program: r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) [ 74.142597][ T4640] Bluetooth: hci0: command tx timeout [ 74.206571][ T5309] ------------[ cut here ]------------ [ 74.209039][ T5309] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 74.212350][ T5309] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x483/0x500, CPU#0: syz.0.0/5309 [ 74.217798][ T5309] Modules linked in: [ 74.219635][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.223667][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.227961][ T5309] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500 [ 74.230699][ T5309] Code: 75 d7 eb dd e8 72 52 0f f8 90 0f 0b 90 e9 e0 fc ff ff e8 64 52 0f f8 48 8d 3d 6d 4e af 06 48 c7 c6 9f c7 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb [ 74.239067][ T5309] RSP: 0018:ffffc9000d4d79e0 EFLAGS: 00010283 [ 74.241845][ T5309] RAX: ffffffff89b7c07c RBX: ffff888012a24000 RCX: 0000000000100000 [ 74.245515][ T5309] RDX: 0000000000000048 RSI: ffffffff8e28c79f RDI: ffffffff90670ef0 [ 74.249001][ T5309] RBP: 0000000000000000 R08: ffffffff9002a027 R09: 1ffffffff2005404 [ 74.252664][ T5309] R10: dffffc0000000000 R11: fffffbfff2005405 R12: 0000000000000000 [ 74.256093][ T5309] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.259516][ T5309] FS: 00007f60c02a46c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 74.264615][ T5309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.267544][ T5309] CR2: 00007f60bf4dcc10 CR3: 00000000125f0000 CR4: 0000000000352ef0 [ 74.270974][ T5309] Call Trace: [ 74.272544][ T5309] [ 74.273858][ T5309] zcrx_register_netdev+0x213/0x520 [ 74.276269][ T5309] ? io_region_pin_pages+0xbe/0x190 [ 74.278497][ T5309] ? __pfx_zcrx_register_netdev+0x10/0x10 [ 74.280961][ T5309] ? __asan_memset+0x22/0x50 [ 74.283181][ T5309] ? io_allocate_rbuf_ring+0x19c/0x230 [ 74.285614][ T5309] io_register_zcrx+0x953/0xc00 [ 74.287718][ T5309] ? __pfx_io_register_zcrx+0x10/0x10 [ 74.290148][ T5309] ? __mutex_lock+0x30d/0x1550 [ 74.292550][ T5309] ? __fget_files+0x2a/0x420 [ 74.294666][ T5309] ? __pfx___mutex_lock+0x10/0x10 [ 74.296873][ T5309] ? __fget_files+0x3a2/0x420 [ 74.299112][ T5309] ? __fget_files+0x2a/0x420 [ 74.301800][ T5309] __se_sys_io_uring_register+0xc23/0x1ab0 [ 74.304815][ T5309] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 74.308238][ T5309] ? rcu_is_watching+0x15/0xb0 [ 74.310929][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.313785][ T5309] do_syscall_64+0x174/0x580 [ 74.315830][ T5309] ? trace_irq_disable+0x3b/0x140 [ 74.318136][ T5309] ? clear_bhb_loop+0x70/0xc0 [ 74.320215][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.322947][ T5309] RIP: 0033:0x7f60bf39e0d9 [ 74.324928][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.333240][ T5309] RSP: 002b:00007f60c02a3fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 74.336841][ T5309] RAX: ffffffffffffffda RBX: 00007f60bf625fa0 RCX: 00007f60bf39e0d9 [ 74.340223][ T5309] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003 [ 74.343762][ T5309] RBP: 00007f60bf435024 R08: 0000000000000000 R09: 0000000000000000 [ 74.347278][ T5309] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 74.350716][ T5309] R13: 00007f60bf626038 R14: 00007f60bf625fa0 R15: 00007ffcfcfe87b8 [ 74.354088][ T5309] [ 74.355349][ T5309] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.358166][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.361992][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.365994][ T5309] Call Trace: [ 74.367367][ T5309] [ 74.368655][ T5309] vpanic+0x56c/0xa60 [ 74.370384][ T5309] ? __pfx__printk+0x10/0x10 [ 74.372430][ T5309] ? __pfx_vpanic+0x10/0x10 [ 74.374382][ T5309] ? is_bpf_text_address+0x292/0x2b0 [ 74.376674][ T5309] ? is_bpf_text_address+0x26/0x2b0 [ 74.379035][ T5309] panic+0xc5/0xd0 [ 74.380697][ T5309] ? __pfx_panic+0x10/0x10 [ 74.382676][ T5309] __warn+0x315/0x4c0 [ 74.384401][ T5309] ? netdev_queue_get_dma_dev+0x483/0x500 [ 74.386887][ T5309] ? netdev_queue_get_dma_dev+0x483/0x500 [ 74.389333][ T5309] __report_bug+0x276/0x570 [ 74.391291][ T5309] ? netdev_queue_get_dma_dev+0x483/0x500 [ 74.393854][ T5309] ? __pfx___report_bug+0x10/0x10 [ 74.396094][ T5309] report_bug_entry+0x19a/0x290 [ 74.398233][ T5309] ? netdev_queue_get_dma_dev+0x48f/0x500 [ 74.400697][ T5309] ? netdev_queue_get_dma_dev+0x494/0x500 [ 74.403139][ T5309] handle_bug+0xce/0x200 [ 74.404927][ T5309] exc_invalid_op+0x1a/0x50 [ 74.406862][ T5309] asm_exc_invalid_op+0x1a/0x20 [ 74.408879][ T5309] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500 [ 74.411596][ T5309] Code: 75 d7 eb dd e8 72 52 0f f8 90 0f 0b 90 e9 e0 fc ff ff e8 64 52 0f f8 48 8d 3d 6d 4e af 06 48 c7 c6 9f c7 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb [ 74.419967][ T5309] RSP: 0018:ffffc9000d4d79e0 EFLAGS: 00010283 [ 74.422758][ T5309] RAX: ffffffff89b7c07c RBX: ffff888012a24000 RCX: 0000000000100000 [ 74.426072][ T5309] RDX: 0000000000000048 RSI: ffffffff8e28c79f RDI: ffffffff90670ef0 [ 74.429471][ T5309] RBP: 0000000000000000 R08: ffffffff9002a027 R09: 1ffffffff2005404 [ 74.433019][ T5309] R10: dffffc0000000000 R11: fffffbfff2005405 R12: 0000000000000000 [ 74.436336][ T5309] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.439726][ T5309] ? netdev_queue_get_dma_dev+0x47c/0x500 [ 74.442243][ T5309] zcrx_register_netdev+0x213/0x520 [ 74.444798][ T5309] ? io_region_pin_pages+0xbe/0x190 [ 74.447395][ T5309] ? __pfx_zcrx_register_netdev+0x10/0x10 [ 74.449780][ T5309] ? __asan_memset+0x22/0x50 [ 74.451816][ T5309] ? io_allocate_rbuf_ring+0x19c/0x230 [ 74.454212][ T5309] io_register_zcrx+0x953/0xc00 [ 74.456333][ T5309] ? __pfx_io_register_zcrx+0x10/0x10 [ 74.458609][ T5309] ? __mutex_lock+0x30d/0x1550 [ 74.460722][ T5309] ? __fget_files+0x2a/0x420 [ 74.462726][ T5309] ? __pfx___mutex_lock+0x10/0x10 [ 74.464942][ T5309] ? __fget_files+0x3a2/0x420 [ 74.466850][ T5309] ? __fget_files+0x2a/0x420 [ 74.468688][ T5309] __se_sys_io_uring_register+0xc23/0x1ab0 [ 74.471006][ T5309] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 74.473487][ T5309] ? rcu_is_watching+0x15/0xb0 [ 74.475495][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.478091][ T5309] do_syscall_64+0x174/0x580 [ 74.480146][ T5309] ? trace_irq_disable+0x3b/0x140 [ 74.482296][ T5309] ? clear_bhb_loop+0x70/0xc0 [ 74.484341][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.486882][ T5309] RIP: 0033:0x7f60bf39e0d9 [ 74.488780][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.497061][ T5309] RSP: 002b:00007f60c02a3fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 74.500800][ T5309] RAX: ffffffffffffffda RBX: 00007f60bf625fa0 RCX: 00007f60bf39e0d9 [ 74.504576][ T5309] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003 [ 74.507965][ T5309] RBP: 00007f60bf435024 R08: 0000000000000000 R09: 0000000000000000 [ 74.511428][ T5309] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 74.514868][ T5309] R13: 00007f60bf626038 R14: 00007f60bf625fa0 R15: 00007ffcfcfe87b8 [ 74.518253][ T5309] [ 74.520126][ T5309] Kernel Offset: disabled [ 74.522170][ T5309] Rebooting in 86400 seconds..