program: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x8000000010, 0x2, 0x8000002) r0 = socket(0x10, 0x80003, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x40000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10100, 0x0, 0xe, 0x7, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 94.294218][ T5277] Bluetooth: hci0: command tx timeout [ 94.474406][ T5317] ------------[ cut here ]------------ [ 94.476926][ T5317] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x3dd/0x480 [ 94.482384][ T5317] WARNING: kernel/sched/core.c:9161 at __might_sleep+0x92/0xf0, CPU#0: syz.0.0/5317 [ 94.485833][ T5317] Modules linked in: [ 94.487165][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.490895][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.495207][ T5317] RIP: 0010:__might_sleep+0xac/0xf0 [ 94.497509][ T5317] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 6e e9 e5 0e 43 80 3c 3c 00 74 08 48 89 df e8 ef 73 a2 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 94.506013][ T5317] RSP: 0018:ffffc9000db77ae0 EFLAGS: 00010246 [ 94.508698][ T5317] RAX: 0000000000000000 RBX: ffff8880357f9880 RCX: ffffffff819fafdd [ 94.511900][ T5317] RDX: ffffffff819fafdd RSI: 0000000000000002 RDI: ffffffff907bf290 [ 94.514820][ T5317] RBP: 0000000000000002 R08: ffffc9000db77c27 R09: 0000000000000000 [ 94.517382][ T5317] R10: ffffc9000db77c00 R11: fffff52001b6ef85 R12: 1ffff11006aff310 [ 94.520200][ T5317] R13: 000000000000026f R14: ffffffff907bf290 R15: dffffc0000000000 [ 94.523323][ T5317] FS: 00007fed3738d6c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 94.527269][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.530273][ T5317] CR2: 00007fed3738cff8 CR3: 00000000439f5000 CR4: 0000000000352ef0 [ 94.533907][ T5317] Call Trace: [ 94.535435][ T5317] [ 94.536788][ T5317] __mutex_lock+0x118/0x1550 [ 94.538939][ T5317] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.541207][ T5317] ? futex_hash_allocate+0x7fb/0xf00 [ 94.543722][ T5317] ? __pfx___mutex_lock+0x10/0x10 [ 94.546110][ T5317] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.548734][ T5317] ? prepare_to_wait_event+0x436/0x480 [ 94.551201][ T5317] futex_hash_allocate+0x7fb/0xf00 [ 94.553591][ T5317] ? __pfx_futex_hash_allocate+0x10/0x10 [ 94.556141][ T5317] ? __pfx_var_wake_function+0x10/0x10 [ 94.558614][ T5317] ? static_key_count+0x41/0x70 [ 94.560868][ T5317] ? security_task_prctl+0x163/0x190 [ 94.563549][ T5317] __se_sys_prctl+0x78c/0x1910 [ 94.565770][ T5317] ? __pfx___se_sys_prctl+0x10/0x10 [ 94.568125][ T5317] ? __x64_sys_prctl+0x20/0xc0 [ 94.570314][ T5317] do_syscall_64+0x166/0x520 [ 94.572557][ T5317] ? trace_irq_disable+0x3b/0x140 [ 94.575229][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.578270][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 94.580423][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.583189][ T5317] RIP: 0033:0x7fed3659e0d9 [ 94.585245][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.593870][ T5317] RSP: 002b:00007fed3738cfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.597591][ T5317] RAX: ffffffffffffffda RBX: 00007fed36826090 RCX: 00007fed3659e0d9 [ 94.601180][ T5317] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 94.604792][ T5317] RBP: 00007fed36635024 R08: 0000000000000000 R09: 0000000000000000 [ 94.608320][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.611902][ T5317] R13: 00007fed36826128 R14: 00007fed36826090 R15: 00007fff665b7f78 [ 94.615500][ T5317] [ 94.616933][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.620163][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.624172][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.628704][ T5317] Call Trace: [ 94.630246][ T5317] [ 94.631608][ T5317] vpanic+0x56d/0xa60 [ 94.633448][ T5317] ? __pfx__printk+0x10/0x10 [ 94.635536][ T5317] ? __pfx_vpanic+0x10/0x10 [ 94.637657][ T5317] ? is_bpf_text_address+0x292/0x2b0 [ 94.640036][ T5317] ? is_bpf_text_address+0x26/0x2b0 [ 94.642389][ T5317] panic+0xc5/0xd0 [ 94.644107][ T5317] ? __pfx_panic+0x10/0x10 [ 94.646192][ T5317] __warn+0x315/0x4c0 [ 94.648008][ T5317] ? __might_sleep+0x92/0xf0 [ 94.650116][ T5317] ? __might_sleep+0x92/0xf0 [ 94.652210][ T5317] __report_bug+0x276/0x570 [ 94.654285][ T5317] ? __might_sleep+0x92/0xf0 [ 94.656409][ T5317] ? __pfx___report_bug+0x10/0x10 [ 94.658700][ T5317] ? prepare_to_wait_event+0x3dd/0x480 [ 94.661172][ T5317] ? prepare_to_wait_event+0x3dd/0x480 [ 94.663611][ T5317] ? __lock_acquire+0x683/0x2cf0 [ 94.665951][ T5317] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.668553][ T5317] ? stack_depot_save_flags+0x404/0x7f0 [ 94.671062][ T5317] report_bug_entry+0x19b/0x290 [ 94.673193][ T5317] ? __might_sleep+0xac/0xf0 [ 94.675279][ T5317] ? __might_sleep+0xb1/0xf0 [ 94.677411][ T5317] handle_bug+0xce/0x200 [ 94.679326][ T5317] exc_invalid_op+0x1a/0x50 [ 94.681378][ T5317] asm_exc_invalid_op+0x1a/0x20 [ 94.683740][ T5317] RIP: 0010:__might_sleep+0xac/0xf0 [ 94.686181][ T5317] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 6e e9 e5 0e 43 80 3c 3c 00 74 08 48 89 df e8 ef 73 a2 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 94.694759][ T5317] RSP: 0018:ffffc9000db77ae0 EFLAGS: 00010246 [ 94.697559][ T5317] RAX: 0000000000000000 RBX: ffff8880357f9880 RCX: ffffffff819fafdd [ 94.701140][ T5317] RDX: ffffffff819fafdd RSI: 0000000000000002 RDI: ffffffff907bf290 [ 94.704710][ T5317] RBP: 0000000000000002 R08: ffffc9000db77c27 R09: 0000000000000000 [ 94.708313][ T5317] R10: ffffc9000db77c00 R11: fffff52001b6ef85 R12: 1ffff11006aff310 [ 94.711873][ T5317] R13: 000000000000026f R14: ffffffff907bf290 R15: dffffc0000000000 [ 94.715420][ T5317] ? prepare_to_wait_event+0x3dd/0x480 [ 94.717926][ T5317] ? prepare_to_wait_event+0x3dd/0x480 [ 94.720382][ T5317] __mutex_lock+0x118/0x1550 [ 94.722501][ T5317] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.724790][ T5317] ? futex_hash_allocate+0x7fb/0xf00 [ 94.727194][ T5317] ? __pfx___mutex_lock+0x10/0x10 [ 94.729464][ T5317] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 94.732087][ T5317] ? prepare_to_wait_event+0x436/0x480 [ 94.734557][ T5317] futex_hash_allocate+0x7fb/0xf00 [ 94.736908][ T5317] ? __pfx_futex_hash_allocate+0x10/0x10 [ 94.739434][ T5317] ? __pfx_var_wake_function+0x10/0x10 [ 94.741898][ T5317] ? static_key_count+0x41/0x70 [ 94.744118][ T5317] ? security_task_prctl+0x163/0x190 [ 94.746543][ T5317] __se_sys_prctl+0x78c/0x1910 [ 94.748713][ T5317] ? __pfx___se_sys_prctl+0x10/0x10 [ 94.751135][ T5317] ? __x64_sys_prctl+0x20/0xc0 [ 94.753347][ T5317] do_syscall_64+0x166/0x520 [ 94.755476][ T5317] ? trace_irq_disable+0x3b/0x140 [ 94.757770][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.760488][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 94.762640][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.765348][ T5317] RIP: 0033:0x7fed3659e0d9 [ 94.767400][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.775994][ T5317] RSP: 002b:00007fed3738cfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.779732][ T5317] RAX: ffffffffffffffda RBX: 00007fed36826090 RCX: 00007fed3659e0d9 [ 94.783286][ T5317] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 94.786835][ T5317] RBP: 00007fed36635024 R08: 0000000000000000 R09: 0000000000000000 [ 94.790235][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.793439][ T5317] R13: 00007fed36826128 R14: 00007fed36826090 R15: 00007fff665b7f78 [ 94.797093][ T5317] [ 94.798950][ T5317] Kernel Offset: disabled [ 94.800938][ T5317] Rebooting in 86400 seconds..