last executing test programs:

12.233528012s ago: executing program 2 (id=3800):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0xfffffffffffffe65, &(0x7f00000001c0)=[{&(0x7f0000000400)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ede21464c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @private1}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x7, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00'}, 0x94)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0xfd45}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x14, 0x31, 0x10b}, 0x14}}, 0x0)
close(0x3)
sendmsg(r0, &(0x7f0000001080)={&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @private=0xa010101}, 0x2, 0x0, 0x4, 0x3}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000600)="e5e588365ea7f71472cfb6300d7aa13fd447ed1c2a1156007d23561fad58e4ff0bced2ff7f8751a57fc1a04f50134c89e3e14c87f0e23e71559038eb96c251a58cb4abfe5c2c47026ef08cce6c333da01a008a5f41571efe0c41abd10ae9ee7e800d3d034fe4454c445e88", 0x6b}, {&(0x7f0000000680)="e9207669", 0x4}, {&(0x7f00000006c0)="f4d6046a28dbab3628191385444cefedebb5ada52868b754cf6644e9c7987ae3124446e549c921790594c3fc8d02bc09523183beb59fcc2d5f48a29a2323e2a431c0481b8b802df678e643d7e89722e6a87316fe8da497645b0c7d71f9e6c9ef87c1fcbb03727b08c84843af4c808bc7604e4575b686", 0x76}, {&(0x7f0000000740)="92089a90e36058fad416a3365a42b8f70d5dded0ae761733e2077290c6ecb0b7c6a01c7f742621f831b5ff3e0d6676edb470e6d2cf60c040a05186da54aef4fb4467b5cd890d889ed705bf83dd0598d8263aa2bae1a1909e8605f0fe336102043558", 0x62}, {&(0x7f00000007c0)="b4b1e564ba04a5fb340d076498ca046a48f29c47642b18752659c1d923b0f6e741fcc22afc0f9fd17fbe3b45ddbfb4313b6c83025d6dcff504feb0c7063b371955d1deb5166c768976917eeb52d0ffe24f48dd9b08c5945e01f04f184634680996ee4ddf73b06e4a83b96a255fc0fd8c89b9781e8915b4853aac201520bbc630cf1c96490befe082a94705b5296111f33bd3afb1d1f04fbeb482c6b664acaef39a38bb22c6a98b86e3ef226c015a490450f12c6634425e111d6acc48e1d0ffd3c3d4ef7ac36769a97449241b39c69e04d68bc9", 0xd3}, {&(0x7f0000001240)="06d73a320c3a4f79f31547e00e43e608d8bde9365441aee295216c7b8bbf2e061a918247781440f3783513c97fe6f7441c049cc5b5e8d74dc75c82d840ce2e2d0a7bcb6833b18397cd4812913a703ae6e3808ddaaa6ee7ca91ffb38e86ac1917fc7158ad6da759fc2b8c0f071b729008fbf9c9c66368eb7404c64fcc6bf7e174a7725b5d6f7b60b452f86594cd4c8b194151d679de53fce54103190bd5", 0x9d}, {&(0x7f0000000900)="ea388f740c819e7675f18c0e02c6e5bc2319c48b7479931aa1916f1a3d7383315ca8fad68abad609aeae4739e0b7219459489cc4888138237e3ec1e5f183f566c84d68aabeafef22930bc428be0c3b221dabf558eda5ba8cc7505554bae735768118e12307f945f6a9cf1f06525a5e23a667dba749716569eadfcd9854726c597a349a23d2388c0f88a28b9bc952f7027e907d88b1f060bb62c6349b6407b61ebbd244ee335798d778ad4a9ff0fa8bd74d17f6961bba7037b9168ab3f1", 0xbd}, {&(0x7f00000009c0)="ec693ee17c4858b44337c406247e2ba982b17481c0c38b079650101fc96821ba6c470579510b010ecf55a18c33ad68f35d4cc606178b81df027a8eea9bf97fdda72eb5d384847c4c2807e6a9d3ca0ccfb8be4f33ab67c4576e824f6adfb03cfcf00521361b3a6644d268318c9ab199a42a8d5df91498204df7621f2e0bb018e1d5f999229edd302c1ec2a576b27a907e05a053272d9bb587fab94667e3a0aeccc0a4b0e5572006bd91fda83fa18e9be65ce6d3e5c9032e52fe0e68e90bbda250c0edcc07c0bf97bf2ac4027d8f3bb3681ca530a9c3a3b84b4bcd7f4b50fb8d638681edea57a7f55e6c2acc6fd27e5c87fd71e8b165bdce2a5564001a9e", 0xfd}, {&(0x7f0000000ac0)="b4e820bb2b79bb6186d25dbe1bfb44594bccddef4fc6cc111f69968403b107e422a03b893545fd3827ac70cbe6fa383e51b552f559d4b44813847e039e26e83ba20f1eb755d53f04a6b9de3a988e93b798caf55e5f0b686b6e950940f2d81bfdfb1ef39192bc842e23b7642069b27411ec6ac988a0c4afaf69eda2f82a9e88246e75a17600ecd2529832b2982220f7f95133c797575ea3a6092c068c2229387ab794155fa9cc112a7987c7482dc85cd1e68430245feb3ba84f0117e6b325bff88e56bd5ea09f0cdc01454749a12c52fc985db254", 0xd4}, {&(0x7f0000000bc0)="15fdecaaf30185a17bb6844fef59b2c54b570ff53e588c1dab0f7bd9db901234bcaec17e875607f4dea0de94f0abaab477fa756a5375fcf6f03b908f6a2c90e2a640546ab1308755be8ee6efaf28dcd654b3aa0460d7fab386749f28ed7a95015ffe5b47d5d39c19f41095a3864df2ab2df65e246ffd2afe355398a63971c60df91b306cd0e9038c8021d7ac72a7b7c0aba2339b2ebe1d819daf6f9fb3541dc41a7e34d62e898b6ce058f2e41a94a1d27e050b7ad6a59291e671347cb80282ccd4cd271c4d92a1fd9f2806064c1bd4aaccaeefd6da562ff9f03907c7c0c66e237fad", 0xe2}], 0xa, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x20000004)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)

11.390654539s ago: executing program 2 (id=3802):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}})
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="900100005034aeae06023e29bd5db0ad44c4b81a5a375ca25fb859b10f69", @ANYRES16=r5, @ANYBLOB="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"], 0x180}}, 0x820)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

10.501929682s ago: executing program 2 (id=3806):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x2, r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d000a00", @ANYRES32=0x0, @ANYBLOB='\b'], 0x5c}}, 0x0)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x30)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="40028000000042"], 0x7)

10.202321517s ago: executing program 2 (id=3808):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0xfd45}}, 0x0)
write$nci(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r10 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r10, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
listen(r10, 0x0)

9.271956987s ago: executing program 2 (id=3810):
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', <r1=>0x0, 0x80, 0x40, 0xffc00000, 0xd291, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x64, 0x0, 0x40, 0x4, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@ll={0x11, 0x10, r1, 0x1, 0x3, 0x6, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="afcdfc08e1e8b47e9e594c646464c514b6bf5e791fdb282b3c38bf6fe0701c499ca2bf958877c833f3e7172b425fcb9ff1cd1e5bc8a30e416c719d9c8b7af5bba7b1ad332796c616f7ba5f81cbf422f2663ed5fc0cbf0e824c", 0x59}, {&(0x7f0000000180)="934d2be098133bf483293a9d01561902634b1b64ab9c224f397a06fccd47a0633368b7c279a06a9d6f18daf13b1e0c942cdba7a4c6a1b8ebf35ac76f3d4d69b237ff275ad3505a1ba9d45713bdff087defae40048353494b388a16b72a0f955e358e32057e333380b4d31613dff5640379bdfa3949983d7ee7e74161075ba08fa8e1bf3f29024f6633f5861c4cab94a79094f3a97d4c3a4956e3", 0x9a}, {&(0x7f0000000240)="c3d72405e9e9643816ee2237f71e2cc7f0b355dab72510a12b41212c769c738005289f6125f7b1b276c0b9cd7f370fd66df3633c139f94366b00f262fcaa2f8101cb29f06cc4a0255166964a9863b56969c95e0e5eb462f73ef97493fdb2ed48688bfd2fde6466c6aa79764c4e14fa765b4664ab9134f5a4006f9b022a3f66bb72bbc203", 0x84}], 0x3, &(0x7f0000000340)=[{0xa0, 0x108, 0x3, "23d814b6b0266ebc3a4a961c21c260673eca099ae759fd35b2870ef56dc19fdb7ed3e5e292e1de87b2e287b949a3817fd85c7bec3627cbcf6e52ff4bb6dfbc93b725845c864fc278d83ad1d4f34446f4fdad98afc880ae4ba4a9320f7175fec5af5ec04f43104faa9273943c90f193301f7a97211304a663979a814dbdf3b5e69fc147433b2861595148"}, {0xa0, 0x1, 0x4, "1ea4231d91b5e1dfe5e89896e6247b608542392c2e0dc5dc1e6549120cfa22a49a0a8751460537e6995ccdf7e191371135e306fbac49b5fe6e8b6ed913b8642ff347da5c487c514795cdf061f5f21a2624239852747a503236ca26d4c7dad1986395f812ca5d324ed29efd22ce54b87fd3defd91e1193d739204976980de7fc563e34e05835042517ca38d54"}, {0x48, 0x108, 0x50, "d90754ed065f6cf81e876407c150e3ddd24b07cc9a3d07170e856046d66a2046ec1a13244b799f24c723bfda53c975efe1"}, {0x28, 0x10b, 0x3, "14e6807823adfeed0a3110a95eba2401a63193"}, {0xd8, 0x10e, 0x1, "91e21b284418a5407a76bbdc356f64273f082de21168264cfeca9c8c0a5ef3bc3c8075917956264d7db0eb752eb34b597171c5f5dd05b5786fdee3606b9a588afabebd62b7e146c94d00571afd19d911a5b2c46625fe23598f71147351f9bbfd576f342f1658a6a590e6def017898450be26990639745b113c9856f8f4bdf9df3419fb8e6ae66f7909e66a2895f49783a63df112f61ee3d5bebed7774cb87199aadc79d26cb8eff7dac0e630b4d03eab2e773eb2e622fb036c67b9898e46280b5698954e"}, {0x28, 0x101, 0x1, "d85f8852dba536fc5f2f4f4b36e0f925eae696b241ee"}, {0xa0, 0x113, 0x4, "220a534118fe2bd2d3ecc4f288e56d06895f7a37c58db99eec0f3412372dab847a9b7b719faedf6a9d01c6ca3934b46f40391a834e22e0bf01d5157f78e830b490032eb27f3a40d71675918e009608a24787ea6205f614579dd78b738547f8051ca547ee73a302782889047561b16b46637c3b0e0631522864b0773495310507db9be33f08cb163bd3072ad3200b1f25"}, {0x30, 0x10a, 0x1, "a73ff9f4e07891e7f36ffb1d81afedec65d5dfa995f132abca25ae8312c80599"}, {0xd8, 0x112, 0x3, "5fd2151cfe5938a42e2171e1f99e137ac1f39366025fcc53ec7976def496b71d0f4bcdc669498d3a53544cf28cea4426147c249332993b634a673b6339409678e11cedac3ff9222d5b6353e45b9605058a3ecb0a4b568fa7bdea6632c63e9228f6a6041eba737d0416a4c0879585c3fa5909c2c8ea8914887ee5301aa2f470be82333c3dc8f481fc459b117c515f7d284b09271eef482498aed3dbccf842476737558842e9b0b6c247caad886316b8bca8b9a300c0529720d06ea28569f0179a7875637a14c0a0"}, {0x68, 0x108, 0x7f, "b716484ebe6a7ec0d234194db1c9ac05de8fa68b419884ef9e35f39ed5b5c46b810707ea7faef14f47b598d1c849081284dc78eb2e7bc6602863a7e4336e0463fcfbef71c2297ee0977b00d887d6d22f2c"}], 0x4c0}, 0x40)
r2 = socket$inet6(0xa, 0x800, 0x12)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000840)=0x7f)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r3, 0x8004af80, &(0x7f00000008c0))
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000900)=0xff)
r4 = socket$caif_stream(0x25, 0x1, 0x0)
connect$caif(r4, &(0x7f0000000940), 0x18)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000980)={{0x3, @rose}, [@netrom, @netrom, @remote, @null, @default, @default, @rose, @null]}, &(0x7f0000000a00)=0x48)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a40)={0x0, <r6=>0x0}, &(0x7f0000000a80)=0xc)
ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000ac0)={0x3, @bcast, r6})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup/syz1\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40))
getsockname$ax25(r5, &(0x7f0000000b80)={{0x3, @netrom}, [@null, @rose, @default, @netrom, @netrom, @null, @remote, @bcast]}, &(0x7f0000000c00)=0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x25, &(0x7f0000000c40)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000d80)='syzkaller\x00', 0x8, 0xbe, &(0x7f0000000dc0)=""/190, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000ec0)={0x1, 0xb, 0xea, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000f00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000f40)=[{0x3, 0x2, 0x8, 0xa}, {0x3, 0x5, 0x7, 0x9}, {0x2, 0x1, 0x10, 0x5}, {0x4, 0x1, 0x10, 0x7}, {0x1, 0x4, 0x3, 0xc}, {0x1, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x1}], 0x10, 0x5}, 0x94)
ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000001080)={0x1, 0xa45})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x3, 0x5, 0xb, 0x220, 0xffffffffffffffff, 0xa, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r8}, &(0x7f0000001140), &(0x7f0000001180)=r7}, 0x20)
sendmsg$inet6(r2, &(0x7f0000001600)={&(0x7f0000001200)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001240)="9f3b2c90c63dac5e97dc62ee546707c85354ce276792a78ee0a5ddea99e68e9617285c94e58d1d", 0x27}, {&(0x7f0000001280)="bc668d574327a5bc72204fc70f767731e9e3f60fd2ac6249299db21f9673c64419ff7b6871f5e569fa8abb296fa7eacbf57fd64aeaad5c521cef4d2647759554933e11c8815155f635d4357ccfdb4d3b180dbbb906", 0x55}, {&(0x7f0000001300)="6ecb7254c5c96a7347f63d4e4bda8c30fef1edec17e651e06ee87ccb61c038ce1fae29e05955ddb1f5ff5e13c5347da1c610d8ce40aae7c7fd4229133bedd0025c7cf2722964e61271347aad48743cae11fb2f207198f6ea914de5863a00bd6c246f256916d1657b08ffea9adde5bfb6080771586e65f35551ff5f0a53218ca8e8d23a1ad3ed6f2c05ea26fc7047f685af8b463c70764ad9eee767454c805591afc39bcc1ee84c3fb528ab4c8e76b08dc55a6b6747b3a41ee8825c6f83bc52c6", 0xc0}, {&(0x7f00000013c0)="9b21ed81e1ec61447d455edb65fcdc6358e166b437a38bff78a7e9ae30e701c81381d76940702e7bdc3840baa98f7378555093c0b83150e6911f3ddc4ddd42e504932f87b3149c382ded8151ecabd63ff21184691885e19e6d543d60a4b8dd77fa80cd4e09759e62f3aa3fc79fdb31a479c7ba5bc35d7a71b94d4989546b683bc8102b97d8104d51a492756f0a508527779349a104c46ba7e13f4283fc23bae8fdb5f5a37f965286ca790a5c89d7a3635ab562cb8df7fa9b047e9950c4c8a75351aa9793943eda06d20211de84eac5ac387e", 0xd2}, {&(0x7f00000014c0)="331d2be09aa6a2cf81cd8b2de2605f3f912f", 0x12}, {&(0x7f0000001500)="3f8ff459f8bc1658bd37287542eab86371ac4a31a596bab8f3457dedb38bf2e616f5a84f3064b994405b7367591823a5e59908f5c21a0fb679431626f7", 0x3d}], 0x6, &(0x7f00000015c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x3a, 0x0, '\x00', [@pad1]}}}], 0x20}, 0x20004804)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x1411, 0x2, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4040040)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, r9, 0x5, 0x3, 0x1}, 0x50)
shutdown(r10, 0x1)
getsockopt$MISDN_TIME_STAMP(r9, 0x0, 0x1, &(0x7f0000001800), &(0x7f0000001840)=0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001880)={<r11=>0x0, 0xff00, 0x9}, &(0x7f00000018c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001900)={r11, 0x2}, &(0x7f0000001940)=0x8)

9.168348066s ago: executing program 2 (id=3816):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='bbr', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000280)="1de8", 0x2, 0x200400c5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x28000600)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140), 0xc)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
r9 = socket$netlink(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0xbc, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0xbc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

1.582589456s ago: executing program 0 (id=3863):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62)
listen(r1, 0x3)
ppoll(&(0x7f0000000100)=[{r1, 0x3000}], 0x1, &(0x7f0000000180), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffffcb816e16f40af8b750ffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="185000000000000000000000000000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r6]}, 0x94)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xc7}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r9, 0x0)
close(r10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x7}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

1.373327586s ago: executing program 0 (id=3866):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x94)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0xfd45}}, 0x0)
write$nci(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

539.534509ms ago: executing program 0 (id=3868):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6e2", 0x2}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @remote, 0xfffffff7}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000001140)="e5", 0x1}], 0x1}}], 0x2, 0x44000)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

461.783967ms ago: executing program 0 (id=3870):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810) (async)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/4088, 0xff8}], 0x1}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}}) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14) (rerun: 32)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) (async, rerun: 64)
r5 = socket$key(0xf, 0x3, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0010000000080000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async)
sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0xfd45}}, 0x0)
write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
socket$nl_route(0x10, 0x3, 0x0)

460.992475ms ago: executing program 1 (id=3872):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}}) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) (async, rerun: 64)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x28, 0x0, &(0x7f0000000000)) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000613498ebd92510080000000000630afcff001000da10fb718dacac0500"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async, rerun: 32)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0xfd45}}, 0x0)
write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x0, 0x5}, {0x6492cee5a04e8d7a}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0)
close(0x3) (async, rerun: 64)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (rerun: 64)

402.945766ms ago: executing program 0 (id=3873):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010226bd7000feffffff0300260008000400ac14143114000000000063766c616e3000000000000000de1300070000000000000000000000ffff7f00000108000500e00000022a3df5101781db4a29bea96b70fcaed8ed1f83c04338e9ca1d50db3c308127c7b7b31c0d339f27886387276291a9742a4343b7f1a749d6ed38b081ba946ecbab1a3b282caeea366aeb52ec723e832edc571400b8487cfa8046d1e2ba09926b85eca42b06f05ce946574e0bac54c9f1f8ac6da700096eadfca47a373b4a90cc5509678abb56befcbb095c74636fd7b2a21c726569"], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
preadv(r8, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=<r11=>r10, @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5)
r13 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r13, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r14 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r14, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20004100}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="10002cbd7000fddbdf2514e3ff00100002800c000380087c0a272500010000010000"], 0x24}, 0x1, 0x0, 0x0, 0x40408c4}, 0x810)
socket(0x10, 0x803, 0x0)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="b71cf84de2dd17d06b845e61f3028b9a387f71b728ca7d2896ce79e909ac4cf0aa9ae4eed8244e11b2c6ffaa0f670aea48499ff85f6ca1932603642259f36ee678acc3c48e476a35ebb1aa771d8e0a920804d7e925218adddc3a716b9f9a666fd726cd1d5cb34c5b461b519d4f03b0612c90a6c72e603998b17ab86cea583b5825ec2cf5e50aaf94a53440a1225c78ebe3fee30b5f58fe12fa9e9b71adbfd46e60571e61a5", @ANYBLOB="ab374605a916ff1d1a47383ab917ff20c872e055b333f680ce1f500c735693e87c4535fd6a54906d0df2f1e4b0ab56010fd990abcba282bc1812549f43373465553c3c512307acd0fd3748c4aba19e9b78fa262f2a4c107d1367d3e8404f435fc97729bf5652885e469c80597536eac6c1255c255302454818d32ba3e5cfa396376d45de7b884e6519090105a4689ba75fdb30786f62b744c2c13d871ffef6da709571aae0d882f4dd2ad75b7276122e59c46a249a67f8ddc769a3e990ce8ecfcab3b1d732435375cdf5c821f9752d3b18a14d895ad040f60839a49cb3158abd2badc79f", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=r0], 0x48)
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r11, @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r15}, &(0x7f0000000240), &(0x7f0000000380)=r16}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r16, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
write$nci(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)

322.108474ms ago: executing program 1 (id=3874):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async, rerun: 64)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff}) (rerun: 64)
ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000280))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5]}, 0x94)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async)
listen(r9, 0x0) (async, rerun: 32)
close(r10) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)

162.977141ms ago: executing program 1 (id=3875):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000408010100020000000000000300000806000240080000000500030088000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040) (async)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async, rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10) (async, rerun: 32)
bind$tipc(r6, 0x0, 0x0) (async)
r8 = socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$kcm(0x2, 0xa, 0x2) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async)
ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000200)=0xb55) (async, rerun: 32)
write$tun(r0, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0xe, "d3"}}}}}}}, 0x19) (rerun: 32)

161.076236ms ago: executing program 0 (id=3876):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000611008000000d3b65b320641000063fcff000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000044000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000b85ea09adb41df8c00000000fecf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r10}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f00000003c0)="01b484feedaf052ff7052b777c", &(0x7f0000000300)=@tcp=r9, 0x1}, 0x20)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r11, 0x1}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0xfd45}}, 0x0)
write$nci(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)

13.49204ms ago: executing program 1 (id=3877):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x5, 0x4) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)

1.002188ms ago: executing program 1 (id=3878):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000100000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0)

0s ago: executing program 1 (id=3879):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
unshare(0x22020400)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r3=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r4}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

kernel console output (not intermixed with test programs):

led to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  153.464625][T10048] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  153.588250][T10072] IPVS: set_ctl: invalid protocol: 108 172.30.1.3:20003
[  153.611642][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  156.250040][T10194] netlink: 'syz.1.564': attribute type 29 has an invalid length.
[  156.258851][T10194] netlink: 'syz.1.564': attribute type 29 has an invalid length.
[  156.266009][T10194] netlink: 500 bytes leftover after parsing attributes in process `syz.1.564'.
[  156.329417][T10210] 8021q: VLANs not supported on ip6_vti0
[  157.274454][T10219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.160317][T10286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.265172][T10312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  159.413334][T10342] netlink: 'syz.2.582': attribute type 1 has an invalid length.
[  160.202610][T10348] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  160.345193][T10386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.585'.
[  161.488957][T10434] netlink: 'syz.2.595': attribute type 1 has an invalid length.
[  161.491497][T10434] netlink: 600 bytes leftover after parsing attributes in process `syz.2.595'.
[  162.394408][T10491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  162.419429][T10493] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  163.401740][T10543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.112141][T10531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.106772][T10582] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.381391][T10624] netlink: 16394 bytes leftover after parsing attributes in process `syz.0.617'.
[  166.891939][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'.
[  167.186534][T10712] netlink: 60 bytes leftover after parsing attributes in process `syz.0.626'.
[  168.060985][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.634'.
[  168.131426][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.635'.
[  168.148762][ T5721] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  168.346435][T10787] netlink: 64 bytes leftover after parsing attributes in process `syz.2.638'.
[  169.176306][ T5721] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  169.283098][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.642'.
[  169.286242][T10822] netlink: 'syz.2.642': attribute type 7 has an invalid length.
[  169.289050][T10822] netlink: 'syz.2.642': attribute type 8 has an invalid length.
[  169.291726][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'.
[  169.299278][T10822] ip6gretap0: entered promiscuous mode
[  169.301932][T10822] syz_tun: entered promiscuous mode
[  169.304878][T10822] ip6gretap0: left promiscuous mode
[  169.307177][T10822] syz_tun: left promiscuous mode
[  170.001947][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'.
[  170.928179][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'.
[  171.922311][T10901] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  173.714899][T10958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.904062][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'.
[  174.749513][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'.
[  174.784546][T11037] netlink: 'syz.1.667': attribute type 4 has an invalid length.
[  174.791357][T11037] netlink: 'syz.1.667': attribute type 4 has an invalid length.
[  176.481243][T11077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.513360][T11091] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  176.738478][T11119] team0: Caught tx_queue_len zero misconfig
[  177.737870][T11164] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  177.817929][T11180] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  177.881179][T11190] syzkaller0: entered promiscuous mode
[  177.887620][T11190] syzkaller0: entered allmulticast mode
[  179.967547][T11287] syz_tun: entered allmulticast mode
[  180.592582][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  182.535537][T11349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  183.441745][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'.
[  184.763061][T11466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.724'.
[  184.766645][T11466] IPv6: Can't replace route, no match found
[  185.649928][T11493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.690140][T11537] IPVS: set_ctl: invalid protocol: 70 127.0.0.1:20001
[  186.957904][T11547] netlink: 'syz.2.737': attribute type 1 has an invalid length.
[  187.128023][T11572] netlink: 22 bytes leftover after parsing attributes in process `syz.1.739'.
[  187.405605][T11600] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  187.558542][T11629] netlink: 'syz.2.747': attribute type 29 has an invalid length.
[  187.568448][T11629] netlink: 'syz.2.747': attribute type 29 has an invalid length.
[  187.574202][T11629] netlink: 500 bytes leftover after parsing attributes in process `syz.2.747'.
[  187.937662][T11656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.752'.
[  188.208654][T11684] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  188.269102][T11691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.756'.
[  189.200475][T11724] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  189.383962][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  190.379339][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'.
[  190.397615][T11790] netlink: 'syz.1.772': attribute type 7 has an invalid length.
[  190.400897][T11790] netlink: 'syz.1.772': attribute type 8 has an invalid length.
[  190.406747][T11790] netlink: 'syz.1.772': attribute type 15 has an invalid length.
[  191.146138][T11808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  192.434130][T11893] netlink: 'syz.0.786': attribute type 7 has an invalid length.
[  192.436728][T11893] netlink: 'syz.0.786': attribute type 8 has an invalid length.
[  192.439837][T11893] netlink: 'syz.0.786': attribute type 15 has an invalid length.
[  193.836609][T11930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.874967][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.877147][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  193.907797][T11953] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  194.058782][T11969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.183154][T11996] netlink: 48 bytes leftover after parsing attributes in process `syz.0.799'.
[  194.248750][T11996] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  194.251572][ T8820] IPVS: starting estimator thread 0...
[  194.343023][T12008] IPVS: using max 80 ests per chain, 192000 per kthread
[  195.263654][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  196.188696][   T33] audit: type=1800 audit(1758813973.965:2): pid=12085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.812" name="memory.events" dev="tmpfs" ino=1315 res=0 errno=0
[  196.199124][   T33] audit: type=1804 audit(1758813973.975:3): pid=12085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.812" name="memory.events" dev="tmpfs" ino=1315 res=1 errno=0
[  196.228521][T12076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.232968][T12086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.247430][T12085] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  196.435867][T12104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.570270][T12127] netlink: 'syz.1.818': attribute type 21 has an invalid length.
[  196.579978][T12127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.818'.
[  197.471610][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  198.137970][T12186] netlink: 'syz.0.828': attribute type 29 has an invalid length.
[  198.141427][T12186] netlink: 'syz.0.828': attribute type 29 has an invalid length.
[  198.146287][T12186] netlink: 500 bytes leftover after parsing attributes in process `syz.0.828'.
[  198.452339][T12214] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  199.659285][T12278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  200.549263][T12308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  200.663919][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'.
[  200.676961][T12333] netlink: 'syz.0.847': attribute type 4 has an invalid length.
[  201.615199][T12377] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  201.643573][T12388] netlink: 'syz.0.855': attribute type 29 has an invalid length.
[  201.649809][T12388] netlink: 'syz.0.855': attribute type 29 has an invalid length.
[  201.653772][T12388] netlink: 500 bytes leftover after parsing attributes in process `syz.0.855'.
[  202.994773][   T33] audit: type=1107 audit(1758813980.775:4): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  203.723192][T12477] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  203.899898][T12489] batadv_slave_1: entered promiscuous mode
[  203.902293][T12489] batadv_slave_1: entered allmulticast mode
[  203.993796][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'.
[  204.052895][T12515] netlink: 'syz.2.875': attribute type 29 has an invalid length.
[  204.058363][T12515] netlink: 'syz.2.875': attribute type 29 has an invalid length.
[  204.063124][T12515] netlink: 500 bytes leftover after parsing attributes in process `syz.2.875'.
[  204.146867][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  204.150418][T12529] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  204.969569][T12537] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  205.814199][T12577] netlink: 'syz.0.884': attribute type 29 has an invalid length.
[  205.821166][T12577] netlink: 'syz.0.884': attribute type 29 has an invalid length.
[  205.824873][T12577] netlink: 500 bytes leftover after parsing attributes in process `syz.0.884'.
[  205.831168][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.883'.
[  206.778311][T12610] netlink: 244 bytes leftover after parsing attributes in process `syz.2.891'.
[  207.677927][T12645] sctp: [Deprecated]: syz.1.895 (pid 12645) Use of int in max_burst socket option deprecated.
[  207.677927][T12645] Use struct sctp_assoc_value instead
[  208.771984][T12716] netlink: 'syz.0.902': attribute type 29 has an invalid length.
[  208.775893][T12714] netlink: 'syz.0.902': attribute type 29 has an invalid length.
[  208.779638][T12714] netlink: 500 bytes leftover after parsing attributes in process `syz.0.902'.
[  209.516961][T12728] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  209.519710][T12728] netlink: 96 bytes leftover after parsing attributes in process `syz.0.904'.
[  209.524693][T12737] netlink: 96 bytes leftover after parsing attributes in process `syz.0.904'.
[  210.321431][T12757] netlink: 48 bytes leftover after parsing attributes in process `syz.2.909'.
[  210.328147][T12755] lo: entered promiscuous mode
[  210.331377][T12755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.427850][T12779] netlink: 44 bytes leftover after parsing attributes in process `syz.2.910'.
[  223.966508][T12793] tipc: Started in network mode
[  223.968479][T12793] tipc: Node identity , cluster identity 4711
[  223.970588][T12793] tipc: Failed to obtain node identity
[  223.976632][T12793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  224.791052][T12836] rdma_op ffff88811c0fa1f0 conn xmit_rdma 0000000000000000
[  225.267679][T12896] syzkaller0: entered promiscuous mode
[  225.269707][T12896] syzkaller0: entered allmulticast mode
[  226.047455][T12918] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  226.931219][T12946] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  226.968468][T12940] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  226.978876][T12940] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  227.062049][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'.
[  227.929826][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'.
[  227.974016][T13006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.760439][T13014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.948'.
[  228.825986][T13026] netlink: 'syz.0.948': attribute type 4 has an invalid length.
[  228.889057][T13014] netlink: 152 bytes leftover after parsing attributes in process `syz.0.948'.
[  228.898110][T13014] block nbd0: not configured, cannot reconfigure
[  229.081491][T13051] netlink: 'syz.2.951': attribute type 30 has an invalid length.
[  230.965753][T13150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.962'.
[  231.823769][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'.
[  231.839288][T13164] netlink: 76 bytes leftover after parsing attributes in process `syz.0.969'.
[  231.957120][T13172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.970'.
[  232.562788][T13176] netlink: 'syz.0.970': attribute type 1 has an invalid length.
[  232.566632][T13176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.970'.
[  232.696566][T13187] netlink: 96 bytes leftover after parsing attributes in process `syz.1.971'.
[  232.783657][T13203] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  232.797585][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  233.632152][T13214] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR
[  233.646466][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'.
[  234.745480][T13284] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  234.783246][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  237.408945][T13356] 8021q: adding VLAN 0 to HW filter on device bond2
[  237.452056][T13362] 8021q: adding VLAN 0 to HW filter on device bond3
[  237.471249][T13368] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  237.472149][T13369] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  238.259998][T13395] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  238.287532][T13402] ieee802154 phy0 wpan0: encryption failed: -22
[  238.359765][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  239.089911][T13398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.154110][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'.
[  239.179172][T13421] netlink: 'syz.0.1006': attribute type 11 has an invalid length.
[  239.190710][T13421] netlink: 'syz.0.1006': attribute type 11 has an invalid length.
[  239.193895][T13421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1006'.
[  239.199285][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'.
[  239.227525][T13431] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  239.255846][T13437] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  239.264533][T13437] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.306339][T13453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.671900][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'.
[  239.738493][T13490] veth1_to_hsr: entered promiscuous mode
[  239.741183][T13490] veth1_to_hsr: entered allmulticast mode
[  239.836031][T13497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1017'.
[  239.859612][T13497] netlink: 'syz.0.1017': attribute type 11 has an invalid length.
[  239.866248][T13497] netlink: 'syz.0.1017': attribute type 11 has an invalid length.
[  239.870067][T13497] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1017'.
[  240.141703][T13511] netlink: 'syz.1.1020': attribute type 29 has an invalid length.
[  240.148877][T13511] netlink: 'syz.1.1020': attribute type 29 has an invalid length.
[  240.152137][T13511] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1020'.
[  240.239399][T13519] syzkaller0: entered promiscuous mode
[  240.241422][T13519] syzkaller0: entered allmulticast mode
[  240.246662][T13519] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1021'.
[  240.311808][T13520] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1021'.
[  241.703249][T13543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.838780][ T5916] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  242.681658][T13582] lo: left promiscuous mode
[  242.702180][T13582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.702198][T13585] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1032'.
[  244.568138][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1044'.
[  244.571922][T13678] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  245.621617][T13722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'.
[  245.940987][T13758] netlink: 'syz.0.1054': attribute type 2 has an invalid length.
[  245.944284][T13758] netlink: 'syz.0.1054': attribute type 2 has an invalid length.
[  246.628458][T13764] openvswitch: netlink: Flow actions attr not present in new flow.
[  246.905328][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  247.919028][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  248.696641][T13879] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  248.822149][T13896] ip6gre1: entered promiscuous mode
[  250.573634][T13947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1080'.
[  252.404061][T14018] x9: renamed from bridge_slave_0 (while UP)
[  252.579923][T14051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  253.935432][T14120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  254.099484][T14158] openvswitch: netlink: Key type 8454 is out of range max 32
[  254.252629][T14167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  254.256353][T14166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  255.107190][T14195] netlink: 'syz.2.1115': attribute type 83 has an invalid length.
[  255.314014][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.319678][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  256.122977][T14222] tipc: New replicast peer: 255.255.255.255
[  256.125913][T14222] tipc: Enabled bearer <udp:syz2>, priority 10
[  256.227127][T14247] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1121'.
[  256.238012][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  257.080234][T14258] syzkaller1: entered promiscuous mode
[  257.084091][T14258] syzkaller1: entered allmulticast mode
[  257.188726][T14286] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  257.253298][   T10] tipc: Node number set to 4278255617
[  257.937173][T14292] tipc: MTU too low for tipc bearer
[  258.005580][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'.
[  258.015421][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1129'.
[  258.090082][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1133'.
[  258.095856][T14318] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  258.731446][T14360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.738075][T14361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.810103][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'.
[  258.814765][T14384] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1142'.
[  258.815464][T14391] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  258.818742][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'.
[  259.718603][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'.
[  259.730653][T14423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'.
[  260.455835][T14426] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  260.780000][T14457] 8021q: VLANs not supported on wg0
[  260.830341][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  260.834511][T14462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  260.834681][T14466] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  261.013901][T14488] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  261.795205][T14510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  261.836316][T14526] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1165'.
[  263.625604][T14588] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1174'.
[  263.716289][T14604] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  263.771758][T14610] workqueue: Failed to create a rescuer kthread for wq "nfc12_nci_tx_wq": -EINTR
[  265.401561][T14667] syzkaller1: entered promiscuous mode
[  265.407291][T14667] syzkaller1: entered allmulticast mode
[  265.605286][T14693] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  266.321541][T14705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1187'.
[  266.355525][T14705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1187'.
[  266.359072][T14705] veth0: Caught tx_queue_len zero misconfig
[  266.371855][T14710] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1187'.
[  266.433596][T14710] netlink: 'syz.0.1187': attribute type 3 has an invalid length.
[  266.436507][T14705] netlink: 'syz.0.1187': attribute type 3 has an invalid length.
[  267.418508][T14758] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  268.323119][T14792] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  268.397884][T14801] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  268.454297][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  269.412167][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'.
[  270.578856][T14905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1216'.
[  270.976862][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  272.762519][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  273.472482][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'.
[  274.095031][T15032] netlink: 'syz.2.1233': attribute type 2 has an invalid length.
[  274.408564][T15034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1235'.
[  276.584555][T15159] netlink: 'syz.1.1252': attribute type 2 has an invalid length.
[  277.684267][ T5916] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  278.289405][T15213] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  280.077859][T15280] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  280.229859][T15318] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  281.194998][T15390] ieee802154 phy0 wpan0: encryption failed: -22
[  281.250657][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'.
[  285.015210][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  286.839024][T15602] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1306'.
[  287.523935][T15588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  287.584616][T15611] netlink: 'syz.0.1310': attribute type 29 has an invalid length.
[  287.588290][T15611] netlink: 'syz.0.1310': attribute type 29 has an invalid length.
[  287.591274][T15611] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1310'.
[  288.491858][T15637] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  288.521009][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  290.299990][T15684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.452067][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  291.157355][T15740] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  291.989181][T15783] netlink: 'syz.1.1335': attribute type 29 has an invalid length.
[  291.999148][T15783] netlink: 'syz.1.1335': attribute type 29 has an invalid length.
[  292.002278][T15783] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1335'.
[  292.022814][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'.
[  292.054318][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'.
[  292.922231][T15815] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  293.061057][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  293.082033][T15841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'.
[  293.841741][T15853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  293.855763][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1345'.
[  294.050187][T15883] syzkaller1: entered promiscuous mode
[  294.052053][T15883] syzkaller1: entered allmulticast mode
[  294.833238][T15906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.965603][T15922] IPVS: length: 24 != 411505681368
[  296.655585][T15961] netlink: 'syz.1.1363': attribute type 29 has an invalid length.
[  296.658889][T15961] netlink: 'syz.1.1363': attribute type 29 has an invalid length.
[  296.661910][T15961] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1363'.
[  296.902288][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'.
[  297.060614][T16008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1367'.
[  297.110867][T16010] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1368'.
[  298.555411][T16277] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1379'.
[  299.335618][T16332] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1386'.
[  300.013902][T16348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  300.016972][T16350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  300.068224][T16371] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1393'.
[  301.166147][T16409] IPv6: Can't replace route, no match found
[  301.637954][T16391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'.
[  302.635634][T16446] smc: net device gre0 applied user defined pnetid SYZ1
[  302.656599][T16446] xfrm1: entered allmulticast mode
[  303.652837][T16491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  303.972225][T16532] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1415'.
[  303.976681][T16531] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1415'.
[  304.556068][T16538] netlink: 'syz.2.1416': attribute type 9 has an invalid length.
[  304.677424][ T5721] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  305.760051][T16590] netlink: 'syz.1.1424': attribute type 10 has an invalid length.
[  306.648297][T16607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  307.191219][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'.
[  307.368489][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'.
[  308.099994][T16672] vlan0: entered promiscuous mode
[  308.187097][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1436'.
[  309.006379][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1440'.
[  309.010293][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1440'.
[  309.919686][T16721] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1443'.
[  309.953973][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'.
[  309.963382][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1443'.
[  310.806152][T16772] netlink: 'syz.0.1451': attribute type 29 has an invalid length.
[  310.809998][T16772] netlink: 'syz.0.1451': attribute type 29 has an invalid length.
[  310.814364][T16772] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1451'.
[  311.853482][T16817] netlink: 'syz.0.1458': attribute type 29 has an invalid length.
[  311.860647][T16817] netlink: 'syz.0.1458': attribute type 29 has an invalid length.
[  311.872128][T16817] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1458'.
[  312.762236][T16840] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  312.890000][T16839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.897373][T16838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.929392][T16864] netlink: 'syz.2.1468': attribute type 29 has an invalid length.
[  312.940199][T16864] netlink: 'syz.2.1468': attribute type 29 has an invalid length.
[  313.027920][T16867] netlink: 'syz.1.1466': attribute type 1 has an invalid length.
[  313.816434][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'.
[  313.949156][T16919] netlink: 'syz.2.1474': attribute type 2 has an invalid length.
[  314.836319][T16954] netlink: 'syz.1.1481': attribute type 29 has an invalid length.
[  314.840253][T16954] netlink: 'syz.1.1481': attribute type 29 has an invalid length.
[  314.845879][T16954] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1481'.
[  315.629738][T16984] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  315.677486][T16993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1486'.
[  315.691069][T16993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1486'.
[  315.704673][T16993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1486'.
[  316.544957][T17034] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  316.626768][T17040] tap0: tun_chr_ioctl cmd 1074025681
[  316.634362][T17047] tap0: tun_chr_ioctl cmd 1074025681
[  316.675250][T17058] Bluetooth: MGMT ver 1.23
[  316.756313][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.758835][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.471182][T17066] validate_nla: 2 callbacks suppressed
[  317.471199][T17066] netlink: 'syz.1.1497': attribute type 3 has an invalid length.
[  317.482087][T17066] netlink: 'syz.1.1497': attribute type 1 has an invalid length.
[  317.511231][T17066] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1497'.
[  317.598309][T17060] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  317.768738][T17081] syzkaller0: entered promiscuous mode
[  317.770719][T17081] syzkaller0: entered allmulticast mode
[  322.467338][T17309] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1532'.
[  322.601187][T17321] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  323.524359][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  324.546150][   T33] audit: type=1800 audit(1758814102.325:5): pid=17388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1544" name="memory.events" dev="tmpfs" ino=2573 res=0 errno=0
[  325.281872][T17393] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  325.354022][T17413] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  326.251201][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  327.147153][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1554'.
[  327.326212][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'.
[  328.237635][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  329.358660][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  330.134766][T17594] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  330.136131][T17602] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  330.141401][T17591] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  330.258347][T17628] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  330.268005][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'.
[  330.723897][T17658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'.
[  331.259834][T17666] netlink: 'syz.1.1587': attribute type 29 has an invalid length.
[  331.265431][T17666] netlink: 'syz.1.1587': attribute type 29 has an invalid length.
[  331.274768][T17666] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1587'.
[  331.404893][T17633] Set syz1 is full, maxelem 65536 reached
[  331.461173][T17675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1589'.
[  332.037267][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'.
[  332.046471][T17682] netlink: 'syz.0.1591': attribute type 1 has an invalid length.
[  332.049104][T17682] netlink: 'syz.0.1591': attribute type 2 has an invalid length.
[  332.164894][T17704] netlink: 'syz.1.1594': attribute type 29 has an invalid length.
[  332.170814][T17704] netlink: 'syz.1.1594': attribute type 29 has an invalid length.
[  332.177524][T17700] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  332.185147][T17704] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1594'.
[  332.328944][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'.
[  332.997136][T17747] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  333.981386][T17786] netlink: 'syz.0.1603': attribute type 1 has an invalid length.
[  334.016726][T17786] bond4: (slave gretap1): making interface the new active one
[  334.025852][T17786] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  334.201906][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  335.024055][T17827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1607'.
[  335.240342][T17847] netlink: 'syz.2.1610': attribute type 7 has an invalid length.
[  335.247929][T17847] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1610'.
[  335.253025][T17847] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1610'.
[  335.256952][T17847] netlink: 'syz.2.1610': attribute type 6 has an invalid length.
[  335.259744][T17847] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1610'.
[  335.354796][T17863] sch_tbf: peakrate 2 is lower than or equals to rate 11826986383595491005 !
[  336.866472][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'.
[  336.905547][T17897] netlink: 'syz.0.1618': attribute type 29 has an invalid length.
[  336.909182][T17897] netlink: 'syz.0.1618': attribute type 29 has an invalid length.
[  336.912020][T17899] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1619'.
[  336.914104][T17897] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1618'.
[  337.907191][T17935] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  337.917584][T17935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  337.934382][T17945] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  338.094726][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  338.916716][T17985] netlink: 'syz.2.1634': attribute type 29 has an invalid length.
[  338.920029][T17985] netlink: 'syz.2.1634': attribute type 29 has an invalid length.
[  339.005188][T17984] syzkaller0: entered promiscuous mode
[  339.007456][T17984] syzkaller0: entered allmulticast mode
[  339.076324][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x3
[  340.990181][T18062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  341.057156][T18102] netlink: 'syz.1.1653': attribute type 29 has an invalid length.
[  341.069047][T18102] netlink: 'syz.1.1653': attribute type 29 has an invalid length.
[  341.072007][T18102] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1653'.
[  341.139007][T18109] tipc: Started in network mode
[  341.140675][T18109] tipc: Node identity 3a5a168f0019, cluster identity 4711
[  341.145062][T18109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.264459][T18114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  341.993709][T18108] tipc: Disabling bearer <eth:syzkaller0>
[  342.074875][T18135] syzkaller0: entered promiscuous mode
[  342.077845][T18135] syzkaller0: entered allmulticast mode
[  342.117266][T18142] netlink: 'syz.1.1661': attribute type 29 has an invalid length.
[  342.122013][T18142] netlink: 'syz.1.1661': attribute type 29 has an invalid length.
[  342.126271][T18142] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1661'.
[  342.168677][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'.
[  342.188155][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'.
[  342.210939][ T5721] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  342.213630][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'.
[  342.214271][ T5721] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  342.220553][ T5721] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  342.224651][ T5721] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.493384][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'.
[  343.045593][T18173] raw_sendmsg: syz.2.1665 forgot to set AF_INET. Fix it!
[  343.262471][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  343.839751][T18185] sit0: entered promiscuous mode
[  343.846785][T18185] netlink: 'syz.2.1668': attribute type 1 has an invalid length.
[  343.851608][T18185] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1668'.
[  343.909602][T18197] netlink: 'syz.0.1669': attribute type 29 has an invalid length.
[  343.913157][T18197] netlink: 'syz.0.1669': attribute type 29 has an invalid length.
[  343.917750][T18190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.934530][T18197] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1669'.
[  344.900287][T18240] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1675'.
[  344.981025][T18245] netlink: 'syz.2.1677': attribute type 29 has an invalid length.
[  344.985641][T18245] netlink: 'syz.2.1677': attribute type 29 has an invalid length.
[  345.041213][T18254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'.
[  345.980922][T18294] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  347.072926][T18340] __nla_validate_parse: 3 callbacks suppressed
[  347.072941][T18340] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1692'.
[  347.176239][T18354] netlink: 'syz.1.1696': attribute type 29 has an invalid length.
[  347.179636][T18354] netlink: 'syz.1.1696': attribute type 29 has an invalid length.
[  347.186750][T18354] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1696'.
[  347.207699][T18349] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1695'.
[  347.453823][T18374] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  348.445505][T18411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  348.537808][T18450] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  348.811071][T18486] can: request_module (can-proto-0) failed.
[  350.359552][T18498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  350.516275][T18541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1718'.
[  352.385614][T18602] netlink: 'syz.0.1725': attribute type 12 has an invalid length.
[  353.169546][T18604] ip6tnl0: Caught tx_queue_len zero misconfig
[  353.229279][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  353.264934][T18622] netlink: 'syz.1.1732': attribute type 29 has an invalid length.
[  353.268772][T18622] netlink: 'syz.1.1732': attribute type 29 has an invalid length.
[  353.272174][T18622] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1732'.
[  353.312849][ T5238] Bluetooth: hci2: command 0x0406 tx timeout
[  355.013022][T18675] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  355.458401][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'.
[  355.468670][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'.
[  355.472884][T18711] netlink: 'syz.2.1746': attribute type 15 has an invalid length.
[  355.482161][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'.
[  356.178821][T18728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1749'.
[  357.238832][   T12] syzkaller0: tun_net_xmit 76
[  357.240232][T18764] syzkaller0: create flow: hash 1998727703 index 1
[  357.241127][   T12] syzkaller0: tun_net_xmit 48
[  357.262983][    T9] syzkaller0: tun_net_xmit 76
[  357.271629][ T5916] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  357.289761][T18761] syzkaller0: delete flow: hash 1998727703 index 1
[  358.221404][T18790] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1758'.
[  358.274309][T18788] netlink: 'syz.1.1758': attribute type 29 has an invalid length.
[  358.277283][T18789] netlink: 'syz.1.1758': attribute type 29 has an invalid length.
[  359.268917][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'.
[  359.335864][T18836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1766'.
[  359.400450][T18850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'.
[  359.404804][T18850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'.
[  360.409356][T18879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  360.422268][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  361.272273][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1777'.
[  361.760031][T18960] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  361.764999][T18971] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  361.775871][T18972] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  362.671718][T18971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  363.028878][T19034] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  364.064324][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'.
[  364.252863][T19108] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  364.252951][T19097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  364.363139][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1803'.
[  364.368599][T19098] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.385144][T19121] netlink: 'syz.2.1805': attribute type 29 has an invalid length.
[  364.390018][T19121] netlink: 'syz.2.1805': attribute type 29 has an invalid length.
[  364.458711][T19116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  365.435722][T19159] netlink: 'syz.1.1812': attribute type 29 has an invalid length.
[  365.441335][T19159] netlink: 'syz.1.1812': attribute type 29 has an invalid length.
[  365.448517][T19159] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1812'.
[  366.235591][T19181] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1814'.
[  367.378986][T19251] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  369.341254][T19334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  369.402252][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'.
[  371.215634][T19378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  371.348053][T19413] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1844'.
[  372.349595][T19461] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004
[  373.195419][ T5916] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  373.199386][T19474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.199529][T19491] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  374.048155][T19512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1855'.
[  374.165731][T19526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1858'.
[  374.170613][T19524] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  374.171281][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'.
[  375.829386][T19600] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  375.921414][T19616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  376.963554][T19733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1881'.
[  377.032415][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'.
[  377.161129][ T5721] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  377.316008][T19759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1880'.
[  378.195101][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.926203][T19802] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1888'.
[  378.946949][T19799] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  378.987196][T19814] xt_socket: unknown flags 0x50
[  381.057123][T19908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1902'.
[  381.120552][T19912] netlink: 'syz.1.1904': attribute type 29 has an invalid length.
[  381.127491][T19912] netlink: 'syz.1.1904': attribute type 29 has an invalid length.
[  381.131687][T19912] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1904'.
[  381.796153][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'.
[  381.907569][T19927] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1907'.
[  382.065534][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'.
[  382.073270][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'.
[  382.615558][T19921] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  383.085848][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'.
[  383.916593][T20022] netlink: 'syz.0.1922': attribute type 1 has an invalid length.
[  383.984015][T20031] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1925'.
[  384.127053][T20056] netlink: 'syz.2.1931': attribute type 29 has an invalid length.
[  384.131285][T20056] netlink: 'syz.2.1931': attribute type 29 has an invalid length.
[  384.938640][T20081] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  385.103429][T20094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1937'.
[  385.118282][T20094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1937'.
[  385.121947][T20094] tipc: Cannot configure node identity twice
[  385.279878][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'.
[  386.176386][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  386.303251][T20152] Set syz1 is full, maxelem 65536 reached
[  386.382270][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'.
[  387.273259][T20199] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  387.274779][T20198] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  387.628318][T20237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  387.682308][T20249] pim6reg1: entered promiscuous mode
[  387.687719][T20249] pim6reg1: entered allmulticast mode
[  387.782342][T20261] dummy0: Caught tx_queue_len zero misconfig
[  388.075369][T20285] 8021q: VLANs not supported on syzkaller1
[  389.300585][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  389.399795][T20383] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20003
[  390.206461][T20389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'.
[  390.210161][T20389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'.
[  390.214065][T20389] netlink: 'syz.2.1981': attribute type 6 has an invalid length.
[  390.225664][T20393] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1982'.
[  392.061110][T20467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1993'.
[  392.508910][T20532] netlink: 'syz.2.1998': attribute type 10 has an invalid length.
[  392.570680][T20534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1999'.
[  394.349060][T20597] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  395.478011][T20656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.484701][T20657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.631661][T20679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.631902][T20687] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  396.496773][T20714] syzkaller1: entered promiscuous mode
[  396.501764][T20714] syzkaller1: entered allmulticast mode
[  396.545381][T20718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  397.549143][T20768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.566121][T20768] syzkaller0: entered promiscuous mode
[  397.568119][T20768] syzkaller0: entered allmulticast mode
[  397.574267][T20767] tipc: Resetting bearer <eth:syzkaller0>
[  397.593389][T20767] tipc: Disabling bearer <eth:syzkaller0>
[  397.799723][T20798] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  397.847184][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'.
[  397.890727][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  398.214214][T20858] syzkaller0: entered allmulticast mode
[  398.888344][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'.
[  398.959230][T20871] netlink: 'syz.0.2044': attribute type 4 has an invalid length.
[  399.021903][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'.
[  399.027779][T20869] Set syz1 is full, maxelem 65536 reached
[  399.109826][T20897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  399.118218][T20891] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  399.385517][T20926] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2052'.
[  400.067508][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  401.932159][T20343] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  402.747076][T21013] xt_policy: neither incoming nor outgoing policy selected
[  402.867501][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  402.872286][T21024] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  402.879354][T21017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  404.038076][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'.
[  404.971570][T21126] netlink: 'syz.1.2081': attribute type 29 has an invalid length.
[  404.977169][T21126] netlink: 'syz.1.2081': attribute type 29 has an invalid length.
[  404.981333][T21126] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2081'.
[  405.018898][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'.
[  405.928926][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2085'.
[  405.994360][T21168] bond0: (slave bond_slave_0): Releasing backup interface
[  406.005130][T21168] bond0: (slave bond_slave_1): Releasing backup interface
[  406.016406][T21168] team0: Port device team_slave_0 removed
[  406.026569][T21168] team0: Port device team_slave_1 removed
[  406.029193][T21168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.031883][T21168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.039091][T21168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.041992][T21168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.759181][T21184] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  408.859173][T21286] atomic_op ffff888107d8d998 conn xmit_atomic 0000000000000000
[  408.865911][T21304] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  408.868128][T21294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.928664][T21311] netlink: 'syz.0.2108': attribute type 29 has an invalid length.
[  408.933866][T21311] netlink: 'syz.0.2108': attribute type 29 has an invalid length.
[  408.939967][T21311] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2108'.
[  410.800975][T21389] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  410.843618][T21384] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2120'.
[  411.065731][T21425] netlink: 'syz.1.2126': attribute type 10 has an invalid length.
[  411.068608][T21425] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  411.076190][T21425] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  411.714959][T21418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2126'.
[  411.816886][T21444] netlink: 'syz.0.2132': attribute type 29 has an invalid length.
[  411.821128][T21442] netlink: 'syz.1.2130': attribute type 15 has an invalid length.
[  411.824958][T21444] netlink: 'syz.0.2132': attribute type 29 has an invalid length.
[  411.832280][T21444] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2132'.
[  411.935019][T21456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2133'.
[  412.110354][T21484] netlink: 'syz.2.2131': attribute type 7 has an invalid length.
[  412.118624][T21484] netlink: 'syz.2.2131': attribute type 8 has an invalid length.
[  412.122082][T21484] netlink: 'syz.2.2131': attribute type 13 has an invalid length.
[  412.747346][T21486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  412.805214][T21495] netlink: 'syz.1.2139': attribute type 29 has an invalid length.
[  412.823547][T21495] netlink: 'syz.1.2139': attribute type 29 has an invalid length.
[  412.834867][T21495] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2139'.
[  412.938623][T21511] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2137'.
[  413.742007][T21517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.802334][T21527] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  413.836515][T21541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'.
[  413.912178][T21545] netlink: 'syz.2.2148': attribute type 29 has an invalid length.
[  415.615634][T21587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  416.579548][T21629] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  416.820342][T21668] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  416.860710][T21668] validate_nla: 5 callbacks suppressed
[  416.860720][T21668] netlink: 'syz.2.2164': attribute type 4 has an invalid length.
[  417.646710][T21693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2165'.
[  418.471683][T21705] xt_limit: Overflow, try lower: 271964/0
[  418.494931][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2170'.
[  419.749743][T21789] netlink: 'syz.0.2177': attribute type 29 has an invalid length.
[  419.756070][T21789] netlink: 'syz.0.2177': attribute type 29 has an invalid length.
[  419.759531][T21789] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2177'.
[  420.514937][T21804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.577808][T20343] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  422.176465][T21850] netlink: 'syz.2.2183': attribute type 1 has an invalid length.
[  422.179813][T21850] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2183'.
[  422.345941][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'.
[  424.010708][T21919] netlink: 'syz.2.2192': attribute type 42 has an invalid length.
[  424.015738][T21923] netlink: 'syz.2.2192': attribute type 42 has an invalid length.
[  424.227714][T21955] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  426.254762][T22022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2207'.
[  427.291908][T22066] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  427.392163][T22087] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  427.466250][T22079] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  427.731662][T22132] workqueue: Failed to create a rescuer kthread for wq "nfc13_nci_tx_wq": -EINTR
[  429.330010][T22223] netlink: 'syz.0.2231': attribute type 29 has an invalid length.
[  429.339230][T22223] netlink: 'syz.0.2231': attribute type 29 has an invalid length.
[  429.344237][T22223] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2231'.
[  430.317255][T22272] netlink: 'syz.2.2238': attribute type 29 has an invalid length.
[  430.320440][T22272] netlink: 'syz.2.2238': attribute type 29 has an invalid length.
[  430.364231][T22274] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  430.441026][T22288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2241'.
[  430.450302][T22288] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  430.508945][T22300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  430.517031][T22282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  430.622231][T22323] netlink: 'syz.2.2245': attribute type 29 has an invalid length.
[  430.628321][T22323] netlink: 'syz.2.2245': attribute type 29 has an invalid length.
[  431.649102][T22370] netlink: 12028 bytes leftover after parsing attributes in process `syz.2.2253'.
[  431.658615][T22363] netlink: 796 bytes leftover after parsing attributes in process `syz.1.2251'.
[  431.688287][T22370] hsr_slave_1 (unregistering): left promiscuous mode
[  431.728728][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  431.784369][T22382] netlink: 'syz.1.2251': attribute type 12 has an invalid length.
[  432.735796][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  433.556280][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'.
[  433.768837][T22462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  434.671547][T22499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2273'.
[  434.741322][T22504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'.
[  434.958949][T22528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.832743][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  435.840790][T22562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.901814][T22580] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2283'.
[  436.710845][T22594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2286'.
[  437.080011][T22638] batadv_slave_1: entered promiscuous mode
[  437.200712][T22644] batadv_slave_1: left promiscuous mode
[  437.348926][T22661] netlink: 12028 bytes leftover after parsing attributes in process `syz.2.2294'.
[  439.167350][T22750] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2307'.
[  439.170727][T22750] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2307'.
[  439.337857][T22764] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2308'.
[  439.636636][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  440.520660][T22837] vlan2: entered promiscuous mode
[  440.522754][T22837] vlan2: entered allmulticast mode
[  440.524592][T22837] hsr_slave_1: entered allmulticast mode
[  440.532009][T22837] netlink: 12028 bytes leftover after parsing attributes in process `syz.0.2318'.
[  440.600102][T22833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  440.623687][T22841] netlink: 'syz.2.2317': attribute type 16 has an invalid length.
[  441.479532][T22848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  442.495464][T22908] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  444.274950][T22958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.286995][T22958] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  444.290186][T22958] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  444.337436][T22958] tipc: Resetting bearer <eth:syzkaller0>
[  444.711621][T23000] ieee802154 phy0 wpan0: encryption failed: -90
[  446.379081][T23044] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  446.447330][T23049] 8021q: adding VLAN 0 to HW filter on device bond1
[  446.454048][T23049] bond0: (slave bond1): Enslaving as an active interface with an up link
[  446.470823][T23066] 8021q: adding VLAN 0 to HW filter on device bond2
[  446.475636][T23066] bond0: (slave bond2): Enslaving as an active interface with an up link
[  446.478793][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  447.258585][T23078] netlink: 'syz.0.2351': attribute type 29 has an invalid length.
[  447.265055][T23078] netlink: 'syz.0.2351': attribute type 29 has an invalid length.
[  447.268804][T23078] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2351'.
[  447.584116][T23112] netlink: 'syz.1.2355': attribute type 2 has an invalid length.
[  447.684872][T23127] netlink: 'syz.1.2358': attribute type 21 has an invalid length.
[  447.688198][T23127] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2358'.
[  447.709652][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  448.529143][T23146] netlink: 'syz.0.2360': attribute type 29 has an invalid length.
[  448.532739][T23146] netlink: 'syz.0.2360': attribute type 29 has an invalid length.
[  448.536440][T23146] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2360'.
[  448.661758][T23163] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  449.395087][T23182] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  450.017244][T23216] ip6gre1: left promiscuous mode
[  450.057210][ T5916] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.061951][ T5916] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.066774][ T5916] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.070734][ T5916] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.568213][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'.
[  451.354921][T23234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  451.416190][T23255] netlink: 'syz.2.2374': attribute type 29 has an invalid length.
[  451.420684][T23255] netlink: 'syz.2.2374': attribute type 29 has an invalid length.
[  451.432497][T23257] tipc: Started in network mode
[  451.443508][T23257] tipc: Node identity ff, cluster identity 4711
[  451.452742][T23257] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  451.460969][T23257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'.
[  451.465443][T23257] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  452.378003][T23291] netlink: 12028 bytes leftover after parsing attributes in process `syz.1.2382'.
[  452.430640][T23291] hsr_slave_1 (unregistering): left promiscuous mode
[  452.489618][T23301] netlink: 'syz.1.2384': attribute type 29 has an invalid length.
[  452.493285][T23301] netlink: 'syz.1.2384': attribute type 29 has an invalid length.
[  452.496530][T23301] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2384'.
[  452.587824][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'.
[  454.579752][T23392] syzkaller1: entered promiscuous mode
[  454.583633][T23392] syzkaller1: entered allmulticast mode
[  455.542991][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  456.451353][T23439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  456.497867][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  457.277865][T23466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2409'.
[  457.302765][T23460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  457.306609][T23464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  457.361666][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  459.066154][T23513] ip_vti0: entered promiscuous mode
[  459.069353][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'.
[  459.502233][T23548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  459.677138][ T5916] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  460.587551][T23637] veth1_to_bond: entered allmulticast mode
[  461.223596][T23622] veth1_to_bond: left allmulticast mode
[  462.237605][T23694] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2436'.
[  462.246441][T23694] netlink: 'syz.1.2436': attribute type 1 has an invalid length.
[  462.249346][T23694] netlink: 'syz.1.2436': attribute type 1 has an invalid length.
[  462.296438][T23694] netlink: 'syz.1.2436': attribute type 1 has an invalid length.
[  462.313397][T23694] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.291823][T23737] netlink: 'syz.1.2444': attribute type 29 has an invalid length.
[  463.310946][T23737] netlink: 'syz.1.2444': attribute type 29 has an invalid length.
[  463.316675][T23737] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2444'.
[  463.320870][T23741] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  463.386132][T23754] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  463.631654][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'.
[  463.638128][T23794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'.
[  465.226507][T23807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  465.567067][T23854] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  465.791419][T23886] netlink: 'syz.1.2464': attribute type 6 has an invalid length.
[  466.577266][T23896] dvmrp8: entered allmulticast mode
[  466.594262][T23895] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  466.743711][T23924] netlink: 12028 bytes leftover after parsing attributes in process `syz.0.2471'.
[  467.440941][T23940] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  467.526164][T23953] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  467.716033][T23978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  468.655296][T24013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2485'.
[  469.597895][T24046] netlink: 12028 bytes leftover after parsing attributes in process `syz.0.2490'.
[  469.704218][T24053] netlink: 'syz.2.2491': attribute type 15 has an invalid length.
[  469.900676][T24086] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  470.134353][T24119] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2502'.
[  470.278713][T24146] netlink: 'syz.0.2505': attribute type 12 has an invalid length.
[  471.167648][T24152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  471.171648][T24153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  471.229368][T24173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2508'.
[  472.002172][T24197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2511'.
[  472.040427][T24206] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  472.045422][T24206] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  473.288808][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'.
[  474.227490][T24294] syzkaller1: entered promiscuous mode
[  474.229719][T24294] syzkaller1: entered allmulticast mode
[  474.369375][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  475.288043][T24323] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2528'.
[  476.935265][T24349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  478.980013][T24490] netlink: 'syz.0.2544': attribute type 2 has an invalid length.
[  479.181738][T24501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.193106][T24501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2546'.
[  479.312108][T24506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  479.569250][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2553'.
[  480.318058][T24586] netlink: 'syz.0.2556': attribute type 21 has an invalid length.
[  480.451764][T24598] netlink: 4928 bytes leftover after parsing attributes in process `syz.0.2559'.
[  480.455790][T24602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2558'.
[  481.520114][T24643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  481.554270][T24649] netlink: 12028 bytes leftover after parsing attributes in process `syz.1.2563'.
[  481.583063][T24653] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  481.632912][T24663] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  481.680352][T24673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2569'.
[  481.745336][T24687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2569'.
[  481.804441][T24695] sctp: [Deprecated]: syz.0.2573 (pid 24695) Use of struct sctp_assoc_value in delayed_ack socket option.
[  481.804441][T24695] Use struct sctp_sack_info instead
[  482.673910][T24704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  482.879497][T24725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  482.883263][T24724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  482.927817][T24752] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  483.035569][T24776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2583'.
[  483.855007][T24789] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2586'.
[  483.920308][ T5916] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  483.970403][T24805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2587'.
[  484.789427][T24827] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  484.794776][ T5916] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  487.655699][T24942] netlink: 'syz.2.2607': attribute type 2 has an invalid length.
[  487.661981][T24942] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2607'.
[  487.667885][T24942] nbd: must specify a device to reconfigure
[  487.671044][T24947] netlink: 'syz.2.2607': attribute type 1 has an invalid length.
[  487.793740][T24956] syzkaller0: entered promiscuous mode
[  487.796210][T24956] syzkaller0: entered allmulticast mode
[  488.871083][T24996] netlink: 12028 bytes leftover after parsing attributes in process `syz.2.2618'.
[  491.055768][T25112] netlink: 'syz.1.2636': attribute type 29 has an invalid length.
[  491.059811][T25112] netlink: 'syz.1.2636': attribute type 29 has an invalid length.
[  491.066222][T25112] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2636'.
[  491.251751][T25136] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  491.314263][T25157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2640'.
[  491.410617][T25169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2642'.
[  492.224443][T25189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2645'.
[  493.415862][T25245] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  494.291145][T25275] netlink: 12028 bytes leftover after parsing attributes in process `syz.1.2658'.
[  494.310857][T25270] dvmrp1: tun_chr_ioctl cmd 1074025677
[  494.313071][T25270] dvmrp1: linktype set to 773
[  494.415103][T25292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2661'.
[  494.418700][T25292] 8021q: VLANs not supported on ipvlan1
[  494.430311][T25292] macsec1: entered promiscuous mode
[  494.432906][T25292] macsec1: entered allmulticast mode
[  495.521414][T25343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2667'.
[  496.328844][T25354] Unsupported ieee802154 address type: 0
[  496.411995][T25363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2668'.
[  497.092745][T25348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  497.160459][T25371] dvmrp8: entered allmulticast mode
[  497.393427][T25371] dvmrp8: left allmulticast mode
[  499.193852][T25456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.332436][T25483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.397970][T25481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.893947][T25522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2693'.
[  500.074996][T25533] netlink: 'syz.0.2696': attribute type 4 has an invalid length.
[  500.079693][T25533] netlink: 'syz.0.2696': attribute type 4 has an invalid length.
[  500.176582][T25556] IPVS: set_ctl: invalid protocol: 51 172.20.20.10:20001
[  500.297107][T25565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'.
[  500.300033][T25565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'.
[  501.085312][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  502.307529][T25660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2716'.
[  502.318306][T25660] netlink: 'syz.1.2716': attribute type 2 has an invalid length.
[  503.179812][T25696] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  504.158687][T25740] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2728'.
[  504.213337][T25743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  505.190094][T25792] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  506.035431][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'.
[  506.853678][T25826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  508.749211][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'.
[  508.749751][T25928] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  508.890109][T25943] netlink: 12028 bytes leftover after parsing attributes in process `syz.1.2754'.
[  508.942256][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'.
[  508.998155][T25963] netlink: 'syz.2.2759': attribute type 29 has an invalid length.
[  509.004782][T25963] netlink: 'syz.2.2759': attribute type 29 has an invalid length.
[  509.028750][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  509.862787][T25977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2761'.
[  509.978921][ T5876] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  510.853212][T26022] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  512.935089][T26114] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2780'.
[  513.550809][T26173] netlink: 'syz.1.2788': attribute type 1 has an invalid length.
[  513.568427][T26173] netlink: 'syz.1.2788': attribute type 4 has an invalid length.
[  513.575266][T26173] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2788'.
[  513.599422][T26173] netlink: 'syz.1.2788': attribute type 1 has an invalid length.
[  513.602169][T26173] netlink: 'syz.1.2788': attribute type 4 has an invalid length.
[  513.619428][T26173] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2788'.
[  513.632257][T26198] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  514.468017][T26237] netlink: 'syz.2.2795': attribute type 29 has an invalid length.
[  514.479684][T26237] netlink: 'syz.2.2795': attribute type 29 has an invalid length.
[  515.851115][T20343] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  515.861313][    T9] IPVS: starting estimator thread 0...
[  515.953014][T26362] IPVS: using max 78 ests per chain, 187200 per kthread
[  516.736140][T26378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2812'.
[  516.805996][T26365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  516.909350][T26399] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  517.005269][T26411] netlink: 'syz.1.2815': attribute type 29 has an invalid length.
[  517.016337][T26411] netlink: 'syz.1.2815': attribute type 29 has an invalid length.
[  517.024647][T26411] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2815'.
[  517.839473][T26462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2821'.
[  517.854962][T26464] netlink: 'syz.0.2822': attribute type 29 has an invalid length.
[  517.858270][T26464] netlink: 'syz.0.2822': attribute type 29 has an invalid length.
[  517.861379][T26464] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2822'.
[  517.916796][T26454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  518.019266][T26486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'.
[  519.027325][T26516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2831'.
[  519.032231][T26514] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  519.987938][T26561] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  519.997370][T26561] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  520.007394][T26561] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  520.103742][T26579] netlink: 12028 bytes leftover after parsing attributes in process `syz.0.2840'.
[  520.987660][T26614] netlink: 'syz.2.2845': attribute type 29 has an invalid length.
[  520.998001][T26614] netlink: 'syz.2.2845': attribute type 29 has an invalid length.
[  521.048348][T26619] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2847'.
[  521.096863][T26619] netlink: 12028 bytes leftover after parsing attributes in process `syz.2.2847'.
[  521.866140][T26668] netlink: 'syz.2.2853': attribute type 29 has an invalid length.
[  521.869711][T26668] netlink: 'syz.2.2853': attribute type 29 has an invalid length.
[  521.905654][T26671] sit0: left promiscuous mode
[  521.925097][T26671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  522.036168][T26677] netlink: 12028 bytes leftover after parsing attributes in process `syz.1.2855'.
[  522.799494][T26696] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  524.633440][T26757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  524.813373][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  524.817320][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  525.633391][T26813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  526.943964][T26888] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  527.047125][T26920] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  528.012999][T26961] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  529.226815][T27027] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2903'.
[  529.944549][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  531.829068][T27111] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  531.935041][T27128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2917'.
[  533.891274][T27381] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  534.025376][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'.
[  534.075051][T27404] IPv6: Can't replace route, no match found
[  535.626790][T27451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'.
[  535.949169][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'.
[  536.534834][T27495] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  538.290474][T27548] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  539.256167][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2949'.
[  539.630281][T27619] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  539.767315][T27640] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  540.223073][T27646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'.
[  540.656436][T27673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2960'.
[  541.468159][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'.
[  541.479736][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'.
[  541.479739][ T5916] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  541.479782][ T5916] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  541.479798][ T5916] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  541.498402][ T5916] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  541.505253][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'.
[  541.508474][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'.
[  541.549075][ T5916] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  541.554209][T27704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2963'.
[  543.382132][T27763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2972'.
[  544.182304][T27782] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  544.451872][T27822] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  546.388362][T27900] netlink: 12032 bytes leftover after parsing attributes in process `syz.2.2990'.
[  546.627681][T27930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'.
[  546.660528][T27935] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2992'.
[  546.779854][T27941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2995'.
[  546.848601][T27946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2996'.
[  547.153181][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'.
[  547.265124][T27988] netlink: 12028 bytes leftover after parsing attributes in process `syz.1.3002'.
[  547.303658][T27990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'.
[  547.681129][ T5721] nci: nci_rx_work: unknown MT 0x1
[  547.728520][T28052] netlink: 'syz.0.3014': attribute type 29 has an invalid length.
[  547.731771][T28052] netlink: 'syz.0.3014': attribute type 29 has an invalid length.
[  547.737955][T28052] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3014'.
[  548.524518][T28064] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  549.400729][T28094] netlink: 'syz.2.3021': attribute type 29 has an invalid length.
[  549.409988][T28094] netlink: 'syz.2.3021': attribute type 29 has an invalid length.
[  549.532735][T28102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3023'.
[  549.781823][T28137] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  550.388298][T28141] netlink: 'syz.1.3029': attribute type 29 has an invalid length.
[  550.395841][T28141] netlink: 'syz.1.3029': attribute type 29 has an invalid length.
[  550.540422][T28144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  550.545763][T28155] netlink: 'syz.0.3032': attribute type 1 has an invalid length.
[  550.548920][T28155] netlink: 'syz.0.3032': attribute type 1 has an invalid length.
[  550.715492][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  551.452977][T28189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.501009][T28194] netlink: 'syz.1.3037': attribute type 29 has an invalid length.
[  551.507253][T28194] netlink: 'syz.1.3037': attribute type 29 has an invalid length.
[  551.510268][T28194] __nla_validate_parse: 2 callbacks suppressed
[  551.510276][T28194] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3037'.
[  552.433152][T28233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'.
[  553.323243][T28251] tipc: Resetting bearer <eth:syzkaller0>
[  553.335237][T28251] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  553.547359][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  554.409383][T28306] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  554.431437][T28319] netlink: 'syz.1.3057': attribute type 1 has an invalid length.
[  554.439279][T28319] netlink: 'syz.1.3057': attribute type 3 has an invalid length.
[  554.442113][T28319] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3057'.
[  555.220971][T28326] netlink: 'syz.0.3059': attribute type 3 has an invalid length.
[  555.273740][T28348] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_cmd_wq": -EINTR
[  555.533066][T28378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  556.448211][T28421] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  556.507715][T20343] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  557.390252][T20343] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  559.227778][T28517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'.
[  559.236067][T28517] openvswitch: netlink: Missing key (keys=40, expected=100)
[  559.238827][T28517] netlink: 'syz.2.3083': attribute type 1 has an invalid length.
[  559.912219][T28554] netlink: 'syz.0.3091': attribute type 1 has an invalid length.
[  559.915273][T28554] netlink: 'syz.0.3091': attribute type 1 has an invalid length.
[  560.248951][T28565] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  560.352848][T28583] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  562.001942][T28653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3103'.
[  562.022596][T28657] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  562.514076][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  562.876363][T28674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3106'.
[  562.928923][T28684] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  562.958486][T28692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'.
[  563.736680][T28707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3112'.
[  564.005062][T28726] netlink: 'syz.2.3114': attribute type 1 has an invalid length.
[  565.132846][T28774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.133303][T28795] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  565.197509][T28801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3126'.
[  566.905545][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'.
[  567.368699][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'.
[  567.947409][T28909] delete_channel: no stack
[  568.006571][T28928] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  568.013914][T28929] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  568.083340][T28940] netlink: 'syz.1.3143': attribute type 3 has an invalid length.
[  568.088888][T28940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3143'.
[  568.091912][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'.
[  568.096936][T28941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'.
[  568.106680][ T5916] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0
[  568.110865][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'.
[  568.116933][ T5916] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.120565][ T5916] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.121492][T28941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'.
[  568.127746][ T5916] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  568.172769][T28953] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3147'.
[  568.176423][T28953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3147'.
[  568.471868][T29004] netlink: 'syz.1.3153': attribute type 1 has an invalid length.
[  568.474559][T29004] netlink: 'syz.1.3153': attribute type 3 has an invalid length.
[  569.521223][T29048] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000
[  569.528037][T29048] sctp: [Deprecated]: syz.0.3159 (pid 29048) Use of int in maxseg socket option.
[  569.528037][T29048] Use struct sctp_assoc_value instead
[  570.249323][T29050] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  570.388501][T29081] netlink: 'syz.1.3163': attribute type 2 has an invalid length.
[  570.394986][T29081] __nla_validate_parse: 5 callbacks suppressed
[  570.394997][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'.
[  570.510723][T29082] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  571.232125][T29099] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  571.257302][T29115] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  571.475358][T29147] xt_l2tp: v2 tid > 0xffff: 37482740
[  572.668687][T29218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3180'.
[  572.813314][T29223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3184'.
[  572.816954][T29224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3184'.
[  572.902958][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  572.906236][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  572.910197][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  572.913560][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  572.917096][T29224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  572.921712][T29224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  573.848360][T29281] netdevsim netdevsim1: Direct firmware load for .
[  573.848360][T29281]  failed with error -2
[  573.853548][T29281] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  573.853548][T29281] 
[  586.638826][T29289] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  586.865850][T29322] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  586.915478][T29336] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  587.731140][T29353] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3200'.
[  588.603562][T29385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  590.434384][T29447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3214'.
[  590.819676][T29494] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  591.648042][T29526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3225'.
[  592.641527][T29568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3229'.
[  593.481998][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'.
[  593.488275][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'.
[  594.442241][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'.
[  594.467220][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'.
[  595.396104][T29663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'.
[  595.401999][T29663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'.
[  595.513883][T29686] netlink: 'syz.0.3249': attribute type 29 has an invalid length.
[  595.528460][T29686] netlink: 'syz.0.3249': attribute type 29 has an invalid length.
[  595.533961][T29686] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3249'.
[  597.658238][T29782] netlink: 'syz.2.3262': attribute type 29 has an invalid length.
[  597.663402][T29782] netlink: 'syz.2.3262': attribute type 29 has an invalid length.
[  598.038600][T29827] netlink: zone id is out of range
[  598.041317][T29827] netlink: zone id is out of range
[  598.045055][T29827] netlink: zone id is out of range
[  598.048535][T29827] netlink: zone id is out of range
[  598.051322][T29827] netlink: zone id is out of range
[  598.054459][T29827] netlink: zone id is out of range
[  598.056676][T29827] netlink: zone id is out of range
[  598.058997][T29827] netlink: zone id is out of range
[  598.061248][T29827] netlink: zone id is out of range
[  598.064290][T29827] netlink: zone id is out of range
[  598.871082][T29845] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  598.913178][T29849] rdma_rxe: rxe_newlink: failed to add vxcan1
[  601.293978][T29951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  602.201597][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  602.202112][T29992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  602.205367][T30005] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  604.089326][T30082] bridge2: entered promiscuous mode
[  604.094757][T30082] bridge2: entered allmulticast mode
[  604.098387][T30082] team0: Port device bridge2 added
[  604.899790][T30109] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3308'.
[  604.904178][T30102] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3308'.
[  605.984408][T30150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3316'.
[  605.987635][T30150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'.
[  605.987683][T30154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3316'.
[  606.011375][T30154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'.
[  606.657252][T30164] dvmrp8: entered allmulticast mode
[  606.659606][T30163] dvmrp8: left allmulticast mode
[  606.756062][T30179] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  606.961800][T30192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  606.969796][T30195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  607.179591][T30235] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3325'.
[  607.188097][T30235] net_ratelimit: 2 callbacks suppressed
[  607.188108][T30235] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  608.725990][T30267] gretap0: entered promiscuous mode
[  608.728085][T30267] gretap0: entered allmulticast mode
[  609.817484][T30308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3337'.
[  610.068389][T30328] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  610.774811][T30348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3342'.
[  610.781044][T30348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3342'.
[  610.799864][T30349] netlink: 'syz.1.3341': attribute type 11 has an invalid length.
[  610.869497][T30359] netlink: 'syz.2.3344': attribute type 3 has an invalid length.
[  610.872313][T30359] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3344'.
[  611.711038][T30380] delete_channel: no stack
[  611.741126][T30394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3346'.
[  612.491417][T30394] netlink: 'syz.0.3346': attribute type 1 has an invalid length.
[  612.497573][T30394] netlink: 'syz.0.3346': attribute type 1 has an invalid length.
[  612.501235][T30394] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3346'.
[  612.505018][T30394] netlink: 'syz.0.3346': attribute type 1 has an invalid length.
[  612.508381][T30394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3346'.
[  613.510972][T30452] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3356'.
[  613.522856][T30452] TCP: tcp_parse_options: Illegal window scaling value 104 > 14 received
[  613.541970][T30452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3356'.
[  613.550895][T30457] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  613.720671][T30479] netlink: 'syz.2.3359': attribute type 7 has an invalid length.
[  613.728179][T30479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'.
[  614.400710][T30481] netlink: 'syz.1.3361': attribute type 29 has an invalid length.
[  614.404745][T30481] netlink: 'syz.1.3361': attribute type 29 has an invalid length.
[  614.409828][T30481] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3361'.
[  614.593448][T30512] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  615.530954][T30533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  617.144529][T30615] netlink: 'syz.2.3378': attribute type 29 has an invalid length.
[  617.156881][T30615] netlink: 'syz.2.3378': attribute type 29 has an invalid length.
[  618.026787][T30657] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR
[  618.597620][T30722] syzkaller1: entered allmulticast mode
[  619.156664][T30738] netlink: 'syz.2.3394': attribute type 29 has an invalid length.
[  619.160040][T30738] netlink: 'syz.2.3394': attribute type 29 has an invalid length.
[  619.214190][T30746] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  620.030714][T30773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  620.039394][T30774] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  620.094347][T30788] netlink: 'syz.1.3401': attribute type 29 has an invalid length.
[  620.102161][T30788] netlink: 'syz.1.3401': attribute type 29 has an invalid length.
[  620.107990][T30788] __nla_validate_parse: 1 callbacks suppressed
[  620.108000][T30788] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3401'.
[  620.708541][T30827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3406'.
[  620.712136][T30827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3406'.
[  621.089886][T30831] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  621.124239][T30839] netlink: 'syz.1.3408': attribute type 29 has an invalid length.
[  621.131106][T30839] netlink: 'syz.1.3408': attribute type 29 has an invalid length.
[  621.136584][T30839] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3408'.
[  622.124179][T30877] netlink: 'syz.2.3416': attribute type 29 has an invalid length.
[  622.128908][T30877] netlink: 'syz.2.3416': attribute type 29 has an invalid length.
[  622.177905][T30879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  622.284616][T30898] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  623.142022][T30970] netlink: 'syz.1.3424': attribute type 1 has an invalid length.
[  623.201104][T30963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'.
[  623.262920][T30973] netlink: 'syz.1.3424': attribute type 11 has an invalid length.
[  623.955856][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  624.137948][T31046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3430'.
[  624.141125][T31046] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3430'.
[  624.147539][T31046] netlink: 'syz.0.3430': attribute type 5 has an invalid length.
[  624.150365][T31046] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3430'.
[  626.229865][T31146] sctp: [Deprecated]: syz.0.3445 (pid 31146) Use of int in maxseg socket option.
[  626.229865][T31146] Use struct sctp_assoc_value instead
[  629.435512][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'.
[  630.335978][T31233] netlink: 'syz.2.3454': attribute type 1 has an invalid length.
[  631.861016][T31306] 8021q: VLANs not supported on syzkaller1
[  631.976915][T31331] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  632.128700][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3471'.
[  633.993145][T31412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3482'.
[  634.090021][T31418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.095940][T31417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.193799][T31443] netlink: 'syz.0.3488': attribute type 29 has an invalid length.
[  634.196942][T31443] netlink: 'syz.0.3488': attribute type 29 has an invalid length.
[  634.199946][T31443] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3488'.
[  634.281605][T31451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'.
[  634.285406][T31451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'.
[  635.142832][T31480] netlink: 'syz.2.3496': attribute type 29 has an invalid length.
[  635.146454][T31480] netlink: 'syz.2.3496': attribute type 29 has an invalid length.
[  635.204261][T31489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  635.265454][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3502'.
[  635.274515][T31509] netlink: 'syz.2.3502': attribute type 1 has an invalid length.
[  636.081664][T31535] netlink: 'syz.1.3506': attribute type 29 has an invalid length.
[  636.086643][T31535] netlink: 'syz.1.3506': attribute type 29 has an invalid length.
[  636.089556][T31535] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3506'.
[  636.099600][T31538] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  636.606902][T31604] netlink: 'syz.0.3515': attribute type 29 has an invalid length.
[  636.618548][T31604] netlink: 'syz.0.3515': attribute type 29 has an invalid length.
[  636.623358][T31604] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3515'.
[  638.125871][T31694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'.
[  638.129875][T31694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'.
[  639.914842][ T5721] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  640.725229][T31776] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  641.614856][T31796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'.
[  641.679506][T31814] netlink: 'syz.2.3545': attribute type 29 has an invalid length.
[  641.682847][T31814] netlink: 'syz.2.3545': attribute type 29 has an invalid length.
[  642.516307][T31834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3547'.
[  642.655752][T31861] netlink: 'syz.2.3553': attribute type 29 has an invalid length.
[  642.659112][T31861] netlink: 'syz.2.3553': attribute type 29 has an invalid length.
[  642.669698][T31862] netlink: 'syz.0.3550': attribute type 21 has an invalid length.
[  642.711045][T31868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'.
[  642.716005][T31868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'.
[  642.719187][T31868] netlink: 'syz.1.3552': attribute type 4 has an invalid length.
[  642.729566][T31868] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3552'.
[  643.514736][T31903] netlink: 'syz.2.3560': attribute type 29 has an invalid length.
[  643.518503][T31903] netlink: 'syz.2.3560': attribute type 29 has an invalid length.
[  644.442707][T31931] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  645.703121][T32000] netlink: 'syz.2.3574': attribute type 1 has an invalid length.
[  645.709022][T32000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'.
[  645.746163][T32011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3575'.
[  646.554756][T32039] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  647.485487][T32082] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  648.268564][T32091] syzkaller1: entered promiscuous mode
[  648.270356][T32091] syzkaller1: entered allmulticast mode
[  648.417732][T32101] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  648.546802][T32138] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  648.571036][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'.
[  648.579064][T32133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3593'.
[  650.646137][T32206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  650.860807][T32247] netlink: 'syz.0.3611': attribute type 21 has an invalid length.
[  650.862564][T32232] netlink: 'syz.0.3611': attribute type 21 has an invalid length.
[  654.293633][T32352] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  654.510139][T32401] sctp: [Deprecated]: syz.2.3634 (pid 32401) Use of struct sctp_assoc_value in delayed_ack socket option.
[  654.510139][T32401] Use struct sctp_sack_info instead
[  655.216123][T32395] netlink: 'syz.1.3631': attribute type 1 has an invalid length.
[  655.224838][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'.
[  655.270801][T32411] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  655.386860][T32443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3639'.
[  657.104855][T32479] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3646'.
[  657.109950][T32479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3646'.
[  657.119682][T32479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3646'.
[  657.149574][T32479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3646'.
[  657.153643][T32479] block nbd0: not configured, cannot reconfigure
[  657.156683][T32479] nbd: device at index 2 is going down
[  657.210339][T32497] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  658.869250][T32526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3654'.
[  658.880790][T32526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3654'.
[  658.887901][T32531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3653'.
[  658.894194][T32531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3653'.
[  660.581052][T32581] __nla_validate_parse: 2 callbacks suppressed
[  660.581064][T32581] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3659'.
[  660.651076][T32596] netlink: 'syz.1.3662': attribute type 29 has an invalid length.
[  660.660529][T32596] netlink: 'syz.1.3662': attribute type 29 has an invalid length.
[  660.664465][T32596] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3662'.
[  660.983397][T32621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  661.251511][T32666] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  661.269068][T32641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  662.431791][T32736] sctp: [Deprecated]: syz.2.3679 (pid 32736) Use of int in max_burst socket option deprecated.
[  662.431791][T32736] Use struct sctp_assoc_value instead
[  662.495747][T32737] netlink: 'syz.2.3679': attribute type 5 has an invalid length.
[  663.337982][T32748] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_tx_wq": -EINTR
[  663.489164][  T333] x_tables: ip_tables: udp match: only valid for protocol 17
[  663.510803][  T333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3685'.
[  663.522449][  T333] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  663.585581][  T343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'.
[  663.599820][  T343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3688'.
[  664.514470][  T373] syzkaller0: entered promiscuous mode
[  664.516481][  T373] syzkaller0: entered allmulticast mode
[  667.030544][  T478] syzkaller0: entered promiscuous mode
[  667.033045][  T478] syzkaller0: entered allmulticast mode
[  668.481070][T20343] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  669.324064][  T542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'.
[  670.230934][  T571] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  670.349336][  T597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'.
[  671.217409][  T612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3726'.
[  671.257094][  T612] "syz.0.3726" (612) uses obsolete ecb(arc4) skcipher
[  671.276782][  T612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3726'.
[  671.338139][  T639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3728'.
[  672.109600][  T655] netlink: 'syz.0.3731': attribute type 29 has an invalid length.
[  672.119080][  T655] netlink: 'syz.0.3731': attribute type 29 has an invalid length.
[  672.126205][  T655] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3731'.
[  672.236413][T20343] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  672.318054][  T679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3736'.
[  673.085214][  T694] netlink: 'syz.1.3739': attribute type 4 has an invalid length.
[  673.091397][  T694] netlink: 'syz.1.3739': attribute type 4 has an invalid length.
[  673.187641][  T714] netlink: 'syz.0.3741': attribute type 29 has an invalid length.
[  673.191219][  T714] netlink: 'syz.0.3741': attribute type 29 has an invalid length.
[  673.196182][  T714] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3741'.
[  673.994098][  T736] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  674.045589][ T5721] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  674.842662][  T764] tap0: tun_chr_ioctl cmd 1074812118
[  674.879455][  T771] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3749'.
[  674.884012][  T771] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3749'.
[  674.886986][  T771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3749'.
[  674.945639][  T780] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  675.853081][ T5916] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  676.744732][  T837] dvmrp8: entered allmulticast mode
[  677.470590][  T822] dvmrp8: left allmulticast mode
[  677.614557][  T856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'.
[  677.694932][  T866] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  678.518354][  T878] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  678.521593][  T885] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  679.571964][  T961] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  680.533994][ T1010] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  681.805512][ T1115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  682.943514][ T1165] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  683.918228][ T1211] syz.2.3800: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  683.929311][ T1211] CPU: 0 UID: 0 PID: 1211 Comm: syz.2.3800 Not tainted syzkaller #0 PREEMPT(full) 
[  683.929330][ T1211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  683.929339][ T1211] Call Trace:
[  683.929346][ T1211]  <TASK>
[  683.929352][ T1211]  dump_stack_lvl+0x189/0x250
[  683.929376][ T1211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  683.929392][ T1211]  ? __pfx__printk+0x10/0x10
[  683.929411][ T1211]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  683.929426][ T1211]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  683.929442][ T1211]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  683.929460][ T1211]  warn_alloc+0x214/0x310
[  683.929479][ T1211]  ? stack_depot_save_flags+0x40/0x860
[  683.929493][ T1211]  ? __pfx_warn_alloc+0x10/0x10
[  683.929505][ T1211]  ? kasan_save_track+0x4f/0x80
[  683.929515][ T1211]  ? xskq_create+0x56/0x170
[  683.929522][ T1211]  ? xsk_init_queue+0xb0/0x110
[  683.929528][ T1211]  ? xsk_setsockopt+0x4dc/0x8d0
[  683.929539][ T1211]  ? do_sock_setsockopt+0x17c/0x1b0
[  683.929548][ T1211]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  683.929557][ T1211]  ? do_syscall_64+0xfa/0x3b0
[  683.929564][ T1211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.929575][ T1211]  __vmalloc_node_range_noprof+0x125/0x12f0
[  683.929598][ T1211]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  683.929612][ T1211]  ? __kasan_kmalloc+0x93/0xb0
[  683.929644][ T1211]  vmalloc_user_noprof+0xad/0xf0
[  683.929657][ T1211]  ? xskq_create+0xbf/0x170
[  683.929696][ T1211]  xskq_create+0xbf/0x170
[  683.929706][ T1211]  xsk_init_queue+0xb0/0x110
[  683.929715][ T1211]  xsk_setsockopt+0x4dc/0x8d0
[  683.929728][ T1211]  ? __pfx_xsk_setsockopt+0x10/0x10
[  683.929740][ T1211]  ? __pfx_aa_sk_perm+0x10/0x10
[  683.929754][ T1211]  ? aa_sock_opt_perm+0xff/0x1b0
[  683.929764][ T1211]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  683.929773][ T1211]  ? __pfx_xsk_setsockopt+0x10/0x10
[  683.929785][ T1211]  do_sock_setsockopt+0x17c/0x1b0
[  683.929821][ T1211]  __x64_sys_setsockopt+0x13f/0x1b0
[  683.929833][ T1211]  do_syscall_64+0xfa/0x3b0
[  683.929841][ T1211]  ? lockdep_hardirqs_on+0x9c/0x150
[  683.929850][ T1211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.929858][ T1211]  ? exc_page_fault+0x9f/0xf0
[  683.929866][ T1211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.929877][ T1211] RIP: 0033:0x7f00d9f8ec29
[  683.929886][ T1211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  683.929892][ T1211] RSP: 002b:00007f00dae13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  683.929901][ T1211] RAX: ffffffffffffffda RBX: 00007f00da1d5fa0 RCX: 00007f00d9f8ec29
[  683.929906][ T1211] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  683.929911][ T1211] RBP: 00007f00da011e41 R08: 0000000000000004 R09: 0000000000000000
[  683.929916][ T1211] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  683.929920][ T1211] R13: 00007f00da1d6038 R14: 00007f00da1d5fa0 R15: 00007ffca44c1b38
[  683.929932][ T1211]  </TASK>
[  683.929935][ T1211] Mem-Info:
[  684.044172][ T1211] active_anon:20744 inactive_anon:0 isolated_anon:0
[  684.044172][ T1211]  active_file:1551 inactive_file:38473 isolated_file:0
[  684.044172][ T1211]  unevictable:1768 dirty:98 writeback:0
[  684.044172][ T1211]  slab_reclaimable:10179 slab_unreclaimable:58263
[  684.044172][ T1211]  mapped:19185 shmem:2426 pagetables:989
[  684.044172][ T1211]  sec_pagetables:0 bounce:0
[  684.044172][ T1211]  kernel_misc_reclaimable:0
[  684.044172][ T1211]  free:278643 free_pcp:14954 free_cma:0
[  684.063332][ T1211] Node 0 active_anon:41868kB inactive_anon:0kB active_file:3444kB inactive_file:132900kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26932kB dirty:184kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5452kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  684.076713][ T1211] Node 1 active_anon:41108kB inactive_anon:0kB active_file:2760kB inactive_file:20992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50080kB dirty:208kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6200kB pagetables:1768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  684.088935][ T1211] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  684.100714][ T1211] lowmem_reserve[]: 0 811 811 811 811
[  684.102637][ T1211] Node 0 DMA32 free:264172kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41868kB inactive_anon:0kB active_file:3444kB inactive_file:132900kB unevictable:3536kB writepending:184kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:29748kB local_pcp:11952kB free_cma:0kB
[  684.113152][ T1211] lowmem_reserve[]: 0 0 0 0 0
[  684.114779][ T1211] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  684.125702][ T1211] lowmem_reserve[]: 0 0 854 854 854
[  684.127599][ T1211] Node 1 Normal free:376424kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41108kB inactive_anon:0kB active_file:2760kB inactive_file:20992kB unevictable:3536kB writepending:208kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30024kB local_pcp:18980kB free_cma:0kB
[  684.138399][ T1211] lowmem_reserve[]: 0 0 0 0 0
[  684.140054][ T1211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  684.144738][ T1211] Node 0 DMA32: 1*4kB (M) 31*8kB (E) 11*16kB (UE) 298*32kB (UME) 228*64kB (UE) 134*128kB (UE) 81*256kB (UE) 36*512kB (UM) 23*1024kB (UME) 10*2048kB (UM) 34*4096kB (UM) = 264172kB
[  684.151834][ T1211] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  684.157362][ T1211] Node 1 Normal: 460*4kB (ME) 1097*8kB (UME) 483*16kB (UME) 164*32kB (UME) 138*64kB (UME) 109*128kB (UME) 53*256kB (UME) 32*512kB (UME) 23*1024kB (UME) 9*2048kB (UME) 63*4096kB (UM) = 376360kB
[  684.164546][ T1211] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  684.167586][ T1211] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  684.170704][ T1211] 42450 total pagecache pages
[  684.172692][ T1211] 0 pages in swap cache
[  684.174184][ T1211] Free swap  = 124996kB
[  684.175614][ T1211] Total swap = 124996kB
[  684.177049][ T1211] 786301 pages RAM
[  684.178303][ T1211] 0 pages HighMem/MovableOnly
[  684.179883][ T1211] 241346 pages reserved
[  684.181461][ T1211] 0 pages cma reserved
[  684.867514][ T1245] netlink: 'syz.0.3803': attribute type 29 has an invalid length.
[  684.871262][ T1245] netlink: 'syz.0.3803': attribute type 29 has an invalid length.
[  684.875698][ T1245] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3803'.
[  685.394254][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  686.898124][ T1303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3811'.
[  686.992915][ T1322] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  689.051721][ T1415] !: renamed from dummy0 (while UP)
[  689.083769][ T1420] netlink: 998 bytes leftover after parsing attributes in process `syz.1.3827'.
[  690.067615][ T1493] netlink: 'syz.1.3832': attribute type 64 has an invalid length.
[  690.070649][ T1492] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  690.093634][ T5916] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  690.891915][ T1523] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  691.027688][ T1545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  691.034847][ T1549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  691.417319][ T1581] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3844'.
[  691.420430][ T1581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3844'.
[  691.426481][ T1581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'.
[  691.742455][ T1613] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  693.459853][ T5721] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  694.327597][ T1655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  694.423677][ T1675] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  694.544660][ T1686] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  695.829730][ T1757] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  696.299748][ T1801] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3880'.
[  696.304173][ T1801] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  696.308123][ T1801] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  696.311646][ T1801] CPU: 0 UID: 0 PID: 1801 Comm: syz.2.3880 Not tainted syzkaller #0 PREEMPT(full) 
[  696.314835][ T1801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  696.318233][ T1801] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  696.320044][ T1801] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 86 e1 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 4f e2 00 f8 4d 89 3e
[  696.326545][ T1801] RSP: 0018:ffffc900071d70e0 EFLAGS: 00010246
[  696.328680][ T1801] RAX: 0000000000000000 RBX: 1ffff11004e5d926 RCX: dffffc0000000000
[  696.331372][ T1801] RDX: ffffc900210a2000 RSI: 00000000000006d1 RDI: 00000000000006d2
[  696.334126][ T1801] RBP: ffffc900071d7230 R08: ffff888044038000 R09: 0000000000000002
[  696.336857][ T1801] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11004e5d926
[  696.339686][ T1801] R13: ffff8880272ec930 R14: 0000000000000000 R15: ffff8880272ec928
[  696.342519][ T1801] FS:  00007f00dae136c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  696.345623][ T1801] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  696.347829][ T1801] CR2: 0000001b32423ffc CR3: 000000010fbc4000 CR4: 00000000000006f0
[  696.350554][ T1801] Call Trace:
[  696.351688][ T1801]  <TASK>
[  696.352852][ T1801]  ? xfrm_alloc_spi+0x2a0/0xf30
[  696.354490][ T1801]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  696.356223][ T1801]  ? xfrm_find_acq+0x87/0xa0
[  696.357781][ T1801]  xfrm_alloc_userspi+0x70b/0xc90
[  696.359439][ T1801]  ? apparmor_capable+0x137/0x1b0
[  696.361130][ T1801]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  696.363114][ T1801]  ? __nla_parse+0x40/0x60
[  696.364674][ T1801]  xfrm_user_rcv_msg+0x7a3/0xab0
[  696.366287][ T1801]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  696.368109][ T1801]  ? __pfx___mutex_trylock_common+0x10/0x10
[  696.370050][ T1801]  ? rcu_is_watching+0x15/0xb0
[  696.371722][ T1801]  ? trace_contention_end+0x39/0x120
[  696.373563][ T1801]  ? __mutex_lock+0x335/0x1350
[  696.375228][ T1801]  netlink_rcv_skb+0x208/0x470
[  696.376948][ T1801]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  696.378834][ T1801]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  696.380693][ T1801]  ? netlink_deliver_tap+0x2e/0x1b0
[  696.382450][ T1801]  ? netlink_deliver_tap+0x2e/0x1b0
[  696.384204][ T1801]  xfrm_netlink_rcv+0x79/0x90
[  696.385777][ T1801]  netlink_unicast+0x82f/0x9e0
[  696.387704][ T1801]  ? __pfx_netlink_unicast+0x10/0x10
[  696.389860][ T1801]  ? netlink_sendmsg+0x642/0xb30
[  696.391885][ T1801]  ? skb_put+0x11b/0x210
[  696.393612][ T1801]  netlink_sendmsg+0x805/0xb30
[  696.395473][ T1801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  696.397667][ T1801]  ? aa_sock_msg_perm+0xf1/0x1d0
[  696.399693][ T1801]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  696.401820][ T1801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  696.403863][ T1801]  __sock_sendmsg+0x21c/0x270
[  696.405705][ T1801]  ____sys_sendmsg+0x505/0x830
[  696.407646][ T1801]  ? __pfx_____sys_sendmsg+0x10/0x10
[  696.409814][ T1801]  ? import_iovec+0x74/0xa0
[  696.411683][ T1801]  ___sys_sendmsg+0x21f/0x2a0
[  696.413346][ T1801]  ? __pfx____sys_sendmsg+0x10/0x10
[  696.415475][ T1801]  ? __fget_files+0x2a/0x420
[  696.417357][ T1801]  ? __fget_files+0x3a0/0x420
[  696.419142][ T1801]  __x64_sys_sendmsg+0x19b/0x260
[  696.421100][ T1801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  696.423105][ T1801]  ? do_syscall_64+0xbe/0x3b0
[  696.424792][ T1801]  do_syscall_64+0xfa/0x3b0
[  696.426297][ T1801]  ? lockdep_hardirqs_on+0x9c/0x150
[  696.428350][ T1801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.430818][ T1801]  ? exc_page_fault+0x9f/0xf0
[  696.432763][ T1801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.434723][ T1801] RIP: 0033:0x7f00d9f8ec29
[  696.436232][ T1801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  696.442622][ T1801] RSP: 002b:00007f00dae13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  696.445415][ T1801] RAX: ffffffffffffffda RBX: 00007f00da1d5fa0 RCX: 00007f00d9f8ec29
[  696.448651][ T1801] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  696.451609][ T1801] RBP: 00007f00da011e41 R08: 0000000000000000 R09: 0000000000000000
[  696.454867][ T1801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  696.458115][ T1801] R13: 00007f00da1d6038 R14: 00007f00da1d5fa0 R15: 00007ffca44c1b38
[  696.461361][ T1801]  </TASK>
[  696.462671][ T1801] Modules linked in:
[  696.464141][ T1801] ---[ end trace 0000000000000000 ]---
[  696.465943][ T1801] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  696.467747][ T1801] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 86 e1 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 4f e2 00 f8 4d 89 3e
[  696.475729][ T1801] RSP: 0018:ffffc900071d70e0 EFLAGS: 00010246
[  696.478361][ T1801] RAX: 0000000000000000 RBX: 1ffff11004e5d926 RCX: dffffc0000000000
[  696.481672][ T1801] RDX: ffffc900210a2000 RSI: 00000000000006d1 RDI: 00000000000006d2
[  696.484579][ T1801] RBP: ffffc900071d7230 R08: ffff888044038000 R09: 0000000000000002
[  696.487374][ T1801] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11004e5d926
[  696.490117][ T1801] R13: ffff8880272ec930 R14: 0000000000000000 R15: ffff8880272ec928
[  696.492870][ T1801] FS:  00007f00dae136c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  696.496070][ T1801] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  696.498423][ T1801] CR2: 0000001b32423ffc CR3: 000000010fbc4000 CR4: 00000000000006f0
[  696.501262][ T1801] Kernel panic - not syncing: Fatal exception in interrupt
[  696.504605][ T1801] Kernel Offset: disabled
[  696.506251][ T1801] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:34:34  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bea60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000012cc RDI=00000000000012cd RBP=ffffffff99df56b0 RSP=ffffc900071d68b0
R8 =ffff88801feb8237 R9 =1ffff11003fd7046 R10=dffffc0000000000 R11=ffffffff854f90f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f9167 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f00dae136c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32423ffc CR3=000000010fbc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc8fcc12e7b
XMM06=0000000000000000 00007fc8fcc12e75 XMM07=0000000000000000 00007fc8fcc12e89
XMM08=0000000000000000 00007fc8fcc12f0f XMM09=0000000000000000 00007fc8fcc12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7d09231f639f7700 RBX=ffffffff819693f8 RCX=7d09231f639f7700 RDX=0000000000000001
RSI=ffffffff8be33be0 RDI=ffffffff819693f8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a630 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f00dae12fc8 CR3=0000000114d5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f00da012e7b
XMM06=0000000000000000 00007f00da012e75 XMM07=0000000000000000 00007f00da012e89
XMM08=0000000000000000 00007f00da012f0f XMM09=0000000000000000 00007f00da012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
