last executing test programs:

377.97421ms ago: executing program 0 (id=261):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000fdffff9400000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

377.834506ms ago: executing program 0 (id=262):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef)

232.316762ms ago: executing program 2 (id=263):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1})

127.844475ms ago: executing program 1 (id=264):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

127.699795ms ago: executing program 1 (id=265):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
close(0x4)

126.558465ms ago: executing program 2 (id=266):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

126.319234ms ago: executing program 1 (id=267):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20)

78.000945ms ago: executing program 0 (id=268):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0)

77.81937ms ago: executing program 1 (id=269):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014003000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

77.682018ms ago: executing program 2 (id=270):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x50)

77.547721ms ago: executing program 0 (id=271):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0)

72.611012ms ago: executing program 2 (id=272):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001d80)={'geneve0\x00', &(0x7f0000001d40)=@ethtool_cmd={0x49}})

3.940869ms ago: executing program 1 (id=273):
unshare(0x8040600)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r0}, 0xc)

3.814617ms ago: executing program 0 (id=274):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10)
r1 = socket$kcm(0xa, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r2}, 0x10)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004080)

3.70405ms ago: executing program 2 (id=275):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

3.523169ms ago: executing program 1 (id=276):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00})
ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})

3.362521ms ago: executing program 2 (id=277):
unshare(0x2c020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 0 (id=278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'vlan0\x00', &(0x7f0000000340)=@ethtool_cmd={0x1, 0xfffffff9, 0x10, 0xf, 0x10, 0xa, 0xe, 0x8, 0x4, 0x2, 0xa, 0x12, 0x8, 0xa, 0x1, 0x0, [0x4, 0xffffffff]}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55145' (ED25519) to the list of known hosts.
syzkaller login: [   41.364776][ T5757] cgroup: Unknown subsys name 'net'
[   41.455545][ T5757] cgroup: Unknown subsys name 'cpuset'
[   41.459249][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.736146][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.933821][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.943323][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.946112][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.948899][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.951485][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.963232][ T5211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.965990][ T5211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.968467][ T5211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.971289][ T5211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.974729][ T5211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.982572][ T5211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.986086][ T5211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.996340][ T5211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.000500][ T5211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.004674][ T5211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.168371][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   46.198464][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   46.280794][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.283607][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.286123][ T5820] bridge_slave_0: entered allmulticast mode
[   46.289045][ T5820] bridge_slave_0: entered promiscuous mode
[   46.310211][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.312719][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.315363][ T5820] bridge_slave_1: entered allmulticast mode
[   46.318144][ T5820] bridge_slave_1: entered promiscuous mode
[   46.320899][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   46.326254][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.328609][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.330984][ T5824] bridge_slave_0: entered allmulticast mode
[   46.334351][ T5824] bridge_slave_0: entered promiscuous mode
[   46.357181][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.359590][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.361876][ T5824] bridge_slave_1: entered allmulticast mode
[   46.365234][ T5824] bridge_slave_1: entered promiscuous mode
[   46.376685][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.387720][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.409384][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.425314][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.429188][ T5820] team0: Port device team_slave_0 added
[   46.455523][ T5820] team0: Port device team_slave_1 added
[   46.478047][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.480362][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.482699][ T5827] bridge_slave_0: entered allmulticast mode
[   46.486319][ T5827] bridge_slave_0: entered promiscuous mode
[   46.490002][ T5824] team0: Port device team_slave_0 added
[   46.492957][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.495322][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.504022][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.508031][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.510870][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.513362][ T5827] bridge_slave_1: entered allmulticast mode
[   46.516085][ T5827] bridge_slave_1: entered promiscuous mode
[   46.520248][ T5824] team0: Port device team_slave_1 added
[   46.524221][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.526516][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.535268][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.596186][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.598686][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.608391][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.616134][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.619875][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.622204][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.630771][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.649389][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.658647][ T5820] hsr_slave_0: entered promiscuous mode
[   46.661024][ T5820] hsr_slave_1: entered promiscuous mode
[   46.687252][ T5827] team0: Port device team_slave_0 added
[   46.698460][ T5827] team0: Port device team_slave_1 added
[   46.727403][ T5824] hsr_slave_0: entered promiscuous mode
[   46.729794][ T5824] hsr_slave_1: entered promiscuous mode
[   46.732022][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   46.734066][ T5824] Cannot create hsr debugfs directory
[   46.743692][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.746019][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.754550][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.759352][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.761636][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.769939][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.825385][ T5827] hsr_slave_0: entered promiscuous mode
[   46.828297][ T5827] hsr_slave_1: entered promiscuous mode
[   46.830490][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   46.832406][ T5827] Cannot create hsr debugfs directory
[   47.000753][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.007970][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.019543][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.034665][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.056317][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.061397][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.071213][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.076404][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.099140][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.101578][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.104533][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.106923][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.122601][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.128460][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.139464][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.146356][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.148783][ T5824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.151436][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.154033][ T5824] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.162581][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.193476][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.195903][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.198424][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.200789][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.209220][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.212498][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.216383][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.219172][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.226179][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.228913][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.263767][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.277163][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.300438][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   47.308906][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.311313][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.318299][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.324697][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   47.330584][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.333037][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.350905][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.353386][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.358062][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.360441][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.365867][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   47.381160][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.383638][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.392284][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.394797][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.537231][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.552553][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.569333][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.590258][ T5820] veth0_vlan: entered promiscuous mode
[   47.607901][ T5820] veth1_vlan: entered promiscuous mode
[   47.629017][ T5827] veth0_vlan: entered promiscuous mode
[   47.632452][ T5824] veth0_vlan: entered promiscuous mode
[   47.641250][ T5827] veth1_vlan: entered promiscuous mode
[   47.644270][ T5820] veth0_macvtap: entered promiscuous mode
[   47.650120][ T5820] veth1_macvtap: entered promiscuous mode
[   47.654520][ T5824] veth1_vlan: entered promiscuous mode
[   47.667133][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.679330][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.686271][ T5827] veth0_macvtap: entered promiscuous mode
[   47.689999][ T5827] veth1_macvtap: entered promiscuous mode
[   47.707665][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.712726][ T5824] veth0_macvtap: entered promiscuous mode
[   47.717742][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.722423][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.726429][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.737448][ T5824] veth1_macvtap: entered promiscuous mode
[   47.752597][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.766848][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.777905][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.797723][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.801479][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.805057][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.807778][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.810644][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.829374][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.833194][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.837763][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.848219][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.851153][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.865382][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.882752][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.886024][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.936573][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.939229][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.954400][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.956249][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.962270][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.992242][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.997940][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.004544][ T5211] Bluetooth: hci1: command tx timeout
[   48.006641][ T5211] Bluetooth: hci0: command tx timeout
[   48.017869][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.020405][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.085018][ T5826] Bluetooth: hci2: command tx timeout
[   48.090112][ T5889] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   48.390147][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.397066][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.399976][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.402780][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.407743][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.410671][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.414094][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.416961][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.419780][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.422499][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.436230][ T5916] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   48.454236][ T5916] netlink: 'syz.0.15': attribute type 5 has an invalid length.
[   48.459030][ T5916] netlink: 'syz.0.15': attribute type 6 has an invalid length.
[   48.846737][   T33] audit: type=1800 audit(1754074982.250:2): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17" name="cgroup.controllers" dev="tmpfs" ino=43 res=0 errno=0
[   49.271706][ T5936] Zero length message leads to an empty skb
[   49.520762][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.665648][ T5965] veth1_macvtap: default FDB implementation only supports local addresses
[   49.750248][ T5977] netlink: 'syz.0.42': attribute type 21 has an invalid length.
[   50.083153][ T5826] Bluetooth: hci0: command tx timeout
[   50.084937][ T5826] Bluetooth: hci1: command tx timeout
[   50.160354][ T6035] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   50.162972][ T5211] Bluetooth: hci2: command tx timeout
[   50.238827][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.275054][ T6042] Illegal XDP return value 4294967274 on prog  (id 14) dev N/A, expect packet loss!
[   50.287694][ T6042] netlink: 'syz.0.71': attribute type 13 has an invalid length.
[   50.290303][ T6042] netlink: 'syz.0.71': attribute type 17 has an invalid length.
[   50.328800][ T6042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   52.207250][ T5211] Bluetooth: hci1: command tx timeout
[   52.210361][ T5211] Bluetooth: hci0: command tx timeout
[   52.243032][ T5211] Bluetooth: hci2: command tx timeout
[   52.330636][ T6152] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   52.334319][ T6152] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   52.356927][ T6154] netlink: 'syz.2.119': attribute type 2 has an invalid length.
[   52.360104][ T6154] netlink: 'syz.2.119': attribute type 1 has an invalid length.
[   52.531152][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.534293][ T6168] batadv_slave_0: entered promiscuous mode
[   52.572804][ T6170] netlink: zone id is out of range
[   52.575198][ T6170] netlink: zone id is out of range
[   52.576783][ T6170] netlink: set zone limit has 4 unknown bytes
[   52.919515][ T6198] netlink: 'syz.1.140': attribute type 10 has an invalid length.
[   52.927931][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.943419][ T6198] team0: Port device bond0 added
[   53.141891][ T6220] syzkaller0: entered promiscuous mode
[   53.144666][ T6220] syzkaller0: entered allmulticast mode
[   53.470605][ T6240] __nla_validate_parse: 65 callbacks suppressed
[   53.470618][ T6240] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.162'.
[   53.854914][ T6258] validate_nla: 1 callbacks suppressed
[   53.854924][ T6258] netlink: 'syz.0.171': attribute type 11 has an invalid length.
[   54.145014][ T6279] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   54.162360][ T5289] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1
[   54.173246][ T5289] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[   54.243127][ T5211] Bluetooth: hci1: command tx timeout
[   54.244310][ T5826] Bluetooth: hci0: command tx timeout
[   54.335315][ T5826] Bluetooth: hci2: command tx timeout
[   54.540064][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'.
[   54.588114][ T6323] netlink: 'syz.0.197': attribute type 7 has an invalid length.
[   54.703362][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'.
[   54.858715][ T6343] tipc: Failed to remove unknown binding: 66,1,1/0:3765162658/3765162660
[   54.861705][ T6343] tipc: Failed to remove unknown binding: 66,1,1/0:3765162658/3765162660
[   55.217366][ T6378] tun0: tun_chr_ioctl cmd 1074812117
[   55.516425][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.234'.
[   55.686097][ T6422] veth0: entered promiscuous mode
[   55.715303][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   56.387266][ T6463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   56.389912][ T6463] IPv6: NLM_F_CREATE should be set when creating new route
[   56.403091][ T6463] lo: entered allmulticast mode
[   56.411172][ T6463] tunl0: entered allmulticast mode
[   56.415203][ T6463] gre0: entered allmulticast mode
[   56.597301][ T6463] gretap0: entered allmulticast mode
[   56.607360][ T6463] erspan0: entered allmulticast mode
[   56.615177][ T6463] ip_vti0: entered allmulticast mode
[   56.619819][ T6463] ip6_vti0: entered allmulticast mode
[   56.626757][ T6463] sit0: entered allmulticast mode
[   56.632489][ T6463] ip6tnl0: entered allmulticast mode
[   56.647469][ T6463] ip6gre0: entered allmulticast mode
[   56.654689][ T6463] syz_tun: entered allmulticast mode
[   56.657903][ T6463] ip6gretap0: entered allmulticast mode
[   56.665101][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.667874][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.672048][ T6463] bridge0: entered allmulticast mode
[   56.675682][ T6463] vcan0: entered allmulticast mode
[   56.678511][ T6463] bond0: entered allmulticast mode
[   56.680560][ T6463] bond_slave_0: entered allmulticast mode
[   56.682789][ T6463] bond_slave_1: entered allmulticast mode
[   56.687556][ T6463] team0: entered allmulticast mode
[   56.689282][ T6463] team_slave_0: entered allmulticast mode
[   56.691184][ T6463] team_slave_1: entered allmulticast mode
[   56.695415][ T6463] dummy0: entered allmulticast mode
[   56.700650][ T6463] nlmon0: entered allmulticast mode
[   56.703960][ T6463] caif0: entered allmulticast mode
[   56.706441][ T6463] batadv0: entered allmulticast mode
[   56.715161][ T6463] vxcan0: entered allmulticast mode
[   56.717507][ T6463] vxcan1: entered allmulticast mode
[   56.720169][ T6463] veth0: entered allmulticast mode
[   56.724396][ T6463] veth1: entered allmulticast mode
[   56.729328][ T6463] wg0: entered allmulticast mode
[   56.732515][ T6463] wg1: entered allmulticast mode
[   56.736430][ T6463] wg2: entered allmulticast mode
[   56.739172][ T6463] veth0_to_bridge: entered allmulticast mode
[   56.743740][ T6463] veth1_to_bridge: entered allmulticast mode
[   56.748238][ T6463] veth0_to_bond: entered allmulticast mode
[   56.751991][ T6463] veth1_to_bond: entered allmulticast mode
[   56.757194][ T6463] veth0_to_team: entered allmulticast mode
[   56.764611][ T6463] veth1_to_team: entered allmulticast mode
[   56.768878][ T6463] veth0_to_batadv: entered allmulticast mode
[   56.776305][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.778958][ T6463] batadv_slave_0: entered allmulticast mode
[   56.782495][ T6463] veth1_to_batadv: entered allmulticast mode
[   56.789561][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.792309][ T6463] batadv_slave_1: entered allmulticast mode
[   56.796153][ T6463] xfrm0: entered allmulticast mode
[   56.799460][ T6463] veth0_to_hsr: entered allmulticast mode
[   56.804876][ T6463] hsr_slave_0: entered allmulticast mode
[   56.812969][ T6463] veth1_to_hsr: entered allmulticast mode
[   56.816168][ T6463] hsr_slave_1: entered allmulticast mode
[   56.819819][ T6463] hsr0: entered allmulticast mode
[   56.822749][ T6463] veth1_virt_wifi: entered allmulticast mode
[   56.827280][ T6463] veth0_virt_wifi: entered allmulticast mode
[   56.830630][ T6463] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   56.833556][ T6463] veth1_vlan: entered allmulticast mode
[   56.836845][ T6463] veth0_vlan: entered allmulticast mode
[   56.846707][ T6463] vlan0: entered allmulticast mode
[   56.849415][ T6463] vlan1: entered allmulticast mode
[   56.851753][ T6463] macvlan0: entered allmulticast mode
[   56.857870][ T6463] macvlan1: entered allmulticast mode
[   56.860975][ T6463] ipvlan0: entered allmulticast mode
[   56.862748][ T6463] ipvlan1: entered allmulticast mode
[   56.865836][ T6463] veth1_macvtap: entered allmulticast mode
[   56.869019][ T6463] veth0_macvtap: entered allmulticast mode
[   56.872341][ T6463] macvtap0: entered allmulticast mode
[   56.876790][ T6463] macsec0: entered allmulticast mode
[   56.880009][ T6463] geneve0: entered allmulticast mode
[   56.884085][ T6463] geneve1: entered allmulticast mode
[   56.887746][ T6463] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   56.891989][ T6463] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[   56.895840][ T6463] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[   56.900325][ T6463] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[   56.908800][ T6463] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   56.921395][ T6463] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   56.924955][ T6463] gre1: entered allmulticast mode
[   56.939733][ T5848] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.944777][ T5848] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.947676][ T5848] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.960038][ T5848] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.000658][ T6485] netpci0: tun_chr_ioctl cmd 1074025681
[   57.131302][ T6499] netlink: 'syz.1.269': attribute type 21 has an invalid length.
Connection to localhost closed by remote host.
[   57.669333][ T5848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.669537][ T5820] syz-executor (5820) used greatest stack depth: 19288 bytes left
[   57.733378][ T5848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.782489][ T5848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.823388][ T5848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.881143][ T5848] bridge_slave_1: left allmulticast mode
[   57.883242][ T5848] bridge_slave_1: left promiscuous mode
[   57.885518][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.890412][ T5848] bridge_slave_0: left allmulticast mode
[   57.892487][ T5848] bridge_slave_0: left promiscuous mode
[   57.895551][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.074990][ T5848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.079638][ T5848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.083515][ T5848] bond0 (unregistering): Released all slaves
[   58.332473][ T5848] hsr_slave_0: left promiscuous mode
[   58.336400][ T5848] hsr_slave_1: left promiscuous mode
[   58.338522][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.341470][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.344388][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.352394][ T5848] veth1_macvtap: left promiscuous mode
[   58.355245][ T5848] veth0_macvtap: left promiscuous mode
[   58.357416][ T5848] veth1_vlan: left promiscuous mode
[   58.359449][ T5848] veth0_vlan: left promiscuous mode
[   58.548961][ T5848] team0 (unregistering): Port device team_slave_1 removed
[   58.570809][ T5848] team0 (unregistering): Port device team_slave_0 removed
[   59.012458][ T5848] ------------[ cut here ]------------
[   59.014907][ T5848] WARNING: CPU: 1 PID: 5848 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[   59.018231][ T5848] Modules linked in:
[   59.019759][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   59.024940][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.028770][ T5848] Workqueue: netns cleanup_net
[   59.030361][ T5848] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   59.032458][ T5848] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 98 4f 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 1e eb f7 e8 91 2c a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 2c a7 f7 90 0f 0b 90 e9 60 fe ff ff
[   59.039109][ T5848] RSP: 0018:ffffc9000457f898 EFLAGS: 00010293
[   59.041259][ T5848] RAX: ffffffff8a18841f RBX: ffff8880253fa440 RCX: ffff888100681cc0
[   59.044343][ T5848] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff888100681cc0
[   59.047342][ T5848] RBP: ffffc9000457f9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[   59.050120][ T5848] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffffffff8f601a20
[   59.052955][ T5848] R13: 1ffff920008aff40 R14: ffff8880253fb8c0 R15: dffffc0000000000
[   59.055802][ T5848] FS:  0000000000000000(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[   59.058853][ T5848] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.061178][ T5848] CR2: 000000110c3b9db2 CR3: 000000000df38000 CR4: 00000000000006f0
[   59.064008][ T5848] Call Trace:
[   59.065151][ T5848]  <TASK>
[   59.066176][ T5848]  xfrm_net_exit+0x2d/0x70
[   59.067923][ T5848]  ops_undo_list+0x49a/0x990
[   59.069870][ T5848]  ? __pfx_ops_undo_list+0x10/0x10
[   59.071723][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   59.073625][ T5848]  cleanup_net+0x4c5/0x800
[   59.075123][ T5848]  ? __pfx_cleanup_net+0x10/0x10
[   59.076804][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.078553][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[   59.080472][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[   59.082360][ T5848]  process_scheduled_works+0xae1/0x17b0
[   59.084361][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[   59.086352][ T5848]  worker_thread+0x8a0/0xda0
[   59.087949][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   59.090091][ T5848]  ? __kthread_parkme+0x7b/0x200
[   59.091754][ T5848]  kthread+0x711/0x8a0
[   59.093218][ T5848]  ? __pfx_worker_thread+0x10/0x10
[   59.094917][ T5848]  ? __pfx_kthread+0x10/0x10
[   59.096476][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.098234][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.099986][ T5848]  ? __pfx_kthread+0x10/0x10
[   59.101538][ T5848]  ret_from_fork+0x3fc/0x770
[   59.103399][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[   59.105119][ T5848]  ? __switch_to_asm+0x39/0x70
[   59.106819][ T5848]  ? __switch_to_asm+0x33/0x70
[   59.108550][ T5848]  ? __pfx_kthread+0x10/0x10
[   59.110141][ T5848]  ret_from_fork_asm+0x1a/0x30
[   59.111782][ T5848]  </TASK>
[   59.112929][ T5848] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   59.115355][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   59.119417][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.122640][ T5848] Workqueue: netns cleanup_net
[   59.124189][ T5848] Call Trace:
[   59.125528][ T5848]  <TASK>
[   59.126582][ T5848]  dump_stack_lvl+0x99/0x250
[   59.128262][ T5848]  ? __asan_memcpy+0x40/0x70
[   59.130031][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.132188][ T5848]  ? __pfx__printk+0x10/0x10
[   59.134118][ T5848]  panic+0x2db/0x790
[   59.135583][ T5848]  ? __pfx_panic+0x10/0x10
[   59.137227][ T5848]  ? ret_from_fork_asm+0x1a/0x30
[   59.139267][ T5848]  __warn+0x31b/0x4b0
[   59.140635][ T5848]  ? xfrm_state_fini+0x270/0x2f0
[   59.142308][ T5848]  ? xfrm_state_fini+0x270/0x2f0
[   59.144192][ T5848]  report_bug+0x2be/0x4f0
[   59.145822][ T5848]  ? xfrm_state_fini+0x270/0x2f0
[   59.147687][ T5848]  ? xfrm_state_fini+0x270/0x2f0
[   59.149406][ T5848]  ? xfrm_state_fini+0x272/0x2f0
[   59.151042][ T5848]  handle_bug+0x84/0x160
[   59.152429][ T5848]  exc_invalid_op+0x1a/0x50
[   59.153946][ T5848]  asm_exc_invalid_op+0x1a/0x20
[   59.155541][ T5848] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   59.157407][ T5848] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 98 4f 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 1e eb f7 e8 91 2c a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 2c a7 f7 90 0f 0b 90 e9 60 fe ff ff
[   59.163720][ T5848] RSP: 0018:ffffc9000457f898 EFLAGS: 00010293
[   59.165647][ T5848] RAX: ffffffff8a18841f RBX: ffff8880253fa440 RCX: ffff888100681cc0
[   59.168121][ T5848] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff888100681cc0
[   59.170675][ T5848] RBP: ffffc9000457f9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[   59.173225][ T5848] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffffffff8f601a20
[   59.175771][ T5848] R13: 1ffff920008aff40 R14: ffff8880253fb8c0 R15: dffffc0000000000
[   59.178325][ T5848]  ? xfrm_state_fini+0x26f/0x2f0
[   59.179954][ T5848]  ? xfrm_state_fini+0x26f/0x2f0
[   59.181553][ T5848]  xfrm_net_exit+0x2d/0x70
[   59.183043][ T5848]  ops_undo_list+0x49a/0x990
[   59.184540][ T5848]  ? __pfx_ops_undo_list+0x10/0x10
[   59.186231][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   59.187931][ T5848]  cleanup_net+0x4c5/0x800
[   59.189430][ T5848]  ? __pfx_cleanup_net+0x10/0x10
[   59.191109][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.192860][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[   59.194728][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[   59.196653][ T5848]  process_scheduled_works+0xae1/0x17b0
[   59.198496][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[   59.200419][ T5848]  worker_thread+0x8a0/0xda0
[   59.201991][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   59.204069][ T5848]  ? __kthread_parkme+0x7b/0x200
[   59.205736][ T5848]  kthread+0x711/0x8a0
[   59.207118][ T5848]  ? __pfx_worker_thread+0x10/0x10
[   59.208831][ T5848]  ? __pfx_kthread+0x10/0x10
[   59.210363][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.212056][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.213794][ T5848]  ? __pfx_kthread+0x10/0x10
[   59.215344][ T5848]  ret_from_fork+0x3fc/0x770
[   59.216911][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[   59.218642][ T5848]  ? __switch_to_asm+0x39/0x70
[   59.220256][ T5848]  ? __switch_to_asm+0x33/0x70
[   59.221850][ T5848]  ? __pfx_kthread+0x10/0x10
[   59.223393][ T5848]  ret_from_fork_asm+0x1a/0x30
[   59.224993][ T5848]  </TASK>
[   59.226685][ T5848] Kernel Offset: disabled
[   59.228090][ T5848] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:03:12  Registers:
info registers vcpu 0

CPU#0
RAX=9cd361b60dcb4c00 RBX=ffffffff81969b18 RCX=9cd361b60dcb4c00 RDX=0000000000000001
RSI=ffffffff8d979100 RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07af0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffce65208a9 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000044 RBX=0000000000000044 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000457f030
R8 =ffff8880202d8237 R9 =1ffff1100405b046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95901 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3b9db2 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
