last executing test programs:

511.945886ms ago: executing program 2 (id=219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}}, 0x0)

446.287037ms ago: executing program 0 (id=221):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)

428.407781ms ago: executing program 2 (id=222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x6e, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

366.712942ms ago: executing program 0 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000010400000000000000000a0000000000100000000000140011006c766d727031000000000100000000000000464868e822d32cb592a056f4d787f9bba6100c0097cec916"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0)

354.40965ms ago: executing program 0 (id=226):
unshare(0x8040480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0}, 0x38)

291.839296ms ago: executing program 2 (id=227):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="b49900000547aff446c693bc2543dcbb2419fa9fb1c12e66cc24ad14e043fcbe91259b34b807663cb90b05473ad89934c8772781c6e4fa08500b5dd1e4b26b2886a9056088f8032418a45db34a39083196803c62f21c6de8cd35aa5868033c4f70f40edd0e63d430f4b52e45a99e4f5513a897e0a8902fa7275ce0e93c445fdcdd03", @ANYRES16, @ANYBLOB="3f9d00000000fedbdf"], 0x4c}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x9)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

291.559111ms ago: executing program 0 (id=228):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711236000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

291.443743ms ago: executing program 1 (id=229):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d793000000000000000000000140003"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

291.094545ms ago: executing program 2 (id=230):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20044884)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000001ac0)={@mcast2}, 0x14)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000100)=0x98b, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@empty, 0x4e22, 0x7f, 0x4e21, 0x28, 0xa, 0x0, 0x20, 0xfb, r9}, {0xba, 0x548d, 0x3, 0x4, 0xf2d, 0x3, 0x77, 0x75}, {0xffffffff, 0x8, 0x2, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0xff}, 0x2, @in6=@private0, 0x3505, 0x0, 0x1, 0xd, 0x0, 0xacdc, 0x101}}, 0xe8)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0)

290.805279ms ago: executing program 0 (id=231):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000)

221.627727ms ago: executing program 0 (id=232):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38)

221.438322ms ago: executing program 1 (id=233):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000840)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)

170.823196ms ago: executing program 1 (id=234):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4)

170.650086ms ago: executing program 1 (id=235):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)

142.88463ms ago: executing program 2 (id=236):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000040)="b9ff03316844268cb89614f086ddf2658844a2fd7648728441117d46ee8efb6e3d1940c4343965d2645d67e1d124fe35917efe8a5082", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

91.888244ms ago: executing program 1 (id=237):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xf, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

91.717156ms ago: executing program 2 (id=238):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)

0s ago: executing program 1 (id=239):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0xf0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xbc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0xfff1}}, @TCA_BPF_ACT={0x9c, 0x1, [@m_ctinfo={0x98, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3683' (ED25519) to the list of known hosts.
syzkaller login: [   56.453754][ T5812] cgroup: Unknown subsys name 'net'
[   56.585603][ T5812] cgroup: Unknown subsys name 'cpuset'
[   56.590300][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.738446][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.451031][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.460889][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.464164][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.467458][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.470575][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.473427][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.476577][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.480368][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.484989][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.510703][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.515851][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.520555][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.533156][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.536043][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.540215][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.870760][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   64.920139][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   64.970294][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.974089][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.977249][ T5838] bridge_slave_0: entered allmulticast mode
[   64.981307][ T5838] bridge_slave_0: entered promiscuous mode
[   64.988189][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.996760][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.999659][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.002714][ T5838] bridge_slave_1: entered allmulticast mode
[   65.006776][ T5838] bridge_slave_1: entered promiscuous mode
[   65.106948][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.155933][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.165119][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.167488][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.170134][ T5830] bridge_slave_0: entered allmulticast mode
[   65.174530][ T5830] bridge_slave_0: entered promiscuous mode
[   65.214131][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.216936][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.219885][ T5830] bridge_slave_1: entered allmulticast mode
[   65.225693][ T5830] bridge_slave_1: entered promiscuous mode
[   65.239837][ T5838] team0: Port device team_slave_0 added
[   65.242264][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.244433][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.246565][ T5834] bridge_slave_0: entered allmulticast mode
[   65.249422][ T5834] bridge_slave_0: entered promiscuous mode
[   65.270086][ T5838] team0: Port device team_slave_1 added
[   65.274041][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.276338][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.278573][ T5834] bridge_slave_1: entered allmulticast mode
[   65.281369][ T5834] bridge_slave_1: entered promiscuous mode
[   65.301455][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.333241][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.367526][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.370335][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.381549][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.403823][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.406625][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.418927][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.427493][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.470916][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.493938][ T5830] team0: Port device team_slave_0 added
[   65.500421][ T5830] team0: Port device team_slave_1 added
[   65.565772][ T5838] hsr_slave_0: entered promiscuous mode
[   65.568987][ T5838] hsr_slave_1: entered promiscuous mode
[   65.577501][ T5834] team0: Port device team_slave_0 added
[   65.580684][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.584771][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.595651][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.603830][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.606568][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.616839][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.624027][ T5834] team0: Port device team_slave_1 added
[   65.728081][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.730996][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.742582][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.758361][ T5830] hsr_slave_0: entered promiscuous mode
[   65.762623][ T5830] hsr_slave_1: entered promiscuous mode
[   65.765633][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.768764][ T5830] Cannot create hsr debugfs directory
[   65.771909][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.774752][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.784921][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.934634][ T5834] hsr_slave_0: entered promiscuous mode
[   65.937750][ T5834] hsr_slave_1: entered promiscuous mode
[   65.940623][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.944213][ T5834] Cannot create hsr debugfs directory
[   66.167213][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.179355][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.208832][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.217501][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.298360][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.310001][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.330302][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.335561][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.409351][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.418711][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.436944][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.451505][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.534676][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.543841][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.564367][   T54] Bluetooth: hci1: command tx timeout
[   66.564376][ T5220] Bluetooth: hci2: command tx timeout
[   66.564611][ T5220] Bluetooth: hci0: command tx timeout
[   66.569616][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   66.594915][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.598186][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.608950][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   66.624792][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.627689][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.641870][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.644754][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.666347][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.669070][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.698540][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.738398][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.769960][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   66.790127][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.793132][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.819645][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.832897][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.836009][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.958920][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.065417][ T5838] veth0_vlan: entered promiscuous mode
[   67.075375][ T5838] veth1_vlan: entered promiscuous mode
[   67.081559][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.123681][ T5838] veth0_macvtap: entered promiscuous mode
[   67.146739][ T5838] veth1_macvtap: entered promiscuous mode
[   67.159133][ T5830] veth0_vlan: entered promiscuous mode
[   67.172706][ T5830] veth1_vlan: entered promiscuous mode
[   67.179031][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.194507][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.213636][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.224750][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.227534][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.230192][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.233564][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.258977][ T5830] veth0_macvtap: entered promiscuous mode
[   67.265981][ T5834] veth0_vlan: entered promiscuous mode
[   67.277295][ T5830] veth1_macvtap: entered promiscuous mode
[   67.303384][ T5834] veth1_vlan: entered promiscuous mode
[   67.328481][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.365678][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.374552][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.376428][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.377357][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.380707][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.392990][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.396437][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.426406][ T5834] veth0_macvtap: entered promiscuous mode
[   67.447396][ T5834] veth1_macvtap: entered promiscuous mode
[   67.463876][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.467172][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.506210][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.529085][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.531227][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.536593][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.541264][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.555819][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.558914][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.563295][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.566673][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.611479][  T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.627446][  T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.686090][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.689180][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.730278][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.732882][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.088827][ T5927] xt_l2tp: v2 doesn't support IP mode
[   68.146257][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'.
[   68.149792][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'.
[   68.325753][ T5945] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.390109][ T5948] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   68.395929][ T5948] netlink: 224 bytes leftover after parsing attributes in process `syz.0.24'.
[   68.643966][ T5220] Bluetooth: hci1: command tx timeout
[   68.644299][ T5833] Bluetooth: hci2: command tx timeout
[   68.646593][ T5220] Bluetooth: hci0: command tx timeout
[   68.953202][ T5977] tap0: tun_chr_ioctl cmd 1074025676
[   68.955519][ T5977] tap0: owner set to 0
[   69.114047][ T5984] netlink: 248 bytes leftover after parsing attributes in process `syz.1.41'.
[   69.118963][ T5986] Zero length message leads to an empty skb
[   69.158631][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'.
[   69.219249][ T5988] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 57481 - 0
[   69.239765][ T5988] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 57481 - 0
[   69.250039][ T5988] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 57481 - 0
[   69.255950][ T5988] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 57481 - 0
[   69.274049][ T5988] geneve2: entered promiscuous mode
[   69.277389][ T5988] geneve2: entered allmulticast mode
[   69.410286][ T6001] warning: `syz.2.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.454199][ T5988] syz.0.43 (5988) used greatest stack depth: 20792 bytes left
[   69.663728][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'.
[   70.325017][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.730084][ T5220] Bluetooth: hci2: command tx timeout
[   70.730136][   T54] Bluetooth: hci1: command tx timeout
[   70.732619][ T5220] Bluetooth: hci0: command tx timeout
[   70.839419][ T6087] openvswitch: netlink: Message has 4 unknown bytes.
[   71.129480][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.132439][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.350555][ T6130] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   71.377206][ T6132] tipc: Started in network mode
[   71.379045][ T6132] tipc: Node identity 321f1753f32d, cluster identity 4711
[   71.381334][ T6132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.389695][ T6132] syzkaller0: entered promiscuous mode
[   71.391376][ T6132] syzkaller0: entered allmulticast mode
[   71.411335][ T6132] tipc: Resetting bearer <eth:syzkaller0>
[   71.418599][ T6131] tipc: Resetting bearer <eth:syzkaller0>
[   71.431308][ T6131] tipc: Disabling bearer <eth:syzkaller0>
[   71.953363][ T6159] netlink: 128 bytes leftover after parsing attributes in process `syz.0.101'.
[   72.251436][   T33] audit: type=1804 audit(1752149050.514:2): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.108" name="/newroot/23/cgroup.controllers" dev="tmpfs" ino=134 res=1 errno=0
[   72.275056][   T33] audit: type=1800 audit(1752149050.514:3): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.108" name="cgroup.controllers" dev="tmpfs" ino=134 res=0 errno=0
[   72.328307][ T6177] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   72.331325][ T6177] netlink: 136 bytes leftover after parsing attributes in process `syz.1.109'.
[   72.336921][ T6177] netlink: 'syz.1.109': attribute type 2 has an invalid length.
[   72.340134][ T6177] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   72.598324][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.118'.
[   72.657717][ T6200] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.121'.
[   72.727919][ T6204] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) !
[   72.802937][ T5220] Bluetooth: hci0: command tx timeout
[   72.811981][ T5220] Bluetooth: hci1: command tx timeout
[   72.812793][   T54] Bluetooth: hci2: command tx timeout
[   72.954484][ T6226] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   73.020779][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.416938][ T6249] tipc: Started in network mode
[   73.418947][ T6249] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711
[   73.425385][ T6249] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.614952][ T6257] netlink: 'syz.1.149': attribute type 10 has an invalid length.
[   73.617428][ T6257] __nla_validate_parse: 1 callbacks suppressed
[   73.617435][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.149'.
[   73.658712][ T6257] team0: Port device geneve0 added
[   73.677214][ T6257] syz.1.149 (6257) used greatest stack depth: 20568 bytes left
[   73.970158][ T6288] veth0: entered promiscuous mode
[   73.984811][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[   74.017510][ T6288] veth0 (unregistering): left promiscuous mode
[   74.323681][ T6315] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.177'.
[   74.728129][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'.
[   74.999447][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   75.288289][ T6374] nbd0: detected capacity change from 0 to 127
[   75.291291][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'.
[   75.311276][   T55] block nbd0: Receive control failed (result -104)
[   75.493941][ T6397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'.
[   75.746477][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   75.765926][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   75.774688][ T6423] gtp0: entered promiscuous mode
[   75.776658][ T6423] gtp0: entered allmulticast mode
[   75.818605][ T6425] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   75.879286][ T6429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.222'.
[   75.894349][ T5725] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.899148][ T5725] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   75.912084][ T5883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.054975][ T6451] sctp: [Deprecated]: syz.1.233 (pid 6451) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.054975][ T6451] Use struct sctp_sack_info instead
[   76.101833][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.192443][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.284039][   T26] 
[   76.284975][   T26] ======================================================
[   76.287224][   T26] WARNING: possible circular locking dependency detected
[   76.289346][   T26] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   76.293197][   T26] ------------------------------------------------------
[   76.295344][   T26] kworker/u9:0/26 is trying to acquire lock:
[   76.297104][   T26] ffff888020562358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   76.299979][   T26] 
[   76.299979][   T26] but task is already holding lock:
[   76.302772][   T26] ffff88802055f988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   76.305571][   T26] 
[   76.305571][   T26] which lock already depends on the new lock.
[   76.305571][   T26] 
[   76.308892][   T26] 
[   76.308892][   T26] the existing dependency chain (in reverse order) is:
[   76.311936][   T26] 
[   76.311936][   T26] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   76.314391][   T26]        lock_acquire+0x120/0x360
[   76.315852][   T26]        down_write+0x96/0x1f0
[   76.317251][   T26]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   76.319091][   T26]        nbd_start_device+0x16c/0xac0
[   76.321059][   T26]        nbd_genl_connect+0x1250/0x1930
[   76.323192][   T26]        genl_family_rcv_msg_doit+0x215/0x300
[   76.325506][   T26]        genl_rcv_msg+0x60e/0x790
[   76.327462][   T26]        netlink_rcv_skb+0x208/0x470
[   76.329140][   T26]        genl_rcv+0x28/0x40
[   76.330537][   T26]        netlink_unicast+0x75b/0x8d0
[   76.332109][   T26]        netlink_sendmsg+0x805/0xb30
[   76.333762][   T26]        __sock_sendmsg+0x21c/0x270
[   76.335299][   T26]        ____sys_sendmsg+0x505/0x830
[   76.336891][   T26]        ___sys_sendmsg+0x21f/0x2a0
[   76.338474][   T26]        __x64_sys_sendmsg+0x19b/0x260
[   76.340316][   T26]        do_syscall_64+0xfa/0x3b0
[   76.342269][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.344262][   T26] 
[   76.344262][   T26] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   76.346569][   T26]        lock_acquire+0x120/0x360
[   76.348048][   T26]        __mutex_lock+0x182/0xe80
[   76.349555][   T26]        refcount_dec_and_mutex_lock+0x30/0xa0
[   76.351364][   T26]        nbd_config_put+0x2c/0x790
[   76.352941][   T26]        nbd_release+0xfe/0x140
[   76.354467][   T26]        bdev_release+0x536/0x650
[   76.355981][   T26]        blkdev_release+0x15/0x20
[   76.357494][   T26]        __fput+0x44c/0xa70
[   76.358831][   T26]        fput_close_sync+0x119/0x200
[   76.360496][   T26]        __x64_sys_close+0x7f/0x110
[   76.362036][   T26]        do_syscall_64+0xfa/0x3b0
[   76.363516][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.365395][   T26] 
[   76.365395][   T26] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   76.367713][   T26]        validate_chain+0xb9b/0x2140
[   76.369270][   T26]        __lock_acquire+0xab9/0xd20
[   76.371200][   T26]        lock_acquire+0x120/0x360
[   76.372949][   T26]        __mutex_lock+0x182/0xe80
[   76.374552][   T26]        __del_gendisk+0x129/0x9e0
[   76.376172][   T26]        del_gendisk+0xe8/0x160
[   76.377629][   T26]        nbd_dev_remove_work+0x47/0xe0
[   76.379251][   T26]        process_scheduled_works+0xae1/0x17b0
[   76.381548][   T26]        worker_thread+0x8a0/0xda0
[   76.383183][   T26]        kthread+0x711/0x8a0
[   76.384594][   T26]        ret_from_fork+0x3fc/0x770
[   76.386132][   T26]        ret_from_fork_asm+0x1a/0x30
[   76.387775][   T26] 
[   76.387775][   T26] other info that might help us debug this:
[   76.387775][   T26] 
[   76.390814][   T26] Chain exists of:
[   76.390814][   T26]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   76.390814][   T26] 
[   76.394914][   T26]  Possible unsafe locking scenario:
[   76.394914][   T26] 
[   76.397090][   T26]        CPU0                    CPU1
[   76.398689][   T26]        ----                    ----
[   76.400460][   T26]   rlock(&set->update_nr_hwq_lock);
[   76.402474][   T26]                                lock(&nbd->config_lock);
[   76.404662][   T26]                                lock(&set->update_nr_hwq_lock);
[   76.406934][   T26]   lock(&disk->open_mutex);
[   76.408296][   T26] 
[   76.408296][   T26]  *** DEADLOCK ***
[   76.408296][   T26] 
[   76.411033][   T26] 3 locks held by kworker/u9:0/26:
[   76.412593][   T26]  #0: ffff888020558948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   76.415757][   T26]  #1: ffffc900001efbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   76.419281][   T26]  #2: ffff88802055f988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   76.422203][   T26] 
[   76.422203][   T26] stack backtrace:
[   76.423952][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   76.423963][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.423969][   T26] Workqueue: nbd-del nbd_dev_remove_work
[   76.423982][   T26] Call Trace:
[   76.423986][   T26]  <TASK>
[   76.424023][   T26]  dump_stack_lvl+0x189/0x250
[   76.424035][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.424043][   T26]  ? __pfx__printk+0x10/0x10
[   76.424056][   T26]  ? print_lock_name+0xde/0x100
[   76.424066][   T26]  print_circular_bug+0x2ee/0x310
[   76.424076][   T26]  check_noncircular+0x134/0x160
[   76.424087][   T26]  validate_chain+0xb9b/0x2140
[   76.424097][   T26]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   76.424109][   T26]  ? arch_stack_walk+0x11c/0x150
[   76.424121][   T26]  __lock_acquire+0xab9/0xd20
[   76.424130][   T26]  ? __del_gendisk+0x129/0x9e0
[   76.424139][   T26]  lock_acquire+0x120/0x360
[   76.424146][   T26]  ? __del_gendisk+0x129/0x9e0
[   76.424155][   T26]  ? check_path+0x21/0x40
[   76.424164][   T26]  __mutex_lock+0x182/0xe80
[   76.424172][   T26]  ? __del_gendisk+0x129/0x9e0
[   76.424181][   T26]  ? __del_gendisk+0x129/0x9e0
[   76.424189][   T26]  ? __pfx___mutex_lock+0x10/0x10
[   76.424197][   T26]  ? __pfx___might_resched+0x10/0x10
[   76.424208][   T26]  ? __lock_acquire+0xab9/0xd20
[   76.424216][   T26]  ? disk_del_events+0xb5/0x210
[   76.424226][   T26]  ? __del_gendisk+0xc1/0x9e0
[   76.424234][   T26]  __del_gendisk+0x129/0x9e0
[   76.424242][   T26]  ? del_gendisk+0xe0/0x160
[   76.424250][   T26]  ? __pfx___del_gendisk+0x10/0x10
[   76.424259][   T26]  ? down_read+0x1ad/0x2e0
[   76.424267][   T26]  del_gendisk+0xe8/0x160
[   76.424275][   T26]  nbd_dev_remove_work+0x47/0xe0
[   76.424283][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   76.424292][   T26]  process_scheduled_works+0xae1/0x17b0
[   76.424305][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.424316][   T26]  worker_thread+0x8a0/0xda0
[   76.424328][   T26]  kthread+0x711/0x8a0
[   76.424340][   T26]  ? __pfx_worker_thread+0x10/0x10
[   76.424348][   T26]  ? __pfx_kthread+0x10/0x10
[   76.424357][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.424402][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.424409][   T26]  ? __pfx_kthread+0x10/0x10
[   76.424418][   T26]  ret_from_fork+0x3fc/0x770
[   76.424427][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[   76.424436][   T26]  ? __switch_to_asm+0x39/0x70
[   76.424445][   T26]  ? __switch_to_asm+0x33/0x70
[   76.424454][   T26]  ? __pfx_kthread+0x10/0x10
[   76.424463][   T26]  ret_from_fork_asm+0x1a/0x30
[   76.424475][   T26]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   76.938021][ T5863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.987387][ T5863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.055083][ T5863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.111304][ T5863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.200335][ T5863] bridge_slave_1: left allmulticast mode
[   77.203415][ T5863] bridge_slave_1: left promiscuous mode
[   77.205566][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.208983][ T5863] bridge_slave_0: left allmulticast mode
[   77.211195][ T5863] bridge_slave_0: left promiscuous mode
[   77.213957][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.268634][ T5863] team0: Port device geneve0 removed
[   77.337142][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.341882][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.345994][ T5863] bond0 (unregistering): Released all slaves
[   79.023230][ T5863] tipc: Left network mode
[   79.169870][ T5863] hsr_slave_0: left promiscuous mode
[   79.172576][ T5863] hsr_slave_1: left promiscuous mode
[   79.175062][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.177927][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.181020][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.185070][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.190673][ T5863] veth1_macvtap: left promiscuous mode
[   79.192937][ T5863] veth0_macvtap: left promiscuous mode
[   79.195151][ T5863] veth1_vlan: left promiscuous mode
[   79.197254][ T5863] veth0_vlan: left promiscuous mode
[   79.335296][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   79.349334][ T5863] team0 (unregistering): Port device team_slave_0 removed
[   79.738021][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.742006][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57481 - 0
[   79.795696][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.799400][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57481 - 0
[   79.845570][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.849351][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57481 - 0
[   79.907753][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.911775][ T5863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57481 - 0
[   79.931813][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   79.987596][ T5863] bridge_slave_1: left allmulticast mode
[   79.991782][ T5863] bridge_slave_1: left promiscuous mode
[   79.994125][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.998144][ T5863] bridge_slave_0: left allmulticast mode
[   80.000394][ T5863] bridge_slave_0: left promiscuous mode
[   80.002901][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.187736][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.193274][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.197450][ T5863] bond0 (unregistering): Released all slaves
[   80.234411][ T5863] tipc: Left network mode
[   80.357737][ T5863] hsr_slave_0: left promiscuous mode
[   80.360266][ T5863] hsr_slave_1: left promiscuous mode
[   80.363622][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.366409][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.369744][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.372706][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.380410][ T5863] veth1_macvtap: left promiscuous mode
[   80.383830][ T5863] veth0_macvtap: left promiscuous mode
[   80.386520][ T5863] veth1_vlan: left promiscuous mode
[   80.388580][ T5863] veth0_vlan: left promiscuous mode
[   80.534198][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   80.549729][ T5863] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
12:04:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001eee10
R8 =ffff888108b10237 R9 =1ffff11021162046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78ff R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000540000 CR3=0000000026d2c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000011975 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffff000000 ffffffffffffffff XMM09=302d78742f736575 6575712f326e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff823c7f17 RBX=ffffc900032cef50 RCX=acf70f883e0bf000 RDX=ffffc900032cef01
RSI=ffffffff8be28fa0 RDI=ffffffff823c7f17 RBP=ffffc900032cef90 RSP=ffffc900032ceee8
R8 =ffffc900032cf410 R9 =0000000000000000 R10=ffffc900032cef58 R11=fffff52000659ded
R12=ffff888023715640 R13=1ffff92000659e64 R14=dffffc0000000000 R15=1ffff92000659dea
RIP=ffffffff81729963 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555592491500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c354e71 CR3=000000001f2be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb131211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
