Extracting prog: 6m41.985199227s
Minimizing prog: 33m49.435819591s
Simplifying prog options: 14m12.94888987s
Extracting C: 5m10.662906204s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus-mount
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus-mount
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus-mount
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)

program crashed: general protection fault in lock_sock_nested
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")

program crashed: general protection fault in lock_sock_nested
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-syz_mount_image$hfsplus
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-listen-syz_mount_image$hfsplus
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$bt_l2cap-listen-syz_mount_image$hfsplus
detailed listing:
executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(0xffffffffffffffff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")

program crashed: general protection fault in lock_sock_nested
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_mount_image$hfsplus
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")

program did not crash
reproducing took 59m55.126734421s
repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
CPU: 0 UID: 0 PID: 5604 Comm: kworker/0:6 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events l2cap_info_timeout
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb df 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc9000ce076b0 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2036baf R12: ffff888000610000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS:  0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4b8b3762d8 CR3: 0000000043d62000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
 lock_sock_nested+0x48/0x100 net/core/sock.c:3645
 lock_sock include/net/sock.h:1624 [inline]
 l2cap_sock_ready_cb+0x47/0x140 net/bluetooth/l2cap_sock.c:1662
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1256 [inline]
 l2cap_conn_start+0x8db/0x1140 net/bluetooth/l2cap_core.c:1506
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317
 worker_thread+0x870/0xd30 kernel/workqueue.c:3398
 kthread+0x7a9/0x920 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb df 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc9000ce076b0 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2036baf R12: ffff888000610000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS:  0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4b8b3762d8 CR3: 0000000043d62000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	b6 04                	mov    $0x4,%dh
   2:	30 84 c0 0f 85 f8 16 	xor    %al,0x16f8850f(%rax,%rax,8)
   9:	00 00                	add    %al,(%rax)
   b:	45 31 f6             	xor    %r14d,%r14d
   e:	83 3d eb df 80 0e 00 	cmpl   $0x0,0xe80dfeb(%rip)        # 0xe80e000
  15:	0f 84 c8 13 00 00    	je     0x13e3
  1b:	89 54 24 60          	mov    %edx,0x60(%rsp)
  1f:	89 5c 24 38          	mov    %ebx,0x38(%rsp)
  23:	4c 89 f8             	mov    %r15,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	80 3c 30 00          	cmpb   $0x0,(%rax,%rsi,1) <-- trapping instruction
  2e:	74 12                	je     0x42
  30:	4c 89 ff             	mov    %r15,%rdi
  33:	e8 78 38 8b 00       	call   0x8b38b0
  38:	48                   	rex.W
  39:	be 00 00 00 00       	mov    $0x0,%esi
  3e:	00 fc                	add    %bh,%ah

final repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
CPU: 0 UID: 0 PID: 5604 Comm: kworker/0:6 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events l2cap_info_timeout
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb df 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc9000ce076b0 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2036baf R12: ffff888000610000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS:  0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4b8b3762d8 CR3: 0000000043d62000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
 lock_sock_nested+0x48/0x100 net/core/sock.c:3645
 lock_sock include/net/sock.h:1624 [inline]
 l2cap_sock_ready_cb+0x47/0x140 net/bluetooth/l2cap_sock.c:1662
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1256 [inline]
 l2cap_conn_start+0x8db/0x1140 net/bluetooth/l2cap_core.c:1506
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317
 worker_thread+0x870/0xd30 kernel/workqueue.c:3398
 kthread+0x7a9/0x920 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb df 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc9000ce076b0 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2036baf R12: ffff888000610000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS:  0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4b8b3762d8 CR3: 0000000043d62000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	b6 04                	mov    $0x4,%dh
   2:	30 84 c0 0f 85 f8 16 	xor    %al,0x16f8850f(%rax,%rax,8)
   9:	00 00                	add    %al,(%rax)
   b:	45 31 f6             	xor    %r14d,%r14d
   e:	83 3d eb df 80 0e 00 	cmpl   $0x0,0xe80dfeb(%rip)        # 0xe80e000
  15:	0f 84 c8 13 00 00    	je     0x13e3
  1b:	89 54 24 60          	mov    %edx,0x60(%rsp)
  1f:	89 5c 24 38          	mov    %ebx,0x38(%rsp)
  23:	4c 89 f8             	mov    %r15,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	80 3c 30 00          	cmpb   $0x0,(%rax,%rsi,1) <-- trapping instruction
  2e:	74 12                	je     0x42
  30:	4c 89 ff             	mov    %r15,%rdi
  33:	e8 78 38 8b 00       	call   0x8b38b0
  38:	48                   	rex.W
  39:	be 00 00 00 00       	mov    $0x0,%esi
  3e:	00 fc                	add    %bh,%ah