program: r0 = io_uring_setup(0x669, &(0x7f00000000c0)={0x0, 0x0, 0x40, 0xfffffffd}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffaa}}, 0x7c}}, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x80000000) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) io_uring_setup(0x40005ff2, &(0x7f0000000140)={0x0, 0x20edbc, 0xc9e, 0x800001, 0xce}) [ 71.613406][ T4528] Bluetooth: hci0: command tx timeout [ 72.598007][ T5101] ------------[ cut here ]------------ [ 72.599994][ T5101] WARNING: CPU: 0 PID: 5101 at include/linux/cpumask.h:135 io_sq_offload_create+0xd33/0xfd0 [ 72.603991][ T5101] Modules linked in: [ 72.605513][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 72.609620][ T5101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.613937][ T5101] RIP: 0010:io_sq_offload_create+0xd33/0xfd0 [ 72.616273][ T5101] Code: 3c f6 e9 53 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9e f3 ff ff 48 89 df e8 b8 27 3c f6 e9 91 f3 ff ff e8 fe 73 d2 f5 90 <0f> 0b 90 e9 f1 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 48 [ 72.623823][ T5101] RSP: 0018:ffffc9000b13fc40 EFLAGS: 00010283 [ 72.626210][ T5101] RAX: ffffffff8bc23fd2 RBX: ffffc9000b13fe0c RCX: 0000000000040000 [ 72.629164][ T5101] RDX: ffffc9000b472000 RSI: 0000000000001e49 RDI: 0000000000001e4a [ 72.632114][ T5101] RBP: ffffc9000b13fd40 R08: ffffffff8bc23cbd R09: 1ffffffff20394dd [ 72.635288][ T5101] R10: dffffc0000000000 R11: fffffbfff20394de R12: ffff888040e4e000 [ 72.638323][ T5101] R13: 0000000000800001 R14: 1ffff92001627f94 R15: ffffc9000b13fcc0 [ 72.641270][ T5101] FS: 00007f98b0d666c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 72.644745][ T5101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.647235][ T5101] CR2: 00000000200011c0 CR3: 000000003e3c8000 CR4: 0000000000350ef0 [ 72.651182][ T5101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.654558][ T5101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.657498][ T5101] Call Trace: [ 72.658748][ T5101] [ 72.659957][ T5101] ? __warn+0x168/0x4e0 [ 72.661570][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 72.664893][ T5101] ? report_bug+0x2b3/0x500 [ 72.666781][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 72.668850][ T5101] ? handle_bug+0x60/0x90 [ 72.670509][ T5101] ? exc_invalid_op+0x1a/0x50 [ 72.672255][ T5101] ? asm_exc_invalid_op+0x1a/0x20 [ 72.674234][ T5101] ? io_sq_offload_create+0xa1d/0xfd0 [ 72.676116][ T5101] ? io_sq_offload_create+0xd32/0xfd0 [ 72.678049][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 72.680125][ T5101] ? __pfx_io_sq_offload_create+0x10/0x10 [ 72.682121][ T5101] ? io_allocate_scq_urings+0x426/0x640 [ 72.684346][ T5101] io_uring_create+0x792/0x1360 [ 72.686210][ T5101] __se_sys_io_uring_setup+0x2ba/0x330 [ 72.688339][ T5101] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 72.690602][ T5101] ? do_syscall_64+0x100/0x230 [ 72.692443][ T5101] ? do_syscall_64+0xb6/0x230 [ 72.694414][ T5101] do_syscall_64+0xf3/0x230 [ 72.696200][ T5101] ? clear_bhb_loop+0x35/0x90 [ 72.697968][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.700212][ T5101] RIP: 0033:0x7f98aff7def9 [ 72.701932][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.709223][ T5101] RSP: 002b:00007f98b0d66038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 72.712342][ T5101] RAX: ffffffffffffffda RBX: 00007f98b0135f80 RCX: 00007f98aff7def9 [ 72.715849][ T5101] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000040005ff2 [ 72.719312][ T5101] RBP: 00007f98afff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 72.722804][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.726387][ T5101] R13: 0000000000000000 R14: 00007f98b0135f80 R15: 00007fffa2968818 [ 72.729712][ T5101] [ 72.731033][ T5101] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.734043][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0 [ 72.738485][ T5101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.743275][ T5101] Call Trace: [ 72.744558][ T5101] [ 72.745769][ T5101] dump_stack_lvl+0x241/0x360 [ 72.747604][ T5101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.749523][ T5101] ? __pfx__printk+0x10/0x10 [ 72.751270][ T5101] ? vscnprintf+0x5d/0x90 [ 72.752942][ T5101] panic+0x349/0x880 [ 72.754532][ T5101] ? __warn+0x177/0x4e0 [ 72.756124][ T5101] ? __pfx_panic+0x10/0x10 [ 72.757855][ T5101] __warn+0x34b/0x4e0 [ 72.759610][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 72.761737][ T5101] report_bug+0x2b3/0x500 [ 72.763377][ T5101] ? io_sq_offload_create+0xd33/0xfd0 [ 72.765391][ T5101] handle_bug+0x60/0x90 [ 72.766966][ T5101] exc_invalid_op+0x1a/0x50 [ 72.768954][ T5101] asm_exc_invalid_op+0x1a/0x20 [ 72.770927][ T5101] RIP: 0010:io_sq_offload_create+0xd33/0xfd0 [ 72.773207][ T5101] Code: 3c f6 e9 53 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9e f3 ff ff 48 89 df e8 b8 27 3c f6 e9 91 f3 ff ff e8 fe 73 d2 f5 90 <0f> 0b 90 e9 f1 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 48 [ 72.780505][ T5101] RSP: 0018:ffffc9000b13fc40 EFLAGS: 00010283 [ 72.782892][ T5101] RAX: ffffffff8bc23fd2 RBX: ffffc9000b13fe0c RCX: 0000000000040000 [ 72.785854][ T5101] RDX: ffffc9000b472000 RSI: 0000000000001e49 RDI: 0000000000001e4a [ 72.788763][ T5101] RBP: ffffc9000b13fd40 R08: ffffffff8bc23cbd R09: 1ffffffff20394dd [ 72.791770][ T5101] R10: dffffc0000000000 R11: fffffbfff20394de R12: ffff888040e4e000 [ 72.794831][ T5101] R13: 0000000000800001 R14: 1ffff92001627f94 R15: ffffc9000b13fcc0 [ 72.797762][ T5101] ? io_sq_offload_create+0xa1d/0xfd0 [ 72.799825][ T5101] ? io_sq_offload_create+0xd32/0xfd0 [ 72.801807][ T5101] ? __pfx_io_sq_offload_create+0x10/0x10 [ 72.803913][ T5101] ? io_allocate_scq_urings+0x426/0x640 [ 72.805800][ T5101] io_uring_create+0x792/0x1360 [ 72.807510][ T5101] __se_sys_io_uring_setup+0x2ba/0x330 [ 72.809489][ T5101] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 72.811569][ T5101] ? do_syscall_64+0x100/0x230 [ 72.813251][ T5101] ? do_syscall_64+0xb6/0x230 [ 72.814938][ T5101] do_syscall_64+0xf3/0x230 [ 72.816569][ T5101] ? clear_bhb_loop+0x35/0x90 [ 72.818199][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.820250][ T5101] RIP: 0033:0x7f98aff7def9 [ 72.821803][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.828819][ T5101] RSP: 002b:00007f98b0d66038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 72.832105][ T5101] RAX: ffffffffffffffda RBX: 00007f98b0135f80 RCX: 00007f98aff7def9 [ 72.835258][ T5101] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000040005ff2 [ 72.839158][ T5101] RBP: 00007f98afff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 72.842523][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.845235][ T5101] R13: 0000000000000000 R14: 00007f98b0135f80 R15: 00007fffa2968818 [ 72.848066][ T5101] [ 72.849386][ T5101] Kernel Offset: disabled [ 72.850842][ T5101] Rebooting in 86400 seconds..