last executing test programs:

16.423371154s ago: executing program 2 (id=272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

16.321077479s ago: executing program 2 (id=275):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

16.221315347s ago: executing program 2 (id=276):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20)

15.931979764s ago: executing program 2 (id=283):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)}, 0x20)

8.621704964s ago: executing program 2 (id=283):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)}, 0x20)

479.147077ms ago: executing program 1 (id=496):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20)

410.889683ms ago: executing program 0 (id=497):
unshare(0x24020400)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(r0, &(0x7f0000000040)=0xfffffffffffffffe, r0, 0x0, 0x11, 0x8)

410.718594ms ago: executing program 1 (id=498):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240))

360.783099ms ago: executing program 0 (id=499):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5, 0x4}, 0x20)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

360.399856ms ago: executing program 1 (id=500):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

320.073937ms ago: executing program 0 (id=501):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94)

313.788833ms ago: executing program 1 (id=502):
unshare(0x2040400)
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x14})

231.986638ms ago: executing program 0 (id=503):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)

231.662881ms ago: executing program 1 (id=504):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
sendto$inet6(r0, &(0x7f0000000540)="1119795f624517", 0x7, 0x850, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40)

231.55272ms ago: executing program 2 (id=283):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)}, 0x20)

981.319µs ago: executing program 0 (id=505):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffb81, 0x40008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x4000004)

251.314µs ago: executing program 1 (id=506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

0s ago: executing program 0 (id=507):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24652' (ED25519) to the list of known hosts.
syzkaller login: [   57.210471][ T5809] cgroup: Unknown subsys name 'net'
[   57.354685][ T5809] cgroup: Unknown subsys name 'cpuset'
[   57.360842][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.227801][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.114229][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.116329][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.189190][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.202000][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.205643][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.217564][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.221147][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.238503][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.242763][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.251955][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.255053][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.258079][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.261197][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.285803][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.293412][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.302933][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.306417][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.732211][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   71.779443][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   71.832858][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   71.926801][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.929871][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.932479][ T5868] bridge_slave_0: entered allmulticast mode
[   71.935290][ T5868] bridge_slave_0: entered promiscuous mode
[   71.962705][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.964964][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.967587][ T5864] bridge_slave_0: entered allmulticast mode
[   71.972853][ T5864] bridge_slave_0: entered promiscuous mode
[   71.976460][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.979376][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.982805][ T5868] bridge_slave_1: entered allmulticast mode
[   71.986645][ T5868] bridge_slave_1: entered promiscuous mode
[   72.023186][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.025442][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.027732][ T5864] bridge_slave_1: entered allmulticast mode
[   72.033472][ T5864] bridge_slave_1: entered promiscuous mode
[   72.048153][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.078734][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.103091][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.105253][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.107346][ T5869] bridge_slave_0: entered allmulticast mode
[   72.110213][ T5869] bridge_slave_0: entered promiscuous mode
[   72.132969][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.135165][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.137313][ T5869] bridge_slave_1: entered allmulticast mode
[   72.140982][ T5869] bridge_slave_1: entered promiscuous mode
[   72.145463][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.161140][ T5868] team0: Port device team_slave_0 added
[   72.166728][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.182028][ T5868] team0: Port device team_slave_1 added
[   72.200868][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.243345][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.250644][ T5864] team0: Port device team_slave_0 added
[   72.254511][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.257263][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.268652][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.296412][ T5864] team0: Port device team_slave_1 added
[   72.302196][ T5869] team0: Port device team_slave_0 added
[   72.306633][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.309468][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.319799][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.343843][ T5869] team0: Port device team_slave_1 added
[   72.384806][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.386917][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.396677][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.402117][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.404509][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.412474][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.416768][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.418900][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.427146][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.433669][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.436272][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.445884][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.535890][ T5868] hsr_slave_0: entered promiscuous mode
[   72.538316][ T5868] hsr_slave_1: entered promiscuous mode
[   72.547870][ T5869] hsr_slave_0: entered promiscuous mode
[   72.551536][ T5869] hsr_slave_1: entered promiscuous mode
[   72.554280][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.557365][ T5869] Cannot create hsr debugfs directory
[   72.564561][ T5864] hsr_slave_0: entered promiscuous mode
[   72.567113][ T5864] hsr_slave_1: entered promiscuous mode
[   72.569766][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.572926][ T5864] Cannot create hsr debugfs directory
[   72.930166][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.943863][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.952355][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.967345][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.014842][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.022707][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.028337][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.051265][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.114009][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.124822][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.142842][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.156719][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.209907][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.240103][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   73.247303][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.270665][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.273102][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.277632][ T5866] Bluetooth: hci2: command tx timeout
[   73.280623][ T5866] Bluetooth: hci0: command tx timeout
[   73.293097][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.295527][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.310978][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   73.325799][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.328393][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.338864][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.341891][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.351167][ T5866] Bluetooth: hci1: command tx timeout
[   73.367845][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.459819][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.504334][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   73.518958][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.521548][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.532121][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.534490][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.544872][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.658147][ T5864] veth0_vlan: entered promiscuous mode
[   73.673286][ T5864] veth1_vlan: entered promiscuous mode
[   73.715955][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.724298][ T5864] veth0_macvtap: entered promiscuous mode
[   73.736612][ T5864] veth1_macvtap: entered promiscuous mode
[   73.769192][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.795573][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.804071][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.807451][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.814162][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.817606][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.838861][ T5868] veth0_vlan: entered promiscuous mode
[   73.865344][ T5868] veth1_vlan: entered promiscuous mode
[   73.888762][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.942859][ T5868] veth0_macvtap: entered promiscuous mode
[   73.957817][ T5868] veth1_macvtap: entered promiscuous mode
[   73.961353][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.965775][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.006990][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.019793][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.021450][ T5869] veth0_vlan: entered promiscuous mode
[   74.023081][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.034246][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.037341][ T5869] veth1_vlan: entered promiscuous mode
[   74.053607][ T5868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.057218][ T5868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.062753][ T5868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.065759][ T5868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.109062][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.128320][ T5869] veth0_macvtap: entered promiscuous mode
[   74.160136][ T5869] veth1_macvtap: entered promiscuous mode
[   74.218110][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.222734][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.253924][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.267572][ T5932] Bluetooth: MGMT ver 1.23
[   74.289339][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.293662][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.296007][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.324977][ T5869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.328285][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.341451][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.344941][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.490624][ T4728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.493759][ T4728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.572528][ T1840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.581198][ T1840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.046030][ T5972] netlink: 'syz.2.37': attribute type 10 has an invalid length.
[   75.079963][ T5972] 8021q: adding VLAN 0 to HW filter on device team0
[   75.084152][ T5972] bond0: (slave team0): Enslaving as an active interface with an up link
[   75.327487][ T5988] netlink: 'syz.0.45': attribute type 7 has an invalid length.
[   75.350890][ T5866] Bluetooth: hci0: command tx timeout
[   75.352735][ T5866] Bluetooth: hci2: command tx timeout
[   75.431523][ T5866] Bluetooth: hci1: command tx timeout
[   75.677850][ T6010] netlink: 64 bytes leftover after parsing attributes in process `syz.2.56'.
[   75.745463][ T6016] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.842912][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.63'.
[   75.847262][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'.
[   75.865850][ T6023] netlink: zone id is out of range
[   75.875699][ T6023] netlink: del zone limit has 4 unknown bytes
[   76.281186][ T6052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.409256][ T6061] syz.0.81 uses obsolete (PF_INET,SOCK_PACKET)
[   76.528223][ T6066] netlink: 'syz.2.84': attribute type 10 has an invalid length.
[   76.638657][ T6076] Zero length message leads to an empty skb
[   76.656467][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   76.696853][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.705751][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'.
[   77.234739][ T6104] xt_CT: No such helper "snmp"
[   77.326104][ T6114] netlink: 64 bytes leftover after parsing attributes in process `syz.0.106'.
[   77.346070][ T6114] netlink: 64 bytes leftover after parsing attributes in process `syz.0.106'.
[   77.351814][ T6114] netlink: 2 bytes leftover after parsing attributes in process `syz.0.106'.
[   77.431503][ T5866] Bluetooth: hci2: command tx timeout
[   77.442419][ T5866] Bluetooth: hci0: command tx timeout
[   77.515291][ T5866] Bluetooth: hci1: command tx timeout
[   77.631997][ T6127] syzkaller1: entered promiscuous mode
[   77.634195][ T6127] syzkaller1: entered allmulticast mode
[   77.724475][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   77.727703][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   79.504341][ T6215] netlink: 'syz.1.150': attribute type 5 has an invalid length.
[   79.510912][ T5866] Bluetooth: hci0: command tx timeout
[   79.513274][ T5866] Bluetooth: hci2: command tx timeout
[   79.595998][   T54] Bluetooth: hci1: command tx timeout
[   80.016541][ T6240] netem: change failed
[   80.172591][ T6249] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   80.181069][ T6249] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   80.230969][ T6253] veth0_to_bond: entered allmulticast mode
[   80.822698][ T6288] netlink: 'syz.1.184': attribute type 41 has an invalid length.
[   81.104900][ T6308] __nla_validate_parse: 4 callbacks suppressed
[   81.104912][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.195'.
[   81.116568][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.195'.
[   81.146576][ T6312] Illegal XDP return value 583725528 on prog  (id 25) dev N/A, expect packet loss!
[   82.082585][ T6370] netlink: 'syz.1.224': attribute type 4 has an invalid length.
[   82.584167][ T6396] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.234'.
[   82.599543][ T6390] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.234'.
[   82.622130][ T5928] IPVS: starting estimator thread 0...
[   82.648329][ T6390] tap0: tun_chr_ioctl cmd 1074025677
[   82.656146][ T6390] tap0: linktype set to 823
[   82.751182][ T6397] IPVS: using max 39 ests per chain, 93600 per kthread
[   83.688182][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[   83.699717][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[   83.955515][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'.
[   83.962108][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'.
[   83.981308][ T6475] netlink: 128 bytes leftover after parsing attributes in process `syz.1.269'.
[   83.994178][ T6475] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   84.223489][ T6487] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[   84.483075][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'.
[   84.486796][ T6497] nbd: illegal input index -381222912
[   84.582763][ T5907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.692657][ T5907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.796916][ T5907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.907175][ T5907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.113661][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.120803][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.124037][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.127068][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.129850][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.178642][ T5907] bridge_slave_1: left allmulticast mode
[   85.183817][ T5907] bridge_slave_1: left promiscuous mode
[   85.187252][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.221963][ T5907] bridge_slave_0: left allmulticast mode
[   85.223780][ T5907] bridge_slave_0: left promiscuous mode
[   85.225572][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.822989][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.829433][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.837866][ T5907] bond0 (unregistering): (slave team0): Releasing backup interface
[   85.845290][ T5907] bond0 (unregistering): Released all slaves
[   86.414237][ T6567] netlink: 'syz.1.309': attribute type 3 has an invalid length.
[   86.501130][   T51] cfg80211: failed to load regulatory.db
[   86.645880][ T5907] hsr_slave_0: left promiscuous mode
[   86.653268][ T5907] hsr_slave_1: left promiscuous mode
[   86.659525][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.665013][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.677666][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.685290][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.719068][ T5907] veth1_macvtap: left promiscuous mode
[   86.734638][ T5907] veth0_macvtap: left promiscuous mode
[   86.737017][ T5907] veth1_vlan: left promiscuous mode
[   86.739325][ T5907] veth0_vlan: left promiscuous mode
[   87.190562][ T5866] Bluetooth: hci1: command tx timeout
[   87.266932][ T5907] team0 (unregistering): Port device team_slave_1 removed
[   87.301382][ T5907] team0 (unregistering): Port device team_slave_0 removed
[   87.719620][ T6514] chnl_net:caif_netlink_parms(): no params data found
[   87.779738][ T6596] smc: net device bond0 applied user defined pnetid SYZ2
[   88.055753][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.068508][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.079529][ T6514] bridge_slave_0: entered allmulticast mode
[   88.092684][ T6514] bridge_slave_0: entered promiscuous mode
[   88.106982][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.112940][ T5907] IPVS: stop unused estimator thread 0...
[   88.113419][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.124822][ T6514] bridge_slave_1: entered allmulticast mode
[   88.136021][ T6514] bridge_slave_1: entered promiscuous mode
[   88.254446][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.260075][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.298322][ T6514] team0: Port device team_slave_0 added
[   88.302925][ T6514] team0: Port device team_slave_1 added
[   88.336836][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.339368][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.367899][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.373734][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.376332][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.387798][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.427546][ T6514] hsr_slave_0: entered promiscuous mode
[   88.431317][ T6514] hsr_slave_1: entered promiscuous mode
[   89.146875][ T6654] __nla_validate_parse: 1 callbacks suppressed
[   89.146893][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[   89.273030][ T5866] Bluetooth: hci1: command tx timeout
[   89.450167][ T6514] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.489838][ T6514] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.584585][ T6514] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.606635][ T6514] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.818190][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.878914][ T6514] 8021q: adding VLAN 0 to HW filter on device team0
[   89.901363][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.904320][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.925689][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.928695][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.028521][ T6707] netlink: 248 bytes leftover after parsing attributes in process `syz.0.343'.
[   90.031005][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'.
[   90.128623][ T6712] xt_bpf: check failed: parse error
[   90.211125][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.248949][ T6514] veth0_vlan: entered promiscuous mode
[   90.257388][ T6514] veth1_vlan: entered promiscuous mode
[   90.307297][ T6514] veth0_macvtap: entered promiscuous mode
[   90.313776][ T6514] veth1_macvtap: entered promiscuous mode
[   90.336874][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.353201][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.366267][ T6514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.387318][ T6514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.392072][ T6514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.395550][ T6514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.532745][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.535745][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.615579][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.625549][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.887448][ T6747] netlink: 'syz.0.354': attribute type 1 has an invalid length.
[   90.891328][ T6747] netlink: 236 bytes leftover after parsing attributes in process `syz.0.354'.
[   91.925034][ T5907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.252860][ T6813] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[   92.255221][ T6813] netlink: 236 bytes leftover after parsing attributes in process `syz.0.370'.
[   92.438572][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.446219][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.452229][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.464593][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.468982][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.607907][ T6832] ip6gretap0: entered promiscuous mode
[   92.613139][ T6832] ip6gretap0: left promiscuous mode
[   92.746429][ T6822] chnl_net:caif_netlink_parms(): no params data found
[   92.869139][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.881840][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.884317][ T6822] bridge_slave_0: entered allmulticast mode
[   92.891872][ T6822] bridge_slave_0: entered promiscuous mode
[   92.907874][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.910194][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.922742][ T6822] bridge_slave_1: entered allmulticast mode
[   92.944386][ T6822] bridge_slave_1: entered promiscuous mode
[   92.999008][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.018435][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.133237][ T5907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.168825][   T56] block nbd0: Receive control failed (result -32)
[   93.173552][ T6822] team0: Port device team_slave_0 added
[   93.190259][ T6822] team0: Port device team_slave_1 added
[   93.246704][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.249431][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.262518][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.277975][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.282499][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.308603][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.376241][ T6822] hsr_slave_0: entered promiscuous mode
[   93.378642][ T6822] hsr_slave_1: entered promiscuous mode
[   93.382952][ T6822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.385827][ T6822] Cannot create hsr debugfs directory
[   93.503193][ T5907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.586539][ T5907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.607581][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'.
[   94.552030][ T5866] Bluetooth: hci1: command tx timeout
[   94.570893][ T5907] bridge_slave_1: left allmulticast mode
[   94.574043][ T5907] bridge_slave_1: left promiscuous mode
[   94.578801][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.585519][ T5907] bridge_slave_0: left allmulticast mode
[   94.587783][ T5907] bridge_slave_0: left promiscuous mode
[   94.590171][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.956657][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.963083][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.967948][ T5907] bond0 (unregistering): Released all slaves
[   95.248226][ T6917] tipc: Started in network mode
[   95.250612][ T6917] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   95.253181][ T6917] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   95.358007][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.402'.
[   95.393505][ T5907] hsr_slave_0: left promiscuous mode
[   95.400994][ T5907] hsr_slave_1: left promiscuous mode
[   95.403805][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.406772][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.422449][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.425289][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.452787][ T5907] veth1_macvtap: left promiscuous mode
[   95.455010][ T5907] veth0_macvtap: left promiscuous mode
[   95.457356][ T5907] veth1_vlan: left promiscuous mode
[   95.459718][ T5907] veth0_vlan: left promiscuous mode
[   95.995022][ T5907] team0 (unregistering): Port device team_slave_1 removed
[   96.027794][ T5907] team0 (unregistering): Port device team_slave_0 removed
[   96.254978][ T5865] tipc: Node number set to 10136234
[   96.466152][ T6946] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.516648][ T6822] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.534187][ T6822] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.552230][ T6822] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.563052][ T6822] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.587706][ T6953] netlink: 348 bytes leftover after parsing attributes in process `syz.0.414'.
[   96.630557][   T54] Bluetooth: hci1: command tx timeout
[   96.762399][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.814276][ T6822] 8021q: adding VLAN 0 to HW filter on device team0
[   96.828781][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.831744][ T4728] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.849911][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.852871][ T4728] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.954583][ T6822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.125646][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.197089][ T6822] veth0_vlan: entered promiscuous mode
[   97.213476][ T6822] veth1_vlan: entered promiscuous mode
[   97.260226][ T6822] veth0_macvtap: entered promiscuous mode
[   97.267069][ T6822] veth1_macvtap: entered promiscuous mode
[   97.289841][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.306680][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.315393][ T6822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.318953][ T6822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.325189][ T6822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.328108][ T6822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.398075][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'.
[   97.413352][ T7010] netlink: 'syz.0.438': attribute type 4 has an invalid length.
[   97.441501][ T1840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.445109][ T1840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.501179][ T4728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.508110][ T4728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.586584][ T7018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.607012][ T7018] netlink: 208 bytes leftover after parsing attributes in process `syz.1.442'.
[   98.720657][   T54] Bluetooth: hci1: command 0x040f tx timeout
[   99.410998][ T7090] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[   99.413957][ T7090] netlink: 224 bytes leftover after parsing attributes in process `syz.0.474'.
[   99.417602][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'.
[   99.515248][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.479'.
[   99.659064][ T7110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.483'.
[   99.662558][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.0.483'.
[   99.781384][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[   99.863180][ T7126] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  100.244396][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.452670][ T7159] 
[  100.453601][ T7159] =============================
[  100.455571][ T7159] WARNING: suspicious RCU usage
[  100.457166][ T7159] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  100.461126][ T7159] -----------------------------
[  100.462694][ T7159] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[  100.465480][ T7159] 
[  100.465480][ T7159] other info that might help us debug this:
[  100.465480][ T7159] 
[  100.468789][ T7159] 
[  100.468789][ T7159] rcu_scheduler_active = 2, debug_locks = 1
[  100.472047][ T7159] 1 lock held by syz.0.507/7159:
[  100.476092][ T7159]  #0: ffffffff8e13f340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  100.479867][ T7159] 
[  100.479867][ T7159] stack backtrace:
[  100.481857][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.0.507 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  100.481870][ T7159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.481877][ T7159] Call Trace:
[  100.481882][ T7159]  <TASK>
[  100.481887][ T7159]  dump_stack_lvl+0x189/0x250
[  100.481907][ T7159]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.481918][ T7159]  ? __pfx__printk+0x10/0x10
[  100.481932][ T7159]  ? print_lock_name+0xde/0x100
[  100.481945][ T7159]  lockdep_rcu_suspicious+0x140/0x1d0
[  100.481958][ T7159]  task_cls_state+0x1a5/0x1d0
[  100.481971][ T7159]  bpf_get_cgroup_classid_curr+0x18/0x60
[  100.481980][ T7159]  bpf_prog_841aec7193f618b3+0x1b/0x21
[  100.481988][ T7159]  bpf_prog_run_pin_on_cpu+0xbf/0x150
[  100.482003][ T7159]  bpf_prog_test_run_syscall+0x312/0x4b0
[  100.482014][ T7159]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  100.482024][ T7159]  ? __fget_files+0x2a/0x420
[  100.482037][ T7159]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  100.482047][ T7159]  bpf_prog_test_run+0x2c7/0x340
[  100.482058][ T7159]  __sys_bpf+0x4a4/0x860
[  100.482066][ T7159]  ? __pfx___sys_bpf+0x10/0x10
[  100.482079][ T7159]  ? exc_page_fault+0x76/0xf0
[  100.482093][ T7159]  ? rcu_is_watching+0x15/0xb0
[  100.482107][ T7159]  __x64_sys_bpf+0x7c/0x90
[  100.482120][ T7159]  do_syscall_64+0xfa/0x3b0
[  100.482129][ T7159]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.482140][ T7159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.482148][ T7159]  ? exc_page_fault+0x9f/0xf0
[  100.482160][ T7159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.482168][ T7159] RIP: 0033:0x7efd0918e929
[  100.482177][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.482185][ T7159] RSP: 002b:00007efd09f32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  100.482195][ T7159] RAX: ffffffffffffffda RBX: 00007efd093b5fa0 RCX: 00007efd0918e929
[  100.482200][ T7159] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[  100.482205][ T7159] RBP: 00007efd09210b39 R08: 0000000000000000 R09: 0000000000000000
[  100.482211][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.482221][ T7159] R13: 0000000000000000 R14: 00007efd093b5fa0 R15: 00007ffd0f34e598
[  100.482234][ T7159]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  100.624153][ T7153] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  100.654761][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  100.654784][ T7153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.654793][ T7153] Call Trace:
[  100.654800][ T7153]  <TASK>
[  100.654807][ T7153]  dump_stack_lvl+0x189/0x250
[  100.654833][ T7153]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.654848][ T7153]  ? __pfx__printk+0x10/0x10
[  100.654866][ T7153]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  100.654884][ T7153]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  100.654900][ T7153]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  100.654918][ T7153]  warn_alloc+0x214/0x310
[  100.654939][ T7153]  ? __pfx_warn_alloc+0x10/0x10
[  100.654960][ T7153]  ? __get_vm_area_node+0x28f/0x300
[  100.654977][ T7153]  ? kcov_ioctl+0x55/0x640
[  100.654997][ T7153]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  100.655035][ T7153]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  100.655058][ T7153]  ? __pfx_kcov_ioctl+0x10/0x10
[  100.655076][ T7153]  vmalloc_user_noprof+0xad/0xf0
[  100.655092][ T7153]  ? kcov_ioctl+0x55/0x640
[  100.655110][ T7153]  kcov_ioctl+0x55/0x640
[  100.655128][ T7153]  ? bpf_lsm_file_ioctl+0x9/0x20
[  100.655144][ T7153]  ? __pfx_kcov_ioctl+0x10/0x10
[  100.655161][ T7153]  __se_sys_ioctl+0xfc/0x170
[  100.655177][ T7153]  do_syscall_64+0xfa/0x3b0
[  100.655189][ T7153]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.655208][ T7153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.655221][ T7153]  ? exc_page_fault+0x9f/0xf0
[  100.655239][ T7153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.655250][ T7153] RIP: 0033:0x7feb40f8e52b
[  100.655263][ T7153] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  100.655274][ T7153] RSP: 002b:00007ffd48c2a730 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.655290][ T7153] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007feb40f8e52b
[  100.655299][ T7153] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db
[  100.655308][ T7153] RBP: 00007feb411b62d8 R08: 00000000000000da R09: 0000000000000000
[  100.655315][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.655323][ T7153] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  100.655344][ T7153]  </TASK>
[  100.655350][ T7153] Mem-Info:
[  100.746977][ T7153] active_anon:3345 inactive_anon:0 isolated_anon:0
[  100.746977][ T7153]  active_file:1000 inactive_file:38233 isolated_file:0
[  100.746977][ T7153]  unevictable:1768 dirty:252 writeback:0
[  100.746977][ T7153]  slab_reclaimable:9376 slab_unreclaimable:53139
[  100.746977][ T7153]  mapped:4836 shmem:2447 pagetables:850
[  100.746977][ T7153]  sec_pagetables:0 bounce:0
[  100.746977][ T7153]  kernel_misc_reclaimable:0
[  100.746977][ T7153]  free:309910 free_pcp:18159 free_cma:0
[  100.767400][ T7153] Node 0 active_anon:6328kB inactive_anon:0kB active_file:1636kB inactive_file:137604kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:17068kB dirty:60kB writeback:0kB shmem:5128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8060kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  100.779829][ T7153] Node 1 active_anon:7052kB inactive_anon:0kB active_file:2364kB inactive_file:15328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2276kB dirty:948kB writeback:0kB shmem:4660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3176kB pagetables:1044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  100.794436][ T7153] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  100.816812][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.818885][ T7153] lowmem_reserve[]: 0 812 812 812 812
[  100.823313][ T7153] Node 0 DMA32 free:279400kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6328kB inactive_anon:0kB active_file:1636kB inactive_file:137604kB unevictable:3536kB writepending:60kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:39940kB local_pcp:24000kB free_cma:0kB
[  100.850494][ T7153] lowmem_reserve[]: 0 0 0 0 0
[  100.852467][ T7153] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  100.880536][ T7153] lowmem_reserve[]: 0 0 854 854 854
[  100.882626][ T7153] Node 1 Normal free:517600kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7052kB inactive_anon:0kB active_file:2364kB inactive_file:15328kB unevictable:3536kB writepending:948kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:24336kB local_pcp:15812kB free_cma:0kB
[  100.910458][ T7153] lowmem_reserve[]: 0 0 0 0 0
[  100.912409][ T7153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  100.917301][ T7153] Node 0 DMA32: 624*4kB (UM) 672*8kB (UME) 301*16kB (UME) 412*32kB (UME) 156*64kB (UM) 57*128kB (UM) 32*256kB (UME) 31*512kB (UME) 15*1024kB (UME) 4*2048kB (UM) 50*4096kB (M) = 295568kB
[  100.930979][ T7153] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  100.932642][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.937508][ T7153] Node 1 Normal: 929*4kB (UM) 650*8kB (UME) 663*16kB (UM) 198*32kB (UM) 144*64kB (UM) 41*128kB (UM) 13*256kB (U) 11*512kB (UM) 5*1024kB (U) 8*2048kB (UM) 111*4096kB (UM) = 525444kB
[  100.970773][ T7153] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.974377][ T7153] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.977902][ T7153] 41680 total pagecache pages
[  100.979726][ T7153] 0 pages in swap cache
[  100.991265][ T7153] Free swap  = 124996kB
[  100.993007][ T7153] Total swap = 124996kB
[  100.994679][ T7153] 786301 pages RAM
[  100.996108][ T7153] 0 pages HighMem/MovableOnly
[  100.997999][ T7153] 241085 pages reserved
[  100.999647][ T7153] 0 pages cma reserved
[  101.025928][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.236321][   T13] bridge_slave_1: left allmulticast mode
[  101.238445][   T13] bridge_slave_1: left promiscuous mode
[  101.240393][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.245534][   T13] bridge_slave_0: left allmulticast mode
[  101.247309][   T13] bridge_slave_0: left promiscuous mode
[  101.249662][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.558964][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.565183][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.570216][   T13] bond0 (unregistering): Released all slaves
[  101.802977][   T13] hsr_slave_0: left promiscuous mode
[  101.806364][   T13] hsr_slave_1: left promiscuous mode
[  101.808744][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.813785][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.816837][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.819450][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.839027][   T13] veth1_macvtap: left promiscuous mode
[  101.841001][   T13] veth0_macvtap: left promiscuous mode
[  101.843189][   T13] veth1_vlan: left promiscuous mode
[  101.845241][   T13] veth0_vlan: left promiscuous mode
[  102.182066][   T13] team0 (unregistering): Port device team_slave_1 removed
[  102.208329][   T13] team0 (unregistering): Port device team_slave_0 removed
[  102.978099][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.078091][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.139343][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.218802][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.348903][ T5855] bridge_slave_1: left allmulticast mode
[  103.351461][ T5855] bridge_slave_1: left promiscuous mode
[  103.354100][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.362082][ T5855] bridge_slave_0: left allmulticast mode
[  103.364289][ T5855] bridge_slave_0: left promiscuous mode
[  103.366992][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.651939][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.656101][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.660835][ T5855] bond0 (unregistering): Released all slaves
[  103.726268][ T5855] tipc: Disabling bearer <eth:ipvlan1>
[  103.732207][ T5855] tipc: Left network mode
[  103.892568][ T5855] hsr_slave_0: left promiscuous mode
[  103.894840][ T5855] hsr_slave_1: left promiscuous mode
[  103.898368][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.901715][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.904896][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.907366][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.918744][ T5855] veth1_macvtap: left promiscuous mode
[  103.927150][ T5855] veth0_macvtap: left promiscuous mode
[  103.929099][ T5855] veth1_vlan: left promiscuous mode
[  103.934423][ T5855] veth0_vlan: left promiscuous mode
[  104.325062][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  104.353996][ T5855] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
20:55:08  Registers:
info registers vcpu 0

CPU#0
RAX=ffff88801e7d2586 RBX=ffff88801e7d2586 RCX=0000000000000000 RDX=0000000000000000
RSI=000000000000000a RDI=ffff88801e7d2580 RBP=ffff88801bc96000 RSP=ffffc90002a3f688
R8 =0000000000000000 R9 =ffffffff822d159a R10=ffff88801e7d2580 R11=ffffffff81ad03a0
R12=0000000000000000 R13=0000000000000000 R14=ffff88801e7d2590 R15=dffffc0000000000
RIP=ffffffff8b6b29da RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556ca39500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9891174980 CR3=000000003b0a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff93a86c70 RBX=0000000000005b05 RCX=7d3eb8ee231db7dc RDX=0000000000000000
RSI=ffff888023028b90 RDI=ffff888023028000 RBP=0000000000000000 RSP=ffffc900001e0838
R8 =0000000000000000 R9 =ffffffff8191b3ce R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=0000000000000000 R13=ffff888023028af0 R14=ffff888023028b90 R15=7d3eb8ee231db7dc
RIP=ffffffff819e86c1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efd09f326c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27db60 CR3=000000010d9ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efd09385478 00007efd09385450 XMM03=00007efd09385488 00007efd09385480
XMM04=00007efd09eed100 00007efd09385440 XMM05=00007efd09385458 00007efd093854a0
XMM06=00007efd09385498 00007efd09385490 XMM07=00007efd09385488 00007efd09385480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007efd09211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
