last executing test programs:

748.952611ms ago: executing program 1 (id=166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0)

748.416442ms ago: executing program 2 (id=167):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18"], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0)

670.34395ms ago: executing program 1 (id=168):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x14}}}}}, 0x36)

566.974757ms ago: executing program 0 (id=170):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

502.591306ms ago: executing program 0 (id=171):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c00020036e8040ed82e"], 0xb4}}, 0x0)

502.1157ms ago: executing program 1 (id=172):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="04002bbd7000fbdbdf2508000000540003800800010008000000080003000800000006000200ff0f0000080002000000400008000200ffffffff08000200030000000800010000000080080002000500000008000200020000000800020098a700002000028008000100050000000400040008000100040000000400040004000400180007800c00040005000000000000000800020005000000380007800c00040006000000000000000c000400ac140000000000000c000400060000000000000008000200400000000800020009000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000040}, 0xb854729de3f59379)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x0, 0x207, 0x0, 0x0, 0x9, 0x7}, 0x20)
sendto$inet6(r7, &(0x7f0000000000)="191435e1", 0x4, 0x2b5df04ed815cdf, &(0x7f000005ffe4)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x0)

392.246529ms ago: executing program 0 (id=173):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

321.099835ms ago: executing program 2 (id=174):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

320.594285ms ago: executing program 0 (id=175):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

241.322981ms ago: executing program 2 (id=176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

240.867811ms ago: executing program 1 (id=177):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140))

170.55565ms ago: executing program 1 (id=178):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x4000, 0xfffffffd, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x7}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x44}}, 0x0)

170.276562ms ago: executing program 2 (id=179):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000480)="7877ee07b9416efc2d1983c287b61464dd387a8c5761f7191d7ff21b83b5929a130ffe8c342ab02db921b1daa3c215d87f1db00b5250441f9a72fff5ea6033e3a99bbf174ee723e4e31df213f3ef95", 0x0}, 0x50)

127.306551ms ago: executing program 1 (id=180):
socket(0x10, 0x803, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r7}, 0x0, &(0x7f0000001040)}, 0x20)

127.041572ms ago: executing program 0 (id=181):
socket(0x1e, 0x4, 0x7ffffffe)

62.407704ms ago: executing program 2 (id=182):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x1}, 0x18)
recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

321.548µs ago: executing program 0 (id=183):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448e1, &(0x7f0000000240)={0x4, 0xffbe, '\x00^F', 0x0, 0x1})

0s ago: executing program 2 (id=184):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42318' (ED25519) to the list of known hosts.
syzkaller login: [   57.369725][ T5827] cgroup: Unknown subsys name 'net'
[   57.475592][ T5827] cgroup: Unknown subsys name 'cpuset'
[   57.479706][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.335283][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.062537][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.066783][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.070640][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.074405][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.089263][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.103813][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.108590][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.114090][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.154021][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.154490][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.164035][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.165235][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.174791][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.185703][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.195293][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.243309][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.245998][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.518584][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   71.605352][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   71.643920][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   71.689172][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.691774][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.694325][ T5875] bridge_slave_0: entered allmulticast mode
[   71.697443][ T5875] bridge_slave_0: entered promiscuous mode
[   71.721642][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.724058][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.726485][ T5875] bridge_slave_1: entered allmulticast mode
[   71.729470][ T5875] bridge_slave_1: entered promiscuous mode
[   71.783994][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.807806][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.815337][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.818004][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.820433][ T5879] bridge_slave_0: entered allmulticast mode
[   71.824523][ T5879] bridge_slave_0: entered promiscuous mode
[   71.868214][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.870971][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.876828][ T5879] bridge_slave_1: entered allmulticast mode
[   71.879608][ T5879] bridge_slave_1: entered promiscuous mode
[   71.898688][ T5875] team0: Port device team_slave_0 added
[   71.905176][ T5875] team0: Port device team_slave_1 added
[   71.907683][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.910481][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.913671][ T5872] bridge_slave_0: entered allmulticast mode
[   71.916692][ T5872] bridge_slave_0: entered promiscuous mode
[   71.956111][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.958738][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.961406][ T5872] bridge_slave_1: entered allmulticast mode
[   71.965349][ T5872] bridge_slave_1: entered promiscuous mode
[   71.979809][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.984596][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.986837][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.996579][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.016275][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.020052][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.022120][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.030978][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.056329][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.076343][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.135788][ T5879] team0: Port device team_slave_0 added
[   72.149556][ T5879] team0: Port device team_slave_1 added
[   72.154324][ T5872] team0: Port device team_slave_0 added
[   72.160648][ T5875] hsr_slave_0: entered promiscuous mode
[   72.164019][ T5875] hsr_slave_1: entered promiscuous mode
[   72.179714][ T5872] team0: Port device team_slave_1 added
[   72.221428][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.224432][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.232513][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.238621][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.241136][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.252733][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.277608][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.279907][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.288783][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.313245][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.315801][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.325344][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.416630][ T5879] hsr_slave_0: entered promiscuous mode
[   72.419599][ T5879] hsr_slave_1: entered promiscuous mode
[   72.422201][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   72.427442][ T5879] Cannot create hsr debugfs directory
[   72.437589][ T5872] hsr_slave_0: entered promiscuous mode
[   72.439900][ T5872] hsr_slave_1: entered promiscuous mode
[   72.442221][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   72.444765][ T5872] Cannot create hsr debugfs directory
[   72.716539][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.727418][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.744365][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.757577][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.805549][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.813406][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.822238][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.830190][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.899604][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.916130][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.922188][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.934739][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.984054][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.014968][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.020519][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   73.036954][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.039593][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.051712][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   73.059487][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.061772][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.084310][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.087175][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.091602][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.094600][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.186655][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.210094][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   73.229284][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.231749][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.233550][ T5881] Bluetooth: hci1: command tx timeout
[   73.234949][ T5878] Bluetooth: hci0: command tx timeout
[   73.252340][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.255250][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.298976][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.309611][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.315933][ T5878] Bluetooth: hci2: command tx timeout
[   73.348635][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.407414][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.446731][ T5875] veth0_vlan: entered promiscuous mode
[   73.475946][ T5875] veth1_vlan: entered promiscuous mode
[   73.515938][ T5879] veth0_vlan: entered promiscuous mode
[   73.536847][ T5879] veth1_vlan: entered promiscuous mode
[   73.545896][ T5875] veth0_macvtap: entered promiscuous mode
[   73.560302][ T5875] veth1_macvtap: entered promiscuous mode
[   73.575940][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.585045][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.599984][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.613852][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.621293][ T5879] veth0_macvtap: entered promiscuous mode
[   73.626242][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.638132][ T5879] veth1_macvtap: entered promiscuous mode
[   73.641935][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.647781][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.707547][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.727388][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.730554][ T5872] veth0_vlan: entered promiscuous mode
[   73.758226][ T5872] veth1_vlan: entered promiscuous mode
[   73.760998][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.771005][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.774589][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.778960][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.793415][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.810252][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.830138][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.833297][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.880320][ T5872] veth0_macvtap: entered promiscuous mode
[   73.902097][ T5872] veth1_macvtap: entered promiscuous mode
[   73.908477][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.919756][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.924080][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.972282][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.989865][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.991297][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.995993][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.008379][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.028142][ T5902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.032328][ T5902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.049476][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.141687][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.151648][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.212202][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.223096][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.325389][ T5950] netlink: 'syz.0.22': attribute type 2 has an invalid length.
[   74.328315][ T5950] netlink: 'syz.0.22': attribute type 5 has an invalid length.
[   74.442421][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.626582][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'.
[   75.149960][ T6002] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   75.159900][ T6002] netlink: 'syz.0.45': attribute type 3 has an invalid length.
[   75.169378][ T6002] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   75.173804][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'.
[   75.174720][ T6002] netlink: 204 bytes leftover after parsing attributes in process `syz.0.45'.
[   75.177273][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'.
[   75.180848][ T6002] NCSI netlink: No device for ifindex 0
[   75.305090][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'.
[   75.308580][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.49'.
[   75.317093][ T5878] Bluetooth: hci0: command tx timeout
[   75.317127][ T5881] Bluetooth: hci1: command tx timeout
[   75.393899][ T5881] Bluetooth: hci2: command tx timeout
[   75.507067][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'.
[   75.516185][ T6021] pim6reg1: entered promiscuous mode
[   75.518749][ T6021] pim6reg1: entered allmulticast mode
[   75.597402][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'.
[   75.610094][ T6025] macsec1: entered promiscuous mode
[   75.612263][ T6025] macvlan1: entered promiscuous mode
[   75.623094][ T6025] macvlan1: left promiscuous mode
[   75.835714][ T6039] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.119227][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   76.417266][ T6084] sctp: [Deprecated]: syz.1.83 (pid 6084) Use of int in maxseg socket option.
[   76.417266][ T6084] Use struct sctp_assoc_value instead
[   76.457655][ T6088] netlink: 'syz.2.85': attribute type 1 has an invalid length.
[   76.639656][ T6096] syz.0.89 uses obsolete (PF_INET,SOCK_PACKET)
[   76.722783][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.728352][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.116861][ T6127] sctp: [Deprecated]: syz.1.101 (pid 6127) Use of int in max_burst socket option.
[   77.116861][ T6127] Use struct sctp_assoc_value instead
[   77.393147][ T5881] Bluetooth: hci1: command tx timeout
[   77.402995][ T5881] Bluetooth: hci0: command tx timeout
[   77.473681][ T5881] Bluetooth: hci2: command tx timeout
[   77.559910][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'.
[   78.144143][ T6156] veth0_to_bond: entered allmulticast mode
[   78.147939][ T6157] sock: sock_set_timeout: `syz.2.110' (pid 6157) tries to set negative timeout
[   78.244129][ T6161] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   78.247511][ T6161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.371586][ T6166] syzkaller0: entered promiscuous mode
[   78.373521][ T6166] syzkaller0: entered allmulticast mode
[   79.067082][ T6170] raw_sendmsg: syz.2.118 forgot to set AF_INET. Fix it!
[   79.475566][ T5881] Bluetooth: hci0: command tx timeout
[   79.475749][ T5878] Bluetooth: hci1: command tx timeout
[   79.553986][ T5878] Bluetooth: hci2: command tx timeout
[   79.810717][ T6190] netlink: 'syz.1.128': attribute type 7 has an invalid length.
[   79.865556][ T6192] __nla_validate_parse: 4 callbacks suppressed
[   79.865576][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'.
[   80.262565][ T6218] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   80.322746][ T6222] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   80.470272][ T6234] netlink: 830 bytes leftover after parsing attributes in process `syz.1.149'.
[   80.897518][ T6266] netlink: 'syz.0.163': attribute type 39 has an invalid length.
[   81.262952][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'.
[   81.284642][ T6290] netlink: 92 bytes leftover after parsing attributes in process `syz.0.171'.
[   81.414675][ T6302] Zero length message leads to an empty skb
[   81.529578][ T6307] netlink: 'syz.0.175': attribute type 21 has an invalid length.
[   81.544582][ T6307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.175'.
[   81.564148][ T6310] netlink: 'syz.1.178': attribute type 3 has an invalid length.
[   81.666236][ T5903] IPVS: starting estimator thread 0...
[   81.773325][ T6316] IPVS: using max 44 ests per chain, 105600 per kthread
Connection to localhost closed by remote host.
[   82.550671][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.613105][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.656396][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.708481][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.816665][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.877650][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.929173][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.986791][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.088354][   T12] bridge_slave_1: left allmulticast mode
[   83.090809][   T12] bridge_slave_1: left promiscuous mode
[   83.094271][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.100749][   T12] bridge_slave_0: left allmulticast mode
[   83.103486][   T12] bridge_slave_0: left promiscuous mode
[   83.105994][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.114112][   T12] bridge_slave_1: left allmulticast mode
[   83.116360][   T12] bridge_slave_1: left promiscuous mode
[   83.118755][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.124807][   T12] bridge_slave_0: left allmulticast mode
[   83.127091][   T12] bridge_slave_0: left promiscuous mode
[   83.129811][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.435141][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.441493][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.446542][   T12] bond0 (unregistering): Released all slaves
[   83.694906][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.699372][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.703269][   T12] bond0 (unregistering): Released all slaves
[   84.139012][   T12] hsr_slave_0: left promiscuous mode
[   84.141969][   T12] hsr_slave_1: left promiscuous mode
[   84.145900][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.148900][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.153072][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.156051][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.165848][   T12] hsr_slave_0: left promiscuous mode
[   84.168650][   T12] hsr_slave_1: left promiscuous mode
[   84.171306][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.175593][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.179237][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.182219][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.207908][   T12] veth1_macvtap: left promiscuous mode
[   84.210399][   T12] veth0_macvtap: left promiscuous mode
[   84.213410][   T12] veth1_vlan: left promiscuous mode
[   84.215699][   T12] veth0_vlan: left promiscuous mode
[   84.220047][   T12] veth1_macvtap: left promiscuous mode
[   84.222275][   T12] veth0_macvtap: left promiscuous mode
[   84.224634][   T12] veth1_vlan: left promiscuous mode
[   84.226749][   T12] veth0_vlan: left promiscuous mode
[   84.636366][   T12] team0 (unregistering): Port device team_slave_1 removed
[   84.658271][   T12] team0 (unregistering): Port device team_slave_0 removed
[   85.174449][   T12] team0 (unregistering): Port device team_slave_1 removed
[   85.205715][   T12] team0 (unregistering): Port device team_slave_0 removed
[   85.988548][   T12] IPVS: stop unused estimator thread 0...
[   86.058710][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.127356][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.164767][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.215634][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.296823][   T12] bridge_slave_1: left allmulticast mode
[   86.298943][   T12] bridge_slave_1: left promiscuous mode
[   86.301267][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.306105][   T12] bridge_slave_0: left allmulticast mode
[   86.308144][   T12] bridge_slave_0: left promiscuous mode
[   86.310188][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.550004][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.555332][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.559394][   T12] bond0 (unregistering): Released all slaves
[   86.594560][  T792] cfg80211: failed to load regulatory.db
[   86.825158][   T12] hsr_slave_0: left promiscuous mode
[   86.828140][   T12] hsr_slave_1: left promiscuous mode
[   86.830899][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.834124][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.837837][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.840916][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.853522][   T12] veth1_macvtap: left promiscuous mode
[   86.855419][   T12] veth0_macvtap: left promiscuous mode
[   86.857506][   T12] veth1_vlan: left promiscuous mode
[   86.859647][   T12] veth0_vlan: left promiscuous mode
[   87.198943][   T12] team0 (unregistering): Port device team_slave_1 removed
[   87.229638][   T12] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
09:59:53  Registers:
info registers vcpu 0

CPU#0
RAX=929f43d66f00d200 RBX=ffffffff81968308 RCX=929f43d66f00d200 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a2ca394a0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b8699dec204af700 RBX=ffffffff81968308 RCX=b8699dec204af700 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000033bf2b1d 000000000000000c XMM01=0000003265736f72 0000560bb4a5b098
XMM02=000100ffffffffff 0101000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
