all_32_irqs_on+0x3f/0x60 [ 1669.898056][ C0] do_fast_syscall_32+0x7f/0x120 [ 1669.902982][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1669.908069][ C0] RIP: 0023:0xf7fd7569 [ 1669.912109][ C0] Code: Bad RIP value. [ 1669.916149][ C0] RSP: 002b:00000000086afda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1669.924533][ C0] RAX: ffffffffffffffda RBX: 00000000000000f9 RCX: 0000000008198020 [ 1669.932479][ C0] RDX: 0000000000000038 RSI: 000000000019165a RDI: 00000000086afe10 [ 1669.940615][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1669.948595][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1669.956542][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1669.964506][ C0] wg-crypt-wg0 I30104 7405 2 0x00004000 [ 1669.970819][ C0] Call Trace: [ 1669.974086][ C0] __schedule+0x8e1/0x1eb0 [ 1669.982737][ C0] ? io_schedule_timeout+0x140/0x140 [ 1669.987997][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1669.992998][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1669.998361][ C0] schedule+0xd0/0x2a0 [ 1670.002416][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.007188][ C0] ? worker_thread+0x1120/0x1120 [ 1670.012101][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.017189][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.022206][ C0] ? worker_thread+0x1120/0x1120 [ 1670.027120][ C0] kthread+0x3b5/0x4a0 [ 1670.031163][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.036249][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.041367][ C0] ret_from_fork+0x1f/0x30 [ 1670.045765][ C0] syz-executor.5 S27640 7420 6827 0x20020000 [ 1670.052088][ C0] Call Trace: [ 1670.055354][ C0] __schedule+0x8e1/0x1eb0 [ 1670.059751][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.065009][ C0] ? release_task+0x14c0/0x14c0 [ 1670.069835][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1670.075634][ C0] schedule+0xd0/0x2a0 [ 1670.079680][ C0] do_wait+0x628/0x9e0 [ 1670.083725][ C0] ? wait_consider_task+0x3b20/0x3b20 [ 1670.089074][ C0] kernel_wait4+0x14c/0x260 [ 1670.093553][ C0] ? __ia32_sys_waitid+0x150/0x150 [ 1670.098643][ C0] ? kill_orphaned_pgrp+0x320/0x320 [ 1670.103821][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1670.108735][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1670.113825][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1670.118908][ C0] do_fast_syscall_32+0x7f/0x120 [ 1670.123821][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1670.128922][ C0] RIP: 0023:0xf7f53569 [ 1670.132957][ C0] Code: Bad RIP value. [ 1670.136995][ C0] RSP: 002b:00000000ffcf9a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1670.145381][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffcf9a48 [ 1670.153517][ C0] RDX: 0000000040000000 RSI: 00000000ffcf9a48 RDI: 000000000819b67c [ 1670.161485][ C0] RBP: 00000000ffcf9b58 R08: 0000000000000000 R09: 0000000000000000 [ 1670.169485][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1670.177445][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1670.186287][ C0] wg-crypt-wg0 I30952 7421 2 0x00004000 [ 1670.192657][ C0] Call Trace: [ 1670.195930][ C0] __schedule+0x8e1/0x1eb0 [ 1670.200330][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.205666][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.210687][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.215918][ C0] schedule+0xd0/0x2a0 [ 1670.219971][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.224676][ C0] ? worker_thread+0x1120/0x1120 [ 1670.229592][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.234731][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.239733][ C0] ? worker_thread+0x1120/0x1120 [ 1670.244648][ C0] kthread+0x3b5/0x4a0 [ 1670.248693][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.253779][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.258925][ C0] ret_from_fork+0x1f/0x30 [ 1670.263326][ C0] wg-crypt-wg1 I30864 7423 2 0x00004000 [ 1670.269637][ C0] Call Trace: [ 1670.272926][ C0] __schedule+0x8e1/0x1eb0 [ 1670.277339][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.282599][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.287600][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.292776][ C0] schedule+0xd0/0x2a0 [ 1670.296827][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.301573][ C0] ? worker_thread+0x1120/0x1120 [ 1670.306506][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.311594][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.316593][ C0] ? worker_thread+0x1120/0x1120 [ 1670.321524][ C0] kthread+0x3b5/0x4a0 [ 1670.325567][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.330655][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.335743][ C0] ret_from_fork+0x1f/0x30 [ 1670.340140][ C0] wg-crypt-wg1 I30952 7427 2 0x00004000 [ 1670.346467][ C0] Call Trace: [ 1670.349739][ C0] __schedule+0x8e1/0x1eb0 [ 1670.354145][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.359431][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.364533][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.369725][ C0] schedule+0xd0/0x2a0 [ 1670.373809][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.378476][ C0] ? worker_thread+0x1120/0x1120 [ 1670.383400][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.388516][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.393521][ C0] ? worker_thread+0x1120/0x1120 [ 1670.398439][ C0] kthread+0x3b5/0x4a0 [ 1670.402500][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.408454][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.413543][ C0] ret_from_fork+0x1f/0x30 [ 1670.417943][ C0] syz-executor.5 S23864 7432 7420 0x20020000 [ 1670.424268][ C0] Call Trace: [ 1670.427534][ C0] __schedule+0x8e1/0x1eb0 [ 1670.431939][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.437201][ C0] ? prepare_to_wait_event+0x129/0x650 [ 1670.442658][ C0] schedule+0xd0/0x2a0 [ 1670.446889][ C0] pipe_read+0xb3f/0x13a0 [ 1670.451231][ C0] ? pipe_ioctl+0x2b0/0x2b0 [ 1670.455723][ C0] ? finish_wait+0x260/0x260 [ 1670.460313][ C0] ? lock_acquire+0x1f1/0xad0 [ 1670.466102][ C0] ? debug_object_active_state+0x10b/0x350 [ 1670.471889][ C0] new_sync_read+0x5b3/0x6e0 [ 1670.476454][ C0] ? vfs_dedupe_file_range+0x780/0x780 [ 1670.481917][ C0] ? security_file_permission+0x239/0x470 [ 1670.487615][ C0] __vfs_read+0xc9/0x100 [ 1670.491843][ C0] vfs_read+0x1f6/0x420 [ 1670.496050][ C0] ksys_read+0x1ee/0x250 [ 1670.500268][ C0] ? kernel_write+0x120/0x120 [ 1670.504921][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1670.510357][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1670.515466][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1670.520553][ C0] do_fast_syscall_32+0x7f/0x120 [ 1670.525487][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1670.530572][ C0] RIP: 0023:0xf7f53569 [ 1670.534628][ C0] Code: Bad RIP value. [ 1670.538667][ C0] RSP: 002b:00000000086afda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1670.547050][ C0] RAX: ffffffffffffffda RBX: 00000000000000f9 RCX: 0000000008198020 [ 1670.555345][ C0] RDX: 0000000000000038 RSI: 0000000000191659 RDI: 00000000086afe10 [ 1670.563305][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1670.571260][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1670.579210][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1670.587180][ C0] wg-crypt-wg2 I30032 7433 2 0x00004000 [ 1670.593509][ C0] Call Trace: [ 1670.596803][ C0] __schedule+0x8e1/0x1eb0 [ 1670.601199][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.606460][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.611562][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.616736][ C0] schedule+0xd0/0x2a0 [ 1670.620804][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.625552][ C0] ? worker_thread+0x1120/0x1120 [ 1670.630474][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.635567][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.640588][ C0] ? worker_thread+0x1120/0x1120 [ 1670.645510][ C0] kthread+0x3b5/0x4a0 [ 1670.649693][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.654791][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.659891][ C0] ret_from_fork+0x1f/0x30 [ 1670.664297][ C0] wg-crypt-wg2 I30104 7438 2 0x00004000 [ 1670.670628][ C0] Call Trace: [ 1670.673895][ C0] __schedule+0x8e1/0x1eb0 [ 1670.678291][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.683550][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.688549][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.693745][ C0] schedule+0xd0/0x2a0 [ 1670.697791][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.702451][ C0] ? worker_thread+0x1120/0x1120 [ 1670.707364][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.712453][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.717467][ C0] ? worker_thread+0x1120/0x1120 [ 1670.722381][ C0] kthread+0x3b5/0x4a0 [ 1670.726423][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.731505][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.736592][ C0] ret_from_fork+0x1f/0x30 [ 1670.740989][ C0] bond0 I30912 7555 2 0x00004000 [ 1670.747313][ C0] Call Trace: [ 1670.750596][ C0] __schedule+0x8e1/0x1eb0 [ 1670.754993][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.760252][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.765252][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.770427][ C0] schedule+0xd0/0x2a0 [ 1670.774474][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.779135][ C0] ? worker_thread+0x1120/0x1120 [ 1670.784051][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.789228][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.794228][ C0] ? worker_thread+0x1120/0x1120 [ 1670.799141][ C0] kthread+0x3b5/0x4a0 [ 1670.803201][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.808304][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.813410][ C0] ret_from_fork+0x1f/0x30 [ 1670.817818][ C0] bond0 I30952 7654 2 0x00004000 [ 1670.824138][ C0] Call Trace: [ 1670.827425][ C0] __schedule+0x8e1/0x1eb0 [ 1670.831827][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.837089][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.842089][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.847264][ C0] schedule+0xd0/0x2a0 [ 1670.851311][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.855972][ C0] ? worker_thread+0x1120/0x1120 [ 1670.860889][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.866026][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.871029][ C0] ? worker_thread+0x1120/0x1120 [ 1670.875943][ C0] kthread+0x3b5/0x4a0 [ 1670.879989][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.885073][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.890164][ C0] ret_from_fork+0x1f/0x30 [ 1670.894562][ C0] wg-crypt-wg0 I30712 7781 2 0x00004000 [ 1670.900871][ C0] Call Trace: [ 1670.904140][ C0] __schedule+0x8e1/0x1eb0 [ 1670.908568][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.913830][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.918831][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1670.924006][ C0] schedule+0xd0/0x2a0 [ 1670.928052][ C0] rescuer_thread+0x7a7/0xd30 [ 1670.932715][ C0] ? worker_thread+0x1120/0x1120 [ 1670.937630][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1670.942718][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1670.947720][ C0] ? worker_thread+0x1120/0x1120 [ 1670.952634][ C0] kthread+0x3b5/0x4a0 [ 1670.956679][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.961766][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1670.966856][ C0] ret_from_fork+0x1f/0x30 [ 1670.971251][ C0] wg-crypt-wg1 I30952 7796 2 0x00004000 [ 1670.977561][ C0] Call Trace: [ 1670.980826][ C0] __schedule+0x8e1/0x1eb0 [ 1670.985222][ C0] ? io_schedule_timeout+0x140/0x140 [ 1670.990500][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1670.995499][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1671.000673][ C0] schedule+0xd0/0x2a0 [ 1671.004721][ C0] rescuer_thread+0x7a7/0xd30 [ 1671.009379][ C0] ? worker_thread+0x1120/0x1120 [ 1671.014299][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1671.019404][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1671.024404][ C0] ? worker_thread+0x1120/0x1120 [ 1671.029318][ C0] kthread+0x3b5/0x4a0 [ 1671.033362][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.038456][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.043546][ C0] ret_from_fork+0x1f/0x30 [ 1671.047947][ C0] wg-crypt-wg0 I30104 7801 2 0x00004000 [ 1671.054256][ C0] Call Trace: [ 1671.057529][ C0] __schedule+0x8e1/0x1eb0 [ 1671.061924][ C0] ? io_schedule_timeout+0x140/0x140 [ 1671.067184][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1671.072183][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1671.077360][ C0] schedule+0xd0/0x2a0 [ 1671.081407][ C0] rescuer_thread+0x7a7/0xd30 [ 1671.086069][ C0] ? worker_thread+0x1120/0x1120 [ 1671.090983][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1671.096070][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1671.101068][ C0] ? worker_thread+0x1120/0x1120 [ 1671.105981][ C0] kthread+0x3b5/0x4a0 [ 1671.110031][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.115464][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.120554][ C0] ret_from_fork+0x1f/0x30 [ 1671.124950][ C0] wg-crypt-wg2 I30104 7808 2 0x00004000 [ 1671.131259][ C0] Call Trace: [ 1671.134531][ C0] __schedule+0x8e1/0x1eb0 [ 1671.138925][ C0] ? io_schedule_timeout+0x140/0x140 [ 1671.144202][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1671.149206][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1671.154380][ C0] schedule+0xd0/0x2a0 [ 1671.158427][ C0] rescuer_thread+0x7a7/0xd30 [ 1671.163111][ C0] ? worker_thread+0x1120/0x1120 [ 1671.168041][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1671.173157][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1671.178168][ C0] ? worker_thread+0x1120/0x1120 [ 1671.183171][ C0] kthread+0x3b5/0x4a0 [ 1671.187335][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.192434][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.197536][ C0] ret_from_fork+0x1f/0x30 [ 1671.201940][ C0] wg-crypt-wg1 I30104 7817 2 0x00004000 [ 1671.208280][ C0] Call Trace: [ 1671.211549][ C0] __schedule+0x8e1/0x1eb0 [ 1671.215965][ C0] ? io_schedule_timeout+0x140/0x140 [ 1671.221226][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1671.226225][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1671.231401][ C0] schedule+0xd0/0x2a0 [ 1671.235447][ C0] rescuer_thread+0x7a7/0xd30 [ 1671.240107][ C0] ? worker_thread+0x1120/0x1120 [ 1671.245024][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1671.250113][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1671.255113][ C0] ? worker_thread+0x1120/0x1120 [ 1671.260055][ C0] kthread+0x3b5/0x4a0 [ 1671.264224][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.269404][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.274494][ C0] ret_from_fork+0x1f/0x30 [ 1671.278891][ C0] wg-crypt-wg2 I30104 7822 2 0x00004000 [ 1671.285218][ C0] Call Trace: [ 1671.288484][ C0] __schedule+0x8e1/0x1eb0 [ 1671.292899][ C0] ? io_schedule_timeout+0x140/0x140 [ 1671.298162][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1671.303166][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1671.308447][ C0] schedule+0xd0/0x2a0 [ 1671.312520][ C0] rescuer_thread+0x7a7/0xd30 [ 1671.317197][ C0] ? worker_thread+0x1120/0x1120 [ 1671.322120][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1671.327213][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1671.332219][ C0] ? worker_thread+0x1120/0x1120 [ 1671.337190][ C0] kthread+0x3b5/0x4a0 [ 1671.341244][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.346356][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1671.351454][ C0] ret_from_fork+0x1f/0x30 [ 1671.355865][ C0] syz-executor.4 S29944 8568 7392 0x20020000 [ 1671.362183][ C0] Call Trace: [ 1671.365455][ C0] __schedule+0x8e1/0x1eb0 [ 1671.369911][ C0] ? io_schedule_timeout+0x140/0x140 [ 1671.375308][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1671.380770][ C0] schedule+0xd0/0x2a0 [ 1671.384875][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1671.390037][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1671.395235][ C0] futex_wait+0x1df/0x560 [ 1671.399552][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1671.404605][ C0] ? mark_lock+0xbc/0x1710 [ 1671.408998][ C0] ? mark_lock+0xbc/0x1710 [ 1671.413397][ C0] ? hash_futex+0x12/0x200 [ 1671.417791][ C0] ? futex_wake+0x155/0x490 [ 1671.422328][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1671.428548][ C0] do_futex+0x15b/0x1a60 [ 1671.432772][ C0] ? lock_acquire+0x1f1/0xad0 [ 1671.437443][ C0] ? __might_fault+0xef/0x1d0 [ 1671.442112][ C0] ? find_held_lock+0x2d/0x110 [ 1671.446892][ C0] ? futex_exit_release+0x220/0x220 [ 1671.452076][ C0] ? lock_downgrade+0x820/0x820 [ 1671.456909][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1671.463132][ C0] ? __might_fault+0x190/0x1d0 [ 1671.467872][ C0] ? _copy_to_user+0x126/0x160 [ 1671.472725][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1671.478172][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1671.483694][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1671.489581][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1671.494494][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1671.499588][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1671.504688][ C0] do_fast_syscall_32+0x7f/0x120 [ 1671.509602][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1671.514688][ C0] RIP: 0023:0xf7fd7569 [ 1671.518725][ C0] Code: Bad RIP value. [ 1671.522764][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1671.531149][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1671.539103][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1671.547048][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1671.555016][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1671.562964][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1671.570926][ C0] syz-executor.4 S29944 8572 7392 0x20020000 [ 1671.577235][ C0] Call Trace: [ 1671.580589][ C0] __schedule+0x8e1/0x1eb0 [ 1671.584985][ C0] ? io_schedule_timeout+0x140/0x140 [ 1671.590255][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1671.595695][ C0] schedule+0xd0/0x2a0 [ 1671.599741][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1671.604827][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1671.610003][ C0] futex_wait+0x1df/0x560 [ 1671.614312][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1671.619312][ C0] ? mark_lock+0xbc/0x1710 [ 1671.623705][ C0] ? hash_futex+0x12/0x200 [ 1671.628098][ C0] ? futex_wake+0x155/0x490 [ 1671.632639][ C0] ? do_wp_page+0x8e7/0x1950 [ 1671.637211][ C0] do_futex+0x15b/0x1a60 [ 1671.641432][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1671.646602][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1671.651442][ C0] ? do_wp_page+0x16a/0x1950 [ 1671.656011][ C0] ? futex_exit_release+0x220/0x220 [ 1671.661618][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1671.667048][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1671.671989][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1671.678311][ C0] ? find_held_lock+0x2d/0x110 [ 1671.683058][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1671.688235][ C0] ? __up_read+0x1a1/0x7b0 [ 1671.692679][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1671.698207][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1671.703745][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1671.708660][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1671.713573][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1671.718687][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1671.723777][ C0] do_fast_syscall_32+0x7f/0x120 [ 1671.728696][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1671.733782][ C0] RIP: 0023:0xf7fd7569 [ 1671.737821][ C0] Code: Bad RIP value. [ 1671.741862][ C0] RSP: 002b:00000000f5db112c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1671.750263][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1671.758209][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1671.766158][ C0] RBP: 00000000f5db1228 R08: 0000000000000000 R09: 0000000000000000 [ 1671.774122][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1671.782068][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1671.790034][ C0] syz-executor.4 S29944 9445 7392 0x20020000 [ 1671.796343][ C0] Call Trace: [ 1671.799611][ C0] __schedule+0x8e1/0x1eb0 [ 1671.804010][ C0] ? io_schedule_timeout+0x140/0x140 [ 1671.809281][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1671.814722][ C0] schedule+0xd0/0x2a0 [ 1671.819029][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1671.824116][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1671.829292][ C0] futex_wait+0x1df/0x560 [ 1671.833600][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1671.838616][ C0] ? mark_lock+0xbc/0x1710 [ 1671.843047][ C0] ? mark_lock+0xbc/0x1710 [ 1671.847439][ C0] ? hash_futex+0x12/0x200 [ 1671.851832][ C0] ? futex_wake+0x155/0x490 [ 1671.856336][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1671.862309][ C0] do_futex+0x15b/0x1a60 [ 1671.867502][ C0] ? lock_acquire+0x1f1/0xad0 [ 1671.872156][ C0] ? __might_fault+0xef/0x1d0 [ 1671.876813][ C0] ? find_held_lock+0x2d/0x110 [ 1671.881552][ C0] ? futex_exit_release+0x220/0x220 [ 1671.886727][ C0] ? lock_downgrade+0x820/0x820 [ 1671.891562][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1671.898131][ C0] ? __might_fault+0x190/0x1d0 [ 1671.902871][ C0] ? _copy_to_user+0x126/0x160 [ 1671.907615][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1671.913054][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1671.918594][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1671.924483][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1671.929397][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1671.934490][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1671.939750][ C0] do_fast_syscall_32+0x7f/0x120 [ 1671.944680][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1671.949769][ C0] RIP: 0023:0xf7fd7569 [ 1671.953822][ C0] Code: Bad RIP value. [ 1671.957882][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1671.966267][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1671.974213][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1671.982333][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1671.990297][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1671.998244][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.006220][ C0] syz-executor.4 S29944 9447 7392 0x20020000 [ 1672.012530][ C0] Call Trace: [ 1672.015814][ C0] __schedule+0x8e1/0x1eb0 [ 1672.020211][ C0] ? io_schedule_timeout+0x140/0x140 [ 1672.025472][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1672.030913][ C0] schedule+0xd0/0x2a0 [ 1672.034959][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1672.040103][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1672.045290][ C0] futex_wait+0x1df/0x560 [ 1672.049636][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1672.054647][ C0] ? mark_lock+0xbc/0x1710 [ 1672.059074][ C0] ? mark_lock+0xbc/0x1710 [ 1672.063474][ C0] ? hash_futex+0x12/0x200 [ 1672.067905][ C0] ? futex_wake+0x155/0x490 [ 1672.072395][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1672.078352][ C0] do_futex+0x15b/0x1a60 [ 1672.082578][ C0] ? lock_acquire+0x1f1/0xad0 [ 1672.087232][ C0] ? __might_fault+0xef/0x1d0 [ 1672.091900][ C0] ? find_held_lock+0x2d/0x110 [ 1672.096640][ C0] ? futex_exit_release+0x220/0x220 [ 1672.101819][ C0] ? lock_downgrade+0x820/0x820 [ 1672.106665][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1672.112886][ C0] ? __might_fault+0x190/0x1d0 [ 1672.117637][ C0] ? _copy_to_user+0x126/0x160 [ 1672.122380][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1672.127819][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1672.133339][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1672.139212][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1672.144173][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1672.149279][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1672.154374][ C0] do_fast_syscall_32+0x7f/0x120 [ 1672.159292][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1672.164378][ C0] RIP: 0023:0xf7fd7569 [ 1672.168441][ C0] Code: Bad RIP value. [ 1672.172493][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1672.180908][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1672.188861][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1672.196812][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1672.205384][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1672.213351][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.221322][ C0] syz-executor.4 S29944 9489 7392 0x20020000 [ 1672.227643][ C0] Call Trace: [ 1672.230927][ C0] __schedule+0x8e1/0x1eb0 [ 1672.235350][ C0] ? io_schedule_timeout+0x140/0x140 [ 1672.240616][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1672.246067][ C0] schedule+0xd0/0x2a0 [ 1672.250133][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1672.255218][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1672.260502][ C0] futex_wait+0x1df/0x560 [ 1672.264812][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1672.269830][ C0] ? mark_lock+0xbc/0x1710 [ 1672.274224][ C0] ? mark_lock+0xbc/0x1710 [ 1672.278615][ C0] ? hash_futex+0x12/0x200 [ 1672.283008][ C0] ? futex_wake+0x155/0x490 [ 1672.287497][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1672.293470][ C0] do_futex+0x15b/0x1a60 [ 1672.297697][ C0] ? lock_acquire+0x1f1/0xad0 [ 1672.302369][ C0] ? __might_fault+0xef/0x1d0 [ 1672.307021][ C0] ? find_held_lock+0x2d/0x110 [ 1672.311761][ C0] ? futex_exit_release+0x220/0x220 [ 1672.316935][ C0] ? lock_downgrade+0x820/0x820 [ 1672.321765][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1672.327985][ C0] ? __might_fault+0x190/0x1d0 [ 1672.332731][ C0] ? _copy_to_user+0x126/0x160 [ 1672.337474][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1672.342912][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1672.348433][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1672.354304][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1672.359218][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1672.364329][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1672.369482][ C0] do_fast_syscall_32+0x7f/0x120 [ 1672.374409][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1672.379498][ C0] RIP: 0023:0xf7fd7569 [ 1672.383543][ C0] Code: Bad RIP value. [ 1672.387602][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1672.396016][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1672.403999][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1672.411984][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1672.419930][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1672.427876][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.435845][ C0] syz-executor.4 S29944 9565 7392 0x20020000 [ 1672.442156][ C0] Call Trace: [ 1672.445427][ C0] __schedule+0x8e1/0x1eb0 [ 1672.449830][ C0] ? io_schedule_timeout+0x140/0x140 [ 1672.455102][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1672.460558][ C0] schedule+0xd0/0x2a0 [ 1672.464622][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1672.469709][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1672.474903][ C0] futex_wait+0x1df/0x560 [ 1672.479210][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1672.484207][ C0] ? mark_lock+0xbc/0x1710 [ 1672.488619][ C0] ? mark_lock+0xbc/0x1710 [ 1672.493013][ C0] ? hash_futex+0x12/0x200 [ 1672.497408][ C0] ? futex_wake+0x155/0x490 [ 1672.501984][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1672.507941][ C0] do_futex+0x15b/0x1a60 [ 1672.512179][ C0] ? lock_acquire+0x1f1/0xad0 [ 1672.516840][ C0] ? __might_fault+0xef/0x1d0 [ 1672.521505][ C0] ? find_held_lock+0x2d/0x110 [ 1672.526244][ C0] ? futex_exit_release+0x220/0x220 [ 1672.531418][ C0] ? lock_downgrade+0x820/0x820 [ 1672.536333][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1672.546292][ C0] ? __might_fault+0x190/0x1d0 [ 1672.551050][ C0] ? _copy_to_user+0x126/0x160 [ 1672.555793][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1672.561232][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1672.566759][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1672.572649][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1672.577565][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1672.582657][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1672.587746][ C0] do_fast_syscall_32+0x7f/0x120 [ 1672.592659][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1672.597743][ C0] RIP: 0023:0xf7fd7569 [ 1672.601784][ C0] Code: Bad RIP value. [ 1672.605836][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1672.614220][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1672.622166][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1672.630216][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1672.638275][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1672.646223][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.654178][ C0] syz-executor.5 S29944 9593 7432 0x20020000 [ 1672.660659][ C0] Call Trace: [ 1672.663944][ C0] __schedule+0x8e1/0x1eb0 [ 1672.668345][ C0] ? io_schedule_timeout+0x140/0x140 [ 1672.673607][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1672.679047][ C0] schedule+0xd0/0x2a0 [ 1672.683092][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1672.688179][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1672.693356][ C0] futex_wait+0x1df/0x560 [ 1672.697663][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1672.702666][ C0] ? mark_lock+0xbc/0x1710 [ 1672.707058][ C0] ? mark_lock+0xbc/0x1710 [ 1672.712682][ C0] ? hash_futex+0x12/0x200 [ 1672.717075][ C0] ? futex_wake+0x155/0x490 [ 1672.721582][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1672.727543][ C0] do_futex+0x15b/0x1a60 [ 1672.731766][ C0] ? lock_acquire+0x1f1/0xad0 [ 1672.736523][ C0] ? __might_fault+0xef/0x1d0 [ 1672.741175][ C0] ? find_held_lock+0x2d/0x110 [ 1672.745914][ C0] ? futex_exit_release+0x220/0x220 [ 1672.751088][ C0] ? lock_downgrade+0x820/0x820 [ 1672.755914][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1672.762135][ C0] ? __might_fault+0x190/0x1d0 [ 1672.766875][ C0] ? _copy_to_user+0x126/0x160 [ 1672.771618][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1672.777070][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1672.782782][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1672.788660][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1672.793573][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1672.798664][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1672.803753][ C0] do_fast_syscall_32+0x7f/0x120 [ 1672.808668][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1672.813754][ C0] RIP: 0023:0xf7f53569 [ 1672.817802][ C0] Code: Bad RIP value. [ 1672.821844][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1672.830246][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1672.838194][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1672.846158][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1672.854103][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1672.862049][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.870009][ C0] syz-executor.5 S29944 9763 7432 0x20020000 [ 1672.876320][ C0] Call Trace: [ 1672.879590][ C0] __schedule+0x8e1/0x1eb0 [ 1672.884001][ C0] ? io_schedule_timeout+0x140/0x140 [ 1672.889262][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1672.894699][ C0] schedule+0xd0/0x2a0 [ 1672.898854][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1672.903963][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1672.909140][ C0] futex_wait+0x1df/0x560 [ 1672.913481][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1672.918481][ C0] ? mark_lock+0xbc/0x1710 [ 1672.922874][ C0] ? mark_lock+0xbc/0x1710 [ 1672.927266][ C0] ? hash_futex+0x12/0x200 [ 1672.931665][ C0] ? futex_wake+0x155/0x490 [ 1672.936156][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1672.942110][ C0] do_futex+0x15b/0x1a60 [ 1672.946335][ C0] ? lock_acquire+0x1f1/0xad0 [ 1672.950991][ C0] ? __might_fault+0xef/0x1d0 [ 1672.955659][ C0] ? find_held_lock+0x2d/0x110 [ 1672.960413][ C0] ? futex_exit_release+0x220/0x220 [ 1672.965588][ C0] ? lock_downgrade+0x820/0x820 [ 1672.970415][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1672.976665][ C0] ? __might_fault+0x190/0x1d0 [ 1672.981404][ C0] ? _copy_to_user+0x126/0x160 [ 1672.986164][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1672.991602][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1672.997123][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1673.002996][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1673.007911][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1673.013089][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1673.018190][ C0] do_fast_syscall_32+0x7f/0x120 [ 1673.023104][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1673.028188][ C0] RIP: 0023:0xf7f53569 [ 1673.032226][ C0] Code: Bad RIP value. [ 1673.036265][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1673.044665][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1673.052630][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1673.060578][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1673.068545][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1673.076507][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1673.084480][ C0] syz-executor.4 S29944 9764 7392 0x20020000 [ 1673.090786][ C0] Call Trace: [ 1673.094051][ C0] __schedule+0x8e1/0x1eb0 [ 1673.098447][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.103706][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1673.109146][ C0] schedule+0xd0/0x2a0 [ 1673.113194][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1673.118279][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1673.123455][ C0] futex_wait+0x1df/0x560 [ 1673.127952][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1673.132953][ C0] ? mark_lock+0xbc/0x1710 [ 1673.137359][ C0] ? mark_lock+0xbc/0x1710 [ 1673.141749][ C0] ? hash_futex+0x12/0x200 [ 1673.146162][ C0] ? futex_wake+0x155/0x490 [ 1673.150649][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1673.156604][ C0] do_futex+0x15b/0x1a60 [ 1673.160855][ C0] ? lock_acquire+0x1f1/0xad0 [ 1673.165676][ C0] ? __might_fault+0xef/0x1d0 [ 1673.170328][ C0] ? find_held_lock+0x2d/0x110 [ 1673.175069][ C0] ? futex_exit_release+0x220/0x220 [ 1673.180263][ C0] ? lock_downgrade+0x820/0x820 [ 1673.185088][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1673.191307][ C0] ? __might_fault+0x190/0x1d0 [ 1673.196044][ C0] ? _copy_to_user+0x126/0x160 [ 1673.200819][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1673.206264][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1673.211789][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1673.217680][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1673.222600][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1673.227704][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1673.232806][ C0] do_fast_syscall_32+0x7f/0x120 [ 1673.237727][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1673.242853][ C0] RIP: 0023:0xf7fd7569 [ 1673.246921][ C0] Code: Bad RIP value. [ 1673.250960][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1673.259375][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1673.267321][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1673.275266][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1673.283274][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1673.291230][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1673.304327][ C0] syz-executor.5 S29944 9889 7432 0x20020000 [ 1673.310646][ C0] Call Trace: [ 1673.313922][ C0] __schedule+0x8e1/0x1eb0 [ 1673.318430][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.323694][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1673.329149][ C0] schedule+0xd0/0x2a0 [ 1673.333197][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1673.338284][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1673.343484][ C0] futex_wait+0x1df/0x560 [ 1673.347798][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1673.352801][ C0] ? mark_lock+0xbc/0x1710 [ 1673.357194][ C0] ? mark_lock+0xbc/0x1710 [ 1673.361585][ C0] ? hash_futex+0x12/0x200 [ 1673.365979][ C0] ? futex_wake+0x155/0x490 [ 1673.370486][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1673.376470][ C0] do_futex+0x15b/0x1a60 [ 1673.380711][ C0] ? lock_acquire+0x1f1/0xad0 [ 1673.385367][ C0] ? __might_fault+0xef/0x1d0 [ 1673.390024][ C0] ? find_held_lock+0x2d/0x110 [ 1673.394770][ C0] ? futex_exit_release+0x220/0x220 [ 1673.399951][ C0] ? lock_downgrade+0x820/0x820 [ 1673.404790][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1673.411010][ C0] ? __might_fault+0x190/0x1d0 [ 1673.415801][ C0] ? _copy_to_user+0x126/0x160 [ 1673.420549][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1673.426030][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1673.431550][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1673.437627][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1673.442575][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1673.447694][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1673.452949][ C0] do_fast_syscall_32+0x7f/0x120 [ 1673.457897][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1673.463020][ C0] RIP: 0023:0xf7f53569 [ 1673.467072][ C0] Code: Bad RIP value. [ 1673.471207][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1673.479732][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1673.487692][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1673.495657][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1673.503609][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1673.511557][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1673.519520][ C0] bond1 I30952 10337 2 0x00004000 [ 1673.525835][ C0] Call Trace: [ 1673.529108][ C0] __schedule+0x8e1/0x1eb0 [ 1673.533506][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.538767][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1673.543768][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1673.548945][ C0] schedule+0xd0/0x2a0 [ 1673.553004][ C0] rescuer_thread+0x7a7/0xd30 [ 1673.557664][ C0] ? worker_thread+0x1120/0x1120 [ 1673.562580][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1673.567842][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1673.572843][ C0] ? worker_thread+0x1120/0x1120 [ 1673.577759][ C0] kthread+0x3b5/0x4a0 [ 1673.581833][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.586945][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.592045][ C0] ret_from_fork+0x1f/0x30 [ 1673.596583][ C0] bond2 I30952 10378 2 0x00004000 [ 1673.602901][ C0] Call Trace: [ 1673.606173][ C0] __schedule+0x8e1/0x1eb0 [ 1673.610581][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.615956][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1673.621024][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1673.626217][ C0] schedule+0xd0/0x2a0 [ 1673.630268][ C0] rescuer_thread+0x7a7/0xd30 [ 1673.634929][ C0] ? worker_thread+0x1120/0x1120 [ 1673.639847][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1673.645081][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1673.650137][ C0] ? worker_thread+0x1120/0x1120 [ 1673.655061][ C0] kthread+0x3b5/0x4a0 [ 1673.659114][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.664207][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.669301][ C0] ret_from_fork+0x1f/0x30 [ 1673.673703][ C0] bond3 I30952 10435 2 0x00004000 [ 1673.680970][ C0] Call Trace: [ 1673.684242][ C0] __schedule+0x8e1/0x1eb0 [ 1673.688663][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.693924][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1673.698925][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1673.704101][ C0] schedule+0xd0/0x2a0 [ 1673.708234][ C0] rescuer_thread+0x7a7/0xd30 [ 1673.712986][ C0] ? worker_thread+0x1120/0x1120 [ 1673.717904][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1673.722996][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1673.727999][ C0] ? worker_thread+0x1120/0x1120 [ 1673.732915][ C0] kthread+0x3b5/0x4a0 [ 1673.736960][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.742048][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.747138][ C0] ret_from_fork+0x1f/0x30 [ 1673.751538][ C0] bond4 I30952 10500 2 0x00004000 [ 1673.757866][ C0] Call Trace: [ 1673.761138][ C0] __schedule+0x8e1/0x1eb0 [ 1673.765534][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.770794][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1673.775799][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1673.781061][ C0] schedule+0xd0/0x2a0 [ 1673.785106][ C0] rescuer_thread+0x7a7/0xd30 [ 1673.789792][ C0] ? worker_thread+0x1120/0x1120 [ 1673.794720][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1673.799821][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1673.804830][ C0] ? worker_thread+0x1120/0x1120 [ 1673.809749][ C0] kthread+0x3b5/0x4a0 [ 1673.813800][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.818886][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.824034][ C0] ret_from_fork+0x1f/0x30 [ 1673.828435][ C0] bond5 I30408 10549 2 0x00004000 [ 1673.834751][ C0] Call Trace: [ 1673.838020][ C0] __schedule+0x8e1/0x1eb0 [ 1673.842417][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.847695][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1673.852695][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1673.857869][ C0] schedule+0xd0/0x2a0 [ 1673.861917][ C0] rescuer_thread+0x7a7/0xd30 [ 1673.866578][ C0] ? worker_thread+0x1120/0x1120 [ 1673.871496][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1673.876583][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1673.881584][ C0] ? worker_thread+0x1120/0x1120 [ 1673.886500][ C0] kthread+0x3b5/0x4a0 [ 1673.890543][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.895627][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1673.900715][ C0] ret_from_fork+0x1f/0x30 [ 1673.905114][ C0] syz-executor.2 S29744 11528 7031 0x20020000 [ 1673.911440][ C0] Call Trace: [ 1673.914725][ C0] __schedule+0x8e1/0x1eb0 [ 1673.919141][ C0] ? io_schedule_timeout+0x140/0x140 [ 1673.924481][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1673.929946][ C0] schedule+0xd0/0x2a0 [ 1673.934006][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1673.939097][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1673.944348][ C0] futex_wait+0x1df/0x560 [ 1673.948785][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1673.954596][ C0] ? mark_lock+0xbc/0x1710 [ 1673.959005][ C0] ? hash_futex+0x12/0x200 [ 1673.963405][ C0] ? futex_wake+0x155/0x490 [ 1673.967896][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1673.973857][ C0] do_futex+0x15b/0x1a60 [ 1673.978084][ C0] ? lock_acquire+0x1f1/0xad0 [ 1673.982735][ C0] ? __might_fault+0xef/0x1d0 [ 1673.987390][ C0] ? find_held_lock+0x2d/0x110 [ 1673.992160][ C0] ? futex_exit_release+0x220/0x220 [ 1673.998121][ C0] ? lock_downgrade+0x820/0x820 [ 1674.003227][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1674.009455][ C0] ? __might_fault+0x190/0x1d0 [ 1674.014217][ C0] ? _copy_to_user+0x126/0x160 [ 1674.018963][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1674.024401][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1674.029938][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1674.036503][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1674.041420][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1674.046537][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1674.051637][ C0] do_fast_syscall_32+0x7f/0x120 [ 1674.056562][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1674.061656][ C0] RIP: 0023:0xf7f91569 [ 1674.065719][ C0] Code: Bad RIP value. [ 1674.069783][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1674.078171][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1674.086116][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1674.094075][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1674.102023][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1674.109970][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1674.117931][ C0] bond1 I30952 12155 2 0x00004000 [ 1674.124252][ C0] Call Trace: [ 1674.127520][ C0] __schedule+0x8e1/0x1eb0 [ 1674.131918][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.137197][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.142215][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.147410][ C0] schedule+0xd0/0x2a0 [ 1674.151459][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.156120][ C0] ? worker_thread+0x1120/0x1120 [ 1674.161035][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.166123][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.171140][ C0] ? worker_thread+0x1120/0x1120 [ 1674.176052][ C0] kthread+0x3b5/0x4a0 [ 1674.180097][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.185190][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.190294][ C0] ret_from_fork+0x1f/0x30 [ 1674.194714][ C0] bond2 I30952 12230 2 0x00004000 [ 1674.201038][ C0] Call Trace: [ 1674.204319][ C0] __schedule+0x8e1/0x1eb0 [ 1674.208746][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.214015][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.219124][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.224307][ C0] schedule+0xd0/0x2a0 [ 1674.228363][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.233042][ C0] ? worker_thread+0x1120/0x1120 [ 1674.237960][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.243048][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.248050][ C0] ? worker_thread+0x1120/0x1120 [ 1674.252992][ C0] kthread+0x3b5/0x4a0 [ 1674.257038][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.262134][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.267231][ C0] ret_from_fork+0x1f/0x30 [ 1674.271734][ C0] bond3 I30952 12314 2 0x00004000 [ 1674.278047][ C0] Call Trace: [ 1674.281332][ C0] __schedule+0x8e1/0x1eb0 [ 1674.285732][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.291338][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.296338][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.301531][ C0] schedule+0xd0/0x2a0 [ 1674.305602][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.310263][ C0] ? worker_thread+0x1120/0x1120 [ 1674.315178][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.320263][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.325364][ C0] ? worker_thread+0x1120/0x1120 [ 1674.330357][ C0] kthread+0x3b5/0x4a0 [ 1674.334411][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.339506][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.344624][ C0] ret_from_fork+0x1f/0x30 [ 1674.349030][ C0] bond4 I30952 12390 2 0x00004000 [ 1674.355419][ C0] Call Trace: [ 1674.358697][ C0] __schedule+0x8e1/0x1eb0 [ 1674.363100][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.368406][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.373413][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.378591][ C0] schedule+0xd0/0x2a0 [ 1674.382642][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.387303][ C0] ? worker_thread+0x1120/0x1120 [ 1674.392221][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.397322][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.402326][ C0] ? worker_thread+0x1120/0x1120 [ 1674.407242][ C0] kthread+0x3b5/0x4a0 [ 1674.411287][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.416373][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.421476][ C0] ret_from_fork+0x1f/0x30 [ 1674.425895][ C0] kworker/u4:8 I24584 12408 2 0x00004000 [ 1674.432211][ C0] Workqueue: 0x0 (bat_events) [ 1674.436951][ C0] Call Trace: [ 1674.440220][ C0] __schedule+0x8e1/0x1eb0 [ 1674.444618][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.449882][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.454887][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.460061][ C0] schedule+0xd0/0x2a0 [ 1674.464130][ C0] worker_thread+0x14c/0x1120 [ 1674.468790][ C0] ? process_one_work+0x1670/0x1670 [ 1674.473975][ C0] kthread+0x3b5/0x4a0 [ 1674.478021][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.483106][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.488194][ C0] ret_from_fork+0x1f/0x30 [ 1674.492610][ C0] syz-executor.4 S29136 12491 7392 0x20020000 [ 1674.498944][ C0] Call Trace: [ 1674.502236][ C0] __schedule+0x8e1/0x1eb0 [ 1674.506634][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.511999][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1674.517456][ C0] schedule+0xd0/0x2a0 [ 1674.521503][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1674.526589][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1674.531763][ C0] ? __schedule+0x887/0x1eb0 [ 1674.536332][ C0] futex_wait+0x1df/0x560 [ 1674.540661][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1674.545664][ C0] ? mark_lock+0xbc/0x1710 [ 1674.550053][ C0] ? hash_futex+0x12/0x200 [ 1674.554461][ C0] ? futex_wake+0x155/0x490 [ 1674.558949][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1674.564907][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1674.570257][ C0] do_futex+0x15b/0x1a60 [ 1674.574480][ C0] ? lock_acquire+0x1f1/0xad0 [ 1674.579146][ C0] ? __might_fault+0xef/0x1d0 [ 1674.583800][ C0] ? find_held_lock+0x2d/0x110 [ 1674.588540][ C0] ? futex_exit_release+0x220/0x220 [ 1674.593730][ C0] ? lock_downgrade+0x820/0x820 [ 1674.598560][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1674.604789][ C0] ? __might_fault+0x190/0x1d0 [ 1674.609527][ C0] ? _copy_to_user+0x126/0x160 [ 1674.614294][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1674.619752][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1674.625298][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1674.631189][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1674.636102][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1674.641198][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1674.646286][ C0] do_fast_syscall_32+0x7f/0x120 [ 1674.651316][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1674.656406][ C0] RIP: 0023:0xf7fd7569 [ 1674.660443][ C0] Code: Bad RIP value. [ 1674.664499][ C0] RSP: 002b:00000000f5db112c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1674.672900][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1674.680866][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1674.688823][ C0] RBP: 00000000f5db1228 R08: 0000000000000000 R09: 0000000000000000 [ 1674.696776][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1674.704809][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1674.712897][ C0] bond1 I30952 12807 2 0x00004000 [ 1674.719240][ C0] Call Trace: [ 1674.722515][ C0] __schedule+0x8e1/0x1eb0 [ 1674.727000][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.732263][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.737265][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.742441][ C0] schedule+0xd0/0x2a0 [ 1674.746507][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.751168][ C0] ? worker_thread+0x1120/0x1120 [ 1674.756100][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.761187][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.766203][ C0] ? worker_thread+0x1120/0x1120 [ 1674.771127][ C0] kthread+0x3b5/0x4a0 [ 1674.775174][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.780276][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.785453][ C0] ret_from_fork+0x1f/0x30 [ 1674.789854][ C0] bond2 I30952 12852 2 0x00004000 [ 1674.796166][ C0] Call Trace: [ 1674.799433][ C0] __schedule+0x8e1/0x1eb0 [ 1674.803917][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.809178][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.814192][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.821017][ C0] schedule+0xd0/0x2a0 [ 1674.825084][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.829769][ C0] ? worker_thread+0x1120/0x1120 [ 1674.834683][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.839786][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.844786][ C0] ? worker_thread+0x1120/0x1120 [ 1674.849699][ C0] kthread+0x3b5/0x4a0 [ 1674.853744][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.858851][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.863939][ C0] ret_from_fork+0x1f/0x30 [ 1674.868335][ C0] bond3 I30952 12916 2 0x00004000 [ 1674.874644][ C0] Call Trace: [ 1674.877912][ C0] __schedule+0x8e1/0x1eb0 [ 1674.882333][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.887592][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.892609][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.897785][ C0] schedule+0xd0/0x2a0 [ 1674.901841][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.906503][ C0] ? worker_thread+0x1120/0x1120 [ 1674.911419][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.916507][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.921522][ C0] ? worker_thread+0x1120/0x1120 [ 1674.926436][ C0] kthread+0x3b5/0x4a0 [ 1674.930502][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.935588][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1674.940678][ C0] ret_from_fork+0x1f/0x30 [ 1674.945076][ C0] bond4 I30952 12984 2 0x00004000 [ 1674.951473][ C0] Call Trace: [ 1674.955184][ C0] __schedule+0x8e1/0x1eb0 [ 1674.959600][ C0] ? io_schedule_timeout+0x140/0x140 [ 1674.964861][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1674.969868][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1674.975067][ C0] schedule+0xd0/0x2a0 [ 1674.979117][ C0] rescuer_thread+0x7a7/0xd30 [ 1674.983777][ C0] ? worker_thread+0x1120/0x1120 [ 1674.988778][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1674.993875][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1674.998876][ C0] ? worker_thread+0x1120/0x1120 [ 1675.003879][ C0] kthread+0x3b5/0x4a0 [ 1675.007938][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1675.013024][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1675.018112][ C0] ret_from_fork+0x1f/0x30 [ 1675.022511][ C0] syz-executor.0 S29944 13022 6841 0x20020000 [ 1675.028902][ C0] Call Trace: [ 1675.032187][ C0] __schedule+0x8e1/0x1eb0 [ 1675.036654][ C0] ? io_schedule_timeout+0x140/0x140 [ 1675.041944][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1675.047994][ C0] schedule+0xd0/0x2a0 [ 1675.052044][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1675.057185][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1675.062362][ C0] futex_wait+0x1df/0x560 [ 1675.066670][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1675.071735][ C0] ? mark_lock+0xbc/0x1710 [ 1675.076146][ C0] ? hash_futex+0x12/0x200 [ 1675.080539][ C0] ? futex_wake+0x155/0x490 [ 1675.085035][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1675.090993][ C0] do_futex+0x15b/0x1a60 [ 1675.095218][ C0] ? lock_acquire+0x1f1/0xad0 [ 1675.099871][ C0] ? __might_fault+0xef/0x1d0 [ 1675.104524][ C0] ? find_held_lock+0x2d/0x110 [ 1675.109533][ C0] ? futex_exit_release+0x220/0x220 [ 1675.114709][ C0] ? lock_downgrade+0x820/0x820 [ 1675.119537][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1675.125786][ C0] ? __might_fault+0x190/0x1d0 [ 1675.130533][ C0] ? _copy_to_user+0x126/0x160 [ 1675.135276][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1675.140716][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1675.146239][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1675.152130][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1675.157046][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1675.162139][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1675.167228][ C0] do_fast_syscall_32+0x7f/0x120 [ 1675.172143][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1675.177230][ C0] RIP: 0023:0xf7fd1569 [ 1675.181269][ C0] Code: Bad RIP value. [ 1675.185323][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1675.193726][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1675.201707][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1675.209679][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1675.217759][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1675.225717][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1675.233680][ C0] syz-executor.2 S29944 13112 7031 0x20020000 [ 1675.239993][ C0] Call Trace: [ 1675.243282][ C0] __schedule+0x8e1/0x1eb0 [ 1675.247706][ C0] ? io_schedule_timeout+0x140/0x140 [ 1675.252967][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1675.258408][ C0] schedule+0xd0/0x2a0 [ 1675.262478][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1675.267565][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1675.272741][ C0] futex_wait+0x1df/0x560 [ 1675.277079][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1675.282084][ C0] ? mark_lock+0xbc/0x1710 [ 1675.286478][ C0] ? hash_futex+0x12/0x200 [ 1675.290871][ C0] ? futex_wake+0x155/0x490 [ 1675.295359][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1675.301316][ C0] do_futex+0x15b/0x1a60 [ 1675.305556][ C0] ? lock_acquire+0x1f1/0xad0 [ 1675.310210][ C0] ? __might_fault+0xef/0x1d0 [ 1675.314864][ C0] ? find_held_lock+0x2d/0x110 [ 1675.319611][ C0] ? futex_exit_release+0x220/0x220 [ 1675.324789][ C0] ? lock_downgrade+0x820/0x820 [ 1675.329617][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1675.335843][ C0] ? __might_fault+0x190/0x1d0 [ 1675.340603][ C0] ? _copy_to_user+0x126/0x160 [ 1675.345371][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1675.350824][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1675.356352][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1675.362227][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1675.367141][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1675.372238][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1675.377343][ C0] do_fast_syscall_32+0x7f/0x120 [ 1675.382276][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1675.387434][ C0] RIP: 0023:0xf7f91569 [ 1675.391479][ C0] Code: Bad RIP value. [ 1675.395529][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1675.403978][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1675.411930][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1675.419905][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1675.427898][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1675.435852][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1675.443834][ C0] syz-executor.0 D26808 13620 6841 0x20024000 [ 1675.450194][ C0] Call Trace: [ 1675.453471][ C0] __schedule+0x8e1/0x1eb0 [ 1675.457900][ C0] ? io_schedule_timeout+0x140/0x140 [ 1675.463170][ C0] schedule+0xd0/0x2a0 [ 1675.467221][ C0] schedule_timeout+0x1d8/0x250 [ 1675.472063][ C0] ? usleep_range+0x170/0x170 [ 1675.476719][ C0] ? lock_downgrade+0x820/0x820 [ 1675.481603][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1675.486607][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1675.491790][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1675.497841][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1675.502860][ C0] wait_for_completion_killable+0x162/0x310 [ 1675.508727][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1675.513733][ C0] ? wait_for_completion_killable_timeout+0x2e0/0x2e0 [ 1675.520470][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1675.526605][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1675.531611][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1675.536700][ C0] _do_fork+0x5d7/0xa70 [ 1675.540850][ C0] ? copy_init_mm+0x20/0x20 [ 1675.545336][ C0] ? sched_clock+0x2a/0x40 [ 1675.549729][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1675.554554][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1675.559383][ C0] __do_compat_sys_ia32_clone+0xbe/0x110 [ 1675.564990][ C0] ? pci_biosrom_size+0x90/0x90 [ 1675.569827][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1675.574924][ C0] ? __x32_compat_sys_ia32_mmap+0x110/0x110 [ 1675.580795][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1675.585995][ C0] do_fast_syscall_32+0x7f/0x120 [ 1675.590925][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1675.596014][ C0] RIP: 0023:0xf7fd1569 [ 1675.600051][ C0] Code: Bad RIP value. [ 1675.604088][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 1675.612489][ C0] RAX: ffffffffffffffda RBX: 00000000e1004d7c RCX: 0000000000000000 [ 1675.620436][ C0] RDX: 0000000099999999 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1675.628384][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1675.636330][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1675.644276][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1675.652252][ C0] syz-executor.0 S29904 13642 13620 0x20020000 [ 1675.658564][ C0] Call Trace: [ 1675.661852][ C0] __schedule+0x8e1/0x1eb0 [ 1675.666248][ C0] ? io_schedule_timeout+0x140/0x140 [ 1675.675677][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1675.681117][ C0] schedule+0xd0/0x2a0 [ 1675.685161][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1675.690264][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1675.695440][ C0] futex_wait+0x1df/0x560 [ 1675.699747][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1675.704749][ C0] ? mark_lock+0xbc/0x1710 [ 1675.709140][ C0] ? hash_futex+0x12/0x200 [ 1675.713532][ C0] ? futex_wake+0x155/0x490 [ 1675.718024][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1675.723980][ C0] do_futex+0x15b/0x1a60 [ 1675.728203][ C0] ? lock_acquire+0x1f1/0xad0 [ 1675.732857][ C0] ? __might_fault+0xef/0x1d0 [ 1675.737524][ C0] ? find_held_lock+0x2d/0x110 [ 1675.742263][ C0] ? futex_exit_release+0x220/0x220 [ 1675.747435][ C0] ? lock_downgrade+0x820/0x820 [ 1675.752265][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1675.758493][ C0] ? __might_fault+0x190/0x1d0 [ 1675.763231][ C0] ? _copy_to_user+0x126/0x160 [ 1675.767991][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1675.773429][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1675.778948][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1675.784835][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1675.789924][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1675.795015][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1675.800102][ C0] do_fast_syscall_32+0x7f/0x120 [ 1675.805034][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1675.810119][ C0] RIP: 0023:0xf7fd1569 [ 1675.814155][ C0] Code: Bad RIP value. [ 1675.818194][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1675.826579][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1675.834524][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1675.842474][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1675.850436][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1675.858400][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1675.866373][ C0] syz-executor.0 S29024 13746 6841 0x20020000 [ 1675.872685][ C0] Call Trace: [ 1675.875957][ C0] __schedule+0x8e1/0x1eb0 [ 1675.880370][ C0] ? io_schedule_timeout+0x140/0x140 [ 1675.885644][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1675.891084][ C0] schedule+0xd0/0x2a0 [ 1675.895129][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1675.900225][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1675.905397][ C0] futex_wait+0x1df/0x560 [ 1675.909701][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1675.914701][ C0] ? mark_lock+0xbc/0x1710 [ 1675.919090][ C0] ? hash_futex+0x12/0x200 [ 1675.923478][ C0] ? futex_wake+0x155/0x490 [ 1675.927976][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1675.933943][ C0] do_futex+0x15b/0x1a60 [ 1675.938165][ C0] ? lock_acquire+0x1f1/0xad0 [ 1675.942815][ C0] ? __might_fault+0xef/0x1d0 [ 1675.947466][ C0] ? find_held_lock+0x2d/0x110 [ 1675.952206][ C0] ? futex_exit_release+0x220/0x220 [ 1675.957381][ C0] ? lock_downgrade+0x820/0x820 [ 1675.962209][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1675.968438][ C0] ? __might_fault+0x190/0x1d0 [ 1675.973175][ C0] ? _copy_to_user+0x126/0x160 [ 1675.977917][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1675.983374][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1675.988893][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1675.994761][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1675.999678][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1676.004781][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1676.009876][ C0] do_fast_syscall_32+0x7f/0x120 [ 1676.014804][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1676.019888][ C0] RIP: 0023:0xf7fd1569 [ 1676.023934][ C0] Code: Bad RIP value. [ 1676.027983][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1676.036383][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1676.044363][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1676.052317][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1676.060275][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1676.068829][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.076791][ C0] syz-executor.0 S29904 13780 6841 0x20020000 [ 1676.083132][ C0] Call Trace: [ 1676.086401][ C0] __schedule+0x8e1/0x1eb0 [ 1676.090798][ C0] ? io_schedule_timeout+0x140/0x140 [ 1676.096056][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1676.101494][ C0] schedule+0xd0/0x2a0 [ 1676.105540][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1676.110624][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1676.115800][ C0] futex_wait+0x1df/0x560 [ 1676.120117][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1676.125139][ C0] ? mark_lock+0xbc/0x1710 [ 1676.129529][ C0] ? hash_futex+0x12/0x200 [ 1676.133919][ C0] ? futex_wake+0x155/0x490 [ 1676.138418][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1676.144397][ C0] do_futex+0x15b/0x1a60 [ 1676.148646][ C0] ? lock_acquire+0x1f1/0xad0 [ 1676.153331][ C0] ? __might_fault+0xef/0x1d0 [ 1676.157988][ C0] ? find_held_lock+0x2d/0x110 [ 1676.162737][ C0] ? futex_exit_release+0x220/0x220 [ 1676.167918][ C0] ? lock_downgrade+0x820/0x820 [ 1676.172750][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1676.178986][ C0] ? __might_fault+0x190/0x1d0 [ 1676.183726][ C0] ? _copy_to_user+0x126/0x160 [ 1676.188467][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1676.193906][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1676.199442][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1676.205313][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1676.210228][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1676.215330][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1676.220417][ C0] do_fast_syscall_32+0x7f/0x120 [ 1676.225350][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1676.230449][ C0] RIP: 0023:0xf7fd1569 [ 1676.234486][ C0] Code: Bad RIP value. [ 1676.238527][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1676.246932][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1676.255484][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1676.263429][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1676.271374][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1676.279317][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.287290][ C0] syz-executor.0 S29024 13828 6841 0x20020000 [ 1676.293598][ C0] Call Trace: [ 1676.296878][ C0] __schedule+0x8e1/0x1eb0 [ 1676.301274][ C0] ? io_schedule_timeout+0x140/0x140 [ 1676.306534][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1676.311993][ C0] schedule+0xd0/0x2a0 [ 1676.316057][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1676.321196][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1676.326378][ C0] futex_wait+0x1df/0x560 [ 1676.330685][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1676.335688][ C0] ? mark_lock+0xbc/0x1710 [ 1676.340075][ C0] ? hash_futex+0x12/0x200 [ 1676.344464][ C0] ? futex_wake+0x155/0x490 [ 1676.348951][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1676.354904][ C0] do_futex+0x15b/0x1a60 [ 1676.359123][ C0] ? lock_acquire+0x1f1/0xad0 [ 1676.363798][ C0] ? __might_fault+0xef/0x1d0 [ 1676.368472][ C0] ? find_held_lock+0x2d/0x110 [ 1676.373225][ C0] ? futex_exit_release+0x220/0x220 [ 1676.378409][ C0] ? lock_downgrade+0x820/0x820 [ 1676.383258][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1676.389485][ C0] ? __might_fault+0x190/0x1d0 [ 1676.394235][ C0] ? _copy_to_user+0x126/0x160 [ 1676.398980][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1676.404423][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1676.409948][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1676.415822][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1676.420738][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1676.425831][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1676.430953][ C0] do_fast_syscall_32+0x7f/0x120 [ 1676.435868][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1676.440954][ C0] RIP: 0023:0xf7fd1569 [ 1676.445120][ C0] Code: Bad RIP value. [ 1676.449158][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1676.457551][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1676.465498][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1676.473451][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1676.481396][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1676.489341][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.497308][ C0] syz-executor.4 S29944 14115 7392 0x20020000 [ 1676.503627][ C0] Call Trace: [ 1676.506892][ C0] __schedule+0x8e1/0x1eb0 [ 1676.511382][ C0] ? io_schedule_timeout+0x140/0x140 [ 1676.516641][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1676.522077][ C0] schedule+0xd0/0x2a0 [ 1676.526121][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1676.531205][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1676.536379][ C0] futex_wait+0x1df/0x560 [ 1676.540683][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1676.545679][ C0] ? mark_lock+0xbc/0x1710 [ 1676.550070][ C0] ? mark_lock+0xbc/0x1710 [ 1676.554472][ C0] ? hash_futex+0x12/0x200 [ 1676.558870][ C0] ? futex_wake+0x155/0x490 [ 1676.563363][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1676.569326][ C0] do_futex+0x15b/0x1a60 [ 1676.573544][ C0] ? lock_acquire+0x1f1/0xad0 [ 1676.578208][ C0] ? __might_fault+0xef/0x1d0 [ 1676.582856][ C0] ? find_held_lock+0x2d/0x110 [ 1676.587594][ C0] ? futex_exit_release+0x220/0x220 [ 1676.592768][ C0] ? lock_downgrade+0x820/0x820 [ 1676.597604][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1676.603820][ C0] ? __might_fault+0x190/0x1d0 [ 1676.608557][ C0] ? _copy_to_user+0x126/0x160 [ 1676.613297][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1676.618733][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1676.624264][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1676.630131][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1676.635044][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1676.640152][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1676.645239][ C0] do_fast_syscall_32+0x7f/0x120 [ 1676.650151][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1676.655258][ C0] RIP: 0023:0xf7fd7569 [ 1676.659295][ C0] Code: Bad RIP value. [ 1676.663332][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1676.671714][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1676.679659][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1676.687604][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1676.695559][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1676.703503][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.711458][ C0] syz-executor.4 S29944 14117 7392 0x20020000 [ 1676.717768][ C0] Call Trace: [ 1676.721034][ C0] __schedule+0x8e1/0x1eb0 [ 1676.725431][ C0] ? io_schedule_timeout+0x140/0x140 [ 1676.730688][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1676.736135][ C0] schedule+0xd0/0x2a0 [ 1676.740198][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1676.745286][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1676.750466][ C0] futex_wait+0x1df/0x560 [ 1676.754772][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1676.759879][ C0] ? mark_lock+0xbc/0x1710 [ 1676.764271][ C0] ? mark_lock+0xbc/0x1710 [ 1676.768688][ C0] ? hash_futex+0x12/0x200 [ 1676.773088][ C0] ? futex_wake+0x155/0x490 [ 1676.777578][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1676.783539][ C0] do_futex+0x15b/0x1a60 [ 1676.787798][ C0] ? lock_acquire+0x1f1/0xad0 [ 1676.792623][ C0] ? __might_fault+0xef/0x1d0 [ 1676.797332][ C0] ? find_held_lock+0x2d/0x110 [ 1676.802072][ C0] ? futex_exit_release+0x220/0x220 [ 1676.807249][ C0] ? lock_downgrade+0x820/0x820 [ 1676.812074][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1676.818296][ C0] ? __might_fault+0x190/0x1d0 [ 1676.823036][ C0] ? _copy_to_user+0x126/0x160 [ 1676.827779][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1676.833257][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1676.838776][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1676.844651][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1676.849563][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1676.854650][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1676.859780][ C0] do_fast_syscall_32+0x7f/0x120 [ 1676.864695][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1676.869794][ C0] RIP: 0023:0xf7fd7569 [ 1676.873829][ C0] Code: Bad RIP value. [ 1676.877868][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1676.886250][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1676.894194][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1676.902139][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1676.910538][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1676.918492][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.926452][ C0] syz-executor.4 S29944 14132 7392 0x20020000 [ 1676.932762][ C0] Call Trace: [ 1676.936027][ C0] __schedule+0x8e1/0x1eb0 [ 1676.940425][ C0] ? io_schedule_timeout+0x140/0x140 [ 1676.945682][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1676.951119][ C0] schedule+0xd0/0x2a0 [ 1676.955177][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1676.960261][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1676.965437][ C0] futex_wait+0x1df/0x560 [ 1676.969747][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1676.974762][ C0] ? mark_lock+0xbc/0x1710 [ 1676.979153][ C0] ? mark_lock+0xbc/0x1710 [ 1676.983548][ C0] ? hash_futex+0x12/0x200 [ 1676.987938][ C0] ? futex_wake+0x155/0x490 [ 1676.992430][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1676.998397][ C0] do_futex+0x15b/0x1a60 [ 1677.002625][ C0] ? lock_acquire+0x1f1/0xad0 [ 1677.007275][ C0] ? __might_fault+0xef/0x1d0 [ 1677.011927][ C0] ? find_held_lock+0x2d/0x110 [ 1677.016677][ C0] ? futex_exit_release+0x220/0x220 [ 1677.021851][ C0] ? lock_downgrade+0x820/0x820 [ 1677.026681][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1677.032914][ C0] ? __might_fault+0x190/0x1d0 [ 1677.037652][ C0] ? _copy_to_user+0x126/0x160 [ 1677.042402][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1677.047856][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1677.053477][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1677.059347][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1677.064257][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1677.069344][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1677.074436][ C0] do_fast_syscall_32+0x7f/0x120 [ 1677.079358][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1677.084454][ C0] RIP: 0023:0xf7fd7569 [ 1677.088488][ C0] Code: Bad RIP value. [ 1677.092536][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1677.100928][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1677.108873][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1677.116818][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1677.124762][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1677.132718][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1677.140673][ C0] syz-executor.4 S29944 14154 7392 0x20020000 [ 1677.146990][ C0] Call Trace: [ 1677.150265][ C0] __schedule+0x8e1/0x1eb0 [ 1677.154659][ C0] ? io_schedule_timeout+0x140/0x140 [ 1677.159928][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1677.165366][ C0] schedule+0xd0/0x2a0 [ 1677.169414][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1677.174495][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1677.179683][ C0] futex_wait+0x1df/0x560 [ 1677.183988][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1677.188986][ C0] ? mark_lock+0xbc/0x1710 [ 1677.193384][ C0] ? mark_lock+0xbc/0x1710 [ 1677.197773][ C0] ? hash_futex+0x12/0x200 [ 1677.202162][ C0] ? futex_wake+0x155/0x490 [ 1677.206648][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1677.212822][ C0] do_futex+0x15b/0x1a60 [ 1677.217049][ C0] ? lock_acquire+0x1f1/0xad0 [ 1677.221702][ C0] ? __might_fault+0xef/0x1d0 [ 1677.226356][ C0] ? find_held_lock+0x2d/0x110 [ 1677.231100][ C0] ? futex_exit_release+0x220/0x220 [ 1677.236280][ C0] ? lock_downgrade+0x820/0x820 [ 1677.241110][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1677.247440][ C0] ? __might_fault+0x190/0x1d0 [ 1677.252195][ C0] ? _copy_to_user+0x126/0x160 [ 1677.256972][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1677.262414][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1677.267965][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1677.273837][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1677.278749][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1677.283838][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1677.288942][ C0] do_fast_syscall_32+0x7f/0x120 [ 1677.293855][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1677.298938][ C0] RIP: 0023:0xf7fd7569 [ 1677.302985][ C0] Code: Bad RIP value. [ 1677.307024][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1677.315429][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1677.323437][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1677.331428][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1677.339375][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1677.347340][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1677.355341][ C0] syz-executor.4 S29944 14165 7392 0x20020000 [ 1677.361684][ C0] Call Trace: [ 1677.364962][ C0] __schedule+0x8e1/0x1eb0 [ 1677.369358][ C0] ? io_schedule_timeout+0x140/0x140 [ 1677.374619][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1677.380056][ C0] schedule+0xd0/0x2a0 [ 1677.384106][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1677.389206][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1677.394382][ C0] futex_wait+0x1df/0x560 [ 1677.398687][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1677.403689][ C0] ? mark_lock+0xbc/0x1710 [ 1677.408080][ C0] ? mark_lock+0xbc/0x1710 [ 1677.412473][ C0] ? hash_futex+0x12/0x200 [ 1677.416879][ C0] ? futex_wake+0x155/0x490 [ 1677.421364][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1677.427318][ C0] do_futex+0x15b/0x1a60 [ 1677.431538][ C0] ? lock_acquire+0x1f1/0xad0 [ 1677.436189][ C0] ? __might_fault+0xef/0x1d0 [ 1677.440838][ C0] ? find_held_lock+0x2d/0x110 [ 1677.445575][ C0] ? futex_exit_release+0x220/0x220 [ 1677.450749][ C0] ? lock_downgrade+0x820/0x820 [ 1677.455579][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1677.461802][ C0] ? __might_fault+0x190/0x1d0 [ 1677.466538][ C0] ? _copy_to_user+0x126/0x160 [ 1677.471279][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1677.476713][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1677.482236][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1677.488107][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1677.493017][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1677.498106][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1677.503207][ C0] do_fast_syscall_32+0x7f/0x120 [ 1677.508122][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1677.513205][ C0] RIP: 0023:0xf7fd7569 [ 1677.517241][ C0] Code: Bad RIP value. [ 1677.521292][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1677.529688][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1677.537634][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1677.545577][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1677.553521][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1677.561482][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1677.569452][ C0] syz-executor.3 S29944 14572 7114 0x20020000 [ 1677.575773][ C0] Call Trace: [ 1677.579042][ C0] __schedule+0x8e1/0x1eb0 [ 1677.583438][ C0] ? io_schedule_timeout+0x140/0x140 [ 1677.588712][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1677.594148][ C0] schedule+0xd0/0x2a0 [ 1677.598191][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1677.603277][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1677.608452][ C0] futex_wait+0x1df/0x560 [ 1677.612756][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1677.617765][ C0] ? mark_lock+0xbc/0x1710 [ 1677.622155][ C0] ? mark_lock+0xbc/0x1710 [ 1677.626561][ C0] ? hash_futex+0x12/0x200 [ 1677.630953][ C0] ? futex_wake+0x155/0x490 [ 1677.635440][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1677.641413][ C0] do_futex+0x15b/0x1a60 [ 1677.645633][ C0] ? lock_acquire+0x1f1/0xad0 [ 1677.650294][ C0] ? __might_fault+0xef/0x1d0 [ 1677.654944][ C0] ? find_held_lock+0x2d/0x110 [ 1677.659682][ C0] ? futex_exit_release+0x220/0x220 [ 1677.664854][ C0] ? lock_downgrade+0x820/0x820 [ 1677.669677][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1677.675895][ C0] ? __might_fault+0x190/0x1d0 [ 1677.680634][ C0] ? _copy_to_user+0x126/0x160 [ 1677.685732][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1677.691169][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1677.696686][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1677.702553][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1677.707464][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1677.712551][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1677.717634][ C0] do_fast_syscall_32+0x7f/0x120 [ 1677.722561][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1677.727733][ C0] RIP: 0023:0xf7f6d569 [ 1677.731769][ C0] Code: Bad RIP value. [ 1677.735808][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1677.744207][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1677.752150][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1677.760094][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1677.768040][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1677.775985][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1677.783954][ C0] syz-executor.3 S29944 14793 7114 0x20020000 [ 1677.790260][ C0] Call Trace: [ 1677.793541][ C0] __schedule+0x8e1/0x1eb0 [ 1677.797948][ C0] ? io_schedule_timeout+0x140/0x140 [ 1677.803208][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1677.808644][ C0] schedule+0xd0/0x2a0 [ 1677.812687][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1677.817793][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1677.822976][ C0] futex_wait+0x1df/0x560 [ 1677.827282][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1677.832279][ C0] ? mark_lock+0xbc/0x1710 [ 1677.836668][ C0] ? hash_futex+0x12/0x200 [ 1677.841060][ C0] ? futex_wake+0x155/0x490 [ 1677.845544][ C0] ? do_wp_page+0x8e7/0x1950 [ 1677.850128][ C0] do_futex+0x15b/0x1a60 [ 1677.854345][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1677.859515][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1677.864338][ C0] ? do_wp_page+0x16a/0x1950 [ 1677.868903][ C0] ? futex_exit_release+0x220/0x220 [ 1677.874245][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1677.879603][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1677.884521][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1677.889521][ C0] ? find_held_lock+0x2d/0x110 [ 1677.894261][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1677.899431][ C0] ? __up_read+0x1a1/0x7b0 [ 1677.903823][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1677.909259][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1677.914865][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1677.919777][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1677.924691][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1677.929779][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1677.934866][ C0] do_fast_syscall_32+0x7f/0x120 [ 1677.939778][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1677.944860][ C0] RIP: 0023:0xf7f6d569 [ 1677.948896][ C0] Code: Bad RIP value. [ 1677.952931][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1677.961313][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1677.969257][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1677.977214][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1677.985162][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1677.993107][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1678.001063][ C0] syz-executor.3 S29944 14984 7114 0x20020000 [ 1678.007545][ C0] Call Trace: [ 1678.010813][ C0] __schedule+0x8e1/0x1eb0 [ 1678.015215][ C0] ? io_schedule_timeout+0x140/0x140 [ 1678.020480][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1678.025926][ C0] schedule+0xd0/0x2a0 [ 1678.029970][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1678.035055][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1678.040228][ C0] futex_wait+0x1df/0x560 [ 1678.044538][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1678.049540][ C0] ? mark_lock+0xbc/0x1710 [ 1678.053932][ C0] ? mark_lock+0xbc/0x1710 [ 1678.058323][ C0] ? hash_futex+0x12/0x200 [ 1678.062714][ C0] ? futex_wake+0x155/0x490 [ 1678.067200][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1678.073156][ C0] do_futex+0x15b/0x1a60 [ 1678.077377][ C0] ? lock_acquire+0x1f1/0xad0 [ 1678.082027][ C0] ? __might_fault+0xef/0x1d0 [ 1678.086679][ C0] ? find_held_lock+0x2d/0x110 [ 1678.091418][ C0] ? futex_exit_release+0x220/0x220 [ 1678.096679][ C0] ? lock_downgrade+0x820/0x820 [ 1678.101506][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1678.107742][ C0] ? __might_fault+0x190/0x1d0 [ 1678.112480][ C0] ? _copy_to_user+0x126/0x160 [ 1678.117221][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1678.122658][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1678.128181][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1678.134058][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1678.138970][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1678.144224][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1678.149322][ C0] do_fast_syscall_32+0x7f/0x120 [ 1678.154240][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1678.159328][ C0] RIP: 0023:0xf7f6d569 [ 1678.163372][ C0] Code: Bad RIP value. [ 1678.167414][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1678.175796][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1678.183741][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1678.191697][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1678.199641][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1678.207585][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1678.216152][ C0] syz-executor.4 S29944 15009 7392 0x20020000 [ 1678.222459][ C0] Call Trace: [ 1678.225727][ C0] __schedule+0x8e1/0x1eb0 [ 1678.230121][ C0] ? io_schedule_timeout+0x140/0x140 [ 1678.235381][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1678.241597][ C0] schedule+0xd0/0x2a0 [ 1678.245656][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1678.250744][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1678.255916][ C0] futex_wait+0x1df/0x560 [ 1678.260222][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1678.265220][ C0] ? mark_lock+0xbc/0x1710 [ 1678.269619][ C0] ? mark_lock+0xbc/0x1710 [ 1678.274012][ C0] ? hash_futex+0x12/0x200 [ 1678.278578][ C0] ? futex_wake+0x155/0x490 [ 1678.283065][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1678.289026][ C0] do_futex+0x15b/0x1a60 [ 1678.293246][ C0] ? lock_acquire+0x1f1/0xad0 [ 1678.297896][ C0] ? __might_fault+0xef/0x1d0 [ 1678.302545][ C0] ? find_held_lock+0x2d/0x110 [ 1678.307291][ C0] ? futex_exit_release+0x220/0x220 [ 1678.312465][ C0] ? lock_downgrade+0x820/0x820 [ 1678.317289][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1678.323510][ C0] ? __might_fault+0x190/0x1d0 [ 1678.328247][ C0] ? _copy_to_user+0x126/0x160 [ 1678.332989][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1678.338462][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1678.343991][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1678.349858][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1678.354768][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1678.359870][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1678.365044][ C0] do_fast_syscall_32+0x7f/0x120 [ 1678.370367][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1678.375465][ C0] RIP: 0023:0xf7fd7569 [ 1678.379502][ C0] Code: Bad RIP value. [ 1678.383543][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1678.392015][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1678.399962][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1678.407995][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1678.415939][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1678.423931][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1678.431934][ C0] syz-executor.0 S29592 15239 6841 0x20020000 [ 1678.438261][ C0] Call Trace: [ 1678.441549][ C0] __schedule+0x8e1/0x1eb0 [ 1678.445959][ C0] ? io_schedule_timeout+0x140/0x140 [ 1678.451242][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1678.456680][ C0] schedule+0xd0/0x2a0 [ 1678.460727][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1678.465812][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1678.470986][ C0] futex_wait+0x1df/0x560 [ 1678.475316][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1678.480321][ C0] ? mark_lock+0xbc/0x1710 [ 1678.484722][ C0] ? hash_futex+0x12/0x200 [ 1678.489113][ C0] ? futex_wake+0x155/0x490 [ 1678.493600][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1678.499557][ C0] do_futex+0x15b/0x1a60 [ 1678.503777][ C0] ? lock_acquire+0x1f1/0xad0 [ 1678.508427][ C0] ? __might_fault+0xef/0x1d0 [ 1678.513078][ C0] ? find_held_lock+0x2d/0x110 [ 1678.517837][ C0] ? futex_exit_release+0x220/0x220 [ 1678.523008][ C0] ? lock_downgrade+0x820/0x820 [ 1678.527835][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1678.534052][ C0] ? __might_fault+0x190/0x1d0 [ 1678.538789][ C0] ? _copy_to_user+0x126/0x160 [ 1678.543621][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1678.549057][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1678.554576][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1678.560442][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1678.565391][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1678.570497][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1678.575594][ C0] do_fast_syscall_32+0x7f/0x120 [ 1678.580514][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1678.585637][ C0] RIP: 0023:0xf7fd1569 [ 1678.589676][ C0] Code: Bad RIP value. [ 1678.593716][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1678.602107][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1678.610056][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1678.618002][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1678.625987][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1678.633932][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1678.641936][ C0] syz-executor.0 S29944 15269 6841 0x20020000 [ 1678.648246][ C0] Call Trace: [ 1678.651864][ C0] __schedule+0x8e1/0x1eb0 [ 1678.656271][ C0] ? io_schedule_timeout+0x140/0x140 [ 1678.661532][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1678.666987][ C0] schedule+0xd0/0x2a0 [ 1678.671034][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1678.676137][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1678.681327][ C0] futex_wait+0x1df/0x560 [ 1678.685632][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1678.690633][ C0] ? wake_up_q+0xa3/0x100 [ 1678.694949][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1678.700121][ C0] ? futex_wake+0x155/0x490 [ 1678.704606][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1678.710562][ C0] do_futex+0x15b/0x1a60 [ 1678.714782][ C0] ? lock_acquire+0x1f1/0xad0 [ 1678.719432][ C0] ? __might_fault+0xef/0x1d0 [ 1678.724081][ C0] ? find_held_lock+0x2d/0x110 [ 1678.728818][ C0] ? futex_exit_release+0x220/0x220 [ 1678.734011][ C0] ? lock_downgrade+0x820/0x820 [ 1678.738846][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1678.745064][ C0] ? __might_fault+0x190/0x1d0 [ 1678.749803][ C0] ? _copy_to_user+0x126/0x160 [ 1678.754555][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1678.759991][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1678.765511][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1678.771378][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1678.776292][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1678.781726][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1678.786822][ C0] do_fast_syscall_32+0x7f/0x120 [ 1678.791734][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1678.796818][ C0] RIP: 0023:0xf7fd1569 [ 1678.800853][ C0] Code: Bad RIP value. [ 1678.804891][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1678.813273][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1678.821218][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1678.829161][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1678.837105][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1678.845050][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1678.853004][ C0] syz-executor.3 S29024 15272 7114 0x20020000 [ 1678.859310][ C0] Call Trace: [ 1678.862581][ C0] __schedule+0x8e1/0x1eb0 [ 1678.866976][ C0] ? io_schedule_timeout+0x140/0x140 [ 1678.872235][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1678.877670][ C0] schedule+0xd0/0x2a0 [ 1678.881715][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1678.886801][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1678.891975][ C0] futex_wait+0x1df/0x560 [ 1678.896280][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1678.901277][ C0] ? mark_lock+0xbc/0x1710 [ 1678.905671][ C0] ? mark_lock+0xbc/0x1710 [ 1678.910060][ C0] ? hash_futex+0x12/0x200 [ 1678.914624][ C0] ? futex_wake+0x155/0x490 [ 1678.919111][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1678.925067][ C0] do_futex+0x15b/0x1a60 [ 1678.929289][ C0] ? lock_acquire+0x1f1/0xad0 [ 1678.933939][ C0] ? __might_fault+0xef/0x1d0 [ 1678.938587][ C0] ? find_held_lock+0x2d/0x110 [ 1678.943337][ C0] ? futex_exit_release+0x220/0x220 [ 1678.948511][ C0] ? lock_downgrade+0x820/0x820 [ 1678.953335][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1678.959552][ C0] ? __might_fault+0x190/0x1d0 [ 1678.964304][ C0] ? _copy_to_user+0x126/0x160 [ 1678.969051][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1678.974498][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1678.980104][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1678.985978][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1678.990890][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1678.995979][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1679.001063][ C0] do_fast_syscall_32+0x7f/0x120 [ 1679.005977][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1679.011060][ C0] RIP: 0023:0xf7f6d569 [ 1679.015098][ C0] Code: Bad RIP value. [ 1679.019136][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1679.027517][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1679.035460][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1679.043403][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1679.051345][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1679.059301][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1679.067253][ C0] syz-executor.4 S29944 15280 7392 0x20020000 [ 1679.073559][ C0] Call Trace: [ 1679.076824][ C0] __schedule+0x8e1/0x1eb0 [ 1679.081219][ C0] ? io_schedule_timeout+0x140/0x140 [ 1679.086477][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1679.091922][ C0] schedule+0xd0/0x2a0 [ 1679.095966][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1679.101049][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1679.106222][ C0] futex_wait+0x1df/0x560 [ 1679.110539][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1679.115547][ C0] ? mark_lock+0xbc/0x1710 [ 1679.120284][ C0] ? mark_lock+0xbc/0x1710 [ 1679.124682][ C0] ? hash_futex+0x12/0x200 [ 1679.129071][ C0] ? futex_wake+0x155/0x490 [ 1679.133556][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1679.139508][ C0] do_futex+0x15b/0x1a60 [ 1679.143733][ C0] ? lock_acquire+0x1f1/0xad0 [ 1679.148386][ C0] ? __might_fault+0xef/0x1d0 [ 1679.153037][ C0] ? find_held_lock+0x2d/0x110 [ 1679.157774][ C0] ? futex_exit_release+0x220/0x220 [ 1679.162972][ C0] ? lock_downgrade+0x820/0x820 [ 1679.167805][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1679.174027][ C0] ? __might_fault+0x190/0x1d0 [ 1679.178767][ C0] ? _copy_to_user+0x126/0x160 [ 1679.183511][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1679.188961][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1679.194483][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1679.200385][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1679.205320][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1679.210459][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1679.215555][ C0] do_fast_syscall_32+0x7f/0x120 [ 1679.220478][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1679.225566][ C0] RIP: 0023:0xf7fd7569 [ 1679.229606][ C0] Code: Bad RIP value. [ 1679.233680][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1679.242114][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1679.252845][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1679.260792][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1679.268749][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1679.276695][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1679.284653][ C0] syz-executor.0 S29944 15291 6841 0x20020000 [ 1679.290964][ C0] Call Trace: [ 1679.294247][ C0] __schedule+0x8e1/0x1eb0 [ 1679.298643][ C0] ? io_schedule_timeout+0x140/0x140 [ 1679.303905][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1679.309353][ C0] schedule+0xd0/0x2a0 [ 1679.313400][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1679.318484][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1679.323670][ C0] futex_wait+0x1df/0x560 [ 1679.327998][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1679.333023][ C0] ? wake_up_q+0xa3/0x100 [ 1679.337327][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1679.342515][ C0] ? futex_wake+0x155/0x490 [ 1679.346999][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1679.352954][ C0] do_futex+0x15b/0x1a60 [ 1679.357189][ C0] ? lock_acquire+0x1f1/0xad0 [ 1679.361838][ C0] ? __might_fault+0xef/0x1d0 [ 1679.366495][ C0] ? find_held_lock+0x2d/0x110 [ 1679.371304][ C0] ? futex_exit_release+0x220/0x220 [ 1679.376498][ C0] ? lock_downgrade+0x820/0x820 [ 1679.381379][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1679.387689][ C0] ? __might_fault+0x190/0x1d0 [ 1679.392427][ C0] ? _copy_to_user+0x126/0x160 [ 1679.397170][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1679.402608][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1679.407521][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1679.413044][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1679.417979][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1679.423069][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1679.428180][ C0] do_fast_syscall_32+0x7f/0x120 [ 1679.433117][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1679.438209][ C0] RIP: 0023:0xf7fd1569 [ 1679.442252][ C0] Code: Bad RIP value. [ 1679.446293][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1679.454718][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1679.462676][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1679.470622][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1679.478712][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1679.486666][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1679.494634][ C0] syz-executor.4 S29944 15352 7392 0x20020000 [ 1679.500952][ C0] Call Trace: [ 1679.504224][ C0] __schedule+0x8e1/0x1eb0 [ 1679.508619][ C0] ? io_schedule_timeout+0x140/0x140 [ 1679.513879][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1679.519316][ C0] schedule+0xd0/0x2a0 [ 1679.523361][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1679.528744][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1679.534100][ C0] futex_wait+0x1df/0x560 [ 1679.538414][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1679.543421][ C0] ? mark_lock+0xbc/0x1710 [ 1679.547813][ C0] ? mark_lock+0xbc/0x1710 [ 1679.552203][ C0] ? hash_futex+0x12/0x200 [ 1679.556594][ C0] ? futex_wake+0x155/0x490 [ 1679.561426][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1679.567378][ C0] do_futex+0x15b/0x1a60 [ 1679.571600][ C0] ? lock_acquire+0x1f1/0xad0 [ 1679.576293][ C0] ? __might_fault+0xef/0x1d0 [ 1679.580981][ C0] ? find_held_lock+0x2d/0x110 [ 1679.585722][ C0] ? futex_exit_release+0x220/0x220 [ 1679.590983][ C0] ? lock_downgrade+0x820/0x820 [ 1679.595808][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1679.602025][ C0] ? __might_fault+0x190/0x1d0 [ 1679.606768][ C0] ? _copy_to_user+0x126/0x160 [ 1679.611509][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1679.616943][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1679.622460][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1679.628342][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1679.633253][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1679.638354][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1679.643437][ C0] do_fast_syscall_32+0x7f/0x120 [ 1679.648349][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1679.653434][ C0] RIP: 0023:0xf7fd7569 [ 1679.657482][ C0] Code: Bad RIP value. [ 1679.661519][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1679.669904][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1679.677848][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1679.685792][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1679.693736][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1679.701680][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1679.709639][ C0] syz-executor.3 S29944 15354 7114 0x20020000 [ 1679.715947][ C0] Call Trace: [ 1679.719211][ C0] __schedule+0x8e1/0x1eb0 [ 1679.723605][ C0] ? io_schedule_timeout+0x140/0x140 [ 1679.728865][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1679.734323][ C0] schedule+0xd0/0x2a0 [ 1679.738379][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1679.743462][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1679.748635][ C0] futex_wait+0x1df/0x560 [ 1679.752941][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1679.757940][ C0] ? mark_lock+0xbc/0x1710 [ 1679.762330][ C0] ? mark_lock+0xbc/0x1710 [ 1679.766716][ C0] ? hash_futex+0x12/0x200 [ 1679.771106][ C0] ? futex_wake+0x155/0x490 [ 1679.775604][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1679.781560][ C0] do_futex+0x15b/0x1a60 [ 1679.785779][ C0] ? lock_acquire+0x1f1/0xad0 [ 1679.790427][ C0] ? __might_fault+0xef/0x1d0 [ 1679.795076][ C0] ? find_held_lock+0x2d/0x110 [ 1679.799812][ C0] ? futex_exit_release+0x220/0x220 [ 1679.804985][ C0] ? lock_downgrade+0x820/0x820 [ 1679.809809][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1679.816028][ C0] ? __might_fault+0x190/0x1d0 [ 1679.820764][ C0] ? _copy_to_user+0x126/0x160 [ 1679.825506][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1679.830942][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1679.836474][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1679.842354][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1679.847267][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1679.852354][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1679.857437][ C0] do_fast_syscall_32+0x7f/0x120 [ 1679.862348][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1679.867428][ C0] RIP: 0023:0xf7f6d569 [ 1679.871462][ C0] Code: Bad RIP value. [ 1679.875497][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1679.883879][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1679.891821][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1679.899764][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1679.907707][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1679.915663][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1679.923628][ C0] syz-executor.2 S29944 16108 7031 0x20020000 [ 1679.929933][ C0] Call Trace: [ 1679.933197][ C0] __schedule+0x8e1/0x1eb0 [ 1679.937589][ C0] ? io_schedule_timeout+0x140/0x140 [ 1679.942848][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1679.948282][ C0] schedule+0xd0/0x2a0 [ 1679.952323][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1679.957408][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1679.962580][ C0] futex_wait+0x1df/0x560 [ 1679.966885][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1679.971883][ C0] ? mark_lock+0xbc/0x1710 [ 1679.976272][ C0] ? mark_lock+0xbc/0x1710 [ 1679.980659][ C0] ? hash_futex+0x12/0x200 [ 1679.985052][ C0] ? futex_wake+0x155/0x490 [ 1679.989538][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1679.995488][ C0] do_futex+0x15b/0x1a60 [ 1679.999708][ C0] ? lock_acquire+0x1f1/0xad0 [ 1680.004356][ C0] ? __might_fault+0xef/0x1d0 [ 1680.009004][ C0] ? find_held_lock+0x2d/0x110 [ 1680.013740][ C0] ? futex_exit_release+0x220/0x220 [ 1680.018913][ C0] ? lock_downgrade+0x820/0x820 [ 1680.023736][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1680.030041][ C0] ? __might_fault+0x190/0x1d0 [ 1680.034778][ C0] ? _copy_to_user+0x126/0x160 [ 1680.039519][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1680.044956][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1680.050476][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1680.056343][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1680.061254][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1680.066450][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1680.071534][ C0] do_fast_syscall_32+0x7f/0x120 [ 1680.076444][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1680.081524][ C0] RIP: 0023:0xf7f91569 [ 1680.085559][ C0] Code: Bad RIP value. [ 1680.089597][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1680.097979][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1680.107661][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1680.115605][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1680.123561][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1680.131509][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1680.139465][ C0] syz-executor.2 S29944 16135 7031 0x20020000 [ 1680.145772][ C0] Call Trace: [ 1680.149038][ C0] __schedule+0x8e1/0x1eb0 [ 1680.153432][ C0] ? io_schedule_timeout+0x140/0x140 [ 1680.158689][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1680.164123][ C0] schedule+0xd0/0x2a0 [ 1680.168182][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1680.173265][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1680.178439][ C0] futex_wait+0x1df/0x560 [ 1680.182744][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1680.187740][ C0] ? mark_lock+0xbc/0x1710 [ 1680.192129][ C0] ? mark_lock+0xbc/0x1710 [ 1680.196515][ C0] ? hash_futex+0x12/0x200 [ 1680.200925][ C0] ? futex_wake+0x155/0x490 [ 1680.205418][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1680.211377][ C0] do_futex+0x15b/0x1a60 [ 1680.215615][ C0] ? lock_acquire+0x1f1/0xad0 [ 1680.220324][ C0] ? __might_fault+0xef/0x1d0 [ 1680.224977][ C0] ? find_held_lock+0x2d/0x110 [ 1680.229718][ C0] ? futex_exit_release+0x220/0x220 [ 1680.234893][ C0] ? lock_downgrade+0x820/0x820 [ 1680.239721][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1680.245941][ C0] ? __might_fault+0x190/0x1d0 [ 1680.250679][ C0] ? _copy_to_user+0x126/0x160 [ 1680.255421][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1680.260860][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1680.266411][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1680.272280][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1680.277204][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1680.282293][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1680.287388][ C0] do_fast_syscall_32+0x7f/0x120 [ 1680.292299][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1680.297382][ C0] RIP: 0023:0xf7f91569 [ 1680.301431][ C0] Code: Bad RIP value. [ 1680.305478][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1680.313860][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1680.321803][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1680.329749][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1680.337692][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1680.345636][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1680.353592][ C0] syz-executor.2 S29944 16207 7031 0x20020000 [ 1680.359899][ C0] Call Trace: [ 1680.363188][ C0] __schedule+0x8e1/0x1eb0 [ 1680.367592][ C0] ? io_schedule_timeout+0x140/0x140 [ 1680.372860][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1680.378305][ C0] schedule+0xd0/0x2a0 [ 1680.382356][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1680.387485][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1680.392701][ C0] futex_wait+0x1df/0x560 [ 1680.397007][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1680.402009][ C0] ? mark_lock+0xbc/0x1710 [ 1680.406433][ C0] ? mark_lock+0xbc/0x1710 [ 1680.410833][ C0] ? hash_futex+0x12/0x200 [ 1680.415224][ C0] ? futex_wake+0x155/0x490 [ 1680.419709][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1680.425663][ C0] do_futex+0x15b/0x1a60 [ 1680.429883][ C0] ? lock_acquire+0x1f1/0xad0 [ 1680.434535][ C0] ? __might_fault+0xef/0x1d0 [ 1680.439184][ C0] ? find_held_lock+0x2d/0x110 [ 1680.443934][ C0] ? futex_exit_release+0x220/0x220 [ 1680.449106][ C0] ? lock_downgrade+0x820/0x820 [ 1680.453932][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1680.460151][ C0] ? __might_fault+0x190/0x1d0 [ 1680.464890][ C0] ? _copy_to_user+0x126/0x160 [ 1680.469645][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1680.475079][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1680.480597][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1680.486467][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1680.491379][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1680.496469][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1680.501568][ C0] do_fast_syscall_32+0x7f/0x120 [ 1680.506483][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1680.511567][ C0] RIP: 0023:0xf7f91569 [ 1680.515613][ C0] Code: Bad RIP value. [ 1680.519653][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1680.528122][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1680.536066][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1680.544009][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1680.551952][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1680.559896][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1680.567852][ C0] syz-executor.2 S29024 16284 7031 0x20020000 [ 1680.574163][ C0] Call Trace: [ 1680.577430][ C0] __schedule+0x8e1/0x1eb0 [ 1680.581825][ C0] ? io_schedule_timeout+0x140/0x140 [ 1680.587083][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1680.595210][ C0] schedule+0xd0/0x2a0 [ 1680.599253][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1680.604337][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1680.609510][ C0] futex_wait+0x1df/0x560 [ 1680.613816][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1680.618814][ C0] ? mark_lock+0xbc/0x1710 [ 1680.623204][ C0] ? mark_lock+0xbc/0x1710 [ 1680.627593][ C0] ? hash_futex+0x12/0x200 [ 1680.631984][ C0] ? futex_wake+0x155/0x490 [ 1680.636469][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1680.642618][ C0] do_futex+0x15b/0x1a60 [ 1680.646851][ C0] ? lock_acquire+0x1f1/0xad0 [ 1680.651514][ C0] ? __might_fault+0xef/0x1d0 [ 1680.656163][ C0] ? find_held_lock+0x2d/0x110 [ 1680.660916][ C0] ? futex_exit_release+0x220/0x220 [ 1680.666089][ C0] ? lock_downgrade+0x820/0x820 [ 1680.670916][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1680.677152][ C0] ? __might_fault+0x190/0x1d0 [ 1680.681888][ C0] ? _copy_to_user+0x126/0x160 [ 1680.686628][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1680.692065][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1680.697677][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1680.703544][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1680.708455][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1680.713544][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1680.718632][ C0] do_fast_syscall_32+0x7f/0x120 [ 1680.723556][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1680.728639][ C0] RIP: 0023:0xf7f91569 [ 1680.732685][ C0] Code: Bad RIP value. [ 1680.736735][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1680.745132][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1680.753093][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1680.761039][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1680.769255][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1680.777199][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1680.785167][ C0] syz-executor.2 S29944 16343 7031 0x20020000 [ 1680.791475][ C0] Call Trace: [ 1680.794739][ C0] __schedule+0x8e1/0x1eb0 [ 1680.799153][ C0] ? io_schedule_timeout+0x140/0x140 [ 1680.804432][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1680.809869][ C0] schedule+0xd0/0x2a0 [ 1680.813914][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1680.818997][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1680.824169][ C0] futex_wait+0x1df/0x560 [ 1680.828476][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1680.833485][ C0] ? mark_lock+0xbc/0x1710 [ 1680.837876][ C0] ? mark_lock+0xbc/0x1710 [ 1680.842266][ C0] ? hash_futex+0x12/0x200 [ 1680.846656][ C0] ? futex_wake+0x155/0x490 [ 1680.851149][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1680.857106][ C0] do_futex+0x15b/0x1a60 [ 1680.861341][ C0] ? lock_acquire+0x1f1/0xad0 [ 1680.865990][ C0] ? __might_fault+0xef/0x1d0 [ 1680.870640][ C0] ? find_held_lock+0x2d/0x110 [ 1680.875376][ C0] ? futex_exit_release+0x220/0x220 [ 1680.880549][ C0] ? lock_downgrade+0x820/0x820 [ 1680.885389][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1680.891613][ C0] ? __might_fault+0x190/0x1d0 [ 1680.896362][ C0] ? _copy_to_user+0x126/0x160 [ 1680.901103][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1680.906545][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1680.912065][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1680.917932][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1680.922852][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1680.927943][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1680.933027][ C0] do_fast_syscall_32+0x7f/0x120 [ 1680.937939][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1680.943020][ C0] RIP: 0023:0xf7f91569 [ 1680.947057][ C0] Code: Bad RIP value. [ 1680.951094][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1680.959490][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1680.967435][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1680.975379][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1680.983334][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1680.991277][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1680.999245][ C0] syz-executor.2 S29944 16570 7031 0x20020000 [ 1681.005554][ C0] Call Trace: [ 1681.008819][ C0] __schedule+0x8e1/0x1eb0 [ 1681.013212][ C0] ? io_schedule_timeout+0x140/0x140 [ 1681.018472][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1681.023918][ C0] schedule+0xd0/0x2a0 [ 1681.027962][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1681.033061][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1681.038235][ C0] futex_wait+0x1df/0x560 [ 1681.042542][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1681.047540][ C0] ? mark_lock+0xbc/0x1710 [ 1681.051941][ C0] ? hash_futex+0x12/0x200 [ 1681.056331][ C0] ? futex_wake+0x155/0x490 [ 1681.060817][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1681.066788][ C0] do_futex+0x15b/0x1a60 [ 1681.071010][ C0] ? lock_acquire+0x1f1/0xad0 [ 1681.075660][ C0] ? __might_fault+0xef/0x1d0 [ 1681.080310][ C0] ? find_held_lock+0x2d/0x110 [ 1681.085047][ C0] ? futex_exit_release+0x220/0x220 [ 1681.090219][ C0] ? lock_downgrade+0x820/0x820 [ 1681.095045][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1681.101262][ C0] ? __might_fault+0x190/0x1d0 [ 1681.105999][ C0] ? _copy_to_user+0x126/0x160 [ 1681.110740][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1681.116172][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1681.121689][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1681.127559][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1681.132484][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1681.137573][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1681.142655][ C0] do_fast_syscall_32+0x7f/0x120 [ 1681.147571][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1681.152654][ C0] RIP: 0023:0xf7f91569 [ 1681.156688][ C0] Code: Bad RIP value. [ 1681.160739][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1681.169124][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1681.177080][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1681.185031][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1681.192994][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1681.200947][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1681.208911][ C0] ipvs-b:2:0 S30520 16760 2 0x00004000 [ 1681.215219][ C0] Call Trace: [ 1681.218489][ C0] __schedule+0x8e1/0x1eb0 [ 1681.222887][ C0] ? io_schedule_timeout+0x140/0x140 [ 1681.228146][ C0] ? prepare_to_wait_event+0x129/0x650 [ 1681.233585][ C0] schedule+0xd0/0x2a0 [ 1681.237671][ C0] sync_thread_backup+0x32c/0xc5e [ 1681.242723][ C0] ? find_held_lock+0x2d/0x110 [ 1681.247503][ C0] ? __kthread_parkme+0xad/0x1e0 [ 1681.252417][ C0] ? ip_vs_proc_sync_conn+0xb80/0xb80 [ 1681.257769][ C0] ? finish_wait+0x260/0x260 [ 1681.262334][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1681.268110][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1681.273064][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1681.279017][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1681.284017][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1681.289100][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1681.294098][ C0] ? ip_vs_proc_sync_conn+0xb80/0xb80 [ 1681.299453][ C0] kthread+0x3b5/0x4a0 [ 1681.303515][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1681.308597][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1681.313684][ C0] ret_from_fork+0x1f/0x30 [ 1681.318081][ C0] ipvs-b:3:0 S30496 16836 2 0x00004000 [ 1681.324387][ C0] Call Trace: [ 1681.327658][ C0] __schedule+0x8e1/0x1eb0 [ 1681.332060][ C0] ? io_schedule_timeout+0x140/0x140 [ 1681.337342][ C0] ? prepare_to_wait_event+0x129/0x650 [ 1681.342797][ C0] schedule+0xd0/0x2a0 [ 1681.346854][ C0] sync_thread_backup+0x32c/0xc5e [ 1681.351860][ C0] ? find_held_lock+0x2d/0x110 [ 1681.356600][ C0] ? __kthread_parkme+0xad/0x1e0 [ 1681.361514][ C0] ? ip_vs_proc_sync_conn+0xb80/0xb80 [ 1681.366889][ C0] ? finish_wait+0x260/0x260 [ 1681.371466][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1681.377272][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1681.382192][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1681.388149][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1681.393153][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1681.398257][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1681.403358][ C0] ? ip_vs_proc_sync_conn+0xb80/0xb80 [ 1681.408703][ C0] kthread+0x3b5/0x4a0 [ 1681.412754][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1681.417837][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1681.422926][ C0] ret_from_fork+0x1f/0x30 [ 1681.427322][ C0] syz-executor.3 S30088 17095 7114 0x20020000 [ 1681.433640][ C0] Call Trace: [ 1681.436908][ C0] __schedule+0x8e1/0x1eb0 [ 1681.441302][ C0] ? io_schedule_timeout+0x140/0x140 [ 1681.446575][ C0] ? wait_for_completion+0x260/0x260 [ 1681.451836][ C0] schedule+0xd0/0x2a0 [ 1681.455894][ C0] pipe_wait+0x155/0x240 [ 1681.460111][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1681.465108][ C0] ? finish_wait+0x260/0x260 [ 1681.469675][ C0] ? finish_wait+0x260/0x260 [ 1681.474242][ C0] ? pipe_lock+0x5a/0x70 [ 1681.478516][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1681.484302][ C0] __splice_from_pipe+0x114/0x830 [ 1681.489318][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1681.495280][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1681.500112][ C0] do_vmsplice+0x2f7/0x380 [ 1681.504500][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1681.509761][ C0] ? lock_downgrade+0x820/0x820 [ 1681.514586][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1681.520801][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1681.526331][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1681.531416][ C0] ? __might_fault+0x190/0x1d0 [ 1681.536155][ C0] ? _copy_to_user+0x126/0x160 [ 1681.540903][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1681.546080][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1681.551965][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1681.556880][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1681.561969][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1681.567053][ C0] do_fast_syscall_32+0x7f/0x120 [ 1681.571966][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1681.577073][ C0] RIP: 0023:0xf7f6d569 [ 1681.581109][ C0] Code: Bad RIP value. [ 1681.585150][ C0] RSP: 002b:00000000f5d680cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1681.593532][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1681.601478][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1681.609424][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1681.617368][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1681.625314][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1681.633287][ C0] syz-executor.0 S30088 17137 6841 0x20020000 [ 1681.639604][ C0] Call Trace: [ 1681.642884][ C0] __schedule+0x8e1/0x1eb0 [ 1681.647282][ C0] ? io_schedule_timeout+0x140/0x140 [ 1681.652542][ C0] ? wait_for_completion+0x260/0x260 [ 1681.657810][ C0] schedule+0xd0/0x2a0 [ 1681.661868][ C0] pipe_wait+0x155/0x240 [ 1681.666083][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1681.671082][ C0] ? finish_wait+0x260/0x260 [ 1681.675660][ C0] ? finish_wait+0x260/0x260 [ 1681.680224][ C0] ? pipe_lock+0x5a/0x70 [ 1681.684445][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1681.690226][ C0] __splice_from_pipe+0x114/0x830 [ 1681.695225][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1681.701176][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1681.706005][ C0] do_vmsplice+0x2f7/0x380 [ 1681.710396][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1681.715670][ C0] ? lock_downgrade+0x820/0x820 [ 1681.720493][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1681.726708][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1681.732227][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1681.737312][ C0] ? __might_fault+0x190/0x1d0 [ 1681.742049][ C0] ? _copy_to_user+0x126/0x160 [ 1681.747051][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1681.752227][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1681.758095][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1681.763008][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1681.768097][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1681.773185][ C0] do_fast_syscall_32+0x7f/0x120 [ 1681.778120][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1681.783211][ C0] RIP: 0023:0xf7fd1569 [ 1681.787261][ C0] Code: Bad RIP value. [ 1681.791300][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1681.799682][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1681.807646][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1681.815605][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1681.823551][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1681.832072][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1681.840056][ C0] syz-executor.3 S30088 17156 7114 0x20020000 [ 1681.846382][ C0] Call Trace: [ 1681.849654][ C0] __schedule+0x8e1/0x1eb0 [ 1681.854070][ C0] ? io_schedule_timeout+0x140/0x140 [ 1681.859341][ C0] ? wait_for_completion+0x260/0x260 [ 1681.864610][ C0] schedule+0xd0/0x2a0 [ 1681.868692][ C0] pipe_wait+0x155/0x240 [ 1681.873384][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1681.878398][ C0] ? finish_wait+0x260/0x260 [ 1681.882968][ C0] ? finish_wait+0x260/0x260 [ 1681.887534][ C0] ? pipe_lock+0x5a/0x70 [ 1681.891757][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1681.897547][ C0] __splice_from_pipe+0x114/0x830 [ 1681.902549][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1681.908503][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1681.913330][ C0] do_vmsplice+0x2f7/0x380 [ 1681.917724][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1681.923009][ C0] ? lock_downgrade+0x820/0x820 [ 1681.927857][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1681.934085][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1681.939872][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1681.944958][ C0] ? __might_fault+0x190/0x1d0 [ 1681.949700][ C0] ? _copy_to_user+0x126/0x160 [ 1681.954443][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1681.959621][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1681.965510][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1681.970423][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1681.975643][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1681.980790][ C0] do_fast_syscall_32+0x7f/0x120 [ 1681.985725][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1681.990813][ C0] RIP: 0023:0xf7f6d569 [ 1681.994865][ C0] Code: Bad RIP value. [ 1681.998901][ C0] RSP: 002b:00000000f5d680cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1682.007288][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1682.015249][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1682.023196][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1682.031142][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1682.039088][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1682.047054][ C0] syz-executor.0 S29944 17160 6841 0x20020000 [ 1682.053375][ C0] Call Trace: [ 1682.056642][ C0] __schedule+0x8e1/0x1eb0 [ 1682.061038][ C0] ? io_schedule_timeout+0x140/0x140 [ 1682.066299][ C0] ? wait_for_completion+0x260/0x260 [ 1682.071570][ C0] schedule+0xd0/0x2a0 [ 1682.075617][ C0] pipe_wait+0x155/0x240 [ 1682.079835][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1682.084851][ C0] ? finish_wait+0x260/0x260 [ 1682.089417][ C0] ? finish_wait+0x260/0x260 [ 1682.093994][ C0] ? pipe_lock+0x5a/0x70 [ 1682.098225][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1682.104012][ C0] __splice_from_pipe+0x114/0x830 [ 1682.109021][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1682.114974][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1682.119806][ C0] do_vmsplice+0x2f7/0x380 [ 1682.124197][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1682.129470][ C0] ? lock_downgrade+0x820/0x820 [ 1682.134296][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1682.140527][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1682.146053][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1682.151139][ C0] ? __might_fault+0x190/0x1d0 [ 1682.155888][ C0] ? _copy_to_user+0x126/0x160 [ 1682.160631][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1682.165809][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1682.171940][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1682.176853][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1682.181945][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1682.187058][ C0] do_fast_syscall_32+0x7f/0x120 [ 1682.191998][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1682.197097][ C0] RIP: 0023:0xf7fd1569 [ 1682.201141][ C0] Code: Bad RIP value. [ 1682.205181][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1682.213567][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1682.221525][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1682.230010][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1682.237964][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1682.245912][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1682.253875][ C0] syz-executor.0 S30088 17177 6841 0x20020000 [ 1682.260195][ C0] Call Trace: [ 1682.263468][ C0] __schedule+0x8e1/0x1eb0 [ 1682.267880][ C0] ? io_schedule_timeout+0x140/0x140 [ 1682.273145][ C0] ? wait_for_completion+0x260/0x260 [ 1682.278445][ C0] schedule+0xd0/0x2a0 [ 1682.282506][ C0] pipe_wait+0x155/0x240 [ 1682.286727][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1682.291737][ C0] ? finish_wait+0x260/0x260 [ 1682.296308][ C0] ? finish_wait+0x260/0x260 [ 1682.300879][ C0] ? pipe_lock+0x5a/0x70 [ 1682.305106][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1682.310911][ C0] __splice_from_pipe+0x114/0x830 [ 1682.315932][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1682.321891][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1682.326725][ C0] do_vmsplice+0x2f7/0x380 [ 1682.331138][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1682.336513][ C0] ? lock_downgrade+0x820/0x820 [ 1682.341345][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1682.347566][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1682.353094][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1682.358192][ C0] ? __might_fault+0x190/0x1d0 [ 1682.364159][ C0] ? _copy_to_user+0x126/0x160 [ 1682.368928][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1682.374127][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1682.380014][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1682.384965][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1682.390099][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1682.395194][ C0] do_fast_syscall_32+0x7f/0x120 [ 1682.400123][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1682.405217][ C0] RIP: 0023:0xf7fd1569 [ 1682.409271][ C0] Code: Bad RIP value. [ 1682.413315][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1682.421706][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1682.429658][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1682.437865][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1682.445898][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1682.454803][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1682.462780][ C0] syz-executor.3 S29944 18631 7114 0x20020000 [ 1682.469103][ C0] Call Trace: [ 1682.472476][ C0] __schedule+0x8e1/0x1eb0 [ 1682.477049][ C0] ? io_schedule_timeout+0x140/0x140 [ 1682.482319][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1682.487763][ C0] schedule+0xd0/0x2a0 [ 1682.491840][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1682.497310][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1682.502530][ C0] futex_wait+0x1df/0x560 [ 1682.506844][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1682.511941][ C0] ? mark_lock+0xbc/0x1710 [ 1682.516359][ C0] ? hash_futex+0x12/0x200 [ 1682.520766][ C0] ? futex_wake+0x155/0x490 [ 1682.525261][ C0] ? do_wp_page+0x8e7/0x1950 [ 1682.529840][ C0] do_futex+0x15b/0x1a60 [ 1682.534074][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1682.539260][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1682.544098][ C0] ? do_wp_page+0x16a/0x1950 [ 1682.548697][ C0] ? futex_exit_release+0x220/0x220 [ 1682.553882][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1682.559237][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1682.564166][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1682.569185][ C0] ? find_held_lock+0x2d/0x110 [ 1682.573933][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1682.579115][ C0] ? __up_read+0x1a1/0x7b0 [ 1682.583520][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1682.588969][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1682.594540][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1682.601027][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1682.606298][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1682.611707][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1682.616808][ C0] do_fast_syscall_32+0x7f/0x120 [ 1682.621731][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1682.627207][ C0] RIP: 0023:0xf7f6d569 [ 1682.631347][ C0] Code: Bad RIP value. [ 1682.635403][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1682.643916][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1682.652000][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1682.660303][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1682.668298][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1682.676256][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1682.684240][ C0] syz-executor.3 S29944 18635 7114 0x20020000 [ 1682.690561][ C0] Call Trace: [ 1682.693840][ C0] __schedule+0x8e1/0x1eb0 [ 1682.698246][ C0] ? io_schedule_timeout+0x140/0x140 [ 1682.703516][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1682.709225][ C0] schedule+0xd0/0x2a0 [ 1682.713281][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1682.718422][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1682.723607][ C0] futex_wait+0x1df/0x560 [ 1682.727924][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1682.732949][ C0] ? mark_lock+0xbc/0x1710 [ 1682.737410][ C0] ? mark_lock+0xbc/0x1710 [ 1682.741810][ C0] ? hash_futex+0x12/0x200 [ 1682.746210][ C0] ? futex_wake+0x155/0x490 [ 1682.750708][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1682.756673][ C0] do_futex+0x15b/0x1a60 [ 1682.760997][ C0] ? lock_acquire+0x1f1/0xad0 [ 1682.765663][ C0] ? __might_fault+0xef/0x1d0 [ 1682.770325][ C0] ? find_held_lock+0x2d/0x110 [ 1682.775078][ C0] ? futex_exit_release+0x220/0x220 [ 1682.780436][ C0] ? lock_downgrade+0x820/0x820 [ 1682.785364][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1682.791685][ C0] ? __might_fault+0x190/0x1d0 [ 1682.796435][ C0] ? _copy_to_user+0x126/0x160 [ 1682.801278][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1682.806730][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1682.812270][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1682.818154][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1682.823427][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1682.828527][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1682.833834][ C0] do_fast_syscall_32+0x7f/0x120 [ 1682.838780][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1682.843892][ C0] RIP: 0023:0xf7f6d569 [ 1682.847943][ C0] Code: Bad RIP value. [ 1682.852001][ C0] RSP: 002b:00000000f5d2612c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1682.860442][ C0] RAX: ffffffffffffffda RBX: 000000000819b040 RCX: 0000000000000080 [ 1682.868444][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819b044 [ 1682.876577][ C0] RBP: 00000000f5d26228 R08: 0000000000000000 R09: 0000000000000000 [ 1682.884536][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1682.892490][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1682.900504][ C0] syz-executor.3 S29944 18667 7114 0x20020000 [ 1682.906823][ C0] Call Trace: [ 1682.910103][ C0] __schedule+0x8e1/0x1eb0 [ 1682.914599][ C0] ? io_schedule_timeout+0x140/0x140 [ 1682.919869][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1682.925331][ C0] schedule+0xd0/0x2a0 [ 1682.929388][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1682.934531][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1682.939713][ C0] ? futex_wake+0x1b5/0x490 [ 1682.944247][ C0] ? find_held_lock+0x2d/0x110 [ 1682.949087][ C0] futex_wait+0x1df/0x560 [ 1682.953415][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1682.958425][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1682.963346][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1682.968528][ C0] ? futex_wake+0x155/0x490 [ 1682.973026][ C0] ? do_wp_page+0x8e7/0x1950 [ 1682.977606][ C0] do_futex+0x15b/0x1a60 [ 1682.981845][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1682.987134][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1682.991968][ C0] ? do_wp_page+0x16a/0x1950 [ 1682.996551][ C0] ? futex_exit_release+0x220/0x220 [ 1683.001733][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1683.007093][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1683.012059][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1683.017194][ C0] ? find_held_lock+0x2d/0x110 [ 1683.021944][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1683.027139][ C0] ? __up_read+0x1a1/0x7b0 [ 1683.031578][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1683.037034][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1683.042653][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.047575][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.052501][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1683.057771][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1683.062891][ C0] do_fast_syscall_32+0x7f/0x120 [ 1683.067914][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1683.073158][ C0] RIP: 0023:0xf7f6d569 [ 1683.077209][ C0] Code: Bad RIP value. [ 1683.081260][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1683.089766][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1683.097725][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1683.105681][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1683.113638][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1683.121596][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1683.129653][ C0] syz-executor.3 S29944 18689 7114 0x20020000 [ 1683.136106][ C0] Call Trace: [ 1683.139388][ C0] __schedule+0x8e1/0x1eb0 [ 1683.143972][ C0] ? io_schedule_timeout+0x140/0x140 [ 1683.149247][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1683.154731][ C0] schedule+0xd0/0x2a0 [ 1683.158825][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1683.163922][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1683.169112][ C0] futex_wait+0x1df/0x560 [ 1683.173466][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1683.178637][ C0] ? mark_lock+0xbc/0x1710 [ 1683.183054][ C0] ? hash_futex+0x12/0x200 [ 1683.187467][ C0] ? futex_wake+0x155/0x490 [ 1683.192088][ C0] ? do_wp_page+0x8e7/0x1950 [ 1683.196741][ C0] do_futex+0x15b/0x1a60 [ 1683.200990][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1683.206176][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1683.211126][ C0] ? do_wp_page+0x16a/0x1950 [ 1683.215859][ C0] ? futex_exit_release+0x220/0x220 [ 1683.221053][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1683.226415][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1683.231398][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1683.236520][ C0] ? find_held_lock+0x2d/0x110 [ 1683.241587][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1683.246822][ C0] ? __up_read+0x1a1/0x7b0 [ 1683.251263][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1683.256754][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1683.262323][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.267247][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.272174][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1683.277402][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1683.282501][ C0] do_fast_syscall_32+0x7f/0x120 [ 1683.287782][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1683.292916][ C0] RIP: 0023:0xf7f6d569 [ 1683.297051][ C0] Code: Bad RIP value. [ 1683.301101][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1683.309496][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1683.317453][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1683.325404][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1683.333649][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1683.341848][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1683.349821][ C0] syz-executor.3 S29944 18723 7114 0x20020000 [ 1683.356142][ C0] Call Trace: [ 1683.359597][ C0] __schedule+0x8e1/0x1eb0 [ 1683.364008][ C0] ? io_schedule_timeout+0x140/0x140 [ 1683.369321][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1683.374862][ C0] schedule+0xd0/0x2a0 [ 1683.378927][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1683.384035][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1683.389275][ C0] futex_wait+0x1df/0x560 [ 1683.393650][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1683.398756][ C0] ? mark_lock+0xbc/0x1710 [ 1683.403253][ C0] ? mark_lock+0xbc/0x1710 [ 1683.407659][ C0] ? hash_futex+0x12/0x200 [ 1683.412237][ C0] ? futex_wake+0x155/0x490 [ 1683.416782][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1683.422754][ C0] do_futex+0x15b/0x1a60 [ 1683.426989][ C0] ? lock_acquire+0x1f1/0xad0 [ 1683.431650][ C0] ? __might_fault+0xef/0x1d0 [ 1683.436314][ C0] ? find_held_lock+0x2d/0x110 [ 1683.441064][ C0] ? futex_exit_release+0x220/0x220 [ 1683.446248][ C0] ? lock_downgrade+0x820/0x820 [ 1683.451084][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1683.457315][ C0] ? __might_fault+0x190/0x1d0 [ 1683.462156][ C0] ? _copy_to_user+0x126/0x160 [ 1683.466914][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1683.472363][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1683.477896][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1683.483779][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.488740][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1683.493846][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1683.498977][ C0] do_fast_syscall_32+0x7f/0x120 [ 1683.503902][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1683.509002][ C0] RIP: 0023:0xf7f6d569 [ 1683.513048][ C0] Code: Bad RIP value. [ 1683.517098][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1683.525494][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1683.533451][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1683.541410][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1683.550199][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1683.558157][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1683.566294][ C0] syz-executor.1 S29944 18847 6979 0x20020000 [ 1683.573082][ C0] Call Trace: [ 1683.576448][ C0] __schedule+0x8e1/0x1eb0 [ 1683.580908][ C0] ? io_schedule_timeout+0x140/0x140 [ 1683.586267][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1683.591739][ C0] schedule+0xd0/0x2a0 [ 1683.595809][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1683.600985][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1683.606165][ C0] ? futex_wake+0x1b5/0x490 [ 1683.610789][ C0] ? find_held_lock+0x2d/0x110 [ 1683.615601][ C0] futex_wait+0x1df/0x560 [ 1683.620084][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1683.625099][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1683.630025][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1683.635271][ C0] ? futex_wake+0x155/0x490 [ 1683.639770][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1683.645737][ C0] do_futex+0x15b/0x1a60 [ 1683.649972][ C0] ? lock_acquire+0x1f1/0xad0 [ 1683.654729][ C0] ? __might_fault+0xef/0x1d0 [ 1683.659390][ C0] ? find_held_lock+0x2d/0x110 [ 1683.664176][ C0] ? futex_exit_release+0x220/0x220 [ 1683.669364][ C0] ? lock_downgrade+0x820/0x820 [ 1683.674321][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1683.680553][ C0] ? __might_fault+0x190/0x1d0 [ 1683.685301][ C0] ? _copy_to_user+0x126/0x160 [ 1683.690055][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1683.695505][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1683.701070][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1683.706951][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.712048][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1683.717149][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1683.722244][ C0] do_fast_syscall_32+0x7f/0x120 [ 1683.727177][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1683.732273][ C0] RIP: 0023:0xf7fa1569 [ 1683.736393][ C0] Code: Bad RIP value. [ 1683.740445][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1683.748839][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1683.756882][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1683.764838][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1683.772795][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1683.780751][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1683.788813][ C0] syz-executor.1 S29512 18853 6979 0x20020000 [ 1683.795133][ C0] Call Trace: [ 1683.799321][ C0] __schedule+0x8e1/0x1eb0 [ 1683.803901][ C0] ? io_schedule_timeout+0x140/0x140 [ 1683.809169][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1683.814619][ C0] schedule+0xd0/0x2a0 [ 1683.818675][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1683.823767][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1683.828952][ C0] futex_wait+0x1df/0x560 [ 1683.834396][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1683.839405][ C0] ? wake_up_q+0xa3/0x100 [ 1683.843717][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1683.848899][ C0] ? futex_wake+0x155/0x490 [ 1683.853395][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1683.859356][ C0] do_futex+0x15b/0x1a60 [ 1683.863603][ C0] ? lock_acquire+0x1f1/0xad0 [ 1683.868264][ C0] ? __might_fault+0xef/0x1d0 [ 1683.872922][ C0] ? find_held_lock+0x2d/0x110 [ 1683.877669][ C0] ? futex_exit_release+0x220/0x220 [ 1683.883003][ C0] ? lock_downgrade+0x820/0x820 [ 1683.887848][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1683.894080][ C0] ? __might_fault+0x190/0x1d0 [ 1683.898835][ C0] ? _copy_to_user+0x126/0x160 [ 1683.903596][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1683.909218][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.914140][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1683.919707][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1683.924661][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1683.929767][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1683.934863][ C0] do_fast_syscall_32+0x7f/0x120 [ 1683.939789][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1683.944883][ C0] RIP: 0023:0xf7fa1569 [ 1683.949016][ C0] Code: Bad RIP value. [ 1683.953064][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1683.961465][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1683.969509][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1683.977462][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1683.985415][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1683.993365][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1684.001380][ C0] syz-executor.1 S29944 18863 6979 0x20020000 [ 1684.007695][ C0] Call Trace: [ 1684.010969][ C0] __schedule+0x8e1/0x1eb0 [ 1684.015374][ C0] ? io_schedule_timeout+0x140/0x140 [ 1684.020643][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1684.026085][ C0] schedule+0xd0/0x2a0 [ 1684.030139][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1684.035237][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1684.040419][ C0] futex_wait+0x1df/0x560 [ 1684.044734][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1684.049752][ C0] ? wake_up_q+0xa3/0x100 [ 1684.054065][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1684.059298][ C0] ? futex_wake+0x155/0x490 [ 1684.063828][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1684.069791][ C0] do_futex+0x15b/0x1a60 [ 1684.074021][ C0] ? lock_acquire+0x1f1/0xad0 [ 1684.078680][ C0] ? __might_fault+0xef/0x1d0 [ 1684.083337][ C0] ? find_held_lock+0x2d/0x110 [ 1684.088376][ C0] ? futex_exit_release+0x220/0x220 [ 1684.093563][ C0] ? lock_downgrade+0x820/0x820 [ 1684.098399][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1684.104629][ C0] ? __might_fault+0x190/0x1d0 [ 1684.109413][ C0] ? _copy_to_user+0x126/0x160 [ 1684.114167][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1684.119614][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1684.124539][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1684.130103][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1684.135029][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1684.140130][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1684.145352][ C0] do_fast_syscall_32+0x7f/0x120 [ 1684.150275][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1684.155496][ C0] RIP: 0023:0xf7fa1569 [ 1684.159542][ C0] Code: Bad RIP value. [ 1684.163594][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1684.171989][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1684.180023][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1684.187979][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1684.195936][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1684.203893][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1684.211875][ C0] syz-executor.1 S29944 18882 6979 0x20020000 [ 1684.218203][ C0] Call Trace: [ 1684.221492][ C0] __schedule+0x8e1/0x1eb0 [ 1684.225923][ C0] ? io_schedule_timeout+0x140/0x140 [ 1684.231197][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1684.236647][ C0] schedule+0xd0/0x2a0 [ 1684.240705][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1684.245941][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1684.251128][ C0] futex_wait+0x1df/0x560 [ 1684.255602][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1684.260787][ C0] ? wake_up_q+0xa3/0x100 [ 1684.265104][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1684.270296][ C0] ? futex_wake+0x155/0x490 [ 1684.274801][ C0] do_futex+0x15b/0x1a60 [ 1684.279277][ C0] ? lock_acquire+0x1f1/0xad0 [ 1684.283955][ C0] ? __might_fault+0xef/0x1d0 [ 1684.288629][ C0] ? find_held_lock+0x2d/0x110 [ 1684.293388][ C0] ? futex_exit_release+0x220/0x220 [ 1684.298788][ C0] ? lock_downgrade+0x820/0x820 [ 1684.303845][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1684.310373][ C0] ? __might_fault+0x190/0x1d0 [ 1684.315122][ C0] ? _copy_to_user+0x126/0x160 [ 1684.319920][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1684.325370][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1684.330902][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1684.336788][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1684.341711][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1684.346819][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1684.351947][ C0] do_fast_syscall_32+0x7f/0x120 [ 1684.356872][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1684.361966][ C0] RIP: 0023:0xf7fa1569 [ 1684.366029][ C0] Code: Bad RIP value. [ 1684.370078][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1684.378472][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1684.386681][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1684.394643][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1684.402651][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1684.410649][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1684.418637][ C0] kworker/0:5 I22904 19352 2 0x00004000 [ 1684.425049][ C0] Workqueue: 0x0 (events_power_efficient) [ 1684.430838][ C0] Call Trace: [ 1684.434166][ C0] __schedule+0x8e1/0x1eb0 [ 1684.438575][ C0] ? io_schedule_timeout+0x140/0x140 [ 1684.443847][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1684.449032][ C0] schedule+0xd0/0x2a0 [ 1684.453091][ C0] worker_thread+0x14c/0x1120 [ 1684.457760][ C0] ? process_one_work+0x1670/0x1670 [ 1684.463030][ C0] kthread+0x3b5/0x4a0 [ 1684.467082][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1684.472482][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1684.477585][ C0] ret_from_fork+0x1f/0x30 [ 1684.481994][ C0] syz-executor.0 S29944 19566 6841 0x20020000 [ 1684.488532][ C0] Call Trace: [ 1684.491818][ C0] __schedule+0x8e1/0x1eb0 [ 1684.496228][ C0] ? io_schedule_timeout+0x140/0x140 [ 1684.501504][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1684.506958][ C0] schedule+0xd0/0x2a0 [ 1684.511023][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1684.516172][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1684.521371][ C0] futex_wait+0x1df/0x560 [ 1684.525816][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1684.530832][ C0] ? mark_lock+0xbc/0x1710 [ 1684.535243][ C0] ? hash_futex+0x12/0x200 [ 1684.539773][ C0] ? futex_wake+0x155/0x490 [ 1684.544271][ C0] ? do_wp_page+0x8e7/0x1950 [ 1684.548927][ C0] do_futex+0x15b/0x1a60 [ 1684.553203][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1684.558390][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1684.563229][ C0] ? do_wp_page+0x16a/0x1950 [ 1684.567805][ C0] ? futex_exit_release+0x220/0x220 [ 1684.573087][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1684.578441][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1684.583404][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1684.588470][ C0] ? find_held_lock+0x2d/0x110 [ 1684.593220][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1684.598402][ C0] ? __up_read+0x1a1/0x7b0 [ 1684.602904][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1684.608362][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1684.613894][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1684.618818][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1684.623746][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1684.629023][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1684.634121][ C0] do_fast_syscall_32+0x7f/0x120 [ 1684.639045][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1684.644149][ C0] RIP: 0023:0xf7fd1569 [ 1684.648247][ C0] Code: Bad RIP value. [ 1684.652334][ C0] RSP: 002b:00000000f5dab12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1684.660779][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1684.668735][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1684.676696][ C0] RBP: 00000000f5dab228 R08: 0000000000000000 R09: 0000000000000000 [ 1684.684669][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1684.692637][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1684.700779][ C0] syz-executor.0 S29944 19602 6841 0x20020000 [ 1684.707101][ C0] Call Trace: [ 1684.710385][ C0] __schedule+0x8e1/0x1eb0 [ 1684.714880][ C0] ? io_schedule_timeout+0x140/0x140 [ 1684.720268][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1684.725714][ C0] schedule+0xd0/0x2a0 [ 1684.729898][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1684.735174][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1684.740538][ C0] futex_wait+0x1df/0x560 [ 1684.744858][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1684.749871][ C0] ? mark_lock+0xbc/0x1710 [ 1684.754280][ C0] ? hash_futex+0x12/0x200 [ 1684.758681][ C0] ? futex_wake+0x155/0x490 [ 1684.763292][ C0] ? do_wp_page+0x8e7/0x1950 [ 1684.767919][ C0] do_futex+0x15b/0x1a60 [ 1684.772152][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1684.777337][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1684.782257][ C0] ? do_wp_page+0x16a/0x1950 [ 1684.786832][ C0] ? futex_exit_release+0x220/0x220 [ 1684.792017][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1684.797543][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1684.802488][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1684.807510][ C0] ? find_held_lock+0x2d/0x110 [ 1684.812268][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1684.817501][ C0] ? __up_read+0x1a1/0x7b0 [ 1684.821910][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1684.827355][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1684.832930][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1684.837878][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1684.842806][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1684.848032][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1684.853132][ C0] do_fast_syscall_32+0x7f/0x120 [ 1684.858056][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1684.863153][ C0] RIP: 0023:0xf7fd1569 [ 1684.867200][ C0] Code: Bad RIP value. [ 1684.871251][ C0] RSP: 002b:00000000f5dab12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1684.879649][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1684.887731][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1684.895688][ C0] RBP: 00000000f5dab228 R08: 0000000000000000 R09: 0000000000000000 [ 1684.903739][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1684.911700][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1684.919757][ C0] syz-executor.1 S29944 19613 6979 0x20020000 [ 1684.926115][ C0] Call Trace: [ 1684.929398][ C0] __schedule+0x8e1/0x1eb0 [ 1684.933858][ C0] ? io_schedule_timeout+0x140/0x140 [ 1684.939129][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1684.944645][ C0] schedule+0xd0/0x2a0 [ 1684.948789][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1684.953890][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1684.959166][ C0] futex_wait+0x1df/0x560 [ 1684.963570][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1684.968668][ C0] ? mark_lock+0xbc/0x1710 [ 1684.973073][ C0] ? mark_lock+0xbc/0x1710 [ 1684.977555][ C0] ? hash_futex+0x12/0x200 [ 1684.981956][ C0] ? futex_wake+0x155/0x490 [ 1684.986470][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1684.992437][ C0] do_futex+0x15b/0x1a60 [ 1684.996671][ C0] ? lock_acquire+0x1f1/0xad0 [ 1685.001332][ C0] ? __might_fault+0xef/0x1d0 [ 1685.005993][ C0] ? find_held_lock+0x2d/0x110 [ 1685.010743][ C0] ? futex_exit_release+0x220/0x220 [ 1685.015929][ C0] ? lock_downgrade+0x820/0x820 [ 1685.020769][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1685.027035][ C0] ? __might_fault+0x190/0x1d0 [ 1685.031994][ C0] ? _copy_to_user+0x126/0x160 [ 1685.036751][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1685.042198][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1685.047729][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1685.053729][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1685.058739][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1685.063839][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1685.068937][ C0] do_fast_syscall_32+0x7f/0x120 [ 1685.073948][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1685.079075][ C0] RIP: 0023:0xf7fa1569 [ 1685.083121][ C0] Code: Bad RIP value. [ 1685.087173][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1685.095568][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1685.103526][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1685.111517][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1685.119564][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1685.127605][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1685.135575][ C0] syz-executor.2 S29944 19616 7031 0x20020000 [ 1685.141891][ C0] Call Trace: [ 1685.145169][ C0] __schedule+0x8e1/0x1eb0 [ 1685.149579][ C0] ? io_schedule_timeout+0x140/0x140 [ 1685.154852][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1685.160321][ C0] schedule+0xd0/0x2a0 [ 1685.164437][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1685.169559][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1685.174749][ C0] ? futex_wake+0x1b5/0x490 [ 1685.179238][ C0] ? find_held_lock+0x2d/0x110 [ 1685.183988][ C0] futex_wait+0x1df/0x560 [ 1685.188304][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1685.193320][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1685.198249][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1685.203616][ C0] ? futex_wake+0x155/0x490 [ 1685.208120][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1685.214089][ C0] do_futex+0x15b/0x1a60 [ 1685.218329][ C0] ? lock_acquire+0x1f1/0xad0 [ 1685.223251][ C0] ? __might_fault+0xef/0x1d0 [ 1685.227999][ C0] ? find_held_lock+0x2d/0x110 [ 1685.232869][ C0] ? futex_exit_release+0x220/0x220 [ 1685.238056][ C0] ? lock_downgrade+0x820/0x820 [ 1685.242953][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1685.249184][ C0] ? __might_fault+0x190/0x1d0 [ 1685.253937][ C0] ? _copy_to_user+0x126/0x160 [ 1685.258691][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1685.264317][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1685.270184][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1685.276084][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1685.281037][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1685.286146][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1685.291250][ C0] do_fast_syscall_32+0x7f/0x120 [ 1685.296282][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1685.301444][ C0] RIP: 0023:0xf7f91569 [ 1685.305500][ C0] Code: Bad RIP value. [ 1685.309550][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1685.318076][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1685.326033][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1685.334026][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1685.341981][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1685.349949][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1685.357918][ C0] syz-executor.0 S29944 19630 6841 0x20020000 [ 1685.364240][ C0] Call Trace: [ 1685.367601][ C0] __schedule+0x8e1/0x1eb0 [ 1685.372030][ C0] ? io_schedule_timeout+0x140/0x140 [ 1685.377400][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1685.382850][ C0] schedule+0xd0/0x2a0 [ 1685.386976][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1685.392074][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1685.397263][ C0] futex_wait+0x1df/0x560 [ 1685.401770][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1685.406840][ C0] ? mark_lock+0xbc/0x1710 [ 1685.411388][ C0] ? mark_lock+0xbc/0x1710 [ 1685.415972][ C0] ? hash_futex+0x12/0x200 [ 1685.420390][ C0] ? futex_wake+0x155/0x490 [ 1685.424900][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1685.430996][ C0] do_futex+0x15b/0x1a60 [ 1685.435321][ C0] ? lock_acquire+0x1f1/0xad0 [ 1685.439985][ C0] ? __might_fault+0xef/0x1d0 [ 1685.444691][ C0] ? find_held_lock+0x2d/0x110 [ 1685.449442][ C0] ? futex_exit_release+0x220/0x220 [ 1685.454628][ C0] ? lock_downgrade+0x820/0x820 [ 1685.459553][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1685.465786][ C0] ? __might_fault+0x190/0x1d0 [ 1685.470540][ C0] ? _copy_to_user+0x126/0x160 [ 1685.475298][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1685.480801][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1685.486369][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1685.492251][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1685.497173][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1685.502363][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1685.507457][ C0] do_fast_syscall_32+0x7f/0x120 [ 1685.512382][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1685.517476][ C0] RIP: 0023:0xf7fd1569 [ 1685.521525][ C0] Code: Bad RIP value. [ 1685.525573][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1685.533964][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1685.541954][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1685.549999][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1685.558192][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1685.566148][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1685.574205][ C0] syz-executor.5 S29944 19635 7432 0x20020000 [ 1685.580566][ C0] Call Trace: [ 1685.583845][ C0] __schedule+0x8e1/0x1eb0 [ 1685.588253][ C0] ? io_schedule_timeout+0x140/0x140 [ 1685.593525][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1685.598975][ C0] schedule+0xd0/0x2a0 [ 1685.603045][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1685.608147][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1685.613331][ C0] ? futex_wake+0x1b5/0x490 [ 1685.617820][ C0] ? find_held_lock+0x2d/0x110 [ 1685.622603][ C0] futex_wait+0x1df/0x560 [ 1685.626922][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1685.631932][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1685.637002][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1685.642206][ C0] ? futex_wake+0x155/0x490 [ 1685.646710][ C0] ? do_wp_page+0x8e7/0x1950 [ 1685.651424][ C0] do_futex+0x15b/0x1a60 [ 1685.655656][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1685.660839][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1685.665677][ C0] ? do_wp_page+0x16a/0x1950 [ 1685.670430][ C0] ? futex_exit_release+0x220/0x220 [ 1685.675647][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1685.681018][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1685.685961][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1685.691158][ C0] ? find_held_lock+0x2d/0x110 [ 1685.696075][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1685.701257][ C0] ? __up_read+0x1a1/0x7b0 [ 1685.705926][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1685.711375][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1685.716910][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1685.721830][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1685.726960][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1685.732077][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1685.737346][ C0] do_fast_syscall_32+0x7f/0x120 [ 1685.742403][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1685.748024][ C0] RIP: 0023:0xf7f53569 [ 1685.752082][ C0] Code: Bad RIP value. [ 1685.756221][ C0] RSP: 002b:00000000f5d2d12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1685.764619][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1685.772612][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1685.780626][ C0] RBP: 00000000f5d2d228 R08: 0000000000000000 R09: 0000000000000000 [ 1685.788623][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1685.796655][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1685.804630][ C0] syz-executor.2 S29944 19637 7031 0x20020000 [ 1685.811028][ C0] Call Trace: [ 1685.814386][ C0] __schedule+0x8e1/0x1eb0 [ 1685.818794][ C0] ? io_schedule_timeout+0x140/0x140 [ 1685.824064][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1685.829514][ C0] schedule+0xd0/0x2a0 [ 1685.833569][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1685.838730][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1685.844094][ C0] futex_wait+0x1df/0x560 [ 1685.848410][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1685.853419][ C0] ? mark_lock+0xbc/0x1710 [ 1685.857821][ C0] ? mark_lock+0xbc/0x1710 [ 1685.862230][ C0] ? hash_futex+0x12/0x200 [ 1685.866672][ C0] ? futex_wake+0x155/0x490 [ 1685.871168][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1685.877133][ C0] do_futex+0x15b/0x1a60 [ 1685.881534][ C0] ? lock_acquire+0x1f1/0xad0 [ 1685.886214][ C0] ? __might_fault+0xef/0x1d0 [ 1685.891001][ C0] ? find_held_lock+0x2d/0x110 [ 1685.895760][ C0] ? futex_exit_release+0x220/0x220 [ 1685.901011][ C0] ? lock_downgrade+0x820/0x820 [ 1685.905849][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1685.912084][ C0] ? __might_fault+0x190/0x1d0 [ 1685.916833][ C0] ? _copy_to_user+0x126/0x160 [ 1685.921586][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1685.927157][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1685.932688][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1685.938580][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1685.943504][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1685.948606][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1685.953703][ C0] do_fast_syscall_32+0x7f/0x120 [ 1685.958626][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1685.963721][ C0] RIP: 0023:0xf7f91569 [ 1685.967768][ C0] Code: Bad RIP value. [ 1685.971817][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1685.980213][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1685.988260][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1685.996218][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1686.004207][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1686.012387][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1686.020375][ C0] syz-executor.1 S29944 19639 6979 0x20020000 [ 1686.026890][ C0] Call Trace: [ 1686.030172][ C0] __schedule+0x8e1/0x1eb0 [ 1686.034587][ C0] ? io_schedule_timeout+0x140/0x140 [ 1686.039860][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1686.045438][ C0] schedule+0xd0/0x2a0 [ 1686.049504][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1686.054602][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1686.059816][ C0] futex_wait+0x1df/0x560 [ 1686.064654][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1686.069666][ C0] ? mark_lock+0xbc/0x1710 [ 1686.074078][ C0] ? mark_lock+0xbc/0x1710 [ 1686.078503][ C0] ? hash_futex+0x12/0x200 [ 1686.082955][ C0] ? futex_wake+0x155/0x490 [ 1686.087454][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1686.093507][ C0] do_futex+0x15b/0x1a60 [ 1686.097742][ C0] ? lock_acquire+0x1f1/0xad0 [ 1686.102453][ C0] ? __might_fault+0xef/0x1d0 [ 1686.107113][ C0] ? find_held_lock+0x2d/0x110 [ 1686.111900][ C0] ? futex_exit_release+0x220/0x220 [ 1686.117086][ C0] ? lock_downgrade+0x820/0x820 [ 1686.121931][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1686.128159][ C0] ? __might_fault+0x190/0x1d0 [ 1686.132943][ C0] ? _copy_to_user+0x126/0x160 [ 1686.137696][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1686.143147][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1686.148680][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1686.154559][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1686.159484][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1686.164932][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1686.170416][ C0] do_fast_syscall_32+0x7f/0x120 [ 1686.175341][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1686.180435][ C0] RIP: 0023:0xf7fa1569 [ 1686.184485][ C0] Code: Bad RIP value. [ 1686.188707][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1686.197103][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1686.205085][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1686.213307][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1686.221388][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1686.229345][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1686.237395][ C0] syz-executor.0 S29944 19641 6841 0x20020000 [ 1686.243850][ C0] Call Trace: [ 1686.247128][ C0] __schedule+0x8e1/0x1eb0 [ 1686.251537][ C0] ? io_schedule_timeout+0x140/0x140 [ 1686.256981][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1686.262541][ C0] schedule+0xd0/0x2a0 [ 1686.266791][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1686.271896][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1686.277149][ C0] futex_wait+0x1df/0x560 [ 1686.281472][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1686.286677][ C0] ? mark_lock+0xbc/0x1710 [ 1686.291206][ C0] ? mark_lock+0xbc/0x1710 [ 1686.295613][ C0] ? hash_futex+0x12/0x200 [ 1686.300114][ C0] ? futex_wake+0x155/0x490 [ 1686.304610][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1686.310578][ C0] do_futex+0x15b/0x1a60 [ 1686.314815][ C0] ? lock_acquire+0x1f1/0xad0 [ 1686.319477][ C0] ? __might_fault+0xef/0x1d0 [ 1686.324141][ C0] ? find_held_lock+0x2d/0x110 [ 1686.328891][ C0] ? futex_exit_release+0x220/0x220 [ 1686.334078][ C0] ? lock_downgrade+0x820/0x820 [ 1686.339058][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1686.345288][ C0] ? __might_fault+0x190/0x1d0 [ 1686.350039][ C0] ? _copy_to_user+0x126/0x160 [ 1686.354792][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1686.360236][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1686.365767][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1686.371656][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1686.376606][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1686.381731][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1686.386836][ C0] do_fast_syscall_32+0x7f/0x120 [ 1686.391842][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1686.397373][ C0] RIP: 0023:0xf7fd1569 [ 1686.401425][ C0] Code: Bad RIP value. [ 1686.405474][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1686.413870][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1686.421826][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1686.430071][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1686.438152][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1686.446532][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1686.454540][ C0] syz-executor.2 S29944 19653 7031 0x20020000 [ 1686.460955][ C0] Call Trace: [ 1686.464242][ C0] __schedule+0x8e1/0x1eb0 [ 1686.468654][ C0] ? io_schedule_timeout+0x140/0x140 [ 1686.474044][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1686.479492][ C0] schedule+0xd0/0x2a0 [ 1686.483552][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1686.488653][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1686.493849][ C0] futex_wait+0x1df/0x560 [ 1686.498166][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1686.503180][ C0] ? mark_lock+0xbc/0x1710 [ 1686.507620][ C0] ? hash_futex+0x12/0x200 [ 1686.512024][ C0] ? futex_wake+0x155/0x490 [ 1686.516523][ C0] ? do_wp_page+0x8e7/0x1950 [ 1686.521135][ C0] do_futex+0x15b/0x1a60 [ 1686.525370][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1686.530553][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1686.535401][ C0] ? do_wp_page+0x16a/0x1950 [ 1686.539987][ C0] ? futex_exit_release+0x220/0x220 [ 1686.545172][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1686.550531][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1686.555493][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1686.560518][ C0] ? find_held_lock+0x2d/0x110 [ 1686.565356][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1686.570540][ C0] ? __up_read+0x1a1/0x7b0 [ 1686.574946][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1686.580392][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1686.585957][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1686.591144][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1686.596065][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1686.601253][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1686.606349][ C0] do_fast_syscall_32+0x7f/0x120 [ 1686.611277][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1686.616372][ C0] RIP: 0023:0xf7f91569 [ 1686.620462][ C0] Code: Bad RIP value. [ 1686.624517][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1686.632954][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1686.640914][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1686.648873][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1686.656830][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1686.664785][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1686.672757][ C0] syz-executor.5 S29944 19657 7432 0x20020000 [ 1686.679112][ C0] Call Trace: [ 1686.682432][ C0] __schedule+0x8e1/0x1eb0 [ 1686.686875][ C0] ? io_schedule_timeout+0x140/0x140 [ 1686.692146][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1686.697595][ C0] schedule+0xd0/0x2a0 [ 1686.701690][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1686.706787][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1686.712250][ C0] futex_wait+0x1df/0x560 [ 1686.716568][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1686.721580][ C0] ? mark_lock+0xbc/0x1710 [ 1686.726336][ C0] ? mark_lock+0xbc/0x1710 [ 1686.730737][ C0] ? hash_futex+0x12/0x200 [ 1686.735137][ C0] ? futex_wake+0x155/0x490 [ 1686.739634][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1686.745638][ C0] do_futex+0x15b/0x1a60 [ 1686.749874][ C0] ? lock_acquire+0x1f1/0xad0 [ 1686.754550][ C0] ? __might_fault+0xef/0x1d0 [ 1686.759211][ C0] ? find_held_lock+0x2d/0x110 [ 1686.764070][ C0] ? futex_exit_release+0x220/0x220 [ 1686.769257][ C0] ? lock_downgrade+0x820/0x820 [ 1686.774131][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1686.780400][ C0] ? __might_fault+0x190/0x1d0 [ 1686.785182][ C0] ? _copy_to_user+0x126/0x160 [ 1686.789977][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1686.795434][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1686.800999][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1686.806882][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1686.819619][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1686.824721][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1686.829858][ C0] do_fast_syscall_32+0x7f/0x120 [ 1686.834817][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1686.839949][ C0] RIP: 0023:0xf7f53569 [ 1686.844123][ C0] Code: Bad RIP value. [ 1686.848353][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1686.856753][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1686.864710][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1686.872702][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1686.880658][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1686.888646][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1686.896754][ C0] syz-executor.1 S29944 19660 6979 0x20020000 [ 1686.903074][ C0] Call Trace: [ 1686.906362][ C0] __schedule+0x8e1/0x1eb0 [ 1686.910809][ C0] ? io_schedule_timeout+0x140/0x140 [ 1686.916082][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1686.921531][ C0] schedule+0xd0/0x2a0 [ 1686.925622][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1686.930841][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1686.936025][ C0] futex_wait+0x1df/0x560 [ 1686.940389][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1686.945440][ C0] ? mark_lock+0xbc/0x1710 [ 1686.949844][ C0] ? mark_lock+0xbc/0x1710 [ 1686.954246][ C0] ? hash_futex+0x12/0x200 [ 1686.958683][ C0] ? futex_wake+0x155/0x490 [ 1686.963874][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1686.969840][ C0] do_futex+0x15b/0x1a60 [ 1686.974227][ C0] ? lock_acquire+0x1f1/0xad0 [ 1686.978888][ C0] ? __might_fault+0xef/0x1d0 [ 1686.983549][ C0] ? find_held_lock+0x2d/0x110 [ 1686.988299][ C0] ? futex_exit_release+0x220/0x220 [ 1686.993595][ C0] ? lock_downgrade+0x820/0x820 [ 1686.998434][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1687.004664][ C0] ? __might_fault+0x190/0x1d0 [ 1687.009414][ C0] ? _copy_to_user+0x126/0x160 [ 1687.014166][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1687.019616][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1687.025146][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1687.031027][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1687.036169][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1687.041339][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1687.046453][ C0] do_fast_syscall_32+0x7f/0x120 [ 1687.051389][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1687.056492][ C0] RIP: 0023:0xf7fa1569 [ 1687.060543][ C0] Code: Bad RIP value. [ 1687.064592][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1687.072989][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1687.080950][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1687.088906][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1687.096861][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1687.104815][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1687.112822][ C0] syz-executor.5 S29944 19678 7432 0x20020000 [ 1687.119443][ C0] Call Trace: [ 1687.122819][ C0] __schedule+0x8e1/0x1eb0 [ 1687.127228][ C0] ? io_schedule_timeout+0x140/0x140 [ 1687.132500][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1687.137950][ C0] schedule+0xd0/0x2a0 [ 1687.142029][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1687.147144][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1687.152654][ C0] ? futex_wake+0x1b5/0x490 [ 1687.157155][ C0] ? find_held_lock+0x2d/0x110 [ 1687.162037][ C0] futex_wait+0x1df/0x560 [ 1687.166365][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1687.171381][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1687.176324][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1687.181511][ C0] ? futex_wake+0x155/0x490 [ 1687.186010][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1687.191981][ C0] do_futex+0x15b/0x1a60 [ 1687.196282][ C0] ? lock_acquire+0x1f1/0xad0 [ 1687.200944][ C0] ? __might_fault+0xef/0x1d0 [ 1687.205603][ C0] ? find_held_lock+0x2d/0x110 [ 1687.210552][ C0] ? futex_exit_release+0x220/0x220 [ 1687.215760][ C0] ? lock_downgrade+0x820/0x820 [ 1687.220739][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1687.226976][ C0] ? __might_fault+0x190/0x1d0 [ 1687.231914][ C0] ? _copy_to_user+0x126/0x160 [ 1687.236681][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1687.242362][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1687.247900][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1687.253789][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1687.258715][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1687.263817][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1687.268912][ C0] do_fast_syscall_32+0x7f/0x120 [ 1687.273845][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1687.279080][ C0] RIP: 0023:0xf7f53569 [ 1687.283127][ C0] Code: Bad RIP value. [ 1687.287176][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1687.295573][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1687.303528][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1687.311588][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1687.319689][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1687.327818][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1687.335848][ C0] syz-executor.1 S29944 20138 6979 0x20020000 [ 1687.342174][ C0] Call Trace: [ 1687.345522][ C0] __schedule+0x8e1/0x1eb0 [ 1687.349937][ C0] ? io_schedule_timeout+0x140/0x140 [ 1687.355214][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1687.360665][ C0] schedule+0xd0/0x2a0 [ 1687.364722][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1687.369863][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1687.375085][ C0] ? futex_wake+0x1b5/0x490 [ 1687.379590][ C0] ? find_held_lock+0x2d/0x110 [ 1687.384352][ C0] futex_wait+0x1df/0x560 [ 1687.388677][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1687.393693][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1687.398873][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1687.404065][ C0] ? futex_wake+0x155/0x490 [ 1687.408572][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1687.414545][ C0] do_futex+0x15b/0x1a60 [ 1687.418913][ C0] ? lock_acquire+0x1f1/0xad0 [ 1687.423577][ C0] ? __might_fault+0xef/0x1d0 [ 1687.428240][ C0] ? find_held_lock+0x2d/0x110 [ 1687.433139][ C0] ? futex_exit_release+0x220/0x220 [ 1687.438551][ C0] ? lock_downgrade+0x820/0x820 [ 1687.443397][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1687.449765][ C0] ? __might_fault+0x190/0x1d0 [ 1687.454520][ C0] ? _copy_to_user+0x126/0x160 [ 1687.459275][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1687.464744][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1687.470472][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1687.476365][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1687.481303][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1687.486404][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1687.491616][ C0] do_fast_syscall_32+0x7f/0x120 [ 1687.497669][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1687.502763][ C0] RIP: 0023:0xf7fa1569 [ 1687.506948][ C0] Code: Bad RIP value. [ 1687.510998][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1687.519391][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1687.527344][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1687.535300][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1687.543254][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1687.551215][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1687.559186][ C0] syz-executor.1 S29024 20196 6979 0x20020000 [ 1687.565504][ C0] Call Trace: [ 1687.568859][ C0] __schedule+0x8e1/0x1eb0 [ 1687.573264][ C0] ? io_schedule_timeout+0x140/0x140 [ 1687.578546][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1687.583995][ C0] schedule+0xd0/0x2a0 [ 1687.588094][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1687.593225][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1687.598445][ C0] futex_wait+0x1df/0x560 [ 1687.602779][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1687.607790][ C0] ? mark_lock+0xbc/0x1710 [ 1687.612283][ C0] ? hash_futex+0x12/0x200 [ 1687.616707][ C0] ? futex_wake+0x155/0x490 [ 1687.621202][ C0] ? do_wp_page+0x8e7/0x1950 [ 1687.625781][ C0] do_futex+0x15b/0x1a60 [ 1687.630050][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1687.635232][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1687.640070][ C0] ? do_wp_page+0x16a/0x1950 [ 1687.644645][ C0] ? futex_exit_release+0x220/0x220 [ 1687.649830][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1687.655187][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1687.660118][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1687.665128][ C0] ? find_held_lock+0x2d/0x110 [ 1687.669886][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1687.675071][ C0] ? __up_read+0x1a1/0x7b0 [ 1687.679526][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1687.684972][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1687.690590][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1687.695510][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1687.700481][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1687.705578][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1687.710671][ C0] do_fast_syscall_32+0x7f/0x120 [ 1687.715590][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1687.720684][ C0] RIP: 0023:0xf7fa1569 [ 1687.725861][ C0] Code: Bad RIP value. [ 1687.729904][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1687.738316][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1687.748376][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1687.756340][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1687.764307][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1687.772292][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1687.780259][ C0] syz-executor.2 S29512 20298 7031 0x20020000 [ 1687.786617][ C0] Call Trace: [ 1687.789906][ C0] __schedule+0x8e1/0x1eb0 [ 1687.794391][ C0] ? io_schedule_timeout+0x140/0x140 [ 1687.799656][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1687.805093][ C0] schedule+0xd0/0x2a0 [ 1687.809141][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1687.814228][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1687.819431][ C0] futex_wait+0x1df/0x560 [ 1687.823768][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1687.828822][ C0] ? wake_up_q+0xa3/0x100 [ 1687.834173][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1687.839353][ C0] ? futex_wake+0x155/0x490 [ 1687.843860][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1687.849818][ C0] do_futex+0x15b/0x1a60 [ 1687.854046][ C0] ? lock_acquire+0x1f1/0xad0 [ 1687.858698][ C0] ? __might_fault+0xef/0x1d0 [ 1687.863349][ C0] ? find_held_lock+0x2d/0x110 [ 1687.868088][ C0] ? futex_exit_release+0x220/0x220 [ 1687.873273][ C0] ? lock_downgrade+0x820/0x820 [ 1687.878101][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1687.884321][ C0] ? __might_fault+0x190/0x1d0 [ 1687.889060][ C0] ? _copy_to_user+0x126/0x160 [ 1687.893829][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1687.899287][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1687.905850][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1687.911372][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1687.916458][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1687.921554][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1687.926644][ C0] do_fast_syscall_32+0x7f/0x120 [ 1687.931567][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1687.936651][ C0] RIP: 0023:0xf7f91569 [ 1687.940689][ C0] Code: Bad RIP value. [ 1687.944737][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1687.953136][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1687.961082][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1687.969027][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1687.976990][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1687.984936][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1687.992896][ C0] syz-executor.0 S29832 20572 6841 0x20020000 [ 1687.999205][ C0] Call Trace: [ 1688.002490][ C0] __schedule+0x8e1/0x1eb0 [ 1688.007938][ C0] ? io_schedule_timeout+0x140/0x140 [ 1688.013216][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1688.018665][ C0] schedule+0xd0/0x2a0 [ 1688.022713][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1688.027885][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1688.033080][ C0] futex_wait+0x1df/0x560 [ 1688.037387][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1688.042387][ C0] ? mark_lock+0xbc/0x1710 [ 1688.046791][ C0] ? mark_lock+0xbc/0x1710 [ 1688.051181][ C0] ? hash_futex+0x12/0x200 [ 1688.055600][ C0] ? futex_wake+0x155/0x490 [ 1688.060109][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1688.066072][ C0] do_futex+0x15b/0x1a60 [ 1688.070313][ C0] ? lock_acquire+0x1f1/0xad0 [ 1688.074986][ C0] ? __might_fault+0xef/0x1d0 [ 1688.079639][ C0] ? find_held_lock+0x2d/0x110 [ 1688.084393][ C0] ? futex_exit_release+0x220/0x220 [ 1688.089571][ C0] ? lock_downgrade+0x820/0x820 [ 1688.094401][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1688.100620][ C0] ? __might_fault+0x190/0x1d0 [ 1688.105357][ C0] ? _copy_to_user+0x126/0x160 [ 1688.110100][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1688.115536][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1688.121056][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1688.126926][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1688.131841][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1688.136931][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1688.142017][ C0] do_fast_syscall_32+0x7f/0x120 [ 1688.146933][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1688.152190][ C0] RIP: 0023:0xf7fd1569 [ 1688.156243][ C0] Code: Bad RIP value. [ 1688.160283][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1688.168685][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1688.176650][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1688.184609][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1688.192560][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1688.200508][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.208473][ C0] syz-executor.0 S29936 20581 6841 0x20020000 [ 1688.214783][ C0] Call Trace: [ 1688.218056][ C0] __schedule+0x8e1/0x1eb0 [ 1688.222477][ C0] ? io_schedule_timeout+0x140/0x140 [ 1688.227747][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1688.233192][ C0] schedule+0xd0/0x2a0 [ 1688.237245][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1688.243123][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1688.248300][ C0] ? futex_wake+0x1b5/0x490 [ 1688.252783][ C0] ? find_held_lock+0x2d/0x110 [ 1688.257527][ C0] futex_wait+0x1df/0x560 [ 1688.261836][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1688.267006][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1688.271920][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1688.277095][ C0] ? futex_wake+0x155/0x490 [ 1688.281588][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1688.287573][ C0] do_futex+0x15b/0x1a60 [ 1688.291806][ C0] ? lock_acquire+0x1f1/0xad0 [ 1688.296545][ C0] ? __might_fault+0xef/0x1d0 [ 1688.301199][ C0] ? find_held_lock+0x2d/0x110 [ 1688.305966][ C0] ? futex_exit_release+0x220/0x220 [ 1688.311164][ C0] ? lock_downgrade+0x820/0x820 [ 1688.316207][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1688.322440][ C0] ? __might_fault+0x190/0x1d0 [ 1688.327183][ C0] ? _copy_to_user+0x126/0x160 [ 1688.331930][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1688.337374][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1688.342926][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1688.348822][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1688.353741][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1688.358868][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1688.363964][ C0] do_fast_syscall_32+0x7f/0x120 [ 1688.369072][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1688.374167][ C0] RIP: 0023:0xf7fd1569 [ 1688.378208][ C0] Code: Bad RIP value. [ 1688.382396][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1688.390796][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1688.398751][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1688.406702][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1688.414649][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1688.422612][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.430575][ C0] syz-executor.0 S29936 20605 6841 0x20020000 [ 1688.436898][ C0] Call Trace: [ 1688.440183][ C0] __schedule+0x8e1/0x1eb0 [ 1688.444592][ C0] ? io_schedule_timeout+0x140/0x140 [ 1688.449858][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1688.455302][ C0] schedule+0xd0/0x2a0 [ 1688.459359][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1688.464447][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1688.469625][ C0] futex_wait+0x1df/0x560 [ 1688.473935][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1688.478933][ C0] ? mark_lock+0xbc/0x1710 [ 1688.484194][ C0] ? mark_lock+0xbc/0x1710 [ 1688.488585][ C0] ? hash_futex+0x12/0x200 [ 1688.492977][ C0] ? futex_wake+0x155/0x490 [ 1688.497480][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1688.503437][ C0] do_futex+0x15b/0x1a60 [ 1688.507661][ C0] ? lock_acquire+0x1f1/0xad0 [ 1688.512316][ C0] ? __might_fault+0xef/0x1d0 [ 1688.516978][ C0] ? find_held_lock+0x2d/0x110 [ 1688.521721][ C0] ? futex_exit_release+0x220/0x220 [ 1688.526896][ C0] ? lock_downgrade+0x820/0x820 [ 1688.531740][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1688.538936][ C0] ? __might_fault+0x190/0x1d0 [ 1688.543676][ C0] ? _copy_to_user+0x126/0x160 [ 1688.548438][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1688.553901][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1688.559474][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1688.565370][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1688.570306][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1688.575419][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1688.580509][ C0] do_fast_syscall_32+0x7f/0x120 [ 1688.585432][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1688.590557][ C0] RIP: 0023:0xf7fd1569 [ 1688.594597][ C0] Code: Bad RIP value. [ 1688.598638][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1688.607023][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1688.614972][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1688.622922][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1688.630870][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1688.638835][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.646803][ C0] syz-executor.0 S29936 20627 6841 0x20020000 [ 1688.653133][ C0] Call Trace: [ 1688.656404][ C0] __schedule+0x8e1/0x1eb0 [ 1688.660803][ C0] ? io_schedule_timeout+0x140/0x140 [ 1688.666069][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1688.671510][ C0] schedule+0xd0/0x2a0 [ 1688.675561][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1688.680647][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1688.685843][ C0] futex_wait+0x1df/0x560 [ 1688.690156][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1688.695176][ C0] ? mark_lock+0xbc/0x1710 [ 1688.699573][ C0] ? mark_lock+0xbc/0x1710 [ 1688.703965][ C0] ? hash_futex+0x12/0x200 [ 1688.708359][ C0] ? futex_wake+0x155/0x490 [ 1688.712848][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1688.718826][ C0] do_futex+0x15b/0x1a60 [ 1688.723068][ C0] ? lock_acquire+0x1f1/0xad0 [ 1688.727723][ C0] ? __might_fault+0xef/0x1d0 [ 1688.732379][ C0] ? find_held_lock+0x2d/0x110 [ 1688.737137][ C0] ? futex_exit_release+0x220/0x220 [ 1688.742313][ C0] ? lock_downgrade+0x820/0x820 [ 1688.747141][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1688.753381][ C0] ? __might_fault+0x190/0x1d0 [ 1688.758139][ C0] ? _copy_to_user+0x126/0x160 [ 1688.762903][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1688.768342][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1688.773891][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1688.779763][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1688.784683][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1688.789777][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1688.794868][ C0] do_fast_syscall_32+0x7f/0x120 [ 1688.799785][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1688.804887][ C0] RIP: 0023:0xf7fd1569 [ 1688.809029][ C0] Code: Bad RIP value. [ 1688.813073][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1688.821547][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1688.829518][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1688.837465][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1688.845421][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1688.853387][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.861364][ C0] syz-executor.1 S29944 20898 6979 0x20020000 [ 1688.867674][ C0] Call Trace: [ 1688.871033][ C0] __schedule+0x8e1/0x1eb0 [ 1688.875430][ C0] ? io_schedule_timeout+0x140/0x140 [ 1688.880690][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1688.886128][ C0] schedule+0xd0/0x2a0 [ 1688.890193][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1688.895278][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1688.900454][ C0] futex_wait+0x1df/0x560 [ 1688.904772][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1688.909774][ C0] ? mark_lock+0xbc/0x1710 [ 1688.914166][ C0] ? hash_futex+0x12/0x200 [ 1688.918587][ C0] ? futex_wake+0x155/0x490 [ 1688.923074][ C0] ? do_wp_page+0x8e7/0x1950 [ 1688.927858][ C0] do_futex+0x15b/0x1a60 [ 1688.932083][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1688.937257][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1688.942105][ C0] ? do_wp_page+0x16a/0x1950 [ 1688.946672][ C0] ? futex_exit_release+0x220/0x220 [ 1688.951862][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1688.957207][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1688.962124][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1688.967127][ C0] ? find_held_lock+0x2d/0x110 [ 1688.971869][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1688.977057][ C0] ? __up_read+0x1a1/0x7b0 [ 1688.981457][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1688.986897][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1688.992420][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1688.997338][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1689.002252][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1689.007365][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1689.012480][ C0] do_fast_syscall_32+0x7f/0x120 [ 1689.017414][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1689.022523][ C0] RIP: 0023:0xf7fa1569 [ 1689.026561][ C0] Code: Bad RIP value. [ 1689.030600][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1689.039175][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1689.047123][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1689.055069][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1689.063033][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1689.071169][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1689.079129][ C0] syz-executor.1 S29944 20927 6979 0x20020000 [ 1689.085438][ C0] Call Trace: [ 1689.088706][ C0] __schedule+0x8e1/0x1eb0 [ 1689.093104][ C0] ? io_schedule_timeout+0x140/0x140 [ 1689.098383][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1689.103820][ C0] schedule+0xd0/0x2a0 [ 1689.107866][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1689.112970][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1689.118234][ C0] futex_wait+0x1df/0x560 [ 1689.122541][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1689.127541][ C0] ? mark_lock+0xbc/0x1710 [ 1689.131936][ C0] ? mark_lock+0xbc/0x1710 [ 1689.136396][ C0] ? hash_futex+0x12/0x200 [ 1689.140807][ C0] ? futex_wake+0x155/0x490 [ 1689.145311][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1689.151269][ C0] do_futex+0x15b/0x1a60 [ 1689.155514][ C0] ? lock_acquire+0x1f1/0xad0 [ 1689.160167][ C0] ? __might_fault+0xef/0x1d0 [ 1689.164818][ C0] ? find_held_lock+0x2d/0x110 [ 1689.169560][ C0] ? futex_exit_release+0x220/0x220 [ 1689.174737][ C0] ? lock_downgrade+0x820/0x820 [ 1689.179567][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1689.185786][ C0] ? __might_fault+0x190/0x1d0 [ 1689.190527][ C0] ? _copy_to_user+0x126/0x160 [ 1689.195268][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1689.200709][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1689.206275][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1689.212152][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1689.217073][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1689.222185][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1689.227283][ C0] do_fast_syscall_32+0x7f/0x120 [ 1689.232201][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1689.237289][ C0] RIP: 0023:0xf7fa1569 [ 1689.241335][ C0] Code: Bad RIP value. [ 1689.245392][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1689.253798][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1689.261744][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1689.269702][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1689.277663][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1689.285613][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1689.293587][ C0] syz-executor.5 S29944 20954 7432 0x20020000 [ 1689.299924][ C0] Call Trace: [ 1689.303189][ C0] __schedule+0x8e1/0x1eb0 [ 1689.307606][ C0] ? io_schedule_timeout+0x140/0x140 [ 1689.312868][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1689.318306][ C0] schedule+0xd0/0x2a0 [ 1689.322355][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1689.327439][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1689.332632][ C0] futex_wait+0x1df/0x560 [ 1689.336954][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1689.341955][ C0] ? mark_lock+0xbc/0x1710 [ 1689.346349][ C0] ? mark_lock+0xbc/0x1710 [ 1689.350770][ C0] ? hash_futex+0x12/0x200 [ 1689.355170][ C0] ? futex_wake+0x155/0x490 [ 1689.359679][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1689.365645][ C0] do_futex+0x15b/0x1a60 [ 1689.369880][ C0] ? lock_acquire+0x1f1/0xad0 [ 1689.374537][ C0] ? __might_fault+0xef/0x1d0 [ 1689.379192][ C0] ? find_held_lock+0x2d/0x110 [ 1689.384085][ C0] ? futex_exit_release+0x220/0x220 [ 1689.389270][ C0] ? lock_downgrade+0x820/0x820 [ 1689.394108][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1689.400335][ C0] ? __might_fault+0x190/0x1d0 [ 1689.405080][ C0] ? _copy_to_user+0x126/0x160 [ 1689.409884][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1689.415323][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1689.420842][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1689.426826][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1689.431741][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1689.436833][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1689.441938][ C0] do_fast_syscall_32+0x7f/0x120 [ 1689.447808][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1689.452894][ C0] RIP: 0023:0xf7f53569 [ 1689.456932][ C0] Code: Bad RIP value. [ 1689.468414][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1689.476811][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1689.484767][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1689.492806][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1689.500755][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1689.508733][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1689.516695][ C0] syz-executor.1 S29944 20955 6979 0x20020000 [ 1689.523017][ C0] Call Trace: [ 1689.526289][ C0] __schedule+0x8e1/0x1eb0 [ 1689.530693][ C0] ? io_schedule_timeout+0x140/0x140 [ 1689.535955][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1689.541410][ C0] schedule+0xd0/0x2a0 [ 1689.545467][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1689.550553][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1689.555724][ C0] ? futex_wake+0x1b5/0x490 [ 1689.560202][ C0] ? find_held_lock+0x2d/0x110 [ 1689.564943][ C0] futex_wait+0x1df/0x560 [ 1689.569253][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1689.574254][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1689.579202][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1689.584386][ C0] ? futex_wake+0x155/0x490 [ 1689.588873][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1689.594829][ C0] do_futex+0x15b/0x1a60 [ 1689.599054][ C0] ? lock_acquire+0x1f1/0xad0 [ 1689.603706][ C0] ? __might_fault+0xef/0x1d0 [ 1689.608358][ C0] ? find_held_lock+0x2d/0x110 [ 1689.613116][ C0] ? futex_exit_release+0x220/0x220 [ 1689.618291][ C0] ? lock_downgrade+0x820/0x820 [ 1689.623121][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1689.629515][ C0] ? __might_fault+0x190/0x1d0 [ 1689.634263][ C0] ? _copy_to_user+0x126/0x160 [ 1689.639007][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1689.644464][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1689.650004][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1689.655927][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1689.660843][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1689.665943][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1689.671032][ C0] do_fast_syscall_32+0x7f/0x120 [ 1689.675948][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1689.681036][ C0] RIP: 0023:0xf7fa1569 [ 1689.685075][ C0] Code: Bad RIP value. [ 1689.689115][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1689.697500][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1689.705446][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1689.713394][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1689.721342][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1689.729302][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1689.737261][ C0] syz-executor.1 S29944 20970 6979 0x20020000 [ 1689.743573][ C0] Call Trace: [ 1689.746841][ C0] __schedule+0x8e1/0x1eb0 [ 1689.751253][ C0] ? io_schedule_timeout+0x140/0x140 [ 1689.756515][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1689.761955][ C0] schedule+0xd0/0x2a0 [ 1689.766020][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1689.771107][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1689.776284][ C0] futex_wait+0x1df/0x560 [ 1689.780611][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1689.785613][ C0] ? mark_lock+0xbc/0x1710 [ 1689.790022][ C0] ? mark_lock+0xbc/0x1710 [ 1689.794413][ C0] ? hash_futex+0x12/0x200 [ 1689.798809][ C0] ? futex_wake+0x155/0x490 [ 1689.803299][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1689.809260][ C0] do_futex+0x15b/0x1a60 [ 1689.813485][ C0] ? lock_acquire+0x1f1/0xad0 [ 1689.818137][ C0] ? __might_fault+0xef/0x1d0 [ 1689.822790][ C0] ? find_held_lock+0x2d/0x110 [ 1689.827530][ C0] ? futex_exit_release+0x220/0x220 [ 1689.832722][ C0] ? lock_downgrade+0x820/0x820 [ 1689.837551][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1689.844208][ C0] ? __might_fault+0x190/0x1d0 [ 1689.848949][ C0] ? _copy_to_user+0x126/0x160 [ 1689.853710][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1689.859338][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1689.864858][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1689.870742][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1689.875658][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1689.880750][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1689.885837][ C0] do_fast_syscall_32+0x7f/0x120 [ 1689.890768][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1689.895868][ C0] RIP: 0023:0xf7fa1569 [ 1689.899908][ C0] Code: Bad RIP value. [ 1689.903951][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1689.912350][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1689.920298][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1689.928246][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1689.936207][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1689.944157][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1689.952115][ C0] syz-executor.5 S29944 20971 7432 0x20020000 [ 1689.958424][ C0] Call Trace: [ 1689.961694][ C0] __schedule+0x8e1/0x1eb0 [ 1689.966092][ C0] ? io_schedule_timeout+0x140/0x140 [ 1689.971354][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1689.976808][ C0] schedule+0xd0/0x2a0 [ 1689.980943][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1689.986028][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1689.991199][ C0] ? futex_wake+0x1b5/0x490 [ 1689.995676][ C0] ? find_held_lock+0x2d/0x110 [ 1690.000419][ C0] futex_wait+0x1df/0x560 [ 1690.004724][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1690.009721][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1690.014831][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1690.020015][ C0] ? futex_wake+0x155/0x490 [ 1690.024515][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1690.030484][ C0] do_futex+0x15b/0x1a60 [ 1690.034714][ C0] ? lock_acquire+0x1f1/0xad0 [ 1690.039368][ C0] ? __might_fault+0xef/0x1d0 [ 1690.044074][ C0] ? find_held_lock+0x2d/0x110 [ 1690.048817][ C0] ? futex_exit_release+0x220/0x220 [ 1690.054001][ C0] ? lock_downgrade+0x820/0x820 [ 1690.058853][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1690.065074][ C0] ? __might_fault+0x190/0x1d0 [ 1690.069814][ C0] ? _copy_to_user+0x126/0x160 [ 1690.074557][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1690.079996][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1690.085533][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1690.091405][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1690.096318][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1690.101410][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1690.106520][ C0] do_fast_syscall_32+0x7f/0x120 [ 1690.111435][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1690.116520][ C0] RIP: 0023:0xf7f53569 [ 1690.120559][ C0] Code: Bad RIP value. [ 1690.124689][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1690.133077][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1690.141025][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1690.148974][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1690.157267][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1690.165212][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1690.173174][ C0] syz-executor.5 S29944 20977 7432 0x20020000 [ 1690.179486][ C0] Call Trace: [ 1690.182753][ C0] __schedule+0x8e1/0x1eb0 [ 1690.187151][ C0] ? io_schedule_timeout+0x140/0x140 [ 1690.192410][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1690.197848][ C0] schedule+0xd0/0x2a0 [ 1690.202012][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1690.207619][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1690.212796][ C0] futex_wait+0x1df/0x560 [ 1690.217103][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1690.222101][ C0] ? mark_lock+0xbc/0x1710 [ 1690.226496][ C0] ? mark_lock+0xbc/0x1710 [ 1690.230888][ C0] ? hash_futex+0x12/0x200 [ 1690.235286][ C0] ? futex_wake+0x155/0x490 [ 1690.239790][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1690.245745][ C0] do_futex+0x15b/0x1a60 [ 1690.249971][ C0] ? lock_acquire+0x1f1/0xad0 [ 1690.254625][ C0] ? __might_fault+0xef/0x1d0 [ 1690.259278][ C0] ? find_held_lock+0x2d/0x110 [ 1690.264017][ C0] ? futex_exit_release+0x220/0x220 [ 1690.269195][ C0] ? lock_downgrade+0x820/0x820 [ 1690.274065][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1690.280287][ C0] ? __might_fault+0x190/0x1d0 [ 1690.285028][ C0] ? _copy_to_user+0x126/0x160 [ 1690.289776][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1690.295212][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1690.300735][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1690.306604][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1690.311517][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1690.316607][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1690.321697][ C0] do_fast_syscall_32+0x7f/0x120 [ 1690.326610][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1690.331694][ C0] RIP: 0023:0xf7f53569 [ 1690.335731][ C0] Code: Bad RIP value. [ 1690.339770][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1690.348156][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1690.356121][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1690.364431][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1690.372392][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1690.380433][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1690.388413][ C0] bond5 I30952 21334 2 0x00004000 [ 1690.394733][ C0] Call Trace: [ 1690.398009][ C0] __schedule+0x8e1/0x1eb0 [ 1690.402411][ C0] ? io_schedule_timeout+0x140/0x140 [ 1690.407673][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1690.412721][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1690.417902][ C0] schedule+0xd0/0x2a0 [ 1690.421951][ C0] rescuer_thread+0x7a7/0xd30 [ 1690.426611][ C0] ? worker_thread+0x1120/0x1120 [ 1690.431528][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1690.436618][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1690.441704][ C0] ? worker_thread+0x1120/0x1120 [ 1690.446617][ C0] kthread+0x3b5/0x4a0 [ 1690.450660][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.455759][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.460849][ C0] ret_from_fork+0x1f/0x30 [ 1690.465247][ C0] bond6 I30952 21403 2 0x00004000 [ 1690.471572][ C0] Call Trace: [ 1690.474838][ C0] __schedule+0x8e1/0x1eb0 [ 1690.479233][ C0] ? io_schedule_timeout+0x140/0x140 [ 1690.484492][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1690.489492][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1690.494683][ C0] schedule+0xd0/0x2a0 [ 1690.498729][ C0] rescuer_thread+0x7a7/0xd30 [ 1690.503389][ C0] ? worker_thread+0x1120/0x1120 [ 1690.508303][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1690.513402][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1690.518420][ C0] ? worker_thread+0x1120/0x1120 [ 1690.523333][ C0] kthread+0x3b5/0x4a0 [ 1690.527396][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.532481][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.537569][ C0] ret_from_fork+0x1f/0x30 [ 1690.541983][ C0] bond5 I30952 21447 2 0x00004000 [ 1690.548301][ C0] Call Trace: [ 1690.551578][ C0] __schedule+0x8e1/0x1eb0 [ 1690.555977][ C0] ? io_schedule_timeout+0x140/0x140 [ 1690.561239][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1690.566239][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1690.571588][ C0] schedule+0xd0/0x2a0 [ 1690.575634][ C0] rescuer_thread+0x7a7/0xd30 [ 1690.580295][ C0] ? worker_thread+0x1120/0x1120 [ 1690.585209][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1690.590313][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1690.595312][ C0] ? worker_thread+0x1120/0x1120 [ 1690.600226][ C0] kthread+0x3b5/0x4a0 [ 1690.604268][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.609355][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.614443][ C0] ret_from_fork+0x1f/0x30 [ 1690.618863][ C0] syz-executor.5 S28736 21488 7432 0x20020000 [ 1690.625179][ C0] Call Trace: [ 1690.628590][ C0] __schedule+0x8e1/0x1eb0 [ 1690.632993][ C0] ? io_schedule_timeout+0x140/0x140 [ 1690.638261][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1690.643707][ C0] schedule+0xd0/0x2a0 [ 1690.647755][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1690.652851][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1690.658195][ C0] ? futex_wake+0x1b5/0x490 [ 1690.662674][ C0] ? find_held_lock+0x2d/0x110 [ 1690.667416][ C0] futex_wait+0x1df/0x560 [ 1690.671723][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1690.676719][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1690.681634][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1690.686840][ C0] ? futex_wake+0x155/0x490 [ 1690.691369][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1690.697326][ C0] do_futex+0x15b/0x1a60 [ 1690.701570][ C0] ? lock_acquire+0x1f1/0xad0 [ 1690.706223][ C0] ? __might_fault+0xef/0x1d0 [ 1690.710875][ C0] ? find_held_lock+0x2d/0x110 [ 1690.715632][ C0] ? futex_exit_release+0x220/0x220 [ 1690.720808][ C0] ? lock_downgrade+0x820/0x820 [ 1690.725721][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1690.731940][ C0] ? __might_fault+0x190/0x1d0 [ 1690.736680][ C0] ? _copy_to_user+0x126/0x160 [ 1690.741422][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1690.746860][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1690.752379][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1690.758266][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1690.763179][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1690.768270][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1690.773359][ C0] do_fast_syscall_32+0x7f/0x120 [ 1690.778276][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1690.783380][ C0] RIP: 0023:0xf7f53569 [ 1690.787418][ C0] Code: Bad RIP value. [ 1690.791458][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1690.799859][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1690.807804][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1690.815751][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1690.823699][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1690.831646][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1690.839607][ C0] bond7 I30856 21496 2 0x00004000 [ 1690.845918][ C0] Call Trace: [ 1690.849185][ C0] __schedule+0x8e1/0x1eb0 [ 1690.853581][ C0] ? io_schedule_timeout+0x140/0x140 [ 1690.858842][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1690.863859][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1690.869032][ C0] schedule+0xd0/0x2a0 [ 1690.873079][ C0] rescuer_thread+0x7a7/0xd30 [ 1690.877740][ C0] ? worker_thread+0x1120/0x1120 [ 1690.882658][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1690.887747][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1690.892766][ C0] ? worker_thread+0x1120/0x1120 [ 1690.897709][ C0] kthread+0x3b5/0x4a0 [ 1690.901857][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.906943][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1690.912032][ C0] ret_from_fork+0x1f/0x30 [ 1690.916430][ C0] syz-executor.5 S29944 21535 7432 0x20020000 [ 1690.926237][ C0] Call Trace: [ 1690.929504][ C0] __schedule+0x8e1/0x1eb0 [ 1690.933904][ C0] ? io_schedule_timeout+0x140/0x140 [ 1690.939166][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1690.944603][ C0] schedule+0xd0/0x2a0 [ 1690.948669][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1690.953756][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1690.958929][ C0] futex_wait+0x1df/0x560 [ 1690.963238][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1690.968244][ C0] ? wake_up_q+0xa3/0x100 [ 1690.972549][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1690.977724][ C0] ? futex_wake+0x155/0x490 [ 1690.982212][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1690.988342][ C0] do_futex+0x15b/0x1a60 [ 1690.992584][ C0] ? lock_acquire+0x1f1/0xad0 [ 1690.997237][ C0] ? __might_fault+0xef/0x1d0 [ 1691.001888][ C0] ? find_held_lock+0x2d/0x110 [ 1691.006629][ C0] ? futex_exit_release+0x220/0x220 [ 1691.012081][ C0] ? lock_downgrade+0x820/0x820 [ 1691.016909][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1691.023171][ C0] ? __might_fault+0x190/0x1d0 [ 1691.027910][ C0] ? _copy_to_user+0x126/0x160 [ 1691.032655][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1691.038093][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1691.043006][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1691.048545][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1691.053458][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1691.058551][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1691.063638][ C0] do_fast_syscall_32+0x7f/0x120 [ 1691.068556][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1691.073643][ C0] RIP: 0023:0xf7f53569 [ 1691.077681][ C0] Code: Bad RIP value. [ 1691.081721][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1691.090105][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1691.098053][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1691.106001][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1691.113962][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1691.121909][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1691.129868][ C0] syz-executor.5 S29944 21550 7432 0x20020000 [ 1691.136174][ C0] Call Trace: [ 1691.139464][ C0] __schedule+0x8e1/0x1eb0 [ 1691.143878][ C0] ? io_schedule_timeout+0x140/0x140 [ 1691.149159][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1691.154607][ C0] schedule+0xd0/0x2a0 [ 1691.158658][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1691.163747][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1691.168925][ C0] futex_wait+0x1df/0x560 [ 1691.173253][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1691.178263][ C0] ? wake_up_q+0xa3/0x100 [ 1691.182570][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1691.187751][ C0] ? futex_wake+0x155/0x490 [ 1691.192293][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1691.198320][ C0] do_futex+0x15b/0x1a60 [ 1691.202548][ C0] ? lock_acquire+0x1f1/0xad0 [ 1691.207220][ C0] ? __might_fault+0xef/0x1d0 [ 1691.211872][ C0] ? find_held_lock+0x2d/0x110 [ 1691.216968][ C0] ? futex_exit_release+0x220/0x220 [ 1691.222143][ C0] ? lock_downgrade+0x820/0x820 [ 1691.226973][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1691.233209][ C0] ? __might_fault+0x190/0x1d0 [ 1691.237948][ C0] ? _copy_to_user+0x126/0x160 [ 1691.242689][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1691.248133][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1691.253046][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1691.258601][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1691.263515][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1691.268607][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1691.273711][ C0] do_fast_syscall_32+0x7f/0x120 [ 1691.278645][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1691.283731][ C0] RIP: 0023:0xf7f53569 [ 1691.287794][ C0] Code: Bad RIP value. [ 1691.291851][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1691.300235][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1691.308183][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1691.316129][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1691.324096][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1691.332058][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1691.340038][ C0] bond6 I30952 21553 2 0x00004000 [ 1691.346348][ C0] Call Trace: [ 1691.349617][ C0] __schedule+0x8e1/0x1eb0 [ 1691.354013][ C0] ? io_schedule_timeout+0x140/0x140 [ 1691.359275][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1691.364275][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1691.369450][ C0] schedule+0xd0/0x2a0 [ 1691.373521][ C0] rescuer_thread+0x7a7/0xd30 [ 1691.378189][ C0] ? worker_thread+0x1120/0x1120 [ 1691.383161][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1691.388286][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1691.393291][ C0] ? worker_thread+0x1120/0x1120 [ 1691.398205][ C0] kthread+0x3b5/0x4a0 [ 1691.403213][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1691.408302][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1691.413393][ C0] ret_from_fork+0x1f/0x30 [ 1691.417794][ C0] syz-executor.5 S29944 21598 7432 0x20020000 [ 1691.424451][ C0] Call Trace: [ 1691.427720][ C0] __schedule+0x8e1/0x1eb0 [ 1691.432123][ C0] ? io_schedule_timeout+0x140/0x140 [ 1691.437819][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1691.443258][ C0] schedule+0xd0/0x2a0 [ 1691.447304][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1691.452390][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1691.457582][ C0] futex_wait+0x1df/0x560 [ 1691.461892][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1691.466897][ C0] ? wake_up_q+0xa3/0x100 [ 1691.471199][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1691.476373][ C0] ? futex_wake+0x155/0x490 [ 1691.480861][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1691.486837][ C0] do_futex+0x15b/0x1a60 [ 1691.491058][ C0] ? lock_acquire+0x1f1/0xad0 [ 1691.495709][ C0] ? __might_fault+0xef/0x1d0 [ 1691.500376][ C0] ? find_held_lock+0x2d/0x110 [ 1691.505131][ C0] ? futex_exit_release+0x220/0x220 [ 1691.510310][ C0] ? lock_downgrade+0x820/0x820 [ 1691.515139][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1691.521359][ C0] ? __might_fault+0x190/0x1d0 [ 1691.526099][ C0] ? _copy_to_user+0x126/0x160 [ 1691.530842][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1691.536278][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1691.541797][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1691.547666][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1691.552577][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1691.557691][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1691.562776][ C0] do_fast_syscall_32+0x7f/0x120 [ 1691.567739][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1691.572832][ C0] RIP: 0023:0xf7f53569 [ 1691.576872][ C0] Code: Bad RIP value. [ 1691.581086][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1691.589478][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1691.597439][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1691.605402][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1691.613350][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1691.621296][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1691.629702][ C0] bond7 I30952 21616 2 0x00004000 [ 1691.636012][ C0] Call Trace: [ 1691.639280][ C0] __schedule+0x8e1/0x1eb0 [ 1691.643684][ C0] ? io_schedule_timeout+0x140/0x140 [ 1691.648944][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1691.653945][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1691.659120][ C0] schedule+0xd0/0x2a0 [ 1691.663166][ C0] rescuer_thread+0x7a7/0xd30 [ 1691.667829][ C0] ? worker_thread+0x1120/0x1120 [ 1691.672743][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1691.677830][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1691.682830][ C0] ? worker_thread+0x1120/0x1120 [ 1691.687765][ C0] kthread+0x3b5/0x4a0 [ 1691.691808][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1691.696893][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1691.701984][ C0] ret_from_fork+0x1f/0x30 [ 1691.706381][ C0] bond8 I30912 21654 2 0x00004000 [ 1691.712687][ C0] Call Trace: [ 1691.715955][ C0] __schedule+0x8e1/0x1eb0 [ 1691.720366][ C0] ? io_schedule_timeout+0x140/0x140 [ 1691.725623][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1691.730637][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1691.735822][ C0] schedule+0xd0/0x2a0 [ 1691.739869][ C0] rescuer_thread+0x7a7/0xd30 [ 1691.744530][ C0] ? worker_thread+0x1120/0x1120 [ 1691.749447][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1691.754536][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1691.759560][ C0] ? worker_thread+0x1120/0x1120 [ 1691.764472][ C0] kthread+0x3b5/0x4a0 [ 1691.768515][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1691.773603][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1691.778690][ C0] ret_from_fork+0x1f/0x30 [ 1691.783093][ C0] syz-executor.2 S29328 22004 7031 0x20020000 [ 1691.789402][ C0] Call Trace: [ 1691.792686][ C0] __schedule+0x8e1/0x1eb0 [ 1691.797108][ C0] ? io_schedule_timeout+0x140/0x140 [ 1691.802376][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1691.807829][ C0] schedule+0xd0/0x2a0 [ 1691.811874][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1691.816961][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1691.822146][ C0] futex_wait+0x1df/0x560 [ 1691.826542][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1691.831560][ C0] ? mark_lock+0xbc/0x1710 [ 1691.835951][ C0] ? hash_futex+0x12/0x200 [ 1691.840345][ C0] ? futex_wake+0x155/0x490 [ 1691.844840][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1691.850795][ C0] do_futex+0x15b/0x1a60 [ 1691.855016][ C0] ? lock_acquire+0x1f1/0xad0 [ 1691.859693][ C0] ? __might_fault+0xef/0x1d0 [ 1691.864342][ C0] ? find_held_lock+0x2d/0x110 [ 1691.869082][ C0] ? futex_exit_release+0x220/0x220 [ 1691.874273][ C0] ? lock_downgrade+0x820/0x820 [ 1691.879102][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1691.885335][ C0] ? __might_fault+0x190/0x1d0 [ 1691.890079][ C0] ? _copy_to_user+0x126/0x160 [ 1691.894824][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1691.900261][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1691.905781][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1691.911653][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1691.916567][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1691.921658][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1691.926745][ C0] do_fast_syscall_32+0x7f/0x120 [ 1691.931667][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1691.936760][ C0] RIP: 0023:0xf7f91569 [ 1691.940801][ C0] Code: Bad RIP value. [ 1691.944839][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1691.953241][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1691.961190][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1691.969137][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1691.977097][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1691.985131][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1691.993089][ C0] syz-executor.2 S29944 22018 7031 0x20020000 [ 1691.999407][ C0] Call Trace: [ 1692.002674][ C0] __schedule+0x8e1/0x1eb0 [ 1692.007073][ C0] ? io_schedule_timeout+0x140/0x140 [ 1692.012333][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1692.017775][ C0] schedule+0xd0/0x2a0 [ 1692.021824][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1692.026911][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1692.032259][ C0] futex_wait+0x1df/0x560 [ 1692.036832][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1692.041845][ C0] ? wake_up_q+0xa3/0x100 [ 1692.046149][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1692.051409][ C0] ? futex_wake+0x155/0x490 [ 1692.055895][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1692.061859][ C0] do_futex+0x15b/0x1a60 [ 1692.066081][ C0] ? lock_acquire+0x1f1/0xad0 [ 1692.070733][ C0] ? __might_fault+0xef/0x1d0 [ 1692.075387][ C0] ? find_held_lock+0x2d/0x110 [ 1692.080128][ C0] ? futex_exit_release+0x220/0x220 [ 1692.085305][ C0] ? lock_downgrade+0x820/0x820 [ 1692.090233][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1692.096464][ C0] ? __might_fault+0x190/0x1d0 [ 1692.101219][ C0] ? _copy_to_user+0x126/0x160 [ 1692.105963][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1692.111922][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1692.117445][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1692.123314][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1692.128243][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1692.133335][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1692.138439][ C0] do_fast_syscall_32+0x7f/0x120 [ 1692.143358][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1692.148442][ C0] RIP: 0023:0xf7f91569 [ 1692.152492][ C0] Code: Bad RIP value. [ 1692.156529][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1692.164913][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1692.172860][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1692.180807][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1692.188770][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1692.196775][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1692.204800][ C0] syz-executor.2 S29944 22025 7031 0x20020000 [ 1692.211129][ C0] Call Trace: [ 1692.214450][ C0] __schedule+0x8e1/0x1eb0 [ 1692.218853][ C0] ? io_schedule_timeout+0x140/0x140 [ 1692.224119][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1692.229585][ C0] schedule+0xd0/0x2a0 [ 1692.233634][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1692.238724][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1692.243902][ C0] futex_wait+0x1df/0x560 [ 1692.248210][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1692.253247][ C0] ? wake_up_q+0xa3/0x100 [ 1692.257553][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1692.262745][ C0] ? futex_wake+0x155/0x490 [ 1692.267234][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1692.273198][ C0] do_futex+0x15b/0x1a60 [ 1692.277511][ C0] ? lock_acquire+0x1f1/0xad0 [ 1692.282161][ C0] ? __might_fault+0xef/0x1d0 [ 1692.286813][ C0] ? find_held_lock+0x2d/0x110 [ 1692.291552][ C0] ? futex_exit_release+0x220/0x220 [ 1692.296729][ C0] ? lock_downgrade+0x820/0x820 [ 1692.301561][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1692.307782][ C0] ? __might_fault+0x190/0x1d0 [ 1692.312538][ C0] ? _copy_to_user+0x126/0x160 [ 1692.317283][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1692.325238][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1692.330780][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1692.336650][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1692.341654][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1692.346753][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1692.352797][ C0] do_fast_syscall_32+0x7f/0x120 [ 1692.357714][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1692.362817][ C0] RIP: 0023:0xf7f91569 [ 1692.366854][ C0] Code: Bad RIP value. [ 1692.370895][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1692.379323][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1692.387326][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1692.395277][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1692.403253][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1692.411202][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1692.419165][ C0] syz-executor.2 S29944 22042 7031 0x20020000 [ 1692.425578][ C0] Call Trace: [ 1692.429287][ C0] __schedule+0x8e1/0x1eb0 [ 1692.433686][ C0] ? io_schedule_timeout+0x140/0x140 [ 1692.438961][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1692.444400][ C0] schedule+0xd0/0x2a0 [ 1692.448455][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1692.453539][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1692.458718][ C0] futex_wait+0x1df/0x560 [ 1692.463052][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1692.468056][ C0] ? wake_up_q+0xa3/0x100 [ 1692.472377][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1692.477552][ C0] ? futex_wake+0x155/0x490 [ 1692.482040][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1692.488010][ C0] do_futex+0x15b/0x1a60 [ 1692.492232][ C0] ? lock_acquire+0x1f1/0xad0 [ 1692.496903][ C0] ? __might_fault+0xef/0x1d0 [ 1692.501554][ C0] ? find_held_lock+0x2d/0x110 [ 1692.506295][ C0] ? futex_exit_release+0x220/0x220 [ 1692.511470][ C0] ? lock_downgrade+0x820/0x820 [ 1692.516327][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1692.522562][ C0] ? __might_fault+0x190/0x1d0 [ 1692.527301][ C0] ? _copy_to_user+0x126/0x160 [ 1692.532044][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1692.537481][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1692.542409][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1692.547932][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1692.552846][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1692.557954][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1692.563040][ C0] do_fast_syscall_32+0x7f/0x120 [ 1692.567957][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1692.573058][ C0] RIP: 0023:0xf7f91569 [ 1692.577097][ C0] Code: Bad RIP value. [ 1692.581137][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1692.589522][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1692.597469][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1692.605415][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1692.613378][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1692.621414][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1692.633028][ C0] syz-executor.2 S29944 22183 7031 0x20020000 [ 1692.639340][ C0] Call Trace: [ 1692.642617][ C0] __schedule+0x8e1/0x1eb0 [ 1692.647013][ C0] ? io_schedule_timeout+0x140/0x140 [ 1692.652274][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1692.657714][ C0] schedule+0xd0/0x2a0 [ 1692.661761][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1692.666849][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1692.672043][ C0] futex_wait+0x1df/0x560 [ 1692.676349][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1692.681350][ C0] ? mark_lock+0xbc/0x1710 [ 1692.685741][ C0] ? hash_futex+0x12/0x200 [ 1692.690152][ C0] ? futex_wake+0x155/0x490 [ 1692.694639][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1692.700610][ C0] do_futex+0x15b/0x1a60 [ 1692.704832][ C0] ? lock_acquire+0x1f1/0xad0 [ 1692.709763][ C0] ? __might_fault+0xef/0x1d0 [ 1692.714417][ C0] ? find_held_lock+0x2d/0x110 [ 1692.719157][ C0] ? futex_exit_release+0x220/0x220 [ 1692.724342][ C0] ? lock_downgrade+0x820/0x820 [ 1692.729168][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1692.735388][ C0] ? __might_fault+0x190/0x1d0 [ 1692.740153][ C0] ? _copy_to_user+0x126/0x160 [ 1692.744914][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1692.750369][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1692.755889][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1692.761861][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1692.766777][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1692.771867][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1692.777301][ C0] do_fast_syscall_32+0x7f/0x120 [ 1692.782213][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1692.787296][ C0] RIP: 0023:0xf7f91569 [ 1692.791333][ C0] Code: Bad RIP value. [ 1692.795460][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1692.803858][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1692.811834][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1692.819798][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1692.827746][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1692.835720][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1692.843678][ C0] syz-executor.3 S29944 22577 7114 0x20020000 [ 1692.849987][ C0] Call Trace: [ 1692.853255][ C0] __schedule+0x8e1/0x1eb0 [ 1692.857652][ C0] ? io_schedule_timeout+0x140/0x140 [ 1692.862913][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1692.868355][ C0] schedule+0xd0/0x2a0 [ 1692.872400][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1692.877505][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1692.882679][ C0] futex_wait+0x1df/0x560 [ 1692.886988][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1692.891988][ C0] ? mark_lock+0xbc/0x1710 [ 1692.896396][ C0] ? mark_lock+0xbc/0x1710 [ 1692.900789][ C0] ? hash_futex+0x12/0x200 [ 1692.905181][ C0] ? futex_wake+0x155/0x490 [ 1692.909697][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1692.915687][ C0] do_futex+0x15b/0x1a60 [ 1692.919927][ C0] ? lock_acquire+0x1f1/0xad0 [ 1692.924578][ C0] ? __might_fault+0xef/0x1d0 [ 1692.929231][ C0] ? find_held_lock+0x2d/0x110 [ 1692.933974][ C0] ? futex_exit_release+0x220/0x220 [ 1692.939151][ C0] ? lock_downgrade+0x820/0x820 [ 1692.943986][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1692.950206][ C0] ? __might_fault+0x190/0x1d0 [ 1692.954966][ C0] ? _copy_to_user+0x126/0x160 [ 1692.959711][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1692.965165][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1692.970686][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1692.976578][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1692.981491][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1692.986581][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1692.991686][ C0] do_fast_syscall_32+0x7f/0x120 [ 1692.996619][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1693.001714][ C0] RIP: 0023:0xf7f6d569 [ 1693.005838][ C0] Code: Bad RIP value. [ 1693.009876][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1693.018259][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1693.026208][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1693.034155][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1693.042117][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1693.050078][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1693.058035][ C0] syz-executor.5 S29944 22604 7432 0x20020000 [ 1693.064342][ C0] Call Trace: [ 1693.067622][ C0] __schedule+0x8e1/0x1eb0 [ 1693.072018][ C0] ? io_schedule_timeout+0x140/0x140 [ 1693.077278][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1693.082717][ C0] schedule+0xd0/0x2a0 [ 1693.086767][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1693.091963][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1693.097138][ C0] futex_wait+0x1df/0x560 [ 1693.101446][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1693.106446][ C0] ? mark_lock+0xbc/0x1710 [ 1693.110838][ C0] ? mark_lock+0xbc/0x1710 [ 1693.115232][ C0] ? hash_futex+0x12/0x200 [ 1693.119632][ C0] ? futex_wake+0x155/0x490 [ 1693.124119][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1693.130597][ C0] do_futex+0x15b/0x1a60 [ 1693.134822][ C0] ? lock_acquire+0x1f1/0xad0 [ 1693.139489][ C0] ? __might_fault+0xef/0x1d0 [ 1693.144159][ C0] ? find_held_lock+0x2d/0x110 [ 1693.148899][ C0] ? futex_exit_release+0x220/0x220 [ 1693.154074][ C0] ? lock_downgrade+0x820/0x820 [ 1693.158901][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1693.165122][ C0] ? __might_fault+0x190/0x1d0 [ 1693.169861][ C0] ? _copy_to_user+0x126/0x160 [ 1693.174609][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1693.180047][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1693.185570][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1693.191442][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1693.196386][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1693.201530][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1693.206624][ C0] do_fast_syscall_32+0x7f/0x120 [ 1693.211542][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1693.216630][ C0] RIP: 0023:0xf7f53569 [ 1693.220669][ C0] Code: Bad RIP value. [ 1693.224708][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1693.233286][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1693.241250][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1693.249199][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1693.257189][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1693.265151][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1693.273111][ C0] syz-executor.0 S29944 22607 6841 0x20020000 [ 1693.279420][ C0] Call Trace: [ 1693.282710][ C0] __schedule+0x8e1/0x1eb0 [ 1693.287213][ C0] ? io_schedule_timeout+0x140/0x140 [ 1693.292475][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1693.297929][ C0] schedule+0xd0/0x2a0 [ 1693.301973][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1693.307056][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1693.312229][ C0] ? futex_wake+0x1b5/0x490 [ 1693.316707][ C0] ? find_held_lock+0x2d/0x110 [ 1693.321450][ C0] futex_wait+0x1df/0x560 [ 1693.325783][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1693.330824][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1693.335759][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1693.340961][ C0] ? futex_wake+0x155/0x490 [ 1693.345454][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1693.351413][ C0] do_futex+0x15b/0x1a60 [ 1693.355638][ C0] ? lock_acquire+0x1f1/0xad0 [ 1693.360301][ C0] ? __might_fault+0xef/0x1d0 [ 1693.364972][ C0] ? find_held_lock+0x2d/0x110 [ 1693.369713][ C0] ? futex_exit_release+0x220/0x220 [ 1693.374937][ C0] ? lock_downgrade+0x820/0x820 [ 1693.379782][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1693.386013][ C0] ? __might_fault+0x190/0x1d0 [ 1693.390754][ C0] ? _copy_to_user+0x126/0x160 [ 1693.395538][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1693.400978][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1693.406499][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1693.412371][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1693.417285][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1693.422422][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1693.427511][ C0] do_fast_syscall_32+0x7f/0x120 [ 1693.432435][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1693.437536][ C0] RIP: 0023:0xf7fd1569 [ 1693.441579][ C0] Code: Bad RIP value. [ 1693.445624][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1693.454018][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1693.461973][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1693.469921][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1693.477885][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1693.485893][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1693.493868][ C0] syz-executor.5 S29944 22619 7432 0x20020000 [ 1693.500182][ C0] Call Trace: [ 1693.503542][ C0] __schedule+0x8e1/0x1eb0 [ 1693.508085][ C0] ? io_schedule_timeout+0x140/0x140 [ 1693.513358][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1693.518807][ C0] schedule+0xd0/0x2a0 [ 1693.523124][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1693.528216][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1693.533433][ C0] futex_wait+0x1df/0x560 [ 1693.537740][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1693.542746][ C0] ? mark_lock+0xbc/0x1710 [ 1693.547145][ C0] ? mark_lock+0xbc/0x1710 [ 1693.551536][ C0] ? hash_futex+0x12/0x200 [ 1693.555975][ C0] ? futex_wake+0x155/0x490 [ 1693.560464][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1693.566431][ C0] do_futex+0x15b/0x1a60 [ 1693.570656][ C0] ? lock_acquire+0x1f1/0xad0 [ 1693.575310][ C0] ? __might_fault+0xef/0x1d0 [ 1693.579963][ C0] ? find_held_lock+0x2d/0x110 [ 1693.584706][ C0] ? futex_exit_release+0x220/0x220 [ 1693.589885][ C0] ? lock_downgrade+0x820/0x820 [ 1693.594715][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1693.600937][ C0] ? __might_fault+0x190/0x1d0 [ 1693.605731][ C0] ? _copy_to_user+0x126/0x160 [ 1693.610479][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1693.615918][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1693.621440][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1693.627311][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1693.632225][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1693.637315][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1693.642402][ C0] do_fast_syscall_32+0x7f/0x120 [ 1693.647319][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1693.652406][ C0] RIP: 0023:0xf7f53569 [ 1693.656444][ C0] Code: Bad RIP value. [ 1693.660658][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1693.669059][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1693.677020][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1693.684967][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1693.692934][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1693.700887][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1693.708865][ C0] syz-executor.0 S29944 22623 6841 0x20020000 [ 1693.715182][ C0] Call Trace: [ 1693.718451][ C0] __schedule+0x8e1/0x1eb0 [ 1693.723384][ C0] ? io_schedule_timeout+0x140/0x140 [ 1693.728648][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1693.734087][ C0] schedule+0xd0/0x2a0 [ 1693.738133][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1693.743219][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1693.748395][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1693.754372][ C0] futex_wait+0x1df/0x560 [ 1693.758680][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1693.763711][ C0] ? mark_lock+0xbc/0x1710 [ 1693.768106][ C0] ? hash_futex+0x12/0x200 [ 1693.772504][ C0] ? futex_wake+0x155/0x490 [ 1693.777078][ C0] ? do_wp_page+0x8e7/0x1950 [ 1693.781759][ C0] do_futex+0x15b/0x1a60 [ 1693.786000][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1693.791174][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1693.795999][ C0] ? do_wp_page+0x16a/0x1950 [ 1693.800568][ C0] ? futex_exit_release+0x220/0x220 [ 1693.805742][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1693.811104][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1693.816039][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1693.821040][ C0] ? find_held_lock+0x2d/0x110 [ 1693.825783][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1693.830955][ C0] ? __up_read+0x1a1/0x7b0 [ 1693.835370][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1693.840808][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1693.846345][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1693.851281][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1693.856211][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1693.861302][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1693.866390][ C0] do_fast_syscall_32+0x7f/0x120 [ 1693.871304][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1693.876400][ C0] RIP: 0023:0xf7fd1569 [ 1693.880440][ C0] Code: Bad RIP value. [ 1693.884482][ C0] RSP: 002b:00000000f5dab12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1693.892873][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1693.900817][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1693.909053][ C0] RBP: 00000000f5dab228 R08: 0000000000000000 R09: 0000000000000000 [ 1693.917010][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1693.924957][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1693.932918][ C0] syz-executor.3 S29944 22626 7114 0x20020000 [ 1693.939228][ C0] Call Trace: [ 1693.942498][ C0] __schedule+0x8e1/0x1eb0 [ 1693.946893][ C0] ? io_schedule_timeout+0x140/0x140 [ 1693.952180][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1693.957638][ C0] schedule+0xd0/0x2a0 [ 1693.961685][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1693.966778][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1693.971956][ C0] futex_wait+0x1df/0x560 [ 1693.976264][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1693.981268][ C0] ? mark_lock+0xbc/0x1710 [ 1693.985662][ C0] ? mark_lock+0xbc/0x1710 [ 1693.990055][ C0] ? hash_futex+0x12/0x200 [ 1693.994449][ C0] ? futex_wake+0x155/0x490 [ 1693.998938][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1694.004895][ C0] do_futex+0x15b/0x1a60 [ 1694.009118][ C0] ? lock_acquire+0x1f1/0xad0 [ 1694.013786][ C0] ? __might_fault+0xef/0x1d0 [ 1694.018439][ C0] ? find_held_lock+0x2d/0x110 [ 1694.023178][ C0] ? futex_exit_release+0x220/0x220 [ 1694.028354][ C0] ? lock_downgrade+0x820/0x820 [ 1694.033181][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1694.039400][ C0] ? __might_fault+0x190/0x1d0 [ 1694.044139][ C0] ? _copy_to_user+0x126/0x160 [ 1694.048883][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1694.054323][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1694.059849][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1694.065870][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1694.070785][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1694.075877][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1694.080962][ C0] do_fast_syscall_32+0x7f/0x120 [ 1694.085874][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1694.090987][ C0] RIP: 0023:0xf7f6d569 [ 1694.095025][ C0] Code: Bad RIP value. [ 1694.099078][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1694.109565][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1694.117512][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1694.125457][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1694.133404][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1694.141366][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1694.149329][ C0] syz-executor.1 S29944 22631 6979 0x20020000 [ 1694.155656][ C0] Call Trace: [ 1694.158924][ C0] __schedule+0x8e1/0x1eb0 [ 1694.163322][ C0] ? io_schedule_timeout+0x140/0x140 [ 1694.168583][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1694.174108][ C0] schedule+0xd0/0x2a0 [ 1694.178331][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1694.183436][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1694.188610][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1694.194581][ C0] futex_wait+0x1df/0x560 [ 1694.199864][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1694.204999][ C0] ? mark_lock+0xbc/0x1710 [ 1694.209435][ C0] ? mark_lock+0xbc/0x1710 [ 1694.213837][ C0] ? hash_futex+0x12/0x200 [ 1694.218235][ C0] ? futex_wake+0x155/0x490 [ 1694.222733][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1694.228700][ C0] do_futex+0x15b/0x1a60 [ 1694.232932][ C0] ? lock_acquire+0x1f1/0xad0 [ 1694.237590][ C0] ? __might_fault+0xef/0x1d0 [ 1694.242244][ C0] ? find_held_lock+0x2d/0x110 [ 1694.246984][ C0] ? futex_exit_release+0x220/0x220 [ 1694.252160][ C0] ? lock_downgrade+0x820/0x820 [ 1694.256990][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1694.263213][ C0] ? __might_fault+0x190/0x1d0 [ 1694.267971][ C0] ? _copy_to_user+0x126/0x160 [ 1694.272733][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1694.278178][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1694.283715][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1694.289595][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1694.294509][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1694.299599][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1694.304792][ C0] do_fast_syscall_32+0x7f/0x120 [ 1694.309709][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1694.314820][ C0] RIP: 0023:0xf7fa1569 [ 1694.318876][ C0] Code: Bad RIP value. [ 1694.322936][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1694.331336][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1694.339316][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1694.347269][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1694.355234][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1694.363236][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1694.371200][ C0] syz-executor.3 S29944 22636 7114 0x20020000 [ 1694.377518][ C0] Call Trace: [ 1694.380802][ C0] __schedule+0x8e1/0x1eb0 [ 1694.385207][ C0] ? io_schedule_timeout+0x140/0x140 [ 1694.390482][ C0] ? wait_for_completion+0x260/0x260 [ 1694.395750][ C0] schedule+0xd0/0x2a0 [ 1694.399839][ C0] pipe_wait+0x155/0x240 [ 1694.404062][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1694.409142][ C0] ? finish_wait+0x260/0x260 [ 1694.413717][ C0] ? finish_wait+0x260/0x260 [ 1694.418288][ C0] ? pipe_lock+0x5a/0x70 [ 1694.422553][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1694.428339][ C0] __splice_from_pipe+0x114/0x830 [ 1694.433359][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1694.439319][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1694.444148][ C0] do_vmsplice+0x2f7/0x380 [ 1694.448627][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1694.453891][ C0] ? lock_downgrade+0x820/0x820 [ 1694.458738][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1694.464954][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1694.470477][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1694.475563][ C0] ? __might_fault+0x190/0x1d0 [ 1694.480303][ C0] ? _copy_to_user+0x126/0x160 [ 1694.485046][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1694.490228][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1694.496098][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1694.501019][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1694.506126][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1694.511212][ C0] do_fast_syscall_32+0x7f/0x120 [ 1694.516129][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1694.521217][ C0] RIP: 0023:0xf7f6d569 [ 1694.525256][ C0] Code: Bad RIP value. [ 1694.529297][ C0] RSP: 002b:00000000f5d680cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1694.537700][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1694.545672][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1694.553633][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1694.561581][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1694.569528][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1694.577485][ C0] syz-executor.5 S29944 22642 7432 0x20020000 [ 1694.583793][ C0] Call Trace: [ 1694.587063][ C0] __schedule+0x8e1/0x1eb0 [ 1694.591470][ C0] ? io_schedule_timeout+0x140/0x140 [ 1694.596760][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1694.602200][ C0] schedule+0xd0/0x2a0 [ 1694.606263][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1694.611358][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1694.616550][ C0] futex_wait+0x1df/0x560 [ 1694.620859][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1694.625858][ C0] ? mark_lock+0xbc/0x1710 [ 1694.630253][ C0] ? mark_lock+0xbc/0x1710 [ 1694.634645][ C0] ? hash_futex+0x12/0x200 [ 1694.639037][ C0] ? futex_wake+0x155/0x490 [ 1694.643525][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1694.649622][ C0] do_futex+0x15b/0x1a60 [ 1694.653844][ C0] ? lock_acquire+0x1f1/0xad0 [ 1694.658498][ C0] ? __might_fault+0xef/0x1d0 [ 1694.663149][ C0] ? find_held_lock+0x2d/0x110 [ 1694.667908][ C0] ? futex_exit_release+0x220/0x220 [ 1694.673084][ C0] ? lock_downgrade+0x820/0x820 [ 1694.677910][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1694.684130][ C0] ? __might_fault+0x190/0x1d0 [ 1694.688883][ C0] ? _copy_to_user+0x126/0x160 [ 1694.693626][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1694.699080][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1694.704603][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1694.710498][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1694.715414][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1694.720507][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1694.725612][ C0] do_fast_syscall_32+0x7f/0x120 [ 1694.730525][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1694.735627][ C0] RIP: 0023:0xf7f53569 [ 1694.739663][ C0] Code: Bad RIP value. [ 1694.743701][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1694.752088][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1694.760050][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1694.768013][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1694.775960][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1694.783924][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1694.791901][ C0] syz-executor.1 S29944 22648 6979 0x20020000 [ 1694.798210][ C0] Call Trace: [ 1694.801476][ C0] __schedule+0x8e1/0x1eb0 [ 1694.805892][ C0] ? io_schedule_timeout+0x140/0x140 [ 1694.811242][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1694.816882][ C0] schedule+0xd0/0x2a0 [ 1694.820930][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1694.826017][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1694.831196][ C0] futex_wait+0x1df/0x560 [ 1694.835521][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1694.840540][ C0] ? mark_lock+0xbc/0x1710 [ 1694.844936][ C0] ? hash_futex+0x12/0x200 [ 1694.849329][ C0] ? futex_wake+0x155/0x490 [ 1694.853813][ C0] ? do_wp_page+0x8e7/0x1950 [ 1694.858382][ C0] do_futex+0x15b/0x1a60 [ 1694.862600][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1694.867794][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1694.872618][ C0] ? do_wp_page+0x16a/0x1950 [ 1694.877185][ C0] ? futex_exit_release+0x220/0x220 [ 1694.882358][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1694.887703][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1694.892621][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1694.897623][ C0] ? find_held_lock+0x2d/0x110 [ 1694.902363][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1694.907536][ C0] ? __up_read+0x1a1/0x7b0 [ 1694.911934][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1694.918674][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1694.924211][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1694.929141][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1694.934056][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1694.939148][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1694.944234][ C0] do_fast_syscall_32+0x7f/0x120 [ 1694.949151][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1694.954245][ C0] RIP: 0023:0xf7fa1569 [ 1694.958284][ C0] Code: Bad RIP value. [ 1694.962326][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1694.970712][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1694.978659][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1694.986620][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1694.994568][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1695.002515][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.010477][ C0] syz-executor.5 S29944 22663 7432 0x20020000 [ 1695.016786][ C0] Call Trace: [ 1695.020069][ C0] __schedule+0x8e1/0x1eb0 [ 1695.024467][ C0] ? io_schedule_timeout+0x140/0x140 [ 1695.029728][ C0] ? wait_for_completion+0x260/0x260 [ 1695.035008][ C0] schedule+0xd0/0x2a0 [ 1695.039054][ C0] pipe_wait+0x155/0x240 [ 1695.043275][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1695.048275][ C0] ? finish_wait+0x260/0x260 [ 1695.052845][ C0] ? finish_wait+0x260/0x260 [ 1695.057415][ C0] ? pipe_lock+0x5a/0x70 [ 1695.061738][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1695.067547][ C0] __splice_from_pipe+0x114/0x830 [ 1695.072552][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1695.078511][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1695.083342][ C0] do_vmsplice+0x2f7/0x380 [ 1695.087736][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1695.093018][ C0] ? lock_downgrade+0x820/0x820 [ 1695.097847][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1695.104079][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1695.109601][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1695.114686][ C0] ? __might_fault+0x190/0x1d0 [ 1695.119428][ C0] ? _copy_to_user+0x126/0x160 [ 1695.124291][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1695.129471][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1695.135359][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1695.140275][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1695.145372][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1695.150475][ C0] do_fast_syscall_32+0x7f/0x120 [ 1695.155406][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1695.160507][ C0] RIP: 0023:0xf7f53569 [ 1695.164562][ C0] Code: Bad RIP value. [ 1695.170164][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1695.178551][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1695.186497][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1695.194444][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1695.202417][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1695.210382][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.218341][ C0] syz-executor.3 S30088 22664 7114 0x20020000 [ 1695.224648][ C0] Call Trace: [ 1695.227918][ C0] __schedule+0x8e1/0x1eb0 [ 1695.232315][ C0] ? io_schedule_timeout+0x140/0x140 [ 1695.237590][ C0] ? wait_for_completion+0x260/0x260 [ 1695.242852][ C0] schedule+0xd0/0x2a0 [ 1695.246916][ C0] pipe_wait+0x155/0x240 [ 1695.251150][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1695.256179][ C0] ? finish_wait+0x260/0x260 [ 1695.260751][ C0] ? finish_wait+0x260/0x260 [ 1695.265317][ C0] ? pipe_lock+0x5a/0x70 [ 1695.269558][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1695.275371][ C0] __splice_from_pipe+0x114/0x830 [ 1695.280520][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1695.286491][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1695.291335][ C0] do_vmsplice+0x2f7/0x380 [ 1695.295732][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1695.301001][ C0] ? lock_downgrade+0x820/0x820 [ 1695.305858][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1695.312109][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1695.317641][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1695.322729][ C0] ? __might_fault+0x190/0x1d0 [ 1695.327489][ C0] ? _copy_to_user+0x126/0x160 [ 1695.332261][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1695.337449][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1695.343339][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1695.348261][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1695.353387][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1695.358566][ C0] do_fast_syscall_32+0x7f/0x120 [ 1695.363481][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1695.368741][ C0] RIP: 0023:0xf7f6d569 [ 1695.372798][ C0] Code: Bad RIP value. [ 1695.376853][ C0] RSP: 002b:00000000f5d680cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1695.385250][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1695.393199][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1695.401148][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1695.409108][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1695.417082][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.425149][ C0] syz-executor.3 S29944 22679 7114 0x20020000 [ 1695.431460][ C0] Call Trace: [ 1695.434736][ C0] __schedule+0x8e1/0x1eb0 [ 1695.439134][ C0] ? io_schedule_timeout+0x140/0x140 [ 1695.444396][ C0] ? wait_for_completion+0x260/0x260 [ 1695.449746][ C0] schedule+0xd0/0x2a0 [ 1695.453879][ C0] pipe_wait+0x155/0x240 [ 1695.458098][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1695.463113][ C0] ? finish_wait+0x260/0x260 [ 1695.467698][ C0] ? finish_wait+0x260/0x260 [ 1695.472271][ C0] ? pipe_lock+0x5a/0x70 [ 1695.476493][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1695.482277][ C0] __splice_from_pipe+0x114/0x830 [ 1695.487277][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1695.493231][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1695.498061][ C0] do_vmsplice+0x2f7/0x380 [ 1695.502456][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1695.507721][ C0] ? lock_downgrade+0x820/0x820 [ 1695.512565][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1695.518785][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1695.524322][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1695.529409][ C0] ? __might_fault+0x190/0x1d0 [ 1695.534148][ C0] ? _copy_to_user+0x126/0x160 [ 1695.538894][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1695.544073][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1695.549944][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1695.554857][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1695.559966][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1695.565063][ C0] do_fast_syscall_32+0x7f/0x120 [ 1695.569977][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1695.575078][ C0] RIP: 0023:0xf7f6d569 [ 1695.579114][ C0] Code: Bad RIP value. [ 1695.583160][ C0] RSP: 002b:00000000f5d680cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1695.591657][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1695.599627][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1695.607573][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1695.615517][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1695.623467][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.631437][ C0] syz-executor.5 S29944 22684 7432 0x20020000 [ 1695.637745][ C0] Call Trace: [ 1695.642071][ C0] __schedule+0x8e1/0x1eb0 [ 1695.646467][ C0] ? io_schedule_timeout+0x140/0x140 [ 1695.651729][ C0] ? wait_for_completion+0x260/0x260 [ 1695.657124][ C0] schedule+0xd0/0x2a0 [ 1695.661169][ C0] pipe_wait+0x155/0x240 [ 1695.665395][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1695.670397][ C0] ? finish_wait+0x260/0x260 [ 1695.674965][ C0] ? finish_wait+0x260/0x260 [ 1695.679530][ C0] ? pipe_lock+0x5a/0x70 [ 1695.685404][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1695.691187][ C0] __splice_from_pipe+0x114/0x830 [ 1695.696214][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1695.702170][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1695.707089][ C0] do_vmsplice+0x2f7/0x380 [ 1695.711481][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1695.716743][ C0] ? lock_downgrade+0x820/0x820 [ 1695.723140][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1695.729357][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1695.734880][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1695.739982][ C0] ? __might_fault+0x190/0x1d0 [ 1695.744722][ C0] ? _copy_to_user+0x126/0x160 [ 1695.749472][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1695.754669][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1695.760546][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1695.765484][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1695.770579][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1695.775664][ C0] do_fast_syscall_32+0x7f/0x120 [ 1695.780603][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1695.785687][ C0] RIP: 0023:0xf7f53569 [ 1695.789727][ C0] Code: Bad RIP value. [ 1695.793800][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1695.802202][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1695.810168][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1695.818126][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1695.829040][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1695.836989][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.844953][ C0] syz-executor.5 S29944 22691 7432 0x20020000 [ 1695.851262][ C0] Call Trace: [ 1695.854530][ C0] __schedule+0x8e1/0x1eb0 [ 1695.858929][ C0] ? io_schedule_timeout+0x140/0x140 [ 1695.864192][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1695.869652][ C0] schedule+0xd0/0x2a0 [ 1695.873707][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1695.878794][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1695.883970][ C0] futex_wait+0x1df/0x560 [ 1695.888278][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1695.893280][ C0] ? mark_lock+0xbc/0x1710 [ 1695.897684][ C0] ? hash_futex+0x12/0x200 [ 1695.902076][ C0] ? futex_wake+0x155/0x490 [ 1695.906581][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1695.912539][ C0] do_futex+0x15b/0x1a60 [ 1695.916785][ C0] ? lock_acquire+0x1f1/0xad0 [ 1695.921437][ C0] ? __might_fault+0xef/0x1d0 [ 1695.926106][ C0] ? find_held_lock+0x2d/0x110 [ 1695.930851][ C0] ? futex_exit_release+0x220/0x220 [ 1695.936029][ C0] ? lock_downgrade+0x820/0x820 [ 1695.940862][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1695.947103][ C0] ? __might_fault+0x190/0x1d0 [ 1695.951847][ C0] ? _copy_to_user+0x126/0x160 [ 1695.956591][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1695.962047][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1695.967571][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1695.973460][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1695.978409][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1695.983502][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1695.988591][ C0] do_fast_syscall_32+0x7f/0x120 [ 1695.993507][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1695.998613][ C0] RIP: 0023:0xf7f53569 [ 1696.002670][ C0] Code: Bad RIP value. [ 1696.006712][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1696.015097][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1696.023044][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1696.031016][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1696.038964][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1696.046910][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.055218][ C0] syz-executor.2 S30088 22727 7031 0x20020000 [ 1696.061528][ C0] Call Trace: [ 1696.064799][ C0] __schedule+0x8e1/0x1eb0 [ 1696.069195][ C0] ? io_schedule_timeout+0x140/0x140 [ 1696.074472][ C0] ? wait_for_completion+0x260/0x260 [ 1696.079735][ C0] schedule+0xd0/0x2a0 [ 1696.083802][ C0] pipe_wait+0x155/0x240 [ 1696.088038][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1696.093038][ C0] ? finish_wait+0x260/0x260 [ 1696.097607][ C0] ? finish_wait+0x260/0x260 [ 1696.102173][ C0] ? pipe_lock+0x5a/0x70 [ 1696.106398][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1696.112202][ C0] __splice_from_pipe+0x114/0x830 [ 1696.117206][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1696.123177][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1696.128007][ C0] do_vmsplice+0x2f7/0x380 [ 1696.132397][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1696.137661][ C0] ? lock_downgrade+0x820/0x820 [ 1696.142516][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1696.148744][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1696.154317][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1696.159407][ C0] ? __might_fault+0x190/0x1d0 [ 1696.164194][ C0] ? _copy_to_user+0x126/0x160 [ 1696.168968][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1696.174175][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1696.180055][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1696.184975][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1696.190071][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1696.195166][ C0] do_fast_syscall_32+0x7f/0x120 [ 1696.200129][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1696.205216][ C0] RIP: 0023:0xf7f91569 [ 1696.209261][ C0] Code: Bad RIP value. [ 1696.213331][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1696.221719][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 1696.229667][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.237614][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1696.245672][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1696.253620][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.261648][ C0] syz-executor.2 S29416 22745 7031 0x20020000 [ 1696.268001][ C0] Call Trace: [ 1696.271269][ C0] __schedule+0x8e1/0x1eb0 [ 1696.276031][ C0] ? io_schedule_timeout+0x140/0x140 [ 1696.281341][ C0] ? wait_for_completion+0x260/0x260 [ 1696.286607][ C0] schedule+0xd0/0x2a0 [ 1696.290656][ C0] pipe_wait+0x155/0x240 [ 1696.294874][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1696.299876][ C0] ? finish_wait+0x260/0x260 [ 1696.304445][ C0] ? finish_wait+0x260/0x260 [ 1696.309035][ C0] ? pipe_lock+0x5a/0x70 [ 1696.313277][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1696.319083][ C0] __splice_from_pipe+0x114/0x830 [ 1696.324094][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1696.330051][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1696.334883][ C0] do_vmsplice+0x2f7/0x380 [ 1696.339278][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1696.344545][ C0] ? lock_downgrade+0x820/0x820 [ 1696.349376][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1696.355596][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1696.361140][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1696.366384][ C0] ? __might_fault+0x190/0x1d0 [ 1696.371955][ C0] ? _copy_to_user+0x126/0x160 [ 1696.376713][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1696.381898][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1696.387819][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1696.392733][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1696.397826][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1696.402913][ C0] do_fast_syscall_32+0x7f/0x120 [ 1696.407830][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1696.412931][ C0] RIP: 0023:0xf7f91569 [ 1696.416970][ C0] Code: Bad RIP value. [ 1696.421028][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1696.429412][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 1696.437377][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.445323][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1696.453287][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1696.461232][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.469192][ C0] syz-executor.0 S29944 22755 6841 0x20020000 [ 1696.475500][ C0] Call Trace: [ 1696.478766][ C0] __schedule+0x8e1/0x1eb0 [ 1696.483162][ C0] ? io_schedule_timeout+0x140/0x140 [ 1696.488422][ C0] ? wait_for_completion+0x260/0x260 [ 1696.493682][ C0] schedule+0xd0/0x2a0 [ 1696.497747][ C0] pipe_wait+0x155/0x240 [ 1696.501967][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1696.506967][ C0] ? finish_wait+0x260/0x260 [ 1696.511534][ C0] ? finish_wait+0x260/0x260 [ 1696.516099][ C0] ? pipe_lock+0x5a/0x70 [ 1696.520360][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1696.526145][ C0] __splice_from_pipe+0x114/0x830 [ 1696.531146][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1696.537100][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1696.541927][ C0] do_vmsplice+0x2f7/0x380 [ 1696.546318][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1696.551581][ C0] ? lock_downgrade+0x820/0x820 [ 1696.556495][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1696.562714][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1696.568236][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1696.573323][ C0] ? __might_fault+0x190/0x1d0 [ 1696.578062][ C0] ? _copy_to_user+0x126/0x160 [ 1696.582826][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1696.588023][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1696.593909][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1696.598825][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1696.604365][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1696.609453][ C0] do_fast_syscall_32+0x7f/0x120 [ 1696.614370][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1696.619455][ C0] RIP: 0023:0xf7fd1569 [ 1696.623493][ C0] Code: Bad RIP value. [ 1696.627549][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1696.635932][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 1696.643879][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.651826][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1696.659859][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1696.667805][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.675765][ C0] syz-executor.0 S30088 22805 6841 0x20020000 [ 1696.682084][ C0] Call Trace: [ 1696.685355][ C0] __schedule+0x8e1/0x1eb0 [ 1696.689841][ C0] ? io_schedule_timeout+0x140/0x140 [ 1696.695105][ C0] ? wait_for_completion+0x260/0x260 [ 1696.700368][ C0] schedule+0xd0/0x2a0 [ 1696.704430][ C0] pipe_wait+0x155/0x240 [ 1696.708649][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1696.713677][ C0] ? finish_wait+0x260/0x260 [ 1696.718243][ C0] ? finish_wait+0x260/0x260 [ 1696.722810][ C0] ? pipe_lock+0x5a/0x70 [ 1696.727048][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1696.732832][ C0] __splice_from_pipe+0x114/0x830 [ 1696.737848][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1696.743802][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1696.748647][ C0] do_vmsplice+0x2f7/0x380 [ 1696.753045][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1696.758310][ C0] ? lock_downgrade+0x820/0x820 [ 1696.763153][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1696.769396][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1696.775288][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1696.780373][ C0] ? __might_fault+0x190/0x1d0 [ 1696.785634][ C0] ? _copy_to_user+0x126/0x160 [ 1696.790375][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1696.795554][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1696.801425][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1696.806339][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1696.811428][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1696.816529][ C0] do_fast_syscall_32+0x7f/0x120 [ 1696.821442][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1696.826547][ C0] RIP: 0023:0xf7fd1569 [ 1696.830584][ C0] Code: Bad RIP value. [ 1696.834624][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1696.843024][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000040 [ 1696.850986][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1696.858946][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1696.866892][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1696.874855][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.882810][ C0] syz-executor.1 T29608 22973 6979 0x20024004 [ 1696.889139][ C0] Call Trace: [ 1696.892405][ C0] __schedule+0x8e1/0x1eb0 [ 1696.896827][ C0] ? io_schedule_timeout+0x140/0x140 [ 1696.903404][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1696.908578][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1696.914899][ C0] schedule+0xd0/0x2a0 [ 1696.918945][ C0] do_signal_stop+0x32f/0x840 [ 1696.923616][ C0] get_signal+0xc0b/0x1fc0 [ 1696.928017][ C0] do_signal+0x82/0x2520 [ 1696.932252][ C0] ? kill_something_info+0x320/0x320 [ 1696.937549][ C0] ? from_kuid+0xc0/0xc0 [ 1696.942379][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1696.947726][ C0] ? do_tkill+0x186/0x1f0 [ 1696.952039][ C0] ? do_send_specific+0x330/0x330 [ 1696.957044][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1696.962826][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1696.968790][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1696.974505][ C0] do_fast_syscall_32+0x7f/0x120 [ 1696.979423][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1696.984518][ C0] RIP: 0023:0xf7fa1569 [ 1696.988556][ C0] Code: Bad RIP value. [ 1696.992592][ C0] RSP: 002b:00000000f5d9c0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ee [ 1697.000977][ C0] RAX: 0000000000000000 RBX: 000000000000046d RCX: 0000000000000016 [ 1697.008924][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1697.016881][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1697.024843][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1697.032789][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1697.040763][ C0] syz-executor.1 T29024 23020 6979 0x20024000 [ 1697.047072][ C0] Call Trace: [ 1697.050341][ C0] __schedule+0x8e1/0x1eb0 [ 1697.054738][ C0] ? io_schedule_timeout+0x140/0x140 [ 1697.059997][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1697.065172][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.071131][ C0] schedule+0xd0/0x2a0 [ 1697.075176][ C0] do_signal_stop+0x32f/0x840 [ 1697.079827][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1697.085176][ C0] get_signal+0x8b8/0x1fc0 [ 1697.090705][ C0] do_signal+0x82/0x2520 [ 1697.095185][ C0] ? __might_fault+0x190/0x1d0 [ 1697.099926][ C0] ? _copy_to_user+0x126/0x160 [ 1697.104667][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1697.110467][ C0] ? __ia32_sys_futex_time32+0x302/0x455 [ 1697.116098][ C0] ? __ia32_sys_futex_time32+0x30b/0x455 [ 1697.121728][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1697.127623][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1697.133411][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.139368][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1697.145069][ C0] do_fast_syscall_32+0x7f/0x120 [ 1697.149984][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1697.155338][ C0] RIP: 0023:0xf7fa1569 [ 1697.159378][ C0] Code: Bad RIP value. [ 1697.163418][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1697.172770][ C0] RAX: 0000000000000000 RBX: 000000000819afd4 RCX: 0000000000000080 [ 1697.180734][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1697.188692][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1697.196688][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1697.204637][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1697.212599][ C0] syz-executor.1 T29872 23080 6979 0x20024004 [ 1697.218910][ C0] Call Trace: [ 1697.222187][ C0] __schedule+0x8e1/0x1eb0 [ 1697.226652][ C0] ? io_schedule_timeout+0x140/0x140 [ 1697.231913][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1697.237090][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.243051][ C0] schedule+0xd0/0x2a0 [ 1697.247100][ C0] do_signal_stop+0x32f/0x840 [ 1697.251754][ C0] get_signal+0xc0b/0x1fc0 [ 1697.256155][ C0] do_signal+0x82/0x2520 [ 1697.260527][ C0] ? kill_something_info+0x320/0x320 [ 1697.265818][ C0] ? from_kuid+0xc0/0xc0 [ 1697.270051][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1697.275451][ C0] ? do_tkill+0x186/0x1f0 [ 1697.279809][ C0] ? do_send_specific+0x330/0x330 [ 1697.284859][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1697.290654][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.296700][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1697.302397][ C0] do_fast_syscall_32+0x7f/0x120 [ 1697.307876][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1697.312966][ C0] RIP: 0023:0xf7fa1569 [ 1697.317006][ C0] Code: Bad RIP value. [ 1697.321048][ C0] RSP: 002b:00000000f5d9c0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ee [ 1697.330041][ C0] RAX: 0000000000000000 RBX: 0000000000000473 RCX: 0000000000000016 [ 1697.338624][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1697.346669][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1697.354633][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1697.362589][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1697.370555][ C0] syz-executor.1 T29704 23171 6979 0x20024004 [ 1697.377150][ C0] Call Trace: [ 1697.380434][ C0] __schedule+0x8e1/0x1eb0 [ 1697.384885][ C0] ? io_schedule_timeout+0x140/0x140 [ 1697.390154][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1697.395337][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.401297][ C0] schedule+0xd0/0x2a0 [ 1697.405345][ C0] do_signal_stop+0x32f/0x840 [ 1697.410005][ C0] get_signal+0xc0b/0x1fc0 [ 1697.414406][ C0] do_signal+0x82/0x2520 [ 1697.418625][ C0] ? kill_something_info+0x320/0x320 [ 1697.423886][ C0] ? from_kuid+0xc0/0xc0 [ 1697.428108][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1697.433455][ C0] ? do_tkill+0x186/0x1f0 [ 1697.437759][ C0] ? do_send_specific+0x330/0x330 [ 1697.442764][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1697.448607][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.454566][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1697.460263][ C0] do_fast_syscall_32+0x7f/0x120 [ 1697.465266][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1697.470370][ C0] RIP: 0023:0xf7fa1569 [ 1697.474418][ C0] Code: Bad RIP value. [ 1697.478465][ C0] RSP: 002b:00000000f5d9c0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ee [ 1697.486851][ C0] RAX: 0000000000000000 RBX: 0000000000000477 RCX: 0000000000000016 [ 1697.494796][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1697.502785][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1697.510735][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1697.518682][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1697.526642][ C0] syz-executor.1 T30024 23197 6979 0x20024004 [ 1697.532953][ C0] Call Trace: [ 1697.536270][ C0] __schedule+0x8e1/0x1eb0 [ 1697.540774][ C0] ? io_schedule_timeout+0x140/0x140 [ 1697.546033][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1697.551233][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.557191][ C0] schedule+0xd0/0x2a0 [ 1697.561239][ C0] do_signal_stop+0x32f/0x840 [ 1697.565912][ C0] get_signal+0xc0b/0x1fc0 [ 1697.570329][ C0] do_signal+0x82/0x2520 [ 1697.574573][ C0] ? kill_something_info+0x320/0x320 [ 1697.579851][ C0] ? from_kuid+0xc0/0xc0 [ 1697.584173][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1697.589520][ C0] ? do_tkill+0x186/0x1f0 [ 1697.593842][ C0] ? do_send_specific+0x330/0x330 [ 1697.598848][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1697.604639][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1697.610598][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1697.616301][ C0] do_fast_syscall_32+0x7f/0x120 [ 1697.621232][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1697.626316][ C0] RIP: 0023:0xf7fa1569 [ 1697.630354][ C0] Code: Bad RIP value. [ 1697.634395][ C0] RSP: 002b:00000000f5d9c0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ee [ 1697.642781][ C0] RAX: 0000000000000000 RBX: 000000000000047b RCX: 0000000000000016 [ 1697.650729][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1697.658690][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1697.666637][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1697.674597][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1697.682570][ C0] syz-executor.4 S29944 23407 7392 0x20020000 [ 1697.688878][ C0] Call Trace: [ 1697.692147][ C0] __schedule+0x8e1/0x1eb0 [ 1697.696544][ C0] ? io_schedule_timeout+0x140/0x140 [ 1697.701806][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1697.707243][ C0] schedule+0xd0/0x2a0 [ 1697.711291][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1697.716377][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1697.721568][ C0] futex_wait+0x1df/0x560 [ 1697.725876][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1697.730880][ C0] ? wake_up_q+0xa3/0x100 [ 1697.735184][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1697.740391][ C0] ? futex_wake+0x155/0x490 [ 1697.744878][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1697.750849][ C0] do_futex+0x15b/0x1a60 [ 1697.755071][ C0] ? lock_acquire+0x1f1/0xad0 [ 1697.759723][ C0] ? __might_fault+0xef/0x1d0 [ 1697.764389][ C0] ? find_held_lock+0x2d/0x110 [ 1697.769130][ C0] ? futex_exit_release+0x220/0x220 [ 1697.774327][ C0] ? lock_downgrade+0x820/0x820 [ 1697.779156][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1697.785379][ C0] ? __might_fault+0x190/0x1d0 [ 1697.790118][ C0] ? _copy_to_user+0x126/0x160 [ 1697.794878][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1697.800317][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1697.805857][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1697.811729][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1697.816644][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1697.821753][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1697.826840][ C0] do_fast_syscall_32+0x7f/0x120 [ 1697.831754][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1697.836853][ C0] RIP: 0023:0xf7fd7569 [ 1697.840890][ C0] Code: Bad RIP value. [ 1697.844931][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1697.853314][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1697.861261][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1697.869297][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1697.877242][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1697.885195][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1697.893150][ C0] syz-executor.4 S29944 23419 7392 0x20020000 [ 1697.899457][ C0] Call Trace: [ 1697.902728][ C0] __schedule+0x8e1/0x1eb0 [ 1697.907123][ C0] ? io_schedule_timeout+0x140/0x140 [ 1697.912384][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1697.917841][ C0] schedule+0xd0/0x2a0 [ 1697.922585][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1697.927671][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1697.932848][ C0] futex_wait+0x1df/0x560 [ 1697.937155][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1697.942164][ C0] ? wake_up_q+0xa3/0x100 [ 1697.946472][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1697.951646][ C0] ? futex_wake+0x155/0x490 [ 1697.956133][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1697.962089][ C0] do_futex+0x15b/0x1a60 [ 1697.966315][ C0] ? lock_acquire+0x1f1/0xad0 [ 1697.970966][ C0] ? __might_fault+0xef/0x1d0 [ 1697.975618][ C0] ? find_held_lock+0x2d/0x110 [ 1697.980358][ C0] ? futex_exit_release+0x220/0x220 [ 1697.985533][ C0] ? lock_downgrade+0x820/0x820 [ 1697.990359][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1697.996579][ C0] ? __might_fault+0x190/0x1d0 [ 1698.001318][ C0] ? _copy_to_user+0x126/0x160 [ 1698.006063][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1698.012126][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1698.017055][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1698.022593][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1698.027508][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1698.032616][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1698.037702][ C0] do_fast_syscall_32+0x7f/0x120 [ 1698.042633][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1698.047720][ C0] RIP: 0023:0xf7fd7569 [ 1698.051756][ C0] Code: Bad RIP value. [ 1698.055799][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1698.064211][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1698.072780][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1698.080732][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1698.088797][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1698.096751][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.104724][ C0] syz-executor.4 S29944 23435 7392 0x20020000 [ 1698.111130][ C0] Call Trace: [ 1698.114408][ C0] __schedule+0x8e1/0x1eb0 [ 1698.118809][ C0] ? io_schedule_timeout+0x140/0x140 [ 1698.124071][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1698.129563][ C0] schedule+0xd0/0x2a0 [ 1698.133618][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1698.138755][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1698.143935][ C0] futex_wait+0x1df/0x560 [ 1698.148241][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1698.153244][ C0] ? wake_up_q+0xa3/0x100 [ 1698.157565][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1698.162737][ C0] ? futex_wake+0x155/0x490 [ 1698.167227][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1698.173185][ C0] do_futex+0x15b/0x1a60 [ 1698.177408][ C0] ? lock_acquire+0x1f1/0xad0 [ 1698.182061][ C0] ? __might_fault+0xef/0x1d0 [ 1698.186711][ C0] ? find_held_lock+0x2d/0x110 [ 1698.191451][ C0] ? futex_exit_release+0x220/0x220 [ 1698.196624][ C0] ? lock_downgrade+0x820/0x820 [ 1698.201451][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1698.207671][ C0] ? __might_fault+0x190/0x1d0 [ 1698.212430][ C0] ? _copy_to_user+0x126/0x160 [ 1698.217172][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1698.222608][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1698.228132][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1698.234000][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1698.238914][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1698.244030][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1698.249292][ C0] do_fast_syscall_32+0x7f/0x120 [ 1698.254206][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1698.259291][ C0] RIP: 0023:0xf7fd7569 [ 1698.263337][ C0] Code: Bad RIP value. [ 1698.267379][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1698.275765][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1698.283728][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1698.291675][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1698.299622][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1698.307570][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.315529][ C0] syz-executor.5 S29024 24843 7432 0x20020000 [ 1698.321846][ C0] Call Trace: [ 1698.325131][ C0] __schedule+0x8e1/0x1eb0 [ 1698.329548][ C0] ? io_schedule_timeout+0x140/0x140 [ 1698.334808][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1698.340244][ C0] schedule+0xd0/0x2a0 [ 1698.344288][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1698.349374][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1698.354542][ C0] ? futex_wake+0x1b5/0x490 [ 1698.359040][ C0] ? find_held_lock+0x2d/0x110 [ 1698.363789][ C0] futex_wait+0x1df/0x560 [ 1698.368601][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1698.373613][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1698.378538][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1698.383721][ C0] ? futex_wake+0x155/0x490 [ 1698.388231][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1698.394194][ C0] do_futex+0x15b/0x1a60 [ 1698.398487][ C0] ? lock_acquire+0x1f1/0xad0 [ 1698.403149][ C0] ? __might_fault+0xef/0x1d0 [ 1698.407805][ C0] ? find_held_lock+0x2d/0x110 [ 1698.412546][ C0] ? futex_exit_release+0x220/0x220 [ 1698.417778][ C0] ? lock_downgrade+0x820/0x820 [ 1698.424218][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1698.430614][ C0] ? __might_fault+0x190/0x1d0 [ 1698.435355][ C0] ? _copy_to_user+0x126/0x160 [ 1698.440106][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1698.445581][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1698.451105][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1698.456977][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1698.461901][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1698.466992][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1698.472080][ C0] do_fast_syscall_32+0x7f/0x120 [ 1698.476995][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1698.482109][ C0] RIP: 0023:0xf7f53569 [ 1698.486148][ C0] Code: Bad RIP value. [ 1698.490188][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1698.498572][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1698.506538][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1698.514486][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1698.522450][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1698.530414][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.538373][ C0] syz-executor.3 S28184 25123 7114 0x20020000 [ 1698.544682][ C0] Call Trace: [ 1698.547952][ C0] __schedule+0x8e1/0x1eb0 [ 1698.552347][ C0] ? io_schedule_timeout+0x140/0x140 [ 1698.557608][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1698.563052][ C0] schedule+0xd0/0x2a0 [ 1698.567105][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1698.572189][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1698.577452][ C0] futex_wait+0x1df/0x560 [ 1698.581777][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1698.586782][ C0] ? mark_lock+0xbc/0x1710 [ 1698.591173][ C0] ? hash_futex+0x12/0x200 [ 1698.595680][ C0] ? futex_wake+0x155/0x490 [ 1698.600167][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1698.606124][ C0] do_futex+0x15b/0x1a60 [ 1698.610465][ C0] ? lock_acquire+0x1f1/0xad0 [ 1698.615119][ C0] ? __might_fault+0xef/0x1d0 [ 1698.619772][ C0] ? find_held_lock+0x2d/0x110 [ 1698.624510][ C0] ? futex_exit_release+0x220/0x220 [ 1698.629684][ C0] ? lock_downgrade+0x820/0x820 [ 1698.634510][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1698.640750][ C0] ? __might_fault+0x190/0x1d0 [ 1698.645486][ C0] ? _copy_to_user+0x126/0x160 [ 1698.650247][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1698.655685][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1698.661223][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1698.667099][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1698.672013][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1698.677104][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1698.682190][ C0] do_fast_syscall_32+0x7f/0x120 [ 1698.687116][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1698.692199][ C0] RIP: 0023:0xf7f6d569 [ 1698.696239][ C0] Code: Bad RIP value. [ 1698.700452][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1698.708943][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1698.716890][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1698.724838][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1698.732785][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1698.740731][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.748689][ C0] syz-executor.4 S29944 25130 7392 0x20020000 [ 1698.755014][ C0] Call Trace: [ 1698.758283][ C0] __schedule+0x8e1/0x1eb0 [ 1698.762696][ C0] ? io_schedule_timeout+0x140/0x140 [ 1698.767958][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1698.773396][ C0] schedule+0xd0/0x2a0 [ 1698.777442][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1698.782528][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1698.787723][ C0] futex_wait+0x1df/0x560 [ 1698.792035][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1698.797036][ C0] ? mark_lock+0xbc/0x1710 [ 1698.801427][ C0] ? mark_lock+0xbc/0x1710 [ 1698.805835][ C0] ? hash_futex+0x12/0x200 [ 1698.810228][ C0] ? futex_wake+0x155/0x490 [ 1698.814714][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1698.820671][ C0] do_futex+0x15b/0x1a60 [ 1698.824894][ C0] ? lock_acquire+0x1f1/0xad0 [ 1698.829551][ C0] ? __might_fault+0xef/0x1d0 [ 1698.834231][ C0] ? find_held_lock+0x2d/0x110 [ 1698.838972][ C0] ? futex_exit_release+0x220/0x220 [ 1698.844148][ C0] ? lock_downgrade+0x820/0x820 [ 1698.848975][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1698.855209][ C0] ? __might_fault+0x190/0x1d0 [ 1698.859949][ C0] ? _copy_to_user+0x126/0x160 [ 1698.864714][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1698.870325][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1698.875877][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1698.881774][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1698.886688][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1698.891779][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1698.896868][ C0] do_fast_syscall_32+0x7f/0x120 [ 1698.901781][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1698.906866][ C0] RIP: 0023:0xf7fd7569 [ 1698.910907][ C0] Code: Bad RIP value. [ 1698.914963][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1698.923348][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1698.931295][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1698.939258][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1698.947205][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1698.955170][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1698.963130][ C0] syz-executor.3 S29944 25139 7114 0x20020000 [ 1698.969455][ C0] Call Trace: [ 1698.972722][ C0] __schedule+0x8e1/0x1eb0 [ 1698.977135][ C0] ? io_schedule_timeout+0x140/0x140 [ 1698.982396][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1698.987836][ C0] schedule+0xd0/0x2a0 [ 1698.991884][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1698.996974][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1699.002169][ C0] futex_wait+0x1df/0x560 [ 1699.006477][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1699.011484][ C0] ? wake_up_q+0xa3/0x100 [ 1699.015794][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1699.020986][ C0] ? futex_wake+0x155/0x490 [ 1699.025476][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1699.031434][ C0] do_futex+0x15b/0x1a60 [ 1699.035661][ C0] ? lock_acquire+0x1f1/0xad0 [ 1699.040388][ C0] ? __might_fault+0xef/0x1d0 [ 1699.045051][ C0] ? find_held_lock+0x2d/0x110 [ 1699.049858][ C0] ? futex_exit_release+0x220/0x220 [ 1699.055652][ C0] ? lock_downgrade+0x820/0x820 [ 1699.060528][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1699.066771][ C0] ? __might_fault+0x190/0x1d0 [ 1699.071512][ C0] ? _copy_to_user+0x126/0x160 [ 1699.076256][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1699.081695][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1699.087216][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1699.093089][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1699.098020][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1699.103111][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1699.108198][ C0] do_fast_syscall_32+0x7f/0x120 [ 1699.113130][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1699.118217][ C0] RIP: 0023:0xf7f6d569 [ 1699.122273][ C0] Code: Bad RIP value. [ 1699.126312][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1699.134698][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1699.142662][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1699.150623][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1699.158586][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1699.166539][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1699.174497][ C0] syz-executor.3 S29944 25169 7114 0x20020000 [ 1699.180808][ C0] Call Trace: [ 1699.184078][ C0] __schedule+0x8e1/0x1eb0 [ 1699.188493][ C0] ? io_schedule_timeout+0x140/0x140 [ 1699.193756][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1699.199249][ C0] schedule+0xd0/0x2a0 [ 1699.203299][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1699.208409][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1699.213613][ C0] futex_wait+0x1df/0x560 [ 1699.217928][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1699.222935][ C0] ? wake_up_q+0xa3/0x100 [ 1699.227246][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1699.232428][ C0] ? futex_wake+0x155/0x490 [ 1699.236922][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1699.242897][ C0] do_futex+0x15b/0x1a60 [ 1699.247124][ C0] ? lock_acquire+0x1f1/0xad0 [ 1699.251779][ C0] ? __might_fault+0xef/0x1d0 [ 1699.256953][ C0] ? find_held_lock+0x2d/0x110 [ 1699.261694][ C0] ? futex_exit_release+0x220/0x220 [ 1699.266886][ C0] ? lock_downgrade+0x820/0x820 [ 1699.271714][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1699.277950][ C0] ? __might_fault+0x190/0x1d0 [ 1699.282689][ C0] ? _copy_to_user+0x126/0x160 [ 1699.287436][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1699.292876][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1699.298399][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1699.304272][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1699.309187][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1699.314296][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1699.319410][ C0] do_fast_syscall_32+0x7f/0x120 [ 1699.324437][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1699.329607][ C0] RIP: 0023:0xf7f6d569 [ 1699.333651][ C0] Code: Bad RIP value. [ 1699.337751][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1699.346143][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1699.354090][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1699.362039][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1699.369985][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1699.377952][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1699.385922][ C0] syz-executor.2 S29944 25173 7031 0x20020000 [ 1699.392236][ C0] Call Trace: [ 1699.395507][ C0] __schedule+0x8e1/0x1eb0 [ 1699.399908][ C0] ? io_schedule_timeout+0x140/0x140 [ 1699.405171][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1699.410649][ C0] schedule+0xd0/0x2a0 [ 1699.414697][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1699.419785][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1699.424961][ C0] futex_wait+0x1df/0x560 [ 1699.429292][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1699.434294][ C0] ? mark_lock+0xbc/0x1710 [ 1699.438687][ C0] ? mark_lock+0xbc/0x1710 [ 1699.443079][ C0] ? hash_futex+0x12/0x200 [ 1699.447470][ C0] ? futex_wake+0x155/0x490 [ 1699.451959][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1699.457915][ C0] do_futex+0x15b/0x1a60 [ 1699.462139][ C0] ? lock_acquire+0x1f1/0xad0 [ 1699.468615][ C0] ? __might_fault+0xef/0x1d0 [ 1699.473267][ C0] ? find_held_lock+0x2d/0x110 [ 1699.478008][ C0] ? futex_exit_release+0x220/0x220 [ 1699.483287][ C0] ? lock_downgrade+0x820/0x820 [ 1699.488114][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1699.494334][ C0] ? __might_fault+0x190/0x1d0 [ 1699.499073][ C0] ? _copy_to_user+0x126/0x160 [ 1699.503817][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1699.509258][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1699.514781][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1699.520668][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1699.525582][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1699.530691][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1699.535799][ C0] do_fast_syscall_32+0x7f/0x120 [ 1699.540738][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1699.545833][ C0] RIP: 0023:0xf7f91569 [ 1699.549870][ C0] Code: Bad RIP value. [ 1699.553926][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1699.562313][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1699.570259][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1699.578220][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1699.586201][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1699.594146][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1699.602107][ C0] syz-executor.5 S29944 25177 7432 0x20020000 [ 1699.608416][ C0] Call Trace: [ 1699.611690][ C0] __schedule+0x8e1/0x1eb0 [ 1699.616103][ C0] ? io_schedule_timeout+0x140/0x140 [ 1699.621368][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1699.626808][ C0] schedule+0xd0/0x2a0 [ 1699.630869][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1699.635955][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1699.641135][ C0] futex_wait+0x1df/0x560 [ 1699.645443][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1699.650445][ C0] ? mark_lock+0xbc/0x1710 [ 1699.654837][ C0] ? mark_lock+0xbc/0x1710 [ 1699.659229][ C0] ? hash_futex+0x12/0x200 [ 1699.663642][ C0] ? futex_wake+0x155/0x490 [ 1699.668144][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1699.674122][ C0] do_futex+0x15b/0x1a60 [ 1699.678353][ C0] ? lock_acquire+0x1f1/0xad0 [ 1699.683102][ C0] ? __might_fault+0xef/0x1d0 [ 1699.687756][ C0] ? find_held_lock+0x2d/0x110 [ 1699.692503][ C0] ? futex_exit_release+0x220/0x220 [ 1699.698198][ C0] ? lock_downgrade+0x820/0x820 [ 1699.703027][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1699.709248][ C0] ? __might_fault+0x190/0x1d0 [ 1699.714005][ C0] ? _copy_to_user+0x126/0x160 [ 1699.718750][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1699.724211][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1699.729748][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1699.735619][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1699.740533][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1699.745645][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1699.750748][ C0] do_fast_syscall_32+0x7f/0x120 [ 1699.755663][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1699.760750][ C0] RIP: 0023:0xf7f53569 [ 1699.764789][ C0] Code: Bad RIP value. [ 1699.768829][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1699.777213][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1699.785162][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1699.793109][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1699.801072][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1699.809020][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1699.817004][ C0] syz-executor.1 S29944 25280 6979 0x20020000 [ 1699.823314][ C0] Call Trace: [ 1699.826584][ C0] __schedule+0x8e1/0x1eb0 [ 1699.830996][ C0] ? io_schedule_timeout+0x140/0x140 [ 1699.836258][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1699.841695][ C0] schedule+0xd0/0x2a0 [ 1699.845740][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1699.850828][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1699.856023][ C0] futex_wait+0x1df/0x560 [ 1699.860331][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1699.865331][ C0] ? mark_lock+0xbc/0x1710 [ 1699.869724][ C0] ? mark_lock+0xbc/0x1710 [ 1699.874115][ C0] ? hash_futex+0x12/0x200 [ 1699.878506][ C0] ? futex_wake+0x155/0x490 [ 1699.882991][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1699.888946][ C0] do_futex+0x15b/0x1a60 [ 1699.893169][ C0] ? lock_acquire+0x1f1/0xad0 [ 1699.897820][ C0] ? __might_fault+0xef/0x1d0 [ 1699.902470][ C0] ? find_held_lock+0x2d/0x110 [ 1699.907209][ C0] ? futex_exit_release+0x220/0x220 [ 1699.912387][ C0] ? lock_downgrade+0x820/0x820 [ 1699.917215][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1699.923433][ C0] ? __might_fault+0x190/0x1d0 [ 1699.928172][ C0] ? _copy_to_user+0x126/0x160 [ 1699.932915][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1699.938350][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1699.943870][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1699.949916][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1699.954829][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1699.960023][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1699.965111][ C0] do_fast_syscall_32+0x7f/0x120 [ 1699.970026][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1699.975199][ C0] RIP: 0023:0xf7fa1569 [ 1699.979237][ C0] Code: Bad RIP value. [ 1699.983280][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1699.991664][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1699.999625][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1700.007885][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1700.015849][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1700.023811][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.031785][ C0] syz-executor.1 S29944 25305 6979 0x20020000 [ 1700.038094][ C0] Call Trace: [ 1700.041379][ C0] __schedule+0x8e1/0x1eb0 [ 1700.045791][ C0] ? io_schedule_timeout+0x140/0x140 [ 1700.051057][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1700.056498][ C0] schedule+0xd0/0x2a0 [ 1700.060542][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1700.065715][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1700.070893][ C0] futex_wait+0x1df/0x560 [ 1700.075203][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1700.080204][ C0] ? mark_lock+0xbc/0x1710 [ 1700.084613][ C0] ? mark_lock+0xbc/0x1710 [ 1700.089021][ C0] ? hash_futex+0x12/0x200 [ 1700.093429][ C0] ? futex_wake+0x155/0x490 [ 1700.097917][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1700.104049][ C0] do_futex+0x15b/0x1a60 [ 1700.108277][ C0] ? lock_acquire+0x1f1/0xad0 [ 1700.112928][ C0] ? __might_fault+0xef/0x1d0 [ 1700.117597][ C0] ? find_held_lock+0x2d/0x110 [ 1700.122337][ C0] ? futex_exit_release+0x220/0x220 [ 1700.127512][ C0] ? lock_downgrade+0x820/0x820 [ 1700.132338][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1700.138582][ C0] ? __might_fault+0x190/0x1d0 [ 1700.143325][ C0] ? _copy_to_user+0x126/0x160 [ 1700.148780][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1700.154216][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1700.159741][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1700.165622][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1700.170538][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1700.175632][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1700.180719][ C0] do_fast_syscall_32+0x7f/0x120 [ 1700.185632][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1700.190735][ C0] RIP: 0023:0xf7fa1569 [ 1700.194773][ C0] Code: Bad RIP value. [ 1700.198812][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1700.207198][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1700.215175][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1700.223131][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1700.231117][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1700.239081][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.247112][ C0] syz-executor.1 S29944 25320 6979 0x20020000 [ 1700.253442][ C0] Call Trace: [ 1700.256743][ C0] __schedule+0x8e1/0x1eb0 [ 1700.261150][ C0] ? io_schedule_timeout+0x140/0x140 [ 1700.266440][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1700.271880][ C0] schedule+0xd0/0x2a0 [ 1700.275927][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1700.281016][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1700.286189][ C0] ? futex_wake+0x1b5/0x490 [ 1700.290683][ C0] ? find_held_lock+0x2d/0x110 [ 1700.295428][ C0] futex_wait+0x1df/0x560 [ 1700.299734][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1700.304732][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1700.309648][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1700.314845][ C0] ? futex_wake+0x155/0x490 [ 1700.319352][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1700.325324][ C0] do_futex+0x15b/0x1a60 [ 1700.329551][ C0] ? lock_acquire+0x1f1/0xad0 [ 1700.334208][ C0] ? __might_fault+0xef/0x1d0 [ 1700.338859][ C0] ? find_held_lock+0x2d/0x110 [ 1700.343600][ C0] ? futex_exit_release+0x220/0x220 [ 1700.348776][ C0] ? lock_downgrade+0x820/0x820 [ 1700.353606][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1700.359827][ C0] ? __might_fault+0x190/0x1d0 [ 1700.364612][ C0] ? _copy_to_user+0x126/0x160 [ 1700.369357][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1700.374795][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1700.380342][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1700.386224][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1700.391144][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1700.396358][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1700.401468][ C0] do_fast_syscall_32+0x7f/0x120 [ 1700.406444][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1700.411544][ C0] RIP: 0023:0xf7fa1569 [ 1700.415613][ C0] Code: Bad RIP value. [ 1700.419654][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1700.428073][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1700.436020][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1700.443967][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1700.451913][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1700.459859][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.468165][ C0] syz-executor.3 S29944 25323 7114 0x20020000 [ 1700.474475][ C0] Call Trace: [ 1700.477742][ C0] __schedule+0x8e1/0x1eb0 [ 1700.482138][ C0] ? io_schedule_timeout+0x140/0x140 [ 1700.487400][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1700.492838][ C0] schedule+0xd0/0x2a0 [ 1700.496900][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1700.501987][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1700.507160][ C0] ? futex_wake+0x1b5/0x490 [ 1700.511657][ C0] ? find_held_lock+0x2d/0x110 [ 1700.516413][ C0] futex_wait+0x1df/0x560 [ 1700.520720][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1700.525719][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1700.530635][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1700.535981][ C0] ? futex_wake+0x155/0x490 [ 1700.540470][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1700.546448][ C0] do_futex+0x15b/0x1a60 [ 1700.550669][ C0] ? lock_acquire+0x1f1/0xad0 [ 1700.555427][ C0] ? __might_fault+0xef/0x1d0 [ 1700.560080][ C0] ? find_held_lock+0x2d/0x110 [ 1700.564836][ C0] ? futex_exit_release+0x220/0x220 [ 1700.570011][ C0] ? lock_downgrade+0x820/0x820 [ 1700.574837][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1700.581058][ C0] ? __might_fault+0x190/0x1d0 [ 1700.585816][ C0] ? _copy_to_user+0x126/0x160 [ 1700.590562][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1700.595999][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1700.601606][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1700.607478][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1700.612394][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1700.617485][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1700.622588][ C0] do_fast_syscall_32+0x7f/0x120 [ 1700.627501][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1700.632585][ C0] RIP: 0023:0xf7f6d569 [ 1700.636632][ C0] Code: Bad RIP value. [ 1700.640671][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1700.649057][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1700.657012][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1700.664959][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1700.672925][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1700.680907][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.688869][ C0] syz-executor.1 S29944 25356 6979 0x20020000 [ 1700.695206][ C0] Call Trace: [ 1700.698489][ C0] __schedule+0x8e1/0x1eb0 [ 1700.702893][ C0] ? io_schedule_timeout+0x140/0x140 [ 1700.708169][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1700.713611][ C0] schedule+0xd0/0x2a0 [ 1700.717671][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1700.722759][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1700.727936][ C0] futex_wait+0x1df/0x560 [ 1700.732270][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1700.737277][ C0] ? mark_lock+0xbc/0x1710 [ 1700.741675][ C0] ? mark_lock+0xbc/0x1710 [ 1700.746505][ C0] ? hash_futex+0x12/0x200 [ 1700.750908][ C0] ? futex_wake+0x155/0x490 [ 1700.755399][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1700.761355][ C0] do_futex+0x15b/0x1a60 [ 1700.765579][ C0] ? lock_acquire+0x1f1/0xad0 [ 1700.770233][ C0] ? __might_fault+0xef/0x1d0 [ 1700.774888][ C0] ? find_held_lock+0x2d/0x110 [ 1700.779716][ C0] ? futex_exit_release+0x220/0x220 [ 1700.784894][ C0] ? lock_downgrade+0x820/0x820 [ 1700.789725][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1700.795947][ C0] ? __might_fault+0x190/0x1d0 [ 1700.800705][ C0] ? _copy_to_user+0x126/0x160 [ 1700.805447][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1700.810886][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1700.816500][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1700.822372][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1700.827317][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1700.832407][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1700.837499][ C0] do_fast_syscall_32+0x7f/0x120 [ 1700.842415][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1700.847502][ C0] RIP: 0023:0xf7fa1569 [ 1700.851541][ C0] Code: Bad RIP value. [ 1700.855579][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1700.864050][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1700.872004][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1700.880390][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1700.888351][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1700.896299][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.904260][ C0] syz-executor.3 S29944 25357 7114 0x20020000 [ 1700.910596][ C0] Call Trace: [ 1700.913865][ C0] __schedule+0x8e1/0x1eb0 [ 1700.918268][ C0] ? io_schedule_timeout+0x140/0x140 [ 1700.923531][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1700.928972][ C0] schedule+0xd0/0x2a0 [ 1700.933016][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1700.938103][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1700.943277][ C0] futex_wait+0x1df/0x560 [ 1700.947586][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1700.952681][ C0] ? mark_lock+0xbc/0x1710 [ 1700.957087][ C0] ? mark_lock+0xbc/0x1710 [ 1700.961479][ C0] ? hash_futex+0x12/0x200 [ 1700.965976][ C0] ? futex_wake+0x155/0x490 [ 1700.970466][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1700.976422][ C0] do_futex+0x15b/0x1a60 [ 1700.980992][ C0] ? lock_acquire+0x1f1/0xad0 [ 1700.985663][ C0] ? __might_fault+0xef/0x1d0 [ 1700.990315][ C0] ? find_held_lock+0x2d/0x110 [ 1700.995053][ C0] ? futex_exit_release+0x220/0x220 [ 1701.000230][ C0] ? lock_downgrade+0x820/0x820 [ 1701.005059][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1701.011279][ C0] ? __might_fault+0x190/0x1d0 [ 1701.016019][ C0] ? _copy_to_user+0x126/0x160 [ 1701.020771][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1701.026208][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1701.031749][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1701.037620][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1701.042537][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1701.047648][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1701.052737][ C0] do_fast_syscall_32+0x7f/0x120 [ 1701.058000][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1701.063085][ C0] RIP: 0023:0xf7f6d569 [ 1701.067140][ C0] Code: Bad RIP value. [ 1701.071194][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1701.079594][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1701.087540][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1701.095487][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1701.103434][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1701.111382][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1701.119341][ C0] syz-executor.3 S29944 25379 7114 0x20020000 [ 1701.125823][ C0] Call Trace: [ 1701.129095][ C0] __schedule+0x8e1/0x1eb0 [ 1701.133514][ C0] ? io_schedule_timeout+0x140/0x140 [ 1701.138793][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1701.144237][ C0] schedule+0xd0/0x2a0 [ 1701.148285][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1701.153388][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1701.158580][ C0] futex_wait+0x1df/0x560 [ 1701.162907][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1701.167909][ C0] ? mark_lock+0xbc/0x1710 [ 1701.172303][ C0] ? mark_lock+0xbc/0x1710 [ 1701.176694][ C0] ? hash_futex+0x12/0x200 [ 1701.181100][ C0] ? futex_wake+0x155/0x490 [ 1701.185607][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1701.191611][ C0] do_futex+0x15b/0x1a60 [ 1701.195846][ C0] ? lock_acquire+0x1f1/0xad0 [ 1701.200503][ C0] ? __might_fault+0xef/0x1d0 [ 1701.205153][ C0] ? find_held_lock+0x2d/0x110 [ 1701.209918][ C0] ? futex_exit_release+0x220/0x220 [ 1701.215094][ C0] ? lock_downgrade+0x820/0x820 [ 1701.219972][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1701.226194][ C0] ? __might_fault+0x190/0x1d0 [ 1701.230941][ C0] ? _copy_to_user+0x126/0x160 [ 1701.235688][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1701.241164][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1701.246686][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1701.252572][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1701.257487][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1701.262695][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1701.267783][ C0] do_fast_syscall_32+0x7f/0x120 [ 1701.272701][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1701.277889][ C0] RIP: 0023:0xf7f6d569 [ 1701.281945][ C0] Code: Bad RIP value. [ 1701.286002][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1701.294405][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1701.302459][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1701.310753][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1701.318730][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1701.326698][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1701.334658][ C0] syz-executor.5 S29944 25808 7432 0x20020000 [ 1701.340987][ C0] Call Trace: [ 1701.344255][ C0] __schedule+0x8e1/0x1eb0 [ 1701.348652][ C0] ? io_schedule_timeout+0x140/0x140 [ 1701.353932][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1701.359382][ C0] schedule+0xd0/0x2a0 [ 1701.363440][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1701.368590][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1701.373795][ C0] futex_wait+0x1df/0x560 [ 1701.378125][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1701.383125][ C0] ? do_syscall_32_irqs_on+0x3f/0x60 [ 1701.388389][ C0] ? mark_lock+0xbc/0x1710 [ 1701.392780][ C0] ? hash_futex+0x12/0x200 [ 1701.397173][ C0] ? futex_wake+0x155/0x490 [ 1701.401661][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1701.407613][ C0] ? __lock_acquire+0xc1e/0x56e0 [ 1701.412574][ C0] do_futex+0x15b/0x1a60 [ 1701.416799][ C0] ? lock_acquire+0x1f1/0xad0 [ 1701.421663][ C0] ? __might_fault+0xef/0x1d0 [ 1701.426345][ C0] ? find_held_lock+0x2d/0x110 [ 1701.431163][ C0] ? futex_exit_release+0x220/0x220 [ 1701.436347][ C0] ? lock_downgrade+0x820/0x820 [ 1701.441182][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1701.447406][ C0] ? __might_fault+0x190/0x1d0 [ 1701.452159][ C0] ? _copy_to_user+0x126/0x160 [ 1701.456912][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1701.462356][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1701.468350][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1701.474223][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1701.479140][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1701.484233][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1701.489330][ C0] do_fast_syscall_32+0x7f/0x120 [ 1701.494246][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1701.501608][ C0] RIP: 0023:0xf7f53569 [ 1701.505657][ C0] Code: Bad RIP value. [ 1701.509713][ C0] RSP: 002b:00000000f5d2d12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1701.518551][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1701.526506][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1701.534512][ C0] RBP: 00000000f5d2d228 R08: 0000000000000000 R09: 0000000000000000 [ 1701.542653][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1701.550609][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1701.558578][ C0] syz-executor.0 T29136 26158 6841 0x20024004 [ 1701.564893][ C0] Call Trace: [ 1701.568174][ C0] __schedule+0x8e1/0x1eb0 [ 1701.572573][ C0] ? io_schedule_timeout+0x140/0x140 [ 1701.577855][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1701.583293][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1701.589271][ C0] schedule+0xd0/0x2a0 [ 1701.593321][ C0] do_signal_stop+0x32f/0x840 [ 1701.597974][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1701.603353][ C0] get_signal+0x8b8/0x1fc0 [ 1701.607750][ C0] ? __splice_from_pipe+0x830/0x830 [ 1701.612943][ C0] do_signal+0x82/0x2520 [ 1701.617164][ C0] ? splice_from_pipe+0x140/0x140 [ 1701.622162][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1701.627685][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1701.632877][ C0] ? __ia32_sys_futex_time32+0x30b/0x455 [ 1701.638496][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1701.644279][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1701.650253][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1701.656050][ C0] do_fast_syscall_32+0x7f/0x120 [ 1701.660980][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1701.666072][ C0] RIP: 0023:0xf7fd1569 [ 1701.670112][ C0] Code: Bad RIP value. [ 1701.674151][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1701.682537][ C0] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000000000 [ 1701.690484][ C0] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1701.698431][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1701.706483][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1701.714444][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1701.722419][ C0] syz-executor.0 S29944 26189 6841 0x20020000 [ 1701.728777][ C0] Call Trace: [ 1701.732054][ C0] __schedule+0x8e1/0x1eb0 [ 1701.736456][ C0] ? io_schedule_timeout+0x140/0x140 [ 1701.741720][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1701.747440][ C0] schedule+0xd0/0x2a0 [ 1701.751505][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1701.756592][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1701.761771][ C0] futex_wait+0x1df/0x560 [ 1701.766098][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1701.771099][ C0] ? do_syscall_32_irqs_on+0x3f/0x60 [ 1701.776363][ C0] ? mark_lock+0xbc/0x1710 [ 1701.780783][ C0] ? hash_futex+0x12/0x200 [ 1701.785185][ C0] ? futex_wake+0x155/0x490 [ 1701.789677][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1701.795639][ C0] ? __lock_acquire+0xc1e/0x56e0 [ 1701.800760][ C0] do_futex+0x15b/0x1a60 [ 1701.804993][ C0] ? lock_acquire+0x1f1/0xad0 [ 1701.809647][ C0] ? __might_fault+0xef/0x1d0 [ 1701.814319][ C0] ? find_held_lock+0x2d/0x110 [ 1701.819072][ C0] ? futex_exit_release+0x220/0x220 [ 1701.824311][ C0] ? lock_downgrade+0x820/0x820 [ 1701.829147][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1701.835426][ C0] ? __might_fault+0x190/0x1d0 [ 1701.840173][ C0] ? _copy_to_user+0x126/0x160 [ 1701.844920][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1701.850361][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1701.855883][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1701.861756][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1701.866678][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1701.872242][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1701.877334][ C0] do_fast_syscall_32+0x7f/0x120 [ 1701.882299][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1701.887790][ C0] RIP: 0023:0xf7fd1569 [ 1701.891831][ C0] Code: Bad RIP value. [ 1701.895871][ C0] RSP: 002b:00000000f5dab12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1701.904285][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1701.912239][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1701.920218][ C0] RBP: 00000000f5dab228 R08: 0000000000000000 R09: 0000000000000000 [ 1701.928203][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1701.936148][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1701.944135][ C0] syz-executor.3 S28752 26194 7114 0x20020000 [ 1701.950446][ C0] Call Trace: [ 1701.953715][ C0] __schedule+0x8e1/0x1eb0 [ 1701.960044][ C0] ? io_schedule_timeout+0x140/0x140 [ 1701.965308][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1701.970749][ C0] schedule+0xd0/0x2a0 [ 1701.975753][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1701.980839][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1701.986016][ C0] futex_wait+0x1df/0x560 [ 1701.990322][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1701.995341][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1702.001122][ C0] ? mark_lock+0xbc/0x1710 [ 1702.005512][ C0] ? hash_futex+0x12/0x200 [ 1702.009904][ C0] ? futex_wake+0x155/0x490 [ 1702.014392][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1702.020349][ C0] do_futex+0x15b/0x1a60 [ 1702.024573][ C0] ? lock_acquire+0x1f1/0xad0 [ 1702.029227][ C0] ? __might_fault+0xef/0x1d0 [ 1702.033877][ C0] ? find_held_lock+0x2d/0x110 [ 1702.038617][ C0] ? futex_exit_release+0x220/0x220 [ 1702.043792][ C0] ? lock_downgrade+0x820/0x820 [ 1702.048619][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1702.054854][ C0] ? __might_fault+0x190/0x1d0 [ 1702.059594][ C0] ? _copy_to_user+0x126/0x160 [ 1702.064338][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1702.069774][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1702.075295][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1702.081172][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1702.086105][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1702.091195][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1702.096280][ C0] do_fast_syscall_32+0x7f/0x120 [ 1702.101194][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1702.106289][ C0] RIP: 0023:0xf7f6d569 [ 1702.110326][ C0] Code: Bad RIP value. [ 1702.114364][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1702.122938][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1702.130885][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1702.138832][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1702.146785][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1702.154731][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1702.162702][ C0] syz-executor.0 T29712 26201 6841 0x20024004 [ 1702.169013][ C0] Call Trace: [ 1702.172279][ C0] __schedule+0x8e1/0x1eb0 [ 1702.176674][ C0] ? io_schedule_timeout+0x140/0x140 [ 1702.181933][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1702.187107][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1702.193063][ C0] schedule+0xd0/0x2a0 [ 1702.197132][ C0] do_signal_stop+0x32f/0x840 [ 1702.201819][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1702.207169][ C0] get_signal+0x8b8/0x1fc0 [ 1702.211567][ C0] ? __splice_from_pipe+0x830/0x830 [ 1702.216742][ C0] do_signal+0x82/0x2520 [ 1702.220979][ C0] ? splice_from_pipe+0x140/0x140 [ 1702.225979][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1702.231328][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1702.236502][ C0] ? __ia32_sys_futex_time32+0x30b/0x455 [ 1702.242118][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1702.247920][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1702.253878][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1702.259575][ C0] do_fast_syscall_32+0x7f/0x120 [ 1702.264504][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1702.269618][ C0] RIP: 0023:0xf7fd1569 [ 1702.273657][ C0] Code: Bad RIP value. [ 1702.277696][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1702.286110][ C0] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000000000 [ 1702.294078][ C0] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1702.302128][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1702.310076][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1702.318028][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1702.326001][ C0] syz-executor.0 T29712 26253 6841 0x20024004 [ 1702.332327][ C0] Call Trace: [ 1702.335611][ C0] __schedule+0x8e1/0x1eb0 [ 1702.340023][ C0] ? io_schedule_timeout+0x140/0x140 [ 1702.345299][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1702.350477][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1702.356438][ C0] schedule+0xd0/0x2a0 [ 1702.360517][ C0] do_signal_stop+0x32f/0x840 [ 1702.365189][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1702.370575][ C0] get_signal+0x8b8/0x1fc0 [ 1702.374977][ C0] ? __splice_from_pipe+0x830/0x830 [ 1702.380158][ C0] do_signal+0x82/0x2520 [ 1702.384409][ C0] ? splice_from_pipe+0x140/0x140 [ 1702.389408][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1702.394757][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1702.399934][ C0] ? __ia32_sys_futex_time32+0x30b/0x455 [ 1702.405551][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1702.411333][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1702.417292][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1702.423009][ C0] do_fast_syscall_32+0x7f/0x120 [ 1702.427924][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1702.433025][ C0] RIP: 0023:0xf7fd1569 [ 1702.437079][ C0] Code: Bad RIP value. [ 1702.441122][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1702.449508][ C0] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000000000 [ 1702.457555][ C0] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1702.465508][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1702.473455][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1702.481417][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1702.489392][ C0] syz-executor.0 T29360 26296 6841 0x20024004 [ 1702.495701][ C0] Call Trace: [ 1702.498969][ C0] __schedule+0x8e1/0x1eb0 [ 1702.503365][ C0] ? io_schedule_timeout+0x140/0x140 [ 1702.508625][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1702.513872][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1702.519894][ C0] schedule+0xd0/0x2a0 [ 1702.524002][ C0] do_signal_stop+0x32f/0x840 [ 1702.528659][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1702.534012][ C0] get_signal+0x8b8/0x1fc0 [ 1702.538435][ C0] ? __splice_from_pipe+0x830/0x830 [ 1702.543653][ C0] do_signal+0x82/0x2520 [ 1702.547877][ C0] ? splice_from_pipe+0x140/0x140 [ 1702.553012][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1702.558413][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1702.563588][ C0] ? __ia32_sys_futex_time32+0x30b/0x455 [ 1702.569202][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1702.575041][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1702.581001][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1702.586706][ C0] do_fast_syscall_32+0x7f/0x120 [ 1702.591628][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1702.596714][ C0] RIP: 0023:0xf7fd1569 [ 1702.600752][ C0] Code: Bad RIP value. [ 1702.604792][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1702.613195][ C0] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000000000 [ 1702.621232][ C0] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1702.629180][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1702.637129][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1702.645163][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1702.653123][ C0] syz-executor.0 S29944 26392 6841 0x20020000 [ 1702.659433][ C0] Call Trace: [ 1702.662701][ C0] __schedule+0x8e1/0x1eb0 [ 1702.667121][ C0] ? io_schedule_timeout+0x140/0x140 [ 1702.672384][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1702.677822][ C0] schedule+0xd0/0x2a0 [ 1702.681869][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1702.686956][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1702.692218][ C0] futex_wait+0x1df/0x560 [ 1702.696528][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1702.701530][ C0] ? mark_lock+0xbc/0x1710 [ 1702.705921][ C0] ? hash_futex+0x12/0x200 [ 1702.710328][ C0] ? futex_wake+0x155/0x490 [ 1702.715009][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1702.720972][ C0] do_futex+0x15b/0x1a60 [ 1702.725195][ C0] ? lock_acquire+0x1f1/0xad0 [ 1702.729849][ C0] ? __might_fault+0xef/0x1d0 [ 1702.734501][ C0] ? find_held_lock+0x2d/0x110 [ 1702.739239][ C0] ? futex_exit_release+0x220/0x220 [ 1702.747195][ C0] ? lock_downgrade+0x820/0x820 [ 1702.752025][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1702.758245][ C0] ? __might_fault+0x190/0x1d0 [ 1702.762981][ C0] ? _copy_to_user+0x126/0x160 [ 1702.767724][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1702.773160][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1702.778688][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1702.784556][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1702.789467][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1702.794554][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1702.799638][ C0] do_fast_syscall_32+0x7f/0x120 [ 1702.804548][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1702.809631][ C0] RIP: 0023:0xf7fd1569 [ 1702.813666][ C0] Code: Bad RIP value. [ 1702.817705][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1702.826090][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1702.834045][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1702.841990][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1702.849948][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1702.857894][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1702.865861][ C0] syz-executor.2 S29664 26751 7031 0x20020000 [ 1702.872180][ C0] Call Trace: [ 1702.875445][ C0] __schedule+0x8e1/0x1eb0 [ 1702.879839][ C0] ? io_schedule_timeout+0x140/0x140 [ 1702.885182][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1702.890618][ C0] schedule+0xd0/0x2a0 [ 1702.894676][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1702.899761][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1702.904929][ C0] ? futex_wake+0x1b5/0x490 [ 1702.909406][ C0] ? find_held_lock+0x2d/0x110 [ 1702.914145][ C0] futex_wait+0x1df/0x560 [ 1702.918451][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1702.923446][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1702.928381][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1702.933554][ C0] ? futex_wake+0x155/0x490 [ 1702.938041][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1702.944031][ C0] ? __lock_acquire+0xc1e/0x56e0 [ 1702.948942][ C0] do_futex+0x15b/0x1a60 [ 1702.953176][ C0] ? lock_acquire+0x1f1/0xad0 [ 1702.957825][ C0] ? __might_fault+0xef/0x1d0 [ 1702.962478][ C0] ? find_held_lock+0x2d/0x110 [ 1702.967227][ C0] ? futex_exit_release+0x220/0x220 [ 1702.972412][ C0] ? lock_downgrade+0x820/0x820 [ 1702.977239][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1702.983457][ C0] ? __might_fault+0x190/0x1d0 [ 1702.988195][ C0] ? _copy_to_user+0x126/0x160 [ 1702.992936][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1702.998372][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1703.003892][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1703.009763][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1703.014677][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1703.019767][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1703.024866][ C0] do_fast_syscall_32+0x7f/0x120 [ 1703.029780][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1703.034863][ C0] RIP: 0023:0xf7f91569 [ 1703.038900][ C0] Code: Bad RIP value. [ 1703.042941][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1703.051323][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1703.059267][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1703.067215][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1703.075170][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1703.083115][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.091073][ C0] syz-executor.2 S29024 26817 7031 0x20020000 [ 1703.097380][ C0] Call Trace: [ 1703.100648][ C0] __schedule+0x8e1/0x1eb0 [ 1703.105040][ C0] ? io_schedule_timeout+0x140/0x140 [ 1703.110310][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1703.115763][ C0] schedule+0xd0/0x2a0 [ 1703.119809][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1703.124893][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1703.130076][ C0] futex_wait+0x1df/0x560 [ 1703.134392][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1703.139392][ C0] ? wake_up_q+0xa3/0x100 [ 1703.144131][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1703.149303][ C0] ? futex_wake+0x155/0x490 [ 1703.153794][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1703.159762][ C0] do_futex+0x15b/0x1a60 [ 1703.163993][ C0] ? lock_acquire+0x1f1/0xad0 [ 1703.168645][ C0] ? __might_fault+0xef/0x1d0 [ 1703.173296][ C0] ? find_held_lock+0x2d/0x110 [ 1703.178042][ C0] ? futex_exit_release+0x220/0x220 [ 1703.183219][ C0] ? lock_downgrade+0x820/0x820 [ 1703.188044][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1703.194275][ C0] ? __might_fault+0x190/0x1d0 [ 1703.199043][ C0] ? _copy_to_user+0x126/0x160 [ 1703.203794][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1703.209237][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1703.214198][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1703.219726][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1703.224638][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1703.229727][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1703.234811][ C0] do_fast_syscall_32+0x7f/0x120 [ 1703.239730][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1703.244852][ C0] RIP: 0023:0xf7f91569 [ 1703.248889][ C0] Code: Bad RIP value. [ 1703.252929][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1703.261312][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1703.269257][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1703.277221][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1703.285169][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1703.293135][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.301132][ C0] syz-executor.2 S29144 26835 7031 0x20020000 [ 1703.307441][ C0] Call Trace: [ 1703.310710][ C0] __schedule+0x8e1/0x1eb0 [ 1703.315105][ C0] ? io_schedule_timeout+0x140/0x140 [ 1703.320365][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1703.325814][ C0] schedule+0xd0/0x2a0 [ 1703.331960][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1703.337057][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1703.342232][ C0] futex_wait+0x1df/0x560 [ 1703.346537][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1703.351563][ C0] ? wake_up_q+0xa3/0x100 [ 1703.355872][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1703.361051][ C0] ? futex_wake+0x155/0x490 [ 1703.365544][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1703.371502][ C0] do_futex+0x15b/0x1a60 [ 1703.375727][ C0] ? lock_acquire+0x1f1/0xad0 [ 1703.380413][ C0] ? __might_fault+0xef/0x1d0 [ 1703.385063][ C0] ? find_held_lock+0x2d/0x110 [ 1703.389801][ C0] ? futex_exit_release+0x220/0x220 [ 1703.394974][ C0] ? lock_downgrade+0x820/0x820 [ 1703.399853][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1703.406072][ C0] ? __might_fault+0x190/0x1d0 [ 1703.410810][ C0] ? _copy_to_user+0x126/0x160 [ 1703.415550][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1703.420986][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1703.425899][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1703.431460][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1703.436381][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1703.441558][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1703.446651][ C0] do_fast_syscall_32+0x7f/0x120 [ 1703.451563][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1703.456651][ C0] RIP: 0023:0xf7f91569 [ 1703.460687][ C0] Code: Bad RIP value. [ 1703.464724][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1703.473107][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1703.481077][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1703.489024][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1703.496968][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1703.504913][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.518513][ C0] syz-executor.2 S29816 26856 7031 0x20020000 [ 1703.524844][ C0] Call Trace: [ 1703.528111][ C0] __schedule+0x8e1/0x1eb0 [ 1703.532513][ C0] ? io_schedule_timeout+0x140/0x140 [ 1703.537772][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1703.543208][ C0] schedule+0xd0/0x2a0 [ 1703.547288][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1703.552395][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1703.557579][ C0] futex_wait+0x1df/0x560 [ 1703.561890][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1703.566892][ C0] ? mark_lock+0xbc/0x1710 [ 1703.571284][ C0] ? hash_futex+0x12/0x200 [ 1703.575687][ C0] ? futex_wake+0x155/0x490 [ 1703.580184][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1703.586143][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 1703.591928][ C0] do_futex+0x15b/0x1a60 [ 1703.596164][ C0] ? lock_acquire+0x1f1/0xad0 [ 1703.600815][ C0] ? __might_fault+0xef/0x1d0 [ 1703.605480][ C0] ? find_held_lock+0x2d/0x110 [ 1703.610233][ C0] ? futex_exit_release+0x220/0x220 [ 1703.615409][ C0] ? lock_downgrade+0x820/0x820 [ 1703.620248][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1703.626478][ C0] ? __might_fault+0x190/0x1d0 [ 1703.631233][ C0] ? _copy_to_user+0x126/0x160 [ 1703.635977][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1703.641416][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1703.646949][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1703.652829][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1703.657833][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1703.662968][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1703.668078][ C0] do_fast_syscall_32+0x7f/0x120 [ 1703.673004][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1703.678095][ C0] RIP: 0023:0xf7f91569 [ 1703.682146][ C0] Code: Bad RIP value. [ 1703.686251][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1703.694744][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1703.702694][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1703.710640][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1703.718585][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1703.726638][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.734615][ C0] syz-executor.2 T30024 26963 7031 0x20024004 [ 1703.740930][ C0] Call Trace: [ 1703.744199][ C0] __schedule+0x8e1/0x1eb0 [ 1703.748595][ C0] ? io_schedule_timeout+0x140/0x140 [ 1703.753853][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1703.759027][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1703.764984][ C0] schedule+0xd0/0x2a0 [ 1703.769030][ C0] do_signal_stop+0x32f/0x840 [ 1703.773680][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1703.779026][ C0] get_signal+0x8b8/0x1fc0 [ 1703.783425][ C0] do_signal+0x82/0x2520 [ 1703.787663][ C0] ? finish_task_switch+0x147/0x750 [ 1703.792834][ C0] ? finish_task_switch+0x119/0x750 [ 1703.798003][ C0] ? __switch_to+0x4fb/0xe80 [ 1703.802584][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1703.807931][ C0] ? io_schedule_timeout+0x140/0x140 [ 1703.813193][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1703.819061][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1703.824856][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1703.830813][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1703.836522][ C0] do_fast_syscall_32+0x7f/0x120 [ 1703.841447][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1703.846528][ C0] RIP: 0023:0xf7f91569 [ 1703.850563][ C0] Code: Bad RIP value. [ 1703.854599][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1703.862986][ C0] RAX: fffffffffffffdfe RBX: 0000000000000000 RCX: 0000000000000000 [ 1703.870931][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1703.878886][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1703.886839][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1703.894784][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.902741][ C0] syz-executor.2 S29904 27002 7031 0x20020000 [ 1703.909076][ C0] Call Trace: [ 1703.912353][ C0] __schedule+0x8e1/0x1eb0 [ 1703.916778][ C0] ? io_schedule_timeout+0x140/0x140 [ 1703.922147][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1703.927693][ C0] schedule+0xd0/0x2a0 [ 1703.931759][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1703.936856][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1703.942043][ C0] ? futex_wake+0x1b5/0x490 [ 1703.946522][ C0] ? find_held_lock+0x2d/0x110 [ 1703.951267][ C0] futex_wait+0x1df/0x560 [ 1703.955571][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1703.960569][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1703.965480][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1703.970664][ C0] ? futex_wake+0x155/0x490 [ 1703.975161][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1703.981115][ C0] do_futex+0x15b/0x1a60 [ 1703.985335][ C0] ? lock_acquire+0x1f1/0xad0 [ 1703.989985][ C0] ? __might_fault+0xef/0x1d0 [ 1703.994632][ C0] ? find_held_lock+0x2d/0x110 [ 1703.999369][ C0] ? futex_exit_release+0x220/0x220 [ 1704.004542][ C0] ? lock_downgrade+0x820/0x820 [ 1704.009371][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1704.015603][ C0] ? __might_fault+0x190/0x1d0 [ 1704.020341][ C0] ? _copy_to_user+0x126/0x160 [ 1704.025082][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1704.030516][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1704.036048][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1704.041916][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1704.046830][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1704.051920][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1704.057003][ C0] do_fast_syscall_32+0x7f/0x120 [ 1704.061914][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1704.066997][ C0] RIP: 0023:0xf7f91569 [ 1704.071035][ C0] Code: Bad RIP value. [ 1704.075072][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1704.083465][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1704.091420][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1704.099713][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1704.107664][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1704.116404][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1704.124360][ C0] syz-executor.2 T30024 27021 7031 0x20024004 [ 1704.130669][ C0] Call Trace: [ 1704.133943][ C0] __schedule+0x8e1/0x1eb0 [ 1704.138338][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.143601][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1704.148788][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1704.154832][ C0] schedule+0xd0/0x2a0 [ 1704.158881][ C0] do_signal_stop+0x32f/0x840 [ 1704.163542][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1704.168887][ C0] get_signal+0x8b8/0x1fc0 [ 1704.173283][ C0] do_signal+0x82/0x2520 [ 1704.177511][ C0] ? finish_task_switch+0x147/0x750 [ 1704.182690][ C0] ? finish_task_switch+0x119/0x750 [ 1704.187862][ C0] ? __switch_to+0x4fb/0xe80 [ 1704.192428][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1704.197774][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.203033][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1704.208929][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1704.214771][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1704.220741][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1704.226462][ C0] do_fast_syscall_32+0x7f/0x120 [ 1704.231505][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1704.236640][ C0] RIP: 0023:0xf7f91569 [ 1704.240704][ C0] Code: Bad RIP value. [ 1704.244745][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1704.253133][ C0] RAX: fffffffffffffdfe RBX: 0000000000000000 RCX: 0000000000000000 [ 1704.261095][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1704.269052][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1704.276998][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1704.284944][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1704.292917][ C0] syz-executor.2 T29536 27064 7031 0x20024004 [ 1704.299230][ C0] Call Trace: [ 1704.302498][ C0] __schedule+0x8e1/0x1eb0 [ 1704.306912][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.312171][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1704.317344][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1704.323300][ C0] schedule+0xd0/0x2a0 [ 1704.327344][ C0] do_signal_stop+0x32f/0x840 [ 1704.332008][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1704.337354][ C0] get_signal+0x8b8/0x1fc0 [ 1704.341753][ C0] do_signal+0x82/0x2520 [ 1704.345996][ C0] ? finish_task_switch+0x147/0x750 [ 1704.351166][ C0] ? finish_task_switch+0x119/0x750 [ 1704.356357][ C0] ? __switch_to+0x4fb/0xe80 [ 1704.361136][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1704.366489][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.371760][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1704.377633][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1704.383438][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1704.389578][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1704.395282][ C0] do_fast_syscall_32+0x7f/0x120 [ 1704.400199][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1704.405288][ C0] RIP: 0023:0xf7f91569 [ 1704.409343][ C0] Code: Bad RIP value. [ 1704.413387][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1704.421779][ C0] RAX: fffffffffffffdfe RBX: 0000000000000000 RCX: 0000000000000000 [ 1704.429735][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1704.437693][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1704.445638][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1704.453583][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1704.461544][ C0] syz-executor.2 S29944 27100 7031 0x20020000 [ 1704.467949][ C0] Call Trace: [ 1704.471230][ C0] __schedule+0x8e1/0x1eb0 [ 1704.475638][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.480902][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1704.486773][ C0] schedule+0xd0/0x2a0 [ 1704.490820][ C0] __do_sys_pause+0x76/0xe0 [ 1704.495301][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1704.500387][ C0] do_fast_syscall_32+0x7f/0x120 [ 1704.505330][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1704.510414][ C0] RIP: 0023:0xf7f91569 [ 1704.514462][ C0] Code: Bad RIP value. [ 1704.518500][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1704.526884][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1704.534829][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1704.542792][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1704.550748][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1704.558694][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1704.566665][ C0] bond9 I29976 27466 2 0x00004000 [ 1704.572988][ C0] Call Trace: [ 1704.576355][ C0] __schedule+0x8e1/0x1eb0 [ 1704.580762][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.586039][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1704.591040][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1704.596212][ C0] schedule+0xd0/0x2a0 [ 1704.600257][ C0] rescuer_thread+0x7a7/0xd30 [ 1704.604927][ C0] ? worker_thread+0x1120/0x1120 [ 1704.609840][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1704.614927][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1704.619924][ C0] ? worker_thread+0x1120/0x1120 [ 1704.624835][ C0] kthread+0x3b5/0x4a0 [ 1704.628889][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1704.633972][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1704.639069][ C0] ret_from_fork+0x1f/0x30 [ 1704.643477][ C0] syz-executor.1 S29072 27540 6979 0x20020000 [ 1704.649791][ C0] Call Trace: [ 1704.653054][ C0] __schedule+0x8e1/0x1eb0 [ 1704.657537][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.662796][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1704.668233][ C0] schedule+0xd0/0x2a0 [ 1704.672278][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1704.677363][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1704.682538][ C0] futex_wait+0x1df/0x560 [ 1704.686846][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1704.691846][ C0] ? mark_lock+0xbc/0x1710 [ 1704.696245][ C0] ? hash_futex+0x12/0x200 [ 1704.700636][ C0] ? futex_wake+0x155/0x490 [ 1704.705124][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1704.711078][ C0] do_futex+0x15b/0x1a60 [ 1704.715298][ C0] ? lock_acquire+0x1f1/0xad0 [ 1704.719961][ C0] ? __might_fault+0xef/0x1d0 [ 1704.725913][ C0] ? find_held_lock+0x2d/0x110 [ 1704.730650][ C0] ? futex_exit_release+0x220/0x220 [ 1704.735824][ C0] ? lock_downgrade+0x820/0x820 [ 1704.740647][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1704.746865][ C0] ? __might_fault+0x190/0x1d0 [ 1704.751601][ C0] ? _copy_to_user+0x126/0x160 [ 1704.756341][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1704.761789][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1704.767307][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1704.773176][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1704.778098][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1704.783189][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1704.788286][ C0] do_fast_syscall_32+0x7f/0x120 [ 1704.794675][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1704.799784][ C0] RIP: 0023:0xf7fa1569 [ 1704.803820][ C0] Code: Bad RIP value. [ 1704.807883][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1704.816267][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1704.824214][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1704.832161][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1704.840116][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1704.848062][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1704.856023][ C0] syz-executor.1 S29408 27583 6979 0x20020000 [ 1704.862330][ C0] Call Trace: [ 1704.865598][ C0] __schedule+0x8e1/0x1eb0 [ 1704.869993][ C0] ? io_schedule_timeout+0x140/0x140 [ 1704.875255][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1704.880702][ C0] schedule+0xd0/0x2a0 [ 1704.884746][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1704.889838][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1704.895015][ C0] futex_wait+0x1df/0x560 [ 1704.899321][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1704.904322][ C0] ? mark_lock+0xbc/0x1710 [ 1704.908709][ C0] ? hash_futex+0x12/0x200 [ 1704.913101][ C0] ? futex_wake+0x155/0x490 [ 1704.917594][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1704.923550][ C0] do_futex+0x15b/0x1a60 [ 1704.927771][ C0] ? lock_acquire+0x1f1/0xad0 [ 1704.932422][ C0] ? __might_fault+0xef/0x1d0 [ 1704.937072][ C0] ? find_held_lock+0x2d/0x110 [ 1704.941810][ C0] ? futex_exit_release+0x220/0x220 [ 1704.946981][ C0] ? lock_downgrade+0x820/0x820 [ 1704.951822][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1704.958039][ C0] ? __might_fault+0x190/0x1d0 [ 1704.962776][ C0] ? _copy_to_user+0x126/0x160 [ 1704.967516][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1704.972975][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1704.978502][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1704.984369][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1704.989283][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1704.994386][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1704.999485][ C0] do_fast_syscall_32+0x7f/0x120 [ 1705.004396][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1705.009478][ C0] RIP: 0023:0xf7fa1569 [ 1705.013524][ C0] Code: Bad RIP value. [ 1705.017560][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1705.025942][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1705.033886][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1705.041831][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1705.049786][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1705.057733][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1705.065690][ C0] syz-executor.1 S29408 27646 6979 0x20020000 [ 1705.071998][ C0] Call Trace: [ 1705.075277][ C0] __schedule+0x8e1/0x1eb0 [ 1705.079672][ C0] ? io_schedule_timeout+0x140/0x140 [ 1705.084954][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1705.090396][ C0] schedule+0xd0/0x2a0 [ 1705.094454][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1705.099538][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1705.104712][ C0] futex_wait+0x1df/0x560 [ 1705.109029][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1705.114037][ C0] ? mark_lock+0xbc/0x1710 [ 1705.118426][ C0] ? hash_futex+0x12/0x200 [ 1705.122816][ C0] ? futex_wake+0x155/0x490 [ 1705.127302][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1705.133256][ C0] do_futex+0x15b/0x1a60 [ 1705.137506][ C0] ? lock_acquire+0x1f1/0xad0 [ 1705.142179][ C0] ? __might_fault+0xef/0x1d0 [ 1705.146901][ C0] ? find_held_lock+0x2d/0x110 [ 1705.151643][ C0] ? futex_exit_release+0x220/0x220 [ 1705.156903][ C0] ? lock_downgrade+0x820/0x820 [ 1705.161732][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1705.168552][ C0] ? __might_fault+0x190/0x1d0 [ 1705.173290][ C0] ? _copy_to_user+0x126/0x160 [ 1705.178265][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1705.183703][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1705.189271][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1705.195202][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1705.200377][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1705.205468][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1705.210574][ C0] do_fast_syscall_32+0x7f/0x120 [ 1705.215520][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1705.220617][ C0] RIP: 0023:0xf7fa1569 [ 1705.224657][ C0] Code: Bad RIP value. [ 1705.228703][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1705.237086][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1705.245032][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1705.252981][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1705.260929][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1705.268876][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1705.276955][ C0] syz-executor.1 S28896 27781 6979 0x20020000 [ 1705.283274][ C0] Call Trace: [ 1705.286572][ C0] __schedule+0x8e1/0x1eb0 [ 1705.295227][ C0] ? io_schedule_timeout+0x140/0x140 [ 1705.300488][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1705.305925][ C0] schedule+0xd0/0x2a0 [ 1705.310006][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1705.315121][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1705.320306][ C0] futex_wait+0x1df/0x560 [ 1705.324620][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1705.329622][ C0] ? do_syscall_32_irqs_on+0x3f/0x60 [ 1705.334905][ C0] ? mark_lock+0xbc/0x1710 [ 1705.339294][ C0] ? hash_futex+0x12/0x200 [ 1705.343698][ C0] ? futex_wake+0x155/0x490 [ 1705.348184][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1705.354152][ C0] ? __lock_acquire+0xc1e/0x56e0 [ 1705.359087][ C0] do_futex+0x15b/0x1a60 [ 1705.363320][ C0] ? lock_acquire+0x1f1/0xad0 [ 1705.368009][ C0] ? __might_fault+0xef/0x1d0 [ 1705.372659][ C0] ? find_held_lock+0x2d/0x110 [ 1705.377430][ C0] ? futex_exit_release+0x220/0x220 [ 1705.382628][ C0] ? lock_downgrade+0x820/0x820 [ 1705.387453][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1705.393672][ C0] ? __might_fault+0x190/0x1d0 [ 1705.398414][ C0] ? _copy_to_user+0x126/0x160 [ 1705.403159][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1705.408596][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1705.414130][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1705.419998][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1705.424908][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1705.430001][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1705.435087][ C0] do_fast_syscall_32+0x7f/0x120 [ 1705.440002][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1705.445085][ C0] RIP: 0023:0xf7fa1569 [ 1705.449190][ C0] Code: Bad RIP value. [ 1705.453242][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1705.461639][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1705.469941][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1705.477885][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1705.485874][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1705.493866][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1705.501830][ C0] syz-executor.1 S29944 27795 6979 0x20020000 [ 1705.508138][ C0] Call Trace: [ 1705.511407][ C0] __schedule+0x8e1/0x1eb0 [ 1705.515801][ C0] ? io_schedule_timeout+0x140/0x140 [ 1705.521072][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1705.526508][ C0] schedule+0xd0/0x2a0 [ 1705.530564][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1705.535648][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1705.540823][ C0] futex_wait+0x1df/0x560 [ 1705.545129][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1705.550152][ C0] ? wake_up_q+0xa3/0x100 [ 1705.554456][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1705.559627][ C0] ? futex_wake+0x155/0x490 [ 1705.564112][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1705.570065][ C0] do_futex+0x15b/0x1a60 [ 1705.574285][ C0] ? lock_acquire+0x1f1/0xad0 [ 1705.578957][ C0] ? __might_fault+0xef/0x1d0 [ 1705.583613][ C0] ? find_held_lock+0x2d/0x110 [ 1705.588351][ C0] ? futex_exit_release+0x220/0x220 [ 1705.593524][ C0] ? lock_downgrade+0x820/0x820 [ 1705.598350][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1705.604567][ C0] ? __might_fault+0x190/0x1d0 [ 1705.609315][ C0] ? _copy_to_user+0x126/0x160 [ 1705.614055][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1705.619488][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1705.625006][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1705.630872][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1705.635783][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1705.640874][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1705.645983][ C0] do_fast_syscall_32+0x7f/0x120 [ 1705.650894][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1705.655990][ C0] RIP: 0023:0xf7fa1569 [ 1705.660024][ C0] Code: Bad RIP value. [ 1705.664064][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1705.672474][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1705.680418][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1705.688363][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1705.696393][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1705.704351][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1705.712307][ C0] syz-executor.1 S29944 27805 6979 0x20020000 [ 1705.718612][ C0] Call Trace: [ 1705.721874][ C0] __schedule+0x8e1/0x1eb0 [ 1705.726269][ C0] ? io_schedule_timeout+0x140/0x140 [ 1705.731616][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1705.737138][ C0] schedule+0xd0/0x2a0 [ 1705.741193][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1705.746276][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1705.751453][ C0] futex_wait+0x1df/0x560 [ 1705.755758][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1705.760827][ C0] ? wake_up_q+0xa3/0x100 [ 1705.765262][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1705.770449][ C0] ? futex_wake+0x155/0x490 [ 1705.774944][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1705.780906][ C0] do_futex+0x15b/0x1a60 [ 1705.785137][ C0] ? lock_acquire+0x1f1/0xad0 [ 1705.789792][ C0] ? __might_fault+0xef/0x1d0 [ 1705.794454][ C0] ? find_held_lock+0x2d/0x110 [ 1705.799194][ C0] ? futex_exit_release+0x220/0x220 [ 1705.804367][ C0] ? lock_downgrade+0x820/0x820 [ 1705.809191][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1705.815408][ C0] ? __might_fault+0x190/0x1d0 [ 1705.820145][ C0] ? _copy_to_user+0x126/0x160 [ 1705.824886][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1705.830332][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1705.835864][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1705.841735][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1705.846648][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1705.851738][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1705.856826][ C0] do_fast_syscall_32+0x7f/0x120 [ 1705.861738][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1705.866823][ C0] RIP: 0023:0xf7fa1569 [ 1705.870870][ C0] Code: Bad RIP value. [ 1705.874910][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1705.883292][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1705.891235][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1705.899180][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1705.907132][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1705.915086][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1705.923047][ C0] syz-executor.1 S29944 27815 6979 0x20020000 [ 1705.929355][ C0] Call Trace: [ 1705.932619][ C0] __schedule+0x8e1/0x1eb0 [ 1705.937014][ C0] ? io_schedule_timeout+0x140/0x140 [ 1705.942285][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1705.947725][ C0] schedule+0xd0/0x2a0 [ 1705.951792][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1705.956889][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1705.962081][ C0] futex_wait+0x1df/0x560 [ 1705.966410][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1705.971511][ C0] ? wake_up_q+0xa3/0x100 [ 1705.975816][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1705.980989][ C0] ? futex_wake+0x155/0x490 [ 1705.985475][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1705.991433][ C0] do_futex+0x15b/0x1a60 [ 1705.995654][ C0] ? lock_acquire+0x1f1/0xad0 [ 1706.000315][ C0] ? __might_fault+0xef/0x1d0 [ 1706.004969][ C0] ? find_held_lock+0x2d/0x110 [ 1706.009707][ C0] ? futex_exit_release+0x220/0x220 [ 1706.014878][ C0] ? lock_downgrade+0x820/0x820 [ 1706.019733][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1706.025966][ C0] ? __might_fault+0x190/0x1d0 [ 1706.030704][ C0] ? _copy_to_user+0x126/0x160 [ 1706.035457][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1706.040923][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1706.045834][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1706.051359][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1706.056270][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1706.061370][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1706.066458][ C0] do_fast_syscall_32+0x7f/0x120 [ 1706.071372][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1706.076457][ C0] RIP: 0023:0xf7fa1569 [ 1706.080496][ C0] Code: Bad RIP value. [ 1706.084555][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1706.092950][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1706.100898][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1706.108844][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1706.116790][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1706.124735][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.132692][ C0] syz-executor.2 S29944 28501 7031 0x20020000 [ 1706.139014][ C0] Call Trace: [ 1706.142291][ C0] __schedule+0x8e1/0x1eb0 [ 1706.146694][ C0] ? io_schedule_timeout+0x140/0x140 [ 1706.151964][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1706.157407][ C0] schedule+0xd0/0x2a0 [ 1706.161506][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1706.166592][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1706.171767][ C0] futex_wait+0x1df/0x560 [ 1706.176112][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1706.181152][ C0] ? wake_up_q+0xa3/0x100 [ 1706.185453][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1706.190624][ C0] ? futex_wake+0x155/0x490 [ 1706.195111][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1706.201065][ C0] do_futex+0x15b/0x1a60 [ 1706.205287][ C0] ? lock_acquire+0x1f1/0xad0 [ 1706.209937][ C0] ? __might_fault+0xef/0x1d0 [ 1706.214589][ C0] ? find_held_lock+0x2d/0x110 [ 1706.219325][ C0] ? futex_exit_release+0x220/0x220 [ 1706.224509][ C0] ? lock_downgrade+0x820/0x820 [ 1706.229335][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1706.235552][ C0] ? __might_fault+0x190/0x1d0 [ 1706.240288][ C0] ? _copy_to_user+0x126/0x160 [ 1706.245043][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1706.250479][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1706.255389][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1706.261605][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1706.266517][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1706.271620][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1706.276704][ C0] do_fast_syscall_32+0x7f/0x120 [ 1706.281614][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1706.286697][ C0] RIP: 0023:0xf7f91569 [ 1706.290733][ C0] Code: Bad RIP value. [ 1706.294770][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1706.303163][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1706.311108][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1706.319052][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1706.327011][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1706.334955][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.342999][ C0] syz-executor.1 S29944 28581 6979 0x20020000 [ 1706.349308][ C0] Call Trace: [ 1706.352589][ C0] __schedule+0x8e1/0x1eb0 [ 1706.357002][ C0] ? io_schedule_timeout+0x140/0x140 [ 1706.362274][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1706.367731][ C0] schedule+0xd0/0x2a0 [ 1706.371783][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1706.376887][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1706.382074][ C0] futex_wait+0x1df/0x560 [ 1706.386399][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1706.391412][ C0] ? wake_up_q+0xa3/0x100 [ 1706.395721][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1706.400897][ C0] ? futex_wake+0x155/0x490 [ 1706.405384][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1706.411425][ C0] do_futex+0x15b/0x1a60 [ 1706.415647][ C0] ? lock_acquire+0x1f1/0xad0 [ 1706.420297][ C0] ? __might_fault+0xef/0x1d0 [ 1706.424949][ C0] ? find_held_lock+0x2d/0x110 [ 1706.429688][ C0] ? futex_exit_release+0x220/0x220 [ 1706.434869][ C0] ? lock_downgrade+0x820/0x820 [ 1706.439696][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1706.445923][ C0] ? __might_fault+0x190/0x1d0 [ 1706.450660][ C0] ? _copy_to_user+0x126/0x160 [ 1706.455399][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1706.460833][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1706.466370][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1706.472238][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1706.477148][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1706.482237][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1706.487322][ C0] do_fast_syscall_32+0x7f/0x120 [ 1706.492236][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1706.497319][ C0] RIP: 0023:0xf7fa1569 [ 1706.501367][ C0] Code: Bad RIP value. [ 1706.505404][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1706.513786][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1706.521732][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1706.529674][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1706.537620][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1706.545566][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.553523][ C0] bond1 I30952 28622 2 0x00004000 [ 1706.559841][ C0] Call Trace: [ 1706.563125][ C0] __schedule+0x8e1/0x1eb0 [ 1706.567528][ C0] ? io_schedule_timeout+0x140/0x140 [ 1706.572792][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1706.577798][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1706.582978][ C0] schedule+0xd0/0x2a0 [ 1706.587071][ C0] rescuer_thread+0x7a7/0xd30 [ 1706.591731][ C0] ? worker_thread+0x1120/0x1120 [ 1706.596645][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1706.601734][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1706.606732][ C0] ? worker_thread+0x1120/0x1120 [ 1706.611645][ C0] kthread+0x3b5/0x4a0 [ 1706.615685][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1706.620768][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1706.625855][ C0] ret_from_fork+0x1f/0x30 [ 1706.630271][ C0] syz-executor.3 S29784 28687 7114 0x20020000 [ 1706.636583][ C0] Call Trace: [ 1706.639850][ C0] __schedule+0x8e1/0x1eb0 [ 1706.644245][ C0] ? io_schedule_timeout+0x140/0x140 [ 1706.649591][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1706.655027][ C0] schedule+0xd0/0x2a0 [ 1706.659083][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1706.664183][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1706.669356][ C0] futex_wait+0x1df/0x560 [ 1706.673661][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1706.678663][ C0] ? wake_up_q+0xa3/0x100 [ 1706.682964][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1706.688135][ C0] ? futex_wake+0x155/0x490 [ 1706.692626][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1706.698580][ C0] do_futex+0x15b/0x1a60 [ 1706.702803][ C0] ? lock_acquire+0x1f1/0xad0 [ 1706.707458][ C0] ? __might_fault+0xef/0x1d0 [ 1706.712105][ C0] ? find_held_lock+0x2d/0x110 [ 1706.716864][ C0] ? futex_exit_release+0x220/0x220 [ 1706.722034][ C0] ? lock_downgrade+0x820/0x820 [ 1706.726865][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1706.733083][ C0] ? __might_fault+0x190/0x1d0 [ 1706.737820][ C0] ? _copy_to_user+0x126/0x160 [ 1706.742571][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1706.748005][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1706.753524][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1706.759402][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1706.764322][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1706.769410][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1706.774495][ C0] do_fast_syscall_32+0x7f/0x120 [ 1706.779407][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1706.784490][ C0] RIP: 0023:0xf7f6d569 [ 1706.788527][ C0] Code: Bad RIP value. [ 1706.792563][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1706.801120][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1706.809074][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1706.817016][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1706.824965][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1706.832908][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.840864][ C0] bond2 I30952 28690 2 0x00004000 [ 1706.847169][ C0] Call Trace: [ 1706.850433][ C0] __schedule+0x8e1/0x1eb0 [ 1706.854826][ C0] ? io_schedule_timeout+0x140/0x140 [ 1706.860083][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1706.865080][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1706.870251][ C0] schedule+0xd0/0x2a0 [ 1706.874296][ C0] rescuer_thread+0x7a7/0xd30 [ 1706.878954][ C0] ? worker_thread+0x1120/0x1120 [ 1706.883872][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1706.888958][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1706.893955][ C0] ? worker_thread+0x1120/0x1120 [ 1706.898869][ C0] kthread+0x3b5/0x4a0 [ 1706.902910][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1706.907991][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1706.913087][ C0] ret_from_fork+0x1f/0x30 [ 1706.917497][ C0] syz-executor.3 S29784 28707 7114 0x20020000 [ 1706.923802][ C0] Call Trace: [ 1706.927066][ C0] __schedule+0x8e1/0x1eb0 [ 1706.931458][ C0] ? io_schedule_timeout+0x140/0x140 [ 1706.936717][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1706.942152][ C0] schedule+0xd0/0x2a0 [ 1706.946195][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1706.951278][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1706.956452][ C0] futex_wait+0x1df/0x560 [ 1706.960758][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1706.965760][ C0] ? wake_up_q+0xa3/0x100 [ 1706.970071][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1706.975241][ C0] ? futex_wake+0x155/0x490 [ 1706.979725][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1706.985689][ C0] do_futex+0x15b/0x1a60 [ 1706.989911][ C0] ? lock_acquire+0x1f1/0xad0 [ 1706.994560][ C0] ? __might_fault+0xef/0x1d0 [ 1706.999212][ C0] ? find_held_lock+0x2d/0x110 [ 1707.003961][ C0] ? futex_exit_release+0x220/0x220 [ 1707.009134][ C0] ? lock_downgrade+0x820/0x820 [ 1707.013956][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1707.020173][ C0] ? __might_fault+0x190/0x1d0 [ 1707.024923][ C0] ? _copy_to_user+0x126/0x160 [ 1707.029666][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1707.035115][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1707.040026][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1707.045548][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1707.050476][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1707.055569][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1707.060655][ C0] do_fast_syscall_32+0x7f/0x120 [ 1707.065572][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1707.070657][ C0] RIP: 0023:0xf7f6d569 [ 1707.074717][ C0] Code: Bad RIP value. [ 1707.078754][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1707.087139][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1707.095095][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1707.103039][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1707.110983][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1707.118944][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1707.127024][ C0] bond3 I30952 28750 2 0x00004000 [ 1707.133399][ C0] Call Trace: [ 1707.136675][ C0] __schedule+0x8e1/0x1eb0 [ 1707.141079][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.146343][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1707.151343][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1707.156516][ C0] schedule+0xd0/0x2a0 [ 1707.160564][ C0] rescuer_thread+0x7a7/0xd30 [ 1707.165236][ C0] ? worker_thread+0x1120/0x1120 [ 1707.170149][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1707.175236][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1707.180231][ C0] ? worker_thread+0x1120/0x1120 [ 1707.185141][ C0] kthread+0x3b5/0x4a0 [ 1707.189182][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.194264][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.199352][ C0] ret_from_fork+0x1f/0x30 [ 1707.203770][ C0] bond4 I30952 28806 2 0x00004000 [ 1707.210079][ C0] Call Trace: [ 1707.213366][ C0] __schedule+0x8e1/0x1eb0 [ 1707.217823][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.223131][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1707.228138][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1707.233316][ C0] schedule+0xd0/0x2a0 [ 1707.237367][ C0] rescuer_thread+0x7a7/0xd30 [ 1707.242024][ C0] ? worker_thread+0x1120/0x1120 [ 1707.246938][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1707.252022][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1707.257062][ C0] ? worker_thread+0x1120/0x1120 [ 1707.261974][ C0] kthread+0x3b5/0x4a0 [ 1707.266052][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.271146][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.276234][ C0] ret_from_fork+0x1f/0x30 [ 1707.280632][ C0] bond6 I30712 29071 2 0x00004000 [ 1707.286941][ C0] Call Trace: [ 1707.290215][ C0] __schedule+0x8e1/0x1eb0 [ 1707.294608][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.299864][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1707.304882][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1707.310055][ C0] schedule+0xd0/0x2a0 [ 1707.314099][ C0] rescuer_thread+0x7a7/0xd30 [ 1707.318756][ C0] ? worker_thread+0x1120/0x1120 [ 1707.323668][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1707.328753][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1707.333749][ C0] ? worker_thread+0x1120/0x1120 [ 1707.338660][ C0] kthread+0x3b5/0x4a0 [ 1707.342702][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.347797][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.352884][ C0] ret_from_fork+0x1f/0x30 [ 1707.357282][ C0] bond7 I30952 29124 2 0x00004000 [ 1707.363589][ C0] Call Trace: [ 1707.366861][ C0] __schedule+0x8e1/0x1eb0 [ 1707.371254][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.376509][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1707.381532][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1707.386709][ C0] schedule+0xd0/0x2a0 [ 1707.390762][ C0] rescuer_thread+0x7a7/0xd30 [ 1707.395424][ C0] ? worker_thread+0x1120/0x1120 [ 1707.400342][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1707.405481][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1707.410481][ C0] ? worker_thread+0x1120/0x1120 [ 1707.415392][ C0] kthread+0x3b5/0x4a0 [ 1707.419477][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.424569][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.429654][ C0] ret_from_fork+0x1f/0x30 [ 1707.434051][ C0] bond8 I30488 29215 2 0x00004000 [ 1707.440362][ C0] Call Trace: [ 1707.443635][ C0] __schedule+0x8e1/0x1eb0 [ 1707.448037][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.453299][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1707.458296][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1707.463486][ C0] schedule+0xd0/0x2a0 [ 1707.467529][ C0] rescuer_thread+0x7a7/0xd30 [ 1707.472188][ C0] ? worker_thread+0x1120/0x1120 [ 1707.477099][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1707.482182][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1707.487181][ C0] ? worker_thread+0x1120/0x1120 [ 1707.492092][ C0] kthread+0x3b5/0x4a0 [ 1707.496151][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.501243][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.506347][ C0] ret_from_fork+0x1f/0x30 [ 1707.510770][ C0] bond9 I30952 29293 2 0x00004000 [ 1707.517095][ C0] Call Trace: [ 1707.520362][ C0] __schedule+0x8e1/0x1eb0 [ 1707.524753][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.530012][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1707.535010][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1707.540184][ C0] schedule+0xd0/0x2a0 [ 1707.544229][ C0] rescuer_thread+0x7a7/0xd30 [ 1707.548887][ C0] ? worker_thread+0x1120/0x1120 [ 1707.553798][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1707.558883][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1707.563881][ C0] ? worker_thread+0x1120/0x1120 [ 1707.568794][ C0] kthread+0x3b5/0x4a0 [ 1707.572835][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.577919][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1707.583007][ C0] ret_from_fork+0x1f/0x30 [ 1707.587402][ C0] syz-executor.3 S29328 29486 7114 0x20020000 [ 1707.593705][ C0] Call Trace: [ 1707.596966][ C0] __schedule+0x8e1/0x1eb0 [ 1707.601373][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.607242][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1707.612677][ C0] schedule+0xd0/0x2a0 [ 1707.616722][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1707.621819][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1707.626991][ C0] ? kmem_cache_alloc+0x12c/0x3b0 [ 1707.631990][ C0] ? __alloc_file+0xd8/0x350 [ 1707.636554][ C0] futex_wait+0x1df/0x560 [ 1707.640867][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1707.645865][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1707.651818][ C0] ? mark_lock+0xbc/0x1710 [ 1707.656204][ C0] ? hash_futex+0x12/0x200 [ 1707.660609][ C0] ? futex_wake+0x155/0x490 [ 1707.665096][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1707.671051][ C0] do_futex+0x15b/0x1a60 [ 1707.675273][ C0] ? lock_acquire+0x1f1/0xad0 [ 1707.679922][ C0] ? __might_fault+0xef/0x1d0 [ 1707.684571][ C0] ? find_held_lock+0x2d/0x110 [ 1707.689311][ C0] ? futex_exit_release+0x220/0x220 [ 1707.694483][ C0] ? lock_downgrade+0x820/0x820 [ 1707.699307][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1707.705522][ C0] ? __might_fault+0x190/0x1d0 [ 1707.710259][ C0] ? _copy_to_user+0x126/0x160 [ 1707.715023][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1707.720460][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1707.725992][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1707.731858][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1707.736775][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1707.741863][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1707.746947][ C0] do_fast_syscall_32+0x7f/0x120 [ 1707.751883][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1707.757015][ C0] RIP: 0023:0xf7f6d569 [ 1707.761060][ C0] Code: Bad RIP value. [ 1707.765105][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1707.773496][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1707.785088][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1707.793032][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1707.801016][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1707.808961][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1707.816935][ C0] syz-executor.3 S29944 29494 7114 0x20020000 [ 1707.823249][ C0] Call Trace: [ 1707.826527][ C0] __schedule+0x8e1/0x1eb0 [ 1707.830926][ C0] ? io_schedule_timeout+0x140/0x140 [ 1707.836235][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1707.841722][ C0] schedule+0xd0/0x2a0 [ 1707.845767][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1707.850852][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1707.856027][ C0] futex_wait+0x1df/0x560 [ 1707.860334][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1707.865336][ C0] ? wake_up_q+0xa3/0x100 [ 1707.869691][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1707.874864][ C0] ? futex_wake+0x155/0x490 [ 1707.879350][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1707.885303][ C0] do_futex+0x15b/0x1a60 [ 1707.889523][ C0] ? lock_acquire+0x1f1/0xad0 [ 1707.894171][ C0] ? __might_fault+0xef/0x1d0 [ 1707.898820][ C0] ? find_held_lock+0x2d/0x110 [ 1707.903557][ C0] ? futex_exit_release+0x220/0x220 [ 1707.908729][ C0] ? lock_downgrade+0x820/0x820 [ 1707.913569][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1707.919785][ C0] ? __might_fault+0x190/0x1d0 [ 1707.924522][ C0] ? _copy_to_user+0x126/0x160 [ 1707.929261][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1707.934694][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1707.939604][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1707.945123][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1707.950036][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1707.955124][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1707.960209][ C0] do_fast_syscall_32+0x7f/0x120 [ 1707.965119][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1707.970281][ C0] RIP: 0023:0xf7f6d569 [ 1707.974335][ C0] Code: Bad RIP value. [ 1707.978380][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1707.986821][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1707.994773][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1708.002722][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1708.010666][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1708.018707][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1708.026668][ C0] syz-executor.3 S29944 29498 7114 0x20020000 [ 1708.032979][ C0] Call Trace: [ 1708.036262][ C0] __schedule+0x8e1/0x1eb0 [ 1708.040679][ C0] ? io_schedule_timeout+0x140/0x140 [ 1708.045950][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1708.051386][ C0] schedule+0xd0/0x2a0 [ 1708.055443][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1708.060526][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1708.065704][ C0] futex_wait+0x1df/0x560 [ 1708.070012][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1708.075013][ C0] ? wake_up_q+0xa3/0x100 [ 1708.079327][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1708.084499][ C0] ? futex_wake+0x155/0x490 [ 1708.088987][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1708.094939][ C0] do_futex+0x15b/0x1a60 [ 1708.099159][ C0] ? lock_acquire+0x1f1/0xad0 [ 1708.103807][ C0] ? __might_fault+0xef/0x1d0 [ 1708.108631][ C0] ? find_held_lock+0x2d/0x110 [ 1708.113389][ C0] ? futex_exit_release+0x220/0x220 [ 1708.118566][ C0] ? lock_downgrade+0x820/0x820 [ 1708.123393][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1708.129609][ C0] ? __might_fault+0x190/0x1d0 [ 1708.134357][ C0] ? _copy_to_user+0x126/0x160 [ 1708.139120][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1708.144561][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1708.149478][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1708.155015][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1708.159932][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1708.165023][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1708.170110][ C0] do_fast_syscall_32+0x7f/0x120 [ 1708.175024][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1708.180123][ C0] RIP: 0023:0xf7f6d569 [ 1708.184167][ C0] Code: Bad RIP value. [ 1708.188210][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1708.196608][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1708.204555][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1708.212501][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1708.220450][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1708.228394][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1708.236354][ C0] syz-executor.1 S29120 29577 6979 0x20020000 [ 1708.242673][ C0] Call Trace: [ 1708.245941][ C0] __schedule+0x8e1/0x1eb0 [ 1708.250379][ C0] ? io_schedule_timeout+0x140/0x140 [ 1708.255642][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1708.261079][ C0] schedule+0xd0/0x2a0 [ 1708.265123][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1708.270207][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1708.275382][ C0] futex_wait+0x1df/0x560 [ 1708.279685][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1708.284682][ C0] ? do_syscall_32_irqs_on+0x3f/0x60 [ 1708.289941][ C0] ? mark_lock+0xbc/0x1710 [ 1708.295459][ C0] ? hash_futex+0x12/0x200 [ 1708.299849][ C0] ? futex_wake+0x155/0x490 [ 1708.304333][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1708.310283][ C0] ? __lock_acquire+0xc1e/0x56e0 [ 1708.315195][ C0] do_futex+0x15b/0x1a60 [ 1708.319414][ C0] ? lock_acquire+0x1f1/0xad0 [ 1708.324064][ C0] ? __might_fault+0xef/0x1d0 [ 1708.328714][ C0] ? find_held_lock+0x2d/0x110 [ 1708.333458][ C0] ? futex_exit_release+0x220/0x220 [ 1708.338630][ C0] ? lock_downgrade+0x820/0x820 [ 1708.343455][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1708.349671][ C0] ? __might_fault+0x190/0x1d0 [ 1708.354411][ C0] ? _copy_to_user+0x126/0x160 [ 1708.359151][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1708.364605][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1708.370142][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1708.376014][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1708.380927][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1708.386060][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1708.391150][ C0] do_fast_syscall_32+0x7f/0x120 [ 1708.396065][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1708.401180][ C0] RIP: 0023:0xf7fa1569 [ 1708.405221][ C0] Code: Bad RIP value. [ 1708.409262][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1708.417645][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1708.425591][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1708.433535][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1708.441526][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1708.449478][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1708.457441][ C0] syz-executor.3 S28568 29756 7114 0x20020000 [ 1708.463751][ C0] Call Trace: [ 1708.467060][ C0] __schedule+0x8e1/0x1eb0 [ 1708.471544][ C0] ? io_schedule_timeout+0x140/0x140 [ 1708.476804][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1708.482241][ C0] schedule+0xd0/0x2a0 [ 1708.486286][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1708.491373][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1708.496542][ C0] ? futex_wake+0x1b5/0x490 [ 1708.501034][ C0] ? find_held_lock+0x2d/0x110 [ 1708.505772][ C0] futex_wait+0x1df/0x560 [ 1708.510079][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1708.515073][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1708.519985][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1708.525156][ C0] ? futex_wake+0x155/0x490 [ 1708.529642][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1708.535632][ C0] do_futex+0x15b/0x1a60 [ 1708.539853][ C0] ? lock_acquire+0x1f1/0xad0 [ 1708.544550][ C0] ? __might_fault+0xef/0x1d0 [ 1708.549234][ C0] ? find_held_lock+0x2d/0x110 [ 1708.553972][ C0] ? futex_exit_release+0x220/0x220 [ 1708.559144][ C0] ? lock_downgrade+0x820/0x820 [ 1708.563970][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1708.570187][ C0] ? __might_fault+0x190/0x1d0 [ 1708.574923][ C0] ? _copy_to_user+0x126/0x160 [ 1708.579664][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1708.585101][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1708.590621][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1708.596488][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1708.601399][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1708.606488][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1708.611572][ C0] do_fast_syscall_32+0x7f/0x120 [ 1708.616487][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1708.621583][ C0] RIP: 0023:0xf7f6d569 [ 1708.625621][ C0] Code: Bad RIP value. [ 1708.629657][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1708.638041][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1708.645986][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1708.653933][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1708.661876][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1708.669820][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1708.677776][ C0] syz-executor.4 S29120 29767 7392 0x20020000 [ 1708.684079][ C0] Call Trace: [ 1708.687346][ C0] __schedule+0x8e1/0x1eb0 [ 1708.691740][ C0] ? io_schedule_timeout+0x140/0x140 [ 1708.696999][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1708.702439][ C0] schedule+0xd0/0x2a0 [ 1708.706482][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1708.711566][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1708.716736][ C0] futex_wait+0x1df/0x560 [ 1708.721044][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1708.726062][ C0] ? mark_lock+0xbc/0x1710 [ 1708.730462][ C0] ? hash_futex+0x12/0x200 [ 1708.734852][ C0] ? futex_wake+0x155/0x490 [ 1708.739336][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1708.745288][ C0] do_futex+0x15b/0x1a60 [ 1708.749522][ C0] ? lock_acquire+0x1f1/0xad0 [ 1708.754176][ C0] ? __might_fault+0xef/0x1d0 [ 1708.758826][ C0] ? find_held_lock+0x2d/0x110 [ 1708.763577][ C0] ? futex_exit_release+0x220/0x220 [ 1708.768752][ C0] ? lock_downgrade+0x820/0x820 [ 1708.773576][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1708.779791][ C0] ? __might_fault+0x190/0x1d0 [ 1708.784529][ C0] ? _copy_to_user+0x126/0x160 [ 1708.789270][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1708.794716][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1708.800247][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1708.806112][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1708.811046][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1708.816133][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1708.821217][ C0] do_fast_syscall_32+0x7f/0x120 [ 1708.826126][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1708.831222][ C0] RIP: 0023:0xf7fd7569 [ 1708.835270][ C0] Code: Bad RIP value. [ 1708.839307][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1708.847791][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1708.855732][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1708.863673][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1708.871617][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1708.879559][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1708.887514][ C0] kworker/u5:1 I28968 29776 2 0x00004000 [ 1708.893836][ C0] Workqueue: 0x0 (hci0) [ 1708.898049][ C0] Call Trace: [ 1708.901322][ C0] __schedule+0x8e1/0x1eb0 [ 1708.905717][ C0] ? io_schedule_timeout+0x140/0x140 [ 1708.910998][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1708.916182][ C0] schedule+0xd0/0x2a0 [ 1708.920248][ C0] worker_thread+0x14c/0x1120 [ 1708.924903][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1708.929913][ C0] ? process_one_work+0x1670/0x1670 [ 1708.935097][ C0] kthread+0x3b5/0x4a0 [ 1708.939140][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1708.944223][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1708.949308][ C0] ret_from_fork+0x1f/0x30 [ 1708.953709][ C0] syz-executor.4 S29944 29796 7392 0x20020000 [ 1708.960014][ C0] Call Trace: [ 1708.963277][ C0] __schedule+0x8e1/0x1eb0 [ 1708.967668][ C0] ? io_schedule_timeout+0x140/0x140 [ 1708.972928][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1708.978362][ C0] schedule+0xd0/0x2a0 [ 1708.982412][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1708.987494][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1708.992665][ C0] futex_wait+0x1df/0x560 [ 1708.996969][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1709.001970][ C0] ? wake_up_q+0xa3/0x100 [ 1709.006282][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1709.011452][ C0] ? futex_wake+0x155/0x490 [ 1709.015936][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1709.021889][ C0] do_futex+0x15b/0x1a60 [ 1709.027002][ C0] ? lock_acquire+0x1f1/0xad0 [ 1709.031663][ C0] ? __might_fault+0xef/0x1d0 [ 1709.036311][ C0] ? find_held_lock+0x2d/0x110 [ 1709.041049][ C0] ? futex_exit_release+0x220/0x220 [ 1709.046220][ C0] ? lock_downgrade+0x820/0x820 [ 1709.051043][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1709.057261][ C0] ? __might_fault+0x190/0x1d0 [ 1709.061997][ C0] ? _copy_to_user+0x126/0x160 [ 1709.066738][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1709.072177][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.077368][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1709.082888][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.087800][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1709.092887][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1709.097970][ C0] do_fast_syscall_32+0x7f/0x120 [ 1709.102883][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1709.107971][ C0] RIP: 0023:0xf7fd7569 [ 1709.112005][ C0] Code: Bad RIP value. [ 1709.116040][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1709.124422][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1709.132365][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1709.140315][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1709.148260][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1709.156213][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.164167][ C0] syz-executor.4 S29944 29816 7392 0x20020000 [ 1709.170474][ C0] Call Trace: [ 1709.173756][ C0] __schedule+0x8e1/0x1eb0 [ 1709.178169][ C0] ? io_schedule_timeout+0x140/0x140 [ 1709.183426][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1709.188866][ C0] schedule+0xd0/0x2a0 [ 1709.192997][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1709.198093][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1709.203266][ C0] futex_wait+0x1df/0x560 [ 1709.207766][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1709.212824][ C0] ? wake_up_q+0xa3/0x100 [ 1709.217137][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1709.222315][ C0] ? futex_wake+0x155/0x490 [ 1709.226812][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1709.232786][ C0] do_futex+0x15b/0x1a60 [ 1709.237063][ C0] ? lock_acquire+0x1f1/0xad0 [ 1709.241720][ C0] ? __might_fault+0xef/0x1d0 [ 1709.246381][ C0] ? find_held_lock+0x2d/0x110 [ 1709.251150][ C0] ? futex_exit_release+0x220/0x220 [ 1709.256326][ C0] ? lock_downgrade+0x820/0x820 [ 1709.261154][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1709.267377][ C0] ? __might_fault+0x190/0x1d0 [ 1709.272117][ C0] ? _copy_to_user+0x126/0x160 [ 1709.276859][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1709.282294][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.287207][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1709.292726][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.297771][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1709.302860][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1709.307944][ C0] do_fast_syscall_32+0x7f/0x120 [ 1709.312861][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1709.317960][ C0] RIP: 0023:0xf7fd7569 [ 1709.321993][ C0] Code: Bad RIP value. [ 1709.326029][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1709.334410][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1709.342360][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1709.350319][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1709.358537][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1709.366479][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.374450][ C0] syz-executor.4 S29944 29832 7392 0x20020000 [ 1709.380776][ C0] Call Trace: [ 1709.384107][ C0] __schedule+0x8e1/0x1eb0 [ 1709.388514][ C0] ? io_schedule_timeout+0x140/0x140 [ 1709.393785][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1709.399226][ C0] schedule+0xd0/0x2a0 [ 1709.403270][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1709.408356][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1709.413532][ C0] futex_wait+0x1df/0x560 [ 1709.417840][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1709.422839][ C0] ? wake_up_q+0xa3/0x100 [ 1709.427143][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1709.432315][ C0] ? futex_wake+0x155/0x490 [ 1709.436803][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1709.442758][ C0] do_futex+0x15b/0x1a60 [ 1709.446982][ C0] ? lock_acquire+0x1f1/0xad0 [ 1709.451636][ C0] ? __might_fault+0xef/0x1d0 [ 1709.456285][ C0] ? find_held_lock+0x2d/0x110 [ 1709.461369][ C0] ? futex_exit_release+0x220/0x220 [ 1709.466542][ C0] ? lock_downgrade+0x820/0x820 [ 1709.471370][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1709.477588][ C0] ? __might_fault+0x190/0x1d0 [ 1709.482325][ C0] ? _copy_to_user+0x126/0x160 [ 1709.487068][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1709.492503][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.497414][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1709.502933][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.507844][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1709.512946][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1709.518031][ C0] do_fast_syscall_32+0x7f/0x120 [ 1709.523043][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1709.528129][ C0] RIP: 0023:0xf7fd7569 [ 1709.532166][ C0] Code: Bad RIP value. [ 1709.536221][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1709.544604][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1709.552548][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1709.560755][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1709.568699][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1709.576656][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.584635][ C0] syz-executor.1 S28576 29881 6979 0x20020000 [ 1709.590945][ C0] Call Trace: [ 1709.594212][ C0] __schedule+0x8e1/0x1eb0 [ 1709.598608][ C0] ? io_schedule_timeout+0x140/0x140 [ 1709.603866][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1709.609303][ C0] schedule+0xd0/0x2a0 [ 1709.613349][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1709.618434][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1709.623629][ C0] futex_wait+0x1df/0x560 [ 1709.627946][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1709.632943][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1709.638736][ C0] ? mark_lock+0xbc/0x1710 [ 1709.643124][ C0] ? hash_futex+0x12/0x200 [ 1709.647517][ C0] ? futex_wake+0x155/0x490 [ 1709.652008][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1709.658050][ C0] do_futex+0x15b/0x1a60 [ 1709.662285][ C0] ? lock_acquire+0x1f1/0xad0 [ 1709.666936][ C0] ? __might_fault+0xef/0x1d0 [ 1709.671586][ C0] ? find_held_lock+0x2d/0x110 [ 1709.676343][ C0] ? futex_exit_release+0x220/0x220 [ 1709.681517][ C0] ? lock_downgrade+0x820/0x820 [ 1709.686357][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1709.692574][ C0] ? __might_fault+0x190/0x1d0 [ 1709.697312][ C0] ? _copy_to_user+0x126/0x160 [ 1709.702053][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1709.707488][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1709.713007][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1709.718873][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.723786][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1709.728876][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1709.733973][ C0] do_fast_syscall_32+0x7f/0x120 [ 1709.738885][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1709.743968][ C0] RIP: 0023:0xf7fa1569 [ 1709.748003][ C0] Code: Bad RIP value. [ 1709.752041][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1709.760422][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1709.768368][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1709.776326][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1709.784270][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1709.792225][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.800180][ C0] syz-executor.1 S29512 29909 6979 0x20020000 [ 1709.806492][ C0] Call Trace: [ 1709.809759][ C0] __schedule+0x8e1/0x1eb0 [ 1709.814155][ C0] ? io_schedule_timeout+0x140/0x140 [ 1709.819412][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1709.824848][ C0] schedule+0xd0/0x2a0 [ 1709.828893][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1709.833981][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1709.839157][ C0] futex_wait+0x1df/0x560 [ 1709.843461][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1709.848461][ C0] ? mark_lock+0xbc/0x1710 [ 1709.852849][ C0] ? hash_futex+0x12/0x200 [ 1709.857240][ C0] ? futex_wake+0x155/0x490 [ 1709.861733][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1709.867699][ C0] do_futex+0x15b/0x1a60 [ 1709.871932][ C0] ? lock_acquire+0x1f1/0xad0 [ 1709.876594][ C0] ? __might_fault+0xef/0x1d0 [ 1709.881255][ C0] ? find_held_lock+0x2d/0x110 [ 1709.885993][ C0] ? futex_exit_release+0x220/0x220 [ 1709.891166][ C0] ? lock_downgrade+0x820/0x820 [ 1709.895997][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1709.902217][ C0] ? __might_fault+0x190/0x1d0 [ 1709.906956][ C0] ? _copy_to_user+0x126/0x160 [ 1709.911712][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1709.917150][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1709.922681][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1709.928554][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1709.933467][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1709.938557][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1709.943651][ C0] do_fast_syscall_32+0x7f/0x120 [ 1709.948581][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1709.953667][ C0] RIP: 0023:0xf7fa1569 [ 1709.957704][ C0] Code: Bad RIP value. [ 1709.961742][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1709.970139][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1709.978085][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1709.986060][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1709.994004][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1710.001948][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1710.009904][ C0] syz-executor.1 S29512 29919 6979 0x20020000 [ 1710.016211][ C0] Call Trace: [ 1710.019663][ C0] __schedule+0x8e1/0x1eb0 [ 1710.024056][ C0] ? io_schedule_timeout+0x140/0x140 [ 1710.029332][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1710.034767][ C0] schedule+0xd0/0x2a0 [ 1710.038814][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1710.043899][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1710.049072][ C0] futex_wait+0x1df/0x560 [ 1710.053401][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1710.058403][ C0] ? mark_lock+0xbc/0x1710 [ 1710.062794][ C0] ? hash_futex+0x12/0x200 [ 1710.067185][ C0] ? futex_wake+0x155/0x490 [ 1710.071671][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1710.077642][ C0] do_futex+0x15b/0x1a60 [ 1710.081863][ C0] ? lock_acquire+0x1f1/0xad0 [ 1710.086516][ C0] ? __might_fault+0xef/0x1d0 [ 1710.091168][ C0] ? find_held_lock+0x2d/0x110 [ 1710.095907][ C0] ? futex_exit_release+0x220/0x220 [ 1710.101082][ C0] ? lock_downgrade+0x820/0x820 [ 1710.105907][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1710.112125][ C0] ? __might_fault+0x190/0x1d0 [ 1710.116861][ C0] ? _copy_to_user+0x126/0x160 [ 1710.121615][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1710.127313][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1710.132832][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1710.138723][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1710.143687][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1710.148783][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1710.153883][ C0] do_fast_syscall_32+0x7f/0x120 [ 1710.158801][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1710.163890][ C0] RIP: 0023:0xf7fa1569 [ 1710.167997][ C0] Code: Bad RIP value. [ 1710.172053][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1710.180447][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1710.188395][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1710.196344][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1710.204297][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1710.212244][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1710.220206][ C0] syz-executor.1 S29512 29929 6979 0x20020000 [ 1710.226514][ C0] Call Trace: [ 1710.229786][ C0] __schedule+0x8e1/0x1eb0 [ 1710.234185][ C0] ? io_schedule_timeout+0x140/0x140 [ 1710.239447][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1710.244883][ C0] schedule+0xd0/0x2a0 [ 1710.248927][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1710.254014][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1710.259187][ C0] futex_wait+0x1df/0x560 [ 1710.263498][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1710.268504][ C0] ? wake_up_q+0xa3/0x100 [ 1710.272818][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1710.277988][ C0] ? futex_wake+0x155/0x490 [ 1710.282512][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1710.288465][ C0] do_futex+0x15b/0x1a60 [ 1710.292693][ C0] ? lock_acquire+0x1f1/0xad0 [ 1710.297342][ C0] ? __might_fault+0xef/0x1d0 [ 1710.301989][ C0] ? find_held_lock+0x2d/0x110 [ 1710.306746][ C0] ? futex_exit_release+0x220/0x220 [ 1710.311946][ C0] ? lock_downgrade+0x820/0x820 [ 1710.316785][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1710.323008][ C0] ? __might_fault+0x190/0x1d0 [ 1710.327747][ C0] ? _copy_to_user+0x126/0x160 [ 1710.332513][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1710.337969][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1710.343598][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1710.349529][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1710.354449][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1710.359543][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1710.364642][ C0] do_fast_syscall_32+0x7f/0x120 [ 1710.369558][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1710.374658][ C0] RIP: 0023:0xf7fa1569 [ 1710.378693][ C0] Code: Bad RIP value. [ 1710.382748][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1710.391131][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1710.399090][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1710.407040][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1710.414985][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1710.422946][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1710.430905][ C0] syz-executor.2 S29944 29931 7031 0x20020000 [ 1710.437229][ C0] Call Trace: [ 1710.440496][ C0] __schedule+0x8e1/0x1eb0 [ 1710.444891][ C0] ? io_schedule_timeout+0x140/0x140 [ 1710.450149][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1710.455592][ C0] schedule+0xd0/0x2a0 [ 1710.459637][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1710.464720][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1710.469906][ C0] futex_wait+0x1df/0x560 [ 1710.474212][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1710.479218][ C0] ? wake_up_q+0xa3/0x100 [ 1710.483520][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1710.488691][ C0] ? futex_wake+0x155/0x490 [ 1710.493182][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1710.499137][ C0] do_futex+0x15b/0x1a60 [ 1710.503356][ C0] ? lock_acquire+0x1f1/0xad0 [ 1710.508008][ C0] ? __might_fault+0xef/0x1d0 [ 1710.512659][ C0] ? find_held_lock+0x2d/0x110 [ 1710.517402][ C0] ? futex_exit_release+0x220/0x220 [ 1710.522591][ C0] ? lock_downgrade+0x820/0x820 [ 1710.527428][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1710.533653][ C0] ? __might_fault+0x190/0x1d0 [ 1710.538392][ C0] ? _copy_to_user+0x126/0x160 [ 1710.543132][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1710.548567][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1710.554084][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1710.559950][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1710.564862][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1710.569952][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1710.575035][ C0] do_fast_syscall_32+0x7f/0x120 [ 1710.579948][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1710.585031][ C0] RIP: 0023:0xf7f91569 [ 1710.589068][ C0] Code: Bad RIP value. [ 1710.593126][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1710.601523][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1710.609481][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1710.617427][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1710.625388][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1710.633333][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1710.641291][ C0] syz-executor.2 S29512 29946 7031 0x20020000 [ 1710.647613][ C0] Call Trace: [ 1710.650879][ C0] __schedule+0x8e1/0x1eb0 [ 1710.655279][ C0] ? io_schedule_timeout+0x140/0x140 [ 1710.660541][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1710.665989][ C0] schedule+0xd0/0x2a0 [ 1710.670035][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1710.675119][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1710.680292][ C0] futex_wait+0x1df/0x560 [ 1710.684611][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1710.689612][ C0] ? wake_up_q+0xa3/0x100 [ 1710.693914][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1710.699087][ C0] ? futex_wake+0x155/0x490 [ 1710.703572][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1710.709550][ C0] do_futex+0x15b/0x1a60 [ 1710.713772][ C0] ? lock_acquire+0x1f1/0xad0 [ 1710.718422][ C0] ? __might_fault+0xef/0x1d0 [ 1710.723071][ C0] ? find_held_lock+0x2d/0x110 [ 1710.727810][ C0] ? futex_exit_release+0x220/0x220 [ 1710.733016][ C0] ? lock_downgrade+0x820/0x820 [ 1710.737871][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1710.744102][ C0] ? __might_fault+0x190/0x1d0 [ 1710.748849][ C0] ? _copy_to_user+0x126/0x160 [ 1710.753596][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1710.759052][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1710.764575][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1710.770445][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1710.775357][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1710.780448][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1710.785546][ C0] do_fast_syscall_32+0x7f/0x120 [ 1710.790461][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1710.795545][ C0] RIP: 0023:0xf7f91569 [ 1710.799597][ C0] Code: Bad RIP value. [ 1710.803643][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1710.812034][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1710.819984][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1710.827932][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1710.835877][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1710.843823][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1710.851795][ C0] syz-executor.2 S29512 29958 7031 0x20020000 [ 1710.858102][ C0] Call Trace: [ 1710.861371][ C0] __schedule+0x8e1/0x1eb0 [ 1710.865780][ C0] ? io_schedule_timeout+0x140/0x140 [ 1710.871056][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1710.876492][ C0] schedule+0xd0/0x2a0 [ 1710.880539][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1710.885622][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1710.890797][ C0] futex_wait+0x1df/0x560 [ 1710.895102][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1710.900103][ C0] ? wake_up_q+0xa3/0x100 [ 1710.904403][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1710.909575][ C0] ? futex_wake+0x155/0x490 [ 1710.914167][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1710.920138][ C0] do_futex+0x15b/0x1a60 [ 1710.924358][ C0] ? lock_acquire+0x1f1/0xad0 [ 1710.929008][ C0] ? __might_fault+0xef/0x1d0 [ 1710.933656][ C0] ? find_held_lock+0x2d/0x110 [ 1710.938394][ C0] ? futex_exit_release+0x220/0x220 [ 1710.943581][ C0] ? lock_downgrade+0x820/0x820 [ 1710.948407][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1710.954624][ C0] ? __might_fault+0x190/0x1d0 [ 1710.959360][ C0] ? _copy_to_user+0x126/0x160 [ 1710.964100][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1710.969533][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1710.975052][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1710.980919][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1710.985828][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1710.990917][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1710.996002][ C0] do_fast_syscall_32+0x7f/0x120 [ 1711.001000][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1711.006083][ C0] RIP: 0023:0xf7f91569 [ 1711.010117][ C0] Code: Bad RIP value. [ 1711.014154][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1711.022549][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1711.030505][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1711.038457][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1711.046405][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1711.054354][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1711.062313][ C0] syz-executor.2 S29904 30309 7031 0x20020000 [ 1711.068619][ C0] Call Trace: [ 1711.071888][ C0] __schedule+0x8e1/0x1eb0 [ 1711.076285][ C0] ? io_schedule_timeout+0x140/0x140 [ 1711.081561][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1711.086996][ C0] schedule+0xd0/0x2a0 [ 1711.091039][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1711.096136][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1711.101309][ C0] futex_wait+0x1df/0x560 [ 1711.105613][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1711.110613][ C0] ? wake_up_q+0xa3/0x100 [ 1711.114915][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1711.120087][ C0] ? futex_wake+0x155/0x490 [ 1711.124572][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1711.130525][ C0] do_futex+0x15b/0x1a60 [ 1711.134746][ C0] ? lock_acquire+0x1f1/0xad0 [ 1711.139397][ C0] ? __might_fault+0xef/0x1d0 [ 1711.144049][ C0] ? find_held_lock+0x2d/0x110 [ 1711.148802][ C0] ? futex_exit_release+0x220/0x220 [ 1711.153973][ C0] ? lock_downgrade+0x820/0x820 [ 1711.158813][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1711.165031][ C0] ? __might_fault+0x190/0x1d0 [ 1711.169768][ C0] ? _copy_to_user+0x126/0x160 [ 1711.174507][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1711.179942][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1711.184851][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1711.190372][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1711.195295][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1711.200382][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1711.205466][ C0] do_fast_syscall_32+0x7f/0x120 [ 1711.210378][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1711.215461][ C0] RIP: 0023:0xf7f91569 [ 1711.219498][ C0] Code: Bad RIP value. [ 1711.223534][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1711.231923][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1711.239866][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1711.247911][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1711.255852][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1711.263796][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1711.271750][ C0] syz-executor.0 S28072 30324 6841 0x20020000 [ 1711.278062][ C0] Call Trace: [ 1711.281326][ C0] __schedule+0x8e1/0x1eb0 [ 1711.285718][ C0] ? io_schedule_timeout+0x140/0x140 [ 1711.290978][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1711.296416][ C0] schedule+0xd0/0x2a0 [ 1711.300459][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1711.305542][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1711.310718][ C0] futex_wait+0x1df/0x560 [ 1711.315037][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1711.320057][ C0] ? mark_lock+0xbc/0x1710 [ 1711.324445][ C0] ? hash_futex+0x12/0x200 [ 1711.329009][ C0] ? futex_wake+0x155/0x490 [ 1711.333496][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1711.339448][ C0] do_futex+0x15b/0x1a60 [ 1711.343671][ C0] ? lock_acquire+0x1f1/0xad0 [ 1711.348321][ C0] ? __might_fault+0xef/0x1d0 [ 1711.352970][ C0] ? find_held_lock+0x2d/0x110 [ 1711.357718][ C0] ? futex_exit_release+0x220/0x220 [ 1711.362889][ C0] ? lock_downgrade+0x820/0x820 [ 1711.367713][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1711.373953][ C0] ? __might_fault+0x190/0x1d0 [ 1711.378722][ C0] ? _copy_to_user+0x126/0x160 [ 1711.383473][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1711.389289][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1711.394815][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1711.400685][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1711.405596][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1711.410683][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1711.415766][ C0] do_fast_syscall_32+0x7f/0x120 [ 1711.420679][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1711.425761][ C0] RIP: 0023:0xf7fd1569 [ 1711.429796][ C0] Code: Bad RIP value. [ 1711.433833][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1711.442216][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1711.450160][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1711.458110][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1711.466078][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1711.474036][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1711.481993][ C0] syz-executor.5 S28776 30346 7432 0x20020000 [ 1711.488300][ C0] Call Trace: [ 1711.491581][ C0] __schedule+0x8e1/0x1eb0 [ 1711.495976][ C0] ? io_schedule_timeout+0x140/0x140 [ 1711.501234][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1711.506670][ C0] schedule+0xd0/0x2a0 [ 1711.510732][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1711.515817][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1711.520985][ C0] ? futex_wake+0x1b5/0x490 [ 1711.525461][ C0] ? find_held_lock+0x2d/0x110 [ 1711.530203][ C0] futex_wait+0x1df/0x560 [ 1711.534506][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1711.539504][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1711.544503][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1711.549674][ C0] ? futex_wake+0x155/0x490 [ 1711.554162][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1711.560115][ C0] do_futex+0x15b/0x1a60 [ 1711.564335][ C0] ? lock_acquire+0x1f1/0xad0 [ 1711.568985][ C0] ? __might_fault+0xef/0x1d0 [ 1711.573633][ C0] ? find_held_lock+0x2d/0x110 [ 1711.578369][ C0] ? futex_exit_release+0x220/0x220 [ 1711.583543][ C0] ? lock_downgrade+0x820/0x820 [ 1711.588370][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1711.594606][ C0] ? __might_fault+0x190/0x1d0 [ 1711.599343][ C0] ? _copy_to_user+0x126/0x160 [ 1711.604083][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1711.609519][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1711.615125][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1711.620992][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1711.625912][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1711.631003][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1711.636088][ C0] do_fast_syscall_32+0x7f/0x120 [ 1711.641000][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1711.646083][ C0] RIP: 0023:0xf7f53569 [ 1711.650118][ C0] Code: Bad RIP value. [ 1711.654155][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1711.662535][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1711.670492][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1711.678446][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1711.686387][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1711.694331][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1711.702285][ C0] syz-executor.3 S29024 31093 7114 0x20020000 [ 1711.708602][ C0] Call Trace: [ 1711.711865][ C0] __schedule+0x8e1/0x1eb0 [ 1711.716258][ C0] ? io_schedule_timeout+0x140/0x140 [ 1711.721515][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1711.726950][ C0] schedule+0xd0/0x2a0 [ 1711.730991][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1711.736073][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1711.741259][ C0] futex_wait+0x1df/0x560 [ 1711.745573][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1711.750572][ C0] ? wake_up_q+0xa3/0x100 [ 1711.754872][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1711.760042][ C0] ? futex_wake+0x155/0x490 [ 1711.764527][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1711.770481][ C0] do_futex+0x15b/0x1a60 [ 1711.774701][ C0] ? lock_acquire+0x1f1/0xad0 [ 1711.779350][ C0] ? __might_fault+0xef/0x1d0 [ 1711.783997][ C0] ? find_held_lock+0x2d/0x110 [ 1711.788736][ C0] ? futex_exit_release+0x220/0x220 [ 1711.793909][ C0] ? lock_downgrade+0x820/0x820 [ 1711.798733][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1711.804955][ C0] ? __might_fault+0x190/0x1d0 [ 1711.809690][ C0] ? _copy_to_user+0x126/0x160 [ 1711.814441][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1711.819891][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1711.825409][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1711.831370][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1711.836279][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1711.841367][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1711.846462][ C0] do_fast_syscall_32+0x7f/0x120 [ 1711.851371][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1711.856451][ C0] RIP: 0023:0xf7f6d569 [ 1711.860488][ C0] Code: Bad RIP value. [ 1711.864538][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1711.872934][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1711.880891][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1711.888835][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1711.896779][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1711.904725][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1711.912766][ C0] syz-executor.2 S29944 31704 7031 0x20020000 [ 1711.919072][ C0] Call Trace: [ 1711.922333][ C0] __schedule+0x8e1/0x1eb0 [ 1711.926738][ C0] ? io_schedule_timeout+0x140/0x140 [ 1711.931999][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1711.937434][ C0] schedule+0xd0/0x2a0 [ 1711.941475][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1711.948033][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1711.953207][ C0] futex_wait+0x1df/0x560 [ 1711.957512][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1711.962509][ C0] ? lock_downgrade+0x820/0x820 [ 1711.967335][ C0] ? mark_lock+0xbc/0x1710 [ 1711.971722][ C0] ? hash_futex+0x12/0x200 [ 1711.976110][ C0] ? futex_wake+0x155/0x490 [ 1711.980595][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1711.986557][ C0] do_futex+0x15b/0x1a60 [ 1711.990779][ C0] ? lock_acquire+0x1f1/0xad0 [ 1711.995430][ C0] ? __might_fault+0xef/0x1d0 [ 1712.000078][ C0] ? find_held_lock+0x2d/0x110 [ 1712.004815][ C0] ? futex_exit_release+0x220/0x220 [ 1712.009988][ C0] ? lock_downgrade+0x820/0x820 [ 1712.014814][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1712.021032][ C0] ? __might_fault+0x190/0x1d0 [ 1712.025773][ C0] ? _copy_to_user+0x126/0x160 [ 1712.030535][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1712.035969][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1712.041489][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1712.047356][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1712.052267][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1712.057357][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1712.062474][ C0] do_fast_syscall_32+0x7f/0x120 [ 1712.067403][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1712.072489][ C0] RIP: 0023:0xf7f91569 [ 1712.076522][ C0] Code: Bad RIP value. [ 1712.080561][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1712.088944][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1712.096888][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1712.104845][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1712.112788][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1712.120745][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1712.128788][ C0] syz-executor.2 S29144 31724 7031 0x20020000 [ 1712.135091][ C0] Call Trace: [ 1712.138356][ C0] __schedule+0x8e1/0x1eb0 [ 1712.142753][ C0] ? io_schedule_timeout+0x140/0x140 [ 1712.148011][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1712.153447][ C0] schedule+0xd0/0x2a0 [ 1712.157489][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1712.162574][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1712.167748][ C0] futex_wait+0x1df/0x560 [ 1712.172053][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1712.177063][ C0] ? wake_up_q+0xa3/0x100 [ 1712.181371][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1712.186540][ C0] ? futex_wake+0x155/0x490 [ 1712.191026][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1712.197003][ C0] do_futex+0x15b/0x1a60 [ 1712.201232][ C0] ? lock_acquire+0x1f1/0xad0 [ 1712.205929][ C0] ? __might_fault+0xef/0x1d0 [ 1712.210585][ C0] ? find_held_lock+0x2d/0x110 [ 1712.215326][ C0] ? futex_exit_release+0x220/0x220 [ 1712.220509][ C0] ? lock_downgrade+0x820/0x820 [ 1712.225336][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1712.231592][ C0] ? __might_fault+0x190/0x1d0 [ 1712.236330][ C0] ? _copy_to_user+0x126/0x160 [ 1712.241070][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1712.246505][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1712.251416][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1712.256937][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1712.261861][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1712.266949][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1712.272034][ C0] do_fast_syscall_32+0x7f/0x120 [ 1712.276947][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1712.282031][ C0] RIP: 0023:0xf7f91569 [ 1712.286589][ C0] Code: Bad RIP value. [ 1712.290627][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1712.299011][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1712.306954][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1712.314901][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1712.322845][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1712.330792][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1712.340662][ C0] syz-executor.4 S29944 457 7392 0x20020000 [ 1712.346991][ C0] Call Trace: [ 1712.350282][ C0] __schedule+0x8e1/0x1eb0 [ 1712.354701][ C0] ? io_schedule_timeout+0x140/0x140 [ 1712.359986][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1712.365538][ C0] schedule+0xd0/0x2a0 [ 1712.369592][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1712.374695][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1712.379876][ C0] futex_wait+0x1df/0x560 [ 1712.384187][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1712.389456][ C0] ? mark_lock+0xbc/0x1710 [ 1712.393851][ C0] ? mark_lock+0xbc/0x1710 [ 1712.398244][ C0] ? hash_futex+0x12/0x200 [ 1712.402775][ C0] ? futex_wake+0x155/0x490 [ 1712.407383][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1712.413350][ C0] do_futex+0x15b/0x1a60 [ 1712.417575][ C0] ? lock_acquire+0x1f1/0xad0 [ 1712.422228][ C0] ? __might_fault+0xef/0x1d0 [ 1712.426925][ C0] ? find_held_lock+0x2d/0x110 [ 1712.431693][ C0] ? futex_exit_release+0x220/0x220 [ 1712.436870][ C0] ? lock_downgrade+0x820/0x820 [ 1712.441697][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1712.447916][ C0] ? __might_fault+0x190/0x1d0 [ 1712.452654][ C0] ? _copy_to_user+0x126/0x160 [ 1712.457397][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1712.462830][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1712.468349][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1712.474236][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1712.479147][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1712.486492][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1712.491577][ C0] do_fast_syscall_32+0x7f/0x120 [ 1712.496487][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1712.501571][ C0] RIP: 0023:0xf7fd7569 [ 1712.505605][ C0] Code: Bad RIP value. [ 1712.509642][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1712.518026][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1712.525970][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1712.533926][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1712.541869][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1712.549815][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1712.557771][ C0] syz-executor.2 S28696 497 7031 0x20020000 [ 1712.564077][ C0] Call Trace: [ 1712.567344][ C0] __schedule+0x8e1/0x1eb0 [ 1712.571827][ C0] ? io_schedule_timeout+0x140/0x140 [ 1712.577088][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1712.582523][ C0] schedule+0xd0/0x2a0 [ 1712.586570][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1712.591653][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1712.596828][ C0] futex_wait+0x1df/0x560 [ 1712.601134][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1712.606150][ C0] ? mark_lock+0xbc/0x1710 [ 1712.610539][ C0] ? hash_futex+0x12/0x200 [ 1712.614930][ C0] ? futex_wake+0x155/0x490 [ 1712.619416][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1712.625370][ C0] do_futex+0x15b/0x1a60 [ 1712.629592][ C0] ? lock_acquire+0x1f1/0xad0 [ 1712.634243][ C0] ? __might_fault+0xef/0x1d0 [ 1712.638910][ C0] ? find_held_lock+0x2d/0x110 [ 1712.643650][ C0] ? futex_exit_release+0x220/0x220 [ 1712.648822][ C0] ? lock_downgrade+0x820/0x820 [ 1712.653662][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1712.659880][ C0] ? __might_fault+0x190/0x1d0 [ 1712.664616][ C0] ? _copy_to_user+0x126/0x160 [ 1712.669358][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1712.674794][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1712.680326][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1712.686193][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1712.691104][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1712.696193][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1712.701278][ C0] do_fast_syscall_32+0x7f/0x120 [ 1712.706187][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1712.711273][ C0] RIP: 0023:0xf7f91569 [ 1712.715320][ C0] Code: Bad RIP value. [ 1712.719358][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1712.727740][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1712.735784][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1712.743739][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1712.751684][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1712.759627][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1712.767583][ C0] syz-executor.2 S29944 520 7031 0x20020000 [ 1712.773896][ C0] Call Trace: [ 1712.777162][ C0] __schedule+0x8e1/0x1eb0 [ 1712.781555][ C0] ? io_schedule_timeout+0x140/0x140 [ 1712.786817][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1712.792256][ C0] schedule+0xd0/0x2a0 [ 1712.796316][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1712.801399][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1712.806580][ C0] futex_wait+0x1df/0x560 [ 1712.810885][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1712.815886][ C0] ? wake_up_q+0xa3/0x100 [ 1712.820186][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1712.825356][ C0] ? futex_wake+0x155/0x490 [ 1712.829845][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1712.835800][ C0] do_futex+0x15b/0x1a60 [ 1712.840031][ C0] ? lock_acquire+0x1f1/0xad0 [ 1712.844705][ C0] ? __might_fault+0xef/0x1d0 [ 1712.849355][ C0] ? find_held_lock+0x2d/0x110 [ 1712.854091][ C0] ? futex_exit_release+0x220/0x220 [ 1712.859266][ C0] ? lock_downgrade+0x820/0x820 [ 1712.864090][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1712.870319][ C0] ? __might_fault+0x190/0x1d0 [ 1712.875335][ C0] ? _copy_to_user+0x126/0x160 [ 1712.880077][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1712.885511][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1712.890424][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1712.895950][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1712.900862][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1712.905950][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1712.911034][ C0] do_fast_syscall_32+0x7f/0x120 [ 1712.915947][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1712.921032][ C0] RIP: 0023:0xf7f91569 [ 1712.925068][ C0] Code: Bad RIP value. [ 1712.929113][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1712.937496][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1712.945450][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1712.953394][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1712.961339][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1712.969285][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1712.977244][ C0] syz-executor.5 S30088 647 7432 0x20020000 [ 1712.983551][ C0] Call Trace: [ 1712.986819][ C0] __schedule+0x8e1/0x1eb0 [ 1712.991224][ C0] ? io_schedule_timeout+0x140/0x140 [ 1712.996489][ C0] ? wait_for_completion+0x260/0x260 [ 1713.001749][ C0] schedule+0xd0/0x2a0 [ 1713.005806][ C0] pipe_wait+0x155/0x240 [ 1713.010022][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1713.015019][ C0] ? finish_wait+0x260/0x260 [ 1713.019583][ C0] ? finish_wait+0x260/0x260 [ 1713.024146][ C0] ? pipe_lock+0x5a/0x70 [ 1713.028378][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1713.034161][ C0] __splice_from_pipe+0x114/0x830 [ 1713.039160][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1713.045127][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1713.049989][ C0] do_vmsplice+0x2f7/0x380 [ 1713.054381][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1713.059641][ C0] ? lock_downgrade+0x820/0x820 [ 1713.064490][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1713.070707][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1713.076232][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1713.081408][ C0] ? __might_fault+0x190/0x1d0 [ 1713.086164][ C0] ? _copy_to_user+0x126/0x160 [ 1713.090921][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1713.096102][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1713.101974][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1713.106887][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1713.111981][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1713.117066][ C0] do_fast_syscall_32+0x7f/0x120 [ 1713.121980][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1713.127165][ C0] RIP: 0023:0xf7f53569 [ 1713.131210][ C0] Code: Bad RIP value. [ 1713.135258][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1713.143649][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1713.151594][ C0] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 1713.159587][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1713.167531][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1713.175476][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1713.183433][ C0] syz-executor.0 S29944 681 6841 0x20020000 [ 1713.189750][ C0] Call Trace: [ 1713.193021][ C0] __schedule+0x8e1/0x1eb0 [ 1713.197442][ C0] ? io_schedule_timeout+0x140/0x140 [ 1713.202703][ C0] ? wait_for_completion+0x260/0x260 [ 1713.207964][ C0] schedule+0xd0/0x2a0 [ 1713.212018][ C0] pipe_wait+0x155/0x240 [ 1713.216233][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1713.221231][ C0] ? finish_wait+0x260/0x260 [ 1713.225798][ C0] ? finish_wait+0x260/0x260 [ 1713.230394][ C0] ? pipe_lock+0x5a/0x70 [ 1713.234614][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1713.240395][ C0] __splice_from_pipe+0x114/0x830 [ 1713.245406][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1713.251357][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1713.256185][ C0] do_vmsplice+0x2f7/0x380 [ 1713.260573][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1713.265834][ C0] ? lock_downgrade+0x820/0x820 [ 1713.270660][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1713.276874][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1713.282403][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1713.287488][ C0] ? __might_fault+0x190/0x1d0 [ 1713.292224][ C0] ? _copy_to_user+0x126/0x160 [ 1713.296978][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1713.302177][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1713.308042][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1713.312955][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1713.318058][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1713.323149][ C0] do_fast_syscall_32+0x7f/0x120 [ 1713.328061][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1713.333147][ C0] RIP: 0023:0xf7fd1569 [ 1713.337182][ C0] Code: Bad RIP value. [ 1713.341218][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1713.349666][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1713.357633][ C0] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 1713.366553][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1713.374514][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1713.382462][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1713.390421][ C0] syz-executor.0 S29944 698 6841 0x20020000 [ 1713.396729][ C0] Call Trace: [ 1713.400013][ C0] __schedule+0x8e1/0x1eb0 [ 1713.404411][ C0] ? io_schedule_timeout+0x140/0x140 [ 1713.409670][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1713.415107][ C0] schedule+0xd0/0x2a0 [ 1713.419153][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1713.424237][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1713.429413][ C0] futex_wait+0x1df/0x560 [ 1713.433733][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1713.438735][ C0] ? wake_up_q+0xa3/0x100 [ 1713.443045][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1713.448231][ C0] ? futex_wake+0x155/0x490 [ 1713.452717][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1713.458672][ C0] do_futex+0x15b/0x1a60 [ 1713.462904][ C0] ? lock_acquire+0x1f1/0xad0 [ 1713.468944][ C0] ? __might_fault+0xef/0x1d0 [ 1713.473594][ C0] ? find_held_lock+0x2d/0x110 [ 1713.478349][ C0] ? futex_exit_release+0x220/0x220 [ 1713.483525][ C0] ? lock_downgrade+0x820/0x820 [ 1713.489478][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1713.495695][ C0] ? __might_fault+0x190/0x1d0 [ 1713.500431][ C0] ? _copy_to_user+0x126/0x160 [ 1713.505173][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1713.510614][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1713.516148][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1713.522014][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1713.526926][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1713.532017][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1713.537100][ C0] do_fast_syscall_32+0x7f/0x120 [ 1713.542011][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1713.547093][ C0] RIP: 0023:0xf7fd1569 [ 1713.551146][ C0] Code: Bad RIP value. [ 1713.555190][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1713.563580][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1713.571540][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1713.579499][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1713.587443][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1713.595387][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1713.603341][ C0] syz-executor.5 S30088 710 7432 0x20020000 [ 1713.609648][ C0] Call Trace: [ 1713.612913][ C0] __schedule+0x8e1/0x1eb0 [ 1713.617306][ C0] ? io_schedule_timeout+0x140/0x140 [ 1713.622565][ C0] ? wait_for_completion+0x260/0x260 [ 1713.627839][ C0] schedule+0xd0/0x2a0 [ 1713.631883][ C0] pipe_wait+0x155/0x240 [ 1713.636113][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1713.641112][ C0] ? finish_wait+0x260/0x260 [ 1713.645690][ C0] ? finish_wait+0x260/0x260 [ 1713.650261][ C0] ? pipe_lock+0x5a/0x70 [ 1713.654478][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1713.660260][ C0] __splice_from_pipe+0x114/0x830 [ 1713.665272][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1713.671224][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1713.676050][ C0] do_vmsplice+0x2f7/0x380 [ 1713.680439][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1713.685717][ C0] ? lock_downgrade+0x820/0x820 [ 1713.690542][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1713.696852][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1713.702369][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1713.707453][ C0] ? __might_fault+0x190/0x1d0 [ 1713.712189][ C0] ? _copy_to_user+0x126/0x160 [ 1713.716930][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1713.722106][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1713.727973][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1713.732885][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1713.737974][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1713.743057][ C0] do_fast_syscall_32+0x7f/0x120 [ 1713.747979][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1713.753060][ C0] RIP: 0023:0xf7f53569 [ 1713.757095][ C0] Code: Bad RIP value. [ 1713.761132][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1713.769517][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1713.777474][ C0] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 1713.785418][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1713.793360][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1713.801315][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1713.809271][ C0] syz-executor.0 S29944 714 6841 0x20020000 [ 1713.815580][ C0] Call Trace: [ 1713.818847][ C0] __schedule+0x8e1/0x1eb0 [ 1713.823244][ C0] ? io_schedule_timeout+0x140/0x140 [ 1713.828504][ C0] ? wait_for_completion+0x260/0x260 [ 1713.833766][ C0] schedule+0xd0/0x2a0 [ 1713.837812][ C0] pipe_wait+0x155/0x240 [ 1713.842035][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1713.847049][ C0] ? finish_wait+0x260/0x260 [ 1713.851614][ C0] ? finish_wait+0x260/0x260 [ 1713.856187][ C0] ? pipe_lock+0x5a/0x70 [ 1713.860637][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1713.866419][ C0] __splice_from_pipe+0x114/0x830 [ 1713.871681][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1713.877630][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1713.882469][ C0] do_vmsplice+0x2f7/0x380 [ 1713.886884][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1713.892149][ C0] ? lock_downgrade+0x820/0x820 [ 1713.896974][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1713.903187][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1713.908707][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1713.913790][ C0] ? __might_fault+0x190/0x1d0 [ 1713.918526][ C0] ? _copy_to_user+0x126/0x160 [ 1713.923273][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1713.928450][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1713.934321][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1713.939249][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1713.944336][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1713.949421][ C0] do_fast_syscall_32+0x7f/0x120 [ 1713.954334][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1713.959417][ C0] RIP: 0023:0xf7fd1569 [ 1713.963455][ C0] Code: Bad RIP value. [ 1713.968794][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1713.977177][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1713.985121][ C0] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 1713.993071][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1714.001015][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.008972][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.016926][ C0] syz-executor.5 S29944 730 7432 0x20020000 [ 1714.023238][ C0] Call Trace: [ 1714.026508][ C0] __schedule+0x8e1/0x1eb0 [ 1714.030914][ C0] ? io_schedule_timeout+0x140/0x140 [ 1714.036175][ C0] ? wait_for_completion+0x260/0x260 [ 1714.041435][ C0] schedule+0xd0/0x2a0 [ 1714.045479][ C0] pipe_wait+0x155/0x240 [ 1714.049695][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1714.054708][ C0] ? finish_wait+0x260/0x260 [ 1714.059276][ C0] ? finish_wait+0x260/0x260 [ 1714.063862][ C0] ? pipe_lock+0x5a/0x70 [ 1714.068083][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1714.073864][ C0] __splice_from_pipe+0x114/0x830 [ 1714.078859][ C0] ? perf_trace_lock+0xeb/0x4a0 [ 1714.083683][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1714.089636][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1714.094462][ C0] do_vmsplice+0x2f7/0x380 [ 1714.098866][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1714.105085][ C0] ? lock_downgrade+0x820/0x820 [ 1714.109912][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1714.116140][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1714.121662][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1714.126747][ C0] ? __might_fault+0x190/0x1d0 [ 1714.131488][ C0] ? _copy_to_user+0x126/0x160 [ 1714.136251][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1714.141437][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1714.147311][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1714.152232][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1714.157327][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1714.162418][ C0] do_fast_syscall_32+0x7f/0x120 [ 1714.167334][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1714.172417][ C0] RIP: 0023:0xf7f53569 [ 1714.176453][ C0] Code: Bad RIP value. [ 1714.180490][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1714.188878][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 1714.196825][ C0] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 1714.204770][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1714.212754][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.220718][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.228739][ C0] syz-executor.4 S29536 739 7392 0x20020000 [ 1714.235050][ C0] Call Trace: [ 1714.238322][ C0] __schedule+0x8e1/0x1eb0 [ 1714.242721][ C0] ? io_schedule_timeout+0x140/0x140 [ 1714.247981][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1714.253417][ C0] schedule+0xd0/0x2a0 [ 1714.257463][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1714.262547][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1714.267855][ C0] futex_wait+0x1df/0x560 [ 1714.272161][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1714.277161][ C0] ? mark_lock+0xbc/0x1710 [ 1714.281591][ C0] ? hash_futex+0x12/0x200 [ 1714.286024][ C0] ? futex_wake+0x155/0x490 [ 1714.290508][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1714.296508][ C0] do_futex+0x15b/0x1a60 [ 1714.300728][ C0] ? lock_acquire+0x1f1/0xad0 [ 1714.305413][ C0] ? __might_fault+0xef/0x1d0 [ 1714.310413][ C0] ? find_held_lock+0x2d/0x110 [ 1714.315165][ C0] ? futex_exit_release+0x220/0x220 [ 1714.320342][ C0] ? lock_downgrade+0x820/0x820 [ 1714.325190][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1714.331407][ C0] ? __might_fault+0x190/0x1d0 [ 1714.336144][ C0] ? _copy_to_user+0x126/0x160 [ 1714.340884][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1714.346330][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1714.351847][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1714.357712][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1714.362623][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1714.367712][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1714.372877][ C0] do_fast_syscall_32+0x7f/0x120 [ 1714.377855][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1714.382964][ C0] RIP: 0023:0xf7fd7569 [ 1714.387010][ C0] Code: Bad RIP value. [ 1714.391051][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1714.399436][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1714.407381][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1714.415325][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1714.427302][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.435248][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.443221][ C0] syz-executor.5 S30024 871 7432 0x20020000 [ 1714.449789][ C0] Call Trace: [ 1714.453056][ C0] __schedule+0x8e1/0x1eb0 [ 1714.457451][ C0] ? io_schedule_timeout+0x140/0x140 [ 1714.462718][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1714.467642][ C0] schedule+0xd0/0x2a0 [ 1714.471691][ C0] __do_sys_pause+0x76/0xe0 [ 1714.476183][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1714.481278][ C0] do_int80_syscall_32+0x31/0x60 [ 1714.486200][ C0] entry_INT80_compat+0x74/0x79 [ 1714.491021][ C0] RIP: 0023:0xf7f53569 [ 1714.495054][ C0] Code: Bad RIP value. [ 1714.499090][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1714.507485][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1714.515428][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1714.523386][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1714.531330][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.539274][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.547230][ C0] syz-executor.5 S29096 873 7432 0x20020000 [ 1714.553533][ C0] Call Trace: [ 1714.556797][ C0] __schedule+0x8e1/0x1eb0 [ 1714.561190][ C0] ? io_schedule_timeout+0x140/0x140 [ 1714.566451][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1714.571888][ C0] schedule+0xd0/0x2a0 [ 1714.575932][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1714.581016][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1714.586201][ C0] futex_wait+0x1df/0x560 [ 1714.590854][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1714.595855][ C0] ? mark_lock+0xbc/0x1710 [ 1714.600244][ C0] ? hash_futex+0x12/0x200 [ 1714.604650][ C0] ? futex_wake+0x155/0x490 [ 1714.609135][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1714.615089][ C0] do_futex+0x15b/0x1a60 [ 1714.619309][ C0] ? lock_acquire+0x1f1/0xad0 [ 1714.623960][ C0] ? __might_fault+0xef/0x1d0 [ 1714.628614][ C0] ? find_held_lock+0x2d/0x110 [ 1714.633369][ C0] ? futex_exit_release+0x220/0x220 [ 1714.638543][ C0] ? lock_downgrade+0x820/0x820 [ 1714.643367][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1714.649585][ C0] ? __might_fault+0x190/0x1d0 [ 1714.654320][ C0] ? _copy_to_user+0x126/0x160 [ 1714.659064][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1714.664497][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1714.670017][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1714.675882][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1714.680793][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1714.685882][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1714.690971][ C0] do_fast_syscall_32+0x7f/0x120 [ 1714.695884][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1714.700968][ C0] RIP: 0023:0xf7f53569 [ 1714.705018][ C0] Code: Bad RIP value. [ 1714.709056][ C0] RSP: 002b:00000000f5d2d12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1714.717438][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1714.725384][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1714.733328][ C0] RBP: 00000000f5d2d228 R08: 0000000000000000 R09: 0000000000000000 [ 1714.741282][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.749226][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.757194][ C0] syz-executor.5 S29944 886 7432 0x20020000 [ 1714.763499][ C0] Call Trace: [ 1714.766779][ C0] __schedule+0x8e1/0x1eb0 [ 1714.771174][ C0] ? io_schedule_timeout+0x140/0x140 [ 1714.776431][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1714.781345][ C0] schedule+0xd0/0x2a0 [ 1714.785391][ C0] __do_sys_pause+0x76/0xe0 [ 1714.789890][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1714.794974][ C0] do_int80_syscall_32+0x31/0x60 [ 1714.799899][ C0] entry_INT80_compat+0x74/0x79 [ 1714.804719][ C0] RIP: 0023:0xf7f53569 [ 1714.808762][ C0] Code: Bad RIP value. [ 1714.812815][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1714.821197][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1714.829140][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1714.837084][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1714.845041][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.852984][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.860938][ C0] syz-executor.5 S29944 921 7432 0x20020000 [ 1714.867248][ C0] Call Trace: [ 1714.870514][ C0] __schedule+0x8e1/0x1eb0 [ 1714.874908][ C0] ? io_schedule_timeout+0x140/0x140 [ 1714.880177][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1714.885092][ C0] schedule+0xd0/0x2a0 [ 1714.889137][ C0] __do_sys_pause+0x76/0xe0 [ 1714.893615][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1714.898699][ C0] do_int80_syscall_32+0x31/0x60 [ 1714.903609][ C0] entry_INT80_compat+0x74/0x79 [ 1714.908429][ C0] RIP: 0023:0xf7f53569 [ 1714.912462][ C0] Code: Bad RIP value. [ 1714.916499][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1714.924893][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1714.933890][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1714.941834][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1714.949778][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1714.957735][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1714.965701][ C0] syz-executor.1 S29944 953 6979 0x20020000 [ 1714.972008][ C0] Call Trace: [ 1714.975274][ C0] __schedule+0x8e1/0x1eb0 [ 1714.979670][ C0] ? io_schedule_timeout+0x140/0x140 [ 1714.984928][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1714.990367][ C0] schedule+0xd0/0x2a0 [ 1714.994419][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1714.999504][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1715.004672][ C0] ? futex_wake+0x1b5/0x490 [ 1715.009160][ C0] ? find_held_lock+0x2d/0x110 [ 1715.013897][ C0] futex_wait+0x1df/0x560 [ 1715.018200][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1715.023221][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1715.028146][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1715.033318][ C0] ? futex_wake+0x155/0x490 [ 1715.037823][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1715.043796][ C0] do_futex+0x15b/0x1a60 [ 1715.048040][ C0] ? lock_acquire+0x1f1/0xad0 [ 1715.052695][ C0] ? __might_fault+0xef/0x1d0 [ 1715.057348][ C0] ? find_held_lock+0x2d/0x110 [ 1715.062086][ C0] ? futex_exit_release+0x220/0x220 [ 1715.067258][ C0] ? lock_downgrade+0x820/0x820 [ 1715.072084][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1715.078301][ C0] ? __might_fault+0x190/0x1d0 [ 1715.083040][ C0] ? _copy_to_user+0x126/0x160 [ 1715.087786][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1715.093225][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1715.098756][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1715.104626][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1715.109563][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1715.114665][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1715.119750][ C0] do_fast_syscall_32+0x7f/0x120 [ 1715.124675][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1715.129761][ C0] RIP: 0023:0xf7fa1569 [ 1715.133824][ C0] Code: Bad RIP value. [ 1715.137863][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1715.146259][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1715.154208][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1715.162152][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1715.170096][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1715.178175][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.186145][ C0] syz-executor.5 S30024 969 7432 0x20020000 [ 1715.192498][ C0] Call Trace: [ 1715.195805][ C0] __schedule+0x8e1/0x1eb0 [ 1715.200202][ C0] ? io_schedule_timeout+0x140/0x140 [ 1715.205462][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1715.210378][ C0] schedule+0xd0/0x2a0 [ 1715.214427][ C0] __do_sys_pause+0x76/0xe0 [ 1715.218907][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1715.223992][ C0] do_int80_syscall_32+0x31/0x60 [ 1715.228904][ C0] entry_INT80_compat+0x74/0x79 [ 1715.233784][ C0] RIP: 0023:0xf7f53569 [ 1715.237855][ C0] Code: Bad RIP value. [ 1715.241893][ C0] RSP: 002b:00000000f5d4e0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1715.250278][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1715.258240][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1715.266243][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1715.274195][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1715.282140][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.290100][ C0] syz-executor.2 S29328 1120 7031 0x20020000 [ 1715.296409][ C0] Call Trace: [ 1715.299680][ C0] __schedule+0x8e1/0x1eb0 [ 1715.304075][ C0] ? io_schedule_timeout+0x140/0x140 [ 1715.309335][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1715.314772][ C0] schedule+0xd0/0x2a0 [ 1715.318838][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1715.323922][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1715.329096][ C0] futex_wait+0x1df/0x560 [ 1715.333404][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1715.338401][ C0] ? mark_lock+0xbc/0x1710 [ 1715.342795][ C0] ? hash_futex+0x12/0x200 [ 1715.347186][ C0] ? futex_wake+0x155/0x490 [ 1715.351673][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1715.357626][ C0] do_futex+0x15b/0x1a60 [ 1715.361852][ C0] ? lock_acquire+0x1f1/0xad0 [ 1715.366503][ C0] ? __might_fault+0xef/0x1d0 [ 1715.371153][ C0] ? find_held_lock+0x2d/0x110 [ 1715.375889][ C0] ? futex_exit_release+0x220/0x220 [ 1715.381083][ C0] ? lock_downgrade+0x820/0x820 [ 1715.385914][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1715.392139][ C0] ? __might_fault+0x190/0x1d0 [ 1715.396884][ C0] ? _copy_to_user+0x126/0x160 [ 1715.401632][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1715.407076][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1715.412599][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1715.418478][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1715.423427][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1715.428565][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1715.433651][ C0] do_fast_syscall_32+0x7f/0x120 [ 1715.438574][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1715.443658][ C0] RIP: 0023:0xf7f91569 [ 1715.447693][ C0] Code: Bad RIP value. [ 1715.451731][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1715.460198][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1715.468142][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1715.476087][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1715.484265][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1715.492210][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.500168][ C0] syz-executor.2 S29944 1130 7031 0x20020000 [ 1715.506475][ C0] Call Trace: [ 1715.509745][ C0] __schedule+0x8e1/0x1eb0 [ 1715.514139][ C0] ? io_schedule_timeout+0x140/0x140 [ 1715.519399][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1715.524849][ C0] schedule+0xd0/0x2a0 [ 1715.528893][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1715.533977][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1715.539149][ C0] futex_wait+0x1df/0x560 [ 1715.543455][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1715.548456][ C0] ? wake_up_q+0xa3/0x100 [ 1715.552759][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1715.557947][ C0] ? futex_wake+0x155/0x490 [ 1715.562432][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1715.568385][ C0] do_futex+0x15b/0x1a60 [ 1715.572605][ C0] ? lock_acquire+0x1f1/0xad0 [ 1715.577256][ C0] ? __might_fault+0xef/0x1d0 [ 1715.581906][ C0] ? find_held_lock+0x2d/0x110 [ 1715.586645][ C0] ? futex_exit_release+0x220/0x220 [ 1715.591819][ C0] ? lock_downgrade+0x820/0x820 [ 1715.596644][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1715.602862][ C0] ? __might_fault+0x190/0x1d0 [ 1715.607601][ C0] ? _copy_to_user+0x126/0x160 [ 1715.612357][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1715.617791][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1715.622701][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1715.628221][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1715.633138][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1715.638240][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1715.643324][ C0] do_fast_syscall_32+0x7f/0x120 [ 1715.648238][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1715.653321][ C0] RIP: 0023:0xf7f91569 [ 1715.657357][ C0] Code: Bad RIP value. [ 1715.661410][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1715.669793][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1715.677739][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1715.685698][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1715.693643][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1715.701588][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.709546][ C0] syz-executor.2 S29944 1153 7031 0x20020000 [ 1715.715855][ C0] Call Trace: [ 1715.719121][ C0] __schedule+0x8e1/0x1eb0 [ 1715.723515][ C0] ? io_schedule_timeout+0x140/0x140 [ 1715.728776][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1715.734212][ C0] schedule+0xd0/0x2a0 [ 1715.738276][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1715.743360][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1715.748549][ C0] futex_wait+0x1df/0x560 [ 1715.752853][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1715.757854][ C0] ? wake_up_q+0xa3/0x100 [ 1715.762155][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1715.767327][ C0] ? futex_wake+0x155/0x490 [ 1715.771824][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1715.777862][ C0] do_futex+0x15b/0x1a60 [ 1715.782081][ C0] ? lock_acquire+0x1f1/0xad0 [ 1715.786731][ C0] ? __might_fault+0xef/0x1d0 [ 1715.791381][ C0] ? find_held_lock+0x2d/0x110 [ 1715.796118][ C0] ? futex_exit_release+0x220/0x220 [ 1715.801299][ C0] ? lock_downgrade+0x820/0x820 [ 1715.806136][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1715.812529][ C0] ? __might_fault+0x190/0x1d0 [ 1715.817265][ C0] ? _copy_to_user+0x126/0x160 [ 1715.822006][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1715.827439][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1715.832348][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1715.837866][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1715.842776][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1715.847862][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1715.852962][ C0] do_fast_syscall_32+0x7f/0x120 [ 1715.857873][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1715.862954][ C0] RIP: 0023:0xf7f91569 [ 1715.866988][ C0] Code: Bad RIP value. [ 1715.871026][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1715.879409][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1715.887354][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1715.895494][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1715.903449][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1715.911404][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.919368][ C0] syz-executor.2 S29544 1180 7031 0x20020000 [ 1715.925679][ C0] Call Trace: [ 1715.928948][ C0] __schedule+0x8e1/0x1eb0 [ 1715.933391][ C0] ? io_schedule_timeout+0x140/0x140 [ 1715.938694][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1715.944131][ C0] schedule+0xd0/0x2a0 [ 1715.948222][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1715.953308][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1715.958484][ C0] futex_wait+0x1df/0x560 [ 1715.962789][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1715.967803][ C0] ? wake_up_q+0xa3/0x100 [ 1715.972104][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1715.977276][ C0] ? futex_wake+0x155/0x490 [ 1715.981762][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1715.987717][ C0] do_futex+0x15b/0x1a60 [ 1715.991937][ C0] ? lock_acquire+0x1f1/0xad0 [ 1715.996587][ C0] ? __might_fault+0xef/0x1d0 [ 1716.001238][ C0] ? find_held_lock+0x2d/0x110 [ 1716.005976][ C0] ? futex_exit_release+0x220/0x220 [ 1716.011148][ C0] ? lock_downgrade+0x820/0x820 [ 1716.015985][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1716.022201][ C0] ? __might_fault+0x190/0x1d0 [ 1716.026938][ C0] ? _copy_to_user+0x126/0x160 [ 1716.031678][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1716.037115][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1716.042030][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1716.047551][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1716.052462][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1716.057554][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1716.062639][ C0] do_fast_syscall_32+0x7f/0x120 [ 1716.067552][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1716.072649][ C0] RIP: 0023:0xf7f91569 [ 1716.076685][ C0] Code: Bad RIP value. [ 1716.080724][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1716.089106][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1716.097064][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1716.105020][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1716.112965][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1716.120908][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1716.128866][ C0] syz-executor.1 S29944 1712 6979 0x20020000 [ 1716.135176][ C0] Call Trace: [ 1716.138444][ C0] __schedule+0x8e1/0x1eb0 [ 1716.142844][ C0] ? io_schedule_timeout+0x140/0x140 [ 1716.148118][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1716.153554][ C0] schedule+0xd0/0x2a0 [ 1716.157601][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1716.162685][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1716.167861][ C0] futex_wait+0x1df/0x560 [ 1716.172166][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1716.177165][ C0] ? mark_lock+0xbc/0x1710 [ 1716.181555][ C0] ? hash_futex+0x12/0x200 [ 1716.185962][ C0] ? futex_wake+0x155/0x490 [ 1716.190448][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1716.196416][ C0] do_futex+0x15b/0x1a60 [ 1716.200640][ C0] ? lock_acquire+0x1f1/0xad0 [ 1716.205291][ C0] ? __might_fault+0xef/0x1d0 [ 1716.209941][ C0] ? find_held_lock+0x2d/0x110 [ 1716.214680][ C0] ? futex_exit_release+0x220/0x220 [ 1716.219859][ C0] ? lock_downgrade+0x820/0x820 [ 1716.224683][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1716.230902][ C0] ? __might_fault+0x190/0x1d0 [ 1716.235640][ C0] ? _copy_to_user+0x126/0x160 [ 1716.240396][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1716.245849][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1716.251368][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1716.257248][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1716.262159][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1716.267248][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1716.272332][ C0] do_fast_syscall_32+0x7f/0x120 [ 1716.277259][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1716.282343][ C0] RIP: 0023:0xf7fa1569 [ 1716.286378][ C0] Code: Bad RIP value. [ 1716.290417][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1716.298814][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1716.306786][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1716.314733][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1716.322677][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1716.330639][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1716.338613][ C0] kworker/0:4 I24568 1742 2 0x00004000 [ 1716.344956][ C0] Workqueue: 0x0 (events) [ 1716.349353][ C0] Call Trace: [ 1716.352680][ C0] __schedule+0x8e1/0x1eb0 [ 1716.357086][ C0] ? io_schedule_timeout+0x140/0x140 [ 1716.362381][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1716.367556][ C0] schedule+0xd0/0x2a0 [ 1716.371603][ C0] worker_thread+0x14c/0x1120 [ 1716.376289][ C0] ? process_one_work+0x1670/0x1670 [ 1716.381598][ C0] kthread+0x3b5/0x4a0 [ 1716.385649][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.390735][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.395826][ C0] ret_from_fork+0x1f/0x30 [ 1716.400224][ C0] kworker/0:7 I24440 1745 2 0x00004000 [ 1716.406560][ C0] Workqueue: 0x0 (events) [ 1716.410974][ C0] Call Trace: [ 1716.414242][ C0] __schedule+0x8e1/0x1eb0 [ 1716.418638][ C0] ? io_schedule_timeout+0x140/0x140 [ 1716.423898][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1716.429072][ C0] schedule+0xd0/0x2a0 [ 1716.433119][ C0] worker_thread+0x14c/0x1120 [ 1716.437798][ C0] ? process_one_work+0x1670/0x1670 [ 1716.442982][ C0] kthread+0x3b5/0x4a0 [ 1716.447036][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.452129][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.457407][ C0] ret_from_fork+0x1f/0x30 [ 1716.461846][ C0] kworker/0:8 I25816 1747 2 0x00004000 [ 1716.468188][ C0] Workqueue: 0x0 (events) [ 1716.472577][ C0] Call Trace: [ 1716.475845][ C0] __schedule+0x8e1/0x1eb0 [ 1716.480244][ C0] ? io_schedule_timeout+0x140/0x140 [ 1716.485519][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1716.490694][ C0] schedule+0xd0/0x2a0 [ 1716.494740][ C0] worker_thread+0x14c/0x1120 [ 1716.499404][ C0] ? process_one_work+0x1670/0x1670 [ 1716.504581][ C0] kthread+0x3b5/0x4a0 [ 1716.508652][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.513736][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.518869][ C0] ret_from_fork+0x1f/0x30 [ 1716.523267][ C0] kworker/0:9 I23296 1748 2 0x00004000 [ 1716.529577][ C0] Workqueue: 0x0 (events) [ 1716.534022][ C0] Call Trace: [ 1716.537301][ C0] __schedule+0x8e1/0x1eb0 [ 1716.541695][ C0] ? io_schedule_timeout+0x140/0x140 [ 1716.546954][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1716.552126][ C0] schedule+0xd0/0x2a0 [ 1716.556173][ C0] worker_thread+0x14c/0x1120 [ 1716.560846][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1716.565846][ C0] ? process_one_work+0x1670/0x1670 [ 1716.571017][ C0] kthread+0x3b5/0x4a0 [ 1716.575076][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.580175][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1716.585262][ C0] ret_from_fork+0x1f/0x30 [ 1716.589658][ C0] syz-executor.1 S29904 1824 6979 0x20020000 [ 1716.595965][ C0] Call Trace: [ 1716.599232][ C0] __schedule+0x8e1/0x1eb0 [ 1716.603638][ C0] ? io_schedule_timeout+0x140/0x140 [ 1716.608902][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1716.614338][ C0] schedule+0xd0/0x2a0 [ 1716.618418][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1716.623506][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1716.628698][ C0] futex_wait+0x1df/0x560 [ 1716.633002][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1716.638001][ C0] ? mark_lock+0xbc/0x1710 [ 1716.642408][ C0] ? hash_futex+0x12/0x200 [ 1716.646797][ C0] ? futex_wake+0x155/0x490 [ 1716.651282][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1716.657239][ C0] do_futex+0x15b/0x1a60 [ 1716.661459][ C0] ? lock_acquire+0x1f1/0xad0 [ 1716.666111][ C0] ? __might_fault+0xef/0x1d0 [ 1716.670761][ C0] ? find_held_lock+0x2d/0x110 [ 1716.675497][ C0] ? futex_exit_release+0x220/0x220 [ 1716.680670][ C0] ? lock_downgrade+0x820/0x820 [ 1716.685512][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1716.691730][ C0] ? __might_fault+0x190/0x1d0 [ 1716.696467][ C0] ? _copy_to_user+0x126/0x160 [ 1716.701211][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1716.706671][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1716.712217][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1716.718095][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1716.723006][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1716.728095][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1716.733180][ C0] do_fast_syscall_32+0x7f/0x120 [ 1716.738095][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1716.743178][ C0] RIP: 0023:0xf7fa1569 [ 1716.747221][ C0] Code: Bad RIP value. [ 1716.751275][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1716.759670][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1716.767614][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1716.775558][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1716.783506][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1716.791450][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1716.799405][ C0] syz-executor.1 S29904 1848 6979 0x20020000 [ 1716.805712][ C0] Call Trace: [ 1716.808978][ C0] __schedule+0x8e1/0x1eb0 [ 1716.813387][ C0] ? io_schedule_timeout+0x140/0x140 [ 1716.818645][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1716.824095][ C0] schedule+0xd0/0x2a0 [ 1716.828142][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1716.833226][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1716.838414][ C0] ? futex_wake+0x1b5/0x490 [ 1716.842890][ C0] ? find_held_lock+0x2d/0x110 [ 1716.847628][ C0] futex_wait+0x1df/0x560 [ 1716.851935][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1716.856931][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1716.861859][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1716.867031][ C0] ? futex_wake+0x155/0x490 [ 1716.875509][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1716.881481][ C0] do_futex+0x15b/0x1a60 [ 1716.885702][ C0] ? lock_acquire+0x1f1/0xad0 [ 1716.890368][ C0] ? __might_fault+0xef/0x1d0 [ 1716.895035][ C0] ? find_held_lock+0x2d/0x110 [ 1716.899772][ C0] ? futex_exit_release+0x220/0x220 [ 1716.904945][ C0] ? lock_downgrade+0x820/0x820 [ 1716.909785][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1716.916002][ C0] ? __might_fault+0x190/0x1d0 [ 1716.920739][ C0] ? _copy_to_user+0x126/0x160 [ 1716.925480][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1716.930916][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1716.936436][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1716.942303][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1716.947215][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1716.952324][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1716.957409][ C0] do_fast_syscall_32+0x7f/0x120 [ 1716.962322][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1716.967406][ C0] RIP: 0023:0xf7fa1569 [ 1716.971458][ C0] Code: Bad RIP value. [ 1716.975497][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1716.983881][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1716.991827][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1716.999773][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1717.011018][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1717.018963][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1717.026930][ C0] kworker/1:0 I24176 1849 2 0x00004000 [ 1717.033262][ C0] Workqueue: 0x0 (wg-crypt-wg2) [ 1717.038190][ C0] Call Trace: [ 1717.041461][ C0] __schedule+0x8e1/0x1eb0 [ 1717.045879][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.051164][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1717.056365][ C0] schedule+0xd0/0x2a0 [ 1717.060412][ C0] worker_thread+0x14c/0x1120 [ 1717.065072][ C0] ? process_one_work+0x1670/0x1670 [ 1717.070245][ C0] kthread+0x3b5/0x4a0 [ 1717.074286][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1717.079373][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1717.084462][ C0] ret_from_fork+0x1f/0x30 [ 1717.088857][ C0] kworker/1:1 I23848 1850 2 0x00004000 [ 1717.095180][ C0] Workqueue: 0x0 (events) [ 1717.099569][ C0] Call Trace: [ 1717.102838][ C0] __schedule+0x8e1/0x1eb0 [ 1717.107236][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.112585][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1717.117761][ C0] schedule+0xd0/0x2a0 [ 1717.121828][ C0] worker_thread+0x14c/0x1120 [ 1717.126488][ C0] ? process_one_work+0x1670/0x1670 [ 1717.131680][ C0] kthread+0x3b5/0x4a0 [ 1717.135813][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1717.140908][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1717.145997][ C0] ret_from_fork+0x1f/0x30 [ 1717.150396][ C0] kworker/1:2 I23376 1851 2 0x00004000 [ 1717.156714][ C0] Workqueue: 0x0 (wg-crypt-wg0) [ 1717.161624][ C0] Call Trace: [ 1717.165847][ C0] __schedule+0x8e1/0x1eb0 [ 1717.170244][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.175506][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1717.180690][ C0] schedule+0xd0/0x2a0 [ 1717.184758][ C0] worker_thread+0x14c/0x1120 [ 1717.189418][ C0] ? process_one_work+0x1670/0x1670 [ 1717.194592][ C0] kthread+0x3b5/0x4a0 [ 1717.198660][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1717.203754][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1717.208859][ C0] ret_from_fork+0x1f/0x30 [ 1717.213291][ C0] syz-executor.2 T29872 2544 7031 0x20024004 [ 1717.219613][ C0] Call Trace: [ 1717.222883][ C0] __schedule+0x8e1/0x1eb0 [ 1717.227280][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.232540][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1717.237739][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1717.243698][ C0] schedule+0xd0/0x2a0 [ 1717.247750][ C0] do_signal_stop+0x32f/0x840 [ 1717.252410][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1717.257933][ C0] get_signal+0x8b8/0x1fc0 [ 1717.262337][ C0] do_signal+0x82/0x2520 [ 1717.266557][ C0] ? finish_task_switch+0x147/0x750 [ 1717.271730][ C0] ? finish_task_switch+0x119/0x750 [ 1717.276902][ C0] ? __switch_to+0x4fb/0xe80 [ 1717.281472][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1717.286825][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.292087][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1717.297974][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1717.303754][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1717.309716][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1717.315413][ C0] do_fast_syscall_32+0x7f/0x120 [ 1717.320327][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1717.325414][ C0] RIP: 0023:0xf7f91569 [ 1717.329469][ C0] Code: Bad RIP value. [ 1717.333609][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1717.342005][ C0] RAX: fffffffffffffdfe RBX: 0000000000000000 RCX: 0000000000000000 [ 1717.350015][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.357963][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1717.365910][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1717.373858][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1717.381825][ C0] syz-executor.2 S29944 2564 7031 0x20020000 [ 1717.388150][ C0] Call Trace: [ 1717.391449][ C0] __schedule+0x8e1/0x1eb0 [ 1717.395865][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.401133][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1717.406623][ C0] schedule+0xd0/0x2a0 [ 1717.410721][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1717.415927][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1717.421104][ C0] futex_wait+0x1df/0x560 [ 1717.425412][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1717.430415][ C0] ? mark_lock+0xbc/0x1710 [ 1717.434914][ C0] ? hash_futex+0x12/0x200 [ 1717.439305][ C0] ? futex_wake+0x155/0x490 [ 1717.443895][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1717.449852][ C0] do_futex+0x15b/0x1a60 [ 1717.454076][ C0] ? lock_acquire+0x1f1/0xad0 [ 1717.458728][ C0] ? __might_fault+0xef/0x1d0 [ 1717.463391][ C0] ? find_held_lock+0x2d/0x110 [ 1717.468130][ C0] ? futex_exit_release+0x220/0x220 [ 1717.473306][ C0] ? lock_downgrade+0x820/0x820 [ 1717.478135][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1717.484403][ C0] ? __might_fault+0x190/0x1d0 [ 1717.489149][ C0] ? _copy_to_user+0x126/0x160 [ 1717.493893][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1717.499349][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1717.504870][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1717.510844][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1717.515757][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1717.520849][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1717.525952][ C0] do_fast_syscall_32+0x7f/0x120 [ 1717.530865][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1717.535952][ C0] RIP: 0023:0xf7f91569 [ 1717.539991][ C0] Code: Bad RIP value. [ 1717.544040][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1717.552427][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1717.560391][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1717.568346][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1717.576987][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1717.584948][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1717.592906][ C0] syz-executor.2 T29944 2580 7031 0x20024004 [ 1717.599225][ C0] Call Trace: [ 1717.602500][ C0] __schedule+0x8e1/0x1eb0 [ 1717.606896][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.612157][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1717.617334][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1717.623295][ C0] schedule+0xd0/0x2a0 [ 1717.627342][ C0] do_signal_stop+0x32f/0x840 [ 1717.631995][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1717.637353][ C0] get_signal+0x8b8/0x1fc0 [ 1717.641751][ C0] do_signal+0x82/0x2520 [ 1717.645970][ C0] ? finish_task_switch+0x147/0x750 [ 1717.651143][ C0] ? finish_task_switch+0x119/0x750 [ 1717.656334][ C0] ? __switch_to+0x4fb/0xe80 [ 1717.660903][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1717.666267][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.671528][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1717.677400][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1717.683185][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1717.689160][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1717.694857][ C0] do_fast_syscall_32+0x7f/0x120 [ 1717.699786][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1717.704871][ C0] RIP: 0023:0xf7f91569 [ 1717.708908][ C0] Code: Bad RIP value. [ 1717.712948][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1717.721331][ C0] RAX: fffffffffffffdfe RBX: 0000000000000000 RCX: 0000000000000000 [ 1717.729277][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.737242][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1717.745187][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1717.753220][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1717.761191][ C0] syz-executor.2 T30024 2660 7031 0x20024004 [ 1717.767516][ C0] Call Trace: [ 1717.770783][ C0] __schedule+0x8e1/0x1eb0 [ 1717.775181][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.780441][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1717.785617][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1717.791575][ C0] schedule+0xd0/0x2a0 [ 1717.795624][ C0] do_signal_stop+0x32f/0x840 [ 1717.800291][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1717.805639][ C0] get_signal+0x8b8/0x1fc0 [ 1717.810041][ C0] do_signal+0x82/0x2520 [ 1717.814371][ C0] ? finish_task_switch+0x147/0x750 [ 1717.819550][ C0] ? finish_task_switch+0x119/0x750 [ 1717.824731][ C0] ? __switch_to+0x4fb/0xe80 [ 1717.829309][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1717.834658][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.839941][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1717.845988][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1717.851771][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1717.857732][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1717.863428][ C0] do_fast_syscall_32+0x7f/0x120 [ 1717.868342][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1717.873429][ C0] RIP: 0023:0xf7f91569 [ 1717.877467][ C0] Code: Bad RIP value. [ 1717.881506][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1717.889908][ C0] RAX: fffffffffffffdfe RBX: 0000000000000000 RCX: 0000000000000000 [ 1717.897872][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.905817][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1717.913763][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1717.921709][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1717.929670][ C0] syz-executor.2 T30024 2707 7031 0x20024004 [ 1717.935997][ C0] Call Trace: [ 1717.939266][ C0] __schedule+0x8e1/0x1eb0 [ 1717.943662][ C0] ? io_schedule_timeout+0x140/0x140 [ 1717.948938][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1717.954737][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1717.960695][ C0] schedule+0xd0/0x2a0 [ 1717.964741][ C0] do_signal_stop+0x32f/0x840 [ 1717.969397][ C0] ? trace_signal_deliver+0x1fb/0x290 [ 1717.974746][ C0] get_signal+0x8b8/0x1fc0 [ 1717.979147][ C0] do_signal+0x82/0x2520 [ 1717.983365][ C0] ? finish_task_switch+0x147/0x750 [ 1717.988535][ C0] ? finish_task_switch+0x119/0x750 [ 1717.993794][ C0] ? __switch_to+0x4fb/0xe80 [ 1717.998363][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1718.003715][ C0] ? io_schedule_timeout+0x140/0x140 [ 1718.008978][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1718.014846][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1718.020628][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1718.026599][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1718.032316][ C0] do_fast_syscall_32+0x7f/0x120 [ 1718.037229][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1718.042314][ C0] RIP: 0023:0xf7f91569 [ 1718.046368][ C0] Code: Bad RIP value. [ 1718.050409][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 000000000000001d [ 1718.058798][ C0] RAX: fffffffffffffdfe RBX: 0000000000000000 RCX: 0000000000000000 [ 1718.066780][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1718.074725][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1718.082670][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1718.090644][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.098604][ C0] syz-executor.4 S28976 3224 7392 0x20020000 [ 1718.104911][ C0] Call Trace: [ 1718.108193][ C0] __schedule+0x8e1/0x1eb0 [ 1718.112587][ C0] ? io_schedule_timeout+0x140/0x140 [ 1718.117847][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1718.123287][ C0] schedule+0xd0/0x2a0 [ 1718.127334][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1718.132423][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1718.137599][ C0] futex_wait+0x1df/0x560 [ 1718.141911][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1718.147008][ C0] ? mark_lock+0xbc/0x1710 [ 1718.151401][ C0] ? hash_futex+0x12/0x200 [ 1718.155811][ C0] ? futex_wake+0x155/0x490 [ 1718.160319][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1718.166469][ C0] do_futex+0x15b/0x1a60 [ 1718.170692][ C0] ? lock_acquire+0x1f1/0xad0 [ 1718.175345][ C0] ? __might_fault+0xef/0x1d0 [ 1718.180013][ C0] ? find_held_lock+0x2d/0x110 [ 1718.184752][ C0] ? futex_exit_release+0x220/0x220 [ 1718.189926][ C0] ? lock_downgrade+0x820/0x820 [ 1718.194831][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1718.201080][ C0] ? __might_fault+0x190/0x1d0 [ 1718.205830][ C0] ? _copy_to_user+0x126/0x160 [ 1718.210577][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1718.216023][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1718.221548][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1718.227436][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1718.232351][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1718.237442][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1718.242528][ C0] do_fast_syscall_32+0x7f/0x120 [ 1718.247444][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1718.252533][ C0] RIP: 0023:0xf7fd7569 [ 1718.256573][ C0] Code: Bad RIP value. [ 1718.260616][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1718.269113][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1718.277250][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1718.285199][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1718.293232][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1718.301179][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.311942][ C0] syz-executor.4 S29944 3258 7392 0x20020000 [ 1718.318325][ C0] Call Trace: [ 1718.321603][ C0] __schedule+0x8e1/0x1eb0 [ 1718.326023][ C0] ? io_schedule_timeout+0x140/0x140 [ 1718.331304][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1718.337800][ C0] schedule+0xd0/0x2a0 [ 1718.341852][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1718.346943][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1718.352120][ C0] futex_wait+0x1df/0x560 [ 1718.356430][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1718.361550][ C0] ? wake_up_q+0xa3/0x100 [ 1718.365856][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1718.371138][ C0] ? futex_wake+0x155/0x490 [ 1718.375653][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1718.381735][ C0] do_futex+0x15b/0x1a60 [ 1718.385976][ C0] ? lock_acquire+0x1f1/0xad0 [ 1718.390696][ C0] ? __might_fault+0xef/0x1d0 [ 1718.395355][ C0] ? find_held_lock+0x2d/0x110 [ 1718.400098][ C0] ? futex_exit_release+0x220/0x220 [ 1718.405276][ C0] ? lock_downgrade+0x820/0x820 [ 1718.410114][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1718.416691][ C0] ? __might_fault+0x190/0x1d0 [ 1718.421432][ C0] ? _copy_to_user+0x126/0x160 [ 1718.426196][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1718.431640][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1718.437161][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1718.443033][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1718.448046][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1718.453397][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1718.458595][ C0] do_fast_syscall_32+0x7f/0x120 [ 1718.463510][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1718.468616][ C0] RIP: 0023:0xf7fd7569 [ 1718.472653][ C0] Code: Bad RIP value. [ 1718.476696][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1718.485081][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1718.493047][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1718.501012][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1718.508976][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1718.516923][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.524881][ C0] syz-executor.4 S29944 3307 7392 0x20020000 [ 1718.531190][ C0] Call Trace: [ 1718.534465][ C0] __schedule+0x8e1/0x1eb0 [ 1718.538861][ C0] ? io_schedule_timeout+0x140/0x140 [ 1718.544140][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1718.549579][ C0] schedule+0xd0/0x2a0 [ 1718.553624][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1718.558729][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1718.563903][ C0] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1718.569424][ C0] futex_wait+0x1df/0x560 [ 1718.573732][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1718.578755][ C0] ? mark_lock+0xbc/0x1710 [ 1718.583163][ C0] do_futex+0x15b/0x1a60 [ 1718.587384][ C0] ? lock_acquire+0x1f1/0xad0 [ 1718.592053][ C0] ? remove_entity_load_avg+0x76/0x250 [ 1718.597488][ C0] ? find_held_lock+0x2d/0x110 [ 1718.602287][ C0] ? futex_exit_release+0x220/0x220 [ 1718.607493][ C0] ? finish_task_switch+0x522/0x750 [ 1718.612683][ C0] ? lock_downgrade+0x820/0x820 [ 1718.617603][ C0] ? mod_zone_page_state+0xad/0xd0 [ 1718.622720][ C0] ? free_thread_stack+0x249/0x4a0 [ 1718.627855][ C0] ? put_task_struct_rcu_user+0x5e/0xb0 [ 1718.633376][ C0] ? finish_task_switch+0x532/0x750 [ 1718.638550][ C0] ? __switch_to+0x4fb/0xe80 [ 1718.643121][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1718.648562][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1718.654091][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1718.659007][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1718.664168][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1718.669279][ C0] do_fast_syscall_32+0x7f/0x120 [ 1718.674224][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1718.679313][ C0] RIP: 0023:0xf7fd7569 [ 1718.683350][ C0] Code: Bad RIP value. [ 1718.687391][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1718.695779][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1718.703735][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1718.711768][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1718.719741][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1718.727702][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.735938][ C0] syz-executor.4 S29944 3325 7392 0x20020000 [ 1718.742264][ C0] Call Trace: [ 1718.745538][ C0] __schedule+0x8e1/0x1eb0 [ 1718.749938][ C0] ? io_schedule_timeout+0x140/0x140 [ 1718.755199][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1718.760673][ C0] schedule+0xd0/0x2a0 [ 1718.764892][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1718.770115][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1718.775378][ C0] futex_wait+0x1df/0x560 [ 1718.779686][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1718.784696][ C0] ? wake_up_q+0xa3/0x100 [ 1718.789052][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1718.796136][ C0] ? futex_wake+0x155/0x490 [ 1718.800625][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1718.806637][ C0] do_futex+0x15b/0x1a60 [ 1718.810862][ C0] ? lock_acquire+0x1f1/0xad0 [ 1718.815516][ C0] ? __might_fault+0xef/0x1d0 [ 1718.820167][ C0] ? find_held_lock+0x2d/0x110 [ 1718.824959][ C0] ? futex_exit_release+0x220/0x220 [ 1718.830133][ C0] ? lock_downgrade+0x820/0x820 [ 1718.834980][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1718.841200][ C0] ? __might_fault+0x190/0x1d0 [ 1718.845941][ C0] ? _copy_to_user+0x126/0x160 [ 1718.850683][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1718.856121][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1718.861641][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1718.867518][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1718.872433][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1718.877524][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1718.882611][ C0] do_fast_syscall_32+0x7f/0x120 [ 1718.887526][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1718.892610][ C0] RIP: 0023:0xf7fd7569 [ 1718.896648][ C0] Code: Bad RIP value. [ 1718.900777][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1718.909161][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1718.917108][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1718.925056][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1718.933001][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1718.940946][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1718.948991][ C0] bond10 I30952 3370 2 0x00004000 [ 1718.955301][ C0] Call Trace: [ 1718.958582][ C0] __schedule+0x8e1/0x1eb0 [ 1718.962994][ C0] ? io_schedule_timeout+0x140/0x140 [ 1718.968253][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1718.973253][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1718.978430][ C0] schedule+0xd0/0x2a0 [ 1718.982476][ C0] rescuer_thread+0x7a7/0xd30 [ 1718.987135][ C0] ? worker_thread+0x1120/0x1120 [ 1718.992831][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1718.997934][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1719.003019][ C0] ? worker_thread+0x1120/0x1120 [ 1719.007955][ C0] kthread+0x3b5/0x4a0 [ 1719.011999][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.017081][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.022169][ C0] ret_from_fork+0x1f/0x30 [ 1719.026588][ C0] bond11 I30952 3464 2 0x00004000 [ 1719.032899][ C0] Call Trace: [ 1719.036166][ C0] __schedule+0x8e1/0x1eb0 [ 1719.040564][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.045821][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.050833][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1719.056023][ C0] schedule+0xd0/0x2a0 [ 1719.060087][ C0] rescuer_thread+0x7a7/0xd30 [ 1719.064747][ C0] ? worker_thread+0x1120/0x1120 [ 1719.069680][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1719.074771][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1719.079769][ C0] ? worker_thread+0x1120/0x1120 [ 1719.084704][ C0] kthread+0x3b5/0x4a0 [ 1719.088756][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.093852][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.098956][ C0] ret_from_fork+0x1f/0x30 [ 1719.103538][ C0] bond1 I30952 3506 2 0x00004000 [ 1719.109870][ C0] Call Trace: [ 1719.113141][ C0] __schedule+0x8e1/0x1eb0 [ 1719.117538][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.122797][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.127797][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1719.132970][ C0] schedule+0xd0/0x2a0 [ 1719.137018][ C0] rescuer_thread+0x7a7/0xd30 [ 1719.141680][ C0] ? worker_thread+0x1120/0x1120 [ 1719.146596][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1719.151683][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1719.156686][ C0] ? worker_thread+0x1120/0x1120 [ 1719.161600][ C0] kthread+0x3b5/0x4a0 [ 1719.165645][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.170736][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.175825][ C0] ret_from_fork+0x1f/0x30 [ 1719.180222][ C0] bond2 I30952 3577 2 0x00004000 [ 1719.186706][ C0] Call Trace: [ 1719.189988][ C0] __schedule+0x8e1/0x1eb0 [ 1719.194388][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.199653][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.204655][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1719.209872][ C0] schedule+0xd0/0x2a0 [ 1719.213921][ C0] rescuer_thread+0x7a7/0xd30 [ 1719.218581][ C0] ? worker_thread+0x1120/0x1120 [ 1719.223623][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1719.228722][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1719.233731][ C0] ? worker_thread+0x1120/0x1120 [ 1719.238652][ C0] kthread+0x3b5/0x4a0 [ 1719.242695][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.247794][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.252888][ C0] ret_from_fork+0x1f/0x30 [ 1719.257404][ C0] bond12 I30712 3619 2 0x00004000 [ 1719.263720][ C0] Call Trace: [ 1719.266990][ C0] __schedule+0x8e1/0x1eb0 [ 1719.271429][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.276713][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.281720][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1719.286894][ C0] schedule+0xd0/0x2a0 [ 1719.290939][ C0] rescuer_thread+0x7a7/0xd30 [ 1719.295601][ C0] ? worker_thread+0x1120/0x1120 [ 1719.300518][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1719.305716][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1719.310732][ C0] ? worker_thread+0x1120/0x1120 [ 1719.315651][ C0] kthread+0x3b5/0x4a0 [ 1719.319700][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.324785][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.329876][ C0] ret_from_fork+0x1f/0x30 [ 1719.334295][ C0] bond3 I30952 3723 2 0x00004000 [ 1719.340641][ C0] Call Trace: [ 1719.343923][ C0] __schedule+0x8e1/0x1eb0 [ 1719.348342][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.353673][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.358678][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1719.363861][ C0] schedule+0xd0/0x2a0 [ 1719.367919][ C0] rescuer_thread+0x7a7/0xd30 [ 1719.372584][ C0] ? worker_thread+0x1120/0x1120 [ 1719.378152][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1719.383244][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1719.388770][ C0] ? worker_thread+0x1120/0x1120 [ 1719.393729][ C0] kthread+0x3b5/0x4a0 [ 1719.397773][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.402906][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.407997][ C0] ret_from_fork+0x1f/0x30 [ 1719.412399][ C0] bond13 I30344 3760 2 0x00004000 [ 1719.418715][ C0] Call Trace: [ 1719.421985][ C0] __schedule+0x8e1/0x1eb0 [ 1719.426397][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.431656][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.436681][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1719.441857][ C0] schedule+0xd0/0x2a0 [ 1719.445904][ C0] rescuer_thread+0x7a7/0xd30 [ 1719.450562][ C0] ? worker_thread+0x1120/0x1120 [ 1719.455477][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1719.460568][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1719.465568][ C0] ? worker_thread+0x1120/0x1120 [ 1719.470495][ C0] kthread+0x3b5/0x4a0 [ 1719.474544][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.479641][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1719.484729][ C0] ret_from_fork+0x1f/0x30 [ 1719.489144][ C0] syz-executor.2 D26528 4134 7031 0x20024000 [ 1719.495453][ C0] Call Trace: [ 1719.498718][ C0] __schedule+0x8e1/0x1eb0 [ 1719.503131][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.508400][ C0] schedule+0xd0/0x2a0 [ 1719.512457][ C0] schedule_timeout+0x1d8/0x250 [ 1719.517293][ C0] ? usleep_range+0x170/0x170 [ 1719.521947][ C0] ? lock_downgrade+0x820/0x820 [ 1719.526775][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.531777][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1719.536948][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1719.542902][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1719.547924][ C0] wait_for_completion_killable+0x162/0x310 [ 1719.553790][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1719.558791][ C0] ? wait_for_completion_killable_timeout+0x2e0/0x2e0 [ 1719.565546][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1719.571504][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1719.576510][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1719.581599][ C0] _do_fork+0x5d7/0xa70 [ 1719.585736][ C0] ? copy_init_mm+0x20/0x20 [ 1719.590220][ C0] ? legacy_clone_args_valid+0x36/0x50 [ 1719.595657][ C0] __do_compat_sys_ia32_clone+0xbe/0x110 [ 1719.601285][ C0] ? pci_biosrom_size+0x90/0x90 [ 1719.606120][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1719.611210][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1719.617181][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1719.622188][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1719.627276][ C0] do_fast_syscall_32+0x7f/0x120 [ 1719.632221][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1719.637307][ C0] RIP: 0023:0xf7f91569 [ 1719.641346][ C0] Code: Bad RIP value. [ 1719.645385][ C0] RSP: 002b:00000000f5d8c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 1719.653772][ C0] RAX: ffffffffffffffda RBX: 00000000e1004d7c RCX: 0000000000000000 [ 1719.661729][ C0] RDX: 0000000099999999 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1719.669678][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1719.677642][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1719.685600][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1719.693570][ C0] syz-executor.2 S29944 4167 4134 0x20020000 [ 1719.699901][ C0] Call Trace: [ 1719.703184][ C0] __schedule+0x8e1/0x1eb0 [ 1719.707585][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.712865][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1719.718307][ C0] schedule+0xd0/0x2a0 [ 1719.722352][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1719.727441][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1719.732642][ C0] ? futex_wake+0x1b5/0x490 [ 1719.737121][ C0] ? find_held_lock+0x2d/0x110 [ 1719.741886][ C0] futex_wait+0x1df/0x560 [ 1719.746196][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1719.751211][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1719.756126][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1719.761300][ C0] ? futex_wake+0x155/0x490 [ 1719.765790][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1719.771747][ C0] do_futex+0x15b/0x1a60 [ 1719.775988][ C0] ? lock_acquire+0x1f1/0xad0 [ 1719.780651][ C0] ? __might_fault+0xef/0x1d0 [ 1719.785303][ C0] ? find_held_lock+0x2d/0x110 [ 1719.790046][ C0] ? futex_exit_release+0x220/0x220 [ 1719.795225][ C0] ? lock_downgrade+0x820/0x820 [ 1719.800052][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1719.806273][ C0] ? __might_fault+0x190/0x1d0 [ 1719.811013][ C0] ? _copy_to_user+0x126/0x160 [ 1719.815755][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1719.821192][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1719.826713][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1719.832585][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1719.837500][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1719.842590][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1719.847677][ C0] do_fast_syscall_32+0x7f/0x120 [ 1719.852591][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1719.857701][ C0] RIP: 0023:0xf7f91569 [ 1719.861740][ C0] Code: Bad RIP value. [ 1719.865781][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1719.874183][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1719.882139][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1719.890084][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1719.898033][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1719.905994][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1719.913952][ C0] syz-executor.2 S29704 4217 7031 0x20020000 [ 1719.920275][ C0] Call Trace: [ 1719.923545][ C0] __schedule+0x8e1/0x1eb0 [ 1719.928028][ C0] ? io_schedule_timeout+0x140/0x140 [ 1719.933290][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1719.938901][ C0] schedule+0xd0/0x2a0 [ 1719.942967][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1719.948060][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1719.953236][ C0] ? unwind_next_frame+0xe3b/0x1f90 [ 1719.958410][ C0] futex_wait+0x1df/0x560 [ 1719.962717][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1719.967720][ C0] ? mark_lock+0xbc/0x1710 [ 1719.972116][ C0] ? hash_futex+0x12/0x200 [ 1719.976508][ C0] ? futex_wake+0x155/0x490 [ 1719.981691][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1719.987910][ C0] do_futex+0x15b/0x1a60 [ 1719.992133][ C0] ? lock_acquire+0x1f1/0xad0 [ 1719.996790][ C0] ? __might_fault+0xef/0x1d0 [ 1720.001461][ C0] ? find_held_lock+0x2d/0x110 [ 1720.006216][ C0] ? futex_exit_release+0x220/0x220 [ 1720.011393][ C0] ? lock_downgrade+0x820/0x820 [ 1720.016221][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1720.022458][ C0] ? __might_fault+0x190/0x1d0 [ 1720.027196][ C0] ? _copy_to_user+0x126/0x160 [ 1720.031958][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1720.037396][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1720.042917][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1720.048788][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1720.053702][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1720.058792][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1720.063879][ C0] do_fast_syscall_32+0x7f/0x120 [ 1720.068793][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1720.073878][ C0] RIP: 0023:0xf7f91569 [ 1720.077916][ C0] Code: Bad RIP value. [ 1720.081971][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1720.090360][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1720.098309][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1720.106255][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1720.114202][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.122153][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.130112][ C0] syz-executor.2 S29944 4291 7031 0x20020000 [ 1720.136420][ C0] Call Trace: [ 1720.139692][ C0] __schedule+0x8e1/0x1eb0 [ 1720.144090][ C0] ? io_schedule_timeout+0x140/0x140 [ 1720.149354][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1720.154808][ C0] schedule+0xd0/0x2a0 [ 1720.158857][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1720.163958][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1720.169131][ C0] ? futex_wake+0x1b5/0x490 [ 1720.173609][ C0] ? find_held_lock+0x2d/0x110 [ 1720.178375][ C0] futex_wait+0x1df/0x560 [ 1720.182683][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1720.187683][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1720.192597][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1720.197769][ C0] ? futex_wake+0x155/0x490 [ 1720.202255][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1720.208211][ C0] do_futex+0x15b/0x1a60 [ 1720.212433][ C0] ? lock_acquire+0x1f1/0xad0 [ 1720.217087][ C0] ? __might_fault+0xef/0x1d0 [ 1720.221739][ C0] ? find_held_lock+0x2d/0x110 [ 1720.227000][ C0] ? futex_exit_release+0x220/0x220 [ 1720.232176][ C0] ? lock_downgrade+0x820/0x820 [ 1720.237003][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1720.243484][ C0] ? __might_fault+0x190/0x1d0 [ 1720.248235][ C0] ? _copy_to_user+0x126/0x160 [ 1720.253149][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1720.258602][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1720.264133][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1720.270013][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1720.274952][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1720.280062][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1720.285169][ C0] do_fast_syscall_32+0x7f/0x120 [ 1720.290089][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1720.295176][ C0] RIP: 0023:0xf7f91569 [ 1720.299217][ C0] Code: Bad RIP value. [ 1720.303257][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1720.311643][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1720.321151][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1720.329099][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1720.337045][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.345007][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.352974][ C0] syz-executor.2 S29944 4361 7031 0x20020000 [ 1720.359295][ C0] Call Trace: [ 1720.362572][ C0] __schedule+0x8e1/0x1eb0 [ 1720.367025][ C0] ? io_schedule_timeout+0x140/0x140 [ 1720.372293][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1720.377732][ C0] schedule+0xd0/0x2a0 [ 1720.381906][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1720.387010][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1720.392190][ C0] ? futex_wake+0x1b5/0x490 [ 1720.396672][ C0] ? find_held_lock+0x2d/0x110 [ 1720.401413][ C0] futex_wait+0x1df/0x560 [ 1720.405722][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1720.410719][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1720.415631][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1720.420803][ C0] ? futex_wake+0x155/0x490 [ 1720.425289][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1720.431243][ C0] do_futex+0x15b/0x1a60 [ 1720.435464][ C0] ? lock_acquire+0x1f1/0xad0 [ 1720.440114][ C0] ? __might_fault+0xef/0x1d0 [ 1720.444763][ C0] ? find_held_lock+0x2d/0x110 [ 1720.449508][ C0] ? futex_exit_release+0x220/0x220 [ 1720.456330][ C0] ? lock_downgrade+0x820/0x820 [ 1720.461154][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1720.467375][ C0] ? __might_fault+0x190/0x1d0 [ 1720.472114][ C0] ? _copy_to_user+0x126/0x160 [ 1720.476855][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1720.482324][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1720.487844][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1720.493726][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1720.498638][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1720.503739][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1720.508825][ C0] do_fast_syscall_32+0x7f/0x120 [ 1720.513737][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1720.518821][ C0] RIP: 0023:0xf7f91569 [ 1720.522856][ C0] Code: Bad RIP value. [ 1720.526893][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1720.535274][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1720.547210][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1720.555163][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1720.563119][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.571077][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.579032][ C0] syz-executor.0 T29872 5921 6841 0x20024004 [ 1720.585350][ C0] Call Trace: [ 1720.588618][ C0] __schedule+0x8e1/0x1eb0 [ 1720.593030][ C0] ? io_schedule_timeout+0x140/0x140 [ 1720.598288][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1720.603459][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1720.609419][ C0] schedule+0xd0/0x2a0 [ 1720.613462][ C0] do_signal_stop+0x32f/0x840 [ 1720.618127][ C0] get_signal+0xc0b/0x1fc0 [ 1720.622536][ C0] do_signal+0x82/0x2520 [ 1720.626756][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1720.632126][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1720.637406][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1720.644076][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1720.649885][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1720.655846][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1720.661546][ C0] do_fast_syscall_32+0x7f/0x120 [ 1720.666463][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1720.671553][ C0] RIP: 0023:0xf7fd1569 [ 1720.675609][ C0] Code: Bad RIP value. [ 1720.679660][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1720.688044][ C0] RAX: 0000000000000000 RBX: 0000000000000ab4 RCX: 0000000000000ab4 [ 1720.696084][ C0] RDX: 0000000000000015 RSI: 0000000020000180 RDI: 0000000000000000 [ 1720.704030][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1720.711997][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.719949][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.727906][ C0] syz-executor.0 T29728 5937 6841 0x20024004 [ 1720.734213][ C0] Call Trace: [ 1720.737490][ C0] __schedule+0x8e1/0x1eb0 [ 1720.741884][ C0] ? io_schedule_timeout+0x140/0x140 [ 1720.747142][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1720.752333][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1720.758289][ C0] schedule+0xd0/0x2a0 [ 1720.762334][ C0] do_signal_stop+0x32f/0x840 [ 1720.766990][ C0] get_signal+0xc0b/0x1fc0 [ 1720.771387][ C0] do_signal+0x82/0x2520 [ 1720.775614][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1720.780972][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1720.786233][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1720.792889][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1720.798669][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1720.804626][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1720.810322][ C0] do_fast_syscall_32+0x7f/0x120 [ 1720.815232][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1720.820315][ C0] RIP: 0023:0xf7fd1569 [ 1720.824364][ C0] Code: Bad RIP value. [ 1720.828401][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1720.836784][ C0] RAX: 0000000000000000 RBX: 0000000000000ab9 RCX: 0000000000000ab9 [ 1720.844746][ C0] RDX: 0000000000000015 RSI: 0000000020000180 RDI: 0000000000000000 [ 1720.852689][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1720.860635][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.868592][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.876560][ C0] syz-executor.0 T29944 5946 6841 0x20024004 [ 1720.882866][ C0] Call Trace: [ 1720.886134][ C0] __schedule+0x8e1/0x1eb0 [ 1720.890528][ C0] ? io_schedule_timeout+0x140/0x140 [ 1720.895785][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1720.901045][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1720.906998][ C0] schedule+0xd0/0x2a0 [ 1720.911051][ C0] do_signal_stop+0x32f/0x840 [ 1720.915715][ C0] get_signal+0xc0b/0x1fc0 [ 1720.920122][ C0] do_signal+0x82/0x2520 [ 1720.924345][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1720.929701][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1720.934973][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1720.941630][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1720.947669][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1720.953628][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1720.959322][ C0] do_fast_syscall_32+0x7f/0x120 [ 1720.964247][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1720.969331][ C0] RIP: 0023:0xf7fd1569 [ 1720.973367][ C0] Code: Bad RIP value. [ 1720.977405][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1720.985791][ C0] RAX: 0000000000000000 RBX: 0000000000000abc RCX: 0000000000000abc [ 1720.993736][ C0] RDX: 0000000000000015 RSI: 0000000020000180 RDI: 0000000000000000 [ 1721.001679][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1721.009627][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.017583][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.026406][ C0] syz-executor.0 T30000 5953 6841 0x20024004 [ 1721.032732][ C0] Call Trace: [ 1721.035999][ C0] __schedule+0x8e1/0x1eb0 [ 1721.040394][ C0] ? io_schedule_timeout+0x140/0x140 [ 1721.045653][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1721.050827][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1721.056786][ C0] schedule+0xd0/0x2a0 [ 1721.060832][ C0] do_signal_stop+0x32f/0x840 [ 1721.065487][ C0] get_signal+0xc0b/0x1fc0 [ 1721.069885][ C0] do_signal+0x82/0x2520 [ 1721.074108][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1721.079452][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1721.084715][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1721.091555][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1721.097770][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1721.103735][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1721.109434][ C0] do_fast_syscall_32+0x7f/0x120 [ 1721.114346][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1721.119431][ C0] RIP: 0023:0xf7fd1569 [ 1721.123477][ C0] Code: Bad RIP value. [ 1721.127515][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1721.135897][ C0] RAX: 0000000000000000 RBX: 0000000000000abf RCX: 0000000000000abf [ 1721.143848][ C0] RDX: 0000000000000015 RSI: 0000000020000180 RDI: 0000000000000000 [ 1721.152761][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1721.160728][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.168686][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.176662][ C0] syz-executor.0 S27968 5987 6841 0x20020000 [ 1721.182982][ C0] Call Trace: [ 1721.186260][ C0] __schedule+0x8e1/0x1eb0 [ 1721.190698][ C0] ? io_schedule_timeout+0x140/0x140 [ 1721.195964][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1721.201406][ C0] schedule+0xd0/0x2a0 [ 1721.205471][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1721.210574][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1721.215769][ C0] futex_wait+0x1df/0x560 [ 1721.220082][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1721.225100][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1721.230883][ C0] ? mark_lock+0xbc/0x1710 [ 1721.235279][ C0] ? hash_futex+0x12/0x200 [ 1721.239669][ C0] ? futex_wake+0x155/0x490 [ 1721.244156][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1721.250112][ C0] do_futex+0x15b/0x1a60 [ 1721.254336][ C0] ? lock_acquire+0x1f1/0xad0 [ 1721.258989][ C0] ? __might_fault+0xef/0x1d0 [ 1721.263637][ C0] ? find_held_lock+0x2d/0x110 [ 1721.268375][ C0] ? futex_exit_release+0x220/0x220 [ 1721.273548][ C0] ? lock_downgrade+0x820/0x820 [ 1721.278398][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1721.284635][ C0] ? __might_fault+0x190/0x1d0 [ 1721.289382][ C0] ? _copy_to_user+0x126/0x160 [ 1721.294256][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1721.299711][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1721.305311][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1721.311185][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1721.316097][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1721.321195][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1721.326279][ C0] do_fast_syscall_32+0x7f/0x120 [ 1721.331192][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1721.336278][ C0] RIP: 0023:0xf7fd1569 [ 1721.340327][ C0] Code: Bad RIP value. [ 1721.344367][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1721.352752][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1721.360696][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1721.369005][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1721.376963][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.384916][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.392884][ C0] syz-executor.0 S29944 6000 6841 0x20020000 [ 1721.399209][ C0] Call Trace: [ 1721.402480][ C0] __schedule+0x8e1/0x1eb0 [ 1721.406878][ C0] ? io_schedule_timeout+0x140/0x140 [ 1721.412272][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1721.417710][ C0] schedule+0xd0/0x2a0 [ 1721.421755][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1721.426842][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1721.432029][ C0] futex_wait+0x1df/0x560 [ 1721.436338][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1721.441341][ C0] ? wake_up_q+0xa3/0x100 [ 1721.445753][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1721.450924][ C0] ? futex_wake+0x155/0x490 [ 1721.455412][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1721.461366][ C0] do_futex+0x15b/0x1a60 [ 1721.465587][ C0] ? lock_acquire+0x1f1/0xad0 [ 1721.470242][ C0] ? __might_fault+0xef/0x1d0 [ 1721.474890][ C0] ? find_held_lock+0x2d/0x110 [ 1721.479628][ C0] ? futex_exit_release+0x220/0x220 [ 1721.484809][ C0] ? lock_downgrade+0x820/0x820 [ 1721.489647][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1721.495865][ C0] ? __might_fault+0x190/0x1d0 [ 1721.500602][ C0] ? _copy_to_user+0x126/0x160 [ 1721.505342][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1721.510795][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1721.516331][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1721.522198][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1721.527109][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1721.532195][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1721.537279][ C0] do_fast_syscall_32+0x7f/0x120 [ 1721.542193][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1721.547972][ C0] RIP: 0023:0xf7fd1569 [ 1721.552009][ C0] Code: Bad RIP value. [ 1721.556046][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1721.564434][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1721.572553][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1721.580496][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1721.588440][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.596382][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.604338][ C0] syz-executor.0 S29944 6027 6841 0x20020000 [ 1721.610644][ C0] Call Trace: [ 1721.613910][ C0] __schedule+0x8e1/0x1eb0 [ 1721.618308][ C0] ? io_schedule_timeout+0x140/0x140 [ 1721.623568][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1721.629002][ C0] schedule+0xd0/0x2a0 [ 1721.633048][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1721.638130][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1721.643303][ C0] futex_wait+0x1df/0x560 [ 1721.647608][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1721.652609][ C0] ? wake_up_q+0xa3/0x100 [ 1721.656921][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1721.662091][ C0] ? futex_wake+0x155/0x490 [ 1721.666578][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1721.672533][ C0] do_futex+0x15b/0x1a60 [ 1721.676752][ C0] ? lock_acquire+0x1f1/0xad0 [ 1721.681406][ C0] ? __might_fault+0xef/0x1d0 [ 1721.686056][ C0] ? find_held_lock+0x2d/0x110 [ 1721.690793][ C0] ? futex_exit_release+0x220/0x220 [ 1721.695967][ C0] ? lock_downgrade+0x820/0x820 [ 1721.700791][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1721.707009][ C0] ? __might_fault+0x190/0x1d0 [ 1721.711746][ C0] ? _copy_to_user+0x126/0x160 [ 1721.716488][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1721.721922][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1721.727441][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1721.733311][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1721.738221][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1721.743309][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1721.748393][ C0] do_fast_syscall_32+0x7f/0x120 [ 1721.753304][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1721.758385][ C0] RIP: 0023:0xf7fd1569 [ 1721.762419][ C0] Code: Bad RIP value. [ 1721.766456][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1721.774847][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1721.782802][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1721.790747][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1721.798705][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.806650][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.814607][ C0] syz-executor.4 D29656 6420 7392 0x20020000 [ 1721.820950][ C0] Call Trace: [ 1721.824217][ C0] __schedule+0x8e1/0x1eb0 [ 1721.828612][ C0] ? io_schedule_timeout+0x140/0x140 [ 1721.833876][ C0] schedule+0xd0/0x2a0 [ 1721.837919][ C0] schedule_timeout+0x1d8/0x250 [ 1721.842743][ C0] ? usleep_range+0x170/0x170 [ 1721.847397][ C0] ? lock_downgrade+0x820/0x820 [ 1721.852220][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1721.857217][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1721.862388][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1721.868353][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1721.873352][ C0] wait_for_completion_killable+0x162/0x310 [ 1721.879229][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1721.884227][ C0] ? wait_for_completion_killable_timeout+0x2e0/0x2e0 [ 1721.890975][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1721.896940][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1721.901951][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1721.907050][ C0] _do_fork+0x5d7/0xa70 [ 1721.911182][ C0] ? copy_init_mm+0x20/0x20 [ 1721.915662][ C0] ? _copy_to_user+0x126/0x160 [ 1721.920403][ C0] __do_compat_sys_ia32_clone+0xbe/0x110 [ 1721.926018][ C0] ? pci_biosrom_size+0x90/0x90 [ 1721.930848][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1721.935934][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1721.941887][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1721.946886][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1721.951969][ C0] do_fast_syscall_32+0x7f/0x120 [ 1721.956882][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1721.961978][ C0] RIP: 0023:0xf7fd7569 [ 1721.966012][ C0] Code: Bad RIP value. [ 1721.970048][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 1721.978429][ C0] RAX: ffffffffffffffda RBX: 0000000002004ffc RCX: 0000000000000000 [ 1721.986373][ C0] RDX: 0000000099999999 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1721.994318][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1722.002264][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.010208][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.018162][ C0] syz-executor.4 S29328 6422 6420 0x20020000 [ 1722.024466][ C0] Call Trace: [ 1722.027730][ C0] __schedule+0x8e1/0x1eb0 [ 1722.032123][ C0] ? io_schedule_timeout+0x140/0x140 [ 1722.037381][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1722.042818][ C0] schedule+0xd0/0x2a0 [ 1722.046862][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1722.051948][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1722.057135][ C0] futex_wait+0x1df/0x560 [ 1722.061441][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1722.066451][ C0] ? mark_lock+0xbc/0x1710 [ 1722.079714][ C0] ? hash_futex+0x12/0x200 [ 1722.084117][ C0] ? futex_wake+0x155/0x490 [ 1722.088604][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1722.094559][ C0] do_futex+0x15b/0x1a60 [ 1722.098780][ C0] ? lock_acquire+0x1f1/0xad0 [ 1722.103428][ C0] ? __might_fault+0xef/0x1d0 [ 1722.108099][ C0] ? find_held_lock+0x2d/0x110 [ 1722.112848][ C0] ? futex_exit_release+0x220/0x220 [ 1722.118033][ C0] ? lock_downgrade+0x820/0x820 [ 1722.122861][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1722.129078][ C0] ? __might_fault+0x190/0x1d0 [ 1722.135563][ C0] ? _copy_to_user+0x126/0x160 [ 1722.140309][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1722.145746][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1722.151265][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1722.157134][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1722.162048][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1722.167137][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1722.172225][ C0] do_fast_syscall_32+0x7f/0x120 [ 1722.177140][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1722.182229][ C0] RIP: 0023:0xf7fd7569 [ 1722.186266][ C0] Code: Bad RIP value. [ 1722.190303][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1722.198695][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1722.207003][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1722.214957][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1722.222909][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.231038][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.239040][ C0] syz-executor.4 S29944 6453 7392 0x20020000 [ 1722.245348][ C0] Call Trace: [ 1722.248619][ C0] __schedule+0x8e1/0x1eb0 [ 1722.253038][ C0] ? io_schedule_timeout+0x140/0x140 [ 1722.258297][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1722.263731][ C0] schedule+0xd0/0x2a0 [ 1722.267786][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1722.272883][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1722.278056][ C0] futex_wait+0x1df/0x560 [ 1722.282363][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1722.287367][ C0] ? wake_up_q+0xa3/0x100 [ 1722.291667][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1722.296839][ C0] ? futex_wake+0x155/0x490 [ 1722.301323][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1722.307278][ C0] do_futex+0x15b/0x1a60 [ 1722.311509][ C0] ? lock_acquire+0x1f1/0xad0 [ 1722.316171][ C0] ? __might_fault+0xef/0x1d0 [ 1722.320827][ C0] ? find_held_lock+0x2d/0x110 [ 1722.325565][ C0] ? futex_exit_release+0x220/0x220 [ 1722.330801][ C0] ? lock_downgrade+0x820/0x820 [ 1722.335640][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1722.341876][ C0] ? __might_fault+0x190/0x1d0 [ 1722.346619][ C0] ? _copy_to_user+0x126/0x160 [ 1722.351373][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1722.356812][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1722.361725][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1722.367247][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1722.372161][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1722.377261][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1722.382347][ C0] do_fast_syscall_32+0x7f/0x120 [ 1722.387267][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1722.392352][ C0] RIP: 0023:0xf7fd7569 [ 1722.396393][ C0] Code: Bad RIP value. [ 1722.400445][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1722.408828][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1722.416776][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1722.424723][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1722.432667][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.440612][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.448573][ C0] syz-executor.4 S29024 6471 7392 0x20020000 [ 1722.454893][ C0] Call Trace: [ 1722.458158][ C0] __schedule+0x8e1/0x1eb0 [ 1722.462553][ C0] ? io_schedule_timeout+0x140/0x140 [ 1722.467815][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1722.473254][ C0] schedule+0xd0/0x2a0 [ 1722.477303][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1722.482399][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1722.487575][ C0] futex_wait+0x1df/0x560 [ 1722.491890][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1722.496889][ C0] ? mark_lock+0xbc/0x1710 [ 1722.501278][ C0] ? hash_futex+0x12/0x200 [ 1722.505673][ C0] ? futex_wake+0x155/0x490 [ 1722.510161][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1722.516127][ C0] do_futex+0x15b/0x1a60 [ 1722.520348][ C0] ? lock_acquire+0x1f1/0xad0 [ 1722.524999][ C0] ? __might_fault+0xef/0x1d0 [ 1722.529660][ C0] ? find_held_lock+0x2d/0x110 [ 1722.534400][ C0] ? futex_exit_release+0x220/0x220 [ 1722.539574][ C0] ? lock_downgrade+0x820/0x820 [ 1722.544409][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1722.550638][ C0] ? __might_fault+0x190/0x1d0 [ 1722.555374][ C0] ? _copy_to_user+0x126/0x160 [ 1722.560125][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1722.565560][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1722.571079][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1722.576949][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1722.581864][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1722.586952][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1722.592036][ C0] do_fast_syscall_32+0x7f/0x120 [ 1722.596946][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1722.602027][ C0] RIP: 0023:0xf7fd7569 [ 1722.606063][ C0] Code: Bad RIP value. [ 1722.610101][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1722.618496][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1722.626441][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1722.634385][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1722.642330][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.650290][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.658246][ C0] syz-executor.4 S29944 6480 7392 0x20020000 [ 1722.664582][ C0] Call Trace: [ 1722.667849][ C0] __schedule+0x8e1/0x1eb0 [ 1722.672257][ C0] ? io_schedule_timeout+0x140/0x140 [ 1722.677526][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1722.682971][ C0] schedule+0xd0/0x2a0 [ 1722.687035][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1722.692123][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1722.697296][ C0] futex_wait+0x1df/0x560 [ 1722.701687][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1722.706685][ C0] ? wake_up_q+0xa3/0x100 [ 1722.710996][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1722.716167][ C0] ? futex_wake+0x155/0x490 [ 1722.720660][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1722.726625][ C0] do_futex+0x15b/0x1a60 [ 1722.730846][ C0] ? lock_acquire+0x1f1/0xad0 [ 1722.735507][ C0] ? __might_fault+0xef/0x1d0 [ 1722.740170][ C0] ? find_held_lock+0x2d/0x110 [ 1722.744906][ C0] ? futex_exit_release+0x220/0x220 [ 1722.750094][ C0] ? lock_downgrade+0x820/0x820 [ 1722.754918][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1722.761136][ C0] ? __might_fault+0x190/0x1d0 [ 1722.765879][ C0] ? _copy_to_user+0x126/0x160 [ 1722.770631][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1722.776066][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1722.780978][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1722.786500][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1722.791411][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1722.796499][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1722.801588][ C0] do_fast_syscall_32+0x7f/0x120 [ 1722.806501][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1722.811589][ C0] RIP: 0023:0xf7fd7569 [ 1722.815625][ C0] Code: Bad RIP value. [ 1722.819662][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1722.828044][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1722.835998][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1722.843955][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1722.851900][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.859845][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.867811][ C0] syz-executor.4 S29024 6516 7392 0x20020000 [ 1722.874116][ C0] Call Trace: [ 1722.877380][ C0] __schedule+0x8e1/0x1eb0 [ 1722.881774][ C0] ? io_schedule_timeout+0x140/0x140 [ 1722.887034][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1722.892468][ C0] schedule+0xd0/0x2a0 [ 1722.896513][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1722.901612][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1722.906790][ C0] futex_wait+0x1df/0x560 [ 1722.911097][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1722.916615][ C0] ? mark_lock+0xbc/0x1710 [ 1722.921005][ C0] ? mark_lock+0xbc/0x1710 [ 1722.925405][ C0] ? hash_futex+0x12/0x200 [ 1722.929796][ C0] ? futex_wake+0x155/0x490 [ 1722.934280][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1722.940234][ C0] do_futex+0x15b/0x1a60 [ 1722.944456][ C0] ? lock_acquire+0x1f1/0xad0 [ 1722.949106][ C0] ? __might_fault+0xef/0x1d0 [ 1722.953755][ C0] ? find_held_lock+0x2d/0x110 [ 1722.958493][ C0] ? futex_exit_release+0x220/0x220 [ 1722.963664][ C0] ? lock_downgrade+0x820/0x820 [ 1722.968491][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1722.974707][ C0] ? __might_fault+0x190/0x1d0 [ 1722.979470][ C0] ? _copy_to_user+0x126/0x160 [ 1722.984210][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1722.989645][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1722.995164][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1723.001030][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1723.005953][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1723.011053][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1723.016161][ C0] do_fast_syscall_32+0x7f/0x120 [ 1723.021073][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1723.026156][ C0] RIP: 0023:0xf7fd7569 [ 1723.030206][ C0] Code: Bad RIP value. [ 1723.034245][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1723.042626][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1723.050583][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1723.058528][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1723.066474][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.074424][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.082390][ C0] syz-executor.4 S29944 6524 7392 0x20020000 [ 1723.088696][ C0] Call Trace: [ 1723.091960][ C0] __schedule+0x8e1/0x1eb0 [ 1723.096367][ C0] ? io_schedule_timeout+0x140/0x140 [ 1723.101627][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1723.107062][ C0] schedule+0xd0/0x2a0 [ 1723.111120][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1723.116205][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1723.121380][ C0] futex_wait+0x1df/0x560 [ 1723.125685][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1723.130704][ C0] ? mark_lock+0xbc/0x1710 [ 1723.135094][ C0] ? hash_futex+0x12/0x200 [ 1723.139487][ C0] ? futex_wake+0x155/0x490 [ 1723.143971][ C0] ? do_wp_page+0x8e7/0x1950 [ 1723.148538][ C0] do_futex+0x15b/0x1a60 [ 1723.152757][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1723.157997][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1723.162869][ C0] ? do_wp_page+0x16a/0x1950 [ 1723.167437][ C0] ? futex_exit_release+0x220/0x220 [ 1723.172612][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1723.177961][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1723.182885][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1723.187918][ C0] ? find_held_lock+0x2d/0x110 [ 1723.192662][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1723.197834][ C0] ? __up_read+0x1a1/0x7b0 [ 1723.202235][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1723.207677][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1723.213203][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1723.218115][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1723.223028][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1723.228158][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1723.233245][ C0] do_fast_syscall_32+0x7f/0x120 [ 1723.238155][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1723.243239][ C0] RIP: 0023:0xf7fd7569 [ 1723.247276][ C0] Code: Bad RIP value. [ 1723.251312][ C0] RSP: 002b:00000000f5db112c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1723.259694][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1723.267903][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1723.275870][ C0] RBP: 00000000f5db1228 R08: 0000000000000000 R09: 0000000000000000 [ 1723.283903][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.291848][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.299810][ C0] syz-executor.4 S29944 6555 7392 0x20020000 [ 1723.306117][ C0] Call Trace: [ 1723.309382][ C0] __schedule+0x8e1/0x1eb0 [ 1723.313777][ C0] ? io_schedule_timeout+0x140/0x140 [ 1723.319038][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1723.324474][ C0] schedule+0xd0/0x2a0 [ 1723.328533][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1723.333616][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1723.338802][ C0] futex_wait+0x1df/0x560 [ 1723.343106][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1723.348104][ C0] ? mark_lock+0xbc/0x1710 [ 1723.352494][ C0] ? mark_lock+0xbc/0x1710 [ 1723.356884][ C0] ? hash_futex+0x12/0x200 [ 1723.361294][ C0] ? futex_wake+0x155/0x490 [ 1723.365787][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1723.371786][ C0] do_futex+0x15b/0x1a60 [ 1723.376017][ C0] ? lock_acquire+0x1f1/0xad0 [ 1723.380683][ C0] ? __might_fault+0xef/0x1d0 [ 1723.385373][ C0] ? find_held_lock+0x2d/0x110 [ 1723.390113][ C0] ? futex_exit_release+0x220/0x220 [ 1723.395288][ C0] ? lock_downgrade+0x820/0x820 [ 1723.400122][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1723.406340][ C0] ? __might_fault+0x190/0x1d0 [ 1723.411077][ C0] ? _copy_to_user+0x126/0x160 [ 1723.415833][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1723.421270][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1723.426803][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1723.432681][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1723.437593][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1723.442681][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1723.447791][ C0] do_fast_syscall_32+0x7f/0x120 [ 1723.452702][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1723.457788][ C0] RIP: 0023:0xf7fd7569 [ 1723.461826][ C0] Code: Bad RIP value. [ 1723.465864][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1723.474246][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1723.482189][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1723.490156][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1723.498103][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.506048][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.514006][ C0] syz-executor.1 S29944 6558 6979 0x20020000 [ 1723.520334][ C0] Call Trace: [ 1723.523598][ C0] __schedule+0x8e1/0x1eb0 [ 1723.527990][ C0] ? io_schedule_timeout+0x140/0x140 [ 1723.533248][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1723.538683][ C0] schedule+0xd0/0x2a0 [ 1723.542730][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1723.547815][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1723.552988][ C0] futex_wait+0x1df/0x560 [ 1723.557306][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1723.562305][ C0] ? mark_lock+0xbc/0x1710 [ 1723.566695][ C0] ? mark_lock+0xbc/0x1710 [ 1723.571086][ C0] ? hash_futex+0x12/0x200 [ 1723.575475][ C0] ? futex_wake+0x155/0x490 [ 1723.579972][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1723.585942][ C0] do_futex+0x15b/0x1a60 [ 1723.590165][ C0] ? lock_acquire+0x1f1/0xad0 [ 1723.594827][ C0] ? __might_fault+0xef/0x1d0 [ 1723.599477][ C0] ? find_held_lock+0x2d/0x110 [ 1723.604219][ C0] ? futex_exit_release+0x220/0x220 [ 1723.609394][ C0] ? lock_downgrade+0x820/0x820 [ 1723.614220][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1723.620437][ C0] ? __might_fault+0x190/0x1d0 [ 1723.625179][ C0] ? _copy_to_user+0x126/0x160 [ 1723.629920][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1723.635356][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1723.640887][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1723.646754][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1723.651672][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1723.656780][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1723.661877][ C0] do_fast_syscall_32+0x7f/0x120 [ 1723.666790][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1723.671895][ C0] RIP: 0023:0xf7fa1569 [ 1723.675959][ C0] Code: Bad RIP value. [ 1723.679999][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1723.688382][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1723.696338][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1723.704293][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1723.712239][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.720197][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.728156][ C0] syz-executor.5 S29944 6561 7432 0x20020000 [ 1723.734461][ C0] Call Trace: [ 1723.737728][ C0] __schedule+0x8e1/0x1eb0 [ 1723.742122][ C0] ? io_schedule_timeout+0x140/0x140 [ 1723.747381][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1723.752817][ C0] schedule+0xd0/0x2a0 [ 1723.756861][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1723.761945][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1723.767117][ C0] futex_wait+0x1df/0x560 [ 1723.771424][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1723.776433][ C0] ? mark_lock+0xbc/0x1710 [ 1723.780836][ C0] ? mark_lock+0xbc/0x1710 [ 1723.785226][ C0] ? hash_futex+0x12/0x200 [ 1723.789615][ C0] ? futex_wake+0x155/0x490 [ 1723.794100][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1723.800052][ C0] do_futex+0x15b/0x1a60 [ 1723.804293][ C0] ? lock_acquire+0x1f1/0xad0 [ 1723.808944][ C0] ? __might_fault+0xef/0x1d0 [ 1723.813602][ C0] ? find_held_lock+0x2d/0x110 [ 1723.818350][ C0] ? futex_exit_release+0x220/0x220 [ 1723.823522][ C0] ? lock_downgrade+0x820/0x820 [ 1723.828346][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1723.834562][ C0] ? __might_fault+0x190/0x1d0 [ 1723.839309][ C0] ? _copy_to_user+0x126/0x160 [ 1723.844049][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1723.849487][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1723.855005][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1723.860887][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1723.865886][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1723.870995][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1723.876081][ C0] do_fast_syscall_32+0x7f/0x120 [ 1723.880994][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1723.886075][ C0] RIP: 0023:0xf7f53569 [ 1723.890110][ C0] Code: Bad RIP value. [ 1723.894154][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1723.902535][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1723.910480][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1723.918430][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1723.926375][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.934320][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.942275][ C0] syz-executor.1 S29944 6577 6979 0x20020000 [ 1723.948608][ C0] Call Trace: [ 1723.951875][ C0] __schedule+0x8e1/0x1eb0 [ 1723.956286][ C0] ? io_schedule_timeout+0x140/0x140 [ 1723.961546][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1723.967353][ C0] schedule+0xd0/0x2a0 [ 1723.971399][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1723.976571][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1723.981745][ C0] futex_wait+0x1df/0x560 [ 1723.986061][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1723.991060][ C0] ? mark_lock+0xbc/0x1710 [ 1723.995451][ C0] ? mark_lock+0xbc/0x1710 [ 1723.999842][ C0] ? hash_futex+0x12/0x200 [ 1724.004240][ C0] ? futex_wake+0x155/0x490 [ 1724.008728][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1724.014698][ C0] do_futex+0x15b/0x1a60 [ 1724.018919][ C0] ? lock_acquire+0x1f1/0xad0 [ 1724.023581][ C0] ? __might_fault+0xef/0x1d0 [ 1724.028234][ C0] ? find_held_lock+0x2d/0x110 [ 1724.032975][ C0] ? futex_exit_release+0x220/0x220 [ 1724.038147][ C0] ? lock_downgrade+0x820/0x820 [ 1724.042972][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1724.049195][ C0] ? __might_fault+0x190/0x1d0 [ 1724.053931][ C0] ? _copy_to_user+0x126/0x160 [ 1724.058674][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1724.064108][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1724.069626][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1724.075502][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1724.080413][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1724.085501][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1724.090604][ C0] do_fast_syscall_32+0x7f/0x120 [ 1724.095532][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1724.100626][ C0] RIP: 0023:0xf7fa1569 [ 1724.104678][ C0] Code: Bad RIP value. [ 1724.108779][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1724.117217][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1724.125163][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1724.133195][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1724.141151][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1724.149114][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1724.157075][ C0] syz-executor.4 S29944 6579 7392 0x20020000 [ 1724.163394][ C0] Call Trace: [ 1724.166662][ C0] __schedule+0x8e1/0x1eb0 [ 1724.171061][ C0] ? io_schedule_timeout+0x140/0x140 [ 1724.176330][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1724.181776][ C0] schedule+0xd0/0x2a0 [ 1724.185828][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1724.190915][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1724.196105][ C0] ? futex_wake+0x1b5/0x490 [ 1724.200600][ C0] ? find_held_lock+0x2d/0x110 [ 1724.205338][ C0] futex_wait+0x1df/0x560 [ 1724.209643][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1724.214752][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1724.219680][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1724.224851][ C0] ? futex_wake+0x155/0x490 [ 1724.229336][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1724.235302][ C0] do_futex+0x15b/0x1a60 [ 1724.239524][ C0] ? lock_acquire+0x1f1/0xad0 [ 1724.244184][ C0] ? __might_fault+0xef/0x1d0 [ 1724.248833][ C0] ? find_held_lock+0x2d/0x110 [ 1724.253572][ C0] ? futex_exit_release+0x220/0x220 [ 1724.258758][ C0] ? lock_downgrade+0x820/0x820 [ 1724.263584][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1724.269803][ C0] ? __might_fault+0x190/0x1d0 [ 1724.274540][ C0] ? _copy_to_user+0x126/0x160 [ 1724.279279][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1724.284716][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1724.290235][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1724.296101][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1724.301015][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1724.306111][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1724.311195][ C0] do_fast_syscall_32+0x7f/0x120 [ 1724.316106][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1724.321193][ C0] RIP: 0023:0xf7fd7569 [ 1724.325229][ C0] Code: Bad RIP value. [ 1724.329278][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1724.337660][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1724.345604][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1724.353567][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1724.361545][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1724.369493][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1724.377453][ C0] syz-executor.5 S29944 6582 7432 0x20020000 [ 1724.383849][ C0] Call Trace: [ 1724.387120][ C0] __schedule+0x8e1/0x1eb0 [ 1724.391517][ C0] ? io_schedule_timeout+0x140/0x140 [ 1724.396856][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1724.402320][ C0] schedule+0xd0/0x2a0 [ 1724.406376][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1724.411465][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1724.416642][ C0] futex_wait+0x1df/0x560 [ 1724.420949][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1724.426010][ C0] ? mark_lock+0xbc/0x1710 [ 1724.430403][ C0] ? mark_lock+0xbc/0x1710 [ 1724.434812][ C0] ? hash_futex+0x12/0x200 [ 1724.439219][ C0] ? futex_wake+0x155/0x490 [ 1724.443718][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1724.449729][ C0] do_futex+0x15b/0x1a60 [ 1724.453957][ C0] ? lock_acquire+0x1f1/0xad0 [ 1724.458698][ C0] ? __might_fault+0xef/0x1d0 [ 1724.463351][ C0] ? find_held_lock+0x2d/0x110 [ 1724.468092][ C0] ? futex_exit_release+0x220/0x220 [ 1724.473265][ C0] ? lock_downgrade+0x820/0x820 [ 1724.478090][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1724.484317][ C0] ? __might_fault+0x190/0x1d0 [ 1724.489091][ C0] ? _copy_to_user+0x126/0x160 [ 1724.493835][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1724.499271][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1724.504790][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1724.510659][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1724.515570][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1724.520660][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1724.525748][ C0] do_fast_syscall_32+0x7f/0x120 [ 1724.530674][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1724.535765][ C0] RIP: 0023:0xf7f53569 [ 1724.539802][ C0] Code: Bad RIP value. [ 1724.543853][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1724.552249][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1724.560193][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1724.568139][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1724.576098][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1724.584044][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1724.592004][ C0] syz-executor.1 S29944 6601 6979 0x20020000 [ 1724.598311][ C0] Call Trace: [ 1724.601577][ C0] __schedule+0x8e1/0x1eb0 [ 1724.605974][ C0] ? io_schedule_timeout+0x140/0x140 [ 1724.611233][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1724.616668][ C0] schedule+0xd0/0x2a0 [ 1724.620715][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1724.625801][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1724.630979][ C0] futex_wait+0x1df/0x560 [ 1724.635287][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1724.640301][ C0] ? mark_lock+0xbc/0x1710 [ 1724.644705][ C0] ? mark_lock+0xbc/0x1710 [ 1724.649094][ C0] ? hash_futex+0x12/0x200 [ 1724.653484][ C0] ? futex_wake+0x155/0x490 [ 1724.657970][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1724.663924][ C0] do_futex+0x15b/0x1a60 [ 1724.668159][ C0] ? lock_acquire+0x1f1/0xad0 [ 1724.672811][ C0] ? __might_fault+0xef/0x1d0 [ 1724.677475][ C0] ? find_held_lock+0x2d/0x110 [ 1724.682218][ C0] ? futex_exit_release+0x220/0x220 [ 1724.687398][ C0] ? lock_downgrade+0x820/0x820 [ 1724.692224][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1724.698452][ C0] ? __might_fault+0x190/0x1d0 [ 1724.703189][ C0] ? _copy_to_user+0x126/0x160 [ 1724.707929][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1724.713364][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1724.718882][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1724.724749][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1724.729663][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1724.734751][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1724.739836][ C0] do_fast_syscall_32+0x7f/0x120 [ 1724.744764][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1724.749847][ C0] RIP: 0023:0xf7fa1569 [ 1724.753899][ C0] Code: Bad RIP value. [ 1724.757937][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1724.766319][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1724.774277][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1724.782225][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1724.790169][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1724.798125][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1724.806111][ C0] syz-executor.5 S29944 6605 7432 0x20020000 [ 1724.812419][ C0] Call Trace: [ 1724.815684][ C0] __schedule+0x8e1/0x1eb0 [ 1724.820079][ C0] ? io_schedule_timeout+0x140/0x140 [ 1724.825352][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1724.830791][ C0] schedule+0xd0/0x2a0 [ 1724.834851][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1724.839939][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1724.845113][ C0] futex_wait+0x1df/0x560 [ 1724.849419][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1724.854417][ C0] ? mark_lock+0xbc/0x1710 [ 1724.858986][ C0] ? mark_lock+0xbc/0x1710 [ 1724.863375][ C0] ? hash_futex+0x12/0x200 [ 1724.867764][ C0] ? futex_wake+0x155/0x490 [ 1724.872249][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1724.878202][ C0] do_futex+0x15b/0x1a60 [ 1724.882421][ C0] ? lock_acquire+0x1f1/0xad0 [ 1724.887078][ C0] ? __might_fault+0xef/0x1d0 [ 1724.891727][ C0] ? find_held_lock+0x2d/0x110 [ 1724.896551][ C0] ? futex_exit_release+0x220/0x220 [ 1724.901722][ C0] ? lock_downgrade+0x820/0x820 [ 1724.906564][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1724.912781][ C0] ? __might_fault+0x190/0x1d0 [ 1724.917533][ C0] ? _copy_to_user+0x126/0x160 [ 1724.922288][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1724.927723][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1724.933239][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1724.939121][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1724.944032][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1724.949134][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1724.954219][ C0] do_fast_syscall_32+0x7f/0x120 [ 1724.959136][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1724.964218][ C0] RIP: 0023:0xf7f53569 [ 1724.968253][ C0] Code: Bad RIP value. [ 1724.972291][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1724.980674][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1724.988617][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1724.996561][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1725.004518][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1725.012549][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1725.020592][ C0] syz-executor.4 S29944 6608 7392 0x20020000 [ 1725.026913][ C0] Call Trace: [ 1725.030196][ C0] __schedule+0x8e1/0x1eb0 [ 1725.034601][ C0] ? io_schedule_timeout+0x140/0x140 [ 1725.039871][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1725.045313][ C0] schedule+0xd0/0x2a0 [ 1725.049362][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1725.054461][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1725.059633][ C0] ? futex_wake+0x1b5/0x490 [ 1725.064114][ C0] ? find_held_lock+0x2d/0x110 [ 1725.068853][ C0] futex_wait+0x1df/0x560 [ 1725.073168][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1725.078164][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1725.083091][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1725.088264][ C0] ? futex_wake+0x155/0x490 [ 1725.092758][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1725.098717][ C0] do_futex+0x15b/0x1a60 [ 1725.102940][ C0] ? lock_acquire+0x1f1/0xad0 [ 1725.107601][ C0] ? __might_fault+0xef/0x1d0 [ 1725.112251][ C0] ? find_held_lock+0x2d/0x110 [ 1725.116992][ C0] ? futex_exit_release+0x220/0x220 [ 1725.122165][ C0] ? lock_downgrade+0x820/0x820 [ 1725.126995][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1725.133215][ C0] ? __might_fault+0x190/0x1d0 [ 1725.137953][ C0] ? _copy_to_user+0x126/0x160 [ 1725.142704][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1725.148140][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1725.153681][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1725.159572][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1725.164492][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1725.169670][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1725.174759][ C0] do_fast_syscall_32+0x7f/0x120 [ 1725.179673][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1725.184758][ C0] RIP: 0023:0xf7fd7569 [ 1725.188796][ C0] Code: Bad RIP value. [ 1725.192835][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1725.201218][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1725.209167][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1725.218849][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1725.226794][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1725.234741][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1725.242700][ C0] syz-executor.5 S28544 6638 7432 0x20020000 [ 1725.249013][ C0] Call Trace: [ 1725.252280][ C0] __schedule+0x8e1/0x1eb0 [ 1725.256676][ C0] ? io_schedule_timeout+0x140/0x140 [ 1725.261956][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1725.267422][ C0] schedule+0xd0/0x2a0 [ 1725.271479][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1725.276562][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1725.281759][ C0] ? futex_wake+0x1b5/0x490 [ 1725.286236][ C0] ? find_held_lock+0x2d/0x110 [ 1725.291088][ C0] futex_wait+0x1df/0x560 [ 1725.295396][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1725.300403][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1725.305576][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1725.310767][ C0] ? futex_wake+0x155/0x490 [ 1725.315255][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1725.321212][ C0] ? __lock_acquire+0xc1e/0x56e0 [ 1725.326142][ C0] do_futex+0x15b/0x1a60 [ 1725.330364][ C0] ? lock_acquire+0x1f1/0xad0 [ 1725.335013][ C0] ? __might_fault+0xef/0x1d0 [ 1725.339663][ C0] ? find_held_lock+0x2d/0x110 [ 1725.344401][ C0] ? futex_exit_release+0x220/0x220 [ 1725.349576][ C0] ? lock_downgrade+0x820/0x820 [ 1725.354428][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1725.360662][ C0] ? __might_fault+0x190/0x1d0 [ 1725.365406][ C0] ? _copy_to_user+0x126/0x160 [ 1725.370154][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1725.375593][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1725.381113][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1725.386984][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1725.391901][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1725.396989][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1725.402073][ C0] do_fast_syscall_32+0x7f/0x120 [ 1725.406989][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1725.412083][ C0] RIP: 0023:0xf7f53569 [ 1725.416119][ C0] Code: Bad RIP value. [ 1725.420157][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1725.428546][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1725.436490][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1725.444444][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1725.452388][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1725.460337][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1725.468298][ C0] syz-executor.1 S29944 6643 6979 0x20020000 [ 1725.474605][ C0] Call Trace: [ 1725.477871][ C0] __schedule+0x8e1/0x1eb0 [ 1725.482274][ C0] ? io_schedule_timeout+0x140/0x140 [ 1725.487532][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1725.492968][ C0] schedule+0xd0/0x2a0 [ 1725.497012][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1725.502097][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1725.507271][ C0] futex_wait+0x1df/0x560 [ 1725.511594][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1725.516606][ C0] ? mark_lock+0xbc/0x1710 [ 1725.521009][ C0] ? mark_lock+0xbc/0x1710 [ 1725.525399][ C0] ? hash_futex+0x12/0x200 [ 1725.529789][ C0] ? futex_wake+0x155/0x490 [ 1725.534276][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1725.540230][ C0] do_futex+0x15b/0x1a60 [ 1725.544450][ C0] ? lock_acquire+0x1f1/0xad0 [ 1725.549113][ C0] ? __might_fault+0xef/0x1d0 [ 1725.553773][ C0] ? find_held_lock+0x2d/0x110 [ 1725.558510][ C0] ? futex_exit_release+0x220/0x220 [ 1725.563686][ C0] ? lock_downgrade+0x820/0x820 [ 1725.568541][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1725.574761][ C0] ? __might_fault+0x190/0x1d0 [ 1725.579501][ C0] ? _copy_to_user+0x126/0x160 [ 1725.584243][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1725.589686][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1725.595207][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1725.601084][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1725.605994][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1725.611081][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1725.616166][ C0] do_fast_syscall_32+0x7f/0x120 [ 1725.621079][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1725.626161][ C0] RIP: 0023:0xf7fa1569 [ 1725.630197][ C0] Code: Bad RIP value. [ 1725.634239][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1725.642635][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1725.650581][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1725.658525][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1725.666467][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1725.674420][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1725.682377][ C0] syz-executor.5 S29944 6649 7432 0x20020000 [ 1725.688697][ C0] Call Trace: [ 1725.691962][ C0] __schedule+0x8e1/0x1eb0 [ 1725.696355][ C0] ? io_schedule_timeout+0x140/0x140 [ 1725.701613][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1725.707050][ C0] schedule+0xd0/0x2a0 [ 1725.711094][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1725.716176][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1725.721351][ C0] futex_wait+0x1df/0x560 [ 1725.725656][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1725.730658][ C0] ? wake_up_q+0xa3/0x100 [ 1725.734961][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1725.740133][ C0] ? futex_wake+0x155/0x490 [ 1725.744630][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1725.750593][ C0] ? mark_lock+0xbc/0x1710 [ 1725.754984][ C0] do_futex+0x15b/0x1a60 [ 1725.759204][ C0] ? lock_acquire+0x1f1/0xad0 [ 1725.763852][ C0] ? __might_fault+0xef/0x1d0 [ 1725.768501][ C0] ? find_held_lock+0x2d/0x110 [ 1725.773239][ C0] ? futex_exit_release+0x220/0x220 [ 1725.778434][ C0] ? lock_downgrade+0x820/0x820 [ 1725.783267][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1725.789498][ C0] ? __might_fault+0x190/0x1d0 [ 1725.794242][ C0] ? _copy_to_user+0x126/0x160 [ 1725.799006][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1725.804444][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1725.809356][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1725.814885][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1725.819818][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1725.824908][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1725.829994][ C0] do_fast_syscall_32+0x7f/0x120 [ 1725.834994][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1725.840078][ C0] RIP: 0023:0xf7f53569 [ 1725.844116][ C0] Code: Bad RIP value. [ 1725.848154][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1725.856549][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1725.864513][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1725.872465][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1725.880407][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1725.888350][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1725.896318][ C0] syz-executor.5 S29944 6652 7432 0x20020000 [ 1725.902626][ C0] Call Trace: [ 1725.905898][ C0] __schedule+0x8e1/0x1eb0 [ 1725.910293][ C0] ? io_schedule_timeout+0x140/0x140 [ 1725.915564][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1725.921000][ C0] schedule+0xd0/0x2a0 [ 1725.925044][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1725.930128][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1725.935313][ C0] futex_wait+0x1df/0x560 [ 1725.939620][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1725.944621][ C0] ? wake_up_q+0xa3/0x100 [ 1725.948922][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1725.954103][ C0] ? futex_wake+0x155/0x490 [ 1725.958588][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1725.964544][ C0] ? mark_lock+0xbc/0x1710 [ 1725.968933][ C0] do_futex+0x15b/0x1a60 [ 1725.973153][ C0] ? lock_acquire+0x1f1/0xad0 [ 1725.977802][ C0] ? __might_fault+0xef/0x1d0 [ 1725.982448][ C0] ? find_held_lock+0x2d/0x110 [ 1725.987186][ C0] ? futex_exit_release+0x220/0x220 [ 1725.992357][ C0] ? lock_downgrade+0x820/0x820 [ 1725.997181][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1726.003396][ C0] ? __might_fault+0x190/0x1d0 [ 1726.008133][ C0] ? _copy_to_user+0x126/0x160 [ 1726.012874][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1726.018307][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1726.023839][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1726.029716][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1726.034625][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1726.039726][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1726.044812][ C0] do_fast_syscall_32+0x7f/0x120 [ 1726.049723][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1726.054820][ C0] RIP: 0023:0xf7f53569 [ 1726.058946][ C0] Code: Bad RIP value. [ 1726.062982][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1726.071364][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1726.079319][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1726.087265][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1726.095208][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.103153][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.111108][ C0] syz-executor.1 S29024 6674 6979 0x20020000 [ 1726.117412][ C0] Call Trace: [ 1726.120676][ C0] __schedule+0x8e1/0x1eb0 [ 1726.125070][ C0] ? io_schedule_timeout+0x140/0x140 [ 1726.130330][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1726.135766][ C0] schedule+0xd0/0x2a0 [ 1726.139814][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1726.144901][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1726.150086][ C0] futex_wait+0x1df/0x560 [ 1726.154405][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1726.159404][ C0] ? mark_lock+0xbc/0x1710 [ 1726.163804][ C0] ? mark_lock+0xbc/0x1710 [ 1726.168205][ C0] ? hash_futex+0x12/0x200 [ 1726.172595][ C0] ? futex_wake+0x155/0x490 [ 1726.177082][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1726.183036][ C0] do_futex+0x15b/0x1a60 [ 1726.187257][ C0] ? lock_acquire+0x1f1/0xad0 [ 1726.191939][ C0] ? __might_fault+0xef/0x1d0 [ 1726.196660][ C0] ? find_held_lock+0x2d/0x110 [ 1726.201514][ C0] ? futex_exit_release+0x220/0x220 [ 1726.206713][ C0] ? lock_downgrade+0x820/0x820 [ 1726.211547][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1726.218823][ C0] ? __might_fault+0x190/0x1d0 [ 1726.223565][ C0] ? _copy_to_user+0x126/0x160 [ 1726.228313][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1726.233757][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1726.239327][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1726.246077][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1726.251111][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1726.256219][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1726.261323][ C0] do_fast_syscall_32+0x7f/0x120 [ 1726.266245][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1726.271333][ C0] RIP: 0023:0xf7fa1569 [ 1726.275386][ C0] Code: Bad RIP value. [ 1726.279435][ C0] RSP: 002b:00000000f5d5a12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1726.287817][ C0] RAX: ffffffffffffffda RBX: 000000000819b040 RCX: 0000000000000080 [ 1726.295779][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819b044 [ 1726.303739][ C0] RBP: 00000000f5d5a228 R08: 0000000000000000 R09: 0000000000000000 [ 1726.311694][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.319648][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.327664][ C0] syz-executor.1 S29944 6693 6979 0x20020000 [ 1726.333978][ C0] Call Trace: [ 1726.337249][ C0] __schedule+0x8e1/0x1eb0 [ 1726.341649][ C0] ? io_schedule_timeout+0x140/0x140 [ 1726.346949][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1726.352386][ C0] schedule+0xd0/0x2a0 [ 1726.356431][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1726.361517][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1726.366690][ C0] futex_wait+0x1df/0x560 [ 1726.370996][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1726.376014][ C0] ? mark_lock+0xbc/0x1710 [ 1726.380414][ C0] ? mark_lock+0xbc/0x1710 [ 1726.384814][ C0] ? hash_futex+0x12/0x200 [ 1726.389213][ C0] ? futex_wake+0x155/0x490 [ 1726.393707][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1726.399688][ C0] do_futex+0x15b/0x1a60 [ 1726.403910][ C0] ? lock_acquire+0x1f1/0xad0 [ 1726.408564][ C0] ? __might_fault+0xef/0x1d0 [ 1726.413218][ C0] ? find_held_lock+0x2d/0x110 [ 1726.417954][ C0] ? futex_exit_release+0x220/0x220 [ 1726.423130][ C0] ? lock_downgrade+0x820/0x820 [ 1726.427956][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1726.434188][ C0] ? __might_fault+0x190/0x1d0 [ 1726.438928][ C0] ? _copy_to_user+0x126/0x160 [ 1726.443668][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1726.449103][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1726.454628][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1726.460498][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1726.465410][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1726.470509][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1726.475595][ C0] do_fast_syscall_32+0x7f/0x120 [ 1726.480510][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1726.485595][ C0] RIP: 0023:0xf7fa1569 [ 1726.489632][ C0] Code: Bad RIP value. [ 1726.493670][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1726.502063][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1726.510015][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1726.517962][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1726.525918][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.533863][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.541820][ C0] syz-executor.2 S29944 6723 7031 0x20020000 [ 1726.548139][ C0] Call Trace: [ 1726.551406][ C0] __schedule+0x8e1/0x1eb0 [ 1726.555800][ C0] ? io_schedule_timeout+0x140/0x140 [ 1726.561058][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1726.566582][ C0] schedule+0xd0/0x2a0 [ 1726.570628][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1726.575712][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1726.580888][ C0] futex_wait+0x1df/0x560 [ 1726.585194][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1726.590201][ C0] ? mark_lock+0xbc/0x1710 [ 1726.594592][ C0] ? mark_lock+0xbc/0x1710 [ 1726.598991][ C0] ? hash_futex+0x12/0x200 [ 1726.603468][ C0] ? futex_wake+0x155/0x490 [ 1726.607958][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1726.613914][ C0] do_futex+0x15b/0x1a60 [ 1726.618165][ C0] ? lock_acquire+0x1f1/0xad0 [ 1726.622838][ C0] ? __might_fault+0xef/0x1d0 [ 1726.627490][ C0] ? find_held_lock+0x2d/0x110 [ 1726.632227][ C0] ? futex_exit_release+0x220/0x220 [ 1726.637401][ C0] ? lock_downgrade+0x820/0x820 [ 1726.642239][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1726.648457][ C0] ? __might_fault+0x190/0x1d0 [ 1726.653196][ C0] ? _copy_to_user+0x126/0x160 [ 1726.657937][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1726.663376][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1726.668904][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1726.674773][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1726.679684][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1726.684775][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1726.689861][ C0] do_fast_syscall_32+0x7f/0x120 [ 1726.694789][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1726.699873][ C0] RIP: 0023:0xf7f91569 [ 1726.703909][ C0] Code: Bad RIP value. [ 1726.707955][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1726.716348][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1726.724294][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1726.732250][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1726.740197][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.748149][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.756111][ C0] syz-executor.4 S29944 6725 7392 0x20020000 [ 1726.762439][ C0] Call Trace: [ 1726.765706][ C0] __schedule+0x8e1/0x1eb0 [ 1726.770122][ C0] ? io_schedule_timeout+0x140/0x140 [ 1726.775382][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1726.780830][ C0] schedule+0xd0/0x2a0 [ 1726.784875][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1726.789960][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1726.795131][ C0] ? futex_wake+0x1b5/0x490 [ 1726.799607][ C0] ? find_held_lock+0x2d/0x110 [ 1726.804347][ C0] futex_wait+0x1df/0x560 [ 1726.808653][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1726.813648][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1726.818561][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1726.823747][ C0] ? futex_wake+0x155/0x490 [ 1726.828249][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1726.834204][ C0] do_futex+0x15b/0x1a60 [ 1726.838436][ C0] ? lock_acquire+0x1f1/0xad0 [ 1726.843433][ C0] ? __might_fault+0xef/0x1d0 [ 1726.848105][ C0] ? find_held_lock+0x2d/0x110 [ 1726.852914][ C0] ? futex_exit_release+0x220/0x220 [ 1726.858101][ C0] ? lock_downgrade+0x820/0x820 [ 1726.862939][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1726.869161][ C0] ? __might_fault+0x190/0x1d0 [ 1726.873899][ C0] ? _copy_to_user+0x126/0x160 [ 1726.878643][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1726.884081][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1726.889605][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1726.895474][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1726.900386][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1726.905494][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1726.910596][ C0] do_fast_syscall_32+0x7f/0x120 [ 1726.915522][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1726.920611][ C0] RIP: 0023:0xf7fd7569 [ 1726.924650][ C0] Code: Bad RIP value. [ 1726.928704][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1726.937101][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1726.945055][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1726.953016][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1726.960964][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.968910][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.976875][ C0] syz-executor.1 S29944 6729 6979 0x20020000 [ 1726.983183][ C0] Call Trace: [ 1726.986456][ C0] __schedule+0x8e1/0x1eb0 [ 1726.990850][ C0] ? io_schedule_timeout+0x140/0x140 [ 1726.996126][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1727.001577][ C0] schedule+0xd0/0x2a0 [ 1727.005624][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1727.010709][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1727.015885][ C0] futex_wait+0x1df/0x560 [ 1727.020196][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1727.025203][ C0] ? mark_lock+0xbc/0x1710 [ 1727.029591][ C0] ? mark_lock+0xbc/0x1710 [ 1727.033979][ C0] ? hash_futex+0x12/0x200 [ 1727.038367][ C0] ? futex_wake+0x155/0x490 [ 1727.042863][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1727.048819][ C0] do_futex+0x15b/0x1a60 [ 1727.053214][ C0] ? lock_acquire+0x1f1/0xad0 [ 1727.057870][ C0] ? __might_fault+0xef/0x1d0 [ 1727.062529][ C0] ? find_held_lock+0x2d/0x110 [ 1727.067266][ C0] ? futex_exit_release+0x220/0x220 [ 1727.072440][ C0] ? lock_downgrade+0x820/0x820 [ 1727.077276][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1727.083491][ C0] ? __might_fault+0x190/0x1d0 [ 1727.088228][ C0] ? _copy_to_user+0x126/0x160 [ 1727.092970][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1727.098406][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1727.103924][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1727.109890][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1727.114802][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1727.119891][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1727.124975][ C0] do_fast_syscall_32+0x7f/0x120 [ 1727.129885][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1727.134968][ C0] RIP: 0023:0xf7fa1569 [ 1727.139024][ C0] Code: Bad RIP value. [ 1727.143062][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1727.151459][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1727.159429][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1727.167390][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1727.175432][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1727.183499][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.191480][ C0] syz-executor.2 S29944 6764 7031 0x20020000 [ 1727.197793][ C0] Call Trace: [ 1727.201064][ C0] __schedule+0x8e1/0x1eb0 [ 1727.205549][ C0] ? io_schedule_timeout+0x140/0x140 [ 1727.210906][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1727.216345][ C0] schedule+0xd0/0x2a0 [ 1727.220389][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1727.225474][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1727.230647][ C0] futex_wait+0x1df/0x560 [ 1727.234965][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1727.239964][ C0] ? mark_lock+0xbc/0x1710 [ 1727.244355][ C0] ? mark_lock+0xbc/0x1710 [ 1727.248757][ C0] ? hash_futex+0x12/0x200 [ 1727.253148][ C0] ? futex_wake+0x155/0x490 [ 1727.257632][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1727.263587][ C0] do_futex+0x15b/0x1a60 [ 1727.267808][ C0] ? lock_acquire+0x1f1/0xad0 [ 1727.272460][ C0] ? __might_fault+0xef/0x1d0 [ 1727.277110][ C0] ? find_held_lock+0x2d/0x110 [ 1727.281847][ C0] ? futex_exit_release+0x220/0x220 [ 1727.287019][ C0] ? lock_downgrade+0x820/0x820 [ 1727.291844][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1727.298062][ C0] ? __might_fault+0x190/0x1d0 [ 1727.302798][ C0] ? _copy_to_user+0x126/0x160 [ 1727.307566][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1727.313012][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1727.318535][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1727.324534][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1727.329452][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1727.334550][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1727.339648][ C0] do_fast_syscall_32+0x7f/0x120 [ 1727.344620][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1727.349706][ C0] RIP: 0023:0xf7f91569 [ 1727.353743][ C0] Code: Bad RIP value. [ 1727.357782][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1727.366168][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1727.374126][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1727.382083][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1727.390042][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1727.397985][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.405943][ C0] syz-executor.4 S29944 6775 7392 0x20020000 [ 1727.412250][ C0] Call Trace: [ 1727.415531][ C0] __schedule+0x8e1/0x1eb0 [ 1727.419937][ C0] ? io_schedule_timeout+0x140/0x140 [ 1727.425199][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1727.430635][ C0] schedule+0xd0/0x2a0 [ 1727.434689][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1727.439775][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1727.444949][ C0] futex_wait+0x1df/0x560 [ 1727.449253][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1727.454277][ C0] ? mark_lock+0xbc/0x1710 [ 1727.458682][ C0] ? mark_lock+0xbc/0x1710 [ 1727.463072][ C0] ? hash_futex+0x12/0x200 [ 1727.467462][ C0] ? futex_wake+0x155/0x490 [ 1727.471947][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1727.477902][ C0] do_futex+0x15b/0x1a60 [ 1727.482125][ C0] ? lock_acquire+0x1f1/0xad0 [ 1727.486781][ C0] ? __might_fault+0xef/0x1d0 [ 1727.491517][ C0] ? find_held_lock+0x2d/0x110 [ 1727.496252][ C0] ? futex_exit_release+0x220/0x220 [ 1727.501432][ C0] ? lock_downgrade+0x820/0x820 [ 1727.506257][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1727.512475][ C0] ? __might_fault+0x190/0x1d0 [ 1727.517212][ C0] ? _copy_to_user+0x126/0x160 [ 1727.521952][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1727.527407][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1727.532926][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1727.538798][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1727.543718][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1727.548807][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1727.553890][ C0] do_fast_syscall_32+0x7f/0x120 [ 1727.558800][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1727.563892][ C0] RIP: 0023:0xf7fd7569 [ 1727.567929][ C0] Code: Bad RIP value. [ 1727.571966][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1727.580348][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1727.588291][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1727.596234][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1727.604188][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1727.612132][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.620086][ C0] syz-executor.1 S29944 6779 6979 0x20020000 [ 1727.626407][ C0] Call Trace: [ 1727.629681][ C0] __schedule+0x8e1/0x1eb0 [ 1727.634075][ C0] ? io_schedule_timeout+0x140/0x140 [ 1727.639333][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1727.644774][ C0] schedule+0xd0/0x2a0 [ 1727.648819][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1727.653924][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1727.659092][ C0] ? futex_wake+0x1b5/0x490 [ 1727.663570][ C0] ? find_held_lock+0x2d/0x110 [ 1727.668309][ C0] futex_wait+0x1df/0x560 [ 1727.672615][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1727.677628][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1727.682554][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1727.687736][ C0] ? futex_wake+0x155/0x490 [ 1727.692280][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1727.698239][ C0] do_futex+0x15b/0x1a60 [ 1727.702464][ C0] ? lock_acquire+0x1f1/0xad0 [ 1727.707115][ C0] ? __might_fault+0xef/0x1d0 [ 1727.711765][ C0] ? find_held_lock+0x2d/0x110 [ 1727.716543][ C0] ? futex_exit_release+0x220/0x220 [ 1727.721717][ C0] ? lock_downgrade+0x820/0x820 [ 1727.726543][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1727.732783][ C0] ? __might_fault+0x190/0x1d0 [ 1727.737533][ C0] ? _copy_to_user+0x126/0x160 [ 1727.742274][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1727.747731][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1727.753293][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1727.759171][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1727.764087][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1727.769180][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1727.774267][ C0] do_fast_syscall_32+0x7f/0x120 [ 1727.779182][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1727.784265][ C0] RIP: 0023:0xf7fa1569 [ 1727.788315][ C0] Code: Bad RIP value. [ 1727.792360][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1727.800749][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1727.808701][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1727.816649][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1727.824595][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1727.832540][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.840500][ C0] syz-executor.5 S29944 6785 7432 0x20020000 [ 1727.846842][ C0] Call Trace: [ 1727.850115][ C0] __schedule+0x8e1/0x1eb0 [ 1727.854513][ C0] ? io_schedule_timeout+0x140/0x140 [ 1727.859775][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1727.865211][ C0] schedule+0xd0/0x2a0 [ 1727.869256][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1727.874341][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1727.879510][ C0] ? futex_wake+0x1b5/0x490 [ 1727.883990][ C0] ? find_held_lock+0x2d/0x110 [ 1727.888747][ C0] futex_wait+0x1df/0x560 [ 1727.893074][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1727.898073][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1727.902986][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1727.908170][ C0] ? futex_wake+0x155/0x490 [ 1727.912657][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1727.918618][ C0] do_futex+0x15b/0x1a60 [ 1727.922840][ C0] ? lock_acquire+0x1f1/0xad0 [ 1727.927493][ C0] ? __might_fault+0xef/0x1d0 [ 1727.932155][ C0] ? find_held_lock+0x2d/0x110 [ 1727.936911][ C0] ? futex_exit_release+0x220/0x220 [ 1727.942085][ C0] ? lock_downgrade+0x820/0x820 [ 1727.946911][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1727.953128][ C0] ? __might_fault+0x190/0x1d0 [ 1727.957865][ C0] ? _copy_to_user+0x126/0x160 [ 1727.963473][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1727.968936][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1727.974465][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1727.980345][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1727.985257][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1727.990346][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1727.995431][ C0] do_fast_syscall_32+0x7f/0x120 [ 1728.000346][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1728.005431][ C0] RIP: 0023:0xf7f53569 [ 1728.009466][ C0] Code: Bad RIP value. [ 1728.013509][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1728.021892][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1728.029838][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1728.037796][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1728.045742][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.053687][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.061646][ C0] syz-executor.5 S29944 6790 7432 0x20020000 [ 1728.067954][ C0] Call Trace: [ 1728.071219][ C0] __schedule+0x8e1/0x1eb0 [ 1728.075614][ C0] ? io_schedule_timeout+0x140/0x140 [ 1728.080890][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1728.086340][ C0] schedule+0xd0/0x2a0 [ 1728.090399][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1728.095486][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1728.100661][ C0] futex_wait+0x1df/0x560 [ 1728.104977][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1728.109977][ C0] ? mark_lock+0xbc/0x1710 [ 1728.114367][ C0] ? mark_lock+0xbc/0x1710 [ 1728.118757][ C0] ? hash_futex+0x12/0x200 [ 1728.123145][ C0] ? futex_wake+0x155/0x490 [ 1728.127631][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1728.133586][ C0] do_futex+0x15b/0x1a60 [ 1728.137806][ C0] ? lock_acquire+0x1f1/0xad0 [ 1728.142482][ C0] ? __might_fault+0xef/0x1d0 [ 1728.147133][ C0] ? find_held_lock+0x2d/0x110 [ 1728.151871][ C0] ? futex_exit_release+0x220/0x220 [ 1728.157046][ C0] ? lock_downgrade+0x820/0x820 [ 1728.161870][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1728.168089][ C0] ? __might_fault+0x190/0x1d0 [ 1728.172847][ C0] ? _copy_to_user+0x126/0x160 [ 1728.177599][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1728.183060][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1728.188585][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1728.194471][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1728.199389][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1728.204483][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1728.209590][ C0] do_fast_syscall_32+0x7f/0x120 [ 1728.214523][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1728.219618][ C0] RIP: 0023:0xf7f53569 [ 1728.223658][ C0] Code: Bad RIP value. [ 1728.227733][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1728.236152][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1728.244097][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1728.252064][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1728.260031][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.267995][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.275957][ C0] syz-executor.5 S29944 6795 7432 0x20020000 [ 1728.282282][ C0] Call Trace: [ 1728.285553][ C0] __schedule+0x8e1/0x1eb0 [ 1728.289953][ C0] ? io_schedule_timeout+0x140/0x140 [ 1728.295215][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1728.300657][ C0] schedule+0xd0/0x2a0 [ 1728.304814][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1728.309911][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1728.315086][ C0] futex_wait+0x1df/0x560 [ 1728.319395][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1728.324395][ C0] ? mark_lock+0xbc/0x1710 [ 1728.328790][ C0] ? mark_lock+0xbc/0x1710 [ 1728.333201][ C0] ? hash_futex+0x12/0x200 [ 1728.337593][ C0] ? futex_wake+0x155/0x490 [ 1728.342092][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1728.348052][ C0] do_futex+0x15b/0x1a60 [ 1728.352301][ C0] ? lock_acquire+0x1f1/0xad0 [ 1728.357012][ C0] ? __might_fault+0xef/0x1d0 [ 1728.361685][ C0] ? find_held_lock+0x2d/0x110 [ 1728.366447][ C0] ? futex_exit_release+0x220/0x220 [ 1728.371808][ C0] ? lock_downgrade+0x820/0x820 [ 1728.376645][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1728.382910][ C0] ? __might_fault+0x190/0x1d0 [ 1728.387660][ C0] ? _copy_to_user+0x126/0x160 [ 1728.392527][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1728.398028][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1728.403564][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1728.409497][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1728.414442][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1728.419646][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1728.424759][ C0] do_fast_syscall_32+0x7f/0x120 [ 1728.429676][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1728.434766][ C0] RIP: 0023:0xf7f53569 [ 1728.438811][ C0] Code: Bad RIP value. [ 1728.442881][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1728.451267][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1728.459217][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1728.467166][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1728.475114][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.483062][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.491034][ C0] syz-executor.5 S29944 6803 7432 0x20020000 [ 1728.497358][ C0] Call Trace: [ 1728.500627][ C0] __schedule+0x8e1/0x1eb0 [ 1728.505024][ C0] ? io_schedule_timeout+0x140/0x140 [ 1728.510285][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1728.515744][ C0] schedule+0xd0/0x2a0 [ 1728.519790][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1728.524875][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1728.530051][ C0] futex_wait+0x1df/0x560 [ 1728.534361][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1728.539361][ C0] ? mark_lock+0xbc/0x1710 [ 1728.543753][ C0] ? mark_lock+0xbc/0x1710 [ 1728.548143][ C0] ? hash_futex+0x12/0x200 [ 1728.552535][ C0] ? futex_wake+0x155/0x490 [ 1728.557022][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1728.562995][ C0] do_futex+0x15b/0x1a60 [ 1728.567218][ C0] ? lock_acquire+0x1f1/0xad0 [ 1728.571886][ C0] ? __might_fault+0xef/0x1d0 [ 1728.576875][ C0] ? find_held_lock+0x2d/0x110 [ 1728.581616][ C0] ? futex_exit_release+0x220/0x220 [ 1728.586794][ C0] ? lock_downgrade+0x820/0x820 [ 1728.591656][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1728.597893][ C0] ? __might_fault+0x190/0x1d0 [ 1728.602635][ C0] ? _copy_to_user+0x126/0x160 [ 1728.607386][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1728.613194][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1728.618803][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1728.624695][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1728.629612][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1728.634720][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1728.639809][ C0] do_fast_syscall_32+0x7f/0x120 [ 1728.644742][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1728.649832][ C0] RIP: 0023:0xf7f53569 [ 1728.653872][ C0] Code: Bad RIP value. [ 1728.657914][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1728.666321][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1728.674287][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1728.682242][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1728.690188][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.698134][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.706091][ C0] syz-executor.4 S29944 6843 7392 0x20020000 [ 1728.712399][ C0] Call Trace: [ 1728.715698][ C0] __schedule+0x8e1/0x1eb0 [ 1728.720118][ C0] ? io_schedule_timeout+0x140/0x140 [ 1728.725390][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1728.730827][ C0] schedule+0xd0/0x2a0 [ 1728.735046][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1728.740131][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1728.745410][ C0] futex_wait+0x1df/0x560 [ 1728.749724][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1728.754829][ C0] ? mark_lock+0xbc/0x1710 [ 1728.759220][ C0] ? mark_lock+0xbc/0x1710 [ 1728.763611][ C0] ? hash_futex+0x12/0x200 [ 1728.768032][ C0] ? futex_wake+0x155/0x490 [ 1728.772550][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1728.778506][ C0] do_futex+0x15b/0x1a60 [ 1728.782743][ C0] ? lock_acquire+0x1f1/0xad0 [ 1728.787396][ C0] ? __might_fault+0xef/0x1d0 [ 1728.792048][ C0] ? find_held_lock+0x2d/0x110 [ 1728.796790][ C0] ? futex_exit_release+0x220/0x220 [ 1728.806757][ C0] ? lock_downgrade+0x820/0x820 [ 1728.811675][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1728.817899][ C0] ? __might_fault+0x190/0x1d0 [ 1728.822668][ C0] ? _copy_to_user+0x126/0x160 [ 1728.827412][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1728.832951][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1728.838473][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1728.844357][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1728.849274][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1728.854366][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1728.859478][ C0] do_fast_syscall_32+0x7f/0x120 [ 1728.864413][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1728.869512][ C0] RIP: 0023:0xf7fd7569 [ 1728.873564][ C0] Code: Bad RIP value. [ 1728.877609][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1728.886031][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1728.894091][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1728.902039][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1728.909986][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.917947][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.925917][ C0] syz-executor.2 S29944 6846 7031 0x20020000 [ 1728.932231][ C0] Call Trace: [ 1728.935523][ C0] __schedule+0x8e1/0x1eb0 [ 1728.939926][ C0] ? io_schedule_timeout+0x140/0x140 [ 1728.945205][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1728.950666][ C0] schedule+0xd0/0x2a0 [ 1728.954716][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1728.959803][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1728.964994][ C0] futex_wait+0x1df/0x560 [ 1728.969302][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1728.974395][ C0] ? mark_lock+0xbc/0x1710 [ 1728.978791][ C0] ? mark_lock+0xbc/0x1710 [ 1728.983183][ C0] ? hash_futex+0x12/0x200 [ 1728.987576][ C0] ? futex_wake+0x155/0x490 [ 1728.992065][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1728.998040][ C0] do_futex+0x15b/0x1a60 [ 1729.002264][ C0] ? lock_acquire+0x1f1/0xad0 [ 1729.006916][ C0] ? __might_fault+0xef/0x1d0 [ 1729.011568][ C0] ? find_held_lock+0x2d/0x110 [ 1729.016306][ C0] ? futex_exit_release+0x220/0x220 [ 1729.021502][ C0] ? lock_downgrade+0x820/0x820 [ 1729.026345][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1729.032653][ C0] ? __might_fault+0x190/0x1d0 [ 1729.037393][ C0] ? _copy_to_user+0x126/0x160 [ 1729.042151][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1729.047588][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1729.053109][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1729.058980][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1729.063893][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1729.068983][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1729.074069][ C0] do_fast_syscall_32+0x7f/0x120 [ 1729.078983][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1729.084068][ C0] RIP: 0023:0xf7f91569 [ 1729.088107][ C0] Code: Bad RIP value. [ 1729.092156][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1729.100546][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1729.108493][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1729.116457][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1729.124410][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1729.132356][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.140318][ C0] syz-executor.0 S28736 6871 6841 0x20020000 [ 1729.146626][ C0] Call Trace: [ 1729.149893][ C0] __schedule+0x8e1/0x1eb0 [ 1729.154291][ C0] ? io_schedule_timeout+0x140/0x140 [ 1729.159551][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1729.165008][ C0] schedule+0xd0/0x2a0 [ 1729.169053][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1729.174143][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1729.179327][ C0] futex_wait+0x1df/0x560 [ 1729.183650][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1729.188652][ C0] ? mark_lock+0xbc/0x1710 [ 1729.193060][ C0] ? hash_futex+0x12/0x200 [ 1729.197578][ C0] ? futex_wake+0x155/0x490 [ 1729.202159][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1729.208125][ C0] do_futex+0x15b/0x1a60 [ 1729.212356][ C0] ? lock_acquire+0x1f1/0xad0 [ 1729.217015][ C0] ? __might_fault+0xef/0x1d0 [ 1729.221671][ C0] ? find_held_lock+0x2d/0x110 [ 1729.226414][ C0] ? futex_exit_release+0x220/0x220 [ 1729.231590][ C0] ? lock_downgrade+0x820/0x820 [ 1729.236417][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1729.242639][ C0] ? __might_fault+0x190/0x1d0 [ 1729.247378][ C0] ? _copy_to_user+0x126/0x160 [ 1729.252126][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1729.257565][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1729.263103][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1729.268975][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1729.273888][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1729.279021][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1729.284110][ C0] do_fast_syscall_32+0x7f/0x120 [ 1729.289032][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1729.294117][ C0] RIP: 0023:0xf7fd1569 [ 1729.298155][ C0] Code: Bad RIP value. [ 1729.302200][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1729.310584][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1729.318531][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1729.326477][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1729.334427][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1729.342375][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.350347][ C0] syz-executor.0 S29944 6894 6841 0x20020000 [ 1729.356658][ C0] Call Trace: [ 1729.359929][ C0] __schedule+0x8e1/0x1eb0 [ 1729.364327][ C0] ? io_schedule_timeout+0x140/0x140 [ 1729.369616][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1729.375074][ C0] schedule+0xd0/0x2a0 [ 1729.379128][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1729.384223][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1729.389405][ C0] futex_wait+0x1df/0x560 [ 1729.393718][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1729.398727][ C0] ? wake_up_q+0xa3/0x100 [ 1729.403035][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1729.408213][ C0] ? futex_wake+0x155/0x490 [ 1729.412706][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1729.418672][ C0] do_futex+0x15b/0x1a60 [ 1729.422895][ C0] ? lock_acquire+0x1f1/0xad0 [ 1729.427555][ C0] ? __might_fault+0xef/0x1d0 [ 1729.432259][ C0] ? find_held_lock+0x2d/0x110 [ 1729.437000][ C0] ? futex_exit_release+0x220/0x220 [ 1729.442175][ C0] ? lock_downgrade+0x820/0x820 [ 1729.447003][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1729.453243][ C0] ? __might_fault+0x190/0x1d0 [ 1729.457982][ C0] ? _copy_to_user+0x126/0x160 [ 1729.462724][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1729.468194][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1729.473716][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1729.479586][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1729.484498][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1729.489610][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1729.494697][ C0] do_fast_syscall_32+0x7f/0x120 [ 1729.499629][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1729.504715][ C0] RIP: 0023:0xf7fd1569 [ 1729.508754][ C0] Code: Bad RIP value. [ 1729.512792][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1729.521177][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1729.529139][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1729.537085][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1729.545029][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1729.552976][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.560936][ C0] syz-executor.0 S29944 6902 6841 0x20020000 [ 1729.567247][ C0] Call Trace: [ 1729.570514][ C0] __schedule+0x8e1/0x1eb0 [ 1729.574912][ C0] ? io_schedule_timeout+0x140/0x140 [ 1729.580175][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1729.585614][ C0] schedule+0xd0/0x2a0 [ 1729.589661][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1729.594771][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1729.599947][ C0] futex_wait+0x1df/0x560 [ 1729.604254][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1729.609276][ C0] ? wake_up_q+0xa3/0x100 [ 1729.613581][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1729.618753][ C0] ? futex_wake+0x155/0x490 [ 1729.623257][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1729.629300][ C0] do_futex+0x15b/0x1a60 [ 1729.633522][ C0] ? lock_acquire+0x1f1/0xad0 [ 1729.638871][ C0] ? __might_fault+0xef/0x1d0 [ 1729.643523][ C0] ? find_held_lock+0x2d/0x110 [ 1729.648792][ C0] ? futex_exit_release+0x220/0x220 [ 1729.653970][ C0] ? lock_downgrade+0x820/0x820 [ 1729.658814][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1729.665036][ C0] ? __might_fault+0x190/0x1d0 [ 1729.669776][ C0] ? _copy_to_user+0x126/0x160 [ 1729.674519][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1729.679964][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1729.685483][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1729.691354][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1729.696272][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1729.701382][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1729.706469][ C0] do_fast_syscall_32+0x7f/0x120 [ 1729.711384][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1729.716470][ C0] RIP: 0023:0xf7fd1569 [ 1729.720509][ C0] Code: Bad RIP value. [ 1729.724554][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1729.732956][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1729.740904][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1729.748852][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1729.756799][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1729.764745][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.772701][ C0] syz-executor.0 S29944 6910 6841 0x20020000 [ 1729.779014][ C0] Call Trace: [ 1729.782301][ C0] __schedule+0x8e1/0x1eb0 [ 1729.786698][ C0] ? io_schedule_timeout+0x140/0x140 [ 1729.796385][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1729.801822][ C0] schedule+0xd0/0x2a0 [ 1729.805868][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1729.810952][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1729.816145][ C0] futex_wait+0x1df/0x560 [ 1729.820453][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1729.825455][ C0] ? wake_up_q+0xa3/0x100 [ 1729.829785][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1729.834958][ C0] ? futex_wake+0x155/0x490 [ 1729.839462][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1729.845417][ C0] do_futex+0x15b/0x1a60 [ 1729.849760][ C0] ? lock_acquire+0x1f1/0xad0 [ 1729.854429][ C0] ? __might_fault+0xef/0x1d0 [ 1729.859096][ C0] ? find_held_lock+0x2d/0x110 [ 1729.863852][ C0] ? futex_exit_release+0x220/0x220 [ 1729.869028][ C0] ? lock_downgrade+0x820/0x820 [ 1729.873874][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1729.880094][ C0] ? __might_fault+0x190/0x1d0 [ 1729.884832][ C0] ? _copy_to_user+0x126/0x160 [ 1729.889575][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1729.895028][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1729.900548][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1729.906419][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1729.911333][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1729.916423][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1729.921513][ C0] do_fast_syscall_32+0x7f/0x120 [ 1729.926425][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1729.931518][ C0] RIP: 0023:0xf7fd1569 [ 1729.935556][ C0] Code: Bad RIP value. [ 1729.939597][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1729.947981][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1729.955925][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1729.963872][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1729.971819][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1729.979955][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.987916][ C0] syz-executor.4 S29944 8356 7392 0x20020000 [ 1729.994235][ C0] Call Trace: [ 1729.997505][ C0] __schedule+0x8e1/0x1eb0 [ 1730.001901][ C0] ? io_schedule_timeout+0x140/0x140 [ 1730.007163][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1730.012598][ C0] schedule+0xd0/0x2a0 [ 1730.016660][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1730.021761][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1730.026938][ C0] futex_wait+0x1df/0x560 [ 1730.031246][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1730.036294][ C0] ? mark_lock+0xbc/0x1710 [ 1730.040703][ C0] ? hash_futex+0x12/0x200 [ 1730.045137][ C0] ? futex_wake+0x155/0x490 [ 1730.049644][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1730.055604][ C0] do_futex+0x15b/0x1a60 [ 1730.059833][ C0] ? lock_acquire+0x1f1/0xad0 [ 1730.064486][ C0] ? __might_fault+0xef/0x1d0 [ 1730.069143][ C0] ? find_held_lock+0x2d/0x110 [ 1730.073884][ C0] ? futex_exit_release+0x220/0x220 [ 1730.079059][ C0] ? lock_downgrade+0x820/0x820 [ 1730.083884][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1730.090105][ C0] ? __might_fault+0x190/0x1d0 [ 1730.094846][ C0] ? _copy_to_user+0x126/0x160 [ 1730.099592][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1730.105031][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1730.110553][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1730.116436][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1730.121351][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1730.126445][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1730.131557][ C0] do_fast_syscall_32+0x7f/0x120 [ 1730.136494][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1730.141592][ C0] RIP: 0023:0xf7fd7569 [ 1730.145634][ C0] Code: Bad RIP value. [ 1730.149712][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1730.158101][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1730.166048][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1730.173996][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1730.182129][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.190083][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.198049][ C0] syz-executor.0 T29992 8923 6841 0x20024004 [ 1730.204361][ C0] Call Trace: [ 1730.207633][ C0] __schedule+0x8e1/0x1eb0 [ 1730.212032][ C0] ? io_schedule_timeout+0x140/0x140 [ 1730.217991][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1730.223165][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.229125][ C0] schedule+0xd0/0x2a0 [ 1730.233179][ C0] do_signal_stop+0x32f/0x840 [ 1730.237834][ C0] get_signal+0xc0b/0x1fc0 [ 1730.242383][ C0] do_signal+0x82/0x2520 [ 1730.246614][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1730.251964][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1730.257227][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1730.263884][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1730.269669][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.275637][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1730.281338][ C0] do_fast_syscall_32+0x7f/0x120 [ 1730.286257][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1730.291346][ C0] RIP: 0023:0xf7fd1569 [ 1730.295388][ C0] Code: Bad RIP value. [ 1730.299431][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1730.307831][ C0] RAX: 0000000000000000 RBX: 0000000000000c24 RCX: 0000000000000c24 [ 1730.315878][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1730.323836][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.331785][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.339750][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.347740][ C0] syz-executor.0 T30000 8935 6841 0x20024004 [ 1730.354053][ C0] Call Trace: [ 1730.357325][ C0] __schedule+0x8e1/0x1eb0 [ 1730.361724][ C0] ? io_schedule_timeout+0x140/0x140 [ 1730.367003][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1730.372196][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.378206][ C0] schedule+0xd0/0x2a0 [ 1730.382266][ C0] do_signal_stop+0x32f/0x840 [ 1730.386932][ C0] get_signal+0xc0b/0x1fc0 [ 1730.391378][ C0] do_signal+0x82/0x2520 [ 1730.395604][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1730.400953][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1730.406318][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1730.413053][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1730.418845][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.424805][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1730.430508][ C0] do_fast_syscall_32+0x7f/0x120 [ 1730.435443][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1730.440529][ C0] RIP: 0023:0xf7fd1569 [ 1730.444577][ C0] Code: Bad RIP value. [ 1730.448623][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1730.457035][ C0] RAX: 0000000000000000 RBX: 0000000000000c29 RCX: 0000000000000c29 [ 1730.464981][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1730.472939][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.480890][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.488924][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.496906][ C0] syz-executor.0 T29728 8944 6841 0x20024004 [ 1730.503313][ C0] Call Trace: [ 1730.506608][ C0] __schedule+0x8e1/0x1eb0 [ 1730.511024][ C0] ? io_schedule_timeout+0x140/0x140 [ 1730.516359][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1730.521552][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.527524][ C0] schedule+0xd0/0x2a0 [ 1730.531594][ C0] do_signal_stop+0x32f/0x840 [ 1730.536251][ C0] get_signal+0xc0b/0x1fc0 [ 1730.540655][ C0] do_signal+0x82/0x2520 [ 1730.544877][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1730.550226][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1730.555492][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1730.562154][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1730.567935][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.573893][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1730.579591][ C0] do_fast_syscall_32+0x7f/0x120 [ 1730.584506][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1730.589613][ C0] RIP: 0023:0xf7fd1569 [ 1730.593654][ C0] Code: Bad RIP value. [ 1730.597693][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1730.606082][ C0] RAX: 0000000000000000 RBX: 0000000000000c2c RCX: 0000000000000c2c [ 1730.614030][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1730.621976][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.630268][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.638230][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.646193][ C0] syz-executor.0 T29168 8952 6841 0x20024004 [ 1730.652503][ C0] Call Trace: [ 1730.655799][ C0] __schedule+0x8e1/0x1eb0 [ 1730.660197][ C0] ? io_schedule_timeout+0x140/0x140 [ 1730.665460][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1730.670653][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.676609][ C0] schedule+0xd0/0x2a0 [ 1730.680655][ C0] do_signal_stop+0x32f/0x840 [ 1730.685310][ C0] get_signal+0xc0b/0x1fc0 [ 1730.689732][ C0] do_signal+0x82/0x2520 [ 1730.693955][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1730.699302][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1730.704565][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1730.711220][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1730.717001][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1730.723134][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1730.728932][ C0] do_fast_syscall_32+0x7f/0x120 [ 1730.733843][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1730.738928][ C0] RIP: 0023:0xf7fd1569 [ 1730.742966][ C0] Code: Bad RIP value. [ 1730.747005][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1730.755390][ C0] RAX: 0000000000000000 RBX: 0000000000000c2f RCX: 0000000000000c2f [ 1730.763335][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1730.771300][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.779262][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.787209][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.795187][ C0] syz-executor.4 S30088 9061 7392 0x20020000 [ 1730.801499][ C0] Call Trace: [ 1730.804787][ C0] __schedule+0x8e1/0x1eb0 [ 1730.809187][ C0] ? io_schedule_timeout+0x140/0x140 [ 1730.814475][ C0] ? wait_for_completion+0x260/0x260 [ 1730.819864][ C0] schedule+0xd0/0x2a0 [ 1730.823932][ C0] pipe_wait+0x155/0x240 [ 1730.829642][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1730.834734][ C0] ? finish_wait+0x260/0x260 [ 1730.839318][ C0] ? finish_wait+0x260/0x260 [ 1730.843974][ C0] ? pipe_lock+0x5a/0x70 [ 1730.848198][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1730.853997][ C0] __splice_from_pipe+0x114/0x830 [ 1730.859001][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1730.864962][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1730.869794][ C0] do_vmsplice+0x2f7/0x380 [ 1730.874185][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1730.879448][ C0] ? lock_downgrade+0x820/0x820 [ 1730.884276][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1730.890494][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1730.896036][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1730.901121][ C0] ? __might_fault+0x190/0x1d0 [ 1730.905859][ C0] ? _copy_to_user+0x126/0x160 [ 1730.910602][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1730.915782][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1730.921652][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1730.926567][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1730.931659][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1730.936759][ C0] do_fast_syscall_32+0x7f/0x120 [ 1730.941679][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1730.946771][ C0] RIP: 0023:0xf7fd7569 [ 1730.950811][ C0] Code: Bad RIP value. [ 1730.954867][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1730.963269][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1730.971236][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.979209][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.987157][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.995121][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.003085][ C0] syz-executor.4 S29944 9087 7392 0x20020000 [ 1731.009396][ C0] Call Trace: [ 1731.012682][ C0] __schedule+0x8e1/0x1eb0 [ 1731.017083][ C0] ? io_schedule_timeout+0x140/0x140 [ 1731.022359][ C0] ? wait_for_completion+0x260/0x260 [ 1731.027623][ C0] schedule+0xd0/0x2a0 [ 1731.031671][ C0] pipe_wait+0x155/0x240 [ 1731.035891][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1731.040908][ C0] ? finish_wait+0x260/0x260 [ 1731.045476][ C0] ? finish_wait+0x260/0x260 [ 1731.050058][ C0] ? pipe_lock+0x5a/0x70 [ 1731.054288][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1731.060111][ C0] __splice_from_pipe+0x114/0x830 [ 1731.065131][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1731.071179][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1731.076024][ C0] do_vmsplice+0x2f7/0x380 [ 1731.080417][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1731.085687][ C0] ? lock_downgrade+0x820/0x820 [ 1731.090516][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1731.096737][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1731.102258][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1731.107344][ C0] ? __might_fault+0x190/0x1d0 [ 1731.112084][ C0] ? _copy_to_user+0x126/0x160 [ 1731.116829][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1731.122024][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1731.127895][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1731.132806][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1731.137919][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1731.143166][ C0] do_fast_syscall_32+0x7f/0x120 [ 1731.148101][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1731.153196][ C0] RIP: 0023:0xf7fd7569 [ 1731.157239][ C0] Code: Bad RIP value. [ 1731.161284][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1731.170018][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1731.178971][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.186919][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.194868][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.202817][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.210824][ C0] syz-executor.4 S29944 9104 7392 0x20020000 [ 1731.217180][ C0] Call Trace: [ 1731.220450][ C0] __schedule+0x8e1/0x1eb0 [ 1731.224847][ C0] ? io_schedule_timeout+0x140/0x140 [ 1731.230113][ C0] ? wait_for_completion+0x260/0x260 [ 1731.235397][ C0] schedule+0xd0/0x2a0 [ 1731.239455][ C0] pipe_wait+0x155/0x240 [ 1731.243683][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1731.248694][ C0] ? finish_wait+0x260/0x260 [ 1731.253497][ C0] ? finish_wait+0x260/0x260 [ 1731.258932][ C0] ? pipe_lock+0x5a/0x70 [ 1731.263166][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1731.269077][ C0] __splice_from_pipe+0x114/0x830 [ 1731.274092][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1731.280056][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1731.284899][ C0] do_vmsplice+0x2f7/0x380 [ 1731.289348][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1731.294616][ C0] ? lock_downgrade+0x820/0x820 [ 1731.299447][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1731.305667][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1731.311211][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1731.316838][ C0] ? __might_fault+0x190/0x1d0 [ 1731.321579][ C0] ? _copy_to_user+0x126/0x160 [ 1731.326333][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1731.331511][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1731.337401][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1731.342315][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1731.347456][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1731.352592][ C0] do_fast_syscall_32+0x7f/0x120 [ 1731.357664][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1731.362800][ C0] RIP: 0023:0xf7fd7569 [ 1731.366844][ C0] Code: Bad RIP value. [ 1731.370938][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1731.379372][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1731.387328][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.395290][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.403235][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.411269][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.419244][ C0] syz-executor.0 S30088 9108 6841 0x20020000 [ 1731.425556][ C0] Call Trace: [ 1731.428825][ C0] __schedule+0x8e1/0x1eb0 [ 1731.433227][ C0] ? io_schedule_timeout+0x140/0x140 [ 1731.438491][ C0] ? wait_for_completion+0x260/0x260 [ 1731.443773][ C0] schedule+0xd0/0x2a0 [ 1731.447822][ C0] pipe_wait+0x155/0x240 [ 1731.452043][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1731.457062][ C0] ? finish_wait+0x260/0x260 [ 1731.461659][ C0] ? finish_wait+0x260/0x260 [ 1731.466224][ C0] ? pipe_lock+0x5a/0x70 [ 1731.470462][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1731.476264][ C0] __splice_from_pipe+0x114/0x830 [ 1731.481265][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1731.487219][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1731.492051][ C0] do_vmsplice+0x2f7/0x380 [ 1731.496444][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1731.501723][ C0] ? lock_downgrade+0x820/0x820 [ 1731.506567][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1731.512811][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1731.518508][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1731.523596][ C0] ? __might_fault+0x190/0x1d0 [ 1731.528335][ C0] ? _copy_to_user+0x126/0x160 [ 1731.533077][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1731.538256][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1731.544141][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1731.549056][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1731.554163][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1731.559251][ C0] do_fast_syscall_32+0x7f/0x120 [ 1731.564946][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1731.570033][ C0] RIP: 0023:0xf7fd1569 [ 1731.574087][ C0] Code: Bad RIP value. [ 1731.578142][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1731.586526][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1731.594472][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.602418][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.610369][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.618417][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.626378][ C0] syz-executor.4 S30088 9112 7392 0x20020000 [ 1731.632688][ C0] Call Trace: [ 1731.635955][ C0] __schedule+0x8e1/0x1eb0 [ 1731.640353][ C0] ? io_schedule_timeout+0x140/0x140 [ 1731.645621][ C0] ? wait_for_completion+0x260/0x260 [ 1731.650888][ C0] schedule+0xd0/0x2a0 [ 1731.654935][ C0] pipe_wait+0x155/0x240 [ 1731.659155][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1731.664177][ C0] ? finish_wait+0x260/0x260 [ 1731.668746][ C0] ? finish_wait+0x260/0x260 [ 1731.673312][ C0] ? pipe_lock+0x5a/0x70 [ 1731.677533][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1731.683317][ C0] __splice_from_pipe+0x114/0x830 [ 1731.688336][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1731.694322][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1731.699152][ C0] do_vmsplice+0x2f7/0x380 [ 1731.703545][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1731.708837][ C0] ? lock_downgrade+0x820/0x820 [ 1731.713667][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1731.719903][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1731.725440][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1731.730526][ C0] ? __might_fault+0x190/0x1d0 [ 1731.735526][ C0] ? _copy_to_user+0x126/0x160 [ 1731.740272][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1731.745452][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1731.751324][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1731.756253][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1731.761354][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1731.766446][ C0] do_fast_syscall_32+0x7f/0x120 [ 1731.771365][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1731.776453][ C0] RIP: 0023:0xf7fd7569 [ 1731.780507][ C0] Code: Bad RIP value. [ 1731.784546][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1731.792931][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1731.800896][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.808843][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.816794][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.825193][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.833152][ C0] syz-executor.0 S29944 9130 6841 0x20020000 [ 1731.839478][ C0] Call Trace: [ 1731.842747][ C0] __schedule+0x8e1/0x1eb0 [ 1731.847170][ C0] ? io_schedule_timeout+0x140/0x140 [ 1731.852436][ C0] ? wait_for_completion+0x260/0x260 [ 1731.857706][ C0] schedule+0xd0/0x2a0 [ 1731.861826][ C0] pipe_wait+0x155/0x240 [ 1731.866051][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1731.871113][ C0] ? finish_wait+0x260/0x260 [ 1731.875683][ C0] ? finish_wait+0x260/0x260 [ 1731.880250][ C0] ? pipe_lock+0x5a/0x70 [ 1731.884512][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1731.890300][ C0] __splice_from_pipe+0x114/0x830 [ 1731.895302][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1731.901254][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1731.906080][ C0] do_vmsplice+0x2f7/0x380 [ 1731.910472][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1731.915737][ C0] ? lock_downgrade+0x820/0x820 [ 1731.920566][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1731.927566][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1731.933101][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1731.938189][ C0] ? __might_fault+0x190/0x1d0 [ 1731.942943][ C0] ? _copy_to_user+0x126/0x160 [ 1731.947691][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1731.952868][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1731.958753][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1731.963668][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1731.968783][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1731.973887][ C0] do_fast_syscall_32+0x7f/0x120 [ 1731.978801][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1731.983888][ C0] RIP: 0023:0xf7fd1569 [ 1731.987926][ C0] Code: Bad RIP value. [ 1731.991981][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1732.000366][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1732.008421][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1732.016383][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1732.024503][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1732.032448][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.040407][ C0] syz-executor.0 S29944 9148 6841 0x20020000 [ 1732.046729][ C0] Call Trace: [ 1732.049998][ C0] __schedule+0x8e1/0x1eb0 [ 1732.054391][ C0] ? io_schedule_timeout+0x140/0x140 [ 1732.059652][ C0] ? wait_for_completion+0x260/0x260 [ 1732.064916][ C0] schedule+0xd0/0x2a0 [ 1732.068961][ C0] pipe_wait+0x155/0x240 [ 1732.073180][ C0] ? pipe_double_lock+0x1e0/0x1e0 [ 1732.078179][ C0] ? finish_wait+0x260/0x260 [ 1732.082758][ C0] ? finish_wait+0x260/0x260 [ 1732.087329][ C0] ? pipe_lock+0x5a/0x70 [ 1732.091550][ C0] splice_from_pipe_next.part.0+0xde/0x3c0 [ 1732.097331][ C0] __splice_from_pipe+0x114/0x830 [ 1732.102333][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1732.108286][ C0] ? write_pipe_buf+0x1f0/0x1f0 [ 1732.113123][ C0] do_vmsplice+0x2f7/0x380 [ 1732.117515][ C0] ? direct_splice_actor+0x2f0/0x2f0 [ 1732.122776][ C0] ? lock_downgrade+0x820/0x820 [ 1732.127602][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1732.133819][ C0] __do_compat_sys_vmsplice+0x18d/0x260 [ 1732.139341][ C0] ? __do_sys_vmsplice+0x260/0x260 [ 1732.144427][ C0] ? __might_fault+0x190/0x1d0 [ 1732.149163][ C0] ? _copy_to_user+0x126/0x160 [ 1732.153906][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1732.159083][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1732.164959][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1732.169893][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1732.174999][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1732.180093][ C0] do_fast_syscall_32+0x7f/0x120 [ 1732.185007][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1732.190095][ C0] RIP: 0023:0xf7fd1569 [ 1732.194150][ C0] Code: Bad RIP value. [ 1732.198198][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 1732.206606][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 1732.214565][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1732.222561][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1732.230510][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1732.238459][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.246420][ C0] syz-executor.0 T28752 9574 6841 0x20024004 [ 1732.252767][ C0] Call Trace: [ 1732.256038][ C0] __schedule+0x8e1/0x1eb0 [ 1732.260436][ C0] ? io_schedule_timeout+0x140/0x140 [ 1732.265697][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1732.271656][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1732.277797][ C0] schedule+0xd0/0x2a0 [ 1732.281843][ C0] do_signal_stop+0x32f/0x840 [ 1732.286515][ C0] get_signal+0xc0b/0x1fc0 [ 1732.290917][ C0] do_signal+0x82/0x2520 [ 1732.295141][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1732.300485][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1732.305746][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1732.312419][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1732.318199][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1732.324159][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1732.329855][ C0] do_fast_syscall_32+0x7f/0x120 [ 1732.334769][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1732.339853][ C0] RIP: 0023:0xf7fd1569 [ 1732.343890][ C0] Code: Bad RIP value. [ 1732.347938][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1732.359755][ C0] RAX: 0000000000000000 RBX: 0000000000000c8e RCX: 0000000000000c8e [ 1732.367750][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1732.375711][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1732.383669][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1732.391676][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.399642][ C0] syz-executor.0 S29944 9576 9574 0x20020000 [ 1732.405981][ C0] Call Trace: [ 1732.409252][ C0] __schedule+0x8e1/0x1eb0 [ 1732.413652][ C0] ? io_schedule_timeout+0x140/0x140 [ 1732.418914][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1732.424352][ C0] schedule+0xd0/0x2a0 [ 1732.428405][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1732.433493][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1732.438758][ C0] ? futex_wake+0x1b5/0x490 [ 1732.443236][ C0] ? find_held_lock+0x2d/0x110 [ 1732.448002][ C0] futex_wait+0x1df/0x560 [ 1732.452317][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1732.457320][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1732.462237][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1732.467550][ C0] ? futex_wake+0x155/0x490 [ 1732.472059][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1732.478033][ C0] do_futex+0x15b/0x1a60 [ 1732.482264][ C0] ? lock_acquire+0x1f1/0xad0 [ 1732.486918][ C0] ? __might_fault+0xef/0x1d0 [ 1732.491570][ C0] ? find_held_lock+0x2d/0x110 [ 1732.496312][ C0] ? futex_exit_release+0x220/0x220 [ 1732.501492][ C0] ? lock_downgrade+0x820/0x820 [ 1732.506323][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1732.512545][ C0] ? __might_fault+0x190/0x1d0 [ 1732.517285][ C0] ? _copy_to_user+0x126/0x160 [ 1732.522093][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1732.527534][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1732.533056][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1732.538932][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1732.547520][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1732.552621][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1732.557724][ C0] do_fast_syscall_32+0x7f/0x120 [ 1732.562990][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1732.568079][ C0] RIP: 0023:0xf7fd1569 [ 1732.572126][ C0] Code: Bad RIP value. [ 1732.576165][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1732.584553][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1732.592501][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1732.600447][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1732.608393][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1732.616338][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.624298][ C0] syz-executor.4 D26376 9620 7392 0x20024000 [ 1732.630615][ C0] Call Trace: [ 1732.633882][ C0] __schedule+0x8e1/0x1eb0 [ 1732.638279][ C0] ? io_schedule_timeout+0x140/0x140 [ 1732.643580][ C0] schedule+0xd0/0x2a0 [ 1732.647627][ C0] schedule_timeout+0x1d8/0x250 [ 1732.652455][ C0] ? usleep_range+0x170/0x170 [ 1732.657116][ C0] ? lock_downgrade+0x820/0x820 [ 1732.661943][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1732.666942][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1732.672146][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1732.678139][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1732.683163][ C0] wait_for_completion_killable+0x162/0x310 [ 1732.689055][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1732.694059][ C0] ? wait_for_completion_killable_timeout+0x2e0/0x2e0 [ 1732.700797][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1732.706752][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1732.711777][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1732.716886][ C0] _do_fork+0x5d7/0xa70 [ 1732.721019][ C0] ? copy_init_mm+0x20/0x20 [ 1732.725502][ C0] ? _copy_to_user+0x126/0x160 [ 1732.730246][ C0] __do_compat_sys_ia32_clone+0xbe/0x110 [ 1732.735854][ C0] ? pci_biosrom_size+0x90/0x90 [ 1732.740704][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1732.745864][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1732.751831][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1732.756865][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1732.761960][ C0] do_fast_syscall_32+0x7f/0x120 [ 1732.766878][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1732.771975][ C0] RIP: 0023:0xf7fd7569 [ 1732.776012][ C0] Code: Bad RIP value. [ 1732.780051][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 1732.788438][ C0] RAX: ffffffffffffffda RBX: 00000000e1004d7c RCX: 0000000000000000 [ 1732.796470][ C0] RDX: 0000000099999999 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1732.804419][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1732.812365][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1732.820310][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.828277][ C0] syz-executor.5 S29944 9623 7432 0x20020000 [ 1732.834594][ C0] Call Trace: [ 1732.837870][ C0] __schedule+0x8e1/0x1eb0 [ 1732.842277][ C0] ? io_schedule_timeout+0x140/0x140 [ 1732.847535][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1732.852972][ C0] schedule+0xd0/0x2a0 [ 1732.857017][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1732.862100][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1732.867709][ C0] futex_wait+0x1df/0x560 [ 1732.872016][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1732.877028][ C0] ? mark_lock+0xbc/0x1710 [ 1732.881419][ C0] ? mark_lock+0xbc/0x1710 [ 1732.885808][ C0] ? hash_futex+0x12/0x200 [ 1732.890197][ C0] ? futex_wake+0x155/0x490 [ 1732.894681][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1732.900721][ C0] do_futex+0x15b/0x1a60 [ 1732.904942][ C0] ? lock_acquire+0x1f1/0xad0 [ 1732.909593][ C0] ? __might_fault+0xef/0x1d0 [ 1732.914242][ C0] ? find_held_lock+0x2d/0x110 [ 1732.918980][ C0] ? futex_exit_release+0x220/0x220 [ 1732.924156][ C0] ? lock_downgrade+0x820/0x820 [ 1732.928998][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1732.935214][ C0] ? __might_fault+0x190/0x1d0 [ 1732.939952][ C0] ? _copy_to_user+0x126/0x160 [ 1732.944706][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1732.950145][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1732.955663][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1732.961528][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1732.966438][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1732.971526][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1732.976610][ C0] do_fast_syscall_32+0x7f/0x120 [ 1732.981521][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1732.986602][ C0] RIP: 0023:0xf7f53569 [ 1732.990639][ C0] Code: Bad RIP value. [ 1732.994676][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1733.003080][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1733.011024][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1733.019059][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1733.027004][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.034949][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.042905][ C0] syz-executor.4 S29944 9649 9620 0x20020000 [ 1733.049211][ C0] Call Trace: [ 1733.052477][ C0] __schedule+0x8e1/0x1eb0 [ 1733.056884][ C0] ? io_schedule_timeout+0x140/0x140 [ 1733.062146][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1733.067593][ C0] schedule+0xd0/0x2a0 [ 1733.071637][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1733.076720][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1733.081894][ C0] futex_wait+0x1df/0x560 [ 1733.086297][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1733.091299][ C0] ? mark_lock+0xbc/0x1710 [ 1733.095687][ C0] ? hash_futex+0x12/0x200 [ 1733.100076][ C0] ? futex_wake+0x155/0x490 [ 1733.104563][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1733.110519][ C0] do_futex+0x15b/0x1a60 [ 1733.114751][ C0] ? lock_acquire+0x1f1/0xad0 [ 1733.119402][ C0] ? __might_fault+0xef/0x1d0 [ 1733.124051][ C0] ? find_held_lock+0x2d/0x110 [ 1733.128787][ C0] ? futex_exit_release+0x220/0x220 [ 1733.133961][ C0] ? lock_downgrade+0x820/0x820 [ 1733.138790][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1733.145008][ C0] ? __might_fault+0x190/0x1d0 [ 1733.149745][ C0] ? _copy_to_user+0x126/0x160 [ 1733.154491][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1733.159928][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1733.165447][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1733.171316][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1733.176227][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1733.181333][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1733.186427][ C0] do_fast_syscall_32+0x7f/0x120 [ 1733.191350][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1733.196431][ C0] RIP: 0023:0xf7fd7569 [ 1733.200466][ C0] Code: Bad RIP value. [ 1733.204514][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1733.212912][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1733.220864][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1733.228945][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1733.236891][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.244878][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.252839][ C0] syz-executor.5 S29944 9650 7432 0x20020000 [ 1733.259160][ C0] Call Trace: [ 1733.262429][ C0] __schedule+0x8e1/0x1eb0 [ 1733.266847][ C0] ? io_schedule_timeout+0x140/0x140 [ 1733.272126][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1733.277561][ C0] schedule+0xd0/0x2a0 [ 1733.281606][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1733.286690][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1733.291873][ C0] ? futex_wake+0x1b5/0x490 [ 1733.296361][ C0] ? find_held_lock+0x2d/0x110 [ 1733.301097][ C0] futex_wait+0x1df/0x560 [ 1733.305405][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1733.310399][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1733.315311][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1733.320484][ C0] ? futex_wake+0x155/0x490 [ 1733.325168][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1733.331139][ C0] do_futex+0x15b/0x1a60 [ 1733.335359][ C0] ? lock_acquire+0x1f1/0xad0 [ 1733.340008][ C0] ? __might_fault+0xef/0x1d0 [ 1733.344656][ C0] ? find_held_lock+0x2d/0x110 [ 1733.349394][ C0] ? futex_exit_release+0x220/0x220 [ 1733.354565][ C0] ? lock_downgrade+0x820/0x820 [ 1733.359391][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1733.365607][ C0] ? __might_fault+0x190/0x1d0 [ 1733.370363][ C0] ? _copy_to_user+0x126/0x160 [ 1733.375129][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1733.380576][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1733.386101][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1733.391976][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1733.396890][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1733.401982][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1733.407068][ C0] do_fast_syscall_32+0x7f/0x120 [ 1733.411982][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1733.417068][ C0] RIP: 0023:0xf7f53569 [ 1733.421110][ C0] Code: Bad RIP value. [ 1733.425149][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1733.433543][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1733.441493][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1733.449449][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1733.457394][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.465335][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.473291][ C0] syz-executor.0 T29944 9656 6841 0x20024004 [ 1733.479599][ C0] Call Trace: [ 1733.482867][ C0] __schedule+0x8e1/0x1eb0 [ 1733.487260][ C0] ? io_schedule_timeout+0x140/0x140 [ 1733.492518][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1733.497691][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1733.503647][ C0] schedule+0xd0/0x2a0 [ 1733.507692][ C0] do_signal_stop+0x32f/0x840 [ 1733.512350][ C0] get_signal+0xc0b/0x1fc0 [ 1733.516748][ C0] do_signal+0x82/0x2520 [ 1733.520981][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1733.526326][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1733.531593][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1733.538248][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1733.544028][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1733.549985][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1733.555679][ C0] do_fast_syscall_32+0x7f/0x120 [ 1733.560592][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1733.565675][ C0] RIP: 0023:0xf7fd1569 [ 1733.569712][ C0] Code: Bad RIP value. [ 1733.573749][ C0] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1733.582131][ C0] RAX: 0000000000000000 RBX: 0000000000000c91 RCX: 0000000000000c91 [ 1733.590075][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1733.598020][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1733.605962][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.613907][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.621874][ C0] syz-executor.0 S29944 9659 6841 0x20020000 [ 1733.628206][ C0] Call Trace: [ 1733.631483][ C0] __schedule+0x8e1/0x1eb0 [ 1733.635879][ C0] ? io_schedule_timeout+0x140/0x140 [ 1733.641139][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1733.646589][ C0] schedule+0xd0/0x2a0 [ 1733.650647][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1733.655732][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1733.660907][ C0] futex_wait+0x1df/0x560 [ 1733.665226][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1733.670225][ C0] ? mark_lock+0xbc/0x1710 [ 1733.674615][ C0] ? mark_lock+0xbc/0x1710 [ 1733.679021][ C0] ? hash_futex+0x12/0x200 [ 1733.683411][ C0] ? futex_wake+0x155/0x490 [ 1733.687896][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1733.693862][ C0] do_futex+0x15b/0x1a60 [ 1733.698083][ C0] ? lock_acquire+0x1f1/0xad0 [ 1733.702746][ C0] ? __might_fault+0xef/0x1d0 [ 1733.707405][ C0] ? find_held_lock+0x2d/0x110 [ 1733.712141][ C0] ? futex_exit_release+0x220/0x220 [ 1733.717341][ C0] ? lock_downgrade+0x820/0x820 [ 1733.722164][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1733.728382][ C0] ? __might_fault+0x190/0x1d0 [ 1733.733119][ C0] ? _copy_to_user+0x126/0x160 [ 1733.737869][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1733.743412][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1733.748931][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1733.754798][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1733.759729][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1733.764831][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1733.769916][ C0] do_fast_syscall_32+0x7f/0x120 [ 1733.774828][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1733.779911][ C0] RIP: 0023:0xf7fd1569 [ 1733.783947][ C0] Code: Bad RIP value. [ 1733.787985][ C0] RSP: 002b:00000000f5d8a12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1733.796366][ C0] RAX: ffffffffffffffda RBX: 000000000819b040 RCX: 0000000000000080 [ 1733.804309][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819b044 [ 1733.812254][ C0] RBP: 00000000f5d8a228 R08: 0000000000000000 R09: 0000000000000000 [ 1733.820209][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.828153][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.836109][ C0] syz-executor.0 T28024 9670 6841 0x20024004 [ 1733.842414][ C0] Call Trace: [ 1733.845689][ C0] __schedule+0x8e1/0x1eb0 [ 1733.850099][ C0] ? io_schedule_timeout+0x140/0x140 [ 1733.855363][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1733.860550][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1733.866507][ C0] schedule+0xd0/0x2a0 [ 1733.870556][ C0] do_signal_stop+0x32f/0x840 [ 1733.875209][ C0] get_signal+0xc0b/0x1fc0 [ 1733.879620][ C0] do_signal+0x82/0x2520 [ 1733.883842][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1733.889185][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1733.894446][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1733.901100][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1733.906880][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1733.912861][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1733.918565][ C0] do_fast_syscall_32+0x7f/0x120 [ 1733.923483][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1733.928570][ C0] RIP: 0023:0xf7fd1569 [ 1733.932607][ C0] Code: Bad RIP value. [ 1733.936646][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1733.945070][ C0] RAX: 0000000000000000 RBX: 0000000000000c96 RCX: 0000000000000c96 [ 1733.953017][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1733.960963][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1733.969034][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.976997][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.984964][ C0] syz-executor.0 S29944 9671 9670 0x20020000 [ 1733.991276][ C0] Call Trace: [ 1733.994547][ C0] __schedule+0x8e1/0x1eb0 [ 1733.998996][ C0] ? io_schedule_timeout+0x140/0x140 [ 1734.004379][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1734.009881][ C0] schedule+0xd0/0x2a0 [ 1734.013929][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1734.019017][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1734.024209][ C0] futex_wait+0x1df/0x560 [ 1734.028526][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1734.033534][ C0] ? mark_lock+0xbc/0x1710 [ 1734.037931][ C0] ? mark_lock+0xbc/0x1710 [ 1734.042365][ C0] ? hash_futex+0x12/0x200 [ 1734.046758][ C0] ? futex_wake+0x155/0x490 [ 1734.051253][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1734.057212][ C0] do_futex+0x15b/0x1a60 [ 1734.061435][ C0] ? lock_acquire+0x1f1/0xad0 [ 1734.066085][ C0] ? __might_fault+0xef/0x1d0 [ 1734.070734][ C0] ? find_held_lock+0x2d/0x110 [ 1734.075471][ C0] ? futex_exit_release+0x220/0x220 [ 1734.080645][ C0] ? lock_downgrade+0x820/0x820 [ 1734.085470][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1734.092643][ C0] ? __might_fault+0x190/0x1d0 [ 1734.097383][ C0] ? _copy_to_user+0x126/0x160 [ 1734.102144][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1734.107589][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1734.113106][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1734.118975][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1734.123897][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1734.128985][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1734.134068][ C0] do_fast_syscall_32+0x7f/0x120 [ 1734.138986][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1734.144155][ C0] RIP: 0023:0xf7fd1569 [ 1734.148193][ C0] Code: Bad RIP value. [ 1734.152231][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1734.160613][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1734.168558][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1734.176593][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1734.184538][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1734.192481][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.200437][ C0] syz-executor.5 S29944 9703 7432 0x20020000 [ 1734.206760][ C0] Call Trace: [ 1734.210042][ C0] __schedule+0x8e1/0x1eb0 [ 1734.214443][ C0] ? io_schedule_timeout+0x140/0x140 [ 1734.219710][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1734.225152][ C0] schedule+0xd0/0x2a0 [ 1734.229205][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1734.234291][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1734.239568][ C0] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1734.245111][ C0] futex_wait+0x1df/0x560 [ 1734.249429][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1734.254434][ C0] ? mark_lock+0xbc/0x1710 [ 1734.258830][ C0] ? mark_lock+0xbc/0x1710 [ 1734.263221][ C0] ? hash_futex+0x12/0x200 [ 1734.267623][ C0] ? futex_wake+0x155/0x490 [ 1734.272110][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1734.278079][ C0] do_futex+0x15b/0x1a60 [ 1734.282301][ C0] ? lock_acquire+0x1f1/0xad0 [ 1734.286950][ C0] ? __might_fault+0xef/0x1d0 [ 1734.291599][ C0] ? find_held_lock+0x2d/0x110 [ 1734.296337][ C0] ? futex_exit_release+0x220/0x220 [ 1734.301514][ C0] ? lock_downgrade+0x820/0x820 [ 1734.306366][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1734.312625][ C0] ? __might_fault+0x190/0x1d0 [ 1734.317381][ C0] ? _copy_to_user+0x126/0x160 [ 1734.322143][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1734.327582][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1734.333104][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1734.338994][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1734.343920][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1734.349031][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1734.354148][ C0] do_fast_syscall_32+0x7f/0x120 [ 1734.359068][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1734.364159][ C0] RIP: 0023:0xf7f53569 [ 1734.368228][ C0] Code: Bad RIP value. [ 1734.372270][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1734.380657][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1734.388601][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1734.396584][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1734.404530][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1734.412475][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.420433][ C0] syz-executor.0 T28424 9721 6841 0x20024004 [ 1734.426745][ C0] Call Trace: [ 1734.430020][ C0] __schedule+0x8e1/0x1eb0 [ 1734.434416][ C0] ? io_schedule_timeout+0x140/0x140 [ 1734.439674][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1734.444847][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1734.450802][ C0] schedule+0xd0/0x2a0 [ 1734.454846][ C0] do_signal_stop+0x32f/0x840 [ 1734.459507][ C0] get_signal+0xc0b/0x1fc0 [ 1734.463918][ C0] do_signal+0x82/0x2520 [ 1734.468141][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1734.473486][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1734.478747][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1734.485399][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1734.491177][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1734.497139][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1734.502832][ C0] do_fast_syscall_32+0x7f/0x120 [ 1734.507832][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1734.512914][ C0] RIP: 0023:0xf7fd1569 [ 1734.516950][ C0] Code: Bad RIP value. [ 1734.520987][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1734.529381][ C0] RAX: 0000000000000000 RBX: 0000000000000c9b RCX: 0000000000000c9b [ 1734.537325][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1734.545269][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1734.553213][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1734.561156][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.569113][ C0] syz-executor.0 S29024 9723 9721 0x20020000 [ 1734.575418][ C0] Call Trace: [ 1734.578694][ C0] __schedule+0x8e1/0x1eb0 [ 1734.583089][ C0] ? io_schedule_timeout+0x140/0x140 [ 1734.588352][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1734.593788][ C0] schedule+0xd0/0x2a0 [ 1734.597856][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1734.602940][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1734.608118][ C0] futex_wait+0x1df/0x560 [ 1734.612424][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1734.617430][ C0] ? mark_lock+0xbc/0x1710 [ 1734.621821][ C0] ? mark_lock+0xbc/0x1710 [ 1734.626226][ C0] ? hash_futex+0x12/0x200 [ 1734.630616][ C0] ? futex_wake+0x155/0x490 [ 1734.635107][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1734.641072][ C0] do_futex+0x15b/0x1a60 [ 1734.645294][ C0] ? lock_acquire+0x1f1/0xad0 [ 1734.649943][ C0] ? __might_fault+0xef/0x1d0 [ 1734.654592][ C0] ? find_held_lock+0x2d/0x110 [ 1734.659764][ C0] ? futex_exit_release+0x220/0x220 [ 1734.664961][ C0] ? lock_downgrade+0x820/0x820 [ 1734.669787][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1734.676015][ C0] ? __might_fault+0x190/0x1d0 [ 1734.680752][ C0] ? _copy_to_user+0x126/0x160 [ 1734.685490][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1734.690922][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1734.696449][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1734.702330][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1734.707252][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1734.712340][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1734.717424][ C0] do_fast_syscall_32+0x7f/0x120 [ 1734.722335][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1734.727420][ C0] RIP: 0023:0xf7fd1569 [ 1734.731456][ C0] Code: Bad RIP value. [ 1734.735492][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1734.743873][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1734.751817][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1734.759761][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1734.767705][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1734.775648][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.783614][ C0] syz-executor.5 S29944 9730 7432 0x20020000 [ 1734.789931][ C0] Call Trace: [ 1734.793195][ C0] __schedule+0x8e1/0x1eb0 [ 1734.797601][ C0] ? io_schedule_timeout+0x140/0x140 [ 1734.802872][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1734.808308][ C0] schedule+0xd0/0x2a0 [ 1734.812362][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1734.817448][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1734.822616][ C0] ? futex_wake+0x1b5/0x490 [ 1734.827094][ C0] ? find_held_lock+0x2d/0x110 [ 1734.831833][ C0] futex_wait+0x1df/0x560 [ 1734.836138][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1734.841133][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1734.846045][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1734.851217][ C0] ? futex_wake+0x155/0x490 [ 1734.855723][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1734.861676][ C0] do_futex+0x15b/0x1a60 [ 1734.865895][ C0] ? lock_acquire+0x1f1/0xad0 [ 1734.870558][ C0] ? __might_fault+0xef/0x1d0 [ 1734.875393][ C0] ? find_held_lock+0x2d/0x110 [ 1734.880143][ C0] ? futex_exit_release+0x220/0x220 [ 1734.885316][ C0] ? lock_downgrade+0x820/0x820 [ 1734.890159][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1734.896375][ C0] ? __might_fault+0x190/0x1d0 [ 1734.901134][ C0] ? _copy_to_user+0x126/0x160 [ 1734.905888][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1734.911325][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1734.916848][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1734.922728][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1734.927640][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1734.932742][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1734.937826][ C0] do_fast_syscall_32+0x7f/0x120 [ 1734.942739][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1734.947821][ C0] RIP: 0023:0xf7f53569 [ 1734.951857][ C0] Code: Bad RIP value. [ 1734.955893][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1734.964276][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1734.972219][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1734.980173][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1734.988118][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1734.996072][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.004037][ C0] syz-executor.2 S29944 9747 7031 0x20020000 [ 1735.010362][ C0] Call Trace: [ 1735.013628][ C0] __schedule+0x8e1/0x1eb0 [ 1735.018021][ C0] ? io_schedule_timeout+0x140/0x140 [ 1735.023293][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1735.028731][ C0] schedule+0xd0/0x2a0 [ 1735.032775][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1735.037870][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1735.043037][ C0] ? futex_wake+0x1b5/0x490 [ 1735.047534][ C0] ? find_held_lock+0x2d/0x110 [ 1735.052272][ C0] futex_wait+0x1df/0x560 [ 1735.056577][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1735.061582][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1735.066492][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1735.071662][ C0] ? futex_wake+0x155/0x490 [ 1735.076159][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1735.082138][ C0] do_futex+0x15b/0x1a60 [ 1735.086359][ C0] ? lock_acquire+0x1f1/0xad0 [ 1735.091030][ C0] ? __might_fault+0xef/0x1d0 [ 1735.095680][ C0] ? find_held_lock+0x2d/0x110 [ 1735.100415][ C0] ? futex_exit_release+0x220/0x220 [ 1735.105587][ C0] ? lock_downgrade+0x820/0x820 [ 1735.110500][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1735.116735][ C0] ? __might_fault+0x190/0x1d0 [ 1735.121473][ C0] ? _copy_to_user+0x126/0x160 [ 1735.126212][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1735.131648][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1735.137166][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1735.143037][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1735.147951][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1735.153037][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1735.158125][ C0] do_fast_syscall_32+0x7f/0x120 [ 1735.163036][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1735.168145][ C0] RIP: 0023:0xf7f91569 [ 1735.172191][ C0] Code: Bad RIP value. [ 1735.176230][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1735.184890][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1735.193142][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1735.201142][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1735.209093][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1735.217055][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.225022][ C0] syz-executor.0 T28424 9767 6841 0x20024004 [ 1735.231335][ C0] Call Trace: [ 1735.234612][ C0] __schedule+0x8e1/0x1eb0 [ 1735.239016][ C0] ? io_schedule_timeout+0x140/0x140 [ 1735.244277][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1735.249450][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1735.255406][ C0] schedule+0xd0/0x2a0 [ 1735.259449][ C0] do_signal_stop+0x32f/0x840 [ 1735.264112][ C0] get_signal+0xc0b/0x1fc0 [ 1735.268525][ C0] do_signal+0x82/0x2520 [ 1735.272749][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1735.278092][ C0] ? do_rt_tgsigqueueinfo+0xab/0x100 [ 1735.283352][ C0] ? __ia32_compat_sys_rt_tgsigqueueinfo+0x132/0x1d0 [ 1735.290003][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1735.295796][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1735.301757][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1735.307450][ C0] do_fast_syscall_32+0x7f/0x120 [ 1735.312381][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1735.317473][ C0] RIP: 0023:0xf7fd1569 [ 1735.321520][ C0] Code: Bad RIP value. [ 1735.325558][ C0] RSP: 002b:00000000f5dcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000014f [ 1735.333938][ C0] RAX: 0000000000000000 RBX: 0000000000000ca0 RCX: 0000000000000ca0 [ 1735.341884][ C0] RDX: 0000000000000016 RSI: 0000000020000000 RDI: 0000000000000000 [ 1735.349827][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1735.357777][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1735.365733][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.373689][ C0] syz-executor.0 S29944 9770 9767 0x20020000 [ 1735.380010][ C0] Call Trace: [ 1735.383288][ C0] __schedule+0x8e1/0x1eb0 [ 1735.387708][ C0] ? io_schedule_timeout+0x140/0x140 [ 1735.392989][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1735.398430][ C0] schedule+0xd0/0x2a0 [ 1735.402479][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1735.407565][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1735.412753][ C0] ? futex_wake+0x1b5/0x490 [ 1735.417232][ C0] ? find_held_lock+0x2d/0x110 [ 1735.421971][ C0] futex_wait+0x1df/0x560 [ 1735.426289][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1735.431303][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1735.436254][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1735.441437][ C0] ? futex_wake+0x155/0x490 [ 1735.445926][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1735.451883][ C0] do_futex+0x15b/0x1a60 [ 1735.456107][ C0] ? lock_acquire+0x1f1/0xad0 [ 1735.460757][ C0] ? __might_fault+0xef/0x1d0 [ 1735.465406][ C0] ? find_held_lock+0x2d/0x110 [ 1735.470156][ C0] ? futex_exit_release+0x220/0x220 [ 1735.475342][ C0] ? lock_downgrade+0x820/0x820 [ 1735.480170][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1735.486560][ C0] ? __might_fault+0x190/0x1d0 [ 1735.491309][ C0] ? _copy_to_user+0x126/0x160 [ 1735.496052][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1735.501490][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1735.507007][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1735.512875][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1735.517786][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1735.522874][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1735.527961][ C0] do_fast_syscall_32+0x7f/0x120 [ 1735.532893][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1735.537979][ C0] RIP: 0023:0xf7fd1569 [ 1735.542014][ C0] Code: Bad RIP value. [ 1735.546051][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1735.554436][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1735.562401][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1735.570351][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1735.578296][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1735.586241][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.594199][ C0] syz-executor.5 S29944 9794 7432 0x20020000 [ 1735.600509][ C0] Call Trace: [ 1735.603786][ C0] __schedule+0x8e1/0x1eb0 [ 1735.608181][ C0] ? io_schedule_timeout+0x140/0x140 [ 1735.613453][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1735.619410][ C0] schedule+0xd0/0x2a0 [ 1735.623478][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1735.628564][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1735.633738][ C0] futex_wait+0x1df/0x560 [ 1735.638044][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1735.643041][ C0] ? mark_lock+0xbc/0x1710 [ 1735.647605][ C0] ? mark_lock+0xbc/0x1710 [ 1735.652017][ C0] ? hash_futex+0x12/0x200 [ 1735.656405][ C0] ? futex_wake+0x155/0x490 [ 1735.660898][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1735.666854][ C0] do_futex+0x15b/0x1a60 [ 1735.671073][ C0] ? lock_acquire+0x1f1/0xad0 [ 1735.675723][ C0] ? __might_fault+0xef/0x1d0 [ 1735.680375][ C0] ? find_held_lock+0x2d/0x110 [ 1735.685130][ C0] ? futex_exit_release+0x220/0x220 [ 1735.690313][ C0] ? lock_downgrade+0x820/0x820 [ 1735.695138][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1735.701356][ C0] ? __might_fault+0x190/0x1d0 [ 1735.706092][ C0] ? _copy_to_user+0x126/0x160 [ 1735.710835][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1735.716273][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1735.721791][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1735.727670][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1735.732581][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1735.737669][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1735.742753][ C0] do_fast_syscall_32+0x7f/0x120 [ 1735.747665][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1735.752749][ C0] RIP: 0023:0xf7f53569 [ 1735.756792][ C0] Code: Bad RIP value. [ 1735.760831][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1735.769223][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1735.777183][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1735.785136][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1735.793093][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1735.801036][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.809093][ C0] syz-executor.2 S29944 9815 7031 0x20020000 [ 1735.815418][ C0] Call Trace: [ 1735.818753][ C0] __schedule+0x8e1/0x1eb0 [ 1735.823167][ C0] ? io_schedule_timeout+0x140/0x140 [ 1735.828447][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1735.833898][ C0] schedule+0xd0/0x2a0 [ 1735.837943][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1735.843028][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1735.848223][ C0] ? futex_wake+0x1b5/0x490 [ 1735.852725][ C0] ? find_held_lock+0x2d/0x110 [ 1735.857464][ C0] futex_wait+0x1df/0x560 [ 1735.861771][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1735.866768][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1735.871701][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1735.876875][ C0] ? futex_wake+0x155/0x490 [ 1735.881383][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1735.888032][ C0] do_futex+0x15b/0x1a60 [ 1735.892252][ C0] ? lock_acquire+0x1f1/0xad0 [ 1735.896900][ C0] ? __might_fault+0xef/0x1d0 [ 1735.901549][ C0] ? find_held_lock+0x2d/0x110 [ 1735.906286][ C0] ? futex_exit_release+0x220/0x220 [ 1735.911462][ C0] ? lock_downgrade+0x820/0x820 [ 1735.916291][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1735.922507][ C0] ? __might_fault+0x190/0x1d0 [ 1735.927244][ C0] ? _copy_to_user+0x126/0x160 [ 1735.931989][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1735.937439][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1735.942957][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1735.948826][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1735.953740][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1735.958832][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1735.963918][ C0] do_fast_syscall_32+0x7f/0x120 [ 1735.968832][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1735.973917][ C0] RIP: 0023:0xf7f91569 [ 1735.977954][ C0] Code: Bad RIP value. [ 1735.981991][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1735.990371][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1735.998314][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1736.006258][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1736.014202][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1736.022145][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.030104][ C0] syz-executor.2 S29944 9860 7031 0x20020000 [ 1736.036411][ C0] Call Trace: [ 1736.039677][ C0] __schedule+0x8e1/0x1eb0 [ 1736.044072][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.049331][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1736.054769][ C0] schedule+0xd0/0x2a0 [ 1736.058826][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1736.064041][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1736.069218][ C0] futex_wait+0x1df/0x560 [ 1736.073524][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1736.078545][ C0] ? mark_lock+0xbc/0x1710 [ 1736.082937][ C0] ? hash_futex+0x12/0x200 [ 1736.087330][ C0] ? futex_wake+0x155/0x490 [ 1736.091824][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1736.097780][ C0] do_futex+0x15b/0x1a60 [ 1736.102001][ C0] ? lock_acquire+0x1f1/0xad0 [ 1736.106651][ C0] ? __might_fault+0xef/0x1d0 [ 1736.111303][ C0] ? find_held_lock+0x2d/0x110 [ 1736.116044][ C0] ? futex_exit_release+0x220/0x220 [ 1736.121230][ C0] ? lock_downgrade+0x820/0x820 [ 1736.126057][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1736.132296][ C0] ? __might_fault+0x190/0x1d0 [ 1736.137036][ C0] ? _copy_to_user+0x126/0x160 [ 1736.141783][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1736.147238][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1736.152997][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1736.158876][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1736.163818][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1736.168930][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1736.174026][ C0] do_fast_syscall_32+0x7f/0x120 [ 1736.178944][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1736.184079][ C0] RIP: 0023:0xf7f91569 [ 1736.188119][ C0] Code: Bad RIP value. [ 1736.192159][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1736.200543][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1736.208490][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1736.216453][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1736.224456][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1736.232409][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.240632][ C0] kworker/u4:0 I25256 10665 2 0x00004000 [ 1736.246953][ C0] Workqueue: 0x0 (bond6) [ 1736.251259][ C0] Call Trace: [ 1736.254538][ C0] __schedule+0x8e1/0x1eb0 [ 1736.258938][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.264202][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1736.269465][ C0] schedule+0xd0/0x2a0 [ 1736.273515][ C0] worker_thread+0x14c/0x1120 [ 1736.278190][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1736.283191][ C0] ? process_one_work+0x1670/0x1670 [ 1736.288387][ C0] kthread+0x3b5/0x4a0 [ 1736.292434][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.297524][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.302618][ C0] ret_from_fork+0x1f/0x30 [ 1736.307019][ C0] bond4 I30952 11755 2 0x00004000 [ 1736.313336][ C0] Call Trace: [ 1736.316628][ C0] __schedule+0x8e1/0x1eb0 [ 1736.321087][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.326354][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1736.331482][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1736.336663][ C0] schedule+0xd0/0x2a0 [ 1736.340805][ C0] rescuer_thread+0x7a7/0xd30 [ 1736.345489][ C0] ? worker_thread+0x1120/0x1120 [ 1736.350468][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1736.355567][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1736.360668][ C0] ? worker_thread+0x1120/0x1120 [ 1736.365661][ C0] kthread+0x3b5/0x4a0 [ 1736.369720][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.374813][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.379908][ C0] ret_from_fork+0x1f/0x30 [ 1736.384325][ C0] bond5 I30952 11814 2 0x00004000 [ 1736.390642][ C0] Call Trace: [ 1736.393919][ C0] __schedule+0x8e1/0x1eb0 [ 1736.398326][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.403594][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1736.408643][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1736.413907][ C0] schedule+0xd0/0x2a0 [ 1736.417955][ C0] rescuer_thread+0x7a7/0xd30 [ 1736.422626][ C0] ? worker_thread+0x1120/0x1120 [ 1736.427541][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1736.432631][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1736.437633][ C0] ? worker_thread+0x1120/0x1120 [ 1736.442563][ C0] kthread+0x3b5/0x4a0 [ 1736.446610][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.451696][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.456801][ C0] ret_from_fork+0x1f/0x30 [ 1736.461208][ C0] bond6 I30952 11878 2 0x00004000 [ 1736.467530][ C0] Call Trace: [ 1736.470797][ C0] __schedule+0x8e1/0x1eb0 [ 1736.475213][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.480472][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1736.485470][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1736.490644][ C0] schedule+0xd0/0x2a0 [ 1736.494690][ C0] rescuer_thread+0x7a7/0xd30 [ 1736.499350][ C0] ? worker_thread+0x1120/0x1120 [ 1736.504264][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1736.509365][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1736.514365][ C0] ? worker_thread+0x1120/0x1120 [ 1736.519280][ C0] kthread+0x3b5/0x4a0 [ 1736.523322][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.528407][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.533496][ C0] ret_from_fork+0x1f/0x30 [ 1736.537910][ C0] syz-executor.3 S29944 11923 7114 0x20020000 [ 1736.544217][ C0] Call Trace: [ 1736.547488][ C0] __schedule+0x8e1/0x1eb0 [ 1736.551885][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.557148][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1736.562588][ C0] schedule+0xd0/0x2a0 [ 1736.566634][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1736.571722][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1736.576895][ C0] ? futex_wake+0x1b5/0x490 [ 1736.581372][ C0] ? find_held_lock+0x2d/0x110 [ 1736.586113][ C0] futex_wait+0x1df/0x560 [ 1736.590437][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1736.595435][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1736.600349][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1736.605523][ C0] ? futex_wake+0x155/0x490 [ 1736.610027][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1736.615985][ C0] do_futex+0x15b/0x1a60 [ 1736.620210][ C0] ? lock_acquire+0x1f1/0xad0 [ 1736.624861][ C0] ? __might_fault+0xef/0x1d0 [ 1736.629530][ C0] ? find_held_lock+0x2d/0x110 [ 1736.634270][ C0] ? futex_exit_release+0x220/0x220 [ 1736.639445][ C0] ? lock_downgrade+0x820/0x820 [ 1736.644282][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1736.650502][ C0] ? __might_fault+0x190/0x1d0 [ 1736.655257][ C0] ? _copy_to_user+0x126/0x160 [ 1736.660015][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1736.665453][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1736.670974][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1736.676857][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1736.681770][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1736.686887][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1736.691973][ C0] do_fast_syscall_32+0x7f/0x120 [ 1736.696888][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1736.701974][ C0] RIP: 0023:0xf7f6d569 [ 1736.706027][ C0] Code: Bad RIP value. [ 1736.710067][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1736.718452][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1736.726397][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1736.734413][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1736.742413][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1736.752014][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.759994][ C0] bond7 I30952 11930 2 0x00004000 [ 1736.766314][ C0] Call Trace: [ 1736.769678][ C0] __schedule+0x8e1/0x1eb0 [ 1736.774080][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.780386][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1736.785387][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1736.790562][ C0] schedule+0xd0/0x2a0 [ 1736.794610][ C0] rescuer_thread+0x7a7/0xd30 [ 1736.799317][ C0] ? worker_thread+0x1120/0x1120 [ 1736.804234][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1736.809322][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1736.814321][ C0] ? worker_thread+0x1120/0x1120 [ 1736.819233][ C0] kthread+0x3b5/0x4a0 [ 1736.823278][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.828364][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1736.833458][ C0] ret_from_fork+0x1f/0x30 [ 1736.837860][ C0] syz-executor.3 S29096 11974 7114 0x20020000 [ 1736.844297][ C0] Call Trace: [ 1736.847562][ C0] __schedule+0x8e1/0x1eb0 [ 1736.851959][ C0] ? io_schedule_timeout+0x140/0x140 [ 1736.857220][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1736.862700][ C0] schedule+0xd0/0x2a0 [ 1736.866789][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1736.871878][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1736.877071][ C0] futex_wait+0x1df/0x560 [ 1736.881379][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1736.886381][ C0] ? mark_lock+0xbc/0x1710 [ 1736.890774][ C0] ? mark_lock+0xbc/0x1710 [ 1736.895165][ C0] ? hash_futex+0x12/0x200 [ 1736.899557][ C0] ? futex_wake+0x155/0x490 [ 1736.904043][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1736.909998][ C0] do_futex+0x15b/0x1a60 [ 1736.914220][ C0] ? lock_acquire+0x1f1/0xad0 [ 1736.918876][ C0] ? __might_fault+0xef/0x1d0 [ 1736.923527][ C0] ? find_held_lock+0x2d/0x110 [ 1736.928270][ C0] ? futex_exit_release+0x220/0x220 [ 1736.933443][ C0] ? lock_downgrade+0x820/0x820 [ 1736.938269][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1736.945444][ C0] ? __might_fault+0x190/0x1d0 [ 1736.950183][ C0] ? _copy_to_user+0x126/0x160 [ 1736.954926][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1736.960363][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1736.965882][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1736.971771][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1736.976685][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1736.981775][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1736.986865][ C0] do_fast_syscall_32+0x7f/0x120 [ 1736.991796][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1736.996882][ C0] RIP: 0023:0xf7f6d569 [ 1737.000918][ C0] Code: Bad RIP value. [ 1737.004956][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1737.013341][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1737.021302][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1737.029248][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1737.037193][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.045146][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.053103][ C0] syz-executor.3 S29944 12005 7114 0x20020000 [ 1737.059409][ C0] Call Trace: [ 1737.062676][ C0] __schedule+0x8e1/0x1eb0 [ 1737.067071][ C0] ? io_schedule_timeout+0x140/0x140 [ 1737.072332][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1737.077770][ C0] schedule+0xd0/0x2a0 [ 1737.081815][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1737.086910][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1737.092104][ C0] futex_wait+0x1df/0x560 [ 1737.096413][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1737.101413][ C0] ? mark_lock+0xbc/0x1710 [ 1737.105805][ C0] ? mark_lock+0xbc/0x1710 [ 1737.110197][ C0] ? hash_futex+0x12/0x200 [ 1737.114587][ C0] ? futex_wake+0x155/0x490 [ 1737.119080][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1737.125050][ C0] do_futex+0x15b/0x1a60 [ 1737.129272][ C0] ? lock_acquire+0x1f1/0xad0 [ 1737.133931][ C0] ? __might_fault+0xef/0x1d0 [ 1737.138586][ C0] ? find_held_lock+0x2d/0x110 [ 1737.143327][ C0] ? futex_exit_release+0x220/0x220 [ 1737.148503][ C0] ? lock_downgrade+0x820/0x820 [ 1737.153330][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1737.159818][ C0] ? __might_fault+0x190/0x1d0 [ 1737.164580][ C0] ? _copy_to_user+0x126/0x160 [ 1737.169322][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1737.174759][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1737.180303][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1737.186342][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1737.191267][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1737.196368][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1737.201469][ C0] do_fast_syscall_32+0x7f/0x120 [ 1737.206391][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1737.211536][ C0] RIP: 0023:0xf7f6d569 [ 1737.215577][ C0] Code: Bad RIP value. [ 1737.219615][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1737.228002][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1737.235951][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1737.243899][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1737.251844][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.259807][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.267797][ C0] syz-executor.2 S29944 12016 7031 0x20020000 [ 1737.274108][ C0] Call Trace: [ 1737.277377][ C0] __schedule+0x8e1/0x1eb0 [ 1737.281774][ C0] ? io_schedule_timeout+0x140/0x140 [ 1737.287035][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1737.292491][ C0] schedule+0xd0/0x2a0 [ 1737.296539][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1737.301625][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1737.306825][ C0] ? futex_wake+0x1b5/0x490 [ 1737.311338][ C0] ? find_held_lock+0x2d/0x110 [ 1737.316082][ C0] futex_wait+0x1df/0x560 [ 1737.320450][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1737.325456][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1737.330391][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1737.335627][ C0] ? futex_wake+0x155/0x490 [ 1737.340132][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1737.346095][ C0] do_futex+0x15b/0x1a60 [ 1737.350320][ C0] ? lock_acquire+0x1f1/0xad0 [ 1737.354976][ C0] ? __might_fault+0xef/0x1d0 [ 1737.359681][ C0] ? find_held_lock+0x2d/0x110 [ 1737.364424][ C0] ? futex_exit_release+0x220/0x220 [ 1737.369625][ C0] ? lock_downgrade+0x820/0x820 [ 1737.374459][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1737.380688][ C0] ? __might_fault+0x190/0x1d0 [ 1737.385436][ C0] ? _copy_to_user+0x126/0x160 [ 1737.390232][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1737.395690][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1737.401213][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1737.407093][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1737.412007][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1737.417114][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1737.422202][ C0] do_fast_syscall_32+0x7f/0x120 [ 1737.427119][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1737.432206][ C0] RIP: 0023:0xf7f91569 [ 1737.436244][ C0] Code: Bad RIP value. [ 1737.440386][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1737.448788][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1737.456758][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1737.464710][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1737.472656][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.480690][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.488655][ C0] syz-executor.3 S29944 12033 7114 0x20020000 [ 1737.494965][ C0] Call Trace: [ 1737.498233][ C0] __schedule+0x8e1/0x1eb0 [ 1737.502732][ C0] ? io_schedule_timeout+0x140/0x140 [ 1737.507995][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1737.513434][ C0] schedule+0xd0/0x2a0 [ 1737.517480][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1737.522566][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1737.527742][ C0] futex_wait+0x1df/0x560 [ 1737.532066][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1737.537064][ C0] ? mark_lock+0xbc/0x1710 [ 1737.541477][ C0] ? mark_lock+0xbc/0x1710 [ 1737.545867][ C0] ? hash_futex+0x12/0x200 [ 1737.550275][ C0] ? futex_wake+0x155/0x490 [ 1737.554762][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1737.560811][ C0] do_futex+0x15b/0x1a60 [ 1737.565033][ C0] ? lock_acquire+0x1f1/0xad0 [ 1737.569703][ C0] ? __might_fault+0xef/0x1d0 [ 1737.574369][ C0] ? find_held_lock+0x2d/0x110 [ 1737.579122][ C0] ? futex_exit_release+0x220/0x220 [ 1737.584303][ C0] ? lock_downgrade+0x820/0x820 [ 1737.589404][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1737.595624][ C0] ? __might_fault+0x190/0x1d0 [ 1737.600365][ C0] ? _copy_to_user+0x126/0x160 [ 1737.605111][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1737.610551][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1737.616074][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1737.621944][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1737.626859][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1737.631952][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1737.637040][ C0] do_fast_syscall_32+0x7f/0x120 [ 1737.641957][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1737.647045][ C0] RIP: 0023:0xf7f6d569 [ 1737.651098][ C0] Code: Bad RIP value. [ 1737.655154][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1737.663539][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1737.671498][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1737.679465][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1737.687429][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.695391][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.703352][ C0] syz-executor.2 S29944 12060 7031 0x20020000 [ 1737.709660][ C0] Call Trace: [ 1737.712948][ C0] __schedule+0x8e1/0x1eb0 [ 1737.717347][ C0] ? io_schedule_timeout+0x140/0x140 [ 1737.722606][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1737.728067][ C0] schedule+0xd0/0x2a0 [ 1737.732112][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1737.737216][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1737.742390][ C0] futex_wait+0x1df/0x560 [ 1737.746705][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1737.751705][ C0] ? mark_lock+0xbc/0x1710 [ 1737.756096][ C0] ? mark_lock+0xbc/0x1710 [ 1737.760488][ C0] ? hash_futex+0x12/0x200 [ 1737.764879][ C0] ? futex_wake+0x155/0x490 [ 1737.769382][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1737.775338][ C0] do_futex+0x15b/0x1a60 [ 1737.779562][ C0] ? lock_acquire+0x1f1/0xad0 [ 1737.784213][ C0] ? __might_fault+0xef/0x1d0 [ 1737.788866][ C0] ? find_held_lock+0x2d/0x110 [ 1737.793606][ C0] ? futex_exit_release+0x220/0x220 [ 1737.798782][ C0] ? lock_downgrade+0x820/0x820 [ 1737.803620][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1737.809840][ C0] ? __might_fault+0x190/0x1d0 [ 1737.814580][ C0] ? _copy_to_user+0x126/0x160 [ 1737.819323][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1737.824766][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1737.830287][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1737.836171][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1737.841126][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1737.846224][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1737.851345][ C0] do_fast_syscall_32+0x7f/0x120 [ 1737.856272][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1737.861369][ C0] RIP: 0023:0xf7f91569 [ 1737.865409][ C0] Code: Bad RIP value. [ 1737.869471][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1737.877859][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1737.885805][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1737.893754][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1737.901702][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.909695][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.917655][ C0] syz-executor.3 S29944 12087 7114 0x20020000 [ 1737.923966][ C0] Call Trace: [ 1737.927280][ C0] __schedule+0x8e1/0x1eb0 [ 1737.931770][ C0] ? io_schedule_timeout+0x140/0x140 [ 1737.937032][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1737.942490][ C0] schedule+0xd0/0x2a0 [ 1737.946535][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1737.951642][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1737.956830][ C0] ? futex_wake+0x1b5/0x490 [ 1737.961310][ C0] ? find_held_lock+0x2d/0x110 [ 1737.966052][ C0] futex_wait+0x1df/0x560 [ 1737.970379][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1737.975380][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1737.980295][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1737.985469][ C0] ? futex_wake+0x155/0x490 [ 1737.989984][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1737.995943][ C0] do_futex+0x15b/0x1a60 [ 1738.000170][ C0] ? lock_acquire+0x1f1/0xad0 [ 1738.004822][ C0] ? __might_fault+0xef/0x1d0 [ 1738.009473][ C0] ? find_held_lock+0x2d/0x110 [ 1738.014299][ C0] ? futex_exit_release+0x220/0x220 [ 1738.019568][ C0] ? lock_downgrade+0x820/0x820 [ 1738.024399][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1738.030636][ C0] ? __might_fault+0x190/0x1d0 [ 1738.035384][ C0] ? _copy_to_user+0x126/0x160 [ 1738.040127][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1738.045566][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1738.051096][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1738.057078][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1738.062011][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1738.067107][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1738.072204][ C0] do_fast_syscall_32+0x7f/0x120 [ 1738.077141][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1738.082227][ C0] RIP: 0023:0xf7f6d569 [ 1738.086277][ C0] Code: Bad RIP value. [ 1738.090404][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1738.098790][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1738.106756][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1738.114717][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1738.122663][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1738.130611][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.138658][ C0] syz-executor.2 S29944 12121 7031 0x20020000 [ 1738.144968][ C0] Call Trace: [ 1738.148236][ C0] __schedule+0x8e1/0x1eb0 [ 1738.153674][ C0] ? io_schedule_timeout+0x140/0x140 [ 1738.159109][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1738.164722][ C0] schedule+0xd0/0x2a0 [ 1738.168788][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1738.173874][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1738.179052][ C0] futex_wait+0x1df/0x560 [ 1738.183448][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1738.188471][ C0] ? mark_lock+0xbc/0x1710 [ 1738.192872][ C0] ? mark_lock+0xbc/0x1710 [ 1738.197262][ C0] ? hash_futex+0x12/0x200 [ 1738.201653][ C0] ? futex_wake+0x155/0x490 [ 1738.206163][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1738.212165][ C0] do_futex+0x15b/0x1a60 [ 1738.216399][ C0] ? lock_acquire+0x1f1/0xad0 [ 1738.221058][ C0] ? __might_fault+0xef/0x1d0 [ 1738.225724][ C0] ? find_held_lock+0x2d/0x110 [ 1738.230470][ C0] ? futex_exit_release+0x220/0x220 [ 1738.235654][ C0] ? lock_downgrade+0x820/0x820 [ 1738.240483][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1738.246887][ C0] ? __might_fault+0x190/0x1d0 [ 1738.251630][ C0] ? _copy_to_user+0x126/0x160 [ 1738.256375][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1738.261901][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1738.267425][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1738.273296][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1738.278210][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1738.283299][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1738.288404][ C0] do_fast_syscall_32+0x7f/0x120 [ 1738.293341][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1738.298431][ C0] RIP: 0023:0xf7f91569 [ 1738.302543][ C0] Code: Bad RIP value. [ 1738.306596][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1738.314996][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1738.322951][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1738.330905][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1738.338851][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1738.346802][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.354766][ C0] syz-executor.3 S29944 12181 7114 0x20020000 [ 1738.361098][ C0] Call Trace: [ 1738.364386][ C0] __schedule+0x8e1/0x1eb0 [ 1738.368797][ C0] ? io_schedule_timeout+0x140/0x140 [ 1738.374065][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1738.379507][ C0] schedule+0xd0/0x2a0 [ 1738.383558][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1738.388673][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1738.393851][ C0] futex_wait+0x1df/0x560 [ 1738.398158][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1738.403340][ C0] ? mark_lock+0xbc/0x1710 [ 1738.407756][ C0] ? hash_futex+0x12/0x200 [ 1738.412166][ C0] ? futex_wake+0x155/0x490 [ 1738.416655][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1738.422613][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1738.427631][ C0] do_futex+0x15b/0x1a60 [ 1738.432044][ C0] ? lock_acquire+0x1f1/0xad0 [ 1738.436714][ C0] ? __might_fault+0xef/0x1d0 [ 1738.441369][ C0] ? find_held_lock+0x2d/0x110 [ 1738.446253][ C0] ? futex_exit_release+0x220/0x220 [ 1738.451446][ C0] ? lock_downgrade+0x820/0x820 [ 1738.456282][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1738.462505][ C0] ? __might_fault+0x190/0x1d0 [ 1738.467244][ C0] ? _copy_to_user+0x126/0x160 [ 1738.471988][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1738.477432][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1738.482959][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1738.490478][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1738.495414][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1738.500505][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1738.505892][ C0] do_fast_syscall_32+0x7f/0x120 [ 1738.510908][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1738.515997][ C0] RIP: 0023:0xf7f6d569 [ 1738.520036][ C0] Code: Bad RIP value. [ 1738.524078][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1738.532462][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1738.540410][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1738.548358][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1738.556321][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1738.564365][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.572440][ C0] syz-executor.4 S29944 13094 7392 0x20020000 [ 1738.578966][ C0] Call Trace: [ 1738.582236][ C0] __schedule+0x8e1/0x1eb0 [ 1738.586635][ C0] ? io_schedule_timeout+0x140/0x140 [ 1738.591926][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1738.597367][ C0] schedule+0xd0/0x2a0 [ 1738.601461][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1738.606550][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1738.611842][ C0] ? futex_wake+0x1b5/0x490 [ 1738.616336][ C0] ? find_held_lock+0x2d/0x110 [ 1738.621075][ C0] futex_wait+0x1df/0x560 [ 1738.625409][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1738.630407][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1738.635323][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1738.641295][ C0] ? futex_wake+0x155/0x490 [ 1738.645869][ C0] ? do_wp_page+0x8e7/0x1950 [ 1738.650530][ C0] do_futex+0x15b/0x1a60 [ 1738.654753][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1738.660099][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1738.664926][ C0] ? do_wp_page+0x16a/0x1950 [ 1738.669492][ C0] ? futex_exit_release+0x220/0x220 [ 1738.674663][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1738.680022][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1738.685998][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1738.690999][ C0] ? find_held_lock+0x2d/0x110 [ 1738.695742][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1738.700915][ C0] ? __up_read+0x1a1/0x7b0 [ 1738.705311][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1738.710749][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1738.716274][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1738.721186][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1738.726100][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1738.731209][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1738.736297][ C0] do_fast_syscall_32+0x7f/0x120 [ 1738.741235][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1738.746321][ C0] RIP: 0023:0xf7fd7569 [ 1738.750357][ C0] Code: Bad RIP value. [ 1738.754397][ C0] RSP: 002b:00000000f5db112c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1738.762782][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1738.770730][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1738.778675][ C0] RBP: 00000000f5db1228 R08: 0000000000000000 R09: 0000000000000000 [ 1738.786653][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1738.794599][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.802557][ C0] syz-executor.4 S29944 13127 7392 0x20020000 [ 1738.808866][ C0] Call Trace: [ 1738.812135][ C0] __schedule+0x8e1/0x1eb0 [ 1738.816555][ C0] ? io_schedule_timeout+0x140/0x140 [ 1738.821823][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1738.827260][ C0] schedule+0xd0/0x2a0 [ 1738.831331][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1738.836416][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1738.841679][ C0] futex_wait+0x1df/0x560 [ 1738.846000][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1738.850998][ C0] ? mark_lock+0xbc/0x1710 [ 1738.855397][ C0] ? hash_futex+0x12/0x200 [ 1738.859877][ C0] ? futex_wake+0x155/0x490 [ 1738.864365][ C0] ? do_wp_page+0x8e7/0x1950 [ 1738.868933][ C0] do_futex+0x15b/0x1a60 [ 1738.873155][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1738.878333][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1738.883159][ C0] ? do_wp_page+0x16a/0x1950 [ 1738.887724][ C0] ? futex_exit_release+0x220/0x220 [ 1738.893073][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1738.899374][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1738.904307][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1738.909310][ C0] ? find_held_lock+0x2d/0x110 [ 1738.914049][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1738.919223][ C0] ? __up_read+0x1a1/0x7b0 [ 1738.923892][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1738.929333][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1738.934858][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1738.939771][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1738.944686][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1738.949786][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1738.955307][ C0] do_fast_syscall_32+0x7f/0x120 [ 1738.960222][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1738.965423][ C0] RIP: 0023:0xf7fd7569 [ 1738.969462][ C0] Code: Bad RIP value. [ 1738.973517][ C0] RSP: 002b:00000000f5db112c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1738.981988][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1738.989962][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1738.997923][ C0] RBP: 00000000f5db1228 R08: 0000000000000000 R09: 0000000000000000 [ 1739.005868][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1739.013831][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.021789][ C0] syz-executor.4 S29944 13140 7392 0x20020000 [ 1739.028098][ C0] Call Trace: [ 1739.031365][ C0] __schedule+0x8e1/0x1eb0 [ 1739.035760][ C0] ? io_schedule_timeout+0x140/0x140 [ 1739.041020][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1739.046633][ C0] schedule+0xd0/0x2a0 [ 1739.050681][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1739.055780][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1739.060955][ C0] futex_wait+0x1df/0x560 [ 1739.065261][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1739.070261][ C0] ? mark_lock+0xbc/0x1710 [ 1739.074657][ C0] ? hash_futex+0x12/0x200 [ 1739.079051][ C0] ? futex_wake+0x155/0x490 [ 1739.083537][ C0] ? do_wp_page+0x8e7/0x1950 [ 1739.088119][ C0] do_futex+0x15b/0x1a60 [ 1739.092398][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1739.097573][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1739.102419][ C0] ? do_wp_page+0x16a/0x1950 [ 1739.106985][ C0] ? futex_exit_release+0x220/0x220 [ 1739.112157][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1739.117517][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1739.122435][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1739.127446][ C0] ? find_held_lock+0x2d/0x110 [ 1739.132186][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1739.137362][ C0] ? __up_read+0x1a1/0x7b0 [ 1739.141773][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1739.147559][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1739.153081][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.158082][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.162996][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1739.168088][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1739.173203][ C0] do_fast_syscall_32+0x7f/0x120 [ 1739.178122][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1739.183208][ C0] RIP: 0023:0xf7fd7569 [ 1739.187247][ C0] Code: Bad RIP value. [ 1739.191287][ C0] RSP: 002b:00000000f5db112c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1739.199689][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1739.207653][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1739.215632][ C0] RBP: 00000000f5db1228 R08: 0000000000000000 R09: 0000000000000000 [ 1739.223581][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1739.231549][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.239523][ C0] syz-executor.1 S28696 13338 6979 0x20020000 [ 1739.246272][ C0] Call Trace: [ 1739.249558][ C0] __schedule+0x8e1/0x1eb0 [ 1739.253965][ C0] ? io_schedule_timeout+0x140/0x140 [ 1739.259234][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1739.264701][ C0] schedule+0xd0/0x2a0 [ 1739.268749][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1739.273853][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1739.279052][ C0] futex_wait+0x1df/0x560 [ 1739.283391][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1739.288403][ C0] ? mark_lock+0xbc/0x1710 [ 1739.292900][ C0] ? hash_futex+0x12/0x200 [ 1739.297295][ C0] ? futex_wake+0x155/0x490 [ 1739.301786][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1739.307764][ C0] do_futex+0x15b/0x1a60 [ 1739.311988][ C0] ? lock_acquire+0x1f1/0xad0 [ 1739.316639][ C0] ? __might_fault+0xef/0x1d0 [ 1739.321339][ C0] ? find_held_lock+0x2d/0x110 [ 1739.326098][ C0] ? futex_exit_release+0x220/0x220 [ 1739.331321][ C0] ? lock_downgrade+0x820/0x820 [ 1739.336171][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1739.342396][ C0] ? __might_fault+0x190/0x1d0 [ 1739.347329][ C0] ? _copy_to_user+0x126/0x160 [ 1739.352077][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1739.357515][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1739.363035][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1739.368980][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.373957][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1739.379057][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1739.384280][ C0] do_fast_syscall_32+0x7f/0x120 [ 1739.389250][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1739.394341][ C0] RIP: 0023:0xf7fa1569 [ 1739.398426][ C0] Code: Bad RIP value. [ 1739.402599][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1739.411001][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1739.418960][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1739.426912][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1739.434875][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1739.442829][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.450809][ C0] syz-executor.1 S29144 13350 6979 0x20020000 [ 1739.457119][ C0] Call Trace: [ 1739.460389][ C0] __schedule+0x8e1/0x1eb0 [ 1739.464790][ C0] ? io_schedule_timeout+0x140/0x140 [ 1739.470053][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1739.475665][ C0] schedule+0xd0/0x2a0 [ 1739.479886][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1739.484991][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1739.490169][ C0] futex_wait+0x1df/0x560 [ 1739.494478][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1739.499498][ C0] ? wake_up_q+0xa3/0x100 [ 1739.503889][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1739.509071][ C0] ? futex_wake+0x155/0x490 [ 1739.513648][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1739.519607][ C0] do_futex+0x15b/0x1a60 [ 1739.523834][ C0] ? lock_acquire+0x1f1/0xad0 [ 1739.528486][ C0] ? __might_fault+0xef/0x1d0 [ 1739.533164][ C0] ? find_held_lock+0x2d/0x110 [ 1739.538025][ C0] ? futex_exit_release+0x220/0x220 [ 1739.543203][ C0] ? lock_downgrade+0x820/0x820 [ 1739.548050][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1739.554273][ C0] ? __might_fault+0x190/0x1d0 [ 1739.559012][ C0] ? _copy_to_user+0x126/0x160 [ 1739.563771][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1739.569220][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.574132][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1739.579655][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.584570][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1739.589660][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1739.594747][ C0] do_fast_syscall_32+0x7f/0x120 [ 1739.599680][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1739.604766][ C0] RIP: 0023:0xf7fa1569 [ 1739.608809][ C0] Code: Bad RIP value. [ 1739.612850][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1739.621233][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1739.629182][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1739.637147][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1739.645093][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1739.653472][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.661432][ C0] syz-executor.1 S29024 13355 6979 0x20020000 [ 1739.667743][ C0] Call Trace: [ 1739.671013][ C0] __schedule+0x8e1/0x1eb0 [ 1739.675426][ C0] ? io_schedule_timeout+0x140/0x140 [ 1739.680696][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1739.686138][ C0] schedule+0xd0/0x2a0 [ 1739.690184][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1739.695273][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1739.700450][ C0] futex_wait+0x1df/0x560 [ 1739.704757][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1739.709762][ C0] ? wake_up_q+0xa3/0x100 [ 1739.714066][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1739.719261][ C0] ? futex_wake+0x155/0x490 [ 1739.723772][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1739.729740][ C0] do_futex+0x15b/0x1a60 [ 1739.734063][ C0] ? lock_acquire+0x1f1/0xad0 [ 1739.738724][ C0] ? __might_fault+0xef/0x1d0 [ 1739.743378][ C0] ? find_held_lock+0x2d/0x110 [ 1739.748175][ C0] ? futex_exit_release+0x220/0x220 [ 1739.753438][ C0] ? lock_downgrade+0x820/0x820 [ 1739.758270][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1739.764490][ C0] ? __might_fault+0x190/0x1d0 [ 1739.769319][ C0] ? _copy_to_user+0x126/0x160 [ 1739.774062][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1739.779501][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.784430][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1739.789964][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.794965][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1739.800072][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1739.805174][ C0] do_fast_syscall_32+0x7f/0x120 [ 1739.810110][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1739.815212][ C0] RIP: 0023:0xf7fa1569 [ 1739.819252][ C0] Code: Bad RIP value. [ 1739.823292][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1739.831694][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1739.839654][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1739.847601][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1739.855548][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1739.863519][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.871501][ C0] syz-executor.1 S29944 13367 6979 0x20020000 [ 1739.877917][ C0] Call Trace: [ 1739.881196][ C0] __schedule+0x8e1/0x1eb0 [ 1739.885596][ C0] ? io_schedule_timeout+0x140/0x140 [ 1739.890877][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1739.896330][ C0] schedule+0xd0/0x2a0 [ 1739.900392][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1739.905478][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1739.910654][ C0] futex_wait+0x1df/0x560 [ 1739.914961][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1739.919969][ C0] ? wake_up_q+0xa3/0x100 [ 1739.924310][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1739.929500][ C0] ? futex_wake+0x155/0x490 [ 1739.933987][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1739.939946][ C0] do_futex+0x15b/0x1a60 [ 1739.945210][ C0] ? lock_acquire+0x1f1/0xad0 [ 1739.949861][ C0] ? __might_fault+0xef/0x1d0 [ 1739.954531][ C0] ? find_held_lock+0x2d/0x110 [ 1739.959288][ C0] ? futex_exit_release+0x220/0x220 [ 1739.964463][ C0] ? lock_downgrade+0x820/0x820 [ 1739.969292][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1739.975617][ C0] ? __might_fault+0x190/0x1d0 [ 1739.980355][ C0] ? _copy_to_user+0x126/0x160 [ 1739.985097][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1739.990534][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1739.995446][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1740.001077][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1740.006005][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1740.011097][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1740.016184][ C0] do_fast_syscall_32+0x7f/0x120 [ 1740.021186][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1740.026272][ C0] RIP: 0023:0xf7fa1569 [ 1740.030327][ C0] Code: Bad RIP value. [ 1740.034364][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1740.042767][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1740.050715][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1740.058683][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1740.066634][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.074670][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.082628][ C0] syz-executor.5 S29944 13829 7432 0x20020000 [ 1740.088942][ C0] Call Trace: [ 1740.092323][ C0] __schedule+0x8e1/0x1eb0 [ 1740.096721][ C0] ? io_schedule_timeout+0x140/0x140 [ 1740.101996][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1740.107435][ C0] schedule+0xd0/0x2a0 [ 1740.111497][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1740.116584][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1740.121754][ C0] ? futex_wake+0x1b5/0x490 [ 1740.126232][ C0] ? find_held_lock+0x2d/0x110 [ 1740.130974][ C0] futex_wait+0x1df/0x560 [ 1740.135284][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1740.140299][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1740.145310][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1740.150503][ C0] ? futex_wake+0x155/0x490 [ 1740.155005][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1740.160980][ C0] do_futex+0x15b/0x1a60 [ 1740.165210][ C0] ? lock_acquire+0x1f1/0xad0 [ 1740.169863][ C0] ? __might_fault+0xef/0x1d0 [ 1740.174515][ C0] ? find_held_lock+0x2d/0x110 [ 1740.179346][ C0] ? futex_exit_release+0x220/0x220 [ 1740.184521][ C0] ? lock_downgrade+0x820/0x820 [ 1740.189352][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1740.195574][ C0] ? __might_fault+0x190/0x1d0 [ 1740.200312][ C0] ? _copy_to_user+0x126/0x160 [ 1740.205094][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1740.210578][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1740.216125][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1740.222005][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1740.226984][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1740.232077][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1740.237165][ C0] do_fast_syscall_32+0x7f/0x120 [ 1740.242096][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1740.247182][ C0] RIP: 0023:0xf7f53569 [ 1740.251827][ C0] Code: Bad RIP value. [ 1740.255868][ C0] RSP: 002b:00000000f5d2d12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1740.264271][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1740.272355][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1740.281779][ C0] RBP: 00000000f5d2d228 R08: 0000000000000000 R09: 0000000000000000 [ 1740.289725][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.297714][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.305691][ C0] syz-executor.3 S29944 13911 7114 0x20020000 [ 1740.312001][ C0] Call Trace: [ 1740.315269][ C0] __schedule+0x8e1/0x1eb0 [ 1740.319665][ C0] ? io_schedule_timeout+0x140/0x140 [ 1740.324929][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1740.330367][ C0] schedule+0xd0/0x2a0 [ 1740.334429][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1740.339722][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1740.344902][ C0] ? futex_wake+0x1b5/0x490 [ 1740.349382][ C0] ? find_held_lock+0x2d/0x110 [ 1740.354148][ C0] futex_wait+0x1df/0x560 [ 1740.358630][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1740.363645][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1740.368576][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1740.373770][ C0] ? futex_wake+0x155/0x490 [ 1740.378268][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1740.384232][ C0] do_futex+0x15b/0x1a60 [ 1740.388468][ C0] ? lock_acquire+0x1f1/0xad0 [ 1740.393218][ C0] ? __might_fault+0xef/0x1d0 [ 1740.397873][ C0] ? find_held_lock+0x2d/0x110 [ 1740.402612][ C0] ? futex_exit_release+0x220/0x220 [ 1740.407787][ C0] ? lock_downgrade+0x820/0x820 [ 1740.412615][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1740.418842][ C0] ? __might_fault+0x190/0x1d0 [ 1740.423603][ C0] ? _copy_to_user+0x126/0x160 [ 1740.428347][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1740.433803][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1740.439337][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1740.446045][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1740.451623][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1740.456721][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1740.461954][ C0] do_fast_syscall_32+0x7f/0x120 [ 1740.466872][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1740.471972][ C0] RIP: 0023:0xf7f6d569 [ 1740.476010][ C0] Code: Bad RIP value. [ 1740.480051][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1740.488459][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1740.496441][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1740.504487][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1740.514372][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.522325][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.532200][ C0] syz-executor.3 S29944 13921 7114 0x20020000 [ 1740.538512][ C0] Call Trace: [ 1740.541785][ C0] __schedule+0x8e1/0x1eb0 [ 1740.546182][ C0] ? io_schedule_timeout+0x140/0x140 [ 1740.551473][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1740.556927][ C0] schedule+0xd0/0x2a0 [ 1740.560974][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1740.566167][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1740.571346][ C0] futex_wait+0x1df/0x560 [ 1740.575657][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1740.580665][ C0] ? wake_up_q+0xa3/0x100 [ 1740.584967][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1740.590160][ C0] ? futex_wake+0x155/0x490 [ 1740.594656][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1740.600787][ C0] do_futex+0x15b/0x1a60 [ 1740.605012][ C0] ? lock_acquire+0x1f1/0xad0 [ 1740.609676][ C0] ? __might_fault+0xef/0x1d0 [ 1740.614328][ C0] ? find_held_lock+0x2d/0x110 [ 1740.619087][ C0] ? futex_exit_release+0x220/0x220 [ 1740.624262][ C0] ? lock_downgrade+0x820/0x820 [ 1740.629092][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1740.635315][ C0] ? __might_fault+0x190/0x1d0 [ 1740.641012][ C0] ? _copy_to_user+0x126/0x160 [ 1740.645843][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1740.651370][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1740.656909][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1740.662794][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1740.667708][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1740.672799][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1740.677887][ C0] do_fast_syscall_32+0x7f/0x120 [ 1740.682802][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1740.687889][ C0] RIP: 0023:0xf7f6d569 [ 1740.691946][ C0] Code: Bad RIP value. [ 1740.695987][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1740.704372][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1740.712333][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1740.720281][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1740.728236][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.736442][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.744427][ C0] syz-executor.3 S29944 13927 7114 0x20020000 [ 1740.750753][ C0] Call Trace: [ 1740.754024][ C0] __schedule+0x8e1/0x1eb0 [ 1740.758421][ C0] ? io_schedule_timeout+0x140/0x140 [ 1740.763684][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1740.769122][ C0] schedule+0xd0/0x2a0 [ 1740.773185][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1740.778275][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1740.783469][ C0] futex_wait+0x1df/0x560 [ 1740.787794][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1740.792799][ C0] ? wake_up_q+0xa3/0x100 [ 1740.797103][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1740.802277][ C0] ? futex_wake+0x155/0x490 [ 1740.806765][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1740.812727][ C0] do_futex+0x15b/0x1a60 [ 1740.816952][ C0] ? lock_acquire+0x1f1/0xad0 [ 1740.821604][ C0] ? __might_fault+0xef/0x1d0 [ 1740.826275][ C0] ? find_held_lock+0x2d/0x110 [ 1740.831035][ C0] ? futex_exit_release+0x220/0x220 [ 1740.836210][ C0] ? lock_downgrade+0x820/0x820 [ 1740.841036][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1740.847429][ C0] ? __might_fault+0x190/0x1d0 [ 1740.852169][ C0] ? _copy_to_user+0x126/0x160 [ 1740.856912][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1740.862351][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1740.867890][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1740.873778][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1740.878693][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1740.883786][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1740.888876][ C0] do_fast_syscall_32+0x7f/0x120 [ 1740.893790][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1740.898979][ C0] RIP: 0023:0xf7f6d569 [ 1740.903017][ C0] Code: Bad RIP value. [ 1740.907068][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1740.915464][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1740.923419][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1740.931369][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1740.939316][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.947265][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.955225][ C0] syz-executor.2 S28360 14638 7031 0x20020000 [ 1740.961536][ C0] Call Trace: [ 1740.964810][ C0] __schedule+0x8e1/0x1eb0 [ 1740.969214][ C0] ? io_schedule_timeout+0x140/0x140 [ 1740.974476][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1740.979918][ C0] schedule+0xd0/0x2a0 [ 1740.983991][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1740.989094][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1740.994271][ C0] futex_wait+0x1df/0x560 [ 1740.998599][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1741.003602][ C0] ? wake_up_q+0xa3/0x100 [ 1741.007912][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1741.013085][ C0] ? futex_wake+0x155/0x490 [ 1741.024703][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1741.030710][ C0] do_futex+0x15b/0x1a60 [ 1741.035036][ C0] ? lock_acquire+0x1f1/0xad0 [ 1741.039707][ C0] ? __might_fault+0xef/0x1d0 [ 1741.044374][ C0] ? find_held_lock+0x2d/0x110 [ 1741.049121][ C0] ? futex_exit_release+0x220/0x220 [ 1741.055081][ C0] ? lock_downgrade+0x820/0x820 [ 1741.060034][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1741.066343][ C0] ? __might_fault+0x190/0x1d0 [ 1741.071118][ C0] ? _copy_to_user+0x126/0x160 [ 1741.075888][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1741.081390][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1741.086313][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1741.091841][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1741.096755][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1741.101851][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1741.107025][ C0] do_fast_syscall_32+0x7f/0x120 [ 1741.111942][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1741.117030][ C0] RIP: 0023:0xf7f91569 [ 1741.121069][ C0] Code: Bad RIP value. [ 1741.125112][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1741.133497][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1741.141453][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1741.149398][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1741.157632][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1741.165651][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1741.173619][ C0] syz-executor.2 S28360 14644 7031 0x20020000 [ 1741.179950][ C0] Call Trace: [ 1741.183227][ C0] __schedule+0x8e1/0x1eb0 [ 1741.187629][ C0] ? io_schedule_timeout+0x140/0x140 [ 1741.192894][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1741.198353][ C0] schedule+0xd0/0x2a0 [ 1741.202403][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1741.207631][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1741.212808][ C0] futex_wait+0x1df/0x560 [ 1741.217117][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1741.222122][ C0] ? wake_up_q+0xa3/0x100 [ 1741.226442][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1741.231616][ C0] ? futex_wake+0x155/0x490 [ 1741.236106][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1741.242078][ C0] do_futex+0x15b/0x1a60 [ 1741.246304][ C0] ? lock_acquire+0x1f1/0xad0 [ 1741.250962][ C0] ? __might_fault+0xef/0x1d0 [ 1741.255614][ C0] ? find_held_lock+0x2d/0x110 [ 1741.260354][ C0] ? futex_exit_release+0x220/0x220 [ 1741.265528][ C0] ? lock_downgrade+0x820/0x820 [ 1741.270373][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1741.276596][ C0] ? __might_fault+0x190/0x1d0 [ 1741.281343][ C0] ? _copy_to_user+0x126/0x160 [ 1741.286087][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1741.291526][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1741.297045][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1741.302935][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1741.307913][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1741.313015][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1741.318113][ C0] do_fast_syscall_32+0x7f/0x120 [ 1741.323034][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1741.328125][ C0] RIP: 0023:0xf7f91569 [ 1741.332217][ C0] Code: Bad RIP value. [ 1741.336261][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1741.344664][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1741.353572][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1741.361603][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1741.369548][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1741.377508][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1741.385474][ C0] syz-executor.2 S28360 14658 7031 0x20020000 [ 1741.391833][ C0] Call Trace: [ 1741.395106][ C0] __schedule+0x8e1/0x1eb0 [ 1741.399502][ C0] ? io_schedule_timeout+0x140/0x140 [ 1741.404764][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1741.410201][ C0] schedule+0xd0/0x2a0 [ 1741.414261][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1741.419346][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1741.424522][ C0] futex_wait+0x1df/0x560 [ 1741.428828][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1741.433848][ C0] ? wake_up_q+0xa3/0x100 [ 1741.438155][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1741.443336][ C0] ? futex_wake+0x155/0x490 [ 1741.447826][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1741.453781][ C0] do_futex+0x15b/0x1a60 [ 1741.458090][ C0] ? lock_acquire+0x1f1/0xad0 [ 1741.462740][ C0] ? __might_fault+0xef/0x1d0 [ 1741.467389][ C0] ? find_held_lock+0x2d/0x110 [ 1741.472143][ C0] ? futex_exit_release+0x220/0x220 [ 1741.477449][ C0] ? lock_downgrade+0x820/0x820 [ 1741.482286][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1741.488522][ C0] ? __might_fault+0x190/0x1d0 [ 1741.493268][ C0] ? _copy_to_user+0x126/0x160 [ 1741.498056][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1741.503499][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1741.508412][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1741.513939][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1741.518854][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1741.523943][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1741.529030][ C0] do_fast_syscall_32+0x7f/0x120 [ 1741.533943][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1741.539027][ C0] RIP: 0023:0xf7f91569 [ 1741.543079][ C0] Code: Bad RIP value. [ 1741.547118][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1741.555514][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1741.563459][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1741.571417][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1741.579372][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1741.587333][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1741.595297][ C0] bond14 I30952 15229 2 0x00004000 [ 1741.601609][ C0] Call Trace: [ 1741.604879][ C0] __schedule+0x8e1/0x1eb0 [ 1741.609327][ C0] ? io_schedule_timeout+0x140/0x140 [ 1741.614588][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1741.619588][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1741.624762][ C0] schedule+0xd0/0x2a0 [ 1741.628840][ C0] rescuer_thread+0x7a7/0xd30 [ 1741.633498][ C0] ? worker_thread+0x1120/0x1120 [ 1741.638412][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1741.643497][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1741.648496][ C0] ? worker_thread+0x1120/0x1120 [ 1741.653408][ C0] kthread+0x3b5/0x4a0 [ 1741.657453][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.662534][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.667622][ C0] ret_from_fork+0x1f/0x30 [ 1741.672033][ C0] bond15 I30952 15274 2 0x00004000 [ 1741.678340][ C0] Call Trace: [ 1741.681604][ C0] __schedule+0x8e1/0x1eb0 [ 1741.686013][ C0] ? io_schedule_timeout+0x140/0x140 [ 1741.691272][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1741.696286][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1741.701458][ C0] schedule+0xd0/0x2a0 [ 1741.705525][ C0] rescuer_thread+0x7a7/0xd30 [ 1741.710183][ C0] ? worker_thread+0x1120/0x1120 [ 1741.715094][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1741.720188][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1741.725275][ C0] ? worker_thread+0x1120/0x1120 [ 1741.730187][ C0] kthread+0x3b5/0x4a0 [ 1741.734238][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.739322][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.744410][ C0] ret_from_fork+0x1f/0x30 [ 1741.748809][ C0] bond16 I30952 15316 2 0x00004000 [ 1741.755129][ C0] Call Trace: [ 1741.758393][ C0] __schedule+0x8e1/0x1eb0 [ 1741.762797][ C0] ? io_schedule_timeout+0x140/0x140 [ 1741.768105][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1741.773109][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1741.778279][ C0] schedule+0xd0/0x2a0 [ 1741.782324][ C0] rescuer_thread+0x7a7/0xd30 [ 1741.786983][ C0] ? worker_thread+0x1120/0x1120 [ 1741.791895][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1741.797001][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1741.801999][ C0] ? worker_thread+0x1120/0x1120 [ 1741.806923][ C0] kthread+0x3b5/0x4a0 [ 1741.810966][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.816051][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.821143][ C0] ret_from_fork+0x1f/0x30 [ 1741.825539][ C0] bond17 I30952 15364 2 0x00004000 [ 1741.831847][ C0] Call Trace: [ 1741.835116][ C0] __schedule+0x8e1/0x1eb0 [ 1741.839523][ C0] ? io_schedule_timeout+0x140/0x140 [ 1741.844955][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1741.849954][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1741.855128][ C0] schedule+0xd0/0x2a0 [ 1741.859174][ C0] rescuer_thread+0x7a7/0xd30 [ 1741.863831][ C0] ? worker_thread+0x1120/0x1120 [ 1741.868744][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1741.873831][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1741.878915][ C0] ? worker_thread+0x1120/0x1120 [ 1741.883896][ C0] kthread+0x3b5/0x4a0 [ 1741.887997][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.893084][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1741.898222][ C0] ret_from_fork+0x1f/0x30 [ 1741.902625][ C0] syz-executor.2 S29944 15578 7031 0x20020000 [ 1741.908938][ C0] Call Trace: [ 1741.912207][ C0] __schedule+0x8e1/0x1eb0 [ 1741.916625][ C0] ? io_schedule_timeout+0x140/0x140 [ 1741.921897][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1741.927346][ C0] schedule+0xd0/0x2a0 [ 1741.931390][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1741.936475][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1741.941647][ C0] ? futex_wake+0x1b5/0x490 [ 1741.946138][ C0] ? find_held_lock+0x2d/0x110 [ 1741.950878][ C0] futex_wait+0x1df/0x560 [ 1741.955183][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1741.961140][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1741.966060][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1741.971230][ C0] ? futex_wake+0x155/0x490 [ 1741.975729][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1741.981685][ C0] do_futex+0x15b/0x1a60 [ 1741.985907][ C0] ? lock_acquire+0x1f1/0xad0 [ 1741.990566][ C0] ? __might_fault+0xef/0x1d0 [ 1741.995218][ C0] ? find_held_lock+0x2d/0x110 [ 1741.999957][ C0] ? futex_exit_release+0x220/0x220 [ 1742.005130][ C0] ? lock_downgrade+0x820/0x820 [ 1742.009966][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1742.016185][ C0] ? __might_fault+0x190/0x1d0 [ 1742.020933][ C0] ? _copy_to_user+0x126/0x160 [ 1742.025687][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1742.031210][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1742.036727][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1742.042595][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.047512][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1742.052600][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1742.057697][ C0] do_fast_syscall_32+0x7f/0x120 [ 1742.062608][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1742.067704][ C0] RIP: 0023:0xf7f91569 [ 1742.071739][ C0] Code: Bad RIP value. [ 1742.075777][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1742.084168][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1742.092111][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1742.100070][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1742.108023][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.115969][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.123928][ C0] syz-executor.2 S29096 15588 7031 0x20020000 [ 1742.130234][ C0] Call Trace: [ 1742.133524][ C0] __schedule+0x8e1/0x1eb0 [ 1742.137931][ C0] ? io_schedule_timeout+0x140/0x140 [ 1742.143203][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1742.148733][ C0] schedule+0xd0/0x2a0 [ 1742.152784][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1742.157871][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1742.163046][ C0] futex_wait+0x1df/0x560 [ 1742.167363][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1742.172364][ C0] ? wake_up_q+0xa3/0x100 [ 1742.176666][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1742.181838][ C0] ? futex_wake+0x155/0x490 [ 1742.186325][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1742.192343][ C0] do_futex+0x15b/0x1a60 [ 1742.196579][ C0] ? lock_acquire+0x1f1/0xad0 [ 1742.201261][ C0] ? __might_fault+0xef/0x1d0 [ 1742.205965][ C0] ? find_held_lock+0x2d/0x110 [ 1742.210717][ C0] ? futex_exit_release+0x220/0x220 [ 1742.215890][ C0] ? lock_downgrade+0x820/0x820 [ 1742.220730][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1742.227035][ C0] ? __might_fault+0x190/0x1d0 [ 1742.231859][ C0] ? _copy_to_user+0x126/0x160 [ 1742.236617][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1742.242141][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.247053][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1742.252585][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.257502][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1742.262592][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1742.267678][ C0] do_fast_syscall_32+0x7f/0x120 [ 1742.272591][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1742.277673][ C0] RIP: 0023:0xf7f91569 [ 1742.281722][ C0] Code: Bad RIP value. [ 1742.285758][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1742.294143][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1742.302088][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1742.310267][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1742.318232][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.326182][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.334144][ C0] syz-executor.2 S29944 15594 7031 0x20020000 [ 1742.340452][ C0] Call Trace: [ 1742.343773][ C0] __schedule+0x8e1/0x1eb0 [ 1742.348170][ C0] ? io_schedule_timeout+0x140/0x140 [ 1742.353431][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1742.358910][ C0] schedule+0xd0/0x2a0 [ 1742.362953][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1742.368045][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1742.373218][ C0] futex_wait+0x1df/0x560 [ 1742.377552][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1742.382564][ C0] ? wake_up_q+0xa3/0x100 [ 1742.386873][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1742.392052][ C0] ? futex_wake+0x155/0x490 [ 1742.396691][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1742.402687][ C0] do_futex+0x15b/0x1a60 [ 1742.406911][ C0] ? lock_acquire+0x1f1/0xad0 [ 1742.411563][ C0] ? __might_fault+0xef/0x1d0 [ 1742.416260][ C0] ? find_held_lock+0x2d/0x110 [ 1742.421000][ C0] ? futex_exit_release+0x220/0x220 [ 1742.426174][ C0] ? lock_downgrade+0x820/0x820 [ 1742.431007][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1742.437346][ C0] ? __might_fault+0x190/0x1d0 [ 1742.442092][ C0] ? _copy_to_user+0x126/0x160 [ 1742.446851][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1742.452296][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.457215][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1742.462741][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.467658][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1742.472746][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1742.478006][ C0] do_fast_syscall_32+0x7f/0x120 [ 1742.482921][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1742.488027][ C0] RIP: 0023:0xf7f91569 [ 1742.492067][ C0] Code: Bad RIP value. [ 1742.496139][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1742.504525][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1742.512568][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1742.520515][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1742.528478][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.536424][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.544382][ C0] syz-executor.2 S29024 15610 7031 0x20020000 [ 1742.550703][ C0] Call Trace: [ 1742.553969][ C0] __schedule+0x8e1/0x1eb0 [ 1742.558372][ C0] ? io_schedule_timeout+0x140/0x140 [ 1742.563634][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1742.569070][ C0] schedule+0xd0/0x2a0 [ 1742.573141][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1742.578245][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1742.591766][ C0] futex_wait+0x1df/0x560 [ 1742.596217][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1742.601225][ C0] ? wake_up_q+0xa3/0x100 [ 1742.605555][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1742.610731][ C0] ? futex_wake+0x155/0x490 [ 1742.615220][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1742.621960][ C0] do_futex+0x15b/0x1a60 [ 1742.626186][ C0] ? lock_acquire+0x1f1/0xad0 [ 1742.630854][ C0] ? __might_fault+0xef/0x1d0 [ 1742.635516][ C0] ? find_held_lock+0x2d/0x110 [ 1742.640285][ C0] ? futex_exit_release+0x220/0x220 [ 1742.645468][ C0] ? lock_downgrade+0x820/0x820 [ 1742.650320][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1742.656540][ C0] ? __might_fault+0x190/0x1d0 [ 1742.661282][ C0] ? _copy_to_user+0x126/0x160 [ 1742.666044][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1742.671486][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.676433][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1742.681966][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.688876][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1742.693968][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1742.699053][ C0] do_fast_syscall_32+0x7f/0x120 [ 1742.703985][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1742.709072][ C0] RIP: 0023:0xf7f91569 [ 1742.713109][ C0] Code: Bad RIP value. [ 1742.717147][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1742.725530][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1742.733477][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1742.741496][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1742.750319][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.758332][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.766298][ C0] syz-executor.4 S29944 16056 7392 0x20020000 [ 1742.772623][ C0] Call Trace: [ 1742.775929][ C0] __schedule+0x8e1/0x1eb0 [ 1742.780332][ C0] ? io_schedule_timeout+0x140/0x140 [ 1742.785599][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1742.791329][ C0] schedule+0xd0/0x2a0 [ 1742.795382][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1742.800473][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1742.805653][ C0] futex_wait+0x1df/0x560 [ 1742.809964][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1742.814984][ C0] ? wake_up_q+0xa3/0x100 [ 1742.819287][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1742.824564][ C0] ? futex_wake+0x155/0x490 [ 1742.829050][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1742.835025][ C0] do_futex+0x15b/0x1a60 [ 1742.839385][ C0] ? lock_acquire+0x1f1/0xad0 [ 1742.844047][ C0] ? __might_fault+0xef/0x1d0 [ 1742.848700][ C0] ? find_held_lock+0x2d/0x110 [ 1742.853439][ C0] ? futex_exit_release+0x220/0x220 [ 1742.858616][ C0] ? lock_downgrade+0x820/0x820 [ 1742.863443][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1742.869663][ C0] ? __might_fault+0x190/0x1d0 [ 1742.874490][ C0] ? _copy_to_user+0x126/0x160 [ 1742.879233][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1742.884671][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.889671][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1742.895193][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1742.900122][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1742.905220][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1742.910308][ C0] do_fast_syscall_32+0x7f/0x120 [ 1742.916873][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1742.921961][ C0] RIP: 0023:0xf7fd7569 [ 1742.926001][ C0] Code: Bad RIP value. [ 1742.930151][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1742.938538][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1742.946571][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1742.954519][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1742.964558][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.972523][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.980484][ C0] syz-executor.4 S29944 16109 7392 0x20020000 [ 1742.986796][ C0] Call Trace: [ 1742.990063][ C0] __schedule+0x8e1/0x1eb0 [ 1742.994471][ C0] ? io_schedule_timeout+0x140/0x140 [ 1742.999732][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1743.005191][ C0] schedule+0xd0/0x2a0 [ 1743.011495][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1743.016597][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1743.021774][ C0] futex_wait+0x1df/0x560 [ 1743.026081][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1743.031105][ C0] ? wake_up_q+0xa3/0x100 [ 1743.035410][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1743.040591][ C0] ? futex_wake+0x155/0x490 [ 1743.045079][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1743.051034][ C0] do_futex+0x15b/0x1a60 [ 1743.055256][ C0] ? lock_acquire+0x1f1/0xad0 [ 1743.059925][ C0] ? __might_fault+0xef/0x1d0 [ 1743.064575][ C0] ? find_held_lock+0x2d/0x110 [ 1743.069313][ C0] ? futex_exit_release+0x220/0x220 [ 1743.074487][ C0] ? lock_downgrade+0x820/0x820 [ 1743.079399][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1743.085633][ C0] ? __might_fault+0x190/0x1d0 [ 1743.090388][ C0] ? _copy_to_user+0x126/0x160 [ 1743.095148][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1743.100586][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1743.105501][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1743.111025][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1743.115965][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1743.121056][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1743.126161][ C0] do_fast_syscall_32+0x7f/0x120 [ 1743.131082][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1743.136167][ C0] RIP: 0023:0xf7fd7569 [ 1743.148388][ C0] Code: Bad RIP value. [ 1743.152444][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1743.160830][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1743.168777][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1743.176984][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1743.184931][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1743.192895][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.200869][ C0] syz-executor.4 S29144 16128 7392 0x20020000 [ 1743.207293][ C0] Call Trace: [ 1743.210576][ C0] __schedule+0x8e1/0x1eb0 [ 1743.214979][ C0] ? io_schedule_timeout+0x140/0x140 [ 1743.220339][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1743.225909][ C0] schedule+0xd0/0x2a0 [ 1743.229962][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1743.235049][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1743.240235][ C0] futex_wait+0x1df/0x560 [ 1743.244544][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1743.249551][ C0] ? wake_up_q+0xa3/0x100 [ 1743.253856][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1743.259035][ C0] ? futex_wake+0x155/0x490 [ 1743.263577][ C0] do_futex+0x15b/0x1a60 [ 1743.267803][ C0] ? lock_acquire+0x1f1/0xad0 [ 1743.272456][ C0] ? __might_fault+0xef/0x1d0 [ 1743.277134][ C0] ? find_held_lock+0x2d/0x110 [ 1743.283090][ C0] ? futex_exit_release+0x220/0x220 [ 1743.288274][ C0] ? lock_downgrade+0x820/0x820 [ 1743.293104][ C0] ? read_seqcount_begin.constprop.0+0x10b/0x1f0 [ 1743.299409][ C0] ? __might_fault+0x190/0x1d0 [ 1743.304146][ C0] ? _copy_to_user+0x126/0x160 [ 1743.308890][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1743.314330][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1743.319245][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1743.324767][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1743.329695][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1743.334785][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1743.339871][ C0] do_fast_syscall_32+0x7f/0x120 [ 1743.344894][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1743.350001][ C0] RIP: 0023:0xf7fd7569 [ 1743.354052][ C0] Code: Bad RIP value. [ 1743.358106][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1743.366493][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1743.374459][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1743.382407][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1743.390354][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1743.398300][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.406261][ C0] syz-executor.5 S29944 16891 7432 0x20020000 [ 1743.412591][ C0] Call Trace: [ 1743.415888][ C0] __schedule+0x8e1/0x1eb0 [ 1743.420290][ C0] ? io_schedule_timeout+0x140/0x140 [ 1743.425551][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1743.430991][ C0] schedule+0xd0/0x2a0 [ 1743.435056][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1743.440148][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1743.445329][ C0] futex_wait+0x1df/0x560 [ 1743.449637][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1743.454658][ C0] ? mark_lock+0xbc/0x1710 [ 1743.459052][ C0] ? hash_futex+0x12/0x200 [ 1743.463444][ C0] ? futex_wake+0x155/0x490 [ 1743.467936][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1743.473893][ C0] do_futex+0x15b/0x1a60 [ 1743.478118][ C0] ? lock_acquire+0x1f1/0xad0 [ 1743.482779][ C0] ? __might_fault+0xef/0x1d0 [ 1743.487432][ C0] ? find_held_lock+0x2d/0x110 [ 1743.492440][ C0] ? futex_exit_release+0x220/0x220 [ 1743.497617][ C0] ? lock_downgrade+0x820/0x820 [ 1743.502453][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1743.508678][ C0] ? __might_fault+0x190/0x1d0 [ 1743.513436][ C0] ? _copy_to_user+0x126/0x160 [ 1743.518180][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1743.523618][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1743.529138][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1743.535012][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1743.539926][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1743.545015][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1743.550102][ C0] do_fast_syscall_32+0x7f/0x120 [ 1743.555014][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1743.560099][ C0] RIP: 0023:0xf7f53569 [ 1743.564137][ C0] Code: Bad RIP value. [ 1743.568176][ C0] RSP: 002b:00000000f5d2d12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1743.576580][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1743.584533][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1743.592499][ C0] RBP: 00000000f5d2d228 R08: 0000000000000000 R09: 0000000000000000 [ 1743.600446][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1743.608409][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.616366][ C0] syz-executor.1 S29944 16950 6979 0x20020000 [ 1743.622692][ C0] Call Trace: [ 1743.625961][ C0] __schedule+0x8e1/0x1eb0 [ 1743.630358][ C0] ? io_schedule_timeout+0x140/0x140 [ 1743.635620][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1743.641058][ C0] schedule+0xd0/0x2a0 [ 1743.645108][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1743.650196][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1743.655373][ C0] futex_wait+0x1df/0x560 [ 1743.659681][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1743.664686][ C0] ? wake_up_q+0xa3/0x100 [ 1743.668988][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1743.674162][ C0] ? futex_wake+0x155/0x490 [ 1743.678667][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1743.684623][ C0] do_futex+0x15b/0x1a60 [ 1743.688855][ C0] ? lock_acquire+0x1f1/0xad0 [ 1743.693506][ C0] ? __might_fault+0xef/0x1d0 [ 1743.698246][ C0] ? find_held_lock+0x2d/0x110 [ 1743.702996][ C0] ? futex_exit_release+0x220/0x220 [ 1743.708174][ C0] ? lock_downgrade+0x820/0x820 [ 1743.713003][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1743.719251][ C0] ? __might_fault+0x190/0x1d0 [ 1743.723991][ C0] ? _copy_to_user+0x126/0x160 [ 1743.728735][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1743.734194][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1743.739715][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1743.745606][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1743.750520][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1743.755614][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1743.760701][ C0] do_fast_syscall_32+0x7f/0x120 [ 1743.765617][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1743.770721][ C0] RIP: 0023:0xf7fa1569 [ 1743.774760][ C0] Code: Bad RIP value. [ 1743.778827][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1743.787212][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1743.795506][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1743.803473][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1743.811427][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1743.819374][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.827333][ C0] syz-executor.2 S29944 16981 7031 0x20020000 [ 1743.833642][ C0] Call Trace: [ 1743.836929][ C0] __schedule+0x8e1/0x1eb0 [ 1743.841327][ C0] ? io_schedule_timeout+0x140/0x140 [ 1743.846588][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1743.852028][ C0] schedule+0xd0/0x2a0 [ 1743.856075][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1743.861161][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1743.866336][ C0] futex_wait+0x1df/0x560 [ 1743.870644][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1743.875648][ C0] ? wake_up_q+0xa3/0x100 [ 1743.880049][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1743.885223][ C0] ? futex_wake+0x155/0x490 [ 1743.889714][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1743.895689][ C0] do_futex+0x15b/0x1a60 [ 1743.899932][ C0] ? lock_acquire+0x1f1/0xad0 [ 1743.904595][ C0] ? __might_fault+0xef/0x1d0 [ 1743.909247][ C0] ? find_held_lock+0x2d/0x110 [ 1743.913988][ C0] ? futex_exit_release+0x220/0x220 [ 1743.919163][ C0] ? lock_downgrade+0x820/0x820 [ 1743.923991][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1743.930231][ C0] ? __might_fault+0x190/0x1d0 [ 1743.934989][ C0] ? _copy_to_user+0x126/0x160 [ 1743.939736][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1743.945285][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1743.950808][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1743.956699][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1743.961612][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1743.966703][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1743.971804][ C0] do_fast_syscall_32+0x7f/0x120 [ 1743.976718][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1743.981808][ C0] RIP: 0023:0xf7f91569 [ 1743.985847][ C0] Code: Bad RIP value. [ 1743.989887][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1743.998285][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1744.006232][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1744.014180][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1744.022144][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.030111][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.038084][ C0] syz-executor.4 S29704 17047 7392 0x20020000 [ 1744.044412][ C0] Call Trace: [ 1744.047699][ C0] __schedule+0x8e1/0x1eb0 [ 1744.052096][ C0] ? io_schedule_timeout+0x140/0x140 [ 1744.057357][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1744.062908][ C0] schedule+0xd0/0x2a0 [ 1744.066974][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1744.072060][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1744.077236][ C0] futex_wait+0x1df/0x560 [ 1744.081543][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1744.086545][ C0] ? wake_up_q+0xa3/0x100 [ 1744.090853][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1744.096029][ C0] ? futex_wake+0x155/0x490 [ 1744.100518][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1744.106477][ C0] do_futex+0x15b/0x1a60 [ 1744.110790][ C0] ? lock_acquire+0x1f1/0xad0 [ 1744.115463][ C0] ? __might_fault+0xef/0x1d0 [ 1744.120116][ C0] ? find_held_lock+0x2d/0x110 [ 1744.124885][ C0] ? futex_exit_release+0x220/0x220 [ 1744.130079][ C0] ? lock_downgrade+0x820/0x820 [ 1744.134925][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1744.141151][ C0] ? __might_fault+0x190/0x1d0 [ 1744.145997][ C0] ? _copy_to_user+0x126/0x160 [ 1744.150753][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1744.156407][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1744.161330][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1744.166858][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1744.171793][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1744.176890][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1744.181979][ C0] do_fast_syscall_32+0x7f/0x120 [ 1744.186916][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1744.192031][ C0] RIP: 0023:0xf7fd7569 [ 1744.196079][ C0] Code: Bad RIP value. [ 1744.200125][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1744.208524][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1744.216500][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1744.224450][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1744.232571][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.240517][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.248476][ C0] syz-executor.0 S28232 17281 6841 0x20020000 [ 1744.254805][ C0] Call Trace: [ 1744.258075][ C0] __schedule+0x8e1/0x1eb0 [ 1744.262474][ C0] ? io_schedule_timeout+0x140/0x140 [ 1744.267735][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1744.273174][ C0] schedule+0xd0/0x2a0 [ 1744.277221][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1744.282308][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1744.287657][ C0] futex_wait+0x1df/0x560 [ 1744.291964][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1744.296992][ C0] ? mark_lock+0xbc/0x1710 [ 1744.301384][ C0] ? hash_futex+0x12/0x200 [ 1744.305881][ C0] ? futex_wake+0x155/0x490 [ 1744.310370][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1744.316326][ C0] do_futex+0x15b/0x1a60 [ 1744.320557][ C0] ? lock_acquire+0x1f1/0xad0 [ 1744.325208][ C0] ? __might_fault+0xef/0x1d0 [ 1744.329869][ C0] ? find_held_lock+0x2d/0x110 [ 1744.334616][ C0] ? futex_exit_release+0x220/0x220 [ 1744.339794][ C0] ? lock_downgrade+0x820/0x820 [ 1744.344643][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1744.350898][ C0] ? __might_fault+0x190/0x1d0 [ 1744.355644][ C0] ? _copy_to_user+0x126/0x160 [ 1744.360391][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1744.365832][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1744.371352][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1744.377223][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1744.382247][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1744.387355][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1744.392457][ C0] do_fast_syscall_32+0x7f/0x120 [ 1744.397378][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1744.402468][ C0] RIP: 0023:0xf7fd1569 [ 1744.406641][ C0] Code: Bad RIP value. [ 1744.410682][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1744.419068][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1744.427015][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1744.434960][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1744.443036][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.450990][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.458966][ C0] syz-executor.0 S29944 17291 6841 0x20020000 [ 1744.465274][ C0] Call Trace: [ 1744.468543][ C0] __schedule+0x8e1/0x1eb0 [ 1744.472941][ C0] ? io_schedule_timeout+0x140/0x140 [ 1744.478203][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1744.483642][ C0] schedule+0xd0/0x2a0 [ 1744.487688][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1744.492790][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1744.497979][ C0] futex_wait+0x1df/0x560 [ 1744.502288][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1744.507299][ C0] ? wake_up_q+0xa3/0x100 [ 1744.511617][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1744.516808][ C0] ? futex_wake+0x155/0x490 [ 1744.521296][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1744.527253][ C0] do_futex+0x15b/0x1a60 [ 1744.531493][ C0] ? lock_acquire+0x1f1/0xad0 [ 1744.536149][ C0] ? __might_fault+0xef/0x1d0 [ 1744.540813][ C0] ? find_held_lock+0x2d/0x110 [ 1744.545553][ C0] ? futex_exit_release+0x220/0x220 [ 1744.550731][ C0] ? lock_downgrade+0x820/0x820 [ 1744.555581][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1744.562672][ C0] ? __might_fault+0x190/0x1d0 [ 1744.567414][ C0] ? _copy_to_user+0x126/0x160 [ 1744.572156][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1744.577597][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1744.583128][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1744.589433][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1744.594349][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1744.599439][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1744.604525][ C0] do_fast_syscall_32+0x7f/0x120 [ 1744.609440][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1744.614528][ C0] RIP: 0023:0xf7fd1569 [ 1744.618568][ C0] Code: Bad RIP value. [ 1744.622607][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1744.630991][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1744.638938][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1744.648968][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1744.656928][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.665327][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.673302][ C0] syz-executor.0 S29944 17304 6841 0x20020000 [ 1744.679634][ C0] Call Trace: [ 1744.682907][ C0] __schedule+0x8e1/0x1eb0 [ 1744.687306][ C0] ? io_schedule_timeout+0x140/0x140 [ 1744.692598][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1744.698039][ C0] schedule+0xd0/0x2a0 [ 1744.702105][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1744.707192][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1744.712374][ C0] futex_wait+0x1df/0x560 [ 1744.716692][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1744.721698][ C0] ? wake_up_q+0xa3/0x100 [ 1744.726005][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1744.731275][ C0] ? futex_wake+0x155/0x490 [ 1744.735763][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1744.741719][ C0] do_futex+0x15b/0x1a60 [ 1744.745948][ C0] ? lock_acquire+0x1f1/0xad0 [ 1744.750618][ C0] ? __might_fault+0xef/0x1d0 [ 1744.755271][ C0] ? find_held_lock+0x2d/0x110 [ 1744.760013][ C0] ? futex_exit_release+0x220/0x220 [ 1744.765191][ C0] ? lock_downgrade+0x820/0x820 [ 1744.770021][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1744.776239][ C0] ? __might_fault+0x190/0x1d0 [ 1744.781586][ C0] ? _copy_to_user+0x126/0x160 [ 1744.786334][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1744.791948][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1744.797485][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1744.803445][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1744.808401][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1744.813490][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1744.818583][ C0] do_fast_syscall_32+0x7f/0x120 [ 1744.823496][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1744.828582][ C0] RIP: 0023:0xf7fd1569 [ 1744.832619][ C0] Code: Bad RIP value. [ 1744.836658][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1744.845157][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1744.853112][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1744.861068][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1744.869025][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.877001][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.885030][ C0] syz-executor.0 S29944 17313 6841 0x20020000 [ 1744.891343][ C0] Call Trace: [ 1744.894614][ C0] __schedule+0x8e1/0x1eb0 [ 1744.899031][ C0] ? io_schedule_timeout+0x140/0x140 [ 1744.904293][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1744.909792][ C0] schedule+0xd0/0x2a0 [ 1744.913851][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1744.918957][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1744.924139][ C0] futex_wait+0x1df/0x560 [ 1744.928455][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1744.933479][ C0] ? wake_up_q+0xa3/0x100 [ 1744.937817][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1744.943001][ C0] ? futex_wake+0x155/0x490 [ 1744.947496][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1744.953454][ C0] do_futex+0x15b/0x1a60 [ 1744.957679][ C0] ? lock_acquire+0x1f1/0xad0 [ 1744.962348][ C0] ? __might_fault+0xef/0x1d0 [ 1744.967001][ C0] ? find_held_lock+0x2d/0x110 [ 1744.971752][ C0] ? futex_exit_release+0x220/0x220 [ 1744.977048][ C0] ? lock_downgrade+0x820/0x820 [ 1744.981879][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1744.988098][ C0] ? __might_fault+0x190/0x1d0 [ 1744.992837][ C0] ? _copy_to_user+0x126/0x160 [ 1744.997582][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1745.003024][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1745.007953][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1745.013475][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1745.018387][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1745.023477][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1745.028564][ C0] do_fast_syscall_32+0x7f/0x120 [ 1745.033482][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1745.038570][ C0] RIP: 0023:0xf7fd1569 [ 1745.042609][ C0] Code: Bad RIP value. [ 1745.046749][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1745.055137][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1745.063085][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1745.071029][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1745.078997][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1745.086947][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1745.094906][ C0] syz-executor.4 S29944 17628 7392 0x20020000 [ 1745.101227][ C0] Call Trace: [ 1745.104491][ C0] __schedule+0x8e1/0x1eb0 [ 1745.108911][ C0] ? io_schedule_timeout+0x140/0x140 [ 1745.114182][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1745.119618][ C0] schedule+0xd0/0x2a0 [ 1745.123663][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1745.128748][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1745.133917][ C0] ? futex_wake+0x1b5/0x490 [ 1745.138408][ C0] ? find_held_lock+0x2d/0x110 [ 1745.143158][ C0] futex_wait+0x1df/0x560 [ 1745.147463][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1745.152459][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1745.157372][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1745.162542][ C0] ? futex_wake+0x155/0x490 [ 1745.167031][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1745.172982][ C0] do_futex+0x15b/0x1a60 [ 1745.177203][ C0] ? lock_acquire+0x1f1/0xad0 [ 1745.181852][ C0] ? __might_fault+0xef/0x1d0 [ 1745.186500][ C0] ? find_held_lock+0x2d/0x110 [ 1745.191325][ C0] ? futex_exit_release+0x220/0x220 [ 1745.196498][ C0] ? lock_downgrade+0x820/0x820 [ 1745.201343][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1745.207580][ C0] ? __might_fault+0x190/0x1d0 [ 1745.212325][ C0] ? _copy_to_user+0x126/0x160 [ 1745.217117][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1745.222562][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1745.228125][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1745.234012][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1745.238923][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1745.244012][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1745.249098][ C0] do_fast_syscall_32+0x7f/0x120 [ 1745.254011][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1745.259094][ C0] RIP: 0023:0xf7fd7569 [ 1745.263129][ C0] Code: Bad RIP value. [ 1745.267210][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1745.275591][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1745.283536][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1745.291479][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1745.299422][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1745.307367][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1745.315324][ C0] syz-executor.4 S29944 17634 7392 0x20020000 [ 1745.321631][ C0] Call Trace: [ 1745.324895][ C0] __schedule+0x8e1/0x1eb0 [ 1745.329290][ C0] ? io_schedule_timeout+0x140/0x140 [ 1745.334548][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1745.339990][ C0] schedule+0xd0/0x2a0 [ 1745.344034][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1745.349118][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1745.354288][ C0] ? futex_wake+0x1b5/0x490 [ 1745.358764][ C0] ? find_held_lock+0x2d/0x110 [ 1745.363502][ C0] futex_wait+0x1df/0x560 [ 1745.367807][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1745.372860][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1745.377783][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1745.383079][ C0] ? futex_wake+0x155/0x490 [ 1745.387571][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1745.393530][ C0] do_futex+0x15b/0x1a60 [ 1745.397757][ C0] ? lock_acquire+0x1f1/0xad0 [ 1745.402430][ C0] ? __might_fault+0xef/0x1d0 [ 1745.407082][ C0] ? find_held_lock+0x2d/0x110 [ 1745.411826][ C0] ? futex_exit_release+0x220/0x220 [ 1745.417005][ C0] ? lock_downgrade+0x820/0x820 [ 1745.421839][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1745.428059][ C0] ? __might_fault+0x190/0x1d0 [ 1745.432796][ C0] ? _copy_to_user+0x126/0x160 [ 1745.437537][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1745.442970][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1745.448491][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1745.454371][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1745.459282][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1745.464370][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1745.469458][ C0] do_fast_syscall_32+0x7f/0x120 [ 1745.474372][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1745.479454][ C0] RIP: 0023:0xf7fd7569 [ 1745.483489][ C0] Code: Bad RIP value. [ 1745.487527][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1745.495908][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1745.503854][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1745.512237][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1745.520180][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1745.528298][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1745.536258][ C0] syz-executor.0 S29944 18287 6841 0x20020000 [ 1745.543023][ C0] Call Trace: [ 1745.546287][ C0] __schedule+0x8e1/0x1eb0 [ 1745.550692][ C0] ? io_schedule_timeout+0x140/0x140 [ 1745.555951][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1745.561387][ C0] schedule+0xd0/0x2a0 [ 1745.565455][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1745.570548][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1745.575754][ C0] futex_wait+0x1df/0x560 [ 1745.580073][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1745.585149][ C0] ? mark_lock+0xbc/0x1710 [ 1745.589544][ C0] ? hash_futex+0x12/0x200 [ 1745.593947][ C0] ? futex_wake+0x155/0x490 [ 1745.598447][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1745.604421][ C0] do_futex+0x15b/0x1a60 [ 1745.608648][ C0] ? lock_acquire+0x1f1/0xad0 [ 1745.613298][ C0] ? __might_fault+0xef/0x1d0 [ 1745.617946][ C0] ? find_held_lock+0x2d/0x110 [ 1745.622702][ C0] ? futex_exit_release+0x220/0x220 [ 1745.627873][ C0] ? lock_downgrade+0x820/0x820 [ 1745.632697][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1745.638915][ C0] ? __might_fault+0x190/0x1d0 [ 1745.643653][ C0] ? _copy_to_user+0x126/0x160 [ 1745.648431][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1745.653878][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1745.659407][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1745.665283][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1745.670198][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1745.675289][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1745.680424][ C0] do_fast_syscall_32+0x7f/0x120 [ 1745.685338][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1745.690424][ C0] RIP: 0023:0xf7fd1569 [ 1745.694459][ C0] Code: Bad RIP value. [ 1745.698494][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1745.706875][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1745.714821][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1745.722792][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1745.730736][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1745.738684][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1745.746651][ C0] syz-executor.2 S29408 18435 7031 0x20020000 [ 1745.752957][ C0] Call Trace: [ 1745.756220][ C0] __schedule+0x8e1/0x1eb0 [ 1745.760613][ C0] ? io_schedule_timeout+0x140/0x140 [ 1745.765871][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1745.771305][ C0] schedule+0xd0/0x2a0 [ 1745.775348][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1745.780430][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1745.785599][ C0] ? futex_wake+0x1b5/0x490 [ 1745.790076][ C0] ? find_held_lock+0x2d/0x110 [ 1745.794814][ C0] futex_wait+0x1df/0x560 [ 1745.799120][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1745.804114][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1745.809033][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1745.814205][ C0] ? futex_wake+0x155/0x490 [ 1745.818688][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1745.824642][ C0] do_futex+0x15b/0x1a60 [ 1745.828863][ C0] ? lock_acquire+0x1f1/0xad0 [ 1745.833512][ C0] ? __might_fault+0xef/0x1d0 [ 1745.838161][ C0] ? find_held_lock+0x2d/0x110 [ 1745.842898][ C0] ? futex_exit_release+0x220/0x220 [ 1745.848088][ C0] ? lock_downgrade+0x820/0x820 [ 1745.852926][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1745.859273][ C0] ? __might_fault+0x190/0x1d0 [ 1745.864020][ C0] ? _copy_to_user+0x126/0x160 [ 1745.868768][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1745.874208][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1745.879736][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1745.885610][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1745.890526][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1745.895624][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1745.900712][ C0] do_fast_syscall_32+0x7f/0x120 [ 1745.905625][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1745.910721][ C0] RIP: 0023:0xf7f91569 [ 1745.914758][ C0] Code: Bad RIP value. [ 1745.918797][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1745.927185][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1745.935143][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1745.943089][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1745.951042][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1745.958987][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1745.966954][ C0] syz-executor.1 S29912 18438 6979 0x20024000 [ 1745.973260][ C0] Call Trace: [ 1745.976525][ C0] __schedule+0x8e1/0x1eb0 [ 1745.980921][ C0] ? io_schedule_timeout+0x140/0x140 [ 1745.986182][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1745.991530][ C0] schedule+0xd0/0x2a0 [ 1745.995570][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1746.000674][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1746.005842][ C0] ? futex_wake+0x1b5/0x490 [ 1746.010329][ C0] ? find_held_lock+0x2d/0x110 [ 1746.015071][ C0] futex_wait+0x1df/0x560 [ 1746.019375][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1746.024373][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1746.029296][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1746.034468][ C0] ? futex_wake+0x155/0x490 [ 1746.038956][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1746.044910][ C0] do_futex+0x15b/0x1a60 [ 1746.049145][ C0] ? lock_acquire+0x1f1/0xad0 [ 1746.053823][ C0] ? __might_fault+0xef/0x1d0 [ 1746.058484][ C0] ? find_held_lock+0x2d/0x110 [ 1746.063222][ C0] ? futex_exit_release+0x220/0x220 [ 1746.068396][ C0] ? lock_downgrade+0x820/0x820 [ 1746.073220][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1746.079449][ C0] ? __might_fault+0x190/0x1d0 [ 1746.084188][ C0] ? _copy_to_user+0x126/0x160 [ 1746.088929][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1746.094364][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1746.099883][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1746.105752][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1746.110665][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1746.115752][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1746.120857][ C0] do_fast_syscall_32+0x7f/0x120 [ 1746.125768][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1746.130862][ C0] RIP: 0023:0xf7fa1569 [ 1746.135173][ C0] Code: Bad RIP value. [ 1746.139212][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1746.147594][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1746.155552][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1746.163771][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1746.171720][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1746.179672][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1746.187648][ C0] syz-executor.2 S29408 18498 7031 0x20020000 [ 1746.193972][ C0] Call Trace: [ 1746.197251][ C0] __schedule+0x8e1/0x1eb0 [ 1746.201653][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.206959][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1746.212438][ C0] schedule+0xd0/0x2a0 [ 1746.216483][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1746.221568][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1746.226736][ C0] ? futex_wake+0x1b5/0x490 [ 1746.231212][ C0] ? find_held_lock+0x2d/0x110 [ 1746.235950][ C0] futex_wait+0x1df/0x560 [ 1746.240257][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1746.245252][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1746.250163][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1746.255333][ C0] ? futex_wake+0x155/0x490 [ 1746.259819][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1746.265774][ C0] do_futex+0x15b/0x1a60 [ 1746.269995][ C0] ? lock_acquire+0x1f1/0xad0 [ 1746.274647][ C0] ? __might_fault+0xef/0x1d0 [ 1746.279311][ C0] ? find_held_lock+0x2d/0x110 [ 1746.284069][ C0] ? futex_exit_release+0x220/0x220 [ 1746.289260][ C0] ? lock_downgrade+0x820/0x820 [ 1746.294097][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1746.300380][ C0] ? __might_fault+0x190/0x1d0 [ 1746.305119][ C0] ? _copy_to_user+0x126/0x160 [ 1746.309862][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1746.315296][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1746.320815][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1746.326684][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1746.331598][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1746.336687][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1746.341794][ C0] do_fast_syscall_32+0x7f/0x120 [ 1746.346730][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1746.351824][ C0] RIP: 0023:0xf7f91569 [ 1746.355866][ C0] Code: Bad RIP value. [ 1746.359921][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1746.368423][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1746.376377][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1746.384331][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1746.392292][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1746.400326][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1746.408286][ C0] kworker/1:4 I25304 18753 2 0x00004000 [ 1746.414600][ C0] Workqueue: 0x0 (events) [ 1746.418987][ C0] Call Trace: [ 1746.422258][ C0] __schedule+0x8e1/0x1eb0 [ 1746.426653][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.431935][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.437124][ C0] schedule+0xd0/0x2a0 [ 1746.441184][ C0] worker_thread+0x14c/0x1120 [ 1746.445854][ C0] ? process_one_work+0x1670/0x1670 [ 1746.451048][ C0] kthread+0x3b5/0x4a0 [ 1746.455112][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.460195][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.465285][ C0] ret_from_fork+0x1f/0x30 [ 1746.469719][ C0] kworker/1:5 I28088 18754 2 0x00004000 [ 1746.476042][ C0] Workqueue: 0x0 (wg-crypt-wg1) [ 1746.480952][ C0] Call Trace: [ 1746.484224][ C0] __schedule+0x8e1/0x1eb0 [ 1746.488640][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.493924][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.499119][ C0] schedule+0xd0/0x2a0 [ 1746.503174][ C0] worker_thread+0x14c/0x1120 [ 1746.507899][ C0] ? process_one_work+0x1670/0x1670 [ 1746.513513][ C0] kthread+0x3b5/0x4a0 [ 1746.517557][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.522640][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.527728][ C0] ret_from_fork+0x1f/0x30 [ 1746.532127][ C0] kworker/1:6 I27440 18755 2 0x00004000 [ 1746.538488][ C0] Workqueue: 0x0 (events) [ 1746.542876][ C0] Call Trace: [ 1746.546139][ C0] __schedule+0x8e1/0x1eb0 [ 1746.550535][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.555794][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.560967][ C0] schedule+0xd0/0x2a0 [ 1746.565013][ C0] worker_thread+0x14c/0x1120 [ 1746.569671][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1746.574671][ C0] ? process_one_work+0x1670/0x1670 [ 1746.579842][ C0] kthread+0x3b5/0x4a0 [ 1746.583883][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.588966][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.594053][ C0] ret_from_fork+0x1f/0x30 [ 1746.598451][ C0] kworker/0:0 I27288 18958 2 0x00004000 [ 1746.604777][ C0] Workqueue: 0x0 (events) [ 1746.609163][ C0] Call Trace: [ 1746.612445][ C0] __schedule+0x8e1/0x1eb0 [ 1746.616852][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.622125][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.627404][ C0] schedule+0xd0/0x2a0 [ 1746.631449][ C0] worker_thread+0x14c/0x1120 [ 1746.636112][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1746.641112][ C0] ? process_one_work+0x1670/0x1670 [ 1746.646283][ C0] kthread+0x3b5/0x4a0 [ 1746.650327][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.655409][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.660499][ C0] ret_from_fork+0x1f/0x30 [ 1746.664897][ C0] kworker/0:1 I28088 18989 2 0x00004000 [ 1746.671208][ C0] Workqueue: 0x0 (events) [ 1746.675596][ C0] Call Trace: [ 1746.678859][ C0] __schedule+0x8e1/0x1eb0 [ 1746.683252][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.688511][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.693684][ C0] schedule+0xd0/0x2a0 [ 1746.697737][ C0] worker_thread+0x14c/0x1120 [ 1746.702395][ C0] ? process_one_work+0x1670/0x1670 [ 1746.707568][ C0] kthread+0x3b5/0x4a0 [ 1746.711608][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.716691][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.721778][ C0] ret_from_fork+0x1f/0x30 [ 1746.726185][ C0] kworker/0:2 I23288 18990 2 0x00004000 [ 1746.732495][ C0] Workqueue: 0x0 (wg-crypt-wg1) [ 1746.737402][ C0] Call Trace: [ 1746.740666][ C0] __schedule+0x8e1/0x1eb0 [ 1746.745079][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.750340][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.755513][ C0] schedule+0xd0/0x2a0 [ 1746.759557][ C0] worker_thread+0x14c/0x1120 [ 1746.764216][ C0] ? process_one_work+0x1670/0x1670 [ 1746.769387][ C0] kthread+0x3b5/0x4a0 [ 1746.773428][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.778531][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.783617][ C0] ret_from_fork+0x1f/0x30 [ 1746.788100][ C0] kworker/0:3 I23448 18991 2 0x00004000 [ 1746.794407][ C0] Workqueue: 0x0 (events_power_efficient) [ 1746.800196][ C0] Call Trace: [ 1746.803462][ C0] __schedule+0x8e1/0x1eb0 [ 1746.807867][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.813213][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.818398][ C0] schedule+0xd0/0x2a0 [ 1746.822444][ C0] worker_thread+0x14c/0x1120 [ 1746.827103][ C0] ? process_one_work+0x1670/0x1670 [ 1746.832287][ C0] kthread+0x3b5/0x4a0 [ 1746.836328][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.841423][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.846510][ C0] ret_from_fork+0x1f/0x30 [ 1746.850906][ C0] kworker/0:6 I28344 18993 2 0x00004000 [ 1746.857218][ C0] Workqueue: 0x0 (events_power_efficient) [ 1746.863188][ C0] Call Trace: [ 1746.866453][ C0] __schedule+0x8e1/0x1eb0 [ 1746.870850][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.876110][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.881284][ C0] schedule+0xd0/0x2a0 [ 1746.885329][ C0] worker_thread+0x14c/0x1120 [ 1746.889987][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1746.894985][ C0] ? process_one_work+0x1670/0x1670 [ 1746.900156][ C0] kthread+0x3b5/0x4a0 [ 1746.904211][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.909295][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.914381][ C0] ret_from_fork+0x1f/0x30 [ 1746.918783][ C0] kworker/1:7 I24928 19065 2 0x00004000 [ 1746.925092][ C0] Workqueue: 0x0 (events) [ 1746.929488][ C0] Call Trace: [ 1746.932750][ C0] __schedule+0x8e1/0x1eb0 [ 1746.937142][ C0] ? io_schedule_timeout+0x140/0x140 [ 1746.942400][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1746.947572][ C0] schedule+0xd0/0x2a0 [ 1746.951618][ C0] worker_thread+0x14c/0x1120 [ 1746.956274][ C0] ? process_one_work+0x1670/0x1670 [ 1746.961447][ C0] kthread+0x3b5/0x4a0 [ 1746.965487][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.970594][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1746.975680][ C0] ret_from_fork+0x1f/0x30 [ 1746.980073][ C0] kworker/1:8 I28936 19066 2 0x00004000 [ 1746.986383][ C0] Workqueue: 0x0 (events) [ 1746.990788][ C0] Call Trace: [ 1746.994064][ C0] __schedule+0x8e1/0x1eb0 [ 1746.998457][ C0] ? io_schedule_timeout+0x140/0x140 [ 1747.003717][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1747.008889][ C0] schedule+0xd0/0x2a0 [ 1747.012931][ C0] worker_thread+0x14c/0x1120 [ 1747.017595][ C0] ? process_one_work+0x1670/0x1670 [ 1747.022778][ C0] kthread+0x3b5/0x4a0 [ 1747.026820][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.031903][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.036994][ C0] ret_from_fork+0x1f/0x30 [ 1747.041387][ C0] kworker/1:9 I23680 19067 2 0x00004000 [ 1747.047704][ C0] Workqueue: 0x0 (wg-crypt-wg0) [ 1747.052611][ C0] Call Trace: [ 1747.055873][ C0] __schedule+0x8e1/0x1eb0 [ 1747.060267][ C0] ? io_schedule_timeout+0x140/0x140 [ 1747.065526][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1747.070709][ C0] schedule+0xd0/0x2a0 [ 1747.074757][ C0] worker_thread+0x14c/0x1120 [ 1747.079427][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1747.084424][ C0] ? process_one_work+0x1670/0x1670 [ 1747.089611][ C0] kthread+0x3b5/0x4a0 [ 1747.093654][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.098752][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.103849][ C0] ret_from_fork+0x1f/0x30 [ 1747.108257][ C0] kvm-nx-lpage-re S30224 19669 2 0x00004000 [ 1747.114561][ C0] Call Trace: [ 1747.117825][ C0] __schedule+0x8e1/0x1eb0 [ 1747.122220][ C0] ? io_schedule_timeout+0x140/0x140 [ 1747.127481][ C0] ? lock_acquire+0x1f1/0xad0 [ 1747.132145][ C0] schedule+0xd0/0x2a0 [ 1747.136190][ C0] schedule_timeout+0x1d8/0x250 [ 1747.141021][ C0] ? usleep_range+0x170/0x170 [ 1747.145693][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1747.150877][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1747.156850][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1747.162828][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1747.167926][ C0] ? _raw_spin_unlock_irq+0x55/0x80 [ 1747.173140][ C0] ? finish_task_switch+0x147/0x750 [ 1747.178314][ C0] ? finish_task_switch+0x119/0x750 [ 1747.183538][ C0] kvm_nx_lpage_recovery_worker+0x1ca/0x760 [ 1747.189410][ C0] ? __kthread_parkme+0xad/0x1e0 [ 1747.194335][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1747.199481][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1747.205269][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1747.210188][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1747.216149][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1747.221151][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1747.226239][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1747.231301][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 1747.236481][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1747.241562][ C0] ? kvm_exit+0x80/0x80 [ 1747.245692][ C0] kthread+0x3b5/0x4a0 [ 1747.249734][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.254817][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.259905][ C0] ret_from_fork+0x1f/0x30 [ 1747.264304][ C0] syz-executor.3 S29944 19676 7114 0x20020000 [ 1747.270612][ C0] Call Trace: [ 1747.273877][ C0] __schedule+0x8e1/0x1eb0 [ 1747.278272][ C0] ? io_schedule_timeout+0x140/0x140 [ 1747.283545][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1747.288981][ C0] schedule+0xd0/0x2a0 [ 1747.293026][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1747.298111][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1747.303294][ C0] futex_wait+0x1df/0x560 [ 1747.307617][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1747.312700][ C0] ? mark_lock+0xbc/0x1710 [ 1747.317090][ C0] ? hash_futex+0x12/0x200 [ 1747.321481][ C0] ? futex_wake+0x155/0x490 [ 1747.326081][ C0] ? do_wp_page+0x8e7/0x1950 [ 1747.330685][ C0] do_futex+0x15b/0x1a60 [ 1747.334915][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1747.340095][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1747.345079][ C0] ? do_wp_page+0x16a/0x1950 [ 1747.349668][ C0] ? futex_exit_release+0x220/0x220 [ 1747.354863][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1747.360212][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1747.365131][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1747.370134][ C0] ? find_held_lock+0x2d/0x110 [ 1747.374874][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1747.380048][ C0] ? __up_read+0x1a1/0x7b0 [ 1747.384441][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1747.389884][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1747.395405][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1747.400316][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1747.405228][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1747.410316][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1747.415398][ C0] do_fast_syscall_32+0x7f/0x120 [ 1747.420311][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1747.425583][ C0] RIP: 0023:0xf7f6d569 [ 1747.429621][ C0] Code: Bad RIP value. [ 1747.433664][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1747.442057][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1747.450002][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1747.457946][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1747.465891][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1747.473836][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1747.481796][ C0] kvm-nx-lpage-re S30224 19697 2 0x00004000 [ 1747.488449][ C0] Call Trace: [ 1747.491716][ C0] __schedule+0x8e1/0x1eb0 [ 1747.496107][ C0] ? io_schedule_timeout+0x140/0x140 [ 1747.501457][ C0] ? lock_acquire+0x1f1/0xad0 [ 1747.506111][ C0] schedule+0xd0/0x2a0 [ 1747.510171][ C0] schedule_timeout+0x1d8/0x250 [ 1747.514998][ C0] ? usleep_range+0x170/0x170 [ 1747.519650][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1747.524821][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1747.530774][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1747.536726][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1747.541809][ C0] ? _raw_spin_unlock_irq+0x55/0x80 [ 1747.546984][ C0] ? finish_task_switch+0x147/0x750 [ 1747.552153][ C0] ? finish_task_switch+0x119/0x750 [ 1747.557329][ C0] kvm_nx_lpage_recovery_worker+0x1ca/0x760 [ 1747.563284][ C0] ? __kthread_parkme+0xad/0x1e0 [ 1747.568208][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1747.573303][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1747.579081][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1747.583998][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1747.589950][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1747.594949][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1747.600035][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1747.605034][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 1747.610227][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1747.615407][ C0] ? kvm_exit+0x80/0x80 [ 1747.619549][ C0] kthread+0x3b5/0x4a0 [ 1747.623591][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.628759][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.633868][ C0] ret_from_fork+0x1f/0x30 [ 1747.638276][ C0] syz-executor.3 S29944 19701 7114 0x20020000 [ 1747.644592][ C0] Call Trace: [ 1747.647868][ C0] __schedule+0x8e1/0x1eb0 [ 1747.652264][ C0] ? io_schedule_timeout+0x140/0x140 [ 1747.657581][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1747.663019][ C0] schedule+0xd0/0x2a0 [ 1747.667110][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1747.672231][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1747.677503][ C0] futex_wait+0x1df/0x560 [ 1747.681849][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1747.686852][ C0] ? mark_lock+0xbc/0x1710 [ 1747.691242][ C0] ? hash_futex+0x12/0x200 [ 1747.695755][ C0] ? futex_wake+0x155/0x490 [ 1747.700253][ C0] ? do_wp_page+0x8e7/0x1950 [ 1747.704845][ C0] do_futex+0x15b/0x1a60 [ 1747.709072][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1747.714250][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1747.719110][ C0] ? do_wp_page+0x16a/0x1950 [ 1747.723672][ C0] ? futex_exit_release+0x220/0x220 [ 1747.728863][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1747.734206][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1747.739120][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1747.744118][ C0] ? find_held_lock+0x2d/0x110 [ 1747.748884][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1747.754061][ C0] ? __up_read+0x1a1/0x7b0 [ 1747.758461][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1747.763901][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1747.769428][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1747.774343][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1747.779257][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1747.784345][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1747.789431][ C0] do_fast_syscall_32+0x7f/0x120 [ 1747.794345][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1747.799474][ C0] RIP: 0023:0xf7f6d569 [ 1747.803512][ C0] Code: Bad RIP value. [ 1747.807552][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1747.815978][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1747.823965][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1747.832023][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1747.839980][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1747.847934][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1747.855900][ C0] kvm-nx-lpage-re S30224 19714 2 0x00004000 [ 1747.862214][ C0] Call Trace: [ 1747.865486][ C0] __schedule+0x8e1/0x1eb0 [ 1747.869885][ C0] ? io_schedule_timeout+0x140/0x140 [ 1747.875147][ C0] schedule+0xd0/0x2a0 [ 1747.879191][ C0] schedule_timeout+0x1d8/0x250 [ 1747.884018][ C0] ? usleep_range+0x170/0x170 [ 1747.888689][ C0] ? __schedule+0x887/0x1eb0 [ 1747.893273][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1747.899233][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1747.904238][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1747.909329][ C0] kvm_nx_lpage_recovery_worker+0x1ca/0x760 [ 1747.915199][ C0] ? __kthread_parkme+0xad/0x1e0 [ 1747.920112][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1747.925211][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1747.930992][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1747.935905][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1747.941864][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1747.946864][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1747.951959][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1747.956963][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 1747.962157][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1747.967241][ C0] ? kvm_exit+0x80/0x80 [ 1747.971370][ C0] kthread+0x3b5/0x4a0 [ 1747.975412][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.980495][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1747.985603][ C0] ret_from_fork+0x1f/0x30 [ 1747.990001][ C0] syz-executor.3 S29944 19717 7114 0x20020000 [ 1747.996308][ C0] Call Trace: [ 1747.999579][ C0] __schedule+0x8e1/0x1eb0 [ 1748.003973][ C0] ? io_schedule_timeout+0x140/0x140 [ 1748.009231][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1748.014669][ C0] schedule+0xd0/0x2a0 [ 1748.018715][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1748.023800][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1748.028969][ C0] ? futex_wake+0x1b5/0x490 [ 1748.033445][ C0] ? find_held_lock+0x2d/0x110 [ 1748.038183][ C0] futex_wait+0x1df/0x560 [ 1748.042489][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1748.047489][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1748.052405][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1748.057577][ C0] ? futex_wake+0x155/0x490 [ 1748.062061][ C0] ? do_wp_page+0x8e7/0x1950 [ 1748.066629][ C0] do_futex+0x15b/0x1a60 [ 1748.070848][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1748.076017][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1748.080838][ C0] ? do_wp_page+0x16a/0x1950 [ 1748.085403][ C0] ? futex_exit_release+0x220/0x220 [ 1748.090578][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1748.095925][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1748.100845][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1748.105844][ C0] ? find_held_lock+0x2d/0x110 [ 1748.110584][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1748.115755][ C0] ? __up_read+0x1a1/0x7b0 [ 1748.120157][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1748.125855][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1748.131390][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1748.136362][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1748.141282][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1748.146381][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1748.151734][ C0] do_fast_syscall_32+0x7f/0x120 [ 1748.156667][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1748.161756][ C0] RIP: 0023:0xf7f6d569 [ 1748.165794][ C0] Code: Bad RIP value. [ 1748.169837][ C0] RSP: 002b:00000000f5d4712c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1748.178224][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1748.186180][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1748.194124][ C0] RBP: 00000000f5d47228 R08: 0000000000000000 R09: 0000000000000000 [ 1748.202071][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1748.210036][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.217995][ C0] kvm-nx-lpage-re S30224 19768 2 0x00004000 [ 1748.224303][ C0] Call Trace: [ 1748.227570][ C0] __schedule+0x8e1/0x1eb0 [ 1748.231980][ C0] ? io_schedule_timeout+0x140/0x140 [ 1748.237244][ C0] schedule+0xd0/0x2a0 [ 1748.241293][ C0] schedule_timeout+0x1d8/0x250 [ 1748.246119][ C0] ? usleep_range+0x170/0x170 [ 1748.250779][ C0] ? __schedule+0x887/0x1eb0 [ 1748.255357][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1748.261322][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1748.266321][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1748.271412][ C0] kvm_nx_lpage_recovery_worker+0x1ca/0x760 [ 1748.277281][ C0] ? __kthread_parkme+0xad/0x1e0 [ 1748.282194][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1748.287282][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1748.293059][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1748.297982][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1748.303959][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1748.309019][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1748.314159][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1748.319164][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 1748.324359][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1748.329445][ C0] ? kvm_exit+0x80/0x80 [ 1748.333590][ C0] kthread+0x3b5/0x4a0 [ 1748.337633][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1748.342728][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1748.347833][ C0] ret_from_fork+0x1f/0x30 [ 1748.352232][ C0] syz-executor.3 S29944 19770 7114 0x20020000 [ 1748.358539][ C0] Call Trace: [ 1748.361805][ C0] __schedule+0x8e1/0x1eb0 [ 1748.366212][ C0] ? io_schedule_timeout+0x140/0x140 [ 1748.371488][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1748.376949][ C0] schedule+0xd0/0x2a0 [ 1748.380999][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1748.386086][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1748.391266][ C0] futex_wait+0x1df/0x560 [ 1748.395576][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1748.400593][ C0] ? mark_lock+0xbc/0x1710 [ 1748.404989][ C0] ? mark_lock+0xbc/0x1710 [ 1748.409382][ C0] ? hash_futex+0x12/0x200 [ 1748.413776][ C0] ? futex_wake+0x155/0x490 [ 1748.418262][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1748.424219][ C0] do_futex+0x15b/0x1a60 [ 1748.428442][ C0] ? lock_acquire+0x1f1/0xad0 [ 1748.433094][ C0] ? __might_fault+0xef/0x1d0 [ 1748.437743][ C0] ? find_held_lock+0x2d/0x110 [ 1748.442485][ C0] ? futex_exit_release+0x220/0x220 [ 1748.447657][ C0] ? lock_downgrade+0x820/0x820 [ 1748.452481][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1748.459132][ C0] ? __might_fault+0x190/0x1d0 [ 1748.463870][ C0] ? _copy_to_user+0x126/0x160 [ 1748.468613][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1748.474049][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1748.479585][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1748.485453][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1748.490378][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1748.495466][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1748.500551][ C0] do_fast_syscall_32+0x7f/0x120 [ 1748.505463][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1748.510560][ C0] RIP: 0023:0xf7f6d569 [ 1748.514596][ C0] Code: Bad RIP value. [ 1748.518634][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1748.527015][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1748.534958][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1748.542903][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1748.550963][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1748.558921][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.567487][ C0] kvm-nx-lpage-re S30224 19806 2 0x00004000 [ 1748.573796][ C0] Call Trace: [ 1748.577061][ C0] __schedule+0x8e1/0x1eb0 [ 1748.581454][ C0] ? io_schedule_timeout+0x140/0x140 [ 1748.586717][ C0] schedule+0xd0/0x2a0 [ 1748.590762][ C0] schedule_timeout+0x1d8/0x250 [ 1748.595584][ C0] ? usleep_range+0x170/0x170 [ 1748.600234][ C0] ? __schedule+0x887/0x1eb0 [ 1748.604799][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1748.610752][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1748.615752][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1748.620839][ C0] kvm_nx_lpage_recovery_worker+0x1ca/0x760 [ 1748.626708][ C0] ? __kthread_parkme+0xad/0x1e0 [ 1748.631621][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1748.636707][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1748.642504][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1748.647416][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1748.653367][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1748.658366][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1748.663465][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1748.668478][ C0] kvm_vm_worker_thread+0x1b3/0x270 [ 1748.673649][ C0] ? kvm_mmu_pte_write+0xd40/0xd40 [ 1748.678732][ C0] ? kvm_exit+0x80/0x80 [ 1748.682880][ C0] kthread+0x3b5/0x4a0 [ 1748.686943][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1748.692024][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1748.697121][ C0] ret_from_fork+0x1f/0x30 [ 1748.701518][ C0] syz-executor.3 S29944 19809 7114 0x20020000 [ 1748.708007][ C0] Call Trace: [ 1748.711270][ C0] __schedule+0x8e1/0x1eb0 [ 1748.715661][ C0] ? io_schedule_timeout+0x140/0x140 [ 1748.720923][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1748.726372][ C0] schedule+0xd0/0x2a0 [ 1748.730428][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1748.735513][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1748.740687][ C0] futex_wait+0x1df/0x560 [ 1748.744992][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1748.749989][ C0] ? mark_lock+0xbc/0x1710 [ 1748.754379][ C0] ? mark_lock+0xbc/0x1710 [ 1748.758768][ C0] ? hash_futex+0x12/0x200 [ 1748.763158][ C0] ? futex_wake+0x155/0x490 [ 1748.767645][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1748.773606][ C0] do_futex+0x15b/0x1a60 [ 1748.777841][ C0] ? lock_acquire+0x1f1/0xad0 [ 1748.782497][ C0] ? __might_fault+0xef/0x1d0 [ 1748.787147][ C0] ? find_held_lock+0x2d/0x110 [ 1748.791886][ C0] ? futex_exit_release+0x220/0x220 [ 1748.797058][ C0] ? lock_downgrade+0x820/0x820 [ 1748.801883][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1748.808100][ C0] ? __might_fault+0x190/0x1d0 [ 1748.812838][ C0] ? _copy_to_user+0x126/0x160 [ 1748.817589][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1748.823033][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1748.828553][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1748.834420][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1748.839331][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1748.844420][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1748.849515][ C0] do_fast_syscall_32+0x7f/0x120 [ 1748.854429][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1748.859525][ C0] RIP: 0023:0xf7f6d569 [ 1748.863561][ C0] Code: Bad RIP value. [ 1748.867598][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1748.875982][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1748.883926][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1748.891873][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1748.899825][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1748.907772][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.915727][ C0] syz-executor.1 S28696 20209 6979 0x20020000 [ 1748.922032][ C0] Call Trace: [ 1748.925300][ C0] __schedule+0x8e1/0x1eb0 [ 1748.929695][ C0] ? io_schedule_timeout+0x140/0x140 [ 1748.934964][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1748.940412][ C0] schedule+0xd0/0x2a0 [ 1748.944457][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1748.949543][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1748.954717][ C0] futex_wait+0x1df/0x560 [ 1748.959023][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1748.964023][ C0] ? mark_lock+0xbc/0x1710 [ 1748.968412][ C0] ? hash_futex+0x12/0x200 [ 1748.972803][ C0] ? futex_wake+0x155/0x490 [ 1748.977287][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1748.983254][ C0] do_futex+0x15b/0x1a60 [ 1748.987479][ C0] ? lock_acquire+0x1f1/0xad0 [ 1748.992132][ C0] ? __might_fault+0xef/0x1d0 [ 1748.996799][ C0] ? find_held_lock+0x2d/0x110 [ 1749.001538][ C0] ? futex_exit_release+0x220/0x220 [ 1749.006714][ C0] ? lock_downgrade+0x820/0x820 [ 1749.011554][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1749.017772][ C0] ? __might_fault+0x190/0x1d0 [ 1749.022510][ C0] ? _copy_to_user+0x126/0x160 [ 1749.027254][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1749.032690][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1749.038210][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1749.044090][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1749.049002][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1749.054091][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1749.059178][ C0] do_fast_syscall_32+0x7f/0x120 [ 1749.064107][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1749.069191][ C0] RIP: 0023:0xf7fa1569 [ 1749.073226][ C0] Code: Bad RIP value. [ 1749.077263][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1749.085657][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1749.093602][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1749.101548][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1749.109503][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1749.117447][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.125405][ C0] syz-executor.4 S28712 20211 7392 0x20020000 [ 1749.131720][ C0] Call Trace: [ 1749.135006][ C0] __schedule+0x8e1/0x1eb0 [ 1749.139430][ C0] ? io_schedule_timeout+0x140/0x140 [ 1749.144748][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1749.150190][ C0] schedule+0xd0/0x2a0 [ 1749.154237][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1749.159322][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1749.164493][ C0] ? futex_wake+0x1b5/0x490 [ 1749.168970][ C0] ? find_held_lock+0x2d/0x110 [ 1749.173710][ C0] futex_wait+0x1df/0x560 [ 1749.178019][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1749.183017][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1749.187933][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1749.193128][ C0] ? futex_wake+0x155/0x490 [ 1749.197626][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1749.203589][ C0] do_futex+0x15b/0x1a60 [ 1749.207815][ C0] ? lock_acquire+0x1f1/0xad0 [ 1749.212472][ C0] ? __might_fault+0xef/0x1d0 [ 1749.217147][ C0] ? find_held_lock+0x2d/0x110 [ 1749.221888][ C0] ? futex_exit_release+0x220/0x220 [ 1749.227408][ C0] ? lock_downgrade+0x820/0x820 [ 1749.232233][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1749.238464][ C0] ? __might_fault+0x190/0x1d0 [ 1749.243203][ C0] ? _copy_to_user+0x126/0x160 [ 1749.247945][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1749.253380][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1749.258897][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1749.264768][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1749.269679][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1749.274768][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1749.279854][ C0] do_fast_syscall_32+0x7f/0x120 [ 1749.284779][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1749.289874][ C0] RIP: 0023:0xf7fd7569 [ 1749.293910][ C0] Code: Bad RIP value. [ 1749.298432][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1749.306817][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1749.314762][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1749.322735][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1749.330684][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1749.338650][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.346624][ C0] syz-executor.4 S29944 20245 7392 0x20020000 [ 1749.352944][ C0] Call Trace: [ 1749.356217][ C0] __schedule+0x8e1/0x1eb0 [ 1749.360619][ C0] ? io_schedule_timeout+0x140/0x140 [ 1749.365893][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1749.371330][ C0] schedule+0xd0/0x2a0 [ 1749.375378][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1749.380475][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1749.385654][ C0] futex_wait+0x1df/0x560 [ 1749.389961][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1749.395055][ C0] ? wake_up_q+0xa3/0x100 [ 1749.399360][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1749.404533][ C0] ? futex_wake+0x155/0x490 [ 1749.409019][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1749.414974][ C0] do_futex+0x15b/0x1a60 [ 1749.419197][ C0] ? lock_acquire+0x1f1/0xad0 [ 1749.423865][ C0] ? __might_fault+0xef/0x1d0 [ 1749.428516][ C0] ? find_held_lock+0x2d/0x110 [ 1749.433258][ C0] ? futex_exit_release+0x220/0x220 [ 1749.438443][ C0] ? lock_downgrade+0x820/0x820 [ 1749.443270][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1749.449490][ C0] ? __might_fault+0x190/0x1d0 [ 1749.454228][ C0] ? _copy_to_user+0x126/0x160 [ 1749.458986][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1749.464427][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1749.469962][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1749.475831][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1749.480745][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1749.485835][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1749.490920][ C0] do_fast_syscall_32+0x7f/0x120 [ 1749.495835][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1749.500938][ C0] RIP: 0023:0xf7fd7569 [ 1749.506801][ C0] Code: Bad RIP value. [ 1749.510839][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1749.519221][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1749.527165][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1749.535122][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1749.543079][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1749.551023][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.558980][ C0] syz-executor.1 S29944 20248 6979 0x20020000 [ 1749.565289][ C0] Call Trace: [ 1749.568560][ C0] __schedule+0x8e1/0x1eb0 [ 1749.572970][ C0] ? io_schedule_timeout+0x140/0x140 [ 1749.578673][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1749.584108][ C0] schedule+0xd0/0x2a0 [ 1749.588153][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1749.593237][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1749.598411][ C0] futex_wait+0x1df/0x560 [ 1749.602716][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1749.607804][ C0] ? wake_up_q+0xa3/0x100 [ 1749.612107][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1749.617280][ C0] ? futex_wake+0x155/0x490 [ 1749.621766][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1749.627728][ C0] do_futex+0x15b/0x1a60 [ 1749.631948][ C0] ? lock_acquire+0x1f1/0xad0 [ 1749.636624][ C0] ? __might_fault+0xef/0x1d0 [ 1749.641277][ C0] ? find_held_lock+0x2d/0x110 [ 1749.646014][ C0] ? futex_exit_release+0x220/0x220 [ 1749.651188][ C0] ? lock_downgrade+0x820/0x820 [ 1749.656029][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1749.662246][ C0] ? __might_fault+0x190/0x1d0 [ 1749.666987][ C0] ? _copy_to_user+0x126/0x160 [ 1749.671727][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1749.677176][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1749.682694][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1749.688575][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1749.693487][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1749.698590][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1749.703674][ C0] do_fast_syscall_32+0x7f/0x120 [ 1749.708586][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1749.713670][ C0] RIP: 0023:0xf7fa1569 [ 1749.717706][ C0] Code: Bad RIP value. [ 1749.721743][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1749.730132][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1749.738249][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1749.746196][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1749.754139][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1749.762097][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.770051][ C0] syz-executor.4 S29248 21779 7392 0x20020000 [ 1749.776357][ C0] Call Trace: [ 1749.779625][ C0] __schedule+0x8e1/0x1eb0 [ 1749.784021][ C0] ? io_schedule_timeout+0x140/0x140 [ 1749.789305][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1749.794742][ C0] schedule+0xd0/0x2a0 [ 1749.798785][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1749.803869][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1749.809042][ C0] futex_wait+0x1df/0x560 [ 1749.813346][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1749.818343][ C0] ? mark_lock+0xbc/0x1710 [ 1749.822732][ C0] ? mark_lock+0xbc/0x1710 [ 1749.827122][ C0] ? hash_futex+0x12/0x200 [ 1749.831515][ C0] ? futex_wake+0x155/0x490 [ 1749.836008][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1749.841962][ C0] do_futex+0x15b/0x1a60 [ 1749.846207][ C0] ? lock_acquire+0x1f1/0xad0 [ 1749.850881][ C0] ? __might_fault+0xef/0x1d0 [ 1749.855532][ C0] ? find_held_lock+0x2d/0x110 [ 1749.860273][ C0] ? futex_exit_release+0x220/0x220 [ 1749.865462][ C0] ? lock_downgrade+0x820/0x820 [ 1749.870289][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1749.876509][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1749.881690][ C0] ? sched_clock+0x2a/0x40 [ 1749.886082][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1749.890903][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1749.895750][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1749.901196][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1749.906280][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1749.911803][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1749.916739][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1749.921916][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1749.927003][ C0] do_fast_syscall_32+0x7f/0x120 [ 1749.931913][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1749.936997][ C0] RIP: 0023:0xf7fd7569 [ 1749.941033][ C0] Code: Bad RIP value. [ 1749.945069][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1749.953467][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1749.961411][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1749.969357][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1749.977303][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1749.985248][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.993202][ C0] syz-executor.3 S29944 22206 7114 0x20020000 [ 1749.999509][ C0] Call Trace: [ 1750.002776][ C0] __schedule+0x8e1/0x1eb0 [ 1750.007172][ C0] ? io_schedule_timeout+0x140/0x140 [ 1750.012432][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1750.017869][ C0] schedule+0xd0/0x2a0 [ 1750.021916][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1750.027000][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1750.032173][ C0] futex_wait+0x1df/0x560 [ 1750.036476][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1750.041476][ C0] ? wake_up_q+0xa3/0x100 [ 1750.045779][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1750.050950][ C0] ? futex_wake+0x155/0x490 [ 1750.055433][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1750.061385][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1750.066392][ C0] do_futex+0x15b/0x1a60 [ 1750.070628][ C0] ? lock_acquire+0x270/0xad0 [ 1750.075292][ C0] ? find_held_lock+0x2d/0x110 [ 1750.080045][ C0] ? futex_exit_release+0x220/0x220 [ 1750.085351][ C0] ? lock_downgrade+0x820/0x820 [ 1750.090202][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1750.096431][ C0] ? __might_fault+0x190/0x1d0 [ 1750.101190][ C0] ? _copy_to_user+0x126/0x160 [ 1750.105942][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1750.111383][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1750.116907][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1750.122776][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1750.128125][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1750.133214][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1750.138303][ C0] do_fast_syscall_32+0x7f/0x120 [ 1750.143216][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1750.148301][ C0] RIP: 0023:0xf7f6d569 [ 1750.152349][ C0] Code: Bad RIP value. [ 1750.156383][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1750.164765][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1750.172730][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1750.180681][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1750.188627][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1750.196577][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.204557][ C0] syz-executor.3 S29944 22220 7114 0x20020000 [ 1750.210871][ C0] Call Trace: [ 1750.214142][ C0] __schedule+0x8e1/0x1eb0 [ 1750.218541][ C0] ? io_schedule_timeout+0x140/0x140 [ 1750.223806][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1750.229248][ C0] schedule+0xd0/0x2a0 [ 1750.233315][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1750.238412][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1750.243594][ C0] futex_wait+0x1df/0x560 [ 1750.247901][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1750.252925][ C0] ? wake_up_q+0xa3/0x100 [ 1750.257231][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1750.262405][ C0] ? futex_wake+0x155/0x490 [ 1750.266891][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1750.272846][ C0] do_futex+0x15b/0x1a60 [ 1750.277066][ C0] ? lock_acquire+0x1f1/0xad0 [ 1750.281732][ C0] ? __might_fault+0xef/0x1d0 [ 1750.286381][ C0] ? find_held_lock+0x2d/0x110 [ 1750.291122][ C0] ? futex_exit_release+0x220/0x220 [ 1750.296297][ C0] ? lock_downgrade+0x820/0x820 [ 1750.301122][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1750.307400][ C0] ? __might_fault+0x190/0x1d0 [ 1750.312154][ C0] ? _copy_to_user+0x126/0x160 [ 1750.316918][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1750.322413][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1750.327338][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1750.332883][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1750.337802][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1750.342896][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1750.347988][ C0] do_fast_syscall_32+0x7f/0x120 [ 1750.352902][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1750.357986][ C0] RIP: 0023:0xf7f6d569 [ 1750.362026][ C0] Code: Bad RIP value. [ 1750.366065][ C0] RSP: 002b:00000000f5d6812c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1750.374447][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1750.382394][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1750.390339][ C0] RBP: 00000000f5d68228 R08: 0000000000000000 R09: 0000000000000000 [ 1750.398284][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1750.406254][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.414216][ C0] kworker/u5:2 I31072 22373 2 0x00004000 [ 1750.420524][ C0] Call Trace: [ 1750.423795][ C0] __schedule+0x8e1/0x1eb0 [ 1750.428190][ C0] ? io_schedule_timeout+0x140/0x140 [ 1750.433452][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1750.438465][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1750.443645][ C0] schedule+0xd0/0x2a0 [ 1750.448215][ C0] worker_thread+0x14c/0x1120 [ 1750.452869][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1750.458645][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1750.463566][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1750.469522][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1750.474520][ C0] ? process_one_work+0x1670/0x1670 [ 1750.479712][ C0] kthread+0x3b5/0x4a0 [ 1750.483754][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1750.488853][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1750.493939][ C0] ret_from_fork+0x1f/0x30 [ 1750.498337][ C0] syz-executor.1 S29944 22771 6979 0x20020000 [ 1750.504644][ C0] Call Trace: [ 1750.507908][ C0] __schedule+0x8e1/0x1eb0 [ 1750.512304][ C0] ? io_schedule_timeout+0x140/0x140 [ 1750.517581][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1750.523019][ C0] schedule+0xd0/0x2a0 [ 1750.527078][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1750.532164][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1750.537334][ C0] ? futex_wake+0x1b5/0x490 [ 1750.541811][ C0] ? find_held_lock+0x2d/0x110 [ 1750.546553][ C0] futex_wait+0x1df/0x560 [ 1750.550859][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1750.555856][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1750.560767][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1750.565963][ C0] ? futex_wake+0x155/0x490 [ 1750.570450][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1750.576405][ C0] do_futex+0x15b/0x1a60 [ 1750.580625][ C0] ? lock_acquire+0x1f1/0xad0 [ 1750.585288][ C0] ? __might_fault+0xef/0x1d0 [ 1750.589937][ C0] ? find_held_lock+0x2d/0x110 [ 1750.594694][ C0] ? futex_exit_release+0x220/0x220 [ 1750.599867][ C0] ? lock_downgrade+0x820/0x820 [ 1750.604692][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1750.610909][ C0] ? __might_fault+0x190/0x1d0 [ 1750.615646][ C0] ? _copy_to_user+0x126/0x160 [ 1750.620386][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1750.625834][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1750.631354][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1750.637223][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1750.642150][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1750.647240][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1750.652328][ C0] do_fast_syscall_32+0x7f/0x120 [ 1750.657252][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1750.662335][ C0] RIP: 0023:0xf7fa1569 [ 1750.666387][ C0] Code: Bad RIP value. [ 1750.670425][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1750.679256][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1750.687199][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1750.695156][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1750.703105][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1750.711051][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.719021][ C0] syz-executor.1 S29096 22799 6979 0x20020000 [ 1750.725329][ C0] Call Trace: [ 1750.728597][ C0] __schedule+0x8e1/0x1eb0 [ 1750.732993][ C0] ? io_schedule_timeout+0x140/0x140 [ 1750.738254][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1750.743692][ C0] schedule+0xd0/0x2a0 [ 1750.747737][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1750.752821][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1750.757989][ C0] ? futex_wake+0x1b5/0x490 [ 1750.762464][ C0] ? find_held_lock+0x2d/0x110 [ 1750.767204][ C0] futex_wait+0x1df/0x560 [ 1750.771510][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1750.776506][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1750.781419][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1750.786855][ C0] ? futex_wake+0x155/0x490 [ 1750.791341][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1750.797311][ C0] do_futex+0x15b/0x1a60 [ 1750.801531][ C0] ? lock_acquire+0x1f1/0xad0 [ 1750.806183][ C0] ? __might_fault+0xef/0x1d0 [ 1750.810835][ C0] ? find_held_lock+0x2d/0x110 [ 1750.815571][ C0] ? futex_exit_release+0x220/0x220 [ 1750.820744][ C0] ? lock_downgrade+0x820/0x820 [ 1750.825574][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1750.831791][ C0] ? __might_fault+0x190/0x1d0 [ 1750.836530][ C0] ? _copy_to_user+0x126/0x160 [ 1750.841270][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1750.846720][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1750.852240][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1750.858110][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1750.863020][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1750.868110][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1750.873206][ C0] do_fast_syscall_32+0x7f/0x120 [ 1750.878120][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1750.883203][ C0] RIP: 0023:0xf7fa1569 [ 1750.887237][ C0] Code: Bad RIP value. [ 1750.891275][ C0] RSP: 002b:00000000f5d5a12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1750.899660][ C0] RAX: ffffffffffffffda RBX: 000000000819b040 RCX: 0000000000000080 [ 1750.907604][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819b044 [ 1750.915548][ C0] RBP: 00000000f5d5a228 R08: 0000000000000000 R09: 0000000000000000 [ 1750.923492][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1750.931436][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.939393][ C0] syz-executor.1 S29944 22828 6979 0x20020000 [ 1750.945699][ C0] Call Trace: [ 1750.948978][ C0] __schedule+0x8e1/0x1eb0 [ 1750.953372][ C0] ? io_schedule_timeout+0x140/0x140 [ 1750.958631][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1750.964066][ C0] schedule+0xd0/0x2a0 [ 1750.968110][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1750.973211][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1750.978385][ C0] futex_wait+0x1df/0x560 [ 1750.982690][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1750.987688][ C0] ? mark_lock+0xbc/0x1710 [ 1750.992077][ C0] ? mark_lock+0xbc/0x1710 [ 1750.996467][ C0] ? hash_futex+0x12/0x200 [ 1751.000856][ C0] ? futex_wake+0x155/0x490 [ 1751.005343][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1751.011296][ C0] do_futex+0x15b/0x1a60 [ 1751.015515][ C0] ? lock_acquire+0x1f1/0xad0 [ 1751.020164][ C0] ? __might_fault+0xef/0x1d0 [ 1751.024813][ C0] ? find_held_lock+0x2d/0x110 [ 1751.029550][ C0] ? futex_exit_release+0x220/0x220 [ 1751.034722][ C0] ? lock_downgrade+0x820/0x820 [ 1751.039545][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1751.045765][ C0] ? __might_fault+0x190/0x1d0 [ 1751.050503][ C0] ? _copy_to_user+0x126/0x160 [ 1751.055243][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1751.060679][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1751.066198][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1751.072066][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1751.076977][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1751.082065][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1751.087156][ C0] do_fast_syscall_32+0x7f/0x120 [ 1751.092067][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1751.097164][ C0] RIP: 0023:0xf7fa1569 [ 1751.101210][ C0] Code: Bad RIP value. [ 1751.105255][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1751.113637][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1751.121580][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1751.129524][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1751.137503][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.145467][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.153436][ C0] syz-executor.1 S29944 22856 6979 0x20020000 [ 1751.159752][ C0] Call Trace: [ 1751.163033][ C0] __schedule+0x8e1/0x1eb0 [ 1751.167430][ C0] ? io_schedule_timeout+0x140/0x140 [ 1751.173050][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1751.178485][ C0] schedule+0xd0/0x2a0 [ 1751.182530][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1751.187614][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1751.192801][ C0] ? futex_wake+0x1b5/0x490 [ 1751.197341][ C0] ? find_held_lock+0x2d/0x110 [ 1751.202087][ C0] futex_wait+0x1df/0x560 [ 1751.206420][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1751.211429][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1751.216348][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1751.221525][ C0] ? futex_wake+0x155/0x490 [ 1751.226188][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1751.232142][ C0] do_futex+0x15b/0x1a60 [ 1751.236362][ C0] ? lock_acquire+0x1f1/0xad0 [ 1751.241011][ C0] ? __might_fault+0xef/0x1d0 [ 1751.245661][ C0] ? find_held_lock+0x2d/0x110 [ 1751.250447][ C0] ? futex_exit_release+0x220/0x220 [ 1751.255620][ C0] ? lock_downgrade+0x820/0x820 [ 1751.260483][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1751.266962][ C0] ? __might_fault+0x190/0x1d0 [ 1751.271743][ C0] ? _copy_to_user+0x126/0x160 [ 1751.276502][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1751.281960][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1751.287479][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1751.293349][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1751.298285][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1751.303374][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1751.308474][ C0] do_fast_syscall_32+0x7f/0x120 [ 1751.313387][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1751.318483][ C0] RIP: 0023:0xf7fa1569 [ 1751.322527][ C0] Code: Bad RIP value. [ 1751.326581][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1751.334979][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1751.342950][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1751.350942][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1751.358896][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.366850][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.374816][ C0] syz-executor.1 S29944 22878 6979 0x20020000 [ 1751.381137][ C0] Call Trace: [ 1751.384496][ C0] __schedule+0x8e1/0x1eb0 [ 1751.388896][ C0] ? io_schedule_timeout+0x140/0x140 [ 1751.394164][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1751.399600][ C0] schedule+0xd0/0x2a0 [ 1751.403646][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1751.408731][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1751.413912][ C0] ? futex_wake+0x1b5/0x490 [ 1751.418389][ C0] ? find_held_lock+0x2d/0x110 [ 1751.423146][ C0] futex_wait+0x1df/0x560 [ 1751.427452][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1751.432451][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1751.437366][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1751.442542][ C0] ? futex_wake+0x155/0x490 [ 1751.447028][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1751.452984][ C0] do_futex+0x15b/0x1a60 [ 1751.457209][ C0] ? lock_acquire+0x1f1/0xad0 [ 1751.461858][ C0] ? __might_fault+0xef/0x1d0 [ 1751.466506][ C0] ? find_held_lock+0x2d/0x110 [ 1751.471277][ C0] ? futex_exit_release+0x220/0x220 [ 1751.476451][ C0] ? lock_downgrade+0x820/0x820 [ 1751.481279][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1751.487509][ C0] ? __might_fault+0x190/0x1d0 [ 1751.492255][ C0] ? _copy_to_user+0x126/0x160 [ 1751.496997][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1751.502434][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1751.507953][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1751.513830][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1751.518740][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1751.523828][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1751.528912][ C0] do_fast_syscall_32+0x7f/0x120 [ 1751.533823][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1751.538908][ C0] RIP: 0023:0xf7fa1569 [ 1751.542944][ C0] Code: Bad RIP value. [ 1751.546980][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1751.555361][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1751.563305][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1751.571523][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1751.579469][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.587415][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.595370][ C0] syz-executor.4 S29944 23457 7392 0x20020000 [ 1751.601691][ C0] Call Trace: [ 1751.604956][ C0] __schedule+0x8e1/0x1eb0 [ 1751.609351][ C0] ? io_schedule_timeout+0x140/0x140 [ 1751.614609][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1751.620045][ C0] schedule+0xd0/0x2a0 [ 1751.624100][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1751.629185][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1751.634353][ C0] ? futex_wake+0x1b5/0x490 [ 1751.638841][ C0] ? find_held_lock+0x2d/0x110 [ 1751.643580][ C0] futex_wait+0x1df/0x560 [ 1751.647884][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1751.652880][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1751.657792][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1751.662961][ C0] ? futex_wake+0x155/0x490 [ 1751.667448][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1751.673405][ C0] do_futex+0x15b/0x1a60 [ 1751.677628][ C0] ? lock_acquire+0x1f1/0xad0 [ 1751.682278][ C0] ? __might_fault+0xef/0x1d0 [ 1751.686928][ C0] ? find_held_lock+0x2d/0x110 [ 1751.691678][ C0] ? futex_exit_release+0x220/0x220 [ 1751.696851][ C0] ? lock_downgrade+0x820/0x820 [ 1751.701687][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1751.707917][ C0] ? __might_fault+0x190/0x1d0 [ 1751.712653][ C0] ? _copy_to_user+0x126/0x160 [ 1751.717394][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1751.722828][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1751.728799][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1751.734676][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1751.739593][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1751.744682][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1751.749780][ C0] do_fast_syscall_32+0x7f/0x120 [ 1751.754692][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1751.759773][ C0] RIP: 0023:0xf7fd7569 [ 1751.763820][ C0] Code: Bad RIP value. [ 1751.767857][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1751.776243][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1751.784186][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1751.792131][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1751.800075][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.808018][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.815972][ C0] syz-executor.4 S29944 23462 7392 0x20020000 [ 1751.822364][ C0] Call Trace: [ 1751.825627][ C0] __schedule+0x8e1/0x1eb0 [ 1751.830022][ C0] ? io_schedule_timeout+0x140/0x140 [ 1751.835282][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1751.840716][ C0] schedule+0xd0/0x2a0 [ 1751.844759][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1751.849843][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1751.855027][ C0] futex_wait+0x1df/0x560 [ 1751.859330][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1751.864338][ C0] ? mark_lock+0xbc/0x1710 [ 1751.868726][ C0] ? mark_lock+0xbc/0x1710 [ 1751.873114][ C0] ? hash_futex+0x12/0x200 [ 1751.877516][ C0] ? futex_wake+0x155/0x490 [ 1751.882262][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1751.888304][ C0] do_futex+0x15b/0x1a60 [ 1751.892522][ C0] ? lock_acquire+0x1f1/0xad0 [ 1751.897170][ C0] ? __might_fault+0xef/0x1d0 [ 1751.901818][ C0] ? find_held_lock+0x2d/0x110 [ 1751.906556][ C0] ? futex_exit_release+0x220/0x220 [ 1751.911740][ C0] ? lock_downgrade+0x820/0x820 [ 1751.916575][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1751.922792][ C0] ? __might_fault+0x190/0x1d0 [ 1751.927530][ C0] ? _copy_to_user+0x126/0x160 [ 1751.932267][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1751.937702][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1751.943221][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1751.949087][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1751.953997][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1751.959083][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1751.964167][ C0] do_fast_syscall_32+0x7f/0x120 [ 1751.969089][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1751.974171][ C0] RIP: 0023:0xf7fd7569 [ 1751.978207][ C0] Code: Bad RIP value. [ 1751.982244][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1751.990624][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1751.998569][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1752.006514][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1752.014470][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.022433][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.030389][ C0] syz-executor.4 S29944 23477 7392 0x20020000 [ 1752.036698][ C0] Call Trace: [ 1752.039963][ C0] __schedule+0x8e1/0x1eb0 [ 1752.044357][ C0] ? io_schedule_timeout+0x140/0x140 [ 1752.049627][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1752.055064][ C0] schedule+0xd0/0x2a0 [ 1752.059108][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1752.064196][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1752.069368][ C0] futex_wait+0x1df/0x560 [ 1752.073689][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1752.078687][ C0] ? mark_lock+0xbc/0x1710 [ 1752.083079][ C0] ? mark_lock+0xbc/0x1710 [ 1752.087467][ C0] ? hash_futex+0x12/0x200 [ 1752.091854][ C0] ? futex_wake+0x155/0x490 [ 1752.096339][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1752.102303][ C0] do_futex+0x15b/0x1a60 [ 1752.106530][ C0] ? lock_acquire+0x1f1/0xad0 [ 1752.111179][ C0] ? __might_fault+0xef/0x1d0 [ 1752.115827][ C0] ? find_held_lock+0x2d/0x110 [ 1752.120567][ C0] ? futex_exit_release+0x220/0x220 [ 1752.125757][ C0] ? lock_downgrade+0x820/0x820 [ 1752.130583][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1752.136809][ C0] ? __might_fault+0x190/0x1d0 [ 1752.141545][ C0] ? _copy_to_user+0x126/0x160 [ 1752.146291][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1752.151727][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1752.157245][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1752.163113][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1752.168026][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1752.173114][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1752.178223][ C0] do_fast_syscall_32+0x7f/0x120 [ 1752.183155][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1752.188254][ C0] RIP: 0023:0xf7fd7569 [ 1752.192299][ C0] Code: Bad RIP value. [ 1752.196340][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1752.204798][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1752.212779][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1752.220732][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1752.228691][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.236671][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.244633][ C0] syz-executor.4 S29944 23503 7392 0x20020000 [ 1752.250943][ C0] Call Trace: [ 1752.254214][ C0] __schedule+0x8e1/0x1eb0 [ 1752.258612][ C0] ? io_schedule_timeout+0x140/0x140 [ 1752.263894][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1752.269331][ C0] schedule+0xd0/0x2a0 [ 1752.273376][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1752.278459][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1752.283634][ C0] futex_wait+0x1df/0x560 [ 1752.287939][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1752.292937][ C0] ? mark_lock+0xbc/0x1710 [ 1752.297326][ C0] ? mark_lock+0xbc/0x1710 [ 1752.301715][ C0] ? hash_futex+0x12/0x200 [ 1752.306115][ C0] ? futex_wake+0x155/0x490 [ 1752.310613][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1752.316578][ C0] do_futex+0x15b/0x1a60 [ 1752.320801][ C0] ? lock_acquire+0x1f1/0xad0 [ 1752.325451][ C0] ? __might_fault+0xef/0x1d0 [ 1752.330100][ C0] ? find_held_lock+0x2d/0x110 [ 1752.334837][ C0] ? futex_exit_release+0x220/0x220 [ 1752.340023][ C0] ? lock_downgrade+0x820/0x820 [ 1752.344849][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1752.351182][ C0] ? __might_fault+0x190/0x1d0 [ 1752.355919][ C0] ? _copy_to_user+0x126/0x160 [ 1752.360718][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1752.366172][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1752.371702][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1752.377599][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1752.382512][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1752.387602][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1752.392690][ C0] do_fast_syscall_32+0x7f/0x120 [ 1752.397602][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1752.402684][ C0] RIP: 0023:0xf7fd7569 [ 1752.406720][ C0] Code: Bad RIP value. [ 1752.410758][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1752.419140][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1752.427084][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1752.435028][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1752.442971][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.451176][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.459134][ C0] syz-executor.4 S29944 23515 7392 0x20020000 [ 1752.465455][ C0] Call Trace: [ 1752.468720][ C0] __schedule+0x8e1/0x1eb0 [ 1752.473119][ C0] ? io_schedule_timeout+0x140/0x140 [ 1752.478380][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1752.483814][ C0] schedule+0xd0/0x2a0 [ 1752.487858][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1752.492941][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1752.498109][ C0] ? futex_wake+0x1b5/0x490 [ 1752.502597][ C0] ? find_held_lock+0x2d/0x110 [ 1752.507336][ C0] futex_wait+0x1df/0x560 [ 1752.511644][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1752.516637][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1752.521548][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1752.526718][ C0] ? futex_wake+0x155/0x490 [ 1752.531204][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1752.537156][ C0] do_futex+0x15b/0x1a60 [ 1752.541376][ C0] ? lock_acquire+0x1f1/0xad0 [ 1752.546043][ C0] ? __might_fault+0xef/0x1d0 [ 1752.550702][ C0] ? find_held_lock+0x2d/0x110 [ 1752.555439][ C0] ? futex_exit_release+0x220/0x220 [ 1752.560633][ C0] ? lock_downgrade+0x820/0x820 [ 1752.565468][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1752.571687][ C0] ? __might_fault+0x190/0x1d0 [ 1752.577390][ C0] ? _copy_to_user+0x126/0x160 [ 1752.582132][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1752.587568][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1752.593086][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1752.598954][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1752.603864][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1752.608955][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1752.614042][ C0] do_fast_syscall_32+0x7f/0x120 [ 1752.618954][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1752.624038][ C0] RIP: 0023:0xf7fd7569 [ 1752.628077][ C0] Code: Bad RIP value. [ 1752.632114][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1752.640496][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1752.648452][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1752.656404][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1752.664349][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.672294][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.680247][ C0] syz-executor.0 S29592 23626 6841 0x20020000 [ 1752.686566][ C0] Call Trace: [ 1752.689831][ C0] __schedule+0x8e1/0x1eb0 [ 1752.694226][ C0] ? io_schedule_timeout+0x140/0x140 [ 1752.699485][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1752.704921][ C0] schedule+0xd0/0x2a0 [ 1752.708970][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1752.714055][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1752.719222][ C0] ? futex_wake+0x1b5/0x490 [ 1752.723697][ C0] ? find_held_lock+0x2d/0x110 [ 1752.728465][ C0] futex_wait+0x1df/0x560 [ 1752.732781][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1752.737777][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1752.742705][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1752.747877][ C0] ? futex_wake+0x155/0x490 [ 1752.752361][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1752.758311][ C0] ? __lock_acquire+0xc1e/0x56e0 [ 1752.763224][ C0] do_futex+0x15b/0x1a60 [ 1752.767444][ C0] ? lock_acquire+0x1f1/0xad0 [ 1752.772103][ C0] ? __might_fault+0xef/0x1d0 [ 1752.776753][ C0] ? find_held_lock+0x2d/0x110 [ 1752.781512][ C0] ? futex_exit_release+0x220/0x220 [ 1752.786684][ C0] ? lock_downgrade+0x820/0x820 [ 1752.791520][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1752.797738][ C0] ? __might_fault+0x190/0x1d0 [ 1752.802479][ C0] ? _copy_to_user+0x126/0x160 [ 1752.807221][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1752.812656][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1752.818173][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1752.824040][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1752.828956][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1752.834061][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1752.839144][ C0] do_fast_syscall_32+0x7f/0x120 [ 1752.844057][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1752.849139][ C0] RIP: 0023:0xf7fd1569 [ 1752.853196][ C0] Code: Bad RIP value. [ 1752.857257][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1752.865639][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1752.873582][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1752.881526][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1752.889482][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.897427][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.905383][ C0] syz-executor.0 S29944 23636 6841 0x20020000 [ 1752.911689][ C0] Call Trace: [ 1752.914955][ C0] __schedule+0x8e1/0x1eb0 [ 1752.919349][ C0] ? io_schedule_timeout+0x140/0x140 [ 1752.924609][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1752.930046][ C0] schedule+0xd0/0x2a0 [ 1752.934090][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1752.939195][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1752.944380][ C0] futex_wait+0x1df/0x560 [ 1752.948687][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1752.953688][ C0] ? wake_up_q+0xa3/0x100 [ 1752.957988][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1752.963159][ C0] ? futex_wake+0x155/0x490 [ 1752.967644][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1752.973596][ C0] do_futex+0x15b/0x1a60 [ 1752.977817][ C0] ? lock_acquire+0x1f1/0xad0 [ 1752.982466][ C0] ? __might_fault+0xef/0x1d0 [ 1752.987115][ C0] ? find_held_lock+0x2d/0x110 [ 1752.991851][ C0] ? futex_exit_release+0x220/0x220 [ 1752.997036][ C0] ? lock_downgrade+0x820/0x820 [ 1753.001865][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1753.008090][ C0] ? __might_fault+0x190/0x1d0 [ 1753.012838][ C0] ? _copy_to_user+0x126/0x160 [ 1753.017579][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1753.023027][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.027938][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1753.033457][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.038369][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1753.043459][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1753.048542][ C0] do_fast_syscall_32+0x7f/0x120 [ 1753.053452][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1753.058533][ C0] RIP: 0023:0xf7fd1569 [ 1753.062570][ C0] Code: Bad RIP value. [ 1753.066607][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1753.074994][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1753.082937][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1753.090882][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1753.098827][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1753.106769][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.114727][ C0] syz-executor.0 S29944 23646 6841 0x20020000 [ 1753.121034][ C0] Call Trace: [ 1753.124307][ C0] __schedule+0x8e1/0x1eb0 [ 1753.128714][ C0] ? io_schedule_timeout+0x140/0x140 [ 1753.133974][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1753.139413][ C0] schedule+0xd0/0x2a0 [ 1753.143459][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1753.148543][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1753.153717][ C0] futex_wait+0x1df/0x560 [ 1753.158034][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1753.163046][ C0] ? wake_up_q+0xa3/0x100 [ 1753.167356][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1753.172533][ C0] ? futex_wake+0x155/0x490 [ 1753.177020][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1753.184102][ C0] do_futex+0x15b/0x1a60 [ 1753.188324][ C0] ? lock_acquire+0x1f1/0xad0 [ 1753.192983][ C0] ? __might_fault+0xef/0x1d0 [ 1753.197633][ C0] ? find_held_lock+0x2d/0x110 [ 1753.202368][ C0] ? futex_exit_release+0x220/0x220 [ 1753.207552][ C0] ? lock_downgrade+0x820/0x820 [ 1753.212378][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1753.218616][ C0] ? __might_fault+0x190/0x1d0 [ 1753.223352][ C0] ? _copy_to_user+0x126/0x160 [ 1753.228105][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1753.233552][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.238474][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1753.243994][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.248906][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1753.253993][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1753.259076][ C0] do_fast_syscall_32+0x7f/0x120 [ 1753.263986][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1753.269067][ C0] RIP: 0023:0xf7fd1569 [ 1753.273102][ C0] Code: Bad RIP value. [ 1753.277137][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1753.285518][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1753.293462][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1753.301424][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1753.309369][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1753.317323][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.325294][ C0] syz-executor.0 S29944 23657 6841 0x20020000 [ 1753.331602][ C0] Call Trace: [ 1753.334866][ C0] __schedule+0x8e1/0x1eb0 [ 1753.339261][ C0] ? io_schedule_timeout+0x140/0x140 [ 1753.344538][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1753.349986][ C0] schedule+0xd0/0x2a0 [ 1753.354038][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1753.359187][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1753.364370][ C0] futex_wait+0x1df/0x560 [ 1753.368685][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1753.373692][ C0] ? wake_up_q+0xa3/0x100 [ 1753.378019][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1753.383237][ C0] ? futex_wake+0x155/0x490 [ 1753.387768][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1753.393724][ C0] do_futex+0x15b/0x1a60 [ 1753.397946][ C0] ? lock_acquire+0x1f1/0xad0 [ 1753.402595][ C0] ? __might_fault+0xef/0x1d0 [ 1753.407245][ C0] ? find_held_lock+0x2d/0x110 [ 1753.412017][ C0] ? futex_exit_release+0x220/0x220 [ 1753.417206][ C0] ? lock_downgrade+0x820/0x820 [ 1753.422033][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1753.428263][ C0] ? __might_fault+0x190/0x1d0 [ 1753.433094][ C0] ? _copy_to_user+0x126/0x160 [ 1753.437835][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1753.443268][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.448182][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1753.453701][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.458613][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1753.463700][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1753.468783][ C0] do_fast_syscall_32+0x7f/0x120 [ 1753.473694][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1753.478796][ C0] RIP: 0023:0xf7fd1569 [ 1753.482834][ C0] Code: Bad RIP value. [ 1753.486870][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1753.495253][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1753.503200][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1753.511169][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1753.519113][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1753.527058][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.535019][ C0] bond8 I30088 23977 2 0x00004000 [ 1753.541331][ C0] Call Trace: [ 1753.544598][ C0] __schedule+0x8e1/0x1eb0 [ 1753.549010][ C0] ? io_schedule_timeout+0x140/0x140 [ 1753.554281][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1753.559287][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1753.564479][ C0] schedule+0xd0/0x2a0 [ 1753.568537][ C0] rescuer_thread+0x7a7/0xd30 [ 1753.573196][ C0] ? worker_thread+0x1120/0x1120 [ 1753.578124][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1753.583224][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1753.588224][ C0] ? worker_thread+0x1120/0x1120 [ 1753.593150][ C0] kthread+0x3b5/0x4a0 [ 1753.597206][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.602290][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.607393][ C0] ret_from_fork+0x1f/0x30 [ 1753.611795][ C0] bond9 I30952 24068 2 0x00004000 [ 1753.618104][ C0] Call Trace: [ 1753.621367][ C0] __schedule+0x8e1/0x1eb0 [ 1753.625761][ C0] ? io_schedule_timeout+0x140/0x140 [ 1753.631129][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1753.636133][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1753.641854][ C0] schedule+0xd0/0x2a0 [ 1753.645899][ C0] rescuer_thread+0x7a7/0xd30 [ 1753.650558][ C0] ? worker_thread+0x1120/0x1120 [ 1753.655468][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1753.660552][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1753.665551][ C0] ? worker_thread+0x1120/0x1120 [ 1753.670461][ C0] kthread+0x3b5/0x4a0 [ 1753.674501][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.679586][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.684671][ C0] ret_from_fork+0x1f/0x30 [ 1753.689074][ C0] bond10 I30952 24134 2 0x00004000 [ 1753.695379][ C0] Call Trace: [ 1753.698644][ C0] __schedule+0x8e1/0x1eb0 [ 1753.703038][ C0] ? io_schedule_timeout+0x140/0x140 [ 1753.708309][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1753.713306][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1753.718479][ C0] schedule+0xd0/0x2a0 [ 1753.722611][ C0] rescuer_thread+0x7a7/0xd30 [ 1753.727273][ C0] ? worker_thread+0x1120/0x1120 [ 1753.732184][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1753.737271][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1753.742269][ C0] ? worker_thread+0x1120/0x1120 [ 1753.747186][ C0] kthread+0x3b5/0x4a0 [ 1753.751228][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.756328][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.761415][ C0] ret_from_fork+0x1f/0x30 [ 1753.765825][ C0] bond11 I30952 24197 2 0x00004000 [ 1753.772146][ C0] Call Trace: [ 1753.775411][ C0] __schedule+0x8e1/0x1eb0 [ 1753.779805][ C0] ? io_schedule_timeout+0x140/0x140 [ 1753.785063][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1753.790060][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1753.795233][ C0] schedule+0xd0/0x2a0 [ 1753.799288][ C0] rescuer_thread+0x7a7/0xd30 [ 1753.803946][ C0] ? worker_thread+0x1120/0x1120 [ 1753.808859][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1753.813946][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1753.818959][ C0] ? worker_thread+0x1120/0x1120 [ 1753.823871][ C0] kthread+0x3b5/0x4a0 [ 1753.827918][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.833001][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1753.838099][ C0] ret_from_fork+0x1f/0x30 [ 1753.848313][ C0] syz-executor.0 S29944 24621 6841 0x20020000 [ 1753.854622][ C0] Call Trace: [ 1753.857886][ C0] __schedule+0x8e1/0x1eb0 [ 1753.862281][ C0] ? io_schedule_timeout+0x140/0x140 [ 1753.867561][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1753.872997][ C0] schedule+0xd0/0x2a0 [ 1753.877040][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1753.882125][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1753.887298][ C0] futex_wait+0x1df/0x560 [ 1753.891602][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1753.896603][ C0] ? wake_up_q+0xa3/0x100 [ 1753.900916][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1753.906088][ C0] ? futex_wake+0x155/0x490 [ 1753.910574][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1753.916529][ C0] do_futex+0x15b/0x1a60 [ 1753.920748][ C0] ? lock_acquire+0x1f1/0xad0 [ 1753.925397][ C0] ? __might_fault+0xef/0x1d0 [ 1753.930047][ C0] ? find_held_lock+0x2d/0x110 [ 1753.934785][ C0] ? futex_exit_release+0x220/0x220 [ 1753.939972][ C0] ? lock_downgrade+0x820/0x820 [ 1753.944797][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1753.951027][ C0] ? __might_fault+0x190/0x1d0 [ 1753.955764][ C0] ? _copy_to_user+0x126/0x160 [ 1753.960520][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1753.965958][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.970958][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1753.976478][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1753.981388][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1753.986475][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1753.991560][ C0] do_fast_syscall_32+0x7f/0x120 [ 1753.996472][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1754.001556][ C0] RIP: 0023:0xf7fd1569 [ 1754.005592][ C0] Code: Bad RIP value. [ 1754.009628][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1754.018009][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1754.025953][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1754.033900][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1754.041843][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1754.049787][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.057745][ C0] kworker/0:10 I28088 25495 2 0x00004000 [ 1754.064318][ C0] Workqueue: 0x0 (events) [ 1754.068704][ C0] Call Trace: [ 1754.071969][ C0] __schedule+0x8e1/0x1eb0 [ 1754.076361][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.081622][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1754.086799][ C0] schedule+0xd0/0x2a0 [ 1754.090845][ C0] worker_thread+0x14c/0x1120 [ 1754.095520][ C0] ? process_one_work+0x1670/0x1670 [ 1754.100692][ C0] kthread+0x3b5/0x4a0 [ 1754.104735][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.109817][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.114903][ C0] ret_from_fork+0x1f/0x30 [ 1754.119301][ C0] kworker/0:11 R running task 23544 25497 2 0x00004000 [ 1754.127174][ C0] Workqueue: 0x0 (events) [ 1754.131576][ C0] Call Trace: [ 1754.134841][ C0] __schedule+0x8e1/0x1eb0 [ 1754.139244][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.144504][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1754.149677][ C0] schedule+0xd0/0x2a0 [ 1754.153738][ C0] worker_thread+0x14c/0x1120 [ 1754.158395][ C0] ? process_one_work+0x1670/0x1670 [ 1754.163568][ C0] kthread+0x3b5/0x4a0 [ 1754.167613][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.172708][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.177795][ C0] ret_from_fork+0x1f/0x30 [ 1754.182212][ C0] kworker/0:12 I28744 25498 2 0x00004000 [ 1754.188566][ C0] Workqueue: 0x0 (events) [ 1754.192975][ C0] Call Trace: [ 1754.196254][ C0] __schedule+0x8e1/0x1eb0 [ 1754.200656][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.205939][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1754.211169][ C0] schedule+0xd0/0x2a0 [ 1754.215237][ C0] worker_thread+0x14c/0x1120 [ 1754.219954][ C0] ? process_one_work+0x1670/0x1670 [ 1754.225136][ C0] kthread+0x3b5/0x4a0 [ 1754.229192][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.234317][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.239410][ C0] ret_from_fork+0x1f/0x30 [ 1754.243811][ C0] kworker/0:13 I29072 25500 2 0x00004000 [ 1754.250124][ C0] Workqueue: 0x0 (events) [ 1754.254516][ C0] Call Trace: [ 1754.257783][ C0] __schedule+0x8e1/0x1eb0 [ 1754.262178][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.267450][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1754.272622][ C0] schedule+0xd0/0x2a0 [ 1754.276667][ C0] worker_thread+0x14c/0x1120 [ 1754.281322][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1754.286318][ C0] ? process_one_work+0x1670/0x1670 [ 1754.291577][ C0] kthread+0x3b5/0x4a0 [ 1754.295616][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.300707][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.305792][ C0] ret_from_fork+0x1f/0x30 [ 1754.310186][ C0] kworker/u4:1 R running task 25568 26315 2 0x00004000 [ 1754.318063][ C0] Workqueue: 0x0 (bat_events) [ 1754.322805][ C0] Call Trace: [ 1754.326071][ C0] __schedule+0x8e1/0x1eb0 [ 1754.330467][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.335725][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1754.340725][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1754.345918][ C0] schedule+0xd0/0x2a0 [ 1754.349972][ C0] worker_thread+0x14c/0x1120 [ 1754.354639][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1754.359636][ C0] ? process_one_work+0x1670/0x1670 [ 1754.364809][ C0] kthread+0x3b5/0x4a0 [ 1754.368869][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.373991][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.379092][ C0] ret_from_fork+0x1f/0x30 [ 1754.383505][ C0] syz-executor.1 S28032 26383 6979 0x20020000 [ 1754.389820][ C0] Call Trace: [ 1754.393093][ C0] __schedule+0x8e1/0x1eb0 [ 1754.397529][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.402792][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1754.408229][ C0] schedule+0xd0/0x2a0 [ 1754.412274][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1754.417358][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1754.422582][ C0] futex_wait+0x1df/0x560 [ 1754.426891][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1754.431894][ C0] ? mark_lock+0xbc/0x1710 [ 1754.436287][ C0] ? __lock_acquire+0x16e3/0x56e0 [ 1754.441292][ C0] ? trace_hardirqs_off+0x27/0x210 [ 1754.446378][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1754.452344][ C0] do_futex+0x15b/0x1a60 [ 1754.456662][ C0] ? lock_acquire+0x1f1/0xad0 [ 1754.461312][ C0] ? ktime_get+0x3e/0x120 [ 1754.465617][ C0] ? find_held_lock+0x2d/0x110 [ 1754.470364][ C0] ? ktime_get+0x3e/0x120 [ 1754.474682][ C0] ? futex_exit_release+0x220/0x220 [ 1754.479863][ C0] ? lock_downgrade+0x820/0x820 [ 1754.484699][ C0] ? enqueue_hrtimer+0x152/0x3f0 [ 1754.489612][ C0] ? __hrtimer_run_queues+0xc72/0xfc0 [ 1754.494968][ C0] ? find_held_lock+0x2d/0x110 [ 1754.499711][ C0] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 1754.506016][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1754.511186][ C0] ? sched_clock+0x2a/0x40 [ 1754.515575][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1754.520398][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1754.525224][ C0] ? clockevents_program_event+0x12b/0x350 [ 1754.531007][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1754.536442][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1754.541527][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1754.547056][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1754.552139][ C0] do_fast_syscall_32+0x7f/0x120 [ 1754.557064][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1754.562148][ C0] RIP: 0023:0xf7fa1569 [ 1754.566183][ C0] Code: Bad RIP value. [ 1754.570226][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1754.578609][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1754.586553][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1754.594506][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1754.602451][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1754.610394][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.618364][ C0] kworker/1:10 I31072 26390 2 0x00004000 [ 1754.624684][ C0] Call Trace: [ 1754.627950][ C0] __schedule+0x8e1/0x1eb0 [ 1754.632346][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.637605][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1754.642618][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1754.647791][ C0] schedule+0xd0/0x2a0 [ 1754.651861][ C0] worker_thread+0x14c/0x1120 [ 1754.656512][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1754.662311][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1754.667223][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1754.673179][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1754.678189][ C0] ? process_one_work+0x1670/0x1670 [ 1754.683362][ C0] kthread+0x3b5/0x4a0 [ 1754.687406][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.692490][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1754.697582][ C0] ret_from_fork+0x1f/0x30 [ 1754.701981][ C0] syz-executor.1 S29944 26408 6979 0x20020000 [ 1754.708287][ C0] Call Trace: [ 1754.711556][ C0] __schedule+0x8e1/0x1eb0 [ 1754.715962][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.721221][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1754.726658][ C0] schedule+0xd0/0x2a0 [ 1754.730704][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1754.735786][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1754.740956][ C0] ? futex_wake+0x1b5/0x490 [ 1754.745433][ C0] ? find_held_lock+0x2d/0x110 [ 1754.750169][ C0] futex_wait+0x1df/0x560 [ 1754.754478][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1754.759474][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1754.764495][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1754.769665][ C0] ? futex_wake+0x155/0x490 [ 1754.774162][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1754.780125][ C0] do_futex+0x15b/0x1a60 [ 1754.784344][ C0] ? lock_acquire+0x1f1/0xad0 [ 1754.789002][ C0] ? __might_fault+0xef/0x1d0 [ 1754.793655][ C0] ? find_held_lock+0x2d/0x110 [ 1754.798568][ C0] ? futex_exit_release+0x220/0x220 [ 1754.803749][ C0] ? lock_downgrade+0x820/0x820 [ 1754.808574][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1754.814791][ C0] ? __might_fault+0x190/0x1d0 [ 1754.819528][ C0] ? _copy_to_user+0x126/0x160 [ 1754.824269][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1754.829708][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1754.835228][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1754.841107][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1754.846023][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1754.851113][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1754.856197][ C0] do_fast_syscall_32+0x7f/0x120 [ 1754.861107][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1754.866191][ C0] RIP: 0023:0xf7fa1569 [ 1754.870231][ C0] Code: Bad RIP value. [ 1754.874266][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1754.882649][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1754.890594][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1754.898550][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1754.906492][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1754.914435][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.922391][ C0] syz-executor.4 S29144 26419 7392 0x20020000 [ 1754.928695][ C0] Call Trace: [ 1754.931961][ C0] __schedule+0x8e1/0x1eb0 [ 1754.936355][ C0] ? io_schedule_timeout+0x140/0x140 [ 1754.941617][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1754.947399][ C0] schedule+0xd0/0x2a0 [ 1754.951444][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1754.956528][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1754.961702][ C0] futex_wait+0x1df/0x560 [ 1754.966007][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1754.971008][ C0] ? wake_up_q+0xa3/0x100 [ 1754.975309][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1754.980480][ C0] ? futex_wake+0x155/0x490 [ 1754.984964][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1754.990919][ C0] do_futex+0x15b/0x1a60 [ 1754.995140][ C0] ? lock_acquire+0x1f1/0xad0 [ 1754.999788][ C0] ? __might_fault+0xef/0x1d0 [ 1755.004435][ C0] ? find_held_lock+0x2d/0x110 [ 1755.009172][ C0] ? futex_exit_release+0x220/0x220 [ 1755.014343][ C0] ? lock_downgrade+0x820/0x820 [ 1755.019168][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1755.025384][ C0] ? __might_fault+0x190/0x1d0 [ 1755.030118][ C0] ? _copy_to_user+0x126/0x160 [ 1755.034869][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1755.040301][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.045210][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1755.050741][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.055652][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1755.060740][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1755.065827][ C0] do_fast_syscall_32+0x7f/0x120 [ 1755.070738][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1755.075822][ C0] RIP: 0023:0xf7fd7569 [ 1755.079868][ C0] Code: Bad RIP value. [ 1755.083904][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1755.092285][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1755.100228][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1755.108171][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1755.116114][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1755.124056][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.132043][ C0] syz-executor.1 S29144 26420 6979 0x20020000 [ 1755.138404][ C0] Call Trace: [ 1755.141698][ C0] __schedule+0x8e1/0x1eb0 [ 1755.146144][ C0] ? io_schedule_timeout+0x140/0x140 [ 1755.151410][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1755.156852][ C0] schedule+0xd0/0x2a0 [ 1755.160902][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1755.165988][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1755.171163][ C0] futex_wait+0x1df/0x560 [ 1755.175469][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1755.180473][ C0] ? wake_up_q+0xa3/0x100 [ 1755.184775][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1755.189990][ C0] ? futex_wake+0x155/0x490 [ 1755.194483][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1755.200550][ C0] do_futex+0x15b/0x1a60 [ 1755.204782][ C0] ? lock_acquire+0x1f1/0xad0 [ 1755.209434][ C0] ? __might_fault+0xef/0x1d0 [ 1755.214086][ C0] ? find_held_lock+0x2d/0x110 [ 1755.220046][ C0] ? futex_exit_release+0x220/0x220 [ 1755.225221][ C0] ? lock_downgrade+0x820/0x820 [ 1755.230048][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1755.236267][ C0] ? __might_fault+0x190/0x1d0 [ 1755.241004][ C0] ? _copy_to_user+0x126/0x160 [ 1755.245745][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1755.251180][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.256091][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1755.261612][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.266523][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1755.271610][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1755.276720][ C0] do_fast_syscall_32+0x7f/0x120 [ 1755.281632][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1755.286716][ C0] RIP: 0023:0xf7fa1569 [ 1755.290752][ C0] Code: Bad RIP value. [ 1755.294789][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1755.303172][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1755.311116][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1755.319059][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1755.327190][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1755.335133][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.343100][ C0] syz-executor.4 S29976 26428 7392 0x20020000 [ 1755.349408][ C0] Call Trace: [ 1755.352677][ C0] __schedule+0x8e1/0x1eb0 [ 1755.357091][ C0] ? io_schedule_timeout+0x140/0x140 [ 1755.362361][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1755.367805][ C0] schedule+0xd0/0x2a0 [ 1755.371868][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1755.376958][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1755.382137][ C0] futex_wait+0x1df/0x560 [ 1755.386456][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1755.391458][ C0] ? mark_lock+0xbc/0x1710 [ 1755.395847][ C0] ? hash_futex+0x12/0x200 [ 1755.400238][ C0] ? futex_wake+0x155/0x490 [ 1755.404725][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1755.410677][ C0] do_futex+0x15b/0x1a60 [ 1755.414910][ C0] ? lock_acquire+0x1f1/0xad0 [ 1755.419560][ C0] ? __might_fault+0xef/0x1d0 [ 1755.424209][ C0] ? find_held_lock+0x2d/0x110 [ 1755.428947][ C0] ? futex_exit_release+0x220/0x220 [ 1755.434140][ C0] ? lock_downgrade+0x820/0x820 [ 1755.438966][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1755.445197][ C0] ? __might_fault+0x190/0x1d0 [ 1755.449933][ C0] ? _copy_to_user+0x126/0x160 [ 1755.454674][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1755.460141][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1755.465671][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1755.471548][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.476461][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1755.481549][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1755.486633][ C0] do_fast_syscall_32+0x7f/0x120 [ 1755.491544][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1755.496628][ C0] RIP: 0023:0xf7fd7569 [ 1755.500672][ C0] Code: Bad RIP value. [ 1755.504708][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1755.513090][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1755.521035][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1755.528980][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1755.536934][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1755.544880][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.552837][ C0] syz-executor.1 S29944 26429 6979 0x20020000 [ 1755.559146][ C0] Call Trace: [ 1755.562411][ C0] __schedule+0x8e1/0x1eb0 [ 1755.566812][ C0] ? io_schedule_timeout+0x140/0x140 [ 1755.572069][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1755.577516][ C0] schedule+0xd0/0x2a0 [ 1755.581560][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1755.586646][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1755.591820][ C0] futex_wait+0x1df/0x560 [ 1755.596128][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1755.601130][ C0] ? wake_up_q+0xa3/0x100 [ 1755.605432][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1755.610605][ C0] ? futex_wake+0x155/0x490 [ 1755.615096][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1755.621059][ C0] do_futex+0x15b/0x1a60 [ 1755.625281][ C0] ? lock_acquire+0x1f1/0xad0 [ 1755.629944][ C0] ? __might_fault+0xef/0x1d0 [ 1755.634606][ C0] ? find_held_lock+0x2d/0x110 [ 1755.639342][ C0] ? futex_exit_release+0x220/0x220 [ 1755.644687][ C0] ? lock_downgrade+0x820/0x820 [ 1755.649512][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1755.655728][ C0] ? __might_fault+0x190/0x1d0 [ 1755.660462][ C0] ? _copy_to_user+0x126/0x160 [ 1755.665215][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1755.670650][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1755.676167][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1755.682054][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.686984][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1755.692100][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1755.697189][ C0] do_fast_syscall_32+0x7f/0x120 [ 1755.702107][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1755.707192][ C0] RIP: 0023:0xf7fa1569 [ 1755.711239][ C0] Code: Bad RIP value. [ 1755.715286][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1755.723667][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1755.731612][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1755.739560][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1755.747504][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1755.755461][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.763418][ C0] syz-executor.1 S29944 26443 6979 0x20020000 [ 1755.769729][ C0] Call Trace: [ 1755.772996][ C0] __schedule+0x8e1/0x1eb0 [ 1755.777389][ C0] ? io_schedule_timeout+0x140/0x140 [ 1755.782650][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1755.788086][ C0] schedule+0xd0/0x2a0 [ 1755.792134][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1755.797220][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1755.802565][ C0] ? futex_wake+0x1b5/0x490 [ 1755.807041][ C0] ? find_held_lock+0x2d/0x110 [ 1755.811779][ C0] futex_wait+0x1df/0x560 [ 1755.816083][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1755.821091][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1755.826003][ C0] ? perf_sched_cb_inc+0x250/0x250 [ 1755.831106][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1755.836277][ C0] ? futex_wake+0x155/0x490 [ 1755.840765][ C0] do_futex+0x15b/0x1a60 [ 1755.844987][ C0] ? lock_acquire+0x1f1/0xad0 [ 1755.849637][ C0] ? __might_fault+0xef/0x1d0 [ 1755.854287][ C0] ? find_held_lock+0x2d/0x110 [ 1755.859028][ C0] ? futex_exit_release+0x220/0x220 [ 1755.864212][ C0] ? lock_downgrade+0x820/0x820 [ 1755.869039][ C0] ? read_seqcount_begin.constprop.0+0x10b/0x1f0 [ 1755.875352][ C0] ? __might_fault+0x190/0x1d0 [ 1755.880105][ C0] ? _copy_to_user+0x126/0x160 [ 1755.884845][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1755.890294][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.895206][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1755.900727][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1755.905638][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1755.910727][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1755.915813][ C0] do_fast_syscall_32+0x7f/0x120 [ 1755.920740][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1755.925823][ C0] RIP: 0023:0xf7fa1569 [ 1755.929871][ C0] Code: Bad RIP value. [ 1755.933909][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1755.942300][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1755.950245][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1755.958189][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1755.966152][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1755.974097][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.982076][ C0] syz-executor.4 S29944 26449 7392 0x20020000 [ 1755.988386][ C0] Call Trace: [ 1755.991652][ C0] __schedule+0x8e1/0x1eb0 [ 1755.996047][ C0] ? io_schedule_timeout+0x140/0x140 [ 1756.001316][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1756.006752][ C0] schedule+0xd0/0x2a0 [ 1756.010797][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1756.015882][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1756.021051][ C0] ? futex_wake+0x1b5/0x490 [ 1756.025531][ C0] ? find_held_lock+0x2d/0x110 [ 1756.030270][ C0] futex_wait+0x1df/0x560 [ 1756.034576][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1756.039571][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1756.044483][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1756.049670][ C0] ? futex_wake+0x155/0x490 [ 1756.054169][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1756.060136][ C0] do_futex+0x15b/0x1a60 [ 1756.064368][ C0] ? lock_acquire+0x1f1/0xad0 [ 1756.069089][ C0] ? __might_fault+0xef/0x1d0 [ 1756.073763][ C0] ? find_held_lock+0x2d/0x110 [ 1756.078511][ C0] ? futex_exit_release+0x220/0x220 [ 1756.083688][ C0] ? lock_downgrade+0x820/0x820 [ 1756.088515][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1756.094733][ C0] ? __might_fault+0x190/0x1d0 [ 1756.099523][ C0] ? _copy_to_user+0x126/0x160 [ 1756.104265][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1756.109710][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1756.115244][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1756.121138][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1756.126051][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1756.131141][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1756.136241][ C0] do_fast_syscall_32+0x7f/0x120 [ 1756.141154][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1756.146240][ C0] RIP: 0023:0xf7fd7569 [ 1756.150276][ C0] Code: Bad RIP value. [ 1756.154314][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1756.162700][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1756.170647][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1756.178592][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1756.186550][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1756.194496][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1756.202453][ C0] syz-executor.0 S29944 26450 6841 0x20020000 [ 1756.208777][ C0] Call Trace: [ 1756.212054][ C0] __schedule+0x8e1/0x1eb0 [ 1756.216451][ C0] ? io_schedule_timeout+0x140/0x140 [ 1756.221714][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1756.227197][ C0] schedule+0xd0/0x2a0 [ 1756.231243][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1756.236455][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1756.241625][ C0] ? futex_wake+0x1b5/0x490 [ 1756.246102][ C0] ? find_held_lock+0x2d/0x110 [ 1756.250841][ C0] futex_wait+0x1df/0x560 [ 1756.255144][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1756.260141][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1756.265053][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1756.270225][ C0] ? futex_wake+0x155/0x490 [ 1756.274724][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1756.280680][ C0] do_futex+0x15b/0x1a60 [ 1756.284902][ C0] ? lock_acquire+0x1f1/0xad0 [ 1756.289555][ C0] ? __might_fault+0xef/0x1d0 [ 1756.294205][ C0] ? find_held_lock+0x2d/0x110 [ 1756.298948][ C0] ? futex_exit_release+0x220/0x220 [ 1756.304132][ C0] ? lock_downgrade+0x820/0x820 [ 1756.308969][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1756.315187][ C0] ? __might_fault+0x190/0x1d0 [ 1756.319927][ C0] ? _copy_to_user+0x126/0x160 [ 1756.324691][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1756.330129][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1756.335657][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1756.341539][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1756.346462][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1756.351550][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1756.356651][ C0] do_fast_syscall_32+0x7f/0x120 [ 1756.361565][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1756.366660][ C0] RIP: 0023:0xf7fd1569 [ 1756.370713][ C0] Code: Bad RIP value. [ 1756.374808][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1756.383253][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1756.391239][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1756.399224][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1756.407170][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1756.415117][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1756.423078][ C0] syz-executor.1 S29944 26459 6979 0x20020000 [ 1756.429387][ C0] Call Trace: [ 1756.432658][ C0] __schedule+0x8e1/0x1eb0 [ 1756.437053][ C0] ? io_schedule_timeout+0x140/0x140 [ 1756.442316][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1756.447753][ C0] schedule+0xd0/0x2a0 [ 1756.451800][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1756.456886][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1756.462108][ C0] futex_wait+0x1df/0x560 [ 1756.466415][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1756.471418][ C0] ? mark_lock+0xbc/0x1710 [ 1756.475809][ C0] ? hash_futex+0x12/0x200 [ 1756.480199][ C0] ? futex_wake+0x155/0x490 [ 1756.484685][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1756.490655][ C0] do_futex+0x15b/0x1a60 [ 1756.494878][ C0] ? lock_acquire+0x1f1/0xad0 [ 1756.499530][ C0] ? __might_fault+0xef/0x1d0 [ 1756.504179][ C0] ? find_held_lock+0x2d/0x110 [ 1756.508919][ C0] ? futex_exit_release+0x220/0x220 [ 1756.514091][ C0] ? lock_downgrade+0x820/0x820 [ 1756.518929][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1756.525162][ C0] ? __might_fault+0x190/0x1d0 [ 1756.529901][ C0] ? _copy_to_user+0x126/0x160 [ 1756.534642][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1756.540078][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1756.545597][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1756.551465][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1756.556562][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1756.561657][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1756.566742][ C0] do_fast_syscall_32+0x7f/0x120 [ 1756.571652][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1756.577083][ C0] RIP: 0023:0xf7fa1569 [ 1756.581118][ C0] Code: Bad RIP value. [ 1756.585168][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1756.593558][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1756.601502][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1756.609447][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1756.617390][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1756.625334][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1756.633296][ C0] syz-executor.0 S29512 26464 6841 0x20020000 [ 1756.639605][ C0] Call Trace: [ 1756.642871][ C0] __schedule+0x8e1/0x1eb0 [ 1756.647265][ C0] ? io_schedule_timeout+0x140/0x140 [ 1756.652526][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1756.657962][ C0] schedule+0xd0/0x2a0 [ 1756.662007][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1756.667102][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1756.672295][ C0] futex_wait+0x1df/0x560 [ 1756.676600][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1756.681600][ C0] ? wake_up_q+0xa3/0x100 [ 1756.685910][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1756.691084][ C0] ? futex_wake+0x155/0x490 [ 1756.695572][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1756.701612][ C0] do_futex+0x15b/0x1a60 [ 1756.705842][ C0] ? lock_acquire+0x1f1/0xad0 [ 1756.710492][ C0] ? __might_fault+0xef/0x1d0 [ 1756.715142][ C0] ? find_held_lock+0x2d/0x110 [ 1756.719891][ C0] ? futex_exit_release+0x220/0x220 [ 1756.725064][ C0] ? lock_downgrade+0x820/0x820 [ 1756.729891][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1756.736118][ C0] ? __might_fault+0x190/0x1d0 [ 1756.740855][ C0] ? _copy_to_user+0x126/0x160 [ 1756.745595][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1756.751039][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1756.755951][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1756.761490][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1756.766401][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1756.771489][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1756.776574][ C0] do_fast_syscall_32+0x7f/0x120 [ 1756.781486][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1756.786566][ C0] RIP: 0023:0xf7fd1569 [ 1756.790613][ C0] Code: Bad RIP value. [ 1756.794652][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1756.803034][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1756.810993][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1756.818944][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1756.826938][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1756.834887][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1756.842863][ C0] syz-executor.1 S29144 26469 6979 0x20020000 [ 1756.849174][ C0] Call Trace: [ 1756.852441][ C0] __schedule+0x8e1/0x1eb0 [ 1756.856853][ C0] ? io_schedule_timeout+0x140/0x140 [ 1756.862113][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1756.867561][ C0] schedule+0xd0/0x2a0 [ 1756.871607][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1756.876690][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1756.881863][ C0] futex_wait+0x1df/0x560 [ 1756.886167][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1756.891170][ C0] ? wake_up_q+0xa3/0x100 [ 1756.895471][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1756.900645][ C0] ? futex_wake+0x155/0x490 [ 1756.905131][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1756.911344][ C0] do_futex+0x15b/0x1a60 [ 1756.915576][ C0] ? lock_acquire+0x1f1/0xad0 [ 1756.920225][ C0] ? __might_fault+0xef/0x1d0 [ 1756.924875][ C0] ? find_held_lock+0x2d/0x110 [ 1756.929621][ C0] ? futex_exit_release+0x220/0x220 [ 1756.934793][ C0] ? lock_downgrade+0x820/0x820 [ 1756.939629][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1756.945950][ C0] ? __might_fault+0x190/0x1d0 [ 1756.950686][ C0] ? _copy_to_user+0x126/0x160 [ 1756.955427][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1756.960861][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1756.965771][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1756.971303][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1756.976237][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1756.981338][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1756.986436][ C0] do_fast_syscall_32+0x7f/0x120 [ 1756.991348][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1756.996451][ C0] RIP: 0023:0xf7fa1569 [ 1757.000488][ C0] Code: Bad RIP value. [ 1757.004527][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1757.012928][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1757.020873][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1757.028823][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1757.036778][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1757.044730][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.052684][ C0] syz-executor.0 S29512 26492 6841 0x20020000 [ 1757.059004][ C0] Call Trace: [ 1757.062269][ C0] __schedule+0x8e1/0x1eb0 [ 1757.066664][ C0] ? io_schedule_timeout+0x140/0x140 [ 1757.071935][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1757.077372][ C0] schedule+0xd0/0x2a0 [ 1757.081415][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1757.086585][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1757.091758][ C0] futex_wait+0x1df/0x560 [ 1757.096062][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1757.101062][ C0] ? wake_up_q+0xa3/0x100 [ 1757.105451][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1757.110632][ C0] ? futex_wake+0x155/0x490 [ 1757.115127][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1757.121081][ C0] do_futex+0x15b/0x1a60 [ 1757.125301][ C0] ? lock_acquire+0x1f1/0xad0 [ 1757.129951][ C0] ? __might_fault+0xef/0x1d0 [ 1757.134600][ C0] ? find_held_lock+0x2d/0x110 [ 1757.139341][ C0] ? futex_exit_release+0x220/0x220 [ 1757.144513][ C0] ? lock_downgrade+0x820/0x820 [ 1757.149338][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1757.155555][ C0] ? __might_fault+0x190/0x1d0 [ 1757.160291][ C0] ? _copy_to_user+0x126/0x160 [ 1757.165480][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1757.170926][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1757.175837][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1757.181358][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1757.186271][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1757.191359][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1757.196465][ C0] do_fast_syscall_32+0x7f/0x120 [ 1757.201516][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1757.206603][ C0] RIP: 0023:0xf7fd1569 [ 1757.210644][ C0] Code: Bad RIP value. [ 1757.214687][ C0] RSP: 002b:00000000f5dcc12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1757.223125][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1757.231085][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1757.239030][ C0] RBP: 00000000f5dcc228 R08: 0000000000000000 R09: 0000000000000000 [ 1757.246974][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1757.254941][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.262899][ C0] syz-executor.1 S29944 26507 6979 0x20020000 [ 1757.269209][ C0] Call Trace: [ 1757.272475][ C0] __schedule+0x8e1/0x1eb0 [ 1757.276872][ C0] ? io_schedule_timeout+0x140/0x140 [ 1757.282153][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1757.287618][ C0] schedule+0xd0/0x2a0 [ 1757.291749][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1757.296832][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1757.302007][ C0] futex_wait+0x1df/0x560 [ 1757.306336][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1757.311337][ C0] ? mark_lock+0xbc/0x1710 [ 1757.315726][ C0] ? hash_futex+0x12/0x200 [ 1757.320116][ C0] ? futex_wake+0x155/0x490 [ 1757.324622][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1757.330577][ C0] do_futex+0x15b/0x1a60 [ 1757.334815][ C0] ? lock_acquire+0x1f1/0xad0 [ 1757.339473][ C0] ? __might_fault+0xef/0x1d0 [ 1757.344125][ C0] ? find_held_lock+0x2d/0x110 [ 1757.348863][ C0] ? futex_exit_release+0x220/0x220 [ 1757.354058][ C0] ? lock_downgrade+0x820/0x820 [ 1757.358903][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1757.365141][ C0] ? __might_fault+0x190/0x1d0 [ 1757.369884][ C0] ? _copy_to_user+0x126/0x160 [ 1757.374632][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1757.380079][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1757.385605][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1757.391518][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1757.396431][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1757.401532][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1757.406627][ C0] do_fast_syscall_32+0x7f/0x120 [ 1757.411539][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1757.416625][ C0] RIP: 0023:0xf7fa1569 [ 1757.420661][ C0] Code: Bad RIP value. [ 1757.424700][ C0] RSP: 002b:00000000f5d9c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1757.433084][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1757.441029][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1757.448974][ C0] RBP: 00000000f5d9c228 R08: 0000000000000000 R09: 0000000000000000 [ 1757.456919][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1757.464862][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.472819][ C0] syz-executor.4 S27720 26607 7392 0x20020000 [ 1757.479124][ C0] Call Trace: [ 1757.482390][ C0] __schedule+0x8e1/0x1eb0 [ 1757.486792][ C0] ? io_schedule_timeout+0x140/0x140 [ 1757.492054][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1757.497579][ C0] schedule+0xd0/0x2a0 [ 1757.501623][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1757.506706][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1757.511880][ C0] futex_wait+0x1df/0x560 [ 1757.516186][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1757.521187][ C0] ? mark_lock+0xbc/0x1710 [ 1757.525576][ C0] ? hash_futex+0x12/0x200 [ 1757.529965][ C0] ? futex_wake+0x155/0x490 [ 1757.534452][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1757.540412][ C0] do_futex+0x15b/0x1a60 [ 1757.544634][ C0] ? lock_acquire+0x1f1/0xad0 [ 1757.549296][ C0] ? __might_fault+0xef/0x1d0 [ 1757.553946][ C0] ? find_held_lock+0x2d/0x110 [ 1757.558684][ C0] ? futex_exit_release+0x220/0x220 [ 1757.563858][ C0] ? lock_downgrade+0x820/0x820 [ 1757.568684][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1757.574900][ C0] ? __might_fault+0x190/0x1d0 [ 1757.579636][ C0] ? _copy_to_user+0x126/0x160 [ 1757.584389][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1757.589826][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1757.595358][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1757.601324][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1757.606239][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1757.611328][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1757.616412][ C0] do_fast_syscall_32+0x7f/0x120 [ 1757.621325][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1757.626419][ C0] RIP: 0023:0xf7fd7569 [ 1757.630456][ C0] Code: Bad RIP value. [ 1757.634505][ C0] RSP: 002b:00000000f5dd212c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1757.642888][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1757.650832][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1757.658779][ C0] RBP: 00000000f5dd2228 R08: 0000000000000000 R09: 0000000000000000 [ 1757.666724][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1757.674697][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.682653][ C0] syz-executor.5 S29512 27040 7432 0x20020000 [ 1757.688974][ C0] Call Trace: [ 1757.692241][ C0] __schedule+0x8e1/0x1eb0 [ 1757.696636][ C0] ? io_schedule_timeout+0x140/0x140 [ 1757.701920][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1757.707367][ C0] schedule+0xd0/0x2a0 [ 1757.711418][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1757.716509][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1757.721689][ C0] ? unwind_next_frame+0xe3b/0x1f90 [ 1757.726988][ C0] ? entry_SYSENTER_compat+0x6d/0x7c [ 1757.732260][ C0] futex_wait+0x1df/0x560 [ 1757.736573][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1757.741580][ C0] ? mark_lock+0xbc/0x1710 [ 1757.745973][ C0] ? hash_futex+0x12/0x200 [ 1757.750368][ C0] ? futex_wake+0x155/0x490 [ 1757.754854][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1757.760851][ C0] do_futex+0x15b/0x1a60 [ 1757.765118][ C0] ? lock_acquire+0x1f1/0xad0 [ 1757.769809][ C0] ? __might_fault+0xef/0x1d0 [ 1757.774461][ C0] ? find_held_lock+0x2d/0x110 [ 1757.779286][ C0] ? futex_exit_release+0x220/0x220 [ 1757.784459][ C0] ? lock_downgrade+0x820/0x820 [ 1757.789328][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1757.795549][ C0] ? __might_fault+0x190/0x1d0 [ 1757.800288][ C0] ? _copy_to_user+0x126/0x160 [ 1757.805032][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1757.810556][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1757.816075][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1757.821953][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1757.826865][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1757.831956][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1757.837040][ C0] do_fast_syscall_32+0x7f/0x120 [ 1757.841954][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1757.847066][ C0] RIP: 0023:0xf7f53569 [ 1757.851107][ C0] Code: Bad RIP value. [ 1757.855147][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1757.863549][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1757.871504][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1757.879932][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1757.887880][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1757.895844][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.903807][ C0] syz-executor.5 S29944 27053 7432 0x20020000 [ 1757.910114][ C0] Call Trace: [ 1757.913399][ C0] __schedule+0x8e1/0x1eb0 [ 1757.917817][ C0] ? io_schedule_timeout+0x140/0x140 [ 1757.923097][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1757.928548][ C0] schedule+0xd0/0x2a0 [ 1757.932604][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1757.937690][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1757.942876][ C0] futex_wait+0x1df/0x560 [ 1757.947182][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1757.952183][ C0] ? wake_up_q+0xa3/0x100 [ 1757.956486][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1757.961660][ C0] ? futex_wake+0x155/0x490 [ 1757.966147][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1757.972101][ C0] do_futex+0x15b/0x1a60 [ 1757.976320][ C0] ? lock_acquire+0x1f1/0xad0 [ 1757.980971][ C0] ? __might_fault+0xef/0x1d0 [ 1757.985622][ C0] ? find_held_lock+0x2d/0x110 [ 1757.990380][ C0] ? futex_exit_release+0x220/0x220 [ 1757.995554][ C0] ? lock_downgrade+0x820/0x820 [ 1758.000379][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1758.006607][ C0] ? __might_fault+0x190/0x1d0 [ 1758.011344][ C0] ? _copy_to_user+0x126/0x160 [ 1758.016084][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1758.021530][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.026440][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1758.031958][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.036869][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1758.041967][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1758.047052][ C0] do_fast_syscall_32+0x7f/0x120 [ 1758.051964][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1758.057048][ C0] RIP: 0023:0xf7f53569 [ 1758.061095][ C0] Code: Bad RIP value. [ 1758.065143][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1758.073526][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1758.081469][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1758.089432][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1758.097390][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1758.105336][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.113315][ C0] syz-executor.5 S29944 27059 7432 0x20020000 [ 1758.119620][ C0] Call Trace: [ 1758.122887][ C0] __schedule+0x8e1/0x1eb0 [ 1758.127283][ C0] ? io_schedule_timeout+0x140/0x140 [ 1758.132595][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1758.138050][ C0] schedule+0xd0/0x2a0 [ 1758.142113][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1758.147204][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1758.152382][ C0] futex_wait+0x1df/0x560 [ 1758.156689][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1758.161701][ C0] ? wake_up_q+0xa3/0x100 [ 1758.166021][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1758.171258][ C0] ? futex_wake+0x155/0x490 [ 1758.175805][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1758.181782][ C0] do_futex+0x15b/0x1a60 [ 1758.186007][ C0] ? lock_acquire+0x1f1/0xad0 [ 1758.190661][ C0] ? __might_fault+0xef/0x1d0 [ 1758.195316][ C0] ? find_held_lock+0x2d/0x110 [ 1758.200078][ C0] ? futex_exit_release+0x220/0x220 [ 1758.205258][ C0] ? lock_downgrade+0x820/0x820 [ 1758.210085][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1758.216325][ C0] ? __might_fault+0x190/0x1d0 [ 1758.221124][ C0] ? _copy_to_user+0x126/0x160 [ 1758.225923][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1758.231364][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.236294][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1758.241959][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.246873][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1758.251999][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1758.257126][ C0] do_fast_syscall_32+0x7f/0x120 [ 1758.262050][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1758.267133][ C0] RIP: 0023:0xf7f53569 [ 1758.271169][ C0] Code: Bad RIP value. [ 1758.275219][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1758.283603][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1758.291549][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1758.299516][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1758.307462][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1758.315406][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.323363][ C0] syz-executor.5 S29944 27078 7432 0x20020000 [ 1758.329686][ C0] Call Trace: [ 1758.332954][ C0] __schedule+0x8e1/0x1eb0 [ 1758.337350][ C0] ? io_schedule_timeout+0x140/0x140 [ 1758.342611][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1758.348050][ C0] schedule+0xd0/0x2a0 [ 1758.352108][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1758.357192][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1758.362463][ C0] futex_wait+0x1df/0x560 [ 1758.366779][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1758.371787][ C0] ? wake_up_q+0xa3/0x100 [ 1758.376106][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1758.381286][ C0] ? futex_wake+0x155/0x490 [ 1758.385808][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1758.391973][ C0] do_futex+0x15b/0x1a60 [ 1758.399155][ C0] ? lock_acquire+0x1f1/0xad0 [ 1758.403811][ C0] ? __might_fault+0xef/0x1d0 [ 1758.408466][ C0] ? find_held_lock+0x2d/0x110 [ 1758.413206][ C0] ? futex_exit_release+0x220/0x220 [ 1758.418382][ C0] ? lock_downgrade+0x820/0x820 [ 1758.423223][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1758.429443][ C0] ? __might_fault+0x190/0x1d0 [ 1758.434183][ C0] ? _copy_to_user+0x126/0x160 [ 1758.438936][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1758.444391][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1758.449911][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1758.455780][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.460693][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1758.465788][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1758.470887][ C0] do_fast_syscall_32+0x7f/0x120 [ 1758.475803][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1758.480890][ C0] RIP: 0023:0xf7f53569 [ 1758.484937][ C0] Code: Bad RIP value. [ 1758.488993][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1758.497387][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1758.505333][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1758.513290][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1758.521235][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1758.529180][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.537137][ C0] syz-executor.2 S29944 27102 7031 0x20020000 [ 1758.543447][ C0] Call Trace: [ 1758.546733][ C0] __schedule+0x8e1/0x1eb0 [ 1758.551145][ C0] ? io_schedule_timeout+0x140/0x140 [ 1758.556415][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1758.561856][ C0] schedule+0xd0/0x2a0 [ 1758.565905][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1758.570989][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1758.576159][ C0] ? futex_wake+0x1b5/0x490 [ 1758.580637][ C0] ? find_held_lock+0x2d/0x110 [ 1758.585374][ C0] futex_wait+0x1df/0x560 [ 1758.589680][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1758.594690][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1758.599603][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1758.604838][ C0] ? futex_wake+0x155/0x490 [ 1758.609321][ C0] ? do_wp_page+0x8e7/0x1950 [ 1758.613887][ C0] do_futex+0x15b/0x1a60 [ 1758.618106][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1758.623277][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1758.628101][ C0] ? do_wp_page+0x16a/0x1950 [ 1758.632669][ C0] ? futex_exit_release+0x220/0x220 [ 1758.637842][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1758.643186][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1758.648103][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1758.653099][ C0] ? find_held_lock+0x2d/0x110 [ 1758.657839][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1758.663010][ C0] ? __up_read+0x1a1/0x7b0 [ 1758.667416][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1758.672851][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1758.678384][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.683295][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.688206][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1758.693295][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1758.698554][ C0] do_fast_syscall_32+0x7f/0x120 [ 1758.703473][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1758.708556][ C0] RIP: 0023:0xf7f91569 [ 1758.712592][ C0] Code: Bad RIP value. [ 1758.716631][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1758.725013][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1758.732969][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1758.741020][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1758.748964][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1758.756910][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.764868][ C0] syz-executor.2 S29944 27154 7031 0x20020000 [ 1758.771174][ C0] Call Trace: [ 1758.774439][ C0] __schedule+0x8e1/0x1eb0 [ 1758.778836][ C0] ? io_schedule_timeout+0x140/0x140 [ 1758.784116][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1758.789577][ C0] schedule+0xd0/0x2a0 [ 1758.793635][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1758.798726][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1758.803909][ C0] futex_wait+0x1df/0x560 [ 1758.808218][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1758.813266][ C0] ? mark_lock+0xbc/0x1710 [ 1758.817670][ C0] ? hash_futex+0x12/0x200 [ 1758.822082][ C0] ? futex_wake+0x155/0x490 [ 1758.826567][ C0] ? do_wp_page+0x8e7/0x1950 [ 1758.831132][ C0] do_futex+0x15b/0x1a60 [ 1758.835352][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1758.840522][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1758.845343][ C0] ? do_wp_page+0x16a/0x1950 [ 1758.849906][ C0] ? futex_exit_release+0x220/0x220 [ 1758.855077][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1758.860419][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1758.865333][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1758.870343][ C0] ? find_held_lock+0x2d/0x110 [ 1758.875081][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1758.880253][ C0] ? __up_read+0x1a1/0x7b0 [ 1758.884643][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1758.890089][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1758.895621][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.900533][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1758.905455][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1758.910545][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1758.915629][ C0] do_fast_syscall_32+0x7f/0x120 [ 1758.920541][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1758.925624][ C0] RIP: 0023:0xf7f91569 [ 1758.929660][ C0] Code: Bad RIP value. [ 1758.933712][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1758.942094][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1758.950038][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1758.957982][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1758.965926][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1758.973871][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.981827][ C0] syz-executor.2 S29944 27219 7031 0x20020000 [ 1758.988145][ C0] Call Trace: [ 1758.991409][ C0] __schedule+0x8e1/0x1eb0 [ 1758.995803][ C0] ? io_schedule_timeout+0x140/0x140 [ 1759.001062][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1759.006497][ C0] schedule+0xd0/0x2a0 [ 1759.010540][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1759.015622][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1759.020793][ C0] futex_wait+0x1df/0x560 [ 1759.025097][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1759.030096][ C0] ? mark_lock+0xbc/0x1710 [ 1759.034485][ C0] ? hash_futex+0x12/0x200 [ 1759.039048][ C0] ? futex_wake+0x155/0x490 [ 1759.043530][ C0] ? do_wp_page+0x8e7/0x1950 [ 1759.048097][ C0] do_futex+0x15b/0x1a60 [ 1759.052335][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1759.057504][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1759.062326][ C0] ? do_wp_page+0x16a/0x1950 [ 1759.066890][ C0] ? futex_exit_release+0x220/0x220 [ 1759.072059][ C0] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1759.077401][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1759.082316][ C0] ? handle_mm_fault+0xad9/0x43f0 [ 1759.087314][ C0] ? find_held_lock+0x2d/0x110 [ 1759.092052][ C0] ? do_user_addr_fault+0x5e6/0xd00 [ 1759.097221][ C0] ? __up_read+0x1a1/0x7b0 [ 1759.101615][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1759.107052][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1759.112570][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1759.117480][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1759.122392][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1759.127478][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1759.132564][ C0] do_fast_syscall_32+0x7f/0x120 [ 1759.137478][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1759.142560][ C0] RIP: 0023:0xf7f91569 [ 1759.146597][ C0] Code: Bad RIP value. [ 1759.150646][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1759.159027][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1759.166971][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1759.174926][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1759.182872][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1759.190814][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.198783][ C0] syz-executor.2 S29744 28026 7031 0x20020000 [ 1759.205103][ C0] Call Trace: [ 1759.208375][ C0] __schedule+0x8e1/0x1eb0 [ 1759.212803][ C0] ? io_schedule_timeout+0x140/0x140 [ 1759.218066][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1759.223509][ C0] schedule+0xd0/0x2a0 [ 1759.227562][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1759.232649][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1759.237840][ C0] ? futex_wake+0x1b5/0x490 [ 1759.242342][ C0] ? find_held_lock+0x2d/0x110 [ 1759.247093][ C0] futex_wait+0x1df/0x560 [ 1759.251398][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1759.256395][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1759.261306][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1759.266481][ C0] ? futex_wake+0x155/0x490 [ 1759.270964][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1759.276918][ C0] do_futex+0x15b/0x1a60 [ 1759.281139][ C0] ? lock_acquire+0x1f1/0xad0 [ 1759.285786][ C0] ? __might_fault+0xef/0x1d0 [ 1759.290436][ C0] ? find_held_lock+0x2d/0x110 [ 1759.295173][ C0] ? futex_exit_release+0x220/0x220 [ 1759.300344][ C0] ? lock_downgrade+0x820/0x820 [ 1759.305182][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1759.311399][ C0] ? __might_fault+0x190/0x1d0 [ 1759.316151][ C0] ? _copy_to_user+0x126/0x160 [ 1759.320891][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1759.326325][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1759.331845][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1759.337729][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1759.342726][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1759.347832][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1759.352916][ C0] do_fast_syscall_32+0x7f/0x120 [ 1759.357852][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1759.362947][ C0] RIP: 0023:0xf7f91569 [ 1759.366998][ C0] Code: Bad RIP value. [ 1759.371043][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1759.379447][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1759.387401][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1759.395350][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1759.403295][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1759.411240][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.419198][ C0] syz-executor.2 S29944 28030 7031 0x20020000 [ 1759.425512][ C0] Call Trace: [ 1759.428804][ C0] __schedule+0x8e1/0x1eb0 [ 1759.433198][ C0] ? io_schedule_timeout+0x140/0x140 [ 1759.438458][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1759.443895][ C0] schedule+0xd0/0x2a0 [ 1759.447944][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1759.453029][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1759.458215][ C0] futex_wait+0x1df/0x560 [ 1759.462520][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1759.467541][ C0] ? wake_up_q+0xa3/0x100 [ 1759.471847][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1759.477019][ C0] ? futex_wake+0x155/0x490 [ 1759.481507][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1759.487461][ C0] do_futex+0x15b/0x1a60 [ 1759.491681][ C0] ? lock_acquire+0x1f1/0xad0 [ 1759.496331][ C0] ? __might_fault+0xef/0x1d0 [ 1759.500995][ C0] ? find_held_lock+0x2d/0x110 [ 1759.505732][ C0] ? futex_exit_release+0x220/0x220 [ 1759.510905][ C0] ? lock_downgrade+0x820/0x820 [ 1759.515729][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1759.521958][ C0] ? __might_fault+0x190/0x1d0 [ 1759.526707][ C0] ? _copy_to_user+0x126/0x160 [ 1759.531450][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1759.536885][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1759.541820][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1759.547350][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1759.552261][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1759.557363][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1759.562450][ C0] do_fast_syscall_32+0x7f/0x120 [ 1759.567365][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1759.572449][ C0] RIP: 0023:0xf7f91569 [ 1759.576487][ C0] Code: Bad RIP value. [ 1759.580546][ C0] RSP: 002b:00000000f5d3b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1759.589030][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1759.596983][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1759.604930][ C0] RBP: 00000000f5d3b228 R08: 0000000000000000 R09: 0000000000000000 [ 1759.612878][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1759.620821][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.628786][ C0] syz-executor.2 S29928 28035 7031 0x20020000 [ 1759.635089][ C0] Call Trace: [ 1759.638494][ C0] __schedule+0x8e1/0x1eb0 [ 1759.642935][ C0] ? io_schedule_timeout+0x140/0x140 [ 1759.648207][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1759.653651][ C0] schedule+0xd0/0x2a0 [ 1759.657697][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1759.662781][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1759.667954][ C0] futex_wait+0x1df/0x560 [ 1759.672272][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1759.677273][ C0] ? wake_up_q+0xa3/0x100 [ 1759.681587][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1759.686762][ C0] ? futex_wake+0x155/0x490 [ 1759.691265][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1759.697232][ C0] do_futex+0x15b/0x1a60 [ 1759.701453][ C0] ? lock_acquire+0x1f1/0xad0 [ 1759.706103][ C0] ? __might_fault+0xef/0x1d0 [ 1759.710754][ C0] ? find_held_lock+0x2d/0x110 [ 1759.715491][ C0] ? futex_exit_release+0x220/0x220 [ 1759.720688][ C0] ? lock_downgrade+0x820/0x820 [ 1759.725526][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1759.731745][ C0] ? __might_fault+0x190/0x1d0 [ 1759.736481][ C0] ? _copy_to_user+0x126/0x160 [ 1759.741244][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1759.746679][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1759.752196][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1759.758063][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1759.762989][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1759.768093][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1759.773179][ C0] do_fast_syscall_32+0x7f/0x120 [ 1759.778092][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1759.783175][ C0] RIP: 0023:0xf7f91569 [ 1759.787210][ C0] Code: Bad RIP value. [ 1759.791245][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1759.799631][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1759.807663][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1759.815607][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1759.823563][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1759.831507][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.839463][ C0] syz-executor.2 S29944 28061 7031 0x20020000 [ 1759.845770][ C0] Call Trace: [ 1759.849035][ C0] __schedule+0x8e1/0x1eb0 [ 1759.853428][ C0] ? io_schedule_timeout+0x140/0x140 [ 1759.858686][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1759.864122][ C0] schedule+0xd0/0x2a0 [ 1759.868190][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1759.873271][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1759.878451][ C0] futex_wait+0x1df/0x560 [ 1759.882755][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1759.887770][ C0] ? wake_up_q+0xa3/0x100 [ 1759.892071][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1759.897241][ C0] ? futex_wake+0x155/0x490 [ 1759.901796][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1759.907766][ C0] do_futex+0x15b/0x1a60 [ 1759.911999][ C0] ? lock_acquire+0x1f1/0xad0 [ 1759.916652][ C0] ? __might_fault+0xef/0x1d0 [ 1759.921302][ C0] ? find_held_lock+0x2d/0x110 [ 1759.926054][ C0] ? futex_exit_release+0x220/0x220 [ 1759.931262][ C0] ? lock_downgrade+0x820/0x820 [ 1759.936088][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1759.942308][ C0] ? __might_fault+0x190/0x1d0 [ 1759.947045][ C0] ? _copy_to_user+0x126/0x160 [ 1759.951821][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1759.957367][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1759.962904][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1759.968832][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1759.973756][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1759.978875][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1759.984917][ C0] do_fast_syscall_32+0x7f/0x120 [ 1759.989837][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1759.994922][ C0] RIP: 0023:0xf7f91569 [ 1759.998959][ C0] Code: Bad RIP value. [ 1760.002999][ C0] RSP: 002b:00000000f5d8c12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1760.011382][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1760.019329][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1760.027361][ C0] RBP: 00000000f5d8c228 R08: 0000000000000000 R09: 0000000000000000 [ 1760.035312][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1760.043255][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.051213][ C0] syz-executor.4 T29664 28458 7392 0x20024004 [ 1760.057518][ C0] Call Trace: [ 1760.060783][ C0] __schedule+0x8e1/0x1eb0 [ 1760.065178][ C0] ? io_schedule_timeout+0x140/0x140 [ 1760.070435][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1760.075612][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1760.081569][ C0] schedule+0xd0/0x2a0 [ 1760.085621][ C0] do_signal_stop+0x32f/0x840 [ 1760.090274][ C0] get_signal+0xc0b/0x1fc0 [ 1760.094672][ C0] do_signal+0x82/0x2520 [ 1760.098888][ C0] ? kill_something_info+0x320/0x320 [ 1760.104147][ C0] ? from_kuid+0xc0/0xc0 [ 1760.108364][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1760.113709][ C0] ? do_tkill+0x186/0x1f0 [ 1760.118015][ C0] ? do_send_specific+0x330/0x330 [ 1760.123030][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1760.128812][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1760.134769][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1760.140468][ C0] do_fast_syscall_32+0x7f/0x120 [ 1760.145392][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1760.150486][ C0] RIP: 0023:0xf7fd7569 [ 1760.154521][ C0] Code: Bad RIP value. [ 1760.158559][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ee [ 1760.166954][ C0] RAX: 0000000000000000 RBX: 00000000000013f7 RCX: 0000000000000014 [ 1760.174898][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1760.182842][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1760.190797][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1760.198836][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.206816][ C0] syz-executor.4 T29664 28476 7392 0x20024004 [ 1760.213241][ C0] Call Trace: [ 1760.216669][ C0] __schedule+0x8e1/0x1eb0 [ 1760.221071][ C0] ? io_schedule_timeout+0x140/0x140 [ 1760.226333][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1760.231509][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1760.237467][ C0] schedule+0xd0/0x2a0 [ 1760.241517][ C0] do_signal_stop+0x32f/0x840 [ 1760.246172][ C0] get_signal+0xc0b/0x1fc0 [ 1760.250573][ C0] do_signal+0x82/0x2520 [ 1760.254830][ C0] ? kill_something_info+0x320/0x320 [ 1760.260090][ C0] ? from_kuid+0xc0/0xc0 [ 1760.264317][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1760.269662][ C0] ? do_tkill+0x186/0x1f0 [ 1760.273965][ C0] ? do_send_specific+0x330/0x330 [ 1760.278970][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1760.284752][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1760.290720][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1760.296415][ C0] do_fast_syscall_32+0x7f/0x120 [ 1760.301341][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1760.306424][ C0] RIP: 0023:0xf7fd7569 [ 1760.310464][ C0] Code: Bad RIP value. [ 1760.314500][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ee [ 1760.322883][ C0] RAX: 0000000000000000 RBX: 00000000000013fb RCX: 0000000000000014 [ 1760.330826][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1760.338770][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1760.346714][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1760.354657][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.362612][ C0] syz-executor.4 T30032 28511 7392 0x20024004 [ 1760.368918][ C0] Call Trace: [ 1760.372260][ C0] __schedule+0x8e1/0x1eb0 [ 1760.376666][ C0] ? io_schedule_timeout+0x140/0x140 [ 1760.381945][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1760.387139][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1760.393102][ C0] schedule+0xd0/0x2a0 [ 1760.397154][ C0] do_signal_stop+0x32f/0x840 [ 1760.401860][ C0] get_signal+0xc0b/0x1fc0 [ 1760.406260][ C0] do_signal+0x82/0x2520 [ 1760.410478][ C0] ? kill_something_info+0x320/0x320 [ 1760.415737][ C0] ? from_kuid+0xc0/0xc0 [ 1760.419955][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1760.425301][ C0] ? do_tkill+0x186/0x1f0 [ 1760.429604][ C0] ? do_send_specific+0x330/0x330 [ 1760.434652][ C0] ? __prepare_exit_to_usermode+0xcc/0x1f0 [ 1760.440432][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1760.446388][ C0] __prepare_exit_to_usermode+0x156/0x1f0 [ 1760.452082][ C0] do_fast_syscall_32+0x7f/0x120 [ 1760.456992][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1760.462088][ C0] RIP: 0023:0xf7fd7569 [ 1760.466124][ C0] Code: Bad RIP value. [ 1760.470172][ C0] RSP: 002b:00000000f5dd20cc EFLAGS: 00000296 ORIG_RAX: 00000000000000ee [ 1760.478553][ C0] RAX: 0000000000000000 RBX: 00000000000013ff RCX: 0000000000000014 [ 1760.486496][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1760.494440][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1760.502470][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1760.510428][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.518396][ C0] syz-executor.5 S28712 29121 7432 0x20020000 [ 1760.524715][ C0] Call Trace: [ 1760.528005][ C0] __schedule+0x8e1/0x1eb0 [ 1760.532410][ C0] ? io_schedule_timeout+0x140/0x140 [ 1760.537669][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1760.543110][ C0] schedule+0xd0/0x2a0 [ 1760.547163][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1760.552248][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1760.557435][ C0] futex_wait+0x1df/0x560 [ 1760.561739][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1760.566740][ C0] ? mark_lock+0xbc/0x1710 [ 1760.571130][ C0] ? hash_futex+0x12/0x200 [ 1760.575517][ C0] ? futex_wake+0x155/0x490 [ 1760.580006][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1760.585962][ C0] do_futex+0x15b/0x1a60 [ 1760.590182][ C0] ? lock_acquire+0x1f1/0xad0 [ 1760.594831][ C0] ? __might_fault+0xef/0x1d0 [ 1760.599482][ C0] ? find_held_lock+0x2d/0x110 [ 1760.604218][ C0] ? futex_exit_release+0x220/0x220 [ 1760.609389][ C0] ? lock_downgrade+0x820/0x820 [ 1760.614226][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1760.620443][ C0] ? __might_fault+0x190/0x1d0 [ 1760.625180][ C0] ? _copy_to_user+0x126/0x160 [ 1760.629921][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1760.635359][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1760.640879][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1760.646750][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1760.651665][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1760.656750][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1760.661833][ C0] do_fast_syscall_32+0x7f/0x120 [ 1760.666744][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1760.671825][ C0] RIP: 0023:0xf7f53569 [ 1760.675860][ C0] Code: Bad RIP value. [ 1760.679897][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1760.688280][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1760.696237][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1760.704181][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1760.712125][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1760.720069][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.728111][ C0] syz-executor.5 S29944 29129 7432 0x20020000 [ 1760.734420][ C0] Call Trace: [ 1760.737688][ C0] __schedule+0x8e1/0x1eb0 [ 1760.742083][ C0] ? io_schedule_timeout+0x140/0x140 [ 1760.747353][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1760.752789][ C0] schedule+0xd0/0x2a0 [ 1760.756833][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1760.761929][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1760.767102][ C0] futex_wait+0x1df/0x560 [ 1760.771404][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1760.776401][ C0] ? wake_up_q+0xa3/0x100 [ 1760.780709][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1760.785881][ C0] ? futex_wake+0x155/0x490 [ 1760.790376][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1760.796433][ C0] do_futex+0x15b/0x1a60 [ 1760.800654][ C0] ? lock_acquire+0x1f1/0xad0 [ 1760.805304][ C0] ? __might_fault+0xef/0x1d0 [ 1760.809953][ C0] ? find_held_lock+0x2d/0x110 [ 1760.814692][ C0] ? futex_exit_release+0x220/0x220 [ 1760.819865][ C0] ? lock_downgrade+0x820/0x820 [ 1760.824863][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1760.831079][ C0] ? __might_fault+0x190/0x1d0 [ 1760.835826][ C0] ? _copy_to_user+0x126/0x160 [ 1760.840567][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1760.846012][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1760.851531][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1760.857419][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1760.862330][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1760.867419][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1760.872520][ C0] do_fast_syscall_32+0x7f/0x120 [ 1760.877432][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1760.882512][ C0] RIP: 0023:0xf7f53569 [ 1760.886559][ C0] Code: Bad RIP value. [ 1760.890708][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1760.899104][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1760.907057][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1760.915004][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1760.922949][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1760.930905][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.938866][ C0] syz-executor.5 S29944 29136 7432 0x20020000 [ 1760.945175][ C0] Call Trace: [ 1760.948460][ C0] __schedule+0x8e1/0x1eb0 [ 1760.952857][ C0] ? io_schedule_timeout+0x140/0x140 [ 1760.958116][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1760.963552][ C0] schedule+0xd0/0x2a0 [ 1760.967598][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1760.972690][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1760.977866][ C0] futex_wait+0x1df/0x560 [ 1760.982170][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1760.987185][ C0] ? wake_up_q+0xa3/0x100 [ 1760.991489][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1760.996660][ C0] ? futex_wake+0x155/0x490 [ 1761.001164][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1761.007119][ C0] do_futex+0x15b/0x1a60 [ 1761.011339][ C0] ? lock_acquire+0x1f1/0xad0 [ 1761.015989][ C0] ? __might_fault+0xef/0x1d0 [ 1761.020638][ C0] ? find_held_lock+0x2d/0x110 [ 1761.025376][ C0] ? futex_exit_release+0x220/0x220 [ 1761.030562][ C0] ? lock_downgrade+0x820/0x820 [ 1761.035388][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1761.041617][ C0] ? __might_fault+0x190/0x1d0 [ 1761.046366][ C0] ? _copy_to_user+0x126/0x160 [ 1761.051106][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1761.056555][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1761.061479][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1761.066998][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1761.071911][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1761.077002][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1761.082088][ C0] do_fast_syscall_32+0x7f/0x120 [ 1761.087020][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1761.092102][ C0] RIP: 0023:0xf7f53569 [ 1761.096140][ C0] Code: Bad RIP value. [ 1761.100177][ C0] RSP: 002b:00000000f5d4e12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1761.108562][ C0] RAX: ffffffffffffffda RBX: 000000000819af68 RCX: 0000000000000080 [ 1761.116506][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819af6c [ 1761.124538][ C0] RBP: 00000000f5d4e228 R08: 0000000000000000 R09: 0000000000000000 [ 1761.132521][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1761.140467][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1761.148424][ C0] agetty S28144 29724 1 0x00000000 [ 1761.154732][ C0] Call Trace: [ 1761.158002][ C0] __schedule+0x8e1/0x1eb0 [ 1761.162400][ C0] ? io_schedule_timeout+0x140/0x140 [ 1761.167676][ C0] ? lock_acquire+0x1f1/0xad0 [ 1761.172355][ C0] schedule+0xd0/0x2a0 [ 1761.176409][ C0] schedule_timeout+0x1d8/0x250 [ 1761.181240][ C0] ? usleep_range+0x170/0x170 [ 1761.185903][ C0] ? find_held_lock+0x2d/0x110 [ 1761.190640][ C0] ? n_tty_read+0x1505/0x1a30 [ 1761.195291][ C0] ? __up_read+0x1a1/0x7b0 [ 1761.199683][ C0] ? _down_write_nest_lock+0x150/0x150 [ 1761.205116][ C0] wait_woken+0x1ef/0x250 [ 1761.209488][ C0] ? woken_wake_function+0x70/0x70 [ 1761.214583][ C0] n_tty_read+0x1519/0x1a30 [ 1761.219069][ C0] ? aa_file_perm+0x5e2/0x1100 [ 1761.223816][ C0] ? __ldsem_down_read_nested+0xe3/0x880 [ 1761.229428][ C0] ? copy_from_read_buf+0x4a0/0x4a0 [ 1761.234638][ C0] ? fsnotify_parent+0xb7/0x2b0 [ 1761.239469][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1761.244380][ C0] ? __init_waitqueue_head+0x110/0x110 [ 1761.249818][ C0] tty_read+0x190/0x290 [ 1761.253946][ C0] ? copy_from_read_buf+0x4a0/0x4a0 [ 1761.259139][ C0] ? do_SAK+0x70/0x70 [ 1761.263112][ C0] __vfs_read+0x76/0x100 [ 1761.267341][ C0] vfs_read+0x1f6/0x420 [ 1761.271478][ C0] ksys_read+0x12d/0x250 [ 1761.275739][ C0] ? kernel_write+0x120/0x120 [ 1761.280393][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1761.285305][ C0] ? do_syscall_64+0x1c/0xe0 [ 1761.289869][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1761.295827][ C0] do_syscall_64+0x60/0xe0 [ 1761.300222][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1761.306088][ C0] RIP: 0033:0x7f4688c97910 [ 1761.310473][ C0] Code: Bad RIP value. [ 1761.314549][ C0] RSP: 002b:00007ffd58ad21f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1761.322934][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4688c97910 [ 1761.330879][ C0] RDX: 0000000000000001 RSI: 00007ffd58ad225f RDI: 0000000000000000 [ 1761.338826][ C0] RBP: 0000000000000008 R08: ffffffffffffff98 R09: 00007ffd58ad10b0 [ 1761.346772][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.354722][ C0] R13: 00005562b28e4900 R14: 00007ffd58ad2260 R15: 000000000000000a [ 1761.362679][ C0] syz-executor.2 R running task 28360 29773 7031 0x20024000 [ 1761.370551][ C0] Call Trace: [ 1761.373808][ C0] [ 1761.376659][ C0] sched_show_task.cold+0x2da/0x33e [ 1761.381851][ C0] ? cpu_cgroup_can_attach+0x110/0x110 [ 1761.387293][ C0] ? cpumask_next+0x3c/0x40 [ 1761.391895][ C0] ? touch_all_softlockup_watchdogs+0xbd/0x100 [ 1761.398059][ C0] show_state_filter+0x14a/0x1d5 [ 1761.403024][ C0] ? fn_caps_on+0x90/0x90 [ 1761.407332][ C0] k_spec+0xdc/0x120 [ 1761.411205][ C0] kbd_event+0xbc7/0x1830 [ 1761.415526][ C0] ? fn_send_intr+0x1c0/0x1c0 [ 1761.420181][ C0] ? lock_release+0x8d0/0x8d0 [ 1761.424836][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1761.430962][ C0] ? fn_send_intr+0x1c0/0x1c0 [ 1761.435660][ C0] input_to_handler+0x3b9/0x4c0 [ 1761.440514][ C0] input_pass_values.part.0+0x284/0x700 [ 1761.446037][ C0] input_handle_event+0x324/0x1390 [ 1761.451139][ C0] input_event+0x8e/0xb0 [ 1761.455360][ C0] hidinput_report_event+0xae/0x100 [ 1761.460535][ C0] hid_report_raw_event+0x9df/0x11d0 [ 1761.465803][ C0] hid_input_report+0x360/0x4c0 [ 1761.470646][ C0] hid_irq_in+0x50e/0x690 [ 1761.474956][ C0] __usb_hcd_giveback_urb+0x30d/0x540 [ 1761.480305][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 1761.485517][ C0] dummy_timer+0x11ea/0x2f9f [ 1761.490451][ C0] ? lock_downgrade+0x820/0x820 [ 1761.495286][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 1761.500027][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1761.504942][ C0] call_timer_fn+0x1ac/0x760 [ 1761.509520][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 1761.514279][ C0] ? add_timer_on+0x490/0x490 [ 1761.518931][ C0] ? lock_downgrade+0x820/0x820 [ 1761.523759][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1761.528944][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 1761.534897][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1761.539895][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 1761.544634][ C0] __run_timers.part.0+0x54c/0xa20 [ 1761.549725][ C0] ? call_timer_fn+0x760/0x760 [ 1761.554466][ C0] ? clockevents_program_event+0x12b/0x350 [ 1761.560510][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1761.565688][ C0] ? sched_clock+0x2a/0x40 [ 1761.570082][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1761.574909][ C0] run_timer_softirq+0xae/0x1a0 [ 1761.579736][ C0] __do_softirq+0x34c/0xa60 [ 1761.584234][ C0] asm_call_on_stack+0xf/0x20 [ 1761.588902][ C0] [ 1761.591817][ C0] do_softirq_own_stack+0x111/0x170 [ 1761.597001][ C0] irq_exit_rcu+0x229/0x270 [ 1761.601493][ C0] sysvec_apic_timer_interrupt+0x54/0x120 [ 1761.607188][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1761.613153][ C0] RIP: 0010:_raw_spin_unlock_irq+0x4b/0x80 [ 1761.618939][ C0] Code: c0 50 e0 b4 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 4e ad cd 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 3b 3f 68 f9 65 8b 05 a4 cb 1a 78 85 c0 74 02 5d [ 1761.638528][ C0] RSP: 0018:ffffc90005927b38 EFLAGS: 00000286 [ 1761.644573][ C0] RAX: 1ffffffff1369c0a RBX: ffff888053d38240 RCX: 0000000000000000 [ 1761.652520][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff87e732df [ 1761.660468][ C0] RBP: ffff8880ae635e00 R08: 0000000000000000 R09: 0000000000000000 [ 1761.668421][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880ae635e00 [ 1761.676367][ C0] R13: ffff88803ae7c040 R14: 0000000000000000 R15: 0000000000000001 [ 1761.684332][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1761.689507][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1761.694680][ C0] finish_task_switch+0x147/0x750 [ 1761.699718][ C0] ? finish_task_switch+0x119/0x750 [ 1761.704890][ C0] ? __switch_to+0x4fb/0xe80 [ 1761.709463][ C0] __schedule+0x8e9/0x1eb0 [ 1761.713861][ C0] ? io_schedule_timeout+0x140/0x140 [ 1761.719125][ C0] schedule+0xd0/0x2a0 [ 1761.723170][ C0] do_nanosleep+0x222/0x650 [ 1761.727647][ C0] ? find_held_lock+0x2d/0x110 [ 1761.732388][ C0] ? schedule_timeout_idle+0x80/0x80 [ 1761.737649][ C0] ? __free_object+0xdd0/0xdd0 [ 1761.742386][ C0] ? memset+0x20/0x40 [ 1761.746346][ C0] ? __hrtimer_init+0x12c/0x260 [ 1761.751176][ C0] hrtimer_nanosleep+0x1f6/0x430 [ 1761.756086][ C0] ? nanosleep_copyout+0x100/0x100 [ 1761.761173][ C0] ? _copy_from_user+0x138/0x190 [ 1761.766088][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 1761.772043][ C0] ? __do_sys_adjtimex+0x120/0x120 [ 1761.777128][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1761.782298][ C0] ? hrtimer_interrupt+0x6ea/0x930 [ 1761.787386][ C0] __ia32_sys_nanosleep_time32+0x1e6/0x270 [ 1761.793182][ C0] ? __x64_sys_nanosleep_time32+0x260/0x260 [ 1761.799064][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1761.804260][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1761.809347][ C0] do_fast_syscall_32+0x7f/0x120 [ 1761.814283][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1761.819377][ C0] RIP: 0023:0xf7f91569 [ 1761.823414][ C0] Code: Bad RIP value. [ 1761.827449][ C0] RSP: 002b:00000000086afbb8 EFLAGS: 00000212 ORIG_RAX: 00000000000000a2 [ 1761.835853][ C0] RAX: ffffffffffffffda RBX: 00000000086afbe8 RCX: 0000000000000000 [ 1761.843798][ C0] RDX: 000000000819b620 RSI: 000000000819af60 RDI: 0000000000192877 [ 1761.851756][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1761.859756][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1761.867707][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1761.875714][ C0] syz-executor.2 S28736 29774 7031 0x20020000 [ 1761.882027][ C0] Call Trace: [ 1761.885301][ C0] __schedule+0x8e1/0x1eb0 [ 1761.889698][ C0] ? io_schedule_timeout+0x140/0x140 [ 1761.894960][ C0] schedule+0xd0/0x2a0 [ 1761.899003][ C0] schedule_timeout+0x1d8/0x250 [ 1761.903827][ C0] ? usleep_range+0x170/0x170 [ 1761.908481][ C0] ? lock_downgrade+0x820/0x820 [ 1761.913305][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1761.918308][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1761.923478][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1761.929432][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1761.934438][ C0] wait_for_completion_interruptible+0x162/0x2e0 [ 1761.940825][ C0] ? wait_for_completion_killable+0x310/0x310 [ 1761.946871][ C0] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1761.952465][ C0] raw_process_ep_io+0x5af/0x880 [ 1761.957412][ C0] ? raw_process_ep0_io+0x740/0x740 [ 1761.962599][ C0] ? memdup_user+0x7c/0xd0 [ 1761.967003][ C0] raw_ioctl+0x96d/0x1ca2 [ 1761.971321][ C0] ? gadget_bind+0x780/0x780 [ 1761.975894][ C0] ? gadget_bind+0x780/0x780 [ 1761.980463][ C0] __do_compat_sys_ioctl+0x1d3/0x230 [ 1761.985729][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1761.990817][ C0] do_fast_syscall_32+0x7f/0x120 [ 1761.995764][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1762.000849][ C0] RIP: 0023:0xf7f91569 [ 1762.004885][ C0] Code: Bad RIP value. [ 1762.008967][ C0] RSP: 002b:00000000f5d8b088 EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1762.017351][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507 [ 1762.025303][ C0] RDX: 00000000f5d8b0c4 RSI: 0000000000000000 RDI: 0000000000000c6a [ 1762.033312][ C0] RBP: 00000000f5d8c168 R08: 0000000000000000 R09: 0000000000000000 [ 1762.041264][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1762.049215][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.057176][ C0] syz-executor.2 S29840 29844 7031 0x20020000 [ 1762.063487][ C0] Call Trace: [ 1762.066755][ C0] __schedule+0x8e1/0x1eb0 [ 1762.071150][ C0] ? io_schedule_timeout+0x140/0x140 [ 1762.076461][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1762.081897][ C0] schedule+0xd0/0x2a0 [ 1762.085945][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1762.091040][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1762.096226][ C0] futex_wait+0x1df/0x560 [ 1762.100530][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1762.105529][ C0] ? wake_up_q+0xa3/0x100 [ 1762.109831][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1762.115002][ C0] ? futex_wake+0x155/0x490 [ 1762.119489][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1762.125441][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1762.130529][ C0] do_futex+0x15b/0x1a60 [ 1762.134748][ C0] ? lock_acquire+0x1f1/0xad0 [ 1762.139399][ C0] ? __might_fault+0xef/0x1d0 [ 1762.144047][ C0] ? find_held_lock+0x2d/0x110 [ 1762.148796][ C0] ? futex_exit_release+0x220/0x220 [ 1762.153969][ C0] ? lock_downgrade+0x820/0x820 [ 1762.158796][ C0] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 1762.165014][ C0] ? __might_fault+0x190/0x1d0 [ 1762.169762][ C0] ? _copy_to_user+0x126/0x160 [ 1762.174505][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1762.179940][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1762.186260][ C0] ? __ia32_sys_clock_gettime32+0x165/0x240 [ 1762.192150][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1762.197067][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1762.202162][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1762.207270][ C0] do_fast_syscall_32+0x7f/0x120 [ 1762.212297][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1762.217438][ C0] RIP: 0023:0xf7f91569 [ 1762.221480][ C0] Code: Bad RIP value. [ 1762.225521][ C0] RSP: 002b:00000000f5d6b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1762.233908][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1762.241854][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1762.249842][ C0] RBP: 00000000f5d6b228 R08: 0000000000000000 R09: 0000000000000000 [ 1762.257786][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1762.265771][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.273732][ C0] syz-executor.1 S28360 29791 6979 0x20020000 [ 1762.280089][ C0] Call Trace: [ 1762.283359][ C0] __schedule+0x8e1/0x1eb0 [ 1762.287758][ C0] ? io_schedule_timeout+0x140/0x140 [ 1762.293159][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1762.298940][ C0] schedule+0xd0/0x2a0 [ 1762.302992][ C0] do_nanosleep+0x222/0x650 [ 1762.307469][ C0] ? find_held_lock+0x2d/0x110 [ 1762.312209][ C0] ? schedule_timeout_idle+0x80/0x80 [ 1762.317467][ C0] ? __free_object+0xdd0/0xdd0 [ 1762.322207][ C0] ? memset+0x20/0x40 [ 1762.326168][ C0] ? __hrtimer_init+0x12c/0x260 [ 1762.330995][ C0] hrtimer_nanosleep+0x1f6/0x430 [ 1762.335918][ C0] ? nanosleep_copyout+0x100/0x100 [ 1762.341013][ C0] ? _copy_from_user+0x138/0x190 [ 1762.345936][ C0] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 1762.351890][ C0] ? __do_sys_adjtimex+0x120/0x120 [ 1762.356983][ C0] ? get_old_timespec32+0x1f0/0x1f0 [ 1762.362160][ C0] ? hrtimer_interrupt+0x6ea/0x930 [ 1762.367248][ C0] __ia32_sys_nanosleep_time32+0x1e6/0x270 [ 1762.373048][ C0] ? __x64_sys_nanosleep_time32+0x260/0x260 [ 1762.378943][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1762.384069][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1762.389165][ C0] do_fast_syscall_32+0x7f/0x120 [ 1762.394081][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1762.399170][ C0] RIP: 0023:0xf7fa1569 [ 1762.403213][ C0] Code: Bad RIP value. [ 1762.407254][ C0] RSP: 002b:00000000086afbb8 EFLAGS: 00000212 ORIG_RAX: 00000000000000a2 [ 1762.415637][ C0] RAX: ffffffffffffffda RBX: 00000000086afbe8 RCX: 0000000000000000 [ 1762.423584][ C0] RDX: 000000000819b620 RSI: 000000000819af60 RDI: 00000000001928f7 [ 1762.431529][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1762.439474][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1762.447422][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.455380][ C0] syz-executor.1 S28736 29792 6979 0x20020000 [ 1762.461702][ C0] Call Trace: [ 1762.464987][ C0] __schedule+0x8e1/0x1eb0 [ 1762.469394][ C0] ? io_schedule_timeout+0x140/0x140 [ 1762.474676][ C0] schedule+0xd0/0x2a0 [ 1762.478726][ C0] schedule_timeout+0x1d8/0x250 [ 1762.483560][ C0] ? usleep_range+0x170/0x170 [ 1762.488222][ C0] ? lock_downgrade+0x820/0x820 [ 1762.493053][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1762.498053][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1762.503227][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1762.509181][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1762.514229][ C0] wait_for_completion_interruptible+0x162/0x2e0 [ 1762.520533][ C0] ? wait_for_completion_killable+0x310/0x310 [ 1762.526576][ C0] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1762.532099][ C0] raw_process_ep_io+0x5af/0x880 [ 1762.537014][ C0] ? raw_process_ep0_io+0x740/0x740 [ 1762.542300][ C0] ? memdup_user+0x7c/0xd0 [ 1762.546701][ C0] raw_ioctl+0x96d/0x1ca2 [ 1762.551012][ C0] ? gadget_bind+0x780/0x780 [ 1762.555588][ C0] ? gadget_bind+0x780/0x780 [ 1762.560159][ C0] __do_compat_sys_ioctl+0x1d3/0x230 [ 1762.565470][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1762.570565][ C0] do_fast_syscall_32+0x7f/0x120 [ 1762.575525][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1762.580611][ C0] RIP: 0023:0xf7fa1569 [ 1762.584647][ C0] Code: Bad RIP value. [ 1762.588685][ C0] RSP: 002b:00000000f5d9b088 EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1762.597080][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507 [ 1762.605028][ C0] RDX: 00000000f5d9b0c4 RSI: 0000000000000000 RDI: 0000000000000c6a [ 1762.612973][ C0] RBP: 00000000f5d9c168 R08: 0000000000000000 R09: 0000000000000000 [ 1762.620918][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1762.628863][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.637453][ C0] syz-executor.1 S29576 29847 6979 0x20020000 [ 1762.643761][ C0] Call Trace: [ 1762.647028][ C0] __schedule+0x8e1/0x1eb0 [ 1762.651424][ C0] ? io_schedule_timeout+0x140/0x140 [ 1762.656684][ C0] ? plist_check_prev_next+0x126/0x1a0 [ 1762.662121][ C0] schedule+0xd0/0x2a0 [ 1762.666165][ C0] futex_wait_queue_me+0x2a7/0x570 [ 1762.671268][ C0] ? attach_to_pi_state+0x2c0/0x2c0 [ 1762.676452][ C0] futex_wait+0x1df/0x560 [ 1762.680763][ C0] ? futex_wait_setup+0x2d0/0x2d0 [ 1762.685764][ C0] ? wake_up_q+0xa3/0x100 [ 1762.690067][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1762.695240][ C0] ? futex_wake+0x155/0x490 [ 1762.699728][ C0] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1762.705682][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1762.710783][ C0] do_futex+0x15b/0x1a60 [ 1762.715025][ C0] ? lock_acquire+0x1f1/0xad0 [ 1762.719678][ C0] ? __might_fault+0xef/0x1d0 [ 1762.724329][ C0] ? find_held_lock+0x2d/0x110 [ 1762.729066][ C0] ? futex_exit_release+0x220/0x220 [ 1762.734239][ C0] ? lock_downgrade+0x820/0x820 [ 1762.739094][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1762.744264][ C0] ? sched_clock+0x2a/0x40 [ 1762.748653][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1762.753475][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1762.758298][ C0] ? _copy_to_user+0x126/0x160 [ 1762.763040][ C0] __ia32_sys_futex_time32+0x302/0x455 [ 1762.768476][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1762.774602][ C0] ? __x64_sys_futex_time32+0x480/0x480 [ 1762.780126][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1762.785063][ C0] ? do_fast_syscall_32+0x40/0x120 [ 1762.790160][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 1762.795244][ C0] do_fast_syscall_32+0x7f/0x120 [ 1762.800157][ C0] entry_SYSENTER_compat+0x6d/0x7c [ 1762.805239][ C0] RIP: 0023:0xf7fa1569 [ 1762.809274][ C0] Code: Bad RIP value. [ 1762.813313][ C0] RSP: 002b:00000000f5d7b12c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1762.821696][ C0] RAX: ffffffffffffffda RBX: 000000000819afd4 RCX: 0000000000000080 [ 1762.829642][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000819afd8 [ 1762.837589][ C0] RBP: 00000000f5d7b228 R08: 0000000000000000 R09: 0000000000000000 [ 1762.846401][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1762.854345][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.862305][ C0] systemd-udevd S28240 29874 3884 0x00000100 [ 1762.868624][ C0] Call Trace: [ 1762.871897][ C0] __schedule+0x8e1/0x1eb0 [ 1762.876291][ C0] ? io_schedule_timeout+0x140/0x140 [ 1762.881551][ C0] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1762.887075][ C0] schedule+0xd0/0x2a0 [ 1762.891131][ C0] schedule_hrtimeout_range_clock+0x31d/0x370 [ 1762.897183][ C0] ? hrtimer_nanosleep_restart+0x170/0x170 [ 1762.902963][ C0] ? lock_downgrade+0x820/0x820 [ 1762.907797][ C0] ? do_raw_write_lock+0x11a/0x280 [ 1762.912885][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 1762.918144][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1762.924099][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1762.929099][ C0] do_epoll_wait+0xf59/0x1190 [ 1762.933758][ C0] ? ep_poll_callback+0xfc0/0xfc0 [ 1762.938759][ C0] ? security_file_permission+0x239/0x470 [ 1762.944454][ C0] ? __vfs_write+0x7e/0x100 [ 1762.948933][ C0] ? vfs_write+0x161/0x5d0 [ 1762.953331][ C0] ? finish_wait+0x260/0x260 [ 1762.957903][ C0] ? __secure_computing+0x104/0x360 [ 1762.963078][ C0] ? syscall_trace_enter+0x14a/0x340 [ 1762.968340][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 1762.973350][ C0] do_syscall_64+0x60/0xe0 [ 1762.977742][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1762.983607][ C0] RIP: 0033:0x7f58b8aea2e3 [ 1762.987996][ C0] Code: Bad RIP value. [ 1762.992033][ C0] RSP: 002b:00007ffdad4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 1763.000415][ C0] RAX: ffffffffffffffda RBX: 000055aeb7eea960 RCX: 00007f58b8aea2e3 [ 1763.008359][ C0] RDX: 0000000000000004 RSI: 00007ffdad4fe0f0 RDI: 0000000000000004 [ 1763.016304][ C0] RBP: 00007ffdad4fe1a0 R08: 000055aeb7ee7ca0 R09: 0000000000000000 [ 1763.024249][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdad4fe0f0 [ 1763.032195][ C0] R13: 000055aeb7ed7160 R14: 0000000000000003 R15: 000000000000000e [ 1763.040158][ C0] systemd-udevd S28240 29877 3884 0x00000100 [ 1763.046997][ C0] Call Trace: [ 1763.050275][ C0] __schedule+0x8e1/0x1eb0 [ 1763.054669][ C0] ? io_schedule_timeout+0x140/0x140 [ 1763.059927][ C0] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1763.065450][ C0] schedule+0xd0/0x2a0 [ 1763.069496][ C0] schedule_hrtimeout_range_clock+0x31d/0x370 [ 1763.075541][ C0] ? hrtimer_nanosleep_restart+0x170/0x170 [ 1763.081325][ C0] ? lock_downgrade+0x820/0x820 [ 1763.086166][ C0] ? do_raw_write_lock+0x11a/0x280 [ 1763.091252][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 1763.096514][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1763.102466][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1763.107474][ C0] do_epoll_wait+0xf59/0x1190 [ 1763.112130][ C0] ? ep_poll_callback+0xfc0/0xfc0 [ 1763.117139][ C0] ? security_file_permission+0x239/0x470 [ 1763.122834][ C0] ? __vfs_write+0x7e/0x100 [ 1763.127324][ C0] ? vfs_write+0x161/0x5d0 [ 1763.131735][ C0] ? finish_wait+0x260/0x260 [ 1763.136372][ C0] ? __secure_computing+0x104/0x360 [ 1763.141562][ C0] ? syscall_trace_enter+0x14a/0x340 [ 1763.146848][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 1763.151872][ C0] do_syscall_64+0x60/0xe0 [ 1763.156273][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1763.162140][ C0] RIP: 0033:0x7f58b8aea2e3 [ 1763.166522][ C0] Code: Bad RIP value. [ 1763.170559][ C0] RSP: 002b:00007ffdad4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 1763.178940][ C0] RAX: ffffffffffffffda RBX: 000055aeb7eea960 RCX: 00007f58b8aea2e3 [ 1763.186884][ C0] RDX: 0000000000000004 RSI: 00007ffdad4fe0f0 RDI: 0000000000000004 [ 1763.194847][ C0] RBP: 00007ffdad4fe1a0 R08: 000055aeb7ee7d80 R09: 0000000000000000 [ 1763.202799][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdad4fe0f0 [ 1763.210746][ C0] R13: 000055aeb7ed7160 R14: 0000000000000003 R15: 000000000000000e [ 1763.218750][ C0] systemd-udevd S28240 29879 3884 0x00000100 [ 1763.225059][ C0] Call Trace: [ 1763.228326][ C0] __schedule+0x8e1/0x1eb0 [ 1763.232724][ C0] ? io_schedule_timeout+0x140/0x140 [ 1763.237982][ C0] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1763.243504][ C0] schedule+0xd0/0x2a0 [ 1763.247549][ C0] schedule_hrtimeout_range_clock+0x31d/0x370 [ 1763.253610][ C0] ? hrtimer_nanosleep_restart+0x170/0x170 [ 1763.259397][ C0] ? lock_downgrade+0x820/0x820 [ 1763.264228][ C0] ? do_raw_write_lock+0x11a/0x280 [ 1763.269328][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 1763.274681][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1763.280639][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1763.285643][ C0] do_epoll_wait+0xf59/0x1190 [ 1763.290301][ C0] ? ep_poll_callback+0xfc0/0xfc0 [ 1763.295299][ C0] ? security_file_permission+0x239/0x470 [ 1763.300994][ C0] ? __vfs_write+0x7e/0x100 [ 1763.305481][ C0] ? vfs_write+0x161/0x5d0 [ 1763.309972][ C0] ? finish_wait+0x260/0x260 [ 1763.314537][ C0] ? __secure_computing+0x104/0x360 [ 1763.319711][ C0] ? syscall_trace_enter+0x14a/0x340 [ 1763.324972][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 1763.329990][ C0] do_syscall_64+0x60/0xe0 [ 1763.334403][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1763.340272][ C0] RIP: 0033:0x7f58b8aea2e3 [ 1763.344708][ C0] Code: Bad RIP value. [ 1763.348751][ C0] RSP: 002b:00007ffdad4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 1763.357154][ C0] RAX: ffffffffffffffda RBX: 000055aeb7eea960 RCX: 00007f58b8aea2e3 [ 1763.365107][ C0] RDX: 0000000000000004 RSI: 00007ffdad4fe0f0 RDI: 0000000000000004 [ 1763.373057][ C0] RBP: 00007ffdad4fe1a0 R08: 000055aeb7eeb790 R09: 0000000000000000 [ 1763.381023][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdad4fe0f0 [ 1763.388969][ C0] R13: 000055aeb7ed7160 R14: 0000000000000003 R15: 000000000000000e [ 1763.396947][ C0] systemd-udevd R running task 28384 29880 3884 0x00000108 [ 1763.404821][ C0] Call Trace: [ 1763.408110][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1763.413284][ C0] ? sched_clock+0x2a/0x40 [ 1763.417687][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1763.422522][ C0] ? sched_clock_cpu+0x18/0x1b0 [ 1763.427348][ C0] ? string+0x203/0x3d0 [ 1763.431481][ C0] ? check_preemption_disabled+0x50/0x130 [ 1763.437176][ C0] ? do_softirq_own_stack+0x111/0x170 [ 1763.443043][ C0] ? irq_exit_rcu+0x229/0x270 [ 1763.447694][ C0] ? sysvec_apic_timer_interrupt+0x54/0x120 [ 1763.453567][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1763.459766][ C0] ? tomoyo_domain_quota_is_ok+0x307/0x550 [ 1763.465548][ C0] ? tomoyo_domain_quota_is_ok+0x307/0x550 [ 1763.471327][ C0] ? tomoyo_domain_quota_is_ok+0x307/0x550 [ 1763.477112][ C0] ? tomoyo_supervisor+0x2d4/0xeb0 [ 1763.482198][ C0] ? tomoyo_profile+0x50/0x50 [ 1763.486860][ C0] ? lock_is_held_type+0xb0/0xe0 [ 1763.491771][ C0] ? lockdep_hardirqs_off+0x66/0xa0 [ 1763.496943][ C0] ? trace_hardirqs_off+0x27/0x210 [ 1763.502031][ C0] ? check_preemption_disabled+0x50/0x130 [ 1763.507722][ C0] ? tomoyo_path_matches_pattern+0x110/0x280 [ 1763.513678][ C0] ? tomoyo_check_path_acl+0x8b/0x1f0 [ 1763.519028][ C0] ? tomoyo_check_acl+0x315/0x410 [ 1763.524033][ C0] ? tomoyo_path_permission+0x25c/0x360 [ 1763.529554][ C0] ? tomoyo_path_perm+0x2e7/0x3f0 [ 1763.534554][ C0] ? tomoyo_check_open_permission+0x380/0x380 [ 1763.540596][ C0] ? lock_acquire+0x1f1/0xad0 [ 1763.545248][ C0] ? debug_check_no_obj_freed+0xc7/0x41c [ 1763.550854][ C0] ? find_held_lock+0x2d/0x110 [ 1763.555594][ C0] ? lock_downgrade+0x820/0x820 [ 1763.560430][ C0] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1763.566296][ C0] ? __seccomp_filter+0x256/0x1530 [ 1763.571387][ C0] ? security_inode_getattr+0xcf/0x140 [ 1763.576821][ C0] ? vfs_statx_fd+0x70/0xf0 [ 1763.581311][ C0] ? __do_sys_newfstat+0x88/0x100 [ 1763.586315][ C0] ? __do_sys_fstat+0x100/0x100 [ 1763.591157][ C0] ? __put_cred+0x1de/0x250 [ 1763.595653][ C0] ? kmem_cache_free+0x261/0x310 [ 1763.600568][ C0] ? __secure_computing+0x104/0x360 [ 1763.605742][ C0] ? syscall_trace_enter+0x14a/0x340 [ 1763.611012][ C0] ? do_syscall_64+0x60/0xe0 [ 1763.615577][ C0] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1763.621622][ C0] systemd-udevd S28240 29882 3884 0x00000100 [ 1763.627928][ C0] Call Trace: [ 1763.631194][ C0] __schedule+0x8e1/0x1eb0 [ 1763.635591][ C0] ? io_schedule_timeout+0x140/0x140 [ 1763.640852][ C0] ? sock_write_iter+0x307/0x3c0 [ 1763.645766][ C0] ? sock_sendmsg+0x120/0x120 [ 1763.650419][ C0] schedule+0xd0/0x2a0 [ 1763.654463][ C0] schedule_hrtimeout_range_clock+0x31d/0x370 [ 1763.660508][ C0] ? hrtimer_nanosleep_restart+0x170/0x170 [ 1763.666291][ C0] ? lock_downgrade+0x820/0x820 [ 1763.671129][ C0] ? do_raw_write_lock+0x11a/0x280 [ 1763.676327][ C0] ? _raw_write_unlock_irq+0x1f/0x80 [ 1763.681590][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1763.687546][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 1763.692548][ C0] do_epoll_wait+0xf59/0x1190 [ 1763.697224][ C0] ? ep_poll_callback+0xfc0/0xfc0 [ 1763.702269][ C0] ? security_file_permission+0x239/0x470 [ 1763.708056][ C0] ? __vfs_write+0x7e/0x100 [ 1763.712548][ C0] ? vfs_write+0x161/0x5d0 [ 1763.716946][ C0] ? finish_wait+0x260/0x260 [ 1763.721518][ C0] ? __secure_computing+0x104/0x360 [ 1763.726713][ C0] ? syscall_trace_enter+0x14a/0x340 [ 1763.732031][ C0] __x64_sys_epoll_wait+0x93/0xf0 [ 1763.737052][ C0] do_syscall_64+0x60/0xe0 [ 1763.741900][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1763.747779][ C0] RIP: 0033:0x7f58b8aea2e3 [ 1763.752221][ C0] Code: Bad RIP value. [ 1763.756263][ C0] RSP: 002b:00007ffdad4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 1763.764653][ C0] RAX: ffffffffffffffda RBX: 000055aeb7ee9e70 RCX: 00007f58b8aea2e3 [ 1763.772628][ C0] RDX: 0000000000000004 RSI: 00007ffdad4fe0f0 RDI: 0000000000000004 [ 1763.780613][ C0] RBP: 00007ffdad4fe1a0 R08: 000055aeb7ee4640 R09: 0000000000000000 [ 1763.788577][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdad4fe0f0 [ 1763.796562][ C0] R13: 000055aeb7ee4530 R14: 0000000000000003 R15: 000000000000000e [ 1763.804533][ C0] [ 1763.804533][ C0] Showing all locks held in the system: [ 1763.812237][ C0] 4 locks held by kworker/u4:6/286: [ 1763.817457][ C0] 1 lock held by in:imklog/6505: [ 1763.822363][ C0] #0: ffff8880a7b56db0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1763.831461][ C0] 2 locks held by agetty/6741: [ 1763.836209][ C0] #0: ffff888094f5d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1763.845908][ C0] #1: ffffc90000f942e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1763.856116][ C0] 2 locks held by agetty/29724: [ 1763.860940][ C0] #0: ffff8880a2342098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1763.870665][ C0] #1: ffffc900013702e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1763.880709][ C0] 5 locks held by syz-executor.2/29773: [ 1763.886305][ C0] #0: ffffc90000007d78 ((&dum_hcd->timer)){+.-.}-{0:0}, at: call_timer_fn+0xdb/0x760 [ 1763.895854][ C0] #1: ffff88803b0ea230 (&dev->event_lock){-.-.}-{2:2}, at: input_event+0x7b/0xb0 [ 1763.905207][ C0] #2: ffffffff89bc1140 (rcu_read_lock){....}-{1:2}, at: input_pass_values.part.0+0x0/0x700 [ 1763.915257][ C0] #3: ffffffff8a17dbf8 (kbd_event_lock){..-.}-{2:2}, at: kbd_event+0x87/0x1830 [ 1763.924263][ C0] #4: ffffffff89bc1140 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1763.934078][ C0] 5 locks held by systemd-udevd/29880: [ 1763.939515][ C0] [ 1763.941827][ C0] ============================================= [ 1763.941827][ C0] [ 1763.950932][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1763.958154][ C0] rcu: 1-...!: (2 ticks this GP) idle=332/1/0x4000000000000000 softirq=142927/142927 fqs=0 [ 1763.969976][ C0] (detected by 0, t=11822 jiffies, g=254477, q=116) [ 1763.979008][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1763.986791][ C1] NMI backtrace for cpu 1 [ 1763.986800][ C1] CPU: 1 PID: 29880 Comm: systemd-udevd Not tainted 5.8.0-rc3-syzkaller #0 [ 1763.986808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.986812][ C1] RIP: 0010:unwind_next_frame+0x238/0x1f90 [ 1763.986827][ C1] Code: ff 39 d6 0f 83 54 12 00 00 48 ba 00 00 00 00 00 fc ff df 41 89 f0 4a 8d 3c 85 6c 77 9a 8b 49 89 f9 49 c1 e9 03 45 0f b6 0c 11 <48> 89 fa 83 e2 07 83 c2 03 44 38 ca 7c 32 45 84 c9 74 2d 4c 89 44 [ 1763.986831][ C1] RSP: 0018:ffffc90000da8838 EFLAGS: 00000807 [ 1763.986840][ C1] RAX: 0000000000000000 RBX: 1ffff920001b510f RCX: ffffffff87e460af [ 1763.986846][ C1] RDX: dffffc0000000000 RSI: 000000000006e460 RDI: ffffffff8bb608ec [ 1763.986853][ C1] RBP: 0000000000000001 R08: 000000000006e460 R09: 0000000000000000 [ 1763.986863][ C1] R10: 000000000007201e R11: 0000000000000001 R12: ffffc90000da8958 [ 1763.986869][ C1] R13: ffffc90000da8945 R14: ffffc90000da8960 R15: ffffc90000da8910 [ 1763.986876][ C1] FS: 00007f58b9c698c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1763.986881][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1763.986887][ C1] CR2: 000055aeb7ef7008 CR3: 000000005b966000 CR4: 00000000001426e0 [ 1763.986894][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1763.986900][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1763.986903][ C1] Call Trace: [ 1763.986905][ C1] [ 1763.986909][ C1] ? do_syscall_64+0x60/0xe0 [ 1763.986914][ C1] ? deref_stack_reg+0x150/0x150 [ 1763.986917][ C1] ? __unwind_start+0x4dd/0x7c0 [ 1763.986922][ C1] ? profile_setup.cold+0xc1/0xc1 [ 1763.986925][ C1] arch_stack_walk+0x81/0xf0 [ 1763.986929][ C1] ? do_syscall_64+0x60/0xe0 [ 1763.986933][ C1] stack_trace_save+0x8c/0xc0 [ 1763.986938][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 1763.986941][ C1] save_stack+0x1b/0x40 [ 1763.986945][ C1] ? save_stack+0x1b/0x40 [ 1763.986948][ C1] ? __kasan_slab_free+0xf5/0x140 [ 1763.986952][ C1] ? kmem_cache_free+0x7f/0x310 [ 1763.986957][ C1] ? inet_bind_bucket_destroy+0xdf/0x120 [ 1763.986961][ C1] ? inet_twsk_bind_unhash+0x121/0x1b0 [ 1763.986965][ C1] ? inet_twsk_kill+0x21d/0x470 [ 1763.986969][ C1] ? call_timer_fn+0x1ac/0x760 [ 1763.986973][ C1] ? __run_timers.part.0+0x54c/0xa20 [ 1763.986977][ C1] ? run_timer_softirq+0xae/0x1a0 [ 1763.986981][ C1] ? __do_softirq+0x34c/0xa60 [ 1763.986985][ C1] ? asm_call_on_stack+0xf/0x20 [ 1763.986989][ C1] ? do_softirq_own_stack+0x111/0x170 [ 1763.986993][ C1] ? irq_exit_rcu+0x229/0x270 [ 1763.986997][ C1] ? sysvec_apic_timer_interrupt+0x54/0x120 [ 1763.987002][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1763.987007][ C1] ? tomoyo_domain_quota_is_ok+0x307/0x550 [ 1763.987011][ C1] ? tomoyo_supervisor+0x2d4/0xeb0 [ 1763.987015][ C1] ? tomoyo_path_permission+0x25c/0x360 [ 1763.987019][ C1] ? tomoyo_path_perm+0x2e7/0x3f0 [ 1763.987024][ C1] ? security_inode_getattr+0xcf/0x140 [ 1763.987028][ C1] ? vfs_statx_fd+0x70/0xf0 [ 1763.987032][ C1] ? __do_sys_newfstat+0x88/0x100 [ 1763.987035][ C1] ? do_syscall_64+0x60/0xe0 [ 1763.987039][ C1] ? lock_downgrade+0x820/0x820 [ 1763.987043][ C1] ? lockdep_hardirqs_off+0x66/0xa0 [ 1763.987047][ C1] ? trace_hardirqs_off+0x27/0x210 [ 1763.987052][ C1] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 1763.987057][ C1] ? debug_check_no_obj_freed+0x20c/0x41c [ 1763.987060][ C1] ? __phys_addr+0x9a/0x110 [ 1763.987065][ C1] ? inet_bind_bucket_destroy+0xdf/0x120 [ 1763.987069][ C1] __kasan_slab_free+0xf5/0x140 [ 1763.987073][ C1] ? inet_bind_bucket_destroy+0xdf/0x120 [ 1763.987077][ C1] kmem_cache_free+0x7f/0x310 [ 1763.987081][ C1] inet_bind_bucket_destroy+0xdf/0x120 [ 1763.987085][ C1] inet_twsk_bind_unhash+0x121/0x1b0 [ 1763.987089][ C1] inet_twsk_kill+0x21d/0x470 [ 1763.987093][ C1] call_timer_fn+0x1ac/0x760 [ 1763.987097][ C1] ? inet_twsk_kill+0x470/0x470 [ 1763.987101][ C1] ? add_timer_on+0x490/0x490 [ 1763.987105][ C1] ? lock_downgrade+0x820/0x820 [ 1763.987109][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1763.987113][ C1] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 1763.987117][ C1] ? trace_hardirqs_on+0x5f/0x220 [ 1763.987121][ C1] ? inet_twsk_kill+0x470/0x470 [ 1763.987126][ C1] __run_timers.part.0+0x54c/0xa20 [ 1763.987129][ C1] ? call_timer_fn+0x760/0x760 [ 1763.987134][ C1] ? clockevents_program_event+0x12b/0x350 [ 1763.987138][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1763.987142][ C1] ? sched_clock+0x2a/0x40 [ 1763.987145][ C1] ? sched_clock_cpu+0x18/0x1b0 [ 1763.987149][ C1] run_timer_softirq+0xae/0x1a0 [ 1763.987153][ C1] __do_softirq+0x34c/0xa60 [ 1763.987157][ C1] asm_call_on_stack+0xf/0x20 [ 1763.987159][ C1] [ 1763.987163][ C1] do_softirq_own_stack+0x111/0x170 [ 1763.987167][ C1] irq_exit_rcu+0x229/0x270 [ 1763.987172][ C1] sysvec_apic_timer_interrupt+0x54/0x120 [ 1763.987176][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1763.987181][ C1] RIP: 0010:tomoyo_domain_quota_is_ok+0x307/0x550 [ 1763.987195][ C1] Code: 41 5d 41 5e 41 5f c3 41 bc 01 00 00 00 31 db e8 9f 55 11 fe 89 d9 44 89 e0 31 ff d3 f8 83 e0 01 41 89 c7 89 c6 e8 09 52 11 fe <45> 85 ff 74 09 e8 7f 55 11 fe 41 83 c5 01 e8 76 55 11 fe 8d 73 01 [ 1763.987200][ C1] RSP: 0018:ffffc90007def8f8 EFLAGS: 00000293 [ 1763.987209][ C1] RAX: 0000000000000000 RBX: 000000000000000d RCX: ffffffff83626197 [ 1763.987215][ C1] RDX: 0000000000000000 RSI: ffff8880886923c0 RDI: 0000000000000005 [ 1763.987221][ C1] RBP: ffff8880a6926c80 R08: 0000000000000001 R09: ffffffff8cab9727 [ 1763.987227][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 1763.987233][ C1] R13: 00000000000003be R14: dffffc0000000000 R15: 0000000000000000 [ 1763.987238][ C1] ? tomoyo_domain_quota_is_ok+0x307/0x550 [ 1763.987242][ C1] ? tomoyo_domain_quota_is_ok+0x307/0x550 [ 1763.987246][ C1] tomoyo_supervisor+0x2d4/0xeb0 [ 1763.987250][ C1] ? tomoyo_profile+0x50/0x50 [ 1763.987254][ C1] ? lock_is_held_type+0xb0/0xe0 [ 1763.987258][ C1] ? lockdep_hardirqs_off+0x66/0xa0 [ 1763.987262][ C1] ? trace_hardirqs_off+0x27/0x210 [ 1763.987267][ C1] ? check_preemption_disabled+0x50/0x130 [ 1763.987272][ C1] ? tomoyo_path_matches_pattern+0x110/0x280 [ 1763.987276][ C1] ? tomoyo_check_path_acl+0x8b/0x1f0 [ 1763.987280][ C1] ? tomoyo_check_acl+0x315/0x410 [ 1763.987284][ C1] tomoyo_path_permission+0x25c/0x360 [ 1763.987288][ C1] tomoyo_path_perm+0x2e7/0x3f0 [ 1763.987293][ C1] ? tomoyo_check_open_permission+0x380/0x380 [ 1763.987297][ C1] ? lock_acquire+0x1f1/0xad0 [ 1763.987301][ C1] ? debug_check_no_obj_freed+0xc7/0x41c [ 1763.987305][ C1] ? find_held_lock+0x2d/0x110 [ 1763.987309][ C1] ? lock_downgrade+0x820/0x820 [ 1763.987313][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1763.987317][ C1] ? __seccomp_filter+0x256/0x1530 [ 1763.987322][ C1] security_inode_getattr+0xcf/0x140 [ 1763.987325][ C1] vfs_statx_fd+0x70/0xf0 [ 1763.987329][ C1] __do_sys_newfstat+0x88/0x100 [ 1763.987333][ C1] ? __do_sys_fstat+0x100/0x100 [ 1763.987337][ C1] ? __put_cred+0x1de/0x250 [ 1763.987341][ C1] ? kmem_cache_free+0x261/0x310 [ 1763.987345][ C1] ? __secure_computing+0x104/0x360 [ 1763.987349][ C1] ? syscall_trace_enter+0x14a/0x340 [ 1763.987353][ C1] do_syscall_64+0x60/0xe0 [ 1763.987357][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1763.987361][ C1] RIP: 0033:0x7f58b8adc2e2 [ 1763.987365][ C1] Code: Bad RIP value. [ 1763.987370][ C1] RSP: 002b:00007ffdad4f8c08 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 1763.987380][ C1] RAX: ffffffffffffffda RBX: 00007ffdad4f8f20 RCX: 00007f58b8adc2e2 [ 1763.987386][ C1] RDX: 00007ffdad4f8c20 RSI: 00007ffdad4f8c20 RDI: 0000000000000007 [ 1763.987392][ C1] RBP: 00007ffdad4f8ea0 R08: 0000000000000000 R09: 0000000000000001 [ 1763.987398][ C1] R10: 0000000000080000 R11: 0000000000000246 R12: 000055aeb7ed74e0 [ 1763.987405][ C1] R13: 00007ffdad4f8da8 R14: 00000000ffffffff R15: 00007ffdad4f8da0 [ 1763.987860][ C0] rcu: rcu_preempt kthread starved for 11822 jiffies! g254477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1764.760386][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1764.760391][ C0] rcu: RCU grace-period kthread stack dump: 2020/06/30 20:18:21 Manager.Poll call failed: connection is shut down [ 1764.760397][ C0] rcu_preempt R running task 29120 10 2 0x00004000 [ 1764.760417][ C0] Call Trace: [ 1764.760438][ C0] __schedule+0x8e1/0x1eb0 [ 1764.760455][ C0] ? io_schedule_timeout+0x140/0x140 [ 1764.760468][ C0] ? enqueue_timer+0x420/0x420 [ 1764.760480][ C0] ? lock_downgrade+0x820/0x820 [ 1764.760492][ C0] schedule+0xd0/0x2a0 [ 1764.760506][ C0] schedule_timeout+0x148/0x250 [ 1764.760517][ C0] ? usleep_range+0x170/0x170 [ 1764.760528][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1764.760539][ C0] ? __next_timer_interrupt+0x190/0x190 [ 1764.760554][ C0] ? prepare_to_swait_exclusive+0x2d0/0x2d0 [ 1764.760569][ C0] rcu_gp_kthread+0xae5/0x1b50 [ 1764.760584][ C0] ? call_rcu+0x7e0/0x7e0 [ 1764.760594][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1764.760605][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1764.760618][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1764.760631][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1764.760640][ C0] ? call_rcu+0x7e0/0x7e0 [ 1764.760651][ C0] kthread+0x3b5/0x4a0 [ 1764.760661][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1764.760675][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1764.760688][ C0] ret_from_fork+0x1f/0x30 [ 1764.818283][ T1849] usb 2-1: USB disconnect, device number 47 [ 1764.867525][ T3876] systemd-journald[3876]: /dev/kmsg buffer overrun, some messages lost. [ 1767.300817][ T25] tipc: TX() has been purged, node left!