program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='10000', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x8000)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, 0x0)
write(r4, &(0x7f00000002c0)='2', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='dummy_udc.0', 0xb)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000000)={0x3, 0x3})
mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_RELEASE(r8, 0x401070ca, 0x0)
[ 106.131801][ T4637] Bluetooth: hci0: command tx timeout
[ 106.340630][ T5307] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[ 106.382552][ T5307] ------------[ cut here ]------------
[ 106.385295][ T5307] !work->func
[ 106.385304][ T5307] WARNING: kernel/workqueue.c:4335 at __flush_work+0xb8f/0xca0, CPU#0: syz.0.0/5307
[ 106.391507][ T5307] Modules linked in:
[ 106.394097][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 106.397958][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 106.402054][ T5307] RIP: 0010:__flush_work+0xb8f/0xca0
[ 106.404207][ T5307] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 84 47 0a cc e8 50 dd 38 00 90 0f 0b 90 e9 7c ff ff ff e8 42 dd 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 28
[ 106.412217][ T5307] RSP: 0018:ffffc9000dd3fa20 EFLAGS: 00010283
[ 106.414545][ T5307] RAX: ffffffff818e346e RBX: ffff8880525ff9b0 RCX: 0000000000100000
[ 106.417539][ T5307] RDX: ffffc9000eae2000 RSI: 000000000001e0cc RDI: 000000000001e0cd
[ 106.420580][ T5307] RBP: ffffc9000dd3fbd0 R08: ffffffff90576d37 R09: 1ffffffff20aeda6
[ 106.423898][ T5307] R10: dffffc0000000000 R11: fffffbfff20aeda7 R12: dffffc0000000000
[ 106.427191][ T5307] R13: 1ffff1100a4bff36 R14: 1ffff92001ba7f4c R15: ffff8880525ff998
[ 106.430516][ T5307] FS: 00007fcf5a8ec6c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 106.434303][ T5307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 106.437204][ T5307] CR2: 0000000000000000 CR3: 00000000524d0000 CR4: 0000000000352ef0
[ 106.440433][ T5307] Call Trace:
[ 106.441860][ T5307]
[ 106.443144][ T5307] ? trace_contention_end+0x3d/0x140
[ 106.445239][ T5307] ? __mutex_lock+0x30d/0x1550
[ 106.447220][ T5307] ? __pfx___flush_work+0x10/0x10
[ 106.449293][ T5307] ? __mutex_lock+0x30d/0x1550
[ 106.451289][ T5307] ? rcu_is_watching+0x15/0xb0
[ 106.453444][ T5307] ? work_grab_pending+0x3d1/0x930
[ 106.455879][ T5307] ? __cancel_work_sync+0x5c/0x110
[ 106.458100][ T5307] __cancel_work_sync+0xbe/0x110
[ 106.460127][ T5307] f_midi_free+0xac/0x1f0
[ 106.461940][ T5307] config_usb_cfg_unlink+0x236/0x260
[ 106.464158][ T5307] configfs_symlink+0xde9/0x1030
[ 106.466461][ T5307] ? __pfx_configfs_symlink+0x10/0x10
[ 106.468601][ T5307] ? bpf_lsm_inode_symlink+0x9/0x20
[ 106.470662][ T5307] vfs_symlink+0x18b/0x330
[ 106.472480][ T5307] ? security_path_symlink+0xfd/0x360
[ 106.474767][ T5307] filename_symlinkat+0x1cd/0x410
[ 106.477272][ T5307] ? __pfx_filename_symlinkat+0x10/0x10
[ 106.480085][ T5307] ? do_getname+0x151/0x250
[ 106.481901][ T5307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.484293][ T5307] __se_sys_symlinkat+0x4e/0x2b0
[ 106.487942][ T5307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.490470][ T5307] do_syscall_64+0x174/0x580
[ 106.492546][ T5307] ? trace_irq_disable+0x3b/0x140
[ 106.494647][ T5307] ? clear_bhb_loop+0x70/0xc0
[ 106.496722][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.499271][ T5307] RIP: 0033:0x7fcf5999e0d9
[ 106.501304][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.509682][ T5307] RSP: 002b:00007fcf5a8ebfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 106.513166][ T5307] RAX: ffffffffffffffda RBX: 00007fcf59c25fa0 RCX: 00007fcf5999e0d9
[ 106.516661][ T5307] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000100
[ 106.519996][ T5307] RBP: 00007fcf59a35024 R08: 0000000000000000 R09: 0000000000000000
[ 106.523308][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.526917][ T5307] R13: 00007fcf59c26038 R14: 00007fcf59c25fa0 R15: 00007ffe1dc2c9d8
[ 106.530503][ T5307]
[ 106.531927][ T5307] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 106.534957][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 106.538530][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 106.542455][ T5307] Call Trace:
[ 106.543863][ T5307]
[ 106.545080][ T5307] vpanic+0x56c/0xa60
[ 106.546787][ T5307] ? __pfx__printk+0x10/0x10
[ 106.548723][ T5307] ? __pfx_vpanic+0x10/0x10
[ 106.550601][ T5307] ? is_bpf_text_address+0x292/0x2b0
[ 106.552581][ T5307] ? is_bpf_text_address+0x26/0x2b0
[ 106.554684][ T5307] panic+0xc5/0xd0
[ 106.556326][ T5307] ? __pfx_panic+0x10/0x10
[ 106.558202][ T5307] __warn+0x315/0x4c0
[ 106.559950][ T5307] ? __flush_work+0xb8f/0xca0
[ 106.561949][ T5307] ? __flush_work+0xb8f/0xca0
[ 106.563935][ T5307] __report_bug+0x276/0x570
[ 106.565846][ T5307] ? __flush_work+0xb8f/0xca0
[ 106.567752][ T5307] ? __pfx___report_bug+0x10/0x10
[ 106.569970][ T5307] ? __kernel_text_address+0xd/0x30
[ 106.572069][ T5307] ? __lock_acquire+0x683/0x2cf0
[ 106.574561][ T5307] ? __lock_acquire+0x683/0x2cf0
[ 106.577308][ T5307] ? __flush_work+0xb8f/0xca0
[ 106.579442][ T5307] report_bug+0x16a/0x220
[ 106.581279][ T5307] ? __flush_work+0xb8f/0xca0
[ 106.583351][ T5307] ? __flush_work+0xb91/0xca0
[ 106.585413][ T5307] handle_bug+0x9c/0x200
[ 106.587364][ T5307] exc_invalid_op+0x1a/0x50
[ 106.589342][ T5307] asm_exc_invalid_op+0x1a/0x20
[ 106.591374][ T5307] RIP: 0010:__flush_work+0xb8f/0xca0
[ 106.593554][ T5307] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 84 47 0a cc e8 50 dd 38 00 90 0f 0b 90 e9 7c ff ff ff e8 42 dd 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 28
[ 106.601354][ T5307] RSP: 0018:ffffc9000dd3fa20 EFLAGS: 00010283
[ 106.603862][ T5307] RAX: ffffffff818e346e RBX: ffff8880525ff9b0 RCX: 0000000000100000
[ 106.607118][ T5307] RDX: ffffc9000eae2000 RSI: 000000000001e0cc RDI: 000000000001e0cd
[ 106.610353][ T5307] RBP: ffffc9000dd3fbd0 R08: ffffffff90576d37 R09: 1ffffffff20aeda6
[ 106.613549][ T5307] R10: dffffc0000000000 R11: fffffbfff20aeda7 R12: dffffc0000000000
[ 106.616776][ T5307] R13: 1ffff1100a4bff36 R14: 1ffff92001ba7f4c R15: ffff8880525ff998
[ 106.619951][ T5307] ? __flush_work+0xb8e/0xca0
[ 106.621900][ T5307] ? trace_contention_end+0x3d/0x140
[ 106.624073][ T5307] ? __mutex_lock+0x30d/0x1550
[ 106.626054][ T5307] ? __pfx___flush_work+0x10/0x10
[ 106.628150][ T5307] ? __mutex_lock+0x30d/0x1550
[ 106.630178][ T5307] ? rcu_is_watching+0x15/0xb0
[ 106.632187][ T5307] ? work_grab_pending+0x3d1/0x930
[ 106.634251][ T5307] ? __cancel_work_sync+0x5c/0x110
[ 106.636312][ T5307] __cancel_work_sync+0xbe/0x110
[ 106.638312][ T5307] f_midi_free+0xac/0x1f0
[ 106.640112][ T5307] config_usb_cfg_unlink+0x236/0x260
[ 106.642309][ T5307] configfs_symlink+0xde9/0x1030
[ 106.644385][ T5307] ? __pfx_configfs_symlink+0x10/0x10
[ 106.646696][ T5307] ? bpf_lsm_inode_symlink+0x9/0x20
[ 106.648961][ T5307] vfs_symlink+0x18b/0x330
[ 106.650910][ T5307] ? security_path_symlink+0xfd/0x360
[ 106.653229][ T5307] filename_symlinkat+0x1cd/0x410
[ 106.655288][ T5307] ? __pfx_filename_symlinkat+0x10/0x10
[ 106.657700][ T5307] ? do_getname+0x151/0x250
[ 106.659674][ T5307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.662248][ T5307] __se_sys_symlinkat+0x4e/0x2b0
[ 106.664442][ T5307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.667025][ T5307] do_syscall_64+0x174/0x580
[ 106.668971][ T5307] ? trace_irq_disable+0x3b/0x140
[ 106.671153][ T5307] ? clear_bhb_loop+0x70/0xc0
[ 106.673252][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.675853][ T5307] RIP: 0033:0x7fcf5999e0d9
[ 106.677767][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.685471][ T5307] RSP: 002b:00007fcf5a8ebfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 106.688914][ T5307] RAX: ffffffffffffffda RBX: 00007fcf59c25fa0 RCX: 00007fcf5999e0d9
[ 106.691789][ T5307] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000100
[ 106.695052][ T5307] RBP: 00007fcf59a35024 R08: 0000000000000000 R09: 0000000000000000
[ 106.698268][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.701304][ T5307] R13: 00007fcf59c26038 R14: 00007fcf59c25fa0 R15: 00007ffe1dc2c9d8
[ 106.704523][ T5307]
[ 106.706163][ T5307] Kernel Offset: disabled
[ 106.707773][ T5307] Rebooting in 86400 seconds..