program: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001e000100000000000000", @ANYRES32], 0x30}}, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}}]}, 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100)}], 0x492492492492642, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) (async) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e0402030c29"], 0x7) waitid(0x0, 0x0, 0x0, 0x4, 0x0) [ 80.096336][ T4665] Bluetooth: hci0: command tx timeout [ 80.099800][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.101927][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 80.231300][ T5328] ------------[ cut here ]------------ [ 80.233566][ T5328] WARNING: CPU: 0 PID: 5328 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 [ 80.237176][ T5328] Modules linked in: [ 80.238664][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 80.242658][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.246845][ T5328] RIP: 0010:__queue_work+0xcd3/0xf50 [ 80.249015][ T5328] Code: ff e8 f1 e4 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 e3 e4 37 00 eb 13 e8 dc e4 37 00 eb 0c e8 d5 e4 37 00 eb 05 e8 ce e4 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 80.256686][ T5328] RSP: 0018:ffffc9000d30fa88 EFLAGS: 00010093 [ 80.259068][ T5328] RAX: ffffffff81877944 RBX: ffff888000fdc880 RCX: ffff888000fdc880 [ 80.262220][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.265329][ T5328] RBP: 0000000000000000 R08: ffffffff81876da4 R09: 0000000000000000 [ 80.268312][ T5328] R10: ffffc9000d30fb60 R11: fffff52001a61f6d R12: ffff888043b9a000 [ 80.271385][ T5328] R13: ffff888043b9a1c0 R14: dffffc0000000000 R15: 0000000000000008 [ 80.274583][ T5328] FS: 00007f8e67de76c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 80.278100][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.280694][ T5328] CR2: 00007f8e67de6fe0 CR3: 0000000053256000 CR4: 0000000000352ef0 [ 80.283791][ T5328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.286863][ T5328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.289988][ T5328] Call Trace: [ 80.291315][ T5328] [ 80.292478][ T5328] ? __warn+0x165/0x4d0 [ 80.294117][ T5328] ? __queue_work+0xcd3/0xf50 [ 80.295996][ T5328] ? report_bug+0x2b3/0x500 [ 80.297856][ T5328] ? __queue_work+0xcd3/0xf50 [ 80.299730][ T5328] ? handle_bug+0x60/0x90 [ 80.301376][ T5328] ? exc_invalid_op+0x1a/0x50 [ 80.303033][ T5328] ? asm_exc_invalid_op+0x1a/0x20 [ 80.304837][ T5328] ? __queue_work+0x124/0xf50 [ 80.306640][ T5328] ? __queue_work+0xcc4/0xf50 [ 80.308572][ T5328] ? __queue_work+0xcd3/0xf50 [ 80.310470][ T5328] ? __queue_work+0xcc4/0xf50 [ 80.312305][ T5328] queue_work_on+0x1c2/0x380 [ 80.314102][ T5328] ? __pfx_queue_work_on+0x10/0x10 [ 80.316223][ T5328] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 80.318683][ T5328] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.321166][ T5328] ? skb_queue_tail+0x36/0x120 [ 80.323030][ T5328] hci_recv_frame+0x598/0x6f0 [ 80.324856][ T5328] vhci_write+0x35a/0x490 [ 80.326633][ T5328] vfs_write+0xacf/0xd10 [ 80.328359][ T5328] ? __pfx_vhci_write+0x10/0x10 [ 80.330343][ T5328] ? __pfx_vfs_write+0x10/0x10 [ 80.333470][ T5328] ? __fget_files+0x2a/0x410 [ 80.335358][ T5328] ? __fget_files+0x2a/0x410 [ 80.337184][ T5328] ksys_write+0x18f/0x2b0 [ 80.338946][ T5328] ? __pfx_ksys_write+0x10/0x10 [ 80.340919][ T5328] ? exc_page_fault+0x590/0x8b0 [ 80.342883][ T5328] ? do_syscall_64+0xb6/0x230 [ 80.344799][ T5328] do_syscall_64+0xf3/0x230 [ 80.346664][ T5328] ? clear_bhb_loop+0x35/0x90 [ 80.348592][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.350952][ T5328] RIP: 0033:0x7f8e66f8b89f [ 80.352600][ T5328] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 80.359464][ T5328] RSP: 002b:00007f8e67de7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 80.362582][ T5328] RAX: ffffffffffffffda RBX: 00007f8e671a6160 RCX: 00007f8e66f8b89f [ 80.365588][ T5328] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 00000000000000ca [ 80.368602][ T5328] RBP: 00007f8e6700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.371799][ T5328] R10: 00002000000006c0 R11: 0000000000000293 R12: 0000000000000000 [ 80.374761][ T5328] R13: 0000000000000001 R14: 00007f8e671a6160 R15: 00007fff4183aaf8 [ 80.377837][ T5328] [ 80.379160][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.382075][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 80.386158][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.390311][ T5328] Call Trace: [ 80.391819][ T5328] [ 80.393069][ T5328] dump_stack_lvl+0x241/0x360 [ 80.395022][ T5328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.397121][ T5328] ? __pfx__printk+0x10/0x10 [ 80.398954][ T5328] ? _printk+0xd5/0x120 [ 80.400687][ T5328] ? __init_begin+0x41000/0x41000 [ 80.402737][ T5328] ? vscnprintf+0x5d/0x90 [ 80.404545][ T5328] panic+0x349/0x880 [ 80.406182][ T5328] ? __warn+0x174/0x4d0 [ 80.407854][ T5328] ? __pfx_panic+0x10/0x10 [ 80.409573][ T5328] __warn+0x344/0x4d0 [ 80.411267][ T5328] ? __queue_work+0xcd3/0xf50 [ 80.413049][ T5328] report_bug+0x2b3/0x500 [ 80.414522][ T5328] ? __queue_work+0xcd3/0xf50 [ 80.416341][ T5328] handle_bug+0x60/0x90 [ 80.417934][ T5328] exc_invalid_op+0x1a/0x50 [ 80.419692][ T5328] asm_exc_invalid_op+0x1a/0x20 [ 80.421459][ T5328] RIP: 0010:__queue_work+0xcd3/0xf50 [ 80.423286][ T5328] Code: ff e8 f1 e4 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 e3 e4 37 00 eb 13 e8 dc e4 37 00 eb 0c e8 d5 e4 37 00 eb 05 e8 ce e4 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 80.430092][ T5328] RSP: 0018:ffffc9000d30fa88 EFLAGS: 00010093 [ 80.432270][ T5328] RAX: ffffffff81877944 RBX: ffff888000fdc880 RCX: ffff888000fdc880 [ 80.435244][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.438230][ T5328] RBP: 0000000000000000 R08: ffffffff81876da4 R09: 0000000000000000 [ 80.441155][ T5328] R10: ffffc9000d30fb60 R11: fffff52001a61f6d R12: ffff888043b9a000 [ 80.443661][ T5328] R13: ffff888043b9a1c0 R14: dffffc0000000000 R15: 0000000000000008 [ 80.446463][ T5328] ? __queue_work+0x124/0xf50 [ 80.448069][ T5328] ? __queue_work+0xcc4/0xf50 [ 80.449769][ T5328] ? __queue_work+0xcc4/0xf50 [ 80.451557][ T5328] queue_work_on+0x1c2/0x380 [ 80.453527][ T5328] ? __pfx_queue_work_on+0x10/0x10 [ 80.455539][ T5328] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 80.457831][ T5328] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.460293][ T5328] ? skb_queue_tail+0x36/0x120 [ 80.462132][ T5328] hci_recv_frame+0x598/0x6f0 [ 80.463996][ T5328] vhci_write+0x35a/0x490 [ 80.465722][ T5328] vfs_write+0xacf/0xd10 [ 80.467415][ T5328] ? __pfx_vhci_write+0x10/0x10 [ 80.469286][ T5328] ? __pfx_vfs_write+0x10/0x10 [ 80.471144][ T5328] ? __fget_files+0x2a/0x410 [ 80.472920][ T5328] ? __fget_files+0x2a/0x410 [ 80.474872][ T5328] ksys_write+0x18f/0x2b0 [ 80.476637][ T5328] ? __pfx_ksys_write+0x10/0x10 [ 80.478587][ T5328] ? exc_page_fault+0x590/0x8b0 [ 80.480550][ T5328] ? do_syscall_64+0xb6/0x230 [ 80.482509][ T5328] do_syscall_64+0xf3/0x230 [ 80.484309][ T5328] ? clear_bhb_loop+0x35/0x90 [ 80.485899][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.487902][ T5328] RIP: 0033:0x7f8e66f8b89f [ 80.489439][ T5328] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 80.497038][ T5328] RSP: 002b:00007f8e67de7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 80.500128][ T5328] RAX: ffffffffffffffda RBX: 00007f8e671a6160 RCX: 00007f8e66f8b89f [ 80.502972][ T5328] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 00000000000000ca [ 80.505745][ T5328] RBP: 00007f8e6700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.508216][ T5328] R10: 00002000000006c0 R11: 0000000000000293 R12: 0000000000000000 [ 80.510817][ T5328] R13: 0000000000000001 R14: 00007f8e671a6160 R15: 00007fff4183aaf8 [ 80.513325][ T5328] [ 80.514611][ T5328] Kernel Offset: disabled [ 80.516100][ T5328] Rebooting in 86400 seconds..