last executing test programs:

1.565758287s ago: executing program 1 (id=562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x470bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x9, 0x4, "4077814b3b"}, @NL80211_KEY_TYPE={0x8}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x20000880)

1.460769579s ago: executing program 1 (id=566):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={r2}, &(0x7f0000000100)=0x8)

1.090459247s ago: executing program 2 (id=576):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x4, 0x0, 0x80000001}, 0x10)

1.030434372s ago: executing program 2 (id=577):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r1, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
write(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
close(0x3)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff})
splice(r6, 0x0, r2, 0x0, 0xffffffffffff7fff, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x48000)
close(0x4)

564.876769ms ago: executing program 1 (id=578):
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
socket(0x11, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
sendfile(r2, r1, 0x0, 0x10000)
socket(0x2a, 0x800, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)

347.143693ms ago: executing program 0 (id=583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)

249.081834ms ago: executing program 0 (id=584):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)

167.285707ms ago: executing program 2 (id=585):
unshare(0x22020600)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x4)

167.088782ms ago: executing program 0 (id=586):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1)
sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="fb", 0x1}], 0x1, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004084}, 0x34000041)

119.646772ms ago: executing program 2 (id=587):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

119.441266ms ago: executing program 1 (id=588):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)='x\x00\x00\x00', 0x4, 0x2251197285d76a80, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

119.272103ms ago: executing program 2 (id=589):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)

50.158569ms ago: executing program 1 (id=590):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@empty, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0xb0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2s-224-generic\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8845}, 0x0)

49.982662ms ago: executing program 2 (id=591):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

49.922952ms ago: executing program 0 (id=592):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

464.136µs ago: executing program 0 (id=593):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0xf)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)

153.836µs ago: executing program 1 (id=594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

0s ago: executing program 0 (id=595):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x6, 0x18}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57081' (ED25519) to the list of known hosts.
syzkaller login: [   40.947207][ T5761] cgroup: Unknown subsys name 'net'
[   41.053783][ T5761] cgroup: Unknown subsys name 'cpuset'
[   41.057897][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.724927][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.883717][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.886708][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.889254][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.895821][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.900073][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.912380][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.915057][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.921823][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.924602][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.927140][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.026182][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.030518][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.041609][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.045322][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.048248][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.171159][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   47.219921][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   47.283023][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.285211][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.287644][ T5837] bridge_slave_0: entered allmulticast mode
[   47.292413][ T5837] bridge_slave_0: entered promiscuous mode
[   47.313545][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.315920][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.318306][ T5837] bridge_slave_1: entered allmulticast mode
[   47.321267][ T5837] bridge_slave_1: entered promiscuous mode
[   47.384482][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.387914][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.390271][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.393161][ T5833] bridge_slave_0: entered allmulticast mode
[   47.395897][ T5833] bridge_slave_0: entered promiscuous mode
[   47.409875][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.423814][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.426160][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.428395][ T5833] bridge_slave_1: entered allmulticast mode
[   47.431233][ T5833] bridge_slave_1: entered promiscuous mode
[   47.483406][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   47.494299][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.500642][ T5837] team0: Port device team_slave_0 added
[   47.505731][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.521804][ T5837] team0: Port device team_slave_1 added
[   47.577138][ T5833] team0: Port device team_slave_0 added
[   47.583840][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.586009][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.594238][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.599348][ T5833] team0: Port device team_slave_1 added
[   47.625396][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.627739][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.635985][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.648099][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.650255][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.658361][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.670851][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.673534][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.681427][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.724140][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.726440][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.728786][ T5843] bridge_slave_0: entered allmulticast mode
[   47.732871][ T5843] bridge_slave_0: entered promiscuous mode
[   47.755027][ T5837] hsr_slave_0: entered promiscuous mode
[   47.757427][ T5837] hsr_slave_1: entered promiscuous mode
[   47.759998][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.762848][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.765104][ T5843] bridge_slave_1: entered allmulticast mode
[   47.767779][ T5843] bridge_slave_1: entered promiscuous mode
[   47.773924][ T5833] hsr_slave_0: entered promiscuous mode
[   47.776200][ T5833] hsr_slave_1: entered promiscuous mode
[   47.778277][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.780784][ T5833] Cannot create hsr debugfs directory
[   47.831464][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.847079][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.918756][ T5843] team0: Port device team_slave_0 added
[   47.931243][ T5843] team0: Port device team_slave_1 added
[   47.970570][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.973338][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.980958][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.999567][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.003226][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.011511][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.071413][ T5843] hsr_slave_0: entered promiscuous mode
[   48.073764][ T5843] hsr_slave_1: entered promiscuous mode
[   48.075913][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.078269][ T5843] Cannot create hsr debugfs directory
[   48.080833][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.089285][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.108183][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.128817][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.177227][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.199467][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.216002][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.222609][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.322338][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.326592][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.334609][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.337417][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.344997][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.375218][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   48.382776][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.390226][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.392626][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.407651][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.409887][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.419779][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   48.444812][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.447236][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.460256][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.462574][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.529781][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.549257][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   48.585822][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.588046][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.592558][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.594832][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.633589][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.680496][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.689595][ T5837] veth0_vlan: entered promiscuous mode
[   48.700118][ T5837] veth1_vlan: entered promiscuous mode
[   48.735053][ T5837] veth0_macvtap: entered promiscuous mode
[   48.738186][ T5833] veth0_vlan: entered promiscuous mode
[   48.745468][ T5837] veth1_macvtap: entered promiscuous mode
[   48.750011][ T5833] veth1_vlan: entered promiscuous mode
[   48.772329][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.779245][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.783139][ T5833] veth0_macvtap: entered promiscuous mode
[   48.787575][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.792103][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.794765][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.797381][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.800015][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.807251][ T5833] veth1_macvtap: entered promiscuous mode
[   48.846998][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.866019][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.877842][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.880597][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.885028][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.887566][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.892341][ T5843] veth0_vlan: entered promiscuous mode
[   48.915276][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.919477][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.928193][ T5843] veth1_vlan: entered promiscuous mode
[   48.960876][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.966235][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.982210][   T55] Bluetooth: hci0: command tx timeout
[   48.984107][   T55] Bluetooth: hci1: command tx timeout
[   48.993512][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.997943][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.024421][ T5843] veth0_macvtap: entered promiscuous mode
[   49.026766][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.029243][ T5843] veth1_macvtap: entered promiscuous mode
[   49.036023][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.040278][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.044420][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.054471][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.059566][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.065905][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.068558][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.071339][ T5840] Bluetooth: hci2: command tx timeout
[   49.073806][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.162749][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.165137][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.204538][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.206882][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.501691][ T5933] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET)
[   49.646378][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'.
[   49.714390][ T5953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23'.
[   49.746233][ T5951] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   49.746934][ T5885] IPVS: starting estimator thread 0...
[   49.851495][ T5955] IPVS: using max 62 ests per chain, 148800 per kthread
[   50.351909][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42'.
[   50.699348][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   50.704739][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   50.707404][ T6032] netlink: 124 bytes leftover after parsing attributes in process `syz.1.60'.
[   50.897078][ T6056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.936580][ T6059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.72'.
[   50.947280][ T6059] netlink: 'syz.0.72': attribute type 1 has an invalid length.
[   50.950159][ T6061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.061787][ T5840] Bluetooth: hci1: command tx timeout
[   51.063553][ T5840] Bluetooth: hci0: command tx timeout
[   51.141331][   T55] Bluetooth: hci2: command tx timeout
[   51.510441][ T6108] netlink: 47 bytes leftover after parsing attributes in process `syz.0.92'.
[   51.567190][ T6117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.98'.
[   51.569919][ T6117] netlink: 260 bytes leftover after parsing attributes in process `syz.2.98'.
[   52.111585][ T6180] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[   52.145292][ T6185] openvswitch: netlink: nsh attribute has 124 unknown bytes.
[   52.147594][ T6185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.942784][ T6267] tipc: Started in network mode
[   52.944350][ T6267] tipc: Node identity 32e73b60ea46, cluster identity 4711
[   52.952243][ T6267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.983244][ T6267] syzkaller0: entered promiscuous mode
[   52.985045][ T6267] syzkaller0: entered allmulticast mode
[   52.987227][ T6267] tipc: Resetting bearer <eth:syzkaller0>
[   53.003033][ T6266] tipc: Resetting bearer <eth:syzkaller0>
[   53.143640][   T55] Bluetooth: hci0: command tx timeout
[   53.145332][   T55] Bluetooth: hci1: command tx timeout
[   53.222361][ T5840] Bluetooth: hci2: command tx timeout
[   53.791128][ T6266] tipc: Disabling bearer <eth:syzkaller0>
[   54.125327][ T6297] warning: `syz.1.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.574622][ T6355] Cannot find add_set index 3 as target
[   54.793111][ T6383] xt_CT: No such helper "pptp"
[   54.824269][ T6379] __nla_validate_parse: 4 callbacks suppressed
[   54.824279][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[   54.873303][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[   54.996929][ T6404] bridge: RTM_NEWNEIGH with invalid ether address
[   55.165217][ T6426] netlink: 'syz.0.235': attribute type 84 has an invalid length.
[   55.221470][ T5840] Bluetooth: hci1: command tx timeout
[   55.223674][   T55] Bluetooth: hci0: command tx timeout
[   55.301680][ T5840] Bluetooth: hci2: command tx timeout
[   55.440095][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'.
[   55.649998][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.246'.
[   55.727865][ T6469] Illegal XDP return value 4294967294 on prog  (id 47) dev N/A, expect packet loss!
[   56.094936][ T6504] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   56.294669][ T6521] syzkaller0: entered promiscuous mode
[   56.296405][ T6521] syzkaller0: entered allmulticast mode
[   56.382607][ T6529] syzkaller1: entered promiscuous mode
[   56.384307][ T6529] syzkaller1: entered allmulticast mode
[   56.575368][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'.
[   56.655345][ T6561] netlink: 'syz.0.286': attribute type 10 has an invalid length.
[   56.661911][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.286'.
[   56.942245][ T6597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'.
[   57.006087][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'.
[   57.197112][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.318'.
[   57.288641][ T6629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.319'.
[   57.500816][ T6640] infiniband syz1: set active
[   57.515448][ T6640] infiniband syz1: added bond0
[   57.540959][ T6640] RDS/IB: syz1: added
[   57.542620][ T6640] smc: adding ib device syz1 with port count 1
[   57.544586][ T6640] smc:    ib device syz1 port 1 has pnetid 
[   57.593125][ T6666] netlink: 'syz.1.333': attribute type 6 has an invalid length.
[   57.690615][ T6674] unsupported nlmsg_type 40
[   57.850963][ T6687] vlan0: entered promiscuous mode
[   57.864690][ T6687] team0: Port device vlan0 added
[   57.884801][ T6687] syz.1.343 (6687) used greatest stack depth: 19992 bytes left
[   58.430415][ T6752] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[   58.515586][ T6762] nbd: must specify at least one socket
[   58.605114][ T6774] trusted_key: syz.2.382 sent an empty control message without MSG_MORE.
[   58.693176][ T6782] tun0: tun_chr_ioctl cmd 2147767521
[   58.966273][ T6798] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[   59.457080][ T6826] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[   59.629929][ T6839] netlink: 'syz.1.411': attribute type 29 has an invalid length.
[   60.170085][ T6866] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[   60.624914][ T6891] dvmrp1: tun_chr_ioctl cmd 1074025677
[   60.626768][ T6891] dvmrp1: linktype set to 805
[   60.824386][ T6903] __nla_validate_parse: 5 callbacks suppressed
[   60.824397][ T6903] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.439'.
[   60.829726][ T6903] netlink: zone id is out of range
[   60.832555][ T6903] netlink: get zone limit has 8 unknown bytes
[   61.296457][ T6949] tipc: Started in network mode
[   61.298004][ T6949] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711
[   61.300704][ T6949] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   61.382296][ T6961] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   61.623859][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'.
[   61.626818][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'.
[   62.676757][ T7017] bridge0: port 3(gretap0) entered blocking state
[   62.681565][ T7017] bridge0: port 3(gretap0) entered disabled state
[   62.684381][ T7017] gretap0: entered allmulticast mode
[   62.689615][ T7017] gretap0: entered promiscuous mode
[   62.696703][ T7017] bridge0: port 3(gretap0) entered blocking state
[   62.699717][ T7017] bridge0: port 3(gretap0) entered forwarding state
[   62.724350][ T7021] bridge: RTM_NEWNEIGH with invalid ether address
[   62.825182][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[   62.965389][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'.
[   62.985061][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'.
[   63.020225][ T7054] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.045042][ T7054] macvlan3: entered promiscuous mode
[   63.046637][ T7054] macvlan3: entered allmulticast mode
[   63.048949][ T7054] bond1: (slave macvlan3): Opening slave failed
[   63.192271][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'.
[   63.362614][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[   63.396951][ T7094] netlink: 240 bytes leftover after parsing attributes in process `syz.0.523'.
[   64.040904][ T7128] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[   64.653038][ T7156] xt_hashlimit: max too large, truncated to 1048576
[   64.718446][ T7162] sit0: entered promiscuous mode
[   64.742497][ T7162] netlink: 'syz.1.552': attribute type 1 has an invalid length.
[   64.745285][ T7162] netlink: 1 bytes leftover after parsing attributes in process `syz.1.552'.
[   64.941229][ T7181] nbd0: detected capacity change from 0 to 63
[   64.950831][ T7187] block nbd0: NBD_DISCONNECT
[   64.958414][ T7187] block nbd0: Disconnected due to user request.
[   64.960604][ T7187] block nbd0: shutting down sockets
[   64.975444][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   64.978455][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[   64.980932][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   64.983744][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[   64.986092][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   64.988810][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[   64.991641][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   64.994389][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[   64.997481][ T7088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.005620][ T7088] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.008160][ T7088] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.010902][ T7088] Buffer I/O error on dev nbd0, logical block 1, async page read
[   65.022765][ T7088] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.029531][ T7088] Buffer I/O error on dev nbd0, logical block 2, async page read
[   65.035942][ T7088] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.038661][ T7088] Buffer I/O error on dev nbd0, logical block 3, async page read
[   65.051352][ T7088] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.054209][ T7088] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.063653][ T7088] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.066212][ T7088] Buffer I/O error on dev nbd0, logical block 1, async page read
[   65.069630][ T7198] syzkaller0: Caught tx_queue_len zero misconfig
[   65.070283][ T7088] ldm_validate_partition_table(): Disk read failed.
[   65.082034][ T7088] Dev nbd0: unable to read RDB block 0
[   65.085502][ T7088]  nbd0: unable to read partition table
[   65.094024][ T7088] ldm_validate_partition_table(): Disk read failed.
[   65.096838][ T7088] Dev nbd0: unable to read RDB block 0
[   65.099608][ T7088]  nbd0: unable to read partition table
[   65.219720][ T7213] netlink: 'syz.2.571': attribute type 1 has an invalid length.
[   65.223906][ T7213] netlink: 'syz.2.571': attribute type 2 has an invalid length.
[   65.964622][ T7206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   66.045394][ T7233] netlink: 'syz.1.578': attribute type 10 has an invalid length.
[   66.059405][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.066516][ T7233] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   66.158557][ T7239] syz_tun: entered promiscuous mode
[   66.168380][ T7239] macsec1: entered promiscuous mode
[   66.173720][ T7239] syz_tun: left promiscuous mode
[   66.257898][ T7241] pim6reg: entered allmulticast mode
[   66.260706][ T7241] pim6reg: left allmulticast mode
[   66.499419][ T7260] __nla_validate_parse: 1 callbacks suppressed
[   66.499438][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'.
[   66.572329][   T29] 
[   66.573403][   T29] ======================================================
[   66.576159][   T29] WARNING: possible circular locking dependency detected
[   66.578941][   T29] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   66.583147][   T29] ------------------------------------------------------
[   66.585983][   T29] kworker/u9:1/29 is trying to acquire lock:
[   66.588356][   T29] ffff88811868e358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   66.591916][   T29] 
[   66.591916][   T29] but task is already holding lock:
[   66.594706][   T29] ffff88802bfbf188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   66.598400][   T29] 
[   66.598400][   T29] which lock already depends on the new lock.
[   66.598400][   T29] 
[   66.602309][   T29] 
[   66.602309][   T29] the existing dependency chain (in reverse order) is:
[   66.605755][   T29] 
[   66.605755][   T29] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   66.609025][   T29]        lock_acquire+0x120/0x360
[   66.610980][   T29]        down_write+0x96/0x1f0
[   66.612809][   T29]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   66.615124][   T29]        nbd_start_device+0x16c/0xac0
[   66.617065][   T29]        nbd_genl_connect+0x1250/0x1930
[   66.619178][   T29]        genl_family_rcv_msg_doit+0x215/0x300
[   66.621510][   T29]        genl_rcv_msg+0x60e/0x790
[   66.623478][   T29]        netlink_rcv_skb+0x208/0x470
[   66.625569][   T29]        genl_rcv+0x28/0x40
[   66.627317][   T29]        netlink_unicast+0x75c/0x8e0
[   66.629309][   T29]        netlink_sendmsg+0x805/0xb30
[   66.631351][   T29]        __sock_sendmsg+0x21c/0x270
[   66.633360][   T29]        ____sys_sendmsg+0x505/0x830
[   66.635412][   T29]        ___sys_sendmsg+0x21f/0x2a0
[   66.637499][   T29]        __x64_sys_sendmsg+0x19b/0x260
[   66.639653][   T29]        do_syscall_64+0xfa/0x3b0
[   66.641692][   T29]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.644205][   T29] 
[   66.644205][   T29] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   66.647140][   T29]        lock_acquire+0x120/0x360
[   66.649163][   T29]        __mutex_lock+0x182/0xe80
[   66.651188][   T29]        refcount_dec_and_mutex_lock+0x30/0xa0
[   66.653608][   T29]        nbd_config_put+0x2c/0x790
[   66.655539][   T29]        nbd_release+0xfe/0x140
[   66.657463][   T29]        bdev_release+0x536/0x650
[   66.659434][   T29]        blkdev_release+0x15/0x20
[   66.661405][   T29]        __fput+0x44c/0xa70
[   66.662949][   T29]        fput_close_sync+0x119/0x200
[   66.664563][   T29]        __x64_sys_close+0x7f/0x110
[   66.666481][   T29]        do_syscall_64+0xfa/0x3b0
[   66.668406][   T29]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.670833][   T29] 
[   66.670833][   T29] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   66.673880][   T29]        validate_chain+0xb9b/0x2140
[   66.675984][   T29]        __lock_acquire+0xab9/0xd20
[   66.678025][   T29]        lock_acquire+0x120/0x360
[   66.679965][   T29]        __mutex_lock+0x182/0xe80
[   66.681435][   T29]        __del_gendisk+0x129/0x9e0
[   66.682972][   T29]        del_gendisk+0xe8/0x160
[   66.684406][   T29]        nbd_dev_remove_work+0x47/0xe0
[   66.685983][   T29]        process_scheduled_works+0xae1/0x17b0
[   66.687765][   T29]        worker_thread+0x8a0/0xda0
[   66.689260][   T29]        kthread+0x711/0x8a0
[   66.690627][   T29]        ret_from_fork+0x3fc/0x770
[   66.692151][   T29]        ret_from_fork_asm+0x1a/0x30
[   66.693704][   T29] 
[   66.693704][   T29] other info that might help us debug this:
[   66.693704][   T29] 
[   66.696748][   T29] Chain exists of:
[   66.696748][   T29]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   66.696748][   T29] 
[   66.700926][   T29]  Possible unsafe locking scenario:
[   66.700926][   T29] 
[   66.703113][   T29]        CPU0                    CPU1
[   66.704702][   T29]        ----                    ----
[   66.706251][   T29]   rlock(&set->update_nr_hwq_lock);
[   66.707807][   T29]                                lock(&nbd->config_lock);
[   66.709852][   T29]                                lock(&set->update_nr_hwq_lock);
[   66.712091][   T29]   lock(&disk->open_mutex);
[   66.713432][   T29] 
[   66.713432][   T29]  *** DEADLOCK ***
[   66.713432][   T29] 
[   66.715764][   T29] 3 locks held by kworker/u9:1/29:
[   66.717228][   T29]  #0: ffff88802223f948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   66.720542][   T29]  #1: ffffc9000062fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   66.724207][   T29]  #2: ffff88802bfbf188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   66.727216][   T29] 
[   66.727216][   T29] stack backtrace:
[   66.728981][   T29] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   66.729000][   T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.729011][   T29] Workqueue: nbd-del nbd_dev_remove_work
[   66.729028][   T29] Call Trace:
[   66.729033][   T29]  <TASK>
[   66.729038][   T29]  dump_stack_lvl+0x189/0x250
[   66.729049][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.729058][   T29]  ? __pfx__printk+0x10/0x10
[   66.729068][   T29]  ? print_lock_name+0xde/0x100
[   66.729078][   T29]  print_circular_bug+0x2ee/0x310
[   66.729089][   T29]  check_noncircular+0x134/0x160
[   66.729099][   T29]  validate_chain+0xb9b/0x2140
[   66.729109][   T29]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   66.729120][   T29]  ? look_up_lock_class+0x74/0x170
[   66.729133][   T29]  ? register_lock_class+0x51/0x320
[   66.729141][   T29]  __lock_acquire+0xab9/0xd20
[   66.729149][   T29]  ? __del_gendisk+0x129/0x9e0
[   66.729156][   T29]  lock_acquire+0x120/0x360
[   66.729163][   T29]  ? __del_gendisk+0x129/0x9e0
[   66.729171][   T29]  ? check_path+0x21/0x40
[   66.729180][   T29]  __mutex_lock+0x182/0xe80
[   66.729188][   T29]  ? __del_gendisk+0x129/0x9e0
[   66.729197][   T29]  ? __del_gendisk+0x129/0x9e0
[   66.729204][   T29]  ? __pfx___mutex_lock+0x10/0x10
[   66.729211][   T29]  ? __pfx___might_resched+0x10/0x10
[   66.729221][   T29]  ? __lock_acquire+0xab9/0xd20
[   66.729228][   T29]  ? disk_del_events+0xb5/0x210
[   66.729236][   T29]  ? __del_gendisk+0xc1/0x9e0
[   66.729243][   T29]  __del_gendisk+0x129/0x9e0
[   66.729251][   T29]  ? del_gendisk+0xe0/0x160
[   66.729259][   T29]  ? __pfx___del_gendisk+0x10/0x10
[   66.729267][   T29]  ? down_read+0x1ad/0x2e0
[   66.729275][   T29]  del_gendisk+0xe8/0x160
[   66.729283][   T29]  nbd_dev_remove_work+0x47/0xe0
[   66.729290][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[   66.729298][   T29]  process_scheduled_works+0xae1/0x17b0
[   66.729311][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[   66.729321][   T29]  worker_thread+0x8a0/0xda0
[   66.729334][   T29]  kthread+0x711/0x8a0
[   66.729344][   T29]  ? __pfx_worker_thread+0x10/0x10
[   66.729352][   T29]  ? __pfx_kthread+0x10/0x10
[   66.729362][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[   66.729372][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.729382][   T29]  ? __pfx_kthread+0x10/0x10
[   66.729391][   T29]  ret_from_fork+0x3fc/0x770
[   66.729400][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[   66.729408][   T29]  ? __switch_to_asm+0x39/0x70
[   66.729417][   T29]  ? __switch_to_asm+0x33/0x70
[   66.729425][   T29]  ? __pfx_kthread+0x10/0x10
[   66.729435][   T29]  ret_from_fork_asm+0x1a/0x30
[   66.729447][   T29]  </TASK>
[   70.823333][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.825777][ T1360] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
22:05:48  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000062ee10
R8 =ffff8880217a0237 R9 =1ffff110042f4046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b2 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c28c2c0 CR3=0000000107e2c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffff000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f52bcced100 00007f52bc185440 XMM05=00007f52bc185458 00007f52bc1854a0
XMM06=00007f52bc185498 00007f52bc185490 XMM07=00007f52bc185488 00007f52bc185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f52bc011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007900000 RBX=1ffff1102108e25a RCX=ffff888021a1d640 RDX=0000000000010000
RSI=ffff888108470000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0da0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=ffffffff868f6e50
R12=dffffc0000000000 R13=ffff8881084712d0 R14=ffff888108470000 R15=dffffc0000000000
RIP=ffffffff868f6e98 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557c0ba500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdd774e56c0 CR3=0000000028d6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0180020004030180 0200020301800200
XMM02=02000a0301800200 0803018002000603 XMM03=0100000008060601 22fc0002000c0304
XMM04=01000404a7c40800 0100000008060601 XMM05=22fc0002000c0304 02000a0301800200
XMM06=0803018002000603 0180020004030180 XMM07=0200020301800200 00030010000a1000
XMM08=100004900307ffe2 040002cac4031604 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
