last executing test programs:

3.267860485s ago: executing program 0 (id=15213):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r11 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r10, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

3.090766172s ago: executing program 1 (id=15216):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x81, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x500]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0)

3.090515337s ago: executing program 1 (id=15217):
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000500007d01ff020000000000000000000000000001"], 0xfdef)

3.020575305s ago: executing program 0 (id=15218):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r2, 0x0, &(0x7f0000000400))
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0xe1, &(0x7f0000000100)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xab, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @remote, [{0x5, 0x2, "61580859f4ccad9ceb1cd349cd9184f451"}, {0x5, 0xe, "d42b3edb6e7192f931ea856834f6ae412445a467ec6ddbb80ffe1e35e2edcaf50d8abf0f91127aee38767c07c072cb830af878f5154a511bcd226e6e761baa1105334e3d83bcfea8f73a42c1fae2e6a3b06bcd7f2d8288ec9ad3f9f09656943b68f1949f03d7ca451a2e8e5839ea"}]}}}}}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000002ce700000000080000000000000000e2a372fe27ce177dbed9625c2ad10d5c5a4e28a2f2d522462ca8b5d9be62dd1da2c16709ca338d81aa2861f0010636c37d656cc35873b4c75546f43392a8b39509ae55389cc09f1b63178da7a1cae63daee981b02383c651c2a4b5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYBLOB="e2b8c30c0beba52cdade8261fbb95c9bada3ba342678451e7d93f6ec123370a674e74403f6ef2f3d072726081fd725e9906b7038752215e95c7c2a7547a75e05238c4523b5e489d4e433078a848eced279991344733f375870873e38e807df1745c880952a49b84dd7fc96edab5238f9d0929f25091711e990e44afd9ddb89d509ee879019", @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x10001) (async)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

3.017876667s ago: executing program 0 (id=15220):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="180010f20b14040026bd7000fbdbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001800018014000180080001000000000008000200ac141400240002800c0002800500010000000000140001"], 0x50}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000400)=0x1, 0x4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

3.017135095s ago: executing program 2 (id=15221):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r5, 0x1, 0xfffffefd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x2}}]}, 0x54}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) (async)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) (rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r7]}, 0x94)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
listen(r10, 0x400004) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}}) (async)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64)
socket(0x10, 0x2, 0x0) (rerun: 64)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r12}, 0x10)
connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async)
r13 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r13, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)

2.917911946s ago: executing program 1 (id=15222):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a000000007cb59548f2a0e86893c95a000000000000000300060000000e0002000000e000000900000000000000000200010000000000000000020000000003000527c8e1f94bc5ad894b"], 0x50}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x280940, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0x140}], 0x1)
r5 = socket$xdp(0x2c, 0x3, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x2000, 0x1000, 0x1, 0x7}, 0x20)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

2.9175738s ago: executing program 2 (id=15223):
r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={<r1=>0x0, 0x81, 0x35b2})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={r1, 0x7ff})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000800)=0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000840)={'syztnl0\x00', <r2=>0x0, 0x700, 0x1, 0x32c89117, 0xe, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@end]}}}}})
bind$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @local}, 0x14)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x244800, 0x0)
ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000940))
connect$pptp(0xffffffffffffffff, &(0x7f0000000980)={0x18, 0x2, {0x3, @remote}}, 0x1e)
shutdown(r3, 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000009c0)=[@in6={0xa, 0x4e23, 0x9a, @private2}, @in={0x2, 0x4e21, @local}], 0x2c)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000a00)={0x1, 'macvlan1\x00', {}, 0x2})
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000a40), &(0x7f0000000a80)=0x40)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000ac0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000d40)={'syzkaller0\x00', {0x2, 0x0, @multicast2}})
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000d80)=0x8, 0x2)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000dc0)={0x3, 0x7}, 0x4)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000e00)={0x0, @in6={{0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xea}}, 0x4, 0x3}, 0x90)
ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000ec0)=0x7)
getsockname(r5, &(0x7f0000000f00)=@xdp, &(0x7f0000000f80)=0x80)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001540)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001080)={0x474, 0x0, 0x410, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x3e4, 0x8, 0x0, 0x1, [{0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @private2, 0xfff}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x1fc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @mcast2, 0xfffffff7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c87102b2c9026c0a57752e02553603f733f63b34b2a71d72997d609bbfe273bc"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3d4b0aede2aaffd2b19aba8a08eb0b2408e33ff5dd74d084fb6fd05c7edaa296"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "69929f5f1d406d7de32d43bfca0ee7a2b789e034fca8570c50d044a41b927793"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "27073c086af79baa8c4f23d195bf86515e49109d45368f7f36779934a5f0ade0"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x474}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2.916695398s ago: executing program 0 (id=15224):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040) (async)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x45, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x9}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$BTRFS_IOC_LOGICAL_INO(r8, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='7\bri\f\xb7\xe3'}, 0xfffffffffffffd9b) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r11=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@broadcast, @broadcast}, &(0x7f0000000380)=0xc) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r11, @ANYBLOB="0c0099000d000000220000000f9688f2d4b4283b0cf117fbf4aec31be1a14aee00000000000000047fdd60379caf29"], 0x28}}, 0x4080) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)

966.328352ms ago: executing program 2 (id=15225):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_to_bond\x00', 0x8000})
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040))
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="359522e77d44ddb7e3a63bd00ae6547a13e7db3160d30a8794716af8b9543978f56b58b1b44161013da9d7cc5c296ec555cb4e25dc0051d08bb3a6506257a3b33c1d9bf95abf70201fc16ee621c76c0301e5f6caf2ddb95f757d7a68df218cba14c108cb848e4fc5be746848950bc984a80961678b040a11612111c6d1b8acc9425e1c8583271e7f0e22f2687ff00d659995082bd957cd1e46a946c14d8007a371ee05744d4a1025477c42d3af0595a260bb391d894aab11e11f5306444185f73b6ee423e7b0ea571a9c0f83e0", 0xcd}, {&(0x7f00000001c0)="c1f633a168768b627b43e075bcd599d40bfdc8718fd2194be0522f03efa98a3d7077bdbde1dd09485cccd7c134e587597d1423232b955e94d5a6df67a53e2d5475b509c6bd844867bc978199a3b5fdbb724639101724056fb6fc8dd1879871fb89f641a7df1b568702fb9d53ae3918a523f22870264194c7112184c0161d0b2623a92be4941d6929c50a4238826c5ddff5c6ae5a8b3fc3aa4834236c6bc678b836b45d98400f3511d697f1e10c6368abe3eb84309e6c8ce7e48028a97f0c9fd9bbb08282a41c87d54200e71b6676902da1a4141ba619cd67bce596b952049dbe40", 0xe1}, {&(0x7f00000002c0)="1c0e04a80bf081e40317b4887a271a5d4179f522b1a8bee407042ac2930ec76240cf88932d995a3aaf4e9b135a34b3ec4a8b7552de908113a05e8030437f8d94fe14486a1961e9390c7638bb86b6d1aa6c23ed3f53539ddc9c61f4825b41466be09fbb6373c1e289c56d9f2fe1fb4aea2406ffe20cbd07649c6afe4a33e5995e8096ebb3831eebbce6a291069a1cc92156f3d237b0e20f3d2ad1b0bb14913fc25cc9b88d006725c646e3ea40bc4591a92971d54cd001da4c1ed6e771c7d1f80f2d95c6571cb22dddc0a53f6d238e6511daa21172bbad644e0a7b28bd77", 0xdd}, {&(0x7f00000003c0)="30ef3c179b8ad18b0022c0dbf657aadd42143ca696b1e609e2d3799212976f06f85f7942e4364d75dbdfbeb28048fcae6b6bd4c31c733816f0cd9c5d92dc8fa5624b8a5644c36f8f9db3ce6d21b0944b895e4e96b52001d92abdb334a963608c", 0x60}, {&(0x7f0000000440)="bbfc2451ce93a702f21e49f3dade0f3a90e65b34993fa2189876c0d45af41834ce5ea75ae21d225830f140652e1bcbf6d6ff8244c2ac504f6026149db260b0697b26ed33c33a353e0948fb5728319ae2cc06b321db6671df027d58d9abff5f3c2e0487a34423b12b2ecf38b46b57bb5d8d34dfcecb0573385ff5c50b4f2d71d992e4529a7e011c9259b701e10f3333047c54a984b47532a1c8646536442c3029146e5901138823204b", 0xa9}], 0x6)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000580)={0x2, 'vlan0\x00', {0x1000}, 0x5})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000005c0)={<r1=>r0})
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x269}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x395}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20004015)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x124, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa52, 0x19}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xfb, 0x80, [@tim={0x5, 0xe2, {0xf7, 0xa9, 0x5, "07393ce42e878c38fe68d9f67e972be439df35ddef61ff005a52b6b45ee691cb934c052a17cb65b0d0f80f028b25083f5db1794051d11f8f0c132774a4e4635f7ac1bb84cbeebbdfcf143957bf5d5fc0a116f0b259773d1c4e06cef9a8f96d115d1983e1c780754da3b7ca437da61e3bca4efdec48c476661f54639bee07b98391e3e68b21f8937cbda6d4b9b87e31054e50bc704f3780615e4080a9e6ad2915b6b5059dd2042c034c3a14447133e8b2c57c0d0cf4664500e691fe6c5c75947b25ad84cc7daf6f657709eb5762892bd06a37a3268da9f75f03bafe36dc8481"}}, @random_vendor={0xdd, 0x11, "c7d544bf6001ea1d5393d915e48804c92e"}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x20044000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r3=>0x0})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup(r4, &(0x7f00000009c0)='syz0\x00', 0x200002, 0x0)
pwritev(r5, &(0x7f0000000d00)=[{&(0x7f0000000a00)="87968329eb0503f342cb3566f8d78962dd619d0a2724d2b7687b22610552948967d1f8595a9500432521ba101bec09e3839258d2e583e0edc78f55901903d39b3fee4490a2795a419fa51e067b218ca567a32de61c5eee3aa7bfde42093270e0cc6b3da7430c1c8749c36d5eb735f96701e30efdf88a7ece98d37d7c496e94cd18ee15d54a67a240d3a9d00b6b3d38ddd1b280da83a49c1a55ca8bfb0c577f4b33914a0148c5e168d1cef38d98521dbd8953989a3a1efbfef73444a37de19be9311bc23e6bc946ea86de697a4263bf255a771188ea5c483199a32fe130e6e307b421d457d1acd2", 0xe7}, {&(0x7f0000000b00)="52ecb609008418dd28ec6e6c099dc2069604a7728b04af0ec5da67d21196d7c5112766cdda2f369dfe18628fa81d4f827b66bc262b6fb2c818d4f3278b98f7b9da830724391d24a73764b161ce3c2753a847491a54e3da012984b71e6216cbb7f1559173568a509dd4d65c35c6606bb67183b74c1a9ba8f3c935267a0f687af991fed11546", 0x85}, {&(0x7f0000000bc0)="4fa007becdd80b15b2283e864932bfc0416dbd9aa06f80f24abb99977563c7c0e783e6a78026229b2a46590ff402214f589e164ef29a079d8e01612cace3e721990385daa9c8f4f2c7870955f8f27641d2c9a0886eb86e466cc404dc221b9218c9ec53227f4c8858e2967e8e9ed36acbaa", 0x71}, {&(0x7f0000000c40)="d9553e8d0974e11678e273119769d2f75957770f35c1512e13ebdc7b6653bdd8a3acc44faf8d63aa2d893a8b93463d661a375eac0ad08767b7f883ca7714fdea93724b48748c477bcea64336770a401c303a5a8e336b7f90102758e2c30541e86a85d0e62d2f33be47c04474c3e461c78611845d12ab10ef5bdd20d4c7c0db5f29092ca11c6a5a40aef7fd45fdf059f83278e39c5a9651669fae684dcaaa360801f3f9c526cd144769ccc5179327f09e", 0xb0}], 0x4, 0xfb, 0x7ff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d40)={<r6=>0x0}, &(0x7f0000000d80)=0xc)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000dc0)='rxrpc_conn\x00', r0, 0x0, 0x6b3}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r6, r7, 0x0, 0xe, &(0x7f0000000e40)='veth0_to_bond\x00'}, 0x30)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x400c4)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000001000)={0x18, 0x0, {0x1, @random="bfc2f6cf0a4f", 'veth0_macvtap\x00'}})
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000001040)={0x4b, 0x1, 0x9, 0x5, 0x3, 0x81})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x21, 0xfffffff9, 0x1, 0x7, 0x5108, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000001100)={0x0, 0x4, 0x400, 0xb9})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000001140)={0x6, 0x0, 0x1, 0xda72, 0x0, [0xc13, 0x9, 0x2, 0x80000000]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@enum={0x9, 0x6, 0x0, 0x6, 0x4, [{0x10, 0x1}, {0xe, 0x5}, {0x10, 0xea}, {0x3, 0x4}, {0xe, 0x3}, {0x4, 0xa2ba}]}]}, {0x0, [0x5f, 0x61, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000001200)=""/72, 0x5c, 0x48, 0x0, 0x10000, 0x10000}, 0x28)
ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f00000012c0)="96e9d2381ccb09b4706aafaae00637e61edb92d47fe8fc31a4030091b4ca24cf65823c1483e3c7325d47325c4842a1e382482c64dd79bc244335bc6b1e9681b4a73faf14a03c90aa70c2833b0325aa65b90a4644e2b0d8526f69634c132feefa4c616211e271bf84302e9a536d41")
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r9, 0x4008af7c, &(0x7f0000001380)={0x3, 0x1214})
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000013c0)=@req3={0x3, 0xff, 0x0, 0xc, 0x24000000, 0x2, 0xfffffffa}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x40, 0x7, 0x1, 0x0, "d11aa5fb15d603806e3ec4bcd6af456cf02d7834af68638e763efa8791f35a7c9d17e6909c6503baa36f3327b52792261f6774f3663aa65de36a82f2"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x22, 0x6, "192c331c34418a440ac521606a30561a38512159ab4f2098d13d9a73b618"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x158}, 0x1, 0x0, 0x0, 0x2000}, 0x20040000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000001640)={0x1})

966.075603ms ago: executing program 0 (id=15226):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xb9c, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa}}, 0xffffffffffffff62}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x20, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (async)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
getsockname$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @bcast}, [@remote, @default, @null, @remote, @null, @bcast, @netrom, @null]}, &(0x7f0000000340)=0x48)
socket$tipc(0x1e, 0x2, 0x0) (async)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async)
bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r8, 0x0, 0x0) (async)
bind$tipc(r8, 0x0, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
r11 = socket$kcm(0x2, 0xa, 0x2)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000080)) (async)
ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f0000000200)=0xb55) (async)
ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f0000000200)=0xb55)

965.364158ms ago: executing program 2 (id=15227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0xfd45}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040041)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000002d92c000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES16=r1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB="9fceb5779bf77752bbf9e574b45467f5c8becab4c5a964f01136879ec0ea5cfac335ee25a377a6f4f3a19405fcf1b1fb4e44a96f80569492a4eb48107d38e57c63a12c67ef2ab33789177cdf91a0f09a3df6f143f8a44a28cd396866d28f956f4f4e3985f1ec230e1fb4153f3f87d4bdce8eb437b677b9194121b55eb966a48b125ccc78f271cfec37ea4c800a8ca8ca1cb158cbd0a8b97dab6fcdaa86fe4d85d166cde2a9e097e05f90be20c37e98bc56898c06f5674fd3d5baafd67cec09e29412", @ANYBLOB="0000000002000000000000000000000000590958cf037b553e2092e03c28ec150b855f6c015a65bb368033e1c4419aa4354e8e88c8b0ab98accf321d1384debbfda8"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18500000000000000000000400000000950000000000000028be0400000000000000776b12981290394b"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r10}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00070c27bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="80004100050001"], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x20024090)
bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r6, 0x0)
close(r7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
pipe(&(0x7f0000000680))
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, 0x0)

900.761866ms ago: executing program 1 (id=15228):
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000600007d01ff020000000000000000000000000001"], 0xfdef)

810.11392ms ago: executing program 1 (id=15229):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r4=>r0, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000000d80)={&(0x7f0000000640)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, 0x0}, 0x20000800) (async)
sendmsg$kcm(r5, &(0x7f0000000d80)={&(0x7f0000000640)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, 0x0}, 0x20000800)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="9466cb426ae49dc882ef99e46ccee815b855d3066ea9ee06917b8eec8f964a78f1b38ad64701534ba45d462eb70f270e7506fb002202ddcb9ac78158ea1dc18de775defc004a43fddd24ac6aeeb4c67081b955ad6f33b1ab", 0x58}, {&(0x7f00000006c0)="11ae65beb062ae86b753fbec62aa5a0c061e4ed568ea99e29081e12adb5b58a244d7d5389321fc0d882e28188d469b22207313e809357d3f53a1cfc95e851ced75daae1d9bec0f45cce73cbaea4a6734c7442445dc159cc1508ccda68d8550ea3513e8801003c13be9192354f33ecee592bf4869c0bebe359289aaa66990a8cc5fc4346d63742b3020f61c2352c09bf1338e6da778f5666ce72545a290bbc0c33a79127f691afcd16e252fffffd414ab86f0a3c351d2db8ff099c42fed7ce41e5e8b0a660b3f1b85a5a8d542b728df81362bee61", 0xd4}], 0x2, 0x400, 0x7ff)
sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x18, 0x0}, 0x20000804)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @broadcast, @multicast2}, &(0x7f0000000500)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000540)={'vcan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x9, 0x10, 0x48, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8, 0x40, 0x2}})
socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r10=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000240)={r10, 0x1, 0x6, @local}, 0x10)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x2}}, 0x2e)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$nci(r11, &(0x7f00000001c0)=ANY=[@ANYRES8=r4, @ANYRES64=r5, @ANYRES8=r2, @ANYRESHEX=r11], 0xc)

59.612231ms ago: executing program 2 (id=15230):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="180010f20b14040026bd7000fbdbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001800018014000180080001000000000008000200ac141400240002800c0002800500010000000000140001"], 0x50}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000400)=0x1, 0x4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

59.174437ms ago: executing program 1 (id=15231):
socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010000000000ffffffffffffa888", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802)

416.211µs ago: executing program 2 (id=15232):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c87a928caf08f4a11d528efb1c8aa26fbca5f63f46954bb8e6dbeb35b1219294fd6b688fcd8ce738481ed4c65ef5d08af3c65c3ad500554dfe5817b961a1c60977", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000a80), &(0x7f0000000180)=0x8)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'veth0\x00', &(0x7f0000000380)=@ethtool_eee={0x45, 0x10001, 0x10001, 0x7ff, 0xfffffff4, 0x0, 0x3, 0x9f, [0x8, 0x8]}})
write$nci(r0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB, @ANYRES16=r5], 0x4)

0s ago: executing program 0 (id=15233):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x87)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x200, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xaa2c}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000104010300000000000000000100000906000640000400000500010091000000e08795145004000000bb84"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x810)
setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000a62000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r10, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

022] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  621.004575][ T5022] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  621.810162][ T5019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  622.863507][ T5097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11395'.
[  622.872812][ T5081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.030676][ T5116] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11402'.
[  623.093039][ T5120] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11402'.
[  623.678504][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11403'.
[  623.683991][ T5128] netlink: 116 bytes leftover after parsing attributes in process `syz.2.11403'.
[  623.855455][ T5134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  624.461906][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  624.578125][ T5199] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11414'.
[  625.467982][ T5214] netlink: 'syz.2.11417': attribute type 10 has an invalid length.
[  625.472757][ T5214] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  625.477194][ T5214] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  626.970161][ T5221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  627.084855][ T5247] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.11424'.
[  627.087983][ T5247] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.11424'.
[  627.148528][T17517] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  628.107232][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11430'.
[  628.210611][ T5273] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11429'.
[  628.214007][ T5273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11429'.
[  628.851133][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  629.919271][ T5360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11440'.
[  630.004465][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  630.025889][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11444'.
[  630.710567][ T5380] netlink: 'syz.0.11444': attribute type 3 has an invalid length.
[  630.714181][ T5380] netlink: 'syz.0.11444': attribute type 1 has an invalid length.
[  630.718201][ T5380] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11444'.
[  631.087891][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  632.004558][ T5462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11459'.
[  632.019596][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11460'.
[  632.892886][ T5491] netlink: 'syz.1.11464': attribute type 29 has an invalid length.
[  632.896567][ T5491] netlink: 'syz.1.11464': attribute type 29 has an invalid length.
[  632.995197][ T5493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  633.874113][ T5519] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  633.933457][ T5530] pimreg: entered allmulticast mode
[  634.081725][ T5560] nbd: must specify at least one socket
[  634.153937][ T5569] netlink: 'syz.1.11478': attribute type 29 has an invalid length.
[  634.163346][ T5569] netlink: 'syz.1.11478': attribute type 29 has an invalid length.
[  634.262781][ T5573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.266192][ T5577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.327098][ T5582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11483'.
[  634.330347][ T5582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11483'.
[  634.342711][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11483'.
[  635.051895][ T5589] wg1 speed is unknown, defaulting to 1000
[  635.411927][ T5634] nbd: must specify at least one socket
[  635.469438][ T5638] netlink: 'syz.1.11491': attribute type 29 has an invalid length.
[  635.473568][ T5638] netlink: 'syz.1.11491': attribute type 29 has an invalid length.
[  635.576144][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11495'.
[  635.720344][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11496'.
[  635.734123][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  635.962528][ T5660] netlink: 'syz.2.11497': attribute type 1 has an invalid length.
[  635.990886][ T5660] 8021q: adding VLAN 0 to HW filter on device bond7
[  636.577525][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11502'.
[  636.653144][ T5704] nbd: must specify at least one socket
[  636.708022][ T5711] netlink: 'syz.0.11504': attribute type 29 has an invalid length.
[  636.711040][ T5711] netlink: 'syz.0.11504': attribute type 29 has an invalid length.
[  636.756472][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  637.195196][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11507'.
[  638.393770][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11511'.
[  638.556226][ T5770] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  638.559685][ T5770] Bluetooth: hci1: too big key_count value 32778
[  639.318745][ T5795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11521'.
[  639.347679][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11522'.
[  640.243639][ T5816] wg1 speed is unknown, defaulting to 1000
[  641.146060][ T5854] wg1 speed is unknown, defaulting to 1000
[  641.215068][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11530'.
[  641.218044][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11530'.
[  641.968866][ T5893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11534'.
[  643.054346][ T5953] netlink: 'syz.0.11543': attribute type 29 has an invalid length.
[  643.057602][ T5953] netlink: 'syz.0.11543': attribute type 29 has an invalid length.
[  644.545216][ T6018] netlink: 'syz.1.11552': attribute type 29 has an invalid length.
[  644.548209][ T6018] netlink: 'syz.1.11552': attribute type 29 has an invalid length.
[  645.070871][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11554'.
[  647.065164][ T6130] netlink: 'syz.1.11573': attribute type 1 has an invalid length.
[  647.068530][ T6130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11573'.
[  647.073878][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11573'.
[  647.239007][ T6146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11575'.
[  648.285587][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11582'.
[  648.392829][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11586'.
[  648.551998][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11589'.
[  648.560564][ T6213] sctp: [Deprecated]: syz.1.11589 (pid 6213) Use of int in maxseg socket option.
[  648.560564][ T6213] Use struct sctp_assoc_value instead
[  652.063742][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11605'.
[  652.138697][ T6323] netlink: 'syz.0.11608': attribute type 7 has an invalid length.
[  652.143728][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11608'.
[  652.176422][ T6323] 8021q: adding VLAN 0 to HW filter on device bond14
[  652.179475][ T6323] bridge10: port 1(bond14) entered blocking state
[  652.183584][ T6323] bridge10: port 1(bond14) entered disabled state
[  652.186427][ T6323] bond14: entered allmulticast mode
[  652.190849][ T6323] bridge10: port 1(bond14) entered blocking state
[  652.193956][ T6323] bridge10: port 1(bond14) entered forwarding state
[  652.200388][ T6334] nbd: must specify at least one socket
[  652.206117][ T6334] netlink: 'syz.2.11610': attribute type 29 has an invalid length.
[  652.209046][ T6334] netlink: 'syz.2.11610': attribute type 29 has an invalid length.
[  652.212234][ T6334] netlink: 500 bytes leftover after parsing attributes in process `syz.2.11610'.
[  653.097872][ T6367] netlink: 'syz.0.11615': attribute type 21 has an invalid length.
[  653.100522][ T6367] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11615'.
[  653.103626][ T6360] netlink: 'syz.0.11615': attribute type 21 has an invalid length.
[  653.115171][ T6360] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11615'.
[  653.163249][   T27] bridge10: port 1(bond14) entered disabled state
[  653.172228][ T6369] netlink: 'syz.1.11617': attribute type 29 has an invalid length.
[  653.176960][ T6369] netlink: 'syz.1.11617': attribute type 29 has an invalid length.
[  653.180719][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  653.184951][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  653.959122][ T6373] netlink: 'syz.1.11619': attribute type 2 has an invalid length.
[  653.964068][ T6373] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11619'.
[  654.936089][ T6407] nbd: must specify at least one socket
[  654.945289][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11626'.
[  654.954169][ T6407] netlink: 'syz.2.11625': attribute type 29 has an invalid length.
[  654.958512][ T6407] netlink: 'syz.2.11625': attribute type 29 has an invalid length.
[  654.963635][ T6407] netlink: 500 bytes leftover after parsing attributes in process `syz.2.11625'.
[  655.082477][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11627'.
[  656.057883][ T6450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  656.760345][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11638'.
[  658.252740][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  659.123386][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11654'.
[  659.957898][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'.
[  660.085867][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x138
[  660.945292][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11667'.
[  660.972253][ T6633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11668'.
[  662.019299][ T6669] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11675'.
[  662.743647][ T6681] netlink: 'syz.2.11678': attribute type 29 has an invalid length.
[  662.747358][ T6681] netlink: 'syz.2.11678': attribute type 29 has an invalid length.
[  662.751704][ T6681] netlink: 500 bytes leftover after parsing attributes in process `syz.2.11678'.
[  663.646176][ T6714] netlink: 'syz.1.11685': attribute type 29 has an invalid length.
[  663.650210][ T6714] netlink: 'syz.1.11685': attribute type 29 has an invalid length.
[  663.703365][ T6720] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11687'.
[  663.709032][ T6720] netlink: 'syz.1.11687': attribute type 9 has an invalid length.
[  663.835736][ T6712] wg1 speed is unknown, defaulting to 1000
[  663.925618][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11689'.
[  664.705826][ T6747] block nbd1: Unsupported socket: shutdown callout must be supported.
[  664.867332][ T6758] netlink: 'syz.1.11693': attribute type 29 has an invalid length.
[  664.870459][ T6758] netlink: 'syz.1.11693': attribute type 29 has an invalid length.
[  665.093328][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11697'.
[  665.243286][ T6784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11699'.
[  665.638063][ T6791] netlink: 'syz.0.11701': attribute type 29 has an invalid length.
[  665.644740][ T6791] netlink: 'syz.0.11701': attribute type 29 has an invalid length.
[  665.959346][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11706'.
[  666.047675][ T6818] netlink: 'syz.0.11708': attribute type 29 has an invalid length.
[  666.338930][ T6845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  666.339172][ T6857] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  667.213675][ T6866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.268281][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11719'.
[  667.322591][ T6910] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  667.333778][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11720'.
[  667.387342][ T6923] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  667.587026][ T6941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  667.593920][ T6941] IPv6: NLM_F_CREATE should be set when creating new route
[  667.596916][ T6941] IPv6: NLM_F_CREATE should be set when creating new route
[  667.599880][ T6941] IPv6: NLM_F_CREATE should be set when creating new route
[  668.411977][ T6968] validate_nla: 3 callbacks suppressed
[  668.411987][ T6968] netlink: 'syz.1.11730': attribute type 29 has an invalid length.
[  668.431856][ T6968] netlink: 'syz.1.11730': attribute type 29 has an invalid length.
[  668.558553][ T6991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11735'.
[  668.562153][ T6991] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11735'.
[  668.566523][ T6991] netlink: 'syz.2.11735': attribute type 5 has an invalid length.
[  668.569336][ T6991] netlink: 'syz.2.11735': attribute type 6 has an invalid length.
[  668.572164][ T6991] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11735'.
[  668.630608][ T5710] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  669.442329][ T7020] netlink: 'syz.1.11739': attribute type 29 has an invalid length.
[  669.450639][ T7020] netlink: 'syz.1.11739': attribute type 29 has an invalid length.
[  669.484538][ T7022] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  669.502940][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11742'.
[  671.175937][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11751'.
[  671.326462][ T7092] block nbd1: Unsupported socket: shutdown callout must be supported.
[  671.360497][ T7095] netlink: 'syz.0.11753': attribute type 29 has an invalid length.
[  671.383118][ T7095] netlink: 'syz.0.11753': attribute type 29 has an invalid length.
[  672.181729][ T7097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  672.361518][ T7147] netlink: 'syz.0.11761': attribute type 29 has an invalid length.
[  672.365283][ T7147] netlink: 'syz.0.11761': attribute type 29 has an invalid length.
[  673.426204][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11769'.
[  673.429115][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11769'.
[  674.159387][ T7207] validate_nla: 1 callbacks suppressed
[  674.159398][ T7207] netlink: 'syz.1.11772': attribute type 4 has an invalid length.
[  674.165220][ T7207] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11772'.
[  674.394493][ T7212] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11773'.
[  674.477172][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11777'.
[  676.300341][ T7286] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  676.560709][ T7323] veth33: entered promiscuous mode
[  676.623154][ T7329] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  676.996084][ T7365] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  676.996585][ T7354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  677.053495][ T7373] netlink: 'syz.1.11801': attribute type 29 has an invalid length.
[  677.056988][ T7373] netlink: 'syz.1.11801': attribute type 29 has an invalid length.
[  678.027836][ T7428] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  679.070986][ T7494] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  681.454305][ T7616] netlink: 'syz.0.11840': attribute type 29 has an invalid length.
[  681.460691][ T7616] netlink: 'syz.0.11840': attribute type 29 has an invalid length.
[  681.548725][ T7624] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  683.148372][ T7639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  683.587423][ T7689] netlink: 'syz.1.11850': attribute type 9 has an invalid length.
[  683.770009][ T7697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.039145][ T7716] tap0: tun_chr_ioctl cmd 1074025677
[  684.040983][ T7716] tap0: linktype set to 776
[  684.419002][ T7752] block nbd1: Unsupported socket: shutdown callout must be supported.
[  685.549821][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11868'.
[  685.849288][ T7841] block nbd1: Unsupported socket: shutdown callout must be supported.
[  686.635882][ T7879] netlink: 'syz.0.11880': attribute type 29 has an invalid length.
[  686.639541][ T7879] netlink: 'syz.0.11880': attribute type 29 has an invalid length.
[  687.059503][ T7912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  687.062137][ T7912] IPv6: NLM_F_CREATE should be set when creating new route
[  687.064741][ T7912] IPv6: NLM_F_CREATE should be set when creating new route
[  687.067547][ T7912] IPv6: NLM_F_CREATE should be set when creating new route
[  687.070809][ T7912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  687.077908][ T7893] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11884'.
[  687.207384][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11888'.
[  688.013677][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  688.204235][ T7961] netlink: 'syz.2.11894': attribute type 29 has an invalid length.
[  688.218097][ T7961] netlink: 'syz.2.11894': attribute type 29 has an invalid length.
[  688.221878][ T7961] netlink: 500 bytes leftover after parsing attributes in process `syz.2.11894'.
[  689.814692][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11904'.
[  690.165407][ T8052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  691.277737][ T8120] netlink: 596 bytes leftover after parsing attributes in process `syz.0.11920'.
[  692.135751][ T8126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  692.188000][ T8143] block nbd1: Unsupported socket: shutdown callout must be supported.
[  692.331430][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11927'.
[  693.299975][ T8185] netlink: 'syz.0.11931': attribute type 4 has an invalid length.
[  693.989213][ T8190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  694.152605][ T8207] block nbd1: Unsupported socket: shutdown callout must be supported.
[  695.068101][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11940'.
[  695.093592][ T8253] netlink: 'syz.0.11942': attribute type 29 has an invalid length.
[  695.096611][ T8253] netlink: 'syz.0.11942': attribute type 29 has an invalid length.
[  695.137576][ T8257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  696.089417][ T8293] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  696.186126][ T8326] netlink: 'syz.0.11950': attribute type 12 has an invalid length.
[  697.085056][ T8354] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11955'.
[  697.960103][ T8361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  697.960143][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  703.392118][ T8515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  703.532940][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11983'.
[  703.900346][ T8588] netlink: 'syz.0.11987': attribute type 1 has an invalid length.
[  703.920690][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11987'.
[  705.833188][ T8643] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  705.983525][ T8670] syzkaller0: entered promiscuous mode
[  705.985563][ T8670] syzkaller0: entered allmulticast mode
[  706.818335][T17517] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  708.545934][ T8748] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004
[  708.548341][ T8737] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004
[  708.559579][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  711.251535][ T8823] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  711.255414][ T8811] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  711.624656][ T8868] 8021q: VLANs not supported on ipvlan0
[  712.203019][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12028'.
[  712.356631][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12030'.
[  712.415793][ T8908] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  713.231134][ T8926] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  713.237671][ T8941] netem: unknown loss type 0
[  713.244870][ T8941] netem: change failed
[  713.528677][ T8974] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  714.476979][ T9028] bridge: RTM_NEWNEIGH with invalid ether address
[  714.582281][ T9029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  714.586778][ T9030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  714.727440][ T9056] bond0: (slave wlan1): Releasing backup interface
[  714.730440][ T9056] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode
[  714.797164][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x506
[  714.823561][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12051'.
[  715.573426][ T9073] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  715.673039][ T9089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12054'.
[  715.725073][ T9089] syzkaller0: entered promiscuous mode
[  715.727026][ T9089] syzkaller0: entered allmulticast mode
[  718.568384][ T9191] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  719.539731][ T9248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12079'.
[  720.963384][ T9312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  721.107284][ T9350] netlink: 'syz.2.12095': attribute type 29 has an invalid length.
[  721.110764][ T9350] netlink: 'syz.2.12095': attribute type 29 has an invalid length.
[  721.115472][ T9350] netlink: 500 bytes leftover after parsing attributes in process `syz.2.12095'.
[  721.186176][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12097'.
[  721.458579][ T5710] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  723.293629][ T9440] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  723.376801][ T9462] netlink: 'syz.0.12111': attribute type 56 has an invalid length.
[  723.382780][ T9462] netlink: 'syz.0.12111': attribute type 1 has an invalid length.
[  723.386586][ T9462] bond0: entered promiscuous mode
[  723.499219][ T9479] sctp: [Deprecated]: syz.2.12114 (pid 9479) Use of struct sctp_assoc_value in delayed_ack socket option.
[  723.499219][ T9479] Use struct sctp_sack_info instead
[  723.508136][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12114'.
[  723.511118][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12114'.
[  723.542285][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  724.314808][ T9509] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  724.342025][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12116'.
[  724.348694][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12116'.
[  726.255372][ T9579] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20004
[  726.261599][ T9579] nbd: must specify a size in bytes for the device
[  726.436945][ T9608] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  726.438587][ T9586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  726.641872][ T9623] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  726.675190][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12140'.
[  726.803937][ T9674] wg1 speed is unknown, defaulting to 1000
[  726.999767][ T9686] tap0: tun_chr_ioctl cmd 1074025677
[  727.003258][ T9686] tap0: linktype set to 776
[  727.745759][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12146'.
[  727.887574][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12154'.
[  728.231486][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12158'.
[  728.243514][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12158'.
[  728.266037][ T9776] openvswitch: netlink: Flow actions attr not present in new flow.
[  729.785455][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12165'.
[  730.935486][ T9878] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  732.241022][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12179'.
[  732.701590][ T9911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  732.901059][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12182'.
[  732.964692][ T9962] netlink: 'syz.2.12182': attribute type 4 has an invalid length.
[  733.708677][ T9976] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  733.714107][ T9979] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  733.861431][ T9994] can: request_module (can-proto-0) failed.
[  734.668849][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12191'.
[  735.477836][T10048] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  735.574933][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12200'.
[  735.694137][ T5710] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  736.606365][ T5710] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  737.389266][T10123] netlink: 'syz.2.12208': attribute type 29 has an invalid length.
[  737.400631][T10123] netlink: 'syz.2.12208': attribute type 29 has an invalid length.
[  738.494712][T10180] netlink: 'syz.0.12214': attribute type 29 has an invalid length.
[  740.193511][T10217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12222'.
[  740.285800][T10230] netlink: 'syz.1.12223': attribute type 16 has an invalid length.
[  741.171313][T10252] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  741.171546][T10245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  741.238230][T10261] netlink: 'syz.2.12229': attribute type 29 has an invalid length.
[  741.242761][T10261] netlink: 'syz.2.12229': attribute type 29 has an invalid length.
[  741.246451][T10261] netlink: 500 bytes leftover after parsing attributes in process `syz.2.12229'.
[  741.860675][T10302] sctp: [Deprecated]: syz.2.12235 (pid 10302) Use of int in maxseg socket option.
[  741.860675][T10302] Use struct sctp_assoc_value instead
[  742.149650][T10318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  742.412173][T10365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  743.417632][T10419] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR
[  744.298922][T10470] syzkaller1: entered promiscuous mode
[  744.304559][T10470] syzkaller1: entered allmulticast mode
[  745.184015][T10495] netlink: 'syz.0.12262': attribute type 16 has an invalid length.
[  748.070378][T10605] netlink: 'syz.0.12278': attribute type 1 has an invalid length.
[  748.084140][T10605] bond17: entered promiscuous mode
[  748.086210][T10605] 8021q: adding VLAN 0 to HW filter on device bond17
[  748.097099][T10605] 8021q: adding VLAN 0 to HW filter on device bond17
[  748.099779][T10605] bond17: (slave wireguard0): The slave device specified does not support setting the MAC address
[  748.104424][T10605] bond17: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  748.111018][T10605] bond17: (slave wireguard0): making interface the new active one
[  748.114087][T10605] wireguard0: entered promiscuous mode
[  748.117214][T10605] bond17: (slave wireguard0): Enslaving as an active interface with an up link
[  750.082445][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12293'.
[  750.085440][T10691] netlink: 'syz.0.12293': attribute type 32 has an invalid length.
[  750.088566][T10691] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6)
[  750.116550][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12292'.
[  750.171073][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  750.929185][T10703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  750.976029][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12295'.
[  750.979808][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12295'.
[  751.596672][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12299'.
[  751.598180][T10735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12299'.
[  751.900042][T10746] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  751.903469][T10745] netlink: 'syz.0.12301': attribute type 10 has an invalid length.
[  751.909120][T10745] syz_tun: entered promiscuous mode
[  752.882072][T10795] syzkaller1: entered promiscuous mode
[  752.883987][T10795] syzkaller1: entered allmulticast mode
[  754.689324][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12315'.
[  755.449480][T10836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  755.543136][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12319'.
[  755.582369][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12320'.
[  755.588253][T10873] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  755.638814][T10883] delete_channel: no stack
[  756.682718][T10917] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  756.717859][T10928] netlink: 'syz.1.12330': attribute type 29 has an invalid length.
[  756.724241][T10928] netlink: 'syz.1.12330': attribute type 29 has an invalid length.
[  756.929386][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12332'.
[  757.316301][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12334'.
[  757.748645][T10945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  757.850928][T10966] netlink: 'syz.0.12337': attribute type 29 has an invalid length.
[  757.857788][T10966] netlink: 'syz.0.12337': attribute type 29 has an invalid length.
[  758.811681][T10998] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  759.238253][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12350'.
[  759.259492][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  760.179874][T11073] netlink: 'syz.0.12353': attribute type 17 has an invalid length.
[  762.914829][T11148] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  763.005895][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12375'.
[  763.036928][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12377'.
[  763.208659][T11191] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  765.030361][T11257] netlink: 'syz.1.12393': attribute type 1 has an invalid length.
[  765.040168][T11257] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12393'.
[  765.167737][T11271] netlink: 'syz.2.12396': attribute type 1 has an invalid length.
[  766.043059][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12401'.
[  766.055578][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12402'.
[  767.424368][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12409'.
[  767.464205][T11335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  767.559844][T11351] netlink: 'syz.0.12413': attribute type 2 has an invalid length.
[  767.564163][T11351] netlink: 'syz.0.12413': attribute type 2 has an invalid length.
[  767.670465][T11360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  767.677447][T11356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  768.135764][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12421'.
[  768.714267][T11428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  768.732769][T11443] netlink: 'syz.2.12424': attribute type 11 has an invalid length.
[  769.634924][T11469] netlink: 348 bytes leftover after parsing attributes in process `syz.0.12427'.
[  769.681021][T11475] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12431'.
[  769.688634][T11475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  769.693618][T11475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  770.620353][T11537] sctp: [Deprecated]: syz.1.12441 (pid 11537) Use of int in max_burst socket option deprecated.
[  770.620353][T11537] Use struct sctp_assoc_value instead
[  770.763798][T11557] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  772.940077][ T5710] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  773.747520][T11706] netlink: 'syz.2.12469': attribute type 17 has an invalid length.
[  773.902636][T11711] block nbd1: server does not support multiple connections per device.
[  773.911104][T11711] block nbd1: shutting down sockets
[  773.961571][T11570] Bluetooth: hci2: command 0x0405 tx timeout
[  774.189714][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12475'.
[  774.394116][T11776] netlink: 'syz.1.12484': attribute type 29 has an invalid length.
[  774.398680][T11776] netlink: 'syz.1.12484': attribute type 29 has an invalid length.
[  775.514359][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12489'.
[  776.352988][T11852] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  776.669968][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12499'.
[  777.169682][T11847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  777.293975][T11892] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  778.155171][T11922] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  778.357752][T11943] tipc: Resetting bearer <eth:gre0>
[  778.366675][T11943] bond0: (slave batadv0): Releasing backup interface
[  778.370796][T11943] batadv0: left promiscuous mode
[  778.374496][T11943] tipc: Resetting bearer <eth:syzkaller0>
[  778.454735][T11952] netlink: 'syz.2.12514': attribute type 10 has an invalid length.
[  779.195753][T11969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  779.332433][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12522'.
[  779.335537][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12522'.
[  779.479682][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12525'.
[  780.500814][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12533'.
[  781.318747][T12055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  781.433225][T12094] netlink: 'syz.2.12537': attribute type 29 has an invalid length.
[  781.436267][T12094] netlink: 'syz.2.12537': attribute type 29 has an invalid length.
[  781.439151][T12094] netlink: 500 bytes leftover after parsing attributes in process `syz.2.12537'.
[  781.857755][T12140] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  781.869024][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12543'.
[  781.949586][T12161] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12541'.
[  782.044966][T12174] netlink: 'syz.2.12551': attribute type 2 has an invalid length.
[  782.047681][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12551'.
[  782.051028][T12174] netlink: 'syz.2.12551': attribute type 2 has an invalid length.
[  782.054210][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12551'.
[  782.068540][T12174] wg1 speed is unknown, defaulting to 1000
[  782.375052][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12556'.
[  783.369119][T12252] wg1 speed is unknown, defaulting to 1000
[  785.342914][T12339] netlink: 'syz.0.12580': attribute type 29 has an invalid length.
[  785.345968][T12339] netlink: 'syz.0.12580': attribute type 29 has an invalid length.
[  786.222916][T12365] macsec0: entered promiscuous mode
[  786.225266][T12365] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  786.228389][T12365] macsec0: entered allmulticast mode
[  787.450268][T12437] __nla_validate_parse: 2 callbacks suppressed
[  787.450280][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12597'.
[  787.466009][T12437] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  787.525479][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12598'.
[  788.455111][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12607'.
[  789.355324][T12506] tap0: tun_chr_ioctl cmd 1074025676
[  789.357161][T12506] tap0: owner set to 0
[  789.358679][T12506] tap0: tun_chr_ioctl cmd 1074025676
[  789.360480][T12506] tap0: owner set to 0
[  789.361365][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12615'.
[  789.363062][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12614'.
[  789.616776][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12622'.
[  789.642563][T12530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  789.753170][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12626'.
[  789.758787][T12563] gtp2: entered promiscuous mode
[  789.760470][T12563] gtp2: entered allmulticast mode
[  789.843765][T12563] wg1 speed is unknown, defaulting to 1000
[  789.850255][T12564] wg1 speed is unknown, defaulting to 1000
[  789.871951][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  790.639908][T12604] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  790.779998][T12635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12638'.
[  790.828506][T12643] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  791.899711][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  791.906941][T12689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  791.908973][T12695] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  792.454983][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12646'.
[  793.724683][T12730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  793.982766][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  795.026947][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12662'.
[  795.348740][T12876] netlink: 'syz.2.12668': attribute type 16 has an invalid length.
[  795.551534][T12917] netlink: 'syz.1.12672': attribute type 1 has an invalid length.
[  795.554235][T12917] netlink: 120 bytes leftover after parsing attributes in process `syz.1.12672'.
[  795.608646][T12907] netlink: 'syz.2.12673': attribute type 1 has an invalid length.
[  795.611645][T12907] netlink: 248 bytes leftover after parsing attributes in process `syz.2.12673'.
[  795.703731][T12926] netlink: 'syz.2.12675': attribute type 3 has an invalid length.
[  796.704203][T12955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  796.988496][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12687'.
[  797.724009][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12690'.
[  797.869765][T13059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12694'.
[  798.747727][T13069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  798.797104][T13091] netlink: 'syz.1.12702': attribute type 29 has an invalid length.
[  798.800576][T13091] netlink: 'syz.1.12702': attribute type 29 has an invalid length.
[  799.003296][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12704'.
[  799.066859][T13108] netlink: 'syz.1.12704': attribute type 1 has an invalid length.
[  799.819752][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12713'.
[  800.298955][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  801.104965][T13220] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  801.189404][T13229] netlink: 'syz.2.12725': attribute type 21 has an invalid length.
[  801.198289][T13229] netlink: 'syz.2.12725': attribute type 22 has an invalid length.
[  801.202126][T13229] netlink: 'syz.2.12725': attribute type 23 has an invalid length.
[  801.205538][T13229] netlink: 136 bytes leftover after parsing attributes in process `syz.2.12725'.
[  802.156468][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12734'.
[  802.278542][T13285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  802.290769][T13286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  802.324106][T13298] netlink: 'syz.1.12738': attribute type 1 has an invalid length.
[  802.327123][T13298] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12738'.
[  802.330407][T13298] netlink: 'syz.1.12738': attribute type 1 has an invalid length.
[  802.369806][T13311] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  802.400154][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12741'.
[  802.409224][T13319] netlink: 'syz.1.12741': attribute type 3 has an invalid length.
[  802.502155][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12745'.
[  802.580724][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  805.432774][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12762'.
[  805.436171][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12762'.
[  805.720448][T13491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12771'.
[  805.771708][T13498] netlink: 'syz.1.12773': attribute type 16 has an invalid length.
[  806.442643][ T5882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.446457][ T5882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.471639][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.671878][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.788005][T13534] 8021q: adding VLAN 0 to HW filter on device bond13
[  806.809101][T13534] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  806.813045][T13534] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  806.820034][T13534] bond1: (slave macvlan2): Releasing backup interface
[  806.841742][ T2208] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.881076][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12782'.
[  807.125217][T13575] netlink: 'syz.2.12784': attribute type 8 has an invalid length.
[  807.451392][ T9643] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  808.023814][T13592] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  808.119389][T13621] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR
[  808.223755][T13640] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_cmd_wq": -EINTR
[  809.218875][T13851] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  810.404120][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12804'.
[  810.681364][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  811.410792][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12814'.
[  812.229351][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12816'.
[  812.253553][T13993] netlink: 'syz.2.12818': attribute type 16 has an invalid length.
[  812.402082][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12822'.
[  812.410279][T14010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12822'.
[  812.931796][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12827'.
[  813.572785][T14071] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  815.227205][T14128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12836'.
[  815.356589][T14157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12842'.
[  816.157519][T14178] batadv1: entered promiscuous mode
[  816.159723][T14178] batadv1: entered allmulticast mode
[  816.364752][T14187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  816.497213][T14223] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  817.300657][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12857'.
[  817.545241][T14265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  818.654167][T14331] netlink: 'syz.2.12870': attribute type 16 has an invalid length.
[  819.251329][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  819.678403][T14391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12878'.
[  820.553584][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12881'.
[  820.578171][T14418] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  821.468403][T14438] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  821.809817][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12890'.
[  822.339455][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12894'.
[  822.434437][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12897'.
[  823.236936][T14519] netlink: 'syz.0.12900': attribute type 16 has an invalid length.
[  823.428719][T14545] IPVS: set_ctl: invalid protocol: 48500 127.0.0.1:20000
[  825.496527][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12912'.
[  826.074133][T14634] netlink: 'syz.0.12919': attribute type 29 has an invalid length.
[  826.078166][T14634] netlink: 'syz.0.12919': attribute type 29 has an invalid length.
[  826.977058][T14658] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  826.978604][T14651] openvswitch: netlink: Message has 8 unknown bytes.
[  827.387227][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  828.243735][T14714] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12930'.
[  828.364294][T14729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.367832][T14729] syzkaller0: entered promiscuous mode
[  828.370181][T14729] syzkaller0: entered allmulticast mode
[  828.432746][T14729] tipc: Resetting bearer <eth:syzkaller0>
[  828.916354][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12938'.
[  829.033631][T14752] netlink: 'syz.1.12939': attribute type 5 has an invalid length.
[  829.119362][T14716] tipc: Resetting bearer <eth:syzkaller0>
[  829.132462][T14716] tipc: Disabling bearer <eth:syzkaller0>
[  829.278993][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  830.128150][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12944'.
[  830.132080][T14784] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  830.135459][T14784] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  831.065238][T14830] netlink: 'syz.1.12952': attribute type 1 has an invalid length.
[  831.068558][T14830] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12952'.
[  831.933660][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12956'.
[  832.003467][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  832.068938][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12957'.
[  832.097224][T14871] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12959'.
[  832.902833][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12962'.
[  834.636136][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12975'.
[  834.650237][T14949] netlink: 'syz.2.12975': attribute type 1 has an invalid length.
[  834.653761][T14949] netlink: 'syz.2.12975': attribute type 2 has an invalid length.
[  834.656473][T14949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12975'.
[  834.747529][T14965] vxcan1 speed is unknown, defaulting to 1000
[  834.754217][T14965] vxcan1 speed is unknown, defaulting to 1000
[  834.757285][T14965] vxcan1 speed is unknown, defaulting to 1000
[  834.829158][T14968] syzkaller1: entered promiscuous mode
[  834.831723][T14968] syzkaller1: entered allmulticast mode
[  834.892739][ T9643] vxcan1 speed is unknown, defaulting to 1000
[  834.895861][T14965] infiniband syz2: set down
[  834.897985][T14965] infiniband syz2: added vxcan1
[  834.939634][T14965] RDS/IB: syz2: added
[  834.944165][T14965] smc: adding ib device syz2 with port count 1
[  834.947040][T14965] smc:    ib device syz2 port 1 has pnetid 
[  834.952683][ T9643] vxcan1 speed is unknown, defaulting to 1000
[  834.959782][T14965] vxcan1 speed is unknown, defaulting to 1000
[  835.108405][T14965] vxcan1 speed is unknown, defaulting to 1000
[  835.210476][T14965] vxcan1 speed is unknown, defaulting to 1000
[  835.241370][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  835.542925][T15023] netlink: 277 bytes leftover after parsing attributes in process `syz.0.12991'.
[  835.558011][T15023] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  835.900263][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12993'.
[  836.048045][T15045] netlink: 'syz.1.12994': attribute type 10 has an invalid length.
[  836.051641][T15045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12994'.
[  836.074198][T15045] batman_adv: batadv0: Adding interface: virt_wifi0
[  836.076520][T15045] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  836.106385][T15045] batman_adv: batadv0: Interface activated: virt_wifi0
[  836.408041][T15078] workqueue: Failed to create a rescuer kthread for wq "nfc15_nci_rx_wq": -EINTR
[  837.086323][T15128] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  837.093693][T15128] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  837.095989][T15140] netlink: 'syz.1.13007': attribute type 1 has an invalid length.
[  837.101053][T15140] netlink: 'syz.1.13007': attribute type 2 has an invalid length.
[  837.108608][T15128] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  837.167968][T15128] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  837.172098][T15128] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  837.175650][T15128] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  837.220470][T15128] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  837.224198][T15128] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  837.227539][T15128] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  837.267964][T15128] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  837.277070][T15128] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  837.292295][T15128] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  837.379494][ T5882] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  837.383742][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  837.388827][ T5882] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  837.398282][ T5882] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  837.402673][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  837.405903][ T5882] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  837.417839][ T5882] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  837.420739][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  837.424395][ T5882] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  837.433358][ T5882] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  837.436209][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  837.438988][ T5882] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  838.081804][T15160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  838.084936][T15168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  838.285256][T15204] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13015'.
[  839.049833][T15213] wg1 speed is unknown, defaulting to 1000
[  839.063819][T15213] vxcan1 speed is unknown, defaulting to 1000
[  839.235484][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13022'.
[  839.459845][T15253] netlink: 47 bytes leftover after parsing attributes in process `syz.2.13025'.
[  840.277420][T15253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  840.443353][T15283] netlink: 'syz.2.13030': attribute type 13 has an invalid length.
[  840.451667][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13030'.
[  840.454745][T15283] netlink: 'syz.2.13030': attribute type 13 has an invalid length.
[  840.461257][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13030'.
[  842.227437][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13037'.
[  842.287966][T15330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  842.354217][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13041'.
[  842.358702][T15352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13041'.
[  842.551615][T15372] netlink: 240 bytes leftover after parsing attributes in process `syz.0.13044'.
[  843.317525][T15392] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.13048'.
[  843.343573][T15392] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  843.347206][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13049'.
[  843.471982][T15414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13051'.
[  844.299847][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13055'.
[  844.399037][T15428] macvlan0: entered promiscuous mode
[  844.403751][T15428] bond0: entered promiscuous mode
[  844.406100][T15428] macvlan0: entered allmulticast mode
[  844.408561][T15428] bond0: entered allmulticast mode
[  844.413380][T15428] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  844.506901][T15459] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  845.455538][T15487] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  845.829633][T15529] netlink: 'syz.1.13074': attribute type 29 has an invalid length.
[  845.839769][T15529] netlink: 'syz.1.13074': attribute type 29 has an invalid length.
[  845.894793][T15535] smc: net device gre0 applied user defined pnetid SYZ1
[  845.900090][T15535] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1
[  846.012356][T15555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13080'.
[  846.020333][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13080'.
[  846.026573][T15555] netlink: 196 bytes leftover after parsing attributes in process `syz.0.13080'.
[  846.720055][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13081'.
[  847.674949][T17517] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  848.527391][T15605] netlink: 5652 bytes leftover after parsing attributes in process `syz.2.13089'.
[  848.548108][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13091'.
[  848.787697][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13096'.
[  849.950913][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13105'.
[  850.795087][T15726] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  850.951748][T15747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  850.957982][T15748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  851.731103][T15760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  852.684938][T15837] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  852.730041][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13129'.
[  853.711053][T15887] 8021q: adding VLAN 0 to HW filter on device bond18
[  854.441355][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  854.713929][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13142'.
[  856.739716][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13152'.
[  858.441418][ T5858] Bluetooth: hci2: command 0x0405 tx timeout
[  859.542415][T16207] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  860.724033][T16265] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  860.927810][T16292] workqueue: Failed to create a rescuer kthread for wq "nfc10_nci_tx_wq": -EINTR
[  861.865162][T16351] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13199'.
[  861.968066][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  862.054999][T16368] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  862.696717][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13201'.
[  862.790064][T16377] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13203'.
[  862.860507][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13205'.
[  863.862689][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13209'.
[  863.918118][T16436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  864.189420][T16478] 8021q: adding VLAN 0 to HW filter on device bond19
[  864.256828][T16484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  864.438068][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13227'.
[  865.242488][T16545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13232'.
[  865.245553][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13232'.
[  865.270161][T16550] netlink: 'syz.2.13233': attribute type 1 has an invalid length.
[  865.277728][T16551] bridge24: entered promiscuous mode
[  865.279847][T16551] bridge24: entered allmulticast mode
[  865.290976][T16550] bond8: entered promiscuous mode
[  865.293286][T16550] bond8: entered allmulticast mode
[  866.133235][T16570] netlink: 'syz.2.13236': attribute type 5 has an invalid length.
[  866.168567][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13235'.
[  866.340479][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13238'.
[  866.579971][T16604] wg1 speed is unknown, defaulting to 1000
[  866.584105][T16604] vxcan1 speed is unknown, defaulting to 1000
[  866.602972][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  866.696885][T16626] pimreg: entered allmulticast mode
[  867.328057][T16690] netlink: 'syz.0.13256': attribute type 29 has an invalid length.
[  867.337999][T16690] netlink: 'syz.0.13256': attribute type 29 has an invalid length.
[  867.343474][T16682] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  867.398998][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13258'.
[  867.425589][T16703] netlink: 'syz.0.13258': attribute type 29 has an invalid length.
[  867.438339][T16703] netlink: 'syz.0.13258': attribute type 29 has an invalid length.
[  867.442604][T16703] netlink: 500 bytes leftover after parsing attributes in process `syz.0.13258'.
[  869.081513][T11570] Bluetooth: hci1: command 0x0406 tx timeout
[  869.434781][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13272'.
[  871.396588][T16857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  871.592807][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  872.363667][T16906] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.13290'.
[  872.492858][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13293'.
[  872.552798][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13293'.
[  872.556469][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13293'.
[  872.560113][T16933] netlink: 'syz.2.13293': attribute type 4 has an invalid length.
[  872.575777][T16934] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  873.614258][T16973] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  874.668239][T17048] netlink: 'syz.0.13312': attribute type 29 has an invalid length.
[  874.681044][T17048] netlink: 'syz.0.13312': attribute type 29 has an invalid length.
[  874.754541][T17055] netlink: 352 bytes leftover after parsing attributes in process `syz.0.13313'.
[  874.794416][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  875.646866][T17084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13320'.
[  875.650483][T17084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13320'.
[  875.773619][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13324'.
[  875.803136][T17108] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  875.849822][T17119] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  876.271960][T17148] netlink: 'syz.0.13332': attribute type 1 has an invalid length.
[  876.295714][T17148] 8021q: adding VLAN 0 to HW filter on device bond20
[  877.235850][T17187] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  878.184136][T17232] syzkaller1: entered promiscuous mode
[  878.186227][T17232] syzkaller1: entered allmulticast mode
[  878.234118][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13348'.
[  878.940764][T17244] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  878.982319][T17253] sctp: [Deprecated]: syz.0.13351 (pid 17253) Use of int in maxseg socket option.
[  878.982319][T17253] Use struct sctp_assoc_value instead
[  879.035110][T17253] netlink: 'syz.0.13351': attribute type 1 has an invalid length.
[  879.037733][T17253] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13351'.
[  879.070602][T17261] netlink: 'syz.2.13354': attribute type 56 has an invalid length.
[  879.074652][T17261] netlink: 'syz.2.13354': attribute type 1 has an invalid length.
[  879.082176][T17265] netlink: 'syz.2.13354': attribute type 56 has an invalid length.
[  879.084839][T17265] netlink: 'syz.2.13354': attribute type 1 has an invalid length.
[  879.124598][T17271] netlink: 'syz.1.13355': attribute type 29 has an invalid length.
[  879.128407][T17271] netlink: 'syz.1.13355': attribute type 29 has an invalid length.
[  879.156173][T17261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  879.160054][T17265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  879.169309][T17277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13356'.
[  879.258680][T17288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13358'.
[  880.328857][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13362'.
[  883.498266][T17492] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  883.647638][T17507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  883.660948][T17505] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001
[  883.832837][T17520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  885.687736][T17601] netlink: 'syz.0.13409': attribute type 16 has an invalid length.
[  885.724957][T17606] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13410'.
[  885.729099][T17606] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13410'.
[  885.741369][T17606] netlink: 'syz.1.13410': attribute type 5 has an invalid length.
[  885.744601][T17606] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13410'.
[  885.756714][T17615] openvswitch: netlink: Key type 12559 is out of range max 32
[  885.831568][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  886.697649][T17629] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  886.746066][T17640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  886.752563][T17645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  886.922644][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13419'.
[  887.049284][T17668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  887.052741][T17669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  887.088212][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13422'.
[  887.485708][T17674] netlink: 'syz.1.13423': attribute type 16 has an invalid length.
[  887.660254][T17697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13425'.
[  887.667730][T17679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  887.945265][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13427'.
[  888.006436][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13429'.
[  888.127658][T17742] openvswitch: netlink: Key type 12559 is out of range max 32
[  888.148498][T17737] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  888.212248][T17752] netlink: 'syz.2.13434': attribute type 16 has an invalid length.
[  888.317358][T17768] netlink: 277 bytes leftover after parsing attributes in process `syz.2.13436'.
[  889.099520][T17783] openvswitch: netlink: Key type 12559 is out of range max 32
[  889.122075][T17778] sctp: [Deprecated]: syz.1.13439 (pid 17778) Use of struct sctp_assoc_value in delayed_ack socket option.
[  889.122075][T17778] Use struct sctp_sack_info instead
[  889.174960][T17794] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  889.189796][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13438'.
[  889.295076][T17816] veth0_to_bond: entered allmulticast mode
[  889.297487][T17816] openvswitch: netlink: Key type 12559 is out of range max 32
[  889.487914][T17846] openvswitch: netlink: Key type 12559 is out of range max 32
[  889.607357][ T5710] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  890.455068][T17879] openvswitch: netlink: Key type 12559 is out of range max 32
[  891.395084][T17911] netlink: 'syz.0.13461': attribute type 29 has an invalid length.
[  891.398481][T17911] netlink: 'syz.0.13461': attribute type 29 has an invalid length.
[  892.229042][T17913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  892.385217][T17955] netlink: 'syz.0.13469': attribute type 29 has an invalid length.
[  892.389229][T17955] netlink: 'syz.0.13469': attribute type 29 has an invalid length.
[  894.057524][T17987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  894.184510][T18021] netlink: 'syz.2.13477': attribute type 16 has an invalid length.
[  894.208305][T18014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  894.211865][T18026] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  894.279235][T18032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  894.336129][T18038] __nla_validate_parse: 1 callbacks suppressed
[  894.336145][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13479'.
[  895.493441][T18089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  895.576856][T18117] openvswitch: netlink: Key type 12559 is out of range max 32
[  896.514835][T18142] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  896.557643][T18149] openvswitch: netlink: Key type 12559 is out of range max 32
[  896.767731][T18177] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  897.503560][T18195] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  897.537373][T18192] netlink: 'syz.2.13505': attribute type 16 has an invalid length.
[  898.464775][T18237] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  898.511688][T18245] openvswitch: netlink: Key type 271 is out of range max 32
[  900.140977][T18291] netlink: 'syz.2.13524': attribute type 29 has an invalid length.
[  900.145770][T18291] netlink: 'syz.2.13524': attribute type 29 has an invalid length.
[  900.149352][T18291] netlink: 500 bytes leftover after parsing attributes in process `syz.2.13524'.
[  900.173330][T18284] tipc: Resetting bearer <eth:gre0>
[  900.175326][T18284] tipc: Resetting bearer <eth:gre0>
[  900.192449][T18284] syz_tun: left promiscuous mode
[  900.207660][T18284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  900.214107][ T8312] syz1: Port: 1 Link ACTIVE
[  900.505251][T18316] netlink: 'syz.2.13525': attribute type 1 has an invalid length.
[  900.508499][T18316] netlink: 'syz.2.13525': attribute type 1 has an invalid length.
[  900.613899][T18325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  900.717737][ T5710] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  900.948209][T18352] wg1 speed is unknown, defaulting to 1000
[  900.955285][T18352] vxcan1 speed is unknown, defaulting to 1000
[  901.897465][T18416] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  902.826652][T18491] openvswitch: netlink: Key type 12559 is out of range max 32
[  904.068147][T18550] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  907.971017][T18581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  907.980751][T18590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  909.120222][T18665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13584'.
[  911.009059][T18733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13597'.
[  912.026933][T18760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  913.053487][T18821] netlink: 'syz.2.13615': attribute type 29 has an invalid length.
[  913.056584][T18821] netlink: 'syz.2.13615': attribute type 29 has an invalid length.
[  913.059575][T18821] netlink: 500 bytes leftover after parsing attributes in process `syz.2.13615'.
[  913.234975][T18840] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  913.335510][T18850] netlink: 'syz.1.13618': attribute type 3 has an invalid length.
[  913.342917][T18850] netlink: 'syz.1.13618': attribute type 3 has an invalid length.
[  913.398101][T18850] pimreg: left allmulticast mode
[  913.448621][T18859] siw: device registration error -23
[  914.049673][T18867] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.13621'.
[  914.059275][T18877] netlink: 'syz.2.13623': attribute type 29 has an invalid length.
[  914.063053][T18877] netlink: 'syz.2.13623': attribute type 29 has an invalid length.
[  914.069643][T18877] netlink: 500 bytes leftover after parsing attributes in process `syz.2.13623'.
[  914.942206][T18904] openvswitch: netlink: Key type 12559 is out of range max 32
[  915.980734][ T5710] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  916.787600][T18967] openvswitch: netlink: Key type 12559 is out of range max 32
[  917.038289][T18999] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  917.147013][T19011] netlink: 'syz.2.13642': attribute type 29 has an invalid length.
[  917.160726][T19011] netlink: 'syz.2.13642': attribute type 29 has an invalid length.
[  917.169054][T19011] netlink: 500 bytes leftover after parsing attributes in process `syz.2.13642'.
[  919.035701][   T56] block nbd1: Receive control failed (result -11)
[  920.887094][T19142] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  920.925547][T14238] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  920.932316][T14238] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  921.682391][T19177] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  922.112520][T14238] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  923.085321][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  923.087955][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  923.827632][T19269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  925.244727][T19388] openvswitch: netlink: Key type 12559 is out of range max 32
[  926.184800][T19422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13703'.
[  927.200409][T19463] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  928.265028][T19513] openvswitch: netlink: Key type 12559 is out of range max 32
[  929.996156][T19571] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  930.388225][T19613] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13729'.
[  930.394802][T19613] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13729'.
[  931.244726][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  931.258917][T19652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13735'.
[  931.263082][T19652] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  931.856279][T19654] openvswitch: netlink: Key type 12559 is out of range max 32
[  931.950461][T19657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  932.204994][T19686] veth0: entered promiscuous mode
[  932.207152][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13741'.
[  932.222872][T19686] veth0 (unregistering): left promiscuous mode
[  932.355809][T19704] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  933.258816][T19729] openvswitch: netlink: Key type 12559 is out of range max 32
[  933.286905][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13749'.
[  933.436589][T19742] workqueue: Failed to create a rescuer kthread for wq "nfc18_nci_rx_wq": -EINTR
[  933.850339][T19823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  934.032589][T19860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13763'.
[  934.132698][T19860] sctp: [Deprecated]: syz.0.13763 (pid 19860) Use of struct sctp_assoc_value in delayed_ack socket option.
[  934.132698][T19860] Use struct sctp_sack_info instead
[  934.664010][T19900] netlink: 'syz.1.13770': attribute type 29 has an invalid length.
[  934.667392][T19900] netlink: 'syz.1.13770': attribute type 29 has an invalid length.
[  935.374987][T19928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  935.496324][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13778'.
[  936.438392][T19969] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  936.489672][T19982] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  936.614957][T20010] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  937.435231][T20027] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  937.678528][T20070] netlink: 'syz.0.13801': attribute type 29 has an invalid length.
[  937.688891][T20070] netlink: 'syz.0.13801': attribute type 29 has an invalid length.
[  937.943469][T20098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13806'.
[  937.989691][T20106] netlink: 'syz.1.13810': attribute type 29 has an invalid length.
[  937.996542][T20106] netlink: 'syz.1.13810': attribute type 29 has an invalid length.
[  938.044857][T20114] openvswitch: netlink: Key type 12559 is out of range max 32
[  938.056759][T20116] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  939.124336][T20163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13818'.
[  939.215935][T20181] openvswitch: netlink: Key type 12559 is out of range max 32
[  940.154572][T20211] netlink: 'syz.0.13827': attribute type 3 has an invalid length.
[  940.200523][T20216] netlink: 'syz.1.13829': attribute type 16 has an invalid length.
[  940.979365][T20235] openvswitch: netlink: Key type 12559 is out of range max 32
[  941.035008][T20239] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  941.214449][T20264] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  942.863001][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13845'.
[  942.879690][T20316] wg1 speed is unknown, defaulting to 1000
[  942.884223][T20316] vxcan1 speed is unknown, defaulting to 1000
[  942.917573][T20338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13851'.
[  944.317682][T20419] openvswitch: netlink: Key type 12559 is out of range max 32
[  944.420486][T20438] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  944.453231][T20444] netlink: 'syz.2.13873': attribute type 16 has an invalid length.
[  944.509269][T20462] openvswitch: netlink: Key type 12559 is out of range max 32
[  944.766458][T20495] netlink: 'syz.0.13883': attribute type 16 has an invalid length.
[  945.604065][T20529] netlink: 'syz.1.13886': attribute type 29 has an invalid length.
[  945.609472][T20529] netlink: 'syz.1.13886': attribute type 29 has an invalid length.
[  945.637750][T20535] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  945.689223][T20550] openvswitch: netlink: Key type 12559 is out of range max 32
[  945.790082][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13893'.
[  945.913283][T20581] netlink: 'syz.2.13896': attribute type 29 has an invalid length.
[  945.917822][T20581] netlink: 'syz.2.13896': attribute type 29 has an invalid length.
[  945.920861][T20581] netlink: 500 bytes leftover after parsing attributes in process `syz.2.13896'.
[  946.739906][T20591] openvswitch: netlink: Key type 12559 is out of range max 32
[  946.844969][T20612] netlink: 'syz.1.13903': attribute type 15 has an invalid length.
[  946.848892][T20596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  946.852326][T20605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  947.680811][T20652] openvswitch: netlink: Key type 12559 is out of range max 32
[  948.641729][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13912'.
[  948.672136][T20688] openvswitch: netlink: Key type 12559 is out of range max 32
[  948.704772][T20690] netlink: 'syz.2.13915': attribute type 10 has an invalid length.
[  948.711003][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13915'.
[  948.721570][T20690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13915'.
[  948.727717][T20690] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13915'.
[  948.803165][T20706] netlink: 'syz.1.13918': attribute type 29 has an invalid length.
[  948.806367][T20706] netlink: 'syz.1.13918': attribute type 29 has an invalid length.
[  949.784840][T20732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  949.787956][T20734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  950.805155][T20794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  950.904085][T20823] openvswitch: netlink: Key type 12559 is out of range max 32
[  952.938751][T20908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  956.823180][T21048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13970'.
[  956.837936][T21056] wg1 speed is unknown, defaulting to 1000
[  956.844654][T21056] vxcan1 speed is unknown, defaulting to 1000
[  956.909123][T21070] netlink: 'syz.1.13974': attribute type 13 has an invalid length.
[  956.912110][T21070] netlink: 'syz.1.13974': attribute type 17 has an invalid length.
[  956.914867][T21070] lo: entered promiscuous mode
[  956.916525][T21070] lo: entered allmulticast mode
[  956.932893][T21070] tunl0: entered promiscuous mode
[  956.934601][T21070] tunl0: entered allmulticast mode
[  956.937753][T21070] gre0: entered promiscuous mode
[  956.939376][T21070] gre0: entered allmulticast mode
[  956.953672][T21070] gretap0: entered promiscuous mode
[  956.955577][T21070] gretap0: entered allmulticast mode
[  956.960923][T21070] erspan0: entered promiscuous mode
[  956.962870][T21070] erspan0: entered allmulticast mode
[  956.974363][T21070] ip_vti0: entered promiscuous mode
[  956.976396][T21070] ip_vti0: entered allmulticast mode
[  956.979787][T21070] ip6_vti0: entered promiscuous mode
[  956.982885][T21070] ip6_vti0: entered allmulticast mode
[  956.986101][T21070] sit0: entered promiscuous mode
[  956.987747][T21070] sit0: entered allmulticast mode
[  956.992523][T21070] ip6tnl0: entered promiscuous mode
[  956.994463][T21070] ip6tnl0: entered allmulticast mode
[  956.998518][T21070] ip6gre0: entered promiscuous mode
[  957.000264][T21070] ip6gre0: entered allmulticast mode
[  957.003418][T21070] ip6gretap0: entered promiscuous mode
[  957.005562][T21070] ip6gretap0: entered allmulticast mode
[  957.008699][T21070] team0: entered promiscuous mode
[  957.010386][T21070] team0: entered allmulticast mode
[  957.012567][T21070] 8021q: adding VLAN 0 to HW filter on device team0
[  957.015917][T21070] !: entered promiscuous mode
[  957.017658][T21070] !: entered allmulticast mode
[  957.019645][T21070] nlmon0: entered promiscuous mode
[  957.021861][T21070] nlmon0: entered allmulticast mode
[  957.025302][T21070] caif0: entered promiscuous mode
[  957.027117][T21070] caif0: entered allmulticast mode
[  957.029224][T21070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  957.074323][T21071] wg1 speed is unknown, defaulting to 1000
[  957.077839][T21071] vxcan1 speed is unknown, defaulting to 1000
[  957.110671][T21070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.209539][T21085] netlink: 'syz.0.13976': attribute type 16 has an invalid length.
[  957.260710][T21096] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  958.202305][T21133] netlink: 'syz.2.13984': attribute type 16 has an invalid length.
[  959.343943][T21196] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.13992'.
[  959.402302][T21214] netlink: 'syz.1.13995': attribute type 29 has an invalid length.
[  959.406134][T21214] netlink: 'syz.1.13995': attribute type 29 has an invalid length.
[  959.434005][T21220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13996'.
[  959.437094][T21220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13996'.
[  960.226428][T21234] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13998'.
[  960.357736][T14238] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  961.164668][T21265] netlink: 'syz.1.14002': attribute type 16 has an invalid length.
[  961.271763][T21283] openvswitch: netlink: Key type 12559 is out of range max 32
[  961.328965][T21289] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  962.128297][T21307] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  963.234475][T21349] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.14019'.
[  963.240527][T21351] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.14019'.
[  963.283478][T21375] openvswitch: netlink: Key type 12559 is out of range max 32
[  963.322578][T11570] Bluetooth: hci2: command 0x0405 tx timeout
[  963.909320][T21365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  964.107925][T21399] netlink: 'syz.1.14027': attribute type 3 has an invalid length.
[  965.145385][T21438] ip6gre2: entered promiscuous mode
[  966.155583][T21508] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  966.689081][T21570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14062'.
[  967.524345][T21590] netlink: 'syz.2.14065': attribute type 29 has an invalid length.
[  967.527973][T21590] netlink: 'syz.2.14065': attribute type 29 has an invalid length.
[  967.537779][T21590] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14065'.
[  967.589268][T21597] netlink: 'syz.2.14067': attribute type 16 has an invalid length.
[  967.797379][T21625] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  967.864370][T21628] netlink: 'syz.1.14074': attribute type 29 has an invalid length.
[  967.867566][T21628] netlink: 'syz.1.14074': attribute type 29 has an invalid length.
[  967.953430][T21637] netlink: 'syz.0.14076': attribute type 16 has an invalid length.
[  968.839493][T21668] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  968.876152][T21675] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  968.909964][T21678] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  969.929252][T21730] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  970.104729][T21732] wg1 speed is unknown, defaulting to 1000
[  970.116096][T21732] vxcan1 speed is unknown, defaulting to 1000
[  970.272274][T21761] openvswitch: netlink: Key type 12559 is out of range max 32
[  970.304850][T21764] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  971.156858][T21786] workqueue: Failed to create a rescuer kthread for wq "nfc17_nci_tx_wq": -EINTR
[  971.210404][T21835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14108'.
[  971.355001][T18935] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  972.228174][T21872] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  972.260561][T21866] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  972.323570][T21879] openvswitch: netlink: Key type 12559 is out of range max 32
[  972.439878][T21896] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  973.143720][T21968] netlink: 'syz.1.14132': attribute type 29 has an invalid length.
[  973.154381][T21968] netlink: 'syz.1.14132': attribute type 29 has an invalid length.
[  973.962497][T21991] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  974.010752][T21999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14140'.
[  974.080276][ T5710] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  974.868999][T22025] netlink: 'syz.0.14143': attribute type 1 has an invalid length.
[  974.872601][T22025] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14143'.
[  975.967289][T22075] netlink: 'syz.0.14151': attribute type 16 has an invalid length.
[  976.710953][T22095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14155'.
[  976.717854][T22098] netlink: 'syz.1.14154': attribute type 29 has an invalid length.
[  976.721887][T22098] netlink: 'syz.1.14154': attribute type 29 has an invalid length.
[  976.723674][T22096] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  976.763741][T22107] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  976.784403][T22093] netlink: 'syz.0.14153': attribute type 21 has an invalid length.
[  976.790317][T22093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14153'.
[  976.843587][T22115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14158'.
[  976.846791][T22115] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  976.856135][T22115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14158'.
[  976.930311][T22132] netlink: 'syz.1.14160': attribute type 1 has an invalid length.
[  977.714988][T22146] netlink: 'syz.2.14164': attribute type 29 has an invalid length.
[  977.718106][T22146] netlink: 'syz.2.14164': attribute type 29 has an invalid length.
[  977.721090][T22146] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14164'.
[  977.836709][T22160] batadv0: entered promiscuous mode
[  977.839101][T22160] debugfs: 'hsr1' already exists in 'hsr'
[  977.843268][T22160] Cannot create hsr debugfs directory
[  977.846741][T22160] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  977.850711][T22160] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  977.857443][T22160] hsr1: entered allmulticast mode
[  977.859187][T22160] batadv0: entered allmulticast mode
[  977.863434][T22160] 8021q: adding VLAN 0 to HW filter on device hsr1
[  977.867977][T22160] batadv0: left promiscuous mode
[  978.048738][T22184] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  978.166643][   T33] audit: type=1107 audit(1758811846.193:14): pid=22194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='h7r&yq{0+	Gp?,tmUإAP4 **Qc5{5w	őGGߞ߭݉-p◁.AfuLeT5Cm!) u'
[  978.948750][T22222] netlink: 'syz.1.14179': attribute type 16 has an invalid length.
[  979.143624][T22237] netlink: 'syz.2.14183': attribute type 29 has an invalid length.
[  979.147705][T22237] netlink: 'syz.2.14183': attribute type 29 has an invalid length.
[  979.150730][T22237] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14183'.
[  979.980204][T22271] netlink: 'syz.2.14187': attribute type 16 has an invalid length.
[  981.500078][T22513] netlink: 'syz.2.14194': attribute type 16 has an invalid length.
[  983.500217][T22595] netlink: 'syz.1.14205': attribute type 16 has an invalid length.
[  983.537983][T22606] netlink: 'syz.1.14208': attribute type 33 has an invalid length.
[  983.540661][T22606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14208'.
[  983.703467][T22621] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  983.940770][T22643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  985.977859][T22812] openvswitch: netlink: Key type 12559 is out of range max 32
[  986.102155][T22814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14243'.
[  986.130721][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14243'.
[  986.144145][T22829] netlink: 'syz.1.14246': attribute type 16 has an invalid length.
[  986.297465][T22845] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  986.346273][T22852] openvswitch: netlink: Key type 12559 is out of range max 32
[  988.133581][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14259'.
[  988.180523][T22931] openvswitch: netlink: Key type 12559 is out of range max 32
[  988.392487][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14264'.
[  989.377482][T23007] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  989.432730][T23017] netlink: 'syz.0.14276': attribute type 3 has an invalid length.
[  990.673729][T23086] netlink: 'syz.0.14286': attribute type 16 has an invalid length.
[  991.426826][T23118] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  992.368946][T23145] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  992.837872][T23212] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  992.859742][T23222] netlink: 'syz.0.14307': attribute type 3 has an invalid length.
[  992.883273][T23222] netlink: 'syz.0.14307': attribute type 3 has an invalid length.
[  992.887162][T23222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14307'.
[  992.908099][T23207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  992.957897][T23239] netlink: 'syz.2.14309': attribute type 29 has an invalid length.
[  992.961060][T23239] netlink: 'syz.2.14309': attribute type 29 has an invalid length.
[  992.965674][T23239] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14309'.
[  992.975383][T23231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  992.983458][T23237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  993.108289][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14311'.
[  993.890351][T23275] tipc: Failed to remove unknown binding: 66,1,1/11578026:4035124272/4035124274
[  993.894277][T23275] tipc: Failed to remove unknown binding: 66,1,1/11578026:4035124272/4035124274
[  993.897769][T23275] tipc: Failed to remove unknown binding: 66,1,1/11578026:4035124272/4035124274
[  993.995799][T23284] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  994.054058][T17517] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  994.074161][T23288] netlink: 'syz.2.14318': attribute type 6 has an invalid length.
[  994.076887][T23288] netlink: 176 bytes leftover after parsing attributes in process `syz.2.14318'.
[  997.005877][T23414] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  997.119662][T23432] netlink: 6 bytes leftover after parsing attributes in process `syz.2.14338'.
[  997.123390][T23432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  998.012179][T23438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  998.015381][T23447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  998.174596][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14344'.
[  998.177722][T23476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  999.225114][T23509] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  999.522255][T23564] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1000.696493][T23634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14367'.
[ 1000.851672][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14369'.
[ 1000.855226][T23644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14369'.
[ 1001.838577][T23676] netlink: 'syz.1.14375': attribute type 16 has an invalid length.
[ 1001.932225][T23706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14378'.
[ 1001.935526][T23705] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1001.938419][T23706] netlink: 5 bytes leftover after parsing attributes in process `syz.0.14378'.
[ 1001.942867][T23706] netlink: 5 bytes leftover after parsing attributes in process `syz.0.14378'.
[ 1001.956438][T23688] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[ 1002.075150][T23711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1002.198854][T23734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14383'.
[ 1002.232029][T23745] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14385'.
[ 1002.964814][T23760] netlink: 360 bytes leftover after parsing attributes in process `syz.1.14387'.
[ 1003.256902][T23800] netlink: 'syz.2.14392': attribute type 16 has an invalid length.
[ 1004.259202][T23841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14399'.
[ 1004.287273][T23851] netlink: 'syz.1.14400': attribute type 16 has an invalid length.
[ 1004.364615][T23859] netlink: 'syz.0.14398': attribute type 4 has an invalid length.
[ 1004.370811][T23859] netlink: 'syz.0.14398': attribute type 4 has an invalid length.
[ 1004.376857][T17517] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[ 1005.134708][T23876] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0
[ 1005.941914][T23881] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14405'.
[ 1006.018358][T23897] netlink: 'syz.1.14407': attribute type 16 has an invalid length.
[ 1006.072942][T23910] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1006.097736][T23903] netlink: 'syz.2.14408': attribute type 1 has an invalid length.
[ 1006.110925][T23903] netlink: 'syz.2.14408': attribute type 4 has an invalid length.
[ 1006.118850][T23903] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14408'.
[ 1006.190435][T23930] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14412'.
[ 1006.698202][T23963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1006.699188][T23969] netlink: 'syz.1.14417': attribute type 16 has an invalid length.
[ 1006.703699][T23967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1007.665792][T24016] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1007.717473][T24024] netlink: 'syz.1.14426': attribute type 3 has an invalid length.
[ 1007.774613][T24040] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1007.877761][T24054] netlink: 'syz.0.14431': attribute type 29 has an invalid length.
[ 1007.884072][T24054] netlink: 'syz.0.14431': attribute type 29 has an invalid length.
[ 1007.955723][T24060] netlink: 'syz.0.14433': attribute type 16 has an invalid length.
[ 1007.973813][T24067] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1008.216302][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1009.036860][T24104] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1009.167130][T14238] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[ 1010.028605][T24137] pim6reg1: entered promiscuous mode
[ 1010.030422][T24137] pim6reg1: entered allmulticast mode
[ 1010.051116][T24144] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1011.081973][T24171] 8021q: VLANs not supported on gre0
[ 1011.760172][T24184] netlink: 'syz.1.14458': attribute type 29 has an invalid length.
[ 1011.770048][T24184] netlink: 'syz.1.14458': attribute type 29 has an invalid length.
[ 1011.807874][T24193] wg1 speed is unknown, defaulting to 1000
[ 1011.811618][T24193] vxcan1 speed is unknown, defaulting to 1000
[ 1011.854916][T24204] netlink: 'syz.1.14459': attribute type 10 has an invalid length.
[ 1011.866839][T24204] netlink: 'syz.1.14459': attribute type 10 has an invalid length.
[ 1011.879044][T24204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14459'.
[ 1011.888142][T24204] batadv0: entered promiscuous mode
[ 1011.890931][T24204] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1012.096039][T24222] netlink: 'syz.0.14460': attribute type 1 has an invalid length.
[ 1012.289031][T24230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14463'.
[ 1013.041945][T24257] openvswitch: netlink: Key type 8195 is out of range max 32
[ 1014.207887][T24317] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1015.206740][T24359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14489'.
[ 1015.214004][T24359] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14489'.
[ 1016.173680][T24423] netlink: 'syz.1.14497': attribute type 29 has an invalid length.
[ 1016.178467][T24423] netlink: 'syz.1.14497': attribute type 29 has an invalid length.
[ 1016.248768][T24433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1016.539079][T24476] netlink: 'syz.2.14507': attribute type 29 has an invalid length.
[ 1016.543789][T24476] netlink: 'syz.2.14507': attribute type 29 has an invalid length.
[ 1016.564196][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14505'.
[ 1017.525536][T24517] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1018.578912][T24576] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1020.619892][T24677] netlink: 'syz.0.14544': attribute type 16 has an invalid length.
[ 1021.086338][T24733] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1021.149646][T24743] openvswitch: netlink: Key type 12559 is out of range max 32
[ 1022.062526][T24777] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1022.319111][T24812] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14565'.
[ 1024.071877][T24897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14578'.
[ 1024.078321][T24879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1025.106263][T24935] netlink: 'syz.1.14585': attribute type 16 has an invalid length.
[ 1025.219374][T24954] netlink: 'syz.1.14588': attribute type 29 has an invalid length.
[ 1025.222638][T24954] netlink: 'syz.1.14588': attribute type 29 has an invalid length.
[ 1025.555096][T24994] tipc: Trying to set illegal importance in message
[ 1026.221633][T24978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1026.289599][T25007] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1027.256142][T25038] netlink: 'syz.2.14602': attribute type 29 has an invalid length.
[ 1027.259575][T25038] netlink: 'syz.2.14602': attribute type 29 has an invalid length.
[ 1027.329705][T25039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1029.211807][T25121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1031.086537][T25218] netlink: 'syz.2.14627': attribute type 9 has an invalid length.
[ 1031.089135][T25218] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.14627'.
[ 1031.110479][T25216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14626'.
[ 1031.242484][T25227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14629'.
[ 1031.365102][T25251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14634'.
[ 1031.368149][T25251] netlink: 'syz.2.14634': attribute type 3 has an invalid length.
[ 1032.205741][T25280] netlink: 'syz.2.14639': attribute type 29 has an invalid length.
[ 1032.208927][T25280] netlink: 'syz.2.14639': attribute type 29 has an invalid length.
[ 1032.242167][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[ 1033.505227][ T5882] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[ 1033.945899][T25365] netlink: 'syz.2.14651': attribute type 16 has an invalid length.
[ 1034.169214][T25379] openvswitch: netlink: Key type 12559 is out of range max 32
[ 1034.281568][T25381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1034.284036][T25381] IPv6: NLM_F_CREATE should be set when creating new route
[ 1034.320899][T25389] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1034.419458][T25402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14661'.
[ 1035.491025][T25452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14663'.
[ 1036.164277][T25463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14667'.
[ 1036.167836][T25463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14667'.
[ 1036.359132][T25492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14672'.
[ 1037.213502][T25510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1037.224860][T25511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14675'.
[ 1037.398184][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1039.319062][T25590] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1039.334100][T25595] netlink: 'syz.1.14693': attribute type 29 has an invalid length.
[ 1039.343843][T25595] netlink: 'syz.1.14693': attribute type 29 has an invalid length.
[ 1039.471661][T25616] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1040.243565][T25627] wg1 speed is unknown, defaulting to 1000
[ 1040.248694][T25627] vxcan1 speed is unknown, defaulting to 1000
[ 1040.289559][T25631] netlink: 'syz.0.14701': attribute type 2 has an invalid length.
[ 1040.298514][T25631] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14701'.
[ 1040.298627][T25634] netlink: 'syz.1.14700': attribute type 2 has an invalid length.
[ 1040.308535][T25631] nbd: must specify a device to reconfigure
[ 1041.200368][T25664] netlink: 'syz.1.14705': attribute type 29 has an invalid length.
[ 1041.204343][T25664] netlink: 'syz.1.14705': attribute type 29 has an invalid length.
[ 1041.228638][T25666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14706'.
[ 1041.247635][T25673] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1041.338365][T25684] bridge0: failed insert local address into bridge forwarding table
[ 1041.341093][T25678] wg1 speed is unknown, defaulting to 1000
[ 1041.346340][T25678] vxcan1 speed is unknown, defaulting to 1000
[ 1041.527192][T25699] netlink: 'syz.1.14711': attribute type 1 has an invalid length.
[ 1041.529727][T25699] netlink: 244 bytes leftover after parsing attributes in process `syz.1.14711'.
[ 1041.809396][T25732] netlink: 'syz.2.14716': attribute type 29 has an invalid length.
[ 1041.820010][T25732] netlink: 'syz.2.14716': attribute type 29 has an invalid length.
[ 1041.920010][T25742] siw: device registration error -23
[ 1041.968876][T25748] Unsupported ieee802154 address type: 0
[ 1041.981061][T25742] netlink: 'syz.1.14718': attribute type 4 has an invalid length.
[ 1042.270212][T25780] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1042.310557][T25794] openvswitch: netlink: Key type 12559 is out of range max 32
[ 1042.517229][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14727'.
[ 1044.448811][T25895] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1045.176368][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14757'.
[ 1045.420474][T25993] validate_nla: 1 callbacks suppressed
[ 1045.420485][T25993] netlink: 'syz.2.14758': attribute type 29 has an invalid length.
[ 1045.426352][T25993] netlink: 'syz.2.14758': attribute type 29 has an invalid length.
[ 1046.063404][T26001] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1046.074600][T26002] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1046.210197][T26011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1046.255589][T26035] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1047.992287][T26095] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1048.140122][T26119] netlink: 'syz.2.14779': attribute type 13 has an invalid length.
[ 1048.146797][T26119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14779'.
[ 1048.935708][T26128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1048.962209][T26124] netlink: 676 bytes leftover after parsing attributes in process `syz.2.14781'.
[ 1048.965585][T26124] netlink: 676 bytes leftover after parsing attributes in process `syz.2.14781'.
[ 1049.894658][T26163] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 1052.559131][T26251] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1053.863386][T26311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1053.961049][T26338] netlink: 'syz.1.14813': attribute type 4 has an invalid length.
[ 1053.964834][T26338] netlink: 17 bytes leftover after parsing attributes in process `syz.1.14813'.
[ 1054.124909][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1054.866518][T26358] netlink: 'syz.2.14817': attribute type 29 has an invalid length.
[ 1054.872849][T26358] netlink: 'syz.2.14817': attribute type 29 has an invalid length.
[ 1054.925832][T26370] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1055.777342][T26408] netlink: 'syz.0.14829': attribute type 29 has an invalid length.
[ 1055.780220][T26401] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14827'.
[ 1055.784390][T26408] netlink: 'syz.0.14829': attribute type 29 has an invalid length.
[ 1055.786884][T26401] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14827'.
[ 1056.733340][T26436] netlink: 'syz.2.14836': attribute type 29 has an invalid length.
[ 1056.766495][T26436] netlink: 'syz.2.14836': attribute type 29 has an invalid length.
[ 1056.889887][T26458] netlink: 'syz.2.14840': attribute type 16 has an invalid length.
[ 1056.944855][T26463] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1058.675414][T26536] batadv1: entered promiscuous mode
[ 1058.677433][T26536] batadv1: entered allmulticast mode
[ 1059.853675][T26600] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1059.875947][T14238] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1060.730717][T26620] openvswitch: netlink: Key type 12559 is out of range max 32
[ 1060.735756][T26623] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1060.861040][ T5882] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[ 1061.520488][T26638] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1061.836436][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14880'.
[ 1062.506744][T26680] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1063.444859][T26712] netlink: 'syz.1.14888': attribute type 16 has an invalid length.
[ 1063.463554][T26718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1063.521007][T26736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14891'.
[ 1063.559213][T26744] openvswitch: netlink: Key type 12559 is out of range max 32
[ 1063.729914][T26764] netlink: 'syz.2.14897': attribute type 5 has an invalid length.
[ 1063.887315][T14238] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1064.052503][T26777] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14899'.
[ 1066.605568][T26765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1066.689128][T26791] netlink: 'syz.2.14901': attribute type 16 has an invalid length.
[ 1066.774170][T26805] netlink: 'syz.2.14906': attribute type 29 has an invalid length.
[ 1066.781965][T26805] netlink: 'syz.2.14906': attribute type 29 has an invalid length.
[ 1067.217458][T26847] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14911'.
[ 1067.223287][T26848] sctp: [Deprecated]: syz.1.14911 (pid 26848) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1067.223287][T26848] Use struct sctp_sack_info instead
[ 1067.255855][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1067.286454][T26856] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[ 1067.335470][T26862] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14912'.
[ 1067.343968][T26862] netem: invalid attributes len -16
[ 1067.345790][T26862] netem: change failed
[ 1068.399769][T26917] netlink: 'syz.0.14920': attribute type 29 has an invalid length.
[ 1068.404444][T26917] netlink: 'syz.0.14920': attribute type 29 has an invalid length.
[ 1068.509829][T26927] netlink: 'syz.1.14923': attribute type 16 has an invalid length.
[ 1068.545779][T26935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14925'.
[ 1068.548915][T26935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1068.551420][T26935] IPv6: NLM_F_CREATE should be set when creating new route
[ 1069.710347][T26989] netlink: 'syz.0.14934': attribute type 29 has an invalid length.
[ 1069.714764][T26989] netlink: 'syz.0.14934': attribute type 29 has an invalid length.
[ 1071.414936][T27043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14941'.
[ 1071.539448][T27040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14940'.
[ 1072.977280][T27145] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[ 1073.142707][T27173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14960'.
[ 1073.214338][T27180] syzkaller0: entered promiscuous mode
[ 1073.216717][T27180] syzkaller0: entered allmulticast mode
[ 1073.221840][T27180] syzkaller0: mtu greater than device maximum
[ 1074.339524][T27205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14967'.
[ 1088.694255][T27275] netlink: 'syz.1.14976': attribute type 15 has an invalid length.
[ 1088.697745][T27275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14976'.
[ 1088.767182][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14977'.
[ 1089.679204][ T5710] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1089.814853][T27327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14983'.
[ 1089.845367][T27329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14984'.
[ 1090.800484][T27371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14986'.
[ 1091.367141][T27376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14989'.
[ 1092.803192][T27437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14999'.
[ 1093.103636][T27465] netlink: 'syz.0.15002': attribute type 16 has an invalid length.
[ 1093.107301][T27465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15002'.
[ 1093.838739][T27419] Set syz1 is full, maxelem 65536 reached
[ 1095.213592][T27560] IPv6: Can't replace route, no match found
[ 1095.218709][T27557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15016'.
[ 1095.340901][T27585] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[ 1095.915293][T27612] 8021q: VLANs not supported on nicvf0
[ 1097.730630][T27675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15033'.
[ 1097.799691][T27681] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[ 1098.428563][T27756] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[ 1100.100031][T27799] tipc: Resetting bearer <eth:gre0>
[ 1100.109391][T27799] tipc: Resetting bearer <eth:syzkaller0>
[ 1100.964783][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15054'.
[ 1101.075546][T27823] tipc: Resetting bearer <eth:gre0>
[ 1101.084786][T27823] bond14: left allmulticast mode
[ 1101.087445][T27823] bridge10: port 1(bond14) entered disabled state
[ 1101.093450][T27823] bond17: (slave wireguard0): Releasing backup interface
[ 1101.095829][T27823] wireguard0: left promiscuous mode
[ 1101.331509][T27783] Bluetooth: hci2: command 0x0405 tx timeout
[ 1101.907654][T14238] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1103.401289][T27783] Bluetooth: hci2: command 0x0405 tx timeout
[ 1103.563975][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15067'.
[ 1103.567048][T27909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15067'.
[ 1104.473082][T27929] netlink: 'syz.0.15069': attribute type 29 has an invalid length.
[ 1104.480581][T27929] netlink: 'syz.0.15069': attribute type 29 has an invalid length.
[ 1104.523433][T27933] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15070'.
[ 1104.527688][T27933] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15070'.
[ 1105.522786][T27970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15076'.
[ 1106.794419][T28039] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[ 1106.800053][T28039] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[ 1107.808013][T28093] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[ 1108.663533][T28124] delete_channel: no stack
[ 1109.738075][T28179] netlink: 'syz.1.15104': attribute type 16 has an invalid length.
[ 1109.837681][T28192] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[ 1110.769251][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[ 1111.600798][T28244] netlink: 'syz.1.15113': attribute type 29 has an invalid length.
[ 1111.605342][T28244] netlink: 'syz.1.15113': attribute type 29 has an invalid length.
[ 1111.988243][T28283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15119'.
[ 1113.055668][T28343] sctp: [Deprecated]: syz.1.15127 (pid 28343) Use of int in max_burst socket option deprecated.
[ 1113.055668][T28343] Use struct sctp_assoc_value instead
[ 1113.134751][T28338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1113.138174][T28339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1113.216273][T28367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15130'.
[ 1113.238346][T28349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15128'.
[ 1113.241698][T28350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15128'.
[ 1113.261776][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15128'.
[ 1113.265010][T28350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15128'.
[ 1113.270428][T28367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15130'.
[ 1114.079735][T28402] netlink: 'syz.0.15133': attribute type 16 has an invalid length.
[ 1114.100997][T28397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1114.104621][T28403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1114.295187][T28435] Bluetooth: hci0: Opcode 0x0401 failed: -22
[ 1115.014709][T28434] netlink: 'syz.2.15137': attribute type 1 has an invalid length.
[ 1115.018174][T28434] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15137'.
[ 1115.022639][T28434] netlink: 'syz.2.15137': attribute type 2 has an invalid length.
[ 1115.026223][T28434] netlink: 'syz.2.15137': attribute type 1 has an invalid length.
[ 1115.153925][T28462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15139'.
[ 1115.517063][T28487] netlink: 'syz.1.15143': attribute type 1 has an invalid length.
[ 1115.519801][T28487] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.15143'.
[ 1115.523748][T28487] netlink: 'syz.1.15143': attribute type 1 has an invalid length.
[ 1116.152952][T28492] netlink: 'syz.2.15146': attribute type 1 has an invalid length.
[ 1116.166545][T28492] netlink: 'syz.2.15146': attribute type 2 has an invalid length.
[ 1116.175240][T28492] netlink: 'syz.2.15146': attribute type 1 has an invalid length.
[ 1116.361795][T11570] Bluetooth: hci0: command tx timeout
[ 1118.066124][T28564] netlink: 'syz.0.15155': attribute type 1 has an invalid length.
[ 1118.070680][T28564] __nla_validate_parse: 2 callbacks suppressed
[ 1118.070694][T28564] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15155'.
[ 1118.077927][T28564] netlink: 'syz.0.15155': attribute type 2 has an invalid length.
[ 1118.168904][T28566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15156'.
[ 1118.193411][T28578] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15158'.
[ 1118.196392][T28578] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15158'.
[ 1118.202228][T28572] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15158'.
[ 1118.212265][T28572] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15158'.
[ 1119.115925][T28606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15162'.
[ 1119.375524][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15164'.
[ 1120.105352][T28643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15166'.
[ 1120.148128][T28630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15166'.
[ 1120.463521][T28691] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1120.502733][T28693] validate_nla: 1 callbacks suppressed
[ 1120.502755][T28693] netlink: 'syz.1.15174': attribute type 2 has an invalid length.
[ 1120.961133][T28664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1122.271778][T28746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1122.373783][T28772] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[ 1123.276209][T28819] netlink: 'syz.2.15189': attribute type 1 has an invalid length.
[ 1123.284476][T28819] __nla_validate_parse: 1 callbacks suppressed
[ 1123.284491][T28819] netlink: 136 bytes leftover after parsing attributes in process `syz.2.15189'.
[ 1123.296836][T28819] netlink: 'syz.2.15189': attribute type 2 has an invalid length.
[ 1123.300071][T28819] netlink: 'syz.2.15189': attribute type 1 has an invalid length.
[ 1123.358521][T28828] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1124.164314][T28822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1124.280995][T28845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1124.286202][T28844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1124.371390][T28856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1125.044985][T28892] netlink: 'syz.1.15197': attribute type 1 has an invalid length.
[ 1125.058050][T28892] netlink: 136 bytes leftover after parsing attributes in process `syz.1.15197'.
[ 1125.068162][T28892] netlink: 'syz.1.15197': attribute type 2 has an invalid length.
[ 1125.071120][T28892] netlink: 'syz.1.15197': attribute type 1 has an invalid length.
[ 1127.713447][T28973] netlink: 'syz.0.15206': attribute type 1 has an invalid length.
[ 1127.716605][T28973] netlink: 136 bytes leftover after parsing attributes in process `syz.0.15206'.
[ 1127.719948][T28973] netlink: 'syz.0.15206': attribute type 2 has an invalid length.
[ 1127.730901][T28973] netlink: 'syz.0.15206': attribute type 1 has an invalid length.
[ 1127.805367][T28997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15212'.
[ 1127.808315][T28997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15212'.
[ 1127.812810][T28997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15212'.
[ 1127.817634][T28997] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[ 1128.049280][T29030] netlink: 'syz.0.15220': attribute type 1 has an invalid length.
[ 1128.052150][T29030] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15220'.
[ 1128.055183][T29030] netlink: 'syz.0.15220': attribute type 2 has an invalid length.
[ 1128.057683][T29030] netlink: 'syz.0.15220': attribute type 1 has an invalid length.
[ 1128.058476][T29034] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1128.128380][T29042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1128.945977][T22917] tipc: Resetting bearer <eth:syzkaller0>
[ 1128.949367][T29041] tipc: Resetting bearer <eth:syzkaller0>
[ 1129.963603][T29041] tipc: Disabling bearer <eth:syzkaller0>
[ 1130.244861][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15227'.
[ 1130.968576][T29096] netlink: 'syz.2.15230': attribute type 1 has an invalid length.
[ 1130.971366][T29096] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15230'.
[ 1130.974937][T29096] netlink: 'syz.2.15230': attribute type 2 has an invalid length.
[ 1130.979607][T29096] netlink: 'syz.2.15230': attribute type 1 has an invalid length.
[ 1131.134781][T29120] 
[ 1131.135700][T29120] ======================================================
[ 1131.137979][T29120] WARNING: possible circular locking dependency detected
[ 1131.140241][T29120] syzkaller #0 Not tainted
[ 1131.141819][T29120] ------------------------------------------------------
[ 1131.144643][T29120] syz.1.15234/29120 is trying to acquire lock:
[ 1131.146670][T29120] ffffffff8f68f618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[ 1131.149622][T29120] 
[ 1131.149622][T29120] but task is already holding lock:
[ 1131.152024][T29120] ffff8880310faf70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[ 1131.155042][T29120] 
[ 1131.155042][T29120] which lock already depends on the new lock.
[ 1131.155042][T29120] 
[ 1131.158363][T29120] 
[ 1131.158363][T29120] the existing dependency chain (in reverse order) is:
[ 1131.161267][T29120] 
[ 1131.161267][T29120] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[ 1131.164081][T29120]        lock_acquire+0x120/0x360
[ 1131.165920][T29120]        _raw_spin_lock_bh+0x36/0x50
[ 1131.167667][T29120]        nr_rt_device_down+0x12a/0x720
[ 1131.169444][T29120]        nr_device_event+0x137/0x150
[ 1131.171224][T29120]        notifier_call_chain+0x1b6/0x3e0
[ 1131.173113][T29120]        netif_close_many+0x29c/0x410
[ 1131.174861][T29120]        netif_close+0x158/0x210
[ 1131.176460][T29120]        dev_close+0x10a/0x220
[ 1131.178066][T29120]        bpq_device_event+0x377/0x6a0
[ 1131.179814][T29120]        notifier_call_chain+0x1b6/0x3e0
[ 1131.181652][T29120]        __dev_notify_flags+0x18d/0x2e0
[ 1131.183497][T29120]        netif_change_flags+0xe8/0x1a0
[ 1131.185290][T29120]        dev_change_flags+0x130/0x260
[ 1131.187033][T29120]        dev_ioctl+0x7b4/0x1150
[ 1131.188618][T29120]        sock_do_ioctl+0x22c/0x300
[ 1131.190323][T29120]        sock_ioctl+0x576/0x790
[ 1131.191908][T29120]        __se_sys_ioctl+0xfc/0x170
[ 1131.193590][T29120]        do_syscall_64+0xfa/0x3b0
[ 1131.195255][T29120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.197354][T29120] 
[ 1131.197354][T29120] -> #1 (nr_node_list_lock){+...}-{3:3}:
[ 1131.199950][T29120]        lock_acquire+0x120/0x360
[ 1131.201614][T29120]        _raw_spin_lock_bh+0x36/0x50
[ 1131.203416][T29120]        nr_rt_device_down+0xa9/0x720
[ 1131.205206][T29120]        nr_device_event+0x137/0x150
[ 1131.206947][T29120]        notifier_call_chain+0x1b6/0x3e0
[ 1131.208783][T29120]        netif_close_many+0x29c/0x410
[ 1131.210528][T29120]        netif_close+0x158/0x210
[ 1131.212200][T29120]        dev_close+0x10a/0x220
[ 1131.213793][T29120]        bpq_device_event+0x377/0x6a0
[ 1131.215545][T29120]        notifier_call_chain+0x1b6/0x3e0
[ 1131.217379][T29120]        __dev_notify_flags+0x18d/0x2e0
[ 1131.219195][T29120]        netif_change_flags+0xe8/0x1a0
[ 1131.220987][T29120]        dev_change_flags+0x130/0x260
[ 1131.222743][T29120]        dev_ioctl+0x7b4/0x1150
[ 1131.224334][T29120]        sock_do_ioctl+0x22c/0x300
[ 1131.226045][T29120]        sock_ioctl+0x576/0x790
[ 1131.227701][T29120]        __se_sys_ioctl+0xfc/0x170
[ 1131.229379][T29120]        do_syscall_64+0xfa/0x3b0
[ 1131.231036][T29120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.233171][T29120] 
[ 1131.233171][T29120] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[ 1131.235733][T29120]        validate_chain+0xb9b/0x2140
[ 1131.237459][T29120]        __lock_acquire+0xab9/0xd20
[ 1131.239171][T29120]        lock_acquire+0x120/0x360
[ 1131.240830][T29120]        _raw_spin_lock_bh+0x36/0x50
[ 1131.242558][T29120]        nr_rt_ioctl+0x390/0xd50
[ 1131.244190][T29120]        sock_do_ioctl+0xdc/0x300
[ 1131.245878][T29120]        sock_ioctl+0x576/0x790
[ 1131.247477][T29120]        __se_sys_ioctl+0xfc/0x170
[ 1131.249163][T29120]        do_syscall_64+0xfa/0x3b0
[ 1131.250815][T29120]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.252933][T29120] 
[ 1131.252933][T29120] other info that might help us debug this:
[ 1131.252933][T29120] 
[ 1131.256198][T29120] Chain exists of:
[ 1131.256198][T29120]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[ 1131.256198][T29120] 
[ 1131.260578][T29120]  Possible unsafe locking scenario:
[ 1131.260578][T29120] 
[ 1131.263007][T29120]        CPU0                    CPU1
[ 1131.264765][T29120]        ----                    ----
[ 1131.266529][T29120]   lock(&nr_node->node_lock);
[ 1131.268114][T29120]                                lock(nr_node_list_lock);
[ 1131.270374][T29120]                                lock(&nr_node->node_lock);
[ 1131.272760][T29120]   lock(nr_neigh_list_lock);
[ 1131.274282][T29120] 
[ 1131.274282][T29120]  *** DEADLOCK ***
[ 1131.274282][T29120] 
[ 1131.276841][T29120] 2 locks held by syz.1.15234/29120:
[ 1131.278571][T29120]  #0: ffffffff8f68f678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[ 1131.281555][T29120]  #1: ffff8880310faf70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[ 1131.284648][T29120] 
[ 1131.284648][T29120] stack backtrace:
[ 1131.286525][T29120] CPU: 1 UID: 0 PID: 29120 Comm: syz.1.15234 Not tainted syzkaller #0 PREEMPT(full) 
[ 1131.286536][T29120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1131.286541][T29120] Call Trace:
[ 1131.286546][T29120]  <TASK>
[ 1131.286551][T29120]  dump_stack_lvl+0x189/0x250
[ 1131.286563][T29120]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1131.286572][T29120]  ? __pfx__printk+0x10/0x10
[ 1131.286582][T29120]  ? stack_trace_save+0x9c/0xe0
[ 1131.286594][T29120]  print_circular_bug+0x2ee/0x310
[ 1131.286604][T29120]  check_noncircular+0x134/0x160
[ 1131.286614][T29120]  validate_chain+0xb9b/0x2140
[ 1131.286648][T29120]  __lock_acquire+0xab9/0xd20
[ 1131.286668][T29120]  ? nr_rt_ioctl+0x390/0xd50
[ 1131.286681][T29120]  lock_acquire+0x120/0x360
[ 1131.286696][T29120]  ? nr_rt_ioctl+0x390/0xd50
[ 1131.286709][T29120]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1131.286720][T29120]  ? nr_rt_ioctl+0x390/0xd50
[ 1131.286730][T29120]  _raw_spin_lock_bh+0x36/0x50
[ 1131.286742][T29120]  ? nr_rt_ioctl+0x390/0xd50
[ 1131.286753][T29120]  nr_rt_ioctl+0x390/0xd50
[ 1131.286766][T29120]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1131.286779][T29120]  ? apparmor_capable+0x137/0x1b0
[ 1131.286790][T29120]  ? capable+0x89/0xe0
[ 1131.286798][T29120]  ? nr_ioctl+0x1b1/0x3b0
[ 1131.286806][T29120]  sock_do_ioctl+0xdc/0x300
[ 1131.286818][T29120]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1131.286828][T29120]  ? __lock_acquire+0xab9/0xd20
[ 1131.286842][T29120]  sock_ioctl+0x576/0x790
[ 1131.286853][T29120]  ? __pfx_sock_ioctl+0x10/0x10
[ 1131.286863][T29120]  ? __fget_files+0x2a/0x420
[ 1131.286874][T29120]  ? __fget_files+0x3a0/0x420
[ 1131.286880][T29120]  ? __fget_files+0x2a/0x420
[ 1131.286886][T29120]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1131.286895][T29120]  ? __pfx_sock_ioctl+0x10/0x10
[ 1131.286905][T29120]  __se_sys_ioctl+0xfc/0x170
[ 1131.286915][T29120]  do_syscall_64+0xfa/0x3b0
[ 1131.286924][T29120]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1131.286932][T29120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.286940][T29120]  ? exc_page_fault+0x9f/0xf0
[ 1131.286947][T29120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.286956][T29120] RIP: 0033:0x7fd9d6b8ec29
[ 1131.286964][T29120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1131.286970][T29120] RSP: 002b:00007fd9d7ace038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1131.286979][T29120] RAX: ffffffffffffffda RBX: 00007fd9d6dd5fa0 RCX: 00007fd9d6b8ec29
[ 1131.286984][T29120] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006
[ 1131.286988][T29120] RBP: 00007fd9d6c11e41 R08: 0000000000000000 R09: 0000000000000000
[ 1131.286993][T29120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1131.286997][T29120] R13: 00007fd9d6dd6038 R14: 00007fd9d6dd5fa0 R15: 00007fffea2a37b8
[ 1131.287005][T29120]  </TASK>

VM DIAGNOSIS:
14:53:19  Registers:
info registers vcpu 0

CPU#0
RAX=f2f2f200f1f1f1f1 RBX=ffff88804866ec80 RCX=a7124439c6378100 RDX=00000000e7e95303
RSI=ffffffff8218f260 RDI=ffff88804866ec80 RBP=ffffc90006a077e0 RSP=ffffc90006a076a0
R8 =00000000ada0e955 R9 =00000000d9af6987 R10=000000000000000f R11=ffffffff81ac4b00
R12=dffffc0000000000 R13=1ffff92000d40ee4 R14=ffffffff8218f260 R15=ffffffff821059fb
RIP=ffffffff81a68dbe RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f92b837d380 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000806000 CR3=000000010ca4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f410fc12e7b
XMM06=0000000000000000 00007f410fc12e75 XMM07=0000000000000000 00007f410fc12e89
XMM08=0000000000000000 00007f410fc12f0f XMM09=0000000000000000 00007f410fc12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012f3 RDI=00000000000012f4 RBP=00000000000003f8 RSP=ffffc9000642f150
R8 =ffff88801f7c8237 R9 =1ffff11003ef9046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008d2 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd9d7ace6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c372a37 CR3=0000000021b78000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fd9d790d100 00007fd9d6da7460 XMM05=00007fd9d6da7478 00007fd9d6da74c0
XMM06=00007fd9d6da74b8 00007fd9d6da74b0 XMM07=00007fd9d6da74a8 00007fd9d6da74a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fd9d6c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
