last executing test programs:

1.956744944s ago: executing program 1 (id=86):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)

1.876617386s ago: executing program 1 (id=87):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

1.139639812s ago: executing program 2 (id=95):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00')
socket$rds(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')
socket$netlink(0x10, 0x3, 0xf)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.046470017s ago: executing program 2 (id=98):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

987.538798ms ago: executing program 2 (id=99):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@empty}}, 0x28}, 0x1, 0x0, 0x0, 0x22004044}, 0x0)

910.575278ms ago: executing program 2 (id=101):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000440)=0x9, 0x4)

305.744243ms ago: executing program 0 (id=110):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

252.244007ms ago: executing program 1 (id=111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r1, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0)

251.869983ms ago: executing program 0 (id=112):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x11, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

181.275022ms ago: executing program 1 (id=113):
socket(0x2a, 0x80000, 0x10000)

180.869714ms ago: executing program 0 (id=114):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'wg1\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x800, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}}, 0x14)

174.937392ms ago: executing program 1 (id=115):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

117.226988ms ago: executing program 0 (id=116):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x1, 0x1, 0xb, 0x0, 0x100}, 0x20)

66.386622ms ago: executing program 0 (id=117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000022000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200480000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0)

66.078138ms ago: executing program 2 (id=118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/25, 0x19}], 0x1}}], 0x2, 0x400100a0, 0x0)

17.337578ms ago: executing program 1 (id=119):
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0)
close(r0)

504.909µs ago: executing program 0 (id=120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c000000180001002bbd70000000000002000000020000090000000006001500060000001800168014"], 0x3c}}, 0x44890)

0s ago: executing program 2 (id=121):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
unshare(0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
sendfile(r2, r1, 0x0, 0xf03a0005)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49091' (ED25519) to the list of known hosts.
syzkaller login: [   56.311123][ T5779] cgroup: Unknown subsys name 'net'
[   56.442929][ T5779] cgroup: Unknown subsys name 'cpuset'
[   56.448714][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.255363][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.845767][ T5879] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.274148][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.276841][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.322189][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.327757][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.333278][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.337420][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.349471][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.426240][ T5890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.430679][ T5890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.434457][ T5890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.439041][ T5890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.443152][ T5890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.522217][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.526009][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.529729][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.534275][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.537947][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.882816][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   71.947407][ T5893] chnl_net:caif_netlink_parms(): no params data found
[   72.005296][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.007899][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.012266][ T5888] bridge_slave_0: entered allmulticast mode
[   72.015545][ T5888] bridge_slave_0: entered promiscuous mode
[   72.038882][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   72.054088][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.056601][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.059614][ T5888] bridge_slave_1: entered allmulticast mode
[   72.063342][ T5888] bridge_slave_1: entered promiscuous mode
[   72.124164][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.160325][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.168108][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.171102][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.174426][ T5893] bridge_slave_0: entered allmulticast mode
[   72.177801][ T5893] bridge_slave_0: entered promiscuous mode
[   72.220411][ T5888] team0: Port device team_slave_0 added
[   72.223127][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.225870][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.228859][ T5893] bridge_slave_1: entered allmulticast mode
[   72.232598][ T5893] bridge_slave_1: entered promiscuous mode
[   72.278258][ T5888] team0: Port device team_slave_1 added
[   72.291827][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.294406][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.297211][ T5891] bridge_slave_0: entered allmulticast mode
[   72.301994][ T5891] bridge_slave_0: entered promiscuous mode
[   72.307328][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.312086][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.315230][ T5891] bridge_slave_1: entered allmulticast mode
[   72.320405][ T5891] bridge_slave_1: entered promiscuous mode
[   72.337196][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.366724][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.394347][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.397151][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.407597][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.426034][ T5893] team0: Port device team_slave_0 added
[   72.429992][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.434080][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.436569][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.447084][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.454132][ T5893] team0: Port device team_slave_1 added
[   72.457433][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.525964][ T5891] team0: Port device team_slave_0 added
[   72.544037][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.546554][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.557353][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.564182][ T5891] team0: Port device team_slave_1 added
[   72.567035][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.569611][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.579612][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.590433][ T5888] hsr_slave_0: entered promiscuous mode
[   72.593159][ T5888] hsr_slave_1: entered promiscuous mode
[   72.625369][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.627945][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.637008][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.642670][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.645158][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.654815][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.727477][ T5893] hsr_slave_0: entered promiscuous mode
[   72.730748][ T5893] hsr_slave_1: entered promiscuous mode
[   72.733557][ T5893] debugfs: 'hsr0' already exists in 'hsr'
[   72.735833][ T5893] Cannot create hsr debugfs directory
[   72.791077][ T5891] hsr_slave_0: entered promiscuous mode
[   72.793560][ T5891] hsr_slave_1: entered promiscuous mode
[   72.795927][ T5891] debugfs: 'hsr0' already exists in 'hsr'
[   72.797761][ T5891] Cannot create hsr debugfs directory
[   73.050727][ T5888] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.062177][ T5888] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.082584][ T5888] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.089356][ T5888] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.141835][ T5893] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.152671][ T5893] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.161221][ T5893] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.170033][ T5893] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.235074][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.242035][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.256450][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.267765][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.364640][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.403795][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[   73.423445][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.430099][   T55] Bluetooth: hci0: command tx timeout
[   73.435842][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.438976][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.453739][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.456500][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.480886][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   73.511283][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.514148][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.517165][   T55] Bluetooth: hci1: command tx timeout
[   73.536684][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.546007][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.549141][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.589142][   T55] Bluetooth: hci2: command tx timeout
[   73.602490][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   73.642922][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.645701][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.654031][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.656604][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.676838][ T5888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.778121][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.852166][ T5893] veth0_vlan: entered promiscuous mode
[   73.875184][ T5893] veth1_vlan: entered promiscuous mode
[   73.931035][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.966367][ T5893] veth0_macvtap: entered promiscuous mode
[   73.978266][ T5893] veth1_macvtap: entered promiscuous mode
[   73.994383][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.024811][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.036213][ T5888] veth0_vlan: entered promiscuous mode
[   74.044235][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.055486][ T5888] veth1_vlan: entered promiscuous mode
[   74.074954][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.081298][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.096976][ T5891] veth0_vlan: entered promiscuous mode
[   74.099670][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.115893][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.125819][ T5891] veth1_vlan: entered promiscuous mode
[   74.186931][ T5891] veth0_macvtap: entered promiscuous mode
[   74.205817][ T5888] veth0_macvtap: entered promiscuous mode
[   74.212353][ T5888] veth1_macvtap: entered promiscuous mode
[   74.223130][ T5891] veth1_macvtap: entered promiscuous mode
[   74.228300][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.233428][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.256320][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.264268][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.275101][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.296861][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.313194][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.316416][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.320011][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.325411][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.334153][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.337052][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.346168][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.349797][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.353205][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.356683][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.432616][ T5893] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.511129][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.516479][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.516487][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.527790][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.564091][ T5951] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET)
[   74.580732][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.585059][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.633586][  T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.637781][  T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.739946][ T5955] Zero length message leads to an empty skb
[   74.761035][ T5957] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   75.507343][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'.
[   75.511049][   T55] Bluetooth: hci0: command tx timeout
[   75.549651][ T6001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'.
[   75.583638][ T6005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.48'.
[   75.603347][   T55] Bluetooth: hci1: command tx timeout
[   75.669127][   T55] Bluetooth: hci2: command tx timeout
[   75.688534][ T6009] netlink: 92 bytes leftover after parsing attributes in process `syz.0.50'.
[   75.691923][ T6009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'.
[   75.744419][ T6012] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   75.756303][ T6012] macsec1: entered promiscuous mode
[   75.765695][ T6012] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[   76.567049][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   76.571297][ T6054] netlink: 7 bytes leftover after parsing attributes in process `syz.2.70'.
[   76.741675][  T793] cfg80211: failed to load regulatory.db
[   76.816595][ T6065] netlink: 104 bytes leftover after parsing attributes in process `syz.0.75'.
[   76.873417][ T6069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.77'.
[   76.876725][ T6069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.77'.
[   77.588534][   T55] Bluetooth: hci0: command tx timeout
[   77.668470][   T55] Bluetooth: hci1: command tx timeout
[   77.748977][   T55] Bluetooth: hci2: command tx timeout
[   77.908980][ T6101] netlink: 'syz.0.92': attribute type 2 has an invalid length.
[   78.645805][ T6130] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   78.649603][ T6130] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   79.035523][ T6148] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   79.088739][ T6148] macvlan0: entered promiscuous mode
Connection to localhost closed by remote host.
[   79.727458][ T5899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.812721][ T5899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.863241][ T5899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.952035][ T5899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.050456][ T5899] bridge_slave_1: left allmulticast mode
[   80.052968][ T5899] bridge_slave_1: left promiscuous mode
[   80.056913][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.064953][ T5899] bridge_slave_0: left allmulticast mode
[   80.067341][ T5899] bridge_slave_0: left promiscuous mode
[   80.071918][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.397063][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.404004][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.409104][ T5899] bond0 (unregistering): Released all slaves
[   80.729536][ T5899] hsr_slave_0: left promiscuous mode
[   80.732686][ T5899] hsr_slave_1: left promiscuous mode
[   80.736408][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.739461][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.743358][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.746311][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.762302][ T5899] veth1_macvtap: left promiscuous mode
[   80.764804][ T5899] veth0_macvtap: left promiscuous mode
[   80.767000][ T5899] veth1_vlan: left promiscuous mode
[   80.772204][ T5899] veth0_vlan: left promiscuous mode
[   81.146060][ T5899] team0 (unregistering): Port device team_slave_1 removed
[   81.174267][ T5899] team0 (unregistering): Port device team_slave_0 removed
[   81.806886][ T5899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.865225][ T5899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.932010][ T5899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.978137][ T5899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.088997][ T5899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.160318][ T5899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.220140][ T5899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.303196][ T5899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.366195][ T5899] bridge_slave_1: left allmulticast mode
[   82.368084][ T5899] bridge_slave_1: left promiscuous mode
[   82.370769][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.375003][ T5899] bridge_slave_0: left allmulticast mode
[   82.376735][ T5899] bridge_slave_0: left promiscuous mode
[   82.379938][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.384826][ T5899] bridge_slave_1: left allmulticast mode
[   82.386615][ T5899] bridge_slave_1: left promiscuous mode
[   82.389074][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.393705][ T5899] bridge_slave_0: left allmulticast mode
[   82.395794][ T5899] bridge_slave_0: left promiscuous mode
[   82.397911][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.641585][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.646196][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.649947][ T5899] bond0 (unregistering): Released all slaves
[   82.864003][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.869702][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.875019][ T5899] bond0 (unregistering): Released all slaves
[   83.215586][ T5899] hsr_slave_0: left promiscuous mode
[   83.218780][ T5899] hsr_slave_1: left promiscuous mode
[   83.221646][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.224612][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.228176][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.231543][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.239709][ T5899] hsr_slave_0: left promiscuous mode
[   83.242460][ T5899] hsr_slave_1: left promiscuous mode
[   83.245156][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.248067][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.253156][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.255992][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.282247][ T5899] veth1_macvtap: left promiscuous mode
[   83.284479][ T5899] veth0_macvtap: left promiscuous mode
[   83.286792][ T5899] veth1_vlan: left promiscuous mode
[   83.289142][ T5899] veth0_vlan: left promiscuous mode
[   83.292703][ T5899] veth1_macvtap: left promiscuous mode
[   83.295528][ T5899] veth0_macvtap: left promiscuous mode
[   83.297835][ T5899] veth1_vlan: left promiscuous mode
[   83.300044][ T5899] veth0_vlan: left promiscuous mode
[   83.730021][ T5899] team0 (unregistering): Port device team_slave_1 removed
[   83.752558][ T5899] team0 (unregistering): Port device team_slave_0 removed
[   84.304019][ T5899] team0 (unregistering): Port device team_slave_1 removed
[   84.326584][ T5899] team0 (unregistering): Port device team_slave_0 removed
[   85.210433][ T5899] ------------[ cut here ]------------
[   85.212780][ T5899] WARNING: CPU: 1 PID: 5899 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0
[   85.217006][ T5899] Modules linked in:
[   85.219185][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[   85.224668][ T5899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.228917][ T5899] Workqueue: netns cleanup_net
[   85.231031][ T5899] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   85.233176][ T5899] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ab e8 fe f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 99 df f7 e8 e4 66 9b f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d6 66 9b f7 90 0f 0b 90 e9 60 fe ff ff
[   85.240732][ T5899] RSP: 0018:ffffc9000344f898 EFLAGS: 00010293
[   85.243107][ T5899] RAX: ffffffff8a2447dc RBX: ffff888110784700 RCX: ffff88802060b980
[   85.245908][ T5899] RDX: 0000000000000000 RSI: ffffffff8dba022c RDI: ffff88802060b980
[   85.249251][ T5899] RBP: ffffc9000344f9b0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6
[   85.252319][ T5899] R10: dffffc0000000000 R11: fffffbfff1f460c7 R12: ffffffff8f634040
[   85.255297][ T5899] R13: 1ffff92000689f40 R14: ffff888110785b80 R15: dffffc0000000000
[   85.258969][ T5899] FS:  0000000000000000(0000) GS:ffff8881a3c39000(0000) knlGS:0000000000000000
[   85.262437][ T5899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   85.265030][ T5899] CR2: 00007fa989907d60 CR3: 000000000df36000 CR4: 00000000000006f0
[   85.268155][ T5899] Call Trace:
[   85.269888][ T5899]  <TASK>
[   85.271121][ T5899]  xfrm_net_exit+0x2d/0x70
[   85.272913][ T5899]  ops_undo_list+0x49a/0x990
[   85.274740][ T5899]  ? __pfx_ops_undo_list+0x10/0x10
[   85.276803][ T5899]  ? do_raw_spin_unlock+0x4d/0x240
[   85.279353][ T5899]  cleanup_net+0x4c5/0x800
[   85.281194][ T5899]  ? __pfx_cleanup_net+0x10/0x10
[   85.283201][ T5899]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.285307][ T5899]  ? process_scheduled_works+0x9ef/0x17b0
[   85.287454][ T5899]  ? process_scheduled_works+0x9ef/0x17b0
[   85.290114][ T5899]  process_scheduled_works+0xae1/0x17b0
[   85.292410][ T5899]  ? __pfx_process_scheduled_works+0x10/0x10
[   85.294855][ T5899]  worker_thread+0x8a0/0xda0
[   85.296693][ T5899]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   85.299480][ T5899]  ? __kthread_parkme+0x7b/0x200
[   85.301418][ T5899]  kthread+0x711/0x8a0
[   85.303080][ T5899]  ? __pfx_worker_thread+0x10/0x10
[   85.305103][ T5899]  ? __pfx_kthread+0x10/0x10
[   85.306927][ T5899]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.309115][ T5899]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.311227][ T5899]  ? __pfx_kthread+0x10/0x10
[   85.313052][ T5899]  ret_from_fork+0x439/0x7d0
[   85.314931][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[   85.316953][ T5899]  ? __switch_to_asm+0x39/0x70
[   85.319076][ T5899]  ? __switch_to_asm+0x33/0x70
[   85.320936][ T5899]  ? __pfx_kthread+0x10/0x10
[   85.322842][ T5899]  ret_from_fork_asm+0x1a/0x30
[   85.324774][ T5899]  </TASK>
[   85.326088][ T5899] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   85.328994][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[   85.332856][ T5899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.336910][ T5899] Workqueue: netns cleanup_net
[   85.338806][ T5899] Call Trace:
[   85.340200][ T5899]  <TASK>
[   85.341373][ T5899]  dump_stack_lvl+0x99/0x250
[   85.343253][ T5899]  ? __asan_memcpy+0x40/0x70
[   85.345119][ T5899]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.347171][ T5899]  ? __pfx__printk+0x10/0x10
[   85.349025][ T5899]  vpanic+0x281/0x750
[   85.350626][ T5899]  ? __pfx__printk+0x10/0x10
[   85.352381][ T5899]  ? __pfx_vpanic+0x10/0x10
[   85.354221][ T5899]  ? is_bpf_text_address+0x292/0x2b0
[   85.356337][ T5899]  panic+0xb9/0xc0
[   85.357854][ T5899]  ? __pfx_panic+0x10/0x10
[   85.359633][ T5899]  __warn+0x31b/0x4b0
[   85.361260][ T5899]  ? xfrm_state_fini+0x26d/0x2f0
[   85.363295][ T5899]  ? xfrm_state_fini+0x26d/0x2f0
[   85.365295][ T5899]  report_bug+0x2be/0x4f0
[   85.367082][ T5899]  ? xfrm_state_fini+0x26d/0x2f0
[   85.369084][ T5899]  ? xfrm_state_fini+0x26d/0x2f0
[   85.371074][ T5899]  ? xfrm_state_fini+0x26f/0x2f0
[   85.373113][ T5899]  handle_bug+0x84/0x160
[   85.374883][ T5899]  exc_invalid_op+0x1a/0x50
[   85.376682][ T5899]  asm_exc_invalid_op+0x1a/0x20
[   85.378692][ T5899] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   85.380980][ T5899] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ab e8 fe f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 99 df f7 e8 e4 66 9b f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d6 66 9b f7 90 0f 0b 90 e9 60 fe ff ff
[   85.388718][ T5899] RSP: 0018:ffffc9000344f898 EFLAGS: 00010293
[   85.391192][ T5899] RAX: ffffffff8a2447dc RBX: ffff888110784700 RCX: ffff88802060b980
[   85.394382][ T5899] RDX: 0000000000000000 RSI: ffffffff8dba022c RDI: ffff88802060b980
[   85.397581][ T5899] RBP: ffffc9000344f9b0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6
[   85.400768][ T5899] R10: dffffc0000000000 R11: fffffbfff1f460c7 R12: ffffffff8f634040
[   85.403992][ T5899] R13: 1ffff92000689f40 R14: ffff888110785b80 R15: dffffc0000000000
[   85.407143][ T5899]  ? xfrm_state_fini+0x26c/0x2f0
[   85.409087][ T5899]  ? xfrm_state_fini+0x26c/0x2f0
[   85.411103][ T5899]  xfrm_net_exit+0x2d/0x70
[   85.412919][ T5899]  ops_undo_list+0x49a/0x990
[   85.414731][ T5899]  ? __pfx_ops_undo_list+0x10/0x10
[   85.416806][ T5899]  ? do_raw_spin_unlock+0x4d/0x240
[   85.418921][ T5899]  cleanup_net+0x4c5/0x800
[   85.420652][ T5899]  ? __pfx_cleanup_net+0x10/0x10
[   85.422579][ T5899]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.424643][ T5899]  ? process_scheduled_works+0x9ef/0x17b0
[   85.426961][ T5899]  ? process_scheduled_works+0x9ef/0x17b0
[   85.429248][ T5899]  process_scheduled_works+0xae1/0x17b0
[   85.431502][ T5899]  ? __pfx_process_scheduled_works+0x10/0x10
[   85.434003][ T5899]  worker_thread+0x8a0/0xda0
[   85.435802][ T5899]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   85.438396][ T5899]  ? __kthread_parkme+0x7b/0x200
[   85.440421][ T5899]  kthread+0x711/0x8a0
[   85.442091][ T5899]  ? __pfx_worker_thread+0x10/0x10
[   85.444173][ T5899]  ? __pfx_kthread+0x10/0x10
[   85.446044][ T5899]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.448109][ T5899]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.450204][ T5899]  ? __pfx_kthread+0x10/0x10
[   85.451986][ T5899]  ret_from_fork+0x439/0x7d0
[   85.453892][ T5899]  ? __pfx_ret_from_fork+0x10/0x10
[   85.455923][ T5899]  ? __switch_to_asm+0x39/0x70
[   85.457777][ T5899]  ? __switch_to_asm+0x33/0x70
[   85.459641][ T5899]  ? __pfx_kthread+0x10/0x10
[   85.461431][ T5899]  ret_from_fork_asm+0x1a/0x30
[   85.463333][ T5899]  </TASK>
[   85.465278][ T5899] Kernel Offset: disabled
[   85.466969][ T5899] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:29:01  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44fab RBX=1ffff11026cc7f69 RCX=ffff88801d688000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000065f7e0 RSP=ffffc9000065f660
R8 =ffffffff8fa30637 R9 =1ffffffff1f460c6 R10=dffffc0000000000 R11=fffffbfff1f460c7
R12=ffff88813663fb48 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44f93 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8639000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff83fbd5f88 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 ffff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000344f030
R8 =ffff888107608237 R9 =1ffff11020ec1046 R10=dffffc0000000000 R11=ffffffff854fb560
R12=dffffc0000000000 R13=ffffffff99adb8e9 R14=ffffffff99dd0460 R15=0000000000000000
RIP=ffffffff854fb5dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c39000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa989907d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000ff000000 0000000000000000 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
