last executing test programs:

1.220033661s ago: executing program 2 (id=271):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="59c400000000000000000100000008002b01ff"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)

1.207364761s ago: executing program 0 (id=273):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xf}, 0x10)
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

1.152661683s ago: executing program 2 (id=274):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0)

1.152226195s ago: executing program 0 (id=276):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

1.073711084s ago: executing program 2 (id=277):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.070143065s ago: executing program 0 (id=279):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0)
unshare(0x62040200)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'cpuacct'}, {0x2b, 'cpuacct'}, {0x2d, 'net'}, {0x2d, 'rlimit'}, {0x2d, 'memory'}, {0x2d, 'net'}, {0x2d, 'cpuset'}]}, 0x34)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000180)=0x7ff57fc4, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500050002000000050004000100000005000100060000000c00078008000640000000000900020073797a300000000010000300686173683a69702c6d616300a20fe3"], 0x54}}, 0x0)

920.518799ms ago: executing program 1 (id=282):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x2, 0x2, 0x0, 0x0, 0x103}, 0x20)

862.88399ms ago: executing program 1 (id=283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800)

862.592872ms ago: executing program 1 (id=284):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8)

792.844263ms ago: executing program 1 (id=285):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{0x0, {0x33, 0x0, 0x4, 0x0, 0x5, 0x0, 0x1ebe}}, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @private1, @local, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x88, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private2, @dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast1, @private2={0xfc, 0x2, '\x00', 0x12}, @mcast2, @loopback, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x3}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @remote, @empty, @local, @mcast2, @private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x27}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private1, @empty, @local, @loopback, @local, @empty, @remote, @local, @local]}}}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

792.620097ms ago: executing program 1 (id=286):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a310000000044000400200001000a004e2400000040ff0200000000000000000000000000010300000020"], 0x6c}}, 0x0)

722.815335ms ago: executing program 1 (id=287):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r2, 0x0, 0x0)
connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
sendmsg$can_bcm(r2, 0x0, 0x4804)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe0}}, 0x0)
syz_genetlink_get_family_id$smc(0x0, r2)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78)
write(r2, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)

651.400346ms ago: executing program 0 (id=288):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000810000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)

571.878099ms ago: executing program 0 (id=289):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x8a28, 0x2476}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)

162.715623ms ago: executing program 2 (id=290):
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'})
write$bt_hci(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x34, r1, 0x101, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7e0044eb0375d93c27e55ef9770642b2"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004041}, 0x4000080)

51.795849ms ago: executing program 2 (id=291):
syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

9.849052ms ago: executing program 2 (id=292):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x8}, 0x18)

0s ago: executing program 0 (id=293):
socket$packet(0x11, 0x3, 0x300)
socket$inet(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18)
epoll_create(0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24323' (ED25519) to the list of known hosts.
syzkaller login: [   47.858446][ T5811] cgroup: Unknown subsys name 'net'
[   47.964730][ T5811] cgroup: Unknown subsys name 'cpuset'
[   47.972020][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.597256][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.846697][ T5849] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.874201][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.877053][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.879493][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.883337][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.885886][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.933197][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.938120][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.940968][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.944494][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.947363][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.984561][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.987357][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.990184][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.993535][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.995979][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.243771][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   62.257145][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   62.344057][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   62.364167][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.366585][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.368894][ T5866] bridge_slave_0: entered allmulticast mode
[   62.372859][ T5866] bridge_slave_0: entered promiscuous mode
[   62.405481][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.408184][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.410766][ T5866] bridge_slave_1: entered allmulticast mode
[   62.414242][ T5866] bridge_slave_1: entered promiscuous mode
[   62.425486][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.428002][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.430160][ T5861] bridge_slave_0: entered allmulticast mode
[   62.433589][ T5861] bridge_slave_0: entered promiscuous mode
[   62.436750][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.439199][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.442255][ T5861] bridge_slave_1: entered allmulticast mode
[   62.445024][ T5861] bridge_slave_1: entered promiscuous mode
[   62.494003][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.498762][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.506923][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.512090][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.548164][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.550452][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.553074][ T5864] bridge_slave_0: entered allmulticast mode
[   62.555640][ T5864] bridge_slave_0: entered promiscuous mode
[   62.577530][ T5861] team0: Port device team_slave_0 added
[   62.579536][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.582272][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.584445][ T5864] bridge_slave_1: entered allmulticast mode
[   62.587006][ T5864] bridge_slave_1: entered promiscuous mode
[   62.603300][ T5866] team0: Port device team_slave_0 added
[   62.614406][ T5861] team0: Port device team_slave_1 added
[   62.617694][ T5866] team0: Port device team_slave_1 added
[   62.638738][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.650840][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.655607][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.664328][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.678754][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.682440][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.684482][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.692854][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.696474][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.698488][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.706053][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.721888][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.723936][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.731461][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.749336][ T5864] team0: Port device team_slave_0 added
[   62.772322][ T5864] team0: Port device team_slave_1 added
[   62.808944][ T5861] hsr_slave_0: entered promiscuous mode
[   62.812582][ T5861] hsr_slave_1: entered promiscuous mode
[   62.817798][ T5866] hsr_slave_0: entered promiscuous mode
[   62.819973][ T5866] hsr_slave_1: entered promiscuous mode
[   62.822671][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.825151][ T5866] Cannot create hsr debugfs directory
[   62.827515][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.829879][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.837714][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.858267][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.860299][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.867850][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.946499][ T5864] hsr_slave_0: entered promiscuous mode
[   62.948782][ T5864] hsr_slave_1: entered promiscuous mode
[   62.950763][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.953305][ T5864] Cannot create hsr debugfs directory
[   63.132996][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.139511][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.149737][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.155501][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.191594][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.215175][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.219699][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.232802][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.263056][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.268011][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.273993][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.290878][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.376458][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.387736][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.396617][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   63.417519][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.419705][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.424179][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.426275][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.432130][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   63.454081][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.462128][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.464241][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.478979][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.481238][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.497548][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   63.507862][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.510026][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.533768][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.542853][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.544999][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.640594][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.678256][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.700580][ T5866] veth0_vlan: entered promiscuous mode
[   63.709939][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.717062][ T5866] veth1_vlan: entered promiscuous mode
[   63.754420][ T5866] veth0_macvtap: entered promiscuous mode
[   63.758320][ T5866] veth1_macvtap: entered promiscuous mode
[   63.766588][ T5864] veth0_vlan: entered promiscuous mode
[   63.794598][ T5861] veth0_vlan: entered promiscuous mode
[   63.799627][ T5864] veth1_vlan: entered promiscuous mode
[   63.804868][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.812838][ T5861] veth1_vlan: entered promiscuous mode
[   63.815945][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.826393][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.829152][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.833474][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.836197][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.877609][ T5864] veth0_macvtap: entered promiscuous mode
[   63.885204][ T5864] veth1_macvtap: entered promiscuous mode
[   63.890763][ T5861] veth0_macvtap: entered promiscuous mode
[   63.903400][ T5861] veth1_macvtap: entered promiscuous mode
[   63.922469][ T5862] Bluetooth: hci0: command tx timeout
[   63.928792][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.937233][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.937252][ T4884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.942291][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.950390][ T4884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.962326][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.971399][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.974137][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.976682][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.979207][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.985340][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.987893][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.990438][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.994067][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.003508][ T4884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.005845][ T4884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.012057][ T5862] Bluetooth: hci2: command tx timeout
[   64.014040][ T5862] Bluetooth: hci1: command tx timeout
[   64.074754][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.088397][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.091068][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.137780][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.138022][  T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.140143][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.152560][  T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.184451][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.188721][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.647296][ T5962] tipc: Started in network mode
[   64.651692][ T5962] tipc: Node identity 7, cluster identity 4711
[   64.665757][ T5962] tipc: Node number set to 7
[   64.857816][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.50'.
[   64.866573][ T5980] netlink: 'syz.2.48': attribute type 10 has an invalid length.
[   64.870718][ T5980] geneve0: entered promiscuous mode
[   64.907872][ T5980] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   65.090181][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'.
[   65.100057][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'.
[   65.188225][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   65.198988][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.202279][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.279831][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.288555][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.330626][ T6010] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.333678][ T6010] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.336381][ T6010] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.339661][ T6010] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.433697][ T6022] netlink: 'syz.0.66': attribute type 27 has an invalid length.
[   65.553676][ T6030] Zero length message leads to an empty skb
[   65.728035][ T6043] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.732022][ T6043] team0: Port device bond1 added
[   66.003022][ T5218] Bluetooth: hci0: command tx timeout
[   66.081505][ T5218] Bluetooth: hci1: command tx timeout
[   66.083530][ T5862] Bluetooth: hci2: command tx timeout
[   66.763326][ T6102] netlink: 'syz.1.103': attribute type 30 has an invalid length.
[   66.958498][ T6121] sock: sock_timestamping_bind_phc: sock not bind to device
[   67.475046][ T6165] smc: net device bond0 applied user defined pnetid SYZ2
[   67.784599][ T6190] bridge0: port 3(gretap0) entered blocking state
[   67.786737][ T6190] bridge0: port 3(gretap0) entered disabled state
[   67.788851][ T6190] gretap0: entered allmulticast mode
[   67.792122][ T6190] gretap0: entered promiscuous mode
[   67.794024][ T6190] bridge0: port 3(gretap0) entered blocking state
[   67.796033][ T6190] bridge0: port 3(gretap0) entered forwarding state
[   68.083460][ T5218] Bluetooth: hci0: command tx timeout
[   68.103233][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   68.105951][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[   68.153523][ T6214] raw_sendmsg: syz.0.141 forgot to set AF_INET. Fix it!
[   68.163662][ T5218] Bluetooth: hci1: command tx timeout
[   68.165869][ T5218] Bluetooth: hci2: command tx timeout
[   68.203872][ T6216] netlink: 120 bytes leftover after parsing attributes in process `syz.1.142'.
[   68.207870][ T6220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.143'.
[   68.254095][ T6224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.263762][ T6219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   68.312210][ T6219] netlink: 'syz.0.144': attribute type 10 has an invalid length.
[   68.344907][ T6219] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.347655][ T6229] netlink: 'syz.1.148': attribute type 3 has an invalid length.
[   68.350021][ T6229] netlink: 666 bytes leftover after parsing attributes in process `syz.1.148'.
[   68.447115][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   68.507107][ T6245] ip6erspan0: entered allmulticast mode
[   68.623728][ T6257] netlink: 'syz.1.162': attribute type 4 has an invalid length.
[   68.954423][ T6287] delete_channel: no stack
[   69.304551][ T6321] vlan2: entered allmulticast mode
[   69.800889][ T6364] syz.1.192 uses obsolete (PF_INET,SOCK_PACKET)
[   70.172060][ T5862] Bluetooth: hci0: command tx timeout
[   70.201410][ T6403] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[   70.233756][ T6406] warning: `syz.2.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.238299][ T6407] __nla_validate_parse: 5 callbacks suppressed
[   70.238308][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'.
[   70.243485][ T5862] Bluetooth: hci2: command tx timeout
[   70.245319][ T5862] Bluetooth: hci1: command tx timeout
[   70.362519][ T6418] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   70.436255][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[   70.447174][ T6427] syz.1.217 (6427) used greatest stack depth: 19320 bytes left
[   70.525957][ T6432] netlink: 3 bytes leftover after parsing attributes in process `syz.1.219'.
[   70.534979][ T6432] batadv1: entered promiscuous mode
[   70.536759][ T6432] batadv1: entered allmulticast mode
[   70.558001][ T6434] geneve2: entered promiscuous mode
[   70.626805][ T6437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.219'.
[   70.787923][ T6450] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   70.857091][ T6456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.892124][ T6459] netlink: 27 bytes leftover after parsing attributes in process `syz.1.231'.
[   70.920727][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'.
[   71.205871][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.208637][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.458638][ T6493] lo: entered promiscuous mode
[   71.460951][ T6493] tunl0: entered promiscuous mode
[   71.463777][ T6493] gre0: entered promiscuous mode
[   71.465891][ T6493] gretap0: entered promiscuous mode
[   71.467988][ T6493] erspan0: entered promiscuous mode
[   71.470244][ T6493] ip_vti0: entered promiscuous mode
[   71.475436][ T6493] ip6_vti0: entered promiscuous mode
[   71.477628][ T6493] sit0: entered promiscuous mode
[   71.479727][ T6493] ip6tnl0: entered promiscuous mode
[   71.482333][ T6493] ip6gre0: entered promiscuous mode
[   71.484419][ T6493] syz_tun: entered promiscuous mode
[   71.486511][ T6493] ip6gretap0: entered promiscuous mode
[   71.488729][ T6493] bridge0: entered promiscuous mode
[   71.490749][ T6493] vcan0: entered promiscuous mode
[   71.494331][ T6493] bond0: entered promiscuous mode
[   71.496283][ T6493] bond_slave_0: entered promiscuous mode
[   71.498363][ T6493] bond_slave_1: entered promiscuous mode
[   71.500434][ T6493] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   71.504110][ T6493] team0: entered promiscuous mode
[   71.505843][ T6493] team_slave_0: entered promiscuous mode
[   71.509041][ T6493] team_slave_1: entered promiscuous mode
[   71.513052][ T6493] bond1: entered promiscuous mode
[   71.515492][ T6493] dummy0: entered promiscuous mode
[   71.518194][ T6493] nlmon0: entered promiscuous mode
[   71.521703][ T6493] caif0: entered promiscuous mode
[   71.523427][ T6493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.294210][ T6534] netlink: 'syz.0.265': attribute type 1 has an invalid length.
[   72.357246][ T6534] 8021q: adding VLAN 0 to HW filter on device bond2
[   72.374373][ T6534] vlan2: entered allmulticast mode
[   72.375955][ T6534] geneve1: entered allmulticast mode
[   72.379817][ T6534] bond2: (slave vlan2): making interface the new active one
[   72.383834][ T6534] bond2: (slave vlan2): Enslaving as an active interface with an up link
[   72.583309][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'.
[   72.592653][ T6565] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   72.599810][ T6565] xt_SECMARK: invalid mode: 0
[   72.854716][ T6579] tipc: Invalid UDP bearer configuration
[   72.854748][ T6579] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   74.473278][   T12] bridge_slave_1: left allmulticast mode
[   74.475689][   T12] bridge_slave_1: left promiscuous mode
[   74.478343][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.483754][   T12] bridge_slave_0: left promiscuous mode
[   74.485541][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.590571][   T12] bond0 (unregistering): (slave geneve0): Releasing backup interface
[   74.739799][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.743980][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.747039][   T12] bond0 (unregistering): Released all slaves
[   74.943521][   T12] hsr_slave_0: left promiscuous mode
[   74.945657][   T12] hsr_slave_1: left promiscuous mode
[   74.948404][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.952316][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.143720][   T12] team0 (unregistering): Port device team_slave_1 removed
[   75.166390][   T12] team0 (unregistering): Port device team_slave_0 removed
[   75.666536][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.710898][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.753813][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.800246][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.897193][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.941832][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.005534][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.060479][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.140925][   T12] gretap0: left allmulticast mode
[   76.143172][   T12] gretap0: left promiscuous mode
[   76.144856][   T12] bridge0: port 3(gretap0) entered disabled state
[   76.149168][   T12] bridge_slave_1: left allmulticast mode
[   76.161380][   T12] bridge_slave_1: left promiscuous mode
[   76.163259][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.167853][   T12] bridge_slave_0: left allmulticast mode
[   76.169979][   T12] bridge_slave_0: left promiscuous mode
[   76.174657][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.179866][   T12] bridge_slave_1: left allmulticast mode
[   76.182714][   T12] bridge_slave_1: left promiscuous mode
[   76.184539][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.188120][   T12] bridge_slave_0: left allmulticast mode
[   76.189896][   T12] bridge_slave_0: left promiscuous mode
[   76.193283][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.419355][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.423588][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.427069][   T12] bond0 (unregistering): Released all slaves
[   76.434196][   T12] bond1 (unregistering): Released all slaves
[   76.507478][   T12] bond2 (unregistering): (slave vlan2): Releasing active interface
[   76.607247][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.609971][   T12] bond_slave_0: left promiscuous mode
[   76.613899][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.616574][   T12] bond_slave_1: left promiscuous mode
[   76.620067][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   76.623128][   T12] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   76.628914][   T12] bond0 (unregistering): Released all slaves
[   76.679247][   T12] bond1 (unregistering): left promiscuous mode
[   76.683239][   T12] team0: Port device bond1 removed
[   76.685656][   T12] bond1 (unregistering): Released all slaves
[   76.739285][   T12] bond2 (unregistering): Released all slaves
[   76.820654][   T12] tipc: Left network mode
[   77.160808][   T12] hsr_slave_0: left promiscuous mode
[   77.163265][   T12] hsr_slave_1: left promiscuous mode
[   77.165295][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.167569][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.170443][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.175821][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.180829][   T12] hsr_slave_0: left promiscuous mode
[   77.185780][   T12] hsr_slave_1: left promiscuous mode
[   77.187738][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.189943][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.193653][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.195874][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.210971][   T12] veth1_macvtap: left promiscuous mode
[   77.213904][   T12] veth0_macvtap: left promiscuous mode
[   77.215707][   T12] veth1_vlan: left promiscuous mode
[   77.217397][   T12] veth0_vlan: left promiscuous mode
[   77.220712][   T12] veth1_macvtap: left promiscuous mode
[   77.222997][   T12] veth0_macvtap: left promiscuous mode
[   77.504505][   T12] team0 (unregistering): Port device team_slave_1 removed
[   77.528514][   T12] team0 (unregistering): Port device team_slave_0 removed
[   77.860872][   T12] team_slave_1 (unregistering): left promiscuous mode
[   77.865551][   T12] team0 (unregistering): Port device team_slave_1 removed
[   77.885435][   T12] team_slave_0 (unregistering): left promiscuous mode
[   77.888716][   T12] team0 (unregistering): Port device team_slave_0 removed
[   81.452895][   T24] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
02:10:02  Registers:
info registers vcpu 0

CPU#0
RAX=bad5faa2e0876800 RBX=ffffffff81976c78 RCX=bad5faa2e0876800 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffea1f74c48 CR3=000000010e346000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000021 00000000316e526c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000021 00000000316e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ee6a1c0f46528c00 RBX=ffffffff81976c78 RCX=ee6a1c0f46528c00 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5125ac46c0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000069 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000021 00000000316e526c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000021 00000000316e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
