hid-generic 0000:0000:0000.00EA: unknown main item tag 0x0 hid-generic 0000:0000:0000.00EA: unknown main item tag 0x0 hid-generic 0000:0000:0000.00EA: hidraw0: HID v0.00 Device [syz1] on syz1 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 3580 at net/ipv4/tcp_timer.c:429 tcp_retransmit_timer+0x1a66/0x2590 net/ipv4/tcp_timer.c:429 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 3580 Comm: syz-executor.5 Not tainted 4.14.145+ #0 Call Trace: hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xca/0x134 lib/dump_stack.c:53 panic+0x1ea/0x3d3 kernel/panic.c:182 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 __warn.cold+0x2f/0x3a kernel/panic.c:546 report_bug+0x20a/0x248 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:177 [inline] fixup_bug arch/x86/kernel/traps.c:172 [inline] do_error_trap+0x1bf/0x2d0 arch/x86/kernel/traps.c:295 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 invalid_op+0x18/0x40 arch/x86/entry/entry_64.S:963 RIP: 0010:tcp_retransmit_timer+0x1a66/0x2590 net/ipv4/tcp_timer.c:429 RSP: 0018:ffff8881dbb07c78 EFLAGS: 00010206 RAX: ffff8881c4685e00 RBX: ffff8881a1e71d80 RCX: 0000000000000001 RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8881d35caac8 RBP: ffff8881d35ca100 R08: ffff88821ffff05c R09: ffff88821ffff048 R10: ffff88821ffff057 R11: ffff88821ffff050 R12: ffff8881d35ca79a R13: ffff8881d35ca130 R14: 0000000000000000 R15: ffff8881d35ca90c tcp_write_timer_handler+0x43d/0x780 net/ipv4/tcp_timer.c:579 tcp_write_timer+0xc9/0x170 net/ipv4/tcp_timer.c:597 call_timer_fn+0x15b/0x6a0 kernel/time/timer.c:1279 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 expire_timers+0x227/0x4c0 kernel/time/timer.c:1318 __run_timers kernel/time/timer.c:1634 [inline] run_timer_softirq+0x1eb/0x5d0 kernel/time/timer.c:1647 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 __do_softirq+0x234/0x9ec kernel/softirq.c:288 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x114/0x150 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x1a7/0x650 arch/x86/kernel/apic/apic.c:1102 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 apic_timer_interrupt+0x8c/0xa0 arch/x86/entry/entry_64.S:792 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:lock_is_held_type+0xfb/0x150 kernel/locking/lockdep.c:4031 RSP: 0018:ffff8881a077f9f8 EFLAGS: 00000246 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 ORIG_RAX: ffffffffffffff10 RAX: 0000000000000007 RBX: 0000000000000246 RCX: 1ffffffff2942a20 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000246 RBP: ffff8881c4685e00 R08: 0000000000000001 R09: 0000000000000001 R10: fffffbfff2985b9d R11: ffffffff94c2dceb R12: 0000000000000000 R13: 0000000000001069 R14: 0000000000000001 R15: ffff88819e6f8e98 lock_is_held include/linux/lockdep.h:437 [inline] ___might_sleep+0x203/0x280 kernel/sched/core.c:6084 hid-generic 0000:0000:0000.00EB: unknown main item tag 0x0 prepare_alloc_pages mm/page_alloc.c:4201 [inline] __alloc_pages_nodemask+0x33a/0x2370 mm/page_alloc.c:4251 __alloc_pages include/linux/gfp.h:461 [inline] __alloc_pages_node include/linux/gfp.h:474 [inline] alloc_pages_node include/linux/gfp.h:488 [inline] pipe_write+0x928/0xe20 fs/pipe.c:435 hid-generic 0000:0000:0000.00EB: hidraw0: HID v0.00 Device [syz1] on syz1 call_write_iter include/linux/fs.h:1788 [inline] new_sync_write fs/read_write.c:471 [inline] __vfs_write+0x401/0x5a0 fs/read_write.c:484 vfs_write+0x17f/0x4d0 fs/read_write.c:546 SYSC_write fs/read_write.c:594 [inline] SyS_write+0x102/0x250 fs/read_write.c:586 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x459a09 RSP: 002b:00007fb226466c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 RDX: 000000010000026f RSI: 00000000200001c0 RDI: 0000000000000006 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2264676d4 R13: 00000000004c5f88 R14: 00000000004e0610 R15: 00000000ffffffff Kernel Offset: 0x11400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) Rebooting in 86400 seconds..