program: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = io_uring_setup(0x37d0, &(0x7f0000000200)={0x0, 0x22b8, 0x8, 0x0, 0x138, 0x0, r0}) r2 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0xae18, 0x1046, 0xffffffff, 0x4000000, 0x0, r1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) syz_open_dev$evdev(0x0, 0x4, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207000002000000ad4429cdca3994a7453879e30000000005df388e"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, '\x00', 0x0, 0x0, 0x1, @mcast1, @mcast1}}}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061118c00000000ffffffff0020207025a92f0000002020207b1af8ff00000000bfa100200000000007010000f8ffffffb702eadfff84000000060000009500"/88], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) [ 69.063979][ T5088] Bluetooth: hci0: command tx timeout [ 69.178937][ T5103] ------------[ cut here ]------------ [ 69.181180][ T5103] WARNING: CPU: 0 PID: 5103 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0 [ 69.185624][ T5103] Modules linked in: [ 69.187253][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 69.191163][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.195307][ T5103] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 69.197511][ T5103] Code: 3d f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 4c 2e 3d f6 e9 95 f3 ff ff e8 72 7a d3 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 69.205210][ T5103] RSP: 0018:ffffc9000b9ffc40 EFLAGS: 00010293 [ 69.208028][ T5103] RAX: ffffffff8bc13f3e RBX: ffffc9000b9ffe0c RCX: ffff888000d14880 [ 69.211282][ T5103] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000007 [ 69.214621][ T5103] RBP: ffffc9000b9ffd40 R08: ffffffff8bc13c2b R09: 1ffffffff2039055 [ 69.217885][ T5103] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff888040e42000 [ 69.221167][ T5103] R13: 00000000ffffffff R14: 1ffff9200173ff94 R15: ffffc9000b9ffcc0 [ 69.224597][ T5103] FS: 00007f2061b976c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.228123][ T5103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.230678][ T5103] CR2: 0000000020001304 CR3: 000000003dfea000 CR4: 0000000000350ef0 [ 69.233858][ T5103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.237086][ T5103] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.240202][ T5103] Call Trace: [ 69.241612][ T5103] [ 69.243055][ T5103] ? __warn+0x168/0x4e0 [ 69.244832][ T5103] ? io_sq_offload_create+0xd2f/0xfd0 [ 69.247071][ T5103] ? report_bug+0x2b3/0x500 [ 69.248972][ T5103] ? io_sq_offload_create+0xd2f/0xfd0 [ 69.251025][ T5103] ? handle_bug+0x60/0x90 [ 69.252868][ T5103] ? exc_invalid_op+0x1a/0x50 [ 69.254784][ T5103] ? asm_exc_invalid_op+0x1a/0x20 [ 69.256744][ T5103] ? io_sq_offload_create+0xa1b/0xfd0 [ 69.258839][ T5103] ? io_sq_offload_create+0xd2e/0xfd0 [ 69.260902][ T5103] ? io_sq_offload_create+0xd2f/0xfd0 [ 69.263068][ T5103] ? __pfx_io_sq_offload_create+0x10/0x10 [ 69.265257][ T5103] ? io_allocate_scq_urings+0x426/0x640 [ 69.267326][ T5103] io_uring_create+0x792/0x1360 [ 69.269223][ T5103] __se_sys_io_uring_setup+0x2ba/0x330 [ 69.271411][ T5103] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 69.273924][ T5103] ? do_syscall_64+0x100/0x230 [ 69.276001][ T5103] ? do_syscall_64+0xb6/0x230 [ 69.277847][ T5103] do_syscall_64+0xf3/0x230 [ 69.279635][ T5103] ? clear_bhb_loop+0x35/0x90 [ 69.281455][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.283955][ T5103] RIP: 0033:0x7f2060d7def9 [ 69.285722][ T5103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.293758][ T5103] RSP: 002b:00007f2061b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 69.297052][ T5103] RAX: ffffffffffffffda RBX: 00007f2060f35f80 RCX: 00007f2060d7def9 [ 69.300224][ T5103] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000006503 [ 69.303328][ T5103] RBP: 00007f2060df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 69.306305][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.309431][ T5103] R13: 0000000000000000 R14: 00007f2060f35f80 R15: 00007ffe82c2ab68 [ 69.312587][ T5103] [ 69.314073][ T5103] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.317069][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 69.321078][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.325246][ T5103] Call Trace: [ 69.326557][ T5103] [ 69.327680][ T5103] dump_stack_lvl+0x241/0x360 [ 69.329430][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.331270][ T5103] ? __pfx__printk+0x10/0x10 [ 69.333065][ T5103] ? vscnprintf+0x5d/0x90 [ 69.335032][ T5103] panic+0x349/0x880 [ 69.336866][ T5103] ? __warn+0x177/0x4e0 [ 69.338828][ T5103] ? __pfx_panic+0x10/0x10 [ 69.340728][ T5103] __warn+0x34b/0x4e0 [ 69.342326][ T5103] ? io_sq_offload_create+0xd2f/0xfd0 [ 69.344498][ T5103] report_bug+0x2b3/0x500 [ 69.346190][ T5103] ? io_sq_offload_create+0xd2f/0xfd0 [ 69.348307][ T5103] handle_bug+0x60/0x90 [ 69.349926][ T5103] exc_invalid_op+0x1a/0x50 [ 69.351684][ T5103] asm_exc_invalid_op+0x1a/0x20 [ 69.353456][ T5103] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 69.355556][ T5103] Code: 3d f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 4c 2e 3d f6 e9 95 f3 ff ff e8 72 7a d3 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 69.362071][ T5103] RSP: 0018:ffffc9000b9ffc40 EFLAGS: 00010293 [ 69.364185][ T5103] RAX: ffffffff8bc13f3e RBX: ffffc9000b9ffe0c RCX: ffff888000d14880 [ 69.367019][ T5103] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000007 [ 69.370043][ T5103] RBP: ffffc9000b9ffd40 R08: ffffffff8bc13c2b R09: 1ffffffff2039055 [ 69.373143][ T5103] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff888040e42000 [ 69.376290][ T5103] R13: 00000000ffffffff R14: 1ffff9200173ff94 R15: ffffc9000b9ffcc0 [ 69.379287][ T5103] ? io_sq_offload_create+0xa1b/0xfd0 [ 69.381387][ T5103] ? io_sq_offload_create+0xd2e/0xfd0 [ 69.383558][ T5103] ? __pfx_io_sq_offload_create+0x10/0x10 [ 69.386108][ T5103] ? io_allocate_scq_urings+0x426/0x640 [ 69.388552][ T5103] io_uring_create+0x792/0x1360 [ 69.390529][ T5103] __se_sys_io_uring_setup+0x2ba/0x330 [ 69.392609][ T5103] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 69.394988][ T5103] ? do_syscall_64+0x100/0x230 [ 69.396928][ T5103] ? do_syscall_64+0xb6/0x230 [ 69.398780][ T5103] do_syscall_64+0xf3/0x230 [ 69.400526][ T5103] ? clear_bhb_loop+0x35/0x90 [ 69.402360][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.404824][ T5103] RIP: 0033:0x7f2060d7def9 [ 69.406848][ T5103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.414353][ T5103] RSP: 002b:00007f2061b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 69.417565][ T5103] RAX: ffffffffffffffda RBX: 00007f2060f35f80 RCX: 00007f2060d7def9 [ 69.420619][ T5103] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000006503 [ 69.423909][ T5103] RBP: 00007f2060df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 69.426911][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.430553][ T5103] R13: 0000000000000000 R14: 00007f2060f35f80 R15: 00007ffe82c2ab68 [ 69.433987][ T5103] [ 69.435511][ T5103] Kernel Offset: disabled [ 69.437248][ T5103] Rebooting in 86400 seconds..