last executing test programs:

1.110110229s ago: executing program 0 (id=170):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x2)
socket(0x1, 0x803, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.084655597s ago: executing program 0 (id=173):
socket$inet(0x2, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x890100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000700)="580000001500add427323b470c40bccbda067fffffff81004e22030d00ff00", 0x1f}, {&(0x7f0000000680)="463614714e80397a8084d3a0a37a2bedc1a6bcc742ac6ea42eb784a62d1bba265e541b424eedec145f", 0x29}], 0x2)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0xc0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRESDEC], 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

1.000162883s ago: executing program 0 (id=174):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x80000004, 0x4, 0xffffffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50)

948.662351ms ago: executing program 0 (id=176):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c)

890.581421ms ago: executing program 0 (id=178):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000180))

439.902983ms ago: executing program 2 (id=184):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000680)=""/24, 0x18}], 0x2}, 0x0)

288.188001ms ago: executing program 2 (id=186):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0)

210.42704ms ago: executing program 2 (id=187):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x30, 0x0, 0xa3}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

210.138013ms ago: executing program 1 (id=188):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}}, 0x0)

152.205199ms ago: executing program 1 (id=189):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

151.846457ms ago: executing program 2 (id=190):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x0, 0x400000000000}, {}, 0x200000, 0x0, 0x2, 0x7, 0x0, 0xaf}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x13c}}, 0x0)

148.76112ms ago: executing program 1 (id=191):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {0x0, 0xd}, 0x0, 0x0, 0xa, 0x5, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

87.66404ms ago: executing program 1 (id=192):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

87.307307ms ago: executing program 2 (id=193):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

87.063477ms ago: executing program 2 (id=194):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)

666.151µs ago: executing program 1 (id=195):
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x271c, 0x0, &(0x7f00000000c0))

468.119µs ago: executing program 0 (id=196):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0)
pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000300)="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", 0x845}], 0x12, 0x0, 0x0)

0s ago: executing program 1 (id=197):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000002000006"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x28)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14795' (ED25519) to the list of known hosts.
syzkaller login: [   47.426689][ T5763] cgroup: Unknown subsys name 'net'
[   47.517274][ T5763] cgroup: Unknown subsys name 'cpuset'
[   47.521019][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.797352][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.764352][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.570543][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.574350][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.578151][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.581703][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.584835][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.613930][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.616983][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.619666][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.622525][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.625510][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.680074][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.693185][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.696748][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.700758][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.713642][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.020480][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   61.120814][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   61.163664][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   61.232438][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.236342][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.239347][ T5863] bridge_slave_0: entered allmulticast mode
[   61.244850][ T5863] bridge_slave_0: entered promiscuous mode
[   61.263824][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.266920][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.269891][ T5863] bridge_slave_1: entered allmulticast mode
[   61.274848][ T5863] bridge_slave_1: entered promiscuous mode
[   61.326995][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.329839][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.332675][ T5866] bridge_slave_0: entered allmulticast mode
[   61.336575][ T5866] bridge_slave_0: entered promiscuous mode
[   61.342546][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.357131][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.360136][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.364531][ T5866] bridge_slave_1: entered allmulticast mode
[   61.368370][ T5866] bridge_slave_1: entered promiscuous mode
[   61.373935][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.377500][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.380469][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.385002][ T5868] bridge_slave_0: entered allmulticast mode
[   61.388792][ T5868] bridge_slave_0: entered promiscuous mode
[   61.394364][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.397000][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.399237][ T5868] bridge_slave_1: entered allmulticast mode
[   61.402060][ T5868] bridge_slave_1: entered promiscuous mode
[   61.473366][ T5863] team0: Port device team_slave_0 added
[   61.477598][ T5863] team0: Port device team_slave_1 added
[   61.490792][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.497605][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.515285][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.519751][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.522682][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.535788][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.542759][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.565376][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.568143][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.579074][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.645887][ T5868] team0: Port device team_slave_0 added
[   61.654117][ T5866] team0: Port device team_slave_0 added
[   61.672186][ T5868] team0: Port device team_slave_1 added
[   61.679161][ T5866] team0: Port device team_slave_1 added
[   61.687074][ T5863] hsr_slave_0: entered promiscuous mode
[   61.690254][ T5863] hsr_slave_1: entered promiscuous mode
[   61.746561][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.749687][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.761198][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.767062][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.770081][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.783289][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.801200][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.804632][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.815670][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.821347][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.824822][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.834339][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.944710][ T5866] hsr_slave_0: entered promiscuous mode
[   61.947897][ T5866] hsr_slave_1: entered promiscuous mode
[   61.950886][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.954614][ T5866] Cannot create hsr debugfs directory
[   61.965411][ T5868] hsr_slave_0: entered promiscuous mode
[   61.968043][ T5868] hsr_slave_1: entered promiscuous mode
[   61.970822][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.974423][ T5868] Cannot create hsr debugfs directory
[   62.276995][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.288972][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.303921][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.318228][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.361077][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.369007][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.386209][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.400579][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.465004][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.476330][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.485827][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.509680][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.616982][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.637146][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.653720][   T54] Bluetooth: hci1: command tx timeout
[   62.658745][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   62.665003][   T54] Bluetooth: hci0: command tx timeout
[   62.675597][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.678810][ T3807] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.690533][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   62.703643][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.706638][ T3807] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.727914][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.731404][ T3807] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.734992][   T54] Bluetooth: hci2: command tx timeout
[   62.736798][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.740389][ T3807] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.792114][ T5863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.797323][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.821219][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.860550][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   62.883596][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.887041][ T3807] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.911675][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.914823][ T3807] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.001926][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.052729][ T5863] veth0_vlan: entered promiscuous mode
[   63.070978][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.083755][ T5863] veth1_vlan: entered promiscuous mode
[   63.139323][ T5863] veth0_macvtap: entered promiscuous mode
[   63.150975][ T5868] veth0_vlan: entered promiscuous mode
[   63.158062][ T5863] veth1_macvtap: entered promiscuous mode
[   63.185032][ T5868] veth1_vlan: entered promiscuous mode
[   63.198019][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.216008][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.221613][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.225727][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.229244][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.232731][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.255517][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.290816][ T5868] veth0_macvtap: entered promiscuous mode
[   63.301468][ T5868] veth1_macvtap: entered promiscuous mode
[   63.359672][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.381474][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.386817][ T5866] veth0_vlan: entered promiscuous mode
[   63.390065][ T5868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.394028][ T5868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.397690][ T5868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.401296][ T5868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.419507][ T3807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.422062][ T5866] veth1_vlan: entered promiscuous mode
[   63.423196][ T3807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.489595][ T3807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.499830][ T3807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.516582][ T5866] veth0_macvtap: entered promiscuous mode
[   63.546373][ T5866] veth1_macvtap: entered promiscuous mode
[   63.583059][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.586353][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.644624][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.651101][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.683398][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.687113][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.690840][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.696249][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.699110][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.701190][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.809481][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.812092][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.828270][ T5932] syz.2.16 (5932) used greatest stack depth: 17912 bytes left
[   63.886032][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.899634][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.901476][ T5933] delete_channel: no stack
[   64.506186][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   64.507341][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'.
[   64.635366][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'.
[   64.638547][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'.
[   64.733820][   T54] Bluetooth: hci0: command tx timeout
[   64.736228][   T54] Bluetooth: hci1: command tx timeout
[   64.813414][ T5865] Bluetooth: hci2: command tx timeout
[   64.859876][ T5988] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.41'.
[   65.028039][ T6000] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[   65.031073][ T6000] netlink: 'syz.1.47': attribute type 10 has an invalid length.
[   65.043107][ T6000] netlink: 'syz.1.47': attribute type 4 has an invalid length.
[   65.046006][ T6000] netlink: 192 bytes leftover after parsing attributes in process `syz.1.47'.
[   65.508446][ T6025] netlink: 'syz.0.55': attribute type 2 has an invalid length.
[   66.075649][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.277885][ T6059] netlink: 'syz.0.69': attribute type 7 has an invalid length.
[   66.379296][ T6065] netlink: 'syz.1.72': attribute type 39 has an invalid length.
[   66.727572][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.730434][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.733310][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.736118][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.738683][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.741214][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.743905][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.746710][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.749444][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.752156][ T6090] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   66.823709][ T5865] Bluetooth: hci1: command tx timeout
[   66.825726][ T5865] Bluetooth: hci0: command tx timeout
[   66.894754][   T54] Bluetooth: hci2: command tx timeout
[   67.221414][ T6123] netlink: 'syz.0.94': attribute type 4 has an invalid length.
[   67.247508][ T6123] netlink: 'syz.0.94': attribute type 4 has an invalid length.
[   67.262234][ T6125] Zero length message leads to an empty skb
[   67.521480][ T6131] Bluetooth: MGMT ver 1.23
[   68.494750][ T6172] netlink: 'syz.2.112': attribute type 1 has an invalid length.
[   68.497726][ T6172] netlink: 'syz.2.112': attribute type 2 has an invalid length.
[   68.501183][ T6172] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.112'.
[   68.626984][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'.
[   68.634939][ T6180] netlink: 48 bytes leftover after parsing attributes in process `syz.2.116'.
[   68.716974][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'.
[   68.726911][ T6187] macsec0: entered promiscuous mode
[   68.729789][ T6187] macsec1: entered allmulticast mode
[   68.743248][ T6187] macsec0: entered allmulticast mode
[   68.745618][ T6187] veth1_macvtap: entered allmulticast mode
[   68.839672][ T6192] bridge0: port 3(syz_tun) entered blocking state
[   68.850765][ T6192] bridge0: port 3(syz_tun) entered disabled state
[   68.855440][ T6192] syz_tun: entered allmulticast mode
[   68.859079][ T6192] syz_tun: entered promiscuous mode
[   68.861425][ T6192] bridge0: port 3(syz_tun) entered blocking state
[   68.864337][ T6192] bridge0: port 3(syz_tun) entered forwarding state
[   68.904411][ T5865] Bluetooth: hci0: command tx timeout
[   68.906670][ T5865] Bluetooth: hci1: command tx timeout
[   68.973510][ T6198] Bluetooth: hci2: command tx timeout
[   69.512583][ T6240] warning: `syz.1.144' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.533862][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   69.558865][ T6244] __nla_validate_parse: 2 callbacks suppressed
[   69.558882][ T6244] netlink: 1 bytes leftover after parsing attributes in process `syz.2.146'.
[   69.624653][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   69.816493][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'.
[   69.892257][ T6256] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   70.973366][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   71.219360][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.222293][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.738160][ T6334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.183'.
[   71.936416][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[   72.138883][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'.
Connection to localhost closed by remote host.
[   72.617312][ T6368] bridge0: port 3(syz_tun) entered disabled state
[   72.628507][ T6368] syz_tun (unregistering): left allmulticast mode
[   72.631367][ T6368] syz_tun (unregistering): left promiscuous mode
[   72.635787][ T6368] bridge0: port 3(syz_tun) entered disabled state
[   72.666248][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.737170][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.809520][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.877922][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.014386][   T12] bridge_slave_1: left allmulticast mode
[   73.016843][   T12] bridge_slave_1: left promiscuous mode
[   73.019626][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.026044][   T12] bridge_slave_0: left allmulticast mode
[   73.028447][   T12] bridge_slave_0: left promiscuous mode
[   73.030953][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.297820][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.304399][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.309378][   T12] bond0 (unregistering): Released all slaves
[   73.548846][   T12] hsr_slave_0: left promiscuous mode
[   73.552153][   T12] hsr_slave_1: left promiscuous mode
[   73.555479][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.558668][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.565104][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.567880][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.576487][   T12] veth1_macvtap: left promiscuous mode
[   73.578566][   T12] veth0_macvtap: left promiscuous mode
[   73.580725][   T12] veth1_vlan: left promiscuous mode
[   73.584444][   T12] veth0_vlan: left promiscuous mode
[   73.962580][   T12] team0 (unregistering): Port device team_slave_1 removed
[   73.991955][   T12] team0 (unregistering): Port device team_slave_0 removed
[   74.528915][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.600550][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.691935][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.776297][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.912734][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.945636][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.008663][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.043878][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.138777][   T12] bridge_slave_1: left allmulticast mode
[   75.140908][   T12] bridge_slave_1: left promiscuous mode
[   75.144605][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.150186][   T12] bridge_slave_0: left allmulticast mode
[   75.152426][   T12] bridge_slave_0: left promiscuous mode
[   75.156398][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.162086][   T12] bridge_slave_1: left allmulticast mode
[   75.166961][   T12] bridge_slave_1: left promiscuous mode
[   75.169440][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.175830][   T12] bridge_slave_0: left allmulticast mode
[   75.177826][   T12] bridge_slave_0: left promiscuous mode
[   75.179746][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.430925][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.435696][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.440554][   T12] bond0 (unregistering): Released all slaves
[   75.689197][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.694662][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.698896][   T12] bond0 (unregistering): Released all slaves
[   76.011424][   T12] hsr_slave_0: left promiscuous mode
[   76.021873][   T12] hsr_slave_1: left promiscuous mode
[   76.025692][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.028361][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.032004][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.037242][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.045414][   T12] hsr_slave_0: left promiscuous mode
[   76.048103][   T12] hsr_slave_1: left promiscuous mode
[   76.050371][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.053512][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.056557][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.059351][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.076061][   T12] veth1_macvtap: left promiscuous mode
[   76.077990][   T12] veth0_macvtap: left promiscuous mode
[   76.079885][   T12] veth1_vlan: left promiscuous mode
[   76.082258][   T12] veth0_vlan: left promiscuous mode
[   76.085667][   T12] macsec0: left allmulticast mode
[   76.087455][   T12] veth1_macvtap: left allmulticast mode
[   76.089925][   T12] veth1_macvtap: left promiscuous mode
[   76.092026][   T12] veth0_macvtap: left promiscuous mode
[   76.095250][   T12] veth1_vlan: left promiscuous mode
[   76.097473][   T12] veth0_vlan: left promiscuous mode
[   76.484593][   T12] team0 (unregistering): Port device team_slave_1 removed
[   76.504201][   T12] team0 (unregistering): Port device team_slave_0 removed
[   77.007228][   T12] team0 (unregistering): Port device team_slave_1 removed
[   77.036740][   T12] team0 (unregistering): Port device team_slave_0 removed
[   81.454054][   T10] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
19:41:15  Registers:
info registers vcpu 0

CPU#0
RAX=c1c61997e90ae900 RBX=ffffffff81976c78 RCX=c1c61997e90ae900 RDX=0000000000000001
RSI=ffffffff8d995f8c RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd75536498 CR3=00000001061f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000064 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c98a8bf72a476200 RBX=ffffffff81976c78 RCX=c98a8bf72a476200 RDX=0000000000000001
RSI=ffffffff8d995f8c RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd4a980fb5c CR3=0000000023588000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
