last executing test programs:

49.389475202s ago: executing program 2 (id=254):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000029000000360000006c00000000000000240000000000000029000000320000"], 0x40}}], 0x1, 0x8814)

49.143498818s ago: executing program 2 (id=259):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x40, 0x2, 0x40, {0x40, 0xb, "d56c1d891d94af6f7e65d1686e9ac820a7a1edeb08f3bb2d1e1c989c7b5b3d8149e4aaae4690e97afc11a3cb5507b30f7091322194a51fd8b439c4480094"}}, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

46.607024144s ago: executing program 1 (id=281):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x40000000}, 0x0, 0xf4240, 0x0)

46.318640494s ago: executing program 1 (id=283):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0x80000001, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xffd, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd6, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

45.855299089s ago: executing program 0 (id=287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000009c0)={'bond0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "4792b20b144e541866b69a2534b0a639250e8fcde044d582f6a4620b7477d4fc", "3d2ea58074343cdbb53e232c47c930620276a98abc903eb01f40bffc917ac292", "f083ee80db247df93dbbec06d08086012c46bf6b7540127f9330e46a3814d7f5", "7698329c72ed4d86c79b2c75bc3e90359feee8d04a2107368a152058af6a7812", "7a20719095e1cc6ada84615969c0637c047af39f7b6ea3c4bf952ee3a952b304", "455664023abeb876a2080065", 0x80000001, 0x0, 0xf1, 0x3, 0xc}})

45.850727702s ago: executing program 2 (id=288):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x17, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28)

45.490957926s ago: executing program 0 (id=289):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)

45.482122297s ago: executing program 3 (id=290):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x35, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r1)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x66, 0x30, 0x30, 0x61, 0x38, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
keyctl$unlink(0x9, r0, r1)

45.481830679s ago: executing program 2 (id=291):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ppoll(&(0x7f0000000000)=[{r0, 0x1133}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0)

45.206139938s ago: executing program 0 (id=292):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x1, 0x0, 0x80000000)

45.203444125s ago: executing program 3 (id=293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

45.08968882s ago: executing program 2 (id=294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)

44.944476463s ago: executing program 3 (id=295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
llistxattr(&(0x7f0000000000)='./mnt\x00', 0x0, 0x0)

44.935870362s ago: executing program 1 (id=296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

44.73765866s ago: executing program 2 (id=297):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

44.737092659s ago: executing program 0 (id=298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)

44.541605776s ago: executing program 3 (id=299):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b02006c0000000008000061979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

44.532595557s ago: executing program 1 (id=300):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)={0xda, 0x0, 0x2000000000b14})

44.234196563s ago: executing program 0 (id=301):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004848, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c)
getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3)

44.159724548s ago: executing program 1 (id=302):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x35, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r1)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x66, 0x30, 0x30, 0x61, 0x38, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
keyctl$unlink(0x9, r0, r1)

44.126459217s ago: executing program 3 (id=303):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800700010063740000160002800800014000000002080002400000000a05000300000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000)

43.906472421s ago: executing program 0 (id=304):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))

37.400493155s ago: executing program 1 (id=305):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0x80000001, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xffd, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd6, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

24.128614521s ago: executing program 3 (id=306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000001324000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

0s ago: executing program 32 (id=304):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts.
[   76.775177][ T5602] cgroup: Unknown subsys name 'net'
[   76.883429][ T5602] cgroup: Unknown subsys name 'cpuset'
[   76.886788][ T5602] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.507477][ T5602] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.009722][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.012115][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.014009][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.015054][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.015670][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.016174][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.016891][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.017541][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.017980][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.018174][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.018858][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.018978][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.036395][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.050906][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.053478][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.054554][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.056524][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.058611][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.066137][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.077246][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.609221][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.609453][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.609806][ T5613] bridge_slave_0: entered allmulticast mode
[   83.617653][ T5613] bridge_slave_0: entered promiscuous mode
[   83.670049][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.670153][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.670254][ T5613] bridge_slave_1: entered allmulticast mode
[   83.671658][ T5613] bridge_slave_1: entered promiscuous mode
[   83.724477][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.724612][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.724732][ T5615] bridge_slave_0: entered allmulticast mode
[   83.726047][ T5615] bridge_slave_0: entered promiscuous mode
[   83.780228][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.780446][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.780593][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.780725][ T5615] bridge_slave_1: entered allmulticast mode
[   83.782790][ T5615] bridge_slave_1: entered promiscuous mode
[   83.831549][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.892157][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.929476][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.935832][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.936012][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.936350][ T5614] bridge_slave_0: entered allmulticast mode
[   83.937634][ T5614] bridge_slave_0: entered promiscuous mode
[   83.945812][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.946094][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.947154][ T5614] bridge_slave_1: entered allmulticast mode
[   83.949093][ T5614] bridge_slave_1: entered promiscuous mode
[   83.963142][ T5613] team0: Port device team_slave_0 added
[   84.044503][ T5613] team0: Port device team_slave_1 added
[   84.059037][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.059206][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.062182][ T5616] bridge_slave_0: entered allmulticast mode
[   84.066877][ T5616] bridge_slave_0: entered promiscuous mode
[   84.104244][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.104332][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.104672][ T5616] bridge_slave_1: entered allmulticast mode
[   84.106058][ T5616] bridge_slave_1: entered promiscuous mode
[   84.109033][ T5615] team0: Port device team_slave_0 added
[   84.127204][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.141524][ T5619] Bluetooth: hci2: command tx timeout
[   84.141873][ T5619] Bluetooth: hci0: command tx timeout
[   84.142088][ T5619] Bluetooth: hci3: command tx timeout
[   84.186014][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.187806][ T5615] team0: Port device team_slave_1 added
[   84.188711][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.188730][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.188753][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.219786][ T5629] Bluetooth: hci1: command tx timeout
[   84.262554][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.262570][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.262593][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.319879][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.322784][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.357385][ T5614] team0: Port device team_slave_0 added
[   84.385791][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.385806][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.385829][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.388417][ T5614] team0: Port device team_slave_1 added
[   84.430001][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.430053][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.430119][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.509240][ T5616] team0: Port device team_slave_0 added
[   84.532726][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.532745][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.532773][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.539437][ T5613] hsr_slave_0: entered promiscuous mode
[   84.543545][ T5613] hsr_slave_1: entered promiscuous mode
[   84.556744][ T5616] team0: Port device team_slave_1 added
[   84.563621][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.563660][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.563724][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.697448][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.697466][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.697493][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.748525][ T5615] hsr_slave_0: entered promiscuous mode
[   84.751510][ T5615] hsr_slave_1: entered promiscuous mode
[   84.753720][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[   84.753997][ T5615] Cannot create hsr debugfs directory
[   84.778856][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.778877][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.778896][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.846194][ T5614] hsr_slave_0: entered promiscuous mode
[   84.846961][ T5614] hsr_slave_1: entered promiscuous mode
[   84.847483][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   84.847504][ T5614] Cannot create hsr debugfs directory
[   84.997202][ T5616] hsr_slave_0: entered promiscuous mode
[   84.997989][ T5616] hsr_slave_1: entered promiscuous mode
[   84.998520][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   84.998544][ T5616] Cannot create hsr debugfs directory
[   85.361870][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.366742][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.368471][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.395369][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.396786][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.402555][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.406023][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.429768][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.502035][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.506685][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.507709][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.516970][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.522527][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.546829][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.560626][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.564451][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.666758][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.677270][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.688312][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.701420][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.702504][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.705784][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.706647][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.711775][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.836159][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.847006][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.857712][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.858867][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.875378][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.876846][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.884376][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.904139][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.906851][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.972856][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   86.006670][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.006829][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.052078][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.052157][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.058842][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.134554][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   86.146632][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.177008][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.177088][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.196132][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.196219][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.218619][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   86.219595][ T5629] Bluetooth: hci3: command tx timeout
[   86.219625][ T5629] Bluetooth: hci0: command tx timeout
[   86.219648][ T5629] Bluetooth: hci2: command tx timeout
[   86.260107][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.260182][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.298303][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.298420][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.299649][ T5619] Bluetooth: hci1: command tx timeout
[   86.349109][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.449680][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   86.482600][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.482699][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.531358][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.531464][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.472366][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.487530][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.711377][ T5613] veth0_vlan: entered promiscuous mode
[   87.750395][ T5615] veth0_vlan: entered promiscuous mode
[   87.776093][ T5613] veth1_vlan: entered promiscuous mode
[   87.798034][ T5615] veth1_vlan: entered promiscuous mode
[   87.854110][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.885147][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.957923][ T5613] veth0_macvtap: entered promiscuous mode
[   87.969051][ T5613] veth1_macvtap: entered promiscuous mode
[   87.984945][ T5615] veth0_macvtap: entered promiscuous mode
[   88.015515][ T5615] veth1_macvtap: entered promiscuous mode
[   88.046186][ T5616] veth0_vlan: entered promiscuous mode
[   88.067553][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.079164][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.096948][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.097565][ T5614] veth0_vlan: entered promiscuous mode
[   88.119824][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.135917][ T5616] veth1_vlan: entered promiscuous mode
[   88.162022][ T5614] veth1_vlan: entered promiscuous mode
[   88.170538][   T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.300246][ T5629] Bluetooth: hci0: command tx timeout
[   88.300282][ T5629] Bluetooth: hci3: command tx timeout
[   88.300433][ T5619] Bluetooth: hci2: command tx timeout
[   88.337579][ T5614] veth0_macvtap: entered promiscuous mode
[   88.339271][ T5616] veth0_macvtap: entered promiscuous mode
[   88.363669][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.363696][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.385698][ T4932] Bluetooth: hci1: command tx timeout
[   88.396488][   T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.396536][   T81] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.396576][   T81] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.396616][   T81] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.396655][   T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.396693][   T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.396732][   T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.421113][ T5614] veth1_macvtap: entered promiscuous mode
[   88.433873][ T5616] veth1_macvtap: entered promiscuous mode
[   88.489644][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.489682][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.564573][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.566954][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.566973][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.569247][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.611307][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.615950][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.658546][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.658567][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.750339][ T1340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.759106][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.895855][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.895878][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.970449][ T1340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.970727][ T1340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.970895][ T1340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.971049][ T1340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.971251][ T1340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.971430][ T1340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.045697][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.045720][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.118530][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.118553][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.174149][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.174173][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.184364][ T1340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.483817][ T5779] warning: `syz.3.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.750707][ T5790] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   89.964942][ T5801] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   90.064703][ T5806] comedi comedi2: das16m1: I/O base address not correctly aligned
[   90.141806][ T5808] comedi: valid board names for 8255 driver are:
[   90.141829][ T5808]  8255
[   90.141838][ T5808] comedi: valid board names for vmk80xx driver are:
[   90.141847][ T5808]  vmk80xx
[   90.141855][ T5808] comedi: valid board names for usbduxsigma driver are:
[   90.141865][ T5808]  usbduxsigma
[   90.141873][ T5808] comedi: valid board names for usbduxfast driver are:
[   90.141883][ T5808]  usbduxfast
[   90.141890][ T5808] comedi: valid board names for usbdux driver are:
[   90.141900][ T5808]  usbdux
[   90.141908][ T5808] comedi: valid board names for ni6501 driver are:
[   90.141918][ T5808]  ni6501
[   90.141926][ T5808] comedi: valid board names for dt9812 driver are:
[   90.141936][ T5808]  dt9812
[   90.141943][ T5808] comedi: valid board names for ni_labpc_cs driver are:
[   90.141953][ T5808]  ni_labpc_cs
[   90.141961][ T5808] comedi: valid board names for ni_daq_700 driver are:
[   90.141970][ T5808]  ni_daq_700
[   90.141978][ T5808] comedi: valid board names for labpc_pci driver are:
[   90.141987][ T5808]  labpc_pci
[   90.141994][ T5808] comedi: valid board names for adl_pci9118 driver are:
[   90.142004][ T5808]  pci9118dg
[   90.142011][ T5808]  pci9118hg
[   90.142018][ T5808]  pci9118hr
[   90.142705][ T5808] comedi: valid board names for 8255_pci driver are:
[   90.142723][ T5808]  8255_pci
[   90.144321][ T5808] comedi: valid board names for s526 driver are:
[   90.144336][ T5808]  s526
[   90.144477][ T5808] comedi: valid board names for multiq3 driver are:
[   90.144490][ T5808]  multiq3
[   90.144498][ T5808] comedi: valid board names for pcmuio driver are:
[   90.144509][ T5808]  pcmuio48
[   90.144516][ T5808]  pcmuio96
[   90.144524][ T5808] comedi: valid board names for pcmmio driver are:
[   90.144534][ T5808]  pcmmio
[   90.144542][ T5808] comedi: valid board names for pcmda12 driver are:
[   90.144551][ T5808]  pcmda12
[   90.144559][ T5808] comedi: valid board names for pcmad driver are:
[   90.144569][ T5808]  pcmad12
[   90.144577][ T5808]  pcmad16
[   90.144584][ T5808] comedi: valid board names for ni_labpc driver are:
[   90.144595][ T5808]  lab-pc-1200
[   90.144602][ T5808]  lab-pc-1200ai
[   90.144610][ T5808]  lab-pc+
[   90.144618][ T5808] comedi: valid board names for atmio16 driver are:
[   90.144628][ T5808]  atmio16
[   90.144635][ T5808]  atmio16d
[   90.144643][ T5808] comedi: valid board names for ni_at_ao driver are:
[   90.144652][ T5808]  at-ao-6
[   90.144660][ T5808]  at-ao-10
[   90.144667][ T5808] comedi: valid board names for ni_at_a2150 driver are:
[   90.144677][ T5808]  ni_at_a2150
[   90.144685][ T5808] comedi: valid board names for adq12b driver are:
[   90.144695][ T5808]  adq12b
[   90.144702][ T5808] comedi: valid board names for mpc624 driver are:
[   90.144712][ T5808]  mpc624
[   90.144719][ T5808] comedi: valid board names for c6xdigio driver are:
[   90.144729][ T5808]  c6xdigio
[   90.144736][ T5808] comedi: valid board names for aio_iiro_16 driver are:
[   90.144746][ T5808]  aio_iiro_16
[   90.144754][ T5808] comedi: valid board names for aio_aio12_8 driver are:
[   90.144764][ T5808]  aio_aio12_8
[   90.144772][ T5808]  aio_ai12_8
[   90.144779][ T5808]  aio_ao12_4
[   90.144787][ T5808] comedi: valid board names for fl512 driver are:
[   90.144797][ T5808]  fl512
[   90.144804][ T5808] comedi: valid board names for dmm32at driver are:
[   90.144814][ T5808]  dmm32at
[   90.144821][ T5808] comedi: valid board names for dt282x driver are:
[   90.144831][ T5808]  dt2821
[   90.144838][ T5808]  dt2821-f
[   90.144846][ T5808]  dt2821-g
[   90.144853][ T5808]  dt2823
[   90.144860][ T5808]  dt2824-pgh
[   90.144868][ T5808]  dt2824-pgl
[   90.144875][ T5808]  dt2825
[   90.144883][ T5808]  dt2827
[   90.144890][ T5808]  dt2828
[   90.144897][ T5808]  dt2829
[   90.144905][ T5808]  dt21-ez
[   90.144912][ T5808]  dt23-ez
[   90.144919][ T5808]  dt24-ez
[   90.144927][ T5808]  dt24-ez-pgl
[   90.144934][ T5808] comedi: valid board names for dt2817 driver are:
[   90.144944][ T5808]  dt2817
[   90.144951][ T5808] comedi: valid board names for dt2815 driver are:
[   90.144962][ T5808]  dt2815
[   90.144969][ T5808] comedi: valid board names for dt2814 driver are:
[   90.144979][ T5808]  dt2814
[   90.144986][ T5808] comedi: valid board names for dt2811 driver are:
[   90.144996][ T5808]  dt2811-pgh
[   90.145003][ T5808]  dt2811-pgl
[   90.145011][ T5808] comedi: valid board names for dt2801 driver are:
[   90.145020][ T5808]  dt2801
[   90.145028][ T5808] comedi: valid board names for das6402 driver are:
[   90.145038][ T5808]  das6402-12
[   90.145045][ T5808]  das6402-16
[   90.145052][ T5808] comedi: valid board names for das1800 driver are:
[   90.145062][ T5808]  das-1701st
[   90.145069][ T5808]  das-1701st-da
[   90.145077][ T5808]  das-1702st
[   90.145084][ T5808]  das-1702st-da
[   90.145092][ T5808]  das-1702hr
[   90.145100][ T5808]  das-1702hr-da
[   90.145108][ T5808]  das-1701ao
[   90.145115][ T5808]  das-1702ao
[   90.145122][ T5808]  das-1801st
[   90.145137][ T5808]  das-1801st-da
[   90.145145][ T5808]  das-1802st
[   90.145153][ T5808]  das-1802st-da
[   90.145161][ T5808]  das-1802hr
[   90.145168][ T5808]  das-1802hr-da
[   90.145176][ T5808]  das-1801hc
[   90.145183][ T5808]  das-1802hc
[   90.145190][ T5808]  das-1801ao
[   90.145198][ T5808]  das-1802ao
[   90.145205][ T5808] comedi: valid board names for das800 driver are:
[   90.145215][ T5808]  das-800
[   90.145222][ T5808]  cio-das800
[   90.145229][ T5808]  das-801
[   90.145236][ T5808]  cio-das801
[   90.145244][ T5808]  das-802
[   90.145251][ T5808]  cio-das802
[   90.145258][ T5808]  cio-das802/16
[   90.145267][ T5808] comedi: valid board names for isa-das08 driver are:
[   90.145277][ T5808]  isa-das08
[   90.145284][ T5808]  das08-pgm
[   90.145291][ T5808]  das08-pgh
[   90.145298][ T5808]  das08-pgl
[   90.145306][ T5808]  das08-aoh
[   90.145314][ T5808]  das08-aol
[   90.145321][ T5808]  das08-aom
[   90.145328][ T5808]  das08/jr-ao
[   90.145335][ T5808]  das08jr-16-ao
[   90.145342][ T5808]  pc104-das08
[   90.145350][ T5808]  das08jr/16
[   90.145357][ T5808] comedi: valid board names for das16m1 driver are:
[   90.145367][ T5808]  das16m1
[   90.145375][ T5808] comedi: valid board names for dac02 driver are:
[   90.145384][ T5808]  dac02
[   90.145391][ T5808] comedi: valid board names for rti802 driver are:
[   90.145401][ T5808]  rti802
[   90.145409][ T5808] comedi: valid board names for rti800 driver are:
[   90.145418][ T5808]  rti800
[   90.145425][ T5808]  rti815
[   90.145433][ T5808] comedi: valid board names for pcm3724 driver are:
[   90.145442][ T5808]  pcm3724
[   90.145450][ T5808] comedi: valid board names for pcl818 driver are:
[   90.145459][ T5808]  pcl818l
[   90.145467][ T5808]  pcl818h
[   90.145474][ T5808]  pcl818hd
[   90.145482][ T5808]  pcl818hg
[   90.145489][ T5808]  pcl818
[   90.145495][ T5808]  pcl718
[   90.145502][ T5808]  pcm3718
[   90.146205][ T5808] comedi: valid board names for pcl816 driver are:
[   90.146217][ T5808]  pcl816
[   90.146226][ T5808]  pcl814b
[   90.146233][ T5808] comedi: valid board names for pcl812 driver are:
[   90.146244][ T5808]  pcl812
[   90.146252][ T5808]  pcl812pg
[   90.146259][ T5808]  acl8112pg
[   90.146266][ T5808]  acl8112dg
[   90.146274][ T5808]  acl8112hg
[   90.146281][ T5808]  a821pgl
[   90.146288][ T5808]  a821pglnda
[   90.146296][ T5808]  a821pgh
[   90.146303][ T5808]  a822pgl
[   90.146310][ T5808]  a822pgh
[   90.146317][ T5808]  a823pgl
[   90.146324][ T5808]  a823pgh
[   90.146332][ T5808]  pcl813
[   90.146339][ T5808]  pcl813b
[   90.146347][ T5808]  acl8113
[   90.146354][ T5808]  iso813
[   90.146361][ T5808]  acl8216
[   90.146368][ T5808]  a826pg
[   90.146376][ T5808] comedi: valid board names for pcl730 driver are:
[   90.146384][ T5808]  pcl730
[   90.146391][ T5808]  iso730
[   90.146399][ T5808]  acl7130
[   90.146406][ T5808]  pcm3730
[   90.146413][ T5808]  pcl725
[   90.146421][ T5808]  p8r8dio
[   90.146428][ T5808]  acl7225b
[   90.146434][ T5808]  p16r16dio
[   90.146442][ T5808]  pcl733
[   90.146449][ T5808]  pcl734
[   90.146457][ T5808]  opmm-1616-xt
[   90.146464][ T5808]  pearl-mm-p
[   90.146471][ T5808]  ir104-pbf
[   90.146479][ T5808] comedi: valid board names for pcl726 driver are:
[   90.146488][ T5808]  pcl726
[   90.146495][ T5808]  pcl727
[   90.146502][ T5808]  pcl728
[   90.146509][ T5808]  acl6126
[   90.146516][ T5808]  acl6128
[   90.146524][ T5808] comedi: valid board names for pcl724 driver are:
[   90.146534][ T5808]  pcl724
[   90.146541][ T5808]  pcl722
[   90.146548][ T5808]  pcl731
[   90.146555][ T5808]  acl7122
[   90.146647][ T5808]  acl7124
[   90.146656][ T5808]  pet48dio
[   90.146664][ T5808]  pcmio48
[   90.146671][ T5808]  onyx-mm-dio
[   90.146679][ T5808] comedi: valid board names for pcl711 driver are:
[   90.146689][ T5808]  pcl711
[   90.146696][ T5808]  pcl711b
[   90.146703][ T5808]  acl8112hg
[   90.146711][ T5808]  acl8112dg
[   90.146718][ T5808] comedi: valid board names for amplc_pc263 driver are:
[   90.146728][ T5808]  pc263
[   90.146736][ T5808] comedi: valid board names for amplc_pc236 driver are:
[   90.146746][ T5808]  pc36at
[   90.146753][ T5808] comedi: valid board names for amplc_dio200 driver are:
[   90.146763][ T5808]  pc212e
[   90.146771][ T5808]  pc214e
[   90.146778][ T5808]  pc215e
[   90.146785][ T5808]  pc218e
[   90.146792][ T5808]  pc272e
[   90.146799][ T5808] comedi: valid board names for comedi_parport driver are:
[   90.146810][ T5808]  comedi_parport
[   90.146818][ T5808] comedi: valid board names for comedi_test driver are:
[   90.146827][ T5808]  comedi_test
[   90.146835][ T5808] comedi: valid board names for comedi_bond driver are:
[   90.146845][ T5808]  comedi_bond
[   90.382330][ T4932] Bluetooth: hci2: command tx timeout
[   90.382422][ T4932] Bluetooth: hci3: command tx timeout
[   90.382482][ T4932] Bluetooth: hci0: command tx timeout
[   90.470484][ T5619] Bluetooth: hci1: command tx timeout
[   91.185080][ T5815] random: crng reseeded on system resumption
[   91.331105][ T5824] random: crng reseeded on system resumption
[   91.529692][  T987] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   91.550073][ T5767] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   91.569889][ T1227] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   91.696961][  T987] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[   91.708947][ T5767] usb 3-1: unable to get BOS descriptor or descriptor too short
[   91.708995][ T5767] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[   91.727947][ T5767] usb 3-1: config 4 has an invalid interface number: 138 but max is 0
[   91.727975][ T5767] usb 3-1: config 4 has no interface number 0
[   91.728006][ T5767] usb 3-1: config 4 interface 138 has no altsetting 0
[   91.745847][ T1227] usb 4-1: unable to get BOS descriptor or descriptor too short
[   91.753388][ T1227] usb 4-1: not running at top speed; connect to a high speed hub
[   91.755736][ T1227] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=2a.ad
[   91.770998][ T1227] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   91.782235][ T5767] usb 3-1: string descriptor 0 read error: -22
[   91.783302][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.803979][  T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   91.804023][  T987] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   91.804060][  T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   91.804079][  T987] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[   91.804117][  T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.808700][ T1227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.808723][ T1227] usb 4-1: Product: syz
[   91.808737][ T1227] usb 4-1: Manufacturer: syz
[   91.808752][ T1227] usb 4-1: SerialNumber: syz
[   91.886415][ T5839] netlink: 'syz.0.31': attribute type 4 has an invalid length.
[   91.886439][ T5839] netlink: 'syz.0.31': attribute type 1 has an invalid length.
[   91.886625][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.888951][  T987] usb 2-1: config 0 descriptor??
[   91.985652][ T1219] cfg80211: failed to load regulatory.db
[   92.095358][ T5843] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.33'.
[   92.095401][ T5843] bridge: RTM_NEWNEIGH with invalid ether address
[   92.142882][  T987] hdpvr 2-1:0.0: firmware version 0x1e dated ��q|RC�@�2���2[�7�B���D�^jvi0�
[   92.142882][  T987] �����pY
[   92.153645][ T1227] RobotFuzz Open Source InterFace, OSIF 4-1:128.0: failure sending bit rate
[   92.153675][ T1227] RobotFuzz Open Source InterFace, OSIF 4-1:128.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71
[   92.195997][ T5767] catc 3-1:4.138: Missing or invalid endpoints
[   92.224751][ T1227] usb 4-1: USB disconnect, device number 2
[   92.346100][  T987] hdpvr 2-1:0.0: device init failed
[   92.346183][  T987] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[   92.371428][  T987] usb 2-1: USB disconnect, device number 2
[   92.418157][ T5618] usb 3-1: USB disconnect, device number 2
[   92.591659][ T5855] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.39'.
[   92.591676][ T5855] bridge: RTM_NEWNEIGH with invalid state 0x1
[   92.885498][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'.
[   92.885583][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'.
[   93.608030][ T5898] random: crng reseeded on system resumption
[   93.848650][ T5910] netlink: 'syz.2.66': attribute type 5 has an invalid length.
[   93.848673][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'.
[   94.038889][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.499395][  T987] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   94.645781][ T5942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'.
[   94.645943][ T5942] openvswitch: netlink: Flow key attr not present in new flow.
[   94.658709][  T987] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03
[   94.667412][  T987] usb 1-1: Dual-Role OTG device on HNP port
[   94.676990][  T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.753822][  T987] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[   94.841066][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.991302][   T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   94.992600][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.992625][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   94.992672][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.999156][   T10] usb 4-1: config 0 descriptor??
[   95.092234][ T5955] netlink: 'syz.1.86': attribute type 5 has an invalid length.
[   95.092261][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   95.931127][ T5990] random: crng reseeded on system resumption
[   96.060565][ T5619] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   96.060639][ T5619] Bluetooth: hci0: Injecting HCI hardware error event
[   96.061494][ T4932] Bluetooth: hci0: hardware error 0x00
[   97.591585][   T10] usb 4-1: USB disconnect, device number 3
[   97.665258][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.665747][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.140203][ T4932] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   98.753173][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'.
[   98.753274][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'.
[   98.949779][ T1227] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   99.109666][ T1227] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   99.112006][ T1227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.112030][ T1227] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   99.112105][ T1227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.125200][ T1227] usb 2-1: config 0 descriptor??
[   99.889086][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'.
[  100.655171][ T6165] netlink: 'syz.2.161': attribute type 7 has an invalid length.
[  100.733976][ T6167] usb usb1: usbfs: process 6167 (syz.0.163) did not claim interface 0 before use
[  100.735474][ T6169] comedi comedi0: 8255: I/O base address not correctly aligned
[  101.232083][ T6189] wlan0 speed is unknown, defaulting to 1000
[  101.232163][ T6189] wlan0 speed is unknown, defaulting to 1000
[  101.270210][ T6189] wlan0 speed is unknown, defaulting to 1000
[  101.286687][ T6189] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  101.286724][ T6189] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  101.286776][ T6189] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  101.332874][ T6189] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  101.356590][ T6189] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  101.422566][ T6189] wlan0 speed is unknown, defaulting to 1000
[  101.449191][ T6189] wlan0 speed is unknown, defaulting to 1000
[  101.462453][ T6189] wlan0 speed is unknown, defaulting to 1000
[  101.467155][ T6189] wlan0 speed is unknown, defaulting to 1000
[  101.721024][ T6209] comedi comedi0: 8255: I/O base address not correctly aligned
[  101.803905][   T10] usb 2-1: USB disconnect, device number 3
[  102.142802][ T6229] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  102.357667][ T6238] =======================================================
[  102.357667][ T6238] WARNING: The mand mount option has been deprecated and
[  102.357667][ T6238]          and is ignored by this kernel. Remove the mand
[  102.357667][ T6238]          option from the mount to silence this warning.
[  102.357667][ T6238] =======================================================
[  102.435013][ T6238] 9p: Could not find request transport: xen
[  102.786611][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'.
[  102.786638][ T6260] openvswitch: netlink: Flow actions attr not present in new flow.
[  102.810671][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.963412][   T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  102.964575][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.964599][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  102.964636][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.007721][   T10] usb 4-1: config 0 descriptor??
[  104.208998][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.221513][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.628601][   T10] usb 4-1: USB disconnect, device number 4
[  105.823291][ T6400] netlink: 'syz.2.252': attribute type 2 has an invalid length.
[  105.954688][ T6403] wlan0 speed is unknown, defaulting to 1000
[  106.462277][ T1227] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.611709][ T1227] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  106.617766][ T1227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.617791][ T1227] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  106.617829][ T1227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.674143][ T1227] usb 3-1: config 0 descriptor??
[  107.340852][ T6442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.268'.
[  107.601511][ T6445] netlink: Failed to add  helper -22
[  107.601578][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.330289][ T6461] usb usb7: usbfs: process 6461 (syz.1.275) did not claim interface 0 before use
[  109.222718][ T6483] netlink: 'syz.0.285': attribute type 8 has an invalid length.
[  109.373251][ T1227] usb 3-1: USB disconnect, device number 3
[  109.874270][ T6497] netlink: 9 bytes leftover after parsing attributes in process `syz.0.289'.
[  109.892956][ T6497] netlink: 9 bytes leftover after parsing attributes in process `syz.0.289'.
[  110.350457][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'.
[  110.557113][ T6510] jffs2: notice: (6510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  110.849462][ T5767] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  110.930238][ T6520] xt_l2tp: missing protocol rule (udp|l2tpip)
[  111.000188][ T5767] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  111.001474][ T5767] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.001526][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.008126][ T5767] usb 3-1: config 0 descriptor??
[  111.047865][ T5767] pwc: Askey VC010 type 2 USB webcam detected.
[  111.354010][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'.
[  111.354120][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'.
[  111.354157][ T6527] netlink: 2 bytes leftover after parsing attributes in process `syz.3.303'.
[  114.484128][    C0] sched: DL replenish lagged too much
[  118.726012][ T5767] pwc: recv_control_msg error -110 req 02 val 2b00
[  119.147685][ T5767] pwc: recv_control_msg error -32 req 02 val 2700
[  119.696794][ T5767] pwc: recv_control_msg error -32 req 02 val 2c00
[  134.053973][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  134.061841][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  194.758286][ T5767] pwc: recv_control_msg error -71 req 04 val 1000
[  195.201841][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  195.209802][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  208.769044][ T5617] Bluetooth: hci3: command 0x0406 tx timeout
[  208.769107][ T5617] Bluetooth: hci2: command 0x0406 tx timeout
[  208.769171][ T5626] Bluetooth: hci1: command 0x0406 tx timeout
[  211.849183][ T5767] pwc: recv_control_msg error -71 req 04 val 1300
[  217.576080][ T5767] pwc: recv_control_msg error -71 req 04 val 1400
[  225.323017][ T5767] pwc: recv_control_msg error -71 req 02 val 2000
[  256.020249][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  256.036414][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  275.697619][   T32] INFO: task kworker/1:2:1219 blocked for more than 145 seconds.
[  275.697648][   T32]       Not tainted syzkaller #0
[  275.697660][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.697671][   T32] task:kworker/1:2     state:D stack:25504 pid:1219  tgid:1219  ppid:2      task_flags:0x4208060 flags:0x00080000
[  275.697754][   T32] Workqueue: events reg_todo
[  275.697814][   T32] Call Trace:
[  275.697826][   T32]  <TASK>
[  275.697841][   T32]  __schedule+0x17dd/0x5940
[  275.697896][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  275.697931][   T32]  ? __pfx___schedule+0x10/0x10
[  275.697973][   T32]  ? schedule+0x90/0x2b0
[  275.698007][   T32]  schedule+0x164/0x2b0
[  275.698050][   T32]  schedule_preempt_disabled+0x13/0x30
[  275.698082][   T32]  __mutex_lock+0x7c4/0x15a0
[  275.698108][   T32]  ? __mutex_lock+0x5cd/0x15a0
[  275.698134][   T32]  ? reg_process_self_managed_hints+0x8d/0x160
[  275.698170][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  275.698203][   T32]  ? reg_todo+0x8da/0xa40
[  275.698243][   T32]  reg_process_self_managed_hints+0x8d/0x160
[  275.698278][   T32]  reg_todo+0x8df/0xa40
[  275.698315][   T32]  ? process_scheduled_works+0x97a/0x1630
[  275.698342][   T32]  process_scheduled_works+0xc3d/0x1630
[  275.698399][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  275.698432][   T32]  ? assign_work+0x3cf/0x5d0
[  275.698463][   T32]  worker_thread+0xa47/0xfb0
[  275.698504][   T32]  ? __kthread_parkme+0x71/0x1f0
[  275.698542][   T32]  kthread+0x38b/0x480
[  275.698575][   T32]  ? __pfx_worker_thread+0x10/0x10
[  275.698600][   T32]  ? __pfx_kthread+0x10/0x10
[  275.698633][   T32]  ret_from_fork+0x514/0xb70
[  275.698667][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  275.698699][   T32]  ? __switch_to+0xc89/0x1420
[  275.698728][   T32]  ? __pfx_kthread+0x10/0x10
[  275.698761][   T32]  ret_from_fork_asm+0x1a/0x30
[  275.698809][   T32]  </TASK>
[  275.698923][   T32] 
[  275.698923][   T32] Showing all locks held in the system:
[  275.698933][   T32] locks held by kthreadd/2: 2, last CPU#1:
[  275.698949][   T32]  #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  275.699016][   T32]  #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  275.699079][   T32] locks held by kworker/R-kvfre/6: 1, on CPU#1:
[  275.699094][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  275.699154][   T32] locks held by kworker/0:0/9: 4, on CPU#0:
[  275.699169][   T32]  #0: ffff888025ea3940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.716367][   T32]  #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.716458][   T32]  #2: ffff88807dccd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  275.716524][   T32]  #3: ffff88807becd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  275.716591][   T32] locks held by kworker/0:1/10: 3, last CPU#0:
[  275.716607][   T32]  #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.716665][   T32]  #1: ffffc900000f7c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.716723][   T32]  #2: ffffffff8f08be80 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40
[  275.716800][   T32] locks held by kworker/u8:0/12: 6, last CPU#1:
[  275.716815][   T32]  #0: ffff8880206fe940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.716871][   T32]  #1: ffffc90000117c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.716928][   T32]  #2: ffff88807fefe0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  275.716993][   T32]  #3: ffff88807fefcc98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  275.717067][   T32]  #4: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  275.717130][   T32]  #5: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0
[  275.717195][   T32] locks held by kworker/u8:1/13: 3, last CPU#1:
[  275.717210][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.717268][   T32]  #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.717325][   T32]  #2: ffff8880644807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  275.717385][   T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1:
[  275.717401][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  275.717462][   T32] locks held by kworker/1:0/25: 3, on CPU#1:
[  275.717477][   T32]  #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.717534][   T32]  #1: ffffc900001f7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.717591][   T32]  #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[  275.717656][   T32] locks held by kworker/1:1/30: 2, last CPU#1:
[  275.717672][   T32]  #0: ffff888020359d40 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.717733][   T32]  #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.717806][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  275.717822][   T32]  #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  275.717882][   T32] locks held by kworker/u8:2/43: 4, last CPU#1:
[  275.717921][   T32]  #0: ffff888078f8c140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.717985][   T32]  #1: ffffc90000b37c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718052][   T32]  #2: ffff8880797ad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  275.718116][   T32]  #3: ffff88805a5c20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  275.718179][   T32] locks held by kworker/u8:3/44: 3, last CPU#1:
[  275.718195][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718254][   T32]  #1: ffffc90000b57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718312][   T32]  #2: ffff8880647f07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  275.718376][   T32] locks held by kworker/u8:4/59: 3, last CPU#1:
[  275.718392][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718451][   T32]  #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718509][   T32]  #2: ffff8880644f07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  275.718573][   T32] locks held by kworker/u8:5/81: 3, last CPU#1:
[  275.718589][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718647][   T32]  #1: ffffc9000202fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718706][   T32]  #2: ffff8880596b07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  275.718772][   T32] locks held by kworker/0:2/987: 4, on CPU#0:
[  275.718788][   T32]  #0: ffff88807e847940 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718852][   T32]  #1: ffffc90005287c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.718927][   T32]  #2: ffff888075f45440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  275.718992][   T32]  #3: ffff88807bec8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  275.719062][   T32] locks held by kworker/u8:6/1005: 4, on CPU#0:
[  275.719078][   T32]  #0: ffff8880345c6140 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.719142][   T32]  #1: ffffc90005317c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  275.719202][   T32]  #2: ffff888075f45440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  277.745647][   T32]  #3: ffff88807bec8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  277.745736][   T32] locks held by kworker/u8:7/1031: 3, last CPU#0:
[  277.745753][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.745813][   T32]  #1: ffffc900052d7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.745879][   T32]  #2: ffff8880595c07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  277.745944][   T32] locks held by kworker/u8:8/1168: 3, last CPU#0:
[  277.745960][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746019][   T32]  #1: ffffc90005967c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746077][   T32]  #2: ffff888059ac07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  277.746140][   T32] locks held by kworker/1:2/1219: 4, on CPU#1:
[  277.746156][   T32]  #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746213][   T32]  #1: ffffc90005d27c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746325][   T32]  #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40
[  277.746405][   T32]  #3: ffff8880596b07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160
[  277.746482][   T32] locks held by kworker/1:3/1227: 3, on CPU#1:
[  277.746498][   T32]  #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746556][   T32]  #1: ffffc90005d87c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746613][   T32]  #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80
[  277.746680][   T32] locks held by kworker/u8:9/1340: 3, last CPU#0:
[  277.746696][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746786][   T32]  #1: ffffc90006167c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746850][   T32]  #2: ffff888059ad07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  277.746912][   T32] locks held by kworker/u8:10/1345: 3, last CPU#0:
[  277.746928][   T32]  #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.746986][   T32]  #1: ffffc900061b7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.747044][   T32]  #2: ffff8880594607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  277.747117][   T32] locks held by kworker/R-ipv6_/3196: 3, on CPU#1:
[  277.747134][   T32]  #0: ffff888032a78940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.747192][   T32]  #1: ffffc9000edf7c20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.747251][   T32]  #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  277.747320][   T32] locks held by kworker/R-bat_e/3227: 1, on CPU#1:
[  277.747336][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.747398][   T32] locks held by kworker/u9:1/4932: 5, on CPU#0:
[  277.747414][   T32]  #0: ffff888012790940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.747507][   T32]  #1: ffffc900076ffc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.747594][   T32]  #2: ffff88807e034ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[  277.747658][   T32]  #3: ffff88807e0340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170
[  277.747739][   T32]  #4: ffffffff8ef62b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760
[  277.747822][   T32] locks held by kworker/R-ext4-/4946: 1, on CPU#1:
[  277.747857][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.747952][   T32] locks held by klogd/4972: 1, last CPU#1:
[  277.747997][   T32]  #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.748109][   T32] locks held by udevd/4983: 5, last CPU#0:
[  277.748134][   T32]  #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470
[  277.748191][   T32]  #1: ffff88807de81078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  277.748252][   T32]  #2: ffff88807de84378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  277.748329][   T32]  #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.748413][   T32]  #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0
[  277.748479][   T32] locks held by dhcpcd/5277: 2, last CPU#0:
[  277.748495][   T32]  #0: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0
[  277.748550][   T32]  #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.748614][   T32] locks held by dhcpcd/5278: 5, last CPU#0:
[  277.748630][   T32]  #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470
[  277.748693][   T32]  #1: ffff88807b655cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  277.748754][   T32]  #2: ffff888032f9f678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  277.748820][   T32]  #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.748892][   T32]  #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0
[  277.748960][   T32] locks held by getty/5374: 2, on CPU#1:
[  277.748975][   T32]  #0: ffff888035c340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  277.749042][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  277.749104][   T32] locks held by syz-executor/5613: 1, last CPU#0:
[  277.749121][   T32]  #0: ffff88805a9f5880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0
[  277.749189][   T32] locks held by syz-executor/5616: 5, last CPU#1:
[  277.749205][   T32]  #0: ffff88807c46e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  277.759573][   T32]  #1: ffff88807ab33348 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520
[  277.759642][   T32]  #2: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  277.759698][   T32]  #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.759762][   T32]  #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  277.759844][   T32] locks held by kworker/1:4/5618: 2, last CPU#1:
[  277.759861][   T32]  #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.759921][   T32]  #1: ffffc9000475fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.759984][   T32] locks held by kworker/R-wg-cr/5678: 1, on CPU#0:
[  277.760001][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.760062][   T32] locks held by kworker/R-wg-cr/5681: 1, on CPU#1:
[  277.760078][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.760139][   T32] locks held by kworker/R-wg-cr/5682: 1, on CPU#0:
[  277.760156][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.760215][   T32] locks held by kworker/R-wg-cr/5683: 1, last CPU#1:
[  277.760231][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.760291][   T32] locks held by kworker/R-wg-cr/5685: 1, on CPU#0:
[  277.760307][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.760367][   T32] locks held by kworker/R-wg-cr/5686: 1, on CPU#1:
[  277.760383][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.760444][   T32] locks held by kworker/R-wg-cr/5687: 1, on CPU#1:
[  277.760460][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.760521][   T32] locks held by kworker/R-wg-cr/5688: 1, on CPU#1:
[  277.760537][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.760597][   T32] locks held by kworker/R-wg-cr/5689: 1, on CPU#0:
[  277.760613][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.760675][   T32] locks held by kworker/R-wg-cr/5690: 1, on CPU#1:
[  277.760691][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.760752][   T32] locks held by kworker/R-wg-cr/5691: 1, on CPU#0:
[  277.760768][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  277.760830][   T32] locks held by kworker/R-wg-cr/5692: 1, on CPU#1:
[  277.760853][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.760968][   T32] locks held by kworker/0:3/5699: 2, last CPU#0:
[  277.760985][   T32]  #0: ffff888079dc0940 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761085][   T32]  #1: ffffc90004e0fc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761145][   T32] locks held by kworker/1:5/5706: 6, last CPU#1:
[  277.761161][   T32]  #0: ffff888079dc0d40 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761225][   T32]  #1: ffffc90004e7fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761300][   T32]  #2: ffff88805a5c4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  277.761363][   T32]  #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  277.761430][   T32]  #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270
[  277.761486][   T32]  #5: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  277.761543][   T32] locks held by kworker/0:4/5719: 2, last CPU#0:
[  277.761559][   T32]  #0: ffff888079dc0d40 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761623][   T32]  #1: ffffc90004f7fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761697][   T32] locks held by kworker/0:5/5720: 3, last CPU#0:
[  277.761713][   T32]  #0: ffff88807a26c540 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761783][   T32]  #1: ffffc90004f9fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.761887][   T32]  #2: ffff88805a5c5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  277.761987][   T32] locks held by kworker/0:6/5721: 1, on CPU#0:
[  277.762017][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.762115][   T32] locks held by kworker/1:6/5767: 6, last CPU#1:
[  277.762136][   T32]  #0: ffff888022aee540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.762194][   T32]  #1: ffffc9000519fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.762252][   T32]  #2: ffff88802a0541d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  277.762305][   T32]  #3: ffff888032e521d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  277.762376][   T32]  #4: ffff8880347f71a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  277.762460][   T32]  #5: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.762525][   T32] locks held by kworker/1:7/5768: 3, last CPU#1:
[  277.762541][   T32]  #0: ffff88807e847940 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.762605][   T32]  #1: ffffc900051afc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.762679][   T32]  #2: ffff88807bec8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  277.762742][   T32] locks held by kworker/0:7/5769: 4, last CPU#0:
[  277.762758][   T32]  #0: ffff888020359d40 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.762822][   T32]  #1: ffffc900051bfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.762903][   T32]  #2: ffff88805a5c2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  277.762965][   T32]  #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.763029][   T32] locks held by kworker/1:8/5825: 3, last CPU#1:
[  277.763045][   T32]  #0: ffff888025ea3940 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.763108][   T32]  #1: ffffc900050bfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.763183][   T32]  #2: ffff88807becd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  277.763246][   T32] locks held by kworker/1:9/5826: 1, on CPU#1:
[  277.763262][   T32]  #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  277.763323][   T32] locks held by kworker/u8:11/6531: 4, last CPU#0:
[  277.763339][   T32]  #0: ffff888078f8f140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.763404][   T32]  #1: ffffc900033afc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.763463][   T32]  #2: ffff888034ce5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  277.763526][   T32]  #3: ffff88805a5c34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  277.763589][   T32] locks held by kworker/u8:12/6532: 4, last CPU#0:
[  277.763605][   T32]  #0: ffff88807fa7f940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.763668][   T32]  #1: ffffc900032ffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  277.763738][   T32]  #2: ffff888078199440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  277.763871][   T32]  #3: ffff88807becbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  277.763939][   T32] locks held by syz-executor/6534: 2, last CPU#0:
[  277.763955][   T32]  #0: ffff888032f9e9b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  277.764019][   T32]  #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  277.764099][   T32] 
[  277.764105][   T32] =============================================
[  277.764105][   T32] 
[  277.764116][   T32] NMI backtrace for cpu 0
[  277.764154][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  277.764178][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  277.764196][   T32] Call Trace:
[  277.764210][   T32]  <TASK>
[  277.764226][   T32]  dump_stack_lvl+0xe8/0x150
[  277.764257][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  277.764313][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  277.764389][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  277.764442][   T32]  sys_info+0x135/0x170
[  277.764472][   T32]  watchdog+0x1058/0x10d0
[  277.764512][   T32]  ? watchdog+0x209/0x10d0
[  277.764551][   T32]  kthread+0x38b/0x480
[  277.764583][   T32]  ? __pfx_watchdog+0x10/0x10
[  277.764612][   T32]  ? __pfx_kthread+0x10/0x10
[  277.764646][   T32]  ret_from_fork+0x514/0xb70
[  277.764681][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  277.764713][   T32]  ? __switch_to+0xc89/0x1420
[  277.764742][   T32]  ? __pfx_kthread+0x10/0x10
[  277.764776][   T32]  ret_from_fork_asm+0x1a/0x30
[  277.764823][   T32]  </TASK>
[  277.764832][   T32] Sending NMI from CPU 0 to CPUs 1:
[  277.764887][    C1] NMI backtrace for cpu 1
[  277.764900][    C1] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  277.764922][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  277.764934][    C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  277.764967][    C1] RIP: 0010:__local_bh_disable_ip+0x0/0xd0
[  277.764991][    C1] Code: 0a f7 c3 00 02 00 00 74 ec fb 5b c3 cc cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 56 53 89 f3 65 48 8b 05 bf 34 33 12 a9 00 00 00 0f
[  277.765006][    C1] RSP: 0018:ffffc90000a17e78 EFLAGS: 00000246
[  277.765023][    C1] RAX: ffffffff8aa0cb90 RBX: 0000000000000000 RCX: ffff88801eaebe80
[  277.765037][    C1] RDX: 8000000000000100 RSI: 0000000000000200 RDI: ffffffff8aa0c783
[  277.765051][    C1] RBP: ffffc90000a17f90 R08: 0000000000000100 R09: 0000000000000000
[  277.765064][    C1] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 0000000000000000
[  277.765077][    C1] R13: ffffffff8aa0c783 R14: ffffc90000a17ee0 R15: dffffc0000000000
[  277.765092][    C1] FS:  0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000
[  277.765107][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.765121][    C1] CR2: 00007ffe7b93794c CR3: 000000007ee68000 CR4: 00000000003526f0
[  277.765139][    C1] Call Trace:
[  277.765146][    C1]  <IRQ>
[  277.765152][    C1]  ip6_pol_route+0x5ba/0x14d0
[  277.765180][    C1]  ? ip6_pol_route+0x163/0x14d0
[  277.765208][    C1]  ? __pfx_ip6_pol_route+0x10/0x10
[  277.765243][    C1]  fib6_rule_lookup+0x222/0x730
[  277.765269][    C1]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  277.765296][    C1]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  277.765319][    C1]  ? nft_do_chain+0x48d/0x1b10
[  277.765348][    C1]  ? lock_acquire+0x115/0x350
[  277.765384][    C1]  ip6_route_output_flags+0x364/0x5d0
[  277.765411][    C1]  ? ip6_route_output_flags+0x2e/0x5d0
[  277.765440][    C1]  __nf_ip6_route+0x42/0xd0
[  277.765465][    C1]  synproxy_send_tcp_ipv6+0x274/0x730
[  277.765499][    C1]  ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10
[  277.765529][    C1]  ? trace_kmem_cache_alloc+0x29/0xe0
[  277.765563][    C1]  ? synproxy_send_client_synack_ipv6+0x357/0xcd0
[  277.765596][    C1]  synproxy_send_client_synack_ipv6+0x83f/0xcd0
[  277.765634][    C1]  ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10
[  277.765664][    C1]  ? nft_tproxy_eval+0x664/0x1c80
[  277.765693][    C1]  ? synproxy_pernet+0x45/0x270
[  277.765715][    C1]  nft_synproxy_eval_v6+0x362/0x4e0
[  277.765737][    C1]  ? __pfx_nft_synproxy_eval_v6+0x10/0x10
[  277.765763][    C1]  ? nf_ip_checksum+0x13c/0x510
[  277.765785][    C1]  nft_synproxy_do_eval+0x3d1/0x550
[  277.765806][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  277.765829][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  277.765855][    C1]  nft_do_chain+0x48d/0x1b10
[  277.765874][    C1]  ? __local_bh_enable_ip+0xd6/0x140
[  277.765903][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  277.765943][    C1]  nft_do_chain_inet+0x360/0x4b0
[  277.765964][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  277.765982][    C1]  ? nf_nat_ipv6_local_in+0x157/0x660
[  277.766010][    C1]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[  277.766035][    C1]  ? lock_acquire+0x115/0x350
[  277.766063][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  277.766083][    C1]  nf_hook_slow+0xc5/0x220
[  277.766112][    C1]  NF_HOOK+0x21f/0x3c0
[  277.766132][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  277.766153][    C1]  ? NF_HOOK+0x9e/0x3c0
[  277.766171][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  277.766191][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  277.766218][    C1]  ip6_input+0x16a/0x270
[  277.766236][    C1]  ? ip6_input+0x23/0x270
[  277.766257][    C1]  NF_HOOK+0x336/0x3c0
[  277.766277][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  277.766296][    C1]  ? NF_HOOK+0x9e/0x3c0
[  277.766314][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  277.766334][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  277.766368][    C1]  process_backlog+0x795/0x18b0
[  277.766399][    C1]  ? process_backlog+0x3de/0x18b0
[  277.766435][    C1]  __napi_poll+0xaa/0x330
[  277.766462][    C1]  net_rx_action+0x61d/0xf50
[  277.766497][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  277.766524][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  277.766557][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  277.766592][    C1]  handle_softirqs+0x226/0x860
[  277.766615][    C1]  ? do_softirq+0x77/0xd0
[  277.766638][    C1]  ? wg_timers_any_authenticated_packet_traversal+0x82/0x2f0
[  277.766667][    C1]  do_softirq+0x77/0xd0
[  277.766686][    C1]  </IRQ>
[  277.766692][    C1]  <TASK>
[  277.766699][    C1]  __local_bh_enable_ip+0x100/0x140
[  277.766720][    C1]  wg_packet_handshake_receive_worker+0x873/0x10b0
[  277.766750][    C1]  ? look_up_lock_class+0x57/0x110
[  277.766785][    C1]  ? wg_packet_handshake_receive_worker+0x72f/0x10b0
[  277.766816][    C1]  ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10
[  277.766848][    C1]  ? update_protect_slice+0x128/0x210
[  277.766881][    C1]  ? lock_acquire+0x115/0x350
[  277.766912][    C1]  ? rcu_is_watching+0x16/0xb0
[  277.766931][    C1]  ? process_scheduled_works+0x97a/0x1630
[  277.766953][    C1]  process_scheduled_works+0xc3d/0x1630
[  277.766991][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  277.767016][    C1]  ? assign_work+0x3cf/0x5d0
[  277.767038][    C1]  worker_thread+0xa47/0xfb0
[  277.767075][    C1]  kthread+0x38b/0x480
[  277.767100][    C1]  ? __pfx_worker_thread+0x10/0x10
[  277.767121][    C1]  ? __pfx_kthread+0x10/0x10
[  277.767147][    C1]  ret_from_fork+0x514/0xb70
[  277.767174][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  277.767200][    C1]  ? __switch_to+0xc89/0x1420
[  277.767222][    C1]  ? __pfx_kthread+0x10/0x10
[  277.767249][    C1]  ret_from_fork_asm+0x1a/0x30
[  277.767282][    C1]  </TASK>
[  277.767897][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  280.792583][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  280.801731][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.811820][   T32] Call Trace:
[  280.815126][   T32]  <TASK>
[  280.818085][   T32]  vpanic+0x56d/0xa70
[  280.822133][   T32]  ? __pfx_vpanic+0x10/0x10
[  280.826692][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  280.832291][   T32]  panic+0xc5/0xd0
[  280.836059][   T32]  ? __pfx_panic+0x10/0x10
[  280.840524][   T32]  ? wq_watchdog_touch+0xf9/0x160
[  280.845592][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  280.851788][   T32]  watchdog+0x10cc/0x10d0
[  280.856172][   T32]  ? watchdog+0x209/0x10d0
[  280.860637][   T32]  kthread+0x38b/0x480
[  280.864839][   T32]  ? __pfx_watchdog+0x10/0x10
[  280.869555][   T32]  ? __pfx_kthread+0x10/0x10
[  280.874200][   T32]  ret_from_fork+0x514/0xb70
[  280.878832][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  280.883980][   T32]  ? __switch_to+0xc89/0x1420
[  280.888697][   T32]  ? __pfx_kthread+0x10/0x10
[  280.893338][   T32]  ret_from_fork_asm+0x1a/0x30
[  280.898155][   T32]  </TASK>
[  280.901801][   T32] Kernel Offset: disabled
[  280.906144][   T32] Rebooting in 86400 seconds..