program: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r1 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) lsm_get_self_attr(0x69, &(0x7f0000001740)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000004c0)=0x1020, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) dup2(r1, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='afs_call_state\x00'}, 0x18) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) semop(0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) [ 75.485649][ T4667] Bluetooth: hci0: command tx timeout [ 75.940285][ C0] hrtimer: interrupt took 35316 ns [ 76.677169][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.679979][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.542701][ T4667] Bluetooth: hci0: command tx timeout [ 78.575421][ T5322] ------------[ cut here ]------------ [ 78.578000][ T5322] WARNING: CPU: 0 PID: 5322 at kernel/events/core.c:7211 perf_pending_task+0x319/0x400 [ 78.582635][ T5322] Modules linked in: [ 78.584411][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 78.589787][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.594535][ T5322] RIP: 0010:perf_pending_task+0x319/0x400 [ 78.596698][ T5322] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 21 4f cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 84 76 09 cc e8 08 4f cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 78.604485][ T5322] RSP: 0018:ffffc9000d3cf9d0 EFLAGS: 00010293 [ 78.607263][ T5322] RAX: ffffffff81f2fe18 RBX: dffffc0000000000 RCX: ffff888033994880 [ 78.610983][ T5322] RDX: 0000000000000000 RSI: 000000007496c9f6 RDI: 0000000000000000 [ 78.614530][ T5322] RBP: 000000007496c9f6 R08: ffffc9000d3cf987 R09: 0000000000000000 [ 78.617980][ T5322] R10: ffffc9000d3cf940 R11: ffffffff81f2fb00 R12: 1ffff110035f910f [ 78.621483][ T5322] R13: ffff888033994880 R14: ffff88801afc8ad8 R15: ffff88801afc8878 [ 78.625107][ T5322] FS: 0000000000000000(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 78.629328][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.632247][ T5322] CR2: 00007f7571fa89a0 CR3: 0000000051262000 CR4: 0000000000352ef0 [ 78.635739][ T5322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.639484][ T5322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.643221][ T5322] Call Trace: [ 78.644772][ T5322] [ 78.646659][ T5322] task_work_run+0x1d1/0x260 [ 78.648942][ T5322] ? __pfx_task_work_run+0x10/0x10 [ 78.651393][ T5322] do_exit+0x6b5/0x22e0 [ 78.654070][ T5322] ? __pfx_do_exit+0x10/0x10 [ 78.656599][ T5322] ? proc_coredump_connector+0x172/0x4b0 [ 78.659127][ T5322] ? __pfx_proc_coredump_connector+0x10/0x10 [ 78.661768][ T5322] do_group_exit+0x21c/0x2d0 [ 78.663786][ T5322] get_signal+0x1286/0x1340 [ 78.665993][ T5322] arch_do_signal_or_restart+0x9a/0x750 [ 78.668671][ T5322] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 78.671433][ T5322] ? irqentry_exit+0x74/0x90 [ 78.673584][ T5322] exit_to_user_mode_loop+0x75/0x110 [ 78.676149][ T5322] do_syscall_64+0x2bd/0x3b0 [ 78.678156][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.680364][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.683232][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 78.685312][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.688201][ T5322] RIP: 0033:0x7f757118e929 [ 78.690358][ T5322] Code: Unable to access opcode bytes at 0x7f757118e8ff. [ 78.693329][ T5322] RSP: 002b:00007f7571fc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 78.696756][ T5322] RAX: 0000000000000007 RBX: 00007f75713b5fa0 RCX: 00007f757118e929 [ 78.700261][ T5322] RDX: ffbfffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 78.703722][ T5322] RBP: 00007f7571210b39 R08: 0000000000000001 R09: 0000000000000000 [ 78.707626][ T5322] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 78.711132][ T5322] R13: 0000000000000000 R14: 00007f75713b5fa0 R15: 00007ffca539cf58 [ 78.714579][ T5322] [ 78.716565][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.719775][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 78.724914][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.729703][ T5322] Call Trace: [ 78.731655][ T5322] [ 78.733320][ T5322] dump_stack_lvl+0x99/0x250 [ 78.735849][ T5322] ? __asan_memcpy+0x40/0x70 [ 78.738349][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.741007][ T5322] ? __pfx__printk+0x10/0x10 [ 78.743164][ T5322] panic+0x2db/0x790 [ 78.744915][ T5322] ? __pfx_panic+0x10/0x10 [ 78.746906][ T5322] __warn+0x31b/0x4b0 [ 78.748769][ T5322] ? perf_pending_task+0x319/0x400 [ 78.751044][ T5322] ? perf_pending_task+0x319/0x400 [ 78.753307][ T5322] report_bug+0x2be/0x4f0 [ 78.755277][ T5322] ? perf_pending_task+0x319/0x400 [ 78.757450][ T5322] ? perf_pending_task+0x319/0x400 [ 78.759636][ T5322] ? perf_pending_task+0x31b/0x400 [ 78.761899][ T5322] handle_bug+0x84/0x160 [ 78.763829][ T5322] exc_invalid_op+0x1a/0x50 [ 78.766143][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 78.768367][ T5322] RIP: 0010:perf_pending_task+0x319/0x400 [ 78.770914][ T5322] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 21 4f cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 84 76 09 cc e8 08 4f cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 78.779419][ T5322] RSP: 0018:ffffc9000d3cf9d0 EFLAGS: 00010293 [ 78.782237][ T5322] RAX: ffffffff81f2fe18 RBX: dffffc0000000000 RCX: ffff888033994880 [ 78.785695][ T5322] RDX: 0000000000000000 RSI: 000000007496c9f6 RDI: 0000000000000000 [ 78.789299][ T5322] RBP: 000000007496c9f6 R08: ffffc9000d3cf987 R09: 0000000000000000 [ 78.792856][ T5322] R10: ffffc9000d3cf940 R11: ffffffff81f2fb00 R12: 1ffff110035f910f [ 78.796303][ T5322] R13: ffff888033994880 R14: ffff88801afc8ad8 R15: ffff88801afc8878 [ 78.799858][ T5322] ? __pfx_perf_pending_task+0x10/0x10 [ 78.802226][ T5322] ? perf_pending_task+0x318/0x400 [ 78.804842][ T5322] task_work_run+0x1d1/0x260 [ 78.807024][ T5322] ? __pfx_task_work_run+0x10/0x10 [ 78.809269][ T5322] do_exit+0x6b5/0x22e0 [ 78.811158][ T5322] ? __pfx_do_exit+0x10/0x10 [ 78.813199][ T5322] ? proc_coredump_connector+0x172/0x4b0 [ 78.815653][ T5322] ? __pfx_proc_coredump_connector+0x10/0x10 [ 78.818342][ T5322] do_group_exit+0x21c/0x2d0 [ 78.820471][ T5322] get_signal+0x1286/0x1340 [ 78.822612][ T5322] arch_do_signal_or_restart+0x9a/0x750 [ 78.825000][ T5322] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 78.827753][ T5322] ? irqentry_exit+0x74/0x90 [ 78.829745][ T5322] exit_to_user_mode_loop+0x75/0x110 [ 78.832076][ T5322] do_syscall_64+0x2bd/0x3b0 [ 78.834133][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.836388][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.839129][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 78.841464][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.844099][ T5322] RIP: 0033:0x7f757118e929 [ 78.846099][ T5322] Code: Unable to access opcode bytes at 0x7f757118e8ff. [ 78.849172][ T5322] RSP: 002b:00007f7571fc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 78.853070][ T5322] RAX: 0000000000000007 RBX: 00007f75713b5fa0 RCX: 00007f757118e929 [ 78.856724][ T5322] RDX: ffbfffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 78.860240][ T5322] RBP: 00007f7571210b39 R08: 0000000000000001 R09: 0000000000000000 [ 78.863833][ T5322] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 78.867625][ T5322] R13: 0000000000000000 R14: 00007f75713b5fa0 R15: 00007ffca539cf58 [ 78.871240][ T5322] [ 78.872988][ T5322] Kernel Offset: disabled [ 78.874746][ T5322] Rebooting in 86400 seconds..