last executing test programs:

2.805642794s ago: executing program 2 (id=644):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r0, 0x1)
poll(&(0x7f00000013c0)=[{r0, 0xc08a}], 0x1, 0x8001)

1.940442326s ago: executing program 2 (id=652):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001e40)=ANY=[@ANYBLOB="6000000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d060028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="9423000040100100080020002f00000008001f000400000008000a0064"], 0x60}, 0x1, 0xba01}, 0x0)

1.647029133s ago: executing program 2 (id=655):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
unshare(0x60600)
connect$bt_rfcomm(r0, 0x0, 0x0)

1.578593325s ago: executing program 2 (id=657):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00')
unshare(0x6a060000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYRES16=r0, @ANYBLOB="4eb9def0ef69b8d649b596c5c3017dad7748a885d61c0e0923ffa67c9a5fc89f7304fdad23b8cb533eb22dab6a80d926becf22d1d7d32df7d71932be73826d8c6c6383f36ca9ed0219eaf740726461f9050418c80dcc7aaf55a55806f20000000000", @ANYBLOB="e6cc1856a98b2dd641d5243911a4f9b10486b561b313b665a4336fa95798d44c485d99df7ca472867cc8fc425903e92811fa559caf1d3777d3a608f9326ed94107c60f1a3536dcf6e7aad7e5742eee184872716bed7ff78a850ea07c210771df2cd68905fa0af49d2a48c5c95e5090d5afb62a1fc464e7249f1841ea9ef9c7676ae7a06f7140006139cddd748a9a955b131b99c2e17dff9a05d569e5cd3e46cbcda28a616daee85c546bdc1c82f864c360a54f566262b49b8dee6df979ff09b625844ea7aa1f4437ba446b29e8", @ANYRESOCT=r3], 0x0, 0xfffffef8, 0x0, 0x1, 0x200000}, 0x28)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r7, 0x0, &(0x7f0000000200))
connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="28144000", @ANYRESOCT=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94)
epoll_create1(0x80000)
socket$nl_route(0x10, 0x3, 0x0)

667.791267ms ago: executing program 2 (id=679):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))

378.706843ms ago: executing program 1 (id=682):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "bac6734d333dbaf9eeb943ca05f5b02c57a1e6a78fe77ab965f89a84fb7a4a824ef2a166703f1a4b7efde3690af12b82f528c2bab28c2e5a8e607988197c4fb5c65609b0c614ba24c5eb5b95c8ae2f29"}, 0xd8)

320.013518ms ago: executing program 1 (id=684):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000440)=0x2, 0x4)

270.550505ms ago: executing program 0 (id=685):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000001180))

270.395547ms ago: executing program 1 (id=686):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, 0x0, 0x0)

208.863275ms ago: executing program 0 (id=687):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)

208.433638ms ago: executing program 1 (id=688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/117, 0x75}], 0x2}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001100)=""/104, 0x68}, {&(0x7f0000001740)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4072, 0xfe8}], 0x4}, 0x3}], 0x3, 0x2, 0x0)

208.270536ms ago: executing program 0 (id=689):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)

140.597013ms ago: executing program 0 (id=690):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

140.426601ms ago: executing program 1 (id=691):
unshare(0x22020400)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4)

77.688569ms ago: executing program 0 (id=692):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0x4, 0x0, 0x8, 0x9d}, 0x10)

466.32µs ago: executing program 0 (id=693):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000ebfb}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

275.562µs ago: executing program 1 (id=694):
unshare(0x2c020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

0s ago: executing program 2 (id=695):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x0, 0xb8, 0x90, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netdevsim0\x00', {0x905}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11039' (ED25519) to the list of known hosts.
syzkaller login: [   57.125069][ T5812] cgroup: Unknown subsys name 'net'
[   57.231069][ T5812] cgroup: Unknown subsys name 'cpuset'
[   57.238210][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.430562][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.661220][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.664735][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.669382][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.672915][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.677200][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.677442][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.680606][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.683635][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.690425][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.697886][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.721149][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.724573][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.729050][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.732943][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.737192][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.061736][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   65.142864][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   65.185559][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.189252][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.191830][ T5839] bridge_slave_0: entered allmulticast mode
[   65.195149][ T5839] bridge_slave_0: entered promiscuous mode
[   65.237173][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.240196][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.243268][ T5839] bridge_slave_1: entered allmulticast mode
[   65.248440][ T5839] bridge_slave_1: entered promiscuous mode
[   65.312883][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.339920][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.343916][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   65.410581][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.412906][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.415707][ T5831] bridge_slave_0: entered allmulticast mode
[   65.419956][ T5831] bridge_slave_0: entered promiscuous mode
[   65.433822][ T5839] team0: Port device team_slave_0 added
[   65.439376][ T5839] team0: Port device team_slave_1 added
[   65.442210][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.445096][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.448403][ T5831] bridge_slave_1: entered allmulticast mode
[   65.452109][ T5831] bridge_slave_1: entered promiscuous mode
[   65.515979][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.528463][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.530607][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.540049][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.547735][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.558841][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.561602][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.570970][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.619082][ T5831] team0: Port device team_slave_0 added
[   65.650217][ T5831] team0: Port device team_slave_1 added
[   65.653893][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.657137][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.660181][ T5830] bridge_slave_0: entered allmulticast mode
[   65.664066][ T5830] bridge_slave_0: entered promiscuous mode
[   65.698436][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.701513][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.704555][ T5830] bridge_slave_1: entered allmulticast mode
[   65.708928][ T5830] bridge_slave_1: entered promiscuous mode
[   65.712961][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.715107][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.723215][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.730205][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.732453][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.740625][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.775974][ T5839] hsr_slave_0: entered promiscuous mode
[   65.778658][ T5839] hsr_slave_1: entered promiscuous mode
[   65.808316][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.821829][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.893891][ T5831] hsr_slave_0: entered promiscuous mode
[   65.897004][ T5831] hsr_slave_1: entered promiscuous mode
[   65.899098][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.901696][ T5831] Cannot create hsr debugfs directory
[   65.912550][ T5830] team0: Port device team_slave_0 added
[   65.929354][ T5830] team0: Port device team_slave_1 added
[   65.976621][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.978839][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.989701][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.019113][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.021294][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.029982][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.129691][ T5830] hsr_slave_0: entered promiscuous mode
[   66.132297][ T5830] hsr_slave_1: entered promiscuous mode
[   66.135013][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.137939][ T5830] Cannot create hsr debugfs directory
[   66.263608][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.273390][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.290592][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.298050][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.377986][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.390600][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.415821][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.430092][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.503050][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.516797][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.528789][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.544817][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.642095][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.662004][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.676448][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   66.691689][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   66.699730][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.702615][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.706702][   T54] Bluetooth: hci2: command tx timeout
[   66.723589][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.725996][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.731999][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.734845][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.745773][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.748750][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.788483][   T54] Bluetooth: hci0: command tx timeout
[   66.790879][   T54] Bluetooth: hci1: command tx timeout
[   66.814348][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.878962][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   66.913317][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.916372][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.939919][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.942996][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.085170][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.153430][ T5831] veth0_vlan: entered promiscuous mode
[   67.181139][ T5831] veth1_vlan: entered promiscuous mode
[   67.190827][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.212688][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.253449][ T5831] veth0_macvtap: entered promiscuous mode
[   67.268664][ T5839] veth0_vlan: entered promiscuous mode
[   67.279044][ T5831] veth1_macvtap: entered promiscuous mode
[   67.289569][ T5839] veth1_vlan: entered promiscuous mode
[   67.331734][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.340390][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.344762][ T5830] veth0_vlan: entered promiscuous mode
[   67.358411][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.364330][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.382684][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.389165][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.407094][ T5830] veth1_vlan: entered promiscuous mode
[   67.413661][ T5839] veth0_macvtap: entered promiscuous mode
[   67.438525][ T5839] veth1_macvtap: entered promiscuous mode
[   67.482286][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.489004][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.493607][ T5830] veth0_macvtap: entered promiscuous mode
[   67.515025][ T5830] veth1_macvtap: entered promiscuous mode
[   67.529005][ T5660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.542547][ T5660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.545929][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.550007][ T5660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.552795][ T5660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.556590][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.590985][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.594230][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.605036][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.627502][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.640245][ T5660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.645445][ T5660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.689480][ T5660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.691935][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.702151][ T5660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.719821][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.723112][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.785587][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.789745][ T5900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.793379][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.800883][ T5900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.804063][ T5900] netlink: 'syz.2.3': attribute type 6 has an invalid length.
[   67.822483][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.828037][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.856250][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.858628][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.902618][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.907700][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.109994][ T5912] Zero length message leads to an empty skb
[   68.143313][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.611549][ T5947] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   68.623072][ T5943] sctp: [Deprecated]: syz.2.21 (pid 5943) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.623072][ T5943] Use struct sctp_sack_info instead
[   68.676264][ T5949] bridge_slave_0: left allmulticast mode
[   68.678518][ T5949] bridge_slave_0: left promiscuous mode
[   68.681187][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.691411][ T5949] bridge_slave_1: left allmulticast mode
[   68.693177][ T5949] bridge_slave_1: left promiscuous mode
[   68.695676][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.703849][ T5949] bond0: (slave bond_slave_0): Releasing backup interface
[   68.713629][ T5949] bond0: (slave bond_slave_1): Releasing backup interface
[   68.723842][ T5949] team0: Port device team_slave_0 removed
[   68.729909][ T5949] team0: Port device team_slave_1 removed
[   68.732673][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.735388][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.743471][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.745796][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.786843][   T54] Bluetooth: hci2: command tx timeout
[   68.866924][   T54] Bluetooth: hci0: command tx timeout
[   68.866964][ T5836] Bluetooth: hci1: command tx timeout
[   68.940328][ T5959] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.521911][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[   69.762410][ T6006] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   70.059181][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.190990][ T6031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.58'.
[   70.297287][ T6040] IPv6: sit1: Disabled Multicast RS
[   70.442321][ T6049] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   70.587780][ T6059] delete_channel: no stack
[   70.612778][ T6063] netlink: 88 bytes leftover after parsing attributes in process `syz.0.72'.
[   70.629812][ T6058] xt_CT: No such helper "snmp"
[   70.797751][ T6076] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78'.
[   70.866310][ T5836] Bluetooth: hci2: command tx timeout
[   70.946196][ T5836] Bluetooth: hci1: command tx timeout
[   70.957593][ T5836] Bluetooth: hci0: command tx timeout
[   71.288243][ T6106] Bluetooth: MGMT ver 1.23
[   71.355206][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.359236][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.376846][ T6112] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET)
[   71.713732][ T6137] netlink: 'syz.1.101': attribute type 1 has an invalid length.
[   71.961848][ T6149] vlan2: entered promiscuous mode
[   71.964398][ T6149] vlan2: entered allmulticast mode
[   71.969778][ T6149] hsr_slave_1: entered allmulticast mode
[   72.074927][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'.
[   72.465310][ T6167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.946813][   T54] Bluetooth: hci2: command tx timeout
[   73.027803][   T54] Bluetooth: hci0: command tx timeout
[   73.029692][ T5842] Bluetooth: hci1: command tx timeout
[   73.346194][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   74.292646][ T6240] netlink: 'syz.0.140': attribute type 2 has an invalid length.
[   74.324559][ T6240] netlink: 240 bytes leftover after parsing attributes in process `syz.0.140'.
[   74.343157][ T6239] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   74.551023][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'.
[   74.581164][ T6249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.147'.
[   75.106300][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[   75.307068][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'.
[   75.523021][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'.
[   75.910829][ T6298] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   75.913716][ T6298] netlink: 172 bytes leftover after parsing attributes in process `syz.1.163'.
[   76.798408][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'.
[   77.352568][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'.
[   77.361232][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   77.494240][ T6419] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   77.523580][ T6419] macvtap1: entered allmulticast mode
[   77.525237][ T6419] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   77.534876][ T6419] batman_adv: batadv0: Adding interface: macvtap1
[   77.551149][ T6419] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.568336][ T6419] batman_adv: batadv0: Interface activated: macvtap1
[   77.632921][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   77.702644][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'.
[   77.758414][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   77.761308][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   77.776293][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   77.918192][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   77.996658][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   79.379647][ T6536] __nla_validate_parse: 6 callbacks suppressed
[   79.379666][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'.
[   80.356674][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[   80.472045][ T6596] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   80.486824][ T6596] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   80.490982][ T6596] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   80.988997][ T6608] netlink: 172 bytes leftover after parsing attributes in process `syz.2.294'.
[   81.199028][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[   81.441214][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   81.461353][ T6646] syz_tun: entered promiscuous mode
[   81.470140][ T6646] syz_tun: left promiscuous mode
[   81.642858][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'.
[   81.715916][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'.
[   81.826370][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   82.539659][ T6688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.946919][ T6715] netlink: 'syz.1.344': attribute type 6 has an invalid length.
[   82.950599][ T6715] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.344'.
[   83.283114][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'.
[   83.590224][ T6737] bridge_slave_0: left allmulticast mode
[   83.592634][ T6737] bridge_slave_0: left promiscuous mode
[   83.595124][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.610004][ T6737] bridge_slave_1: left allmulticast mode
[   83.612326][ T6737] bridge_slave_1: left promiscuous mode
[   83.614708][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.635800][ T6737] bond0: (slave bond_slave_0): Releasing backup interface
[   83.651069][ T6737] bond0: (slave bond_slave_1): Releasing backup interface
[   83.665932][ T6737] team0: Port device team_slave_0 removed
[   83.679017][ T6737] team0: Port device team_slave_1 removed
[   83.683338][ T6737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.687535][ T6737] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.701064][ T6737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.710292][ T6737] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.765200][ T6751] netlink: 'syz.2.361': attribute type 1 has an invalid length.
[   83.768533][ T6751] netlink: 204 bytes leftover after parsing attributes in process `syz.2.361'.
[   84.390158][ T5840] IPVS: starting estimator thread 0...
[   84.477585][ T6784] IPVS: using max 40 ests per chain, 96000 per kthread
[   84.601908][ T6795] __nla_validate_parse: 1 callbacks suppressed
[   84.601928][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'.
[   84.832910][ T6760] syz.2.366 (6760) used greatest stack depth: 19992 bytes left
[   85.228512][ T6825] syzkaller1: entered promiscuous mode
[   85.230820][ T6825] syzkaller1: entered allmulticast mode
[   85.429862][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.397'.
[   85.497036][ T6846] netlink: 256 bytes leftover after parsing attributes in process `syz.1.397'.
[   85.791501][ T6855] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   85.799333][ T6855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   85.810589][ T5860] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.814810][ T5860] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.858215][ T5860] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.861713][ T5860] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.941202][ T6867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.142880][ T6883] netlink: 168 bytes leftover after parsing attributes in process `syz.2.418'.
[   86.238862][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'.
[   86.335827][ T6891] xt_CT: No such helper "snmp"
[   86.709854][  T789] cfg80211: failed to load regulatory.db
[   86.974936][ T6950] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   86.996322][ T6950] bond0: (slave lo): Error: Device can not be enslaved while up
[   87.098021][ T6957] Driver unsupported XDP return value 0 on prog  (id 93) dev N/A, expect packet loss!
[   87.243244][ T6969] netlink: 'syz.2.454': attribute type 20 has an invalid length.
[   87.588046][ T6983] tipc: Started in network mode
[   87.590268][ T6983] tipc: Node identity 8e1621bb5c93, cluster identity 4711
[   87.594478][ T6983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.602770][ T6983] syzkaller0: entered promiscuous mode
[   87.605054][ T6983] syzkaller0: entered allmulticast mode
[   87.624360][ T6983] tipc: Resetting bearer <eth:syzkaller0>
[   87.631425][ T6982] tipc: Resetting bearer <eth:syzkaller0>
[   87.642567][ T6982] tipc: Disabling bearer <eth:syzkaller0>
[   88.090771][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'.
[   88.096928][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[   88.099758][ T7002] netlink: 'syz.0.471': attribute type 15 has an invalid length.
[   89.203266][ T7069] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   89.403805][ T7089] ieee802154 phy0 wpan0: encryption failed: -90
[   89.464527][ T7095] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   89.470242][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'.
[   89.906220][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.382674][ T7154] netlink: 116 bytes leftover after parsing attributes in process `syz.1.534'.
[   91.389032][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'.
[   91.417226][ T7177] syzkaller0: entered promiscuous mode
[   91.420018][ T7177] syzkaller0: entered allmulticast mode
[   92.556562][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'.
[   92.681567][ T7210] team0: Mode "acti6eba" not found
[   92.730217][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'.
[   92.732320][ T7216] tipc: Enabled bearer <eth:team0>, priority 10
[   92.772493][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[   93.720652][ T7267] netlink: 136 bytes leftover after parsing attributes in process `syz.1.581'.
[   93.723607][ T7267] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   93.849097][ T5870] tipc: Node number set to 3531940283
[   94.115755][ T7300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.151862][ T7300] syzkaller0: entered promiscuous mode
[   94.154015][ T7300] syzkaller0: entered allmulticast mode
[   94.156435][ T7300] tipc: Resetting bearer <eth:syzkaller0>
[   94.186909][ T7299] tipc: Resetting bearer <eth:syzkaller0>
[   95.135715][ T7299] tipc: Disabling bearer <eth:syzkaller0>
[   95.284052][ T7320] netlink: 332 bytes leftover after parsing attributes in process `syz.2.607'.
[   95.289220][ T7320] netlink: 104 bytes leftover after parsing attributes in process `syz.2.607'.
[   95.293977][ T7320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.607'.
[   95.562793][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'.
[   95.577069][ T7344] geneve2: entered promiscuous mode
[   95.579081][ T7344] geneve2: entered allmulticast mode
[   95.695715][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'.
[   95.744602][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[   96.117127][ T7384] tap0: tun_chr_ioctl cmd 1074025675
[   96.125262][ T7384] tap0: persist disabled
[   96.272359][ T7392] netlink: 'syz.2.638': attribute type 1 has an invalid length.
[   96.293570][ T7392] bond1: entered promiscuous mode
[   96.295478][ T7392] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.314902][ T7392] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.319868][ T7392] bond1: (slave bond2): making interface the new active one
[   96.322603][ T7392] bond2: entered promiscuous mode
[   96.324760][ T7392] bond1: (slave bond2): Enslaving as an active interface with an up link
[   97.361005][ T7427] veth3: entered promiscuous mode
[   97.980839][ T7459] tipc: Started in network mode
[   97.982939][ T7459] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[   97.987233][ T7459] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   99.116722][ T7523] nbd: socks must be embedded in a SOCK_ITEM attr
Connection to localhost closed by remote host.
[   99.606706][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.659874][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.707678][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.733893][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.845887][   T13] bridge_slave_1: left allmulticast mode
[   99.851935][   T13] bridge_slave_1: left promiscuous mode
[   99.854849][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.862482][   T13] bridge_slave_0: left allmulticast mode
[   99.864413][   T13] bridge_slave_0: left promiscuous mode
[   99.867123][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.187640][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.195351][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.201651][   T13] bond0 (unregistering): Released all slaves
[  100.282079][   T13] bond1 (unregistering): (slave bond2): Releasing backup interface
[  100.285111][   T13] bond2 (unregistering): left promiscuous mode
[  100.288900][   T13] bond1 (unregistering): Released all slaves
[  100.343961][   T13] bond2 (unregistering): Released all slaves
[  100.593944][   T13] hsr_slave_0: left promiscuous mode
[  100.596775][   T13] hsr_slave_1: left promiscuous mode
[  100.598830][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.601034][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.603786][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.605950][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.620364][   T13] veth1_macvtap: left promiscuous mode
[  100.622524][   T13] veth0_macvtap: left promiscuous mode
[  100.625698][   T13] veth1_vlan: left promiscuous mode
[  100.630373][   T13] veth0_vlan: left promiscuous mode
[  101.022807][   T13] team0 (unregistering): Port device team_slave_1 removed
[  101.047847][   T13] team0 (unregistering): Port device team_slave_0 removed
[  101.513397][   T13] ------------[ cut here ]------------
[  101.515696][   T13] WARNING: CPU: 1 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  101.519524][   T13] Modules linked in:
[  101.520998][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  101.525471][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.529024][   T13] Workqueue: netns cleanup_net
[  101.530495][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  101.532286][   T13] Code: 55 3f e9 f7 4b 83 3c 2c 00 75 19 e8 a9 2f 87 f7 49 81 fd f8 07 00 00 74 1d e8 9b 2f 87 f7 49 83 c5 08 eb c9 e8 90 2f 87 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  101.539644][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  101.541497][   T13] RAX: ffffffff8a38f8a0 RBX: ffff88810dff4000 RCX: ffff88801c6c0000
[  101.544423][   T13] RDX: 0000000000000000 RSI: ffffffff8db8d3fb RDI: ffff88810dff40b8
[  101.547712][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa235f7 R09: 1ffffffff1f446be
[  101.550605][   T13] R10: dffffc0000000000 R11: fffffbfff1f446bf R12: ffff88810dff4000
[  101.553034][   T13] R13: 00000000000000b8 R14: ffff88810d08a440 R15: dffffc0000000000
[  101.555991][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  101.559552][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.561540][   T13] CR2: 00007fc9c317c440 CR3: 000000000df38000 CR4: 00000000000006f0
[  101.563995][   T13] Call Trace:
[  101.565047][   T13]  <TASK>
[  101.565961][   T13]  ops_undo_list+0x49a/0x990
[  101.567545][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  101.569073][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  101.570606][   T13]  cleanup_net+0x4c5/0x800
[  101.571935][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  101.573407][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.575391][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  101.577972][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  101.579992][   T13]  process_scheduled_works+0xae1/0x17b0
[  101.581704][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.583592][   T13]  worker_thread+0x8a0/0xda0
[  101.585005][   T13]  kthread+0x711/0x8a0
[  101.586526][   T13]  ? __pfx_worker_thread+0x10/0x10
[  101.588078][   T13]  ? __pfx_kthread+0x10/0x10
[  101.589474][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.590991][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.592573][   T13]  ? __pfx_kthread+0x10/0x10
[  101.594104][   T13]  ret_from_fork+0x3fc/0x770
[  101.595922][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  101.598288][   T13]  ? __switch_to_asm+0x39/0x70
[  101.599737][   T13]  ? __switch_to_asm+0x33/0x70
[  101.601104][   T13]  ? __pfx_kthread+0x10/0x10
[  101.602532][   T13]  ret_from_fork_asm+0x1a/0x30
[  101.603984][   T13]  </TASK>
[  101.604945][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  101.607118][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  101.610807][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.613815][   T13] Workqueue: netns cleanup_net
[  101.615699][   T13] Call Trace:
[  101.616965][   T13]  <TASK>
[  101.618112][   T13]  dump_stack_lvl+0x99/0x250
[  101.619892][   T13]  ? __asan_memcpy+0x40/0x70
[  101.621714][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.623358][   T13]  ? __pfx__printk+0x10/0x10
[  101.624781][   T13]  panic+0x2db/0x790
[  101.625947][   T13]  ? __pfx_panic+0x10/0x10
[  101.627305][   T13]  ? ret_from_fork_asm+0x1a/0x30
[  101.628830][   T13]  __warn+0x31b/0x4b0
[  101.630422][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  101.632077][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  101.633737][   T13]  report_bug+0x2be/0x4f0
[  101.635184][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  101.636770][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  101.638413][   T13]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  101.640056][   T13]  handle_bug+0x84/0x160
[  101.641389][   T13]  exc_invalid_op+0x1a/0x50
[  101.642805][   T13]  asm_exc_invalid_op+0x1a/0x20
[  101.644493][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  101.646799][   T13] Code: 55 3f e9 f7 4b 83 3c 2c 00 75 19 e8 a9 2f 87 f7 49 81 fd f8 07 00 00 74 1d e8 9b 2f 87 f7 49 83 c5 08 eb c9 e8 90 2f 87 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  101.652871][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  101.654731][   T13] RAX: ffffffff8a38f8a0 RBX: ffff88810dff4000 RCX: ffff88801c6c0000
[  101.657400][   T13] RDX: 0000000000000000 RSI: ffffffff8db8d3fb RDI: ffff88810dff40b8
[  101.660365][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa235f7 R09: 1ffffffff1f446be
[  101.663301][   T13] R10: dffffc0000000000 R11: fffffbfff1f446bf R12: ffff88810dff4000
[  101.666320][   T13] R13: 00000000000000b8 R14: ffff88810d08a440 R15: dffffc0000000000
[  101.669320][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  101.671328][   T13]  ops_undo_list+0x49a/0x990
[  101.673070][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  101.674723][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  101.676275][   T13]  cleanup_net+0x4c5/0x800
[  101.677620][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  101.679207][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.681188][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  101.683321][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  101.685478][   T13]  process_scheduled_works+0xae1/0x17b0
[  101.687641][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.689635][   T13]  worker_thread+0x8a0/0xda0
[  101.691077][   T13]  kthread+0x711/0x8a0
[  101.692334][   T13]  ? __pfx_worker_thread+0x10/0x10
[  101.693885][   T13]  ? __pfx_kthread+0x10/0x10
[  101.695253][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.696788][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.698346][   T13]  ? __pfx_kthread+0x10/0x10
[  101.699715][   T13]  ret_from_fork+0x3fc/0x770
[  101.701098][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  101.702645][   T13]  ? __switch_to_asm+0x39/0x70
[  101.704268][   T13]  ? __switch_to_asm+0x33/0x70
[  101.706092][   T13]  ? __pfx_kthread+0x10/0x10
[  101.707872][   T13]  ret_from_fork_asm+0x1a/0x30
[  101.709449][   T13]  </TASK>
[  101.711056][   T13] Kernel Offset: disabled
[  101.712560][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:27:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000202 RCX=0000000080000000 RDX=ffffc90002cc6d01
RSI=ffffffff8d9b290d RDI=ffffffff8be28d80 RBP=dffffc0000000000 RSP=ffffc90002cc6b58
R8 =ffffc90002cc7610 R9 =0000000000000000 R10=ffffc90002cc6d18 R11=fffff52000598da5
R12=ffffc90002cc7620 R13=ffffffff8172aae5 R14=ffffffff8e13f0e0 R15=ffff88801b32b980
RIP=ffffffff8b70627c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6f21bff740 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c7a2c5f131 CR3=0000000028062000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=73616c632f737973 2f002f74656e2f73 XMM03=0000000000000000 0000000000000073
XMM04=7373616c632f7379 732f002f74656e2f XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107050
R8 =ffff888020af0237 R9 =1ffff1100415e046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff8b8 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc9c317c440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=2f6463706368642f 6e75722f7261762f
XMM02=65746174732d6b6f 6f682f6463706368 XMM03=6874652e666e6f63 2e766c6f7365722f
XMM04=0000000000000000 00000000000000ff XMM05=6769652e66635f63 2e006b6e69652e2f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00ff000000000000 XMM09=6874652e666e6f63 2e766c6f7365722f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
