program: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x8000000}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x8000000}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ec0000b10500", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0xffff, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x2}}}}}}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002600)={{{@in6=@remote, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xfffffffffffffebd) (async) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002600)={{{@in6=@remote, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xfffffffffffffebd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') pread64(r5, &(0x7f0000004180)=""/4096, 0x1000, 0x0) (async) pread64(r5, &(0x7f0000004180)=""/4096, 0x1000, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x140}) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0xd76, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000000), 0x0) r9 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046, 0xffffffff, 0x16c}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r9, 0xc, 0x7000000, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000004140)=ANY=[@ANYBLOB="00a3d9feb86e02e3b0bd5e574a822aa033060829d9f570706daaf7e64385f4c757c8c1509cbd06003c6d03000000ffdde116534a3e539068b679d93c646500b71c53966a788a93af70a9e8378a4dff15e4a14b5a4b6c14d2feff8ec15164ffffba586557115ae1b2470a06d956cae4ea3b76e646ef7b00f8bcbad4030fa2f87bae1c91858fdee78fd19866212b8aedf818fea039932b8d5f454cf4fa9f9c1c0bd1c3f8c02f1bc702d7359eb8be446f88b77ce92c3d943828ece9eef54e10c2b4d66fb887ed9e56e2fbf982ea3443c9c30d40c4dd067682187e224173e49a3d0700efeb8fc6570ce5feb7d4c9ab5c4cc09ba9ae6276845ff55c7fdaab25776edddef50000000064dadb122182564d38cae5597ef4d5a2bf63415fdfe0867dee339da4a49e99fcf977e3be588fb6a8e4ee0d5395982f374f3802e1cf12c5849a07af1ad1e9f1f52725eab00af283cbfbd18fdc8e1951ba26508eb3781117b3a5263e3671d0b9e5aedd4e9261654e7cd5213600a77f55f0ab706a787ac204fff298dc72be1e80389d8f55f42c3b92acaee0df6b6bea8459d98d7bdc8e99b33022a2474d5527b68ba085ce52bf894f86c0f0f2f76c1ffe1e7ecbf2f1d7f8de553ebd38a1ad1f67e43da56f853f594b16be3822b97389b248dd3079e41ce185206267e9f174fd6ba01f9cc52c465608000048d0ad524a70f1688d1f30ca729963f14d140bf06f606065187fef9b44e884699a5bda981b07000000000000009a74a84388dc82ed1ba29aba106b9f6e11ea249e4870494ede40f7bc48dc2a14669c1b94b32209f16b423a9274740b8f4e641d46a6f14f44e26c4b7d5422322a2f8d967532b133014da9c571ffc2664e0838391e0242bcacaa0c00358bdefaf2bc51dcf4a7673703b89cf213c3325c64493f3ed9866c4994c119363dec364813d2a1f3732323d6fde44b8178d35f936200a96118889bc34d1800779c82b877ba24d7aadec4abe72a3b5e9280cc12d3f3b60fa0163fc3ccdce18ced9a8ccf33122055f8870f804fb91d9f91ba8db505d020c01f532c9307117f34693dd535e1df52ccc94ba178aaf524117c214fa858d6da2f91c14ab5ea3080500366075694cf317cdad3e61d17bfa4490124e3616a0d581cf05cf2cecc0a9b83fe000000000000000000000000ed9111e3396fea123d15ff825b66e25945cb3fd6d31773af0634a155fe85159a643b064fba1135ff23d713431f3cf8587d8778f7eb1a02d155fb6185d105d26844d111c85fd6321fc4a9a368c04cd3f29a8badfb8a0152e7bb8b10a8e680292eb9ab00d3efd86111ca430dcfbf1910b235e636e99b615163989a3779e520b59d2e7db309a3710d5b11ae9c21ad7e4c7d000000000000000000000024aafb0479e8ea1ab8bfd97c2186a3a784ce996d63c42c31e3a211c284f7c0187429d7f01748d6f04519921b9d81a510de2ff2f21e7423328036d45adf7df57a0572a6dfba1e0e7dbed9aeebb7cd806f3685459be46dc69d314fd3ea633b1539f466c8d32a2e9392d1620656958900ffbf0c3f5139c03580f83516f02c1adbb6e16040f273456e982741fe40b3f6a3e9c8237f9da13572c209968b40dd6bf4fbb056d303698c74cdbd4c38c54e945e8e93ff946aa2a1fc940646fc7dbcb3455221cf6192c986eb7a087af45e68868f8495"], 0x1, 0x1d4, &(0x7f0000000980)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=ANY=[@ANYBLOB="d01800000802110000010802110000015050505050504e000f0202a401000107829281128181182d1a01000e070000000000000018001000110000000007060000000e3747dae341c3d68d1fbd27d9f4b221b71d35adfcf747180ab7fd7c443bde4ce4c59f8359cc05fb64e85f6e26ba79ac9944a7d9dafdb3d6f31bc6a1939af67c01d2988e8fa54dda16300ebfec577bfd92b803000000a9c1ebc2e87e178974274c8a17b3e4f0db9fbf8c8a84af44593e03fbd0f63ac0261381fb300b36e9c0df4a6edf2d6fe1faca7816440fdfad090000"], 0x43) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=ANY=[@ANYBLOB="d01800000802110000010802110000015050505050504e000f0202a401000107829281128181182d1a01000e070000000000000018001000110000000007060000000e3747dae341c3d68d1fbd27d9f4b221b71d35adfcf747180ab7fd7c443bde4ce4c59f8359cc05fb64e85f6e26ba79ac9944a7d9dafdb3d6f31bc6a1939af67c01d2988e8fa54dda16300ebfec577bfd92b803000000a9c1ebc2e87e178974274c8a17b3e4f0db9fbf8c8a84af44593e03fbd0f63ac0261381fb300b36e9c0df4a6edf2d6fe1faca7816440fdfad090000"], 0x43) [ 70.917235][ T4530] Bluetooth: hci0: command tx timeout [ 71.037137][ T5101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.057980][ T5101] ------------[ cut here ]------------ [ 71.059957][ T5101] WARNING: CPU: 0 PID: 5101 at include/linux/cpumask.h:135 io_sq_offload_create+0xd33/0xfd0 [ 71.063337][ T5101] Modules linked in: [ 71.064688][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 71.068226][ T5101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.072227][ T5101] RIP: 0010:io_sq_offload_create+0xd33/0xfd0 [ 71.074669][ T5101] Code: 3b f6 e9 53 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9e f3 ff ff 48 89 df e8 f8 f7 3b f6 e9 91 f3 ff ff e8 3e 44 d2 f5 90 <0f> 0b 90 e9 f1 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 48 [ 71.082037][ T5101] RSP: 0018:ffffc900030dfc40 EFLAGS: 00010293 [ 71.084172][ T5101] RAX: ffffffff8bc26fd2 RBX: ffffc900030dfe0c RCX: ffff88801f11c880 [ 71.086518][ T5101] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000007 [ 71.089111][ T5101] RBP: ffffc900030dfd40 R08: ffffffff8bc26cbd R09: 1ffffffff2039495 [ 71.091828][ T5101] R10: dffffc0000000000 R11: fffffbfff2039496 R12: ffff88803bef6000 [ 71.094656][ T5101] R13: 00000000ffffffff R14: 1ffff9200061bf94 R15: ffffc900030dfcc0 [ 71.097407][ T5101] FS: 00007f6ef4d546c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.100511][ T5101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.102806][ T5101] CR2: 00007f76ed317ea8 CR3: 000000003f7ba000 CR4: 0000000000350ef0 [ 71.105573][ T5101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.108595][ T5101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.111591][ T5101] Call Trace: [ 71.112702][ T5101] [ 71.113921][ T5101] ? __warn+0x168/0x4e0 [ 71.115561][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 71.117407][ T5101] ? report_bug+0x2b3/0x500 [ 71.119250][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 71.121654][ T5101] ? handle_bug+0x60/0x90 [ 71.123110][ T5101] ? exc_invalid_op+0x1a/0x50 [ 71.125384][ T5101] ? asm_exc_invalid_op+0x1a/0x20 [ 71.127357][ T5101] ? io_sq_offload_create+0xa1d/0xfd0 [ 71.129493][ T5101] ? io_sq_offload_create+0xd32/0xfd0 [ 71.131381][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 71.133109][ T5101] ? __pfx_io_sq_offload_create+0x10/0x10 [ 71.135007][ T5101] ? io_allocate_scq_urings+0x426/0x640 [ 71.136948][ T5101] io_uring_create+0x792/0x1360 [ 71.138650][ T5101] __se_sys_io_uring_setup+0x2ba/0x330 [ 71.140630][ T5101] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 71.142821][ T5101] ? do_syscall_64+0x100/0x230 [ 71.144674][ T5101] ? do_syscall_64+0xb6/0x230 [ 71.146393][ T5101] do_syscall_64+0xf3/0x230 [ 71.148122][ T5101] ? clear_bhb_loop+0x35/0x90 [ 71.149944][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.152170][ T5101] RIP: 0033:0x7f6ef3f7def9 [ 71.153885][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.160779][ T5101] RSP: 002b:00007f6ef4d54038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 71.163991][ T5101] RAX: ffffffffffffffda RBX: 00007f6ef4135f80 RCX: 00007f6ef3f7def9 [ 71.166360][ T5101] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000006503 [ 71.168759][ T5101] RBP: 00007f6ef3ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 71.171532][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.174283][ T5101] R13: 0000000000000000 R14: 00007f6ef4135f80 R15: 00007fff740ed168 [ 71.177222][ T5101] [ 71.178395][ T5101] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.181251][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 71.184771][ T5101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.188506][ T5101] Call Trace: [ 71.189586][ T5101] [ 71.190598][ T5101] dump_stack_lvl+0x241/0x360 [ 71.192208][ T5101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.194044][ T5101] ? __pfx__printk+0x10/0x10 [ 71.195712][ T5101] ? vscnprintf+0x5d/0x90 [ 71.197407][ T5101] panic+0x349/0x880 [ 71.198950][ T5101] ? __warn+0x177/0x4e0 [ 71.200552][ T5101] ? __pfx_panic+0x10/0x10 [ 71.202262][ T5101] __warn+0x34b/0x4e0 [ 71.203863][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 71.205934][ T5101] report_bug+0x2b3/0x500 [ 71.207544][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 71.209611][ T5101] handle_bug+0x60/0x90 [ 71.211281][ T5101] exc_invalid_op+0x1a/0x50 [ 71.213116][ T5101] asm_exc_invalid_op+0x1a/0x20 [ 71.214994][ T5101] RIP: 0010:io_sq_offload_create+0xd33/0xfd0 [ 71.217121][ T5101] Code: 3b f6 e9 53 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9e f3 ff ff 48 89 df e8 f8 f7 3b f6 e9 91 f3 ff ff e8 3e 44 d2 f5 90 <0f> 0b 90 e9 f1 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 48 [ 71.223745][ T5101] RSP: 0018:ffffc900030dfc40 EFLAGS: 00010293 [ 71.225613][ T5101] RAX: ffffffff8bc26fd2 RBX: ffffc900030dfe0c RCX: ffff88801f11c880 [ 71.228341][ T5101] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000007 [ 71.231372][ T5101] RBP: ffffc900030dfd40 R08: ffffffff8bc26cbd R09: 1ffffffff2039495 [ 71.234491][ T5101] R10: dffffc0000000000 R11: fffffbfff2039496 R12: ffff88803bef6000 [ 71.237338][ T5101] R13: 00000000ffffffff R14: 1ffff9200061bf94 R15: ffffc900030dfcc0 [ 71.240247][ T5101] ? io_sq_offload_create+0xa1d/0xfd0 [ 71.242083][ T5101] ? io_sq_offload_create+0xd32/0xfd0 [ 71.244117][ T5101] ? __pfx_io_sq_offload_create+0x10/0x10 [ 71.246188][ T5101] ? io_allocate_scq_urings+0x426/0x640 [ 71.248255][ T5101] io_uring_create+0x792/0x1360 [ 71.249989][ T5101] __se_sys_io_uring_setup+0x2ba/0x330 [ 71.252004][ T5101] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 71.254191][ T5101] ? do_syscall_64+0x100/0x230 [ 71.256010][ T5101] ? do_syscall_64+0xb6/0x230 [ 71.257884][ T5101] do_syscall_64+0xf3/0x230 [ 71.259626][ T5101] ? clear_bhb_loop+0x35/0x90 [ 71.261292][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.266988][ T5101] RIP: 0033:0x7f6ef3f7def9 [ 71.268725][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.275919][ T5101] RSP: 002b:00007f6ef4d54038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 71.279030][ T5101] RAX: ffffffffffffffda RBX: 00007f6ef4135f80 RCX: 00007f6ef3f7def9 [ 71.282279][ T5101] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000006503 [ 71.285401][ T5101] RBP: 00007f6ef3ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 71.288371][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.291451][ T5101] R13: 0000000000000000 R14: 00007f6ef4135f80 R15: 00007fff740ed168 [ 71.294416][ T5101] [ 71.295824][ T5101] Kernel Offset: disabled [ 71.297524][ T5101] Rebooting in 86400 seconds..