program:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="09000000010000", 0x7)
[ 87.082721][ T5272] Bluetooth: hci0: command tx timeout
[ 87.189380][ T5308] ------------[ cut here ]------------
[ 87.192106][ T5308] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[ 87.195316][ T5308] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x483/0x500, CPU#0: syz.0.0/5308
[ 87.199982][ T5308] Modules linked in:
[ 87.201764][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.205721][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.209884][ T5308] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[ 87.212381][ T5308] Code: 75 d7 eb dd e8 52 5e 0f f8 90 0f 0b 90 e9 e0 fc ff ff e8 44 5e 0f f8 48 8d 3d 1d 5a af 06 48 c7 c6 ad c6 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[ 87.220192][ T5308] RSP: 0018:ffffc9000dec79e0 EFLAGS: 00010287
[ 87.222784][ T5308] RAX: ffffffff89b7b49c RBX: ffff888012a34000 RCX: 0000000000100000
[ 87.226325][ T5308] RDX: 0000000000000048 RSI: ffffffff8e28c6ad RDI: ffffffff90670ec0
[ 87.229691][ T5308] RBP: 0000000000000000 R08: ffffffff9002a0e7 R09: 1ffffffff200541c
[ 87.232980][ T5308] R10: dffffc0000000000 R11: fffffbfff200541d R12: 0000000000000000
[ 87.236248][ T5308] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[ 87.239263][ T5308] FS: 00007fafefad86c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000
[ 87.242533][ T5308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.244970][ T5308] CR2: 0000200000002020 CR3: 0000000013352000 CR4: 0000000000352ef0
[ 87.248166][ T5308] Call Trace:
[ 87.249520][ T5308]
[ 87.250714][ T5308] zcrx_register_netdev+0x213/0x520
[ 87.252897][ T5308] ? io_region_pin_pages+0xbe/0x190
[ 87.255119][ T5308] ? __pfx_zcrx_register_netdev+0x10/0x10
[ 87.257636][ T5308] ? __asan_memset+0x22/0x50
[ 87.259539][ T5308] ? io_allocate_rbuf_ring+0x19c/0x230
[ 87.261802][ T5308] io_register_zcrx+0x953/0xc00
[ 87.263834][ T5308] ? __pfx_io_register_zcrx+0x10/0x10
[ 87.266304][ T5308] ? __mutex_lock+0x30d/0x1550
[ 87.268324][ T5308] ? __fget_files+0x2a/0x420
[ 87.270297][ T5308] ? __pfx___mutex_lock+0x10/0x10
[ 87.272383][ T5308] ? __fget_files+0x3a2/0x420
[ 87.274331][ T5308] ? __fget_files+0x2a/0x420
[ 87.276532][ T5308] __se_sys_io_uring_register+0xc23/0x1ab0
[ 87.279107][ T5308] ? __pfx___se_sys_io_uring_register+0x10/0x10
[ 87.281699][ T5308] ? rcu_is_watching+0x15/0xb0
[ 87.283767][ T5308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.286476][ T5308] do_syscall_64+0x174/0x580
[ 87.288388][ T5308] ? clear_bhb_loop+0x70/0xc0
[ 87.290393][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.292942][ T5308] RIP: 0033:0x7fafeeb9e0d9
[ 87.295004][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.303295][ T5308] RSP: 002b:00007fafefad7fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 87.306965][ T5308] RAX: ffffffffffffffda RBX: 00007fafeee25fa0 RCX: 00007fafeeb9e0d9
[ 87.310480][ T5308] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[ 87.313660][ T5308] RBP: 00007fafeec35024 R08: 0000000000000000 R09: 0000000000000000
[ 87.317209][ T5308] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 87.320167][ T5308] R13: 00007fafeee26038 R14: 00007fafeee25fa0 R15: 00007ffef9fc5878
[ 87.323296][ T5308]
[ 87.324582][ T5308] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.327573][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.331186][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.335113][ T5308] Call Trace:
[ 87.336483][ T5308]
[ 87.337733][ T5308] vpanic+0x56c/0xa60
[ 87.339367][ T5308] ? __pfx__printk+0x10/0x10
[ 87.341218][ T5308] ? __pfx_vpanic+0x10/0x10
[ 87.343099][ T5308] ? is_bpf_text_address+0x292/0x2b0
[ 87.345275][ T5308] ? is_bpf_text_address+0x26/0x2b0
[ 87.347435][ T5308] panic+0xc5/0xd0
[ 87.349003][ T5308] ? __pfx_panic+0x10/0x10
[ 87.350880][ T5308] __warn+0x315/0x4c0
[ 87.352835][ T5308] ? netdev_queue_get_dma_dev+0x483/0x500
[ 87.355090][ T5308] ? netdev_queue_get_dma_dev+0x483/0x500
[ 87.357517][ T5308] __report_bug+0x276/0x570
[ 87.359489][ T5308] ? netdev_queue_get_dma_dev+0x483/0x500
[ 87.361855][ T5308] ? __pfx___report_bug+0x10/0x10
[ 87.364043][ T5308] report_bug_entry+0x19a/0x290
[ 87.366063][ T5308] ? netdev_queue_get_dma_dev+0x48f/0x500
[ 87.368340][ T5308] ? netdev_queue_get_dma_dev+0x494/0x500
[ 87.370703][ T5308] handle_bug+0xce/0x200
[ 87.372482][ T5308] exc_invalid_op+0x1a/0x50
[ 87.374279][ T5308] asm_exc_invalid_op+0x1a/0x20
[ 87.376234][ T5308] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[ 87.379094][ T5308] Code: 75 d7 eb dd e8 52 5e 0f f8 90 0f 0b 90 e9 e0 fc ff ff e8 44 5e 0f f8 48 8d 3d 1d 5a af 06 48 c7 c6 ad c6 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[ 87.387331][ T5308] RSP: 0018:ffffc9000dec79e0 EFLAGS: 00010287
[ 87.389734][ T5308] RAX: ffffffff89b7b49c RBX: ffff888012a34000 RCX: 0000000000100000
[ 87.392913][ T5308] RDX: 0000000000000048 RSI: ffffffff8e28c6ad RDI: ffffffff90670ec0
[ 87.396086][ T5308] RBP: 0000000000000000 R08: ffffffff9002a0e7 R09: 1ffffffff200541c
[ 87.399381][ T5308] R10: dffffc0000000000 R11: fffffbfff200541d R12: 0000000000000000
[ 87.402630][ T5308] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[ 87.405823][ T5308] ? netdev_queue_get_dma_dev+0x47c/0x500
[ 87.408128][ T5308] zcrx_register_netdev+0x213/0x520
[ 87.410356][ T5308] ? io_region_pin_pages+0xbe/0x190
[ 87.412558][ T5308] ? __pfx_zcrx_register_netdev+0x10/0x10
[ 87.414934][ T5308] ? __asan_memset+0x22/0x50
[ 87.417228][ T5308] ? io_allocate_rbuf_ring+0x19c/0x230
[ 87.419978][ T5308] io_register_zcrx+0x953/0xc00
[ 87.421977][ T5308] ? __pfx_io_register_zcrx+0x10/0x10
[ 87.424030][ T5308] ? __mutex_lock+0x30d/0x1550
[ 87.426056][ T5308] ? __fget_files+0x2a/0x420
[ 87.428105][ T5308] ? __pfx___mutex_lock+0x10/0x10
[ 87.430122][ T5308] ? __fget_files+0x3a2/0x420
[ 87.432055][ T5308] ? __fget_files+0x2a/0x420
[ 87.433985][ T5308] __se_sys_io_uring_register+0xc23/0x1ab0
[ 87.436360][ T5308] ? __pfx___se_sys_io_uring_register+0x10/0x10
[ 87.439084][ T5308] ? rcu_is_watching+0x15/0xb0
[ 87.441143][ T5308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.443700][ T5308] do_syscall_64+0x174/0x580
[ 87.445667][ T5308] ? clear_bhb_loop+0x70/0xc0
[ 87.447736][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.450213][ T5308] RIP: 0033:0x7fafeeb9e0d9
[ 87.451713][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.458375][ T5308] RSP: 002b:00007fafefad7fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 87.461670][ T5308] RAX: ffffffffffffffda RBX: 00007fafeee25fa0 RCX: 00007fafeeb9e0d9
[ 87.465022][ T5308] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[ 87.468421][ T5308] RBP: 00007fafeec35024 R08: 0000000000000000 R09: 0000000000000000
[ 87.471369][ T5308] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 87.474885][ T5308] R13: 00007fafeee26038 R14: 00007fafeee25fa0 R15: 00007ffef9fc5878
[ 87.478789][ T5308]
[ 87.480579][ T5308] Kernel Offset: disabled
[ 87.482467][ T5308] Rebooting in 86400 seconds..