last executing test programs:

830.464399ms ago: executing program 0 (id=1183):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x25, 0x148, 0xb8, 0x60, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'xfrm0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0xc, 0x3, 0x2a}, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}, {0x100}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x168, 0x5, 0x0, '\x00', {0x1fb}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8)

770.477481ms ago: executing program 0 (id=1184):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r0)

669.901516ms ago: executing program 0 (id=1187):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
read$alg(r1, &(0x7f00000009c0)=""/75, 0x4b)

589.878223ms ago: executing program 0 (id=1188):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0)

589.69194ms ago: executing program 0 (id=1189):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000030000000000000f8ffffff851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

509.666059ms ago: executing program 0 (id=1190):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x0)
listen(r0, 0xfff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0xe4ada3a5ad853726, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x84)
accept(r0, 0xfffffffffffffffd, 0x0)

150.075609ms ago: executing program 1 (id=1198):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x80000000, @loopback, 0x2}, 0x1c)

149.919345ms ago: executing program 2 (id=1199):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)

149.792775ms ago: executing program 1 (id=1200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.'], 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r1=>0x0}, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4)

149.68454ms ago: executing program 2 (id=1201):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f00000002c0)=""/236, 0xec, 0x10120, 0x0, 0x0)

77.906564ms ago: executing program 1 (id=1202):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

77.566146ms ago: executing program 2 (id=1203):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)

77.409321ms ago: executing program 2 (id=1204):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0)

76.287425ms ago: executing program 1 (id=1205):
unshare(0x60600)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0xf3b, 0x63)

344.313µs ago: executing program 2 (id=1206):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2010})

262.42µs ago: executing program 1 (id=1207):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040))

101.455µs ago: executing program 1 (id=1208):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@fadd={0x58, 0x114, 0x6, {{0x3, 0x7}, &(0x7f0000000100)=0xffffffffffffd078, 0x0, 0x8000, 0x8000000000000001, 0x6f66bd59, 0xbb, 0x8, 0x6d4}}], 0x58, 0x40014}, 0x0)

0s ago: executing program 2 (id=1209):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43759' (ED25519) to the list of known hosts.
syzkaller login: [   40.795519][ T5755] cgroup: Unknown subsys name 'net'
[   40.897483][ T5755] cgroup: Unknown subsys name 'cpuset'
[   40.901590][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.618509][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.727071][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.730070][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.732621][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.735731][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.738356][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.796835][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.799291][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.802154][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.805468][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.808523][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.813824][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.824951][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.834744][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.841889][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.846326][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.931834][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   47.069672][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.072300][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.075069][ T5827] bridge_slave_0: entered allmulticast mode
[   47.077781][ T5827] bridge_slave_0: entered promiscuous mode
[   47.086649][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.088814][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.091187][ T5827] bridge_slave_1: entered allmulticast mode
[   47.093861][ T5827] bridge_slave_1: entered promiscuous mode
[   47.118889][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   47.130013][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.155872][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.210063][ T5827] team0: Port device team_slave_0 added
[   47.233699][ T5827] team0: Port device team_slave_1 added
[   47.243389][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.245919][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.248196][ T5832] bridge_slave_0: entered allmulticast mode
[   47.250809][ T5832] bridge_slave_0: entered promiscuous mode
[   47.265726][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   47.279675][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.281870][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.284075][ T5832] bridge_slave_1: entered allmulticast mode
[   47.287143][ T5832] bridge_slave_1: entered promiscuous mode
[   47.289953][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.292062][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.300678][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.319729][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.321852][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.330008][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.351567][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.360108][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.402442][ T5827] hsr_slave_0: entered promiscuous mode
[   47.405171][ T5827] hsr_slave_1: entered promiscuous mode
[   47.428381][ T5832] team0: Port device team_slave_0 added
[   47.430526][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.432732][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.435069][ T5834] bridge_slave_0: entered allmulticast mode
[   47.437634][ T5834] bridge_slave_0: entered promiscuous mode
[   47.441185][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.443378][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.446168][ T5834] bridge_slave_1: entered allmulticast mode
[   47.448839][ T5834] bridge_slave_1: entered promiscuous mode
[   47.452391][ T5832] team0: Port device team_slave_1 added
[   47.499539][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.510739][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.512823][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.520803][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.526332][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.533412][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.535796][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.543405][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.596518][ T5834] team0: Port device team_slave_0 added
[   47.601421][ T5832] hsr_slave_0: entered promiscuous mode
[   47.603660][ T5832] hsr_slave_1: entered promiscuous mode
[   47.607119][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.609523][ T5832] Cannot create hsr debugfs directory
[   47.617362][ T5834] team0: Port device team_slave_1 added
[   47.661584][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.663771][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.671626][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.676367][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.678546][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.687249][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.759788][ T5834] hsr_slave_0: entered promiscuous mode
[   47.762259][ T5834] hsr_slave_1: entered promiscuous mode
[   47.764348][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.767810][ T5834] Cannot create hsr debugfs directory
[   47.858112][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.868605][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.882355][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.900954][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.959086][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.980092][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.991605][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.999902][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.059867][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.066574][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.070862][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.076752][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.127595][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.145840][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.160319][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   48.174272][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.176697][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.184112][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.186729][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.193308][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   48.209262][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.211422][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.218335][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.224799][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.227006][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.258794][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   48.273195][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.275493][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.299628][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.301844][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.312048][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.428819][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.441394][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.455896][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.499515][ T5827] veth0_vlan: entered promiscuous mode
[   48.513006][ T5834] veth0_vlan: entered promiscuous mode
[   48.517448][ T5832] veth0_vlan: entered promiscuous mode
[   48.521144][ T5827] veth1_vlan: entered promiscuous mode
[   48.528958][ T5834] veth1_vlan: entered promiscuous mode
[   48.541716][ T5832] veth1_vlan: entered promiscuous mode
[   48.566107][ T5827] veth0_macvtap: entered promiscuous mode
[   48.569748][ T5834] veth0_macvtap: entered promiscuous mode
[   48.577123][ T5827] veth1_macvtap: entered promiscuous mode
[   48.582161][ T5834] veth1_macvtap: entered promiscuous mode
[   48.591655][ T5832] veth0_macvtap: entered promiscuous mode
[   48.596067][ T5832] veth1_macvtap: entered promiscuous mode
[   48.607716][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.619701][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.624437][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.628134][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.632907][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.642287][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.646100][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.648787][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.651365][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.653949][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.661356][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.664088][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.667742][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.670389][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.675770][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.678563][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.681243][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.683885][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.785575][ T5836] Bluetooth: hci0: command tx timeout
[   48.788503][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.794743][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.803123][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.806334][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.835647][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.837982][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.845878][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.848248][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.865587][ T5836] Bluetooth: hci2: command tx timeout
[   48.865620][ T5830] Bluetooth: hci1: command tx timeout
[   48.879497][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.882307][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.894772][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.899200][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.912989][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.990418][ T5897] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3'.
[   49.064318][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'.
[   49.107893][ T5908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.110575][ T5908] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.114511][ T5908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.124941][ T5908] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.127564][ T5908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.138738][ T5911] netlink: 'syz.1.8': attribute type 4 has an invalid length.
[   49.198858][ T5914] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.224805][ T5914] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   49.656139][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   49.659316][ T5953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.30'.
[   49.758501][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   49.793699][ T5964] Bluetooth: MGMT ver 1.23
[   50.790541][ T6014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.865810][ T5830] Bluetooth: hci0: command tx timeout
[   50.942576][ T6025] gtp0: entered promiscuous mode
[   50.944113][ T6025] gtp0: entered allmulticast mode
[   50.947666][ T5830] Bluetooth: hci1: command tx timeout
[   50.947841][ T5836] Bluetooth: hci2: command tx timeout
[   51.170699][ T6045] Bluetooth: MGMT ver 1.23
[   51.273256][ T6057] netlink: 'syz.0.75': attribute type 1 has an invalid length.
[   51.278249][ T6057] NCSI netlink: No device for ifindex 0
[   51.396893][ T6069] Illegal XDP return value 4294967274 on prog  (id 18) dev N/A, expect packet loss!
[   51.458144][ T6076] bond0: option mode: unable to set because the bond device has slaves
[   51.490027][ T6078] netlink: 'syz.0.84': attribute type 10 has an invalid length.
[   51.504496][ T6078] team0: Device ipvlan1 failed to register rx_handler
[   51.546907][ T6083] xt_hashlimit: size too large, truncated to 1048576
[   51.620261][ T6083] xt_bpf: check failed: parse error
[   51.829802][ T6109] netlink: 'syz.1.98': attribute type 2 has an invalid length.
[   51.832561][ T6109] Zero length message leads to an empty skb
[   51.956792][ T6119] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   52.573374][ T6167] syzkaller0: entered promiscuous mode
[   52.575198][ T6167] syzkaller0: entered allmulticast mode
[   52.682971][ T6175] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   52.946259][ T5836] Bluetooth: hci0: command tx timeout
[   53.024689][ T5836] Bluetooth: hci1: command tx timeout
[   53.034952][ T5836] Bluetooth: hci2: command tx timeout
[   53.662195][ T6207] warning: `syz.0.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.934222][  T792] hid-generic 0005:04F3:0007.0001: collection stack underflow
[   53.938188][  T792] hid-generic 0005:04F3:0007.0001: item 0 0 0 12 parsing failed
[   53.940832][  T792] hid-generic 0005:04F3:0007.0001: probe with driver hid-generic failed with error -22
[   54.513201][ T6258] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.775412][ T6280] __nla_validate_parse: 9 callbacks suppressed
[   54.775424][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[   54.780094][ T6280] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   54.782377][ T6280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.024747][ T5836] Bluetooth: hci0: command tx timeout
[   55.104811][ T5836] Bluetooth: hci2: command tx timeout
[   55.105052][ T5830] Bluetooth: hci1: command tx timeout
[   55.163347][ T6308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.184'.
[   55.243257][ T6312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.280026][ T6313] batadv_slave_1: entered promiscuous mode
[   55.296001][ T6312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.343660][ T6312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.412780][ T6312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.496709][ T6312] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.507800][ T6312] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.512581][ T6272] syz.1.166 (6272) used greatest stack depth: 20184 bytes left
[   55.533532][ T6312] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.543266][ T6312] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.568442][ T6311] batadv_slave_1: left promiscuous mode
[   55.571663][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[   55.574476][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'.
[   55.618583][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[   55.626632][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'.
[   55.631585][ T6319] netlink: 21 bytes leftover after parsing attributes in process `syz.1.189'.
[   55.742108][ T6333] IPv6: sit1: Disabled Multicast RS
[   55.888449][ T6349] bridge_slave_0: left allmulticast mode
[   55.890196][ T6349] bridge_slave_0: left promiscuous mode
[   55.892552][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.902470][ T6349] bridge_slave_1: left allmulticast mode
[   55.904196][ T6349] bridge_slave_1: left promiscuous mode
[   55.907645][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.919729][ T6349] bond0: (slave bond_slave_0): Releasing backup interface
[   55.924543][ T6349] bond0: (slave bond_slave_1): Releasing backup interface
[   55.934299][ T6349] team0: Port device team_slave_0 removed
[   55.941932][ T6349] team0: Port device team_slave_1 removed
[   55.945502][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.947813][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.951101][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.953409][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.059959][ T6355] syzkaller0: entered promiscuous mode
[   56.061706][ T6355] syzkaller0: entered allmulticast mode
[   56.116794][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'.
[   56.533630][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'.
[   56.762518][ T6359] bond1: entered promiscuous mode
[   56.765073][ T6359] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.833122][ T6359] bond1 (unregistering): Released all slaves
[   56.860011][ T6366] bridge_slave_0: entered promiscuous mode
[   56.862539][ T6366] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   58.765589][ T6432] syz_tun: entered allmulticast mode
[   58.772961][ T6432] dvmrp8: entered allmulticast mode
[   58.786516][ T6431] syz_tun: left allmulticast mode
[   58.936243][ T6439] ieee802154 phy0 wpan0: encryption failed: -22
[   59.484380][ T6491] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.268'.
[   59.518395][ T6494] netlink: 'syz.2.269': attribute type 33 has an invalid length.
[   59.788189][ T6513] __nla_validate_parse: 1 callbacks suppressed
[   59.788203][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'.
[   59.794359][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'.
[   59.799024][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'.
[   59.929061][ T6529] netlink: 'syz.2.286': attribute type 1 has an invalid length.
[   60.131601][ T6548] netlink: 'syz.2.294': attribute type 12 has an invalid length.
[   60.512242][ T6587] netlink: 200 bytes leftover after parsing attributes in process `syz.0.313'.
[   60.519285][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'.
[   61.246624][ T6637] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   61.340087][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[   61.437228][ T6655] trusted_key: syz.0.341 sent an empty control message without MSG_MORE.
[   61.544410][ T6666] xt_hashlimit: size too large, truncated to 1048576
[   61.545237][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   61.549263][ T6665] netlink: 34 bytes leftover after parsing attributes in process `syz.0.345'.
[   61.917908][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.364'.
[   62.229596][ T6749] xt_TCPMSS: Only works on TCP SYN packets
[   62.477767][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'.
[   62.517163][ T6781] nbd: must specify at least one socket
[   62.688071][ T6800] tc_dump_action: action bad kind
[   62.702621][ T6803] dummy0: entered promiscuous mode
[   62.710971][ T6803] batadv0: entered promiscuous mode
[   62.715203][ T6803] dummy0: left promiscuous mode
[   62.718977][ T6803] batadv0: left promiscuous mode
[   62.738418][ T6807] netlink: 'syz.2.410': attribute type 1 has an invalid length.
[   63.007465][ T6838] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   63.010946][ T6835] IPVS: stopping master sync thread 6838 ...
[   63.084446][ T6850] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[   63.536244][ T6905] netlink: 'syz.2.459': attribute type 10 has an invalid length.
[   63.547288][ T6905] veth0_vlan: left promiscuous mode
[   63.550514][ T6905] veth0_vlan: entered promiscuous mode
[   63.554476][ T6905] team0: Device veth0_vlan failed to register rx_handler
[   63.583906][ T6905] syz.2.459 (6905) used greatest stack depth: 19576 bytes left
[   64.777219][ T6977] ieee802154 phy0 wpan0: encryption failed: -22
[   64.839178][ T6983] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[   64.844178][ T6983] netlink: 'syz.1.494': attribute type 3 has an invalid length.
[   64.853449][ T6983] __nla_validate_parse: 4 callbacks suppressed
[   64.853457][ T6983] netlink: 224 bytes leftover after parsing attributes in process `syz.1.494'.
[   64.863166][ T6983] NCSI netlink: No device for ifindex 246
[   64.980827][ T7001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   65.146194][ T7017] tipc: Trying to set illegal importance in message
[   65.201193][ T7023] xt_connbytes: Forcing CT accounting to be enabled
[   65.210034][ T7023] Cannot find set identified by id 0 to match
[   65.214288][ T7023] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   65.326374][ T7032] netlink: 'syz.0.516': attribute type 1 has an invalid length.
[   65.349667][ T7032] bond1: (slave gretap1): making interface the new active one
[   65.353120][ T7032] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   65.385832][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'.
[   65.389365][ T7035] syz_tun: entered allmulticast mode
[   65.453618][ T7039] netlink: 'syz.0.519': attribute type 12 has an invalid length.
[   65.458458][ T7039] netlink: 'syz.0.519': attribute type 29 has an invalid length.
[   65.460875][ T7039] netlink: 148 bytes leftover after parsing attributes in process `syz.0.519'.
[   65.463680][ T7039] netlink: 59 bytes leftover after parsing attributes in process `syz.0.519'.
[   65.492665][ T7041] netlink: 'syz.0.520': attribute type 5 has an invalid length.
[   65.500587][ T7041] ip6erspan0: entered promiscuous mode
[   65.569704][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'.
[   65.573039][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'.
[   65.769926][ T7057] erspan0: entered promiscuous mode
[   65.786304][ T7057] batman_adv: batadv0: Adding interface: macvlan2
[   65.788411][ T7057] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.797474][ T7057] batman_adv: batadv0: Interface activated: macvlan2
[   65.823980][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'.
[   65.916280][ T7071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.535'.
[   65.946170][ T7073] netlink: 'syz.0.536': attribute type 12 has an invalid length.
[   65.984282][ T7076] tap0: tun_chr_ioctl cmd 1074025677
[   65.989735][ T7076] tap0: linktype set to 0
[   66.265294][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'.
[   66.268697][ T7095] bridge_slave_1: left allmulticast mode
[   66.270818][ T7095] bridge_slave_1: left promiscuous mode
[   66.272879][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.296711][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'.
[   66.296889][ T7095] bridge_slave_0: left allmulticast mode
[   66.301281][ T7095] bridge_slave_0: left promiscuous mode
[   66.303871][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.754032][ T7126] netlink: 'syz.0.559': attribute type 83 has an invalid length.
[   66.885684][ T7128] C: renamed from team_slave_0 (while UP)
[   66.889901][ T7128] netlink: 'syz.0.560': attribute type 4 has an invalid length.
[   66.892427][ T7128] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   68.231682][ T7176] xt_hashlimit: size too large, truncated to 1048576
[   68.892492][ T7227] wireguard0: entered promiscuous mode
[   68.894246][ T7227] wireguard0: entered allmulticast mode
[   69.771034][ T7321] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[   70.100573][ T7364] bond0: (slave bond_slave_0): Releasing backup interface
[   70.111503][ T7364] bond0: (slave bond_slave_1): Releasing backup interface
[   70.138909][ T7364] team0: Failed to send options change via netlink (err -105)
[   70.146130][ T7364] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   70.151178][ T7364] team0: Port device team_slave_0 removed
[   70.161625][ T7364] team0: Failed to send options change via netlink (err -105)
[   70.164186][ T7364] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   70.171947][ T7364] team0: Port device team_slave_1 removed
[   70.176092][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.178323][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.182507][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.190723][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.425768][ T7406] tipc: Started in network mode
[   70.427453][ T7406] tipc: Node identity 46eafc854fa6, cluster identity 4711
[   70.429767][ T7406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.432542][ T7406] syzkaller0: entered promiscuous mode
[   70.434273][ T7406] syzkaller0: entered allmulticast mode
[   70.453322][ T7406] tipc: Resetting bearer <eth:syzkaller0>
[   70.459505][ T7405] tipc: Resetting bearer <eth:syzkaller0>
[   70.477535][ T7405] tipc: Disabling bearer <eth:syzkaller0>
[   70.567085][ T7424] __nla_validate_parse: 13 callbacks suppressed
[   70.567121][ T7424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'.
[   70.610686][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[   70.668852][ T7437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   70.738002][ T7441] xt_CT: No such helper "syz0"
[   70.768840][ T7449] IPv6: Can't replace route, no match found
[   70.859674][ T7459] netlink: 'syz.2.712': attribute type 1 has an invalid length.
[   70.862042][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'.
[   70.879001][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.880935][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.967001][ T7473] netlink: 'syz.0.718': attribute type 5 has an invalid length.
[   71.130105][ T7493] netlink: 348 bytes leftover after parsing attributes in process `syz.2.729'.
[   71.181732][ T7500] No such timeout policy "syz1"
[   71.186996][ T7497] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.731'.
[   71.301515][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'.
[   71.388350][ T7529] IPv6: Can't replace route, no match found
[   71.420716][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[   71.423371][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[   71.653153][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'.
[   71.699228][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'.
[   71.739965][ T7574] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.754754][ T7574] macvlan3: entered promiscuous mode
[   71.756455][ T7574] macvlan3: entered allmulticast mode
[   71.762179][ T7574] bond2: (slave macvlan3): Opening slave failed
[   71.769907][ T7579] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   71.899633][ T7595] netlink: 'syz.1.778': attribute type 16 has an invalid length.
[   71.916431][ T7595] netlink: 'syz.1.778': attribute type 17 has an invalid length.
[   71.945220][ T7595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.419742][ T7647] vlan3: entered promiscuous mode
[   72.429457][ T7647] bond0: entered promiscuous mode
[   72.553339][ T7661] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[   72.564530][ T7661] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[   73.514699][ T7708] nbd1: detected capacity change from 0 to 63
[   73.520375][ T7711] block nbd1: NBD_DISCONNECT
[   73.522054][ T7711] block nbd1: Disconnected due to user request.
[   73.524026][ T7711] block nbd1: shutting down sockets
[   73.528483][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.531423][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read
[   73.541042][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.543818][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read
[   73.574810][   T60] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 0
[   73.577622][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[   73.580414][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[   73.583829][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.590357][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read
[   73.595871][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.600945][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read
[   73.607295][ T5831] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.612952][ T5831] Buffer I/O error on dev nbd1, logical block 2, async page read
[   73.628943][ T5831] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.643936][ T5831] Buffer I/O error on dev nbd1, logical block 3, async page read
[   73.652823][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.658478][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read
[   73.660935][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.663579][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read
[   73.683144][ T5831] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.701141][ T5831] ldm_validate_partition_table(): Disk read failed.
[   73.713277][ T5831] Dev nbd1: unable to read RDB block 0
[   73.717453][ T5831]  nbd1: unable to read partition table
[   73.728211][ T5831] ldm_validate_partition_table(): Disk read failed.
[   73.731048][ T5831] Dev nbd1: unable to read RDB block 0
[   73.735867][ T5831]  nbd1: unable to read partition table
[   74.431224][ T7802] netlink: 'syz.2.875': attribute type 5 has an invalid length.
[   74.440020][ T7802] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.442797][ T7802] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.445495][ T7802] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.448093][ T7802] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.758488][ T7823] netlink: 'syz.1.885': attribute type 7 has an invalid length.
[   74.760915][ T7823] netlink: 'syz.1.885': attribute type 8 has an invalid length.
[   74.798329][ T7825] xt_hashlimit: size too large, truncated to 1048576
[   75.241134][ T7839] netlink: 'syz.0.891': attribute type 10 has an invalid length.
[   75.263241][ T7839] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.267171][ T7841] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   75.272938][ T7838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.354166][ T7847] syzkaller1: entered promiscuous mode
[   75.356653][ T7847] syzkaller1: entered allmulticast mode
[   75.699905][ T7872] __nla_validate_parse: 16 callbacks suppressed
[   75.699916][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'.
[   75.862311][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[   76.031164][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.033977][ T7900] batadv_slave_0: entered promiscuous mode
[   76.345217][ T7924] netlink: 14 bytes leftover after parsing attributes in process `syz.0.931'.
[   76.364344][ T7924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.369630][ T7924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.373846][ T7924] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   76.382237][ T7924] bond0 (unregistering): Released all slaves
[   76.467285][ T7928] netlink: 52 bytes leftover after parsing attributes in process `syz.2.933'.
[   76.470347][ T7928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.933'.
[   76.562920][ T7942] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   76.591149][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.942'.
[   77.233714][ T8005] netlink: 720 bytes leftover after parsing attributes in process `syz.1.969'.
[   77.238473][ T8005] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   77.241415][ T8005] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   77.509857][ T8029] syzkaller1: entered promiscuous mode
[   77.511979][ T8029] syzkaller1: entered allmulticast mode
[   77.564958][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.972'.
[   77.569765][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.972'.
[   77.732762][ T8051] pim6reg1: entered promiscuous mode
[   77.734455][ T8051] pim6reg1: entered allmulticast mode
[   77.840176][ T8067] netlink: 'syz.2.988': attribute type 30 has an invalid length.
[   77.887372][ T8075] netlink: 'syz.1.990': attribute type 21 has an invalid length.
[   78.033693][ T8095] pim6reg0: tun_chr_ioctl cmd 1074025694
[   78.358324][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'.
[   78.385442][ T5297] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[   78.403539][ T5297] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[   78.408230][ T5297] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[   78.410506][ T5297] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[   78.412794][ T5297] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[   78.424437][ T8147] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   78.430552][ T5297] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3
[   78.445697][ T5297] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   78.719633][ T8183] netlink: 'syz.1.1036': attribute type 1 has an invalid length.
[   78.721993][ T8183] netlink: 'syz.1.1036': attribute type 2 has an invalid length.
[   78.732183][ T8186] netlink: 'syz.2.1037': attribute type 1 has an invalid length.
[   79.297479][ T8246] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   79.374502][ T8252] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   80.149928][ T8321] netlink: 'syz.1.1097': attribute type 4 has an invalid length.
[   80.529224][ T8351] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.532117][ T8351] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.536740][ T8351] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.539459][ T8351] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.596971][ T8351] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.600109][ T8351] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.603166][ T8351] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.606387][ T8351] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.752281][ T8363] __nla_validate_parse: 12 callbacks suppressed
[   80.752291][ T8363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1115'.
[   80.758291][ T8363] openvswitch: netlink: Flow actions attr not present in new flow.
[   80.814478][ T8371] tipc: Started in network mode
[   80.817609][ T8371] tipc: Node identity ac1414aa, cluster identity 4711
[   80.821261][ T8371] tipc: Enabled bearer <udp:syz2>, priority 10
[   80.974647][ T8389] netlink: 'syz.2.1128': attribute type 21 has an invalid length.
[   80.977124][ T8389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1128'.
[   81.106039][   T10] cfg80211: failed to load regulatory.db
[   81.253901][ T8415] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1140'.
[   81.331091][ T8409] geneve0: entered promiscuous mode
[   81.561987][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'.
[   81.651563][ T8454] x_tables: unsorted entry at hook 1
[   81.661399][ T8456] ip6t_srh: unknown srh match flags  4000
[   81.714488][ T8464] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1163'.
[   81.780838][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'.
[   81.783491][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'.
[   81.815564][  T792] tipc: Node number set to 2886997162
[   82.127356][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'.
[   82.219879][ T8497] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1180'.
[   82.803476][ T8534] IPVS: length: 209 != 24
[   83.007440][ T8560] atomic_op ffff88810abe1998 conn xmit_atomic 0000000000000000
[   83.018134][ T8562] 
[   83.019144][ T8562] =============================
[   83.020690][ T8562] WARNING: suspicious RCU usage
[   83.022177][ T8562] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   83.025401][ T8562] -----------------------------
[   83.026872][ T8562] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   83.029501][ T8562] 
[   83.029501][ T8562] other info that might help us debug this:
[   83.029501][ T8562] 
SYZFAIL: failed to recv rpc
[   83.032490][ T8562] 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   83.032490][ T8562] rcu_scheduler_active = 2, debug_locks = 1
[   83.035462][ T8562] 1 lock held by syz.2.1209/8562:
[   83.036948][ T8562]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   83.039900][ T8562] 
[   83.039900][ T8562] stack backtrace:
[   83.041617][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.2.1209 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   83.041629][ T8562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.041635][ T8562] Call Trace:
[   83.041640][ T8562]  <TASK>
[   83.041660][ T8562]  dump_stack_lvl+0x189/0x250
[   83.041676][ T8562]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.041686][ T8562]  ? __pfx__printk+0x10/0x10
[   83.041700][ T8562]  ? print_lock_name+0xde/0x100
[   83.041714][ T8562]  lockdep_rcu_suspicious+0x140/0x1d0
[   83.041726][ T8562]  task_cls_state+0x1a5/0x1d0
[   83.041739][ T8562]  bpf_get_cgroup_classid_curr+0x18/0x60
[   83.041747][ T8562]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   83.041756][ T8562]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   83.041768][ T8562]  bpf_prog_test_run_syscall+0x312/0x4b0
[   83.041780][ T8562]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   83.041789][ T8562]  ? __fget_files+0x2a/0x420
[   83.041803][ T8562]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   83.041814][ T8562]  bpf_prog_test_run+0x2c7/0x340
[   83.041825][ T8562]  __sys_bpf+0x4a4/0x860
[   83.041834][ T8562]  ? __pfx___sys_bpf+0x10/0x10
[   83.041850][ T8562]  ? exc_page_fault+0x76/0xf0
[   83.041866][ T8562]  ? rcu_is_watching+0x15/0xb0
[   83.041878][ T8562]  __x64_sys_bpf+0x7c/0x90
[   83.041890][ T8562]  do_syscall_64+0xfa/0x3b0
[   83.041897][ T8562]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.041924][ T8562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.041935][ T8562]  ? exc_page_fault+0x9f/0xf0
[   83.041949][ T8562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.041958][ T8562] RIP: 0033:0x7f4d34b8e929
[   83.041968][ T8562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.041976][ T8562] RSP: 002b:00007f4d35a22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   83.041985][ T8562] RAX: ffffffffffffffda RBX: 00007f4d34db5fa0 RCX: 00007f4d34b8e929
[   83.041990][ T8562] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   83.041995][ T8562] RBP: 00007f4d34c10b39 R08: 0000000000000000 R09: 0000000000000000
[   83.042000][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.042004][ T8562] R13: 0000000000000000 R14: 00007f4d34db5fa0 R15: 00007ffc129cc258
[   83.042016][ T8562]  </TASK>
[   83.184783][ T5830] Bluetooth: hci2: command tx timeout
[   83.447326][ T5857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.529454][ T5857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.607197][ T5857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.660904][ T5857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.093647][ T5857] bond0 (unregistering): Released all slaves
[   84.102574][ T5857] bond1 (unregistering): Released all slaves
[   84.174652][ T5857] tipc: Left network mode
[   84.377452][ T5857] hsr_slave_0: left promiscuous mode
[   84.379539][ T5857] hsr_slave_1: left promiscuous mode
[   84.393132][ T5857] veth1_macvtap: left promiscuous mode
[   84.395214][ T5857] veth0_macvtap: left promiscuous mode
[   84.396950][ T5857] veth1_vlan: left promiscuous mode
[   84.398726][ T5857] veth0_vlan: left promiscuous mode
[   85.199963][ T5857] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.240111][ T5857] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.290961][ T5857] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.346571][ T5857] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.692277][ T5857] bridge_slave_1: left allmulticast mode
[   85.694082][ T5857] bridge_slave_1: left promiscuous mode
[   85.697342][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.701652][ T5857] bridge_slave_0: left allmulticast mode
[   85.703463][ T5857] bridge_slave_0: left promiscuous mode
[   85.705930][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.798985][ T5857] batman_adv: batadv0: Interface deactivated: macvlan2
[   85.812288][ T5857] batman_adv: batadv0: Removing interface: macvlan2
[   85.834317][ T5857] bond1 (unregistering): (slave gretap1): Releasing active interface
[   85.861291][ T5857] dvmrp8 (unregistering): left allmulticast mode
[   86.029925][ T5857] bond1 (unregistering): Released all slaves
[   86.114859][ T5857] bond2 (unregistering): Released all slaves
[   86.358220][ T5857] bond0 (unregistering): Released all slaves
[   86.365437][ T5857] bond1 (unregistering): Released all slaves
[   86.441026][ T5857] tipc: Disabling bearer <udp:syz2>
[   86.449342][ T5857] tipc: Left network mode
[   86.810569][ T5857] hsr_slave_0: left promiscuous mode
[   86.814815][ T5857] hsr_slave_1: left promiscuous mode
[   86.816917][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.825758][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.827965][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.838522][ T5857] hsr_slave_0: left promiscuous mode
[   86.842691][ T5857] hsr_slave_1: left promiscuous mode
[   86.855817][ T5857] veth1_macvtap: left promiscuous mode
[   86.858123][ T5857] veth0_macvtap: left promiscuous mode
[   86.859861][ T5857] veth1_vlan: left promiscuous mode
[   86.861506][ T5857] veth0_vlan: left promiscuous mode
[   87.150521][ T5857] team0 (unregistering): Port device team_slave_1 removed
[   87.177876][ T5857] team0 (unregistering): Port device C removed

VM DIAGNOSIS:
02:19:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f79 RDI=0000000000000f7a RBP=00000000000003f8 RSP=ffffc9000432f550
R8 =ffff88801fd20237 R9 =1ffff11003fa4046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78fa R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4d35a226c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3021fffc CR3=000000012457c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4d34d85478 00007f4d34d85450 XMM03=00007f4d34d85488 00007f4d34d85480
XMM04=00007f4d358ed100 00007f4d34d85440 XMM05=00007f4d34d85458 00007f4d34d854a0
XMM06=00007f4d34d85498 00007f4d34d85490 XMM07=00007f4d34d85488 00007f4d34d85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4d34c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888126135010 RBX=ffff888126135080 RCX=000000000000000e RDX=0000000000000000
RSI=000000000000000e RDI=000000000000001f RBP=ffffc90003e4f328 RSP=ffffc90003e4f0a0
R8 =ffffea0000ab38c7 R9 =1ffffd4000156718 R10=dffffc0000000000 R11=fffff94000156719
R12=1ffff11024c26a10 R13=ffffea0000ab3840 R14=000000000000000e R15=000000000000000e
RIP=ffffffff821b1d79 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6989dd96c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562cdfe6e000 CR3=0000000110d9c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133a4fe ffffffff8133a4fe
XMM02=0000000000000000 ffffffff8133a4fe XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
