last executing test programs:

1.235232325s ago: executing program 0 (id=2010):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES64], 0x40}, 0x34040084)

1.234851114s ago: executing program 0 (id=2011):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x14, 0x0, 0x70bd2a, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x26e6bbb, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x40, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x3}}, @sadb_address={0x5, 0x6, 0xff, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x4e24, 0x0, @empty}}]}, 0xa0}}, 0x0)

1.144807945s ago: executing program 0 (id=2012):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES8=r2], 0x1c}}, 0x0)

1.020721246s ago: executing program 0 (id=2014):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

840.063103ms ago: executing program 0 (id=2016):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r1, &(0x7f00000002c0)=ANY=[], 0xa)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, @local}, 0x10)
listen(r0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000ffff0000000000008a0eb0e0036ade2075dcb097dcac0425026269c9d0c368f1c5dbe267653288bb7dd7c14a1b3898406dbf4192868c824b9b79dbeb9a1103cbc5b9f8301301c81914fcb91682dbee4c31a281a0737b0000000000000000000000dbe2e685e92ecc5905a8c6e7b3499b40dd7c1ef093c05d62ade4574c944800"/148], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x1, @ANYBLOB="0300000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000100"/28], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30b5", 0x95}], 0x1, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES8=r3, @ANYRES8=r5, @ANYRESHEX=r0, @ANYRES64=0x0], 0xfffffffffffffed4}}], 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
poll(&(0x7f0000000640)=[{r7, 0x4001}], 0x1, 0x7)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x60, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r6], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

615.312033ms ago: executing program 1 (id=2022):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

555.915043ms ago: executing program 1 (id=2025):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000000901010000000000000000000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff02000000000000000000000000000108000540000000000c000480080101400000000009000100"], 0x70}}, 0x0)

484.885594ms ago: executing program 1 (id=2027):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)

434.981679ms ago: executing program 2 (id=2029):
r0 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
unshare(0x22020400)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

313.66991ms ago: executing program 1 (id=2030):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18050000000008000000000000001a00c3a0f8ff4100000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x96, &(0x7f0000000440)=""/150, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

313.447346ms ago: executing program 2 (id=2031):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x5824, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

264.920724ms ago: executing program 1 (id=2032):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000)

203.904897ms ago: executing program 2 (id=2033):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

203.369558ms ago: executing program 1 (id=2034):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000940)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000400010002", 0x7)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc23b, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x14}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000980)='GPL\x00', 0x9, 0xe1, &(0x7f00000009c0)=""/225, 0x41100, 0xc, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x5, 0x3, 0x5}, 0x10, 0x2f48a, r3, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10)
sendfile(r7, r8, &(0x7f0000000c00), 0x1d)
sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[@ANYBLOB], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095003200000000006916000000000000bf67000000000000350605000fff07206706000002000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d39d25991b085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e5671c888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e17417a249a2cd8ff62aa6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a122822bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c6310121ecb9029e7f835420f8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc12b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35349fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d3743a0be77b64961753faba6131c136fb14b1963960f2f7f118bc451a18b216bf26c3cec2575a059da60baede629711a5f11c347fcbca73440d27b1147b44fb15106c00669da23964fd9de079d1a9077848100f6e75d29b2d60016abc6ef1542bd3062f599676bb04e64decb6c843a407f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xaf}, @ldst={0x1, 0x0, 0x6, 0x5, 0xf, 0x80, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

124.471373ms ago: executing program 2 (id=2035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010)

62.660199ms ago: executing program 2 (id=2036):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4)

667.507µs ago: executing program 2 (id=2037):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400})

0s ago: executing program 0 (id=2038):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29779' (ED25519) to the list of known hosts.
syzkaller login: [   49.110393][ T5756] cgroup: Unknown subsys name 'net'
[   49.231788][ T5756] cgroup: Unknown subsys name 'cpuset'
[   49.238751][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.234200][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.789251][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.803457][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.807047][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.810600][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.814411][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.818559][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.822961][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.858607][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.864684][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.869063][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.903524][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.907073][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.911480][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.915630][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.918627][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.272170][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   57.306978][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   57.344522][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   57.445380][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.448431][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.451732][ T5830] bridge_slave_0: entered allmulticast mode
[   57.455748][ T5830] bridge_slave_0: entered promiscuous mode
[   57.479617][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.482843][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.485901][ T5830] bridge_slave_1: entered allmulticast mode
[   57.489616][ T5830] bridge_slave_1: entered promiscuous mode
[   57.581099][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.584186][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.587116][ T5826] bridge_slave_0: entered allmulticast mode
[   57.590945][ T5826] bridge_slave_0: entered promiscuous mode
[   57.596008][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.598239][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.600474][ T5835] bridge_slave_0: entered allmulticast mode
[   57.604941][ T5835] bridge_slave_0: entered promiscuous mode
[   57.608845][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.611155][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.614033][ T5835] bridge_slave_1: entered allmulticast mode
[   57.616724][ T5835] bridge_slave_1: entered promiscuous mode
[   57.621051][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.625374][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.628329][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.631219][ T5826] bridge_slave_1: entered allmulticast mode
[   57.635556][ T5826] bridge_slave_1: entered promiscuous mode
[   57.659121][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.692227][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.697567][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.721598][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.736590][ T5835] team0: Port device team_slave_0 added
[   57.741928][ T5835] team0: Port device team_slave_1 added
[   57.746808][ T5830] team0: Port device team_slave_0 added
[   57.767525][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.773262][ T5830] team0: Port device team_slave_1 added
[   57.825839][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.828503][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.840242][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.854329][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.856614][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.865031][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.869358][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.871432][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.879936][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.885503][ T5826] team0: Port device team_slave_0 added
[   57.887975][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.890204][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.898973][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.919455][ T5826] team0: Port device team_slave_1 added
[   57.952218][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.954859][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.963527][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.989590][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.992173][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.001586][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.014530][ T5830] hsr_slave_0: entered promiscuous mode
[   58.017111][ T5830] hsr_slave_1: entered promiscuous mode
[   58.032794][ T5835] hsr_slave_0: entered promiscuous mode
[   58.035475][ T5835] hsr_slave_1: entered promiscuous mode
[   58.037879][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.040479][ T5835] Cannot create hsr debugfs directory
[   58.122477][ T5826] hsr_slave_0: entered promiscuous mode
[   58.124860][ T5826] hsr_slave_1: entered promiscuous mode
[   58.127012][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.129556][ T5826] Cannot create hsr debugfs directory
[   58.409842][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.424975][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.430012][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.441589][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.473684][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.479315][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.488137][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.506394][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.547781][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.565558][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.577831][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.585680][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.685759][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.728812][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   58.746480][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.756310][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.759345][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.780103][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.783016][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.810652][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   58.839791][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.852170][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.855123][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.863787][ T5219] Bluetooth: hci1: command tx timeout
[   58.884442][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.887275][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.915804][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   58.943069][ T5219] Bluetooth: hci2: command tx timeout
[   58.943130][ T5834] Bluetooth: hci0: command tx timeout
[   58.947476][  T189] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.950666][  T189] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.978455][  T189] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.981327][  T189] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.008466][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.012458][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.131787][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.168370][ T5830] veth0_vlan: entered promiscuous mode
[   59.179216][ T5830] veth1_vlan: entered promiscuous mode
[   59.205096][ T5830] veth0_macvtap: entered promiscuous mode
[   59.217229][ T5830] veth1_macvtap: entered promiscuous mode
[   59.230782][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.249399][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.260261][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.273595][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.289329][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.295445][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.298744][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.302079][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.375055][ T5826] veth0_vlan: entered promiscuous mode
[   59.402074][ T5826] veth1_vlan: entered promiscuous mode
[   59.407667][ T5835] veth0_vlan: entered promiscuous mode
[   59.430141][ T5835] veth1_vlan: entered promiscuous mode
[   59.466631][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.469846][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.498136][ T5835] veth0_macvtap: entered promiscuous mode
[   59.526223][ T5826] veth0_macvtap: entered promiscuous mode
[   59.531343][ T5835] veth1_macvtap: entered promiscuous mode
[   59.538472][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.541639][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.554433][ T5826] veth1_macvtap: entered promiscuous mode
[   59.574832][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.591611][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.595648][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.607721][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.618250][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.625919][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.628991][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.631882][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.636456][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.645766][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.648653][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.651285][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.654737][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.761315][ T5896] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.768110][ T4580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.770638][ T4580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.817779][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.820328][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.856899][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.859543][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.912222][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.916694][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.090651][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.094567][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.183715][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.190340][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.264889][ T5905] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.268657][ T5905] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.272215][ T5905] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.276652][ T5905] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.424739][ T5910] sctp: [Deprecated]: syz.1.8 (pid 5910) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.424739][ T5910] Use struct sctp_sack_info instead
[   60.475747][ T5905] syz.0.7 (5905) used greatest stack depth: 20728 bytes left
[   60.503100][ T5912] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   60.523755][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   60.527448][ T5916] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11'.
[   60.571001][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   60.895096][ T5933] : renamed from batadv_slave_1 (while UP)
[   60.952587][ T5834] Bluetooth: hci1: command tx timeout
[   61.023615][ T5219] Bluetooth: hci2: command tx timeout
[   61.025822][ T5834] Bluetooth: hci0: command tx timeout
[   61.043796][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.046840][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.410665][ T5963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.493824][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   61.990005][ T5992] netlink: 'syz.0.45': attribute type 7 has an invalid length.
[   61.995632][ T5992] netlink: 'syz.0.45': attribute type 8 has an invalid length.
[   62.224246][ T6010] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   62.300339][ T6010] bond1 (unregistering): Released all slaves
[   62.381312][ T6017] netlink: 168 bytes leftover after parsing attributes in process `syz.1.56'.
[   62.554636][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   62.990386][ T6059] warning: `syz.0.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.033236][ T5219] Bluetooth: hci1: command tx timeout
[   63.103716][ T5219] Bluetooth: hci0: command tx timeout
[   63.105630][ T5219] Bluetooth: hci2: command tx timeout
[   63.876031][ T6111] netlink: 'syz.1.91': attribute type 1 has an invalid length.
[   63.879083][ T6111] netlink: 'syz.1.91': attribute type 2 has an invalid length.
[   63.881579][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   63.920214][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.925138][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'.
[   63.928436][ T6113] bridge_slave_1: left allmulticast mode
[   63.930308][ T6113] bridge_slave_1: left promiscuous mode
[   63.932194][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.940315][ T6113] bridge_slave_0: left allmulticast mode
[   63.942105][ T6113] bridge_slave_0: left promiscuous mode
[   63.946438][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.021008][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'.
[   64.301254][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   64.686618][ T6149] netlink: 'syz.0.109': attribute type 303 has an invalid length.
[   64.820189][ T6161] netlink: 'syz.2.115': attribute type 1 has an invalid length.
[   64.981715][ T6171] vlan0: entered promiscuous mode
[   65.102733][ T5219] Bluetooth: hci1: command tx timeout
[   65.182682][ T5219] Bluetooth: hci0: command tx timeout
[   65.182889][ T5827] Bluetooth: hci2: command 0x0419 tx timeout
[   65.290220][ T6185] Zero length message leads to an empty skb
[   65.501402][   T47] cfg80211: failed to load regulatory.db
[   65.759180][ T6198] netlink: 'syz.0.129': attribute type 1 has an invalid length.
[   65.761574][ T6198] netlink: 'syz.0.129': attribute type 4 has an invalid length.
[   65.765943][ T6198] __nla_validate_parse: 5 callbacks suppressed
[   65.765951][ T6198] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.129'.
[   66.421849][ T6230] netlink: 'syz.2.143': attribute type 2 has an invalid length.
[   66.428905][ T6230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.143'.
[   66.648322][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[   67.273149][ T5834] Bluetooth: hci2: command 0x0419 tx timeout
[   67.574359][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'.
[   67.655552][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.180'.
[   67.694049][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[   67.816081][ T6321] Bluetooth: MGMT ver 1.23
[   67.826191][ T6319] batadv1: entered allmulticast mode
[   67.829749][ T6319] 8021q: adding VLAN 0 to HW filter on device batadv1
[   67.873379][ T6323] netlink: 248 bytes leftover after parsing attributes in process `syz.2.188'.
[   67.893265][ T6325] TCP: TCP_TX_DELAY enabled
[   68.145349][ T6338] validate_nla: 1 callbacks suppressed
[   68.145371][ T6338] netlink: 'syz.1.194': attribute type 1 has an invalid length.
[   68.193455][ T6341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.195'.
[   68.602869][ T6360] netlink: 'syz.2.203': attribute type 4 has an invalid length.
[   68.913297][ T6369] ipt_ECN: cannot use operation on non-tcp rule
[   69.213987][ T6377] syzkaller0: entered allmulticast mode
[   69.224118][ T6388] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.210'.
[   69.290739][ T6369] syzkaller0 (unregistering): left allmulticast mode
[   70.200190][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.281137][ T6461] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   70.824456][ T6500] netlink: 100 bytes leftover after parsing attributes in process `syz.0.248'.
[   71.188798][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.193706][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.487460][ T6529] netlink: 'syz.2.256': attribute type 10 has an invalid length.
[   71.493723][ T6531] netlink: 128 bytes leftover after parsing attributes in process `syz.0.257'.
[   71.502738][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.256'.
[   71.527779][ T6529] team0: Port device geneve0 added
[   71.538749][ T6531] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   71.542190][ T6531] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   71.695418][ T6540] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[   71.815781][ T6542] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   72.318932][ T6555] netlink: 'syz.2.268': attribute type 1 has an invalid length.
[   72.322452][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'.
[   72.338763][ T6531] syz.0.257 (6531) used greatest stack depth: 20696 bytes left
[   72.619537][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'.
[   73.177970][ T6585] batadv0: entered promiscuous mode
[   73.182632][ T6585] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.964943][ T6602] netlink: 'syz.1.288': attribute type 1 has an invalid length.
[   74.316815][ T6621] can: request_module (can-proto-3) failed.
[   74.926998][ T6658] pimreg: tun_chr_ioctl cmd 2147767506
[   75.086732][ T6665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'.
[   75.632606][ T6690] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   75.635409][ T6690] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   75.667970][ T6690] syz.1.323 (6690) used greatest stack depth: 20568 bytes left
[   76.061963][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'.
[   76.161866][ T6727] netlink: 256 bytes leftover after parsing attributes in process `syz.1.342'.
[   76.164880][ T6727] netlink: 72 bytes leftover after parsing attributes in process `syz.1.342'.
[   76.211278][ T6731] netlink: 104 bytes leftover after parsing attributes in process `syz.1.344'.
[   76.568601][ T6756] syzkaller1: entered promiscuous mode
[   76.570338][ T6756] syzkaller1: entered allmulticast mode
[   77.034982][ T6799] netlink: 'syz.1.376': attribute type 11 has an invalid length.
[   78.407514][ T6851] netlink: 76 bytes leftover after parsing attributes in process `syz.2.395'.
[   78.816850][ T6881] netlink: 'syz.2.403': attribute type 16 has an invalid length.
[   78.820792][ T6881] netlink: 'syz.2.403': attribute type 17 has an invalid length.
[   78.839335][ T6881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.071377][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'.
[   79.815615][ T6915] sock: sock_timestamping_bind_phc: sock not bind to device
[   79.833163][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.840645][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.907250][ T6908] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.910183][ T6908] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.913584][ T6908] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.917321][ T6908] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.984674][ T6908] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   80.002267][ T6908] batadv1: left allmulticast mode
[   81.734333][ T7003] netlink: 'syz.2.449': attribute type 14 has an invalid length.
[   81.737301][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[   81.767835][ T7007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.962421][  T791] IPVS: starting estimator thread 0...
[   81.964482][ T7019] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   82.030128][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'.
[   82.062513][ T7023] IPVS: using max 62 ests per chain, 148800 per kthread
[   82.136356][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   83.151204][ T7054] pim6reg1: entered promiscuous mode
[   83.154066][ T7054] pim6reg1: entered allmulticast mode
[   83.857672][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'.
[   83.871242][ T7085] tipc: Started in network mode
[   83.875154][ T7085] tipc: Node identity 16919845a80e, cluster identity 4711
[   83.877494][ T7085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.880257][ T7085] syzkaller0: entered promiscuous mode
[   83.881961][ T7085] syzkaller0: entered allmulticast mode
[   83.888772][ T7085] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   83.920846][ T7085] tipc: Resetting bearer <eth:syzkaller0>
[   83.942076][ T7084] tipc: Resetting bearer <eth:syzkaller0>
[   83.952181][ T7084] tipc: Disabling bearer <eth:syzkaller0>
[   83.984605][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.482'.
[   84.124105][ T7093] syz.0.484 (7093) used greatest stack depth: 19544 bytes left
[   84.498466][ T7126] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[   84.502878][ T7126] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   84.835322][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'.
[   85.011408][ T7176] netlink: 132 bytes leftover after parsing attributes in process `syz.1.522'.
[   85.481596][ T7216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.541'.
[   86.205076][ T7266] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   86.209847][ T7266] macsec1: entered promiscuous mode
[   86.212183][ T7266] macsec1: entered allmulticast mode
[   86.215820][ T7266] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   86.370242][ T7284] netlink: 772 bytes leftover after parsing attributes in process `syz.2.573'.
[   86.549553][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'.
[   86.573975][ T7299] netlink: 'syz.2.579': attribute type 4 has an invalid length.
[   86.575043][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'.
[   86.576728][ T7299] netlink: 'syz.2.579': attribute type 17 has an invalid length.
[   87.289457][ T7331] tipc: Started in network mode
[   87.291634][ T7331] tipc: Node identity 4, cluster identity 4711
[   87.294301][ T7331] tipc: Node number set to 4
[   87.475575][ T7346] netlink: 'syz.2.598': attribute type 21 has an invalid length.
[   87.481715][ T7346] netlink: 'syz.2.598': attribute type 6 has an invalid length.
[   87.491553][ T7346] netlink: 64 bytes leftover after parsing attributes in process `syz.2.598'.
[   87.503784][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[   87.514898][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'.
[   87.551276][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[   87.551832][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[   87.555125][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[   87.564230][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[   87.568143][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[   87.988461][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'.
[   88.265670][ T7415] ipt_ECN: cannot use operation on non-tcp rule
[   88.336708][ T7422] syzkaller0: entered allmulticast mode
[   88.554736][ T7414] syzkaller0: left allmulticast mode
[   88.598889][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'.
[   90.838283][ T7511] netlink: 'syz.1.680': attribute type 1 has an invalid length.
[   90.878783][ T7511] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.919219][ T7511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.926734][ T7511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.930215][ T7511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.938097][ T7511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.945994][ T7511] bond2: (slave geneve2): making interface the new active one
[   90.956694][ T7511] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   90.964040][ T7516] bond2: entered promiscuous mode
[   90.965735][ T7516] geneve2: entered promiscuous mode
[   90.992653][ T7511] syz.1.680 (7511) used greatest stack depth: 18456 bytes left
[   91.844647][ T7567] nbd0: detected capacity change from 0 to 127
[   91.859869][   T56] block nbd0: Receive control failed (result -32)
[   91.864987][ T7537] block nbd0: Dead connection, failed to find a fallback
[   91.867235][ T7537] block nbd0: shutting down sockets
[   91.868916][ T7537] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.871978][ T7537] Buffer I/O error on dev nbd0, logical block 0, async page read
[   91.884727][ T7537] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.897512][ T7537] Buffer I/O error on dev nbd0, logical block 1, async page read
[   91.900008][ T7537] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.902029][ T7578] veth1: entered promiscuous mode
[   91.903570][ T7537] Buffer I/O error on dev nbd0, logical block 2, async page read
[   91.903673][ T7537] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.903684][ T7537] Buffer I/O error on dev nbd0, logical block 3, async page read
[   91.903757][ T7537] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.903768][ T7537] Buffer I/O error on dev nbd0, logical block 0, async page read
[   91.904409][ T7537] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.922096][ T7578] netlink: 'syz.1.702': attribute type 8 has an invalid length.
[   91.927450][ T7537] Buffer I/O error on dev nbd0, logical block 1, async page read
[   91.929964][ T7537] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.934370][ T7537] Buffer I/O error on dev nbd0, logical block 2, async page read
[   91.935555][ T7578] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   91.943388][ T7582] netlink: 'syz.2.704': attribute type 83 has an invalid length.
[   91.943455][ T7537] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.952361][ T7537] Buffer I/O error on dev nbd0, logical block 3, async page read
[   91.955087][ T7537] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.958004][ T7537] Buffer I/O error on dev nbd0, logical block 0, async page read
[   91.966337][ T7537] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.969313][ T7537] Buffer I/O error on dev nbd0, logical block 1, async page read
[   91.986401][ T7537] ldm_validate_partition_table(): Disk read failed.
[   91.993999][ T7537] Dev nbd0: unable to read RDB block 0
[   91.998948][ T7537]  nbd0: unable to read partition table
[   92.049621][ T7537] ldm_validate_partition_table(): Disk read failed.
[   92.074728][ T7588] pimreg: entered allmulticast mode
[   92.076854][ T7537] Dev nbd0: unable to read RDB block 0
[   92.080675][ T7537]  nbd0: unable to read partition table
[   92.086123][ T7588] pimreg: left allmulticast mode
[   92.540690][ T7631] __nla_validate_parse: 4 callbacks suppressed
[   92.540700][ T7631] netlink: 68 bytes leftover after parsing attributes in process `syz.2.726'.
[   92.646386][ T7641] netlink: 'syz.0.731': attribute type 1 has an invalid length.
[   92.883593][ T7659] vlan3: entered promiscuous mode
[   92.885254][ T7659] bond0: entered promiscuous mode
[   92.886825][ T7659] bond_slave_0: entered promiscuous mode
[   92.888940][ T7659] bond_slave_1: entered promiscuous mode
[   92.890842][ T7659] vlan3: entered allmulticast mode
[   92.892567][ T7659] bond0: entered allmulticast mode
[   92.894342][ T7659] bond_slave_0: entered allmulticast mode
[   92.896635][ T7659] bond_slave_1: entered allmulticast mode
[   93.142022][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   93.380636][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'.
[   93.392404][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'.
[   93.395458][ T7692] netlink: 'syz.2.755': attribute type 14 has an invalid length.
[   93.398575][ T7692] netlink: 'syz.2.755': attribute type 13 has an invalid length.
[   93.643582][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'.
[   93.685896][ T7713] netlink: 176 bytes leftover after parsing attributes in process `syz.2.764'.
[   93.758406][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'.
[   93.909664][ T7731] netlink: 92 bytes leftover after parsing attributes in process `syz.2.772'.
[   93.913631][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.772'.
[   93.917388][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.772'.
[   94.103532][ T7739] netlink: 'syz.2.776': attribute type 13 has an invalid length.
[   94.106739][ T7739] netlink: 'syz.2.776': attribute type 17 has an invalid length.
[   94.153446][ T7739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.307135][ T7747] netlink: zone id is out of range
[   94.309348][ T7747] netlink: zone id is out of range
[   94.311016][ T7747] netlink: set zone limit has 4 unknown bytes
[   94.564541][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.698734][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.010669][ T7787] unsupported nlmsg_type 40
[   95.080043][ T7790] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   95.552967][ T7809] tipc: Started in network mode
[   95.554585][ T7809] tipc: Node identity ac14142f, cluster identity 4711
[   95.557011][ T7809] tipc: New replicast peer: 0.0.0.0
[   95.558901][ T7809] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.561527][ T7809] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   96.049349][ T7833] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   96.053523][ T7833] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   96.683791][ T5878] tipc: Node number set to 2886997039
[   97.030131][ T7870] netlink: 'syz.1.831': attribute type 13 has an invalid length.
[   97.034122][ T7870] netlink: 'syz.1.831': attribute type 17 has an invalid length.
[   97.113326][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.118011][ T7870] 8021q: adding VLAN 0 to HW filter on device team0
[   97.130189][ T7870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.393542][ T5297] IPVS: starting estimator thread 0...
[   97.428815][ T7890] netlink: 'syz.0.839': attribute type 21 has an invalid length.
[   97.486607][ T7888] IPVS: using max 62 ests per chain, 148800 per kthread
[   97.900633][ T7910] __nla_validate_parse: 4 callbacks suppressed
[   97.900650][ T7910] netlink: 116 bytes leftover after parsing attributes in process `syz.0.848'.
[   97.914501][ T7910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   98.044134][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'.
[   98.049096][ T7927] syz_tun: entered allmulticast mode
[   98.056717][ T7927] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.857'.
[   98.061914][ T7926] syz_tun: left allmulticast mode
[   98.107258][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'.
[   98.138653][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'.
[   98.142165][ T7934] netlink: 'syz.2.860': attribute type 30 has an invalid length.
[   98.151796][ T7934] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.155005][ T7934] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.157781][ T7934] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.160608][ T7934] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.173233][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'.
[   98.176312][ T7934] netlink: 'syz.2.860': attribute type 30 has an invalid length.
[   98.397665][ T7957] syzkaller1: entered promiscuous mode
[   98.399485][ T7957] syzkaller1: entered allmulticast mode
[   98.915600][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.881'.
[   98.941676][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'.
[   99.369032][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'.
[   99.473891][ T8019] syz_tun: entered promiscuous mode
[   99.476020][ T8019] vlan2: entered promiscuous mode
[  100.067606][ T8023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.073663][ T8023] syzkaller0: entered promiscuous mode
[  100.075365][ T8023] syzkaller0: entered allmulticast mode
[  100.097368][ T8023] tipc: Resetting bearer <eth:syzkaller0>
[  100.259627][ T8046] netlink: 'syz.1.907': attribute type 4 has an invalid length.
[  100.269494][ T8046] netlink: 'syz.1.907': attribute type 4 has an invalid length.
[  101.943737][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'.
[  102.026938][ T8119] netlink: 'syz.2.940': attribute type 1 has an invalid length.
[  102.061329][ T8121] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  102.065719][ T8121] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  102.069116][ T8121] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  102.919158][ T8171] netlink: 'syz.1.961': attribute type 1 has an invalid length.
[  103.003642][ T8177] lo speed is unknown, defaulting to 1000
[  103.008828][ T8177] lo speed is unknown, defaulting to 1000
[  103.019309][ T8177] lo speed is unknown, defaulting to 1000
[  103.213830][ T8177] infiniband syz0: set down
[  103.215815][ T8177] infiniband syz0: added lo
[  103.254291][ T5878] lo speed is unknown, defaulting to 1000
[  103.259801][ T8177] RDS/IB: syz0: added
[  103.262504][ T8177] smc: adding ib device syz0 with port count 1
[  103.265447][ T8177] smc:    ib device syz0 port 1 has pnetid 
[  103.279608][ T5878] lo speed is unknown, defaulting to 1000
[  103.283194][ T8177] lo speed is unknown, defaulting to 1000
[  103.409759][ T8177] lo speed is unknown, defaulting to 1000
[  103.526576][ T8177] lo speed is unknown, defaulting to 1000
[  103.767040][ T8205] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  103.783772][ T8209] __nla_validate_parse: 2 callbacks suppressed
[  103.783782][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'.
[  103.859733][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'.
[  103.876744][ T8219] macvtap1: entered promiscuous mode
[  103.878579][ T8219] macvtap1: entered allmulticast mode
[  103.880241][ T8219] syz_tun: entered allmulticast mode
[  103.891028][ T8219] syz_tun: left allmulticast mode
[  104.174211][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'.
[  104.501103][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'.
[  104.676684][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.679248][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.807199][ T8286] openvswitch: netlink: IPv4 tun info is not correct
[  104.852855][ T8289] sctp: [Deprecated]: syz.1.1010 (pid 8289) Use of int in maxseg socket option.
[  104.852855][ T8289] Use struct sctp_assoc_value instead
[  104.956965][ T8299] team0: Device sit2 is of different type
[  105.087964][ T8305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.091840][ T8305] syzkaller0: entered promiscuous mode
[  105.094487][ T8305] syzkaller0: entered allmulticast mode
[  105.120427][ T8305] tipc: Resetting bearer <eth:syzkaller0>
[  105.127786][ T8304] tipc: Resetting bearer <eth:syzkaller0>
[  105.145405][ T8304] tipc: Disabling bearer <eth:syzkaller0>
[  105.628265][ T8342] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  105.906257][ T8365] netlink: 'syz.2.1045': attribute type 5 has an invalid length.
[  106.021327][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'.
[  106.167540][ T8381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  106.191530][ T8385] netlink: 'syz.0.1054': attribute type 7 has an invalid length.
[  106.197881][ T8385] netlink: 'syz.0.1054': attribute type 8 has an invalid length.
[  106.200533][ T8385] netlink: 'syz.0.1054': attribute type 4 has an invalid length.
[  106.204638][ T8385] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1054'.
[  106.449568][ T8401] trusted_key: syz.0.1061 sent an empty control message without MSG_MORE.
[  106.476011][ T8401] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  106.481289][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'.
[  106.495085][ T8401] bridge4: entered promiscuous mode
[  106.497184][ T8401] bridge4: entered allmulticast mode
[  106.504974][ T8401] team0: Port device bridge4 added
[  106.544721][ T8407] netlink: 'syz.2.1064': attribute type 10 has an invalid length.
[  106.551444][ T8407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.557077][ T8407] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  106.566344][ T8407] netlink: 'syz.2.1064': attribute type 10 has an invalid length.
[  106.569053][ T8407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1064'.
[  106.572105][ T8407] batadv0: entered promiscuous mode
[  106.575564][ T8407] batadv0: entered allmulticast mode
[  106.594278][ T8407] bond0: (slave batadv0): Releasing backup interface
[  106.604532][ T8407] bridge0: port 3(batadv0) entered blocking state
[  106.617683][ T8407] bridge0: port 3(batadv0) entered disabled state
[  106.851815][ T8426] netlink: 'syz.2.1073': attribute type 1 has an invalid length.
[  106.924763][ T8426] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.952935][ T8433] bond1: (slave bridge2): making interface the new active one
[  106.958301][ T8433] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  106.995463][ T8426] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  107.123416][ T5908] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  107.127101][ T5908] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  107.408753][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'.
[  107.454101][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.476324][ T8478] IPv6: Can't replace route, no match found
[  107.481509][ T8478] x_tables: duplicate underflow at hook 1
[  107.529122][ T8482] x9`.Ā*|: renamed from bridge_slave_0
[  107.856127][ T8500] netlink: 'syz.0.1100': attribute type 3 has an invalid length.
[  107.920928][ T8514] batadv0: Device is already in use.
[  108.012249][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'.
[  108.487759][ T8555] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  108.490741][ T8555] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  108.496593][ T8555] block nbd1: shutting down sockets
[  108.797184][ T8584] __nla_validate_parse: 5 callbacks suppressed
[  108.797201][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'.
[  108.881552][ T8592] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  108.899881][ T8592] bridge0: port 3(batadv0) entered disabled state
[  108.925520][ T8592] bridge_slave_0: left allmulticast mode
[  108.927881][ T8592] bridge_slave_0: left promiscuous mode
[  108.930336][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.950217][ T8592] bridge_slave_1: left allmulticast mode
[  108.959641][ T8592] bridge_slave_1: left promiscuous mode
[  108.962133][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.982198][ T8592] bond0: (slave bond_slave_0): Releasing backup interface
[  109.032594][ T8592] bond0: (slave bond_slave_1): Releasing backup interface
[  109.074852][ T8592] team0: Port device team_slave_0 removed
[  109.092170][ T8592] team0: Port device team_slave_1 removed
[  109.097297][ T8592] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.100639][ T8592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.112978][ T8592] batman_adv: batadv0: Interface deactivated: 26
[  109.116104][ T8592] batman_adv: batadv0: Removing interface: 26
[  109.140437][ T8592] team0: Port device geneve0 removed
[  109.146871][ T8592] bond1: (slave bridge2): Releasing active interface
[  109.151827][ T8595] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  109.161165][ T8595] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.489583][ T8620] xt_policy: neither incoming nor outgoing policy selected
[  109.539319][ T8626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.851342][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1167'.
[  109.854222][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1167'.
[  110.147690][ T8673] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1173'.
[  110.165847][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1174'.
[  110.261661][ T8678] lo speed is unknown, defaulting to 1000
[  110.727289][ T8700] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.816246][ T8700] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.900620][ T8700] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.962765][ T8700] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.034145][ T8700] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.044744][ T8700] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.056895][ T8700] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.105132][ T8700] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.399593][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'.
[  111.412152][ T8725] erspan0: entered promiscuous mode
[  111.417861][ T8725] bridge1: port 1(macvlan0) entered blocking state
[  111.420669][ T8725] bridge1: port 1(macvlan0) entered disabled state
[  111.424486][ T8725] macvlan0: entered allmulticast mode
[  111.426531][ T8725] erspan0: entered allmulticast mode
[  111.434747][ T8725] macvlan0: entered promiscuous mode
[  111.443893][ T8720] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1191'.
[  111.671338][ T8740] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  111.677196][ T8740] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  111.754572][ T8748] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.794748][ T8752] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1205'.
[  111.880995][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'.
[  112.034340][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1218'.
[  112.039594][ T8779] validate_nla: 2 callbacks suppressed
[  112.039609][ T8779] netlink: 'syz.2.1218': attribute type 4 has an invalid length.
[  113.167286][ T8873] lo speed is unknown, defaulting to 1000
[  113.517645][ T8887] macsec0: entered promiscuous mode
[  113.519289][ T8887] team0: entered promiscuous mode
[  113.520917][ T8887] team_slave_0: entered promiscuous mode
[  113.524400][ T8887] team_slave_1: entered promiscuous mode
[  113.526492][ T8887] macsec0: entered allmulticast mode
[  113.528180][ T8887] team0: entered allmulticast mode
[  113.529692][ T8887] team_slave_0: entered allmulticast mode
[  113.531371][ T8887] team_slave_1: entered allmulticast mode
[  113.535956][ T8887] team0: Device macsec0 is already an upper device of the team interface
[  113.540065][ T8887] team0: left allmulticast mode
[  113.541618][ T8887] team_slave_0: left allmulticast mode
[  113.546438][ T8887] team_slave_1: left allmulticast mode
[  113.548134][ T8887] team0: left promiscuous mode
[  113.549595][ T8887] team_slave_0: left promiscuous mode
[  113.551384][ T8887] team_slave_1: left promiscuous mode
[  114.917579][ T8855] Set syz1 is full, maxelem 65536 reached
[  115.099080][ T8977] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003
[  115.124104][ T8981] __nla_validate_parse: 4 callbacks suppressed
[  115.124115][ T8981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1311'.
[  115.373409][ T8993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 52052 - 0
[  115.376118][ T8993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 52052 - 0
[  115.378801][ T8993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 52052 - 0
[  115.392416][ T8993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 52052 - 0
[  115.395692][ T8993] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 40882 - 0
[  115.398418][ T8993] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 40882 - 0
[  115.401694][ T8993] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 40882 - 0
[  115.405938][ T8993] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 40882 - 0
[  115.409628][ T8993] geneve2: entered promiscuous mode
[  115.411634][ T8993] geneve2: entered allmulticast mode
[  116.117067][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1334'.
[  116.467513][ T9047] sctp: [Deprecated]: syz.0.1340 (pid 9047) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.467513][ T9047] Use struct sctp_sack_info instead
[  116.555650][ T9069] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1351'.
[  116.709598][ T9076] lo speed is unknown, defaulting to 1000
[  116.879493][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'.
[  117.090579][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1364'.
[  117.419495][ T9127] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  117.524201][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'.
[  117.802972][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'.
[  118.332426][ T9189] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1391'.
[  118.369821][ T9191] netlink: 'syz.2.1392': attribute type 12 has an invalid length.
[  118.378262][ T9191] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1392'.
[  118.600470][ T9204] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1398'.
[  118.675606][ T9209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.313758][ T9243] bridge0: port 1(syz_tun) entered blocking state
[  119.320450][ T9243] bridge0: port 1(syz_tun) entered disabled state
[  119.338318][ T9243] syz_tun: entered allmulticast mode
[  119.346524][ T9243] syz_tun: left allmulticast mode
[  119.348782][ T9246] 0: renamed from hsr_slave_1
[  119.356088][ T9246] 0: entered allmulticast mode
[  119.360380][ T9246] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  119.671931][ T9251] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  119.849093][ T9261] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  119.887591][ T9262] IPv6: sit2: Disabled Multicast RS
[  120.162105][ T9278] sctp: [Deprecated]: syz.2.1427 (pid 9278) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.162105][ T9278] Use struct sctp_sack_info instead
[  120.947515][ T9315] netlink: 'syz.2.1444': attribute type 10 has an invalid length.
[  120.962510][ T9315] batadv0: left promiscuous mode
[  120.971803][ T9315] batadv0: left allmulticast mode
[  120.984734][ T9315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.989542][ T9315] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  121.253536][ T9327] tipc: MTU too low for tipc bearer
[  121.411410][ T9333] lo speed is unknown, defaulting to 1000
[  121.703397][ T9337] __nla_validate_parse: 5 callbacks suppressed
[  121.703420][ T9337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1454'.
[  121.721907][ T9337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'.
[  121.727453][ T9337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1454'.
[  121.731293][ T9337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1454'.
[  122.159837][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'.
[  122.176448][ T9364] netlink: 'syz.2.1465': attribute type 18 has an invalid length.
[  122.183828][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'.
[  122.192467][ T9364] netlink: 'syz.2.1465': attribute type 18 has an invalid length.
[  122.433673][ T9371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.777160][ T9386] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  122.780167][ T9386] tipc: Enabled bearer <udp:syz2>, priority 10
[  122.851063][ T9405] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  122.854072][ T9405] tipc: Enabled bearer <udp:syz2>, priority 10
[  122.912859][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  122.922048][ T9409] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1483'.
[  122.982456][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  123.104461][ T9427] netlink: 'syz.2.1492': attribute type 6 has an invalid length.
[  123.122607][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  123.129688][ T9431] veth2: entered allmulticast mode
[  123.164664][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'.
[  123.182572][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  123.230236][ T9439] GUP no longer grows the stack in syz.0.1498 (9439): 200000006000-20000000a000 (200000005000)
[  123.238341][ T9439] CPU: 0 UID: 0 PID: 9439 Comm: syz.0.1498 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  123.238369][ T9439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.238381][ T9439] Call Trace:
[  123.238388][ T9439]  <TASK>
[  123.238438][ T9439]  dump_stack_lvl+0x189/0x250
[  123.238472][ T9439]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.238492][ T9439]  ? __pfx__printk+0x10/0x10
[  123.238520][ T9439]  ? find_vma+0xe7/0x160
[  123.238553][ T9439]  __get_user_pages+0x2a60/0x30b0
[  123.238605][ T9439]  ? __pfx___get_user_pages+0x10/0x10
[  123.238634][ T9439]  __gup_longterm_locked+0xd66/0x15b0
[  123.238658][ T9439]  ? try_grab_folio_fast+0x1be/0x4f0
[  123.238686][ T9439]  ? gup_fast_fallback+0x1afc/0x2260
[  123.238707][ T9439]  gup_fast_fallback+0x1cd4/0x2260
[  123.238753][ T9439]  ? __pfx_gup_fast_fallback+0x10/0x10
[  123.238770][ T9439]  ? trace_contention_end+0x39/0x120
[  123.238791][ T9439]  ? __mutex_lock+0x330/0xe80
[  123.238813][ T9439]  ? is_valid_gup_args+0x11f/0x200
[  123.238833][ T9439]  ? get_user_pages_fast+0x4d/0xb0
[  123.238853][ T9439]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  123.238880][ T9439]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  123.238894][ T9439]  ? wait_for_space+0x24d/0x2d0
[  123.238919][ T9439]  iov_iter_get_pages2+0x5e/0xa0
[  123.238943][ T9439]  __se_sys_vmsplice+0x548/0x10d0
[  123.238985][ T9439]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  123.239006][ T9439]  ? __pfx_futex_wait+0x10/0x10
[  123.239032][ T9439]  ? __lock_acquire+0xab9/0xd20
[  123.239105][ T9439]  ? do_pipe2+0xf7/0x170
[  123.239133][ T9439]  ? rcu_is_watching+0x15/0xb0
[  123.239157][ T9439]  ? do_syscall_64+0xbe/0x3b0
[  123.239180][ T9439]  do_syscall_64+0xfa/0x3b0
[  123.239195][ T9439]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.239211][ T9439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.239228][ T9439]  ? exc_page_fault+0x9f/0xf0
[  123.239262][ T9439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.239279][ T9439] RIP: 0033:0x7f6ed3d8e9a9
[  123.239298][ T9439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.239314][ T9439] RSP: 002b:00007f6ed4b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  123.239332][ T9439] RAX: ffffffffffffffda RBX: 00007f6ed3fb5fa0 RCX: 00007f6ed3d8e9a9
[  123.239343][ T9439] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  123.239353][ T9439] RBP: 00007f6ed3e10d69 R08: 0000000000000000 R09: 0000000000000000
[  123.239363][ T9439] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  123.239372][ T9439] R13: 0000000000000000 R14: 00007f6ed3fb5fa0 R15: 00007ffe71da8798
[  123.239396][ T9439]  </TASK>
[  123.339605][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  123.383068][ T9440] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  123.386179][ T9442] netlink: 'syz.2.1499': attribute type 32 has an invalid length.
[  123.451681][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  123.472426][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  123.612437][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  123.865843][ T9477] bridge0: port 3(syz_tun) entered blocking state
[  123.868794][ T9477] bridge0: port 3(syz_tun) entered disabled state
[  123.871642][ T9477] syz_tun: entered allmulticast mode
[  123.877631][ T9477] syz_tun: entered promiscuous mode
[  123.891400][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'.
[  123.895276][  T792] tipc: Node number set to 3198130245
[  123.906819][ T9479] ip6gretap0: entered promiscuous mode
[  123.909275][ T9479] macvtap2: entered promiscuous mode
[  123.911719][ T9479] macvtap2: entered allmulticast mode
[  123.914866][ T9479] ip6gretap0: entered allmulticast mode
[  123.929688][ T9479] ip6gretap0: left allmulticast mode
[  123.931703][ T9479] ip6gretap0: left promiscuous mode
[  124.174923][ T9497] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  125.308415][ T9566] netlink: 'syz.0.1555': attribute type 13 has an invalid length.
[  125.310898][ T9566] netlink: 'syz.0.1555': attribute type 17 has an invalid length.
[  125.328933][ T9566] gretap0: refused to change device tx_queue_len
[  125.331181][  T791] lo speed is unknown, defaulting to 1000
[  125.333773][  T791] syz0: Port: 1 Link ACTIVE
[  125.336335][  T791] lo speed is unknown, defaulting to 1000
[  125.383691][ T9568] "syz.2.1556" (9568) uses obsolete ecb(arc4) skcipher
[  126.043664][ T9641] netlink: 'syz.2.1586': attribute type 10 has an invalid length.
[  126.120835][ T9641] dummy0: entered promiscuous mode
[  126.124802][ T9641] bridge0: port 1(dummy0) entered blocking state
[  126.127070][ T9641] bridge0: port 1(dummy0) entered disabled state
[  126.129113][ T9641] dummy0: entered allmulticast mode
[  126.145055][ T9641] bridge0: port 1(dummy0) entered blocking state
[  126.147160][ T9641] bridge0: port 1(dummy0) entered forwarding state
[  126.466587][ T9674] netlink: 'syz.1.1596': attribute type 10 has an invalid length.
[  126.511935][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.525047][ T9674] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  127.123676][ T9718] vlan4: entered promiscuous mode
[  127.125333][ T9718] bridge0: entered promiscuous mode
[  127.504543][ T9744] netlink: 'syz.0.1621': attribute type 1 has an invalid length.
[  127.532482][ T9744] bond3: entered promiscuous mode
[  127.534038][ T9744] bond3: entered allmulticast mode
[  127.563398][ T9744] __nla_validate_parse: 12 callbacks suppressed
[  127.563416][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'.
[  127.574812][ T9744] bridge5: the hash_elasticity option has been deprecated and is always 16
[  127.765087][ T9761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1629'.
[  127.902436][    C1] net_ratelimit: 13 callbacks suppressed
[  127.902448][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  127.931990][ T9773] veth5: entered promiscuous mode
[  127.982604][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  127.990893][ T9776] tun0: tun_chr_ioctl cmd 1074025675
[  127.997419][ T9776] tun0: persist enabled
[  127.999987][ T9776] tun0: tun_chr_ioctl cmd 1074025675
[  128.002250][ T9776] tun0: persist enabled
[  128.176515][ T9792] Bluetooth: MGMT ver 1.23
[  128.355423][ T9808] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1652'.
[  128.942524][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  129.022932][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  129.168855][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'.
[  129.274204][ T9863] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  129.473121][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'.
[  129.577209][ T9893] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  129.579649][ T9893] macsec1: entered allmulticast mode
[  129.581267][ T9893] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  129.721080][ T9893] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  129.725630][ T9893] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  129.982523][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  130.062522][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  130.278834][ T9933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.419633][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'.
[  130.716615][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'.
[  131.022458][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  131.031462][ T9966] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0
[  131.036041][ T9966] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0
[  131.039656][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1723'.
[  131.043138][ T9966] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0
[  131.045809][ T9966] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0
[  131.049326][ T9966] geneve3: entered promiscuous mode
[  131.102527][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  131.171761][ T9977] lo speed is unknown, defaulting to 1000
[  131.302029][ T9987] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  131.310996][ T9987] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1733'.
[  131.343591][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1734'.
[  131.599608][T10000] netlink: 'syz.0.1738': attribute type 3 has an invalid length.
[  132.062428][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  133.102432][    C1] net_ratelimit: 1 callbacks suppressed
[  133.102462][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  133.177732][T10101] __nla_validate_parse: 1 callbacks suppressed
[  133.177745][T10101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1779'.
[  133.183503][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  133.186169][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'.
[  133.419682][T10125] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1789'.
[  134.030705][T10162] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1807'.
[  134.128103][T10164] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.142399][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  134.179140][T10164] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.222510][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  134.250431][T10164] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.280262][T10174] openvswitch: netlink: Actions may not be safe on all matching packets
[  134.304196][T10164] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.377581][T10164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.390855][T10164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.404032][T10164] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.416682][T10164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.182383][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  135.262450][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  135.389002][T10219] macvlan1: entered promiscuous mode
[  135.391504][T10219] ipvlan0: entered promiscuous mode
[  135.395606][T10219] ipvlan0: left promiscuous mode
[  135.397364][T10219] macvlan1: left promiscuous mode
[  135.581782][T10233] lo speed is unknown, defaulting to 1000
[  135.612584][ T5834] Bluetooth: hci2: link tx timeout
[  135.614430][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.618067][ T5834] Bluetooth: hci2: link tx timeout
[  135.619683][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.930647][T10257] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  136.222970][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  136.312429][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  136.416898][T10290] rdma_op ffff888104e2d1f0 conn xmit_rdma 0000000000000000
[  136.446522][T10295] openvswitch: netlink: Missing key (keys=40, expected=80)
[  136.489659][T10300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1866'.
[  136.529828][T10304] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1868'.
[  136.571260][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1869'.
[  136.575876][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1869'.
[  136.937097][T10266] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  137.359086][T10312] bond0: (slave batadv0): Releasing backup interface
[  137.379755][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1871'.
[  137.411689][T10312] bond0: (slave bond_slave_0): Releasing backup interface
[  137.430114][T10312] bond0: (slave bond_slave_1): Releasing backup interface
[  137.453479][T10312] team0: Port device team_slave_0 removed
[  137.463000][T10312] team0: Port device team_slave_1 removed
[  137.465790][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.485531][T10312] bond2: (slave geneve2): Releasing active interface
[  137.488236][T10312] geneve2: left promiscuous mode
[  137.511239][T10312] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.515117][T10312] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.518389][T10312] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.521905][T10312] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.662668][ T5834] Bluetooth: hci2: command 0x0419 tx timeout
[  137.673968][T10333] netlink: 'syz.0.1879': attribute type 4 has an invalid length.
[  137.819306][T10345] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1885'.
[  138.194649][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1901'.
[  138.300757][T10386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1905'.
[  138.304495][    C1] net_ratelimit: 2 callbacks suppressed
[  138.304510][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  138.382427][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  138.858054][T10430] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1927'.
[  138.936706][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'.
[  138.939694][T10438] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1930'.
[  138.946105][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'.
[  139.321549][T10469] netlink: 'syz.2.1942': attribute type 1 has an invalid length.
[  139.328057][T10469] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1942'.
[  139.342667][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  139.422439][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  139.503804][T10483] netlink: 'syz.0.1948': attribute type 9 has an invalid length.
[  139.530705][T10485] erspan0: left promiscuous mode
[  139.555562][T10485] macvlan0 (unregistering): left allmulticast mode
[  139.558370][T10485] macvlan0 (unregistering): left promiscuous mode
[  139.561541][T10485] bridge1: port 1(macvlan0) entered disabled state
[  139.804717][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'.
[  140.264213][  T791] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  140.270179][  T791] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  140.283913][  T791] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  140.382516][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  140.472368][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  141.065029][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'.
[  141.240314][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'.
[  141.244702][T10590] netlink: 'syz.2.1984': attribute type 21 has an invalid length.
[  141.282490][T10592] veth0_to_bridge: entered promiscuous mode
[  141.292734][T10592] veth0_to_bridge: left promiscuous mode
[  141.298985][T10594] netlink: 'syz.2.1985': attribute type 1 has an invalid length.
[  141.321163][T10594] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.341879][T10594] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.348943][T10594] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  141.354268][T10594] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  141.394653][T10600] veth7: entered promiscuous mode
[  141.399318][T10600] bond2: (slave veth7): Enslaving as an active interface with a down link
[  141.422437][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  141.456009][T10594] netlink: 'syz.2.1985': attribute type 11 has an invalid length.
[  141.502398][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  141.549021][T10610] pim6reg1: entered promiscuous mode
[  141.550968][T10610] pim6reg1: entered allmulticast mode
[  141.836757][T10626] !: renamed from dummy0 (while UP)
[  141.885044][T10626] lo speed is unknown, defaulting to 1000
[  142.337551][T10652] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  142.461006][T10658] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  142.469160][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  142.552341][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  143.337275][T10692] vlan0: entered promiscuous mode
[  143.381556][T10697] __nla_validate_parse: 7 callbacks suppressed
[  143.381566][T10697] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2022'.
[  143.496306][T10706] netlink: 'syz.1.2025': attribute type 2 has an invalid length.
[  143.503603][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  143.510574][T10706] netlink: 'syz.1.2025': attribute type 1 has an invalid length.
[  143.518051][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  143.582362][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  143.747215][T10726] netlink: 'syz.2.2031': attribute type 7 has an invalid length.
[  143.771687][T10729] netlink: 'syz.1.2032': attribute type 2 has an invalid length.
[  143.784009][T10729] netlink: 'syz.1.2032': attribute type 2 has an invalid length.
[  143.886978][T10739] netlink: del zone limit has 4 unknown bytes
[  144.040471][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2038'.
[  144.184474][T10748] nbd: socks must be embedded in a SOCK_ITEM attr
[  144.217272][  T739] 
[  144.218255][  T739] ======================================================
[  144.220819][  T739] WARNING: possible circular locking dependency detected
[  144.223430][  T739] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[  144.227215][  T739] ------------------------------------------------------
[  144.229807][  T739] kworker/u10:3/739 is trying to acquire lock:
[  144.232103][  T739] ffff888112c52358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  144.235554][  T739] 
[  144.235554][  T739] but task is already holding lock:
[  144.238212][  T739] ffff888011a40188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  144.241727][  T739] 
[  144.241727][  T739] which lock already depends on the new lock.
[  144.241727][  T739] 
[  144.245469][  T739] 
[  144.245469][  T739] the existing dependency chain (in reverse order) is:
[  144.248723][  T739] 
[  144.248723][  T739] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  144.251825][  T739]        lock_acquire+0x120/0x360
[  144.253701][  T739]        down_write+0x96/0x1f0
[  144.255499][  T739]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  144.257826][  T739]        nbd_start_device+0x16c/0xac0
[  144.259828][  T739]        nbd_genl_connect+0x135b/0x18f0
[  144.261894][  T739]        genl_family_rcv_msg_doit+0x215/0x300
[  144.264170][  T739]        genl_rcv_msg+0x60e/0x790
[  144.266062][  T739]        netlink_rcv_skb+0x208/0x470
[  144.268031][  T739]        genl_rcv+0x28/0x40
[  144.269715][  T739]        netlink_unicast+0x75c/0x8e0
[  144.271697][  T739]        netlink_sendmsg+0x805/0xb30
[  144.273635][  T739]        __sock_sendmsg+0x21c/0x270
[  144.275567][  T739]        ____sys_sendmsg+0x505/0x830
[  144.277485][  T739]        ___sys_sendmsg+0x21f/0x2a0
[  144.279385][  T739]        __x64_sys_sendmsg+0x19b/0x260
[  144.281417][  T739]        do_syscall_64+0xfa/0x3b0
[  144.283292][  T739]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.285680][  T739] 
[  144.285680][  T739] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  144.288553][  T739]        lock_acquire+0x120/0x360
[  144.290428][  T739]        __mutex_lock+0x182/0xe80
[  144.292303][  T739]        refcount_dec_and_mutex_lock+0x30/0xa0
[  144.294632][  T739]        nbd_config_put+0x2c/0x790
[  144.296534][  T739]        nbd_release+0xfe/0x140
[  144.298384][  T739]        bdev_release+0x536/0x650
[  144.300225][  T739]        blkdev_release+0x15/0x20
[  144.302063][  T739]        __fput+0x44c/0xa70
[  144.303719][  T739]        fput_close_sync+0x119/0x200
[  144.305749][  T739]        __x64_sys_close+0x7f/0x110
[  144.307718][  T739]        do_syscall_64+0xfa/0x3b0
[  144.309625][  T739]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.311934][  T739] 
[  144.311934][  T739] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  144.314802][  T739]        validate_chain+0xb9b/0x2140
[  144.316821][  T739]        __lock_acquire+0xab9/0xd20
[  144.318791][  T739]        lock_acquire+0x120/0x360
[  144.320677][  T739]        __mutex_lock+0x182/0xe80
[  144.322525][  T739]        __del_gendisk+0x129/0x9e0
[  144.324363][  T739]        del_gendisk+0xe8/0x160
[  144.326146][  T739]        nbd_dev_remove_work+0x47/0xe0
[  144.328111][  T739]        process_scheduled_works+0xae1/0x17b0
[  144.330357][  T739]        worker_thread+0x8a0/0xda0
[  144.332277][  T739]        kthread+0x711/0x8a0
[  144.334033][  T739]        ret_from_fork+0x3fc/0x770
[  144.335980][  T739]        ret_from_fork_asm+0x1a/0x30
[  144.337942][  T739] 
[  144.337942][  T739] other info that might help us debug this:
[  144.337942][  T739] 
[  144.341652][  T739] Chain exists of:
[  144.341652][  T739]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  144.341652][  T739] 
[  144.346956][  T739]  Possible unsafe locking scenario:
[  144.346956][  T739] 
[  144.349943][  T739]        CPU0                    CPU1
[  144.352018][  T739]        ----                    ----
[  144.354150][  T739]   rlock(&set->update_nr_hwq_lock);
[  144.356228][  T739]                                lock(&nbd->config_lock);
[  144.359040][  T739]                                lock(&set->update_nr_hwq_lock);
[  144.362120][  T739]   lock(&disk->open_mutex);
[  144.363841][  T739] 
[  144.363841][  T739]  *** DEADLOCK ***
[  144.363841][  T739] 
[  144.366837][  T739] 3 locks held by kworker/u10:3/739:
[  144.368712][  T739]  #0: ffff888107b78148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  144.372685][  T739]  #1: ffffc9000465fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  144.377180][  T739]  #2: ffff888011a40188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  144.380842][  T739] 
[  144.380842][  T739] stack backtrace:
[  144.383001][  T739] CPU: 1 UID: 0 PID: 739 Comm: kworker/u10:3 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  144.383016][  T739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.383024][  T739] Workqueue: nbd-del nbd_dev_remove_work
[  144.383041][  T739] Call Trace:
[  144.383047][  T739]  <TASK>
[  144.383053][  T739]  dump_stack_lvl+0x189/0x250
[  144.383069][  T739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.383083][  T739]  ? __pfx__printk+0x10/0x10
[  144.383100][  T739]  ? print_lock_name+0xde/0x100
[  144.383116][  T739]  print_circular_bug+0x2ee/0x310
[  144.383133][  T739]  check_noncircular+0x134/0x160
[  144.383149][  T739]  validate_chain+0xb9b/0x2140
[  144.383165][  T739]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  144.383183][  T739]  ? arch_stack_walk+0x11c/0x150
[  144.383202][  T739]  __lock_acquire+0xab9/0xd20
[  144.383215][  T739]  ? __del_gendisk+0x129/0x9e0
[  144.383229][  T739]  lock_acquire+0x120/0x360
[  144.383240][  T739]  ? __del_gendisk+0x129/0x9e0
[  144.383255][  T739]  ? check_path+0x21/0x40
[  144.383270][  T739]  __mutex_lock+0x182/0xe80
[  144.383283][  T739]  ? __del_gendisk+0x129/0x9e0
[  144.383299][  T739]  ? __del_gendisk+0x129/0x9e0
[  144.383314][  T739]  ? __pfx___mutex_lock+0x10/0x10
[  144.383326][  T739]  ? __pfx___might_resched+0x10/0x10
[  144.383343][  T739]  ? __lock_acquire+0xab9/0xd20
[  144.383354][  T739]  ? disk_del_events+0xb5/0x210
[  144.383370][  T739]  ? __del_gendisk+0xc1/0x9e0
[  144.383385][  T739]  __del_gendisk+0x129/0x9e0
[  144.383399][  T739]  ? del_gendisk+0xe0/0x160
[  144.383414][  T739]  ? __pfx___del_gendisk+0x10/0x10
[  144.383430][  T739]  ? down_read+0x1ad/0x2e0
[  144.383443][  T739]  del_gendisk+0xe8/0x160
[  144.383458][  T739]  nbd_dev_remove_work+0x47/0xe0
[  144.383472][  T739]  ? process_scheduled_works+0x9ef/0x17b0
[  144.383493][  T739]  process_scheduled_works+0xae1/0x17b0
[  144.383514][  T739]  ? __pfx_process_scheduled_works+0x10/0x10
[  144.383532][  T739]  worker_thread+0x8a0/0xda0
[  144.383553][  T739]  kthread+0x711/0x8a0
[  144.383569][  T739]  ? __pfx_worker_thread+0x10/0x10
[  144.383582][  T739]  ? __pfx_kthread+0x10/0x10
[  144.383598][  T739]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.383616][  T739]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.383628][  T739]  ? __pfx_kthread+0x10/0x10
[  144.383643][  T739]  ret_from_fork+0x3fc/0x770
[  144.383656][  T739]  ? __pfx_ret_from_fork+0x10/0x10
[  144.383670][  T739]  ? __switch_to_asm+0x39/0x70
[  144.383684][  T739]  ? __switch_to_asm+0x33/0x70
[  144.383698][  T739]  ? __pfx_kthread+0x10/0x10
[  144.383713][  T739]  ret_from_fork_asm+0x1a/0x30
[  144.383732][  T739]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  144.542337][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  144.581124][ T5830] syz_tun (unregistering): left allmulticast mode
[  144.586100][ T5830] syz_tun (unregistering): left promiscuous mode
[  144.588201][ T5830] bridge0: port 3(syz_tun) entered disabled state
[  144.622443][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  145.582412][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  145.662389][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  146.622551][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  146.702548][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  147.662423][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  148.702491][    C1] net_ratelimit: 1 callbacks suppressed
[  148.702506][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  148.782417][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  149.742451][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  149.822464][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  150.782446][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  150.862445][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  151.822666][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  151.902481][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  152.862508][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  152.942569][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  153.912381][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  153.982458][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
09:05:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8fb501c0 RCX=dffffc0000000000 RDX=ffffffff8fb501b8
RSI=ffffffff903074ec RDI=ffffffff8be28ba0 RBP=ffffffff8fb501b8 RSP=ffffc90007bbf198
R8 =0000000000000003 R9 =0000000000000000 R10=ffffc90007bbf318 R11=fffff52000f77e65
R12=ffffffff81697ef3 R13=ffffffff8fb501b8 R14=ffffc90007bbf2c8 R15=ffffffff8fb501bc
RIP=ffffffff8172bd4e RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6ed4b486c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6f4315a108 CR3=00000000381d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faf96586478 00007faf96586450 XMM03=00007faf96586488 00007faf96586480
XMM04=00007faf970ed100 00007faf96586440 XMM05=00007faf96586458 00007faf965864a0
XMM06=00007faf96586498 00007faf96586490 XMM07=00007faf96586488 00007faf96586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007faf96411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc9000465ee10
R8 =ffff888106cc8237 R9 =1ffff11020d99046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000003af000 CR3=000000011daf8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000251 0000000036320030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff0000ff00 XMM09=0000000000000251 0000000036320030
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
