program:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'macvlan1\x00'}}, 0x1e) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000003d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r2)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x653}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x81}]}, 0x2c}}, 0x20000000) (async)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x1df, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) (async)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x16}, @hci_ev_le_advertising_info={{}, {0x2, [{0x0, 0x1, @none, 0x0, "", 0x8}, {0x4c4099d74e1c1ba5, 0x1, @any, 0x0, "", 0x9}]}}}}, 0x19)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@prjquota}, {@noquota}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@test_dummy_encryption}]}, 0xee, 0x456, &(0x7f0000001180)="$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")
bpf$BPF_PROG_QUERY(0x24, &(0x7f00000001c0)={@ifindex, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fbffffff060a0103000000050000080000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
[ 59.653046][ T5327] ------------[ cut here ]------------
[ 59.657024][ T5327] WARNING: CPU: 0 PID: 5327 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50
[ 59.664015][ T5327] Modules linked in:
[ 59.666404][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0
[ 59.669871][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 59.673437][ T5327] RIP: 0010:__queue_work+0xcd3/0xf50
[ 59.675346][ T5327] Code: ff e8 71 ae 37 00 90 0f 0b 90 e9 1e fd ff ff e8 63 ae 37 00 eb 13 e8 5c ae 37 00 eb 0c e8 55 ae 37 00 eb 05 e8 4e ae 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 59.681767][ T5327] RSP: 0018:ffffc9000d557a88 EFLAGS: 00010093
[ 59.683856][ T5327] RAX: ffffffff815d2bc4 RBX: ffff888000380000 RCX: ffff888000380000
[ 59.686739][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 59.690038][ T5327] RBP: 0000000000000000 R08: ffffffff815d2024 R09: 0000000000000000
[ 59.693043][ T5327] R10: ffffc9000d557b60 R11: fffff52001aaaf6d R12: ffff888042e86800
[ 59.695907][ T5327] R13: ffff888042e869c0 R14: dffffc0000000000 R15: 0000000000000008
[ 59.698774][ T5327] FS: 00007fac7c3206c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 59.702041][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.704374][ T5327] CR2: 00007fac7c31ff98 CR3: 000000003a112000 CR4: 0000000000352ef0
[ 59.707261][ T5327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.710202][ T5327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.713032][ T5327] Call Trace:
[ 59.714480][ T5327]
[ 59.715598][ T5327] ? __warn+0x168/0x4e0
[ 59.717137][ T5327] ? __queue_work+0xcd3/0xf50
[ 59.719055][ T5327] ? report_bug+0x2b3/0x500
[ 59.720681][ T5327] ? __queue_work+0xcd3/0xf50
[ 59.722336][ T5327] ? handle_bug+0x60/0x90
[ 59.723926][ T5327] ? exc_invalid_op+0x1a/0x50
[ 59.725648][ T5327] ? asm_exc_invalid_op+0x1a/0x20
[ 59.727634][ T5327] ? __queue_work+0x124/0xf50
[ 59.729448][ T5327] ? __queue_work+0xcc4/0xf50
[ 59.731130][ T5327] ? __queue_work+0xcd3/0xf50
[ 59.732682][ T5327] ? __queue_work+0xcc4/0xf50
[ 59.734371][ T5327] queue_work_on+0x1c2/0x380
[ 59.735984][ T5327] ? __pfx_queue_work_on+0x10/0x10
[ 59.737862][ T5327] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 59.739946][ T5327] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 59.742273][ T5327] ? skb_queue_tail+0x36/0x120
[ 59.744090][ T5327] hci_recv_frame+0x598/0x6f0
[ 59.745862][ T5327] vhci_write+0x35a/0x490
[ 59.747330][ T5327] vfs_write+0xaeb/0xd30
[ 59.748725][ T5327] ? __pfx_vhci_write+0x10/0x10
[ 59.750383][ T5327] ? __pfx_vfs_write+0x10/0x10
[ 59.751972][ T5327] ? fdget_pos+0x19a/0x320
[ 59.753485][ T5327] ksys_write+0x183/0x2b0
[ 59.754986][ T5327] ? __pfx_ksys_write+0x10/0x10
[ 59.756626][ T5327] ? do_syscall_64+0x100/0x230
[ 59.758370][ T5327] ? do_syscall_64+0xb6/0x230
[ 59.760009][ T5327] do_syscall_64+0xf3/0x230
[ 59.761642][ T5327] ? clear_bhb_loop+0x35/0x90
[ 59.763308][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 59.765552][ T5327] RIP: 0033:0x7fac7b57d1ff
[ 59.767068][ T5327] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[ 59.773757][ T5327] RSP: 002b:00007fac7c320000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 59.776723][ T5327] RAX: ffffffffffffffda RBX: 00007fac7b736130 RCX: 00007fac7b57d1ff
[ 59.779500][ T5327] RDX: 0000000000000019 RSI: 0000000020000080 RDI: 00000000000000ca
[ 59.782382][ T5327] RBP: 00007fac7b5f132e R08: 0000000000000000 R09: 0000000000000000
[ 59.785447][ T5327] R10: 0000000020000080 R11: 0000000000000293 R12: 0000000000000000
[ 59.788997][ T5327] R13: 0000000000000000 R14: 00007fac7b736130 R15: 00007fff19b3e818
[ 59.792460][ T5327]
[ 59.793889][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 59.797381][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0
[ 59.801193][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 59.805071][ T5327] Call Trace:
[ 59.806374][ T5327]
[ 59.807398][ T5327] dump_stack_lvl+0x241/0x360
[ 59.809010][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10
[ 59.811135][ T5327] ? __pfx__printk+0x10/0x10
[ 59.812748][ T5327] ? vscnprintf+0x5d/0x90
[ 59.814313][ T5327] panic+0x349/0x880
[ 59.815633][ T5327] ? __warn+0x177/0x4e0
[ 59.817183][ T5327] ? __pfx_panic+0x10/0x10
[ 59.818803][ T5327] __warn+0x34b/0x4e0
[ 59.820181][ T5327] ? __queue_work+0xcd3/0xf50
[ 59.821965][ T5327] report_bug+0x2b3/0x500
[ 59.823538][ T5327] ? __queue_work+0xcd3/0xf50
[ 59.825350][ T5327] handle_bug+0x60/0x90
[ 59.826859][ T5327] exc_invalid_op+0x1a/0x50
[ 59.828578][ T5327] asm_exc_invalid_op+0x1a/0x20
[ 59.830385][ T5327] RIP: 0010:__queue_work+0xcd3/0xf50
[ 59.832295][ T5327] Code: ff e8 71 ae 37 00 90 0f 0b 90 e9 1e fd ff ff e8 63 ae 37 00 eb 13 e8 5c ae 37 00 eb 0c e8 55 ae 37 00 eb 05 e8 4e ae 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 59.839335][ T5327] RSP: 0018:ffffc9000d557a88 EFLAGS: 00010093
[ 59.841488][ T5327] RAX: ffffffff815d2bc4 RBX: ffff888000380000 RCX: ffff888000380000
[ 59.844559][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 59.847492][ T5327] RBP: 0000000000000000 R08: ffffffff815d2024 R09: 0000000000000000
[ 59.850399][ T5327] R10: ffffc9000d557b60 R11: fffff52001aaaf6d R12: ffff888042e86800
[ 59.853391][ T5327] R13: ffff888042e869c0 R14: dffffc0000000000 R15: 0000000000000008
[ 59.856347][ T5327] ? __queue_work+0x124/0xf50
[ 59.858125][ T5327] ? __queue_work+0xcc4/0xf50
[ 59.859851][ T5327] ? __queue_work+0xcc4/0xf50
[ 59.861607][ T5327] queue_work_on+0x1c2/0x380
[ 59.863414][ T5327] ? __pfx_queue_work_on+0x10/0x10
[ 59.865340][ T5327] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 59.867434][ T5327] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 59.869833][ T5327] ? skb_queue_tail+0x36/0x120
[ 59.871677][ T5327] hci_recv_frame+0x598/0x6f0
[ 59.873390][ T5327] vhci_write+0x35a/0x490
[ 59.875059][ T5327] vfs_write+0xaeb/0xd30
[ 59.876520][ T5327] ? __pfx_vhci_write+0x10/0x10
[ 59.878419][ T5327] ? __pfx_vfs_write+0x10/0x10
[ 59.880150][ T5327] ? fdget_pos+0x19a/0x320
[ 59.881814][ T5327] ksys_write+0x183/0x2b0
[ 59.883471][ T5327] ? __pfx_ksys_write+0x10/0x10
[ 59.885437][ T5327] ? do_syscall_64+0x100/0x230
[ 59.887306][ T5327] ? do_syscall_64+0xb6/0x230
[ 59.889041][ T5327] do_syscall_64+0xf3/0x230
[ 59.890708][ T5327] ? clear_bhb_loop+0x35/0x90
[ 59.892514][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 59.894664][ T5327] RIP: 0033:0x7fac7b57d1ff
[ 59.896447][ T5327] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[ 59.903254][ T5327] RSP: 002b:00007fac7c320000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 59.906472][ T5327] RAX: ffffffffffffffda RBX: 00007fac7b736130 RCX: 00007fac7b57d1ff
[ 59.909367][ T5327] RDX: 0000000000000019 RSI: 0000000020000080 RDI: 00000000000000ca
[ 59.912536][ T5327] RBP: 00007fac7b5f132e R08: 0000000000000000 R09: 0000000000000000
[ 59.916013][ T5327] R10: 0000000020000080 R11: 0000000000000293 R12: 0000000000000000
[ 59.918874][ T5327] R13: 0000000000000000 R14: 00007fac7b736130 R15: 00007fff19b3e818
[ 59.921888][ T5327]
[ 59.923418][ T5327] Kernel Offset: disabled
[ 59.925050][ T5327] Rebooting in 86400 seconds..