last executing test programs:

3.338163885s ago: executing program 0 (id=1583):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) (async)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x22, 0x2, 0x22) (async)
socket(0x22, 0x2, 0x22)
write(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000005300000057000e0048"], 0x80}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'team_slave_1\x00', &(0x7f0000000480)=@ethtool_perm_addr={0x4b, 0x46, "43720700ca0917b3352050360ad4bc4c3f9525f0d2b6796ff2aba584417202d40b4fcdf2227f128a8dd150"}}) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'team_slave_1\x00', &(0x7f0000000480)=@ethtool_perm_addr={0x4b, 0x46, "43720700ca0917b3352050360ad4bc4c3f9525f0d2b6796ff2aba584417202d40b4fcdf2227f128a8dd150"}})
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000540)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="24000000000000000000000007000000441414d3ac1414aa80000001640101000000001140000000"], 0x28}}], 0x2, 0x200c4) (async)
sendmmsg$inet(r6, &(0x7f0000000540)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="24000000000000000000000007000000441414d3ac1414aa80000001640101000000001140000000"], 0x28}}], 0x2, 0x200c4)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040))

3.248282485s ago: executing program 1 (id=1587):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
write(r1, &(0x7f0000001440)="661eca7276", 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rxrpc_conn\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rxrpc_conn\x00', r0}, 0x18)
socket$rds(0x15, 0x5, 0x0) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4)
unshare(0x62040200)

3.092291517s ago: executing program 1 (id=1589):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYRES16=r1, @ANYRES8=r2], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdfb}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfd, {0x80, 0x0, 0x0, 0xfa, 0x0, 0x0, 0xfd, 0x1, 0x100}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x18)
r6 = socket$kcm(0x2, 0x1, 0x106)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

3.0258284s ago: executing program 0 (id=1590):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
close(0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

3.02467866s ago: executing program 1 (id=1592):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="3933bf40fccbcfe030ab3aea49bc3fdc045f06d3320a76a2ea02d75f027db30a0ef3e82b865148de7ffc6f44249f7c07bf9c3510e942a2f59fab98fa128294492f01ec41b203a80cdc8627baf8799eca43d7", @ANYRES16=r1, @ANYBLOB="110725bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0xb0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x5, 0x1000}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREF={0x5, 0x14, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000)
syz_emit_ethernet(0x46, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x10, 0x6, 0x0, @private0, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000100))
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2.580213167s ago: executing program 0 (id=1596):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000dc1a85cc786be3ae2e4fff3b5603850000006100000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000040)="b9ff033168440372b89e07000800a25e412eb05f", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31036abd7000fbdbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000003600), 0x0, 0x10041, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000058641a88d3a57287d92ef3971f06483fa36bada1a7b6e379ecdb0c70c37890cc094631fa7db3", @ANYRES16=r7, @ANYBLOB="010000000000feffffff01000000"], 0x14}}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000243712800b0001006d7d0973656300001400028005000b0000000000060002404e22000008000500832d8b5d0f674973790b51", @ANYRES32=r12], 0x4c}}, 0x20000004)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)

2.104545009s ago: executing program 1 (id=1599):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000001000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e20, 0x24, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}}, 0xfd30)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00@', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c00a50a000008000b00000000000600010005000000"], 0x34}}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r7, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
listen(r5, 0x9)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x8, 0x2, 0x80000001, 0x3, 0x2]}, &(0x7f00000001c0)=0x54)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r11, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)

1.698634643s ago: executing program 0 (id=1600):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x39, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff9}, {0x0, 0xb}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x5}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) (async, rerun: 32)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa", 0x4}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) (async, rerun: 32)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1}, 0x2140) (async)
getsockopt(r4, 0x400000000000003a, 0x7, 0x0, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004b00004000000000000614aa07170d00000000ffffffffac141400ac1e00017f0000010000004e220000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2b87890780000"], 0x0)

1.520043382s ago: executing program 0 (id=1601):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000400)={0x5}, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmmsg(r2, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611138000000000018000000000000000000000000000000040008000000"], 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

1.240175276s ago: executing program 1 (id=1603):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}], 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0xad)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}], 0x1c) (async)
setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0xad) (async)

1.189903516s ago: executing program 1 (id=1604):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98)
write$bt_hci(r1, 0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="fcffffff", 0x4)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r8 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000000)
syz_open_procfs$namespace(r8, &(0x7f0000000000)='ns/uts\x00')
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000200)=[{r9}, {r9, 0x5020}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10)
listen(r9, 0x0)
shutdown(r9, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f00000023c0)=r8)
write$cgroup_pid(r5, &(0x7f00000000c0)=r8, 0x12)
pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @broadcast, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x5}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@mss={0x2, 0x4, 0x200}, @sack={0x5, 0x2}]}}}}}}}}, 0x0)

719.903012ms ago: executing program 2 (id=1610):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="ffffffff70fefadbff2503000000080002000132c41835533dd890b4721bea4083735384ac716db4af13c7c81a8db4ad0282155ef7fcbd46db815fd22b3cbad066b6e9d803ed26a05fe74d82c3d038"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
listen(r0, 0x7d4165c9)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0xffffffff, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4)
r8 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @bcast}, [@null, @null, @rose, @netrom, @remote, @netrom, @default, @null]}, &(0x7f0000000300)=0x48, 0x80000)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="190000000400000000000000", @ANYRES32=r9, @ANYBLOB="c2d5d9530bc731e96c22fd33705210bc9c851b2004a0e60c6b2386a3cba1", @ANYRES64=0x0], 0x20)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x9)
socket$netlink(0x10, 0x3, 0x7)
r12 = socket$netlink(0x10, 0x3, 0x8000000004)
listen(r12, 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8)
r13 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r13, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

650.317569ms ago: executing program 2 (id=1611):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='\t s'], 0x8) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) (async)
r4 = socket$inet6(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) (async, rerun: 64)
setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000040)=0xfffffce1, 0x4) (rerun: 64)

646.217984ms ago: executing program 0 (id=1612):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @timestamp, @mss={0x2, 0xfffffffd}, @mss={0x2, 0x1}, @window={0x3, 0x2aa}, @mss={0x2, 0x80}, @window={0x3, 0x6, 0x2}, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x1)

590.393951ms ago: executing program 2 (id=1613):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0}) (async, rerun: 32)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r2 = socket$kcm(0x2, 0x2, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
close(r0) (async)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4)
bind$unix(0xffffffffffffffff, 0x0, 0x0)

510.207905ms ago: executing program 2 (id=1614):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/26, 0x2000, 0x1000, 0x1, 0x7}, 0x20)
r3 = accept(r0, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80)
sendmsg$NFT_BATCH(r3, 0x0, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58"], 0x58}}, 0x0)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, 0x0, 0x2e)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x3, 0x3, [0x0, 0xffffffff, 0x4000097]})

309.665308ms ago: executing program 2 (id=1615):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="98000000100005ff00000008000008000000004a", @ANYRES32=0x0, @ANYBLOB="7f150000000000006c0012800b0001006572737083adc070f2421e1ce6136519d648b8616e00005c000680080007007f00000105000a00010000000600180001c5000008001500202200000500130000000000060003190180000005001300000000000600030001000000060010004e22000005001700000000822b000500fe6f77bdb9ce5ac17280557f84d65929a573d9b67308c7f97fffa8732925d5393765177717e4ea4f1a8bf26f1cbe633d3cc575e849f302ea5ae86fc87d0bb7d43928116d4f48"], 0x98}}, 0x20000840)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000d800"/22], 0x50)
socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002da, &(0x7f0000000c00)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000067b8af8603d97a2c93234e1ba001000000000000000f8ffffffb7030000080000007f5ec106000000000000000000000000d43d6fb721c87dadba4fa2383230769ab69568159cf013243ddbaf3fda8bd2b0e80a10d44afe369a7dbe9977fdfb582e05f9cae9f3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, 0xffffffffffffffff, 0x80000000)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2d, 0x400eeb4, 0x13}, 0x2c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000004000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54700089425db635"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
syz_emit_ethernet(0x281, &(0x7f0000000f80)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[{0x8}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x2, 0x0, 0x1}], @ipv6=@tipc_packet={0x0, 0x6, "46a53e", 0x233, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x2f, 0x6, 0x3, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @remote]}, @hopopts={0x87, 0x8, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd, 0x8c95, [0x4, 0x2, 0xffffffff00000000]}}, @pad1, @pad1]}, @hopopts={0xff, 0x15, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x18, {0x3, 0x4, 0xb, 0xfff, [0x800, 0x9]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic, @calipso={0x7, 0x18, {0x1, 0x4, 0x5c, 0x8, [0x5, 0xfff]}}, @generic={0x4, 0x56, "6d1bdf94f71844c8a75efb306da79b3ef4fc156bc8141ae297413c8d42fcb25912b5f91dce214587b23067b84a401f7f9fe634a6f14f3741b897d832259a12b74fa6b2da7186fbcf72ba508718e4e5ebdcb93383320c"}, @pad1]}, @routing={0x32, 0xc, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, @private0, @local, @dev={0xfe, 0x80, '\x00', 0x34}]}, @srh={0x3b, 0x0, 0x4, 0x0, 0x40, 0x10, 0x2}, @hopopts={0xf1, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}, @routing={0x2f, 0xa, 0x0, 0x40, 0x0, [@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @private2]}], @payload_direct={{{{0x23, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x2, 0xfff9, 0x0, 0x2, 0x8, 0x5, 0x3, 0x64, 0x9, 0x3, 0x4e23, 0x4e22}, 0x3, 0x3}}, [0x0, 0x0, 0x0]}}}}}}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
setsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)

0s ago: executing program 2 (id=1616):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000001000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d4e0a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x7)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)

kernel console output (not intermixed with test programs):

im netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  118.357356][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  118.378719][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  118.446102][ T8217] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  118.705084][ T8231] lo: entered allmulticast mode
[  118.719302][ T8232] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.723545][ T5869] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.726891][ T8233] lo: left allmulticast mode
[  118.741290][ T5869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.744882][ T5869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.768517][ T5869] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.842115][ T8239] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  118.941895][ T8241] lo speed is unknown, defaulting to 1000
[  119.013113][ T8242] ieee802154 phy1 wpan1: encryption failed: -22
[  119.096938][ T8241] netlink: 'syz.1.574': attribute type 2 has an invalid length.
[  119.101097][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'.
[  119.410765][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[  119.521139][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'.
[  119.565856][ T8264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.690912][ T8271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.693556][ T8272] syzkaller0: entered promiscuous mode
[  119.695684][ T8272] syzkaller0: entered allmulticast mode
[  119.700072][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.703547][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.707297][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.711022][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.714369][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.717650][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.722765][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.727422][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.731810][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.735890][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.740342][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.745541][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.754487][ T8271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.813655][ T8272] tipc: Resetting bearer <eth:syzkaller0>
[  119.868014][ T8272] tipc: Disabling bearer <eth:syzkaller0>
[  119.950578][ T8288] netlink: 'syz.2.588': attribute type 13 has an invalid length.
[  119.955932][ T8288] netlink: 'syz.2.588': attribute type 17 has an invalid length.
[  120.061088][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.071573][ T8288] 8021q: adding VLAN 0 to HW filter on device team0
[  120.082904][ T8288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.210942][ T8309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.590'.
[  120.301862][ T8314] lo speed is unknown, defaulting to 1000
[  120.322333][ T8320] netlink: 'syz.2.591': attribute type 6 has an invalid length.
[  120.403484][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'.
[  120.595089][ T8330] lo speed is unknown, defaulting to 1000
[  120.813954][ T8340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.824910][ T8345] netlink: 'syz.0.598': attribute type 13 has an invalid length.
[  120.837187][ T8345] netlink: 'syz.0.598': attribute type 17 has an invalid length.
[  120.853878][ T8346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.599'.
[  120.865505][ T8346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.869198][ T8346] veth0_to_bridge: entered promiscuous mode
[  120.871257][ T8346] veth0_to_bridge: entered allmulticast mode
[  120.889029][ T8344] tipc: Disabling bearer <eth:syzkaller0>
[  120.911644][ T8345] lo speed is unknown, defaulting to 1000
[  120.962464][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.972640][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.231380][   T56] block nbd1: Receive control failed (result -104)
[  121.379597][ T8370] vlan0: entered promiscuous mode
[  121.518138][ T8375] netlink: 'syz.1.606': attribute type 3 has an invalid length.
[  121.587264][ T8379] lo speed is unknown, defaulting to 1000
[  122.217000][ T8398] lo speed is unknown, defaulting to 1000
[  122.573209][ T8410] lo speed is unknown, defaulting to 1000
[  122.860051][ T8428] syzkaller0: entered promiscuous mode
[  122.862406][ T8428] syzkaller0: entered allmulticast mode
[  122.874950][ T8428] __nla_validate_parse: 10 callbacks suppressed
[  122.874965][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[  122.876457][ T8427] lo speed is unknown, defaulting to 1000
[  122.877952][ T8428] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  122.887100][ T8428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.486851][ T8463] lo speed is unknown, defaulting to 1000
[  123.584945][ T8463] IPVS: Unknown mcast interface: hsr0
[  123.794004][ T8493] ieee802154 phy1 wpan1: encryption failed: -22
[  124.546596][ T8492] validate_nla: 1 callbacks suppressed
[  124.546609][ T8492] netlink: 'syz.2.628': attribute type 5 has an invalid length.
[  124.565027][ T8488] lo speed is unknown, defaulting to 1000
[  124.569056][ T8486] lo speed is unknown, defaulting to 1000
[  124.707318][ T8496] lo speed is unknown, defaulting to 1000
[  124.907941][ T8502] netlink: 'syz.0.631': attribute type 12 has an invalid length.
[  124.980266][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  125.095514][ T5233] Bluetooth: hci2: link tx timeout
[  125.098002][ T5233] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.192312][ T8521] lo speed is unknown, defaulting to 1000
[  125.239182][ T8528] syzkaller1: entered promiscuous mode
[  125.241510][ T8528] syzkaller1: entered allmulticast mode
[  125.483122][ T8535] lo speed is unknown, defaulting to 1000
[  125.506489][ T8537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.641'.
[  125.526237][ T8538] macsec1: entered promiscuous mode
[  125.528129][ T8538] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  125.532787][ T8538] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  125.553716][ T8537] netlink: 'syz.0.641': attribute type 29 has an invalid length.
[  125.563335][ T8537] netlink: 'syz.0.641': attribute type 29 has an invalid length.
[  125.568204][ T8537] netlink: 488 bytes leftover after parsing attributes in process `syz.0.641'.
[  125.925833][ T8558] lo speed is unknown, defaulting to 1000
[  126.120023][ T8558] netlink: 'syz.2.646': attribute type 1 has an invalid length.
[  126.123325][ T8558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.646'.
[  126.157279][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'.
[  126.666257][ T8585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.671295][ T8580] tipc: Resetting bearer <eth:syzkaller0>
[  127.160571][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  127.517087][ T8580] tipc: Disabling bearer <eth:syzkaller0>
[  127.531829][ T8591] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  127.671519][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'.
[  127.836327][ T8622] netlink: 64 bytes leftover after parsing attributes in process `syz.2.660'.
[  127.853117][ T8617] lo speed is unknown, defaulting to 1000
[  127.985298][ T8629] sctp: [Deprecated]: syz.0.662 (pid 8629) Use of int in max_burst socket option.
[  127.985298][ T8629] Use struct sctp_assoc_value instead
[  128.002039][ T8617] IPVS: Unknown mcast interface: hsr0
[  128.091308][ T8634] lo speed is unknown, defaulting to 1000
[  128.133588][ T8632] veth3: entered promiscuous mode
[  128.137457][ T8639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.141735][ T8637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.280040][ T8651] lo speed is unknown, defaulting to 1000
[  128.375568][ T8655] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.667'.
[  128.629681][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'.
[  128.684074][ T8684] bridge_slave_0: left allmulticast mode
[  128.686050][ T8684] bridge_slave_0: left promiscuous mode
[  128.693779][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.703864][ T8684] bridge_slave_1: left allmulticast mode
[  128.706257][ T8684] bridge_slave_1: left promiscuous mode
[  128.715518][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.724129][ T8684] bond0: (slave bond_slave_0): Releasing backup interface
[  128.729207][ T8684] bond0: (slave bond_slave_1): Releasing backup interface
[  128.734996][ T8684] team0: Port device team_slave_0 removed
[  128.740183][ T8684] team0: Port device team_slave_1 removed
[  128.742923][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.746524][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.752369][ T8684] bond1: (slave bridge1): Removing an active aggregator
[  128.756021][ T8684] bond1: (slave bridge1): Releasing backup interface
[  128.760764][ T8684] bridge1: left promiscuous mode
[  128.763013][ T8684] bridge1: left allmulticast mode
[  128.793596][ T5889] syz1: Port: 1 Link DOWN
[  128.816985][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.680'.
[  128.877417][ T8700] netlink: 'syz.1.681': attribute type 3 has an invalid length.
[  128.879826][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'.
[  128.885236][ T8700] syz_tun: entered allmulticast mode
[  128.889022][ T8700] siw: device registration error -23
[  128.900383][ T8700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.916434][ T8699] syz_tun: left allmulticast mode
[  128.950356][ T8709] netlink: 'syz.1.684': attribute type 1 has an invalid length.
[  128.962033][ T8707] lo speed is unknown, defaulting to 1000
[  128.985431][ T8709] netlink: 'syz.1.684': attribute type 1 has an invalid length.
[  129.022245][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  129.025225][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  129.028121][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  129.031425][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  129.057568][ T8715] xt_policy: too many policy elements
[  129.106222][ T8718] team0: No ports can be present during mode change
[  129.110607][ T8718] vlan0: entered promiscuous mode
[  129.304660][ T8729] lo speed is unknown, defaulting to 1000
[  129.861466][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[  129.866807][ T8740] netlink: 84 bytes leftover after parsing attributes in process `syz.1.693'.
[  129.888164][ T8740] lo speed is unknown, defaulting to 1000
[  130.088849][ T8746] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  130.094824][ T8746] CPU: 1 UID: 0 PID: 8746 Comm: syz.0.695 Not tainted syzkaller #0 PREEMPT(full) 
[  130.094842][ T8746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.094849][ T8746] Call Trace:
[  130.094855][ T8746]  <TASK>
[  130.094861][ T8746]  dump_stack_lvl+0x189/0x250
[  130.094884][ T8746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.094899][ T8746]  ? __pfx__printk+0x10/0x10
[  130.094920][ T8746]  ? kernfs_path_from_node+0x2f/0x290
[  130.094933][ T8746]  ? kernfs_path_from_node+0x250/0x290
[  130.094944][ T8746]  ? kernfs_path_from_node+0x2f/0x290
[  130.094960][ T8746]  sysfs_warn_dup+0x8e/0xa0
[  130.094974][ T8746]  sysfs_do_create_link_sd+0xc0/0x110
[  130.094989][ T8746]  device_add_class_symlinks+0x1cf/0x240
[  130.095005][ T8746]  device_add+0x475/0xb50
[  130.095020][ T8746]  wiphy_register+0x1ba6/0x28d0
[  130.095046][ T8746]  ? __pfx_wiphy_register+0x10/0x10
[  130.095058][ T8746]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  130.095081][ T8746]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  130.095099][ T8746]  ieee80211_register_hw+0x3484/0x4100
[  130.095126][ T8746]  ? ieee80211_register_hw+0x1431/0x4100
[  130.095150][ T8746]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  130.095169][ T8746]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.095215][ T8746]  ? __hrtimer_setup+0x187/0x210
[  130.095227][ T8746]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  130.095249][ T8746]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  130.095288][ T8746]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  130.095305][ T8746]  ? trace_kmalloc+0x1f/0xd0
[  130.095318][ T8746]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  130.095334][ T8746]  ? kstrndup+0xbf/0x160
[  130.095353][ T8746]  hwsim_new_radio_nl+0xea4/0x1b10
[  130.095371][ T8746]  ? __pfx___nla_validate_parse+0x10/0x10
[  130.095400][ T8746]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.095425][ T8746]  ? __nla_parse+0x40/0x60
[  130.095439][ T8746]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  130.095462][ T8746]  genl_family_rcv_msg_doit+0x215/0x300
[  130.095484][ T8746]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  130.095510][ T8746]  ? bpf_lsm_capable+0x9/0x20
[  130.095525][ T8746]  ? security_capable+0x7e/0x2e0
[  130.095547][ T8746]  genl_rcv_msg+0x60e/0x790
[  130.095567][ T8746]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.095579][ T8746]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.095601][ T8746]  netlink_rcv_skb+0x208/0x470
[  130.095618][ T8746]  ? __lock_acquire+0xab9/0xd20
[  130.095633][ T8746]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.095648][ T8746]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  130.095674][ T8746]  ? down_read+0x1ad/0x2e0
[  130.095718][ T8746]  genl_rcv+0x28/0x40
[  130.095732][ T8746]  netlink_unicast+0x82f/0x9e0
[  130.095758][ T8746]  ? __pfx_netlink_unicast+0x10/0x10
[  130.095774][ T8746]  ? netlink_sendmsg+0x642/0xb30
[  130.095784][ T8746]  ? skb_put+0x11b/0x210
[  130.095798][ T8746]  netlink_sendmsg+0x805/0xb30
[  130.095814][ T8746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.095828][ T8746]  ? aa_sock_msg_perm+0xf1/0x1d0
[  130.095841][ T8746]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  130.095853][ T8746]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.095867][ T8746]  __sock_sendmsg+0x21c/0x270
[  130.095887][ T8746]  ____sys_sendmsg+0x505/0x830
[  130.095905][ T8746]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.095926][ T8746]  ? import_iovec+0x74/0xa0
[  130.095942][ T8746]  ___sys_sendmsg+0x21f/0x2a0
[  130.095957][ T8746]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.095995][ T8746]  ? __fget_files+0x2a/0x420
[  130.096003][ T8746]  ? __fget_files+0x3a0/0x420
[  130.096022][ T8746]  __x64_sys_sendmsg+0x19b/0x260
[  130.096039][ T8746]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.096061][ T8746]  ? rcu_is_watching+0x15/0xb0
[  130.096078][ T8746]  ? do_syscall_64+0xbe/0x3b0
[  130.096095][ T8746]  do_syscall_64+0xfa/0x3b0
[  130.096107][ T8746]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.096119][ T8746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.096130][ T8746]  ? exc_page_fault+0x9f/0xf0
[  130.096143][ T8746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.096154][ T8746] RIP: 0033:0x7ff51bf8ebe9
[  130.096166][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.096175][ T8746] RSP: 002b:00007ff51cd45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.096187][ T8746] RAX: ffffffffffffffda RBX: 00007ff51c1c5fa0 RCX: 00007ff51bf8ebe9
[  130.096195][ T8746] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e
[  130.096203][ T8746] RBP: 00007ff51c011e19 R08: 0000000000000000 R09: 0000000000000000
[  130.096210][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.096217][ T8746] R13: 00007ff51c1c6038 R14: 00007ff51c1c5fa0 R15: 00007ffda64a9708
[  130.096236][ T8746]  </TASK>
[  130.406997][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'.
[  130.448388][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'.
[  130.461711][ T8752] dvmrp0: entered allmulticast mode
[  130.493466][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'.
[  130.496959][ T8751] dvmrp0: left allmulticast mode
[  130.695300][ T8760] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  130.703056][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  130.799818][ T8767] lo speed is unknown, defaulting to 1000
[  130.959200][ T8774] lo speed is unknown, defaulting to 1000
[  131.191070][ T8785] siw: device registration error -23
[  131.224602][ T8791] vcan0: tx address claim with dlc 0
[  131.392344][ T8801] lo speed is unknown, defaulting to 1000
[  131.423076][ T8795] lo speed is unknown, defaulting to 1000
[  131.435201][ T8806] lo speed is unknown, defaulting to 1000
[  131.450091][ T8800] macsec1: entered promiscuous mode
[  131.452086][ T8800] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  131.456118][ T8800] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  131.654158][ T8816] lo speed is unknown, defaulting to 1000
[  131.801922][ T8826] netlink: 'syz.2.717': attribute type 13 has an invalid length.
[  131.804891][ T8826] netlink: 'syz.2.717': attribute type 17 has an invalid length.
[  131.817376][ T8826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.066814][ T8832] lo speed is unknown, defaulting to 1000
[  132.103810][ T8829] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[  132.441494][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.559848][ T8859] lo speed is unknown, defaulting to 1000
[  132.650760][ T8872] netlink: 'syz.0.727': attribute type 13 has an invalid length.
[  132.654055][ T8872] netlink: 'syz.0.727': attribute type 17 has an invalid length.
[  132.680982][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.683924][ T8872] 8021q: adding VLAN 0 to HW filter on device team0
[  132.686365][ T8872] tipc: Resetting bearer <eth:team0>
[  132.688819][ T8872] tipc: Resetting bearer <eth:team0>
[  132.692417][ T8872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.817565][ T8875] netlink: 'syz.2.728': attribute type 16 has an invalid length.
[  132.820294][ T8875] netlink: 'syz.2.728': attribute type 17 has an invalid length.
[  132.875003][ T8877] IPv6: NLM_F_REPLACE set, but no existing node found!
[  133.108068][ T8886] lo speed is unknown, defaulting to 1000
[  133.142407][ T8886] netlink: 'syz.0.731': attribute type 5 has an invalid length.
[  133.147302][   T51] IPVS: starting estimator thread 0...
[  133.151135][ T8886] ieee802154 phy1 wpan1: encryption failed: -22
[  133.238396][ T8888] IPVS: using max 40 ests per chain, 96000 per kthread
[  133.412029][ T5866] IPVS: stop unused estimator thread 0...
[  133.993897][ T8915] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  133.997284][ T8915] CPU: 0 UID: 0 PID: 8915 Comm: syz.2.739 Not tainted syzkaller #0 PREEMPT(full) 
[  133.997302][ T8915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.997310][ T8915] Call Trace:
[  133.997317][ T8915]  <TASK>
[  133.997323][ T8915]  dump_stack_lvl+0x189/0x250
[  133.997346][ T8915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.997359][ T8915]  ? __pfx__printk+0x10/0x10
[  133.997379][ T8915]  ? kernfs_path_from_node+0x2f/0x290
[  133.997391][ T8915]  ? kernfs_path_from_node+0x250/0x290
[  133.997402][ T8915]  ? kernfs_path_from_node+0x2f/0x290
[  133.997418][ T8915]  sysfs_warn_dup+0x8e/0xa0
[  133.997431][ T8915]  sysfs_do_create_link_sd+0xc0/0x110
[  133.997445][ T8915]  device_add_class_symlinks+0x1cf/0x240
[  133.997461][ T8915]  device_add+0x475/0xb50
[  133.997477][ T8915]  wiphy_register+0x1ba6/0x28d0
[  133.997504][ T8915]  ? __pfx_wiphy_register+0x10/0x10
[  133.997516][ T8915]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  133.997537][ T8915]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  133.997556][ T8915]  ieee80211_register_hw+0x3484/0x4100
[  133.997582][ T8915]  ? ieee80211_register_hw+0x1431/0x4100
[  133.997612][ T8915]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  133.997657][ T8915]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.997682][ T8915]  ? __hrtimer_setup+0x187/0x210
[  133.997694][ T8915]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  133.997715][ T8915]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  133.997755][ T8915]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  133.997769][ T8915]  ? trace_kmalloc+0x1f/0xd0
[  133.997783][ T8915]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  133.997799][ T8915]  ? kstrndup+0xbf/0x160
[  133.997820][ T8915]  hwsim_new_radio_nl+0xea4/0x1b10
[  133.997838][ T8915]  ? __pfx___nla_validate_parse+0x10/0x10
[  133.997866][ T8915]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  133.997891][ T8915]  ? __nla_parse+0x40/0x60
[  133.997905][ T8915]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  133.997929][ T8915]  genl_family_rcv_msg_doit+0x215/0x300
[  133.997950][ T8915]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  133.997975][ T8915]  ? bpf_lsm_capable+0x9/0x20
[  133.997991][ T8915]  ? security_capable+0x7e/0x2e0
[  133.998013][ T8915]  genl_rcv_msg+0x60e/0x790
[  133.998032][ T8915]  ? __pfx_genl_rcv_msg+0x10/0x10
[  133.998047][ T8915]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  133.998073][ T8915]  netlink_rcv_skb+0x208/0x470
[  133.998083][ T8915]  ? __lock_acquire+0xab9/0xd20
[  133.998101][ T8915]  ? __pfx_genl_rcv_msg+0x10/0x10
[  133.998117][ T8915]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  133.998143][ T8915]  ? down_read+0x1ad/0x2e0
[  133.998159][ T8915]  genl_rcv+0x28/0x40
[  133.998172][ T8915]  netlink_unicast+0x82f/0x9e0
[  133.998197][ T8915]  ? __pfx_netlink_unicast+0x10/0x10
[  133.998233][ T8915]  ? netlink_sendmsg+0x642/0xb30
[  133.998245][ T8915]  ? skb_put+0x11b/0x210
[  133.998262][ T8915]  netlink_sendmsg+0x805/0xb30
[  133.998281][ T8915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.998294][ T8915]  ? aa_sock_msg_perm+0xf1/0x1d0
[  133.998306][ T8915]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  133.998317][ T8915]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.998330][ T8915]  __sock_sendmsg+0x21c/0x270
[  133.998350][ T8915]  ____sys_sendmsg+0x505/0x830
[  133.998369][ T8915]  ? __pfx_____sys_sendmsg+0x10/0x10
[  133.998391][ T8915]  ? import_iovec+0x74/0xa0
[  133.998407][ T8915]  ___sys_sendmsg+0x21f/0x2a0
[  133.998422][ T8915]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.998464][ T8915]  ? __fget_files+0x2a/0x420
[  133.998475][ T8915]  ? __fget_files+0x3a0/0x420
[  133.998492][ T8915]  __x64_sys_sendmsg+0x19b/0x260
[  133.998508][ T8915]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  133.998531][ T8915]  ? rcu_is_watching+0x15/0xb0
[  133.998548][ T8915]  ? do_syscall_64+0xbe/0x3b0
[  133.998564][ T8915]  do_syscall_64+0xfa/0x3b0
[  133.998576][ T8915]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.998588][ T8915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.998599][ T8915]  ? exc_page_fault+0x9f/0xf0
[  133.998618][ T8915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.998657][ T8915] RIP: 0033:0x7fb66498ebe9
[  133.998670][ T8915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.998679][ T8915] RSP: 002b:00007fb662bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.998694][ T8915] RAX: ffffffffffffffda RBX: 00007fb664bc5fa0 RCX: 00007fb66498ebe9
[  133.998704][ T8915] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  133.998711][ T8915] RBP: 00007fb664a11e19 R08: 0000000000000000 R09: 0000000000000000
[  133.998718][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.998725][ T8915] R13: 00007fb664bc6038 R14: 00007fb664bc5fa0 R15: 00007fff3e325fd8
[  133.998747][ T8915]  </TASK>
[  134.312790][ T8923] lo speed is unknown, defaulting to 1000
[  134.403010][ T8938] __nla_validate_parse: 12 callbacks suppressed
[  134.403027][ T8938] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.744'.
[  134.410611][ T8938] netlink: zone id is out of range
[  134.412945][ T8938] netlink: zone id is out of range
[  134.415144][ T8938] netlink: zone id is out of range
[  134.417399][ T8938] netlink: get zone limit has 8 unknown bytes
[  134.455655][ T8941] sctp: [Deprecated]: syz.2.745 (pid 8941) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.455655][ T8941] Use struct sctp_sack_info instead
[  134.774973][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'.
[  135.303728][ T8962] lo speed is unknown, defaulting to 1000
[  135.413487][ T8965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.417062][ T8965] syzkaller0: entered promiscuous mode
[  135.421829][ T8965] syzkaller0: entered allmulticast mode
[  135.446992][ T8965] tipc: Resetting bearer <eth:syzkaller0>
[  135.468693][ T8964] tipc: Resetting bearer <eth:syzkaller0>
[  135.483387][ T8964] tipc: Disabling bearer <eth:syzkaller0>
[  135.591333][ T8978] lo speed is unknown, defaulting to 1000
[  135.777546][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'.
[  135.781671][ T8986] lo speed is unknown, defaulting to 1000
[  135.784261][ T8993] nbd: must specify at least one socket
[  135.902011][  T791] lo speed is unknown, defaulting to 1000
[  135.904022][  T791] syz2: Port: 1 Link DOWN
[  135.969384][ T9001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.975930][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'.
[  135.997259][ T9001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.760'.
[  136.005577][ T9006] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  136.008748][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.0.761 Not tainted syzkaller #0 PREEMPT(full) 
[  136.008759][ T9006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.008765][ T9006] Call Trace:
[  136.008768][ T9006]  <TASK>
[  136.008771][ T9006]  dump_stack_lvl+0x189/0x250
[  136.008787][ T9006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.008797][ T9006]  ? __pfx__printk+0x10/0x10
[  136.008810][ T9006]  ? kernfs_path_from_node+0x2f/0x290
[  136.008820][ T9006]  ? kernfs_path_from_node+0x250/0x290
[  136.008828][ T9006]  ? kernfs_path_from_node+0x2f/0x290
[  136.008839][ T9006]  sysfs_warn_dup+0x8e/0xa0
[  136.008847][ T9006]  sysfs_do_create_link_sd+0xc0/0x110
[  136.008856][ T9006]  device_add_class_symlinks+0x1cf/0x240
[  136.008866][ T9006]  device_add+0x475/0xb50
[  136.008875][ T9006]  wiphy_register+0x1ba6/0x28d0
[  136.008891][ T9006]  ? __pfx_wiphy_register+0x10/0x10
[  136.008899][ T9006]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  136.008913][ T9006]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  136.008926][ T9006]  ieee80211_register_hw+0x3484/0x4100
[  136.008942][ T9006]  ? ieee80211_register_hw+0x1431/0x4100
[  136.008955][ T9006]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  136.008966][ T9006]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  136.008981][ T9006]  ? __hrtimer_setup+0x187/0x210
[  136.008988][ T9006]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  136.009000][ T9006]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  136.009021][ T9006]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  136.009029][ T9006]  ? trace_kmalloc+0x1f/0xd0
[  136.009037][ T9006]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  136.009046][ T9006]  ? kstrndup+0xbf/0x160
[  136.009057][ T9006]  hwsim_new_radio_nl+0xea4/0x1b10
[  136.009068][ T9006]  ? __pfx___nla_validate_parse+0x10/0x10
[  136.009085][ T9006]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  136.009100][ T9006]  ? __nla_parse+0x40/0x60
[  136.009108][ T9006]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  136.009122][ T9006]  genl_family_rcv_msg_doit+0x215/0x300
[  136.009134][ T9006]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  136.009148][ T9006]  ? bpf_lsm_capable+0x9/0x20
[  136.009157][ T9006]  ? security_capable+0x7e/0x2e0
[  136.009170][ T9006]  genl_rcv_msg+0x60e/0x790
[  136.009181][ T9006]  ? __pfx_genl_rcv_msg+0x10/0x10
[  136.009190][ T9006]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  136.009205][ T9006]  netlink_rcv_skb+0x208/0x470
[  136.009211][ T9006]  ? __lock_acquire+0xab9/0xd20
[  136.009221][ T9006]  ? __pfx_genl_rcv_msg+0x10/0x10
[  136.009230][ T9006]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  136.009245][ T9006]  ? down_read+0x1ad/0x2e0
[  136.009254][ T9006]  genl_rcv+0x28/0x40
[  136.009262][ T9006]  netlink_unicast+0x82f/0x9e0
[  136.009285][ T9006]  ? __pfx_netlink_unicast+0x10/0x10
[  136.009297][ T9006]  ? netlink_sendmsg+0x642/0xb30
[  136.009304][ T9006]  ? skb_put+0x11b/0x210
[  136.009315][ T9006]  netlink_sendmsg+0x805/0xb30
[  136.009348][ T9006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.009374][ T9006]  ? aa_sock_msg_perm+0xf1/0x1d0
[  136.009383][ T9006]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  136.009391][ T9006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.009400][ T9006]  __sock_sendmsg+0x21c/0x270
[  136.009412][ T9006]  ____sys_sendmsg+0x505/0x830
[  136.009423][ T9006]  ? __pfx_____sys_sendmsg+0x10/0x10
[  136.009436][ T9006]  ? import_iovec+0x74/0xa0
[  136.009447][ T9006]  ___sys_sendmsg+0x21f/0x2a0
[  136.009456][ T9006]  ? __pfx____sys_sendmsg+0x10/0x10
[  136.009482][ T9006]  ? __fget_files+0x2a/0x420
[  136.009489][ T9006]  ? __fget_files+0x3a0/0x420
[  136.009501][ T9006]  __x64_sys_sendmsg+0x19b/0x260
[  136.009510][ T9006]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  136.009525][ T9006]  ? rcu_is_watching+0x15/0xb0
[  136.009534][ T9006]  ? do_syscall_64+0xbe/0x3b0
[  136.009544][ T9006]  do_syscall_64+0xfa/0x3b0
[  136.009551][ T9006]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.009558][ T9006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.009565][ T9006]  ? exc_page_fault+0x9f/0xf0
[  136.009572][ T9006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.009579][ T9006] RIP: 0033:0x7ff51bf8ebe9
[  136.009587][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.009594][ T9006] RSP: 002b:00007ff51cd45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  136.009628][ T9006] RAX: ffffffffffffffda RBX: 00007ff51c1c5fa0 RCX: 00007ff51bf8ebe9
[  136.009634][ T9006] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  136.009638][ T9006] RBP: 00007ff51c011e19 R08: 0000000000000000 R09: 0000000000000000
[  136.009643][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.009647][ T9006] R13: 00007ff51c1c6038 R14: 00007ff51c1c5fa0 R15: 00007ffda64a9708
[  136.009660][ T9006]  </TASK>
[  136.152378][ T9011] netlink: 84 bytes leftover after parsing attributes in process `syz.1.762'.
[  136.226222][ T9015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.763'.
[  136.235929][ T9009] lo speed is unknown, defaulting to 1000
[  136.314970][ T9018] lo speed is unknown, defaulting to 1000
[  136.345760][ T9020] netlink: 'syz.0.764': attribute type 5 has an invalid length.
[  136.386237][ T9018] ieee802154 phy1 wpan1: encryption failed: -22
[  136.554634][ T9029] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[  136.569920][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'.
[  136.573510][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'.
[  136.577200][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'.
[  136.628780][ T9030] tipc: Resetting bearer <eth:team0>
[  136.790375][ T9037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.792899][ T9037] IPv6: NLM_F_CREATE should be set when creating new route
[  136.798081][ T9039] lo speed is unknown, defaulting to 1000
[  136.807535][ T9037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.810649][ T9037] IPv6: NLM_F_CREATE should be set when creating new route
[  136.844332][ T9040] macsec1: entered promiscuous mode
[  136.846555][ T9040] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  137.136832][ T9054] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  137.383211][ T9069] lo speed is unknown, defaulting to 1000
[  137.515120][ T9076] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  137.591831][ T9036] delete_channel: no stack
[  138.017330][ T9087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.410695][ T9103] validate_nla: 3 callbacks suppressed
[  138.410711][ T9103] netlink: 'syz.0.789': attribute type 4 has an invalid length.
[  138.815828][ T9122] siw: device registration error -23
[  138.916171][ T9121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.041198][ T9135] lo speed is unknown, defaulting to 1000
[  139.083991][    T9] IPVS: starting estimator thread 0...
[  139.087231][ T9135] ieee802154 phy1 wpan1: encryption failed: -22
[  139.168363][ T9137] IPVS: using max 80 ests per chain, 192000 per kthread
[  139.273864][ T9143] netlink: 'syz.2.801': attribute type 16 has an invalid length.
[  139.277237][ T9143] netlink: 'syz.2.801': attribute type 17 has an invalid length.
[  139.348973][ T5869] IPVS: stop unused estimator thread 0...
[  139.382418][ T9145] lo speed is unknown, defaulting to 1000
[  139.685908][ T9161] netlink: 'syz.1.807': attribute type 3 has an invalid length.
[  139.744819][ T9166] lo speed is unknown, defaulting to 1000
[  139.808643][ T9173] netlink: 'syz.0.810': attribute type 3 has an invalid length.
[  139.815577][ T9166] tipc: Started in network mode
[  139.817280][ T9166] tipc: Node identity f65c66174fe6, cluster identity 4711
[  139.820944][ T9166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.823724][ T9166] syzkaller0: entered promiscuous mode
[  139.825077][ T9173] __nla_validate_parse: 13 callbacks suppressed
[  139.825089][ T9173] netlink: 256 bytes leftover after parsing attributes in process `syz.0.810'.
[  139.825501][ T9166] syzkaller0: entered allmulticast mode
[  139.858419][ T9173] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.862031][ T9173] 8021q: adding VLAN 0 to HW filter on device team0
[  139.864576][ T9173] tipc: Resetting bearer <eth:team0>
[  139.866820][ T9173] tipc: Resetting bearer <eth:team0>
[  139.873201][ T9173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.888171][ T9165] tipc: Resetting bearer <eth:syzkaller0>
[  139.901964][ T9165] tipc: Disabling bearer <eth:syzkaller0>
[  139.920951][ T9175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'.
[  140.064767][ T9178] tun0: tun_chr_ioctl cmd 1074025675
[  140.067614][ T9178] tun0: persist enabled
[  140.070897][ T9178] tun0: tun_chr_ioctl cmd 1074025675
[  140.073173][ T9178] tun0: persist enabled
[  140.075585][ T9178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.812'.
[  140.102363][ T5869] tipc: Left network mode
[  140.355201][ T9193] lo speed is unknown, defaulting to 1000
[  140.456872][ T9203] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:19999
[  140.462850][ T9203] IPVS: lc: FWM 3 0x00000003 - no destination available
[  140.495842][ T9203] lo speed is unknown, defaulting to 1000
[  140.537648][ T9204] lo speed is unknown, defaulting to 1000
[  140.875664][ T9212] lo speed is unknown, defaulting to 1000
[  140.958084][ T9211] lo speed is unknown, defaulting to 1000
[  141.123803][ T9220] lo speed is unknown, defaulting to 1000
[  141.157007][ T9223] netlink: 'syz.2.822': attribute type 5 has an invalid length.
[  141.298732][ T9233] lo: entered allmulticast mode
[  141.300616][ T9233] lo: left allmulticast mode
[  141.338787][ T9235] team0: Mode changed to "broadcast"
[  141.345015][ T9235] team0: Port device vlan0 added
[  141.483771][ T9248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.494560][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  142.303695][ T9260] lo speed is unknown, defaulting to 1000
[  142.400163][ T9267] siw: device registration error -23
[  142.413767][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.835'.
[  142.471845][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'.
[  142.475662][ T9267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'.
[  142.482935][ T9268] lo speed is unknown, defaulting to 1000
[  142.677747][ T9282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.838'.
[  142.707188][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.838'.
[  142.714361][ T9282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.838'.
[  142.724996][ T9280] lo speed is unknown, defaulting to 1000
[  142.816464][ T9280] IPVS: Unknown mcast interface: hsr0
[  142.958121][ T9286] lo speed is unknown, defaulting to 1000
[  143.055320][ T9290] lo speed is unknown, defaulting to 1000
[  143.174851][ T9299] netlink: 'syz.2.845': attribute type 1 has an invalid length.
[  143.179571][ T9299] netlink: 'syz.2.845': attribute type 2 has an invalid length.
[  143.183917][ T9299] netlink: 'syz.2.845': attribute type 1 has an invalid length.
[  143.539059][ T9312] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  143.737124][ T9337] netlink: 'syz.0.858': attribute type 2 has an invalid length.
[  143.747419][ T9337] netlink: 'syz.0.858': attribute type 1 has an invalid length.
[  143.771051][ T9338] lo speed is unknown, defaulting to 1000
[  143.877361][ T9347] lo speed is unknown, defaulting to 1000
[  144.180875][ T9367] lo speed is unknown, defaulting to 1000
[  144.478197][ T9380] netlink: 'syz.0.867': attribute type 11 has an invalid length.
[  144.541772][ T9384] team0: Port device vlan0 removed
[  144.552842][ T9384] team0: Unable to change to the same mode the team is in
[  144.577509][ T9384] team0: Port device vlan0 added
[  144.807079][ T9396] lo speed is unknown, defaulting to 1000
[  145.271008][ T9410] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  145.397759][ T9419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.405032][ T9419] __nla_validate_parse: 4 callbacks suppressed
[  145.405041][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'.
[  145.411989][ T9419] siw: device registration error -23
[  145.910392][ T9421] lo speed is unknown, defaulting to 1000
[  146.025142][ T9424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.880'.
[  146.125247][ T9430] lo speed is unknown, defaulting to 1000
[  146.201217][ T9435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.882'.
[  146.293705][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  146.603003][ T9462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.609276][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'.
[  146.613185][ T9462] siw: device registration error -23
[  146.813356][ T9471] lo speed is unknown, defaulting to 1000
[  146.865741][ T9471] macsec1: entered promiscuous mode
[  146.867859][ T9471] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  146.872304][ T9471] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  147.019697][ T9476] lo speed is unknown, defaulting to 1000
[  147.151217][ T9485] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  147.403700][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'.
[  147.429410][ T9495] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  147.544996][ T9502] sctp: [Deprecated]: syz.1.900 (pid 9502) Use of int in maxseg socket option.
[  147.544996][ T9502] Use struct sctp_assoc_value instead
[  147.632839][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  147.671916][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'.
[  147.676321][ T9509] netlink: 'syz.1.903': attribute type 1 has an invalid length.
[  147.687712][ T9509] netlink: 'syz.1.903': attribute type 1 has an invalid length.
[  147.773201][ T9525] tipc: Resetting bearer <eth:team0>
[  147.776949][ T9525] team0: Unable to change to the same mode the team is in
[  147.782363][ T9525] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  147.829631][ T9532] nbd: socks must be embedded in a SOCK_ITEM attr
[  147.835176][ T9531] nbd: socks must be embedded in a SOCK_ITEM attr
[  148.531518][ T9540] netlink: 'syz.1.911': attribute type 13 has an invalid length.
[  148.534852][ T9540] netlink: 'syz.1.911': attribute type 17 has an invalid length.
[  148.550573][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.554824][ T9540] 8021q: adding VLAN 0 to HW filter on device team0
[  148.560725][ T9540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.567365][ T5890] lo speed is unknown, defaulting to 1000
[  148.570191][ T5890] syz2: Port: 1 Link ACTIVE
[  148.610807][ T9540] lo speed is unknown, defaulting to 1000
[  148.667993][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  148.672884][ T9540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.678724][ T9540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.772236][ T9546] lo speed is unknown, defaulting to 1000
[  148.857669][ T9553] syzkaller1: entered promiscuous mode
[  148.860557][ T9553] syzkaller1: entered allmulticast mode
[  149.003335][ T9559] netlink: 76 bytes leftover after parsing attributes in process `syz.0.916'.
[  149.132905][ T9567] lo speed is unknown, defaulting to 1000
[  149.206823][ T9567] macsec1: entered promiscuous mode
[  149.209621][ T9567] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  149.215488][ T9567] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  149.849041][ T9573] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  149.914544][ T9580] netlink: 'syz.1.921': attribute type 12 has an invalid length.
[  149.959670][ T9577] netlink: 'syz.2.922': attribute type 10 has an invalid length.
[  150.021509][ T9587] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  150.052933][  T791] lo speed is unknown, defaulting to 1000
[  150.054905][  T791] syz2: Port: 1 Link DOWN
[  150.142973][ T9595] lo speed is unknown, defaulting to 1000
[  150.185026][ T9604] lo speed is unknown, defaulting to 1000
[  150.222739][  T791] IPVS: starting estimator thread 0...
[  150.223084][ T9604] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20004
[  150.309814][ T9608] IPVS: using max 80 ests per chain, 192000 per kthread
[  150.350178][ T9614] lo speed is unknown, defaulting to 1000
[  150.431121][ T9624] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  150.684837][ T5869] IPVS: stop unused estimator thread 0...
[  150.880273][ T9649] syzkaller1: entered promiscuous mode
[  150.883486][ T9649] syzkaller1: entered allmulticast mode
[  150.890239][ T9649] __nla_validate_parse: 1 callbacks suppressed
[  150.890247][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  150.896106][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  150.899679][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  150.904559][ T9651] syzkaller1: entered promiscuous mode
[  150.904906][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  150.906626][ T9651] syzkaller1: entered allmulticast mode
[  150.913213][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  151.347156][ T9660] netlink: 1 bytes leftover after parsing attributes in process `syz.1.942'.
[  151.497537][ T9669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.621661][ T9677] IPVS: set_ctl: invalid protocol: 229 172.20.20.187:20001
[  151.625108][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'.
[  151.731796][ T9687] lo speed is unknown, defaulting to 1000
[  151.780937][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'.
[  151.807454][ T9690] tipc: Resetting bearer <eth:team0>
[  151.816910][ T9690] bridge_slave_0: left allmulticast mode
[  151.823341][ T9690] vlan0: left promiscuous mode
[  151.826826][ T9690] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  151.832951][ T9690] geneve2: left promiscuous mode
[  151.835460][ T9690] geneve2: left allmulticast mode
[  151.904654][ T9695] netlink: 'syz.1.953': attribute type 3 has an invalid length.
[  151.916428][ T9695] syz_tun: entered allmulticast mode
[  151.927849][ T9695] siw: device registration error -23
[  151.964291][ T9695] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.975996][ T9695] 8021q: adding VLAN 0 to HW filter on device team0
[  151.982888][ T9695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.990634][ T5890] lo speed is unknown, defaulting to 1000
[  151.995816][ T5890] syz2: Port: 1 Link ACTIVE
[  152.008585][ T9694] syz_tun: left allmulticast mode
[  152.122652][ T9715] netlink: 160 bytes leftover after parsing attributes in process `syz.2.955'.
[  152.150222][ T9716] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  152.192764][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.960'.
[  152.211700][ T9720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.217960][ T9720] veth0_to_bridge: entered promiscuous mode
[  152.226184][ T9720] veth0_to_bridge: entered allmulticast mode
[  152.245953][ T9719] tipc: Disabling bearer <eth:syzkaller0>
[  152.380896][ T9729] netlink: 'syz.0.963': attribute type 10 has an invalid length.
[  152.387516][ T9729] team0: Port device geneve0 added
[  152.391244][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.394950][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.398668][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.405615][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.438929][ T9729] syzkaller0: entered promiscuous mode
[  152.441226][ T9729] syzkaller0: entered allmulticast mode
[  153.471029][ T9729] syz.0.963 (9729) used greatest stack depth: 18904 bytes left
[  153.621157][ T9761] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  153.632003][ T9757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.640863][ T9758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.661467][ T9756] tipc: Disabling bearer <eth:syzkaller0>
[  153.714837][ T9766] lo speed is unknown, defaulting to 1000
[  153.813024][ T9781] netlink: 'syz.1.977': attribute type 3 has an invalid length.
[  153.835920][ T9781] syz_tun: entered allmulticast mode
[  153.840295][ T9781] siw: device registration error -23
[  153.847632][ T9781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.856048][ T9779] syz_tun: left allmulticast mode
[  153.885406][ T9783] veth0_to_bridge: left promiscuous mode
[  153.887439][ T9783] veth0_to_bridge: left allmulticast mode
[  153.895499][ T9783] vlan0: left promiscuous mode
[  153.899508][ T9783] bond1: left promiscuous mode
[  153.901645][ T9783] bridge2: left promiscuous mode
[  153.903835][ T9783] bond1: left allmulticast mode
[  153.905632][ T9783] bridge2: left allmulticast mode
[  153.907560][ T9783] geneve2: left promiscuous mode
[  153.910992][ T9783] geneve2: left allmulticast mode
[  153.913270][ T9783] veth3: left promiscuous mode
[  154.011560][ T9789] lo speed is unknown, defaulting to 1000
[  154.093270][ T9793] lo speed is unknown, defaulting to 1000
[  154.111161][ T9796] netlink: 'syz.2.981': attribute type 1 has an invalid length.
[  154.363055][ T9817] hsr0: entered allmulticast mode
[  154.364988][ T9817] hsr_slave_0: entered allmulticast mode
[  154.523104][   T56] block nbd4: Receive control failed (result -107)
[  154.548634][ T9832] nbd4: detected capacity change from 0 to 32
[  154.555446][ T9564] block nbd4: Dead connection, failed to find a fallback
[  154.561083][ T9564] block nbd4: shutting down sockets
[  154.568839][ T9564] blk_print_req_error: 27 callbacks suppressed
[  154.568851][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.576927][ T9564] buffer_io_error: 27 callbacks suppressed
[  154.576939][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.591623][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.602801][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.609918][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.619790][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.628139][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.636027][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.645031][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.655035][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.665147][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.675388][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.680574][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.686746][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.697518][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.707319][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.712983][ T9564] ldm_validate_partition_table(): Disk read failed.
[  154.717623][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.723423][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.728989][ T9564] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.736262][ T9564] Buffer I/O error on dev nbd4, logical block 0, async page read
[  154.745190][ T9564] Dev nbd4: unable to read RDB block 0
[  154.748660][ T9564]  nbd4: unable to read partition table
[  154.755529][ T9564] ldm_validate_partition_table(): Disk read failed.
[  154.762578][ T9564] Dev nbd4: unable to read RDB block 0
[  154.765403][ T9564]  nbd4: unable to read partition table
[  155.059055][ T9854] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  155.504153][ T9860] lo speed is unknown, defaulting to 1000
[  155.960311][ T9865] lo speed is unknown, defaulting to 1000
[  156.001059][ T5889] IPVS: starting estimator thread 0...
[  156.099614][ T9867] IPVS: using max 80 ests per chain, 192000 per kthread
[  156.213544][ T9876] lo speed is unknown, defaulting to 1000
[  156.246031][ T5869] IPVS: stop unused estimator thread 0...
[  156.258475][ T9876] sctp: [Deprecated]: syz.1.995 (pid 9876) Use of int in maxseg socket option.
[  156.258475][ T9876] Use struct sctp_assoc_value instead
[  157.223773][ T9889] lo speed is unknown, defaulting to 1000
[  157.317282][ T9905] __nla_validate_parse: 11 callbacks suppressed
[  157.317291][ T9905] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1004'.
[  157.459407][ T9922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1007'.
[  157.570606][ T9928] lo speed is unknown, defaulting to 1000
[  157.853009][ T9937] lo speed is unknown, defaulting to 1000
[  157.980241][ T9942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'.
[  157.983562][ T9942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'.
[  157.986637][ T9942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'.
[  157.990096][ T9942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'.
[  159.366787][ T9955] lo speed is unknown, defaulting to 1000
[  159.372658][ T9956] lo speed is unknown, defaulting to 1000
[  159.725048][ T5869] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.732917][ T5869] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.736485][ T5869] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.740591][ T5869] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.813341][ T9972] netlink: 'syz.0.1022': attribute type 4 has an invalid length.
[  159.852326][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'.
[  159.972673][ T9978] netlink: 'syz.0.1025': attribute type 1 has an invalid length.
[  159.975712][ T9978] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1025'.
[  159.979067][ T9978] netlink: 97 bytes leftover after parsing attributes in process `syz.0.1025'.
[  159.982524][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'.
[  160.001256][ T9978] lo speed is unknown, defaulting to 1000
[  160.247806][ T9991] netlink: 'syz.0.1028': attribute type 4 has an invalid length.
[  160.253936][ T9991] netlink: 'syz.0.1028': attribute type 4 has an invalid length.
[  160.469529][ T9996] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  160.680425][T10004] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.862029][T10015] lo speed is unknown, defaulting to 1000
[  160.906143][T10016] netlink: 'syz.0.1036': attribute type 5 has an invalid length.
[  161.559589][T10052] netlink: 'syz.1.1048': attribute type 13 has an invalid length.
[  161.562684][T10052] netlink: 'syz.1.1048': attribute type 17 has an invalid length.
[  161.575982][T10052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.585484][T10053] lo speed is unknown, defaulting to 1000
[  161.612601][T10054] netlink: 'syz.0.1047': attribute type 5 has an invalid length.
[  161.712851][T10054] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  162.530838][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'.
[  162.534746][T10066] syzkaller1: entered promiscuous mode
[  162.536740][T10066] syzkaller1: entered allmulticast mode
[  162.698125][T10068] lo speed is unknown, defaulting to 1000
[  162.729544][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1053'.
[  162.734279][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'.
[  162.785429][T10078] bond2 (unregistering): Released all slaves
[  162.997504][T10094] syzkaller0: entered promiscuous mode
[  163.004461][T10094] syzkaller0: entered allmulticast mode
[  163.065815][T10102] lo speed is unknown, defaulting to 1000
[  163.112225][ T5889] IPVS: starting estimator thread 0...
[  163.114839][T10102] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  163.154356][T10109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.157727][T10109] syzkaller0: entered promiscuous mode
[  163.162170][T10109] syzkaller0: entered allmulticast mode
[  163.174015][T10109] tipc: Resetting bearer <eth:syzkaller0>
[  163.178510][T10108] tipc: Resetting bearer <eth:syzkaller0>
[  163.194915][T10108] tipc: Disabling bearer <eth:syzkaller0>
[  163.198838][T10105] IPVS: using max 80 ests per chain, 192000 per kthread
[  163.210477][T10104] netlink: 'syz.1.1063': attribute type 29 has an invalid length.
[  163.665217][T10146] lo speed is unknown, defaulting to 1000
[  163.927611][T10153] netlink: 'syz.1.1076': attribute type 13 has an invalid length.
[  163.935507][T10153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.212590][ T5869] IPVS: stop unused estimator thread 0...
[  164.259725][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'.
[  164.264273][T10172] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1080'.
[  164.293821][T10172] lo speed is unknown, defaulting to 1000
[  164.302243][T10174] lo speed is unknown, defaulting to 1000
[  164.445926][T10185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1083'.
[  164.514676][T10194] netem: incorrect ge model size
[  164.516800][T10194] netem: change failed
[  164.575359][T10194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1084'.
[  164.795049][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1089'.
[  164.807804][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1089'.
[  164.813684][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'.
[  164.820938][T10214] 0X: renamed from caif0
[  164.826671][T10214] 0X: entered allmulticast mode
[  164.830842][T10214] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  164.864120][T10218] validate_nla: 4 callbacks suppressed
[  164.864130][T10218] netlink: 'syz.1.1091': attribute type 10 has an invalid length.
[  164.870106][T10218] team0: Device ipvlan1 failed to enter team mode
[  164.872202][T10218] team0: Device ipvlan1 failed to enter team mode
[  165.774546][T10232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.814734][T10234] lo speed is unknown, defaulting to 1000
[  165.862886][T10236] macsec1: entered promiscuous mode
[  165.864783][T10236] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  165.868075][T10236] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  166.085067][T10254] lo speed is unknown, defaulting to 1000
[  166.309988][T10264] nbd: must specify a device to reconfigure
[  166.418507][T10275] bridge_slave_0: left allmulticast mode
[  166.421076][T10275] bridge_slave_0: left promiscuous mode
[  166.424104][T10275] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.429892][T10275] bridge_slave_1: left allmulticast mode
[  166.432322][T10275] bridge_slave_1: left promiscuous mode
[  166.434531][T10275] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.439782][T10275] bond0: (slave bond_slave_0): Releasing backup interface
[  166.443522][T10275] bond0: (slave bond_slave_1): Releasing backup interface
[  166.448991][T10275] team0: Port device team_slave_0 removed
[  166.451984][T10275] team0: Port device team_slave_1 removed
[  166.454344][T10275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.457555][T10275] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.461000][T10275] bond1: (slave bridge2): Removing an active aggregator
[  166.463805][T10275] bond1: (slave bridge2): Releasing backup interface
[  167.381443][T10289] lo speed is unknown, defaulting to 1000
[  167.519423][T10293] lo speed is unknown, defaulting to 1000
[  167.585333][T10305] lo speed is unknown, defaulting to 1000
[  167.657535][T10308] lo speed is unknown, defaulting to 1000
[  167.673552][T10305] netlink: 'syz.0.1113': attribute type 1 has an invalid length.
[  167.676351][T10305] __nla_validate_parse: 8 callbacks suppressed
[  167.676359][T10305] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1113'.
[  167.701417][T10308] IPVS: Unknown mcast interface: hsr0
[  167.838155][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'.
[  167.849383][T10330] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  167.852383][T10330] CPU: 0 UID: 0 PID: 10330 Comm: syz.0.1118 Not tainted syzkaller #0 PREEMPT(full) 
[  167.852394][T10330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.852398][T10330] Call Trace:
[  167.852417][T10330]  <TASK>
[  167.852422][T10330]  dump_stack_lvl+0x189/0x250
[  167.852437][T10330]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.852446][T10330]  ? __pfx__printk+0x10/0x10
[  167.852458][T10330]  ? kernfs_path_from_node+0x2f/0x290
[  167.852466][T10330]  ? kernfs_path_from_node+0x250/0x290
[  167.852473][T10330]  ? kernfs_path_from_node+0x2f/0x290
[  167.852482][T10330]  sysfs_warn_dup+0x8e/0xa0
[  167.852490][T10330]  sysfs_do_create_link_sd+0xc0/0x110
[  167.852499][T10330]  device_add_class_symlinks+0x1cf/0x240
[  167.852510][T10330]  device_add+0x475/0xb50
[  167.852519][T10330]  wiphy_register+0x1ba6/0x28d0
[  167.852534][T10330]  ? __pfx_wiphy_register+0x10/0x10
[  167.852540][T10330]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  167.852554][T10330]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  167.852565][T10330]  ieee80211_register_hw+0x3484/0x4100
[  167.852582][T10330]  ? ieee80211_register_hw+0x1431/0x4100
[  167.852595][T10330]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  167.852605][T10330]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  167.852620][T10330]  ? __hrtimer_setup+0x187/0x210
[  167.852626][T10330]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  167.852638][T10330]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  167.852660][T10330]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  167.852668][T10330]  ? trace_kmalloc+0x1f/0xd0
[  167.852676][T10330]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  167.852686][T10330]  ? kstrndup+0xbf/0x160
[  167.852697][T10330]  hwsim_new_radio_nl+0xea4/0x1b10
[  167.852707][T10330]  ? __pfx___nla_validate_parse+0x10/0x10
[  167.852724][T10330]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.852738][T10330]  ? __nla_parse+0x40/0x60
[  167.852746][T10330]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  167.852759][T10330]  genl_family_rcv_msg_doit+0x215/0x300
[  167.852771][T10330]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  167.852786][T10330]  ? bpf_lsm_capable+0x9/0x20
[  167.852795][T10330]  ? security_capable+0x7e/0x2e0
[  167.852808][T10330]  genl_rcv_msg+0x60e/0x790
[  167.852826][T10330]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.852834][T10330]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  167.852849][T10330]  netlink_rcv_skb+0x208/0x470
[  167.852856][T10330]  ? __lock_acquire+0xab9/0xd20
[  167.852867][T10330]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.852876][T10330]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.852892][T10330]  ? down_read+0x1ad/0x2e0
[  167.852901][T10330]  genl_rcv+0x28/0x40
[  167.852910][T10330]  netlink_unicast+0x82f/0x9e0
[  167.852924][T10330]  ? __pfx_netlink_unicast+0x10/0x10
[  167.852936][T10330]  ? netlink_sendmsg+0x642/0xb30
[  167.852942][T10330]  ? skb_put+0x11b/0x210
[  167.852952][T10330]  netlink_sendmsg+0x805/0xb30
[  167.852965][T10330]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.852975][T10330]  ? aa_sock_msg_perm+0xf1/0x1d0
[  167.852982][T10330]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.852990][T10330]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.852997][T10330]  __sock_sendmsg+0x21c/0x270
[  167.853009][T10330]  ____sys_sendmsg+0x505/0x830
[  167.853019][T10330]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.853031][T10330]  ? import_iovec+0x74/0xa0
[  167.853040][T10330]  ___sys_sendmsg+0x21f/0x2a0
[  167.853050][T10330]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.853075][T10330]  ? __fget_files+0x2a/0x420
[  167.853081][T10330]  ? __fget_files+0x3a0/0x420
[  167.853092][T10330]  __x64_sys_sendmsg+0x19b/0x260
[  167.853101][T10330]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.853113][T10330]  ? rcu_is_watching+0x15/0xb0
[  167.853123][T10330]  ? do_syscall_64+0xbe/0x3b0
[  167.853133][T10330]  do_syscall_64+0xfa/0x3b0
[  167.853139][T10330]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.853146][T10330]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.853153][T10330]  ? exc_page_fault+0x9f/0xf0
[  167.853161][T10330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.853167][T10330] RIP: 0033:0x7ff51bf8ebe9
[  167.853201][T10330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.853208][T10330] RSP: 002b:00007ff51cd45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.853217][T10330] RAX: ffffffffffffffda RBX: 00007ff51c1c5fa0 RCX: 00007ff51bf8ebe9
[  167.853222][T10330] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  167.853227][T10330] RBP: 00007ff51c011e19 R08: 0000000000000000 R09: 0000000000000000
[  167.853231][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.853235][T10330] R13: 00007ff51c1c6038 R14: 00007ff51c1c5fa0 R15: 00007ffda64a9708
[  167.853249][T10330]  </TASK>
[  168.038924][T10328] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1117'.
[  168.060665][T10328] lo speed is unknown, defaulting to 1000
[  168.085285][T10335] lo speed is unknown, defaulting to 1000
[  168.113482][T10336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1119'.
[  168.182347][T10342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1121'.
[  168.193846][T10342] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1121'.
[  168.199607][T10342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1121'.
[  168.226900][T10345] netlink: 'syz.0.1122': attribute type 3 has an invalid length.
[  168.237967][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'.
[  168.239889][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'.
[  168.246951][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'.
[  168.752191][T10363] netlink: 'syz.1.1126': attribute type 1 has an invalid length.
[  168.850569][T10368] lo speed is unknown, defaulting to 1000
[  169.123402][T10375] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.127283][T10375] 8021q: adding VLAN 0 to HW filter on device team0
[  169.132871][T10375] 0X: left allmulticast mode
[  169.134655][T10375] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  169.261257][T10379] siw: device registration error -23
[  169.404227][T10382] lo speed is unknown, defaulting to 1000
[  169.819092][T10413] team0: Port device vlan0 removed
[  169.841930][T10413] team0: Port device vlan0 added
[  169.858958][T10419] lo speed is unknown, defaulting to 1000
[  169.890394][T10424] IPVS: set_ctl: invalid protocol: 44649 172.30.1.2:533
[  169.910607][T10423] lo speed is unknown, defaulting to 1000
[  170.057881][T10436] netlink: 'syz.2.1145': attribute type 13 has an invalid length.
[  170.112488][T10443] lo speed is unknown, defaulting to 1000
[  170.115311][T10436] lo speed is unknown, defaulting to 1000
[  170.269371][T10462] syz_tun: entered allmulticast mode
[  170.278523][T10462] siw: device registration error -23
[  170.281322][T10463] siw: device registration error -23
[  170.288960][T10462] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  170.300412][T10461] syz_tun: left allmulticast mode
[  170.346705][T10473] netlink: 'syz.1.1155': attribute type 13 has an invalid length.
[  170.350842][T10473] netlink: 'syz.1.1155': attribute type 17 has an invalid length.
[  170.387803][T10473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.407068][T10472] lo speed is unknown, defaulting to 1000
[  170.460120][T10475] lo speed is unknown, defaulting to 1000
[  170.663366][T10486] netlink: 'syz.0.1158': attribute type 10 has an invalid length.
[  170.666780][T10486] team0: Device ipvlan1 failed to enter team mode
[  170.670999][T10486] team0: Device ipvlan1 failed to enter team mode
[  170.687731][T10488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.703635][T10488] IPVS: lc: FWM 3 0x00000003 - no destination available
[  170.825638][T10490] can: request_module (can-proto-0) failed.
[  170.887976][T10493] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  170.948196][T10494] bond0: (slave gretap0): Opening slave failed
[  171.465185][T10500] lo speed is unknown, defaulting to 1000
[  171.672314][T10509] tipc: Resetting bearer <eth:team0>
[  171.676505][T10509] tipc: Resetting bearer <eth:batadv0>
[  171.754428][T10518] lo speed is unknown, defaulting to 1000
[  171.870728][T10526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.896903][T10526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.007687][T10531] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  172.108366][T10540] lo speed is unknown, defaulting to 1000
[  172.151527][T10540] macsec1: entered promiscuous mode
[  172.153344][T10540] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  172.156776][T10540] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  172.553562][T10552] lo speed is unknown, defaulting to 1000
[  172.627498][T10552] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[  172.631324][T10556] syzkaller1: entered promiscuous mode
[  172.633482][T10556] syzkaller1: entered allmulticast mode
[  172.741641][T10567] __nla_validate_parse: 16 callbacks suppressed
[  172.741652][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1179'.
[  172.755924][T10567] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1179'.
[  172.759395][T10567] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1179'.
[  172.762475][T10567] netlink: 'syz.1.1179': attribute type 5 has an invalid length.
[  172.764945][T10567] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1179'.
[  172.909556][T10583] lo speed is unknown, defaulting to 1000
[  173.001531][T10591] lo speed is unknown, defaulting to 1000
[  173.149131][T10603] lo speed is unknown, defaulting to 1000
[  173.201444][T10606] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  173.205638][T10601] lo speed is unknown, defaulting to 1000
[  173.363641][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1191'.
[  173.367347][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'.
[  173.372891][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'.
[  173.376444][T10615] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  173.471378][T10621] syzkaller1: entered promiscuous mode
[  173.473594][T10621] syzkaller1: entered allmulticast mode
[  173.595762][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'.
[  173.703019][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'.
[  173.706083][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'.
[  173.712125][T10631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.725478][T10631] siw: device registration error -23
[  173.746268][T10635] lo speed is unknown, defaulting to 1000
[  173.856185][T10641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.887786][T10640] tipc: Disabling bearer <eth:syzkaller0>
[  173.995379][T10645] lo speed is unknown, defaulting to 1000
[  174.168027][T10657] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  174.176025][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.2.1205 Not tainted syzkaller #0 PREEMPT(full) 
[  174.176041][T10657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.176049][T10657] Call Trace:
[  174.176054][T10657]  <TASK>
[  174.176060][T10657]  dump_stack_lvl+0x189/0x250
[  174.176082][T10657]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.176122][T10657]  ? __pfx__printk+0x10/0x10
[  174.176142][T10657]  ? kernfs_path_from_node+0x2f/0x290
[  174.176158][T10657]  ? kernfs_path_from_node+0x250/0x290
[  174.176168][T10657]  ? kernfs_path_from_node+0x2f/0x290
[  174.176183][T10657]  sysfs_warn_dup+0x8e/0xa0
[  174.176197][T10657]  sysfs_do_create_link_sd+0xc0/0x110
[  174.176210][T10657]  device_add_class_symlinks+0x1cf/0x240
[  174.176227][T10657]  device_add+0x475/0xb50
[  174.176241][T10657]  wiphy_register+0x1ba6/0x28d0
[  174.176266][T10657]  ? __pfx_wiphy_register+0x10/0x10
[  174.176278][T10657]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  174.176301][T10657]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  174.176322][T10657]  ieee80211_register_hw+0x3484/0x4100
[  174.176347][T10657]  ? ieee80211_register_hw+0x1431/0x4100
[  174.176370][T10657]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  174.176388][T10657]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  174.176413][T10657]  ? __hrtimer_setup+0x187/0x210
[  174.176422][T10657]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  174.176441][T10657]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  174.176478][T10657]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  174.176491][T10657]  ? trace_kmalloc+0x1f/0xd0
[  174.176505][T10657]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  174.176520][T10657]  ? kstrndup+0xbf/0x160
[  174.176541][T10657]  hwsim_new_radio_nl+0xea4/0x1b10
[  174.176558][T10657]  ? __pfx___nla_validate_parse+0x10/0x10
[  174.176584][T10657]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  174.176609][T10657]  ? __nla_parse+0x40/0x60
[  174.176624][T10657]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  174.176643][T10657]  genl_family_rcv_msg_doit+0x215/0x300
[  174.176664][T10657]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  174.176687][T10657]  ? bpf_lsm_capable+0x9/0x20
[  174.176702][T10657]  ? security_capable+0x7e/0x2e0
[  174.176724][T10657]  genl_rcv_msg+0x60e/0x790
[  174.176749][T10657]  ? __pfx_genl_rcv_msg+0x10/0x10
[  174.176763][T10657]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  174.176790][T10657]  netlink_rcv_skb+0x208/0x470
[  174.176800][T10657]  ? __lock_acquire+0xab9/0xd20
[  174.176819][T10657]  ? __pfx_genl_rcv_msg+0x10/0x10
[  174.176832][T10657]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  174.176857][T10657]  ? down_read+0x1ad/0x2e0
[  174.176871][T10657]  genl_rcv+0x28/0x40
[  174.176885][T10657]  netlink_unicast+0x82f/0x9e0
[  174.176908][T10657]  ? __pfx_netlink_unicast+0x10/0x10
[  174.176926][T10657]  ? netlink_sendmsg+0x642/0xb30
[  174.176935][T10657]  ? skb_put+0x11b/0x210
[  174.176951][T10657]  netlink_sendmsg+0x805/0xb30
[  174.176970][T10657]  ? __pfx_netlink_sendmsg+0x10/0x10
[  174.176985][T10657]  ? aa_sock_msg_perm+0xf1/0x1d0
[  174.176997][T10657]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  174.177009][T10657]  ? __pfx_netlink_sendmsg+0x10/0x10
[  174.177022][T10657]  __sock_sendmsg+0x21c/0x270
[  174.177040][T10657]  ____sys_sendmsg+0x505/0x830
[  174.177057][T10657]  ? __pfx_____sys_sendmsg+0x10/0x10
[  174.177079][T10657]  ? import_iovec+0x74/0xa0
[  174.177121][T10657]  ___sys_sendmsg+0x21f/0x2a0
[  174.177138][T10657]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.177179][T10657]  ? __fget_files+0x2a/0x420
[  174.177190][T10657]  ? __fget_files+0x3a0/0x420
[  174.177207][T10657]  __x64_sys_sendmsg+0x19b/0x260
[  174.177224][T10657]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  174.177245][T10657]  ? rcu_is_watching+0x15/0xb0
[  174.177261][T10657]  ? do_syscall_64+0xbe/0x3b0
[  174.177277][T10657]  do_syscall_64+0xfa/0x3b0
[  174.177288][T10657]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.177299][T10657]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.177308][T10657]  ? exc_page_fault+0x9f/0xf0
[  174.177323][T10657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.177333][T10657] RIP: 0033:0x7fb66498ebe9
[  174.177345][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.177355][T10657] RSP: 002b:00007fb662bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.177367][T10657] RAX: ffffffffffffffda RBX: 00007fb664bc5fa0 RCX: 00007fb66498ebe9
[  174.177376][T10657] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  174.177383][T10657] RBP: 00007fb664a11e19 R08: 0000000000000000 R09: 0000000000000000
[  174.177389][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.177395][T10657] R13: 00007fb664bc6038 R14: 00007fb664bc5fa0 R15: 00007fff3e325fd8
[  174.177415][T10657]  </TASK>
[  174.484624][T10664] lo speed is unknown, defaulting to 1000
[  174.742903][T10678] hsr0: left allmulticast mode
[  174.745387][T10678] hsr_slave_0: left allmulticast mode
[  174.749484][T10680] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  174.755559][T10680] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  174.885369][T10688] lo speed is unknown, defaulting to 1000
[  175.430679][T10716] lo speed is unknown, defaulting to 1000
[  175.612659][T10726] lo speed is unknown, defaulting to 1000
[  175.734063][T10737] netlink: 'syz.0.1227': attribute type 16 has an invalid length.
[  175.737493][T10737] netlink: 'syz.0.1227': attribute type 17 has an invalid length.
[  175.755009][T10737] IPv6: NLM_F_REPLACE set, but no existing node found!
[  176.530550][T10749] netlink: 'syz.0.1232': attribute type 1 has an invalid length.
[  176.555789][T10749] bond2: entered promiscuous mode
[  176.557621][T10749] bond2: entered allmulticast mode
[  176.561088][T10749] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.573707][T10749] bridge4: entered promiscuous mode
[  176.575819][T10749] bridge4: entered allmulticast mode
[  176.578081][T10749] bond2: (slave bridge4): Enslaving as a backup interface with an up link
[  176.637205][T10764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.669973][T10762] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  176.672631][T10762] CPU: 1 UID: 0 PID: 10762 Comm: syz.0.1235 Not tainted syzkaller #0 PREEMPT(full) 
[  176.672641][T10762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.672645][T10762] Call Trace:
[  176.672648][T10762]  <TASK>
[  176.672651][T10762]  dump_stack_lvl+0x189/0x250
[  176.672665][T10762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.672673][T10762]  ? __pfx__printk+0x10/0x10
[  176.672685][T10762]  ? kernfs_path_from_node+0x2f/0x290
[  176.672693][T10762]  ? kernfs_path_from_node+0x250/0x290
[  176.672699][T10762]  ? kernfs_path_from_node+0x2f/0x290
[  176.672708][T10762]  sysfs_warn_dup+0x8e/0xa0
[  176.672716][T10762]  sysfs_do_create_link_sd+0xc0/0x110
[  176.672724][T10762]  device_add_class_symlinks+0x1cf/0x240
[  176.672733][T10762]  device_add+0x475/0xb50
[  176.672742][T10762]  wiphy_register+0x1ba6/0x28d0
[  176.672757][T10762]  ? __pfx_wiphy_register+0x10/0x10
[  176.672763][T10762]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  176.672776][T10762]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  176.672787][T10762]  ieee80211_register_hw+0x3484/0x4100
[  176.672802][T10762]  ? ieee80211_register_hw+0x1431/0x4100
[  176.672832][T10762]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  176.672843][T10762]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.672857][T10762]  ? __hrtimer_setup+0x187/0x210
[  176.672864][T10762]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  176.672876][T10762]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  176.672898][T10762]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  176.672906][T10762]  ? trace_kmalloc+0x1f/0xd0
[  176.672914][T10762]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  176.672923][T10762]  ? kstrndup+0xbf/0x160
[  176.672935][T10762]  hwsim_new_radio_nl+0xea4/0x1b10
[  176.672945][T10762]  ? __pfx___nla_validate_parse+0x10/0x10
[  176.672966][T10762]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  176.672980][T10762]  ? __nla_parse+0x40/0x60
[  176.672989][T10762]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  176.673002][T10762]  genl_family_rcv_msg_doit+0x215/0x300
[  176.673014][T10762]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  176.673029][T10762]  ? bpf_lsm_capable+0x9/0x20
[  176.673039][T10762]  ? security_capable+0x7e/0x2e0
[  176.673051][T10762]  genl_rcv_msg+0x60e/0x790
[  176.673087][T10762]  ? __pfx_genl_rcv_msg+0x10/0x10
[  176.673095][T10762]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  176.673110][T10762]  netlink_rcv_skb+0x208/0x470
[  176.673117][T10762]  ? __lock_acquire+0xab9/0xd20
[  176.673127][T10762]  ? __pfx_genl_rcv_msg+0x10/0x10
[  176.673136][T10762]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  176.673151][T10762]  ? down_read+0x1ad/0x2e0
[  176.673160][T10762]  genl_rcv+0x28/0x40
[  176.673169][T10762]  netlink_unicast+0x82f/0x9e0
[  176.673182][T10762]  ? __pfx_netlink_unicast+0x10/0x10
[  176.673193][T10762]  ? netlink_sendmsg+0x642/0xb30
[  176.673199][T10762]  ? skb_put+0x11b/0x210
[  176.673209][T10762]  netlink_sendmsg+0x805/0xb30
[  176.673220][T10762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.673228][T10762]  ? aa_sock_msg_perm+0xf1/0x1d0
[  176.673236][T10762]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  176.673243][T10762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.673251][T10762]  __sock_sendmsg+0x21c/0x270
[  176.673262][T10762]  ____sys_sendmsg+0x505/0x830
[  176.673272][T10762]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.673285][T10762]  ? import_iovec+0x74/0xa0
[  176.673294][T10762]  ___sys_sendmsg+0x21f/0x2a0
[  176.673303][T10762]  ? __pfx____sys_sendmsg+0x10/0x10
[  176.673327][T10762]  ? __fget_files+0x2a/0x420
[  176.673333][T10762]  ? __fget_files+0x3a0/0x420
[  176.673344][T10762]  __x64_sys_sendmsg+0x19b/0x260
[  176.673353][T10762]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  176.673365][T10762]  ? rcu_is_watching+0x15/0xb0
[  176.673375][T10762]  ? do_syscall_64+0xbe/0x3b0
[  176.673385][T10762]  do_syscall_64+0xfa/0x3b0
[  176.673391][T10762]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.673398][T10762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.673405][T10762]  ? exc_page_fault+0x9f/0xf0
[  176.673413][T10762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.673420][T10762] RIP: 0033:0x7ff51bf8ebe9
[  176.673428][T10762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.673434][T10762] RSP: 002b:00007ff51cd24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.673442][T10762] RAX: ffffffffffffffda RBX: 00007ff51c1c6090 RCX: 00007ff51bf8ebe9
[  176.673447][T10762] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  176.673451][T10762] RBP: 00007ff51c011e19 R08: 0000000000000000 R09: 0000000000000000
[  176.673456][T10762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.673460][T10762] R13: 00007ff51c1c6128 R14: 00007ff51c1c6090 R15: 00007ffda64a9708
[  176.673471][T10762]  </TASK>
[  176.896890][T10769] lo speed is unknown, defaulting to 1000
[  176.985761][T10769] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  176.987263][T10777] syzkaller1: entered promiscuous mode
[  176.991149][T10777] syzkaller1: entered allmulticast mode
[  177.023481][T10779] netlink: 'syz.0.1240': attribute type 10 has an invalid length.
[  177.026791][T10779] dummy0: entered promiscuous mode
[  177.031372][T10779] bridge0: port 1(dummy0) entered blocking state
[  177.033755][T10779] bridge0: port 1(dummy0) entered disabled state
[  177.035946][T10779] dummy0: entered allmulticast mode
[  177.087340][T10781] lo speed is unknown, defaulting to 1000
[  177.184862][T10788] netlink: 'syz.0.1243': attribute type 3 has an invalid length.
[  177.230083][T10788] bridge0: port 1(dummy0) entered blocking state
[  177.232673][T10788] bridge0: port 1(dummy0) entered forwarding state
[  177.240414][T10788] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.244435][T10788] 8021q: adding VLAN 0 to HW filter on device team0
[  177.247509][T10788] tipc: Resetting bearer <eth:team0>
[  177.266005][T10788] tipc: Resetting bearer <eth:team0>
[  177.271936][T10788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.348868][T10801] lo speed is unknown, defaulting to 1000
[  177.432537][T10810] siw: device registration error -23
[  177.535424][T10814] veth0_to_bridge: left promiscuous mode
[  177.537328][T10814] veth0_to_bridge: left allmulticast mode
[  177.542135][T10814] vlan0: left promiscuous mode
[  177.546420][T10814] bond1: left promiscuous mode
[  177.548067][T10814] bond1: left allmulticast mode
[  177.551492][T10814] macsec1: left promiscuous mode
[  177.565126][  T791] lo speed is unknown, defaulting to 1000
[  177.568150][  T791] syz2: Port: 1 Link DOWN
[  177.594976][T10817] lo speed is unknown, defaulting to 1000
[  177.623870][T10818] netlink: 'syz.2.1250': attribute type 1 has an invalid length.
[  177.833123][T10832] __nla_validate_parse: 31 callbacks suppressed
[  177.833138][T10832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1254'.
[  177.840232][T10832] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1254'.
[  177.844218][T10832] netlink: 'syz.2.1254': attribute type 5 has an invalid length.
[  177.847630][T10832] netlink: 'syz.2.1254': attribute type 6 has an invalid length.
[  177.852792][T10832] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1254'.
[  178.037704][T10836] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1256'.
[  178.060461][T10836] lo speed is unknown, defaulting to 1000
[  178.312548][   T51] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  178.329553][   T51] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  178.336958][   T51] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  178.580374][T10872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1259'.
[  178.668141][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1261'.
[  179.174947][T10891] bridge0: port 1(dummy0) entered disabled state
[  179.186610][T10891] tipc: Resetting bearer <eth:team0>
[  179.199472][T10891] veth0_to_bridge: left promiscuous mode
[  179.201964][T10891] veth0_to_bridge: left allmulticast mode
[  179.211501][T10891] bond2: left promiscuous mode
[  179.213539][T10891] bridge4: left promiscuous mode
[  179.215764][T10891] bond2: left allmulticast mode
[  179.217845][T10891] bridge4: left allmulticast mode
[  179.319098][T10898] lo speed is unknown, defaulting to 1000
[  179.864669][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'.
[  179.867965][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'.
[  180.024666][T10923] netlink: 'syz.2.1273': attribute type 13 has an invalid length.
[  180.055138][T10923] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.058127][T10923] 8021q: adding VLAN 0 to HW filter on device team0
[  180.065558][T10923] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  180.138561][T10922] lo speed is unknown, defaulting to 1000
[  180.213490][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  180.218837][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.224184][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.224780][T10923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.266532][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  180.481030][T10936] lo speed is unknown, defaulting to 1000
[  180.599204][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  180.638922][T10945] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.644762][T10945] 8021q: adding VLAN 0 to HW filter on device team0
[  180.652999][T10945] tipc: Resetting bearer <eth:team0>
[  180.657556][T10945] tipc: Resetting bearer <eth:team0>
[  180.662314][T10945] bridge0: port 1(dummy0) entered blocking state
[  180.664697][T10945] bridge0: port 1(dummy0) entered forwarding state
[  180.671224][T10945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.704971][T10952] lo speed is unknown, defaulting to 1000
[  181.144911][T10984] rdma_rxe: rxe_newlink: failed to add lo
[  181.173648][T10987] validate_nla: 3 callbacks suppressed
[  181.173661][T10987] netlink: 'syz.2.1288': attribute type 13 has an invalid length.
[  181.178977][T10987] netlink: 'syz.2.1288': attribute type 17 has an invalid length.
[  181.196258][T10987] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.199474][T10987] 8021q: adding VLAN 0 to HW filter on device team0
[  181.203740][T10987] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  181.590621][T10996] lo speed is unknown, defaulting to 1000
[  182.012819][T11024] lo speed is unknown, defaulting to 1000
[  182.046944][T11020] lo speed is unknown, defaulting to 1000
[  182.128911][T11027] openvswitch: netlink: Flow actions attr not present in new flow.
[  182.217283][T11035] lo speed is unknown, defaulting to 1000
[  182.316241][T11035] IPVS: Unknown mcast interface: hsr0
[  182.495363][T11044] lo speed is unknown, defaulting to 1000
[  182.978902][T11053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.986251][T11053] __nla_validate_parse: 8 callbacks suppressed
[  182.986261][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'.
[  183.259956][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'.
[  183.264106][T11068] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1307'.
[  183.277132][T11068] lo speed is unknown, defaulting to 1000
[  183.690028][   T55] block nbd5: Receive control failed (result -107)
[  183.728512][T11074] nbd5: detected capacity change from 0 to 32
[  183.732141][ T9564] block nbd5: Dead connection, failed to find a fallback
[  183.735139][ T9564] block nbd5: shutting down sockets
[  183.737550][ T9564] blk_print_req_error: 27 callbacks suppressed
[  183.737596][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.744315][ T9564] buffer_io_error: 27 callbacks suppressed
[  183.744326][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.754711][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.759116][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.762258][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.765706][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.771830][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.776480][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.780438][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.789212][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.792052][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.799583][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.802991][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.807057][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.813821][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.818165][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.821753][ T9564] ldm_validate_partition_table(): Disk read failed.
[  183.824157][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.827338][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.830491][ T9564] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.833616][ T9564] Buffer I/O error on dev nbd5, logical block 0, async page read
[  183.836558][ T9564] Dev nbd5: unable to read RDB block 0
[  183.840560][ T9564]  nbd5: unable to read partition table
[  183.845022][ T9564] ldm_validate_partition_table(): Disk read failed.
[  183.851817][ T9564] Dev nbd5: unable to read RDB block 0
[  183.854129][ T9564]  nbd5: unable to read partition table
[  183.953448][T11095] lo speed is unknown, defaulting to 1000
[  184.001409][T11094] veth5: entered promiscuous mode
[  184.177447][T11102] lo speed is unknown, defaulting to 1000
[  184.272238][T11115] netlink: 4596 bytes leftover after parsing attributes in process `syz.1.1319'.
[  184.337212][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'.
[  184.383163][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'.
[  184.406609][T11130] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  184.489680][T11138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  184.492624][T11139] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1326'.
[  184.501910][T11139] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1326'.
[  184.507896][T11139] netlink: 'syz.0.1326': attribute type 12 has an invalid length.
[  184.554062][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'.
[  184.590809][T11154] lo speed is unknown, defaulting to 1000
[  184.722119][T11169] netlink: 'syz.1.1334': attribute type 13 has an invalid length.
[  184.724980][T11169] netlink: 'syz.1.1334': attribute type 17 has an invalid length.
[  184.747689][T11169] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.752891][T11169] 8021q: adding VLAN 0 to HW filter on device team0
[  184.763579][T11169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.769171][  T791] lo speed is unknown, defaulting to 1000
[  184.771049][  T791] syz2: Port: 1 Link ACTIVE
[  184.800793][T11166] lo speed is unknown, defaulting to 1000
[  185.104653][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'.
[  185.190671][T11190] netlink: 'syz.1.1340': attribute type 2 has an invalid length.
[  185.206449][T11190] lo speed is unknown, defaulting to 1000
[  185.367250][T11202] lo speed is unknown, defaulting to 1000
[  185.421110][T11211] lo speed is unknown, defaulting to 1000
[  185.445849][T11212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.963793][T11245] netlink: 'syz.0.1355': attribute type 13 has an invalid length.
[  185.967603][T11245] netlink: 'syz.0.1355': attribute type 17 has an invalid length.
[  186.005704][T11245] tipc: Resetting bearer <eth:team0>
[  186.024170][T11245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.074035][T11252] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  186.623745][T11256] netlink: 'syz.2.1359': attribute type 2 has an invalid length.
[  186.626948][T11256] netlink: 'syz.2.1359': attribute type 1 has an invalid length.
[  186.882200][T11267] IPVS: set_ctl: invalid protocol: 44 172.20.20.45:20000
[  186.886510][T11268] IPVS: set_ctl: invalid protocol: 44 172.20.20.45:20000
[  186.901429][T11265] netlink: 'syz.2.1362': attribute type 10 has an invalid length.
[  187.094678][T11283] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.111177][T11283] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.130201][T11296] netlink: zone id is out of range
[  187.132959][T11296] netlink: zone id is out of range
[  187.133435][T11297] netlink: zone id is out of range
[  187.136123][T11296] netlink: zone id is out of range
[  187.137087][T11297] netlink: zone id is out of range
[  187.144213][T11297] netlink: zone id is out of range
[  187.175283][T11297] netlink: set zone limit has 4 unknown bytes
[  187.176377][T11296] netlink: set zone limit has 4 unknown bytes
[  187.192360][T11295] netem: unknown loss type 0
[  187.194173][T11295] netem: change failed
[  187.546444][T11347] netlink: 'syz.0.1382': attribute type 1 has an invalid length.
[  188.626551][T11367] __nla_validate_parse: 9 callbacks suppressed
[  188.626572][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'.
[  189.012148][T11375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  189.411692][T11385] netlink: 'syz.2.1393': attribute type 23 has an invalid length.
[  189.434482][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'.
[  189.595283][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'.
[  189.599650][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'.
[  189.612599][T11388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1394'.
[  189.714415][T11390] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  189.761966][T11390] syzkaller0: entered promiscuous mode
[  189.763869][T11390] syzkaller0: entered allmulticast mode
[  190.861199][T11407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  190.947434][T11417] netlink: 'syz.1.1402': attribute type 13 has an invalid length.
[  190.950386][T11417] netlink: 'syz.1.1402': attribute type 17 has an invalid length.
[  190.955998][T11417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.983928][T11413] lo speed is unknown, defaulting to 1000
[  191.019140][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'.
[  191.024566][T11417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1402'.
[  191.033258][T11413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.039696][T11413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.755096][T11434] netlink: 'syz.1.1406': attribute type 3 has an invalid length.
[  191.763881][T11434] syz_tun: entered allmulticast mode
[  191.771891][T11434] siw: device registration error -23
[  191.780205][T11434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.792407][T11433] syz_tun: left allmulticast mode
[  191.830066][T11443] syzkaller0: entered promiscuous mode
[  191.831952][T11443] syzkaller0: entered allmulticast mode
[  191.911394][T11446] siw: device registration error -23
[  191.958983][   T51] lo speed is unknown, defaulting to 1000
[  191.961046][   T51] syz2: Port: 1 Link DOWN
[  192.669547][T11469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1414'.
[  192.727595][T11474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  192.741335][T11474] vxcan2: entered promiscuous mode
[  192.817568][T11477] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.1416'.
[  192.833590][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'.
[  193.123136][T11489] netlink: 'syz.2.1420': attribute type 3 has an invalid length.
[  193.327934][T11500] lo speed is unknown, defaulting to 1000
[  193.442176][T11506] IPVS: Unknown mcast interface: geneve0
[  193.567986][T11512] siw: device registration error -23
[  193.580107][T11512] veth0_to_bridge: entered promiscuous mode
[  193.582863][T11512] veth0_to_bridge: entered allmulticast mode
[  193.659802][T11514] __nla_validate_parse: 3 callbacks suppressed
[  193.659811][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'.
[  193.719940][T11518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1427'.
[  193.861328][T11526] lo speed is unknown, defaulting to 1000
[  193.977506][T11534] lo speed is unknown, defaulting to 1000
[  194.038789][T11538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  194.095287][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  194.098406][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  194.913436][T11561] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  194.991847][T11566] netlink: 'syz.0.1439': attribute type 83 has an invalid length.
[  195.181746][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'.
[  195.191842][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'.
[  195.200463][T11585] bridge: RTM_NEWNEIGH with invalid state 0x2c
[  195.242424][T11585] lo speed is unknown, defaulting to 1000
[  195.325075][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'.
[  195.333746][T11596] macsec1: entered promiscuous mode
[  195.335858][T11596] batadv0: entered promiscuous mode
[  195.339434][T11596] batadv0: left promiscuous mode
[  195.422859][T11598] netlink: 'syz.1.1445': attribute type 1 has an invalid length.
[  195.425410][T11598] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1445'.
[  195.538607][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'.
[  195.557269][T11609] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  195.565753][T11609] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  196.047906][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'.
[  196.534042][T11627] netlink: 'syz.2.1456': attribute type 13 has an invalid length.
[  196.536819][T11627] netlink: 'syz.2.1456': attribute type 17 has an invalid length.
[  196.555946][T11627] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.561320][T11627] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  196.881312][T11630] IPVS: stopping backup sync thread 7025 ...
[  196.915867][T11633] team0: Port device vlan0 removed
[  196.920626][T11633] team0: Unable to change to the same mode the team is in
[  196.924314][T11633] vlan0: entered promiscuous mode
[  196.927862][T11633] team0: Port device vlan0 added
[  196.935848][T11633] tipc: Enabled bearer <eth:team0>, priority 0
[  197.045364][T11642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.051158][T11642] syzkaller0: entered promiscuous mode
[  197.053043][T11642] syzkaller0: entered allmulticast mode
[  197.056264][T11640] lo speed is unknown, defaulting to 1000
[  197.072433][T11642] tipc: Resetting bearer <eth:syzkaller0>
[  197.077415][T11641] tipc: Resetting bearer <eth:syzkaller0>
[  197.086577][T11641] tipc: Disabling bearer <eth:syzkaller0>
[  197.214193][T11651] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  197.216737][T11651] CPU: 0 UID: 0 PID: 11651 Comm: syz.1.1464 Not tainted syzkaller #0 PREEMPT(full) 
[  197.216746][T11651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.216751][T11651] Call Trace:
[  197.216754][T11651]  <TASK>
[  197.216758][T11651]  dump_stack_lvl+0x189/0x250
[  197.216771][T11651]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.216801][T11651]  ? __pfx__printk+0x10/0x10
[  197.216820][T11651]  ? kernfs_path_from_node+0x2f/0x290
[  197.216831][T11651]  ? kernfs_path_from_node+0x250/0x290
[  197.216841][T11651]  ? kernfs_path_from_node+0x2f/0x290
[  197.216850][T11651]  sysfs_warn_dup+0x8e/0xa0
[  197.216858][T11651]  sysfs_do_create_link_sd+0xc0/0x110
[  197.216866][T11651]  device_add_class_symlinks+0x1cf/0x240
[  197.216876][T11651]  device_add+0x475/0xb50
[  197.216885][T11651]  wiphy_register+0x1ba6/0x28d0
[  197.216899][T11651]  ? __pfx_wiphy_register+0x10/0x10
[  197.216906][T11651]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  197.216918][T11651]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  197.216929][T11651]  ieee80211_register_hw+0x3484/0x4100
[  197.216944][T11651]  ? ieee80211_register_hw+0x1431/0x4100
[  197.216957][T11651]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  197.216967][T11651]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.216982][T11651]  ? __hrtimer_setup+0x187/0x210
[  197.216988][T11651]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  197.217000][T11651]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  197.217021][T11651]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  197.217029][T11651]  ? trace_kmalloc+0x1f/0xd0
[  197.217037][T11651]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  197.217046][T11651]  ? kstrndup+0xbf/0x160
[  197.217058][T11651]  hwsim_new_radio_nl+0xea4/0x1b10
[  197.217068][T11651]  ? __pfx___nla_validate_parse+0x10/0x10
[  197.217085][T11651]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.217099][T11651]  ? __nla_parse+0x40/0x60
[  197.217107][T11651]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  197.217120][T11651]  genl_family_rcv_msg_doit+0x215/0x300
[  197.217131][T11651]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  197.217145][T11651]  ? bpf_lsm_capable+0x9/0x20
[  197.217154][T11651]  ? security_capable+0x7e/0x2e0
[  197.217167][T11651]  genl_rcv_msg+0x60e/0x790
[  197.217179][T11651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.217187][T11651]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.217202][T11651]  netlink_rcv_skb+0x208/0x470
[  197.217208][T11651]  ? __lock_acquire+0xab9/0xd20
[  197.217218][T11651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.217227][T11651]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.217242][T11651]  ? down_read+0x1ad/0x2e0
[  197.217251][T11651]  genl_rcv+0x28/0x40
[  197.217259][T11651]  netlink_unicast+0x82f/0x9e0
[  197.217272][T11651]  ? __pfx_netlink_unicast+0x10/0x10
[  197.217283][T11651]  ? netlink_sendmsg+0x642/0xb30
[  197.217289][T11651]  ? skb_put+0x11b/0x210
[  197.217299][T11651]  netlink_sendmsg+0x805/0xb30
[  197.217309][T11651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.217318][T11651]  ? aa_sock_msg_perm+0xf1/0x1d0
[  197.217326][T11651]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  197.217333][T11651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.217341][T11651]  __sock_sendmsg+0x21c/0x270
[  197.217352][T11651]  ____sys_sendmsg+0x505/0x830
[  197.217362][T11651]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.217374][T11651]  ? import_iovec+0x74/0xa0
[  197.217384][T11651]  ___sys_sendmsg+0x21f/0x2a0
[  197.217394][T11651]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.217417][T11651]  ? __fget_files+0x2a/0x420
[  197.217423][T11651]  ? __fget_files+0x3a0/0x420
[  197.217434][T11651]  __x64_sys_sendmsg+0x19b/0x260
[  197.217443][T11651]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.217460][T11651]  ? rcu_is_watching+0x15/0xb0
[  197.217469][T11651]  ? do_syscall_64+0xbe/0x3b0
[  197.217479][T11651]  do_syscall_64+0xfa/0x3b0
[  197.217487][T11651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.217493][T11651]  ? asm_sysvec_call_function_single+0x1a/0x20
[  197.217502][T11651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.217508][T11651] RIP: 0033:0x7fd5c678ebe9
[  197.217516][T11651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.217522][T11651] RSP: 002b:00007fd5c7566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.217531][T11651] RAX: ffffffffffffffda RBX: 00007fd5c69c5fa0 RCX: 00007fd5c678ebe9
[  197.217536][T11651] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  197.217540][T11651] RBP: 00007fd5c6811e19 R08: 0000000000000000 R09: 0000000000000000
[  197.217544][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.217548][T11651] R13: 00007fd5c69c6038 R14: 00007fd5c69c5fa0 R15: 00007ffc98d0aa08
[  197.217560][T11651]  </TASK>
[  197.496661][T11663] lo speed is unknown, defaulting to 1000
[  197.507113][T11660] lo speed is unknown, defaulting to 1000
[  197.615896][T11663] IPVS: Unknown mcast interface: hsr0
[  197.707521][T11676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.711037][T11676] syzkaller0: entered promiscuous mode
[  197.713054][T11676] syzkaller0: entered allmulticast mode
[  197.726685][T11676] tipc: Resetting bearer <eth:syzkaller0>
[  197.731903][T11675] tipc: Resetting bearer <eth:syzkaller0>
[  197.742313][T11675] tipc: Disabling bearer <eth:syzkaller0>
[  198.068367][  T791] tipc: Node number set to 3599449709
[  198.197389][T11691] netlink: 'syz.0.1475': attribute type 13 has an invalid length.
[  198.201284][T11691] netlink: 'syz.0.1475': attribute type 17 has an invalid length.
[  198.206222][T11691] tipc: Resetting bearer <eth:team0>
[  198.210567][T11691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.457338][T11696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.259171][T11704] lo speed is unknown, defaulting to 1000
[  199.374638][T11706] lo speed is unknown, defaulting to 1000
[  199.594602][T11712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  199.605060][T11719] sctp: [Deprecated]: syz.0.1481 (pid 11719) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.605060][T11719] Use struct sctp_sack_info instead
[  199.616735][T11719] sctp: [Deprecated]: syz.0.1481 (pid 11719) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.616735][T11719] Use struct sctp_sack_info instead
[  199.651347][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.416986][T11728] lo speed is unknown, defaulting to 1000
[  200.632389][T11733] netlink: 'syz.2.1484': attribute type 13 has an invalid length.
[  200.635047][T11733] netlink: 'syz.2.1484': attribute type 17 has an invalid length.
[  200.640450][T11733] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  200.667103][T11733] lo speed is unknown, defaulting to 1000
[  200.733405][T11733] __nla_validate_parse: 9 callbacks suppressed
[  200.733416][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'.
[  200.739871][T11733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.744131][T11733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.764548][T11735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.771178][T11735] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1485'.
[  200.777245][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'.
[  200.782094][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'.
[  201.097313][T11743] bridge0: port 1(dummy0) entered disabled state
[  201.101814][T11743] tipc: Resetting bearer <eth:team0>
[  201.226319][T11757] netlink: 'syz.0.1490': attribute type 13 has an invalid length.
[  201.231767][T11757] netlink: 'syz.0.1490': attribute type 17 has an invalid length.
[  201.257337][T11757] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.262033][T11757] 8021q: adding VLAN 0 to HW filter on device team0
[  201.265227][T11757] tipc: Resetting bearer <eth:team0>
[  201.267892][T11757] tipc: Resetting bearer <eth:team0>
[  201.272403][T11757] bridge0: port 1(dummy0) entered blocking state
[  201.275293][T11757] bridge0: port 1(dummy0) entered forwarding state
[  201.280465][T11757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.331433][T11762] lo speed is unknown, defaulting to 1000
[  201.511339][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'.
[  201.516853][T11769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1492'.
[  201.521125][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'.
[  201.524172][T11769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1492'.
[  201.526981][T11769] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1492'.
[  201.532903][T11769] netlink: 'syz.0.1492': attribute type 16 has an invalid length.
[  201.535553][T11769] netlink: 'syz.0.1492': attribute type 17 has an invalid length.
[  201.566392][T11769] bridge0: port 1(dummy0) entered disabled state
[  201.573558][T11769] tipc: Resetting bearer <eth:team0>
[  201.585016][T11769] IPv6: NLM_F_REPLACE set, but no existing node found!
[  201.754047][T11776] syzkaller0: entered promiscuous mode
[  201.756045][T11776] syzkaller0: entered allmulticast mode
[  202.387909][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1497'.
[  202.971568][T11782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.085757][T11800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  203.136276][T11801] netlink: 'syz.2.1500': attribute type 13 has an invalid length.
[  203.141676][T11801] netlink: 'syz.2.1500': attribute type 17 has an invalid length.
[  203.149770][T11801] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  203.216735][T11804] validate_nla: 3 callbacks suppressed
[  203.216745][T11804] netlink: 'syz.0.1502': attribute type 12 has an invalid length.
[  203.217995][T11798] lo speed is unknown, defaulting to 1000
[  203.261781][T11801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.273875][T11801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.354675][T11809] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  203.928763][T11821] netlink: 'syz.2.1505': attribute type 13 has an invalid length.
[  203.932359][T11821] netlink: 'syz.2.1505': attribute type 17 has an invalid length.
[  203.943362][T11821] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  203.977926][T11821] lo speed is unknown, defaulting to 1000
[  204.037269][T11827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.224253][T11843] lo speed is unknown, defaulting to 1000
[  204.326883][T11852] netlink: 'syz.1.1512': attribute type 10 has an invalid length.
[  204.331037][T11852] team0: Device ipvlan1 failed to enter team mode
[  204.333295][T11852] team0: Device ipvlan1 failed to enter team mode
[  204.343918][T11851] lo speed is unknown, defaulting to 1000
[  204.462558][T11853] lo speed is unknown, defaulting to 1000
[  205.251652][T11867] lo speed is unknown, defaulting to 1000
[  205.253037][T11868] netlink: 'syz.1.1515': attribute type 5 has an invalid length.
[  205.306328][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.492091][T11874] pim6reg: entered allmulticast mode
[  205.540554][T11876] vlan0: entered promiscuous mode
[  205.543006][T11876] bridge0: entered promiscuous mode
[  205.696852][T11883] lo speed is unknown, defaulting to 1000
[  205.875433][T11898] __nla_validate_parse: 8 callbacks suppressed
[  205.875449][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'.
[  205.954688][T11903] lo speed is unknown, defaulting to 1000
[  206.176210][T11911] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  206.180136][T11911] CPU: 1 UID: 0 PID: 11911 Comm: syz.2.1526 Not tainted syzkaller #0 PREEMPT(full) 
[  206.180152][T11911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.180158][T11911] Call Trace:
[  206.180163][T11911]  <TASK>
[  206.180168][T11911]  dump_stack_lvl+0x189/0x250
[  206.180185][T11911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.180194][T11911]  ? __pfx__printk+0x10/0x10
[  206.180206][T11911]  ? kernfs_path_from_node+0x2f/0x290
[  206.180214][T11911]  ? kernfs_path_from_node+0x250/0x290
[  206.180221][T11911]  ? kernfs_path_from_node+0x2f/0x290
[  206.180231][T11911]  sysfs_warn_dup+0x8e/0xa0
[  206.180239][T11911]  sysfs_do_create_link_sd+0xc0/0x110
[  206.180247][T11911]  device_add_class_symlinks+0x1cf/0x240
[  206.180257][T11911]  device_add+0x475/0xb50
[  206.180266][T11911]  wiphy_register+0x1ba6/0x28d0
[  206.180280][T11911]  ? __pfx_wiphy_register+0x10/0x10
[  206.180287][T11911]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  206.180300][T11911]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  206.180317][T11911]  ieee80211_register_hw+0x3484/0x4100
[  206.180332][T11911]  ? ieee80211_register_hw+0x1431/0x4100
[  206.180346][T11911]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  206.180356][T11911]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.180370][T11911]  ? __hrtimer_setup+0x187/0x210
[  206.180377][T11911]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  206.180388][T11911]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  206.180409][T11911]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  206.180417][T11911]  ? trace_kmalloc+0x1f/0xd0
[  206.180425][T11911]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  206.180433][T11911]  ? kstrndup+0xbf/0x160
[  206.180445][T11911]  hwsim_new_radio_nl+0xea4/0x1b10
[  206.180455][T11911]  ? __pfx___nla_validate_parse+0x10/0x10
[  206.180470][T11911]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  206.180484][T11911]  ? __nla_parse+0x40/0x60
[  206.180492][T11911]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  206.180504][T11911]  genl_family_rcv_msg_doit+0x215/0x300
[  206.180516][T11911]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  206.180529][T11911]  ? bpf_lsm_capable+0x9/0x20
[  206.180537][T11911]  ? security_capable+0x7e/0x2e0
[  206.180550][T11911]  genl_rcv_msg+0x60e/0x790
[  206.180561][T11911]  ? __pfx_genl_rcv_msg+0x10/0x10
[  206.180569][T11911]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  206.180584][T11911]  netlink_rcv_skb+0x208/0x470
[  206.180590][T11911]  ? __lock_acquire+0xab9/0xd20
[  206.180600][T11911]  ? __pfx_genl_rcv_msg+0x10/0x10
[  206.180609][T11911]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  206.180623][T11911]  ? down_read+0x1ad/0x2e0
[  206.180632][T11911]  genl_rcv+0x28/0x40
[  206.180640][T11911]  netlink_unicast+0x82f/0x9e0
[  206.180653][T11911]  ? __pfx_netlink_unicast+0x10/0x10
[  206.180689][T11911]  ? netlink_sendmsg+0x642/0xb30
[  206.180697][T11911]  ? skb_put+0x11b/0x210
[  206.180708][T11911]  netlink_sendmsg+0x805/0xb30
[  206.180719][T11911]  ? __pfx_netlink_sendmsg+0x10/0x10
[  206.180727][T11911]  ? aa_sock_msg_perm+0xf1/0x1d0
[  206.180735][T11911]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  206.180743][T11911]  ? __pfx_netlink_sendmsg+0x10/0x10
[  206.180750][T11911]  __sock_sendmsg+0x21c/0x270
[  206.180762][T11911]  ____sys_sendmsg+0x505/0x830
[  206.180773][T11911]  ? __pfx_____sys_sendmsg+0x10/0x10
[  206.180785][T11911]  ? import_iovec+0x74/0xa0
[  206.180795][T11911]  ___sys_sendmsg+0x21f/0x2a0
[  206.180803][T11911]  ? __pfx____sys_sendmsg+0x10/0x10
[  206.180826][T11911]  ? __fget_files+0x2a/0x420
[  206.180832][T11911]  ? __fget_files+0x3a0/0x420
[  206.180842][T11911]  __x64_sys_sendmsg+0x19b/0x260
[  206.180851][T11911]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  206.180864][T11911]  ? rcu_is_watching+0x15/0xb0
[  206.180873][T11911]  ? do_syscall_64+0xbe/0x3b0
[  206.180882][T11911]  do_syscall_64+0xfa/0x3b0
[  206.180889][T11911]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.180896][T11911]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.180902][T11911]  ? exc_page_fault+0x9f/0xf0
[  206.180909][T11911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.180916][T11911] RIP: 0033:0x7fb66498ebe9
[  206.180923][T11911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.180929][T11911] RSP: 002b:00007fb662bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  206.180937][T11911] RAX: ffffffffffffffda RBX: 00007fb664bc5fa0 RCX: 00007fb66498ebe9
[  206.180942][T11911] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  206.180947][T11911] RBP: 00007fb664a11e19 R08: 0000000000000000 R09: 0000000000000000
[  206.180951][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.180955][T11911] R13: 00007fb664bc6038 R14: 00007fb664bc5fa0 R15: 00007fff3e325fd8
[  206.180966][T11911]  </TASK>
[  207.180159][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'.
[  207.335868][T11981] lo speed is unknown, defaulting to 1000
[  207.427895][T11981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1542'.
[  207.510900][T11997] lo speed is unknown, defaulting to 1000
[  207.528431][T12004] netlink: 'syz.2.1546': attribute type 5 has an invalid length.
[  207.560862][T12006] team0: No ports can be present during mode change
[  207.574273][T12009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1549'.
[  207.622988][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'.
[  207.631386][T12016] syzkaller1: entered promiscuous mode
[  207.633177][T12016] syzkaller1: entered allmulticast mode
[  207.753988][T12022] lo speed is unknown, defaulting to 1000
[  207.838597][T12039] IPVS: Unknown mcast interface: vcan0
[  207.884019][T12050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1559'.
[  207.889928][T12050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1559'.
[  207.895111][T12050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1559'.
[  207.935776][T12056] lo speed is unknown, defaulting to 1000
[  207.974976][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'.
[  207.978981][T12056] netlink: 'syz.0.1561': attribute type 5 has an invalid length.
[  207.982080][T12057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1560'.
[  207.986441][  T791] IPVS: starting estimator thread 0...
[  207.991760][T12057] veth0_to_bridge: entered promiscuous mode
[  207.994312][T12057] veth0_to_bridge: entered allmulticast mode
[  208.090078][T12059] IPVS: using max 80 ests per chain, 192000 per kthread
[  208.155970][T12066] siw: device registration error -23
[  208.163200][T12066] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.188318][ T5866] IPVS: stop unused estimator thread 0...
[  208.351605][T12073] syzkaller1: entered promiscuous mode
[  208.354017][T12073] syzkaller1: entered allmulticast mode
[  208.791354][T12107] netlink: 'syz.0.1573': attribute type 13 has an invalid length.
[  208.794483][T12107] netlink: 'syz.0.1573': attribute type 17 has an invalid length.
[  208.854591][T12107] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.859263][T12107] 8021q: adding VLAN 0 to HW filter on device team0
[  208.862586][T12107] tipc: Resetting bearer <eth:team0>
[  208.866111][T12107] bridge0: port 1(dummy0) entered blocking state
[  208.868873][T12107] bridge0: port 1(dummy0) entered forwarding state
[  208.873744][T12107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.391950][T12116] bond0: Unable to set up delay as MII monitoring is disabled
[  209.398737][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  209.474885][T12119] lo speed is unknown, defaulting to 1000
[  209.837781][T12146] lo speed is unknown, defaulting to 1000
[  209.941183][T12134] delete_channel: no stack
[  209.947701][T12134] delete_channel: no stack
[  210.043640][T12158] netlink: 'syz.0.1590': attribute type 13 has an invalid length.
[  210.046377][T12158] netlink: 'syz.0.1590': attribute type 17 has an invalid length.
[  210.053912][T12158] tipc: Resetting bearer <eth:team0>
[  210.062945][T12158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.414227][T12174] lo speed is unknown, defaulting to 1000
[  210.590413][T12184] lo speed is unknown, defaulting to 1000
[  210.857154][T12189] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.922946][T12197] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  210.990845][T12198] __nla_validate_parse: 277 callbacks suppressed
[  210.990861][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1599'.
[  211.017987][T12198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1599'.
[  211.031254][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1599'.
[  211.042056][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1599'.
[  211.384141][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'.
[  211.431142][T12201] erspan0: entered promiscuous mode
[  211.438714][T12201] macvtap1: entered promiscuous mode
[  211.444238][T12201] macvtap1: entered allmulticast mode
[  211.446445][T12201] erspan0: entered allmulticast mode
[  211.656359][T12208] lo speed is unknown, defaulting to 1000
[  212.007126][T12224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1605'.
[  212.389125][T12247] netlink: 'syz.2.1611': attribute type 21 has an invalid length.
[  212.392842][T12247] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1611'.
[  212.398178][T12247] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1611'.
[  212.542573][T12261] lo speed is unknown, defaulting to 1000
[  212.721569][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'.
[  212.724788][T12267] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1615'.
[  212.829329][T12267] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  213.090912][T12273] ------------[ cut here ]------------
[  213.093610][T12273] WARNING: CPU: 1 PID: 12273 at net/mptcp/pm.c:359 mptcp_pm_alloc_anno_list+0x31d/0x380
[  213.097727][T12273] Modules linked in:
[  213.100137][T12273] CPU: 1 UID: 0 PID: 12273 Comm: syz.2.1616 Not tainted syzkaller #0 PREEMPT(full) 
[  213.104784][T12273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.109085][T12273] RIP: 0010:mptcp_pm_alloc_anno_list+0x31d/0x380
[  213.111959][T12273] Code: b0 01 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 5e 15 00 cc e8 42 b1 57 f6 90 0f 0b 90 e9 8d fd ff ff e8 34 b1 57 f6 90 <0f> 0b 90 31 c0 eb d1 48 c7 c1 60 c3 a3 8f 80 e1 07 80 c1 03 38 c1
[  213.119861][T12273] RSP: 0018:ffffc90002fbed38 EFLAGS: 00010283
[  213.122316][T12273] RAX: ffffffff8b67fd1c RBX: ffff888125020000 RCX: 0000000000080000
[  213.125502][T12273] RDX: ffffc900081d9000 RSI: 0000000000001249 RDI: 000000000000124a
[  213.128851][T12273] RBP: 0000000000000000 R08: 0000000000020001 R09: 00000000aa1414ac
[  213.132034][T12273] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff888125020a91
[  213.135202][T12273] R13: dffffc0000000000 R14: ffff88802a4ca440 R15: ffff8881091adb00
[  213.138367][T12273] FS:  00007fb662bd56c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  213.141765][T12273] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.144212][T12273] CR2: 00007fb662bd3fb8 CR3: 0000000112a78000 CR4: 00000000000006f0
[  213.147036][T12273] Call Trace:
[  213.148335][T12273]  <TASK>
[  213.149392][T12273]  mptcp_pm_create_subflow_or_signal_addr+0x1448/0x1c30
[  213.151769][T12273]  ? stack_depot_save_flags+0x40/0x860
[  213.153722][T12273]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  213.156109][T12273]  ? do_trace_netlink_extack+0x7e/0x1d0
[  213.157957][T12273]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  213.160604][T12273]  ? __lock_acquire+0xab9/0xd20
[  213.162429][T12273]  ? __lock_acquire+0xab9/0xd20
[  213.164116][T12273]  ? do_raw_spin_lock+0x121/0x290
[  213.166003][T12273]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  213.168164][T12273]  ? mptcp_addresses_equal+0x392/0x4d0
[  213.170258][T12273]  mptcp_pm_nl_add_addr_doit+0xe66/0x1460
[  213.172215][T12273]  ? __nla_validate_parse+0x251c/0x2d40
[  213.174347][T12273]  ? __sock_sendmsg+0x21c/0x270
[  213.176224][T12273]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  213.178963][T12273]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  213.181520][T12273]  genl_family_rcv_msg_doit+0x215/0x300
[  213.183540][T12273]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  213.185803][T12273]  ? bpf_lsm_capable+0x9/0x20
[  213.187807][T12273]  ? security_capable+0x7e/0x2e0
[  213.189851][T12273]  genl_rcv_msg+0x60e/0x790
[  213.191516][T12273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.193411][T12273]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  213.195478][T12273]  netlink_rcv_skb+0x208/0x470
[  213.197057][T12273]  ? __lock_acquire+0xab9/0xd20
[  213.198792][T12273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.200451][T12273]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.202156][T12273]  ? down_read+0x1ad/0x2e0
[  213.203623][T12273]  genl_rcv+0x28/0x40
[  213.204904][T12273]  netlink_unicast+0x82f/0x9e0
[  213.206459][T12273]  ? __pfx_netlink_unicast+0x10/0x10
[  213.208802][T12273]  ? netlink_sendmsg+0x642/0xb30
[  213.210613][T12273]  ? skb_put+0x11b/0x210
[  213.211976][T12273]  netlink_sendmsg+0x805/0xb30
[  213.213511][T12273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.215302][T12273]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.217140][T12273]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.219136][T12273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.220967][T12273]  __sock_sendmsg+0x21c/0x270
[  213.222510][T12273]  ____sys_sendmsg+0x505/0x830
[  213.224248][T12273]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.225989][T12273]  ? import_iovec+0x74/0xa0
[  213.227695][T12273]  ___sys_sendmsg+0x21f/0x2a0
[  213.229414][T12273]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.231142][T12273]  ? __fget_files+0x2a/0x420
[  213.232693][T12273]  ? __fget_files+0x3a0/0x420
[  213.234302][T12273]  __x64_sys_sendmsg+0x19b/0x260
[  213.236108][T12273]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.238209][T12273]  ? do_syscall_64+0xbe/0x3b0
[  213.239939][T12273]  do_syscall_64+0xfa/0x3b0
[  213.241606][T12273]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.243273][T12273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.245446][T12273]  ? exc_page_fault+0x9f/0xf0
[  213.247226][T12273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.249388][T12273] RIP: 0033:0x7fb66498ebe9
[  213.250961][T12273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.257535][T12273] RSP: 002b:00007fb662bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.260920][T12273] RAX: ffffffffffffffda RBX: 00007fb664bc6090 RCX: 00007fb66498ebe9
[  213.263710][T12273] RDX: 0000000020000000 RSI: 0000200000000a80 RDI: 000000000000000d
[  213.266385][T12273] RBP: 00007fb664a11e19 R08: 0000000000000000 R09: 0000000000000000
[  213.269364][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.272313][T12273] R13: 00007fb664bc6128 R14: 00007fb664bc6090 R15: 00007fff3e325fd8
[  213.275400][T12273]  </TASK>
[  213.276705][T12273] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  213.279555][T12273] CPU: 1 UID: 0 PID: 12273 Comm: syz.2.1616 Not tainted syzkaller #0 PREEMPT(full) 
[  213.282822][T12273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.286494][T12273] Call Trace:
[  213.287897][T12273]  <TASK>
[  213.289183][T12273]  dump_stack_lvl+0x99/0x250
[  213.290955][T12273]  ? __asan_memcpy+0x40/0x70
[  213.292522][T12273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.294226][T12273]  ? __pfx__printk+0x10/0x10
[  213.295757][T12273]  vpanic+0x281/0x750
[  213.297132][T12273]  ? __pfx__printk+0x10/0x10
[  213.298679][T12273]  ? __pfx_vpanic+0x10/0x10
[  213.300272][T12273]  ? is_bpf_text_address+0x292/0x2b0
[  213.302143][T12273]  panic+0xb9/0xc0
[  213.303587][T12273]  ? __pfx_panic+0x10/0x10
[  213.305191][T12273]  __warn+0x31b/0x4b0
[  213.306613][T12273]  ? mptcp_pm_alloc_anno_list+0x31d/0x380
[  213.308518][T12273]  ? mptcp_pm_alloc_anno_list+0x31d/0x380
[  213.310679][T12273]  report_bug+0x2be/0x4f0
[  213.312295][T12273]  ? mptcp_pm_alloc_anno_list+0x31d/0x380
[  213.314158][T12273]  ? mptcp_pm_alloc_anno_list+0x31d/0x380
[  213.316234][T12273]  ? mptcp_pm_alloc_anno_list+0x31f/0x380
[  213.318325][T12273]  handle_bug+0x84/0x160
[  213.319727][T12273]  exc_invalid_op+0x1a/0x50
[  213.321165][T12273]  asm_exc_invalid_op+0x1a/0x20
[  213.322781][T12273] RIP: 0010:mptcp_pm_alloc_anno_list+0x31d/0x380
[  213.324852][T12273] Code: b0 01 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 5e 15 00 cc e8 42 b1 57 f6 90 0f 0b 90 e9 8d fd ff ff e8 34 b1 57 f6 90 <0f> 0b 90 31 c0 eb d1 48 c7 c1 60 c3 a3 8f 80 e1 07 80 c1 03 38 c1
[  213.331635][T12273] RSP: 0018:ffffc90002fbed38 EFLAGS: 00010283
[  213.333531][T12273] RAX: ffffffff8b67fd1c RBX: ffff888125020000 RCX: 0000000000080000
[  213.336176][T12273] RDX: ffffc900081d9000 RSI: 0000000000001249 RDI: 000000000000124a
[  213.339021][T12273] RBP: 0000000000000000 R08: 0000000000020001 R09: 00000000aa1414ac
[  213.341731][T12273] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff888125020a91
[  213.344556][T12273] R13: dffffc0000000000 R14: ffff88802a4ca440 R15: ffff8881091adb00
[  213.347656][T12273]  ? mptcp_pm_alloc_anno_list+0x31c/0x380
[  213.349921][T12273]  ? mptcp_pm_alloc_anno_list+0x31c/0x380
[  213.352133][T12273]  mptcp_pm_create_subflow_or_signal_addr+0x1448/0x1c30
[  213.354864][T12273]  ? stack_depot_save_flags+0x40/0x860
[  213.356989][T12273]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  213.359718][T12273]  ? do_trace_netlink_extack+0x7e/0x1d0
[  213.361916][T12273]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  213.364731][T12273]  ? __lock_acquire+0xab9/0xd20
[  213.366657][T12273]  ? __lock_acquire+0xab9/0xd20
[  213.368592][T12273]  ? do_raw_spin_lock+0x121/0x290
[  213.370589][T12273]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  213.372650][T12273]  ? mptcp_addresses_equal+0x392/0x4d0
[  213.374711][T12273]  mptcp_pm_nl_add_addr_doit+0xe66/0x1460
[  213.376855][T12273]  ? __nla_validate_parse+0x251c/0x2d40
[  213.379052][T12273]  ? __sock_sendmsg+0x21c/0x270
[  213.380914][T12273]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  213.383238][T12273]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  213.385605][T12273]  genl_family_rcv_msg_doit+0x215/0x300
[  213.387527][T12273]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  213.389658][T12273]  ? bpf_lsm_capable+0x9/0x20
[  213.391436][T12273]  ? security_capable+0x7e/0x2e0
[  213.393259][T12273]  genl_rcv_msg+0x60e/0x790
[  213.394844][T12273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.396649][T12273]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  213.398955][T12273]  netlink_rcv_skb+0x208/0x470
[  213.400646][T12273]  ? __lock_acquire+0xab9/0xd20
[  213.402421][T12273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.404309][T12273]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.406234][T12273]  ? down_read+0x1ad/0x2e0
[  213.407772][T12273]  genl_rcv+0x28/0x40
[  213.409118][T12273]  netlink_unicast+0x82f/0x9e0
[  213.410866][T12273]  ? __pfx_netlink_unicast+0x10/0x10
[  213.412887][T12273]  ? netlink_sendmsg+0x642/0xb30
[  213.414781][T12273]  ? skb_put+0x11b/0x210
[  213.416636][T12273]  netlink_sendmsg+0x805/0xb30
[  213.418603][T12273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.420631][T12273]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.422656][T12273]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.424598][T12273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.426436][T12273]  __sock_sendmsg+0x21c/0x270
[  213.428199][T12273]  ____sys_sendmsg+0x505/0x830
[  213.430097][T12273]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.432264][T12273]  ? import_iovec+0x74/0xa0
[  213.434178][T12273]  ___sys_sendmsg+0x21f/0x2a0
[  213.436205][T12273]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.438315][T12273]  ? __fget_files+0x2a/0x420
[  213.439983][T12273]  ? __fget_files+0x3a0/0x420
[  213.441560][T12273]  __x64_sys_sendmsg+0x19b/0x260
[  213.443232][T12273]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.445244][T12273]  ? do_syscall_64+0xbe/0x3b0
[  213.447147][T12273]  do_syscall_64+0xfa/0x3b0
[  213.448877][T12273]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.450801][T12273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.453056][T12273]  ? exc_page_fault+0x9f/0xf0
[  213.454851][T12273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.457126][T12273] RIP: 0033:0x7fb66498ebe9
[  213.458865][T12273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.466252][T12273] RSP: 002b:00007fb662bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.469522][T12273] RAX: ffffffffffffffda RBX: 00007fb664bc6090 RCX: 00007fb66498ebe9
[  213.472744][T12273] RDX: 0000000020000000 RSI: 0000200000000a80 RDI: 000000000000000d
[  213.475982][T12273] RBP: 00007fb664a11e19 R08: 0000000000000000 R09: 0000000000000000
[  213.479068][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.482000][T12273] R13: 00007fb664bc6128 R14: 00007fb664bc6090 R15: 00007fff3e325fd8
[  213.484733][T12273]  </TASK>
[  213.486790][T12273] Kernel Offset: disabled
[  213.488350][T12273] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:32:25  Registers:
info registers vcpu 0

CPU#0
RAX=c71893dd96873b00 RBX=ffffffff819683f8 RCX=c71893dd96873b00 RDX=0000000000000001
RSI=ffffffff8d9b9d26 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb662bd5d58 CR3=000000001f81a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb664a12e53
XMM06=0000000000000000 00007fb664a12e4d XMM07=0000000000000000 00007fb664a12e61
XMM08=0000000000000000 00007fb664a12ee7 XMM09=0000000000000000 00007fb664a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000012301 RDI=0000000000012302 RBP=00000000000003f8 RSP=ffffc90002fbe4d0
R8 =ffff888106e80237 R9 =1ffff11020dd0046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018eb R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb662bd56c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb662bd3fb8 CR3=0000000112a78000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffff00ffff 0000000000000000 XMM01=ff00ffffffffffff ffff000000000000
XMM02=ffffffffffffffff ff00ffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fb6656fd100 00007fb664b97460 XMM05=00007fb664b97478 00007fb664b974c0
XMM06=00007fb664b974b8 00007fb664b974b0 XMM07=00007fb664b974a8 00007fb664b974a0
XMM08=0000000000000000 00007fb664a12ee7 XMM09=0000000000000000 00007fb664a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
