program: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, 0x0, 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000680), 0x8, 0x4400066, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x97fa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x22a0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffafffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) [ 68.706984][ T4674] Bluetooth: hci0: command tx timeout [ 68.826005][ C0] hrtimer: interrupt took 75389 ns [ 70.817137][ T4674] Bluetooth: hci0: command tx timeout [ 71.834855][ T5325] ------------[ cut here ]------------ [ 71.837450][ T5325] WARNING: CPU: 0 PID: 5325 at kernel/events/core.c:7211 perf_pending_task+0x319/0x400 [ 71.841510][ T5325] Modules linked in: [ 71.843279][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 71.848438][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.853081][ T5325] RIP: 0010:perf_pending_task+0x319/0x400 [ 71.855657][ T5325] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 21 4f cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 84 76 09 cc e8 08 4f cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 71.863820][ T5325] RSP: 0018:ffffc9000d64f9d0 EFLAGS: 00010293 [ 71.866724][ T5325] RAX: ffffffff81f2fe18 RBX: dffffc0000000000 RCX: ffff88801c650000 [ 71.870500][ T5325] RDX: 0000000000000000 RSI: 0000000074982caa RDI: 0000000000000000 [ 71.874053][ T5325] RBP: 0000000074982caa R08: ffffc9000d64f987 R09: 0000000000000000 [ 71.877748][ T5325] R10: ffffc9000d64f940 R11: ffffffff81f2fb00 R12: 1ffff110035f4847 [ 71.881280][ T5325] R13: ffff88801c650000 R14: ffff88801afa4498 R15: ffff88801afa4238 [ 71.884420][ T5325] FS: 0000000000000000(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 71.888124][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.890857][ T5325] CR2: 00007f504f85c920 CR3: 000000000df38000 CR4: 0000000000352ef0 [ 71.894367][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.897875][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.901308][ T5325] Call Trace: [ 71.902701][ T5325] [ 71.903966][ T5325] task_work_run+0x1d1/0x260 [ 71.906189][ T5325] ? __pfx_task_work_run+0x10/0x10 [ 71.908446][ T5325] do_exit+0x6b5/0x22e0 [ 71.910329][ T5325] ? __bpf_trace_signal_deliver+0x147/0x1b0 [ 71.912884][ T5325] ? __pfx_do_exit+0x10/0x10 [ 71.914942][ T5325] ? proc_coredump_connector+0x172/0x4b0 [ 71.917611][ T5325] ? __pfx_proc_coredump_connector+0x10/0x10 [ 71.920413][ T5325] do_group_exit+0x21c/0x2d0 [ 71.922520][ T5325] get_signal+0x1286/0x1340 [ 71.924611][ T5325] arch_do_signal_or_restart+0x9a/0x750 [ 71.927070][ T5325] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 71.929767][ T5325] ? irqentry_exit+0x74/0x90 [ 71.931858][ T5325] exit_to_user_mode_loop+0x75/0x110 [ 71.934339][ T5325] do_syscall_64+0x2bd/0x3b0 [ 71.936490][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.939070][ T5325] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.941689][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 71.943784][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.946613][ T5325] RIP: 0033:0x7f5cf1f8e929 [ 71.948668][ T5325] Code: Unable to access opcode bytes at 0x7f5cf1f8e8ff. [ 71.951658][ T5325] RSP: 002b:00007f5cf2da8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 71.955403][ T5325] RAX: 0000000000000006 RBX: 00007f5cf21b5fa0 RCX: 00007f5cf1f8e929 [ 71.958971][ T5325] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 71.962479][ T5325] RBP: 00007f5cf2010b39 R08: 0000000000000008 R09: 0000000000000000 [ 71.965909][ T5325] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 71.969647][ T5325] R13: 0000000000000000 R14: 00007f5cf21b5fa0 R15: 00007ffebc3b6658 [ 71.973460][ T5325] [ 71.974823][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.978008][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 71.983134][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.987971][ T5325] Call Trace: [ 71.989521][ T5325] [ 71.990938][ T5325] dump_stack_lvl+0x99/0x250 [ 71.993053][ T5325] ? __asan_memcpy+0x40/0x70 [ 71.995231][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.997626][ T5325] ? __pfx__printk+0x10/0x10 [ 71.999741][ T5325] panic+0x2db/0x790 [ 72.001567][ T5325] ? __pfx_panic+0x10/0x10 [ 72.003630][ T5325] __warn+0x31b/0x4b0 [ 72.005390][ T5325] ? perf_pending_task+0x319/0x400 [ 72.007693][ T5325] ? perf_pending_task+0x319/0x400 [ 72.010058][ T5325] report_bug+0x2be/0x4f0 [ 72.012040][ T5325] ? perf_pending_task+0x319/0x400 [ 72.014395][ T5325] ? perf_pending_task+0x319/0x400 [ 72.016778][ T5325] ? perf_pending_task+0x31b/0x400 [ 72.019371][ T5325] handle_bug+0x84/0x160 [ 72.023409][ T5325] exc_invalid_op+0x1a/0x50 [ 72.025990][ T5325] asm_exc_invalid_op+0x1a/0x20 [ 72.028401][ T5325] RIP: 0010:perf_pending_task+0x319/0x400 [ 72.031233][ T5325] Code: 85 8f 00 00 00 41 fe 4d 00 eb 05 e8 21 4f cd ff 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 84 76 09 cc e8 08 4f cd ff 90 <0f> 0b 90 41 80 3c 1c 00 0f 85 02 ff ff ff e9 05 ff ff ff 44 89 e1 [ 72.039862][ T5325] RSP: 0018:ffffc9000d64f9d0 EFLAGS: 00010293 [ 72.042614][ T5325] RAX: ffffffff81f2fe18 RBX: dffffc0000000000 RCX: ffff88801c650000 [ 72.046188][ T5325] RDX: 0000000000000000 RSI: 0000000074982caa RDI: 0000000000000000 [ 72.049764][ T5325] RBP: 0000000074982caa R08: ffffc9000d64f987 R09: 0000000000000000 [ 72.053344][ T5325] R10: ffffc9000d64f940 R11: ffffffff81f2fb00 R12: 1ffff110035f4847 [ 72.056936][ T5325] R13: ffff88801c650000 R14: ffff88801afa4498 R15: ffff88801afa4238 [ 72.060526][ T5325] ? __pfx_perf_pending_task+0x10/0x10 [ 72.062963][ T5325] ? perf_pending_task+0x318/0x400 [ 72.065452][ T5325] task_work_run+0x1d1/0x260 [ 72.067551][ T5325] ? __pfx_task_work_run+0x10/0x10 [ 72.069830][ T5325] do_exit+0x6b5/0x22e0 [ 72.071659][ T5325] ? __bpf_trace_signal_deliver+0x147/0x1b0 [ 72.074418][ T5325] ? __pfx_do_exit+0x10/0x10 [ 72.076522][ T5325] ? proc_coredump_connector+0x172/0x4b0 [ 72.078960][ T5325] ? __pfx_proc_coredump_connector+0x10/0x10 [ 72.081636][ T5325] do_group_exit+0x21c/0x2d0 [ 72.083731][ T5325] get_signal+0x1286/0x1340 [ 72.085751][ T5325] arch_do_signal_or_restart+0x9a/0x750 [ 72.088191][ T5325] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 72.090949][ T5325] ? irqentry_exit+0x74/0x90 [ 72.093089][ T5325] exit_to_user_mode_loop+0x75/0x110 [ 72.095496][ T5325] do_syscall_64+0x2bd/0x3b0 [ 72.097570][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.100262][ T5325] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.102948][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 72.105157][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.107715][ T5325] RIP: 0033:0x7f5cf1f8e929 [ 72.109774][ T5325] Code: Unable to access opcode bytes at 0x7f5cf1f8e8ff. [ 72.112977][ T5325] RSP: 002b:00007f5cf2da8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 72.116820][ T5325] RAX: 0000000000000006 RBX: 00007f5cf21b5fa0 RCX: 00007f5cf1f8e929 [ 72.120427][ T5325] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 72.124072][ T5325] RBP: 00007f5cf2010b39 R08: 0000000000000008 R09: 0000000000000000 [ 72.127464][ T5325] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 72.131027][ T5325] R13: 0000000000000000 R14: 00007f5cf21b5fa0 R15: 00007ffebc3b6658 [ 72.134667][ T5325] [ 72.136496][ T5325] Kernel Offset: disabled [ 72.138548][ T5325] Rebooting in 86400 seconds..