last executing test programs:

39.551173992s ago: executing program 1 (id=1137):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000080}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0xff, 0xe, 0x10, 0x40000, r3}, &(0x7f0000000240)=0x20)

32.315606779s ago: executing program 1 (id=1137):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000080}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0xff, 0xe, 0x10, 0x40000, r3}, &(0x7f0000000240)=0x20)

24.016412525s ago: executing program 1 (id=1137):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000080}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0xff, 0xe, 0x10, 0x40000, r3}, &(0x7f0000000240)=0x20)

16.508345115s ago: executing program 1 (id=1137):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000080}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0xff, 0xe, 0x10, 0x40000, r3}, &(0x7f0000000240)=0x20)

10.69583414s ago: executing program 1 (id=1137):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000080}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0xff, 0xe, 0x10, 0x40000, r3}, &(0x7f0000000240)=0x20)

5.484273757s ago: executing program 2 (id=1857):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069116c000000000085100000020000008500007f6e000000950000002f0000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

5.484070366s ago: executing program 2 (id=1858):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="3100aa000a0002"], 0x28}}, 0x0)

5.452544583s ago: executing program 2 (id=1859):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x6, 0x4000}, 0x10)

5.384079682s ago: executing program 2 (id=1860):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)

5.254231306s ago: executing program 2 (id=1864):
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)

4.341853301s ago: executing program 1 (id=1137):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000080}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0xff, 0xe, 0x10, 0x40000, r3}, &(0x7f0000000240)=0x20)

1.357773529s ago: executing program 2 (id=1864):
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)

192.52317ms ago: executing program 0 (id=1894):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

133.728758ms ago: executing program 0 (id=1895):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

133.413679ms ago: executing program 0 (id=1896):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

74.712476ms ago: executing program 0 (id=1897):
unshare(0x22020400)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

74.572758ms ago: executing program 0 (id=1898):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)

0s ago: executing program 0 (id=1899):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17941' (ED25519) to the list of known hosts.
syzkaller login: [   48.887508][ T5737] cgroup: Unknown subsys name 'net'
[   48.996257][ T5737] cgroup: Unknown subsys name 'cpuset'
[   49.001643][ T5737] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.401719][ T5737] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.646511][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.998136][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.001470][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.004620][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.013226][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.015970][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.036014][ T5205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.039376][ T5205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.042175][ T5205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.047026][ T5205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.050290][ T5205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.081853][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.085117][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.088867][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.092603][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.095829][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.449430][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   60.475182][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   60.539085][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   60.609944][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.613524][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.616230][ T5833] bridge_slave_0: entered allmulticast mode
[   60.619662][ T5833] bridge_slave_0: entered promiscuous mode
[   60.626391][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.628871][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.631233][ T5833] bridge_slave_1: entered allmulticast mode
[   60.634140][ T5833] bridge_slave_1: entered promiscuous mode
[   60.668578][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.671048][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.674166][ T5836] bridge_slave_0: entered allmulticast mode
[   60.676931][ T5836] bridge_slave_0: entered promiscuous mode
[   60.680269][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.682558][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.686126][ T5836] bridge_slave_1: entered allmulticast mode
[   60.688902][ T5836] bridge_slave_1: entered promiscuous mode
[   60.698178][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.729906][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.749106][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.765797][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.768167][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.770587][ T5838] bridge_slave_0: entered allmulticast mode
[   60.773916][ T5838] bridge_slave_0: entered promiscuous mode
[   60.788904][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.797862][ T5833] team0: Port device team_slave_0 added
[   60.800190][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.802851][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.805618][ T5838] bridge_slave_1: entered allmulticast mode
[   60.808425][ T5838] bridge_slave_1: entered promiscuous mode
[   60.841876][ T5833] team0: Port device team_slave_1 added
[   60.862824][ T5836] team0: Port device team_slave_0 added
[   60.867276][ T5836] team0: Port device team_slave_1 added
[   60.886910][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.889145][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.897395][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.902749][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.907486][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.909713][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.918162][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.937011][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.948904][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.951357][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.960373][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.966394][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.968823][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.979083][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.032622][ T5838] team0: Port device team_slave_0 added
[   61.059611][ T5838] team0: Port device team_slave_1 added
[   61.070228][ T5836] hsr_slave_0: entered promiscuous mode
[   61.074205][ T5836] hsr_slave_1: entered promiscuous mode
[   61.080804][ T5833] hsr_slave_0: entered promiscuous mode
[   61.084010][ T5833] hsr_slave_1: entered promiscuous mode
[   61.086915][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.089749][ T5833] Cannot create hsr debugfs directory
[   61.112965][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.115935][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.124531][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.150945][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.154270][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.164176][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.286796][ T5838] hsr_slave_0: entered promiscuous mode
[   61.289884][ T5838] hsr_slave_1: entered promiscuous mode
[   61.292711][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.296637][ T5838] Cannot create hsr debugfs directory
[   61.495079][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.502555][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.519862][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.541394][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.596472][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.602589][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.616724][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.636998][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.698527][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.710122][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.724424][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.733877][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.792811][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.839889][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   61.852144][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.859436][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.862560][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.879677][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.882654][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.909113][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   61.936451][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.938919][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.950935][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.968353][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.971376][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.000207][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   62.025387][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.028146][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.055755][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.058490][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.074227][ T5205] Bluetooth: hci0: command tx timeout
[   62.075591][ T5835] Bluetooth: hci1: command tx timeout
[   62.164666][ T5835] Bluetooth: hci2: command tx timeout
[   62.238744][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.301900][ T5836] veth0_vlan: entered promiscuous mode
[   62.309659][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.320954][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.326614][ T5836] veth1_vlan: entered promiscuous mode
[   62.368933][ T5836] veth0_macvtap: entered promiscuous mode
[   62.385896][ T5836] veth1_macvtap: entered promiscuous mode
[   62.401671][ T5833] veth0_vlan: entered promiscuous mode
[   62.407294][ T5838] veth0_vlan: entered promiscuous mode
[   62.424658][ T5833] veth1_vlan: entered promiscuous mode
[   62.429301][ T5838] veth1_vlan: entered promiscuous mode
[   62.435648][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.448700][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.462342][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.467338][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.470627][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.478708][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.509270][ T5833] veth0_macvtap: entered promiscuous mode
[   62.527418][ T5838] veth0_macvtap: entered promiscuous mode
[   62.540459][ T5833] veth1_macvtap: entered promiscuous mode
[   62.546509][ T5838] veth1_macvtap: entered promiscuous mode
[   62.605922][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.622707][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.637226][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.639493][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.644629][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.646228][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.655293][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.658793][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.672095][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.696412][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.716382][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.719723][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.733782][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.737137][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.740618][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.746198][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.850224][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.861768][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.916762][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.920047][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.963911][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.967420][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.014483][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.017322][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.178631][   T33] audit: type=1800 audit(1751926587.266:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0
[   63.270822][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.511863][ T5936] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.780086][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37'.
[   64.156778][ T5835] Bluetooth: hci1: command tx timeout
[   64.163497][ T5835] Bluetooth: hci0: command tx timeout
[   64.234813][ T5835] Bluetooth: hci2: command tx timeout
[   64.409629][ T5991] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   64.599480][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'.
[   64.606376][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'.
[   64.612907][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'.
[   64.632956][ T6010] bridge0: entered promiscuous mode
[   64.644027][ T6010] macsec1: entered allmulticast mode
[   64.646314][ T6010] bridge0: entered allmulticast mode
[   64.658532][ T6010] bridge0: left allmulticast mode
[   64.660835][ T6010] bridge0: left promiscuous mode
[   64.687759][ T6014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.869004][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'.
[   65.069402][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'.
[   65.074109][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'.
[   65.089079][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'.
[   65.092677][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'.
[   65.096898][ T6043] Zero length message leads to an empty skb
[   66.152042][ T6067] xt_cgroup: xt_cgroup: no path or classid specified
[   66.166612][ T6069] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.92'.
[   66.233497][ T5835] Bluetooth: hci0: command tx timeout
[   66.235377][ T5835] Bluetooth: hci1: command tx timeout
[   66.276897][ T6079] netlink: 'syz.2.97': attribute type 29 has an invalid length.
[   66.314849][ T5835] Bluetooth: hci2: command tx timeout
[   66.571199][ T6099] C: renamed from team_slave_0 (while UP)
[   66.577595][ T6099] netlink: 'syz.0.107': attribute type 3 has an invalid length.
[   66.888053][ T6131] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   67.085086][ T6155] netlink: 'syz.1.133': attribute type 4 has an invalid length.
[   67.090585][ T6157] netlink: 'syz.2.135': attribute type 1 has an invalid length.
[   67.136317][ T6161] netlink: 'syz.2.137': attribute type 2 has an invalid length.
[   67.139098][ T6161] netlink: 'syz.2.137': attribute type 8 has an invalid length.
[   67.707222][ T6198] netlink: 'syz.2.154': attribute type 4 has an invalid length.
[   67.727330][ T6198] netlink: 'syz.2.154': attribute type 4 has an invalid length.
[   67.785727][ T6204] netlink: 'syz.1.157': attribute type 3 has an invalid length.
[   68.313907][ T5835] Bluetooth: hci1: command tx timeout
[   68.323160][ T5835] Bluetooth: hci0: command tx timeout
[   68.393197][ T5835] Bluetooth: hci2: command tx timeout
[   68.538019][ T6243] netlink: 'syz.0.175': attribute type 18 has an invalid length.
[   68.812125][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.815850][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.865546][ T6265] __nla_validate_parse: 15 callbacks suppressed
[   68.865560][ T6265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'.
[   68.916071][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.930116][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.982340][ T6257] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.986258][ T6257] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.989188][ T6257] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.992083][ T6257] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.020339][ T6269] bridge_slave_0: invalid flags given to default FDB implementation
[   69.031904][ T6271] vxcan3: entered allmulticast mode
[   69.059784][ T6257] syz.1.180 (6257) used greatest stack depth: 19704 bytes left
[   69.090968][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'.
[   69.111568][ T6275] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   69.224363][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'.
[   69.227430][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'.
[   69.358861][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'.
[   69.883733][ T6352] netlink: 44 bytes leftover after parsing attributes in process `syz.2.224'.
[   70.167333][ T6378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.497994][ T6412] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.506339][ T6412] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.784660][ T6441] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.261'.
[   71.035907][ T6471] netlink: 144 bytes leftover after parsing attributes in process `syz.1.276'.
[   71.046480][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.048862][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.075782][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[   71.085784][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[   71.353473][ T6509] syz.2.294 uses obsolete (PF_INET,SOCK_PACKET)
[   71.525424][ T6523] ipvlan2: entered promiscuous mode
[   71.576406][ T6529] sit0: entered promiscuous mode
[   72.284247][ T6601] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   72.476271][ T6621] syzkaller1: entered promiscuous mode
[   72.478185][ T6621] syzkaller1: entered allmulticast mode
[   72.735153][ T6644] netlink: 'syz.1.355': attribute type 11 has an invalid length.
[   72.813442][ T6651] validate_nla: 2 callbacks suppressed
[   72.813459][ T6651] netlink: 'syz.0.359': attribute type 3 has an invalid length.
[   73.096225][ T6671] netlink: 'syz.1.368': attribute type 1 has an invalid length.
[   73.274159][ T6684] netlink: 'syz.0.374': attribute type 58 has an invalid length.
[   73.366265][ T6691] xt_hashlimit: size too large, truncated to 1048576
[   73.884115][ T6721] macsec1: entered promiscuous mode
[   73.886448][ T6721] macsec1: entered allmulticast mode
[   74.095553][ T6736] netlink: 'syz.1.397': attribute type 30 has an invalid length.
[   74.106112][ T6736] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   74.114061][ T6736] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   74.318076][ T6753] bridge0: port 3(erspan0) entered blocking state
[   74.320676][ T6753] bridge0: port 3(erspan0) entered disabled state
[   74.323418][ T6753] erspan0: entered allmulticast mode
[   74.326942][ T6753] erspan0: left allmulticast mode
[   74.466045][ T6763] netlink: 'syz.1.411': attribute type 5 has an invalid length.
[   74.473363][ T5835] Bluetooth: hci2: command tx timeout
[   74.542260][ T6771] __nla_validate_parse: 12 callbacks suppressed
[   74.542271][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[   74.781371][ T6798] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   74.868052][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.426'.
[   74.964878][ T6821] netlink: 'syz.2.432': attribute type 13 has an invalid length.
[   74.967811][ T6821] netlink: 'syz.2.432': attribute type 17 has an invalid length.
[   74.970393][ T6821] netlink: 'syz.2.432': attribute type 27 has an invalid length.
[   75.006656][ T6825] netlink: 'syz.2.435': attribute type 1 has an invalid length.
[   75.009670][ T6825] netlink: 224 bytes leftover after parsing attributes in process `syz.2.435'.
[   75.304203][ T6844] netlink: 'syz.1.443': attribute type 10 has an invalid length.
[   75.311386][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.322469][ T6844] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   75.954355][ T6870] netlink: 830 bytes leftover after parsing attributes in process `syz.0.457'.
[   76.039475][ T6874] netlink: 48 bytes leftover after parsing attributes in process `syz.1.459'.
[   76.155985][ T6883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.167112][ T6883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.170032][ T6883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.182931][ T6883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.284510][ T6890] nbd: socks must be embedded in a SOCK_ITEM attr
[   76.290009][ T6890] block nbd0: shutting down sockets
[   76.722127][ T6913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.982553][ T6980] netlink: 'syz.2.505': attribute type 27 has an invalid length.
[   78.401920][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[   78.761824][ T7007] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   78.764666][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'.
[   79.091327][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.528'.
[   79.098203][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.528'.
[   79.105911][ T7036] geneve2: entered allmulticast mode
[   79.189257][ T5279] IPVS: starting estimator thread 0...
[   79.283476][ T7044] IPVS: using max 53 ests per chain, 127200 per kthread
[   79.334668][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.537'.
[   79.442163][ T5842] IPVS: stop unused estimator thread 0...
[   79.545375][ T7067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.543'.
[   79.548707][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'.
[   79.552225][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'.
[   79.770183][ T7088] netlink: 56 bytes leftover after parsing attributes in process `syz.1.552'.
[   79.781752][ T7088] Bluetooth: MGMT ver 1.23
[   80.115407][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'.
[   80.187230][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'.
[   80.190658][ T7117] netlink: 152 bytes leftover after parsing attributes in process `syz.2.565'.
[   80.207088][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'.
[   80.219699][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[   80.782953][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'.
[   80.876247][ T7175] netlink: 'syz.0.593': attribute type 26 has an invalid length.
[   81.006171][ T7184] syz.1.594: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.033462][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.1.594 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   81.033483][ T7184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.033493][ T7184] Call Trace:
[   81.033499][ T7184]  <TASK>
[   81.033504][ T7184]  dump_stack_lvl+0x189/0x250
[   81.033529][ T7184]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.033547][ T7184]  ? __pfx__printk+0x10/0x10
[   81.033560][ T7184]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.033572][ T7184]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.033586][ T7184]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   81.033599][ T7184]  warn_alloc+0x214/0x310
[   81.033611][ T7184]  ? stack_depot_save_flags+0x429/0x900
[   81.033625][ T7184]  ? __pfx_warn_alloc+0x10/0x10
[   81.033637][ T7184]  ? kasan_save_track+0x4f/0x80
[   81.033652][ T7184]  ? xskq_create+0x56/0x170
[   81.033667][ T7184]  ? xsk_init_queue+0xb0/0x110
[   81.033686][ T7184]  ? xsk_setsockopt+0x43f/0x710
[   81.033699][ T7184]  ? do_sock_setsockopt+0x25a/0x3e0
[   81.033713][ T7184]  ? __x64_sys_setsockopt+0x18b/0x220
[   81.033725][ T7184]  ? do_syscall_64+0xfa/0x3b0
[   81.033734][ T7184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.033778][ T7184]  __vmalloc_node_range_noprof+0x125/0x12f0
[   81.033817][ T7184]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.033837][ T7184]  ? __kasan_kmalloc+0x93/0xb0
[   81.033848][ T7184]  vmalloc_user_noprof+0xad/0xf0
[   81.033860][ T7184]  ? xskq_create+0xbf/0x170
[   81.033878][ T7184]  xskq_create+0xbf/0x170
[   81.033895][ T7184]  xsk_init_queue+0xb0/0x110
[   81.033913][ T7184]  xsk_setsockopt+0x43f/0x710
[   81.033931][ T7184]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.033945][ T7184]  ? __lock_acquire+0xab9/0xd20
[   81.033968][ T7184]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   81.033984][ T7184]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.033999][ T7184]  do_sock_setsockopt+0x25a/0x3e0
[   81.034016][ T7184]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   81.034031][ T7184]  ? __fget_files+0x2a/0x420
[   81.034052][ T7184]  __x64_sys_setsockopt+0x18b/0x220
[   81.034069][ T7184]  do_syscall_64+0xfa/0x3b0
[   81.034080][ T7184]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.034095][ T7184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.034107][ T7184]  ? exc_page_fault+0x9f/0xf0
[   81.034124][ T7184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.034136][ T7184] RIP: 0033:0x7f9f5fb8e929
[   81.034148][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.034158][ T7184] RSP: 002b:00007f9f609ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.034173][ T7184] RAX: ffffffffffffffda RBX: 00007f9f5fdb6080 RCX: 00007f9f5fb8e929
[   81.034181][ T7184] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   81.034187][ T7184] RBP: 00007f9f5fc10b39 R08: 0000000000000004 R09: 0000000000000000
[   81.034194][ T7184] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.034201][ T7184] R13: 0000000000000000 R14: 00007f9f5fdb6080 R15: 00007ffd62086a48
[   81.034221][ T7184]  </TASK>
[   81.034226][ T7184] Mem-Info:
[   81.187443][ T7184] active_anon:4781 inactive_anon:0 isolated_anon:0
[   81.187443][ T7184]  active_file:1027 inactive_file:38216 isolated_file:0
[   81.187443][ T7184]  unevictable:1768 dirty:451 writeback:0
[   81.187443][ T7184]  slab_reclaimable:9208 slab_unreclaimable:52675
[   81.187443][ T7184]  mapped:18104 shmem:2438 pagetables:984
[   81.187443][ T7184]  sec_pagetables:0 bounce:0
[   81.187443][ T7184]  kernel_misc_reclaimable:0
[   81.187443][ T7184]  free:297535 free_pcp:22998 free_cma:0
[   81.229504][ T7184] Node 0 active_anon:11244kB inactive_anon:0kB active_file:2676kB inactive_file:134580kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47444kB dirty:1424kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3852kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.242332][ T7184] Node 1 active_anon:7880kB inactive_anon:0kB active_file:1432kB inactive_file:18284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24972kB dirty:380kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7512kB pagetables:1516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.257538][ T7184] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.269029][ T7184] lowmem_reserve[]: 0 815 815 815 815
[   81.271214][ T7184] Node 0 DMA32 free:291760kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11244kB inactive_anon:0kB active_file:2676kB inactive_file:134580kB unevictable:3536kB writepending:1424kB present:1556484kB managed:834736kB mlocked:0kB bounce:0kB free_pcp:39528kB local_pcp:20100kB free_cma:0kB
[   81.295143][  T790] cfg80211: failed to load regulatory.db
[   81.302946][ T7184] lowmem_reserve[]: 0 0 0 0 0
[   81.309146][ T7184] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.340639][ T7184] lowmem_reserve[]: 0 0 854 854 854
[   81.353144][ T7184] Node 1 Normal free:423188kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7864kB inactive_anon:0kB active_file:1432kB inactive_file:18284kB unevictable:3536kB writepending:380kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:53596kB local_pcp:21988kB free_cma:0kB
[   81.364581][ T7184] lowmem_reserve[]: 0 0 0 0 0
[   81.366367][ T7184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.373419][ T7184] Node 0 DMA32: 462*4kB (UM) 285*8kB (UME) 225*16kB (UM) 282*32kB (UME) 85*64kB (UME) 18*128kB (UM) 24*256kB (UM) 10*512kB (M) 6*1024kB (UME) 0*2048kB 61*4096kB (M) = 291760kB
[   81.380449][ T7184] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   81.388434][ T7184] Node 1 Normal: 39*4kB (UE) 9*8kB (UE) 149*16kB (UME) 138*32kB (UME) 97*64kB (UE) 18*128kB (UE) 6*256kB (UM) 5*512kB (UME) 6*1024kB (UME) 2*2048kB (UM) 96*4096kB (M) = 423092kB
[   81.413363][ T7184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.419097][ T7184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.433217][ T7184] 41681 total pagecache pages
[   81.449382][ T7184] 0 pages in swap cache
[   81.451707][ T7184] Free swap  = 124996kB
[   81.453946][ T7184] Total swap = 124996kB
[   81.455702][ T7184] 786301 pages RAM
[   81.459542][ T7184] 0 pages HighMem/MovableOnly
[   81.461369][ T7184] 240369 pages reserved
[   81.469682][ T7184] 0 pages cma reserved
[   81.554862][ T7209] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   81.791088][ T7229] netlink: 'syz.2.617': attribute type 1 has an invalid length.
[   81.797245][ T7177] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   82.018284][ T7257] netlink: 'syz.1.627': attribute type 21 has an invalid length.
[   82.261022][ T7284] x_tables: ip_tables: osf match: only valid for protocol 6
[   82.779082][ T7335] netlink: 'syz.0.663': attribute type 11 has an invalid length.
[   82.979323][ T7345] netlink: 'syz.0.668': attribute type 2 has an invalid length.
[   83.468151][ T7374] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[   83.741917][ T7402] netlink: 'syz.0.694': attribute type 9 has an invalid length.
[   83.760379][ T7402] netlink: 'syz.0.694': attribute type 6 has an invalid length.
[   83.833621][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   83.848937][ T7406] trusted_key: syz.1.697 sent an empty control message without MSG_MORE.
[   84.124835][ T7421] dummy0: entered allmulticast mode
[   84.127124][ T7420] dummy0: left allmulticast mode
[   84.585915][ T7443] __nla_validate_parse: 8 callbacks suppressed
[   84.585933][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[   84.673769][ T7452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.996333][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'.
[   85.010258][ T7474] ipvlan3: entered promiscuous mode
[   85.098551][ T7483] netlink: 'syz.0.733': attribute type 1 has an invalid length.
[   85.101150][ T7483] netlink: 'syz.0.733': attribute type 11 has an invalid length.
[   85.105508][ T7483] netlink: 220 bytes leftover after parsing attributes in process `syz.0.733'.
[   86.634229][ T7513] netlink: 'syz.1.747': attribute type 2 has an invalid length.
[   86.638435][ T7513] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[   87.020539][ T7561] bridge1: the hash_elasticity option has been deprecated and is always 16
[   87.028513][ T7561] bridge1: entered allmulticast mode
[   87.298202][ T7594] netlink: 'syz.1.785': attribute type 10 has an invalid length.
[   87.301027][ T7594] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.343113][ T7596] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[   87.345724][ T7596] netlink: 'syz.0.787': attribute type 3 has an invalid length.
[   87.348396][ T7596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.787'.
[   87.351361][ T7596] NCSI netlink: No device for ifindex 246
[   87.422118][ T7607] netlink: 208 bytes leftover after parsing attributes in process `syz.0.793'.
[   87.628906][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'.
[   87.632716][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'.
[   87.852828][ T7642] ip6gre1: entered promiscuous mode
[   87.928454][ T7638] delete_channel: no stack
[   88.877951][ T7677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.317223][ T7707] ieee802154 phy0 wpan0: encryption failed: -90
[   89.368937][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'.
[   90.007372][ T7780] veth0: entered promiscuous mode
[   90.009465][ T7779] veth0: left promiscuous mode
[   90.267666][  T790] IPVS: starting estimator thread 0...
[   90.363159][ T7790] IPVS: using max 82 ests per chain, 196800 per kthread
[   90.476781][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'.
[   90.502004][ T7808] macvtap0: entered promiscuous mode
[   90.513155][ T7808] team0: entered promiscuous mode
[   90.515446][ T7808] team_slave_0: entered promiscuous mode
[   90.518418][ T7808] team_slave_1: entered promiscuous mode
[   90.521295][ T7808] macvtap0: entered allmulticast mode
[   90.528952][ T7808] team0: entered allmulticast mode
[   90.532044][ T7808] team_slave_0: entered allmulticast mode
[   90.536483][ T7808] team_slave_1: entered allmulticast mode
[   90.539052][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'.
[   90.543585][ T7808] 8021q: adding VLAN 0 to HW filter on device macvtap0
[   90.576164][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'.
[   90.666906][ T7810] team0: left allmulticast mode
[   90.669041][ T7810] team_slave_0: left allmulticast mode
[   90.671362][ T7810] team_slave_1: left allmulticast mode
[   90.676846][ T7810] team0: left promiscuous mode
[   90.678856][ T7810] team_slave_0: left promiscuous mode
[   90.681245][ T7810] team_slave_1: left promiscuous mode
[   90.717950][ T7819] sctp: [Deprecated]: syz.0.881 (pid 7819) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.717950][ T7819] Use struct sctp_sack_info instead
[   90.936564][   T33] audit: type=1800 audit(1751926615.026:3): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.889" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1672 res=0 errno=0
[   91.235001][ T7848] netlink: 10 bytes leftover after parsing attributes in process `syz.1.894'.
[   91.360724][ T7853] netlink: 'syz.0.897': attribute type 10 has an invalid length.
[   91.366538][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.897'.
[   91.370458][ T7853] dummy0: entered promiscuous mode
[   91.373373][ T7853] bridge0: port 3(dummy0) entered blocking state
[   91.375637][ T7853] bridge0: port 3(dummy0) entered disabled state
[   91.377796][ T7853] dummy0: entered allmulticast mode
[   91.380960][ T7853] bridge0: port 3(dummy0) entered blocking state
[   91.383266][ T7853] bridge0: port 3(dummy0) entered forwarding state
[   91.611193][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[   91.634231][ T7884] netlink: 'syz.2.912': attribute type 9 has an invalid length.
[   91.732868][ T7893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.915'.
[   91.950394][ T7913] netlink: 312 bytes leftover after parsing attributes in process `syz.2.926'.
[   92.729881][ T7943] netlink: 'syz.0.940': attribute type 29 has an invalid length.
[   92.733558][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'.
[   92.815270][ T7949] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.943'.
[   92.861162][ T7951] tipc: Started in network mode
[   92.863141][ T7951] tipc: Node identity 7e605e03d6ff, cluster identity 4711
[   92.865720][ T7951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.905350][ T7951] syzkaller0: entered promiscuous mode
[   92.907663][ T7951] syzkaller0: entered allmulticast mode
[   92.910735][ T7951] tipc: Resetting bearer <eth:syzkaller0>
[   92.917336][ T7950] tipc: Resetting bearer <eth:syzkaller0>
[   93.732964][ T7950] tipc: Disabling bearer <eth:syzkaller0>
[   93.865160][ T7967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.396079][ T8014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   94.487016][ T8024] nbd: must specify at least one socket
[   96.013665][ T8086] __nla_validate_parse: 1 callbacks suppressed
[   96.013682][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'.
[   96.250793][ T8109] netlink: 'syz.2.1016': attribute type 3 has an invalid length.
[   96.294508][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[   96.307620][ T8112] vlan2: entered promiscuous mode
[   96.895311][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[   96.898887][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'.
[   96.923800][ T8166] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.927824][ T8166] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.931417][ T8166] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.934836][ T8166] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.305793][ T8185] netlink: 'syz.1.1044': attribute type 1 has an invalid length.
[   97.310216][ T8185] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1044'.
[   97.322236][ T8187] pim6reg: entered allmulticast mode
[   97.429638][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'.
[   97.567403][ T8209] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   97.971171][ T8242] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1068'.
[   98.434406][ T8278] tc_dump_action: action bad kind
[   98.435313][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'.
[   98.443438][ T8277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1084'.
[   98.479904][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'.
[   98.485161][ T8272] block nbd0: server does not support multiple connections per device.
[   98.491378][ T8272] block nbd0: shutting down sockets
[   98.578074][ T8282] SET target dimension over the limit!
[   99.467098][ T8369] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[   99.621600][ T8378] vxcan1: entered allmulticast mode
[   99.628604][ T8378] vxcan1: left allmulticast mode
[   99.703192][ T8381] lo speed is unknown, defaulting to 1000
[   99.708181][ T8381] lo speed is unknown, defaulting to 1000
[   99.711804][ T8381] lo speed is unknown, defaulting to 1000
[   99.940912][ T5893] lo speed is unknown, defaulting to 1000
[   99.954564][ T8381] infiniband syz0: set active
[   99.960218][ T8381] infiniband syz0: added lo
[  100.017751][ T8381] RDS/IB: syz0: added
[  100.019548][ T8381] smc: adding ib device syz0 with port count 1
[  100.021727][ T8395] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  100.025387][ T8381] smc:    ib device syz0 port 1 has pnetid 
[  100.029260][ T5893] lo speed is unknown, defaulting to 1000
[  100.032678][ T8381] lo speed is unknown, defaulting to 1000
[  100.165950][ T8381] lo speed is unknown, defaulting to 1000
[  100.275556][ T8381] lo speed is unknown, defaulting to 1000
[  100.819384][ T5205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  100.823318][ T5205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  100.826887][ T5205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  100.831049][ T5205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  100.834360][ T5205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  100.877114][ T8426] lo speed is unknown, defaulting to 1000
[  100.904393][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.082829][ T8443] __nla_validate_parse: 6 callbacks suppressed
[  101.093576][ T8443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1149'.
[  101.306992][ T8426] chnl_net:caif_netlink_parms(): no params data found
[  101.654955][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.657458][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.659979][ T8426] bridge_slave_0: entered allmulticast mode
[  101.666059][ T8426] bridge_slave_0: entered promiscuous mode
[  101.671326][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.675271][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.678028][ T8426] bridge_slave_1: entered allmulticast mode
[  101.681445][ T8426] bridge_slave_1: entered promiscuous mode
[  101.725245][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.731552][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.781834][ T8426] team0: Port device team_slave_0 added
[  101.792445][ T8426] team0: Port device team_slave_1 added
[  101.901077][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.922706][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.932388][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.943416][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.946181][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.965285][ T8500] openvswitch: netlink: IPv4 tun info is not correct
[  101.968577][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.038224][ T8426] hsr_slave_0: entered promiscuous mode
[  102.040957][ T8426] hsr_slave_1: entered promiscuous mode
[  102.045367][ T8426] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.048196][ T8426] Cannot create hsr debugfs directory
[  102.127752][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  102.172418][ T8426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.180424][ T8426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.239389][ T8426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.245257][ T8426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.288948][ T8521] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1179'.
[  102.307768][ T8426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.315289][ T8426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.364568][ T8426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.368091][ T8426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.503950][ T8426] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.510148][ T8426] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.528246][ T8426] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.534770][ T8426] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.661747][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.683279][ T8426] 8021q: adding VLAN 0 to HW filter on device team0
[  102.689946][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.692636][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.703994][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.706384][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.757554][ T8426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.857338][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.887021][ T5205] Bluetooth: hci1: command tx timeout
[  102.919498][ T8426] veth0_vlan: entered promiscuous mode
[  102.930917][ T8426] veth1_vlan: entered promiscuous mode
[  102.957443][ T8426] veth0_macvtap: entered promiscuous mode
[  102.962578][ T8426] veth1_macvtap: entered promiscuous mode
[  102.980721][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.999062][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.011943][ T8426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.022630][ T8426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.030052][ T8426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.035419][ T8426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.112247][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1198'.
[  103.144393][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.149622][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.198650][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.201854][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.298909][ T8584] netlink: 'syz.0.1201': attribute type 1 has an invalid length.
[  103.302030][ T8584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1201'.
[  103.461396][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'.
[  103.975769][ T8619] netlink: 'syz.0.1217': attribute type 2 has an invalid length.
[  104.060951][ T8629] netlink: 'syz.2.1222': attribute type 1 has an invalid length.
[  104.182725][ T8641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.190133][   T24] lo speed is unknown, defaulting to 1000
[  104.608338][ T8673] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.044013][ T8717] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1264'.
[  105.048039][ T8717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1264'.
[  105.097222][ T5842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.346396][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.350737][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.355533][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.359530][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.363646][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.395008][ T8727] lo speed is unknown, defaulting to 1000
[  105.607466][ T8727] chnl_net:caif_netlink_parms(): no params data found
[  105.667259][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.670522][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.675450][ T8727] bridge_slave_0: entered allmulticast mode
[  105.679132][ T8727] bridge_slave_0: entered promiscuous mode
[  105.687923][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.691297][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.721214][ T8727] bridge_slave_1: entered allmulticast mode
[  105.730842][ T8727] bridge_slave_1: entered promiscuous mode
[  105.769078][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.776019][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.784721][ T8744] netlink: 'syz.0.1272': attribute type 11 has an invalid length.
[  105.868378][ T8727] team0: Port device team_slave_0 added
[  105.895095][ T8727] team0: Port device team_slave_1 added
[  105.941983][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.946077][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.957796][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.965820][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.968652][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.978286][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.016352][ T8756] Cannot find del_set index 2 as target
[  106.026578][ T8727] hsr_slave_0: entered promiscuous mode
[  106.031137][ T8727] hsr_slave_1: entered promiscuous mode
[  106.035166][ T8727] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.038507][ T8727] Cannot create hsr debugfs directory
[  106.090122][ T8762] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  106.098380][ T8762] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  106.355906][ T8783] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  106.358849][ T8783] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  106.417627][ T8791] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1294'.
[  106.647217][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'.
[  106.650069][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'.
[  106.741189][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'.
[  106.746491][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'.
[  106.771016][ T8813] veth0_to_bond: entered allmulticast mode
[  106.899699][ T8825] netlink: 'syz.0.1311': attribute type 2 has an invalid length.
[  106.997738][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'.
[  107.019509][ T8834] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  107.085327][ T5842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.147468][ T5842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.215769][ T5842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.337671][ T8848] netlink: 'syz.0.1321': attribute type 11 has an invalid length.
[  107.377557][ T5842] bridge_slave_1: left allmulticast mode
[  107.382490][ T5842] bridge_slave_1: left promiscuous mode
[  107.385864][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.391893][ T5842] bridge_slave_0: left allmulticast mode
[  107.395249][ T5842] bridge_slave_0: left promiscuous mode
[  107.397287][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.433472][ T5835] Bluetooth: hci1: command tx timeout
[  107.546082][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'.
[  107.684954][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.690514][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.698163][ T5842] bond0 (unregistering): Released all slaves
[  107.720413][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.746163][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.243644][ T8872] IPVS: Scheduler module ip_vs_sip not found
[  108.248772][ T8872] IPVS: length: 8 != 446622349272
[  108.285908][ T8727] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  108.303451][ T8727] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  108.315313][ T8727] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  108.341494][ T8727] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  108.418910][ T5842] hsr_slave_0: left promiscuous mode
[  108.422468][ T5842] hsr_slave_1: left promiscuous mode
[  108.425317][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.427744][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.431076][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.434124][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.466490][ T5842] veth1_macvtap: left promiscuous mode
[  108.468514][ T5842] veth0_macvtap: left promiscuous mode
[  108.470356][ T5842] veth1_vlan: left promiscuous mode
[  108.473681][ T5842] veth0_vlan: left promiscuous mode
[  108.864602][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  108.895081][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  109.471579][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'.
[  109.472224][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.481204][ T8909] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1338'.
[  109.513988][ T5835] Bluetooth: hci1: command tx timeout
[  109.528261][ T8727] 8021q: adding VLAN 0 to HW filter on device team0
[  109.547815][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.551168][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.573897][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.576412][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.649529][ T8727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  109.707920][ T8920] sctp: [Deprecated]: syz.0.1344 (pid 8920) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.707920][ T8920] Use struct sctp_sack_info instead
[  109.772058][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.780757][ T8927] netlink: 'syz.0.1345': attribute type 27 has an invalid length.
[  109.827307][ T8727] veth0_vlan: entered promiscuous mode
[  109.839612][ T8727] veth1_vlan: entered promiscuous mode
[  109.851003][ T8931] netlink: 'syz.2.1348': attribute type 21 has an invalid length.
[  109.870828][ T8727] veth0_macvtap: entered promiscuous mode
[  109.875816][ T8727] veth1_macvtap: entered promiscuous mode
[  109.888254][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.897157][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.905227][ T8727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.908339][ T8727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.918146][ T8727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.921042][ T8727] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.932218][ T8935] netem: incorrect ge model size
[  109.937777][ T8935] netem: change failed
[  109.962710][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'.
[  110.027274][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.029887][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.070450][  T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.076200][  T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.558020][ T8991] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.573999][ T8977] netlink: 'syz.0.1368': attribute type 3 has an invalid length.
[  110.585260][ T8977] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.939816][ T9009] lo speed is unknown, defaulting to 1000
[  111.705915][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.169517][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.175314][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.179790][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.187714][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.191798][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.249523][ T9046] lo speed is unknown, defaulting to 1000
[  112.556945][ T9074] __nla_validate_parse: 6 callbacks suppressed
[  112.556961][ T9074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'.
[  112.585928][ T9046] chnl_net:caif_netlink_parms(): no params data found
[  112.676204][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'.
[  112.696760][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.699619][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.704063][ T9046] bridge_slave_0: entered allmulticast mode
[  112.715154][ T9046] bridge_slave_0: entered promiscuous mode
[  112.719594][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.722589][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.725287][ T9046] bridge_slave_1: entered allmulticast mode
[  112.728138][ T9046] bridge_slave_1: entered promiscuous mode
[  112.744358][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'.
[  112.773663][ T9046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.792066][ T9046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.869823][ T9046] team0: Port device team_slave_0 added
[  112.873833][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  112.881385][ T9046] team0: Port device team_slave_1 added
[  112.955503][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.973358][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.993958][ T9046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.998693][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.001168][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.019037][ T9046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.027038][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'.
[  113.072829][ T9046] hsr_slave_0: entered promiscuous mode
[  113.078087][ T9046] hsr_slave_1: entered promiscuous mode
[  113.080455][ T9046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.084994][ T9046] Cannot create hsr debugfs directory
[  113.197780][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.369967][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1428'.
[  113.373665][ T9126] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  113.406477][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.482469][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.768245][   T13] bridge_slave_1: left allmulticast mode
[  113.776549][   T13] bridge_slave_1: left promiscuous mode
[  113.778538][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.791233][   T13] bridge_slave_0: left allmulticast mode
[  113.793654][   T13] bridge_slave_0: left promiscuous mode
[  113.795655][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.076060][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.081264][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.089388][   T13] bond0 (unregistering): Released all slaves
[  114.112216][ T9145] lo: entered promiscuous mode
[  114.121083][ T9145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.234552][ T5835] Bluetooth: hci1: command tx timeout
[  114.405222][ T9046] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  114.417440][ T9046] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  114.425115][ T9046] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  114.442826][ T9046] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  114.593619][   T13] hsr_slave_0: left promiscuous mode
[  114.597174][   T13] hsr_slave_1: left promiscuous mode
[  114.599707][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.607746][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.617048][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.621988][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.662379][   T13] veth1_macvtap: left promiscuous mode
[  114.680531][   T13] veth0_macvtap: left promiscuous mode
[  114.694424][   T13] veth1_vlan: left promiscuous mode
[  114.696953][   T13] veth0_vlan: left promiscuous mode
[  114.762768][ T9185] ieee802154 phy0 wpan0: encryption failed: -126
[  115.129929][   T13] team0 (unregistering): Port device team_slave_1 removed
[  115.168523][   T13] team0 (unregistering): Port device team_slave_0 removed
[  116.036371][ T9194] Driver unsupported XDP return value 0 on prog  (id 201) dev N/A, expect packet loss!
[  116.186555][ T9200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1452'.
[  116.313465][ T5835] Bluetooth: hci1: command tx timeout
[  117.176916][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.219087][ T9046] 8021q: adding VLAN 0 to HW filter on device team0
[  117.242158][  T169] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.245508][  T169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.258322][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'.
[  117.266484][  T169] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.269668][  T169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.628865][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.641116][ T9229] netlink: 'syz.0.1463': attribute type 303 has an invalid length.
[  117.724404][ T9046] veth0_vlan: entered promiscuous mode
[  117.730803][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  117.756823][ T9046] veth1_vlan: entered promiscuous mode
[  117.765354][ T9224] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  117.780226][ T9224] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  117.827703][ T9046] veth0_macvtap: entered promiscuous mode
[  117.841898][ T9046] veth1_macvtap: entered promiscuous mode
[  117.878998][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.886435][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.892033][ T9046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.895801][ T9046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.898755][ T9046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.901791][ T9046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.989991][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.994166][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.013464][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.016117][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.889294][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.098491][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.493894][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.662211][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.672955][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.679394][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.683677][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.686922][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.688880][ T9284] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1486'.
[  119.727894][ T9281] lo speed is unknown, defaulting to 1000
[  119.945535][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.072596][ T9281] chnl_net:caif_netlink_parms(): no params data found
[  120.202904][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.213304][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.215947][ T9281] bridge_slave_0: entered allmulticast mode
[  120.219264][ T9281] bridge_slave_0: entered promiscuous mode
[  120.227984][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.231253][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.243748][ T9281] bridge_slave_1: entered allmulticast mode
[  120.247771][ T9281] bridge_slave_1: entered promiscuous mode
[  120.304854][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.310283][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.359502][ T9281] team0: Port device team_slave_0 added
[  120.396113][ T9281] team0: Port device team_slave_1 added
[  120.480852][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1506'.
[  120.490417][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.495056][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.507034][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.512618][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.517900][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.528447][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.532344][   T12] bridge_slave_1: left allmulticast mode
[  120.535501][   T12] bridge_slave_1: left promiscuous mode
[  120.545734][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.550092][   T12] bridge_slave_0: left allmulticast mode
[  120.552111][   T12] bridge_slave_0: left promiscuous mode
[  120.556513][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.935617][ T9345] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  120.986880][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.996376][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.001485][   T12] bond0 (unregistering): Released all slaves
[  121.129144][ T9281] hsr_slave_0: entered promiscuous mode
[  121.132743][ T9281] hsr_slave_1: entered promiscuous mode
[  121.148379][ T9281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.151165][ T9281] Cannot create hsr debugfs directory
[  121.763872][ T5835] Bluetooth: hci1: command tx timeout
[  121.776255][   T12] hsr_slave_0: left promiscuous mode
[  121.782896][   T12] hsr_slave_1: left promiscuous mode
[  121.797884][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.817974][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.826713][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.830020][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.888720][   T12] veth1_macvtap: left promiscuous mode
[  121.891171][   T12] veth0_macvtap: left promiscuous mode
[  121.911646][   T12] veth1_vlan: left promiscuous mode
[  121.913990][   T12] veth0_vlan: left promiscuous mode
[  122.390382][   T12] team0 (unregistering): Port device team_slave_1 removed
[  122.425561][   T12] team0 (unregistering): Port device team_slave_0 removed
[  122.834573][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'.
[  123.206750][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.210307][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.366407][ T9390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.385764][ T9390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.602944][ T9390] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.609134][ T9390] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.613241][ T9390] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.617538][ T9390] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.715002][ T9281] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  123.728521][ T9281] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  123.751541][ T9281] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  123.769395][ T9281] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  123.781386][ T9399] netlink: 'syz.2.1527': attribute type 1 has an invalid length.
[  123.834699][ T5835] Bluetooth: hci1: command tx timeout
[  123.874325][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'.
[  123.901884][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.912578][ T9281] 8021q: adding VLAN 0 to HW filter on device team0
[  123.922697][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.925439][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.941056][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.943819][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.138668][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.180905][ T9281] veth0_vlan: entered promiscuous mode
[  124.188004][ T9281] veth1_vlan: entered promiscuous mode
[  124.202473][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1535'.
[  124.213530][ T9281] veth0_macvtap: entered promiscuous mode
[  124.220410][ T9281] veth1_macvtap: entered promiscuous mode
[  124.224104][ T9437] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1535'.
[  124.246898][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.255384][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.266582][ T9281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.269439][ T9281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.272810][ T9281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.286782][ T9281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.393459][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.396008][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.419785][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.423877][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.525566][ T9450] lo speed is unknown, defaulting to 1000
[  125.330415][   T12] syzkaller0: tun_net_xmit 76
[  125.339339][   T12] syzkaller0: tun_net_xmit 48
[  125.358040][ T9455] syzkaller0: create flow: hash 3726407159 index 1
[  125.365342][ T5892] syzkaller0: tun_net_xmit 76
[  125.393247][ T9454] syzkaller0: delete flow: hash 3726407159 index 1
[  126.745335][ T9459] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  126.852513][ T9463] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  126.935562][ T9470] ip6gretap2: entered promiscuous mode
[  127.136874][ T9490] lo speed is unknown, defaulting to 1000
[  127.229994][ T8843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.310050][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'.
[  128.085357][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1570'.
[  128.138091][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.141886][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.146786][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.155936][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.159898][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.196299][ T9521] lo speed is unknown, defaulting to 1000
[  128.284185][ T8843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.332217][ T9531] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.335591][ T9531] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.339246][ T9531] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.342463][ T9531] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.385289][ T9531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.416211][ T8843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.476464][ T9531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.496399][ T8843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.518344][ T9531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.606303][ T9541] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  128.675902][ T9531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.740876][ T8843] bridge_slave_1: left allmulticast mode
[  128.744296][ T8843] bridge_slave_1: left promiscuous mode
[  128.746338][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.765319][ T8843] bridge_slave_0: left allmulticast mode
[  128.767931][ T8843] bridge_slave_0: left promiscuous mode
[  128.770689][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.846628][ T9560] netlink: 'syz.0.1586': attribute type 2 has an invalid length.
[  129.154829][ T8843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.159834][ T8843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.169262][ T8843] bond0 (unregistering): Released all slaves
[  129.191867][ T9521] chnl_net:caif_netlink_parms(): no params data found
[  129.222653][ T9531] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.334900][ T9531] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.412427][ T9531] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.480043][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.485995][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'.
[  129.488565][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.494046][ T9521] bridge_slave_0: entered allmulticast mode
[  129.498401][ T9521] bridge_slave_0: entered promiscuous mode
[  129.517401][ T9531] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.537118][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.545585][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.548695][ T9521] bridge_slave_1: entered allmulticast mode
[  129.607991][ T9521] bridge_slave_1: entered promiscuous mode
[  129.722060][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.735457][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.815279][ T8843] hsr_slave_0: left promiscuous mode
[  129.818850][ T8843] hsr_slave_1: left promiscuous mode
[  129.821907][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.828354][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.838553][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.841826][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.861447][ T8843] veth1_macvtap: left promiscuous mode
[  129.866000][ T8843] veth0_macvtap: left promiscuous mode
[  129.868806][ T8843] veth1_vlan: left promiscuous mode
[  129.871676][ T8843] veth0_vlan: left promiscuous mode
[  130.238710][   T55] Bluetooth: hci1: command tx timeout
[  130.441214][ T8843] team0 (unregistering): Port device team_slave_1 removed
[  130.478918][ T8843] team0 (unregistering): Port device team_slave_0 removed
[  130.825743][ T9594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1598'.
[  130.842382][ T9521] team0: Port device team_slave_0 added
[  130.858057][ T9521] team0: Port device team_slave_1 added
[  130.918613][ T9615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1608'.
[  130.922619][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'.
[  130.929163][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.932433][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.953607][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.983735][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.986795][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.998655][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.115240][ T9521] hsr_slave_0: entered promiscuous mode
[  131.117604][ T9521] hsr_slave_1: entered promiscuous mode
[  131.119787][ T9521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.130798][ T9521] Cannot create hsr debugfs directory
[  131.499153][ T9648] xt_TCPMSS: Only works on TCP SYN packets
[  131.929652][ T9521] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  131.937272][ T9521] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  131.948140][ T9521] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  131.959180][ T9521] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  132.082526][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.105619][ T9521] 8021q: adding VLAN 0 to HW filter on device team0
[  132.115806][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.118281][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.131173][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.133802][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.166753][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'.
[  132.179795][ T9521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  132.183880][ T9521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.312785][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.313501][   T55] Bluetooth: hci1: command tx timeout
[  132.356779][ T9521] veth0_vlan: entered promiscuous mode
[  132.365556][ T9521] veth1_vlan: entered promiscuous mode
[  132.390629][ T9521] veth0_macvtap: entered promiscuous mode
[  132.398921][ T9521] veth1_macvtap: entered promiscuous mode
[  132.410545][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.422207][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.428423][ T9521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.431386][ T9521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.437296][ T9521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.440507][ T9521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.476750][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.481817][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.553096][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.556944][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.572780][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.577305][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.652695][ T9686] netlink: 'syz.2.1634': attribute type 2 has an invalid length.
[  133.183901][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'.
[  133.655780][ T9714] sctp: [Deprecated]: syz.0.1647 (pid 9714) Use of int in max_burst socket option deprecated.
[  133.655780][ T9714] Use struct sctp_assoc_value instead
[  133.689020][ T9716] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  134.234792][ T9762] rdma_op ffff888039d809f0 conn xmit_rdma 0000000000000000
[  134.822967][ T8843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.570162][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.575130][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.578594][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.585824][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.590918][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.632128][ T9823] lo speed is unknown, defaulting to 1000
[  135.840438][ T9823] chnl_net:caif_netlink_parms(): no params data found
[  135.904615][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.907201][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.909827][ T9823] bridge_slave_0: entered allmulticast mode
[  135.915457][ T9823] bridge_slave_0: entered promiscuous mode
[  135.919072][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.921529][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.926296][ T9823] bridge_slave_1: entered allmulticast mode
[  135.929283][ T9823] bridge_slave_1: entered promiscuous mode
[  135.951258][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.957321][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.989972][ T9823] team0: Port device team_slave_0 added
[  136.001389][ T9823] team0: Port device team_slave_1 added
[  136.025711][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.027940][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.036915][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.041866][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.044609][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.053500][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.085112][ T9823] hsr_slave_0: entered promiscuous mode
[  136.088294][ T9823] hsr_slave_1: entered promiscuous mode
[  136.090835][ T9823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.100285][ T9823] Cannot create hsr debugfs directory
[  136.255329][ T9858] sctp: [Deprecated]: syz.0.1710 (pid 9858) Use of int in max_burst socket option.
[  136.255329][ T9858] Use struct sctp_assoc_value instead
[  136.365158][ T8843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.427095][ T8843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.510808][ T8843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.684390][ T8843] bridge_slave_1: left allmulticast mode
[  136.686733][ T8843] bridge_slave_1: left promiscuous mode
[  136.690637][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.698499][ T8843] bridge_slave_0: left allmulticast mode
[  136.700828][ T8843] bridge_slave_0: left promiscuous mode
[  136.703101][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.836980][ T9886] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1723'.
[  137.028671][ T8843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.035791][ T8843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.039930][ T8843] bond0 (unregistering): Released all slaves
[  137.123444][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'.
[  137.470971][ T9823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  137.492619][ T9823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  137.516732][ T9823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  137.527676][ T9823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  137.537675][ T8843] hsr_slave_0: left promiscuous mode
[  137.540406][ T8843] hsr_slave_1: left promiscuous mode
[  137.542855][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.547774][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.550748][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.554461][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.569042][ T8843] veth1_macvtap: left promiscuous mode
[  137.570972][ T8843] veth0_macvtap: left promiscuous mode
[  137.577399][ T8843] veth1_vlan: left promiscuous mode
[  137.579389][ T8843] veth0_vlan: left promiscuous mode
[  137.678733][ T5835] Bluetooth: hci1: command tx timeout
[  137.913503][ T8843] team0 (unregistering): Port device team_slave_1 removed
[  137.952351][ T8843] team0 (unregistering): Port device team_slave_0 removed
[  138.428355][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.471258][ T9823] 8021q: adding VLAN 0 to HW filter on device team0
[  138.484723][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.487204][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.527530][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.530192][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.746313][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.780544][ T9823] veth0_vlan: entered promiscuous mode
[  138.787788][ T9823] veth1_vlan: entered promiscuous mode
[  138.810852][ T9823] veth0_macvtap: entered promiscuous mode
[  138.817134][ T9823] veth1_macvtap: entered promiscuous mode
[  138.836526][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.854658][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.864781][ T9823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.871995][ T9823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.875185][ T9823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.878707][ T9823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.885691][ T9940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1743'.
[  138.974885][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.978335][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.043485][ T9944] nbd1: detected capacity change from 0 to 63
[  139.056807][   T57] block nbd1: Receive control failed (result -104)
[  139.069602][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.072934][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.330294][ T9954] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  139.451295][ T9964] netlink: 'syz.2.1754': attribute type 3 has an invalid length.
[  139.521037][ T9970] netlink: 'syz.0.1757': attribute type 1 has an invalid length.
[  139.941084][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'.
[  140.052167][T10006] dvmrp1: tun_chr_ioctl cmd 1074025677
[  140.055657][T10006] dvmrp1: linktype set to 805
[  140.186142][T10013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1777'.
[  140.561012][ T5842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.577347][T10041] netlink: 'syz.0.1790': attribute type 1 has an invalid length.
[  140.579878][T10041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1790'.
[  140.586151][T10041] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  141.355568][ T1115] block nbd1: Connection timed out, retrying (0/1 alive)
[  141.358597][ T1115] block nbd1: Connection timed out, retrying (0/1 alive)
[  141.361259][ T1115] block nbd1: Connection timed out, retrying (0/1 alive)
[  141.364268][ T1115] block nbd1: Connection timed out, retrying (0/1 alive)
[  141.366864][ T1115] block nbd1: Dead connection, failed to find a fallback
[  141.369255][ T1115] block nbd1: shutting down sockets
[  141.371604][ T1115] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.376861][ T1115] Buffer I/O error on dev nbd1, logical block 3, async page read
[  141.380182][ T1115] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.384012][ T1115] Buffer I/O error on dev nbd1, logical block 2, async page read
[  141.387228][ T1115] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.390800][ T1115] Buffer I/O error on dev nbd1, logical block 1, async page read
[  141.396098][ T1115] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.400099][ T1115] Buffer I/O error on dev nbd1, logical block 0, async page read
[  141.405073][ T8018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.409128][ T8018] Buffer I/O error on dev nbd1, logical block 0, async page read
[  141.412716][ T8018] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.416800][ T8018] Buffer I/O error on dev nbd1, logical block 1, async page read
[  141.420339][ T8018] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.426340][ T8018] Buffer I/O error on dev nbd1, logical block 2, async page read
[  141.429799][ T8018] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.436237][ T8018] Buffer I/O error on dev nbd1, logical block 3, async page read
[  141.439728][ T8018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.443606][ T8018] Buffer I/O error on dev nbd1, logical block 0, async page read
[  141.449574][ T8018] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.454062][ T8018] Buffer I/O error on dev nbd1, logical block 1, async page read
[  141.459617][ T8018] ldm_validate_partition_table(): Disk read failed.
[  141.466140][ T8018] Dev nbd1: unable to read RDB block 0
[  141.470368][ T8018]  nbd1: unable to read partition table
[  141.482022][ T8018] ldm_validate_partition_table(): Disk read failed.
[  141.487816][ T8018] Dev nbd1: unable to read RDB block 0
[  141.491681][ T8018]  nbd1: unable to read partition table
[  141.682393][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  141.690256][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  141.699602][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  141.703899][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  141.706607][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  141.740179][T10054] lo speed is unknown, defaulting to 1000
[  141.751886][T10059] lo: left promiscuous mode
[  141.765382][T10059] sit0: left promiscuous mode
[  141.781283][T10059] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.784462][T10059] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  141.814594][ T8843] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  141.817698][ T8843] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  141.821877][ T8843] bond0: now running without any active interface!
[  141.853487][T10057] dummy0: left allmulticast mode
[  141.855378][T10057] bridge0: port 3(dummy0) entered disabled state
[  141.860115][T10057] batman_adv: batadv0: Adding interface: dummy0
[  141.862421][T10057] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.873223][T10057] batman_adv: batadv0: Interface activated: dummy0
[  141.891914][T10057] batadv0: mtu less than device minimum
[  141.896062][T10057] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.901687][T10057] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.907051][T10057] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.912102][T10057] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.917509][T10057] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.922819][T10057] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  142.040556][T10070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1802'.
[  142.132382][T10054] chnl_net:caif_netlink_parms(): no params data found
[  142.217409][T10054] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.219979][T10054] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.222668][T10054] bridge_slave_0: entered allmulticast mode
[  142.225825][T10054] bridge_slave_0: entered promiscuous mode
[  142.233464][T10054] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.235952][T10054] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.238346][T10054] bridge_slave_1: entered allmulticast mode
[  142.241123][T10054] bridge_slave_1: entered promiscuous mode
[  142.284127][T10054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.289221][T10054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.363419][ T5842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.383529][T10054] team0: Port device team_slave_0 added
[  142.387169][T10054] team0: Port device team_slave_1 added
[  142.389056][T10104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1816'.
[  142.392526][T10104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1816'.
[  142.451377][ T5842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.459579][T10054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.462691][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.481277][T10054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.527265][ T5842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.533903][T10054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.536347][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.545039][T10054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.566191][T10102] 8021q: adding VLAN 0 to HW filter on device bond3
[  142.569811][T10102] bond0: (slave bond3): Enslaving as an active interface with an up link
[  142.614365][T10054] hsr_slave_0: entered promiscuous mode
[  142.617502][T10054] hsr_slave_1: entered promiscuous mode
[  142.620260][T10054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.624992][T10054] Cannot create hsr debugfs directory
[  142.776992][ T5842] bridge_slave_1: left allmulticast mode
[  142.778881][ T5842] bridge_slave_1: left promiscuous mode
[  142.781327][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.792753][ T5842] bridge_slave_0: left allmulticast mode
[  142.796773][ T5842] bridge_slave_0: left promiscuous mode
[  142.798809][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.137203][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.141694][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.146244][ T5842] bond0 (unregistering): Released all slaves
[  143.420979][T10144] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1831'.
[  143.581379][ T5842] hsr_slave_0: left promiscuous mode
[  143.592662][ T5842] hsr_slave_1: left promiscuous mode
[  143.595686][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.598277][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.605396][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.607785][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.622748][ T5842] veth1_macvtap: left promiscuous mode
[  143.627601][ T5842] veth0_macvtap: left promiscuous mode
[  143.629815][ T5842] veth1_vlan: left promiscuous mode
[  143.631628][ T5842] veth0_vlan: left promiscuous mode
[  143.720829][T10158] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  143.754975][ T5835] Bluetooth: hci1: command tx timeout
[  144.041514][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  144.086506][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  144.537199][T10054] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  144.549439][T10054] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  144.549978][T10164] smc: net device bond0 applied user defined pnetid SYZ2
[  144.559492][T10054] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  144.596941][T10054] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  144.764470][ T5879] IPVS: starting estimator thread 0...
[  144.769052][T10054] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.776787][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'.
[  144.788103][T10180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.800633][T10054] 8021q: adding VLAN 0 to HW filter on device team0
[  144.811378][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.814332][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.824096][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.827138][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.854401][T10054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.855300][T10181] IPVS: using max 80 ests per chain, 192000 per kthread
[  144.932668][T10195] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  144.950509][T10054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.979963][T10054] veth0_vlan: entered promiscuous mode
[  144.987688][T10054] veth1_vlan: entered promiscuous mode
[  145.006661][T10054] veth0_macvtap: entered promiscuous mode
[  145.011724][T10054] veth1_macvtap: entered promiscuous mode
[  145.022761][T10054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.031118][T10054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.037286][T10054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.040198][T10054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.044375][T10054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.047555][T10054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.099837][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.103757][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.124393][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.126924][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.592179][T10210] net_ratelimit: 13 callbacks suppressed
[  145.592192][T10210] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.697907][T10215] bridge: RTM_NEWNEIGH with invalid state 0x31
[  146.167721][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.173373][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.177174][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.179986][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.184375][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.215784][T10235] lo speed is unknown, defaulting to 1000
[  146.381818][T10235] chnl_net:caif_netlink_parms(): no params data found
[  146.437090][T10235] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.439641][T10235] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.442833][T10235] bridge_slave_0: entered allmulticast mode
[  146.446245][T10235] bridge_slave_0: entered promiscuous mode
[  146.449586][T10235] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.452002][T10235] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.454838][T10235] bridge_slave_1: entered allmulticast mode
[  146.457697][T10235] bridge_slave_1: entered promiscuous mode
[  146.479777][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.487644][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.512717][T10235] team0: Port device team_slave_0 added
[  146.516668][T10235] team0: Port device team_slave_1 added
[  146.540493][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.545134][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.558545][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.566629][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.569841][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.583713][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.650116][T10235] hsr_slave_0: entered promiscuous mode
[  146.654189][T10235] hsr_slave_1: entered promiscuous mode
[  146.657107][T10235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.660433][T10235] Cannot create hsr debugfs directory
[  146.786681][T10235] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  146.866468][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.887846][T10235] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.006639][T10235] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.069838][T10235] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.189668][T10235] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  147.202929][T10235] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  147.207633][T10235] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  147.212355][T10235] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  147.268449][T10235] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.279245][T10235] 8021q: adding VLAN 0 to HW filter on device team0
[  147.285602][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.288128][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.304292][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.306774][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.409642][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.434576][T10235] veth0_vlan: entered promiscuous mode
[  147.439829][T10235] veth1_vlan: entered promiscuous mode
[  147.459231][T10235] veth0_macvtap: entered promiscuous mode
[  147.467223][T10235] veth1_macvtap: entered promiscuous mode
[  147.484431][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.494193][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.499526][T10235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.502390][T10235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.506454][T10235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.510100][T10235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.516042][ T1135] wlan0: Trigger new scan to find an IBSS to join
[  147.565074][  T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.568453][  T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.588736][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.591683][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.922308][T10262] netlink: 'syz.0.1873': attribute type 1 has an invalid length.
[  147.927928][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'.
[  147.940298][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1873'.
[  147.998364][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  148.002604][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  148.010358][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  148.017163][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  148.021437][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  148.054621][T10268] lo speed is unknown, defaulting to 1000
[  148.295344][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.311613][T10268] chnl_net:caif_netlink_parms(): no params data found
[  148.367967][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.406312][T10268] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.409420][T10268] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.412708][T10268] bridge_slave_0: entered allmulticast mode
[  148.417351][T10268] bridge_slave_0: entered promiscuous mode
[  148.422398][T10268] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.426648][T10268] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.429964][T10268] bridge_slave_1: entered allmulticast mode
[  148.435453][T10268] bridge_slave_1: entered promiscuous mode
[  148.465055][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.492708][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.500941][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.529182][T10268] team0: Port device team_slave_0 added
[  148.535802][T10268] team0: Port device team_slave_1 added
[  148.566473][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.570674][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.580235][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.596102][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.598441][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.607105][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.664358][   T13] bridge_slave_1: left allmulticast mode
[  148.666900][   T13] bridge_slave_1: left promiscuous mode
[  148.670383][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.679260][   T13] bridge_slave_0: left allmulticast mode
[  148.681566][   T13] bridge_slave_0: left promiscuous mode
[  148.684762][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.088229][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.096624][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.102356][   T13] bond0 (unregistering): Released all slaves
[  149.134060][T10268] hsr_slave_0: entered promiscuous mode
[  149.136646][T10268] hsr_slave_1: entered promiscuous mode
[  149.139016][T10268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.141599][T10268] Cannot create hsr debugfs directory
[  149.629580][   T13] hsr_slave_0: left promiscuous mode
[  149.631967][   T13] hsr_slave_1: left promiscuous mode
[  149.634355][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.636956][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.640308][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.642910][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.654365][   T13] veth1_macvtap: left promiscuous mode
[  149.656647][   T13] veth0_macvtap: left promiscuous mode
[  149.658482][   T13] veth1_vlan: left promiscuous mode
[  149.660307][   T13] veth0_vlan: left promiscuous mode
[  150.092469][   T55] Bluetooth: hci1: command tx timeout
[  150.179747][   T13] team0 (unregistering): Port device team_slave_1 removed
[  150.228513][   T13] team0 (unregistering): Port device team_slave_0 removed
[  150.229981][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.235399][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.246350][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.257873][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.260675][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.557724][ T1135] wlan0: Trigger new scan to find an IBSS to join
[  150.670864][T10308] lo speed is unknown, defaulting to 1000
[  150.775064][T10313] netlink: 'syz.0.1891': attribute type 13 has an invalid length.
[  150.780779][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1891'.
[  150.817293][T10268] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.846876][T10268] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.865312][T10268] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.886963][T10268] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  151.062716][ T8843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.146761][T10308] chnl_net:caif_netlink_parms(): no params data found
[  151.172223][T10338] netlink: 'syz.0.1899': attribute type 10 has an invalid length.
[  151.202024][T10338] batman_adv: batadv0: Interface deactivated: dummy0
[  151.208283][T10338] batman_adv: batadv0: Removing interface: dummy0
[  151.226214][T10338] team0: Port device dummy0 added
[  151.230153][T10341] netlink: 'syz.0.1899': attribute type 10 has an invalid length.
[  151.249871][T10341] 
[  151.250718][T10341] ======================================================
[  151.253081][T10341] WARNING: possible circular locking dependency detected
[  151.255596][T10341] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  151.259328][T10341] ------------------------------------------------------
[  151.261867][T10341] syz.0.1899/10341 is trying to acquire lock:
[  151.264019][T10341] ffff888112d00e00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  151.267487][T10341] 
[  151.267487][T10341] but task is already holding lock:
[  151.269828][T10341] ffff8881194c6d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  151.273326][T10341] 
[  151.273326][T10341] which lock already depends on the new lock.
[  151.273326][T10341] 
[  151.277481][T10341] 
[  151.277481][T10341] the existing dependency chain (in reverse order) is:
[  151.281343][T10341] 
[  151.281343][T10341] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  151.284997][T10341]        lock_acquire+0x120/0x360
[  151.287420][T10341]        __mutex_lock+0x182/0xe80
[  151.289662][T10341]        dev_set_mtu+0x10e/0x260
[  151.291897][T10341]        team_add_slave+0x8b8/0x2840
[  151.294114][T10341]        do_set_master+0x533/0x6d0
[  151.296169][T10341]        do_setlink+0xcf0/0x41c0
[  151.298144][T10341]        rtnl_newlink+0x160b/0x1c70
[  151.300268][T10341]        rtnetlink_rcv_msg+0x7cf/0xb70
[  151.302571][T10341]        netlink_rcv_skb+0x208/0x470
[  151.304846][T10341]        netlink_unicast+0x75b/0x8d0
[  151.307135][T10341]        netlink_sendmsg+0x805/0xb30
[  151.309630][T10341]        __sock_sendmsg+0x21c/0x270
[  151.311999][T10341]        ____sys_sendmsg+0x505/0x830
[  151.314319][T10341]        ___sys_sendmsg+0x21f/0x2a0
[  151.316379][T10341]        __x64_sys_sendmsg+0x19b/0x260
[  151.318543][T10341]        do_syscall_64+0xfa/0x3b0
[  151.320588][T10341]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.323259][T10341] 
[  151.323259][T10341] -> #0 (team->team_lock_key){+.+.}-{4:4}:
[  151.326480][T10341]        validate_chain+0xb9b/0x2140
[  151.328639][T10341]        __lock_acquire+0xab9/0xd20
[  151.330907][T10341]        lock_acquire+0x120/0x360
[  151.333098][T10341]        __mutex_lock+0x182/0xe80
[  151.335429][T10341]        team_device_event+0x182/0xa20
[  151.337778][T10341]        notifier_call_chain+0x1b6/0x3e0
[  151.340078][T10341]        __dev_notify_flags+0x18d/0x2e0
[  151.342291][T10341]        netif_change_flags+0xe8/0x1a0
[  151.344595][T10341]        do_setlink+0xc55/0x41c0
[  151.346881][T10341]        rtnl_newlink+0x160b/0x1c70
[  151.349537][T10341]        rtnetlink_rcv_msg+0x7cf/0xb70
[  151.352069][T10341]        netlink_rcv_skb+0x208/0x470
[  151.354385][T10341]        netlink_unicast+0x75b/0x8d0
[  151.356642][T10341]        netlink_sendmsg+0x805/0xb30
[  151.359188][T10341]        __sock_sendmsg+0x21c/0x270
[  151.361671][T10341]        ____sys_sendmsg+0x505/0x830
[  151.364118][T10341]        ___sys_sendmsg+0x21f/0x2a0
[  151.366359][T10341]        __x64_sys_sendmsg+0x19b/0x260
[  151.368733][T10341]        do_syscall_64+0xfa/0x3b0
[  151.371000][T10341]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.374071][T10341] 
[  151.374071][T10341] other info that might help us debug this:
[  151.374071][T10341] 
[  151.378310][T10341]  Possible unsafe locking scenario:
[  151.378310][T10341] 
[  151.381349][T10341]        CPU0                    CPU1
[  151.383652][T10341]        ----                    ----
[  151.385929][T10341]   lock(&dev_instance_lock_key#3);
[  151.388249][T10341]                                lock(team->team_lock_key);
[  151.391684][T10341]                                lock(&dev_instance_lock_key#3);
[  151.395206][T10341]   lock(team->team_lock_key);
[  151.397307][T10341] 
[  151.397307][T10341]  *** DEADLOCK ***
[  151.397307][T10341] 
[  151.400859][T10341] 2 locks held by syz.0.1899/10341:
[  151.403186][T10341]  #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  151.407125][T10341]  #1: ffff8881194c6d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  151.411527][T10341] 
[  151.411527][T10341] stack backtrace:
[  151.413998][T10341] CPU: 0 UID: 0 PID: 10341 Comm: syz.0.1899 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  151.414019][T10341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.414029][T10341] Call Trace:
[  151.414038][T10341]  <TASK>
[  151.414048][T10341]  dump_stack_lvl+0x189/0x250
[  151.414077][T10341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.414104][T10341]  ? __pfx__printk+0x10/0x10
[  151.414120][T10341]  ? print_lock_name+0xde/0x100
[  151.414134][T10341]  print_circular_bug+0x2ee/0x310
[  151.414149][T10341]  check_noncircular+0x134/0x160
[  151.414163][T10341]  validate_chain+0xb9b/0x2140
[  151.414176][T10341]  ? __lock_acquire+0xab9/0xd20
[  151.414196][T10341]  __lock_acquire+0xab9/0xd20
[  151.414214][T10341]  ? team_device_event+0x182/0xa20
[  151.414228][T10341]  lock_acquire+0x120/0x360
[  151.414244][T10341]  ? team_device_event+0x182/0xa20
[  151.414260][T10341]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  151.414279][T10341]  __mutex_lock+0x182/0xe80
[  151.414298][T10341]  ? team_device_event+0x182/0xa20
[  151.414314][T10341]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  151.414328][T10341]  ? team_device_event+0x182/0xa20
[  151.414343][T10341]  ? __pfx___mutex_lock+0x10/0x10
[  151.414362][T10341]  ? __timer_delete_sync+0x218/0x2d0
[  151.414382][T10341]  team_device_event+0x182/0xa20
[  151.414398][T10341]  notifier_call_chain+0x1b6/0x3e0
[  151.414422][T10341]  __dev_notify_flags+0x18d/0x2e0
[  151.414439][T10341]  ? __pfx___dev_notify_flags+0x10/0x10
[  151.414451][T10341]  ? __dev_change_flags+0x4cc/0x6d0
[  151.414466][T10341]  ? __pfx___dev_change_flags+0x10/0x10
[  151.414483][T10341]  netif_change_flags+0xe8/0x1a0
[  151.414498][T10341]  do_setlink+0xc55/0x41c0
[  151.414514][T10341]  ? trace_sched_exit_tp+0x38/0x120
[  151.414533][T10341]  ? __pfx_do_setlink+0x10/0x10
[  151.414547][T10341]  ? __lock_acquire+0xab9/0xd20
[  151.414567][T10341]  ? do_raw_spin_lock+0x121/0x290
[  151.414582][T10341]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  151.414597][T10341]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.414614][T10341]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  151.414630][T10341]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  151.414647][T10341]  ? rcu_is_watching+0x15/0xb0
[  151.414667][T10341]  ? __mutex_lock+0xa6d/0xe80
[  151.414685][T10341]  ? __mutex_lock+0x51b/0xe80
[  151.414704][T10341]  ? rtnl_newlink+0x8db/0x1c70
[  151.414716][T10341]  ? __pfx___mutex_lock+0x10/0x10
[  151.414737][T10341]  ? ns_capable+0x8a/0xf0
[  151.414755][T10341]  ? rtnl_link_get_net_capable+0x16a/0x350
[  151.414769][T10341]  rtnl_newlink+0x160b/0x1c70
[  151.414780][T10341]  ? netlink_sendmsg+0x805/0xb30
[  151.414798][T10341]  ? __pfx_rtnl_newlink+0x10/0x10
[  151.414846][T10341]  ? kasan_quarantine_put+0xdd/0x220
[  151.414866][T10341]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.414885][T10341]  ? nlmon_xmit+0xb0/0x100
[  151.414902][T10341]  ? kmem_cache_free+0x18f/0x400
[  151.414916][T10341]  ? __local_bh_enable_ip+0x12d/0x1c0
[  151.414999][T10341]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.415023][T10341]  ? __local_bh_enable_ip+0x12d/0x1c0
[  151.415042][T10341]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  151.415059][T10341]  ? __dev_queue_xmit+0x27e/0x3a70
[  151.415079][T10341]  ? __lock_acquire+0xab9/0xd20
[  151.415113][T10341]  ? __pfx_rtnl_newlink+0x10/0x10
[  151.415126][T10341]  rtnetlink_rcv_msg+0x7cf/0xb70
[  151.415141][T10341]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  151.415152][T10341]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  151.415163][T10341]  ? ref_tracker_free+0x63a/0x7d0
[  151.415182][T10341]  ? __copy_skb_header+0xa7/0x550
[  151.415201][T10341]  ? __pfx_ref_tracker_free+0x10/0x10
[  151.415221][T10341]  netlink_rcv_skb+0x208/0x470
[  151.415236][T10341]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  151.415248][T10341]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  151.415265][T10341]  ? netlink_deliver_tap+0x2e/0x1b0
[  151.415278][T10341]  ? netlink_deliver_tap+0x2e/0x1b0
[  151.415292][T10341]  netlink_unicast+0x75b/0x8d0
[  151.415306][T10341]  netlink_sendmsg+0x805/0xb30
[  151.415323][T10341]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.415338][T10341]  ? aa_sock_msg_perm+0x94/0x160
[  151.415357][T10341]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  151.415374][T10341]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.415390][T10341]  __sock_sendmsg+0x21c/0x270
[  151.415409][T10341]  ____sys_sendmsg+0x505/0x830
[  151.415427][T10341]  ? __pfx_____sys_sendmsg+0x10/0x10
[  151.415444][T10341]  ? import_iovec+0x74/0xa0
[  151.415458][T10341]  ___sys_sendmsg+0x21f/0x2a0
[  151.415474][T10341]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.415500][T10341]  ? __fget_files+0x2a/0x420
[  151.415514][T10341]  ? __fget_files+0x3a0/0x420
[  151.415529][T10341]  __x64_sys_sendmsg+0x19b/0x260
[  151.415546][T10341]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  151.415579][T10341]  ? do_user_addr_fault+0xc8a/0x1390
[  151.415600][T10341]  ? do_syscall_64+0xbe/0x3b0
[  151.415616][T10341]  do_syscall_64+0xfa/0x3b0
[  151.415627][T10341]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.415648][T10341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.415662][T10341]  ? exc_page_fault+0x9f/0xf0
[  151.415679][T10341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.415692][T10341] RIP: 0033:0x7f17b218e929
[  151.415707][T10341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.415719][T10341] RSP: 002b:00007f17b2fa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.415737][T10341] RAX: ffffffffffffffda RBX: 00007f17b23b6080 RCX: 00007f17b218e929
[  151.415748][T10341] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  151.415758][T10341] RBP: 00007f17b2210b39 R08: 0000000000000000 R09: 0000000000000000
[  151.415767][T10341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.415776][T10341] R13: 0000000000000001 R14: 00007f17b23b6080 R15: 00007ffc2bb06ad8
[  151.415792][T10341]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  151.701296][T10341] team0: Port device dummy0 removed
[  151.709264][T10341] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  151.804355][ T8843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.844110][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.878414][ T8843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.989483][ T8843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.068876][ T8843] bridge_slave_1: left allmulticast mode
[  152.071514][ T8843] bridge_slave_1: left promiscuous mode
[  152.076354][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.081244][ T8843] bridge_slave_0: left allmulticast mode
[  152.084135][ T8843] bridge_slave_0: left promiscuous mode
[  152.086642][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.198889][ T8843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.204780][ T8843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.210370][ T8843] bond0 (unregistering): Released all slaves
[  152.431368][ T8843] hsr_slave_0: left promiscuous mode
[  152.434224][ T8843] hsr_slave_1: left promiscuous mode
[  152.436341][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.438889][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.442005][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.445266][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.450171][ T8843] veth1_macvtap: left promiscuous mode
[  152.452200][ T8843] veth0_macvtap: left promiscuous mode
[  152.454249][ T8843] veth1_vlan: left promiscuous mode
[  152.456027][ T8843] veth0_vlan: left promiscuous mode
[  152.612348][ T8843] team0 (unregistering): Port device team_slave_1 removed
[  152.632489][ T8843] team0 (unregistering): Port device team_slave_0 removed
[  153.217398][ T8843] bridge_slave_1: left allmulticast mode
[  153.220094][ T8843] bridge_slave_1: left promiscuous mode
[  153.222082][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.226005][ T8843] bridge_slave_0: left allmulticast mode
[  153.227937][ T8843] bridge_slave_0: left promiscuous mode
[  153.229939][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.319070][ T8843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.323603][ T8843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.327866][ T8843] bond0 (unregistering): Released all slaves
[  153.377153][ T8843] bond0 (unregistering): Released all slaves
[  153.528666][ T8843] hsr_slave_0: left promiscuous mode
[  153.531672][ T8843] hsr_slave_1: left promiscuous mode
[  153.543826][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.547742][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.639125][ T8843] team0 (unregistering): Port device team_slave_1 removed
[  153.663700][ T8843] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
22:17:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000025ab RDI=00000000000025ac RBP=00000000000003f8 RSP=ffffc900039cdf10
R8 =ffff88801fd58237 R9 =1ffff11003fab046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fe R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f17b2fa36c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f17b2fa2fc8 CR3=000000010b9c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007fed36011b1f
XMM06=0000000000000000 00007fed36011b19 XMM07=0000000000000000 00007fed36011b2d
XMM08=0000000000000000 00007fed36011bb3 XMM09=0000000000000000 00007fed36011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d5823fc3b9504400 RBX=ffffffff81974d58 RCX=d5823fc3b9504400 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020017000
RIP=ffffffff8b66c4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bf182e19c8 CR3=0000000026910000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
