last executing test programs:

247.430781ms ago: executing program 1 (id=1449):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])

247.174431ms ago: executing program 0 (id=1450):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)

246.194369ms ago: executing program 0 (id=1451):
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20)

231.73835ms ago: executing program 1 (id=1452):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$l2tp(0x2, 0x2, 0x73)
close(r0)

231.583949ms ago: executing program 2 (id=1453):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400030080000300", 0x33a)

169.3526ms ago: executing program 1 (id=1454):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

169.061966ms ago: executing program 0 (id=1455):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110b4000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

168.861443ms ago: executing program 2 (id=1456):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

118.972192ms ago: executing program 2 (id=1457):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7})

118.790655ms ago: executing program 0 (id=1458):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c001a8038000280070001800800000000000000080000000000000008000000000000d6000000000000000008000000000000000800000000000000140035007665746831"], 0x70}}, 0x0)

118.632769ms ago: executing program 1 (id=1459):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d000000000007000000000002009500094000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x210}, 0x48)

118.474697ms ago: executing program 0 (id=1460):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newsa={0x13c, 0x18, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x200000000000000, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0xa7}, {0x4, 0x8000000000000002}, {}, 0x0, 0x3500, 0x2, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

118.236009ms ago: executing program 2 (id=1461):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8c400)

56.469053ms ago: executing program 1 (id=1462):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000010000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0)

56.310023ms ago: executing program 0 (id=1463):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)

56.164412ms ago: executing program 2 (id=1464):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x36, &(0x7f0000000080)={0x42, 0x1}, 0x10)

55.652538ms ago: executing program 1 (id=1465):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=1466):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x2}, 0x4})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000001640)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x4})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r8, 0x1, 0x45, 0x0, &(0x7f0000000000)=0xe)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="a769ed16d431d963eff6c2d0f9113babb7ce9c9a317adc5c255123c8c3280fb83d7ef6e4571bc229479c5d4ca1cdbc9823e0e294d603260f4c32ea85c3a4dd6ec71e005b8576568eeb12745cf1951e0e6186"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, r0, 0x38d97000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r9}, 0x18)
nanosleep(&(0x7f0000000040), 0x0)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000080)=0x6, 0x4)
sendmsg$nl_route(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13545' (ED25519) to the list of known hosts.
syzkaller login: [   49.009474][ T5759] cgroup: Unknown subsys name 'net'
[   49.139840][ T5759] cgroup: Unknown subsys name 'cpuset'
[   49.146220][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.517425][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.552692][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.557916][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.561397][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.565290][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.568797][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.599503][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.605092][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.608807][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.612812][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.616699][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.649719][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.658680][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.662270][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.668535][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.676357][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.786168][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   54.940778][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.943260][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.945692][ T5809] bridge_slave_0: entered allmulticast mode
[   54.949427][ T5809] bridge_slave_0: entered promiscuous mode
[   54.970024][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.972935][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.976569][ T5809] bridge_slave_1: entered allmulticast mode
[   54.980225][ T5809] bridge_slave_1: entered promiscuous mode
[   55.047778][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.079325][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.083356][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.138182][ T5809] team0: Port device team_slave_0 added
[   55.151665][ T5809] team0: Port device team_slave_1 added
[   55.193092][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   55.201230][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.204063][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.216367][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.237376][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.239750][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.248187][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.278035][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.280666][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.283468][ T5814] bridge_slave_0: entered allmulticast mode
[   55.286286][ T5814] bridge_slave_0: entered promiscuous mode
[   55.311714][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.314090][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.316933][ T5814] bridge_slave_1: entered allmulticast mode
[   55.319584][ T5814] bridge_slave_1: entered promiscuous mode
[   55.374482][ T5809] hsr_slave_0: entered promiscuous mode
[   55.378020][ T5809] hsr_slave_1: entered promiscuous mode
[   55.383703][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.410492][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.441594][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.444238][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.447807][ T5817] bridge_slave_0: entered allmulticast mode
[   55.451357][ T5817] bridge_slave_0: entered promiscuous mode
[   55.479841][ T5814] team0: Port device team_slave_0 added
[   55.482934][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.486681][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.489644][ T5817] bridge_slave_1: entered allmulticast mode
[   55.493526][ T5817] bridge_slave_1: entered promiscuous mode
[   55.523551][ T5814] team0: Port device team_slave_1 added
[   55.528023][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.554866][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.610511][ T5817] team0: Port device team_slave_0 added
[   55.614299][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.618224][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.627411][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.640428][ T5817] team0: Port device team_slave_1 added
[   55.649172][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.651995][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.662440][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.723978][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.727487][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.738436][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.750178][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.753008][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.763584][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.814838][ T5814] hsr_slave_0: entered promiscuous mode
[   55.818206][ T5814] hsr_slave_1: entered promiscuous mode
[   55.821027][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.824256][ T5814] Cannot create hsr debugfs directory
[   55.873033][ T5817] hsr_slave_0: entered promiscuous mode
[   55.876696][ T5817] hsr_slave_1: entered promiscuous mode
[   55.879554][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.882488][ T5817] Cannot create hsr debugfs directory
[   56.025537][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.043664][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.059314][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.076080][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.158776][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.167687][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.174575][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.184943][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.261628][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.268226][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.278063][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.288439][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.363700][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.403029][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   56.411057][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.422871][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.426020][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.445247][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.448554][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.456819][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.479877][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   56.490485][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   56.498107][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.500405][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.507979][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.510353][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.523614][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.526406][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.530817][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.533244][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.594770][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.599808][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.606948][ T5202] Bluetooth: hci0: command tx timeout
[   56.686971][ T5202] Bluetooth: hci1: command tx timeout
[   56.715569][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.744055][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.757513][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.766934][ T5202] Bluetooth: hci2: command tx timeout
[   56.781689][ T5809] veth0_vlan: entered promiscuous mode
[   56.797400][ T5809] veth1_vlan: entered promiscuous mode
[   56.815693][ T5817] veth0_vlan: entered promiscuous mode
[   56.845093][ T5814] veth0_vlan: entered promiscuous mode
[   56.859721][ T5817] veth1_vlan: entered promiscuous mode
[   56.869004][ T5814] veth1_vlan: entered promiscuous mode
[   56.890929][ T5809] veth0_macvtap: entered promiscuous mode
[   56.905100][ T5814] veth0_macvtap: entered promiscuous mode
[   56.924158][ T5809] veth1_macvtap: entered promiscuous mode
[   56.931744][ T5814] veth1_macvtap: entered promiscuous mode
[   56.937939][ T5817] veth0_macvtap: entered promiscuous mode
[   56.949836][ T5817] veth1_macvtap: entered promiscuous mode
[   56.961574][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.969561][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.977707][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.982495][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.987389][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.990721][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.993996][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.998791][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.005554][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.011993][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.017646][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.020438][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.023244][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.026729][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.035344][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.038948][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.042056][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.044800][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.122724][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.125213][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.148541][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.151988][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.177668][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.184411][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.193249][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.196556][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.213647][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.220063][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.235046][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.238631][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.252359][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.480389][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.537896][ T5892] netlink: 348 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.599238][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'.
[   57.644834][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   57.674684][ T5908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.680115][ T5907] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.755174][ T5914] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   57.863516][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'.
[   57.869916][ T5924] netlink: 'syz.1.23': attribute type 4 has an invalid length.
[   57.939058][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'.
[   57.941965][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'.
[   57.957309][ T5923] geneve0: entered allmulticast mode
[   57.970415][   T24] IPVS: starting estimator thread 0...
[   58.056282][ T5932] IPVS: using max 79 ests per chain, 189600 per kthread
[   58.301357][ T5837] IPVS: stop unused estimator thread 0...
[   58.592896][ T5992] IPv6: NLM_F_CREATE should be specified when creating new route
[   58.626391][ T5996] netlink: 'syz.0.57': attribute type 33 has an invalid length.
[   58.629093][ T5996] netlink: 152 bytes leftover after parsing attributes in process `syz.0.57'.
[   58.688263][ T5202] Bluetooth: hci0: command tx timeout
[   58.758424][ T6008] netlink: 200 bytes leftover after parsing attributes in process `syz.0.62'.
[   58.759804][   T24] hid-generic 0005:0B57:00AA.0001: collection stack underflow
[   58.765142][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   58.775655][   T24] hid-generic 0005:0B57:00AA.0001: item 0 0 0 12 parsing failed
[   58.779841][ T5202] Bluetooth: hci1: command tx timeout
[   58.787717][   T24] hid-generic 0005:0B57:00AA.0001: probe with driver hid-generic failed with error -22
[   58.854076][ T6014] Zero length message leads to an empty skb
[   58.857329][ T5202] Bluetooth: hci2: command tx timeout
[   58.943002][ T5873] IPVS: starting estimator thread 0...
[   58.955432][   T33] audit: type=1107 audit(1751627682.604:2): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   59.037828][ T6024] IPVS: using max 80 ests per chain, 192000 per kthread
[   59.179321][   T33] audit: type=1800 audit(1751627682.834:3): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.80" name=33FFFF dev="tmpfs" ino=160 res=0 errno=0
[   59.448942][ T6072] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   59.470357][ T6074] syz.1.93 uses obsolete (PF_INET,SOCK_PACKET)
[   59.472817][ T6074] syzkaller1: entered promiscuous mode
[   59.474679][ T6074] syzkaller1: entered allmulticast mode
[   59.513985][ T6078] syzkaller1: entered promiscuous mode
[   59.516881][ T6078] syzkaller1: entered allmulticast mode
[   60.517770][ T6129] xt_nat: multiple ranges no longer supported
[   60.767786][ T5202] Bluetooth: hci0: command tx timeout
[   60.836533][ T6151] netlink: 'syz.1.130': attribute type 1 has an invalid length.
[   60.846091][ T5202] Bluetooth: hci1: command tx timeout
[   60.926277][ T5202] Bluetooth: hci2: command tx timeout
[   60.996321][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.008876][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.416381][ T6193] netlink: 'syz.1.140': attribute type 21 has an invalid length.
[   61.419034][ T6193] netlink: 'syz.1.140': attribute type 22 has an invalid length.
[   61.421586][ T6193] netlink: 'syz.1.140': attribute type 23 has an invalid length.
[   61.424153][ T6193] netlink: 'syz.1.140': attribute type 25 has an invalid length.
[   61.429645][ T6193] netlink: 'syz.1.140': attribute type 26 has an invalid length.
[   61.465235][ T6195] SET target dimension over the limit!
[   61.567509][ T6203] xt_hashlimit: overflow, try lower: 72057594037927936/255
[   61.619724][ T6210] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   62.039572][  T973] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[   62.047705][  T973] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[   62.059516][  T973] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   62.845926][ T5202] Bluetooth: hci0: command tx timeout
[   62.926824][ T5202] Bluetooth: hci1: command tx timeout
[   62.982874][ T6305] tipc: Started in network mode
[   62.984664][ T6305] tipc: Node identity e2386dfbc0a5, cluster identity 4711
[   62.988104][ T6305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.991134][ T6305] syzkaller0: entered promiscuous mode
[   62.993007][ T6305] syzkaller0: entered allmulticast mode
[   63.006254][ T5202] Bluetooth: hci2: command tx timeout
[   63.020559][ T6305] tipc: Resetting bearer <eth:syzkaller0>
[   63.033207][ T6304] tipc: Resetting bearer <eth:syzkaller0>
[   63.041140][ T6304] tipc: Disabling bearer <eth:syzkaller0>
[   63.623854][ T6353] __nla_validate_parse: 7 callbacks suppressed
[   63.623870][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[   63.629516][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[   63.677674][ T6354] nbd: socks must be embedded in a SOCK_ITEM attr
[   63.689014][ T6354] block nbd0: shutting down sockets
[   63.763904][ T6354] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   63.774762][ T6354] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   63.818965][ T6361] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   63.883970][ T6363] syz.0.212 (6363) used obsolete PPPIOCDETACH ioctl
[   64.220793][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[   64.293324][ T6385] delete_channel: no stack
[   64.424501][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'.
[   64.505484][ T6401] tap0: tun_chr_ioctl cmd 1074812118
[   65.086422][ T5202] Bluetooth: hci2: command tx timeout
[   65.266870][ T6462] netlink: 'syz.0.254': attribute type 8 has an invalid length.
[   65.288940][ T6462] bridge_slave_0: left allmulticast mode
[   65.291241][ T6462] bridge_slave_0: left promiscuous mode
[   65.293730][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.300893][ T6462] bridge_slave_1: left allmulticast mode
[   65.302716][ T6462] bridge_slave_1: left promiscuous mode
[   65.304701][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.311161][ T6462] bond0: (slave bond_slave_0): Releasing backup interface
[   65.316647][ T6462] bond0: (slave bond_slave_1): Releasing backup interface
[   65.329279][ T6462] team0: Port device team_slave_0 removed
[   65.335425][ T6462] team0: Port device team_slave_1 removed
[   65.339176][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.346032][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.352839][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.355177][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.669513][ T6498] netlink: 64 bytes leftover after parsing attributes in process `syz.1.274'.
[   65.979030][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.284'.
[   65.982992][ T6520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.284'.
[   66.167106][ T6536] xt_TPROXY: Can be used only with -p tcp or -p udp
[   66.640920][ T6576] netlink: 72 bytes leftover after parsing attributes in process `syz.0.310'.
[   66.737568][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'.
[   66.788621][   T51] IPVS: starting estimator thread 0...
[   66.877978][ T6593] IPVS: using max 80 ests per chain, 192000 per kthread
[   68.040646][ T6655] netlink: 48 bytes leftover after parsing attributes in process `syz.2.337'.
[   68.093506][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.287023][ T6673] trusted_key: syz.1.345 sent an empty control message without MSG_MORE.
[   69.389027][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'.
[   69.392545][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'.
[   69.398170][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'.
[   69.404573][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'.
[   69.774833][ T6745] netlink: 'syz.0.376': attribute type 10 has an invalid length.
[   69.799062][ T6745] veth0_vlan: left promiscuous mode
[   69.803211][ T6745] veth0_vlan: entered promiscuous mode
[   69.809322][ T6745] team0: Device veth0_vlan failed to register rx_handler
[   70.004831][ T6757] netlink: 348 bytes leftover after parsing attributes in process `syz.2.382'.
[   70.143026][ T6761] netlink: 'syz.1.384': attribute type 16 has an invalid length.
[   70.146366][ T6761] netlink: 'syz.1.384': attribute type 17 has an invalid length.
[   70.215318][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.249959][ T6765] IPv6: NLM_F_REPLACE set, but no existing node found!
[   70.344009][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.362971][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.501686][ T6761] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[   70.505209][ T6761] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.509817][ T6761] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.512828][ T6761] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.571081][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'.
[   70.677487][ T6771] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.388'.
[   70.900733][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.904360][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.933860][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.937646][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.085009][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.096992][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.173632][ T6773] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.176700][ T6773] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.179826][ T6773] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.183044][ T6773] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.307675][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'.
[   71.330818][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[   71.351210][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'.
[   71.362338][ T6807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.365181][ T6807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.369668][ T6807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.376076][ T6807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.379644][ T6807] geneve2: entered allmulticast mode
[   72.163178][ T6875] warning: `syz.0.433' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.179041][ T6879] netlink: zone id is out of range
[   72.211987][ T6883] netlink: 'syz.0.437': attribute type 10 has an invalid length.
[   72.218489][ T6883] batadv0: entered promiscuous mode
[   72.220158][ T6883] batadv0: entered allmulticast mode
[   72.222260][ T6883] bridge0: port 1(batadv0) entered blocking state
[   72.224358][ T6883] bridge0: port 1(batadv0) entered disabled state
[   72.230280][ T6883] bridge0: port 1(batadv0) entered blocking state
[   72.232405][ T6883] bridge0: port 1(batadv0) entered forwarding state
[   72.650738][ T5681] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   72.654706][ T5681] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   72.741628][ T6934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.517998][   T33] audit: type=1800 audit(1751627697.174:4): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name=33FFFF dev="tmpfs" ino=874 res=0 errno=0
[   73.551792][ T6970] tun0: tun_chr_ioctl cmd 2147767520
[   74.793409][ T7027] __nla_validate_parse: 9 callbacks suppressed
[   74.793424][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[   74.803039][ T7027] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   74.809181][ T7027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.371138][ T7082] Cannot find set identified by id 1 to match
[   75.410247][ T7084] openvswitch: netlink: IPv4 tun info is not correct
[   75.704426][ T7104] netlink: 'syz.0.536': attribute type 13 has an invalid length.
[   75.731146][ T7104] netlink: 'syz.0.536': attribute type 17 has an invalid length.
[   75.959800][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.018189][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.075214][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.274315][ T7104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.554119][ T7137] ieee802154 phy0 wpan0: encryption failed: -22
[   76.776264][ T7156] SET target dimension over the limit!
[   76.889148][ T7166] netlink: 'syz.2.566': attribute type 21 has an invalid length.
[   76.891878][ T7166] netlink: 'syz.2.566': attribute type 22 has an invalid length.
[   76.894804][ T7166] netlink: 'syz.2.566': attribute type 23 has an invalid length.
[   76.899352][ T7166] netlink: 'syz.2.566': attribute type 25 has an invalid length.
[   76.902611][ T7166] netlink: 'syz.2.566': attribute type 26 has an invalid length.
[   76.911285][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'.
[   76.989045][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[   76.993192][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'.
[   77.334500][ T7206] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   78.004094][  T973] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[   78.009921][  T973] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[   78.019048][  T973] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   78.703132][ T7310] tipc: Started in network mode
[   78.704879][ T7310] tipc: Node identity 520fe8a9cead, cluster identity 4711
[   78.709077][ T7310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.712362][ T7310] syzkaller0: entered promiscuous mode
[   78.714132][ T7310] syzkaller0: entered allmulticast mode
[   78.762163][ T7310] tipc: Resetting bearer <eth:syzkaller0>
[   78.770885][ T7309] tipc: Resetting bearer <eth:syzkaller0>
[   78.786141][ T7309] tipc: Disabling bearer <eth:syzkaller0>
[   78.820558][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'.
[   78.824311][ T7318] chnl_net:caif_netlink_parms(): no params data found
[   78.992884][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[   79.008147][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'.
[   79.014741][ T7335] macvtap1: entered promiscuous mode
[   79.016946][ T7335] vlan2: entered promiscuous mode
[   79.018745][ T7335] geneve1: entered promiscuous mode
[   79.020903][ T7335] macvtap1: entered allmulticast mode
[   79.022617][ T7335] vlan2: entered allmulticast mode
[   79.024349][ T7335] geneve1: entered allmulticast mode
[   79.032020][ T7335] vlan3: entered promiscuous mode
[   79.033634][ T7335] bridge0: entered promiscuous mode
[   79.035391][ T7335] vlan3: entered allmulticast mode
[   79.037952][ T7335] bridge0: entered allmulticast mode
[   79.077651][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'.
[   79.535306][ T7393] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   79.723897][ T7412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.678'.
[   80.239324][ T7436] Driver unsupported XDP return value 0 on prog  (id 90) dev N/A, expect packet loss!
[   81.174911][   T10] cfg80211: failed to load regulatory.db
[   81.276749][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'.
[   81.373309][ T7500] netlink: 64 bytes leftover after parsing attributes in process `syz.2.716'.
[   81.861269][ T7530] netlink: 'syz.1.731': attribute type 13 has an invalid length.
[   81.863907][ T7530] netlink: 'syz.1.731': attribute type 17 has an invalid length.
[   81.926943][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'.
[   83.059834][ T7577] netlink: 'syz.2.751': attribute type 4 has an invalid length.
[   83.068272][ T7577] netlink: 'syz.2.751': attribute type 4 has an invalid length.
[   83.382305][ T7601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.763'.
[   83.392437][ T7601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   83.395495][ T7601] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   83.824129][ T7633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.849545][ T7636] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[   84.371414][ T7654] netlink: 304 bytes leftover after parsing attributes in process `syz.1.787'.
[   84.422500][ T7660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'.
[   85.035071][ T7720] netlink: 596 bytes leftover after parsing attributes in process `syz.2.814'.
[   85.298105][ T7740] syzkaller1: entered promiscuous mode
[   85.299912][ T7740] syzkaller1: entered allmulticast mode
[   85.368894][ T7745] netlink: 596 bytes leftover after parsing attributes in process `syz.0.817'.
[   85.392385][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'.
[   85.628896][ T7771] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.830'.
[   86.704876][ T7847] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[   86.722822][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'.
[   86.743688][ T7849] pim6reg: entered allmulticast mode
[   86.750234][ T7849] pim6reg: left allmulticast mode
[   87.940638][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[   88.048205][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'.
[   88.160506][ T7916] Cannot find set identified by id 1 to match
[   88.202570][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'.
[   88.208673][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'.
[   88.298430][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'.
[   88.519483][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'.
[   88.558698][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'.
[   88.564037][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'.
[   88.621048][ T7959] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.920'.
[   88.784127][ T7969] netlink: 'syz.0.924': attribute type 16 has an invalid length.
[   88.787026][ T7969] netlink: 'syz.0.924': attribute type 17 has an invalid length.
[   88.858848][ T7969] bridge0: port 1(batadv0) entered disabled state
[   88.898520][ T7973] IPv6: NLM_F_REPLACE set, but no existing node found!
[   89.051663][ T7969] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.055003][ T7969] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.058064][ T7969] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.060948][ T7969] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.669947][ T8007] syzkaller1: entered promiscuous mode
[   89.672071][ T8007] syzkaller1: entered allmulticast mode
[   90.849657][ T8083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.234044][ T8091] Bluetooth: MGMT ver 1.23
[   91.353379][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.532406][ T8121] xt_CT: No such helper "snmp"
[   91.703674][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.210653][ T8161] __nla_validate_parse: 3 callbacks suppressed
[   92.210668][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1009'.
[   92.299756][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1012'.
[   92.303741][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'.
[   92.485439][ T8185] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   92.561106][ T8193] netlink: 'syz.1.1028': attribute type 13 has an invalid length.
[   92.563159][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'.
[   92.564394][ T8193] netlink: 'syz.1.1028': attribute type 17 has an invalid length.
[   92.568300][ T8194] chnl_net:caif_netlink_parms(): no params data found
[   92.613365][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.618492][ T8193] 8021q: adding VLAN 0 to HW filter on device team0
[   92.623604][ T8193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.364742][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.445604][ T8212] netlink: 'syz.0.1031': attribute type 5 has an invalid length.
[   93.948263][ T8235] xt_CT: No such helper "snmp"
[   94.175694][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.796149][ T8263] netlink: 'syz.0.1056': attribute type 1 has an invalid length.
[   94.887674][ T8263] bond1 (unregistering): Released all slaves
[   94.955429][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'.
[   95.049790][ T8282] netlink: 'syz.2.1060': attribute type 13 has an invalid length.
[   95.052390][ T8282] netlink: 'syz.2.1060': attribute type 17 has an invalid length.
[   95.090150][ T8282] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.099007][ T8282] 8021q: adding VLAN 0 to HW filter on device team0
[   95.114684][ T8282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.682787][ T8289] xt_CT: No such helper "snmp"
[   95.814721][ T8306] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1073'.
[   95.869939][ T8311] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   95.881576][ T8311] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   95.888223][ T8311] tipc: Started in network mode
[   95.889884][ T8311] tipc: Node identity 080211000001, cluster identity 4711
[   95.892382][ T8311] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.034943][ T8337] netlink: 'syz.2.1088': attribute type 2 has an invalid length.
[   96.044200][ T8338] netlink: 'syz.0.1083': attribute type 13 has an invalid length.
[   96.054132][ T8338] netlink: 'syz.0.1083': attribute type 17 has an invalid length.
[   96.083002][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.085964][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'.
[   96.089208][ T8338] 8021q: adding VLAN 0 to HW filter on device team0
[   96.093386][ T8338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.126051][ T5202] Bluetooth: hci0: command tx timeout
[   96.262049][ T8353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1095'.
[   96.266026][ T8353] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1095'.
[   96.270003][ T8353] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1095'.
[   96.313103][ T8358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.316204][ T8358] IPv6: NLM_F_CREATE should be set when creating new route
[   96.319231][ T8358] IPv6: NLM_F_CREATE should be set when creating new route
[   96.328915][ T8360] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.331896][ T8360] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.334622][ T8360] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.337687][ T8360] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.896589][   T24] tipc: Node number set to 134418688
[   97.024565][ T8429] vlan2: entered promiscuous mode
[   97.026967][ T8429] syz_tun: entered promiscuous mode
[   97.453868][ T8465] __nla_validate_parse: 6 callbacks suppressed
[   97.453879][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'.
[   97.537471][ T8465] bridge_slave_1: left allmulticast mode
[   97.539421][ T8465] bridge_slave_1: left promiscuous mode
[   97.541398][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.546541][ T8465] bridge_slave_0: left allmulticast mode
[   97.548522][ T8465] bridge_slave_0: left promiscuous mode
[   97.550586][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.930155][ T8502] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   98.113593][ T8522] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   98.184560][ T8528] netlink: 'syz.1.1172': attribute type 30 has an invalid length.
[   98.298413][ T8530] netlink: 'syz.2.1176': attribute type 8 has an invalid length.
[   98.321857][ T8530] bond0: (slave bond_slave_0): Releasing backup interface
[   98.331237][ T8530] bond0: (slave bond_slave_1): Releasing backup interface
[   98.339179][ T8530] team0: Port device team_slave_0 removed
[   98.343357][ T8530] team0: Port device team_slave_1 removed
[   98.347787][ T8530] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.351566][ T8530] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.435173][ T8542] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1175'.
[   98.440125][ T8542] netem: invalid attributes len -16
[   98.442372][ T8542] netem: change failed
[   99.039469][ T8556] netlink: 'syz.0.1182': attribute type 2 has an invalid length.
[   99.149002][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'.
[   99.303796][ T8584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.373988][ T8588] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[   99.612477][ T8600] bond0: option ad_select: unable to set because the bond device is up
[   99.892018][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'.
[   99.939499][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[  100.094852][ T8624] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.548955][ T8670] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  100.633078][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1240'.
[  100.637947][ T8681] openvswitch: netlink: Missing key (keys=40, expected=80)
[  100.729098][ T8695] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  100.918484][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1257'.
[  101.148236][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'.
[  101.151127][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'.
[  101.154120][ T8750] validate_nla: 1 callbacks suppressed
[  101.154130][ T8750] netlink: 'syz.1.1270': attribute type 13 has an invalid length.
[  101.160095][ T8750] netlink: 'syz.1.1270': attribute type 12 has an invalid length.
[  101.200606][ T8755] netlink: 'syz.1.1272': attribute type 4 has an invalid length.
[  102.238137][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'.
[  102.514496][ T8880] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  102.602297][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'.
[  102.612055][ T8891] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[  102.708747][ T8905] netlink: 'syz.2.1339': attribute type 2 has an invalid length.
[  102.711195][ T8905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'.
[  102.988256][ T8946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1352'.
[  102.992029][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1352'.
[  103.120769][ T8959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1363'.
[  103.142882][ T8961] tipc: Invalid UDP bearer configuration
[  103.142909][ T8961] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  103.168064][ T8965] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  103.210267][ T8971] netlink: 'syz.1.1368': attribute type 29 has an invalid length.
[  103.214061][ T8971] netlink: 'syz.1.1368': attribute type 29 has an invalid length.
[  103.217283][ T8971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1368'.
[  103.318281][ T8982] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.332420][ T8981] syzkaller1: entered promiscuous mode
[  103.334537][ T8981] syzkaller1: entered allmulticast mode
[  104.251781][ T8999] delete_channel: no stack
[  104.297066][ T9003] netlink: 'syz.2.1383': attribute type 5 has an invalid length.
[  104.427229][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'.
[  104.442642][ T9021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1392'.
[  104.753067][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1405'.
[  104.758243][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'.
[  104.761540][ T9051] netlink: 'syz.0.1405': attribute type 5 has an invalid length.
[  104.936152][ T9062] bridge0: port 1(batadv0) entered disabled state
[  105.235571][ T9078] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  105.449987][ T9099] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  105.523948][ T9109] ipvlan2: entered promiscuous mode
[  105.529040][ T9109] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  105.859299][ T9150] netlink: 'syz.2.1453': attribute type 3 has an invalid length.
[  106.086867][ T9176] 
[  106.087737][ T9176] ======================================================
[  106.089928][ T9176] WARNING: possible circular locking dependency detected
[  106.092145][ T9176] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  106.095427][ T9176] ------------------------------------------------------
[  106.097679][ T9176] syz.2.1466/9176 is trying to acquire lock:
[  106.099592][ T9176] ffff888020804188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  106.103013][ T9176] 
[  106.103013][ T9176] but task is already holding lock:
[  106.105331][ T9176] ffff888020804230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  106.108276][ T9176] 
[  106.108276][ T9176] which lock already depends on the new lock.
[  106.108276][ T9176] 
[  106.111574][ T9176] 
[  106.111574][ T9176] the existing dependency chain (in reverse order) is:
[  106.114464][ T9176] 
[  106.114464][ T9176] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  106.116959][ T9176]        lock_acquire+0x120/0x360
[  106.118685][ T9176]        __mutex_lock+0x182/0xe80
[  106.120255][ T9176]        refcount_dec_and_mutex_lock+0x30/0xa0
[  106.122289][ T9176]        nbd_config_put+0x2c/0x790
[  106.123944][ T9176]        nbd_release+0xfe/0x140
[  106.125537][ T9176]        bdev_release+0x536/0x650
[  106.127134][ T9176]        blkdev_release+0x15/0x20
[  106.128807][ T9176]        __fput+0x44c/0xa70
[  106.130311][ T9176]        fput_close_sync+0x119/0x200
[  106.132047][ T9176]        __x64_sys_close+0x7f/0x110
[  106.133722][ T9176]        do_syscall_64+0xfa/0x3b0
[  106.135358][ T9176]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.137535][ T9176] 
[  106.137535][ T9176] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  106.140057][ T9176]        lock_acquire+0x120/0x360
[  106.141713][ T9176]        __mutex_lock+0x182/0xe80
[  106.143370][ T9176]        __del_gendisk+0x129/0x9e0
[  106.145060][ T9176]        del_gendisk+0xe8/0x160
[  106.146683][ T9176]        nbd_dev_remove_work+0x47/0xe0
[  106.148490][ T9176]        process_scheduled_works+0xae1/0x17b0
[  106.150418][ T9176]        worker_thread+0x8a0/0xda0
[  106.152014][ T9176]        kthread+0x711/0x8a0
[  106.153553][ T9176]        ret_from_fork+0x3fc/0x770
[  106.155237][ T9176]        ret_from_fork_asm+0x1a/0x30
[  106.156993][ T9176] 
[  106.156993][ T9176] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  106.159672][ T9176]        validate_chain+0xb9b/0x2140
[  106.161366][ T9176]        __lock_acquire+0xab9/0xd20
[  106.163064][ T9176]        lock_acquire+0x120/0x360
[  106.164733][ T9176]        down_write+0x96/0x1f0
[  106.166320][ T9176]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  106.168369][ T9176]        nbd_start_device+0x16c/0xac0
[  106.170046][ T9176]        nbd_genl_connect+0x1250/0x1930
[  106.171764][ T9176]        genl_family_rcv_msg_doit+0x215/0x300
[  106.173674][ T9176]        genl_rcv_msg+0x60e/0x790
[  106.175241][ T9176]        netlink_rcv_skb+0x208/0x470
[  106.176907][ T9176]        genl_rcv+0x28/0x40
[  106.178372][ T9176]        netlink_unicast+0x75b/0x8d0
[  106.180090][ T9176]        netlink_sendmsg+0x805/0xb30
[  106.181727][ T9176]        __sock_sendmsg+0x21c/0x270
[  106.183387][ T9176]        ____sys_sendmsg+0x505/0x830
[  106.185117][ T9176]        ___sys_sendmsg+0x21f/0x2a0
[  106.186767][ T9176]        __x64_sys_sendmsg+0x19b/0x260
[  106.188487][ T9176]        do_syscall_64+0xfa/0x3b0
[  106.190036][ T9176]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.192011][ T9176] 
[  106.192011][ T9176] other info that might help us debug this:
[  106.192011][ T9176] 
[  106.195120][ T9176] Chain exists of:
[  106.195120][ T9176]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  106.195120][ T9176] 
[  106.199463][ T9176]  Possible unsafe locking scenario:
[  106.199463][ T9176] 
[  106.201830][ T9176]        CPU0                    CPU1
[  106.203587][ T9176]        ----                    ----
[  106.205303][ T9176]   lock(&nbd->config_lock);
[  106.206852][ T9176]                                lock(&disk->open_mutex);
[  106.209166][ T9176]                                lock(&nbd->config_lock);
[  106.211491][ T9176]   lock(&set->update_nr_hwq_lock);
[  106.213148][ T9176] 
[  106.213148][ T9176]  *** DEADLOCK ***
[  106.213148][ T9176] 
[  106.215715][ T9176] 3 locks held by syz.2.1466/9176:
[  106.217389][ T9176]  #0: ffffffff8f576170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  106.220055][ T9176]  #1: ffffffff8f575f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  106.222979][ T9176]  #2: ffff888020804230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  106.226150][ T9176] 
[  106.226150][ T9176] stack backtrace:
[  106.228037][ T9176] CPU: 0 UID: 0 PID: 9176 Comm: syz.2.1466 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  106.228047][ T9176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.228051][ T9176] Call Trace:
[  106.228056][ T9176]  <TASK>
[  106.228059][ T9176]  dump_stack_lvl+0x189/0x250
[  106.228072][ T9176]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.228083][ T9176]  ? __pfx__printk+0x10/0x10
[  106.228091][ T9176]  ? print_lock_name+0xde/0x100
[  106.228099][ T9176]  print_circular_bug+0x2ee/0x310
[  106.228108][ T9176]  check_noncircular+0x134/0x160
[  106.228116][ T9176]  validate_chain+0xb9b/0x2140
[  106.228126][ T9176]  __lock_acquire+0xab9/0xd20
[  106.228137][ T9176]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  106.228148][ T9176]  lock_acquire+0x120/0x360
[  106.228157][ T9176]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  106.228167][ T9176]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  106.228178][ T9176]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  106.228188][ T9176]  down_write+0x96/0x1f0
[  106.228194][ T9176]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  106.228204][ T9176]  ? __pfx_down_write+0x10/0x10
[  106.228211][ T9176]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  106.228222][ T9176]  ? nbd_add_socket+0x688/0x9a0
[  106.228232][ T9176]  ? nbd_add_socket+0x688/0x9a0
[  106.228242][ T9176]  nbd_start_device+0x16c/0xac0
[  106.228252][ T9176]  ? __nla_parse+0x40/0x60
[  106.228262][ T9176]  nbd_genl_connect+0x1250/0x1930
[  106.228272][ T9176]  ? __pfx_nbd_genl_connect+0x10/0x10
[  106.228284][ T9176]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  106.228296][ T9176]  genl_family_rcv_msg_doit+0x215/0x300
[  106.228306][ T9176]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  106.228319][ T9176]  genl_rcv_msg+0x60e/0x790
[  106.228330][ T9176]  ? __pfx_genl_rcv_msg+0x10/0x10
[  106.228338][ T9176]  ? __pfx_nbd_genl_connect+0x10/0x10
[  106.228349][ T9176]  netlink_rcv_skb+0x208/0x470
[  106.228356][ T9176]  ? __pfx_genl_rcv_msg+0x10/0x10
[  106.228366][ T9176]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  106.228375][ T9176]  ? down_read+0x1ad/0x2e0
[  106.228381][ T9176]  genl_rcv+0x28/0x40
[  106.228390][ T9176]  netlink_unicast+0x75b/0x8d0
[  106.228398][ T9176]  netlink_sendmsg+0x805/0xb30
[  106.228406][ T9176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.228414][ T9176]  ? aa_sock_msg_perm+0x94/0x160
[  106.228424][ T9176]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  106.228462][ T9176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.228472][ T9176]  __sock_sendmsg+0x21c/0x270
[  106.228484][ T9176]  ____sys_sendmsg+0x505/0x830
[  106.228493][ T9176]  ? __pfx_____sys_sendmsg+0x10/0x10
[  106.228503][ T9176]  ? import_iovec+0x74/0xa0
[  106.228510][ T9176]  ___sys_sendmsg+0x21f/0x2a0
[  106.228518][ T9176]  ? __pfx____sys_sendmsg+0x10/0x10
[  106.228531][ T9176]  ? __fget_files+0x2a/0x420
[  106.228539][ T9176]  ? __fget_files+0x3a0/0x420
[  106.228548][ T9176]  __x64_sys_sendmsg+0x19b/0x260
[  106.228557][ T9176]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  106.228566][ T9176]  ? rcu_is_watching+0x15/0xb0
[  106.228577][ T9176]  ? do_syscall_64+0xbe/0x3b0
[  106.228583][ T9176]  do_syscall_64+0xfa/0x3b0
[  106.228589][ T9176]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.228598][ T9176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.228605][ T9176]  ? exc_page_fault+0x9f/0xf0
[  106.228614][ T9176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.228621][ T9176] RIP: 0033:0x7f8af698e929
[  106.228629][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.228635][ T9176] RSP: 002b:00007f8af78b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.228643][ T9176] RAX: ffffffffffffffda RBX: 00007f8af6bb5fa0 RCX: 00007f8af698e929
[  106.228648][ T9176] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[  106.228653][ T9176] RBP: 00007f8af6a10b39 R08: 0000000000000000 R09: 0000000000000000
[  106.228657][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.228661][ T9176] R13: 0000000000000000 R14: 00007f8af6bb5fa0 R15: 00007ffc878435c8
[  106.228668][ T9176]  </TASK>
[  106.397321][ T9176] nbd2: detected capacity change from 0 to 63
[  106.400118][ T9178] block nbd2: NBD_DISCONNECT
[  106.402898][ T9178] block nbd2: Disconnected due to user request.
[  106.405609][ T9178] block nbd2: shutting down sockets
[  106.408868][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.412661][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  106.416030][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.419356][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  106.422630][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.426493][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  106.429784][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.433419][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  106.436184][ T5816] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.439138][ T5816] Buffer I/O error on dev nbd2, logical block 0, async page read
[  106.441730][ T5816] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.444904][ T5816] Buffer I/O error on dev nbd2, logical block 1, async page read
[  106.447882][ T5816] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.450847][ T5816] Buffer I/O error on dev nbd2, logical block 2, async page read
[  106.453576][ T5816] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.457352][ T5816] Buffer I/O error on dev nbd2, logical block 3, async page read
[  106.459988][ T5816] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.462973][ T5816] Buffer I/O error on dev nbd2, logical block 0, async page read
[  106.466080][ T5816] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.469189][ T5816] Buffer I/O error on dev nbd2, logical block 1, async page read
[  106.473696][ T5816] ldm_validate_partition_table(): Disk read failed.
[  106.476917][ T5816] Dev nbd2: unable to read RDB block 0
[  106.479181][ T5816]  nbd2: unable to read partition table
[  106.483095][ T5816] ldm_validate_partition_table(): Disk read failed.
[  106.486091][ T5816] Dev nbd2: unable to read RDB block 0
[  106.488358][ T5816]  nbd2: unable to read partition table

VM DIAGNOSIS:
11:15:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000020c2 RDI=00000000000020c3 RBP=00000000000003f8 RSP=ffffc90002c5e710
R8 =ffff888108098237 R9 =1ffff11021013046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f0 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8af78b76c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ac0 CR3=00000000330a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fb6f7411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff888023299080 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e13ee60 RBP=ffff8880226a5210 RSP=ffffc90000107a10
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8b348220
R12=dffffc0000000000 R13=ffffffff8b3482f2 R14=ffff888032ff0d80 R15=0000000000000242
RIP=ffffffff819e2170 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8070169fc8 CR3=0000000031cd4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f806f411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
