last executing test programs:

2.528361866s ago: executing program 0 (id=98):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

2.441816431s ago: executing program 0 (id=100):
unshare(0x2a020400)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)

2.315843478s ago: executing program 0 (id=102):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1)

2.248773902s ago: executing program 0 (id=104):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x2}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20009c90780100000024000000d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390b0b4e2d8157cddfb9792c8e37b"], 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0x4f)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e22, 0x20ce, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x11, r2, r10}, {0x7, 0xffffffff, 0x1, 0x2, 0x6, 0x4, 0x4, 0xffff}, {0x5, 0x1000, 0x4, 0x6}, 0x7f, 0x6e6bb7, 0x2, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0x33}, 0x2, @in6=@private0, 0x34ff, 0x0, 0x1, 0x8, 0x6b0c, 0x1ff}}, 0xe8)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r12 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r11}, &(0x7f0000000080), &(0x7f00000001c0)=r12}, 0x20)
close(r11)
close(r12)

350.441541ms ago: executing program 1 (id=118):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0xb5a, 0x0, 0x0, 0x2}, 0x48)

327.755553ms ago: executing program 0 (id=119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x24004000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2}, [@TCA_NETEM_RATE={0x14, 0x6, {0x23a0, 0x10001, 0x2, 0x5}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

268.586875ms ago: executing program 1 (id=120):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)

268.291454ms ago: executing program 2 (id=121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x60)

219.798881ms ago: executing program 1 (id=122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x10)

219.614152ms ago: executing program 2 (id=123):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

160.106168ms ago: executing program 2 (id=124):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x10}, 0x19}, 0x0)

159.852078ms ago: executing program 1 (id=125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8001}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)

100.524905ms ago: executing program 2 (id=126):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x3, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffed}]}, 0x10)

100.250995ms ago: executing program 1 (id=127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

99.98839ms ago: executing program 2 (id=128):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa)

53.889574ms ago: executing program 0 (id=129):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280050003000800000005000300050000000500"], 0x90}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000)

323.389µs ago: executing program 1 (id=130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f00000001c0)="402a55c6"}, 0x20)

0s ago: executing program 2 (id=131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106402f11e7ef8e766bc851286d7b851917a8c4428e9e9e091293cae490c16826a3c85a205f678852b43a06c61d63ba42373a00bb7c1ad7f1758c6b2ce8b1f597542c5b20d1abf3d9cba06aa296695acaa0facffbd68f6cafc22503df4d5c27c256f0b4f6c49fa2d43becd9c27d04488658cebd38947517a7ab12195f2e5a26fccf5baa41dc0bb3b777019eabb057c0db7069c109a9f969da3d7fa87b35f7cad005636d9e278b22a111b90dda70832b9773e6c964339bb3c4185e0ceb9a1cf08e553c244fba9bf1f098ed541e3501b56b576e78f951702b8be38082aacc094274456d93eff9f781adecbc6401bb5575b1d0d0dbf948cc15c194fb002ddc28f42b06001400000010000100"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3137' (ED25519) to the list of known hosts.
syzkaller login: [   56.696526][ T5830] cgroup: Unknown subsys name 'net'
[   56.853049][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.859339][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.900940][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.200307][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.221840][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.235309][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.239124][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.242387][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.245837][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.252302][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.255574][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.255940][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.258901][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.262974][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.267897][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.268200][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.271653][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.282256][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.622696][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.662699][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.688688][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.755841][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.759927][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.763153][ T5847] bridge_slave_0: entered allmulticast mode
[   64.766626][ T5847] bridge_slave_0: entered promiscuous mode
[   64.785256][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.787940][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.790783][ T5847] bridge_slave_1: entered allmulticast mode
[   64.794127][ T5847] bridge_slave_1: entered promiscuous mode
[   64.880823][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.905199][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.917123][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.920999][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.923368][ T5848] bridge_slave_0: entered allmulticast mode
[   64.926286][ T5848] bridge_slave_0: entered promiscuous mode
[   64.930579][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.933511][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.936517][ T5855] bridge_slave_0: entered allmulticast mode
[   64.940756][ T5855] bridge_slave_0: entered promiscuous mode
[   64.946326][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.949651][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.952763][ T5855] bridge_slave_1: entered allmulticast mode
[   64.956818][ T5855] bridge_slave_1: entered promiscuous mode
[   64.975324][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.980728][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.984005][ T5848] bridge_slave_1: entered allmulticast mode
[   64.989181][ T5848] bridge_slave_1: entered promiscuous mode
[   65.013525][ T5847] team0: Port device team_slave_0 added
[   65.033736][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.047447][ T5847] team0: Port device team_slave_1 added
[   65.052678][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.066929][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.118662][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.123386][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.126306][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.137318][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.144639][ T5855] team0: Port device team_slave_0 added
[   65.163118][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.166063][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.177795][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.184365][ T5855] team0: Port device team_slave_1 added
[   65.227123][ T5848] team0: Port device team_slave_0 added
[   65.249246][ T5848] team0: Port device team_slave_1 added
[   65.252536][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.255467][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.266563][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.303521][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.306482][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.317833][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.360976][ T5847] hsr_slave_0: entered promiscuous mode
[   65.364541][ T5847] hsr_slave_1: entered promiscuous mode
[   65.371822][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.374693][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.386037][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.394931][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.398196][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.410422][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.465535][ T5855] hsr_slave_0: entered promiscuous mode
[   65.469243][ T5855] hsr_slave_1: entered promiscuous mode
[   65.472267][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.474816][ T5855] Cannot create hsr debugfs directory
[   65.535870][ T5848] hsr_slave_0: entered promiscuous mode
[   65.538956][ T5848] hsr_slave_1: entered promiscuous mode
[   65.541153][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   65.543010][ T5848] Cannot create hsr debugfs directory
[   65.789897][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.809731][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.821936][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.829796][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.865305][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.874834][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.882859][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.889458][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.951510][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.967050][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.976128][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.985520][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.081237][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.132385][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.160943][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.164053][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.171062][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.174000][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.205726][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.256885][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.275609][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   66.299057][ T5234] Bluetooth: hci1: command tx timeout
[   66.300461][ T5857] Bluetooth: hci0: command tx timeout
[   66.301870][   T55] Bluetooth: hci2: command tx timeout
[   66.314824][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.318178][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.334230][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.337381][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.346727][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.374088][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.377273][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.402014][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.404630][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.487264][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.556671][ T5847] veth0_vlan: entered promiscuous mode
[   66.576995][ T5847] veth1_vlan: entered promiscuous mode
[   66.603112][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.622042][ T5847] veth0_macvtap: entered promiscuous mode
[   66.635235][ T5847] veth1_macvtap: entered promiscuous mode
[   66.661929][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.674650][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.687009][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.690384][ T5855] veth0_vlan: entered promiscuous mode
[   66.716034][ T5677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.721086][ T5677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.724985][ T5677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.732876][ T5677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.737101][ T5855] veth1_vlan: entered promiscuous mode
[   66.812856][ T5855] veth0_macvtap: entered promiscuous mode
[   66.839090][ T5855] veth1_macvtap: entered promiscuous mode
[   66.854191][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.857126][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.872678][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.876652][ T5848] veth0_vlan: entered promiscuous mode
[   66.904092][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.907080][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.910232][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.919478][ T5848] veth1_vlan: entered promiscuous mode
[   66.939099][ T5677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.955897][ T5677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.964608][ T5677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.973804][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.993504][ T5677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.038665][ T5848] veth0_macvtap: entered promiscuous mode
[   67.063541][ T5848] veth1_macvtap: entered promiscuous mode
[   67.105254][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.134765][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.137468][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.139697][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.183134][ T5677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.186663][ T5677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.190818][ T5677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.194443][ T5677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.212585][ T4201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.222173][ T4201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.302156][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.318592][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.352820][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.356053][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.652175][ T5944] netlink: 'syz.1.14': attribute type 32 has an invalid length.
[   67.655888][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   67.691858][ T5944] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   68.000253][ T5970] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   68.003561][ T5970] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   68.229178][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   68.378994][   T55] Bluetooth: hci0: command tx timeout
[   68.379060][ T5857] Bluetooth: hci2: command tx timeout
[   68.381417][   T55] Bluetooth: hci1: command tx timeout
[   68.950485][   T10] IPVS: starting estimator thread 0...
[   69.022588][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.047836][ T6010] IPVS: using max 63 ests per chain, 151200 per kthread
[   69.449776][ T6026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.585385][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'.
[   70.085743][ T6026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.205723][ T6026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.262777][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'.
[   70.266581][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'.
[   70.364401][ T6026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.458576][ T5234] Bluetooth: hci2: command tx timeout
[   70.460999][   T55] Bluetooth: hci1: command tx timeout
[   70.524914][ T5677] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.535115][ T5677] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.553717][ T5914] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.614326][ T5677] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.632412][ T6079] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   70.812620][ T6093] openvswitch: netlink: Message has 8 unknown bytes.
[   71.181840][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.185417][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.131044][ T6162] netlink: 'syz.1.103': attribute type 9 has an invalid length.
[   72.135546][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'.
[   72.151656][ T6162] netlink: 'syz.1.103': attribute type 9 has an invalid length.
[   72.154785][ T5914] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.159588][ T5914] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.163075][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'.
[   72.166462][ T5914] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.170669][ T5914] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.173971][ T6162] Zero length message leads to an empty skb
[   72.202311][ T6164] tipc: Started in network mode
[   72.204273][ T6164] tipc: Node identity fef14714978c, cluster identity 4711
[   72.220958][ T6164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.304831][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.309816][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.320453][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.104'.
[   72.518569][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.532228][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.540236][ T5234] Bluetooth: hci2: command tx timeout
[   72.543640][   T55] Bluetooth: hci1: command tx timeout
[   72.702908][ T6164] syzkaller0: entered promiscuous mode
[   72.704736][ T6164] syzkaller0: entered allmulticast mode
[   72.707682][ T6164] tipc: Resetting bearer <eth:syzkaller0>
[   72.711133][ T5677] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.721106][ T5677] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.724437][ T5677] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.738803][ T5677] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.764053][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'.
[   72.780070][ T6163] tipc: Resetting bearer <eth:syzkaller0>
[   73.351533][    T9] tipc: Node number set to 1769817876
[   73.941862][ T6163] tipc: Disabling bearer <eth:syzkaller0>
[   74.111910][ T6205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.132733][ T6205] syzkaller0: entered promiscuous mode
[   74.134599][ T6205] syzkaller0: entered allmulticast mode
[   74.171450][ T6205] tipc: Resetting bearer <eth:syzkaller0>
[   74.188283][ T6203] tipc: Resetting bearer <eth:syzkaller0>
[   74.203378][ T6203] tipc: Disabling bearer <eth:syzkaller0>
[   74.609965][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.732695][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.807029][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.920465][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.025178][   T12] bridge_slave_1: left allmulticast mode
[   75.027833][   T12] bridge_slave_1: left promiscuous mode
[   75.031157][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.040064][   T12] bridge_slave_0: left allmulticast mode
[   75.042314][   T12] bridge_slave_0: left promiscuous mode
[   75.044719][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.312940][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.318331][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.323109][   T12] bond0 (unregistering): Released all slaves
[   75.413966][   T12] tipc: Left network mode
[   75.665532][   T12] hsr_slave_0: left promiscuous mode
[   75.669757][   T12] hsr_slave_1: left promiscuous mode
[   75.672636][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.675660][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.680022][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.683014][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.700635][   T12] veth1_macvtap: left promiscuous mode
[   75.703208][   T12] veth0_macvtap: left promiscuous mode
[   75.705638][   T12] veth1_vlan: left promiscuous mode
[   75.709624][   T12] veth0_vlan: left promiscuous mode
[   76.069099][   T12] team0 (unregistering): Port device team_slave_1 removed
[   76.093247][   T12] team0 (unregistering): Port device team_slave_0 removed
[   76.657196][   T12] ------------[ cut here ]------------
[   76.659853][   T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[   76.664032][   T12] Modules linked in:
[   76.665846][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[   76.672238][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.676460][   T12] Workqueue: netns cleanup_net
[   76.678757][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[   76.681314][   T12] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   76.689462][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[   76.692003][   T12] RAX: ffffffff8a43935d RBX: ffff888029728000 RCX: ffff88801c2f5640
[   76.695234][   T12] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffff8880297280b8
[   76.698759][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[   76.702043][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888029728000
[   76.705291][   T12] R13: 00000000000000b8 R14: ffff888029402440 R15: dffffc0000000000
[   76.708673][   T12] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[   76.712272][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   76.715027][   T12] CR2: 00007fabc1ee7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[   76.718454][   T12] Call Trace:
[   76.719912][   T12]  <TASK>
[   76.721256][   T12]  ops_undo_list+0x49a/0x990
[   76.723216][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[   76.725368][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[   76.727795][   T12]  cleanup_net+0x4c5/0x800
[   76.729850][   T12]  ? __pfx_cleanup_net+0x10/0x10
[   76.732019][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.734289][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   76.736814][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   76.739557][   T12]  process_scheduled_works+0xae1/0x17b0
[   76.742067][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.744644][   T12]  worker_thread+0x8a0/0xda0
[   76.746598][   T12]  kthread+0x711/0x8a0
[   76.748467][   T12]  ? __pfx_worker_thread+0x10/0x10
[   76.750602][   T12]  ? __pfx_kthread+0x10/0x10
[   76.752529][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.754804][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.757061][   T12]  ? __pfx_kthread+0x10/0x10
[   76.759183][   T12]  ret_from_fork+0x3fc/0x770
[   76.761139][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   76.762835][   T12]  ? __switch_to_asm+0x39/0x70
[   76.764384][   T12]  ? __switch_to_asm+0x33/0x70
[   76.766165][   T12]  ? __pfx_kthread+0x10/0x10
[   76.768338][   T12]  ret_from_fork_asm+0x1a/0x30
[   76.770405][   T12]  </TASK>
[   76.771786][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   76.774928][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[   76.780088][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.784246][   T12] Workqueue: netns cleanup_net
[   76.786277][   T12] Call Trace:
[   76.787730][   T12]  <TASK>
[   76.788982][   T12]  dump_stack_lvl+0x99/0x250
[   76.790523][   T12]  ? __asan_memcpy+0x40/0x70
[   76.792242][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.794008][   T12]  ? __pfx__printk+0x10/0x10
[   76.795917][   T12]  vpanic+0x281/0x750
[   76.797269][   T12]  ? __pfx__printk+0x10/0x10
[   76.798864][   T12]  ? __pfx_vpanic+0x10/0x10
[   76.800292][   T12]  ? is_bpf_text_address+0x292/0x2b0
[   76.801944][   T12]  panic+0xb9/0xc0
[   76.803158][   T12]  ? __pfx_panic+0x10/0x10
[   76.804576][   T12]  __warn+0x31b/0x4b0
[   76.806036][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   76.808114][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   76.810059][   T12]  report_bug+0x2be/0x4f0
[   76.811709][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   76.813447][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   76.815155][   T12]  ? xfrm6_tunnel_net_exit+0x80/0x100
[   76.816912][   T12]  handle_bug+0x84/0x160
[   76.818367][   T12]  exc_invalid_op+0x1a/0x50
[   76.819932][   T12]  asm_exc_invalid_op+0x1a/0x20
[   76.821717][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[   76.823785][   T12] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   76.830280][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[   76.832223][   T12] RAX: ffffffff8a43935d RBX: ffff888029728000 RCX: ffff88801c2f5640
[   76.834671][   T12] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffff8880297280b8
[   76.837197][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[   76.839923][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888029728000
[   76.842393][   T12] R13: 00000000000000b8 R14: ffff888029402440 R15: dffffc0000000000
[   76.844914][   T12]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[   76.846665][   T12]  ops_undo_list+0x49a/0x990
[   76.848265][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[   76.850116][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[   76.851972][   T12]  cleanup_net+0x4c5/0x800
[   76.853585][   T12]  ? __pfx_cleanup_net+0x10/0x10
[   76.855376][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.857255][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   76.859340][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   76.861398][   T12]  process_scheduled_works+0xae1/0x17b0
[   76.863698][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.865979][   T12]  worker_thread+0x8a0/0xda0
[   76.867897][   T12]  kthread+0x711/0x8a0
[   76.869826][   T12]  ? __pfx_worker_thread+0x10/0x10
[   76.871748][   T12]  ? __pfx_kthread+0x10/0x10
[   76.873534][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.875453][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.877382][   T12]  ? __pfx_kthread+0x10/0x10
[   76.879118][   T12]  ret_from_fork+0x3fc/0x770
[   76.880798][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   76.882521][   T12]  ? __switch_to_asm+0x39/0x70
[   76.884460][   T12]  ? __switch_to_asm+0x33/0x70
[   76.886479][   T12]  ? __pfx_kthread+0x10/0x10
[   76.888306][   T12]  ret_from_fork_asm+0x1a/0x30
[   76.890310][   T12]  </TASK>
[   76.892088][   T12] Kernel Offset: disabled
[   76.893478][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:02:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7050
R8 =ffff888106e68237 R9 =1ffff11020dcd046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d3 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fabc1ee7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000ff00ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff00ff XMM05=0000000000000000 ffff000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888111134000 RCX=000000000000000f RDX=0000000000000400
RSI=0000000000000000 RDI=ffff888111134000 RBP=0000000000000920 RSP=ffffc900001b6b60
R8 =ffffc900001b6d3f R9 =0000000000000000 R10=ffff888111134000 R11=fffff52000036da8
R12=ffff88801a441dc0 R13=ffff888111134000 R14=0000000000009d00 R15=0000000000000400
RIP=ffffffff8b797cee RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c16bd1e280 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
