+0x190/0x1d0 [ 3603.344601][ C0] ? _copy_to_user+0x126/0x160 [ 3603.349401][ C0] __x64_sys_futex+0x376/0x4f0 [ 3603.354241][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3603.358744][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3603.364244][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.370233][ C0] ? do_syscall_64+0x21/0x7d0 [ 3603.375065][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.381045][ C0] do_syscall_64+0xf6/0x7d0 [ 3603.385633][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3603.391539][ C0] RIP: 0033:0x45ca69 [ 3603.395448][ C0] Code: Bad RIP value. [ 3603.399520][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3603.407926][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3603.415914][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3603.423894][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3603.432038][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3603.440141][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3603.448158][ C0] syz-executor.3 S29816 17468 7191 0x00000000 [ 3603.454508][ C0] Call Trace: [ 3603.457856][ C0] __schedule+0x8f3/0x1fc0 [ 3603.462277][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3603.467670][ C0] ? firmware_map_remove+0x19d/0x19d [ 3603.472967][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3603.478511][ C0] schedule+0xd0/0x2a0 [ 3603.482720][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3603.487926][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3603.493533][ C0] ? find_held_lock+0x2d/0x110 [ 3603.498296][ C0] futex_wait+0x1e2/0x550 [ 3603.502621][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3603.507652][ C0] ? print_usage_bug+0x240/0x240 [ 3603.512610][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3603.518085][ C0] ? futex_wake+0x153/0x480 [ 3603.522588][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.528582][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.534580][ C0] do_futex+0x15f/0x1ad0 [ 3603.538834][ C0] ? find_held_lock+0x2d/0x110 [ 3603.543650][ C0] ? futex_exit_release+0x60/0x60 [ 3603.548783][ C0] ? lock_downgrade+0x840/0x840 [ 3603.553786][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3603.558635][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.564631][ C0] ? __might_fault+0x190/0x1d0 [ 3603.569413][ C0] ? _copy_to_user+0x126/0x160 [ 3603.574190][ C0] __x64_sys_futex+0x376/0x4f0 [ 3603.579015][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3603.583513][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3603.588974][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.594977][ C0] ? do_syscall_64+0x21/0x7d0 [ 3603.599661][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.605732][ C0] do_syscall_64+0xf6/0x7d0 [ 3603.610264][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3603.616315][ C0] RIP: 0033:0x45ca69 [ 3603.620235][ C0] Code: Bad RIP value. [ 3603.624294][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3603.632836][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3603.640868][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3603.648848][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3603.657570][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3603.665651][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3603.673735][ C0] syz-executor.3 S28904 17473 7191 0x00000000 [ 3603.680063][ C0] Call Trace: [ 3603.683356][ C0] __schedule+0x8f3/0x1fc0 [ 3603.687787][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3603.693086][ C0] ? firmware_map_remove+0x19d/0x19d [ 3603.698369][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3603.703824][ C0] schedule+0xd0/0x2a0 [ 3603.707904][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3603.713071][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3603.718529][ C0] futex_wait+0x1e2/0x550 [ 3603.722855][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3603.727887][ C0] ? print_usage_bug+0x240/0x240 [ 3603.732841][ C0] ? hash_futex+0x10/0x200 [ 3603.737268][ C0] ? futex_wake+0x153/0x480 [ 3603.742045][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.748044][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.754034][ C0] do_futex+0x15f/0x1ad0 [ 3603.758406][ C0] ? find_held_lock+0x2d/0x110 [ 3603.763471][ C0] ? futex_exit_release+0x60/0x60 [ 3603.768508][ C0] ? lock_downgrade+0x840/0x840 [ 3603.773654][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3603.778647][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.784879][ C0] ? __might_fault+0x190/0x1d0 [ 3603.789824][ C0] ? _copy_to_user+0x126/0x160 [ 3603.794849][ C0] __x64_sys_futex+0x376/0x4f0 [ 3603.799619][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3603.804115][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3603.809580][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.815585][ C0] ? do_syscall_64+0x21/0x7d0 [ 3603.820283][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3603.826435][ C0] do_syscall_64+0xf6/0x7d0 [ 3603.830966][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3603.836912][ C0] RIP: 0033:0x45ca69 [ 3603.840822][ C0] Code: Bad RIP value. [ 3603.844892][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3603.853436][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3603.861655][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3603.869628][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3603.878772][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3603.886749][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3603.894759][ C0] syz-executor.3 S29792 17675 7191 0x00000000 [ 3603.901113][ C0] Call Trace: [ 3603.904401][ C0] __schedule+0x8f3/0x1fc0 [ 3603.908822][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3603.914176][ C0] ? firmware_map_remove+0x19d/0x19d [ 3603.919463][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3603.925070][ C0] schedule+0xd0/0x2a0 [ 3603.929165][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3603.934337][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3603.939851][ C0] futex_wait+0x1e2/0x550 [ 3603.944179][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3603.949213][ C0] ? print_usage_bug+0x240/0x240 [ 3603.954356][ C0] ? hash_futex+0x10/0x200 [ 3603.958769][ C0] ? futex_wake+0x153/0x480 [ 3603.963625][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.969616][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3603.975743][ C0] do_futex+0x15f/0x1ad0 [ 3603.979984][ C0] ? find_held_lock+0x2d/0x110 [ 3603.984764][ C0] ? futex_exit_release+0x60/0x60 [ 3603.989808][ C0] ? lock_downgrade+0x840/0x840 [ 3603.994676][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3603.999563][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.005688][ C0] ? __might_fault+0x190/0x1d0 [ 3604.010469][ C0] ? _copy_to_user+0x126/0x160 [ 3604.015402][ C0] __x64_sys_futex+0x376/0x4f0 [ 3604.020460][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3604.024977][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3604.030454][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.036537][ C0] ? do_syscall_64+0x21/0x7d0 [ 3604.041266][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.047343][ C0] do_syscall_64+0xf6/0x7d0 [ 3604.051918][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3604.057919][ C0] RIP: 0033:0x45ca69 [ 3604.061816][ C0] Code: Bad RIP value. [ 3604.065888][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3604.074395][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3604.082362][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3604.090471][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3604.098535][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3604.106637][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3604.114987][ C0] syz-executor.3 S29824 17681 7191 0x00000000 [ 3604.121324][ C0] Call Trace: [ 3604.124693][ C0] __schedule+0x8f3/0x1fc0 [ 3604.129246][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3604.134599][ C0] ? firmware_map_remove+0x19d/0x19d [ 3604.139896][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3604.145486][ C0] schedule+0xd0/0x2a0 [ 3604.149666][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3604.154784][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3604.160236][ C0] futex_wait+0x1e2/0x550 [ 3604.164558][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3604.169596][ C0] ? print_usage_bug+0x240/0x240 [ 3604.174541][ C0] ? hash_futex+0x10/0x200 [ 3604.179020][ C0] ? futex_wake+0x153/0x480 [ 3604.183609][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.189595][ C0] ? mark_lock+0x11f/0xdd0 [ 3604.194024][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.200093][ C0] do_futex+0x15f/0x1ad0 [ 3604.204337][ C0] ? find_held_lock+0x2d/0x110 [ 3604.209111][ C0] ? futex_exit_release+0x60/0x60 [ 3604.214145][ C0] ? lock_downgrade+0x840/0x840 [ 3604.218995][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3604.224011][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.230018][ C0] ? __might_fault+0x190/0x1d0 [ 3604.234960][ C0] ? _copy_to_user+0x126/0x160 [ 3604.239722][ C0] __x64_sys_futex+0x376/0x4f0 [ 3604.244521][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3604.249047][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3604.254514][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.260628][ C0] ? do_syscall_64+0x21/0x7d0 [ 3604.265445][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.271448][ C0] do_syscall_64+0xf6/0x7d0 [ 3604.275977][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3604.282172][ C0] RIP: 0033:0x45ca69 [ 3604.286083][ C0] Code: Bad RIP value. [ 3604.290506][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3604.298922][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3604.306898][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3604.314874][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3604.322839][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3604.330812][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3604.338938][ C0] syz-executor.3 S29824 17687 7191 0x00000000 [ 3604.345275][ C0] Call Trace: [ 3604.348591][ C0] __schedule+0x8f3/0x1fc0 [ 3604.353128][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3604.358415][ C0] ? firmware_map_remove+0x19d/0x19d [ 3604.363750][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3604.369307][ C0] schedule+0xd0/0x2a0 [ 3604.373505][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3604.378612][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3604.384065][ C0] ? find_held_lock+0x2d/0x110 [ 3604.388841][ C0] futex_wait+0x1e2/0x550 [ 3604.393195][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3604.398227][ C0] ? print_usage_bug+0x240/0x240 [ 3604.403160][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3604.408372][ C0] ? futex_wake+0x153/0x480 [ 3604.413004][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.419161][ C0] ? mark_lock+0x11f/0xdd0 [ 3604.423635][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.429627][ C0] do_futex+0x15f/0x1ad0 [ 3604.433952][ C0] ? find_held_lock+0x2d/0x110 [ 3604.438803][ C0] ? futex_exit_release+0x60/0x60 [ 3604.443884][ C0] ? lock_downgrade+0x840/0x840 [ 3604.448743][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3604.453656][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.459797][ C0] ? __might_fault+0x190/0x1d0 [ 3604.464556][ C0] ? _copy_to_user+0x126/0x160 [ 3604.469344][ C0] __x64_sys_futex+0x376/0x4f0 [ 3604.474191][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3604.478824][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3604.484275][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.490356][ C0] ? do_syscall_64+0x21/0x7d0 [ 3604.495161][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.501241][ C0] do_syscall_64+0xf6/0x7d0 [ 3604.505841][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3604.511736][ C0] RIP: 0033:0x45ca69 [ 3604.515651][ C0] Code: Bad RIP value. [ 3604.519719][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3604.528316][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3604.536405][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3604.544552][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3604.552744][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3604.560711][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3604.568780][ C0] syz-executor.3 S29792 17926 7191 0x00004000 [ 3604.575269][ C0] Call Trace: [ 3604.578690][ C0] __schedule+0x8f3/0x1fc0 [ 3604.583181][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3604.588484][ C0] ? firmware_map_remove+0x19d/0x19d [ 3604.593771][ C0] ? preempt_schedule_common+0x5e/0xc0 [ 3604.599295][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 3604.605028][ C0] schedule+0xd0/0x2a0 [ 3604.609216][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3604.614338][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3604.619792][ C0] futex_wait+0x1e2/0x550 [ 3604.624173][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3604.629295][ C0] ? wake_up_q+0xc1/0x140 [ 3604.633630][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3604.638825][ C0] ? futex_wake+0x153/0x480 [ 3604.643452][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.649462][ C0] ? mark_lock+0x11f/0xdd0 [ 3604.653941][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.660251][ C0] do_futex+0x15f/0x1ad0 [ 3604.664494][ C0] ? find_held_lock+0x2d/0x110 [ 3604.669269][ C0] ? futex_exit_release+0x60/0x60 [ 3604.674300][ C0] ? lock_downgrade+0x840/0x840 [ 3604.679150][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3604.684139][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.690139][ C0] ? __might_fault+0x190/0x1d0 [ 3604.694911][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3604.700369][ C0] __x64_sys_futex+0x376/0x4f0 [ 3604.705320][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3604.709844][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3604.715387][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.721384][ C0] ? do_syscall_64+0x21/0x7d0 [ 3604.726072][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.732061][ C0] do_syscall_64+0xf6/0x7d0 [ 3604.736563][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3604.742578][ C0] RIP: 0033:0x45ca69 [ 3604.746483][ C0] Code: Bad RIP value. [ 3604.750558][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3604.759268][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3604.767369][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3604.775362][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3604.783513][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3604.791480][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3604.799603][ C0] syz-executor.3 S28800 17985 7191 0x00000000 [ 3604.806067][ C0] Call Trace: [ 3604.809379][ C0] __schedule+0x8f3/0x1fc0 [ 3604.813801][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3604.819135][ C0] ? firmware_map_remove+0x19d/0x19d [ 3604.824467][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3604.829939][ C0] schedule+0xd0/0x2a0 [ 3604.834026][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3604.839226][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3604.844686][ C0] ? find_held_lock+0x2d/0x110 [ 3604.849473][ C0] futex_wait+0x1e2/0x550 [ 3604.853899][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3604.859024][ C0] ? print_usage_bug+0x240/0x240 [ 3604.864049][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3604.869259][ C0] ? futex_wake+0x153/0x480 [ 3604.873997][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.880062][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3604.886373][ C0] do_futex+0x15f/0x1ad0 [ 3604.890643][ C0] ? find_held_lock+0x2d/0x110 [ 3604.895412][ C0] ? futex_exit_release+0x60/0x60 [ 3604.900431][ C0] ? lock_downgrade+0x840/0x840 [ 3604.905293][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3604.910279][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.916402][ C0] ? __might_fault+0x190/0x1d0 [ 3604.921354][ C0] ? _copy_to_user+0x126/0x160 [ 3604.926257][ C0] __x64_sys_futex+0x376/0x4f0 [ 3604.931292][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3604.935820][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3604.941413][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.947566][ C0] ? do_syscall_64+0x21/0x7d0 [ 3604.952252][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3604.958360][ C0] do_syscall_64+0xf6/0x7d0 [ 3604.963083][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3604.968979][ C0] RIP: 0033:0x45ca69 [ 3604.973001][ C0] Code: Bad RIP value. [ 3604.977186][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3604.985667][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3604.993648][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3605.001710][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3605.009689][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3605.017674][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3605.025668][ C0] syz-executor.3 S28800 18016 7191 0x00000000 [ 3605.032219][ C0] Call Trace: [ 3605.035506][ C0] __schedule+0x8f3/0x1fc0 [ 3605.040002][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3605.045330][ C0] ? firmware_map_remove+0x19d/0x19d [ 3605.050723][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3605.056192][ C0] schedule+0xd0/0x2a0 [ 3605.060258][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3605.065374][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3605.070859][ C0] futex_wait+0x1e2/0x550 [ 3605.075199][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3605.080215][ C0] ? print_usage_bug+0x240/0x240 [ 3605.085254][ C0] ? hash_futex+0x10/0x200 [ 3605.089685][ C0] ? futex_wake+0x153/0x480 [ 3605.094196][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.100171][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.106363][ C0] do_futex+0x15f/0x1ad0 [ 3605.110638][ C0] ? find_held_lock+0x2d/0x110 [ 3605.115412][ C0] ? futex_exit_release+0x60/0x60 [ 3605.120429][ C0] ? lock_downgrade+0x840/0x840 [ 3605.125288][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3605.130153][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.136235][ C0] ? __might_fault+0x190/0x1d0 [ 3605.140994][ C0] ? _copy_to_user+0x126/0x160 [ 3605.145777][ C0] __x64_sys_futex+0x376/0x4f0 [ 3605.150562][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3605.155217][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3605.160682][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.166674][ C0] ? do_syscall_64+0x21/0x7d0 [ 3605.171443][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.177561][ C0] do_syscall_64+0xf6/0x7d0 [ 3605.182081][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3605.187975][ C0] RIP: 0033:0x45ca69 [ 3605.191958][ C0] Code: Bad RIP value. [ 3605.196042][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3605.204441][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3605.212413][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3605.220375][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3605.228349][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3605.236410][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3605.244388][ C0] syz-executor.3 S28800 18031 7191 0x00000000 [ 3605.250722][ C0] Call Trace: [ 3605.254108][ C0] __schedule+0x8f3/0x1fc0 [ 3605.258571][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3605.264074][ C0] ? firmware_map_remove+0x19d/0x19d [ 3605.269577][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3605.275106][ C0] schedule+0xd0/0x2a0 [ 3605.279575][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3605.284698][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3605.290312][ C0] futex_wait+0x1e2/0x550 [ 3605.294673][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3605.299757][ C0] ? print_usage_bug+0x240/0x240 [ 3605.304881][ C0] ? hash_futex+0x10/0x200 [ 3605.309319][ C0] ? futex_wake+0x153/0x480 [ 3605.314107][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.320083][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.326078][ C0] do_futex+0x15f/0x1ad0 [ 3605.330348][ C0] ? find_held_lock+0x2d/0x110 [ 3605.335245][ C0] ? futex_exit_release+0x60/0x60 [ 3605.340266][ C0] ? lock_downgrade+0x840/0x840 [ 3605.345160][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3605.350033][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.356082][ C0] ? __might_fault+0x190/0x1d0 [ 3605.361045][ C0] ? _copy_to_user+0x126/0x160 [ 3605.365953][ C0] __x64_sys_futex+0x376/0x4f0 [ 3605.370807][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3605.375468][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3605.380935][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.386927][ C0] ? do_syscall_64+0x21/0x7d0 [ 3605.391615][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.397592][ C0] do_syscall_64+0xf6/0x7d0 [ 3605.402095][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3605.408172][ C0] RIP: 0033:0x45ca69 [ 3605.412084][ C0] Code: Bad RIP value. [ 3605.416139][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3605.424596][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3605.432572][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3605.440591][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3605.448729][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3605.456935][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3605.465142][ C0] syz-executor.3 S29824 18041 7191 0x00000000 [ 3605.471603][ C0] Call Trace: [ 3605.474898][ C0] __schedule+0x8f3/0x1fc0 [ 3605.479515][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3605.484843][ C0] ? firmware_map_remove+0x19d/0x19d [ 3605.490150][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3605.495616][ C0] schedule+0xd0/0x2a0 [ 3605.499682][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3605.504796][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3605.510280][ C0] futex_wait+0x1e2/0x550 [ 3605.514739][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3605.519917][ C0] ? print_usage_bug+0x240/0x240 [ 3605.524860][ C0] ? hash_futex+0x10/0x200 [ 3605.529293][ C0] ? futex_wake+0x153/0x480 [ 3605.533810][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.539780][ C0] ? do_wp_page+0x512/0x1440 [ 3605.544412][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.550509][ C0] do_futex+0x15f/0x1ad0 [ 3605.554780][ C0] ? find_held_lock+0x2d/0x110 [ 3605.559753][ C0] ? futex_exit_release+0x60/0x60 [ 3605.564785][ C0] ? lock_downgrade+0x840/0x840 [ 3605.569654][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3605.574602][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.580594][ C0] ? __might_fault+0x190/0x1d0 [ 3605.585367][ C0] ? _copy_to_user+0x126/0x160 [ 3605.590158][ C0] __x64_sys_futex+0x376/0x4f0 [ 3605.594948][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3605.599608][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3605.605088][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.611116][ C0] ? do_syscall_64+0x21/0x7d0 [ 3605.615920][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.621909][ C0] do_syscall_64+0xf6/0x7d0 [ 3605.626517][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3605.632429][ C0] RIP: 0033:0x45ca69 [ 3605.636332][ C0] Code: Bad RIP value. [ 3605.640520][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3605.649238][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3605.657334][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3605.665310][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3605.673588][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3605.681684][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3605.689681][ C0] syz-executor.3 S29792 18047 7191 0x00000000 [ 3605.696029][ C0] Call Trace: [ 3605.699316][ C0] __schedule+0x8f3/0x1fc0 [ 3605.703775][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3605.709206][ C0] ? firmware_map_remove+0x19d/0x19d [ 3605.714557][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3605.720071][ C0] schedule+0xd0/0x2a0 [ 3605.724140][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3605.729258][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3605.734815][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.740798][ C0] futex_wait+0x1e2/0x550 [ 3605.745236][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3605.750542][ C0] ? print_usage_bug+0x240/0x240 [ 3605.755547][ C0] ? hash_futex+0x10/0x200 [ 3605.759953][ C0] ? futex_wake+0x153/0x480 [ 3605.764456][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.770441][ C0] ? do_wp_page+0x512/0x1440 [ 3605.775045][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.781025][ C0] do_futex+0x15f/0x1ad0 [ 3605.785415][ C0] ? find_held_lock+0x2d/0x110 [ 3605.790202][ C0] ? futex_exit_release+0x60/0x60 [ 3605.795288][ C0] ? lock_downgrade+0x840/0x840 [ 3605.800219][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3605.805076][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.811082][ C0] ? __might_fault+0x190/0x1d0 [ 3605.815960][ C0] ? _copy_to_user+0x126/0x160 [ 3605.820756][ C0] __x64_sys_futex+0x376/0x4f0 [ 3605.825697][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3605.830224][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3605.835757][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.841899][ C0] ? do_syscall_64+0x21/0x7d0 [ 3605.846583][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3605.852570][ C0] do_syscall_64+0xf6/0x7d0 [ 3605.857072][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3605.862956][ C0] RIP: 0033:0x45ca69 [ 3605.866981][ C0] Code: Bad RIP value. [ 3605.871157][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3605.879802][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3605.887863][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3605.895847][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3605.903881][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3605.911850][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3605.919826][ C0] syz-executor.3 S29824 18082 7191 0x00000000 [ 3605.926300][ C0] Call Trace: [ 3605.929617][ C0] __schedule+0x8f3/0x1fc0 [ 3605.934045][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3605.939328][ C0] ? firmware_map_remove+0x19d/0x19d [ 3605.944622][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3605.950103][ C0] schedule+0xd0/0x2a0 [ 3605.954269][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3605.959515][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3605.964987][ C0] futex_wait+0x1e2/0x550 [ 3605.969354][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3605.974383][ C0] ? print_usage_bug+0x240/0x240 [ 3605.979315][ C0] ? hash_futex+0x10/0x200 [ 3605.984007][ C0] ? futex_wake+0x153/0x480 [ 3605.988541][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3605.994527][ C0] ? do_wp_page+0x512/0x1440 [ 3605.999336][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.005472][ C0] do_futex+0x15f/0x1ad0 [ 3606.009852][ C0] ? find_held_lock+0x2d/0x110 [ 3606.014639][ C0] ? futex_exit_release+0x60/0x60 [ 3606.019827][ C0] ? lock_downgrade+0x840/0x840 [ 3606.024777][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3606.029733][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.035860][ C0] ? __might_fault+0x190/0x1d0 [ 3606.040637][ C0] ? _copy_to_user+0x126/0x160 [ 3606.045417][ C0] __x64_sys_futex+0x376/0x4f0 [ 3606.050346][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3606.054957][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3606.060560][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.066638][ C0] ? do_syscall_64+0x21/0x7d0 [ 3606.071332][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.077320][ C0] do_syscall_64+0xf6/0x7d0 [ 3606.081880][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3606.087777][ C0] RIP: 0033:0x45ca69 [ 3606.091687][ C0] Code: Bad RIP value. [ 3606.095745][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3606.104147][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3606.112240][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3606.120206][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3606.128181][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3606.136296][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3606.144631][ C0] syz-executor.3 S28976 19699 7191 0x00000000 [ 3606.151189][ C0] Call Trace: [ 3606.154491][ C0] __schedule+0x8f3/0x1fc0 [ 3606.158996][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3606.164494][ C0] ? firmware_map_remove+0x19d/0x19d [ 3606.169886][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3606.175355][ C0] schedule+0xd0/0x2a0 [ 3606.179607][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3606.184726][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3606.190297][ C0] futex_wait+0x1e2/0x550 [ 3606.194648][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3606.199681][ C0] ? print_usage_bug+0x240/0x240 [ 3606.204623][ C0] ? hash_futex+0x10/0x200 [ 3606.209063][ C0] ? futex_wake+0x153/0x480 [ 3606.213584][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.219567][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.225582][ C0] do_futex+0x15f/0x1ad0 [ 3606.229852][ C0] ? find_held_lock+0x2d/0x110 [ 3606.234632][ C0] ? futex_exit_release+0x60/0x60 [ 3606.239665][ C0] ? lock_downgrade+0x840/0x840 [ 3606.244719][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3606.249591][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.255605][ C0] ? __might_fault+0x190/0x1d0 [ 3606.260540][ C0] ? _copy_to_user+0x126/0x160 [ 3606.265323][ C0] __x64_sys_futex+0x376/0x4f0 [ 3606.270201][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3606.274726][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3606.280281][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.286622][ C0] ? do_syscall_64+0x21/0x7d0 [ 3606.291545][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.297523][ C0] do_syscall_64+0xf6/0x7d0 [ 3606.302099][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3606.308005][ C0] RIP: 0033:0x45ca69 [ 3606.311912][ C0] Code: Bad RIP value. [ 3606.315969][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3606.324375][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3606.332501][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3606.340467][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3606.348439][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3606.356589][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3606.364676][ C0] syz-executor.3 S28976 19716 7191 0x00000000 [ 3606.371033][ C0] Call Trace: [ 3606.374391][ C0] __schedule+0x8f3/0x1fc0 [ 3606.378806][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3606.384138][ C0] ? firmware_map_remove+0x19d/0x19d [ 3606.389435][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3606.394905][ C0] schedule+0xd0/0x2a0 [ 3606.399026][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3606.404271][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3606.409732][ C0] ? find_held_lock+0x2d/0x110 [ 3606.414827][ C0] futex_wait+0x1e2/0x550 [ 3606.419206][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3606.424220][ C0] ? print_usage_bug+0x240/0x240 [ 3606.429172][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3606.434375][ C0] ? futex_wake+0x153/0x480 [ 3606.438878][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.444868][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.451061][ C0] do_futex+0x15f/0x1ad0 [ 3606.455319][ C0] ? find_held_lock+0x2d/0x110 [ 3606.460080][ C0] ? futex_exit_release+0x60/0x60 [ 3606.465117][ C0] ? lock_downgrade+0x840/0x840 [ 3606.469985][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3606.474858][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.480915][ C0] ? __might_fault+0x190/0x1d0 [ 3606.485688][ C0] ? _copy_to_user+0x126/0x160 [ 3606.490477][ C0] __x64_sys_futex+0x376/0x4f0 [ 3606.495353][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3606.499918][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3606.505383][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.511378][ C0] ? do_syscall_64+0x21/0x7d0 [ 3606.516122][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.522102][ C0] do_syscall_64+0xf6/0x7d0 [ 3606.526614][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3606.532608][ C0] RIP: 0033:0x45ca69 [ 3606.536560][ C0] Code: Bad RIP value. [ 3606.540616][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3606.549163][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3606.557187][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3606.565293][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3606.573273][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3606.581329][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3606.589322][ C0] syz-executor.3 S28976 21326 7191 0x00000000 [ 3606.595671][ C0] Call Trace: [ 3606.598961][ C0] __schedule+0x8f3/0x1fc0 [ 3606.603372][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3606.608671][ C0] ? firmware_map_remove+0x19d/0x19d [ 3606.614031][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3606.619486][ C0] schedule+0xd0/0x2a0 [ 3606.623551][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3606.628670][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3606.634226][ C0] futex_wait+0x1e2/0x550 [ 3606.638606][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3606.643628][ C0] ? wake_up_q+0xc1/0x140 [ 3606.647961][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3606.653293][ C0] ? futex_wake+0x153/0x480 [ 3606.657800][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.663918][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.670034][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.676155][ C0] do_futex+0x15f/0x1ad0 [ 3606.680400][ C0] ? find_held_lock+0x2d/0x110 [ 3606.685172][ C0] ? futex_exit_release+0x60/0x60 [ 3606.690303][ C0] ? lock_downgrade+0x840/0x840 [ 3606.695268][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3606.700128][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.706129][ C0] ? __might_fault+0x190/0x1d0 [ 3606.710908][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3606.716484][ C0] __x64_sys_futex+0x376/0x4f0 [ 3606.721253][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3606.725918][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3606.731391][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.737569][ C0] ? do_syscall_64+0x21/0x7d0 [ 3606.742289][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.748281][ C0] do_syscall_64+0xf6/0x7d0 [ 3606.752796][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3606.758741][ C0] RIP: 0033:0x45ca69 [ 3606.762723][ C0] Code: Bad RIP value. [ 3606.766787][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3606.775339][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3606.783563][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3606.792773][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3606.800996][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3606.808970][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3606.817112][ C0] syz-executor.3 S28976 21942 7191 0x00000000 [ 3606.823441][ C0] Call Trace: [ 3606.826745][ C0] __schedule+0x8f3/0x1fc0 [ 3606.831179][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3606.836473][ C0] ? firmware_map_remove+0x19d/0x19d [ 3606.841753][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3606.847411][ C0] schedule+0xd0/0x2a0 [ 3606.851574][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3606.856684][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3606.862143][ C0] futex_wait+0x1e2/0x550 [ 3606.866485][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3606.871516][ C0] ? print_usage_bug+0x240/0x240 [ 3606.876501][ C0] ? hash_futex+0x10/0x200 [ 3606.880984][ C0] ? futex_wake+0x153/0x480 [ 3606.885516][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.891627][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3606.897605][ C0] do_futex+0x15f/0x1ad0 [ 3606.902035][ C0] ? find_held_lock+0x2d/0x110 [ 3606.906881][ C0] ? futex_exit_release+0x60/0x60 [ 3606.911912][ C0] ? lock_downgrade+0x840/0x840 [ 3606.916773][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3606.921630][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.927632][ C0] ? __might_fault+0x190/0x1d0 [ 3606.932570][ C0] ? _copy_to_user+0x126/0x160 [ 3606.937495][ C0] __x64_sys_futex+0x376/0x4f0 [ 3606.942470][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3606.947000][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3606.952625][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.958651][ C0] ? do_syscall_64+0x21/0x7d0 [ 3606.963318][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3606.969428][ C0] do_syscall_64+0xf6/0x7d0 [ 3606.973939][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3606.979825][ C0] RIP: 0033:0x45ca69 [ 3606.983724][ C0] Code: Bad RIP value. [ 3606.987791][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3606.996207][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3607.004169][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3607.012136][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3607.020198][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3607.028175][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3607.036166][ C0] syz-executor.3 S28976 21946 7191 0x00000000 [ 3607.042491][ C0] Call Trace: [ 3607.045800][ C0] __schedule+0x8f3/0x1fc0 [ 3607.050240][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3607.055535][ C0] ? firmware_map_remove+0x19d/0x19d [ 3607.060990][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3607.066466][ C0] schedule+0xd0/0x2a0 [ 3607.070555][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3607.075673][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3607.081177][ C0] futex_wait+0x1e2/0x550 [ 3607.085545][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3607.090587][ C0] ? print_usage_bug+0x240/0x240 [ 3607.095592][ C0] ? hash_futex+0x10/0x200 [ 3607.100078][ C0] ? futex_wake+0x153/0x480 [ 3607.104583][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.110585][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.116572][ C0] do_futex+0x15f/0x1ad0 [ 3607.120816][ C0] ? find_held_lock+0x2d/0x110 [ 3607.125589][ C0] ? futex_exit_release+0x60/0x60 [ 3607.130633][ C0] ? lock_downgrade+0x840/0x840 [ 3607.135630][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3607.140491][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.146640][ C0] ? __might_fault+0x190/0x1d0 [ 3607.151427][ C0] ? _copy_to_user+0x126/0x160 [ 3607.156225][ C0] __x64_sys_futex+0x376/0x4f0 [ 3607.161121][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3607.165638][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3607.171124][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.177117][ C0] ? do_syscall_64+0x21/0x7d0 [ 3607.181801][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.187955][ C0] do_syscall_64+0xf6/0x7d0 [ 3607.192522][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3607.198410][ C0] RIP: 0033:0x45ca69 [ 3607.202414][ C0] Code: Bad RIP value. [ 3607.206481][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3607.214988][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3607.223001][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3607.231110][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3607.239229][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3607.247206][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3607.255223][ C0] syz-executor.3 S29816 21952 7191 0x00000000 [ 3607.261570][ C0] Call Trace: [ 3607.264877][ C0] __schedule+0x8f3/0x1fc0 [ 3607.269481][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3607.274783][ C0] ? firmware_map_remove+0x19d/0x19d [ 3607.280164][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3607.285764][ C0] schedule+0xd0/0x2a0 [ 3607.289856][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3607.294972][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3607.300428][ C0] ? find_held_lock+0x2d/0x110 [ 3607.305379][ C0] futex_wait+0x1e2/0x550 [ 3607.309761][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3607.314967][ C0] ? print_usage_bug+0x240/0x240 [ 3607.319907][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3607.325192][ C0] ? futex_wake+0x153/0x480 [ 3607.329733][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.335729][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.341707][ C0] do_futex+0x15f/0x1ad0 [ 3607.345971][ C0] ? find_held_lock+0x2d/0x110 [ 3607.350757][ C0] ? futex_exit_release+0x60/0x60 [ 3607.355803][ C0] ? lock_downgrade+0x840/0x840 [ 3607.360717][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3607.365577][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.371638][ C0] ? __might_fault+0x190/0x1d0 [ 3607.376616][ C0] ? _copy_to_user+0x126/0x160 [ 3607.381386][ C0] __x64_sys_futex+0x376/0x4f0 [ 3607.386171][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3607.390859][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3607.396341][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.402435][ C0] ? do_syscall_64+0x21/0x7d0 [ 3607.407120][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.413156][ C0] do_syscall_64+0xf6/0x7d0 [ 3607.417659][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3607.423668][ C0] RIP: 0033:0x45ca69 [ 3607.427575][ C0] Code: Bad RIP value. [ 3607.431717][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3607.440439][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3607.448557][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3607.456666][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3607.464883][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3607.473018][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3607.481205][ C0] syz-executor.3 S29824 21955 7191 0x00000000 [ 3607.487538][ C0] Call Trace: [ 3607.490855][ C0] __schedule+0x8f3/0x1fc0 [ 3607.495280][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3607.500557][ C0] ? firmware_map_remove+0x19d/0x19d [ 3607.505848][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3607.511323][ C0] schedule+0xd0/0x2a0 [ 3607.515481][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3607.520731][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3607.526207][ C0] futex_wait+0x1e2/0x550 [ 3607.530648][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3607.535940][ C0] ? wake_up_q+0xc1/0x140 [ 3607.540264][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3607.545471][ C0] ? futex_wake+0x153/0x480 [ 3607.550011][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.556006][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.562101][ C0] do_futex+0x15f/0x1ad0 [ 3607.566371][ C0] ? find_held_lock+0x2d/0x110 [ 3607.571246][ C0] ? futex_exit_release+0x60/0x60 [ 3607.576300][ C0] ? lock_downgrade+0x840/0x840 [ 3607.581372][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3607.586238][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.592230][ C0] ? __might_fault+0x190/0x1d0 [ 3607.596993][ C0] ? _copy_to_user+0x126/0x160 [ 3607.601892][ C0] __x64_sys_futex+0x376/0x4f0 [ 3607.606843][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3607.611591][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3607.617260][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.623368][ C0] ? do_syscall_64+0x21/0x7d0 [ 3607.628055][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.634270][ C0] do_syscall_64+0xf6/0x7d0 [ 3607.638832][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3607.644728][ C0] RIP: 0033:0x45ca69 [ 3607.648648][ C0] Code: Bad RIP value. [ 3607.652770][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3607.661197][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3607.669173][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3607.677269][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3607.685248][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3607.693236][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3607.701226][ C0] syz-executor.3 S29400 21960 7191 0x00000000 [ 3607.707706][ C0] Call Trace: [ 3607.711026][ C0] __schedule+0x8f3/0x1fc0 [ 3607.715538][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3607.720956][ C0] ? firmware_map_remove+0x19d/0x19d [ 3607.726249][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3607.731768][ C0] schedule+0xd0/0x2a0 [ 3607.735936][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3607.741108][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3607.746584][ C0] futex_wait+0x1e2/0x550 [ 3607.751081][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3607.756120][ C0] ? print_usage_bug+0x240/0x240 [ 3607.761056][ C0] ? hash_futex+0x10/0x200 [ 3607.765776][ C0] ? futex_wake+0x153/0x480 [ 3607.770312][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.776301][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3607.782439][ C0] do_futex+0x15f/0x1ad0 [ 3607.786701][ C0] ? find_held_lock+0x2d/0x110 [ 3607.791484][ C0] ? futex_exit_release+0x60/0x60 [ 3607.796672][ C0] ? lock_downgrade+0x840/0x840 [ 3607.801585][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3607.806448][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.812439][ C0] ? __might_fault+0x190/0x1d0 [ 3607.817272][ C0] ? _copy_to_user+0x126/0x160 [ 3607.822255][ C0] __x64_sys_futex+0x376/0x4f0 [ 3607.827038][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3607.831567][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3607.837285][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.843309][ C0] ? do_syscall_64+0x21/0x7d0 [ 3607.847994][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3607.854069][ C0] do_syscall_64+0xf6/0x7d0 [ 3607.858636][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3607.864524][ C0] RIP: 0033:0x45ca69 [ 3607.868522][ C0] Code: Bad RIP value. [ 3607.872649][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3607.881100][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3607.889205][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3607.897185][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3607.905161][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3607.913325][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3607.921407][ C0] syz-executor.3 S29816 21978 7191 0x00000000 [ 3607.927742][ C0] Call Trace: [ 3607.931063][ C0] __schedule+0x8f3/0x1fc0 [ 3607.935491][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3607.940772][ C0] ? firmware_map_remove+0x19d/0x19d [ 3607.946082][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3607.951549][ C0] schedule+0xd0/0x2a0 [ 3607.955612][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3607.960847][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3607.966311][ C0] ? find_held_lock+0x2d/0x110 [ 3607.971102][ C0] futex_wait+0x1e2/0x550 [ 3607.975452][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3607.980543][ C0] ? print_usage_bug+0x240/0x240 [ 3607.985502][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3607.990717][ C0] ? futex_wake+0x153/0x480 [ 3607.995235][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.001205][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.007199][ C0] do_futex+0x15f/0x1ad0 [ 3608.011559][ C0] ? find_held_lock+0x2d/0x110 [ 3608.016330][ C0] ? futex_exit_release+0x60/0x60 [ 3608.021362][ C0] ? lock_downgrade+0x840/0x840 [ 3608.026270][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3608.031130][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.037154][ C0] ? __might_fault+0x190/0x1d0 [ 3608.041918][ C0] ? _copy_to_user+0x126/0x160 [ 3608.046732][ C0] __x64_sys_futex+0x376/0x4f0 [ 3608.051504][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3608.056005][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3608.061681][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.067658][ C0] ? do_syscall_64+0x21/0x7d0 [ 3608.072353][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.078332][ C0] do_syscall_64+0xf6/0x7d0 [ 3608.082844][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3608.088730][ C0] RIP: 0033:0x45ca69 [ 3608.092646][ C0] Code: Bad RIP value. [ 3608.096702][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3608.105095][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3608.113059][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3608.121009][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3608.128969][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3608.136937][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3608.144917][ C0] kworker/u4:2 I24768 23313 2 0x80004000 [ 3608.151289][ C0] Workqueue: 0x0 (bat_events) [ 3608.156082][ C0] Call Trace: [ 3608.159363][ C0] __schedule+0x8f3/0x1fc0 [ 3608.163756][ C0] ? worker_thread+0x240/0xe20 [ 3608.168519][ C0] ? firmware_map_remove+0x19d/0x19d [ 3608.173794][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3608.178983][ C0] schedule+0xd0/0x2a0 [ 3608.183034][ C0] worker_thread+0x245/0xe20 [ 3608.187626][ C0] ? process_one_work+0x16a0/0x16a0 [ 3608.192815][ C0] kthread+0x388/0x470 [ 3608.196861][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3608.202553][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3608.208265][ C0] ret_from_fork+0x24/0x30 [ 3608.212678][ C0] syz-executor.3 S28904 23535 7191 0x00000000 [ 3608.218986][ C0] Call Trace: [ 3608.222317][ C0] __schedule+0x8f3/0x1fc0 [ 3608.226733][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3608.232047][ C0] ? firmware_map_remove+0x19d/0x19d [ 3608.237333][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3608.242777][ C0] schedule+0xd0/0x2a0 [ 3608.246843][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3608.251946][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3608.257392][ C0] futex_wait+0x1e2/0x550 [ 3608.261709][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3608.266728][ C0] ? print_usage_bug+0x240/0x240 [ 3608.271656][ C0] ? hash_futex+0x10/0x200 [ 3608.276067][ C0] ? futex_wake+0x153/0x480 [ 3608.280568][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.286539][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.292559][ C0] do_futex+0x15f/0x1ad0 [ 3608.296822][ C0] ? find_held_lock+0x2d/0x110 [ 3608.301603][ C0] ? futex_exit_release+0x60/0x60 [ 3608.306623][ C0] ? lock_downgrade+0x840/0x840 [ 3608.311511][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3608.316407][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.322372][ C0] ? __might_fault+0x190/0x1d0 [ 3608.327136][ C0] ? _copy_to_user+0x126/0x160 [ 3608.333028][ C0] __x64_sys_futex+0x376/0x4f0 [ 3608.337776][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3608.342263][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3608.347712][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.353711][ C0] ? do_syscall_64+0x21/0x7d0 [ 3608.358378][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.364346][ C0] do_syscall_64+0xf6/0x7d0 [ 3608.368846][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3608.374733][ C0] RIP: 0033:0x45ca69 [ 3608.378626][ C0] Code: Bad RIP value. [ 3608.382666][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3608.391059][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3608.399021][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3608.406979][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3608.414945][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3608.422890][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3608.430887][ C0] syz-executor.5 S29408 26836 7350 0x00000000 [ 3608.437217][ C0] Call Trace: [ 3608.440500][ C0] __schedule+0x8f3/0x1fc0 [ 3608.444907][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3608.450197][ C0] ? firmware_map_remove+0x19d/0x19d [ 3608.455488][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3608.460949][ C0] schedule+0xd0/0x2a0 [ 3608.465018][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3608.470130][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3608.475597][ C0] futex_wait+0x1e2/0x550 [ 3608.479921][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3608.484936][ C0] ? wake_up_q+0xc1/0x140 [ 3608.489260][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3608.494458][ C0] ? futex_wake+0x153/0x480 [ 3608.498956][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.504933][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 3608.510759][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.516731][ C0] do_futex+0x15f/0x1ad0 [ 3608.520958][ C0] ? find_held_lock+0x2d/0x110 [ 3608.525712][ C0] ? futex_exit_release+0x60/0x60 [ 3608.530740][ C0] ? lock_downgrade+0x840/0x840 [ 3608.535580][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3608.540417][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.546400][ C0] ? __might_fault+0x190/0x1d0 [ 3608.551165][ C0] ? _copy_to_user+0x126/0x160 [ 3608.555939][ C0] __x64_sys_futex+0x376/0x4f0 [ 3608.560705][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3608.565204][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3608.570664][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.576651][ C0] ? do_syscall_64+0x21/0x7d0 [ 3608.581320][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.587297][ C0] do_syscall_64+0xf6/0x7d0 [ 3608.591808][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3608.597693][ C0] RIP: 0033:0x45ca69 [ 3608.601573][ C0] Code: Bad RIP value. [ 3608.605622][ C0] RSP: 002b:00007f21a5951cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3608.614022][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3608.621977][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3608.629944][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3608.637904][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3608.645865][ C0] R13: 0000000000c9fb6f R14: 00007f21a59529c0 R15: 000000000078bf0c [ 3608.653839][ C0] syz-executor.5 S29824 27312 7350 0x00000000 [ 3608.660148][ C0] Call Trace: [ 3608.663436][ C0] __schedule+0x8f3/0x1fc0 [ 3608.667846][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3608.673122][ C0] ? firmware_map_remove+0x19d/0x19d [ 3608.678392][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3608.683849][ C0] schedule+0xd0/0x2a0 [ 3608.687913][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3608.693015][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3608.698455][ C0] futex_wait+0x1e2/0x550 [ 3608.702766][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3608.707782][ C0] ? print_usage_bug+0x240/0x240 [ 3608.712707][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3608.717707][ C0] ? hash_futex+0x10/0x200 [ 3608.722108][ C0] ? futex_wake+0x153/0x480 [ 3608.726620][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.732590][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.738547][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.744507][ C0] do_futex+0x15f/0x1ad0 [ 3608.748750][ C0] ? find_held_lock+0x2d/0x110 [ 3608.753504][ C0] ? futex_exit_release+0x60/0x60 [ 3608.758506][ C0] ? lock_downgrade+0x840/0x840 [ 3608.763332][ C0] ? lock_downgrade+0x840/0x840 [ 3608.768176][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3608.773015][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.778987][ C0] ? __might_fault+0x190/0x1d0 [ 3608.783738][ C0] ? _copy_to_user+0x126/0x160 [ 3608.788501][ C0] __x64_sys_futex+0x376/0x4f0 [ 3608.793273][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3608.797790][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3608.803226][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.809198][ C0] ? do_syscall_64+0x21/0x7d0 [ 3608.813880][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3608.819839][ C0] do_syscall_64+0xf6/0x7d0 [ 3608.824331][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3608.830206][ C0] RIP: 0033:0x45ca69 [ 3608.834096][ C0] Code: Bad RIP value. [ 3608.838158][ C0] RSP: 002b:00007f21a5951cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3608.846551][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3608.854518][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3608.862464][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3608.870422][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3608.878380][ C0] R13: 0000000000c9fb6f R14: 00007f21a59529c0 R15: 000000000078bf0c [ 3608.886357][ C0] syz-executor.5 S29616 27600 7350 0x00000000 [ 3608.892692][ C0] Call Trace: [ 3608.895977][ C0] __schedule+0x8f3/0x1fc0 [ 3608.900385][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3608.905752][ C0] ? firmware_map_remove+0x19d/0x19d [ 3608.911041][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3608.916490][ C0] schedule+0xd0/0x2a0 [ 3608.920552][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3608.925652][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3608.931106][ C0] ? find_held_lock+0x2d/0x110 [ 3608.935883][ C0] futex_wait+0x1e2/0x550 [ 3608.940203][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3608.945214][ C0] ? print_usage_bug+0x240/0x240 [ 3608.950155][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3608.955358][ C0] ? futex_wake+0x153/0x480 [ 3608.959848][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.965816][ C0] ? page_fault+0x39/0x40 [ 3608.970152][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3608.976120][ C0] do_futex+0x15f/0x1ad0 [ 3608.980349][ C0] ? find_held_lock+0x2d/0x110 [ 3608.985105][ C0] ? futex_exit_release+0x60/0x60 [ 3608.990145][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3608.995606][ C0] ? lock_downgrade+0x840/0x840 [ 3609.000432][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3609.005272][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.011267][ C0] ? __might_fault+0x190/0x1d0 [ 3609.016033][ C0] ? _copy_to_user+0x126/0x160 [ 3609.020806][ C0] __x64_sys_futex+0x376/0x4f0 [ 3609.025577][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3609.030079][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3609.035527][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.041494][ C0] ? do_syscall_64+0x21/0x7d0 [ 3609.046168][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.052158][ C0] do_syscall_64+0xf6/0x7d0 [ 3609.056642][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3609.062511][ C0] RIP: 0033:0x45ca69 [ 3609.066400][ C0] Code: Bad RIP value. [ 3609.070461][ C0] RSP: 002b:00007f21a5951cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3609.078857][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3609.086813][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3609.094778][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3609.102745][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3609.110705][ C0] R13: 0000000000c9fb6f R14: 00007f21a59529c0 R15: 000000000078bf0c [ 3609.118683][ C0] kworker/1:3 I26192 31493 2 0x80004000 [ 3609.125044][ C0] Workqueue: 0x0 (wg-crypt-wg1) [ 3609.129975][ C0] Call Trace: [ 3609.133262][ C0] __schedule+0x8f3/0x1fc0 [ 3609.137658][ C0] ? worker_thread+0x240/0xe20 [ 3609.142412][ C0] ? firmware_map_remove+0x19d/0x19d [ 3609.147693][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3609.152882][ C0] schedule+0xd0/0x2a0 [ 3609.156934][ C0] worker_thread+0x245/0xe20 [ 3609.161512][ C0] ? process_one_work+0x16a0/0x16a0 [ 3609.166702][ C0] kthread+0x388/0x470 [ 3609.170766][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3609.176472][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3609.182200][ C0] ret_from_fork+0x24/0x30 [ 3609.186620][ C0] syz-executor.3 S29824 3698 7191 0x00000000 [ 3609.192949][ C0] Call Trace: [ 3609.196233][ C0] __schedule+0x8f3/0x1fc0 [ 3609.200629][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3609.205911][ C0] ? firmware_map_remove+0x19d/0x19d [ 3609.211198][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3609.216646][ C0] schedule+0xd0/0x2a0 [ 3609.220695][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3609.225800][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3609.231269][ C0] futex_wait+0x1e2/0x550 [ 3609.235597][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3609.240622][ C0] ? print_usage_bug+0x240/0x240 [ 3609.245555][ C0] ? hash_futex+0x10/0x200 [ 3609.249992][ C0] ? futex_wake+0x153/0x480 [ 3609.254495][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.260453][ C0] ? mark_lock+0x11f/0xdd0 [ 3609.264869][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.270858][ C0] do_futex+0x15f/0x1ad0 [ 3609.275100][ C0] ? find_held_lock+0x2d/0x110 [ 3609.279841][ C0] ? futex_exit_release+0x60/0x60 [ 3609.284860][ C0] ? lock_downgrade+0x840/0x840 [ 3609.289712][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3609.294553][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.300530][ C0] ? __might_fault+0x190/0x1d0 [ 3609.305290][ C0] ? _copy_to_user+0x126/0x160 [ 3609.310082][ C0] __x64_sys_futex+0x376/0x4f0 [ 3609.314836][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3609.319317][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3609.324769][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.330750][ C0] ? do_syscall_64+0x21/0x7d0 [ 3609.335446][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.341434][ C0] do_syscall_64+0xf6/0x7d0 [ 3609.345932][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3609.351827][ C0] RIP: 0033:0x45ca69 [ 3609.355715][ C0] Code: Bad RIP value. [ 3609.359768][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3609.368161][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3609.376135][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3609.384081][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3609.392026][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3609.399973][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3609.407951][ C0] syz-executor.3 S29616 6747 7191 0x00000000 [ 3609.414291][ C0] Call Trace: [ 3609.417570][ C0] __schedule+0x8f3/0x1fc0 [ 3609.421977][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3609.427278][ C0] ? firmware_map_remove+0x19d/0x19d [ 3609.432575][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3609.438012][ C0] schedule+0xd0/0x2a0 [ 3609.442060][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3609.447162][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3609.452636][ C0] futex_wait+0x1e2/0x550 [ 3609.456974][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3609.461976][ C0] ? print_usage_bug+0x240/0x240 [ 3609.466910][ C0] ? hash_futex+0x10/0x200 [ 3609.471325][ C0] ? futex_wake+0x153/0x480 [ 3609.475826][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.481783][ C0] ? page_fault+0x39/0x40 [ 3609.486104][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.492088][ C0] do_futex+0x15f/0x1ad0 [ 3609.496315][ C0] ? find_held_lock+0x2d/0x110 [ 3609.501056][ C0] ? futex_exit_release+0x60/0x60 [ 3609.506075][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3609.511537][ C0] ? lock_downgrade+0x840/0x840 [ 3609.516375][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3609.521201][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.527181][ C0] ? __might_fault+0x190/0x1d0 [ 3609.531934][ C0] ? _copy_to_user+0x126/0x160 [ 3609.536696][ C0] __x64_sys_futex+0x376/0x4f0 [ 3609.541442][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3609.545936][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3609.551391][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.557360][ C0] ? do_syscall_64+0x21/0x7d0 [ 3609.562016][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.567991][ C0] do_syscall_64+0xf6/0x7d0 [ 3609.572483][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3609.578351][ C0] RIP: 0033:0x45ca69 [ 3609.582228][ C0] Code: Bad RIP value. [ 3609.586274][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3609.594678][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3609.602629][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3609.610585][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3609.618548][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3609.626506][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3609.634477][ C0] syz-executor.3 S29824 6777 7191 0x00000000 [ 3609.640799][ C0] Call Trace: [ 3609.644069][ C0] __schedule+0x8f3/0x1fc0 [ 3609.648475][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3609.653750][ C0] ? firmware_map_remove+0x19d/0x19d [ 3609.659028][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3609.664479][ C0] schedule+0xd0/0x2a0 [ 3609.668548][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3609.673658][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3609.679110][ C0] futex_wait+0x1e2/0x550 [ 3609.683431][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3609.688446][ C0] ? print_usage_bug+0x240/0x240 [ 3609.693371][ C0] ? hash_futex+0x10/0x200 [ 3609.697764][ C0] ? futex_wake+0x153/0x480 [ 3609.702251][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.708215][ C0] ? mark_lock+0x11f/0xdd0 [ 3609.712623][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.718583][ C0] do_futex+0x15f/0x1ad0 [ 3609.722808][ C0] ? find_held_lock+0x2d/0x110 [ 3609.727568][ C0] ? futex_exit_release+0x60/0x60 [ 3609.732593][ C0] ? lock_downgrade+0x840/0x840 [ 3609.737422][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3609.742246][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.748227][ C0] ? __might_fault+0x190/0x1d0 [ 3609.752980][ C0] ? _copy_to_user+0x126/0x160 [ 3609.757724][ C0] __x64_sys_futex+0x376/0x4f0 [ 3609.762466][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3609.766960][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3609.772421][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.778380][ C0] ? do_syscall_64+0x21/0x7d0 [ 3609.783033][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.789027][ C0] do_syscall_64+0xf6/0x7d0 [ 3609.793530][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3609.799410][ C0] RIP: 0033:0x45ca69 [ 3609.803301][ C0] Code: Bad RIP value. [ 3609.807347][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3609.815764][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3609.823721][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3609.831706][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3609.839664][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3609.847620][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3609.855590][ C0] syz-executor.3 S29824 7202 7191 0x00000000 [ 3609.861897][ C0] Call Trace: [ 3609.865187][ C0] __schedule+0x8f3/0x1fc0 [ 3609.869601][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3609.874876][ C0] ? firmware_map_remove+0x19d/0x19d [ 3609.880137][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3609.885605][ C0] schedule+0xd0/0x2a0 [ 3609.889679][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3609.894778][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3609.900211][ C0] ? find_held_lock+0x2d/0x110 [ 3609.904972][ C0] futex_wait+0x1e2/0x550 [ 3609.909306][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3609.914317][ C0] ? print_usage_bug+0x240/0x240 [ 3609.919327][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3609.924499][ C0] ? futex_wake+0x153/0x480 [ 3609.929011][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.934999][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3609.940954][ C0] do_futex+0x15f/0x1ad0 [ 3609.945198][ C0] ? find_held_lock+0x2d/0x110 [ 3609.949962][ C0] ? futex_exit_release+0x60/0x60 [ 3609.954975][ C0] ? lock_downgrade+0x840/0x840 [ 3609.959801][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3609.964636][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3609.970627][ C0] ? __might_fault+0x190/0x1d0 [ 3609.975390][ C0] ? _copy_to_user+0x126/0x160 [ 3609.980147][ C0] __x64_sys_futex+0x376/0x4f0 [ 3609.984903][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3609.989407][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3609.994863][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.000830][ C0] ? do_syscall_64+0x21/0x7d0 [ 3610.005497][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.011465][ C0] do_syscall_64+0xf6/0x7d0 [ 3610.015960][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3610.021839][ C0] RIP: 0033:0x45ca69 [ 3610.025726][ C0] Code: Bad RIP value. [ 3610.029785][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3610.038182][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3610.046153][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3610.054112][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3610.062061][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3610.070024][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3610.077998][ C0] syz-executor.3 S29224 7478 7191 0x00000000 [ 3610.084303][ C0] Call Trace: [ 3610.087605][ C0] __schedule+0x8f3/0x1fc0 [ 3610.092021][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3610.097290][ C0] ? firmware_map_remove+0x19d/0x19d [ 3610.102573][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3610.108025][ C0] schedule+0xd0/0x2a0 [ 3610.112102][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3610.117205][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3610.122647][ C0] ? find_held_lock+0x2d/0x110 [ 3610.127413][ C0] futex_wait+0x1e2/0x550 [ 3610.131786][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3610.136843][ C0] ? print_usage_bug+0x240/0x240 [ 3610.141794][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3610.146991][ C0] ? futex_wake+0x153/0x480 [ 3610.151537][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.157494][ C0] ? page_fault+0x39/0x40 [ 3610.161804][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.167777][ C0] do_futex+0x15f/0x1ad0 [ 3610.172028][ C0] ? find_held_lock+0x2d/0x110 [ 3610.176771][ C0] ? futex_exit_release+0x60/0x60 [ 3610.181803][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3610.187257][ C0] ? lock_downgrade+0x840/0x840 [ 3610.192130][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3610.196959][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.202930][ C0] ? __might_fault+0x190/0x1d0 [ 3610.207685][ C0] ? _copy_to_user+0x126/0x160 [ 3610.212442][ C0] __x64_sys_futex+0x376/0x4f0 [ 3610.217203][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3610.221710][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3610.227162][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.233132][ C0] ? do_syscall_64+0x21/0x7d0 [ 3610.237804][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.243773][ C0] do_syscall_64+0xf6/0x7d0 [ 3610.248268][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3610.254145][ C0] RIP: 0033:0x45ca69 [ 3610.258027][ C0] Code: Bad RIP value. [ 3610.262065][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3610.270463][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3610.278426][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3610.286390][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3610.294349][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3610.302330][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3610.310310][ C0] syz-executor.3 S28720 7601 7191 0x00000000 [ 3610.316641][ C0] Call Trace: [ 3610.319912][ C0] __schedule+0x8f3/0x1fc0 [ 3610.324308][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3610.329589][ C0] ? firmware_map_remove+0x19d/0x19d [ 3610.334866][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3610.340302][ C0] schedule+0xd0/0x2a0 [ 3610.344349][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3610.349468][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3610.354934][ C0] futex_wait+0x1e2/0x550 [ 3610.359242][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3610.364254][ C0] ? print_usage_bug+0x240/0x240 [ 3610.369186][ C0] ? hash_futex+0x10/0x200 [ 3610.373589][ C0] ? futex_wake+0x153/0x480 [ 3610.378087][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.384044][ C0] ? page_fault+0x39/0x40 [ 3610.388370][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.394339][ C0] do_futex+0x15f/0x1ad0 [ 3610.398580][ C0] ? find_held_lock+0x2d/0x110 [ 3610.403320][ C0] ? futex_exit_release+0x60/0x60 [ 3610.408342][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3610.413788][ C0] ? lock_downgrade+0x840/0x840 [ 3610.418627][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3610.423465][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.429445][ C0] ? __might_fault+0x190/0x1d0 [ 3610.434211][ C0] ? _copy_to_user+0x126/0x160 [ 3610.438958][ C0] __x64_sys_futex+0x376/0x4f0 [ 3610.443720][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3610.448234][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3610.453693][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.459654][ C0] ? do_syscall_64+0x21/0x7d0 [ 3610.464304][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.470279][ C0] do_syscall_64+0xf6/0x7d0 [ 3610.474779][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3610.480655][ C0] RIP: 0033:0x45ca69 [ 3610.484543][ C0] Code: Bad RIP value. [ 3610.488590][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3610.496989][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3610.504946][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3610.512905][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3610.520851][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3610.528809][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3610.536796][ C0] syz-executor.3 S29816 7812 7191 0x00000000 [ 3610.543120][ C0] Call Trace: [ 3610.546408][ C0] __schedule+0x8f3/0x1fc0 [ 3610.550825][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3610.556102][ C0] ? firmware_map_remove+0x19d/0x19d [ 3610.561367][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3610.566819][ C0] schedule+0xd0/0x2a0 [ 3610.570911][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3610.576025][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3610.581465][ C0] futex_wait+0x1e2/0x550 [ 3610.585789][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3610.590813][ C0] ? print_usage_bug+0x240/0x240 [ 3610.595754][ C0] ? hash_futex+0x10/0x200 [ 3610.600161][ C0] ? futex_wake+0x153/0x480 [ 3610.604669][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.610654][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.616637][ C0] do_futex+0x15f/0x1ad0 [ 3610.620863][ C0] ? find_held_lock+0x2d/0x110 [ 3610.625621][ C0] ? futex_exit_release+0x60/0x60 [ 3610.630663][ C0] ? lock_downgrade+0x840/0x840 [ 3610.635503][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3610.640342][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.646326][ C0] ? __might_fault+0x190/0x1d0 [ 3610.651098][ C0] ? _copy_to_user+0x126/0x160 [ 3610.655871][ C0] __x64_sys_futex+0x376/0x4f0 [ 3610.660629][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3610.665141][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3610.670596][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.676583][ C0] ? do_syscall_64+0x21/0x7d0 [ 3610.681236][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.687209][ C0] do_syscall_64+0xf6/0x7d0 [ 3610.691727][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3610.697610][ C0] RIP: 0033:0x45ca69 [ 3610.701498][ C0] Code: Bad RIP value. [ 3610.705546][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3610.713943][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3610.721900][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3610.729856][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3610.737829][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3610.745786][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3610.753757][ C0] syz-executor.3 S28120 7976 7191 0x00000000 [ 3610.760070][ C0] Call Trace: [ 3610.763340][ C0] __schedule+0x8f3/0x1fc0 [ 3610.767764][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3610.773059][ C0] ? firmware_map_remove+0x19d/0x19d [ 3610.778335][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3610.783768][ C0] schedule+0xd0/0x2a0 [ 3610.787832][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3610.792942][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3610.798405][ C0] ? find_held_lock+0x2d/0x110 [ 3610.803147][ C0] futex_wait+0x1e2/0x550 [ 3610.807471][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3610.812484][ C0] ? print_usage_bug+0x240/0x240 [ 3610.817419][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3610.822595][ C0] ? futex_wake+0x153/0x480 [ 3610.827107][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.833079][ C0] ? page_fault+0x39/0x40 [ 3610.837402][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3610.843360][ C0] do_futex+0x15f/0x1ad0 [ 3610.847605][ C0] ? find_held_lock+0x2d/0x110 [ 3610.852358][ C0] ? futex_exit_release+0x60/0x60 [ 3610.857363][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3610.862807][ C0] ? lock_downgrade+0x840/0x840 [ 3610.867649][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3610.872486][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.878450][ C0] ? __might_fault+0x190/0x1d0 [ 3610.883203][ C0] ? _copy_to_user+0x126/0x160 [ 3610.887967][ C0] __x64_sys_futex+0x376/0x4f0 [ 3610.892722][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3610.897206][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3610.902656][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.908625][ C0] ? do_syscall_64+0x21/0x7d0 [ 3610.913299][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3610.919259][ C0] do_syscall_64+0xf6/0x7d0 [ 3610.923755][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3610.929632][ C0] RIP: 0033:0x45ca69 [ 3610.933523][ C0] Code: Bad RIP value. [ 3610.937575][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3610.945969][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3610.953948][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3610.961905][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3610.969879][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3610.977837][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3610.985814][ C0] syz-executor.3 S29824 8085 7191 0x00000000 [ 3610.992150][ C0] Call Trace: [ 3610.995449][ C0] __schedule+0x8f3/0x1fc0 [ 3610.999845][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3611.005126][ C0] ? firmware_map_remove+0x19d/0x19d [ 3611.010416][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3611.015881][ C0] schedule+0xd0/0x2a0 [ 3611.019942][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3611.025047][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3611.030515][ C0] ? find_held_lock+0x2d/0x110 [ 3611.035269][ C0] futex_wait+0x1e2/0x550 [ 3611.039579][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3611.044580][ C0] ? print_usage_bug+0x240/0x240 [ 3611.049513][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3611.054707][ C0] ? futex_wake+0x153/0x480 [ 3611.059198][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.065167][ C0] ? do_wp_page+0x512/0x1440 [ 3611.069757][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.075726][ C0] do_futex+0x15f/0x1ad0 [ 3611.079962][ C0] ? find_held_lock+0x2d/0x110 [ 3611.084717][ C0] ? futex_exit_release+0x60/0x60 [ 3611.089745][ C0] ? lock_downgrade+0x840/0x840 [ 3611.094606][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3611.099462][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.105454][ C0] ? __might_fault+0x190/0x1d0 [ 3611.110218][ C0] ? _copy_to_user+0x126/0x160 [ 3611.114992][ C0] __x64_sys_futex+0x376/0x4f0 [ 3611.119765][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3611.124249][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3611.129703][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.135673][ C0] ? do_syscall_64+0x21/0x7d0 [ 3611.140323][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.146305][ C0] do_syscall_64+0xf6/0x7d0 [ 3611.150814][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3611.156735][ C0] RIP: 0033:0x45ca69 [ 3611.160614][ C0] Code: Bad RIP value. [ 3611.164663][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3611.173063][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3611.181016][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3611.188972][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3611.196937][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3611.204892][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3611.212884][ C0] syz-executor.3 S28720 8102 7191 0x00000000 [ 3611.219212][ C0] Call Trace: [ 3611.222496][ C0] __schedule+0x8f3/0x1fc0 [ 3611.226902][ C0] ? do_wait+0x581/0xa00 [ 3611.231151][ C0] ? firmware_map_remove+0x19d/0x19d [ 3611.236422][ C0] ? release_task+0x15a0/0x15a0 [ 3611.241263][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3611.247069][ C0] schedule+0xd0/0x2a0 [ 3611.251137][ C0] do_wait+0x63c/0xa00 [ 3611.255202][ C0] ? wait_consider_task+0x37a0/0x37a0 [ 3611.260554][ C0] kernel_wait4+0x14c/0x260 [ 3611.265050][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 3611.270220][ C0] ? _do_fork+0x265/0x1010 [ 3611.274651][ C0] ? task_stopped_code+0x180/0x180 [ 3611.279771][ C0] __do_sys_wait4+0x147/0x160 [ 3611.284446][ C0] ? kernel_wait4+0x260/0x260 [ 3611.289139][ C0] ? put_timespec64+0xcb/0x120 [ 3611.293892][ C0] ? ns_to_kernel_old_timeval+0x100/0x100 [ 3611.299592][ C0] ? __x64_sys_futex+0x380/0x4f0 [ 3611.304521][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3611.309967][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.315979][ C0] ? do_syscall_64+0x21/0x7d0 [ 3611.320665][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.326640][ C0] do_syscall_64+0xf6/0x7d0 [ 3611.331147][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3611.337030][ C0] RIP: 0033:0x45ca69 [ 3611.340926][ C0] Code: Bad RIP value. [ 3611.344976][ C0] RSP: 002b:00007f2c9c8f6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 3611.353384][ C0] RAX: ffffffffffffffda RBX: 000000000050a400 RCX: 000000000045ca69 [ 3611.361331][ C0] RDX: 0000000080000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 3611.369287][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3611.377249][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3611.385206][ C0] R13: 0000000000000c56 R14: 00000000004cea3e R15: 00007f2c9c8f76d4 [ 3611.393177][ C0] syz-executor.3 S28976 8112 8102 0x00000000 [ 3611.399497][ C0] Call Trace: [ 3611.402782][ C0] __schedule+0x8f3/0x1fc0 [ 3611.407200][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3611.412498][ C0] ? firmware_map_remove+0x19d/0x19d [ 3611.417779][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3611.423225][ C0] schedule+0xd0/0x2a0 [ 3611.427296][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3611.432411][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3611.437870][ C0] ? find_held_lock+0x2d/0x110 [ 3611.442634][ C0] futex_wait+0x1e2/0x550 [ 3611.446977][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3611.452031][ C0] ? print_usage_bug+0x240/0x240 [ 3611.456962][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3611.462139][ C0] ? futex_wake+0x153/0x480 [ 3611.466651][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.472621][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.478580][ C0] do_futex+0x15f/0x1ad0 [ 3611.482806][ C0] ? find_held_lock+0x2d/0x110 [ 3611.487566][ C0] ? futex_exit_release+0x60/0x60 [ 3611.492582][ C0] ? lock_downgrade+0x840/0x840 [ 3611.497412][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3611.502240][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.508223][ C0] ? __might_fault+0x190/0x1d0 [ 3611.512978][ C0] ? _copy_to_user+0x126/0x160 [ 3611.517726][ C0] __x64_sys_futex+0x376/0x4f0 [ 3611.522481][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3611.526978][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3611.532432][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.538391][ C0] ? do_syscall_64+0x21/0x7d0 [ 3611.543047][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.549029][ C0] do_syscall_64+0xf6/0x7d0 [ 3611.553526][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3611.559410][ C0] RIP: 0033:0x45ca69 [ 3611.563288][ C0] Code: Bad RIP value. [ 3611.567338][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3611.575749][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3611.583705][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3611.591668][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3611.599615][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3611.607570][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3611.615542][ C0] syz-executor.3 S29224 8151 7191 0x00000000 [ 3611.621861][ C0] Call Trace: [ 3611.625147][ C0] __schedule+0x8f3/0x1fc0 [ 3611.629563][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3611.634839][ C0] ? firmware_map_remove+0x19d/0x19d [ 3611.640103][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3611.645555][ C0] schedule+0xd0/0x2a0 [ 3611.649629][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3611.654732][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3611.660172][ C0] futex_wait+0x1e2/0x550 [ 3611.664490][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3611.669509][ C0] ? print_usage_bug+0x240/0x240 [ 3611.674437][ C0] ? hash_futex+0x10/0x200 [ 3611.678841][ C0] ? futex_wake+0x153/0x480 [ 3611.683342][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.689305][ C0] ? page_fault+0x39/0x40 [ 3611.693638][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.699596][ C0] do_futex+0x15f/0x1ad0 [ 3611.703831][ C0] ? find_held_lock+0x2d/0x110 [ 3611.708593][ C0] ? futex_exit_release+0x60/0x60 [ 3611.713618][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3611.719065][ C0] ? lock_downgrade+0x840/0x840 [ 3611.723904][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3611.728743][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.734734][ C0] ? __might_fault+0x190/0x1d0 [ 3611.739489][ C0] ? _copy_to_user+0x126/0x160 [ 3611.744234][ C0] __x64_sys_futex+0x376/0x4f0 [ 3611.749017][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3611.753512][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3611.758964][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.764939][ C0] ? do_syscall_64+0x21/0x7d0 [ 3611.769636][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.775621][ C0] do_syscall_64+0xf6/0x7d0 [ 3611.780119][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3611.785997][ C0] RIP: 0033:0x45ca69 [ 3611.789902][ C0] Code: Bad RIP value. [ 3611.793963][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3611.802359][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3611.810313][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3611.818274][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3611.826351][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3611.834318][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3611.842290][ C0] syz-executor.3 S29616 8697 7191 0x00000000 [ 3611.848610][ C0] Call Trace: [ 3611.851937][ C0] __schedule+0x8f3/0x1fc0 [ 3611.856334][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3611.861627][ C0] ? firmware_map_remove+0x19d/0x19d [ 3611.866911][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3611.872378][ C0] schedule+0xd0/0x2a0 [ 3611.876475][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3611.881577][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3611.887031][ C0] ? find_held_lock+0x2d/0x110 [ 3611.891806][ C0] futex_wait+0x1e2/0x550 [ 3611.896142][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3611.901179][ C0] ? print_usage_bug+0x240/0x240 [ 3611.906165][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3611.911353][ C0] ? futex_wake+0x153/0x480 [ 3611.915843][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.921799][ C0] ? page_fault+0x39/0x40 [ 3611.926121][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3611.932105][ C0] do_futex+0x15f/0x1ad0 [ 3611.936348][ C0] ? find_held_lock+0x2d/0x110 [ 3611.941101][ C0] ? futex_exit_release+0x60/0x60 [ 3611.946118][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3611.951565][ C0] ? lock_downgrade+0x840/0x840 [ 3611.956410][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3611.961236][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.967224][ C0] ? __might_fault+0x190/0x1d0 [ 3611.971979][ C0] ? _copy_to_user+0x126/0x160 [ 3611.976757][ C0] __x64_sys_futex+0x376/0x4f0 [ 3611.981516][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3611.986010][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3611.991457][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3611.997415][ C0] ? do_syscall_64+0x21/0x7d0 [ 3612.002066][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.008046][ C0] do_syscall_64+0xf6/0x7d0 [ 3612.012553][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3612.018422][ C0] RIP: 0033:0x45ca69 [ 3612.022299][ C0] Code: Bad RIP value. [ 3612.026351][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3612.034755][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3612.042714][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3612.050668][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3612.058646][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3612.066623][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3612.074594][ C0] syz-executor.3 S29824 9178 7191 0x00000000 [ 3612.080925][ C0] Call Trace: [ 3612.084208][ C0] __schedule+0x8f3/0x1fc0 [ 3612.088615][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3612.093908][ C0] ? firmware_map_remove+0x19d/0x19d [ 3612.099195][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3612.104645][ C0] schedule+0xd0/0x2a0 [ 3612.108726][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3612.114005][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3612.119450][ C0] futex_wait+0x1e2/0x550 [ 3612.123770][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3612.128785][ C0] ? print_usage_bug+0x240/0x240 [ 3612.133745][ C0] ? hash_futex+0x10/0x200 [ 3612.138152][ C0] ? futex_wake+0x153/0x480 [ 3612.142653][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.148620][ C0] ? mark_lock+0x11f/0xdd0 [ 3612.153049][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.159026][ C0] do_futex+0x15f/0x1ad0 [ 3612.163252][ C0] ? find_held_lock+0x2d/0x110 [ 3612.168013][ C0] ? futex_exit_release+0x60/0x60 [ 3612.173042][ C0] ? lock_downgrade+0x840/0x840 [ 3612.177883][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3612.182711][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.188689][ C0] ? __might_fault+0x190/0x1d0 [ 3612.193441][ C0] ? _copy_to_user+0x126/0x160 [ 3612.198189][ C0] __x64_sys_futex+0x376/0x4f0 [ 3612.202941][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3612.207435][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3612.212880][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.218851][ C0] ? do_syscall_64+0x21/0x7d0 [ 3612.223517][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.229507][ C0] do_syscall_64+0xf6/0x7d0 [ 3612.234018][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3612.239893][ C0] RIP: 0033:0x45ca69 [ 3612.243801][ C0] Code: Bad RIP value. [ 3612.247850][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3612.256265][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3612.264212][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3612.272170][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3612.280123][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3612.288090][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3612.296064][ C0] syz-executor.3 S28400 9810 7191 0x00000000 [ 3612.302407][ C0] Call Trace: [ 3612.305695][ C0] __schedule+0x8f3/0x1fc0 [ 3612.310118][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3612.315394][ C0] ? firmware_map_remove+0x19d/0x19d [ 3612.320658][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3612.326113][ C0] schedule+0xd0/0x2a0 [ 3612.330185][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3612.335302][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3612.340735][ C0] ? find_held_lock+0x2d/0x110 [ 3612.345495][ C0] futex_wait+0x1e2/0x550 [ 3612.349845][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3612.354872][ C0] ? print_usage_bug+0x240/0x240 [ 3612.359797][ C0] ? finish_task_switch+0x119/0x750 [ 3612.364985][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3612.370191][ C0] ? futex_wake+0x153/0x480 [ 3612.374705][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.380685][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.386681][ C0] do_futex+0x15f/0x1ad0 [ 3612.390937][ C0] ? find_held_lock+0x2d/0x110 [ 3612.395703][ C0] ? futex_exit_release+0x60/0x60 [ 3612.400716][ C0] ? lock_downgrade+0x840/0x840 [ 3612.405560][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3612.410409][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.416400][ C0] ? __might_fault+0x190/0x1d0 [ 3612.421165][ C0] ? _copy_to_user+0x126/0x160 [ 3612.425927][ C0] __x64_sys_futex+0x376/0x4f0 [ 3612.430695][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3612.435201][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3612.440659][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.446631][ C0] ? do_syscall_64+0x21/0x7d0 [ 3612.451306][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.457279][ C0] do_syscall_64+0xf6/0x7d0 [ 3612.461777][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3612.467654][ C0] RIP: 0033:0x45ca69 [ 3612.471547][ C0] Code: Bad RIP value. [ 3612.475588][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3612.483970][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3612.491917][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3612.499862][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3612.507817][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3612.515794][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3612.523765][ C0] syz-executor.3 S29824 9952 7191 0x00000000 [ 3612.530088][ C0] Call Trace: [ 3612.533399][ C0] __schedule+0x8f3/0x1fc0 [ 3612.537808][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3612.543075][ C0] ? firmware_map_remove+0x19d/0x19d [ 3612.548379][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3612.553827][ C0] schedule+0xd0/0x2a0 [ 3612.557873][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3612.562962][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3612.568407][ C0] ? mark_lock+0x11f/0xdd0 [ 3612.572829][ C0] futex_wait+0x1e2/0x550 [ 3612.577139][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3612.582141][ C0] ? print_usage_bug+0x240/0x240 [ 3612.587069][ C0] ? hash_futex+0x10/0x200 [ 3612.591472][ C0] ? futex_wake+0x153/0x480 [ 3612.595963][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.601919][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.607891][ C0] do_futex+0x15f/0x1ad0 [ 3612.612144][ C0] ? find_held_lock+0x2d/0x110 [ 3612.616887][ C0] ? futex_exit_release+0x60/0x60 [ 3612.621887][ C0] ? lock_downgrade+0x840/0x840 [ 3612.626728][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3612.631582][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.637562][ C0] ? __might_fault+0x190/0x1d0 [ 3612.642307][ C0] ? _copy_to_user+0x126/0x160 [ 3612.647089][ C0] __x64_sys_futex+0x376/0x4f0 [ 3612.651843][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3612.656342][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3612.661789][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.667759][ C0] ? do_syscall_64+0x21/0x7d0 [ 3612.672437][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.678396][ C0] do_syscall_64+0xf6/0x7d0 [ 3612.682878][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3612.688756][ C0] RIP: 0033:0x45ca69 [ 3612.692644][ C0] Code: Bad RIP value. [ 3612.696683][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3612.705078][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3612.713051][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3612.721020][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3612.728981][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3612.736944][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3612.744917][ C0] syz-executor.3 S28904 9980 7191 0x00000000 [ 3612.751255][ C0] Call Trace: [ 3612.754539][ C0] __schedule+0x8f3/0x1fc0 [ 3612.758936][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3612.764200][ C0] ? firmware_map_remove+0x19d/0x19d [ 3612.769481][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3612.774948][ C0] schedule+0xd0/0x2a0 [ 3612.779005][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3612.784091][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3612.789546][ C0] futex_wait+0x1e2/0x550 [ 3612.793880][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3612.798883][ C0] ? print_usage_bug+0x240/0x240 [ 3612.803798][ C0] ? hash_futex+0x10/0x200 [ 3612.808206][ C0] ? futex_wake+0x153/0x480 [ 3612.812706][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.818662][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.824675][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3612.830662][ C0] do_futex+0x15f/0x1ad0 [ 3612.834899][ C0] ? find_held_lock+0x2d/0x110 [ 3612.839677][ C0] ? futex_exit_release+0x60/0x60 [ 3612.844694][ C0] ? lock_downgrade+0x840/0x840 [ 3612.849547][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3612.854389][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.860354][ C0] ? __might_fault+0x190/0x1d0 [ 3612.865112][ C0] ? _copy_to_user+0x126/0x160 [ 3612.869884][ C0] __x64_sys_futex+0x376/0x4f0 [ 3612.874651][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3612.879148][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3612.884581][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.890563][ C0] ? do_syscall_64+0x21/0x7d0 [ 3612.895232][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3612.901191][ C0] do_syscall_64+0xf6/0x7d0 [ 3612.905690][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3612.911569][ C0] RIP: 0033:0x45ca69 [ 3612.915447][ C0] Code: Bad RIP value. [ 3612.919488][ C0] RSP: 002b:00007f2c9c8d5cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3612.927880][ C0] RAX: ffffffffffffffda RBX: 000000000078bfa8 RCX: 000000000045ca69 [ 3612.935847][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 [ 3612.943807][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 3612.951755][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 3612.959702][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8d69c0 R15: 000000000078bfac [ 3612.967678][ C0] syz-executor.3 S29224 10312 7191 0x00000000 [ 3612.974050][ C0] Call Trace: [ 3612.977319][ C0] __schedule+0x8f3/0x1fc0 [ 3612.981725][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3612.987014][ C0] ? firmware_map_remove+0x19d/0x19d [ 3612.992303][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3612.997751][ C0] schedule+0xd0/0x2a0 [ 3613.001797][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3613.006918][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3613.012369][ C0] futex_wait+0x1e2/0x550 [ 3613.016677][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3613.021679][ C0] ? print_usage_bug+0x240/0x240 [ 3613.026607][ C0] ? hash_futex+0x10/0x200 [ 3613.031027][ C0] ? futex_wake+0x153/0x480 [ 3613.035541][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.041505][ C0] ? page_fault+0x39/0x40 [ 3613.045828][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.051797][ C0] do_futex+0x15f/0x1ad0 [ 3613.056026][ C0] ? find_held_lock+0x2d/0x110 [ 3613.060767][ C0] ? futex_exit_release+0x60/0x60 [ 3613.065784][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3613.071242][ C0] ? lock_downgrade+0x840/0x840 [ 3613.076094][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3613.080937][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.086924][ C0] ? __might_fault+0x190/0x1d0 [ 3613.091683][ C0] ? _copy_to_user+0x126/0x160 [ 3613.096448][ C0] __x64_sys_futex+0x376/0x4f0 [ 3613.101224][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3613.105722][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3613.111183][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.117150][ C0] ? do_syscall_64+0x21/0x7d0 [ 3613.121803][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.127777][ C0] do_syscall_64+0xf6/0x7d0 [ 3613.132272][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3613.138140][ C0] RIP: 0033:0x45ca69 [ 3613.142065][ C0] Code: Bad RIP value. [ 3613.146117][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3613.154515][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3613.162497][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3613.170452][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3613.178421][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3613.186388][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3613.194403][ C0] syz-executor.3 S29824 10462 7191 0x00000000 [ 3613.200714][ C0] Call Trace: [ 3613.203987][ C0] __schedule+0x8f3/0x1fc0 [ 3613.208399][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3613.213711][ C0] ? firmware_map_remove+0x19d/0x19d [ 3613.218978][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3613.224424][ C0] schedule+0xd0/0x2a0 [ 3613.228487][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3613.233599][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3613.239047][ C0] futex_wait+0x1e2/0x550 [ 3613.243360][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3613.248380][ C0] ? print_usage_bug+0x240/0x240 [ 3613.253307][ C0] ? hash_futex+0x10/0x200 [ 3613.257714][ C0] ? futex_wake+0x153/0x480 [ 3613.262215][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.268203][ C0] ? mark_lock+0x11f/0xdd0 [ 3613.272613][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.278572][ C0] do_futex+0x15f/0x1ad0 [ 3613.282797][ C0] ? find_held_lock+0x2d/0x110 [ 3613.287555][ C0] ? futex_exit_release+0x60/0x60 [ 3613.292570][ C0] ? lock_downgrade+0x840/0x840 [ 3613.297402][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3613.302231][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.308213][ C0] ? __might_fault+0x190/0x1d0 [ 3613.312966][ C0] ? _copy_to_user+0x126/0x160 [ 3613.317713][ C0] __x64_sys_futex+0x376/0x4f0 [ 3613.322457][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3613.326953][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3613.332432][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.338392][ C0] ? do_syscall_64+0x21/0x7d0 [ 3613.343044][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.349021][ C0] do_syscall_64+0xf6/0x7d0 [ 3613.353514][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3613.359383][ C0] RIP: 0033:0x45ca69 [ 3613.363274][ C0] Code: Bad RIP value. [ 3613.367322][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3613.375728][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3613.383693][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3613.391640][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3613.399599][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3613.407554][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3613.415540][ C0] syz-executor.3 S29224 10467 7191 0x00000000 [ 3613.421857][ C0] Call Trace: [ 3613.425142][ C0] __schedule+0x8f3/0x1fc0 [ 3613.429566][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3613.434847][ C0] ? firmware_map_remove+0x19d/0x19d [ 3613.440122][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3613.445578][ C0] schedule+0xd0/0x2a0 [ 3613.449653][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3613.454755][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3613.460211][ C0] ? find_held_lock+0x2d/0x110 [ 3613.464989][ C0] futex_wait+0x1e2/0x550 [ 3613.469324][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3613.474346][ C0] ? futex_wake+0xf6/0x480 [ 3613.478743][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3613.483915][ C0] ? futex_wake+0x153/0x480 [ 3613.488422][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.494388][ C0] ? page_fault+0x39/0x40 [ 3613.498699][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.504684][ C0] do_futex+0x15f/0x1ad0 [ 3613.508941][ C0] ? find_held_lock+0x2d/0x110 [ 3613.513716][ C0] ? futex_exit_release+0x60/0x60 [ 3613.518721][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3613.524158][ C0] ? lock_downgrade+0x840/0x840 [ 3613.528998][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3613.533847][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.539811][ C0] ? __might_fault+0x190/0x1d0 [ 3613.544563][ C0] ? _copy_to_user+0x126/0x160 [ 3613.549326][ C0] __x64_sys_futex+0x376/0x4f0 [ 3613.554100][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3613.558583][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3613.564030][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.569999][ C0] ? do_syscall_64+0x21/0x7d0 [ 3613.574675][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.580647][ C0] do_syscall_64+0xf6/0x7d0 [ 3613.585146][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3613.591035][ C0] RIP: 0033:0x45ca69 [ 3613.594930][ C0] Code: Bad RIP value. [ 3613.598970][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3613.607361][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3613.615325][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3613.623272][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3613.631227][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3613.639186][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3613.647164][ C0] syz-executor.3 S24864 10631 7191 0x00000000 [ 3613.653497][ C0] Call Trace: [ 3613.656784][ C0] __schedule+0x8f3/0x1fc0 [ 3613.661178][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3613.666458][ C0] ? firmware_map_remove+0x19d/0x19d [ 3613.671746][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3613.674648][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3613.677192][ C0] schedule+0xd0/0x2a0 [ 3613.684424][ C1] rcu: 0-...0: (1 ticks this GP) idle=eba/1/0x4000000000000002 softirq=245799/245799 fqs=5249 [ 3613.688164][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3613.688180][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3613.688194][ C0] ? find_held_lock+0x2d/0x110 [ 3613.688216][ C0] futex_wait+0x1e2/0x550 [ 3613.688238][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3613.688259][ C0] ? print_usage_bug+0x240/0x240 [ 3613.688276][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3613.688292][ C0] ? futex_wake+0x153/0x480 [ 3613.688321][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.688342][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.699051][ C1] (detected by 1, t=10502 jiffies, g=508517, q=1998) [ 3613.704152][ C0] do_futex+0x15f/0x1ad0 [ 3613.709588][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3613.714341][ C0] ? find_held_lock+0x2d/0x110 [ 3613.720893][ C1] NMI backtrace for cpu 0 [ 3613.720900][ C1] CPU: 0 PID: 19437 Comm: systemd-udevd Not tainted 5.7.0-syzkaller #0 [ 3613.720907][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3613.720911][ C1] RIP: 0010:write_comp_data+0x9/0x80 [ 3613.720923][ C1] Code: e4 13 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 c3 66 0f 1f 84 00 00 00 00 00 65 4c 8b 04 25 00 1f 02 00 <65> 8b 05 98 4f 8e 7e a9 00 01 ff 00 74 10 f6 c4 01 74 5c 41 8b 80 [ 3613.720927][ C1] RSP: 0018:ffffc90000006dc0 EFLAGS: 00000046 [ 3613.720935][ C1] RAX: 0000000000000005 RBX: ffffc90000006e8c RCX: ffffffff83b186d7 [ 3613.720941][ C1] RDX: 0000000000000044 RSI: 0000000000000009 RDI: 0000000000000005 [ 3613.720946][ C1] RBP: 0000000000000044 R08: ffff888057dd4040 R09: fffff52000000e2d [ 3613.720952][ C1] R10: ffffc90000007166 R11: fffff52000000e2c R12: 0000000000003638 [ 3613.720957][ C1] R13: 0000000000000044 R14: ffffc9008000715f R15: ffffc90000007167 [ 3613.720963][ C1] FS: 00007f4f6c6ad8c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 3613.720968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3613.720973][ C1] CR2: 000000000045ca3f CR3: 000000009d0b6000 CR4: 00000000001426f0 [ 3613.720979][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3613.720984][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3613.720987][ C1] Call Trace: [ 3613.720990][ C1] [ 3613.720994][ C1] put_dec_trunc8+0x257/0x2f0 [ 3613.720997][ C1] number+0xa24/0xb00 [ 3613.721001][ C1] ? skip_atoi+0xab/0xe0 [ 3613.721004][ C1] ? put_dec+0xd0/0xd0 [ 3613.721008][ C1] ? enable_ptr_key_workfn+0x30/0x30 [ 3613.721012][ C1] ? mark_lock+0x11f/0xdd0 [ 3613.721015][ C1] vsnprintf+0x216/0x14f0 [ 3613.721019][ C1] ? pointer+0x7c0/0x7c0 [ 3613.721022][ C1] sprintf+0xc0/0x100 [ 3613.721026][ C1] ? scnprintf+0x140/0x140 [ 3613.721030][ C1] msg_print_text+0x4d4/0x560 [ 3613.721033][ C1] ? console_unlock+0x1c2/0xf00 [ 3613.721037][ C1] ? msg_print_ext_body+0x450/0x450 [ 3613.721041][ C1] ? lock_release+0x800/0x800 [ 3613.721045][ C1] ? do_raw_spin_lock+0x129/0x2e0 [ 3613.721049][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 3613.721053][ C1] console_unlock+0x390/0xf00 [ 3613.721056][ C1] vprintk_emit+0x2c4/0x730 [ 3613.721060][ C1] vprintk_func+0x8f/0x1a6 [ 3613.721063][ C1] printk+0xba/0xed [ 3613.721067][ C1] ? log_store.cold+0x16/0x16 [ 3613.721070][ C1] ? bpf_ksym_find+0x177/0x1c0 [ 3613.721074][ C1] ? is_bpf_text_address+0xcb/0x160 [ 3613.721078][ C1] ? find_held_lock+0x2d/0x110 [ 3613.721082][ C1] show_trace_log_lvl+0x225/0x2b5 [ 3613.721086][ C1] ? find_held_lock+0x2d/0x110 [ 3613.721090][ C1] ? __x64_sys_futex+0x376/0x4f0 [ 3613.721094][ C1] sched_show_task.cold+0x2e2/0x343 [ 3613.721097][ C1] ? can_nice.part.0+0x10/0x10 [ 3613.721101][ C1] ? cpumask_next+0x3c/0x40 [ 3613.721105][ C1] show_state_filter+0x162/0x207 [ 3613.721108][ C1] ? fn_caps_on+0x90/0x90 [ 3613.721112][ C1] k_spec+0xdc/0x120 [ 3613.721115][ C1] kbd_event+0xbec/0x2ef0 [ 3613.721119][ C1] ? lock_acquire+0x1f2/0x8f0 [ 3613.721122][ C1] ? k_pad+0x720/0x720 [ 3613.721127][ C1] ? debug_smp_processor_id+0x2f/0x185 [ 3613.721131][ C1] ? k_pad+0x720/0x720 [ 3613.721135][ C1] input_to_handler+0x3b6/0x4c0 [ 3613.721139][ C1] input_pass_values.part.0+0x2da/0x710 [ 3613.721143][ C1] input_handle_event+0x658/0x13a0 [ 3613.721147][ C1] input_event+0x8e/0xb0 [ 3613.721150][ C1] hidinput_hid_event+0x52d/0x15d3 [ 3613.721154][ C1] hid_process_event+0x4a0/0x580 [ 3613.721158][ C1] ? hid_field_extract+0xe4/0x170 [ 3613.721162][ C1] hid_report_raw_event+0xb70/0xee0 [ 3613.721166][ C1] hid_input_report+0x31b/0x400 [ 3613.721170][ C1] ? ktime_get_mono_fast_ns+0x163/0x1f0 [ 3613.721174][ C1] hid_irq_in+0x50e/0x690 [ 3613.721178][ C1] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 3613.721182][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 3613.721185][ C1] dummy_timer+0x1243/0x2fe1 [ 3613.721189][ C1] ? __lock_acquire+0x2224/0x48a0 [ 3613.721193][ C1] ? debug_smp_processor_id+0x2f/0x185 [ 3613.721197][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 3613.721201][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3613.721206][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3613.721209][ C1] call_timer_fn+0x1ac/0x780 [ 3613.721213][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 3613.721217][ C1] ? timer_fixup_init+0x60/0x60 [ 3613.721221][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3613.721225][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 3613.721229][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 3613.721233][ C1] run_timer_softirq+0x623/0x1600 [ 3613.721237][ C1] ? add_timer+0x830/0x830 [ 3613.721241][ C1] ? debug_smp_processor_id+0x2f/0x185 [ 3613.721245][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3613.721250][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3613.721254][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 3613.721257][ C1] __do_softirq+0x26c/0x9f7 [ 3613.721261][ C1] irq_exit+0x192/0x1d0 [ 3613.721265][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 3613.721269][ C1] apic_timer_interrupt+0xf/0x20 [ 3613.721272][ C1] [ 3613.721276][ C1] RIP: 0010:lock_is_held_type+0x272/0x360 [ 3613.721287][ C1] Code: e8 03 80 3c 10 00 0f 85 f2 00 00 00 48 83 3d d4 5b b9 01 00 74 32 48 8b 7c 24 10 57 9d 0f 1f 44 00 00 48 83 c4 18 44 89 e0 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 45 31 e4 e9 6e ff ff ff 41 bc 01 00 [ 3613.721291][ C1] RSP: 0018:ffffc900086ff648 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13 [ 3613.721301][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 3613.721306][ C1] RDX: dffffc0000000000 RSI: ffffffff899bdcc0 RDI: 0000000000000282 [ 3613.721312][ C1] RBP: ffff888057dd4040 R08: 0000000000000001 R09: fffffbfff1516d79 [ 3613.721317][ C1] R10: ffffffff8a8b6bc7 R11: fffffbfff1516d78 R12: 0000000000000000 [ 3613.721322][ C1] R13: ffff888057dd4910 R14: ffff888057dd4910 R15: 0000000000000001 [ 3613.721326][ C1] ___might_sleep+0x1fc/0x2b0 [ 3613.721330][ C1] kmem_cache_alloc+0x2ef/0x740 [ 3613.721334][ C1] ? print_usage_bug+0x240/0x240 [ 3613.721338][ C1] ? mark_lock+0x11f/0xdd0 [ 3613.721341][ C1] __d_alloc+0x2a/0x920 [ 3613.721345][ C1] ? print_usage_bug+0x240/0x240 [ 3613.721348][ C1] d_alloc+0x4a/0x240 [ 3613.721352][ C1] d_alloc_parallel+0xe8/0x1b10 [ 3613.721356][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3613.721360][ C1] ? __d_lookup_rcu+0x6c0/0x6c0 [ 3613.721364][ C1] ? find_held_lock+0x2d/0x110 [ 3613.721367][ C1] ? __d_lookup+0x400/0x740 [ 3613.721372][ C1] ? lockdep_init_map_waits+0x26a/0x890 [ 3613.721376][ C1] ? lockdep_init_map_waits+0x26a/0x890 [ 3613.721380][ C1] ? __raw_spin_lock_init+0x34/0x100 [ 3613.721384][ C1] __lookup_slow+0x193/0x490 [ 3613.721387][ C1] ? vfs_rmdir+0x500/0x500 [ 3613.721392][ C1] ? __mutex_unlock_slowpath+0xe2/0x660 [ 3613.721395][ C1] walk_component+0x418/0x6a0 [ 3613.721399][ C1] ? handle_dots.part.0+0x1890/0x1890 [ 3613.721403][ C1] ? generic_permission+0x116/0x520 [ 3613.721407][ C1] ? security_inode_permission+0xc4/0xf0 [ 3613.721411][ C1] link_path_walk.part.0+0x631/0xb50 [ 3613.721415][ C1] ? walk_component+0x6a0/0x6a0 [ 3613.721419][ C1] path_lookupat.isra.0+0x8d/0x530 [ 3613.721423][ C1] filename_lookup+0x1a3/0x3e0 [ 3613.721427][ C1] ? nd_jump_link+0x360/0x360 [ 3613.721431][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 3613.721435][ C1] ? __check_object_size+0x171/0x437 [ 3613.721439][ C1] ? getname_flags+0x275/0x5b0 [ 3613.721443][ C1] ? security_prepare_creds+0xee/0x180 [ 3613.721446][ C1] do_faccessat+0x12c/0x830 [ 3613.721450][ C1] ? __ia32_sys_fallocate+0xf0/0xf0 [ 3613.721454][ C1] ? do_syscall_64+0x21/0x7d0 [ 3613.721458][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3613.721462][ C1] do_syscall_64+0xf6/0x7d0 [ 3613.721466][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3613.721470][ C1] RIP: 0033:0x7f4f6b5209c7 [ 3613.721481][ C1] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 3613.721485][ C1] RSP: 002b:00007ffe7111e268 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3613.721494][ C1] RAX: ffffffffffffffda RBX: 00007ffe7111e2a0 RCX: 00007f4f6b5209c7 [ 3613.721500][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00007ffe7111e270 [ 3613.721505][ C1] RBP: 00007ffe7111f340 R08: 0000556ecfaea0e0 R09: 0000000000000120 [ 3613.721511][ C1] R10: fffffffffffff50a R11: 0000000000000246 R12: 00007ffe7111f391 [ 3613.721516][ C1] R13: 0000556ecfaeb768 R14: 0000000000000018 R15: 00007ffe7111e270 [ 3613.776348][ T3859] systemd-journald[3859]: /dev/kmsg buffer overrun, some messages lost. [ 3613.777257][ C0] ? futex_exit_release+0x60/0x60 [ 3614.610576][ C0] ? lock_downgrade+0x840/0x840 [ 3614.615440][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3614.620297][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3614.626298][ C0] ? __might_fault+0x190/0x1d0 [ 3614.631062][ C0] ? _copy_to_user+0x126/0x160 [ 3614.635856][ C0] __x64_sys_futex+0x376/0x4f0 [ 3614.640635][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3614.645147][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3614.650605][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3614.656615][ C0] ? do_syscall_64+0x21/0x7d0 [ 3614.661301][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3614.667296][ C0] do_syscall_64+0xf6/0x7d0 [ 3614.671803][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3614.677694][ C0] RIP: 0033:0x45ca69 [ 3614.681605][ C0] Code: Bad RIP value. [ 3614.685670][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3614.694078][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3614.702055][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3614.710029][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3614.718001][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3614.725972][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3614.733961][ C0] syz-executor.3 S29824 10697 7191 0x00000000 [ 3614.740301][ C0] Call Trace: [ 3614.743604][ C0] __schedule+0x8f3/0x1fc0 [ 3614.748027][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3614.753327][ C0] ? firmware_map_remove+0x19d/0x19d [ 3614.758625][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3614.764358][ C0] schedule+0xd0/0x2a0 [ 3614.768435][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3614.773555][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3614.779019][ C0] ? find_held_lock+0x2d/0x110 [ 3614.783807][ C0] futex_wait+0x1e2/0x550 [ 3614.788163][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3614.793197][ C0] ? print_usage_bug+0x240/0x240 [ 3614.798147][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3614.803348][ C0] ? futex_wake+0x153/0x480 [ 3614.807871][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3614.813862][ C0] ? mark_lock+0x11f/0xdd0 [ 3614.818288][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3614.824279][ C0] do_futex+0x15f/0x1ad0 [ 3614.828548][ C0] ? find_held_lock+0x2d/0x110 [ 3614.833320][ C0] ? futex_exit_release+0x60/0x60 [ 3614.838345][ C0] ? lock_downgrade+0x840/0x840 [ 3614.843195][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3614.848047][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3614.854039][ C0] ? __might_fault+0x190/0x1d0 [ 3614.858804][ C0] ? _copy_to_user+0x126/0x160 [ 3614.863575][ C0] __x64_sys_futex+0x376/0x4f0 [ 3614.868341][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3614.872844][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3614.878313][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3614.884297][ C0] ? do_syscall_64+0x21/0x7d0 [ 3614.888981][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3614.894972][ C0] do_syscall_64+0xf6/0x7d0 [ 3614.899481][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3614.905644][ C0] RIP: 0033:0x45ca69 [ 3614.909575][ C0] Code: Bad RIP value. [ 3614.913633][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3614.922063][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3614.930038][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3614.938028][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3614.946001][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3614.953991][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3614.961976][ C0] syz-executor.3 S29616 10787 7191 0x00000000 [ 3614.968340][ C0] Call Trace: [ 3614.971637][ C0] __schedule+0x8f3/0x1fc0 [ 3614.976057][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3614.981350][ C0] ? firmware_map_remove+0x19d/0x19d [ 3614.986639][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3614.992109][ C0] schedule+0xd0/0x2a0 [ 3614.996188][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3615.001304][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3615.006774][ C0] futex_wait+0x1e2/0x550 [ 3615.011119][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3615.016171][ C0] ? print_usage_bug+0x240/0x240 [ 3615.021131][ C0] ? hash_futex+0x10/0x200 [ 3615.025552][ C0] ? futex_wake+0x153/0x480 [ 3615.030076][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.036054][ C0] ? page_fault+0x39/0x40 [ 3615.040408][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.046396][ C0] do_futex+0x15f/0x1ad0 [ 3615.050658][ C0] ? find_held_lock+0x2d/0x110 [ 3615.055433][ C0] ? futex_exit_release+0x60/0x60 [ 3615.060462][ C0] ? compat_ifr_data_ioctl+0x160/0x160 [ 3615.065924][ C0] ? lock_downgrade+0x840/0x840 [ 3615.070776][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3615.075626][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.081630][ C0] ? __might_fault+0x190/0x1d0 [ 3615.086395][ C0] ? _copy_to_user+0x126/0x160 [ 3615.091169][ C0] __x64_sys_futex+0x376/0x4f0 [ 3615.095944][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3615.100466][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3615.105931][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.111917][ C0] ? do_syscall_64+0x21/0x7d0 [ 3615.116593][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.122578][ C0] do_syscall_64+0xf6/0x7d0 [ 3615.127082][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3615.132974][ C0] RIP: 0033:0x45ca69 [ 3615.136878][ C0] Code: Bad RIP value. [ 3615.140943][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3615.149359][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3615.157328][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3615.165298][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3615.173269][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3615.181244][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3615.189232][ C0] syz-executor.3 S29824 11030 7191 0x00000000 [ 3615.195587][ C0] Call Trace: [ 3615.198881][ C0] __schedule+0x8f3/0x1fc0 [ 3615.203299][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3615.208593][ C0] ? firmware_map_remove+0x19d/0x19d [ 3615.213890][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3615.219360][ C0] schedule+0xd0/0x2a0 [ 3615.223452][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3615.228564][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3615.234033][ C0] futex_wait+0x1e2/0x550 [ 3615.238371][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3615.243419][ C0] ? print_usage_bug+0x240/0x240 [ 3615.248362][ C0] ? hash_futex+0x10/0x200 [ 3615.252786][ C0] ? futex_wake+0x153/0x480 [ 3615.257309][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.263288][ C0] ? mark_lock+0x11f/0xdd0 [ 3615.267721][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.273715][ C0] do_futex+0x15f/0x1ad0 [ 3615.277993][ C0] ? find_held_lock+0x2d/0x110 [ 3615.282765][ C0] ? futex_exit_release+0x60/0x60 [ 3615.287792][ C0] ? lock_downgrade+0x840/0x840 [ 3615.292653][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3615.297509][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.303503][ C0] ? __might_fault+0x190/0x1d0 [ 3615.308266][ C0] ? _copy_to_user+0x126/0x160 [ 3615.313054][ C0] __x64_sys_futex+0x376/0x4f0 [ 3615.317829][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3615.322337][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3615.327795][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.333782][ C0] ? do_syscall_64+0x21/0x7d0 [ 3615.338459][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.344447][ C0] do_syscall_64+0xf6/0x7d0 [ 3615.348953][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3615.354841][ C0] RIP: 0033:0x45ca69 [ 3615.358761][ C0] Code: Bad RIP value. [ 3615.362823][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3615.371233][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3615.379222][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3615.387219][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3615.395193][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3615.403185][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3615.411176][ C0] syz-executor.3 S28800 11050 7191 0x00000000 [ 3615.417518][ C0] Call Trace: [ 3615.420811][ C0] __schedule+0x8f3/0x1fc0 [ 3615.425229][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3615.431522][ C0] ? firmware_map_remove+0x19d/0x19d [ 3615.436814][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3615.442283][ C0] schedule+0xd0/0x2a0 [ 3615.446362][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3615.451483][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3615.456953][ C0] futex_wait+0x1e2/0x550 [ 3615.461291][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3615.466324][ C0] ? print_usage_bug+0x240/0x240 [ 3615.471273][ C0] ? hash_futex+0x10/0x200 [ 3615.475693][ C0] ? futex_wake+0x153/0x480 [ 3615.480210][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.486191][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.492198][ C0] do_futex+0x15f/0x1ad0 [ 3615.496460][ C0] ? find_held_lock+0x2d/0x110 [ 3615.501241][ C0] ? futex_exit_release+0x60/0x60 [ 3615.506292][ C0] ? lock_downgrade+0x840/0x840 [ 3615.511142][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3615.516009][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.522012][ C0] ? __might_fault+0x190/0x1d0 [ 3615.526788][ C0] ? _copy_to_user+0x126/0x160 [ 3615.531560][ C0] __x64_sys_futex+0x376/0x4f0 [ 3615.536333][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3615.540869][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3615.546339][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.552322][ C0] ? do_syscall_64+0x21/0x7d0 [ 3615.557005][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.563002][ C0] do_syscall_64+0xf6/0x7d0 [ 3615.567531][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3615.573444][ C0] RIP: 0033:0x45ca69 [ 3615.577368][ C0] Code: Bad RIP value. [ 3615.581429][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3615.589841][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3615.597813][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3615.605782][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3615.613750][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3615.621720][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3615.629730][ C0] syz-executor.3 S29824 11546 7191 0x00000000 [ 3615.636067][ C0] Call Trace: [ 3615.639366][ C0] __schedule+0x8f3/0x1fc0 [ 3615.643789][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3615.649084][ C0] ? firmware_map_remove+0x19d/0x19d [ 3615.654389][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3615.659866][ C0] schedule+0xd0/0x2a0 [ 3615.663953][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3615.669071][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3615.674531][ C0] ? find_held_lock+0x2d/0x110 [ 3615.679307][ C0] futex_wait+0x1e2/0x550 [ 3615.683647][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3615.688676][ C0] ? print_usage_bug+0x240/0x240 [ 3615.693618][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3615.698822][ C0] ? futex_wake+0x153/0x480 [ 3615.703349][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.709331][ C0] ? mark_lock+0x11f/0xdd0 [ 3615.713755][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3615.719742][ C0] do_futex+0x15f/0x1ad0 [ 3615.724032][ C0] ? find_held_lock+0x2d/0x110 [ 3615.728805][ C0] ? futex_exit_release+0x60/0x60 [ 3615.733839][ C0] ? lock_downgrade+0x840/0x840 [ 3615.738705][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3615.743562][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.749581][ C0] ? __might_fault+0x190/0x1d0 [ 3615.754351][ C0] ? _copy_to_user+0x126/0x160 [ 3615.759135][ C0] __x64_sys_futex+0x376/0x4f0 [ 3615.763909][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3615.768420][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3615.773887][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.779880][ C0] ? do_syscall_64+0x21/0x7d0 [ 3615.784563][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3615.790552][ C0] do_syscall_64+0xf6/0x7d0 [ 3615.795070][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3615.800959][ C0] RIP: 0033:0x45ca69 [ 3615.804864][ C0] Code: Bad RIP value. [ 3615.808925][ C0] RSP: 002b:00007f2c9c8f6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3615.817334][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3615.825300][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3615.833268][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3615.841240][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3615.849212][ C0] R13: 0000000000c9fb6f R14: 00007f2c9c8f79c0 R15: 000000000078bf0c [ 3615.857203][ C0] bond1 I30816 12200 2 0x80004000 [ 3615.863578][ C0] Call Trace: [ 3615.866879][ C0] __schedule+0x8f3/0x1fc0 [ 3615.871299][ C0] ? rescuer_thread+0x691/0xbc0 [ 3615.876170][ C0] ? firmware_map_remove+0x19d/0x19d [ 3615.881457][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3615.886487][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3615.891691][ C0] schedule+0xd0/0x2a0 [ 3615.895773][ C0] rescuer_thread+0x6ed/0xbc0 [ 3615.900475][ C0] ? worker_thread+0xe20/0xe20 [ 3615.905261][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 3615.910290][ C0] ? worker_thread+0xe20/0xe20 [ 3615.915068][ C0] kthread+0x388/0x470 [ 3615.919225][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3615.924954][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3615.930675][ C0] ret_from_fork+0x24/0x30 [ 3615.935110][ C0] syz-executor.5 S29824 12406 7350 0x00000000 [ 3615.941444][ C0] Call Trace: [ 3615.944737][ C0] __schedule+0x8f3/0x1fc0 [ 3615.949158][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3615.954452][ C0] ? firmware_map_remove+0x19d/0x19d [ 3615.959748][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3615.965213][ C0] schedule+0xd0/0x2a0 [ 3615.969285][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3615.974467][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3615.979968][ C0] ? find_held_lock+0x2d/0x110 [ 3615.984742][ C0] futex_wait+0x1e2/0x550 [ 3615.989078][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3615.994104][ C0] ? print_usage_bug+0x240/0x240 [ 3615.999055][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3616.004267][ C0] ? futex_wake+0x153/0x480 [ 3616.008789][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3616.014771][ C0] ? do_wp_page+0x512/0x1440 [ 3616.019396][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3616.025395][ C0] do_futex+0x15f/0x1ad0 [ 3616.029657][ C0] ? find_held_lock+0x2d/0x110 [ 3616.034428][ C0] ? futex_exit_release+0x60/0x60 [ 3616.039464][ C0] ? lock_downgrade+0x840/0x840 [ 3616.044321][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3616.049177][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.055171][ C0] ? __might_fault+0x190/0x1d0 [ 3616.059936][ C0] ? _copy_to_user+0x126/0x160 [ 3616.064713][ C0] __x64_sys_futex+0x376/0x4f0 [ 3616.069482][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3616.073994][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3616.079463][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.085448][ C0] ? do_syscall_64+0x21/0x7d0 [ 3616.090147][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.096132][ C0] do_syscall_64+0xf6/0x7d0 [ 3616.100642][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3616.106533][ C0] RIP: 0033:0x45ca69 [ 3616.110434][ C0] Code: Bad RIP value. [ 3616.114497][ C0] RSP: 002b:00007f21a5951cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3616.122909][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3616.130881][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3616.138856][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3616.146831][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3616.154801][ C0] R13: 0000000000c9fb6f R14: 00007f21a59529c0 R15: 000000000078bf0c [ 3616.162791][ C0] syz-executor.5 S29824 12427 7350 0x00000000 [ 3616.169129][ C0] Call Trace: [ 3616.172455][ C0] __schedule+0x8f3/0x1fc0 [ 3616.176878][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3616.182173][ C0] ? firmware_map_remove+0x19d/0x19d [ 3616.187466][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3616.192936][ C0] schedule+0xd0/0x2a0 [ 3616.197021][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3616.202141][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3616.207602][ C0] ? find_held_lock+0x2d/0x110 [ 3616.212378][ C0] futex_wait+0x1e2/0x550 [ 3616.216722][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3616.221755][ C0] ? print_usage_bug+0x240/0x240 [ 3616.226701][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3616.231911][ C0] ? futex_wake+0x153/0x480 [ 3616.236441][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3616.242426][ C0] ? do_wp_page+0x512/0x1440 [ 3616.247024][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3616.253007][ C0] do_futex+0x15f/0x1ad0 [ 3616.257290][ C0] ? find_held_lock+0x2d/0x110 [ 3616.262063][ C0] ? futex_exit_release+0x60/0x60 [ 3616.267098][ C0] ? lock_downgrade+0x840/0x840 [ 3616.271953][ C0] ? ktime_get_ts64+0x110/0x3e0 [ 3616.276809][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.282809][ C0] ? __might_fault+0x190/0x1d0 [ 3616.287583][ C0] ? _copy_to_user+0x126/0x160 [ 3616.292356][ C0] __x64_sys_futex+0x376/0x4f0 [ 3616.297136][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3616.301642][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3616.307100][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.313083][ C0] ? do_syscall_64+0x21/0x7d0 [ 3616.317771][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.323764][ C0] do_syscall_64+0xf6/0x7d0 [ 3616.328278][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3616.334168][ C0] RIP: 0033:0x45ca69 [ 3616.338069][ C0] Code: Bad RIP value. [ 3616.342135][ C0] RSP: 002b:00007f21a5951cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3616.350549][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3616.358526][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3616.366497][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3616.374471][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3616.382452][ C0] R13: 0000000000c9fb6f R14: 00007f21a59529c0 R15: 000000000078bf0c [ 3616.390445][ C0] syz-executor.2 S28032 12507 6995 0x00000000 [ 3616.396792][ C0] Call Trace: [ 3616.400095][ C0] __schedule+0x8f3/0x1fc0 [ 3616.404538][ C0] ? futex_wait_queue_me+0x1e7/0x570 [ 3616.409836][ C0] ? firmware_map_remove+0x19d/0x19d [ 3616.415133][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 3616.420606][ C0] schedule+0xd0/0x2a0 [ 3616.424710][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3616.429823][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3616.435287][ C0] ? find_held_lock+0x2d/0x110 [ 3616.440065][ C0] futex_wait+0x1e2/0x550 [ 3616.444404][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3616.449443][ C0] ? futex_wake+0xf6/0x480 [ 3616.453871][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 3616.459077][ C0] ? futex_wake+0x153/0x480 [ 3616.463612][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3616.469602][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3616.475591][ C0] do_futex+0x15f/0x1ad0 [ 3616.479872][ C0] ? find_held_lock+0x2d/0x110 [ 3616.484643][ C0] ? futex_exit_release+0x60/0x60 [ 3616.489682][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3616.495146][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.501147][ C0] ? retint_kernel+0x2b/0x2b [ 3616.505740][ C0] ? trace_hardirqs_on_caller+0x64/0x240 [ 3616.511386][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3616.516857][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3616.522327][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3616.528312][ C0] ? retint_kernel+0x2b/0x2b [ 3616.532906][ C0] ? trace_hardirqs_on_caller+0x64/0x240 [ 3616.538556][ C0] __x64_sys_futex+0x376/0x4f0 [ 3616.543331][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3616.547853][ C0] ? do_syscall_64+0x4f/0x7d0 [ 3616.552550][ C0] do_syscall_64+0xf6/0x7d0 [ 3616.557064][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3616.562961][ C0] RIP: 0033:0x45ca69 [ 3616.566865][ C0] Code: Bad RIP value. [ 3616.570927][ C0] RSP: 002b:00007f5043449cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3616.579340][ C0] RAX: ffffffffffffffda RBX: 000000000078bf08 RCX: 000000000045ca69 [ 3616.587313][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 3616.595281][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3616.603271][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 3616.611245][ C0] R13: 0000000000c9fb6f R14: 00007f504344a9c0 R15: 000000000078bf0c [ 3616.619238][ C0] kworker/1:0 I22048 13806 2 0x80004000 [ 3616.625611][ C0] Workqueue: 0x0 (events) [ 3616.630023][ C0] Call Trace: [ 3616.633324][ C0] __schedule+0x8f3/0x1fc0 [ 3616.637746][ C0] ? worker_thread+0x240/0xe20 [ 3616.642527][ C0] ? firmware_map_remove+0x19d/0x19d [ 3616.647822][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3616.653024][ C0] schedule+0xd0/0x2a0 [ 3616.657107][ C0] worker_thread+0x96/0xe20 [ 3616.661629][ C0] ? process_one_work+0x16a0/0x16a0 [ 3616.666835][ C0] kthread+0x388/0x470 [ 3616.670905][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.676626][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.682348][ C0] ret_from_fork+0x24/0x30 [ 3616.686781][ C0] kworker/u4:3 I25856 16230 2 0x80004000 [ 3616.693160][ C0] Workqueue: 0x0 (events_unbound) [ 3616.698274][ C0] Call Trace: [ 3616.701582][ C0] __schedule+0x8f3/0x1fc0 [ 3616.706004][ C0] ? worker_thread+0x240/0xe20 [ 3616.710775][ C0] ? firmware_map_remove+0x19d/0x19d [ 3616.716070][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3616.721274][ C0] schedule+0xd0/0x2a0 [ 3616.725355][ C0] worker_thread+0x245/0xe20 [ 3616.729960][ C0] ? process_one_work+0x16a0/0x16a0 [ 3616.735166][ C0] kthread+0x388/0x470 [ 3616.739244][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.744968][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.750690][ C0] ret_from_fork+0x24/0x30 [ 3616.755125][ C0] kworker/0:0 I22936 16545 2 0x80004000 [ 3616.761490][ C0] Workqueue: 0x0 (wg-crypt-wg0) [ 3616.766433][ C0] Call Trace: [ 3616.769728][ C0] __schedule+0x8f3/0x1fc0 [ 3616.774171][ C0] ? worker_thread+0x240/0xe20 [ 3616.778951][ C0] ? firmware_map_remove+0x19d/0x19d [ 3616.784247][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3616.789451][ C0] schedule+0xd0/0x2a0 [ 3616.793534][ C0] worker_thread+0x245/0xe20 [ 3616.798143][ C0] ? process_one_work+0x16a0/0x16a0 [ 3616.803348][ C0] kthread+0x388/0x470 [ 3616.807422][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.813140][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.818867][ C0] ret_from_fork+0x24/0x30 [ 3616.823298][ C0] kworker/0:3 I22968 17321 2 0x80004000 [ 3616.829678][ C0] Workqueue: 0x0 (events) [ 3616.834105][ C0] Call Trace: [ 3616.837402][ C0] __schedule+0x8f3/0x1fc0 [ 3616.841823][ C0] ? worker_thread+0x240/0xe20 [ 3616.846600][ C0] ? firmware_map_remove+0x19d/0x19d [ 3616.851890][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3616.857097][ C0] schedule+0xd0/0x2a0 [ 3616.861174][ C0] worker_thread+0x245/0xe20 [ 3616.865781][ C0] ? process_one_work+0x16a0/0x16a0 [ 3616.870981][ C0] kthread+0x388/0x470 [ 3616.875053][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.880773][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 3616.886505][ C0] ret_from_fork+0x24/0x30 [ 3616.890937][ C0] agetty S27200 19089 1 0x00000000 [ 3616.897287][ C0] Call Trace: [ 3616.900585][ C0] __schedule+0x8f3/0x1fc0 [ 3616.905017][ C0] ? firmware_map_remove+0x19d/0x19d [ 3616.910306][ C0] ? lock_downgrade+0x840/0x840 [ 3616.915162][ C0] ? mark_held_locks+0x9f/0xe0 [ 3616.919937][ C0] schedule+0xd0/0x2a0 [ 3616.924017][ C0] schedule_timeout+0x55b/0x850 [ 3616.928871][ C0] ? n_tty_read+0x15a8/0x1b30 [ 3616.933554][ C0] ? usleep_range+0x160/0x160 [ 3616.938236][ C0] ? lock_release+0x800/0x800 [ 3616.942919][ C0] ? lock_downgrade+0x840/0x840 [ 3616.947777][ C0] ? print_usage_bug+0x240/0x240 [ 3616.952725][ C0] ? up_read+0x1ab/0x750 [ 3616.956977][ C0] wait_woken+0x131/0x250 [ 3616.961315][ C0] ? woken_wake_function+0x70/0x70 [ 3616.966439][ C0] n_tty_read+0x15bc/0x1b30 [ 3616.970969][ C0] ? __ldsem_down_read_nested+0xf3/0x850 [ 3616.976615][ C0] ? __ldsem_down_write_nested+0x8f0/0x8f0 [ 3616.982424][ C0] ? copy_from_read_buf+0x500/0x500 [ 3616.987640][ C0] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 3616.993459][ C0] tty_read+0x190/0x290 [ 3616.997619][ C0] ? copy_from_read_buf+0x500/0x500 [ 3617.002826][ C0] ? tty_poll+0x180/0x180 [ 3617.007158][ C0] __vfs_read+0x76/0x100 [ 3617.011404][ C0] vfs_read+0x1f0/0x420 [ 3617.015572][ C0] ksys_read+0x12d/0x250 [ 3617.019820][ C0] ? kernel_write+0x120/0x120 [ 3617.024528][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.030525][ C0] ? do_syscall_64+0x21/0x7d0 [ 3617.035212][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.041201][ C0] do_syscall_64+0xf6/0x7d0 [ 3617.045723][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3617.051637][ C0] RIP: 0033:0x7fb6f55f7910 [ 3617.056060][ C0] Code: Bad RIP value. [ 3617.060122][ C0] RSP: 002b:00007ffc4a2fd718 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3617.068535][ C0] RAX: ffffffffffffffda RBX: 00007ffc4a2fd77f RCX: 00007fb6f55f7910 [ 3617.076509][ C0] RDX: 0000000000000001 RSI: 00007ffc4a2fd77f RDI: 0000000000000000 [ 3617.084479][ C0] RBP: 000000000000001e R08: ffffffffffffff98 R09: 00007ffc4a2fc5d0 [ 3617.092460][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3617.100432][ C0] R13: 00005603192d6900 R14: 00007ffc4a2fd780 R15: 0000000000000012 [ 3617.108445][ C0] syz-executor.3 S27792 19382 7191 0x00000000 [ 3617.114791][ C0] Call Trace: [ 3617.118094][ C0] __schedule+0x8f3/0x1fc0 [ 3617.122536][ C0] ? firmware_map_remove+0x19d/0x19d [ 3617.127833][ C0] ? enqueue_hrtimer+0x420/0x420 [ 3617.132800][ C0] schedule+0xd0/0x2a0 [ 3617.136881][ C0] futex_wait_queue_me+0x2a7/0x570 [ 3617.142001][ C0] ? fault_in_user_writeable+0x90/0x90 [ 3617.147476][ C0] futex_wait+0x1e2/0x550 [ 3617.151848][ C0] ? futex_wait_setup+0x2c0/0x2c0 [ 3617.156887][ C0] ? mark_lock+0x11f/0xdd0 [ 3617.161313][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3617.167321][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3617.173307][ C0] do_futex+0x15f/0x1ad0 [ 3617.177559][ C0] ? __might_fault+0x11f/0x1d0 [ 3617.182339][ C0] ? futex_exit_release+0x60/0x60 [ 3617.187367][ C0] ? __x64_sys_futex+0x43a/0x4f0 [ 3617.192311][ C0] ? lock_release+0x800/0x800 [ 3617.196995][ C0] ? lock_downgrade+0x840/0x840 [ 3617.201850][ C0] ? __might_fault+0x190/0x1d0 [ 3617.206623][ C0] ? ktime_get+0xff/0x2f0 [ 3617.210955][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.216948][ C0] ? ktime_get+0x1f8/0x2f0 [ 3617.221379][ C0] __x64_sys_futex+0x376/0x4f0 [ 3617.226156][ C0] ? do_futex+0x1ad0/0x1ad0 [ 3617.230664][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3617.236128][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.242115][ C0] ? do_syscall_64+0x21/0x7d0 [ 3617.246796][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.252785][ C0] do_syscall_64+0xf6/0x7d0 [ 3617.257299][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3617.263196][ C0] RIP: 0033:0x45ca69 [ 3617.267111][ C0] Code: Bad RIP value. [ 3617.271178][ C0] RSP: 002b:0000000000c9fbe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3617.279940][ C0] RAX: ffffffffffffffda RBX: 0000000000000159 RCX: 000000000045ca69 [ 3617.287915][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf0c [ 3617.295884][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3617.303855][ C0] R10: 0000000000c9fcd0 R11: 0000000000000246 R12: 00000000000003e8 [ 3617.311828][ C0] R13: 0000000000358af3 R14: 000000000035899a R15: 000000000078bf0c [ 3617.319819][ C0] syz-executor.3 S26912 19384 7191 0x00000000 [ 3617.326158][ C0] Call Trace: [ 3617.329458][ C0] __schedule+0x8f3/0x1fc0 [ 3617.333892][ C0] ? firmware_map_remove+0x19d/0x19d [ 3617.339183][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3617.345169][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3617.351160][ C0] schedule+0xd0/0x2a0 [ 3617.355242][ C0] schedule_timeout+0x55b/0x850 [ 3617.360096][ C0] ? find_held_lock+0x2d/0x110 [ 3617.364863][ C0] ? usleep_range+0x160/0x160 [ 3617.369544][ C0] ? wait_for_completion_interruptible+0x166/0x2e0 [ 3617.376115][ C0] ? dummy_queue+0x3f5/0xb20 [ 3617.380712][ C0] ? lock_downgrade+0x840/0x840 [ 3617.385577][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3617.390607][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3617.395809][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.401802][ C0] wait_for_completion_interruptible+0x16e/0x2e0 [ 3617.408144][ C0] ? wait_for_completion_killable+0x310/0x310 [ 3617.414216][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 3617.420090][ C0] raw_process_ep_io+0x5a9/0x880 [ 3617.425051][ C0] ? raw_process_ep0_io+0x740/0x740 [ 3617.430270][ C0] ? memdup_user+0x7c/0xd0 [ 3617.434698][ C0] raw_ioctl+0x8bf/0x1cd0 [ 3617.439060][ C0] ? ksys_dup3+0x3c0/0x3c0 [ 3617.443489][ C0] ? raw_open+0x4d0/0x4d0 [ 3617.447834][ C0] ? raw_open+0x4d0/0x4d0 [ 3617.452168][ C0] ksys_ioctl+0x11a/0x180 [ 3617.456513][ C0] __x64_sys_ioctl+0x6f/0xb0 [ 3617.461114][ C0] do_syscall_64+0xf6/0x7d0 [ 3617.465625][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3617.471514][ C0] RIP: 0033:0x45c937 [ 3617.475419][ C0] Code: Bad RIP value. [ 3617.479481][ C0] RSP: 002b:00007f2c9c8f5bf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3617.487916][ C0] RAX: ffffffffffffffda RBX: 00000000000000f5 RCX: 000000000045c937 [ 3617.495885][ C0] RDX: 00007f2c9c8f5c40 RSI: 0000000040085507 RDI: 0000000000000004 [ 3617.503858][ C0] RBP: 0000000000000000 R08: a93e0c909440968f R09: c0f0241bd4219d6f [ 3617.511855][ C0] R10: 689c8605081f4239 R11: 0000000000000246 R12: 00000000ffffffff [ 3617.519836][ C0] R13: 0000000000000c39 R14: 00000000004ce918 R15: 00007f2c9c8f76d4 [ 3617.527836][ C0] systemd-udevd S27944 19420 3873 0x00000100 [ 3617.534171][ C0] Call Trace: [ 3617.537474][ C0] __schedule+0x8f3/0x1fc0 [ 3617.541904][ C0] ? firmware_map_remove+0x19d/0x19d [ 3617.547203][ C0] schedule+0xd0/0x2a0 [ 3617.551287][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3617.557361][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3617.563169][ C0] ? ep_scan_ready_list+0x602/0x960 [ 3617.568375][ C0] ? lock_downgrade+0x840/0x840 [ 3617.573226][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3617.578346][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3617.583640][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.589629][ C0] ep_poll+0xcef/0xf00 [ 3617.593731][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3617.599052][ C0] ? security_file_permission+0x8c/0x470 [ 3617.604723][ C0] ? __secure_computing+0x104/0x360 [ 3617.609949][ C0] ? finish_wait+0x260/0x260 [ 3617.614550][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 3617.620111][ C0] do_epoll_wait+0x209/0x260 [ 3617.624715][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 3617.629745][ C0] do_syscall_64+0xf6/0x7d0 [ 3617.634256][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3617.640153][ C0] RIP: 0033:0x7f4f6b52e2e3 [ 3617.644571][ C0] Code: 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 29 54 2b 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 0b c2 00 00 48 89 04 24 [ 3617.664173][ C0] RSP: 002b:00007ffe71124938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 3617.672586][ C0] RAX: ffffffffffffffda RBX: 0000556ecfaed580 RCX: 00007f4f6b52e2e3 [ 3617.680557][ C0] RDX: 0000000000000004 RSI: 00007ffe71124a00 RDI: 0000000000000004 [ 3617.688526][ C0] RBP: 00007ffe71124ab0 R08: 0000556ecfb02d30 R09: 0000000000000000 [ 3617.696494][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe71124a00 [ 3617.704460][ C0] R13: 0000556ecfaeaf10 R14: 0000000000000003 R15: 000000000000000e [ 3617.712455][ C0] systemd-udevd S27792 19422 3873 0x00000100 [ 3617.718797][ C0] Call Trace: [ 3617.722105][ C0] __schedule+0x8f3/0x1fc0 [ 3617.726534][ C0] ? firmware_map_remove+0x19d/0x19d [ 3617.731835][ C0] schedule+0xd0/0x2a0 [ 3617.735916][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3617.742015][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3617.747852][ C0] ? ep_scan_ready_list+0x602/0x960 [ 3617.753063][ C0] ? lock_downgrade+0x840/0x840 [ 3617.757922][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3617.763047][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3617.768336][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.774332][ C0] ep_poll+0xcef/0xf00 [ 3617.778420][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3617.783718][ C0] ? security_file_permission+0x8c/0x470 [ 3617.789379][ C0] ? __secure_computing+0x104/0x360 [ 3617.794583][ C0] ? finish_wait+0x260/0x260 [ 3617.799187][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 3617.804740][ C0] do_epoll_wait+0x209/0x260 [ 3617.809340][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 3617.814382][ C0] do_syscall_64+0xf6/0x7d0 [ 3617.818890][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3617.824784][ C0] RIP: 0033:0x7f4f6b52e2e3 [ 3617.829199][ C0] Code: 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 29 54 2b 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 0b c2 00 00 48 89 04 24 [ 3617.848802][ C0] RSP: 002b:00007ffe71124938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 3617.857234][ C0] RAX: ffffffffffffffda RBX: 0000556ecfaef1d0 RCX: 00007f4f6b52e2e3 [ 3617.865205][ C0] RDX: 0000000000000004 RSI: 00007ffe71124a00 RDI: 0000000000000004 [ 3617.873176][ C0] RBP: 00007ffe71124ab0 R08: 0000556ecfaef2b0 R09: 0000000000000000 [ 3617.881149][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe71124a00 [ 3617.889137][ C0] R13: 0000556ecfaeb870 R14: 0000000000000003 R15: 000000000000000e [ 3617.897128][ C0] systemd-udevd S27984 19423 3873 0x00000100 [ 3617.903467][ C0] Call Trace: [ 3617.906766][ C0] __schedule+0x8f3/0x1fc0 [ 3617.911193][ C0] ? firmware_map_remove+0x19d/0x19d [ 3617.916495][ C0] schedule+0xd0/0x2a0 [ 3617.920571][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3617.926645][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3617.932451][ C0] ? ep_scan_ready_list+0x602/0x960 [ 3617.937659][ C0] ? lock_downgrade+0x840/0x840 [ 3617.942515][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3617.947629][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3617.952916][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3617.958905][ C0] ep_poll+0xcef/0xf00 [ 3617.962992][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3617.968296][ C0] ? security_file_permission+0x8c/0x470 [ 3617.974281][ C0] ? __secure_computing+0x104/0x360 [ 3617.979491][ C0] ? finish_wait+0x260/0x260 [ 3617.984090][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 3617.989647][ C0] do_epoll_wait+0x209/0x260 [ 3617.994250][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 3617.999311][ C0] do_syscall_64+0xf6/0x7d0 [ 3618.003823][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3618.009716][ C0] RIP: 0033:0x7f4f6b52e2e3 [ 3618.014143][ C0] Code: 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 29 54 2b 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 0b c2 00 00 48 89 04 24 [ 3618.033768][ C0] RSP: 002b:00007ffe71124938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 3618.042178][ C0] RAX: ffffffffffffffda RBX: 0000556ecfb06f60 RCX: 00007f4f6b52e2e3 [ 3618.050149][ C0] RDX: 0000000000000004 RSI: 00007ffe71124a00 RDI: 0000000000000004 [ 3618.058118][ C0] RBP: 00007ffe71124ab0 R08: 0000556ecfaeb180 R09: 0000000000000000 [ 3618.066113][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe71124a00 [ 3618.074082][ C0] R13: 0000556ecfaff5b0 R14: 0000000000000003 R15: 000000000000000e [ 3618.082082][ C0] systemd-udevd S27664 19433 3873 0x00000100 [ 3618.088422][ C0] Call Trace: [ 3618.091722][ C0] __schedule+0x8f3/0x1fc0 [ 3618.096150][ C0] ? firmware_map_remove+0x19d/0x19d [ 3618.101444][ C0] schedule+0xd0/0x2a0 [ 3618.105523][ C0] schedule_hrtimeout_range_clock+0x2ef/0x340 [ 3618.111591][ C0] ? hrtimer_nanosleep_restart+0x140/0x140 [ 3618.117399][ C0] ? ep_scan_ready_list+0x602/0x960 [ 3618.122628][ C0] ? lock_downgrade+0x840/0x840 [ 3618.127483][ C0] ? do_raw_write_lock+0x11a/0x280 [ 3618.132596][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 3618.137892][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3618.143881][ C0] ep_poll+0xcef/0xf00 [ 3618.147969][ C0] ? ep_send_events_proc+0xc30/0xc30 [ 3618.153269][ C0] ? security_file_permission+0x8c/0x470 [ 3618.158914][ C0] ? __secure_computing+0x104/0x360 [ 3618.164120][ C0] ? finish_wait+0x260/0x260 [ 3618.168723][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 3618.174278][ C0] do_epoll_wait+0x209/0x260 [ 3618.178877][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 3618.183908][ C0] do_syscall_64+0xf6/0x7d0 [ 3618.188420][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3618.194311][ C0] RIP: 0033:0x7f4f6b52e2e3 [ 3618.198731][ C0] Code: 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 29 54 2b 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 0b c2 00 00 48 89 04 24 [ 3618.218336][ C0] RSP: 002b:00007ffe71124938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 3618.226758][ C0] RAX: ffffffffffffffda RBX: 0000556ecfb008b0 RCX: 00007f4f6b52e2e3 [ 3618.234730][ C0] RDX: 0000000000000004 RSI: 00007ffe71124a00 RDI: 0000000000000004 [ 3618.242700][ C0] RBP: 00007ffe71124ab0 R08: 0000556ecfb03160 R09: 0000000000000000 [ 3618.250673][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe71124a00 [ 3618.258651][ C0] R13: 0000556ecfaedab0 R14: 0000000000000003 R15: 000000000000000e [ 3618.266647][ C0] systemd-udevd R running task 28120 19437 3873 0x80000108 [ 3618.275049][ C0] Call Trace: [ 3618.278334][ C0] [ 3618.281204][ C0] sched_show_task.cold+0x2e2/0x343 [ 3618.286414][ C0] ? can_nice.part.0+0x10/0x10 [ 3618.291197][ C0] ? cpumask_next+0x3c/0x40 [ 3618.295699][ C0] show_state_filter+0x162/0x207 [ 3618.300646][ C0] ? fn_caps_on+0x90/0x90 [ 3618.304994][ C0] k_spec+0xdc/0x120 [ 3618.308908][ C0] kbd_event+0xbec/0x2ef0 [ 3618.313260][ C0] ? lock_acquire+0x1f2/0x8f0 [ 3618.317917][ C0] ? k_pad+0x720/0x720 [ 3618.321965][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3618.327432][ C0] ? k_pad+0x720/0x720 [ 3618.331509][ C0] input_to_handler+0x3b6/0x4c0 [ 3618.336360][ C0] input_pass_values.part.0+0x2da/0x710 [ 3618.341899][ C0] input_handle_event+0x658/0x13a0 [ 3618.347014][ C0] input_event+0x8e/0xb0 [ 3618.351260][ C0] hidinput_hid_event+0x52d/0x15d3 [ 3618.356366][ C0] hid_process_event+0x4a0/0x580 [ 3618.361293][ C0] ? hid_field_extract+0xe4/0x170 [ 3618.366312][ C0] hid_report_raw_event+0xb70/0xee0 [ 3618.371543][ C0] hid_input_report+0x31b/0x400 [ 3618.376390][ C0] ? ktime_get_mono_fast_ns+0x163/0x1f0 [ 3618.381940][ C0] hid_irq_in+0x50e/0x690 [ 3618.386278][ C0] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 3618.391640][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 3618.396836][ C0] dummy_timer+0x1243/0x2fe1 [ 3618.401424][ C0] ? __lock_acquire+0x2224/0x48a0 [ 3618.406459][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3618.411914][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 3618.416670][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3618.422229][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3618.428204][ C0] call_timer_fn+0x1ac/0x780 [ 3618.432781][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 3618.437536][ C0] ? timer_fixup_init+0x60/0x60 [ 3618.442380][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3618.447569][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 3618.453549][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 3618.458307][ C0] run_timer_softirq+0x623/0x1600 [ 3618.463323][ C0] ? add_timer+0x830/0x830 [ 3618.467728][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 3618.473192][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 3618.478749][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 3618.484735][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 3618.490722][ C0] __do_softirq+0x26c/0x9f7 [ 3618.495228][ C0] irq_exit+0x192/0x1d0 [ 3618.499388][ C0] smp_apic_timer_interrupt+0x19e/0x600 [ 3618.504925][ C0] apic_timer_interrupt+0xf/0x20 [ 3618.509847][ C0] [ 3618.512768][ C0] RIP: 0010:lock_is_held_type+0x272/0x360 [ 3618.518476][ C0] Code: e8 03 80 3c 10 00 0f 85 f2 00 00 00 48 83 3d d4 5b b9 01 00 74 32 48 8b 7c 24 10 57 9d 0f 1f 44 00 00 48 83 c4 18 44 89 e0 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 45 31 e4 e9 6e ff ff ff 41 bc 01 00 [ 3618.538077][ C0] RSP: 0018:ffffc900086ff648 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13 [ 3618.546505][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 3618.554467][ C0] RDX: dffffc0000000000 RSI: ffffffff899bdcc0 RDI: 0000000000000282 [ 3618.562419][ C0] RBP: ffff888057dd4040 R08: 0000000000000001 R09: fffffbfff1516d79 [ 3618.570376][ C0] R10: ffffffff8a8b6bc7 R11: fffffbfff1516d78 R12: 0000000000000000 [ 3618.578340][ C0] R13: ffff888057dd4910 R14: ffff888057dd4910 R15: 0000000000000001 [ 3618.586337][ C0] ___might_sleep+0x1fc/0x2b0 [ 3618.591022][ C0] kmem_cache_alloc+0x2ef/0x740 [ 3618.595868][ C0] ? print_usage_bug+0x240/0x240 [ 3618.600791][ C0] ? mark_lock+0x11f/0xdd0 [ 3618.605202][ C0] __d_alloc+0x2a/0x920 [ 3618.609345][ C0] ? print_usage_bug+0x240/0x240 [ 3618.614259][ C0] d_alloc+0x4a/0x240 [ 3618.618251][ C0] d_alloc_parallel+0xe8/0x1b10 [ 3618.623089][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3618.629089][ C0] ? __d_lookup_rcu+0x6c0/0x6c0 [ 3618.633967][ C0] ? find_held_lock+0x2d/0x110 [ 3618.638719][ C0] ? __d_lookup+0x400/0x740 [ 3618.643229][ C0] ? lockdep_init_map_waits+0x26a/0x890 [ 3618.648766][ C0] ? lockdep_init_map_waits+0x26a/0x890 [ 3618.654298][ C0] ? __raw_spin_lock_init+0x34/0x100 [ 3618.659582][ C0] __lookup_slow+0x193/0x490 [ 3618.664149][ C0] ? vfs_rmdir+0x500/0x500 [ 3618.668582][ C0] ? __mutex_unlock_slowpath+0xe2/0x660 [ 3618.674513][ C0] walk_component+0x418/0x6a0 [ 3618.679169][ C0] ? handle_dots.part.0+0x1890/0x1890 [ 3618.684516][ C0] ? generic_permission+0x116/0x520 [ 3618.689710][ C0] ? security_inode_permission+0xc4/0xf0 [ 3618.695343][ C0] link_path_walk.part.0+0x631/0xb50 [ 3618.700622][ C0] ? walk_component+0x6a0/0x6a0 [ 3618.705472][ C0] path_lookupat.isra.0+0x8d/0x530 [ 3618.710620][ C0] filename_lookup+0x1a3/0x3e0 [ 3618.715379][ C0] ? nd_jump_link+0x360/0x360 [ 3618.720067][ C0] ? __phys_addr_symbol+0x2c/0x70 [ 3618.725082][ C0] ? __check_object_size+0x171/0x437 [ 3618.730362][ C0] ? getname_flags+0x275/0x5b0 [ 3618.735117][ C0] ? security_prepare_creds+0xee/0x180 [ 3618.740604][ C0] do_faccessat+0x12c/0x830 [ 3618.745102][ C0] ? __ia32_sys_fallocate+0xf0/0xf0 [ 3618.750294][ C0] ? do_syscall_64+0x21/0x7d0 [ 3618.754977][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3618.760973][ C0] do_syscall_64+0xf6/0x7d0 [ 3618.765470][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3618.771352][ C0] RIP: 0033:0x7f4f6b5209c7 [ 3618.775757][ C0] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 3618.795358][ C0] RSP: 002b:00007ffe7111e268 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3618.803757][ C0] RAX: ffffffffffffffda RBX: 00007ffe7111e2a0 RCX: 00007f4f6b5209c7 [ 3618.811705][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00007ffe7111e270 [ 3618.819653][ C0] RBP: 00007ffe7111f340 R08: 0000556ecfaea0e0 R09: 0000000000000120 [ 3618.827609][ C0] R10: fffffffffffff50a R11: 0000000000000246 R12: 00007ffe7111f391 [ 3618.835576][ C0] R13: 0000556ecfaeb768 R14: 0000000000000018 R15: 00007ffe7111e270 [ 3618.843558][ C0] systemd-udevd D27984 19438 3873 0x00000100 [ 3618.849873][ C0] Call Trace: [ 3618.853155][ C0] __schedule+0x8f3/0x1fc0 [ 3618.857570][ C0] ? firmware_map_remove+0x19d/0x19d [ 3618.862857][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3618.868838][ C0] schedule+0xd0/0x2a0 [ 3618.872899][ C0] schedule_timeout+0x55b/0x850 [ 3618.877742][ C0] ? find_held_lock+0x2d/0x110 [ 3618.882494][ C0] ? usleep_range+0x160/0x160 [ 3618.887158][ C0] ? wait_for_completion+0x162/0x270 [ 3618.892431][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3618.898388][ C0] ? lock_downgrade+0x840/0x840 [ 3618.903228][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3618.908257][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3618.913447][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3618.919408][ C0] wait_for_completion+0x16a/0x270 [ 3618.924499][ C0] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 3618.930977][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3618.936958][ C0] __wait_rcu_gp+0x217/0x2d0 [ 3618.941541][ C0] synchronize_rcu.part.0+0xda/0xf0 [ 3618.946741][ C0] ? synchronize_rcu_expedited+0x620/0x620 [ 3618.952554][ C0] ? lock_downgrade+0x840/0x840 [ 3618.957394][ C0] ? invoke_rcu_core+0x230/0x230 [ 3618.962318][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 3618.967332][ C0] ? rcu_tasks_pregp_step+0x10/0x10 [ 3618.972531][ C0] evdev_release+0x12b/0x290 [ 3618.977102][ C0] ? evdev_detach_client+0x140/0x140 [ 3618.982363][ C0] __fput+0x33e/0x880 [ 3618.986346][ C0] task_work_run+0xf4/0x1b0 [ 3618.990843][ C0] exit_to_usermode_loop+0x2fa/0x360 [ 3618.996121][ C0] do_syscall_64+0x6b1/0x7d0 [ 3619.000701][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 3619.006580][ C0] RIP: 0033:0x7f4f6b7f4270 [ 3619.010992][ C0] Code: 73 01 c3 48 8b 0d 38 7d 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 59 c1 20 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ee fb ff ff 48 89 04 24 [ 3619.030578][ C0] RSP: 002b:00007ffe7111fac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3619.038989][ C0] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f4f6b7f4270 [ 3619.046972][ C0] RDX: 00007ffe7111fb10 RSI: 0000000080184540 RDI: 0000000000000007 [ 3619.055063][ C0] RBP: 00007f4f6c6ad710 R08: 0000556ece846670 R09: 0000000000000078 [ 3619.063032][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 3619.070992][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffffffffff [ 3619.078976][ C0] [ 3619.078976][ C0] Showing all locks held in the system: [ 3619.086700][ C0] 1 lock held by khugepaged/1155: [ 3619.091718][ C0] #0: ffffffff89a419a8 (lock#4){+.+.}-{3:3}, at: lru_add_drain_all+0x59/0x5c0 [ 3619.100669][ C0] 1 lock held by in:imklog/6692: [ 3619.105588][ C0] #0: ffff88808f6bce30 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 3619.114794][ C0] 2 locks held by agetty/6694: [ 3619.119569][ C0] #0: ffff8880a7009098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 3619.129273][ C0] #1: ffffc900011e02e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x220/0x1b30 [ 3619.139341][ C0] 2 locks held by agetty/6700: [ 3619.144080][ C0] #0: ffff888093e27098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 3619.153798][ C0] #1: ffffc900011e42e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x220/0x1b30 [ 3619.163853][ C0] 2 locks held by agetty/6703: [ 3619.168596][ C0] #0: ffff8880a7332098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 3619.178328][ C0] #1: ffffc900011f02e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x220/0x1b30 [ 3619.188483][ C0] 2 locks held by kworker/u4:4/14667: [ 3619.193850][ C0] #0: ffff8880ae737dd8 (&rq->lock){-.-.}-{2:2}, at: newidle_balance+0x9ce/0xdd0 [ 3619.202942][ C0] #1: ffffffff899bdd80 (rcu_read_lock){....}-{1:2}, at: __update_idle_core+0x42/0x3e0 [ 3619.212571][ C0] 5 locks held by kworker/1:1/2697: [ 3619.217740][ C0] #0: ffff8880a6584538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x844/0x16a0 [ 3619.228427][ C0] #1: ffffc90008ecfdc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x878/0x16a0 [ 3619.239636][ C0] #2: ffff888217df0218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1b6/0x38f0 [ 3619.248497][ C0] #3: ffff8880a2e1d218 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x91/0x8d0 [ 3619.257623][ C0] #4: ffff88809d9f81a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x23/0x500 [ 3619.268170][ C0] 2 locks held by agetty/19089: [ 3619.273369][ C0] #0: ffff8880a6558098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 3619.283089][ C0] #1: ffffc900012042e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x220/0x1b30 [ 3619.293166][ C0] 6 locks held by systemd-udevd/19437: [ 3619.298630][ C0] #0: ffff8880a33b6ad0 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: walk_component+0x409/0x6a0 [ 3619.308966][ C0] #1: ffffc90000007d60 ((&dum_hcd->timer)){+.-.}-{0:0}, at: call_timer_fn+0xdb/0x780 18:02:39 executing program 2: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000240)=0x8000, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf5, &(0x7f0000000100)="60feadf749c13f5251e343ec9a47b82ef1a3d13d94ca0168ead78d0c0633af797c0d16890a2e4ad206ff9bbc3fe229a9094bbacabce08d480757e8614f58f91b37195882abe9ad514693b769d88582b2e8025aa201fd8912dcdf2a3f1fb3fbf3fbd11b29a6161ab4187f97c49152683c1b6486e4f5cbe31a07bf53d149dc0b65a63dfe0dcbd624f5cbc8584710759b9375c52676c271d0c1351fd51a50175497cae28cbb96acfdf82310dfcea7438df047b6ec3b947ed7590e3c7d492714c864e05eb13743e008273ff0155505f831be6f9d21d41b24f0c039421f0805869c681f96dfc4ff208c077da2b5bb8d8f964094900c3ea9") [ 3619.318558][ C0] #2: ffff888058ab2230 (&dev->event_lock){-.-.}-{2:2}, at: input_event+0x7b/0xb0 [ 3619.327746][ C0] #3: ffffffff899bdd80 (rcu_read_lock){....}-{1:2}, at: input_pass_values.part.0+0x0/0x710 [ 3619.337823][ C0] #4: ffffffff89f6b3b8 (kbd_event_lock){..-.}-{2:2}, at: kbd_event+0x87/0x2ef0 [ 3619.346862][ C0] #5: ffffffff899bdd80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 3619.356685][ C0] [ 3619.358998][ C0] ============================================= [ 3619.358998][ C0] 18:02:39 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000003200)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x1, 0x3f}, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000200)='d', 0x1}], 0x2}}], 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xf5, &(0x7f0000000100)="60feadf749c13f5251e343ec9a47b82ef1a3d13d94ca0168ead78d0c0633af797c0d16890a2e4ad206ff9bbc3fe229a9094bbacabce08d480757e8614f58f91b37195882abe9ad514693b769d88582b2e8025aa201fd8912dcdf2a3f1fb3fbf3fbd11b29a6161ab4187f97c49152683c1b6486e4f5cbe31a07bf53d149dc0b65a63dfe0dcbd624f5cbc8584710759b9375c52676c271d0c1351fd51a50175497cae28cbb96acfdf82310dfcea7438df047b6ec3b947ed7590e3c7d492714c864e05eb13743e008273ff0155505f831be6f9d21d41b24f0c039421f0805869c681f96dfc4ff208c077da2b5bb8d8f964094900c3ea9") 18:02:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x8001}, 0x20) ftruncate(r1, 0x200004) ustat(0xffffffffffffffff, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0x80001d00000a) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x20000010) socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x40, 0x262, 0x8000, 0x3ff, 0x9, 0x3, 0xd9, 0x7a5}, 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000000180)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2020/06/09 18:02:39 Manager.Poll call failed: connection is shut down [ 3619.412602][T14285] usb 4-1: USB disconnect, device number 28