last executing test programs:

370.906862ms ago: executing program 2 (id=283):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000380)=""/78, 0x4e, <r0=>0x0, &(0x7f0000000440)=""/167, 0xa7}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000000}, 0x10, r0}, 0x94)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5f)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r4=>r3})
sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000017010000c60000187a22ec104b065cf506de8cdc08a6d0fddc0d72778aece33162e224760128908354ebe677afaf0fba4d209101c48a04692828bd124430ce0542ec901330cfd17ecda3ea1ff3d715545d42da58b55978fbbd3cf28bf72800000000000000170100000200000014000008d240a5aaf782aa7e74e12faa551a3e8899099e1542f8ed4490000000000000000000"], 0xa0, 0x200040d4}], 0x1, 0x20008852)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000004ec0), 0x0, 0x2000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES32, @ANYRESDEC=r5], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001300)={0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28004000e4060104d23e91a8e50d7b04000000000000000002000006050001000700000009000200"], 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)

370.632354ms ago: executing program 1 (id=285):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x0, 0x1}, {0xa, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x4020000)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138)

369.50745ms ago: executing program 1 (id=286):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x8916, 0x0)

356.222384ms ago: executing program 2 (id=287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000100020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)

298.227718ms ago: executing program 0 (id=288):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$sock(r0, &(0x7f0000003240)={0x0, 0x0, 0x0}, 0x1)

297.994233ms ago: executing program 1 (id=289):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0)

296.793286ms ago: executing program 0 (id=290):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

296.591341ms ago: executing program 2 (id=291):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x2b}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)

207.806442ms ago: executing program 2 (id=292):
unshare(0x28000600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48)

207.561721ms ago: executing program 0 (id=293):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x17, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf8ff}, @generic={0x66, 0x8, 0x0, 0x0, 0xd0ff}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

205.527576ms ago: executing program 2 (id=294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@dccp_packet={0x1, 0x6, "ece016", 0x60, 0x21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x15a, 0x2, 0x4, 0x1, 0x58, 0x40, 0x5, [@mcast2]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, "61e966", 0xfc, "d50ce8"}, "921826e4a94461c3c0dbf326e578f73b8b6eb75fee8be064a29d9db427a3ff85887042f2fed8d5b451d80d7327ccedaac139537f4d043973"}}}}, 0x96)

145.418652ms ago: executing program 1 (id=295):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)={r1, 0x7}, 0x8)

145.103038ms ago: executing program 0 (id=296):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x400010, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

143.468585ms ago: executing program 1 (id=297):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000eb5000006111b8000000000006080900000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

54.04781ms ago: executing program 1 (id=298):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

53.786637ms ago: executing program 0 (id=299):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@local}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {0x0, 0x7}, {}, 0x0, 0x3, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5-generic\x00'}, 0x5e, 0xc0}}]}, 0x13c}}, 0x0)

192.061µs ago: executing program 2 (id=300):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})

0s ago: executing program 0 (id=301):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63180' (ED25519) to the list of known hosts.
syzkaller login: [   48.305527][ T5748] cgroup: Unknown subsys name 'net'
[   48.388399][ T5748] cgroup: Unknown subsys name 'cpuset'
[   48.393872][ T5748] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.710258][ T5748] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.709602][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.712830][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.716384][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.722077][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.725395][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.729036][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.732320][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.756947][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.760095][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.762755][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.791460][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.794651][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.797833][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.806441][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.809287][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.146832][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   60.167667][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   60.259022][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   60.277779][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.281398][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.283758][ T5832] bridge_slave_0: entered allmulticast mode
[   60.286841][ T5832] bridge_slave_0: entered promiscuous mode
[   60.310031][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.312831][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.316078][ T5832] bridge_slave_1: entered allmulticast mode
[   60.318752][ T5832] bridge_slave_1: entered promiscuous mode
[   60.334288][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.337291][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.339744][ T5835] bridge_slave_0: entered allmulticast mode
[   60.343073][ T5835] bridge_slave_0: entered promiscuous mode
[   60.349927][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.352767][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.355423][ T5835] bridge_slave_1: entered allmulticast mode
[   60.358106][ T5835] bridge_slave_1: entered promiscuous mode
[   60.401508][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.421727][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.428870][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.432279][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.434903][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.437578][ T5839] bridge_slave_0: entered allmulticast mode
[   60.440181][ T5839] bridge_slave_0: entered promiscuous mode
[   60.445634][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.465897][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.468675][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.471118][ T5839] bridge_slave_1: entered allmulticast mode
[   60.475248][ T5839] bridge_slave_1: entered promiscuous mode
[   60.518901][ T5835] team0: Port device team_slave_0 added
[   60.523642][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.530260][ T5832] team0: Port device team_slave_0 added
[   60.533076][ T5835] team0: Port device team_slave_1 added
[   60.550712][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.563028][ T5832] team0: Port device team_slave_1 added
[   60.579507][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.581769][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.590006][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.628574][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.630726][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.639932][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.644212][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.647550][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.658865][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.665096][ T5839] team0: Port device team_slave_0 added
[   60.672116][ T5839] team0: Port device team_slave_1 added
[   60.681821][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.684014][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.692901][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.738943][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.741702][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.753424][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.775489][ T5832] hsr_slave_0: entered promiscuous mode
[   60.778712][ T5832] hsr_slave_1: entered promiscuous mode
[   60.787359][ T5835] hsr_slave_0: entered promiscuous mode
[   60.790434][ T5835] hsr_slave_1: entered promiscuous mode
[   60.793243][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.796887][ T5835] Cannot create hsr debugfs directory
[   60.799652][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.802214][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.811510][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.890831][ T5839] hsr_slave_0: entered promiscuous mode
[   60.893295][ T5839] hsr_slave_1: entered promiscuous mode
[   60.896513][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.899480][ T5839] Cannot create hsr debugfs directory
[   61.105894][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.113866][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.120975][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.131535][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.162432][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.181180][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.187225][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.198989][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.241652][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.262998][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.270681][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.282196][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.387754][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.408923][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.422703][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   61.433974][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.437195][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.461306][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.464234][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.472241][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   61.493206][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.495903][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.516233][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.518560][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.523950][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.556765][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.588021][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   61.598563][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.601450][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.620763][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.623771][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.733375][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.777855][ T5835] veth0_vlan: entered promiscuous mode
[   61.788939][ T5835] veth1_vlan: entered promiscuous mode
[   61.807412][ T5838] Bluetooth: hci1: command tx timeout
[   61.807788][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.809927][ T5838] Bluetooth: hci0: command tx timeout
[   61.856018][ T5835] veth0_macvtap: entered promiscuous mode
[   61.860120][ T5832] veth0_vlan: entered promiscuous mode
[   61.866458][ T5835] veth1_macvtap: entered promiscuous mode
[   61.887755][ T5832] veth1_vlan: entered promiscuous mode
[   61.896070][ T5838] Bluetooth: hci2: command tx timeout
[   61.908030][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.917755][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.931531][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.937061][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.940572][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.944039][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.974050][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.989092][ T5832] veth0_macvtap: entered promiscuous mode
[   62.013917][ T5832] veth1_macvtap: entered promiscuous mode
[   62.057519][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.066763][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.073401][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.076654][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.092956][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.097089][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.100245][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.103051][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.120347][ T5839] veth0_vlan: entered promiscuous mode
[   62.123472][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.127519][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.158892][ T5839] veth1_vlan: entered promiscuous mode
[   62.170733][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.215964][ T5839] veth0_macvtap: entered promiscuous mode
[   62.222733][ T5839] veth1_macvtap: entered promiscuous mode
[   62.226799][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'.
[   62.237569][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.238236][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.240725][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.248220][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.255370][ T5895] vlan0: entered promiscuous mode
[   62.265637][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.268426][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.271201][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.273966][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.327577][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.332327][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.355673][ T5899] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.386835][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.389378][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.448973][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.451499][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.519994][ T5909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.744984][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'.
[   62.847901][ T5934] netlink: 'syz.1.27': attribute type 1 has an invalid length.
[   62.870164][ T5936] netlink: 'syz.2.28': attribute type 1 has an invalid length.
[   62.873332][ T5936] netlink: 224 bytes leftover after parsing attributes in process `syz.2.28'.
[   62.908787][ T5934] bond0: (slave veth3): Enslaving as an active interface with an up link
[   62.959840][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv1
[   62.963006][ T5934] bond0: (slave batadv1): Enslaving as an active interface with an up link
[   62.974095][ T5941] netlink: 'syz.0.30': attribute type 29 has an invalid length.
[   62.986760][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   63.002649][ T5945] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   63.143579][ T5958] netlink: 'syz.0.38': attribute type 1 has an invalid length.
[   63.344646][ T5974] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET)
[   63.599949][ T6001] Illegal XDP return value 4294967294 on prog  (id 12) dev N/A, expect packet loss!
[   63.667123][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'.
[   63.808384][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.831310][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'.
[   63.885050][ T5838] Bluetooth: hci0: command tx timeout
[   63.886037][ T5833] Bluetooth: hci1: command tx timeout
[   63.923536][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.966454][ T5833] Bluetooth: hci2: command tx timeout
[   63.984134][ T6030] team0 (unregistering): Port device team_slave_0 removed
[   63.994991][ T6042] netlink: 'syz.1.72': attribute type 10 has an invalid length.
[   63.997403][ T6030] team0 (unregistering): Port device team_slave_1 removed
[   64.025664][ T6041] syz.2.77 (6041) used greatest stack depth: 18296 bytes left
[   64.115931][ T6042] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.376857][ T6074] netlink: 'syz.2.91': attribute type 11 has an invalid length.
[   64.877986][ T6107] trusted_key: syz.0.108 sent an empty control message without MSG_MORE.
[   64.898202][ T6117] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[   64.956926][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'.
[   65.273700][ T6158] ipvlan0: entered promiscuous mode
[   65.777389][ T6219] C: renamed from team_slave_0 (while UP)
[   65.788744][ T6219] netlink: 'syz.0.161': attribute type 8 has an invalid length.
[   65.792216][ T6219] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   65.847063][ T6226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.974589][ T5833] Bluetooth: hci0: command tx timeout
[   65.975817][ T5838] Bluetooth: hci1: command tx timeout
[   66.055250][ T5838] Bluetooth: hci2: command tx timeout
[   66.537342][ T6285] sock: sock_set_timeout: `syz.0.190' (pid 6285) tries to set negative timeout
[   66.647068][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'.
[   66.710326][ T6303] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   66.714393][ T6303] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   66.818226][ T6311] netlink: 'syz.0.203': attribute type 7 has an invalid length.
[   67.052408][ T6344] vti0: entered promiscuous mode
[   67.302023][ T6374] netlink: 248 bytes leftover after parsing attributes in process `syz.2.229'.
[   67.776267][ T6404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.047204][ T5838] Bluetooth: hci0: command tx timeout
[   68.047231][ T5833] Bluetooth: hci1: command tx timeout
[   68.124634][ T5833] Bluetooth: hci2: command tx timeout
[   68.139527][ T6449] ieee802154 phy0 wpan0: encryption failed: -22
[   68.224818][ T6446] block nbd0: server does not support multiple connections per device.
[   68.228495][ T6446] block nbd0: shutting down sockets
[   68.339308][ T6476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'.
[   68.342805][ T6476] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   68.355002][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.271'.
[   68.368350][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'.
[   68.410251][ T6478] team0: Port device C removed
[   68.520326][ T6490] smc: net device bond0 applied user defined pnetid SYZ2
[   68.527469][ T6490] Zero length message leads to an empty skb
[   68.598850][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'.
Connection to localhost closed by remote host.
[   69.151762][ T6550] sctp: failed to load transform for md5: -2
[   69.491040][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.599501][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.643093][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.706192][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.816382][   T13] bridge_slave_1: left allmulticast mode
[   69.818855][   T13] bridge_slave_1: left promiscuous mode
[   69.821829][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.828995][   T13] bridge_slave_0: left allmulticast mode
[   69.831430][   T13] bridge_slave_0: left promiscuous mode
[   69.833971][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.082585][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.088432][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.093382][   T13] bond0 (unregistering): Released all slaves
[   70.340134][   T13] hsr_slave_0: left promiscuous mode
[   70.342942][   T13] hsr_slave_1: left promiscuous mode
[   70.348330][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.350815][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.356625][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.359273][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.370132][   T13] veth1_macvtap: left promiscuous mode
[   70.372298][   T13] veth0_macvtap: left promiscuous mode
[   70.375365][   T13] veth1_vlan: left promiscuous mode
[   70.377581][   T13] veth0_vlan: left promiscuous mode
[   70.639036][   T13] team0 (unregistering): Port device team_slave_1 removed
[   70.662974][   T13] team0 (unregistering): Port device team_slave_0 removed
[   71.087629][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.089804][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.173110][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.221774][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.275102][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.318032][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.425259][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.464916][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.539927][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.604052][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.699102][   T13] bridge_slave_1: left allmulticast mode
[   71.701198][   T13] bridge_slave_1: left promiscuous mode
[   71.703229][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.708054][   T13] bridge_slave_0: left allmulticast mode
[   71.709990][   T13] bridge_slave_0: left promiscuous mode
[   71.712307][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.717632][   T13] bridge_slave_1: left allmulticast mode
[   71.719646][   T13] bridge_slave_1: left promiscuous mode
[   71.721693][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.726904][   T13] bridge_slave_0: left allmulticast mode
[   71.728839][   T13] bridge_slave_0: left promiscuous mode
[   71.730834][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.978415][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.985356][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.990035][   T13] bond0 (unregistering): Released all slaves
[   72.206082][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.210059][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.213857][   T13] bond0 (unregistering): (slave veth3): Releasing backup interface
[   72.217939][   T13] bond0 (unregistering): (slave batadv1): Releasing backup interface
[   72.221596][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   72.226624][   T13] bond0 (unregistering): Released all slaves
[   72.590676][   T13] hsr_slave_0: left promiscuous mode
[   72.593350][   T13] hsr_slave_1: left promiscuous mode
[   72.596211][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.598659][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.601367][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.603824][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.610999][   T13] hsr_slave_0: left promiscuous mode
[   72.613132][   T13] hsr_slave_1: left promiscuous mode
[   72.616720][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.619808][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.622856][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.625979][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.642476][   T13] veth1_macvtap: left promiscuous mode
[   72.644910][   T13] veth0_macvtap: left promiscuous mode
[   72.646757][   T13] veth1_vlan: left promiscuous mode
[   72.649906][   T13] veth1_macvtap: left promiscuous mode
[   72.652225][   T13] veth0_macvtap: left promiscuous mode
[   72.654119][   T13] veth1_vlan: left promiscuous mode
[   72.656313][   T13] veth0_vlan: left promiscuous mode
[   72.923020][   T13] team0 (unregistering): Port device team_slave_1 removed
[   81.335776][   T96] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
08:14:08  Registers:
info registers vcpu 0

CPU#0
RAX=e3f796f44cd89800 RBX=ffffffff81974d58 RCX=e3f796f44cd89800 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff20b6c96c0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000010 000000000b6e6110
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000021 00000000326e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=9d0635b0f72c5000 RBX=ffffffff81974d58 RCX=9d0635b0f72c5000 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff9b0c0f58 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000067 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0000000000000010 000000000b6e6110
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000021 00000000326e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
