last executing test programs:

2.375774269s ago: executing program 0 (id=6647):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x800, 0x2)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r2, @ANYBLOB="83040500000000002800128008000100677265001c00028006000e0002000000066ffb000e0000001cc19891f959ea62"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1b, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb012118000040000000000c0000000c0000000400000001000000000000130800000000deb7fc"], &(0x7f00000006c0)=""/209, 0x28, 0x8f, 0x1, 0x3}, 0x28)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xfd45}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000040000000800000006000000000088d5e9757831b6e88869b545429f0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r3, &(0x7f0000000280)=ANY=[], 0x5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000feff0600000000000000000000f6777a869c5c445409cbfd74c02359d5c5b464a2c4744520953beff2fddffd7c3569f23fc401b4cb36ec1b9cba09b0b14fe287b26e8b510076b645a38b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000005ecf4e8287866e1890d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r7]}, 0x94)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r10, 0x0)
close(r11)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

2.191878477s ago: executing program 1 (id=6651):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC=r0, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac10247ad107", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d1ced4905c1", @ANYRES16=r0, @ANYRESOCT=r0], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x84, 0x0, 0x2, 0x270bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x8080)
socket$kcm(0x29, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0xfffffffff0000000}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0xfffffffff0000000}, 0x18)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) (async)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) (async)
bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)

2.112042918s ago: executing program 0 (id=6653):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="24000000040801010000000000000000030000603b90b940080000000500030088000000370376cac06f4f399f80e884a97c3c220e387e4e3c6d5716c3c38ced144b7972e37dc03dbdaa05f3cf02bd3efcf5dcbec407698c2067f0752eba8bbbfbb4f54959deeb23534233acab70ab0f3c416511fe2db53b9a575b894420694cbf9a4cfda8fe65382acf5e5b69a38e0df775503da555af383a160a6d8408701f0d2cb88c56f0f2a3eb1d628211d515153f91f0a235fc781d1c39751adc8d8ad0f13f399a27453c2e4cdb5c"], 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x28, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x89d6, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x3, 0x4, 0x6, 0x0, 0xc, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x4, 0x7, 0xa, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000380)='GPL\x00', 0x4, 0x1000, &(0x7f0000001840)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x8}, 0x10, 0x2bf54, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000005c0)=[{0x3, 0x3, 0x7, 0xa}, {0x1, 0x5, 0x0, 0x5}, {0x2, 0x4, 0xa, 0x7}, {0x4, 0x5, 0x5, 0x3}, {0x3, 0x5, 0x4, 0x4}, {0x0, 0x2, 0x6, 0x5}, {0x3, 0x3, 0x6, 0xf}], 0x10, 0x400}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r8=>0x0}, 0x8)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r8, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r10, r7, 0x4, r7}, 0x10)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7) (async)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0) (async)
r12 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r12, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r11, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2)

1.943183923s ago: executing program 1 (id=6654):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x318, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37ef5ae0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b43e9e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x515a543b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c00f3cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16377578}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d58fa90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x648d8549}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f4b5772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bbb5983}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d79e233}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7856d30f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a3db238}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b8e0b55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c26ef09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ece9fbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26774c8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c1a266c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f4413f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cf84d9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x442a189f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43c7f983}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7929af53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6395570d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f42a7cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5616e569}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x663bf625}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3624c343}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x620c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x800}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19e51620}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ecb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7153}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40360f49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19a9bf6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39ebf682}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec01}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c26}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa9f764}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x288ca13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x437c8ed0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26d70d8c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19c3675a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x591d0196}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x670c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c646459}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3776}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xda6e913}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x323702f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bc43996}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x77c9a708e6e1d068}]}, 0x318}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r6]}, 0x94)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r9, 0x0)
close(r10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

1.942598265s ago: executing program 2 (id=6655):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x6c0480, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r7, 0x0, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$kcm(0x2, 0xa, 0x2)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})

1.232975271s ago: executing program 2 (id=6656):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYBLOB="515d0d9f03eeee2d00991d8c14adfe8796a1b2e38fe0231ff5b0debe6b0c5b7f9eb7e76301915e6b564f17d9257cebca6430586f96723c5922f0ea1e040ed50b5b53e4f92bb179df4b74d77f5e14668b7e0649a8b4e61646519ecf34bb8e194ea485de4bdc3896d7a042117b6e72cc2910229cc34de8fbd2ab0544e04a6e9aa6225c47d8826fbe6be027ea9c5a2e4e40d38122864d876d3bed2991163a986e56cbae9c4e4467ebf21b8ef9bb52a8a374f4dace6598c48b53022474a4e058fe63841152654d22d0ecb8168ac624d1b30b11675734ace07123954212f0"], 0xfd45}}, 0x4040010)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x414, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x401, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r8}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r8}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x414}], 0x1}, 0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r7, 0x0)
close(r9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

1.231048737s ago: executing program 1 (id=6657):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) (async)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5]}, 0x94) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r8 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x2, 0x2}, 0xc) (async)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async)
listen(r9, 0x0)
close(r10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

1.230741993s ago: executing program 0 (id=6658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000040801010000000000000000030000080600024008000000050003008800000007b3c9179b4839b66cf6d5f25a140f9184edfc3930dc00cdd6d866e2dce281f0363741027f9632bfa68ab28fc9f0e9f5a89e7b4b57c7cc2d6f2478b91604ed978864bb4d7e97eda4efe1e407c959160285b9aefc7a6addcb20b834f967fa60265e3a5843fb3d9a489e9b85ffe778dffedd3c52910300b26a575c6c"], 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040) (async)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x810, 0xffffffffffffffff, 0x1000)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) (async)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (async)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r7, 0x0, 0x0) (async)
r9 = socket$igmp6(0xa, 0x3, 0x2) (async)
r10 = socket$kcm(0x2, 0xa, 0x2) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async)
ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, &(0x7f0000000200)=0xb55)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000c0000000400008bc600250008810010008848d408d3"], 0x19)

1.11265354s ago: executing program 0 (id=6659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}, 0x1, 0x0, 0x0, 0xf5ff}, 0x0)

1.112087386s ago: executing program 1 (id=6660):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x5, <r5=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0xfd45}}, 0x0)
write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r10 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.060772419s ago: executing program 0 (id=6661):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (async)
write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x4, @b={0x6, 0x1, 0x1, 0x3, {0x9a, "2ede6d1c8abb0e17528d94e6bb796473ffba8ec28be132cb7a538b219da821a64440739ede65709b9a6fd14b38339e0a1bd2ed9bad80c80134531f00d7b43b72156ada08f3dd5029a80350583f235368d24f6eecc15570ab9afb73a1611e0c25515ed2dbb2bc08ed7a3c8c29bc26faf5133fa0ecf8e4eda080269b8ba0bca619c0d88b6c6259e9bef014354b131e0d2606d320f719ea6f5ffe6f"}, 0x1}}, 0xa3)

1.06050531s ago: executing program 2 (id=6662):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff8000}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0xb4}}, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
r6 = socket(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000100)=0x7, 0x4)
listen(r6, 0x7f)
r7 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4)
setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000080)=0xfffffff7, 0x4)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @ipv4={'\x00', '\xff\xff', @multicast2=0xac1414aa}, 0x2}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x5a}, 0x94)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r10=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x9, 0x264, 0x2, 0x2101d, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r8]}, 0x94)
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x200000000000003e}, 0x60)
listen(r11, 0x0)
close(r12)

217.83056ms ago: executing program 2 (id=6663):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r2 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32)
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) (rerun: 32)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311bf00000000008510000002000000850000008f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async, rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async)
write$nci(r0, &(0x7f00000003c0)=ANY=[], 0xc)

217.422495ms ago: executing program 0 (id=6664):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015400000000020"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

216.656109ms ago: executing program 1 (id=6665):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000008000000000008000f0001800000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x884)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0)
bind$vsock_stream(r4, &(0x7f0000000940), 0x10)
listen(r4, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000340)="1c110170995c70f8970d0ccefb77be0300004b8ebc01b6b6373e133bab4fb362a9e3ba8db50410aa909922042e84b8782c5ef2a52bf57c9cf58814fe94702ee4cf24401ee234947dfaba6b811d6980a1f6e8b60078a3a1d767f77a877d479bb7d5ebf014c85597ff5bdd46f4d1882bbe2ad1edbeb24e0e6216405aba624005c4aff04ecae1d384f4a7338d0db56222824ac15d3b8d75eab7688bbe2dff499ebf555cdfff35c25cdfd33cb85a7f57d94f38b67c0fd6aa", 0xb6}, {&(0x7f0000000400)="559dfaa78f3b7d044a88ab4537fd1aa23b6e5495e896be39c234a2001d4f887e42788d825423386ccde8564e3313decc9b116aa333df28e9225b03514291febfe7cdc88bb50f0e34a9063d42aa78adff33046cbaf0abf1eca3adc299210826d622cc336da5c5fcc4910b919abaf11f9dff8100bcba0cef3932d85b9169f3e3d46412468d6c6857e2e4da75794f2350576e1970b0c75758388d6229e527964dbe795c153c52d0a8f6f317cb1efb75d447e71170490f82094aec4d3f6c23ddfab80552358dda53853340cb15599e315580e27c79f4950fb35429c862814c", 0xdd}, {&(0x7f00000001c0)="504bfaf351dc80d49f16ab9a3a95c351de9052fe53e3747ac3a56847fd6f7905348499ac8cda68c4864a0b194f24b4ba512365e653867c70f571dd97c00a55f70dbadb275c4485a40f9e11ae18172f00bd6fefbb76d85eb0cb74ab3f6be181162da9a6b37b1921774c29ecf6e9f3f2af6744ed319e9900347a2aa010e432321efc4685de5b52", 0x86}, {&(0x7f0000000980)="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", 0x1000}], 0x4)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

132.701366ms ago: executing program 1 (id=6666):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000000)="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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_ext={0x1c, 0xa, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x42}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000001180)='syzkaller\x00', 0x2, 0xd3, &(0x7f00000011c0)=""/211, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0xe, 0x5, 0x4cbd0718}, 0x10, 0x2cb10, 0xffffffffffffffff, 0x6, &(0x7f0000001340)=[0xffffffffffffffff], &(0x7f0000001380)=[{0x2, 0x2, 0x8, 0x6}, {0x3, 0x2, 0xa, 0x4}, {0x4, 0x5, 0x2, 0x1}, {0x1, 0x4, 0xe, 0xa}, {0x4, 0x3, 0xb, 0x2}, {0x5, 0x1, 0xc, 0x1}], 0x10, 0x16}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f00000014c0)=r2}, 0x20)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001580)={'vlan1\x00', &(0x7f0000001540)=@ethtool_channels={0x3d, 0xbf62, 0x6, 0x3, 0x5, 0x7fffffff, 0x5, 0x8, 0x4e0377ff}})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f00000015c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x2, 'bond_slave_0\x00'})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x40, 0x22, 0x1, 0x70bd2c, 0x25dfdbfc, {0x15}, [@generic="1df69d854106a8093e364106bed14e81c56fae22bebf69b2b4d1a1dc82be39ca7f68a2b1fd1333b828"]}, 0x40}, 0x1, 0x0, 0x0, 0x7de7c129317ee578}, 0x40810)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, r6, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "47cbb201a3"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c37589741b4bb5f6b6dcd2e7f7"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x24000081)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@bloom_filter={0x1e, 0x80, 0x4, 0x62f0b878, 0x0, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xb}, 0x50)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000019c0)=0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001a00)={0x2, 'vxcan1\x00', {0x100000}, 0x9})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000001f00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001b00)={0x334, r8, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_IE={0x2fd, 0x2a, [@perr={0x84, 0xe1, {0x6, 0xd, [{{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_a, 0xe54f, @value, 0x21}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x1b}, {{}, @broadcast, 0x2, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x3ff, @value=@broadcast, 0x1c}, {{}, @broadcast, 0xc, @void, 0x2d}, {{}, @device_b, 0x7, @void, 0x17}, {{0x0, 0x1}, @device_a, 0xfffffe01, @value=@device_b, 0x32}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0xf}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x2b}, {{}, @device_a, 0xffffffff, @void, 0x27}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x24}, {{0x0, 0x1}, @device_b, 0x0, @value, 0xe}]}}, @perr={0x84, 0x62, {0xaa, 0x6, [{{0x0, 0x1}, @device_b, 0x4, @value, 0x31}, {{}, @device_b, 0x6, @void, 0xd}, {{}, @device_b, 0x3ff, @void, 0x11}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x2c}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x21}, {{}, @device_b, 0x1ff, @void, 0x1}]}}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0xf5, 0xdf, 0x5, @device_b, 0x8, @value, 0xc00, 0x1, 0x4, [{{0x1}, @device_a, 0x6}, {{}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_b, 0xad}, {{}, @broadcast, 0x22}]}}, @perr={0x84, 0xef, {0x3, 0xf, [{{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0xa}, {{}, @broadcast, 0x2, @void, 0x10}, {{}, @device_b, 0x4, @void, 0x24}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x13}, {{0x0, 0x1}, @broadcast, 0xfffffff8, @value=@device_b, 0x9}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x13}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x28}, {{}, @device_a, 0x3, @void, 0x25}, {{}, @device_a, 0xbe, @void, 0x7}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x3a}, {{}, @device_b, 0x2, @void, 0x1e}, {{}, @broadcast, 0xfffffffd, @void, 0x32}, {{}, @broadcast, 0x10000, @void, 0x29}, {{}, @device_a, 0xc4, @void, 0x800}, {{0x0, 0x1}, @device_b, 0x80000001, @value=@device_b, 0x2d}]}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x4, 0x0, {0xfffffffffffffffa, 0x11b1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x3, 0xe}}, @random={0x8, 0x2e, "99edf110df342c49e4ef098fc69cee0df3fee5ba5b1b4d232d682cecd3e78d9d74f2c2827f3510745908b2fb8ce6"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x1e, @broadcast, 0x5, @value, 0x4, 0x1380, @device_b, 0x5}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x63}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x334}, 0x1, 0x0, 0x0, 0x90}, 0x810)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001fc0)={{r3, <r10=>0xffffffffffffffff}, &(0x7f0000001f40), &(0x7f0000001f80)=r2}, 0x20)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000002000), &(0x7f0000002040)=0x10, 0x800)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r10, 0xf1ff9000)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000022c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0x9, 0x1, 0x5, 0x0, 0x4}]}, &(0x7f00000020c0)='GPL\x00', 0x2, 0x5d, &(0x7f0000002100)=""/93, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0x0, 0x5, 0xffff}, 0x10, 0x20711, r2, 0x5, &(0x7f0000002200)=[r10, r3, r1, r7, r7, r1], &(0x7f0000002240)=[{0x3, 0x3, 0x10, 0x2}, {0x5, 0x3, 0x7, 0x6}, {0x2, 0x2, 0xe, 0x1}, {0x5, 0x1, 0x3, 0x6}, {0x2, 0x5, 0xb, 0xc}], 0x10, 0x800}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002480)={@fallback=<r12=>r4, 0x1, 0x0, 0x3, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0], <r13=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000002500)='\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', <r14=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000024c0)={@map=r3, r11, 0x1d, 0x24, 0x0, @void, @void, @void, @value=r14, r13}, 0x20)
r15 = accept4$netrom(r12, &(0x7f0000002580)={{}, [@null, @default, @bcast, @bcast, @remote, @bcast, @rose, @netrom]}, &(0x7f0000002600)=0x48, 0x800)
getpeername$netrom(r15, &(0x7f0000002640)={{0x3, @default}, [@default, @bcast, @remote, @netrom, @netrom, @netrom, @default, @null]}, &(0x7f00000026c0)=0x48)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628)
openat$cgroup_int(r12, &(0x7f0000002700)='net_cls.classid\x00', 0x2, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89c8, &(0x7f0000002780)={'xfrm0\x00', @ifru_data=&(0x7f0000002740)="e003379239a2c261e56b7b6e90e2b368274285945d32483ffa1b58f27d0c72d6"})

2.229952ms ago: executing program 2 (id=6667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}, 0x1, 0x0, 0x0, 0xfff5}, 0x0)

0s ago: executing program 2 (id=6668):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810) (async)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x4b}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5d, 0x7fff}, 0x14) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5d, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x2, 0xa, 0x352a1fe11731a0db}, @ringbuf_query]}, &(0x7f00000000c0)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000003800)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x27293, 0xffffffffffffffff, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=[{0x3, 0x1, 0x3, 0x9}, {0x0, 0x1, 0xf, 0x8}, {0x3, 0x2000003, 0x5, 0xa}, {0x0, 0x3, 0xa, 0x9}], 0x10, 0x8}, 0x94)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000580)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000", @ANYRESOCT=r8, @ANYRES8=r6, @ANYRES32=r9, @ANYRES8=r8], 0xfd45}}, 0x84)
write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) (async)
write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3) (async)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)

kernel console output (not intermixed with test programs):

004][ T2326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.106164][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.186867][ T2337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3865'.
[  680.087871][ T2360] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  680.898324][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.903321][ T5859] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  680.908543][ T2382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.788227][ T2402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.791891][ T2402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.796142][ T2402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.799556][ T2402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.802833][ T2402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.832954][ T2452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  683.549993][ T2492] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  683.624287][ T2485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  683.753519][ T2521] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  683.757140][ T2521] netlink: 364 bytes leftover after parsing attributes in process `syz.0.3889'.
[  683.760454][ T2521] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  683.876387][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'.
[  683.935672][T22153] net_ratelimit: 1019 callbacks suppressed
[  683.935690][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.106706][T25221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.098716][ T2654] can: request_module (can-proto-0) failed.
[  686.133953][ T2658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  686.136710][ T2658] IPv6: NLM_F_CREATE should be set when creating new route
[  686.139324][ T2658] IPv6: NLM_F_CREATE should be set when creating new route
[  686.141855][ T2658] IPv6: NLM_F_CREATE should be set when creating new route
[  686.247492][ T2666] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  686.787028][ T2658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  686.833486][ T2677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  686.910658][ T2683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  686.919850][ T2696] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  686.977389][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.003250][ T2713] netlink: zone id is out of range
[  687.005992][ T2713] netlink: zone id is out of range
[  687.008378][ T2713] netlink: zone id is out of range
[  687.019496][ T2713] netlink: zone id is out of range
[  687.021915][ T2726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.023593][ T2713] netlink: zone id is out of range
[  687.025118][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.085094][ T2725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  687.093391][ T2722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  687.205005][ T2742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3918'.
[  687.448181][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.451573][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.455357][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  688.077362][ T2781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3922'.
[  688.275797][ T2809] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3923'.
[  688.911199][ T2791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3923'.
[  689.084028][ T2839] netlink: 'syz.0.3927': attribute type 1 has an invalid length.
[  689.152471][ T2853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3930'.
[  689.855484][ T1145] net_ratelimit: 8 callbacks suppressed
[  689.855496][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.015040][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.094986][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.098974][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.102773][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.106278][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.857133][ T2971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3942'.
[  691.866094][ T2971] netlink: 'syz.0.3942': attribute type 29 has an invalid length.
[  691.882556][ T2972] netlink: 'syz.2.3943': attribute type 9 has an invalid length.
[  692.000261][ T2978] syzkaller0: entered promiscuous mode
[  692.003851][ T2978] syzkaller0: entered allmulticast mode
[  692.081673][ T2994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  692.129785][ T2998] netlink: 'syz.2.3947': attribute type 29 has an invalid length.
[  692.133419][ T2998] netlink: 'syz.2.3947': attribute type 29 has an invalid length.
[  692.137097][ T2998] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3947'.
[  692.250368][ T3008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3949'.
[  692.417031][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.562744][ T3044] netlink: 'syz.0.3954': attribute type 29 has an invalid length.
[  692.566677][ T3044] netlink: 'syz.0.3954': attribute type 29 has an invalid length.
[  692.570132][ T3044] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3954'.
[  693.065491][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.513660][ T3068] netlink: 12028 bytes leftover after parsing attributes in process `syz.2.3958'.
[  693.613484][ T3084] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3961'.
[  693.672127][ T3085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  693.676693][ T3084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  694.530666][ T3127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3966'.
[  694.542531][ T3130] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  694.692361][ T3164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3971'.
[  694.975350][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 120 seconds
[  694.980042][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 120 seconds
[  694.984483][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 120 seconds
[  694.989039][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 120 seconds
[  695.479094][ T3179] netlink: 'syz.0.3973': attribute type 29 has an invalid length.
[  695.487106][ T3179] netlink: 'syz.0.3973': attribute type 29 has an invalid length.
[  695.490466][ T3179] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3973'.
[  695.620406][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.660033][ T3202] netlink: 'syz.1.3972': attribute type 101 has an invalid length.
[  695.673629][ T3202] netlink: 'syz.1.3972': attribute type 7 has an invalid length.
[  695.721314][ T3194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'.
[  695.822443][ T3211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3978'.
[  695.844445][ T3215] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3980'.
[  696.030472][ T3232] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3979'.
[  696.095073][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.176404][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.808599][ T3232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  699.110010][T27330] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  699.138150][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.141496][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.153689][ T1271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.157434][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.852211][ T3305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3990'.
[  700.000228][ T3332] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  700.213381][ T3344] lo speed is unknown, defaulting to 1000
[  701.110270][ T3386] workqueue: Failed to create a rescuer kthread for wq "nfc12_nci_cmd_wq": -EINTR
[  701.375715][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.177651][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.471220][ T3446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  703.616310][ T3490] sctp: [Deprecated]: syz.2.4009 (pid 3490) Use of struct sctp_assoc_value in delayed_ack socket option.
[  703.616310][ T3490] Use struct sctp_sack_info instead
[  703.935791][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.215244][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.234025][ T3529] netlink: 'syz.1.4015': attribute type 1 has an invalid length.
[  705.237503][ T3529] netlink: 'syz.1.4015': attribute type 4 has an invalid length.
[  705.240307][ T3529] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4015'.
[  705.245964][ T3529] NCSI netlink: No device for ifindex 3321692160
[  705.413145][ T3551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  705.417918][ T3552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  705.595429][ T3577] netlink: 12028 bytes leftover after parsing attributes in process `syz.0.4021'.
[  705.639151][ T3577] hsr_slave_1 (unregistering): left promiscuous mode
[  706.235997][ T3607] netlink: 'syz.2.4025': attribute type 12 has an invalid length.
[  707.135290][T30348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.610770][ T3658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4035'.
[  707.616174][ T3658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4035'.
[  707.621860][ T3658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4035'.
[  707.626323][ T3658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4035'.
[  707.752786][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4036'.
[  708.265155][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.365158][ T3648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  708.463856][ T3677] netlink: 'syz.0.4037': attribute type 1 has an invalid length.
[  708.469871][ T3677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4037'.
[  708.734871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.065623][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.382714][ T3705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.385984][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.397342][ T5859] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  709.405423][ T3709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4041'.
[  711.309627][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.496954][ T3780] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  712.538382][ T3817] mac80211_hwsim hwsim5 ;: renamed from wlan0 (while UP)
[  712.590321][ T3821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  712.737404][ T5859] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  712.897199][T30348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.429213][ T3876] netlink: 'syz.0.4064': attribute type 15 has an invalid length.
[  714.105134][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.264087][ T3915] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  714.336682][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.148942][ T3961] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4075'.
[  716.022491][ T3982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4078'.
[  716.056752][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'.
[  716.185442][ T3996] netlink: 'syz.0.4079': attribute type 1 has an invalid length.
[  716.427490][ T4000] syzkaller1: entered allmulticast mode
[  716.849818][ T3984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4079'.
[  716.936330][ T4009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4082'.
[  716.940157][ T4009] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4082'.
[  716.953480][ T4009] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  716.958829][ T4009] gretap2: entered promiscuous mode
[  716.961744][ T4009] gretap2: entered allmulticast mode
[  717.374788][T22153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.811057][ T4036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'.
[  717.825778][ T4041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4085'.
[  717.833717][ T4046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4086'.
[  717.837902][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4086'.
[  717.988038][ T4054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  718.025700][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.508965][ T4212] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  720.644180][ T4219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  720.759005][T20250] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  721.608610][ T4263] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  721.612135][ T4263] __nla_validate_parse: 3 callbacks suppressed
[  721.612146][ T4263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4118'.
[  721.621363][ T4256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  721.622039][ T4263] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4118'.
[  721.739719][T27330] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  722.548035][ T4316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'.
[  722.610695][ T4327] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  724.368528][ T4393] netlink: 'syz.1.4134': attribute type 1 has an invalid length.
[  724.385237][ T4393] netlink: 'syz.1.4134': attribute type 2 has an invalid length.
[  724.395561][ T4393] netlink: 'syz.1.4134': attribute type 1 has an invalid length.
[  724.398239][ T4393] netlink: 'syz.1.4134': attribute type 2 has an invalid length.
[  724.455754][ T5892] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  725.055711][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 150 seconds
[  725.059410][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 150 seconds
[  725.063582][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 150 seconds
[  725.067568][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 150 seconds
[  726.093841][ T4426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  726.201651][ T4465] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  726.203734][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4145'.
[  726.223160][ T4467] 8021q: adding VLAN 0 to HW filter on device bond4
[  726.232705][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4145'.
[  726.431819][ T4490] syzkaller0: entered promiscuous mode
[  726.434331][ T4490] syzkaller0: entered allmulticast mode
[  726.508491][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4149'.
[  726.511911][ T4491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4149'.
[  727.288898][ T4507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4153'.
[  727.399739][ T4503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  727.403914][ T4502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  727.549763][ T4518] netlink: 'syz.2.4154': attribute type 4 has an invalid length.
[  727.561030][ T4518] netlink: 'syz.2.4154': attribute type 4 has an invalid length.
[  727.568875][ T1271] lo speed is unknown, defaulting to 1000
[  727.571061][ T1271] syz2: Port: 1 Link ACTIVE
[  729.479516][ T5892] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  730.411153][ T4625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  730.473061][ T4619] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4169'.
[  730.709865][ T4651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  730.714467][ T4650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  731.528390][ T4687] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  731.654737][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  732.450726][ T4715] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  732.636689][ T4738] syzkaller1: entered promiscuous mode
[  732.641979][ T4738] syzkaller1: entered allmulticast mode
[  734.387401][ T4792] tipc: Started in network mode
[  734.389114][ T4792] tipc: Node identity , cluster identity 4711
[  734.391678][ T4792] tipc: Failed to obtain node identity
[  734.393711][ T4792] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  734.546562][ T4811] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  734.672907][ T4827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4200'.
[  735.636999][ T4872] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  735.640905][ T4872] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  735.645942][ T4872] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4207'.
[  735.823576][ T4882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4208'.
[  735.843224][ T4882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4208'.
[  736.882061][ T4926] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  736.996954][ T4938] syzkaller0: entered promiscuous mode
[  737.002372][ T4938] syzkaller0: entered allmulticast mode
[  737.159068][ T4945] netlink: 'syz.1.4217': attribute type 32 has an invalid length.
[  737.162289][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'.
[  737.167188][ T4945] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  737.170648][ T4945] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  739.637073][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4225'.
[  739.857545][ T5024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  739.873646][ T5024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4230'.
[  739.933479][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x25
[  741.102904][ T5076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  741.390134][ T5112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  741.390351][ T5118] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  742.290713][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'.
[  742.298196][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'.
[  742.298530][ T5170] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  742.301582][ T5171] netlink: 'syz.0.4251': attribute type 5 has an invalid length.
[  742.316012][ T5171] netlink: 'syz.0.4251': attribute type 6 has an invalid length.
[  742.353889][ T5892] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  743.134353][ T5189] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4254'.
[  744.470785][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4266'.
[  744.475239][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4266'.
[  744.712384][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4267'.
[  744.716558][ T5311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4267'.
[  744.722337][ T5318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'.
[  745.690580][ T5363] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  745.812808][ T5385] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  745.970608][ T5415] netlink: 'syz.0.4283': attribute type 5 has an invalid length.
[  746.065558][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  746.989521][ T5892] nci: nci_rsp_packet: unknown rsp opcode 0x3
[  747.045249][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4290'.
[  747.049151][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4290'.
[  747.147293][ T5474] warn_alloc: 1 callbacks suppressed
[  747.147305][ T5474] syz.1.4290: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  747.156055][ T5474] CPU: 1 UID: 0 PID: 5474 Comm: syz.1.4290 Not tainted syzkaller #0 PREEMPT(full) 
[  747.156066][ T5474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  747.156071][ T5474] Call Trace:
[  747.156075][ T5474]  <TASK>
[  747.156078][ T5474]  dump_stack_lvl+0x189/0x250
[  747.156093][ T5474]  ? __pfx_dump_stack_lvl+0x10/0x10
[  747.156102][ T5474]  ? __pfx__printk+0x10/0x10
[  747.156113][ T5474]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  747.156122][ T5474]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  747.156131][ T5474]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  747.156140][ T5474]  warn_alloc+0x214/0x310
[  747.156155][ T5474]  ? __pfx_warn_alloc+0x10/0x10
[  747.156170][ T5474]  ? __get_vm_area_node+0x28f/0x300
[  747.156181][ T5474]  ? xskq_create+0xbf/0x170
[  747.156191][ T5474]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  747.156213][ T5474]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  747.156224][ T5474]  ? preempt_schedule_thunk+0x16/0x30
[  747.156236][ T5474]  ? __kasan_kmalloc+0x93/0xb0
[  747.156248][ T5474]  vmalloc_user_noprof+0xad/0xf0
[  747.156259][ T5474]  ? xskq_create+0xbf/0x170
[  747.156266][ T5474]  xskq_create+0xbf/0x170
[  747.156274][ T5474]  xsk_init_queue+0xb0/0x110
[  747.156299][ T5474]  xsk_setsockopt+0x57b/0x8d0
[  747.156312][ T5474]  ? __pfx_xsk_setsockopt+0x10/0x10
[  747.156323][ T5474]  ? __pfx_aa_sk_perm+0x10/0x10
[  747.156335][ T5474]  ? __fget_files+0x2a/0x420
[  747.156341][ T5474]  ? aa_sock_opt_perm+0xff/0x1b0
[  747.156350][ T5474]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  747.156360][ T5474]  ? __pfx_xsk_setsockopt+0x10/0x10
[  747.156371][ T5474]  do_sock_setsockopt+0x17c/0x1b0
[  747.156383][ T5474]  __x64_sys_setsockopt+0x13f/0x1b0
[  747.156394][ T5474]  do_syscall_64+0xfa/0x3b0
[  747.156402][ T5474]  ? lockdep_hardirqs_on+0x9c/0x150
[  747.156409][ T5474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.156416][ T5474]  ? exc_page_fault+0x9f/0xf0
[  747.156424][ T5474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.156431][ T5474] RIP: 0033:0x7f896538ec29
[  747.156439][ T5474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  747.156446][ T5474] RSP: 002b:00007f8966195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  747.156454][ T5474] RAX: ffffffffffffffda RBX: 00007f89655d6090 RCX: 00007f896538ec29
[  747.156459][ T5474] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  747.156463][ T5474] RBP: 00007f8965411e41 R08: 0000000000000004 R09: 0000000000000000
[  747.156468][ T5474] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  747.156472][ T5474] R13: 00007f89655d6128 R14: 00007f89655d6090 R15: 00007ffd665a3078
[  747.156484][ T5474]  </TASK>
[  747.156568][ T5474] Mem-Info:
[  747.247205][ T5474] active_anon:17821 inactive_anon:0 isolated_anon:0
[  747.247205][ T5474]  active_file:1617 inactive_file:38504 isolated_file:0
[  747.247205][ T5474]  unevictable:1768 dirty:42 writeback:0
[  747.247205][ T5474]  slab_reclaimable:10173 slab_unreclaimable:68900
[  747.247205][ T5474]  mapped:18396 shmem:2443 pagetables:1155
[  747.247205][ T5474]  sec_pagetables:0 bounce:0
[  747.247205][ T5474]  kernel_misc_reclaimable:0
[  747.247205][ T5474]  free:267929 free_pcp:18416 free_cma:0
[  747.261615][ T5474] Node 0 active_anon:36544kB inactive_anon:0kB active_file:2732kB inactive_file:10964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26608kB dirty:112kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3956kB pagetables:1864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  747.272245][ T5474] Node 1 active_anon:34740kB inactive_anon:0kB active_file:3736kB inactive_file:143052kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46976kB dirty:56kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8084kB pagetables:2756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  747.283134][ T5474] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  747.292763][ T5474] lowmem_reserve[]: 0 811 811 811 811
[  747.294946][ T5474] Node 0 DMA32 free:356328kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36544kB inactive_anon:0kB active_file:2732kB inactive_file:10964kB unevictable:3536kB writepending:112kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:29776kB local_pcp:14328kB free_cma:0kB
[  747.305656][ T5474] lowmem_reserve[]: 0 0 0 0 0
[  747.307303][ T5474] Node 1 DMA32 free:446540kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:9944kB local_pcp:9944kB free_cma:0kB
[  747.318020][ T5474] lowmem_reserve[]: 0 0 854 854 854
[  747.319752][ T5474] Node 1 Normal free:253488kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34740kB inactive_anon:0kB active_file:3736kB inactive_file:143044kB unevictable:3536kB writepending:56kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33944kB local_pcp:17728kB free_cma:0kB
[  747.329925][ T5474] lowmem_reserve[]: 0 0 0 0 0
[  747.331498][ T5474] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  747.336144][ T5474] Node 0 DMA32: 382*4kB (UM) 496*8kB (UM) 349*16kB (UM) 66*32kB (UM) 90*64kB (UME) 86*128kB (UM) 55*256kB (UM) 16*512kB (UME) 13*1024kB (UME) 12*2048kB (U) 65*4096kB (UM) = 356360kB
[  747.342335][ T5474] Node 1 DMA32: 57*4kB (UM) 21*8kB (UM) 22*16kB (UM) 25*32kB (UM) 25*64kB (UM) 20*128kB (UM) 20*256kB (UM) 19*512kB (UM) 18*1024kB (UM) 7*2048kB (UM) 96*4096kB (UM) = 446540kB
[  747.348102][ T5474] Node 1 Normal: 176*4kB (UME) 482*8kB (UME) 16*16kB (UME) 291*32kB (UME) 242*64kB (UME) 177*128kB (UME) 130*256kB (UM) 118*512kB (UM) 105*1024kB (UM) 0*2048kB 0*4096kB = 253488kB
[  747.354439][ T5474] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  747.357952][ T5474] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  747.361000][ T5474] 42564 total pagecache pages
[  747.362550][ T5474] 0 pages in swap cache
[  747.364003][ T5474] Free swap  = 124996kB
[  747.365444][ T5474] Total swap = 124996kB
[  747.366828][ T5474] 786301 pages RAM
[  747.368060][ T5474] 0 pages HighMem/MovableOnly
[  747.369593][ T5474] 241346 pages reserved
[  747.371291][ T5474] 0 pages cma reserved
[  747.830010][ T5508] Dead loop on virtual device ip6_vti0, fix it urgently!
[  747.839157][ T5508] Dead loop on virtual device ip6_vti0, fix it urgently!
[  747.843260][ T5508] Dead loop on virtual device ip6_vti0, fix it urgently!
[  747.857567][ T5496] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  748.585911][ T5508] syz.0.4293 (5508) used greatest stack depth: 19416 bytes left
[  748.665245][ T5530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  748.669895][ T5530] syzkaller0: entered promiscuous mode
[  748.681598][ T5530] syzkaller0: entered allmulticast mode
[  748.685750][ T5530] tipc: Resetting bearer <eth:syzkaller0>
[  749.478094][ T5528] tipc: Resetting bearer <eth:syzkaller0>
[  749.529177][ T5528] tipc: Disabling bearer <eth:syzkaller0>
[  749.572585][ T5552] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  751.353352][ T5642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4308'.
[  751.359995][ T5643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4308'.
[  751.420413][ T5642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  751.431610][ T5632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  751.570969][ T5671] veth0: entered promiscuous mode
[  751.606093][ T5671] veth0: left promiscuous mode
[  751.673300][ T5691] netlink: 'syz.2.4315': attribute type 29 has an invalid length.
[  751.677382][ T5691] netlink: 'syz.2.4315': attribute type 29 has an invalid length.
[  751.680798][ T5691] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4315'.
[  751.788207][ T5697] netlink: 'syz.2.4316': attribute type 2 has an invalid length.
[  751.791051][ T5697] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4316'.
[  753.476732][ T5751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4326'.
[  753.655214][ T5778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4327'.
[  753.890607][ T5780] lo speed is unknown, defaulting to 1000
[  754.054942][ T5828] netlink: 'syz.0.4339': attribute type 4 has an invalid length.
[  754.057811][ T5828] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4339'.
[  754.092599][ T5825] netlink: 'syz.1.4338': attribute type 1 has an invalid length.
[  754.096080][ T5825] netlink: 'syz.1.4338': attribute type 3 has an invalid length.
[  754.099246][ T5825] netlink: 'syz.1.4338': attribute type 1 has an invalid length.
[  754.101921][ T5825] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4338'.
[  754.105098][ T5825] NCSI netlink: No device for ifindex 0
[  754.894104][ T5828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  754.925463][ T5851] netlink: 'syz.0.4341': attribute type 29 has an invalid length.
[  754.931210][ T5851] netlink: 'syz.0.4341': attribute type 29 has an invalid length.
[  754.937584][ T5851] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4341'.
[  754.994071][ T5885] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  755.042063][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4345'.
[  755.058907][ T5855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4342'.
[  755.135034][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 180 seconds
[  755.139469][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 180 seconds
[  755.144017][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 180 seconds
[  755.148778][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 180 seconds
[  755.937458][ T5931] netlink: 'syz.1.4350': attribute type 29 has an invalid length.
[  755.942027][ T5931] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4350'.
[  756.865433][ T5967] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  757.995485][ T6043] xfrm0: entered allmulticast mode
[  758.038515][ T6046] netlink: 12028 bytes leftover after parsing attributes in process `syz.0.4368'.
[  760.051401][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'.
[  760.054803][ T6158] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  760.095040][ T6163] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4383'.
[  763.652274][ T6290] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  764.636627][ T6328] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  764.713055][ T6344] sctp: [Deprecated]: syz.1.4413 (pid 6344) Use of int in maxseg socket option.
[  764.713055][ T6344] Use struct sctp_assoc_value instead
[  765.014387][ T6370] validate_nla: 1 callbacks suppressed
[  765.014398][ T6370] netlink: 'syz.0.4419': attribute type 2 has an invalid length.
[  765.020390][ T6370] netlink: 'syz.0.4419': attribute type 8 has an invalid length.
[  765.023789][ T6370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4419'.
[  765.776800][ T6398] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  765.790715][ T6405] netlink: 12028 bytes leftover after parsing attributes in process `syz.1.4424'.
[  766.014183][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4428'.
[  766.924350][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4433'.
[  767.929225][ T6510] syzkaller1: entered promiscuous mode
[  767.931111][ T6510] syzkaller1: entered allmulticast mode
[  767.985778][ T6519] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  768.077696][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4442'.
[  768.864252][ T6529] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR
[  769.189269][ T6592] netlink: 'syz.0.4452': attribute type 29 has an invalid length.
[  769.201050][ T6592] netlink: 'syz.0.4452': attribute type 29 has an invalid length.
[  769.206245][ T6592] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4452'.
[  769.244390][ T6596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  769.310589][ T6602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  769.322306][ T6611] 8021q: VLANs not supported on sit0
[  769.416257][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  769.418777][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.422649][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  769.425448][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1
[  770.189528][ T6639] netlink: 'syz.2.4460': attribute type 29 has an invalid length.
[  770.192711][ T6639] netlink: 'syz.2.4460': attribute type 29 has an invalid length.
[  770.195834][ T6639] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4460'.
[  770.374330][ T6668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4464'.
[  770.377571][ T6668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4464'.
[  770.383317][ T6668] netlink: 'syz.1.4464': attribute type 4 has an invalid length.
[  770.398119][ T6668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4464'.
[  770.441409][ T6670] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4465'.
[  770.535725][ T6674] netlink: 'syz.2.4468': attribute type 29 has an invalid length.
[  770.547088][ T6674] netlink: 'syz.2.4468': attribute type 29 has an invalid length.
[  771.464243][ T6697] __nla_validate_parse: 4 callbacks suppressed
[  771.464258][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'.
[  771.547406][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'.
[  771.670642][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4476'.
[  771.809422][ T6739] lo speed is unknown, defaulting to 1000
[  772.082515][ T5859] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  772.088466][ T6758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  772.089004][ T6775] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  773.052626][ T6831] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  773.060668][ T6831] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  773.163412][ T6848] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  773.260095][ T6855] tun0: tun_chr_ioctl cmd 2148045848
[  773.269876][ T6855] tun0: tun_chr_ioctl cmd 21731
[  773.272011][ T6864] tun0: tun_chr_ioctl cmd 21731
[  774.912348][ T6902] netlink: 'syz.0.4497': attribute type 11 has an invalid length.
[  774.916323][ T6907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  775.890928][ T6954] lo speed is unknown, defaulting to 1000
[  775.893766][ T6942] netlink: 'syz.0.4504': attribute type 29 has an invalid length.
[  775.908055][ T6942] netlink: 'syz.0.4504': attribute type 29 has an invalid length.
[  775.912171][ T6942] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4504'.
[  775.916170][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4504'.
[  775.958526][ T6961] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4507'.
[  776.971001][ T6988] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  776.988371][ T7002] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  777.067844][ T7019] tipc: New replicast peer: 0.0.0.0
[  777.072788][ T7019] tipc: Enabled bearer <udp:syz2>, priority 10
[  777.076302][ T7019] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  777.176928][T27330] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  778.912240][ T7090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4527'.
[  778.956836][ T7087] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  782.573191][ T7220] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4542'.
[  782.581161][ T7220] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4542'.
[  782.736120][ T7228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  782.739260][ T7232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  782.793566][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4546'.
[  782.798703][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4546'.
[  783.729521][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4548'.
[  784.288020][ T7321] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  785.219605][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 210 seconds
[  785.227606][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 210 seconds
[  785.231584][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 210 seconds
[  785.235367][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 210 seconds
[  785.408024][ T7386] netlink: 'syz.1.4561': attribute type 29 has an invalid length.
[  785.416117][ T7386] netlink: 'syz.1.4561': attribute type 29 has an invalid length.
[  786.523086][ T7426] vlan2: entered allmulticast mode
[  786.525533][ T7426] bridge_slave_0: entered allmulticast mode
[  788.567604][ T7493] netlink: 'syz.2.4577': attribute type 1 has an invalid length.
[  788.570563][ T7493] netlink: 'syz.2.4577': attribute type 3 has an invalid length.
[  788.573251][ T7493] netlink: 564 bytes leftover after parsing attributes in process `syz.2.4577'.
[  789.401952][ T7504] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4578'.
[  789.407019][ T7516] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4578'.
[  789.742982][ T7548] netlink: 'syz.0.4584': attribute type 1 has an invalid length.
[  789.748162][ T7548] netlink: 'syz.0.4584': attribute type 3 has an invalid length.
[  789.751599][ T7548] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4584'.
[  790.610036][ T7574] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  790.781553][ T7601] netlink: 'syz.2.4592': attribute type 1 has an invalid length.
[  790.792871][ T7601] netlink: 'syz.2.4592': attribute type 3 has an invalid length.
[  790.796290][ T7601] netlink: 564 bytes leftover after parsing attributes in process `syz.2.4592'.
[  790.819110][ T7596] syzkaller1: entered promiscuous mode
[  790.821591][ T7596] syzkaller1: entered allmulticast mode
[  791.878954][ T7660] netlink: 'syz.0.4599': attribute type 29 has an invalid length.
[  791.882182][ T7660] netlink: 'syz.0.4599': attribute type 29 has an invalid length.
[  791.885827][ T7660] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4599'.
[  791.894286][ T7663] netlink: 'syz.2.4601': attribute type 1 has an invalid length.
[  791.904701][ T7663] netlink: 'syz.2.4601': attribute type 3 has an invalid length.
[  791.911574][ T7663] netlink: 564 bytes leftover after parsing attributes in process `syz.2.4601'.
[  792.956269][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4605'.
[  793.874315][ T7740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  795.628925][ T7811] syzkaller0: tun_chr_ioctl cmd 1074025673
[  795.791035][ T7834] netlink: 'syz.0.4631': attribute type 29 has an invalid length.
[  795.794733][ T7834] netlink: 'syz.0.4631': attribute type 29 has an invalid length.
[  795.798436][ T7834] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4631'.
[  796.860123][ T7892] netlink: 'syz.0.4639': attribute type 29 has an invalid length.
[  796.871276][ T7892] netlink: 'syz.0.4639': attribute type 29 has an invalid length.
[  796.876045][ T7892] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4639'.
[  797.607573][ T7895] netlink: 'syz.1.4640': attribute type 1 has an invalid length.
[  797.610163][ T7895] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4640'.
[  798.708847][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'.
[  798.744505][ T7990] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  799.023716][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4658'.
[  799.799174][ T8053] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  799.848816][ T8065] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  799.860185][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4663'.
[  799.908410][ T8078] bond0: entered promiscuous mode
[  799.978065][ T8085] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  800.633642][ T8070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  801.788366][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4676'.
[  801.791511][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4676'.
[  803.684452][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4685'.
[  803.688651][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4685'.
[  804.466636][ T8235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4689'.
[  807.139817][ T8304] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002
[  807.271223][ T8314] workqueue: Failed to create a rescuer kthread for wq "nfc10_nci_rx_wq": -EINTR
[  808.336596][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4707'.
[  809.049922][ T8406] 8021q: VLANs not supported on lo
[  809.248636][ T8412] netlink: 'syz.1.4713': attribute type 29 has an invalid length.
[  809.257031][ T8412] netlink: 'syz.1.4713': attribute type 29 has an invalid length.
[  809.261413][ T8412] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4713'.
[  809.602764][ T8468] dvmrp1: tun_chr_ioctl cmd 1074025677
[  809.605442][ T8468] dvmrp1: linktype set to 805
[  812.698238][ T8589] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  813.481541][ T8627] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  813.501513][ T8611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  813.506323][ T8625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  813.636678][T27330] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  813.750839][ T8649] xt_l2tp: invalid flags combination: 0
[  813.753080][ T8660] xt_l2tp: invalid flags combination: 0
[  815.295915][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 240 seconds
[  815.300027][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 240 seconds
[  815.305537][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 240 seconds
[  815.315389][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 240 seconds
[  817.190702][ T8768] netlink: 'syz.2.4763': attribute type 9 has an invalid length.
[  817.201822][ T8768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4763'.
[  817.210085][ T8770] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  817.275940][ T8789] netlink: 'syz.2.4767': attribute type 29 has an invalid length.
[  817.282487][ T8789] netlink: 'syz.2.4767': attribute type 29 has an invalid length.
[  817.294986][ T8789] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4767'.
[  817.343813][ T8781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  817.345912][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4766'.
[  817.617553][ T8833] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  817.617796][ T8831] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  817.674201][ T8823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  818.403388][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4778'.
[  818.406855][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4778'.
[  818.431784][ T8865] netlink: 'syz.2.4779': attribute type 29 has an invalid length.
[  818.444219][ T8865] netlink: 'syz.2.4779': attribute type 29 has an invalid length.
[  818.454344][ T8865] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4779'.
[  819.601772][ T8915] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  819.709167][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4789'.
[  819.734783][ T8926] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  819.749307][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  819.760886][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4789'.
[  819.771042][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  819.781164][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  819.796507][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  820.095893][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'.
[  820.099165][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'.
[  820.934076][ T8994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  821.073579][T27330] tipc: Subscription rejected, illegal request
[  822.005556][ T9041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  822.032246][ T9044] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  823.063915][ T9100] __nla_validate_parse: 3 callbacks suppressed
[  823.063927][ T9100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4820'.
[  823.905239][ T9125] netlink: 'syz.0.4823': attribute type 1 has an invalid length.
[  823.914866][ T9125] netlink: 'syz.0.4823': attribute type 3 has an invalid length.
[  823.917438][ T9125] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4823'.
[  824.024239][ T9127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  825.762669][ T9212] netlink: 'syz.0.4835': attribute type 1 has an invalid length.
[  825.767784][ T9212] netlink: 'syz.0.4835': attribute type 3 has an invalid length.
[  825.772250][ T9212] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4835'.
[  825.785263][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'.
[  825.790741][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'.
[  826.119490][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4843'.
[  826.123691][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4843'.
[  826.147519][ T9252] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4842'.
[  826.157707][ T9252] batadv0: entered promiscuous mode
[  826.160060][ T9252] batadv0: entered allmulticast mode
[  826.851069][ T9274] netlink: 'syz.2.4847': attribute type 1 has an invalid length.
[  826.853982][ T9274] netlink: 'syz.2.4847': attribute type 3 has an invalid length.
[  826.857200][ T9274] netlink: 564 bytes leftover after parsing attributes in process `syz.2.4847'.
[  826.858724][ T9260] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  827.824377][ T9301] syzkaller0: entered promiscuous mode
[  827.830507][ T9301] syzkaller0: entered allmulticast mode
[  827.841273][ T9297] bridge5: entered allmulticast mode
[  827.843690][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4852'.
[  828.131180][ T9335] netlink: 'syz.1.4857': attribute type 21 has an invalid length.
[  828.141673][ T9335] __nla_validate_parse: 1 callbacks suppressed
[  828.141684][ T9335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4857'.
[  829.230999][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4861'.
[  830.317978][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4868'.
[  830.321411][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4868'.
[  831.372541][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4880'.
[  831.378109][ T9478] netlink: 'syz.0.4880': attribute type 1 has an invalid length.
[  831.380938][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4880'.
[  831.622178][ T9505] netlink: 'syz.0.4880': attribute type 2 has an invalid length.
[  831.642679][ T9501] netlink: 'syz.2.4887': attribute type 2 has an invalid length.
[  832.198256][ T9509] netlink: 'syz.1.4888': attribute type 1 has an invalid length.
[  832.200822][ T9509] netlink: 'syz.1.4888': attribute type 3 has an invalid length.
[  832.203341][ T9509] netlink: 564 bytes leftover after parsing attributes in process `syz.1.4888'.
[  832.311653][ T9526] netlink: 'syz.1.4892': attribute type 1 has an invalid length.
[  832.323705][ T9526] netlink: 'syz.1.4892': attribute type 3 has an invalid length.
[  832.333175][ T9526] netlink: 564 bytes leftover after parsing attributes in process `syz.1.4892'.
[  832.515425][ T9543] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4895'.
[  832.519557][ T9543] netlink: 'syz.1.4895': attribute type 21 has an invalid length.
[  833.360039][ T9579] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  833.378498][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'.
[  833.567253][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4904'.
[  833.637909][ T9600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  833.821987][ T9630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  833.827533][T27330] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  835.591779][ T9694] syzkaller1: entered promiscuous mode
[  835.594010][ T9694] syzkaller1: entered allmulticast mode
[  835.634267][ T9704] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4913'.
[  835.692385][ T9690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  835.786983][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4917'.
[  835.790480][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4917'.
[  835.928087][ T9741] netlink: 'syz.0.4921': attribute type 17 has an invalid length.
[  836.972027][ T9787] syzkaller1: entered promiscuous mode
[  836.973899][ T9787] syzkaller1: entered allmulticast mode
[  837.101032][ T9804] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  838.020971][ T9834] netlink: 'syz.1.4935': attribute type 29 has an invalid length.
[  838.027992][ T9834] netlink: 'syz.1.4935': attribute type 29 has an invalid length.
[  838.032420][ T9834] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4935'.
[  838.961239][ T9859] @: renamed from veth0_vlan
[  839.662356][ T9857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  839.793040][ T9889] netlink: 'syz.1.4942': attribute type 29 has an invalid length.
[  839.803951][ T9889] netlink: 'syz.1.4942': attribute type 29 has an invalid length.
[  839.816741][ T9889] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4942'.
[  840.812527][ T9929] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  841.043799][ T9959] netlink: 'syz.0.4953': attribute type 29 has an invalid length.
[  841.052352][ T9959] netlink: 'syz.0.4953': attribute type 29 has an invalid length.
[  841.065365][ T9959] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4953'.
[  841.244375][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4959'.
[  842.245794][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4964'.
[  843.050107][T10037] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  843.102553][T10048] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  843.270503][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4971'.
[  844.512864][T10155] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4981'.
[  844.516639][T10155] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  845.380973][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 270 seconds
[  845.385816][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 270 seconds
[  845.389533][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 270 seconds
[  845.393426][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 270 seconds
[  846.253386][T10205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  846.550415][T10243] 8021q: VLANs not supported on ip6tnl0
[  848.027302][T10271] netlink: 'syz.0.4999': attribute type 4 has an invalid length.
[  848.030583][T10271] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4999'.
[  848.088248][T10264] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  850.099636][T10360] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  850.161764][T10358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  850.169335][T10359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  850.212448][T10369] lo speed is unknown, defaulting to 1000
[  850.253749][T10382] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  850.350527][T10401] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  851.139141][T10417] netlink: 'syz.2.5019': attribute type 29 has an invalid length.
[  851.149459][T10417] netlink: 'syz.2.5019': attribute type 29 has an invalid length.
[  851.152745][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5020'.
[  851.159485][T10417] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5019'.
[  852.154226][T27330] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  854.489755][T10579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5046'.
[  854.497712][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5046'.
[  855.338342][T10600] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  856.364363][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5056'.
[  856.539764][T10663] syzkaller0: entered promiscuous mode
[  856.541758][T10663] syzkaller0: entered allmulticast mode
[  856.552835][T10663] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5058'.
[  857.376627][T10680] netlink: 'syz.2.5065': attribute type 29 has an invalid length.
[  857.379737][T10680] netlink: 'syz.2.5065': attribute type 29 has an invalid length.
[  857.384200][T10680] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5065'.
[  857.481819][T10691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5066'.
[  859.978450][T10752] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  860.120611][T10764] lo speed is unknown, defaulting to 1000
[  860.996780][T10814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  861.000523][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5082'.
[  861.123938][T10836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  861.136043][T10844] netlink: 'syz.1.5087': attribute type 1 has an invalid length.
[  861.437933][T10856] netlink: 'syz.0.5088': attribute type 10 has an invalid length.
[  861.656671][T10891] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  862.478257][T10911] pim6reg1: entered promiscuous mode
[  862.496156][T10911] pim6reg1: entered allmulticast mode
[  862.563732][T10925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  862.576341][T10925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  862.596488][T10918] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  862.717280][T10938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5100'.
[  862.819824][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5101'.
[  863.758603][T10978] netlink: 'syz.0.5106': attribute type 1 has an invalid length.
[  863.767242][T10978] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5106'.
[  863.775283][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5106'.
[  864.726928][T11013] netlink: 'syz.1.5110': attribute type 29 has an invalid length.
[  864.730029][T11013] netlink: 'syz.1.5110': attribute type 29 has an invalid length.
[  864.732158][T11015] netlink: 'syz.0.5111': attribute type 1 has an invalid length.
[  864.732934][T11013] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5110'.
[  864.775178][T11015] bond4: (slave geneve2): making interface the new active one
[  864.779181][T11015] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  864.782933][T27330] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  864.791659][T27330] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  864.794453][T27330] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  864.817691][T27330] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  864.865743][T27330] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  865.555497][T11014] delete_channel: no stack
[  866.816845][T27330] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  867.747501][T11122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  867.756252][T11121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  867.777862][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'.
[  867.781937][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5129'.
[  867.786833][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'.
[  867.790087][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5129'.
[  867.913689][T11143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  867.920979][T11142] tipc: Resetting bearer <eth:syzkaller0>
[  867.971712][T11154] netlink: 'syz.0.5133': attribute type 1 has an invalid length.
[  867.976701][T11154] netlink: 600 bytes leftover after parsing attributes in process `syz.0.5133'.
[  868.949463][T11142] tipc: Disabling bearer <eth:syzkaller0>
[  869.010617][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5135'.
[  869.041445][T11170] xt_policy: too many policy elements
[  869.051448][T11175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  870.002385][T11212] netlink: 'syz.2.5142': attribute type 29 has an invalid length.
[  870.006133][T11212] netlink: 'syz.2.5142': attribute type 29 has an invalid length.
[  870.010648][T11212] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5142'.
[  870.060977][T11207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  870.066012][T11213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  870.326809][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5146'.
[  870.879779][T11243] netlink: 'syz.0.5146': attribute type 1 has an invalid length.
[  870.882925][T11243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5146'.
[  871.091879][T20250] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  871.131867][T11280] syzkaller0: entered promiscuous mode
[  871.133867][T11280] syzkaller0: entered allmulticast mode
[  872.156478][T11310] netlink: 336 bytes leftover after parsing attributes in process `syz.0.5155'.
[  872.896951][T11318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  872.900131][T11331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  872.905253][T11330] netlink: 'syz.1.5156': attribute type 2 has an invalid length.
[  872.907964][T11330] __nla_validate_parse: 1 callbacks suppressed
[  872.907972][T11330] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5156'.
[  872.913449][T11330] nbd: must specify a device to reconfigure
[  872.992047][T11343] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  872.992340][T11333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  874.171097][T11398] lo speed is unknown, defaulting to 1000
[  874.222934][T11403] syzkaller1: entered promiscuous mode
[  874.226711][T11403] syzkaller1: entered allmulticast mode
[  874.241869][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5172'.
[  874.286272][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5173'.
[  875.264369][T11430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  875.296428][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5177'.
[  875.299920][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5177'.
[  875.457135][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 300 seconds
[  875.461177][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 300 seconds
[  875.464861][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 300 seconds
[  875.468389][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 300 seconds
[  875.562932][T11468] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  875.723716][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5186'.
[  875.732652][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5186'.
[  875.736205][T11503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5184'.
[  875.839294][T11516] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  875.897742][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5191'.
[  875.986018][T11524] block nbd3: server does not support multiple connections per device.
[  875.989494][T11524] block nbd3: shutting down sockets
[  876.099840][T11552] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  876.100524][T11537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  877.680739][T11592] netlink: 'syz.0.5198': attribute type 29 has an invalid length.
[  877.693114][T11592] netlink: 'syz.0.5198': attribute type 29 has an invalid length.
[  877.699040][T11592] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5198'.
[  877.912814][T11627] IPv6: sit1: Disabled Multicast RS
[  878.836764][T11650] netlink: 'syz.0.5207': attribute type 1 has an invalid length.
[  878.840016][T11650] netlink: 'syz.0.5207': attribute type 3 has an invalid length.
[  878.843671][T11650] __nla_validate_parse: 1 callbacks suppressed
[  878.843685][T11650] netlink: 564 bytes leftover after parsing attributes in process `syz.0.5207'.
[  880.501361][T11696] netlink: 'syz.0.5214': attribute type 13 has an invalid length.
[  880.565936][T11703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5214'.
[  880.641711][T11710] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  880.717108][T11729] netlink: 'syz.0.5219': attribute type 1 has an invalid length.
[  880.756789][T11729] 8021q: adding VLAN 0 to HW filter on device bond5
[  880.776624][T11729] GUP no longer grows the stack in syz.0.5219 (11729): 200000003000-20000000a000 (200000001000)
[  880.780485][T11729] CPU: 1 UID: 0 PID: 11729 Comm: syz.0.5219 Not tainted syzkaller #0 PREEMPT(full) 
[  880.780499][T11729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  880.780503][T11729] Call Trace:
[  880.780508][T11729]  <TASK>
[  880.780513][T11729]  dump_stack_lvl+0x189/0x250
[  880.780529][T11729]  ? __pfx_dump_stack_lvl+0x10/0x10
[  880.780539][T11729]  ? __pfx__printk+0x10/0x10
[  880.780549][T11729]  ? find_vma+0xe7/0x160
[  880.780560][T11729]  ? __lock_acquire+0xab9/0xd20
[  880.780576][T11729]  __get_user_pages+0x24d0/0x2ce0
[  880.780587][T11729]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  880.780607][T11729]  ? rcu_is_watching+0x15/0xb0
[  880.780617][T11729]  __gup_longterm_locked+0xde9/0x1660
[  880.780633][T11729]  ? sanity_check_pinned_pages+0x123a/0x1300
[  880.780645][T11729]  gup_fast_fallback+0x1e6a/0x2010
[  880.780685][T11729]  ? __pfx_gup_fast_fallback+0x10/0x10
[  880.780696][T11729]  ? stack_trace_save+0x9c/0xe0
[  880.780704][T11729]  ? __pfx_stack_trace_save+0x10/0x10
[  880.780718][T11729]  ? pin_user_pages_fast+0x4d/0xb0
[  880.780729][T11729]  iov_iter_extract_pages+0x35a/0x5e0
[  880.780743][T11729]  extract_iter_to_sg+0xe46/0x24e0
[  880.780757][T11729]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  880.780774][T11729]  ? __asan_memset+0x22/0x50
[  880.780784][T11729]  af_alg_get_rsgl+0x436/0x810
[  880.780803][T11729]  aead_recvmsg+0x4cc/0x13f0
[  880.780820][T11729]  ? __pfx_aead_recvmsg+0x10/0x10
[  880.780828][T11729]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  880.780837][T11729]  ? __pfx_aead_recvmsg+0x10/0x10
[  880.780845][T11729]  sock_recvmsg_nosec+0x186/0x1c0
[  880.780860][T11729]  ____sys_recvmsg+0x3aa/0x460
[  880.780874][T11729]  ? __pfx_____sys_recvmsg+0x10/0x10
[  880.780890][T11729]  ? import_iovec+0x74/0xa0
[  880.780901][T11729]  ___sys_recvmsg+0x1b5/0x510
[  880.780913][T11729]  ? __pfx____sys_recvmsg+0x10/0x10
[  880.780936][T11729]  ? __might_fault+0xb0/0x130
[  880.780948][T11729]  do_recvmmsg+0x307/0x770
[  880.780961][T11729]  ? __pfx_do_recvmmsg+0x10/0x10
[  880.780970][T11729]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  880.780987][T11729]  ? __pfx_do_futex+0x10/0x10
[  880.781003][T11729]  __x64_sys_recvmmsg+0x190/0x240
[  880.781015][T11729]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  880.781024][T11729]  ? rcu_is_watching+0x15/0xb0
[  880.781033][T11729]  ? do_syscall_64+0xbe/0x3b0
[  880.781044][T11729]  do_syscall_64+0xfa/0x3b0
[  880.781051][T11729]  ? lockdep_hardirqs_on+0x9c/0x150
[  880.781058][T11729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.781066][T11729]  ? exc_page_fault+0x9f/0xf0
[  880.781074][T11729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.781081][T11729] RIP: 0033:0x7f8d9f38ec29
[  880.781089][T11729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  880.781096][T11729] RSP: 002b:00007f8da01ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  880.781106][T11729] RAX: ffffffffffffffda RBX: 00007f8d9f5d5fa0 RCX: 00007f8d9f38ec29
[  880.781111][T11729] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000d
[  880.781116][T11729] RBP: 00007f8d9f411e41 R08: 0000000000000000 R09: 0000000000000000
[  880.781120][T11729] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  880.781124][T11729] R13: 00007f8d9f5d6038 R14: 00007f8d9f5d5fa0 R15: 00007ffd9d1d1788
[  880.781137][T11729]  </TASK>
[  880.933275][T11729] bond5: (slave gretap3): making interface the new active one
[  880.936457][T11729] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  881.032502][T11761] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  881.191871][T11753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  881.192037][T11773] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  881.254346][T11789] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  881.299065][T11797] netlink: 'syz.1.5228': attribute type 29 has an invalid length.
[  881.312157][T11797] netlink: 'syz.1.5228': attribute type 29 has an invalid length.
[  881.328022][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5227'.
[  881.331885][T11797] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5228'.
[  881.363271][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5230'.
[  882.200963][T11823] sctp: [Deprecated]: syz.2.5233 (pid 11823) Use of struct sctp_assoc_value in delayed_ack socket option.
[  882.200963][T11823] Use struct sctp_sack_info instead
[  882.323492][T11821] syzkaller1: entered promiscuous mode
[  882.327995][T11821] syzkaller1: entered allmulticast mode
[  884.087759][T11892] xt_limit: Overflow, try lower: 604147548/4200216962
[  884.109663][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  886.058547][T11962] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  887.012809][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5258'.
[  887.937181][T12038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5263'.
[  888.061238][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5265'.
[  889.742544][T12087] lo speed is unknown, defaulting to 1000
[  889.820186][T12112] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  890.772696][T12153] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  892.479017][T12194] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  892.509909][T12197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  892.679326][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5289'.
[  892.787820][T12243] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  892.843449][T12248] netlink: 'syz.2.5292': attribute type 29 has an invalid length.
[  892.856307][T12248] netlink: 'syz.2.5292': attribute type 29 has an invalid length.
[  892.861113][T12248] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5292'.
[  893.801952][T12284] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  893.858382][T12285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  893.858495][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  893.861842][T12297] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  893.909642][T12306] netlink: 'syz.0.5301': attribute type 29 has an invalid length.
[  893.927625][T12306] netlink: 'syz.0.5301': attribute type 29 has an invalid length.
[  893.931019][T12306] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5301'.
[  893.941161][T12308] sctp: [Deprecated]: syz.1.5297 (pid 12308) Use of struct sctp_assoc_value in delayed_ack socket option.
[  893.941161][T12308] Use struct sctp_sack_info instead
[  894.681703][T12321] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5305'.
[  895.758705][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5310'.
[  895.923266][T12365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  896.052473][T12400] netlink: 'syz.1.5315': attribute type 29 has an invalid length.
[  896.069886][T12400] netlink: 'syz.1.5315': attribute type 29 has an invalid length.
[  896.079050][T12400] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5315'.
[  896.261045][T12405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  896.489104][T12421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  896.605563][T12428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  896.993905][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5327'.
[  896.997518][T12480] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  897.000760][T12480] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  897.780761][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  898.534280][T12506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5333'.
[  899.439399][T12528] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  899.518386][T12533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  899.706308][T12565] netlink: 'syz.1.5340': attribute type 4 has an invalid length.
[  899.778061][T12590] netlink: 'syz.0.5342': attribute type 11 has an invalid length.
[  902.655682][T12709] netlink: 'syz.1.5355': attribute type 1 has an invalid length.
[  902.696180][T12709] 8021q: adding VLAN 0 to HW filter on device bond6
[  902.705268][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5355'.
[  902.708983][T12711] sctp: [Deprecated]: syz.0.5356 (pid 12711) Use of struct sctp_assoc_value in delayed_ack socket option.
[  902.708983][T12711] Use struct sctp_sack_info instead
[  902.709175][T12696] sctp: [Deprecated]: syz.0.5356 (pid 12696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  902.709175][T12696] Use struct sctp_sack_info instead
[  902.730658][T12691] bond6: (slave geneve2): making interface the new active one
[  902.734112][T12691] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  902.914222][T12735] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  902.920869][T12734] lo speed is unknown, defaulting to 1000
[  903.689639][T12763] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  903.795562][T12783] pim6reg1: entered promiscuous mode
[  903.800964][T12783] pim6reg1: entered allmulticast mode
[  904.039219][T12810] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  904.044687][T12810] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  905.044029][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5382'.
[  905.536213][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 330 seconds
[  905.541080][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 330 seconds
[  905.545688][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 330 seconds
[  905.550537][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 330 seconds
[  906.988456][T12961] netlink: 'syz.2.5395': attribute type 29 has an invalid length.
[  906.992875][T12961] netlink: 'syz.2.5395': attribute type 29 has an invalid length.
[  906.996283][T12961] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5395'.
[  907.365597][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5398'.
[  909.785607][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5419'.
[  912.224488][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5429'.
[  912.233665][T13203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5429'.
[  912.519924][T13241] syzkaller1: entered allmulticast mode
[  916.140084][T13383] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 3, id = 0
[  917.709012][T13409] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  917.851675][T13419] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  918.183916][T13445] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.5460'.
[  918.308507][T13473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  918.447534][T20250] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  918.753791][T13505] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  919.287196][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5470'.
[  919.336835][T13514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5470'.
[  920.154934][T13547] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5475'.
[  920.158101][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5475'.
[  920.161271][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5475'.
[  920.166846][T13547] nbd: nbd2 already in use
[  920.295902][T13568] IPVS: sed: FWM 3 0x00000003 - no destination available
[  920.300086][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  921.232659][T13607] veth0_to_team: entered promiscuous mode
[  921.234835][T13607] veth0_to_team: entered allmulticast mode
[  921.312209][T13619] netdevsim netdevsim1 : renamed from netdevsim0
[  922.113540][T13648] netlink: 'syz.2.5488': attribute type 29 has an invalid length.
[  922.119579][T13648] netlink: 'syz.2.5488': attribute type 29 has an invalid length.
[  922.122890][T13648] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5488'.
[  923.325118][T13708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  926.866803][T13853] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5514'.
[  926.870385][T13853] veth0: Caught tx_queue_len zero misconfig
[  927.002658][T13862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5512'.
[  928.089607][ T5859] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  928.102832][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'.
[  928.991124][T13964] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  929.003325][T13949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  929.118873][T13981] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  929.889016][T14006] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_tx_wq": -EINTR
[  931.606139][T14083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5542'.
[  932.059818][T14117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  932.219012][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5551'.
[  933.231327][T14186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  933.477614][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5562'.
[  934.271316][T14228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  934.288736][T14229] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  934.406202][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  935.267198][T14278] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  935.311004][T14285] nftables ruleset with unbound set
[  935.359629][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5570'.
[  935.620160][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 360 seconds
[  935.623572][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 360 seconds
[  935.627718][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 360 seconds
[  935.631379][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 360 seconds
[  935.797742][T14343] netlink: 'syz.1.5581': attribute type 3 has an invalid length.
[  936.266827][T14370] lo speed is unknown, defaulting to 1000
[  937.976368][T14422] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  938.031243][T14423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  938.041185][T14425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  938.054940][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5594'.
[  938.057969][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5594'.
[  938.061749][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5594'.
[  938.065666][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5594'.
[  938.134009][T14458] netlink: 'syz.1.5598': attribute type 21 has an invalid length.
[  938.136903][T14458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5598'.
[  942.254882][ T5295] udevd[5295]: worker [24415] /devices/virtual/block/nbd1 timeout; kill it
[  942.257954][ T5295] udevd[5295]: seq 29791 '/devices/virtual/block/nbd1' killed
[  953.569338][T14519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5606'.
[  953.574463][T14525] nbd: nbd1 already in use
[  953.576587][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5606'.
[  954.554302][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5610'.
[  955.303781][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5611'.
[  955.405773][T14577] lo speed is unknown, defaulting to 1000
[  955.457345][T14584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  955.563844][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5618'.
[  955.581899][T14611] sctp: [Deprecated]: syz.2.5617 (pid 14611) Use of struct sctp_assoc_value in delayed_ack socket option.
[  955.581899][T14611] Use struct sctp_sack_info instead
[  956.410130][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5620'.
[  957.031284][T14673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5630'.
[  957.035166][T14673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5630'.
[  957.047471][T14673] netlink: 'syz.1.5630': attribute type 11 has an invalid length.
[  957.143900][T14682] netlink: 768 bytes leftover after parsing attributes in process `syz.2.5631'.
[  957.200620][T14699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  957.232446][T14705] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  957.299699][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5636'.
[  959.207819][T14805] netlink: 'syz.0.5646': attribute type 29 has an invalid length.
[  959.211048][T14805] netlink: 'syz.0.5646': attribute type 29 has an invalid length.
[  959.214495][T14805] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5646'.
[  959.466800][T14820] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_tx_wq": -EINTR
[  960.254716][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  960.448426][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  961.371489][T11672] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  961.438698][T14925] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  962.537747][T14973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5664'.
[  962.546800][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5663'.
[  962.554189][T14959] ip6gretap1: entered promiscuous mode
[  962.592994][T14959] nbd: nbd2 already in use
[  962.657364][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5667'.
[  962.739395][T14997] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  962.743396][T14997] bond9: (slave macvlan3): Enslaving as an active interface with a down link
[  962.748246][T14997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5668'.
[  962.751516][ T5859] nci: nci_rx_work: unknown MT 0x1
[  963.552476][T15011] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000
[  963.599831][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5669'.
[  963.708445][ T5859] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  965.483211][T15063] blkio.reset_stats is deprecated
[  965.696337][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 390 seconds
[  965.701101][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 390 seconds
[  965.706108][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 390 seconds
[  965.710929][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 390 seconds
[  966.284845][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5680'.
[  966.545506][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5685'.
[  967.556682][T15146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  967.694966][T14979] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[  967.949272][T15208] !: renamed from dummy0 (while UP)
[  967.953159][T15185] veth1_macvtap: left promiscuous mode
[  967.971702][T15208] lo speed is unknown, defaulting to 1000
[  968.869568][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5699'.
[  970.851976][T15294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5710'.
[  970.863302][T15294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5710'.
[  970.867410][T15294] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5710'.
[  971.808389][T15337] netlink: 'syz.1.5718': attribute type 9 has an invalid length.
[  971.818076][T15327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  971.915522][T15357] netlink: 'syz.0.5721': attribute type 29 has an invalid length.
[  971.918807][T15357] netlink: 'syz.0.5721': attribute type 29 has an invalid length.
[  971.931870][T15357] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5721'.
[  972.780387][T15385] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  972.885211][T15406] netlink: 'syz.2.5729': attribute type 29 has an invalid length.
[  972.893764][T15406] netlink: 'syz.2.5729': attribute type 29 has an invalid length.
[  972.902499][T15406] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5729'.
[  975.792827][T15515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  975.815671][T15535] tunl0: Caught tx_queue_len zero misconfig
[  976.755229][ T5859] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  977.567174][T15588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  978.971155][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5767'.
[  979.841253][T15707] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  980.722765][   T33] audit: type=1107 audit(1758814519.195:3): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  982.232413][T15848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  982.256502][T15861] netlink: 'syz.1.5791': attribute type 29 has an invalid length.
[  982.267444][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5790'.
[  982.269428][T15852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  982.280464][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5790'.
[  982.281420][T15861] netlink: 'syz.1.5791': attribute type 29 has an invalid length.
[  982.290756][T15861] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5791'.
[  984.013579][T15925] netlink: 'syz.0.5799': attribute type 29 has an invalid length.
[  984.028074][T15925] netlink: 'syz.0.5799': attribute type 29 has an invalid length.
[  984.035731][T15925] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5799'.
[  984.094078][T15927] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  984.953044][T15962] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  985.137098][T15991] nbd: device at index 0 is going down
[  987.065187][T16085] netlink: 'syz.1.5824': attribute type 29 has an invalid length.
[  987.069435][T16085] netlink: 'syz.1.5824': attribute type 29 has an invalid length.
[  987.073654][T16085] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5824'.
[  987.173009][T16087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  987.180514][T16078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5823'.
[  987.328648][T16113] netlink: 'syz.1.5831': attribute type 56 has an invalid length.
[  987.331472][T16113] netlink: 'syz.1.5831': attribute type 1 has an invalid length.
[  987.371596][T16115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  987.375185][T16114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  987.419749][T16113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5831'.
[  987.423834][T16113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5831'.
[  987.562463][T11672] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  989.335539][T16221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5844'.
[  989.553333][T16243] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  989.698977][T16272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5853'.
[  989.956963][T16304] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  990.253341][T16352] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5864'.
[  991.086253][T16378] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5867'.
[  991.198078][T16380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  991.953464][T16403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  991.977754][T16408] netlink: 'syz.2.5871': attribute type 29 has an invalid length.
[  991.981716][T16408] netlink: 'syz.2.5871': attribute type 29 has an invalid length.
[  991.986499][T16408] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5871'.
[  992.235519][   T33] audit: type=1107 audit(1758814530.705:4): pid=16447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  992.235519][   T33] 4wžCKL֗(Jơr'
[  994.000593][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  994.004244][T16507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  994.004382][T16523] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  994.070080][T16537] tipc: Failed to remove unknown binding: 66,1,1/0:627184874/627184876
[  994.113912][T16544] netlink: 'syz.1.5891': attribute type 29 has an invalid length.
[  994.120155][T16544] netlink: 'syz.1.5891': attribute type 29 has an invalid length.
[  994.124418][T16544] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5891'.
[  994.221289][T16550] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5892'.
[  994.883967][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5893'.
[  995.587916][T16623] lo speed is unknown, defaulting to 1000
[  995.790712][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 420 seconds
[  995.794814][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 420 seconds
[  995.798561][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 420 seconds
[  995.802349][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 420 seconds
[  996.521590][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5908'.
[  997.438628][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5912'.
[  997.618688][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5914'.
[  997.621717][T16707] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  998.565817][T16762] lo: Caught tx_queue_len zero misconfig
[  998.570751][T16762] netlink: 'syz.0.5921': attribute type 14 has an invalid length.
[  999.354123][T16757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  999.488031][T16788] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1000.498670][T16821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1000.505861][T16825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1000.618322][T16852] netlink: 'syz.1.5936': attribute type 29 has an invalid length.
[ 1000.621592][T16852] netlink: 'syz.1.5936': attribute type 29 has an invalid length.
[ 1000.625442][T16852] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5936'.
[ 1001.488083][T16877] netem: change failed
[ 1001.570036][T16876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1001.626929][T16875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1001.633395][T16877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1001.709364][T16909] netlink: 'syz.0.5943': attribute type 29 has an invalid length.
[ 1001.712452][T16909] netlink: 'syz.0.5943': attribute type 29 has an invalid length.
[ 1001.715685][T16909] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5943'.
[ 1002.577349][T16931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5948'.
[ 1003.555725][T16988] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20004
[ 1003.556270][T16969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1003.562024][T16966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1003.649496][T17003] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[ 1003.658973][T16984] bridge0: entered promiscuous mode
[ 1003.663911][T16984] bridge0: entered allmulticast mode
[ 1003.773089][T17014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5958'.
[ 1003.884335][T17017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1004.000748][T17026] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[ 1004.806738][T17033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1004.925163][ T9120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1004.928517][ T9120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1005.927482][T17119] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1006.353599][T17168] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1006.376185][T17177] netlink: 504 bytes leftover after parsing attributes in process `syz.2.5978'.
[ 1006.431615][T11672] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1007.270159][T17195] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1008.155650][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5985'.
[ 1008.165656][T17219] netlink: 'syz.1.5984': attribute type 1 has an invalid length.
[ 1008.635778][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5993'.
[ 1008.642029][T17279] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1009.737965][T17323] lo speed is unknown, defaulting to 1000
[ 1011.467214][T17375] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1011.562858][T17385] virt_wifi0 speed is unknown, defaulting to 1000
[ 1011.572385][T17385] virt_wifi0 speed is unknown, defaulting to 1000
[ 1011.579080][T17403] netlink: 'syz.1.6014': attribute type 29 has an invalid length.
[ 1011.582972][T17385] virt_wifi0 speed is unknown, defaulting to 1000
[ 1011.587414][T17403] netlink: 'syz.1.6014': attribute type 29 has an invalid length.
[ 1011.593109][T17403] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6014'.
[ 1011.593733][T17385] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1011.623289][T17408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1011.633171][T17385] virt_wifi0 speed is unknown, defaulting to 1000
[ 1011.637500][T17385] virt_wifi0 speed is unknown, defaulting to 1000
[ 1011.641232][T17385] virt_wifi0 speed is unknown, defaulting to 1000
[ 1012.407312][T17439] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1013.303924][T17463] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[ 1013.327898][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6027'.
[ 1014.201622][T17502] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[ 1014.265999][T17492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6029'.
[ 1014.277771][T17511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6033'.
[ 1014.281234][T17492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6029'.
[ 1014.683359][T17547] netlink: 'syz.2.6037': attribute type 1 has an invalid length.
[ 1014.686738][T17548] netlink: 'syz.2.6037': attribute type 1 has an invalid length.
[ 1014.756055][T17547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1014.936790][T17573] sctp: [Deprecated]: syz.2.6041 (pid 17573) Use of int in max_burst socket option.
[ 1014.936790][T17573] Use struct sctp_assoc_value instead
[ 1014.944056][T17573] IPVS: length: 221 != 8
[ 1015.087779][T17592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6045'.
[ 1015.105970][T17592] lo speed is unknown, defaulting to 1000
[ 1015.109577][T17592] virt_wifi0 speed is unknown, defaulting to 1000
[ 1015.669864][T17649] netlink: 'syz.2.6055': attribute type 29 has an invalid length.
[ 1015.679119][T17649] netlink: 'syz.2.6055': attribute type 29 has an invalid length.
[ 1015.682359][T17649] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6055'.
[ 1015.757050][T17659] netlink: 'syz.2.6056': attribute type 1 has an invalid length.
[ 1015.789115][T17659] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1015.793898][T17659] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1015.800165][T17659] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[ 1015.838248][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6056'.
[ 1016.076860][T17703] workqueue: Failed to create a rescuer kthread for wq "nfc10_nci_cmd_wq": -EINTR
[ 1016.095113][T17684] workqueue: Failed to create a rescuer kthread for wq "nfc11_nci_cmd_wq": -EINTR
[ 1016.287171][T17737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6061'.
[ 1016.955242][T17762] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1017.210994][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6070'.
[ 1017.222696][T17799] vlan2: entered promiscuous mode
[ 1017.226726][T17799] macvtap0: entered promiscuous mode
[ 1017.849915][T17806] netlink: 'syz.2.6072': attribute type 1 has an invalid length.
[ 1019.999760][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6087'.
[ 1020.344125][T27330] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1020.439989][T17958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6092'.
[ 1022.156423][T18014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6103'.
[ 1022.329495][T18054] netlink: 'syz.1.6110': attribute type 1 has an invalid length.
[ 1022.332008][T18054] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6110'.
[ 1022.335564][T18054] netlink: 'syz.1.6110': attribute type 1 has an invalid length.
[ 1022.538441][T27330] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1022.553881][T18073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6112'.
[ 1024.481418][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6121'.
[ 1024.486903][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6121'.
[ 1025.273696][T18155] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6124'.
[ 1025.291006][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6125'.
[ 1025.308149][T18163] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[ 1025.414907][T18181] netlink: 'syz.0.6127': attribute type 29 has an invalid length.
[ 1025.421501][T18181] netlink: 'syz.0.6127': attribute type 29 has an invalid length.
[ 1025.426644][T18181] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6127'.
[ 1025.573355][T18189] workqueue: Failed to create a rescuer kthread for wq "nfc12_nci_tx_wq": -EINTR
[ 1025.855363][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 450 seconds
[ 1025.862401][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 450 seconds
[ 1025.866172][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 450 seconds
[ 1025.870096][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 450 seconds
[ 1026.702000][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6133'.
[ 1027.256356][T18270] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1028.370796][T18335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1028.394874][T18332] netlink: 'syz.0.6147': attribute type 7 has an invalid length.
[ 1028.397612][T18332] netlink: 'syz.0.6147': attribute type 8 has an invalid length.
[ 1029.317463][T18430] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1029.881410][T18470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6165'.
[ 1030.313700][T18485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6169'.
[ 1030.436823][T18491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1030.693718][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6175'.
[ 1030.751305][T18534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1030.855407][T18551] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1030.909945][T18569] netlink: 'syz.2.6181': attribute type 32 has an invalid length.
[ 1030.963884][T18569] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6181'.
[ 1031.050441][T18588] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1031.061843][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6182'.
[ 1034.567336][T18685] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[ 1034.711524][T18718] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6202'.
[ 1035.658190][T18783] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_cmd_wq": -EINTR
[ 1036.771755][T11672] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1038.573750][T19044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6223'.
[ 1038.633667][T19045] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6223'.
[ 1038.641395][T19045] batadv0: entered promiscuous mode
[ 1038.643705][T19045] batadv0: entered allmulticast mode
[ 1042.045129][T19123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1042.175912][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6243'.
[ 1042.247041][T11672] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[ 1043.191002][T19202] netlink: 'syz.1.6244': attribute type 1 has an invalid length.
[ 1044.000649][T19216] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6249'.
[ 1044.269661][T19261] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6253'.
[ 1044.692142][T19297] lo speed is unknown, defaulting to 1000
[ 1044.695818][T19297] virt_wifi0 speed is unknown, defaulting to 1000
[ 1045.409521][T19347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6261'.
[ 1046.322153][T19376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6264'.
[ 1046.323213][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6264'.
[ 1046.336249][T19376] netlink: 'syz.2.6264': attribute type 1 has an invalid length.
[ 1046.384056][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6265'.
[ 1046.392660][T19370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1046.396323][T19375] netlink: 'syz.0.6265': attribute type 1 has an invalid length.
[ 1046.399647][T19375] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6265'.
[ 1046.509367][T19395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6268'.
[ 1046.525963][T19397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1046.529174][T19397] syzkaller0: entered promiscuous mode
[ 1046.531309][T19397] syzkaller0: entered allmulticast mode
[ 1046.555783][T19397] tipc: Resetting bearer <eth:syzkaller0>
[ 1046.564237][T19397] netlink: 'syz.0.6269': attribute type 1 has an invalid length.
[ 1046.579319][T19396] tipc: Resetting bearer <eth:syzkaller0>
[ 1046.597508][T19396] tipc: Disabling bearer <eth:syzkaller0>
[ 1047.493280][T19443] netlink: 'syz.1.6276': attribute type 3 has an invalid length.
[ 1047.549350][T19425] lo speed is unknown, defaulting to 1000
[ 1047.552506][T19425] virt_wifi0 speed is unknown, defaulting to 1000
[ 1047.638604][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'.
[ 1048.425243][T19472] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1048.533896][T19497] netlink: 'syz.2.6285': attribute type 5 has an invalid length.
[ 1048.778715][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'.
[ 1048.796480][T19531] netlink: 'syz.2.6288': attribute type 29 has an invalid length.
[ 1048.800636][T19531] netlink: 'syz.2.6288': attribute type 29 has an invalid length.
[ 1049.285839][T19567] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[ 1050.260252][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6300'.
[ 1050.278177][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6300'.
[ 1050.290742][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6300'.
[ 1050.425590][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6304'.
[ 1050.434383][T19635] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[ 1051.148833][T19650] netlink: 'syz.0.6307': attribute type 29 has an invalid length.
[ 1051.153400][T19650] netlink: 'syz.0.6307': attribute type 29 has an invalid length.
[ 1051.158151][T19650] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6307'.
[ 1051.176712][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6306'.
[ 1051.470116][T19689] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6312'.
[ 1052.513404][T19738] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[ 1052.565907][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6322'.
[ 1052.572458][T19746] netlink: 'syz.0.6322': attribute type 1 has an invalid length.
[ 1052.576571][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6322'.
[ 1053.486126][T19782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6328'.
[ 1053.682702][T19809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1053.862970][T19851] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1054.897455][T19892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1054.903712][T19893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1055.392555][T20250] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1055.935185][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 480 seconds
[ 1055.939630][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 480 seconds
[ 1055.943498][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 480 seconds
[ 1055.947944][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 480 seconds
[ 1056.067526][T19966] netlink: 'syz.2.6350': attribute type 1 has an invalid length.
[ 1056.070778][T19966] netlink: 'syz.2.6350': attribute type 1 has an invalid length.
[ 1056.073901][T19966] __nla_validate_parse: 3 callbacks suppressed
[ 1056.073915][T19966] netlink: 160 bytes leftover after parsing attributes in process `syz.2.6350'.
[ 1056.080757][T19966] netlink: 'syz.2.6350': attribute type 1 has an invalid length.
[ 1056.083992][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6350'.
[ 1056.285855][T19974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1057.138019][T20031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6360'.
[ 1057.161404][T20031] Bluetooth: MGMT ver 1.23
[ 1058.230815][T20095] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1058.290996][T20102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6368'.
[ 1058.317266][T20109] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1059.357203][T20146] netlink: 'syz.2.6376': attribute type 1 has an invalid length.
[ 1059.370681][T20146] netlink: 'syz.2.6376': attribute type 4 has an invalid length.
[ 1059.374118][T20146] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6376'.
[ 1059.377985][T20146] NCSI netlink: No device for ifindex 3321692160
[ 1060.623757][T20225] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1060.628396][T20234] tc_dump_action: action bad kind
[ 1060.726037][T20226] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[ 1060.938442][T20274] lo speed is unknown, defaulting to 1000
[ 1060.944451][T20274] virt_wifi0 speed is unknown, defaulting to 1000
[ 1062.561930][T20312] netlink: 'syz.2.6397': attribute type 21 has an invalid length.
[ 1062.564921][T20312] netlink: 'syz.2.6397': attribute type 22 has an invalid length.
[ 1062.567589][T20312] netlink: 'syz.2.6397': attribute type 23 has an invalid length.
[ 1062.570448][T20312] netlink: 'syz.2.6397': attribute type 25 has an invalid length.
[ 1062.573146][T20312] netlink: 'syz.2.6397': attribute type 26 has an invalid length.
[ 1062.576135][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6397'.
[ 1063.685727][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6404'.
[ 1064.775537][T20417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1065.773547][T20477] syzkaller0: entered promiscuous mode
[ 1065.776072][T20477] syzkaller0: entered allmulticast mode
[ 1067.526956][T20531] veth0_to_bridge: entered promiscuous mode
[ 1068.263130][T20528] veth0_to_bridge: left promiscuous mode
[ 1068.370468][T20556] netlink: 'syz.2.6432': attribute type 29 has an invalid length.
[ 1068.374013][T20556] netlink: 'syz.2.6432': attribute type 29 has an invalid length.
[ 1068.378119][T20556] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6432'.
[ 1068.412306][T20558] netlink: 'syz.2.6433': attribute type 2 has an invalid length.
[ 1069.487572][T20590] netlink: 'syz.0.6439': attribute type 1 has an invalid length.
[ 1069.490464][T20590] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6439'.
[ 1069.799372][T20616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1069.938676][T20648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6445'.
[ 1069.949049][T20648] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6445'.
[ 1069.952982][T20648] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6445'.
[ 1071.075026][T20710] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1072.164159][T20776] netlink: 'syz.1.6463': attribute type 29 has an invalid length.
[ 1072.209977][T20776] netlink: 'syz.1.6463': attribute type 29 has an invalid length.
[ 1072.218711][T20776] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6463'.
[ 1073.382911][T20840] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1074.419528][T20908] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1077.233143][T21025] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1078.212697][T21061] syzkaller1: entered promiscuous mode
[ 1078.217981][T21061] syzkaller1: entered allmulticast mode
[ 1079.242945][T21084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6505'.
[ 1080.873059][T21138] netlink: 'syz.1.6512': attribute type 29 has an invalid length.
[ 1080.880901][T21138] netlink: 'syz.1.6512': attribute type 29 has an invalid length.
[ 1080.885602][T21138] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6512'.
[ 1081.912112][T21196] netlink: 'syz.0.6520': attribute type 29 has an invalid length.
[ 1081.916992][T21196] netlink: 'syz.0.6520': attribute type 29 has an invalid length.
[ 1081.920345][T21196] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6520'.
[ 1084.006248][T21283] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1084.934203][T21325] netlink: 'syz.0.6537': attribute type 5 has an invalid length.
[ 1085.965790][T21376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1085.969577][T21368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1086.020247][   T60] block nbd1: Possible stuck request ffff888020c20000: control (read@0,1024B). Runtime 510 seconds
[ 1086.026326][   T60] block nbd1: Possible stuck request ffff888020c20200: control (read@1024,1024B). Runtime 510 seconds
[ 1086.030153][   T60] block nbd1: Possible stuck request ffff888020c20400: control (read@2048,1024B). Runtime 510 seconds
[ 1086.042100][   T60] block nbd1: Possible stuck request ffff888020c20600: control (read@3072,1024B). Runtime 510 seconds
[ 1086.261430][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6547'.
[ 1086.847779][T21399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1087.779234][T21449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6551'.
[ 1087.789882][T21448] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1087.915016][T21473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6556'.
[ 1087.922834][T21473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6556'.
[ 1087.930348][T21473] syz_tun: entered promiscuous mode
[ 1087.935769][T21473] syz_tun: left promiscuous mode
[ 1088.963198][T21696] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6558'.
[ 1090.279234][T21738] netlink: 'syz.2.6566': attribute type 29 has an invalid length.
[ 1090.282566][T21738] netlink: 'syz.2.6566': attribute type 29 has an invalid length.
[ 1090.286990][T21738] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6566'.
[ 1091.219534][T21789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6574'.
[ 1091.256857][T21796] netlink: 'syz.1.6576': attribute type 29 has an invalid length.
[ 1091.260086][T21796] netlink: 'syz.1.6576': attribute type 29 has an invalid length.
[ 1091.263048][T21796] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6576'.
[ 1092.162705][T21831] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6582'.
[ 1092.200766][T21833] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1092.220484][T21842] netlink: 'syz.1.6584': attribute type 29 has an invalid length.
[ 1092.227576][T21842] netlink: 'syz.1.6584': attribute type 29 has an invalid length.
[ 1092.230748][T21842] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6584'.
[ 1092.641779][T21871] bond9: (slave macvlan3): Releasing active interface
[ 1092.647866][ T5902] virt_wifi0 speed is unknown, defaulting to 1000
[ 1093.167411][T21877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6589'.
[ 1094.125217][T21908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1094.179491][T21932] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1094.192963][T21936] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6596'.
[ 1094.270275][T21948] netlink: 'syz.2.6601': attribute type 9 has an invalid length.
[ 1094.272906][T21948] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6601'.
[ 1094.475468][T21950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1094.549321][T11672] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[ 1096.132829][T22024] netlink: 'syz.0.6608': attribute type 64 has an invalid length.
[ 1096.224246][T22027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6609'.
[ 1096.371139][T22046] netlink: 'syz.2.6609': attribute type 8 has an invalid length.
[ 1096.534220][T22064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6612'.
[ 1097.400439][T22111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6613'.
[ 1098.014173][T22133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6616'.
[ 1098.946147][T22164] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1099.792216][T22190] netlink: 'syz.2.6624': attribute type 29 has an invalid length.
[ 1099.804853][T22190] netlink: 'syz.2.6624': attribute type 29 has an invalid length.
[ 1099.807715][T22190] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6624'.
[ 1099.845478][T22200] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[ 1099.848157][T22191] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6626'.
[ 1099.861743][T22188] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6626'.
[ 1099.925949][T22191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1100.778343][T22225] pim6reg1: entered promiscuous mode
[ 1100.780228][T22225] pim6reg1: entered allmulticast mode
[ 1100.885191][T22246] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1100.928073][T22256] netlink: 'syz.2.6634': attribute type 29 has an invalid length.
[ 1100.934495][T22256] netlink: 'syz.2.6634': attribute type 29 has an invalid length.
[ 1100.951212][T22256] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6634'.
[ 1101.038658][T22259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1101.038807][T22273] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[ 1101.153432][T11672] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1101.839892][T22282] netlink: 'syz.0.6637': attribute type 1 has an invalid length.
[ 1101.843091][T22282] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6637'.
[ 1101.847812][T22282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6637'.
[ 1101.938898][T22300] netlink: 'syz.0.6642': attribute type 29 has an invalid length.
[ 1101.942048][T22300] netlink: 'syz.0.6642': attribute type 29 has an invalid length.
[ 1101.947687][T22300] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6642'.
[ 1103.015072][T22357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6647'.
[ 1103.196771][T22381] wg1 speed is unknown, defaulting to 1000
[ 1103.200346][T22380] siw: device registration error -23
[ 1103.202367][T22381] wg1 speed is unknown, defaulting to 1000
[ 1103.206837][T22381] wg1 speed is unknown, defaulting to 1000
[ 1103.224349][T22381] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1103.229689][T22384] pimreg: entered allmulticast mode
[ 1103.257717][T22381] wg1 speed is unknown, defaulting to 1000
[ 1103.260495][T22381] wg1 speed is unknown, defaulting to 1000
[ 1103.266520][T22382] lo speed is unknown, defaulting to 1000
[ 1103.271102][T22386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6653'.
[ 1103.271690][T22381] wg1 speed is unknown, defaulting to 1000
[ 1103.276078][T22382] virt_wifi0 speed is unknown, defaulting to 1000
[ 1103.281023][T22382] wg1 speed is unknown, defaulting to 1000
[ 1104.180776][T22431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1104.201402][T22429] netlink: 'syz.2.6656': attribute type 1 has an invalid length.
[ 1104.203970][T22429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6656'.
[ 1105.182270][T22487] netlink: 'syz.0.6664': attribute type 7 has an invalid length.
[ 1105.185597][T22487] netlink: 'syz.0.6664': attribute type 8 has an invalid length.
[ 1105.188112][T22487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6664'.
[ 1105.207944][T22483] syzkaller1: entered promiscuous mode
[ 1105.210093][T22483] syzkaller1: entered allmulticast mode
[ 1105.422907][T22507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6668'.
[ 1105.854802][   T34] INFO: task udevd:24415 blocked for more than 143 seconds.
[ 1105.857428][   T34]       Not tainted syzkaller #0
[ 1105.859925][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1105.863603][   T34] task:udevd           state:D stack:21928 pid:24415 tgid:24415 ppid:5295   task_flags:0x400140 flags:0x00004006
[ 1105.867875][   T34] Call Trace:
[ 1105.869249][   T34]  <TASK>
[ 1105.870419][   T34]  __schedule+0x1798/0x4cc0
[ 1105.872185][   T34]  ? __pfx___schedule+0x10/0x10
[ 1105.874017][   T34]  ? schedule+0x91/0x360
[ 1105.875744][   T34]  schedule+0x165/0x360
[ 1105.877347][   T34]  io_schedule+0x80/0xd0
[ 1105.879028][   T34]  folio_wait_bit_common+0x6b0/0xb90
[ 1105.881022][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 1105.883148][   T34]  ? __pfx_wake_page_function+0x10/0x10
[ 1105.885874][   T34]  ? __filemap_get_folio+0x6f0/0xaf0
[ 1105.887827][   T34]  ? do_read_cache_folio+0x4e9/0x590
[ 1105.889817][   T34]  do_read_cache_folio+0x1aa/0x590
[ 1105.891696][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[ 1105.893700][   T34]  read_part_sector+0xb6/0x2b0
[ 1105.895550][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[ 1105.897562][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[ 1105.899624][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[ 1105.901819][   T34]  bdev_disk_changed+0x75f/0x14b0
[ 1105.903699][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[ 1105.906645][   T34]  ? wait_on_inode+0xc0/0x230
[ 1105.908418][   T34]  blkdev_get_whole+0x380/0x510
[ 1105.910256][   T34]  bdev_open+0x31e/0xd30
[ 1105.911849][   T34]  blkdev_open+0x457/0x600
[ 1105.913553][   T34]  ? __pfx_blkdev_open+0x10/0x10
[ 1105.915471][   T34]  do_dentry_open+0x953/0x13f0
[ 1105.917281][   T34]  vfs_open+0x3b/0x340
[ 1105.918817][   T34]  ? path_openat+0x2ecd/0x3830
[ 1105.920589][   T34]  path_openat+0x2ee5/0x3830
[ 1105.922305][   T34]  ? arch_stack_walk+0xfc/0x150
[ 1105.924066][   T34]  ? stack_depot_save_flags+0x40/0x860
[ 1105.926194][   T34]  ? __pfx_path_openat+0x10/0x10
[ 1105.928050][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1105.930298][   T34]  do_filp_open+0x1fa/0x410
[ 1105.931955][   T34]  ? __lock_acquire+0xab9/0xd20
[ 1105.933772][   T34]  ? __pfx_do_filp_open+0x10/0x10
[ 1105.935660][   T34]  ? _raw_spin_unlock+0x28/0x50
[ 1105.937465][   T34]  ? alloc_fd+0x64c/0x6c0
[ 1105.939082][   T34]  do_sys_openat2+0x121/0x1c0
[ 1105.940843][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 1105.942829][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1105.944848][   T34]  ? rcu_is_watching+0x15/0xb0
[ 1105.946612][   T34]  __x64_sys_openat+0x138/0x170
[ 1105.948448][   T34]  do_syscall_64+0xfa/0x3b0
[ 1105.950161][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1105.952130][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1105.954472][   T34]  ? exc_page_fault+0x9f/0xf0
[ 1105.956373][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1105.958543][   T34] RIP: 0033:0x7f27fd7169a4
[ 1105.960148][   T34] RSP: 002b:00007fffdd1f6c70 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1105.963284][   T34] RAX: ffffffffffffffda RBX: 0000560cff736440 RCX: 00007f27fd7169a4
[ 1105.966154][   T34] RDX: 00000000000a0800 RSI: 0000560cff712310 RDI: 00000000ffffff9c
[ 1105.968947][   T34] RBP: 0000560cff712310 R08: 0000000000000001 R09: 7fffffffffffffff
[ 1105.971755][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[ 1105.974702][   T34] R13: 0000560cff728950 R14: 0000000000000001 R15: 0000560cff711910
[ 1105.977507][   T34]  </TASK>
[ 1105.984886][   T34] 
[ 1105.984886][   T34] Showing all locks held in the system:
[ 1105.987900][   T34] 1 lock held by pool_workqueue_/3:
[ 1105.989950][   T34]  #0: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 1106.001651][   T34] 1 lock held by khungtaskd/34:
[ 1106.003644][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1106.007188][   T34] 2 locks held by getty/5672:
[ 1106.008949][   T34]  #0: ffff88801b6f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1106.012446][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1106.016401][   T34] 1 lock held by syz-executor/5852:
[ 1106.018295][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 1106.021675][   T34] 1 lock held by udevd/24415:
[ 1106.023540][   T34]  #0: ffff888020716358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1106.026706][   T34] 
[ 1106.027552][   T34] =============================================
[ 1106.027552][   T34] 
[ 1106.030402][   T34] NMI backtrace for cpu 1
[ 1106.030412][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1106.030420][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1106.030425][   T34] Call Trace:
[ 1106.030429][   T34]  <TASK>
[ 1106.030434][   T34]  dump_stack_lvl+0x189/0x250
[ 1106.030447][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1106.030461][   T34]  ? __pfx__printk+0x10/0x10
[ 1106.030475][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1106.030488][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1106.030499][   T34]  ? __pfx__printk+0x10/0x10
[ 1106.030511][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1106.030524][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1106.030536][   T34]  watchdog+0xf93/0xfe0
[ 1106.030550][   T34]  ? watchdog+0x1de/0xfe0
[ 1106.030562][   T34]  kthread+0x711/0x8a0
[ 1106.030572][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1106.030582][   T34]  ? __pfx_kthread+0x10/0x10
[ 1106.030592][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1106.030603][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1106.030610][   T34]  ? __pfx_kthread+0x10/0x10
[ 1106.030619][   T34]  ret_from_fork+0x439/0x7d0
[ 1106.030628][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1106.030637][   T34]  ? __switch_to_asm+0x39/0x70
[ 1106.030646][   T34]  ? __switch_to_asm+0x33/0x70
[ 1106.030655][   T34]  ? __pfx_kthread+0x10/0x10
[ 1106.030664][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1106.030678][   T34]  </TASK>
[ 1106.030681][   T34] Sending NMI from CPU 1 to CPUs 0:
[ 1106.079729][    C0] NMI backtrace for cpu 0
[ 1106.079741][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1106.079749][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1106.079754][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1106.079765][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1106.079771][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[ 1106.079778][    C0] RAX: 476fe95289af4c00 RBX: ffffffff819693f8 RCX: 476fe95289af4c00
[ 1106.079783][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9d06 RDI: ffffffff8be33c00
[ 1106.079788][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[ 1106.079793][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa3a630
[ 1106.079797][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[ 1106.079802][    C0] FS:  0000000000000000(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[ 1106.079807][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1106.079811][    C0] CR2: 000055558640f5c8 CR3: 000000010fb2a000 CR4: 00000000000006f0
[ 1106.079839][    C0] Call Trace:
[ 1106.079845][    C0]  <TASK>
[ 1106.079848][    C0]  default_idle+0x13/0x20
[ 1106.079857][    C0]  default_idle_call+0x74/0xb0
[ 1106.079867][    C0]  do_idle+0x1e8/0x510
[ 1106.079876][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1106.079885][    C0]  cpu_startup_entry+0x44/0x60
[ 1106.079891][    C0]  rest_init+0x2de/0x300
[ 1106.079928][    C0]  start_kernel+0x3a9/0x410
[ 1106.079938][    C0]  x86_64_start_reservations+0x24/0x30
[ 1106.079948][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1106.079956][    C0]  common_startup_64+0x13e/0x147
[ 1106.079968][    C0]  </TASK>
[ 1106.081336][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 1106.140319][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1106.143276][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1106.146570][   T34] Call Trace:
[ 1106.147691][   T34]  <TASK>
[ 1106.148677][   T34]  dump_stack_lvl+0x99/0x250
[ 1106.150219][   T34]  ? __asan_memcpy+0x40/0x70
[ 1106.151749][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1106.153469][   T34]  ? __pfx__printk+0x10/0x10
[ 1106.154991][   T34]  vpanic+0x281/0x750
[ 1106.156308][   T34]  ? __pfx_vpanic+0x10/0x10
[ 1106.157799][   T34]  ? preempt_schedule+0xae/0xc0
[ 1106.159414][   T34]  ? preempt_schedule_common+0x83/0xd0
[ 1106.161229][   T34]  panic+0xb9/0xc0
[ 1106.162491][   T34]  ? __pfx_panic+0x10/0x10
[ 1106.163968][   T34]  ? preempt_schedule_thunk+0x16/0x30
[ 1106.165740][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1106.167755][   T34]  watchdog+0xfd2/0xfe0
[ 1106.169135][   T34]  ? watchdog+0x1de/0xfe0
[ 1106.170584][   T34]  kthread+0x711/0x8a0
[ 1106.171944][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1106.173486][   T34]  ? __pfx_kthread+0x10/0x10
[ 1106.174988][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1106.176722][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1106.178456][   T34]  ? __pfx_kthread+0x10/0x10
[ 1106.180004][   T34]  ret_from_fork+0x439/0x7d0
[ 1106.181542][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1106.183225][   T34]  ? __switch_to_asm+0x39/0x70
[ 1106.184806][   T34]  ? __switch_to_asm+0x33/0x70
[ 1106.186410][   T34]  ? __pfx_kthread+0x10/0x10
[ 1106.187943][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1106.189541][   T34]  </TASK>
[ 1106.191235][   T34] Kernel Offset: disabled
[ 1106.192680][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:37:24  Registers:
info registers vcpu 0

CPU#0
RAX=476fe95289af4c00 RBX=ffffffff819693f8 RCX=476fe95289af4c00 RDX=0000000000000001
RSI=ffffffff8d9b9d06 RDI=ffffffff8be33c00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a630 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe0e71d8440 CR3=00000001245a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8d9f412e7b
XMM06=0000000000000000 00007f8d9f412e75 XMM07=0000000000000000 00007f8d9f412e89
XMM08=0000000000000000 00007f8d9f412f0f XMM09=0000000000000000 00007f8d9f412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107b38237 R9 =1ffff11020f67046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008d2 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005566112717e8 CR3=000000010fb2a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=02000d880302b802 000d860302a40200 XMM03=018002000d8c0302 e002000d8a0302d4
XMM04=0000000000000000 0000000000000000 XMM05=000055558e1c646f 000055558e1c6360
XMM06=0000000000000000 0000000000000000 XMM07=0d8a0302d402000d 880302b802000d86
XMM08=0302a402000d8403 02b002000d820304 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
