last executing test programs:

280.778108ms ago: executing program 1 (id=602):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4})

280.465775ms ago: executing program 0 (id=603):
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}}}}}, &(0x7f0000000080)={0x0, 0x3, [0xa37, 0x8e3, 0x500, 0x8e6]})

280.160414ms ago: executing program 2 (id=604):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0)

210.652813ms ago: executing program 0 (id=605):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x7f, 0x20000a30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x3000000}})

210.186845ms ago: executing program 1 (id=606):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYBLOB='\b\x00('], 0x44}}, 0x0)

209.859306ms ago: executing program 2 (id=607):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

209.516811ms ago: executing program 2 (id=608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)

150.53778ms ago: executing program 1 (id=609):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x1, 0x8002, 0x3, 0xeb020000, 0x519, 0x8, 0x3ff, r2}, &(0x7f0000000240)=0x20)

150.28336ms ago: executing program 0 (id=610):
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000004c0)=0x9, 0x4)

149.575256ms ago: executing program 2 (id=611):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0xcc, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}]}]}, 0xcc}}, 0x0)

149.225493ms ago: executing program 1 (id=612):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xf}, &(0x7f0000000340)=0x8)

149.040924ms ago: executing program 0 (id=613):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="14465ac303afc3ac671d38e5cc2ca0857aa5", 0x12}], 0x1}}], 0x1, 0x8000)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0)

69.039019ms ago: executing program 2 (id=614):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x20040890)

68.804905ms ago: executing program 0 (id=615):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockname(r0, 0x0, &(0x7f0000000180))

68.541295ms ago: executing program 2 (id=616):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3c}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)

68.15694ms ago: executing program 1 (id=617):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0, 0x4, r2}, 0x10)

466.919µs ago: executing program 0 (id=618):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040))

0s ago: executing program 1 (id=619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36180' (ED25519) to the list of known hosts.
syzkaller login: [   57.243770][ T5828] cgroup: Unknown subsys name 'net'
[   57.351459][ T5828] cgroup: Unknown subsys name 'cpuset'
[   57.360683][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.037044][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.223593][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.226286][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.385712][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.398332][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.402496][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.406557][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.410449][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.507595][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.512623][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.518240][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.523129][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.532476][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.536544][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.583147][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.587212][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.593250][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.606626][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.771492][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   71.969094][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.971889][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.975392][ T5867] bridge_slave_0: entered allmulticast mode
[   71.979866][ T5867] bridge_slave_0: entered promiscuous mode
[   71.992167][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   72.000496][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.003504][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.006691][ T5867] bridge_slave_1: entered allmulticast mode
[   72.011327][ T5867] bridge_slave_1: entered promiscuous mode
[   72.028316][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   72.075949][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.095957][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.185953][ T5867] team0: Port device team_slave_0 added
[   72.191218][ T5867] team0: Port device team_slave_1 added
[   72.193333][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.195618][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.197787][ T5870] bridge_slave_0: entered allmulticast mode
[   72.202388][ T5870] bridge_slave_0: entered promiscuous mode
[   72.205892][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.209503][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.212388][ T5870] bridge_slave_1: entered allmulticast mode
[   72.216135][ T5870] bridge_slave_1: entered promiscuous mode
[   72.284645][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.286944][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.291916][ T5871] bridge_slave_0: entered allmulticast mode
[   72.295001][ T5871] bridge_slave_0: entered promiscuous mode
[   72.299072][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.301456][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.310397][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.320564][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.323970][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.327095][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.330248][ T5871] bridge_slave_1: entered allmulticast mode
[   72.333099][ T5871] bridge_slave_1: entered promiscuous mode
[   72.336308][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.340570][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.350574][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.356820][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.446414][ T5867] hsr_slave_0: entered promiscuous mode
[   72.449500][ T5867] hsr_slave_1: entered promiscuous mode
[   72.452899][ T5870] team0: Port device team_slave_0 added
[   72.460750][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.465544][ T5870] team0: Port device team_slave_1 added
[   72.470614][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.559138][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.561615][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.571442][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.576459][ T5871] team0: Port device team_slave_0 added
[   72.584433][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.586558][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.596302][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.601808][ T5871] team0: Port device team_slave_1 added
[   72.652874][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.655253][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.663937][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.687827][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.691459][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.701578][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.742463][ T5870] hsr_slave_0: entered promiscuous mode
[   72.745578][ T5870] hsr_slave_1: entered promiscuous mode
[   72.749132][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   72.751197][ T5870] Cannot create hsr debugfs directory
[   72.858245][ T5871] hsr_slave_0: entered promiscuous mode
[   72.861198][ T5871] hsr_slave_1: entered promiscuous mode
[   72.863443][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   72.865274][ T5871] Cannot create hsr debugfs directory
[   73.002613][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.023977][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.052986][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.060592][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.154186][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.175846][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.185591][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.193783][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.252580][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.266331][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.277036][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.282971][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.352141][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.405615][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   73.422951][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.425842][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.439306][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.442004][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.451575][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.458660][ T5238] Bluetooth: hci0: command tx timeout
[   73.493303][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   73.499603][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.521755][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.524535][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.547005][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.549922][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.563627][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   73.586241][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.588984][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.622492][  T712] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.624716][  T712] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.630591][ T5238] Bluetooth: hci1: command tx timeout
[   73.671050][ T5870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.674265][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.698332][ T5238] Bluetooth: hci2: command tx timeout
[   73.784937][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.861835][ T5867] veth0_vlan: entered promiscuous mode
[   73.875121][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.885247][ T5867] veth1_vlan: entered promiscuous mode
[   73.947384][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.960750][ T5870] veth0_vlan: entered promiscuous mode
[   73.963403][ T5867] veth0_macvtap: entered promiscuous mode
[   73.976320][ T5867] veth1_macvtap: entered promiscuous mode
[   73.984438][ T5870] veth1_vlan: entered promiscuous mode
[   74.025254][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.043200][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.053097][ T5870] veth0_macvtap: entered promiscuous mode
[   74.058739][ T5871] veth0_vlan: entered promiscuous mode
[   74.067659][ T5870] veth1_macvtap: entered promiscuous mode
[   74.072963][ T5898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.089744][ T5898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.095960][ T5871] veth1_vlan: entered promiscuous mode
[   74.099015][ T5898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.106419][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.109818][ T5898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.143728][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.173684][ T5898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.177060][ T5898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.201396][ T5898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.211679][ T5898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.250213][ T5871] veth0_macvtap: entered promiscuous mode
[   74.255006][  T712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.259974][  T712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.282311][ T5871] veth1_macvtap: entered promiscuous mode
[   74.321355][  T712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.325928][  T712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.370253][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.382541][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.385535][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.397645][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.404978][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.422693][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.426944][ T5898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.438516][ T5898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.441748][ T5898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.474204][  T712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.477680][  T712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.549068][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.552235][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.630410][ T5938] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.631459][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.637732][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.774989][ T5944] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.13'.
[   74.799404][ T5946] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.125933][ T5960] netlink: zone id is out of range
[   75.133672][ T5960] netlink: zone id is out of range
[   75.136268][ T5960] netlink: zone id is out of range
[   75.143387][ T5960] netlink: zone id is out of range
[   75.150823][ T5960] netlink: zone id is out of range
[   75.154570][ T5960] netlink: zone id is out of range
[   75.157841][ T5960] netlink: zone id is out of range
[   75.170235][ T5960] netlink: zone id is out of range
[   75.175098][ T5960] netlink: zone id is out of range
[   75.179788][ T5960] netlink: zone id is out of range
[   75.542043][ T5238] Bluetooth: hci0: command tx timeout
[   75.698619][ T5238] Bluetooth: hci1: command tx timeout
[   75.780121][ T5238] Bluetooth: hci2: command tx timeout
[   75.923065][ T6011] netlink: 'syz.2.49': attribute type 3 has an invalid length.
[   75.930608][ T6011] syz_tun: entered allmulticast mode
[   75.954796][ T6011] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.973866][ T6011] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   76.084593][ T6010] syz_tun: left allmulticast mode
[   76.354575][ T6037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.60'.
[   76.373003][ T6039] Zero length message leads to an empty skb
[   76.403229][ T5930] IPVS: starting estimator thread 0...
[   76.450140][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'.
[   76.488263][ T6042] IPVS: using max 39 ests per chain, 93600 per kthread
[   76.841931][ T6068] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.74'.
[   76.845659][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   76.910102][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   76.915150][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   77.073794][   T47] IPVS: starting estimator thread 0...
[   77.137535][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'.
[   77.148483][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[   77.196419][ T6088] IPVS: using max 61 ests per chain, 146400 per kthread
[   77.280812][ T6100] netlink: 'syz.1.89': attribute type 7 has an invalid length.
[   77.621414][ T5238] Bluetooth: hci0: command tx timeout
[   77.640955][ T6122] netlink: 312 bytes leftover after parsing attributes in process `syz.2.100'.
[   77.659957][ T6123] Bluetooth: MGMT ver 1.23
[   77.778501][ T5238] Bluetooth: hci1: command tx timeout
[   77.858303][ T5238] Bluetooth: hci2: command tx timeout
[   78.006419][   T33] audit: type=1800 audit(1755268002.782:2): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.110" name="memory.events" dev="tmpfs" ino=169 res=0 errno=0
[   78.050597][   T33] audit: type=1804 audit(1755268002.782:3): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.110" name="memory.events" dev="tmpfs" ino=169 res=1 errno=0
[   78.496503][ T6172] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   78.915513][ T6204] netlink: 'syz.0.137': attribute type 11 has an invalid length.
[   79.463892][ T6228] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[   79.699981][ T5238] Bluetooth: hci0: command tx timeout
[   79.859186][ T5238] Bluetooth: hci1: command tx timeout
[   79.926225][ T6248] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.938822][ T5238] Bluetooth: hci2: command tx timeout
[   80.264902][ T6264] __nla_validate_parse: 2 callbacks suppressed
[   80.264920][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'.
[   80.378149][ T6270] netlink: 224 bytes leftover after parsing attributes in process `syz.1.165'.
[   80.725842][ T6285] ip6erspan0: entered allmulticast mode
[   80.814021][ T6290] netlink: 128 bytes leftover after parsing attributes in process `syz.0.174'.
[   80.817836][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'.
[   80.819068][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'.
[   80.826463][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'.
[   80.830414][ T6291] netlink: 5 bytes leftover after parsing attributes in process `syz.1.175'.
[   80.925037][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'.
[   80.939942][ T6297] netlink: 'syz.1.177': attribute type 20 has an invalid length.
[   80.967052][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'.
[   80.973344][ T6297] netlink: 'syz.1.177': attribute type 20 has an invalid length.
[   80.986131][ T5898] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.990984][ T5898] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.994978][ T5898] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.002416][ T5898] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.066694][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   82.167558][ T6361] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   82.172107][ T5898] bond0: (slave bond_slave_0): interface is now down
[   82.174959][ T5898] bond0: (slave bond_slave_1): interface is now down
[   82.200430][ T5898] bond0: (slave bond_slave_0): interface is now down
[   82.203163][ T5898] bond0: (slave bond_slave_1): interface is now down
[   82.222728][ T5898] bond0: (slave bond_slave_0): interface is now down
[   82.225473][ T5898] bond0: (slave bond_slave_1): interface is now down
[   82.237700][ T5898] bond0: now running without any active interface!
[   82.270044][ T5868] Bluetooth: hci2: command 0x0405 tx timeout
[   82.507060][ T6386] syzkaller1: entered promiscuous mode
[   82.514308][ T6386] syzkaller1: entered allmulticast mode
[   82.860197][ T6402] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   82.960265][ T6402] bridge_slave_0: left allmulticast mode
[   82.962594][ T6402] bridge_slave_0: left promiscuous mode
[   82.966527][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.000996][ T6402] bridge_slave_1: left allmulticast mode
[   83.003336][ T6402] bridge_slave_1: left promiscuous mode
[   83.006594][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.012113][ T6417] netlink: 'syz.0.219': attribute type 10 has an invalid length.
[   83.025701][ T6402] bond0: (slave bond_slave_0): Releasing backup interface
[   83.062054][ T6402] bond0: (slave bond_slave_1): Releasing backup interface
[   83.087501][ T6402] team0: Port device team_slave_0 removed
[   83.092822][ T6402] team0: Port device team_slave_1 removed
[   83.095387][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.098579][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.115490][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.127428][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.156647][ T6417] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   83.200571][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.218640][ T5866] bond0: (slave wlan1): interface is now down
[   83.218844][ T6417] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.238904][ T5866] bond0: (slave wlan1): interface is now down
[   83.248591][ T5866] bond0: now running without any active interface!
[   83.332755][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.340997][ T6431] bond0: (slave rose0): Enslaving as an active interface with an up link
[   83.610891][ T1849] cfg80211: failed to load regulatory.db
[   83.745789][ T6454] netlink: 'syz.1.238': attribute type 21 has an invalid length.
[   84.214186][ T6495] ip6gre1: entered allmulticast mode
[   84.434816][ T6505] bridge_slave_0: entered promiscuous mode
[   84.705017][ T6515] netlink: 'syz.0.260': attribute type 11 has an invalid length.
[   85.086817][ T6522] sctp: [Deprecated]: syz.0.263 (pid 6522) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.086817][ T6522] Use struct sctp_sack_info instead
[   85.092723][ T6522] sctp: [Deprecated]: syz.0.263 (pid 6522) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.092723][ T6522] Use struct sctp_sack_info instead
[   85.657443][ T6550] tipc: Started in network mode
[   85.659712][ T6550] tipc: Node identity 72921e9ef7af, cluster identity 4711
[   85.662634][ T6550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.665647][ T6550] syzkaller0: entered promiscuous mode
[   85.667671][ T6550] syzkaller0: entered allmulticast mode
[   85.705378][ T6550] tipc: Resetting bearer <eth:syzkaller0>
[   85.726524][ T6549] tipc: Resetting bearer <eth:syzkaller0>
[   85.752060][ T6549] tipc: Disabling bearer <eth:syzkaller0>
[   85.802392][ T6556] __nla_validate_parse: 6 callbacks suppressed
[   85.802404][ T6556] netlink: 6 bytes leftover after parsing attributes in process `syz.2.277'.
[   85.845798][ T6556] net_ratelimit: 94 callbacks suppressed
[   85.845856][ T6556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.778846][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[   86.836345][ T6610] bridge_slave_1: left allmulticast mode
[   86.842219][ T6610] bridge_slave_1: left promiscuous mode
[   86.844907][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.865638][ T6610] bridge_slave_0: left allmulticast mode
[   86.871678][ T6610] bridge_slave_0: left promiscuous mode
[   86.874463][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.019403][ T6615] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   87.020691][ T6614] IPVS: stopping backup sync thread 6615 ...
[   87.029194][ T6613] netlink: 260 bytes leftover after parsing attributes in process `syz.1.302'.
[   87.037426][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'.
[   87.044000][ T6613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'.
[   87.140462][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.147406][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.175182][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.180838][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.261864][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.359817][ T6629] netlink: 'syz.2.307': attribute type 6 has an invalid length.
[   88.103608][ T6692] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   88.175770][ T6698] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   88.283662][ T6702] tipc: Started in network mode
[   88.285915][ T6702] tipc: Node identity 86df3e8d94cb, cluster identity 4711
[   88.299058][ T6702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.307773][ T6702] syzkaller0: entered promiscuous mode
[   88.313230][ T6702] syzkaller0: entered allmulticast mode
[   88.345094][ T6702] tipc: Resetting bearer <eth:syzkaller0>
[   88.360767][ T6701] tipc: Resetting bearer <eth:syzkaller0>
[   88.389206][ T6701] tipc: Disabling bearer <eth:syzkaller0>
[   88.441499][ T6708] netlink: 'syz.0.343': attribute type 12 has an invalid length.
[   88.569233][ T6715] erspan0: entered promiscuous mode
[   88.618777][ T6715] erspan0: left promiscuous mode
[   89.221648][ T6763] vlan2: entered promiscuous mode
[   89.223793][ T6763] gretap0: entered promiscuous mode
[   89.741582][ T6787] netlink: 'syz.1.379': attribute type 4 has an invalid length.
[   89.839741][ T6792] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.851497][ T6792] bond_slave_0: entered promiscuous mode
[   89.854368][ T6792] bond_slave_1: entered promiscuous mode
[   89.857382][ T6792] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   89.867568][ T6792] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   89.878942][ T6792] bridge_slave_0: left allmulticast mode
[   89.881056][ T6792] bridge_slave_0: left promiscuous mode
[   89.883241][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.890629][ T6792] bridge_slave_1: left allmulticast mode
[   89.892849][ T6792] bridge_slave_1: left promiscuous mode
[   89.895071][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.906545][ T6792] bond0: (slave bond_slave_0): Releasing backup interface
[   89.912018][ T6792] bond_slave_0: left promiscuous mode
[   89.919455][ T6792] bond0: (slave bond_slave_1): Releasing backup interface
[   89.925543][ T6792] bond_slave_1: left promiscuous mode
[   89.940957][ T6792] team0: Port device team_slave_0 removed
[   89.954325][ T6792] team0: Port device team_slave_1 removed
[   89.957594][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.962079][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.968924][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.972336][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.986715][ T6792] bond1: (slave macvlan2): Removing an active aggregator
[   89.991120][ T6792] bond1: (slave macvlan2): Releasing backup interface
[   90.005966][ T6792] syz.1.382 (6792) used greatest stack depth: 19416 bytes left
[   90.258274][ T5238] Bluetooth: hci0: command tx timeout
[   90.713962][ T6843] netlink: 'syz.0.399': attribute type 1 has an invalid length.
[   91.115755][ T6865] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   91.119114][ T6865] macvlan3: entered allmulticast mode
[   91.121526][ T6865] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   91.127329][ T6865] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   91.131731][ T6865] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   91.252758][ T6868] pim6reg1: entered allmulticast mode
[   91.659270][ T6898] batadv_slave_0: entered promiscuous mode
[   91.697766][ T6891] __nla_validate_parse: 12 callbacks suppressed
[   91.697782][ T6891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.419'.
[   91.743810][ T6900] netlink: 'syz.0.421': attribute type 1 has an invalid length.
[   91.746918][ T6900] netlink: 244 bytes leftover after parsing attributes in process `syz.0.421'.
[   91.778489][ T6891] syz.2.419 uses obsolete (PF_INET,SOCK_PACKET)
[   91.840810][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'.
[   91.909812][ T6890] batadv_slave_0: left promiscuous mode
[   91.937686][ T6908] smc: net device bond0 applied user defined pnetid SYZ2
[   91.946184][ T6908] smc: net device bond0 erased user defined pnetid SYZ2
[   92.037728][ T6918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.119663][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'.
[   92.124814][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'.
[   92.132847][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'.
[   92.232690][ T6930] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   92.291717][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.437'.
[   92.370280][ T6940] netlink: 'syz.2.440': attribute type 21 has an invalid length.
[   92.927220][ T6979] pim6reg1: entered promiscuous mode
[   92.929690][ T6979] pim6reg1: entered allmulticast mode
[   93.072488][ T6988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.213790][ T7088] netlink: 'syz.1.507': attribute type 10 has an invalid length.
[   94.484928][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'.
[   94.498187][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'.
[   94.671868][ T7113] syzkaller0: entered promiscuous mode
[   94.674227][ T7113] syzkaller0: entered allmulticast mode
[   95.777334][ T7135] netlink: 'syz.1.528': attribute type 14 has an invalid length.
[   95.837600][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[   95.986229][ T7155] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   96.715039][ T7164] ieee802154 phy0 wpan0: encryption failed: -22
[   96.844376][ T7175] netlink: 248 bytes leftover after parsing attributes in process `syz.0.547'.
[   97.026323][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'.
[   97.069485][ T7199] netem: incorrect ge model size
[   97.071434][ T7199] netem: change failed
[   97.089299][ T7198] pim6reg1: entered promiscuous mode
[   97.099266][ T7198] pim6reg1: entered allmulticast mode
[   97.594294][ T7240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.577'.
[   97.679292][ T7240] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   97.683099][  T793] IPVS: starting estimator thread 0...
[   97.768301][ T7242] IPVS: using max 61 ests per chain, 146400 per kthread
[   97.931535][ T7247] netlink: 'syz.1.579': attribute type 16 has an invalid length.
[   97.938166][ T7247] netlink: 'syz.1.579': attribute type 17 has an invalid length.
[   98.150691][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'.
[   98.161464][ T7256] netlink: 96 bytes leftover after parsing attributes in process `syz.0.583'.
[   98.170126][ T7256] vlan2: entered allmulticast mode
[   98.171872][ T7256] gretap0: entered allmulticast mode
[   98.240332][ T7260] netlink: 72 bytes leftover after parsing attributes in process `syz.0.585'.
[   98.256572][ T7260] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   98.381171][ T7269] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   98.392800][ T7272] netlink: 100 bytes leftover after parsing attributes in process `syz.2.591'.
[   98.672124][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[   98.725585][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'.
[   98.911232][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'.
[   98.924750][ T7326] veth0: entered promiscuous mode
[   98.928972][ T7326] veth0: left promiscuous mode
Connection to localhost closed by remote host.
[   99.704709][ T5898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.756745][ T5898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.803500][ T5898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.876339][ T5898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.458342][ T5898] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  100.461591][ T5898] bond0 (unregistering): Released all slaves
[  100.539578][ T5898] tipc: Left network mode
[  100.754135][ T5898] hsr_slave_0: left promiscuous mode
[  100.756911][ T5898] hsr_slave_1: left promiscuous mode
[  100.768898][ T5898] veth1_macvtap: left promiscuous mode
[  100.771177][ T5898] veth0_macvtap: left promiscuous mode
[  100.773114][ T5898] veth1_vlan: left promiscuous mode
[  100.774936][ T5898] veth0_vlan: left promiscuous mode
[  101.780292][ T5898] IPVS: stop unused estimator thread 0...
[  101.842667][ T5898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.900062][ T5898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.966643][ T5898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.024527][ T5898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.308198][ T5898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.313342][ T5898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.317839][ T5898] bond0 (unregistering): Released all slaves
[  102.540476][ T5898] hsr_slave_0: left promiscuous mode
[  102.543178][ T5898] hsr_slave_1: left promiscuous mode
[  102.545662][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.549881][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.553553][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.556266][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.566621][ T5898] veth1_macvtap: left promiscuous mode
[  102.570935][ T5898] veth0_macvtap: left promiscuous mode
[  102.573168][ T5898] veth1_vlan: left promiscuous mode
[  102.575220][ T5898] veth0_vlan: left promiscuous mode
[  102.944775][ T5898] team0 (unregistering): Port device team_slave_1 removed
[  102.971585][ T5898] team0 (unregistering): Port device team_slave_0 removed
[  103.224803][   T24] infiniband syz0: ib_query_port failed (-19)
[  103.511486][ T5898] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
14:27:14  Registers:
info registers vcpu 0

CPU#0
RAX=2614943284f3f700 RBX=ffffffff81968308 RCX=2614943284f3f700 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005636f4733400 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff000000ff000000 0000000000000000 XMM05=0000000000000135 0000000000003030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=6c6c696b66722f35 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=47593d6937b8be00 RBX=ffffffff81968308 RCX=47593d6937b8be00 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000000c0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=00000000000000a1 00006b6300003031
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffff0000ffff0000 XMM09=00000000000000a1 6e006b6300003031
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
