last executing test programs:

2.682355177s ago: executing program 0 (id=149):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305543}})

2.573659438s ago: executing program 0 (id=151):
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0)

2.453479616s ago: executing program 0 (id=153):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = dup2(r1, r0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000580)={0x8}, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850)

2.291039657s ago: executing program 0 (id=155):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@grpjquota}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@noblock_validity}, {@nomblk_io_submit}, {@nolazytime}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x4f0, &(0x7f0000000640)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

2.100460543s ago: executing program 0 (id=161):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24)

1.190046948s ago: executing program 0 (id=168):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0)

931.142003ms ago: executing program 2 (id=173):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="220033003004000008021100000108021100000037e6fc966e046000854c5d00010000000600cd"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

806.405823ms ago: executing program 2 (id=175):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r1, r2, 0x3, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x6, 0xffff, 0x8, 0x5, 0x8, 0xf, 0x4, 0x8000, 0x5, 0xfffffffc, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}})

662.764101ms ago: executing program 2 (id=177):
sendmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x0, 0x2496}], 0x10}}], 0x1, 0x4004080)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0xc0800, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0xb21a})

601.687838ms ago: executing program 1 (id=178):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000580)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e21, @private=0xa010101}, 0x281, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffa, 0x4})

551.881464ms ago: executing program 1 (id=179):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0)

480.628586ms ago: executing program 2 (id=180):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

480.388365ms ago: executing program 1 (id=181):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)

392.250073ms ago: executing program 2 (id=182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chroot(&(0x7f0000000000)='./file0\x00')
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

331.133874ms ago: executing program 2 (id=183):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ppoll(&(0x7f0000000040)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
r5 = getpid()
capset(&(0x7f0000000280)={0x19980330, r5}, &(0x7f0000000340)={0x0, 0x8, 0x4, 0x81, 0x9f})
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000000)=0x5, 0x4)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)=""/1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

325.300455ms ago: executing program 1 (id=184):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @private=0xa010100}, 0x4}}, 0x2e)

82.138621ms ago: executing program 1 (id=185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x2, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800)

0s ago: executing program 1 (id=186):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50217' (ED25519) to the list of known hosts.
syzkaller login: [   62.281330][ T5840] cgroup: Unknown subsys name 'net'
[   62.346257][ T5840] cgroup: Unknown subsys name 'cpuset'
[   62.350924][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.109055][ T5840] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.269525][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.314326][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.316384][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   73.568111][ T5962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.574384][ T5962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.577870][ T5962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.582027][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.585345][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.646043][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.649548][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.655941][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.660438][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.668401][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.697130][ T5966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.700667][ T5966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.704139][ T5966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.709356][ T5966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.717038][ T5966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.093160][ T5960] chnl_net:caif_netlink_parms(): no params data found
[   74.114271][ T5967] chnl_net:caif_netlink_parms(): no params data found
[   74.119245][ T5964] chnl_net:caif_netlink_parms(): no params data found
[   74.274842][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.277559][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.280446][ T5967] bridge_slave_0: entered allmulticast mode
[   74.285189][ T5967] bridge_slave_0: entered promiscuous mode
[   74.306449][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.309303][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.312328][ T5960] bridge_slave_0: entered allmulticast mode
[   74.315001][ T5960] bridge_slave_0: entered promiscuous mode
[   74.318293][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.320449][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.325085][ T5967] bridge_slave_1: entered allmulticast mode
[   74.329587][ T5967] bridge_slave_1: entered promiscuous mode
[   74.361759][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.364369][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.366681][ T5960] bridge_slave_1: entered allmulticast mode
[   74.369472][ T5960] bridge_slave_1: entered promiscuous mode
[   74.411033][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.413872][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.416592][ T5964] bridge_slave_0: entered allmulticast mode
[   74.420256][ T5964] bridge_slave_0: entered promiscuous mode
[   74.444933][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.452464][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.456139][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.458807][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.462749][ T5964] bridge_slave_1: entered allmulticast mode
[   74.465988][ T5964] bridge_slave_1: entered promiscuous mode
[   74.482085][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.500318][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.535176][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.540499][ T5960] team0: Port device team_slave_0 added
[   74.559756][ T5960] team0: Port device team_slave_1 added
[   74.573290][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.623242][ T5967] team0: Port device team_slave_0 added
[   74.627873][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.630472][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.641122][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.647866][ T5964] team0: Port device team_slave_0 added
[   74.652000][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.654615][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.666191][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.673077][ T5967] team0: Port device team_slave_1 added
[   74.676791][ T5964] team0: Port device team_slave_1 added
[   74.724458][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.727124][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.736282][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.784803][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.787431][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.798172][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.804237][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.807018][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.816220][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.823466][ T5960] hsr_slave_0: entered promiscuous mode
[   74.826625][ T5960] hsr_slave_1: entered promiscuous mode
[   74.837358][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.840148][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.852097][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.938023][ T5967] hsr_slave_0: entered promiscuous mode
[   74.940481][ T5967] hsr_slave_1: entered promiscuous mode
[   74.943884][ T5967] debugfs: 'hsr0' already exists in 'hsr'
[   74.945856][ T5967] Cannot create hsr debugfs directory
[   75.005335][ T5964] hsr_slave_0: entered promiscuous mode
[   75.008481][ T5964] hsr_slave_1: entered promiscuous mode
[   75.011566][ T5964] debugfs: 'hsr0' already exists in 'hsr'
[   75.013624][ T5964] Cannot create hsr debugfs directory
[   75.269374][ T5960] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.281599][ T5960] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.295729][ T5960] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.301687][ T5960] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.338827][ T5967] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.349128][ T5967] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.356047][ T5967] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.374871][ T5967] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.423966][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.430001][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.446612][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.459606][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.546714][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.587220][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.594843][ T5960] 8021q: adding VLAN 0 to HW filter on device team0
[   75.612537][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.615396][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.631865][ T5962] Bluetooth: hci0: command tx timeout
[   75.635573][ T5967] 8021q: adding VLAN 0 to HW filter on device team0
[   75.641751][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.644652][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.658899][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.661178][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.670366][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.673130][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.704671][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.711162][ T5962] Bluetooth: hci1: command tx timeout
[   75.748875][ T5964] 8021q: adding VLAN 0 to HW filter on device team0
[   75.773428][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.775923][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.793466][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.796335][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.799432][ T5962] Bluetooth: hci2: command tx timeout
[   75.888961][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.980686][ T5960] veth0_vlan: entered promiscuous mode
[   76.000725][ T5960] veth1_vlan: entered promiscuous mode
[   76.025091][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.048541][ T5960] veth0_macvtap: entered promiscuous mode
[   76.055566][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.067548][ T5960] veth1_macvtap: entered promiscuous mode
[   76.091798][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.108978][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.128885][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.136285][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.140021][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.158726][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.162360][ T5967] veth0_vlan: entered promiscuous mode
[   76.187767][ T5967] veth1_vlan: entered promiscuous mode
[   76.193915][ T5964] veth0_vlan: entered promiscuous mode
[   76.218123][ T5964] veth1_vlan: entered promiscuous mode
[   76.251900][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.254732][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.270404][ T5967] veth0_macvtap: entered promiscuous mode
[   76.305871][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.307358][ T5964] veth0_macvtap: entered promiscuous mode
[   76.308686][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.318273][ T5967] veth1_macvtap: entered promiscuous mode
[   76.328227][ T5964] veth1_macvtap: entered promiscuous mode
[   76.364723][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.375233][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.386802][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.392479][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.405497][ T6021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.412874][ T6021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.419734][ T6023] loop2: detected capacity change from 0 to 1024
[   76.437424][ T6021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.445151][ T6021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.455729][ T6021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.459028][ T6021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.478443][ T6021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.481247][ T6021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.618277][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.623171][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.661425][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.663797][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.707515][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.712180][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.727699][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.734338][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.094124][ T6048] sctp: [Deprecated]: syz.0.105 (pid 6048) Use of int in max_burst socket option.
[   77.094124][ T6048] Use struct sctp_assoc_value instead
[   77.367068][ T6065] loop1: detected capacity change from 0 to 512
[   77.405593][ T6063] bond1: entered allmulticast mode
[   77.712431][ T5962] Bluetooth: hci0: command tx timeout
[   77.848945][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[   77.881623][ T5962] Bluetooth: hci2: command tx timeout
[   78.286439][   T34] audit: type=1326 audit(1755567235.396:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5018ebe9 code=0x7ffc0000
[   78.318321][   T34] audit: type=1326 audit(1755567235.406:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5018ebe9 code=0x7ffc0000
[   78.348805][   T34] audit: type=1326 audit(1755567235.416:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.134" exe="/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f5d5018ebe9 code=0x7ffc0000
[   78.379627][   T34] audit: type=1326 audit(1755567235.416:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5018ebe9 code=0x7ffc0000
[   78.414014][   T34] audit: type=1326 audit(1755567235.416:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5018ebe9 code=0x7ffc0000
[   79.643166][ T6144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.790962][ T5962] Bluetooth: hci0: command tx timeout
[   79.951139][ T5962] Bluetooth: hci2: command tx timeout
[   80.165959][ T6158] loop0: detected capacity change from 0 to 512
[   80.173098][ T6158] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.183622][ T6158] EXT4-fs (loop0): filesystem is read-only
[   80.186240][ T6158] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   80.199312][ T6162] loop2: detected capacity change from 0 to 256
[   80.207608][ T6158] EXT4-fs (loop0): filesystem is read-only
[   80.209888][ T6158] EXT4-fs (loop0): orphan cleanup on readonly fs
[   80.218180][ T6162] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[   80.231340][ T6158] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.155: iget: bad i_size value: 648518346341360424
[   80.247880][ T6158] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.155: couldn't read orphan inode 16 (err -117)
[   80.266003][ T6158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   80.349398][ T5964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.439008][ T6175] loop2: detected capacity change from 0 to 512
[   80.465548][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.475566][ T6175] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.936184][ T5960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.483999][ T6196] loop1: detected capacity change from 0 to 2048
[   81.494418][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.502401][ T6196] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   81.545729][    C0] Unknown status report in ack skb
[   81.559875][ T5962] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   81.563513][ T5962] Bluetooth: hci1: Injecting HCI hardware error event
[   81.567365][ T5962] Bluetooth: hci1: hardware error 0x00
[   81.675337][   T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   81.688717][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.705261][   T10] usb 1-1: config 0 descriptor??
[   81.876378][ T5966] Bluetooth: hci0: command tx timeout
[   81.940236][   T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[   82.038335][ T5966] Bluetooth: hci2: command tx timeout
[   82.141953][   T10] [drm:udl_init] *ERROR* Selecting channel failed
[   82.194196][   T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3
[   82.196899][   T10] [drm] Initialized udl on minor 3
[   82.211341][   T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   82.223341][   T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   82.228874][ T6223] capability: warning: `syz.2.183' uses 32-bit capabilities (legacy support in use)
[   82.231942][  T792] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   82.237504][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'.
[   82.250561][  T792] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[   82.258792][   T10] usb 1-1: USB disconnect, device number 2
[   82.410467][   T34] audit: type=1326 audit(1755567239.516:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce698ebe9 code=0x7ffc0000
[   82.425368][   T34] audit: type=1326 audit(1755567239.516:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce698ebe9 code=0x7ffc0000
[   82.453905][   T34] audit: type=1326 audit(1755567239.536:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbce698ebe9 code=0x7ffc0000
[   82.473033][   T34] audit: type=1326 audit(1755567239.536:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce698ebe9 code=0x7ffc0000
[   82.485607][   T34] audit: type=1326 audit(1755567239.536:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce698ebe9 code=0x7ffc0000
Connection to localhost closed by remote host.
[   83.247917][ T5960] syz-executor (5960) used greatest stack depth: 19896 bytes left
[   83.256529][ T6021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.320756][ T6021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.376995][ T6021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.455637][ T6021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.554631][ T6021] bridge_slave_1: left allmulticast mode
[   83.557063][ T6021] bridge_slave_1: left promiscuous mode
[   83.559916][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.568018][ T6021] bridge_slave_0: left allmulticast mode
[   83.570174][ T6021] bridge_slave_0: left promiscuous mode
[   83.575328][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.711419][ T5962] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   83.960945][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.967747][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.973127][ T6021] bond0 (unregistering): Released all slaves
[   84.288874][ T6021] hsr_slave_0: left promiscuous mode
[   84.291999][ T6021] hsr_slave_1: left promiscuous mode
[   84.294772][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.297833][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.303665][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.306627][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.326007][ T6021] veth1_macvtap: left promiscuous mode
[   84.328533][ T6021] veth0_macvtap: left promiscuous mode
[   84.331786][ T6021] veth1_vlan: left promiscuous mode
[   84.334082][ T6021] veth0_vlan: left promiscuous mode
[   84.716520][ T6021] team0 (unregistering): Port device team_slave_1 removed
[   84.744124][ T6021] team0 (unregistering): Port device team_slave_0 removed
[   85.327223][ T6021] ------------[ cut here ]------------
[   85.329605][ T6021] WARNING: CPU: 1 PID: 6021 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[   85.333726][ T6021] Modules linked in:
[   85.335450][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[   85.340058][ T6021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.344028][ T6021] Workqueue: netns cleanup_net
[   85.345803][ T6021] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   85.347846][ T6021] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e8 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 ee e1 f7 e8 b1 c4 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 c4 9d f7 90 0f 0b 90 e9 60 fe ff ff
[   85.355549][ T6021] RSP: 0018:ffffc90003a1f898 EFLAGS: 00010293
[   85.357744][ T6021] RAX: ffffffff8a21e77f RBX: ffff88810f9ec880 RCX: ffff888022935640
[   85.360635][ T6021] RDX: 0000000000000000 RSI: ffffffff8dba5baf RDI: ffff888022935640
[   85.363620][ T6021] RBP: ffffc90003a1f9b0 R08: ffffffff8f632967 R09: 1ffffffff1ec652c
[   85.366539][ T6021] R10: dffffc0000000000 R11: fffffbfff1ec652d R12: ffffffff8f6309e0
[   85.369485][ T6021] R13: 1ffff92000743f40 R14: ffff88810f9edd00 R15: dffffc0000000000
[   85.372513][ T6021] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[   85.375828][ T6021] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   85.378279][ T6021] CR2: 0000001b3180bff8 CR3: 0000000109b50000 CR4: 00000000000006f0
[   85.381319][ T6021] Call Trace:
[   85.382597][ T6021]  <TASK>
[   85.383708][ T6021]  xfrm_net_exit+0x2d/0x70
[   85.385364][ T6021]  ops_undo_list+0x49a/0x990
[   85.387139][ T6021]  ? __pfx_ops_undo_list+0x10/0x10
[   85.389071][ T6021]  ? do_raw_spin_unlock+0x4d/0x240
[   85.391801][ T6021]  cleanup_net+0x4c5/0x800
[   85.393532][ T6021]  ? __pfx_cleanup_net+0x10/0x10
[   85.395401][ T6021]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.397298][ T6021]  ? process_scheduled_works+0x9ef/0x17b0
[   85.399356][ T6021]  ? process_scheduled_works+0x9ef/0x17b0
[   85.401610][ T6021]  process_scheduled_works+0xae1/0x17b0
[   85.403708][ T6021]  ? __pfx_process_scheduled_works+0x10/0x10
[   85.405977][ T6021]  worker_thread+0x8a0/0xda0
[   85.407683][ T6021]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   85.410016][ T6021]  ? __kthread_parkme+0x7b/0x200
[   85.411955][ T6021]  kthread+0x711/0x8a0
[   85.413473][ T6021]  ? __pfx_worker_thread+0x10/0x10
[   85.415365][ T6021]  ? __pfx_kthread+0x10/0x10
[   85.417065][ T6021]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.418961][ T6021]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.421014][ T6021]  ? __pfx_kthread+0x10/0x10
[   85.422963][ T6021]  ret_from_fork+0x3fc/0x770
[   85.424730][ T6021]  ? __pfx_ret_from_fork+0x10/0x10
[   85.426640][ T6021]  ? __switch_to_asm+0x39/0x70
[   85.428785][ T6021]  ? __switch_to_asm+0x33/0x70
[   85.430594][ T6021]  ? __pfx_kthread+0x10/0x10
[   85.432709][ T6021]  ret_from_fork_asm+0x1a/0x30
[   85.434548][ T6021]  </TASK>
[   85.435733][ T6021] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   85.438469][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[   85.441981][ T6021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.445710][ T6021] Workqueue: netns cleanup_net
[   85.447525][ T6021] Call Trace:
[   85.448780][ T6021]  <TASK>
[   85.449874][ T6021]  dump_stack_lvl+0x99/0x250
[   85.451633][ T6021]  ? __asan_memcpy+0x40/0x70
[   85.453378][ T6021]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.455334][ T6021]  ? __pfx__printk+0x10/0x10
[   85.457040][ T6021]  vpanic+0x281/0x750
[   85.458503][ T6021]  ? __pfx__printk+0x10/0x10
[   85.460269][ T6021]  ? __pfx_vpanic+0x10/0x10
[   85.461997][ T6021]  ? is_bpf_text_address+0x292/0x2b0
[   85.463952][ T6021]  panic+0xb9/0xc0
[   85.465385][ T6021]  ? __pfx_panic+0x10/0x10
[   85.467081][ T6021]  __warn+0x31b/0x4b0
[   85.468560][ T6021]  ? xfrm_state_fini+0x270/0x2f0
[   85.470389][ T6021]  ? xfrm_state_fini+0x270/0x2f0
[   85.472264][ T6021]  report_bug+0x2be/0x4f0
[   85.473917][ T6021]  ? xfrm_state_fini+0x270/0x2f0
[   85.475771][ T6021]  ? xfrm_state_fini+0x270/0x2f0
[   85.477629][ T6021]  ? xfrm_state_fini+0x272/0x2f0
[   85.479504][ T6021]  handle_bug+0x84/0x160
[   85.481110][ T6021]  exc_invalid_op+0x1a/0x50
[   85.482838][ T6021]  asm_exc_invalid_op+0x1a/0x20
[   85.484678][ T6021] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   85.486755][ T6021] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e8 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 ee e1 f7 e8 b1 c4 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 c4 9d f7 90 0f 0b 90 e9 60 fe ff ff
[   85.493908][ T6021] RSP: 0018:ffffc90003a1f898 EFLAGS: 00010293
[   85.496187][ T6021] RAX: ffffffff8a21e77f RBX: ffff88810f9ec880 RCX: ffff888022935640
[   85.499124][ T6021] RDX: 0000000000000000 RSI: ffffffff8dba5baf RDI: ffff888022935640
[   85.502034][ T6021] RBP: ffffc90003a1f9b0 R08: ffffffff8f632967 R09: 1ffffffff1ec652c
[   85.504979][ T6021] R10: dffffc0000000000 R11: fffffbfff1ec652d R12: ffffffff8f6309e0
[   85.507745][ T6021] R13: 1ffff92000743f40 R14: ffff88810f9edd00 R15: dffffc0000000000
[   85.510621][ T6021]  ? xfrm_state_fini+0x26f/0x2f0
[   85.512472][ T6021]  ? xfrm_state_fini+0x26f/0x2f0
[   85.514321][ T6021]  xfrm_net_exit+0x2d/0x70
[   85.516033][ T6021]  ops_undo_list+0x49a/0x990
[   85.517714][ T6021]  ? __pfx_ops_undo_list+0x10/0x10
[   85.519527][ T6021]  ? do_raw_spin_unlock+0x4d/0x240
[   85.521455][ T6021]  cleanup_net+0x4c5/0x800
[   85.523164][ T6021]  ? __pfx_cleanup_net+0x10/0x10
[   85.525038][ T6021]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.527001][ T6021]  ? process_scheduled_works+0x9ef/0x17b0
[   85.529325][ T6021]  ? process_scheduled_works+0x9ef/0x17b0
[   85.531382][ T6021]  process_scheduled_works+0xae1/0x17b0
[   85.533435][ T6021]  ? __pfx_process_scheduled_works+0x10/0x10
[   85.535686][ T6021]  worker_thread+0x8a0/0xda0
[   85.537442][ T6021]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   85.539841][ T6021]  ? __kthread_parkme+0x7b/0x200
[   85.541750][ T6021]  kthread+0x711/0x8a0
[   85.543306][ T6021]  ? __pfx_worker_thread+0x10/0x10
[   85.545236][ T6021]  ? __pfx_kthread+0x10/0x10
[   85.546981][ T6021]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.548954][ T6021]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.550916][ T6021]  ? __pfx_kthread+0x10/0x10
[   85.552646][ T6021]  ret_from_fork+0x3fc/0x770
[   85.554398][ T6021]  ? __pfx_ret_from_fork+0x10/0x10
[   85.556324][ T6021]  ? __switch_to_asm+0x39/0x70
[   85.558146][ T6021]  ? __switch_to_asm+0x33/0x70
[   85.559914][ T6021]  ? __pfx_kthread+0x10/0x10
[   85.561656][ T6021]  ret_from_fork_asm+0x1a/0x30
[   85.563459][ T6021]  </TASK>
[   85.565295][ T6021] Kernel Offset: disabled
[   85.566918][ T6021] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:34:02  Registers:
info registers vcpu 0

CPU#0
RAX=7e1403ae5e894700 RBX=ffffffff819683a8 RCX=7e1403ae5e894700 RDX=0000000000000001
RSI=ffffffff8d9b692a RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37d30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31508ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000003b25c9d8 0000000000000016 XMM01=010001000000ffff ffffffffffffffff
XMM02=0100080000003069 6669775f74726976 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000ffff00 00ffffff00000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003a1f030
R8 =ffff888021400237 R9 =1ffff11004280046 R10=dffffc0000000000 R11=ffffffff854f0230
R12=dffffc0000000000 R13=ffffffff99af98ef R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f02ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3180bff8 CR3=0000000109b50000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
