last executing test programs:

1.420718144s ago: executing program 2 (id=86):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10)

1.419176006s ago: executing program 2 (id=87):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000200)="a268c9fc095859a487322bb3447fee446f278ce8cf199b750ceb313cffce0f9efd60d93debd04f93836137408ccd26f791f3075230f98d90d6e7c1a5747bc0d5a9cd9bcec2d3ebdeb8f7", 0x4a}, {&(0x7f0000000180)="dee235c8c83298f323ed5b8418f9b708d7340d0d66658806ee0eb32aa2e6d0d9347bae4b5c9df8f2a37b3975fbb66a858e689cc7661f422528cd92ba4ec4", 0x3e}, {&(0x7f0000000280)="7724158ed39f7fdc7ea28307a401954d0193b83e72c37c221a4c4248f9dedf78aafe300dccd734e51805f586b1eee55d75c660a486885f8a91ee986312ad85c6edfa059a332a6b536c1be06c38cdec418d91e9cd8c35640774cde89084d8889fc4f9ee18ea05652f7ddbd760a611729e437161f5685fbdc2a0ed049e93071575243b1b", 0x83}, {&(0x7f00000003c0)="1f", 0x1}, {&(0x7f0000000400)="9e6ad94e4220162bfa932e0abc55469a63bd6fb865466212793ae432c7632221c4c4803037e006e98d42d2e580e20489e9ad87692cafcc5e06342fcc4cad71b17e82763e5dfcaf6c34182e629247917265f11e1d09bac50c289f2bc765026b3f68c2abf04df56fd6bc5c104128fe2b63b4a81d29ab7e0da342e00963f45c20a45bc8fe656bf4dc97297e4c2a149db2c903bb76d94dcf", 0x96}, {&(0x7f00000004c0)="ba84856b8b8a4979751fd52e07e35082d6228bf0cbd05fc37bba6f68bf7c404c78b7673d", 0x24}], 0x6)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000005c0), &(0x7f0000000600)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

386.776804ms ago: executing program 2 (id=108):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
shutdown(r0, 0x1)

328.928256ms ago: executing program 1 (id=109):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x4080)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

328.64766ms ago: executing program 2 (id=110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0xf304bb192a64e847, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x80040)

322.024365ms ago: executing program 0 (id=111):
r0 = socket(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8)

255.924185ms ago: executing program 0 (id=112):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

255.265458ms ago: executing program 1 (id=113):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

215.453756ms ago: executing program 2 (id=114):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)

215.138405ms ago: executing program 1 (id=115):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20)

209.428875ms ago: executing program 0 (id=116):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)

138.057599ms ago: executing program 1 (id=117):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x20, 0x76, 0x1, 0x0, 0x25dfdbff, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)

137.398825ms ago: executing program 2 (id=118):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x2ca0, @private2, 0x80000000}}}, 0x32)

137.177944ms ago: executing program 0 (id=119):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000004, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100))

60.388095ms ago: executing program 0 (id=120):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000004c0)=""/199, &(0x7f0000000280)=0xc7)

60.198419ms ago: executing program 1 (id=121):
syz_emit_ethernet(0x76, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2c, 0x0, 0x4, 0x0, 0x4}, @hopopts={0x3c}]}}}}}}}, 0x0)

233.473µs ago: executing program 1 (id=122):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000)

0s ago: executing program 0 (id=123):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[], 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33199' (ED25519) to the list of known hosts.
syzkaller login: [   57.162137][ T5832] cgroup: Unknown subsys name 'net'
[   57.307180][ T5832] cgroup: Unknown subsys name 'cpuset'
[   57.312154][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.058465][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.770070][ T5866] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.884481][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.888546][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.892560][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.905472][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.910130][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.923212][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.927647][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.932149][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.948660][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.965353][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.000978][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.008978][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.017025][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.020575][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.023858][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.371737][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   70.452093][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   70.563598][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.568677][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.571001][ T5871] bridge_slave_0: entered allmulticast mode
[   70.573710][ T5871] bridge_slave_0: entered promiscuous mode
[   70.583634][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.587095][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.589867][ T5871] bridge_slave_1: entered allmulticast mode
[   70.593822][ T5871] bridge_slave_1: entered promiscuous mode
[   70.610123][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   70.645041][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.674949][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.678183][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.680389][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.682513][ T5875] bridge_slave_0: entered allmulticast mode
[   70.685204][ T5875] bridge_slave_0: entered promiscuous mode
[   70.722010][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.724587][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.726795][ T5875] bridge_slave_1: entered allmulticast mode
[   70.730000][ T5875] bridge_slave_1: entered promiscuous mode
[   70.745695][ T5871] team0: Port device team_slave_0 added
[   70.772460][ T5871] team0: Port device team_slave_1 added
[   70.811565][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.815382][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.817813][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.820261][ T5879] bridge_slave_0: entered allmulticast mode
[   70.823835][ T5879] bridge_slave_0: entered promiscuous mode
[   70.842193][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.845498][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.855291][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.860987][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.864531][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.867547][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.869901][ T5879] bridge_slave_1: entered allmulticast mode
[   70.872544][ T5879] bridge_slave_1: entered promiscuous mode
[   70.883213][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.885805][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.896338][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.947502][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.953207][ T5875] team0: Port device team_slave_0 added
[   70.981446][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.986787][ T5875] team0: Port device team_slave_1 added
[   71.021134][ T5871] hsr_slave_0: entered promiscuous mode
[   71.023772][ T5871] hsr_slave_1: entered promiscuous mode
[   71.051482][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.053598][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.063714][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.070387][ T5879] team0: Port device team_slave_0 added
[   71.073550][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.076385][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.085020][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.103708][ T5879] team0: Port device team_slave_1 added
[   71.148954][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.151287][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.167103][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.169507][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.177788][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.189140][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.191934][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.202431][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.257467][ T5875] hsr_slave_0: entered promiscuous mode
[   71.261385][ T5875] hsr_slave_1: entered promiscuous mode
[   71.264627][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   71.266536][ T5875] Cannot create hsr debugfs directory
[   71.329085][ T5879] hsr_slave_0: entered promiscuous mode
[   71.331403][ T5879] hsr_slave_1: entered promiscuous mode
[   71.333502][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   71.335645][ T5879] Cannot create hsr debugfs directory
[   71.553272][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.583140][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.590125][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.604546][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.637744][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.648239][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.661932][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.675049][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.710226][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.721748][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.736310][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.743380][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.820381][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.853778][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   71.873535][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.876562][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.891242][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.899985][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.902430][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.935285][ T5878] Bluetooth: hci0: command tx timeout
[   71.942047][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   71.953602][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.956566][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.975440][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.978237][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.987032][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.025392][ T5878] Bluetooth: hci1: command tx timeout
[   72.030421][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   72.052315][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.054589][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.081377][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.084310][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.094872][ T5878] Bluetooth: hci2: command tx timeout
[   72.159589][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.271886][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.351225][ T5871] veth0_vlan: entered promiscuous mode
[   72.367585][ T5871] veth1_vlan: entered promiscuous mode
[   72.373558][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.390233][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.436551][ T5871] veth0_macvtap: entered promiscuous mode
[   72.455607][ T5871] veth1_macvtap: entered promiscuous mode
[   72.460426][ T5875] veth0_vlan: entered promiscuous mode
[   72.477409][ T5879] veth0_vlan: entered promiscuous mode
[   72.490161][ T5875] veth1_vlan: entered promiscuous mode
[   72.500212][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.506368][ T5879] veth1_vlan: entered promiscuous mode
[   72.517064][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.536661][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.541267][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.545058][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.553713][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.584899][ T5875] veth0_macvtap: entered promiscuous mode
[   72.590323][ T5875] veth1_macvtap: entered promiscuous mode
[   72.609540][ T5879] veth0_macvtap: entered promiscuous mode
[   72.627022][ T5879] veth1_macvtap: entered promiscuous mode
[   72.637983][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.652411][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.685131][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.692164][ T5707] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.695318][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.697303][ T5707] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.701889][ T5707] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.709832][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.710005][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.726329][ T5707] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.755403][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.761780][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.769525][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.772404][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.819365][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.822396][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.866777][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.869764][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.905592][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.912019][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.923849][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.952891][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.964212][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.030542][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.033757][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.091431][ T5938] syzkaller0: entered promiscuous mode
[   73.093344][ T5938] syzkaller0: entered allmulticast mode
[   73.255257][ T5945] nftables ruleset with unbound set
[   73.754956][ T5960] netlink: 240 bytes leftover after parsing attributes in process `syz.2.24'.
[   74.025229][ T5878] Bluetooth: hci0: command tx timeout
[   74.104678][ T5878] Bluetooth: hci1: command tx timeout
[   74.184108][ T5878] Bluetooth: hci2: command tx timeout
[   74.838918][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'.
[   75.019107][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.282925][ T6016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.376546][    C0] Illegal XDP return value 16128 on prog  (id 11) dev bond_slave_0, expect packet loss!
[   76.094241][ T5878] Bluetooth: hci0: command tx timeout
[   76.185389][ T5878] Bluetooth: hci1: command tx timeout
[   76.254926][ T5878] Bluetooth: hci2: command tx timeout
[   76.328103][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'.
[   76.473846][ T6076] geneve2: entered promiscuous mode
[   76.707453][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'.
[   76.746596][ T6090] Zero length message leads to an empty skb
[   76.749597][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'.
[   76.866781][ T6099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.066335][ T6113] netlink: 'syz.0.88': attribute type 29 has an invalid length.
[   77.070896][ T6113] netlink: 'syz.0.88': attribute type 29 has an invalid length.
[   77.073829][ T6113] netlink: 500 bytes leftover after parsing attributes in process `syz.0.88'.
[   77.111430][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   77.115987][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   77.120804][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   77.126167][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   77.142178][ T6117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.243667][ T6125] netlink: 'syz.0.93': attribute type 1 has an invalid length.
[   78.006583][ T6159] syz.0.106 uses obsolete (PF_INET,SOCK_PACKET)
[   78.175989][ T5878] Bluetooth: hci0: command tx timeout
[   78.191030][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.194671][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.259615][ T5878] Bluetooth: hci1: command tx timeout
[   78.336258][ T5878] Bluetooth: hci2: command tx timeout
Connection to localhost closed by remote host.
[   79.056960][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.114930][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.182633][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.237908][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.369040][   T12] bridge_slave_1: left allmulticast mode
[   79.370849][   T12] bridge_slave_1: left promiscuous mode
[   79.385020][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.399119][   T12] bridge_slave_0: left allmulticast mode
[   79.401224][   T12] bridge_slave_0: left promiscuous mode
[   79.403044][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.720996][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.727431][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.732360][   T12] bond0 (unregistering): Released all slaves
[   79.940218][   T12] hsr_slave_0: left promiscuous mode
[   79.943094][   T12] hsr_slave_1: left promiscuous mode
[   79.946545][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.949411][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.952810][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.957691][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.980388][   T12] veth1_macvtap: left promiscuous mode
[   79.982806][   T12] veth0_macvtap: left promiscuous mode
[   79.987146][   T12] veth1_vlan: left promiscuous mode
[   79.989601][   T12] veth0_vlan: left promiscuous mode
[   80.347268][   T12] team0 (unregistering): Port device team_slave_1 removed
[   80.377991][   T12] team0 (unregistering): Port device team_slave_0 removed
[   80.986859][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.063653][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.118138][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.171590][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.308692][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.371674][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.448037][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.544770][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.642252][   T12] bridge_slave_1: left allmulticast mode
[   81.644569][   T12] bridge_slave_1: left promiscuous mode
[   81.646599][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.656582][   T12] bridge_slave_0: left allmulticast mode
[   81.658875][   T12] bridge_slave_0: left promiscuous mode
[   81.661271][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.668530][   T12] bridge_slave_1: left allmulticast mode
[   81.670791][   T12] bridge_slave_1: left promiscuous mode
[   81.672686][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.678972][   T12] bridge_slave_0: left allmulticast mode
[   81.680786][   T12] bridge_slave_0: left promiscuous mode
[   81.682795][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.025856][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.032270][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.038071][   T12] bond0 (unregistering): Released all slaves
[   82.324498][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.329889][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.335025][   T12] bond0 (unregistering): Released all slaves
[   82.769811][   T12] hsr_slave_0: left promiscuous mode
[   82.772692][   T12] hsr_slave_1: left promiscuous mode
[   82.780031][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.783009][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.787652][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.790645][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.803769][   T12] hsr_slave_0: left promiscuous mode
[   82.808978][   T12] hsr_slave_1: left promiscuous mode
[   82.812374][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.815828][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.819304][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.822248][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.848983][   T12] veth1_macvtap: left promiscuous mode
[   82.851247][   T12] veth0_macvtap: left promiscuous mode
[   82.853589][   T12] veth1_vlan: left promiscuous mode
[   82.856394][   T12] veth0_vlan: left promiscuous mode
[   82.859839][   T12] veth1_macvtap: left promiscuous mode
[   82.861999][   T12] veth0_macvtap: left promiscuous mode
[   82.865396][   T12] veth1_vlan: left promiscuous mode
[   82.867603][   T12] veth0_vlan: left promiscuous mode
[   83.313807][   T12] team0 (unregistering): Port device team_slave_1 removed
[   83.346212][   T12] team0 (unregistering): Port device team_slave_0 removed
[   83.953796][   T12] team0 (unregistering): Port device team_slave_1 removed
[   83.980581][   T12] team0 (unregistering): Port device team_slave_0 removed
[   86.498772][   T50] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
22:18:48  Registers:
info registers vcpu 0

CPU#0
RAX=9710bb0dc78f7d00 RBX=ffffffff819683f8 RCX=9710bb0dc78f7d00 RDX=0000000000000001
RSI=ffffffff8d9ba1bf RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff6d348428 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001a9ad5dd 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=32fe03f640e14f00 RBX=ffffffff819683f8 RCX=32fe03f640e14f00 RDX=0000000000000001
RSI=ffffffff8d9ba1bf RDI=ffffffff8be33f00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020017000
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f51bf22f0e8 CR3=000000002297a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
