last executing test programs:

999.132494ms ago: executing program 1 (id=1726):
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

998.305903ms ago: executing program 1 (id=1728):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

997.985313ms ago: executing program 2 (id=1729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)

941.011477ms ago: executing program 2 (id=1731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)

940.634707ms ago: executing program 1 (id=1732):
close(0xffffffffffffffff)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r6 = accept4$inet(r5, 0x0, 0x0, 0x80000)
shutdown(r5, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r7, 0x104, 0x7, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="17c09f87c34a080a4f53a247ce195a7b0354981166746820f2fd86fb3153a911859741a00f99b7bdc555f8", 0x2b}], 0x1}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

940.398813ms ago: executing program 2 (id=1733):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000380)="0e7b7e8ccd363ce2d7c1d943522e113c52834e664e556fdf0c8f464d69cdb8c0a958b7b568052e2d6b57f3d34a98fec7d1701313c45116882fa083af7eeb05ef5599d51b785bc02f2eef6eefecd4c8fce0890671a10d2ce696ebfd2f106315ffc2f7d44a3292", 0x66}, {&(0x7f0000000400)="607d9fdc5cd84a7bf57ca42eaa4d9ff7e6c05d18f46831c70a466fa1687f8250872bf92114d9b61f740a3a732ed1acec977b4b4704909b281eb269562209f6649b54ab38dcb2adec2a5336268a7ea118429d0b00b03e8370a8c930018ea2e31773ea01781516d04d8518466e955df9ca9aff89bd19bcea02f767f25aefe967137db06115f612ba59a99e66aab687f054dd7a86235babd319413c9caaa4fb843a5e65c8ff40d61fd9decd5bcca1ab0eed97ff8092fc9d", 0xb6}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

619.827168ms ago: executing program 0 (id=1741):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xff12)

619.561993ms ago: executing program 0 (id=1742):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

559.881203ms ago: executing program 0 (id=1743):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @empty}, 0x10000002}}, 0x2e)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa2"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x24000045)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20000010)
bind$alg(r3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))

559.50597ms ago: executing program 0 (id=1744):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004300)="dc53410c028336dd2edc80341a8ed1eddb7a666f426f671c2334281380dd7b98", 0x20}, {&(0x7f0000001e40)="4cdd3b8b18257694ae8b637b5c4147d1a6dd59775e694104a33f3f06f1136766", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee95cf0d0d5585e3279efe4fd0b6dafb93eee8b0afc609e87ce7a60ead47b8048d24b39011f56d7a3e1e368152a5125e29020a8fa7d4910a423ba628d2adf685f7851c5ac3c9d7997b095928fdec5153e90eaf25", 0x57}, {&(0x7f0000006cc0)="9adaf615e5f5caf2dbb930eb4bcf83a7d5ab7d2880e4d75510dc058f0589b593507d47a2ca9b9e99e17e94105b4e27d6d5d400a38307094ba788d8e215f310fdddb0ca1e2c967def94c13173db119bbdeac74519", 0x54}], 0x2}}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007300)="f572878c7aefc200e078de78443fc4311bb2a13cf61d1e996f971ab8d5877415908a51a4b6bdbdb894e6249076291816fd2802903228a988ffcb56631062bc03b6746ec5c74348c7676ee2286ffc8da5b067d95680006add570c0ff956bfc76ad826ddbfac9d21f02a27f380600eb887e680b3b16351cfa1d0bac3d2ae824799bd33026c015f12fbf26d015ae8f7a3d4e390c3228ffa49dbf546035f34a324ee5f6508f20e799d6fac80b3e283eb1e5e6bde74c36a16a94ecf30e49205a02c96502764a2d1f073f9a8fc52d14344c3660adf23b8b5ced27702066b465619", 0xde}, {&(0x7f0000007400)="2007958f55c3d9b287d30db0fb5ae3315c802a94fd6b45d491c96f01932d498bf38d4f4a939c2dda011380827e0027e5b1550379df10d44eae40bc853e152b6d0b639e15585c6a1a02f872741c1f19c86ca55a3f912a7dadf2922bfbf003af2c5a417734db649c805cd509", 0x6b}], 0x2}}], 0x3, 0x0)

490.111676ms ago: executing program 0 (id=1745):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

489.939485ms ago: executing program 0 (id=1746):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000340), 0x4)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001000)=""/253, 0xfd}], 0x1}, 0x2)

66.22168ms ago: executing program 1 (id=1747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

65.932569ms ago: executing program 2 (id=1748):
r0 = socket$kcm(0x2d, 0x2, 0x0)
getpeername(r0, 0x0, 0x0)

65.744141ms ago: executing program 2 (id=1749):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x6e, 0x0, 0x1}, 0x28)
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

374.179µs ago: executing program 1 (id=1750):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

90.809µs ago: executing program 2 (id=1751):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 1 (id=1752):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x48000000, 0x0, 0x0, 0x1, 0x2000, 0x20}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56424' (ED25519) to the list of known hosts.
syzkaller login: [   41.431829][ T5757] cgroup: Unknown subsys name 'net'
[   41.573264][ T5757] cgroup: Unknown subsys name 'cpuset'
[   41.579465][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.276205][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.250787][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.253561][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.256066][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.259016][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.261565][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.278203][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.281781][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.284258][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.286807][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.291563][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.323960][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.327351][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.330149][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.333059][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.335684][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.534855][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   47.568505][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   47.602285][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   47.665168][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.667723][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.670315][ T5829] bridge_slave_0: entered allmulticast mode
[   47.673090][ T5829] bridge_slave_0: entered promiscuous mode
[   47.680640][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.682806][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.684932][ T5829] bridge_slave_1: entered allmulticast mode
[   47.687682][ T5829] bridge_slave_1: entered promiscuous mode
[   47.725841][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.728217][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.731288][ T5833] bridge_slave_0: entered allmulticast mode
[   47.734117][ T5833] bridge_slave_0: entered promiscuous mode
[   47.743701][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.754708][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.756919][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.759794][ T5833] bridge_slave_1: entered allmulticast mode
[   47.762507][ T5833] bridge_slave_1: entered promiscuous mode
[   47.766418][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.786412][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.788619][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.791828][ T5838] bridge_slave_0: entered allmulticast mode
[   47.794458][ T5838] bridge_slave_0: entered promiscuous mode
[   47.820238][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.822554][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.824782][ T5838] bridge_slave_1: entered allmulticast mode
[   47.827446][ T5838] bridge_slave_1: entered promiscuous mode
[   47.831540][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.844553][ T5829] team0: Port device team_slave_0 added
[   47.848660][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.862538][ T5829] team0: Port device team_slave_1 added
[   47.865815][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.892382][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.931942][ T5833] team0: Port device team_slave_0 added
[   47.934396][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.936555][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.946359][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.952627][ T5838] team0: Port device team_slave_0 added
[   47.956314][ T5833] team0: Port device team_slave_1 added
[   47.958610][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.961889][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.970618][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.991367][ T5838] team0: Port device team_slave_1 added
[   47.997881][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.000374][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.008264][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.029711][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.031776][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.039730][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.044647][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.047263][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.059493][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.079262][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.081408][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.089308][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.112223][ T5829] hsr_slave_0: entered promiscuous mode
[   48.114681][ T5829] hsr_slave_1: entered promiscuous mode
[   48.154827][ T5838] hsr_slave_0: entered promiscuous mode
[   48.157135][ T5838] hsr_slave_1: entered promiscuous mode
[   48.159724][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.162245][ T5838] Cannot create hsr debugfs directory
[   48.179567][ T5833] hsr_slave_0: entered promiscuous mode
[   48.181814][ T5833] hsr_slave_1: entered promiscuous mode
[   48.183929][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.186279][ T5833] Cannot create hsr debugfs directory
[   48.406537][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.420395][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.431826][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.443658][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.474622][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.479422][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.489516][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.495835][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.537556][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.545572][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.557337][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.564413][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.638685][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.652837][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.665115][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   48.677619][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.679984][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.694623][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.696885][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.706011][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   48.715442][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.727328][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.729560][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.748086][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.750407][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.757153][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   48.771767][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.774067][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.784638][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.787577][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.814842][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.902486][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.957686][ T5838] veth0_vlan: entered promiscuous mode
[   48.970006][ T5838] veth1_vlan: entered promiscuous mode
[   48.977910][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.008070][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.017422][ T5838] veth0_macvtap: entered promiscuous mode
[   49.027714][ T5838] veth1_macvtap: entered promiscuous mode
[   49.046159][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.054012][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.064243][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.067021][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.070946][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.073636][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.092504][ T5829] veth0_vlan: entered promiscuous mode
[   49.106305][ T5833] veth0_vlan: entered promiscuous mode
[   49.122986][ T5829] veth1_vlan: entered promiscuous mode
[   49.128286][ T5833] veth1_vlan: entered promiscuous mode
[   49.152230][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.154581][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.186362][ T5829] veth0_macvtap: entered promiscuous mode
[   49.186585][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.191275][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.192408][ T5829] veth1_macvtap: entered promiscuous mode
[   49.205768][ T5833] veth0_macvtap: entered promiscuous mode
[   49.221381][ T5833] veth1_macvtap: entered promiscuous mode
[   49.227166][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.236114][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.236336][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.252643][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.255343][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.258028][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.263294][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.273751][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.284524][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.303375][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.306040][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.308610][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.311815][   T53] Bluetooth: hci1: command tx timeout
[   49.313506][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.321096][   T53] Bluetooth: hci0: command tx timeout
[   49.380305][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.387157][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.400208][   T53] Bluetooth: hci2: command tx timeout
[   49.415785][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.421433][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.451457][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.453861][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.498548][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.502332][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.526194][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   49.671430][ T5918] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.800219][ T5931] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   50.025518][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   50.036785][ T5947] dummy0: entered promiscuous mode
[   50.038599][ T5947] macsec1: entered allmulticast mode
[   50.041110][ T5947] dummy0: entered allmulticast mode
[   50.045512][ T5947] dummy0: left allmulticast mode
[   50.051099][ T5947] dummy0: left promiscuous mode
[   50.051690][ T5949] syz.0.20 (5949) used greatest stack depth: 19016 bytes left
[   51.112246][ T6001] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET)
[   51.389580][   T53] Bluetooth: hci0: command tx timeout
[   51.389689][ T5220] Bluetooth: hci1: command tx timeout
[   51.469096][ T5220] Bluetooth: hci2: command tx timeout
[   52.436300][ T5954] Set syz1 is full, maxelem 65536 reached
[   52.717240][ T6038] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   52.725676][ T6038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   52.956666][ T6064] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.958039][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   52.974495][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   52.977364][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   52.981289][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   52.984121][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   52.987266][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   52.991481][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   53.213974][ T6084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   53.469288][ T5220] Bluetooth: hci0: command tx timeout
[   53.479155][ T5220] Bluetooth: hci1: command tx timeout
[   53.550870][ T5220] Bluetooth: hci2: command tx timeout
[   54.289015][ T6167] netlink: 'syz.2.121': attribute type 1 has an invalid length.
[   54.406024][ T6177] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 752
[   54.543484][ T6184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.597191][ T6184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.633483][ T6192] Zero length message leads to an empty skb
[   54.652625][ T6192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.672213][ T6184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.704051][ T6192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.747401][ T6184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.790114][ T6192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.847290][ T6184] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.860072][ T6192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.871736][ T6184] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.881397][ T6184] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.890741][ T6184] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.931612][ T6192] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.947697][ T6192] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.956639][ T6192] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.966677][ T6192] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.549775][ T5220] Bluetooth: hci1: command tx timeout
[   55.551424][ T5220] Bluetooth: hci0: command tx timeout
[   55.629247][   T53] Bluetooth: hci2: command tx timeout
[   55.665911][   T63] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   55.850743][ T6282] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   55.960133][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.962951][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.055488][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.063297][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.107802][ T6289] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.115648][ T6289] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.118388][ T6289] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.121068][ T6289] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.315986][ T6304] netlink: 'syz.2.183': attribute type 2 has an invalid length.
[   56.832041][ T6356] __nla_validate_parse: 20 callbacks suppressed
[   56.832051][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[   56.956045][ T6364] netlink: 27 bytes leftover after parsing attributes in process `syz.1.212'.
[   57.259410][ T6377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.375197][ T6381] xt_bpf: check failed: parse error
[   57.474536][ T6383] syzkaller0: entered promiscuous mode
[   57.476906][ T6383] syzkaller0: entered allmulticast mode
[   57.782069][ T6397] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   58.503773][ T6407] sit1: entered promiscuous mode
[   58.602661][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   58.964616][ T6427] netlink: 'syz.2.239': attribute type 6 has an invalid length.
[   59.669723][ T6457] IPv6: addrconf: prefix option has invalid lifetime
[   59.947649][ T6484] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   59.954299][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   60.204238][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'.
[   60.214632][ T6505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.273'.
[   60.435923][ T6517] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   60.586355][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'.
[   60.592741][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.595276][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.755903][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.758212][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.953900][ T6533] xt_CT: You must specify a L4 protocol and not use inversions on it
[   61.118097][ T6551] netlink: 'syz.1.291': attribute type 11 has an invalid length.
[   61.122102][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'.
[   61.148504][ T6549] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.187343][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'.
[   61.247707][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[   61.267849][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.300403][ T6561] bridge_slave_1 (unregistering): left allmulticast mode
[   61.302601][ T6561] bridge_slave_1 (unregistering): left promiscuous mode
[   61.308861][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.316434][ T6565] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   61.594123][ T6587] syzkaller1: entered promiscuous mode
[   61.595813][ T6587] syzkaller1: entered allmulticast mode
[   61.733785][ T6595] Illegal XDP return value 4294967274 on prog  (id 62) dev N/A, expect packet loss!
[   62.322746][ T6649] __nla_validate_parse: 1 callbacks suppressed
[   62.322756][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'.
[   62.688250][ T6684] warning: `syz.1.354' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.703129][ T6687] geneve1: entered promiscuous mode
[   62.705883][ T6687] geneve1: entered allmulticast mode
[   63.172335][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'.
[   63.213154][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.436666][ T6734] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.441851][ T6734] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.446120][ T6734] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.452227][ T6734] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.000138][ T6804] tipc: Failed to remove unknown binding: 66,3,3/0:596811681/596811682
[   64.208534][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'.
[   64.333588][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.413'.
[   64.442606][ T6828] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.415'.
[   64.446075][ T6828] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   64.450414][ T6828] openvswitch: netlink: Message has 8454 unknown bytes.
[   64.720626][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   64.726729][ T6856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'.
[   64.760955][ T6861] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.430'.
[   65.999331][ T6908] TCP: TCP_TX_DELAY enabled
[   66.023139][ T6911] bridge_slave_0: left allmulticast mode
[   66.024896][ T6911] bridge_slave_0: left promiscuous mode
[   66.026720][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.034840][ T6911] bond0: (slave bond_slave_0): Releasing backup interface
[   66.038161][ T6911] bond0: (slave bond_slave_1): Releasing backup interface
[   66.045651][ T6911] team0: Port device team_slave_0 removed
[   66.048374][ T6911] team0: Port device team_slave_1 removed
[   66.351143][   T29] wlan0: Trigger new scan to find an IBSS to join
[   66.577696][ T6960] netlink: 'syz.2.471': attribute type 29 has an invalid length.
[   66.581967][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'.
[   66.672406][ T6972] netlink: 9 bytes leftover after parsing attributes in process `syz.0.477'.
[   66.675480][ T6972] gretap0: entered promiscuous mode
[   66.710691][ T6977] netlink: 'syz.0.479': attribute type 1 has an invalid length.
[   66.753367][ T6983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.084963][ T7014] tipc: Started in network mode
[   67.086584][ T7014] tipc: Node identity 1a11c15e4b32, cluster identity 4711
[   67.095989][ T7014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.098373][ T7014] syzkaller0: entered promiscuous mode
[   67.100575][ T7014] syzkaller0: entered allmulticast mode
[   67.110188][ T7014] tipc: Resetting bearer <eth:syzkaller0>
[   67.113235][ T7011] tipc: Resetting bearer <eth:syzkaller0>
[   67.120558][ T7011] tipc: Disabling bearer <eth:syzkaller0>
[   67.254434][ T7022] tipc: Started in network mode
[   67.256012][ T7022] tipc: Node identity 26e8ca1b7887, cluster identity 4711
[   67.258205][ T7022] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   67.287360][ T7022] tipc: Resetting bearer <eth:syzkaller0>
[   67.298042][ T7021] tipc: Resetting bearer <eth:syzkaller0>
[   67.709911][   T53] Bluetooth: hci2: command tx timeout
[   67.872140][ T7028] __nla_validate_parse: 3 callbacks suppressed
[   67.872151][ T7028] netlink: 84 bytes leftover after parsing attributes in process `syz.0.501'.
[   68.017016][ T7021] tipc: Disabling bearer <eth:syzkaller0>
[   68.175101][ T7040] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   68.178018][ T7040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.472650][ T7068] netlink: 'syz.0.521': attribute type 30 has an invalid length.
[   68.682554][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[   69.168455][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'.
[   69.172736][ T7122] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   69.175165][ T7122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.308911][   T29] wlan0: Trigger new scan to find an IBSS to join
[   69.809862][ T7174] trusted_key: syz.0.567 sent an empty control message without MSG_MORE.
[   70.049496][ T7196] raw_sendmsg: syz.0.576 forgot to set AF_INET. Fix it!
[   70.204571][ T7210] netlink: 'syz.0.581': attribute type 11 has an invalid length.
[   70.301800][ T7217] netlink: 'syz.2.583': attribute type 9 has an invalid length.
[   70.346823][ T7222] netlink: 248 bytes leftover after parsing attributes in process `syz.0.586'.
[   70.452873][ T7228] netlink: 2 bytes leftover after parsing attributes in process `syz.0.588'.
[   70.455878][ T7228] batadv_slave_1: entered promiscuous mode
[   70.470796][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.499188][ T7224] nbd0: detected capacity change from 0 to 127
[   70.526627][   T55] block nbd0: Receive control failed (result -104)
[   70.842214][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.844409][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.950051][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.598'.
[   71.155389][ T7279] netlink: 'syz.0.603': attribute type 10 has an invalid length.
[   71.163906][ T7279] bridge_slave_1: left allmulticast mode
[   71.166631][ T7279] bridge_slave_1: left promiscuous mode
[   71.168647][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.174955][ T7279] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   71.324657][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'.
[   72.086623][ T7333] netlink: 'syz.0.630': attribute type 1 has an invalid length.
[   72.349051][ T3808] wlan0: Trigger new scan to find an IBSS to join
[   72.548326][  T789] IPVS: starting estimator thread 0...
[   72.640414][ T7374] IPVS: using max 62 ests per chain, 148800 per kthread
[   72.688975][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'.
[   73.011601][ T7407] syzkaller1: entered promiscuous mode
[   73.013334][ T7407] syzkaller1: entered allmulticast mode
[   73.168031][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[   73.234302][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.676798][ T7459] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   73.826886][ T7471] bridge1: entered allmulticast mode
[   73.946958][ T7481] netlink: 'syz.2.696': attribute type 5 has an invalid length.
[   74.297415][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.716'.
[   74.301428][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.716'.
[   74.304155][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.716'.
[   74.377413][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'.
[   74.667483][ T7564] Bluetooth: MGMT ver 1.23
[   74.915697][ T7592] openvswitch: netlink: Key type 78 is out of range max 32
[   75.004854][ T7602] sch_fq: defrate 0 ignored.
[   75.007892][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.752'.
[   75.043586][ T7604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.754'.
[   75.079434][ T7606] netlink: 'syz.1.756': attribute type 4 has an invalid length.
[   75.081756][ T7606] netlink: 'syz.1.756': attribute type 2 has an invalid length.
[   75.140537][ T7613] netlink: 'syz.1.758': attribute type 1 has an invalid length.
[   75.197668][ T7619] netlink: 108 bytes leftover after parsing attributes in process `syz.1.761'.
[   75.392578][ T7640] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   75.640468][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.786'.
[   75.721042][ T7678] netlink: 72 bytes leftover after parsing attributes in process `syz.1.789'.
[   76.748957][ T5220] Bluetooth: hci0: command 0x0c1a tx timeout
[   76.749253][   T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   77.062301][ T7778] netlink: 'syz.1.836': attribute type 2 has an invalid length.
[   77.494914][ T7822] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.556715][ T7822] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.617652][ T7822] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.686107][ T7822] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.736754][ T7842] netlink: 'syz.0.860': attribute type 1 has an invalid length.
[   77.795919][ T7822] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.811699][ T7822] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.820956][ T7822] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.832617][ T7822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.968495][ T7861] netlink: 'syz.0.870': attribute type 2 has an invalid length.
[   78.077604][ T7876] xt_cluster: node mask cannot exceed total number of nodes
[   78.817126][ T7965] netlink: 'syz.2.920': attribute type 13 has an invalid length.
[   79.119733][ T7991] netlink: 'syz.2.933': attribute type 9 has an invalid length.
[   79.123606][ T7991] netlink: 'syz.2.933': attribute type 6 has an invalid length.
[   79.126100][ T7991] netlink: 'syz.2.933': attribute type 7 has an invalid length.
[   79.128508][ T7991] netlink: 'syz.2.933': attribute type 8 has an invalid length.
[   79.552517][ T8013] bond_slave_0: entered promiscuous mode
[   79.554493][ T8013] bond_slave_1: entered promiscuous mode
[   79.556467][ T8013] vlan2: entered promiscuous mode
[   79.558122][ T8013] bond0: entered promiscuous mode
[   79.678293][ T8023] __nla_validate_parse: 6 callbacks suppressed
[   79.678304][ T8023] netlink: 168 bytes leftover after parsing attributes in process `syz.0.947'.
[   80.696758][ T7969] Set syz1 is full, maxelem 65536 reached
[   80.832865][ T8067] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   81.080110][   T10] cfg80211: failed to load regulatory.db
[   81.911243][ T8122] netlink: 'syz.2.985': attribute type 5 has an invalid length.
[   82.117201][ T8100] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   82.142644][ T8136] netlink: 'syz.1.990': attribute type 15 has an invalid length.
[   82.145794][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.990'.
[   82.149394][ T8136] bond0: option resend_igmp: invalid value (196616)
[   82.151693][ T8136] bond0: option resend_igmp: allowed values 0 - 255
[   82.792106][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'.
[   83.241030][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'.
[   83.539163][   T33] audit: type=1800 audit(1752018444.050:2): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1018" name="memory.events" dev="tmpfs" ino=2009 res=0 errno=0
[   83.747863][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'.
[   84.107021][ T8278] netlink: 'syz.2.1045': attribute type 6 has an invalid length.
[   84.225559][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'.
[   84.327880][ T8305] tipc: Started in network mode
[   84.331019][ T8305] tipc: Node identity 080211000001, cluster identity 4711
[   84.333503][ T8305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.335918][ T8305] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   84.345924][ T8305] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   84.366724][ T8305] tipc: Resetting bearer <eth:syzkaller0>
[   85.004298][ T8352] lo speed is unknown, defaulting to 1000
[   85.013182][ T8352] lo speed is unknown, defaulting to 1000
[   85.027424][ T8352] lo speed is unknown, defaulting to 1000
[   85.066367][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1082'.
[   85.158362][ T8352] infiniband syz0: set down
[   85.163733][ T8352] infiniband syz0: added lo
[   85.188394][ T8352] RDS/IB: syz0: added
[   85.190096][ T8352] smc: adding ib device syz0 with port count 1
[   85.192488][ T8352] smc:    ib device syz0 port 1 has pnetid 
[   85.203364][  T790] lo speed is unknown, defaulting to 1000
[   85.205875][   T63] lo speed is unknown, defaulting to 1000
[   85.208224][ T8352] lo speed is unknown, defaulting to 1000
[   85.316963][ T8352] lo speed is unknown, defaulting to 1000
[   85.364633][   T10] tipc: Node number set to 134418688
[   85.424369][ T8352] lo speed is unknown, defaulting to 1000
[   85.633142][ T8378] xt_l2tp: v2 doesn't support IP mode
[   85.962756][ T8418] netlink: 'syz.1.1105': attribute type 2 has an invalid length.
[   85.965281][ T8418] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1105'.
[   86.001815][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[   86.083540][ T8430] syzkaller0: entered promiscuous mode
[   86.085273][ T8430] syzkaller0: entered allmulticast mode
[   86.091636][ T8430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.109404][ T8430] tipc: Resetting bearer <eth:syzkaller0>
[   86.123047][ T8429] tipc: Resetting bearer <eth:syzkaller0>
[   86.131658][ T8429] tipc: Disabling bearer <eth:syzkaller0>
[   86.154985][ T8432] lo speed is unknown, defaulting to 1000
[   86.183146][ T8434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.185437][ T8434] IPv6: NLM_F_CREATE should be set when creating new route
[   86.188060][ T8434] lo: entered allmulticast mode
[   86.191185][ T8434] tunl0: entered allmulticast mode
[   86.193941][ T8434] gre0: entered allmulticast mode
[   86.202609][ T8434] gretap0: entered allmulticast mode
[   86.206683][ T8434] erspan0: entered allmulticast mode
[   86.212716][ T8434] ip_vti0: entered allmulticast mode
[   86.217620][ T8434] ip6_vti0: entered allmulticast mode
[   86.230580][ T8434] sit0: entered allmulticast mode
[   86.234032][ T8434] ip6tnl0: entered allmulticast mode
[   86.236844][ T8434] ip6gre0: entered allmulticast mode
[   86.240949][ T8434] syz_tun: entered allmulticast mode
[   86.250585][ T8434] ip6gretap0: entered allmulticast mode
[   86.254881][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.257480][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.265686][ T8434] bridge0: entered allmulticast mode
[   86.270702][ T8434] vcan0: entered allmulticast mode
[   86.274167][ T8434] bond0: entered allmulticast mode
[   86.275803][ T8434] bond_slave_0: entered allmulticast mode
[   86.277553][ T8434] bond_slave_1: entered allmulticast mode
[   86.283047][ T8434] team0: entered allmulticast mode
[   86.284794][ T8434] team_slave_0: entered allmulticast mode
[   86.286948][ T8434] team_slave_1: entered allmulticast mode
[   86.291673][ T8434] dummy0: entered allmulticast mode
[   86.295645][ T8434] nlmon0: entered allmulticast mode
[   86.298210][ T8434] caif0: entered allmulticast mode
[   86.300424][ T8434] batadv0: entered allmulticast mode
[   86.304687][ T8434] vxcan0: entered allmulticast mode
[   86.306805][ T8434] vxcan1: entered allmulticast mode
[   86.309272][ T8434] veth0: entered allmulticast mode
[   86.312843][ T8434] veth1: entered allmulticast mode
[   86.316824][ T8434] wg0: entered allmulticast mode
[   86.320406][ T8434] wg1: entered allmulticast mode
[   86.323700][ T8434] wg2: entered allmulticast mode
[   86.326517][ T8434] veth0_to_bridge: entered allmulticast mode
[   86.331583][ T8434] veth1_to_bridge: entered allmulticast mode
[   86.338407][ T8434] veth0_to_bond: entered allmulticast mode
[   86.343557][ T8434] veth1_to_bond: entered allmulticast mode
[   86.347896][ T8434] veth0_to_team: entered allmulticast mode
[   86.353306][ T8434] veth1_to_team: entered allmulticast mode
[   86.358382][ T8434] veth0_to_batadv: entered allmulticast mode
[   86.362634][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.365177][ T8434] batadv_slave_0: entered allmulticast mode
[   86.369160][ T8434] veth1_to_batadv: entered allmulticast mode
[   86.372618][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.375135][ T8434] batadv_slave_1: entered allmulticast mode
[   86.379413][ T8434] xfrm0: entered allmulticast mode
[   86.382678][ T8434] veth0_to_hsr: entered allmulticast mode
[   86.386231][ T8434] hsr_slave_0: entered allmulticast mode
[   86.390757][ T8434] veth1_to_hsr: entered allmulticast mode
[   86.394308][ T8434] hsr_slave_1: entered allmulticast mode
[   86.397903][ T8434] hsr0: entered allmulticast mode
[   86.402203][ T8434] veth1_virt_wifi: entered allmulticast mode
[   86.405874][ T8434] veth0_virt_wifi: entered allmulticast mode
[   86.409549][ T8434] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   86.412380][ T8434] veth1_vlan: entered allmulticast mode
[   86.416600][ T8434] veth0_vlan: entered allmulticast mode
[   86.427900][ T8434] vlan0: entered allmulticast mode
[   86.429882][ T8434] vlan1: entered allmulticast mode
[   86.431574][ T8434] macvlan0: entered allmulticast mode
[   86.433650][ T8434] macvlan1: entered allmulticast mode
[   86.436937][ T8434] ipvlan0: entered allmulticast mode
[   86.438682][ T8434] ipvlan1: entered allmulticast mode
[   86.440768][ T8434] veth1_macvtap: entered allmulticast mode
[   86.444593][ T8434] veth0_macvtap: entered allmulticast mode
[   86.448503][ T8434] macvtap0: entered allmulticast mode
[   86.452415][ T8434] macsec0: entered allmulticast mode
[   86.456149][ T8434] geneve0: entered allmulticast mode
[   86.460126][ T8434] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.462725][ T8434] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.485600][ T8434] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.488147][ T8434] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.493532][ T8434] geneve1: left promiscuous mode
[   86.502684][ T8434] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   86.505881][ T8434] ip6tnl1: entered allmulticast mode
[   86.509767][ T8434] erspan1: entered allmulticast mode
[   86.511497][ T8434] netdevsim netdevsim2 eth0: entered allmulticast mode
[   86.513555][ T8434] netdevsim netdevsim2 eth1: entered allmulticast mode
[   86.515676][ T8434] netdevsim netdevsim2 eth2: entered allmulticast mode
[   86.517879][ T8434] netdevsim netdevsim2 eth3: entered allmulticast mode
[   86.521977][ T8434] syztnl2: entered allmulticast mode
[   87.915467][ T8501] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1137'.
[   88.808337][ T8543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.862535][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[   89.865566][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[   90.424686][   T33] audit: type=1804 audit(1752018450.940:3): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1191" name="memory.events" dev="tmpfs" ino=1953 res=1 errno=0
[   90.434297][   T33] audit: type=1800 audit(1752018450.940:4): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1191" name="memory.events" dev="tmpfs" ino=1953 res=0 errno=0
[   90.533764][ T8640] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   90.536828][ T8640] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   90.564968][ T8644] netlink: 'syz.2.1199': attribute type 10 has an invalid length.
[   90.571752][ T8644] team0: Device ipvlan1 failed to register rx_handler
[   90.717947][ T8660] lo speed is unknown, defaulting to 1000
[   90.823507][ T8677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1207'.
[   90.892189][ T8677] bridge_slave_0: left promiscuous mode
[   90.893972][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.923015][ T8677] bridge_slave_1: left promiscuous mode
[   90.924816][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.937580][ T8677] bond0: (slave bond_slave_0): Releasing backup interface
[   90.942575][ T8677] bond_slave_0: left promiscuous mode
[   90.967225][ T8677] bond0: (slave bond_slave_1): Releasing backup interface
[   90.975318][ T8677] bond_slave_1: left promiscuous mode
[   90.978285][ T8677] team0: Port device team_slave_0 removed
[   90.986362][ T8677] team0: Port device team_slave_1 removed
[   90.988385][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.994188][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.244110][ T8712] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1230'.
[   91.247034][ T8712] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1230'.
[   91.421689][ T8728] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1236'.
[   91.435161][ T8730] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1237'.
[   91.627165][ T8751] netlink: 'syz.0.1247': attribute type 2 has an invalid length.
[   91.868409][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'.
[   91.872041][ T8764] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   91.940279][ T8768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1253'.
[   91.992833][ T8773] netlink: 'syz.0.1255': attribute type 6 has an invalid length.
[   92.069977][ T8784] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1261'.
[   92.072710][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'.
[   92.458141][ T8792] tun0: tun_chr_ioctl cmd 2148553947
[   93.031538][ T8821] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1278'.
[   93.230338][ T8835] netlink: 'syz.2.1284': attribute type 21 has an invalid length.
[   93.232905][ T8835] netlink: 'syz.2.1284': attribute type 1 has an invalid length.
[   93.345238][ T8840] xt_hashlimit: size too large, truncated to 1048576
[   94.481908][ T8925] netlink: 'syz.2.1326': attribute type 13 has an invalid length.
[   94.484322][ T8925] netlink: 'syz.2.1326': attribute type 17 has an invalid length.
[   94.513675][ T8929] netlink: 'syz.2.1327': attribute type 5 has an invalid length.
[   94.516194][ T8929] netlink: 'syz.2.1327': attribute type 6 has an invalid length.
[   94.580955][ T8937] sock: sock_timestamping_bind_phc: sock not bind to device
[   94.945543][ T8971] tipc: Cannot configure node identity twice
[   95.128264][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.135235][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.180752][ T8991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.657215][ T9046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   95.916816][ T9081] IPv6: sit3: Disabled Multicast RS
[   96.900736][ T9115] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   96.932381][ T9121] __nla_validate_parse: 9 callbacks suppressed
[   96.932392][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1410'.
[   96.937731][ T9121] netlink: 'syz.0.1410': attribute type 1 has an invalid length.
[   97.295720][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1426'.
[   97.526886][ T9178] netlink: 'syz.0.1438': attribute type 15 has an invalid length.
[   97.531324][ T9178] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1438'.
[   97.706342][ T9196] netlink: 'syz.1.1445': attribute type 4 has an invalid length.
[   97.710221][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'.
[   97.803450][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'.
[   97.806206][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'.
[   97.811731][ T9204] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1450'.
[   97.898013][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1454'.
[   98.057625][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1458'.
[   98.908966][   T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   99.004036][ T9246] syzkaller1: entered promiscuous mode
[   99.005720][ T9246] syzkaller1: entered allmulticast mode
[   99.511448][ T9257] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.514044][ T9257] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.516453][ T9257] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.519271][ T9257] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.528568][ T9257] team0: Port device vxlan0 added
[   99.662248][ T9267] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1478'.
[   99.944271][ T9283] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  100.261844][ T9319] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  100.351553][ T9329] Cannot find add_set index 2 as target
[  100.917891][ T1117] block nbd0: Possible stuck request ffff8880225c8000: control (read@0,1024B). Runtime 30 seconds
[  100.921245][ T1117] block nbd0: Possible stuck request ffff8880225c8200: control (read@1024,1024B). Runtime 30 seconds
[  100.924479][ T1117] block nbd0: Possible stuck request ffff8880225c8400: control (read@2048,1024B). Runtime 30 seconds
[  100.927555][ T1117] block nbd0: Possible stuck request ffff8880225c8600: control (read@3072,1024B). Runtime 30 seconds
[  101.355380][ T9463] netlink: 'syz.2.1564': attribute type 1 has an invalid length.
[  101.371064][ T9463] bond2: entered promiscuous mode
[  101.372735][ T9463] bond2: entered allmulticast mode
[  101.384609][ T9463] bond2: (slave ip6gretap1): making interface the new active one
[  101.387030][ T9463] ip6gretap1: entered promiscuous mode
[  101.390730][ T9463] ip6gretap1: entered allmulticast mode
[  101.393197][ T9463] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  101.873006][ T9531] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  101.956748][ T9544] __nla_validate_parse: 10 callbacks suppressed
[  101.956758][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'.
[  101.969543][ T9544] lo speed is unknown, defaulting to 1000
[  102.109137][   T63] IPVS: starting estimator thread 0...
[  102.112551][ T9553] netlink: 'syz.2.1605': attribute type 1 has an invalid length.
[  102.114864][ T9553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1605'.
[  102.156050][ T9568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1611'.
[  102.168630][ T9568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1611'.
[  102.211742][ T9563] IPVS: using max 62 ests per chain, 148800 per kthread
[  102.306988][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'.
[  102.335198][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1623'.
[  102.427002][ T9610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1631'.
[  102.436509][ T9610] netlink: 'syz.2.1631': attribute type 3 has an invalid length.
[  102.438760][ T9610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1631'.
[  102.790410][ T9643] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  103.039575][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'.
[  103.087636][ T9671] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  104.008479][ T9680] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  104.112423][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'.
[  104.224238][ T9705] SET target dimension over the limit!
[  104.239374][  T987] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  104.418581][ T9731] netlink: 'syz.1.1685': attribute type 4 has an invalid length.
[  104.801171][ T9787] bridge3: entered promiscuous mode
[  104.802952][ T9787] bridge3: entered allmulticast mode
[  105.706097][ T9806] netlink: 'syz.1.1717': attribute type 21 has an invalid length.
[  106.824088][ T9877] bridge0: entered promiscuous mode
[  106.826239][ T9877] ip6gretap0: entered promiscuous mode
[  106.830295][ T9877] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  106.833227][ T9877] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  106.906654][  T987] 
[  106.907488][  T987] ======================================================
[  106.909644][  T987] WARNING: possible circular locking dependency detected
[  106.911767][  T987] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  106.914742][  T987] ------------------------------------------------------
[  106.916858][  T987] kworker/u10:3/987 is trying to acquire lock:
[  106.918697][  T987] ffff88802cbdd358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  106.921644][  T987] 
[  106.921644][  T987] but task is already holding lock:
[  106.923893][  T987] ffff888034dea988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  106.926816][  T987] 
[  106.926816][  T987] which lock already depends on the new lock.
[  106.926816][  T987] 
[  106.929968][  T987] 
[  106.929968][  T987] the existing dependency chain (in reverse order) is:
[  106.932681][  T987] 
[  106.932681][  T987] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  106.935179][  T987]        lock_acquire+0x120/0x360
[  106.936726][  T987]        down_write+0x96/0x1f0
[  106.938177][  T987]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  106.940049][  T987]        nbd_start_device+0x16c/0xac0
[  106.941665][  T987]        nbd_genl_connect+0x1250/0x1930
[  106.943281][  T987]        genl_family_rcv_msg_doit+0x215/0x300
[  106.945082][  T987]        genl_rcv_msg+0x60e/0x790
[  106.946647][  T987]        netlink_rcv_skb+0x208/0x470
[  106.948259][  T987]        genl_rcv+0x28/0x40
[  106.949607][  T987]        netlink_unicast+0x75b/0x8d0
[  106.951126][  T987]        netlink_sendmsg+0x805/0xb30
[  106.952651][  T987]        __sock_sendmsg+0x21c/0x270
[  106.954150][  T987]        ____sys_sendmsg+0x505/0x830
[  106.955739][  T987]        ___sys_sendmsg+0x21f/0x2a0
[  106.957319][  T987]        __x64_sys_sendmsg+0x19b/0x260
[  106.958979][  T987]        do_syscall_64+0xfa/0x3b0
[  106.960513][  T987]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.962471][  T987] 
[  106.962471][  T987] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  106.964805][  T987]        lock_acquire+0x120/0x360
[  106.966328][  T987]        __mutex_lock+0x182/0xe80
[  106.967847][  T987]        refcount_dec_and_mutex_lock+0x30/0xa0
[  106.969698][  T987]        nbd_config_put+0x2c/0x790
[  106.971211][  T987]        nbd_release+0xfe/0x140
[  106.972621][  T987]        bdev_release+0x536/0x650
[  106.974117][  T987]        blkdev_release+0x15/0x20
[  106.975653][  T987]        __fput+0x44c/0xa70
[  106.977029][  T987]        fput_close_sync+0x119/0x200
[  106.978637][  T987]        __x64_sys_close+0x7f/0x110
[  106.980202][  T987]        do_syscall_64+0xfa/0x3b0
[  106.981730][  T987]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.983663][  T987] 
[  106.983663][  T987] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  106.986030][  T987]        validate_chain+0xb9b/0x2140
[  106.987654][  T987]        __lock_acquire+0xab9/0xd20
[  106.989233][  T987]        lock_acquire+0x120/0x360
[  106.990767][  T987]        __mutex_lock+0x182/0xe80
[  106.992294][  T987]        __del_gendisk+0x129/0x9e0
[  106.993873][  T987]        del_gendisk+0xe8/0x160
[  106.995359][  T987]        nbd_dev_remove_work+0x47/0xe0
[  106.997203][  T987]        process_scheduled_works+0xae1/0x17b0
[  106.999077][  T987]        worker_thread+0x8a0/0xda0
[  107.000595][  T987]        kthread+0x711/0x8a0
[  107.001994][  T987]        ret_from_fork+0x3fc/0x770
[  107.003590][  T987]        ret_from_fork_asm+0x1a/0x30
[  107.005215][  T987] 
[  107.005215][  T987] other info that might help us debug this:
[  107.005215][  T987] 
[  107.008298][  T987] Chain exists of:
[  107.008298][  T987]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  107.008298][  T987] 
[  107.012524][  T987]  Possible unsafe locking scenario:
[  107.012524][  T987] 
[  107.014782][  T987]        CPU0                    CPU1
[  107.016404][  T987]        ----                    ----
[  107.018032][  T987]   rlock(&set->update_nr_hwq_lock);
[  107.019661][  T987]                                lock(&nbd->config_lock);
[  107.021793][  T987]                                lock(&set->update_nr_hwq_lock);
[  107.024035][  T987]   lock(&disk->open_mutex);
[  107.025444][  T987] 
[  107.025444][  T987]  *** DEADLOCK ***
[  107.025444][  T987] 
[  107.027784][  T987] 3 locks held by kworker/u10:3/987:
[  107.029319][  T987]  #0: ffff888106e78948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  107.032538][  T987]  #1: ffffc90006a17bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  107.036217][  T987]  #2: ffff888034dea988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  107.039216][  T987] 
[  107.039216][  T987] stack backtrace:
[  107.041028][  T987] CPU: 1 UID: 0 PID: 987 Comm: kworker/u10:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  107.041039][  T987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.041045][  T987] Workqueue: nbd-del nbd_dev_remove_work
[  107.041057][  T987] Call Trace:
[  107.041061][  T987]  <TASK>
[  107.041078][  T987]  dump_stack_lvl+0x189/0x250
[  107.041089][  T987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.041098][  T987]  ? __pfx__printk+0x10/0x10
[  107.041109][  T987]  ? print_lock_name+0xde/0x100
[  107.041118][  T987]  print_circular_bug+0x2ee/0x310
[  107.041129][  T987]  check_noncircular+0x134/0x160
[  107.041140][  T987]  validate_chain+0xb9b/0x2140
[  107.041150][  T987]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  107.041160][  T987]  ? look_up_lock_class+0x74/0x170
[  107.041168][  T987]  ? register_lock_class+0x51/0x320
[  107.041177][  T987]  __lock_acquire+0xab9/0xd20
[  107.041185][  T987]  ? __del_gendisk+0x129/0x9e0
[  107.041192][  T987]  lock_acquire+0x120/0x360
[  107.041199][  T987]  ? __del_gendisk+0x129/0x9e0
[  107.041208][  T987]  ? check_path+0x21/0x40
[  107.041217][  T987]  __mutex_lock+0x182/0xe80
[  107.041224][  T987]  ? __del_gendisk+0x129/0x9e0
[  107.041234][  T987]  ? __del_gendisk+0x129/0x9e0
[  107.041242][  T987]  ? __pfx___mutex_lock+0x10/0x10
[  107.041249][  T987]  ? __pfx___might_resched+0x10/0x10
[  107.041259][  T987]  ? __lock_acquire+0xab9/0xd20
[  107.041266][  T987]  ? disk_del_events+0xb5/0x210
[  107.041274][  T987]  ? __del_gendisk+0xc1/0x9e0
[  107.041282][  T987]  __del_gendisk+0x129/0x9e0
[  107.041289][  T987]  ? del_gendisk+0xe0/0x160
[  107.041298][  T987]  ? __pfx___del_gendisk+0x10/0x10
[  107.041306][  T987]  ? down_read+0x1ad/0x2e0
[  107.041314][  T987]  del_gendisk+0xe8/0x160
[  107.041322][  T987]  nbd_dev_remove_work+0x47/0xe0
[  107.041330][  T987]  ? process_scheduled_works+0x9ef/0x17b0
[  107.041338][  T987]  process_scheduled_works+0xae1/0x17b0
[  107.041351][  T987]  ? __pfx_process_scheduled_works+0x10/0x10
[  107.041361][  T987]  worker_thread+0x8a0/0xda0
[  107.041374][  T987]  kthread+0x711/0x8a0
[  107.041384][  T987]  ? __pfx_worker_thread+0x10/0x10
[  107.041392][  T987]  ? __pfx_kthread+0x10/0x10
[  107.041401][  T987]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.041412][  T987]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.041418][  T987]  ? __pfx_kthread+0x10/0x10
[  107.041427][  T987]  ret_from_fork+0x3fc/0x770
[  107.041435][  T987]  ? __pfx_ret_from_fork+0x10/0x10
[  107.041443][  T987]  ? __switch_to_asm+0x39/0x70
[  107.041452][  T987]  ? __switch_to_asm+0x33/0x70
[  107.041461][  T987]  ? __pfx_kthread+0x10/0x10
[  107.041470][  T987]  ret_from_fork_asm+0x1a/0x30
[  107.041482][  T987]  </TASK>

VM DIAGNOSIS:
23:47:47  Registers:
info registers vcpu 0

CPU#0
RAX=00000000ffffff01 RBX=ffffe8ff14647b40 RCX=ffffffff819ed6e2 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffe8ff14647b40 RBP=ffffc90021e77910 RSP=ffffc90021e77828
R8 =ffffe8ff14647b44 R9 =ffff800000000000 R10=dffffc0000000000 R11=fffff91fe28c8f68
R12=ffffe8ff14647b50 R13=ffffe8ff14647b48 R14=1ffffd1fe28c8f6a R15=1ffffd1fe28c8f68
RIP=ffffffff8223ca05 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8770ca26c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000019000 CR3=0000000034e16000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f876fe11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfc9f0 RSP=ffffc90006a16db0
R8 =ffff888021370237 R9 =1ffff1100426e046 R10=dffffc0000000000 R11=ffffffff85475540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff854755b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30616ff8 CR3=00000001067e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fac0d984478 00007fac0d984450 XMM03=00007fac0d984488 00007fac0d984480
XMM04=00007fac0e4ed100 00007fac0d984440 XMM05=00007fac0d984458 00007fac0d9844a0
XMM06=00007fac0d984498 00007fac0d984490 XMM07=00007fac0d984488 00007fac0d984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fac0d811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
