last executing test programs:

770.53913ms ago: executing program 0 (id=1081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)

677.35318ms ago: executing program 0 (id=1084):
unshare(0x22020600)
r0 = socket$inet(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)

610.432428ms ago: executing program 0 (id=1086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffda0, 0x82}}]}, 0x3c}}, 0x0)

610.041916ms ago: executing program 0 (id=1088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe000001000000008400120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000845}, 0x0)

548.774829ms ago: executing program 0 (id=1091):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040080)

479.320218ms ago: executing program 0 (id=1092):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x4040000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8)

227.945242ms ago: executing program 2 (id=1098):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000080)=0x40000000, 0x4)

227.695738ms ago: executing program 1 (id=1099):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r0}, 0x38)

227.466302ms ago: executing program 2 (id=1100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240004000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)

138.4382ms ago: executing program 2 (id=1101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffc, 0x10000003, 0xfffffffa, 0x0, 0x4000000, {}, {0x0, 0x0, 0xfffc, 0x0, 0x0, 0x8}, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

138.034673ms ago: executing program 1 (id=1102):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)='\f', 0x1}], 0x1, 0x0, 0x0, 0x26040885}, 0x20000040)

137.44055ms ago: executing program 2 (id=1103):
r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @null, @default, @rose, @default, @remote, @null]}, &(0x7f0000000080)=0x48)
bind$netrom(r0, &(0x7f00000000c0)={{0x3, @default, 0x1}, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x800)

56.646208ms ago: executing program 1 (id=1104):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x30}}, 0x0)

56.279019ms ago: executing program 2 (id=1105):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000004000000ff0000000000deff170000000000000029"], 0x30}}], 0x1, 0x4000084)

55.941801ms ago: executing program 1 (id=1106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)

644.762µs ago: executing program 2 (id=1107):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x400c000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r8, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

85.931µs ago: executing program 1 (id=1108):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000100), 0x1001)
pread64(r0, 0x0, 0x300, 0x1)

0s ago: executing program 1 (id=1109):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000a"], 0x2c}, 0x1, 0xc00000000000000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40967' (ED25519) to the list of known hosts.
syzkaller login: [   56.013406][ T5817] cgroup: Unknown subsys name 'net'
[   56.144324][ T5817] cgroup: Unknown subsys name 'cpuset'
[   56.149918][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.795454][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.991645][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.995585][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.998458][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.001643][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.005022][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.051524][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.055262][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.058524][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.061399][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.064306][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.091739][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.095275][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.098108][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.101619][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.104629][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.336276][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.551351][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.554349][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.557389][ T5832] bridge_slave_0: entered allmulticast mode
[   64.561004][ T5832] bridge_slave_0: entered promiscuous mode
[   64.566111][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.568401][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.570659][ T5832] bridge_slave_1: entered allmulticast mode
[   64.574683][ T5832] bridge_slave_1: entered promiscuous mode
[   64.649269][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   64.661887][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.665145][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   64.680038][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.721892][ T5832] team0: Port device team_slave_0 added
[   64.733135][ T5832] team0: Port device team_slave_1 added
[   64.839464][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.842836][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.853012][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.880501][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.883504][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.893492][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.953430][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.955725][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.958084][ T5839] bridge_slave_0: entered allmulticast mode
[   64.961217][ T5839] bridge_slave_0: entered promiscuous mode
[   64.964905][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.967471][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.969934][ T5837] bridge_slave_0: entered allmulticast mode
[   64.972953][ T5837] bridge_slave_0: entered promiscuous mode
[   64.976324][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.978851][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.981680][ T5839] bridge_slave_1: entered allmulticast mode
[   64.984681][ T5839] bridge_slave_1: entered promiscuous mode
[   64.996300][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.998522][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.001569][ T5837] bridge_slave_1: entered allmulticast mode
[   65.004346][ T5837] bridge_slave_1: entered promiscuous mode
[   65.034050][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.075315][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.083178][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.092361][ T5832] hsr_slave_0: entered promiscuous mode
[   65.095648][ T5832] hsr_slave_1: entered promiscuous mode
[   65.114464][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.165591][ T5839] team0: Port device team_slave_0 added
[   65.186948][ T5837] team0: Port device team_slave_0 added
[   65.198689][ T5839] team0: Port device team_slave_1 added
[   65.218205][ T5837] team0: Port device team_slave_1 added
[   65.286557][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.289255][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.299348][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.304873][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.307506][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.317361][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.337903][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.340557][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.351593][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.356751][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.359407][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.369004][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.477384][ T5839] hsr_slave_0: entered promiscuous mode
[   65.479687][ T5839] hsr_slave_1: entered promiscuous mode
[   65.482262][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.484727][ T5839] Cannot create hsr debugfs directory
[   65.492552][ T5837] hsr_slave_0: entered promiscuous mode
[   65.495636][ T5837] hsr_slave_1: entered promiscuous mode
[   65.498436][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.502058][ T5837] Cannot create hsr debugfs directory
[   65.703147][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.728457][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.747514][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.753474][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.818045][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.846115][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.858768][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.875406][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.902567][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.914509][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.923283][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.932422][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.983905][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.020740][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   66.045116][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.047465][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.054233][ T5834] Bluetooth: hci0: command tx timeout
[   66.065695][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.067964][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.105131][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.131228][ T5834] Bluetooth: hci2: command tx timeout
[   66.134027][ T5834] Bluetooth: hci1: command tx timeout
[   66.157121][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.194264][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   66.215450][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.218294][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.231613][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   66.236583][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.239380][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.259270][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.262197][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.277386][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.280209][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.433366][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.537850][ T5832] veth0_vlan: entered promiscuous mode
[   66.573531][ T5832] veth1_vlan: entered promiscuous mode
[   66.606222][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.639876][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.648846][ T5832] veth0_macvtap: entered promiscuous mode
[   66.667024][ T5832] veth1_macvtap: entered promiscuous mode
[   66.679813][ T5837] veth0_vlan: entered promiscuous mode
[   66.706477][ T5837] veth1_vlan: entered promiscuous mode
[   66.722491][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.743476][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.752977][ T5839] veth0_vlan: entered promiscuous mode
[   66.760095][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.764523][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.767897][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.772604][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.784051][ T5839] veth1_vlan: entered promiscuous mode
[   66.816240][ T5837] veth0_macvtap: entered promiscuous mode
[   66.824356][ T5837] veth1_macvtap: entered promiscuous mode
[   66.887104][ T5839] veth0_macvtap: entered promiscuous mode
[   66.904303][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.913137][ T5839] veth1_macvtap: entered promiscuous mode
[   66.940801][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.976837][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.981444][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.985040][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.988566][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.993803][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.012582][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.015917][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.017070][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.058669][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.063489][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.066824][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.070115][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.090049][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.098852][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.195499][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.247405][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.250461][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.270792][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.285926][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.355714][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.358917][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.404213][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.407313][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.415347][ T5899] netlink: 'syz.1.4': attribute type 4 has an invalid length.
[   67.718294][ T5910] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   67.725410][ T5910] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   67.793731][ T5915] netlink: 'syz.1.10': attribute type 21 has an invalid length.
[   67.797252][ T5916] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[   67.819954][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.824095][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.953915][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.964493][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.046929][ T5911] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.050657][ T5911] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.058853][ T5911] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.062992][ T5911] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.125107][ T5915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10'.
[   68.131311][   T53] Bluetooth: hci0: command tx timeout
[   68.211224][   T53] Bluetooth: hci1: command tx timeout
[   68.212504][ T5834] Bluetooth: hci2: command tx timeout
[   68.252628][ T5911] syz.0.8 (5911) used greatest stack depth: 20312 bytes left
[   69.075891][ T5971] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   69.552848][ T5982] netlink: 204 bytes leftover after parsing attributes in process `syz.1.33'.
[   69.634080][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'.
[   69.708072][ T5990] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20007
[   69.862995][ T5996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.019238][ T6012] netlink: 'syz.1.41': attribute type 2 has an invalid length.
[   70.206767][ T6022] trusted_key: syz.1.46 sent an empty control message without MSG_MORE.
[   70.254954][ T6024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.292713][ T5834] Bluetooth: hci2: command tx timeout
[   70.292775][   T53] Bluetooth: hci1: command tx timeout
[   70.294919][ T6026] netlink: 52 bytes leftover after parsing attributes in process `syz.1.48'.
[   70.300021][ T6026] netlink: 52 bytes leftover after parsing attributes in process `syz.1.48'.
[   70.442032][ T6034] unknown channel width for channel at 909000KHz?
[   70.445530][ T6034] unknown channel width for channel at 909000KHz?
[   70.654355][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'.
[   70.665978][ T6046] netlink: 'syz.1.55': attribute type 13 has an invalid length.
[   70.671268][ T6046] netlink: 'syz.1.55': attribute type 17 has an invalid length.
[   70.710090][ T6046] gretap0: refused to change device tx_queue_len
[   70.714188][ T6046] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   70.714702][ T6048] Unsupported ieee802154 address type: 0
[   70.736524][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.808995][ T6055] netlink: 76 bytes leftover after parsing attributes in process `syz.0.60'.
[   70.938137][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.65'.
[   70.941313][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.65'.
[   71.164601][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'.
[   71.258595][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.261111][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.582220][ T6111] netlink: 'syz.2.84': attribute type 27 has an invalid length.
[   71.603690][ T5277] udevd[5277]: worker [5835] terminated by signal 33 (Unknown signal 33)
[   71.607182][ T5277] udevd[5277]: worker [5835] failed while handling '/devices/virtual/block/loop2'
[   71.629226][ T6115] netlink: 'syz.1.85': attribute type 7 has an invalid length.
[   71.634546][ T6115] netlink: 'syz.1.85': attribute type 3 has an invalid length.
[   71.694425][ T6114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.371228][ T5834] Bluetooth: hci2: command tx timeout
[   72.381139][ T5834] Bluetooth: hci1: command tx timeout
[   72.763170][    T9] cfg80211: failed to load regulatory.db
[   73.997436][ T6197] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   74.020103][ T6197] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   74.306041][ T6211] lo speed is unknown, defaulting to 1000
[   74.308536][ T6211] lo speed is unknown, defaulting to 1000
[   74.318956][ T6211] lo speed is unknown, defaulting to 1000
[   74.326691][ T6211] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.340758][ T6211] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   74.406916][ T6211] lo speed is unknown, defaulting to 1000
[   74.425082][ T6211] lo speed is unknown, defaulting to 1000
[   74.428806][ T6211] lo speed is unknown, defaulting to 1000
[   74.437568][    T9] IPVS: starting estimator thread 0...
[   74.446226][ T6221] netlink: 'syz.0.128': attribute type 8 has an invalid length.
[   74.451121][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[   74.460012][ T6215] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   74.464249][ T6215] __nla_validate_parse: 7 callbacks suppressed
[   74.464262][ T6215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.127'.
[   74.541127][ T6220] IPVS: using max 39 ests per chain, 93600 per kthread
[   74.585241][ T6225] netlink: 'syz.2.129': attribute type 1 has an invalid length.
[   74.591757][ T6225] netlink: 'syz.2.129': attribute type 2 has an invalid length.
[   74.595571][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'.
[   74.646724][ T6230] syzkaller0: entered promiscuous mode
[   74.654239][ T6230] syzkaller0: entered allmulticast mode
[   74.668345][ T6230] tipc: Started in network mode
[   74.669859][ T6230] tipc: Node identity f6f3e9dc9e2e, cluster identity 4711
[   74.677558][ T6230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.701996][ T6234] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   74.712397][ T6229] tipc: Resetting bearer <eth:syzkaller0>
[   74.753305][ T6229] tipc: Disabling bearer <eth:syzkaller0>
[   74.957267][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'.
[   75.240692][ T6279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.401714][ T6291] warning: `syz.0.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.770514][ T6310] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.791119][ T6310] Zero length message leads to an empty skb
[   76.006880][ T6332] netlink: 168 bytes leftover after parsing attributes in process `syz.2.177'.
[   76.143139][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   76.205696][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   76.208901][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'.
[   76.533278][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[   77.012010][ T6386] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   77.069424][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   77.856598][ T6431] netlink: 'syz.1.225': attribute type 2 has an invalid length.
[   77.892338][ T6433] lo speed is unknown, defaulting to 1000
[   77.910434][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'.
[   77.921631][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[   77.969014][ T5894] IPVS: starting estimator thread 0...
[   78.024889][ T6432] lo speed is unknown, defaulting to 1000
[   78.071059][ T6441] IPVS: using max 35 ests per chain, 84000 per kthread
[   78.363059][ T6464] sctp: [Deprecated]: syz.1.236 (pid 6464) Use of int in max_burst socket option deprecated.
[   78.363059][ T6464] Use struct sctp_assoc_value instead
[   78.673743][ T6480] syz_tun: entered allmulticast mode
[   79.255498][ T6509] ieee802154 phy0 wpan0: encryption failed: -22
[   79.664567][ T6542] __nla_validate_parse: 3 callbacks suppressed
[   79.664581][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'.
[   79.668305][ T6536] syzkaller0: entered promiscuous mode
[   79.669511][ T6542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.261'.
[   79.672459][ T6536] syzkaller0: entered allmulticast mode
[   79.708604][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   79.919477][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[   79.985521][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[   80.096790][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'.
[   80.101075][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'.
[   80.104722][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'.
[   80.125636][ T6565] IPv6: addrconf: prefix option has invalid lifetime
[   80.500199][ T6586] netlink: 'syz.2.281': attribute type 21 has an invalid length.
[   80.509414][ T6586] netlink: 156 bytes leftover after parsing attributes in process `syz.2.281'.
[   81.449150][ T6594] xt_CT: You must specify a L4 protocol and not use inversions on it
[   81.690412][ T6619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.779091][ T6626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.781639][ T6626] IPv6: NLM_F_CREATE should be set when creating new route
[   81.783817][ T6626] IPv6: NLM_F_CREATE should be set when creating new route
[   81.786027][ T6626] IPv6: NLM_F_CREATE should be set when creating new route
[   81.790694][ T6626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.956131][ T6638] sctp: [Deprecated]: syz.0.296 (pid 6638) Use of int in max_burst socket option.
[   81.956131][ T6638] Use struct sctp_assoc_value instead
[   82.157774][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'.
[   82.566192][ T6660] netlink: 'syz.1.307': attribute type 1 has an invalid length.
[   82.950262][ T6678] netlink: 'syz.1.316': attribute type 10 has an invalid length.
[   83.565065][ T6713] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   84.408524][ T6747] netlink: 'syz.0.348': attribute type 21 has an invalid length.
[   84.469432][ T6752] xt_bpf: check failed: parse error
[   84.690464][ T6762] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   84.800197][ T6775] gretap1: entered allmulticast mode
[   85.027199][ T6791] lo speed is unknown, defaulting to 1000
[   85.270073][ T6791] __nla_validate_parse: 1 callbacks suppressed
[   85.270093][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'.
[   85.284861][ T6791] syzkaller1: entered promiscuous mode
[   85.286565][ T6791] syzkaller1: entered allmulticast mode
[   85.296466][ T6806] xt_SECMARK: invalid mode: 0
[   85.613658][ T6821] ip6t_srh: unknown srh match flags  4000
[   85.658503][ T6825] netlink: 'syz.1.382': attribute type 1 has an invalid length.
[   85.698508][ T6825] bond1: (slave bridge1): making interface the new active one
[   85.703523][ T6825] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   86.630431][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   86.638591][ T6851] netlink: 'syz.0.393': attribute type 30 has an invalid length.
[   86.660087][ T6851] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.663483][ T6851] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.666940][ T6851] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.672457][ T6851] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.681309][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   86.684920][ T6851] netlink: 'syz.0.393': attribute type 30 has an invalid length.
[   86.805394][ T6857] netlink: 'syz.1.396': attribute type 1 has an invalid length.
[   86.966824][   T33] audit: type=1800 audit(1752091666.686:2): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.403" name="@" dev="tmpfs" ino=814 res=0 errno=0
[   86.973393][   T33] audit: type=1804 audit(1752091666.686:3): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.403" name="@" dev="tmpfs" ino=814 res=1 errno=0
[   87.885351][ T6932] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   88.092553][ T6950] vcan0: tx drop: invalid da for name 0x0000000000000001
[   88.119933][ T6952] netlink: 'syz.0.432': attribute type 1 has an invalid length.
[   88.340347][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e2ffc00: rx timeout, send abort
[   88.841464][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e2fec00: rx timeout, send abort
[   88.844905][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e2ffc00: abort rx timeout. Force session deactivation
[   89.043989][ T7000] netlink: 'syz.2.455': attribute type 1 has an invalid length.
[   89.048834][ T7000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.455'.
[   89.208077][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'.
[   89.215490][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'.
[   89.344114][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e2fec00: abort rx timeout. Force session deactivation
[   89.659020][   T33] audit: type=1800 audit(1752091669.376:4): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.470" name="memory.events" dev="tmpfs" ino=865 res=0 errno=0
[   89.867613][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'.
[   89.998369][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'.
[   90.044651][ T7072] wireguard0: entered promiscuous mode
[   90.046702][ T7072] wireguard0: entered allmulticast mode
[   90.373323][ T7092] lo speed is unknown, defaulting to 1000
[   90.760655][ T7111] sch_fq: defrate 3 ignored.
[   90.865457][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[   90.868085][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'.
[   91.019245][ T7129] syzkaller1: tun_chr_ioctl cmd 1074025672
[   91.026807][ T7129] syzkaller1: ignored: set checksum enabled
[   91.112531][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[   91.153337][ T7133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.359222][ T7149] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   91.359294][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[   91.365542][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'.
[   91.409139][ T7151] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   91.533820][ T7156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'.
[   91.539315][ T7156] lo: entered allmulticast mode
[   91.541754][ T7156] tunl0: entered allmulticast mode
[   91.543977][ T7156] gre0: entered allmulticast mode
[   91.546272][ T7156] gretap0: entered allmulticast mode
[   91.553133][ T7156] erspan0: entered allmulticast mode
[   91.565436][ T7156] ip_vti0: entered allmulticast mode
[   91.569636][ T7156] ip6_vti0: entered allmulticast mode
[   91.577803][ T7156] sit0: entered allmulticast mode
[   91.597946][ T7156] ip6tnl0: entered allmulticast mode
[   91.603196][ T7156] ip6gre0: entered allmulticast mode
[   91.631637][ T7156] syz_tun: entered allmulticast mode
[   91.640386][ T7168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.527'.
[   91.651407][ T7156] ip6gretap0: entered allmulticast mode
[   91.657935][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.662325][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.671374][ T7156] bridge0: entered allmulticast mode
[   91.680410][ T7156] vcan0: entered allmulticast mode
[   91.694989][ T7156] bond0: entered allmulticast mode
[   91.697713][ T7156] bond_slave_0: entered allmulticast mode
[   91.700035][ T7156] bond_slave_1: entered allmulticast mode
[   91.708949][ T7156] team0: entered allmulticast mode
[   91.711855][ T7156] team_slave_0: entered allmulticast mode
[   91.715123][ T7156] team_slave_1: entered allmulticast mode
[   91.722643][ T7156] dummy0: entered allmulticast mode
[   91.742978][ T7156] nlmon0: entered allmulticast mode
[   91.747044][ T7156] caif0: entered allmulticast mode
[   91.750090][ T7156] batadv0: entered allmulticast mode
[   91.757663][ T7156] vxcan0: entered allmulticast mode
[   91.774807][ T7156] vxcan1: entered allmulticast mode
[   91.783661][ T7156] veth0: entered allmulticast mode
[   91.794467][ T7156] veth1: entered allmulticast mode
[   91.802428][ T7156] wg0: entered allmulticast mode
[   91.841478][ T7156] wg1: entered allmulticast mode
[   91.848127][ T7156] wg2: entered allmulticast mode
[   91.862882][ T7156] veth0_to_bridge: entered allmulticast mode
[   91.874632][ T7156] veth1_to_bridge: entered allmulticast mode
[   91.883537][ T7156] veth0_to_bond: entered allmulticast mode
[   91.895261][ T7156] veth1_to_bond: entered allmulticast mode
[   91.912899][ T7156] veth0_to_team: entered allmulticast mode
[   91.935522][ T7156] veth1_to_team: entered allmulticast mode
[   91.970034][ T7156] veth0_to_batadv: entered allmulticast mode
[   91.977866][ T7173] Bluetooth: MGMT ver 1.23
[   91.981591][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.985045][ T7156] batadv_slave_0: entered allmulticast mode
[   91.993150][ T7156] veth1_to_batadv: entered allmulticast mode
[   91.998282][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.006353][ T7156] batadv_slave_1: entered allmulticast mode
[   92.012593][ T7156] xfrm0: entered allmulticast mode
[   92.017471][ T7156] veth0_to_hsr: entered allmulticast mode
[   92.023431][ T7156] hsr_slave_0: entered allmulticast mode
[   92.028121][ T7156] veth1_to_hsr: entered allmulticast mode
[   92.034704][ T7156] hsr_slave_1: entered allmulticast mode
[   92.047869][ T7156] hsr0: entered allmulticast mode
[   92.053403][ T7156] veth1_virt_wifi: entered allmulticast mode
[   92.059182][ T7156] veth0_virt_wifi: entered allmulticast mode
[   92.064540][ T7156] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   92.068305][ T7156] veth1_vlan: entered allmulticast mode
[   92.074047][ T7156] veth0_vlan: entered allmulticast mode
[   92.092159][ T7156] vlan0: entered allmulticast mode
[   92.094691][ T7156] vlan1: entered allmulticast mode
[   92.097883][ T7156] macvlan0: entered allmulticast mode
[   92.098156][ T7183] netlink: 108 bytes leftover after parsing attributes in process `syz.2.528'.
[   92.104592][ T7156] macvlan1: entered allmulticast mode
[   92.113218][ T7156] ipvlan0: entered allmulticast mode
[   92.116640][ T7156] ipvlan1: entered allmulticast mode
[   92.119835][ T7156] veth1_macvtap: entered allmulticast mode
[   92.127133][ T7156] veth0_macvtap: entered allmulticast mode
[   92.133714][ T7156] macvtap0: entered allmulticast mode
[   92.141534][ T7156] macsec0: entered allmulticast mode
[   92.145914][ T7156] geneve0: entered allmulticast mode
[   92.149926][ T7156] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.152972][ T7156] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.156395][ T7156] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.160086][ T7156] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.164573][ T7156] geneve1: entered allmulticast mode
[   92.170473][ T7156] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   92.176050][ T7156] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[   92.184719][ T7156] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   92.191461][ T7156] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[   92.197003][ T7156] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   92.199625][ T7156] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   92.218043][ T7156] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   92.225052][ T7156] bond1: entered allmulticast mode
[   92.227196][ T7156] bridge1: entered allmulticast mode
[   92.231645][ T7156] syztnl0: entered allmulticast mode
[   92.234477][ T7156] bridge2: entered allmulticast mode
[   92.239735][ T7156] gtp0: entered allmulticast mode
[   92.243400][ T7156] vxlan0: entered allmulticast mode
[   92.245602][ T7156] syzkaller0: entered allmulticast mode
[   92.293298][ T7170] lo speed is unknown, defaulting to 1000
[   92.433623][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'.
[   93.109816][ T7218] batadv_slave_0: entered promiscuous mode
[   93.411296][ T5834] Bluetooth: hci0: command tx timeout
[   94.068608][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039434400: rx timeout, send abort
[   94.072426][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039434400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   94.078454][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039434000: rx timeout, send abort
[   94.081676][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039437c00: rx timeout, send abort
[   94.086188][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039437c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   94.091773][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039434000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   94.189614][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'.
[   94.382812][ T7262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.891787][ T7299] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   94.895391][ T7299] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   94.899831][ T7299] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   94.905208][ T7299] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   95.024327][ T7301] syzkaller0: entered promiscuous mode
[   95.026739][ T7301] syzkaller0: entered allmulticast mode
[   96.667798][ T7357] __nla_validate_parse: 5 callbacks suppressed
[   96.667812][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[   96.718361][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[   96.979288][ T7376] dvmrp8: entered allmulticast mode
[   96.984370][ T7375] dvmrp8: left allmulticast mode
[   97.025397][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.626'.
[   97.028920][ T7389] openvswitch: netlink: Flow key attr not present in new flow.
[   97.366869][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'.
[   97.419716][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'.
[   97.572635][ T7428] netlink: 'syz.2.643': attribute type 15 has an invalid length.
[   97.576843][ T7428] netlink: 666 bytes leftover after parsing attributes in process `syz.2.643'.
[   97.585023][ T7426] netlink: 'syz.1.642': attribute type 15 has an invalid length.
[   97.748535][ T7441] syzkaller0: entered allmulticast mode
[   97.872847][ T7451] netlink: 'syz.0.655': attribute type 10 has an invalid length.
[   97.880228][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.655'.
[   97.886700][ T7451] batadv0: entered promiscuous mode
[   97.889049][ T7451] bridge0: port 3(batadv0) entered blocking state
[   97.891972][ T7451] bridge0: port 3(batadv0) entered disabled state
[   97.894763][ T7451] batadv0: entered allmulticast mode
[   97.961539][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   97.965862][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   98.264779][ T7475] IPVS: length: 8 != 446622349272
[   98.409064][ T7486] lo speed is unknown, defaulting to 1000
[   98.739908][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[   99.140426][ T7536] netlink: 288 bytes leftover after parsing attributes in process `syz.0.694'.
[   99.243836][ T7543] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   99.273686][ T7541] netlink: 'syz.2.696': attribute type 25 has an invalid length.
[   99.276178][ T7541] netlink: 'syz.2.696': attribute type 1 has an invalid length.
[   99.278661][ T7541] bridge0: port 1(bridge_slave_0) entered learning state
[   99.388800][ T7554] netlink: 'syz.0.701': attribute type 1 has an invalid length.
[   99.489444][ T7561] lo speed is unknown, defaulting to 1000
[   99.614927][ T7561] netlink: 248 bytes leftover after parsing attributes in process `syz.1.706'.
[   99.754417][ T7572] team0 (unregistering): Port device team_slave_0 removed
[   99.759044][ T7572] team0 (unregistering): Port device team_slave_1 removed
[  100.726321][ T7632] netlink: 'syz.0.729': attribute type 21 has an invalid length.
[  100.729216][ T7632] netlink: 'syz.0.729': attribute type 4 has an invalid length.
[  100.734311][ T7632] netlink: 'syz.0.729': attribute type 3 has an invalid length.
[  100.764593][ T7634] netlink: del zone limit has 4 unknown bytes
[  100.880797][ T5734] IPVS: starting estimator thread 0...
[  100.968207][ T7653] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[  100.981629][ T7644] IPVS: using max 62 ests per chain, 148800 per kthread
[  101.317325][ T7681] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.387092][ T7681] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.391282][ T7681] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  101.395312][ T7681] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  101.447559][ T7690] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  101.502564][ T7695] hsr_slave_0: left promiscuous mode
[  101.505703][ T7695] hsr_slave_1: left promiscuous mode
[  101.676437][ T7707] __nla_validate_parse: 7 callbacks suppressed
[  101.676449][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  101.956136][ T7733] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.770'.
[  102.045702][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'.
[  102.209141][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'.
[  102.215180][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'.
[  102.384589][ T7769] netlink: 248 bytes leftover after parsing attributes in process `syz.0.787'.
[  103.326067][ T7823] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.813'.
[  103.620505][ T7847] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.103193][ T7884] validate_nla: 3 callbacks suppressed
[  104.103242][ T7884] netlink: 'syz.0.836': attribute type 13 has an invalid length.
[  104.472341][ T7908] macsec0: entered promiscuous mode
[  104.475632][ T7908] macsec0: left promiscuous mode
[  104.548415][ T7912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.620462][ T7912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.643116][ T7914] ipt_rpfilter: unknown options
[  104.678374][ T7912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.757675][ T7912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.833434][ T7912] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.845276][ T7912] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.855045][ T7912] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.867295][ T7912] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.137035][ T7937] SET target dimension over the limit!
[  105.275810][ T7944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.054723][ T7972] netlink: 304 bytes leftover after parsing attributes in process `syz.1.872'.
[  106.233104][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'.
[  107.872776][ T8101] x_tables: duplicate underflow at hook 3
[  107.904155][ T8104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.909478][  T789] lo speed is unknown, defaulting to 1000
[  107.946924][ T8111] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.930'.
[  108.139692][ T8133] sctp: [Deprecated]: syz.2.941 (pid 8133) Use of int in max_burst socket option.
[  108.139692][ T8133] Use struct sctp_assoc_value instead
[  108.156438][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.942'.
[  108.660379][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'.
[  108.754347][ T8179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.960'.
[  109.005302][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'.
[  109.247292][ T8209] lo speed is unknown, defaulting to 1000
[  109.426275][ T8223] netlink: 'syz.2.981': attribute type 84 has an invalid length.
[  109.446035][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  109.448746][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'.
[  109.581326][ T8233] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  109.641662][ T8230] lo speed is unknown, defaulting to 1000
[  109.863034][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'.
[  110.728896][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'.
[  111.673731][ T8307] netlink: 'syz.1.1015': attribute type 1 has an invalid length.
[  111.974878][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'.
[  112.158242][ T8348] xt_hashlimit: max too large, truncated to 1048576
[  112.383160][ T8366] netlink: 'syz.1.1041': attribute type 1 has an invalid length.
[  112.528655][ T8382] netlink: 'syz.1.1049': attribute type 7 has an invalid length.
[  112.533206][ T8382] netlink: 'syz.1.1049': attribute type 8 has an invalid length.
[  112.540645][ T8382] erspan0: entered promiscuous mode
[  112.544858][ T8382] gretap0: entered promiscuous mode
[  112.547592][ T8382] erspan0: left promiscuous mode
[  112.550463][ T8382] gretap0: left promiscuous mode
[  112.560649][ T8383] netlink: 'syz.0.1047': attribute type 39 has an invalid length.
[  112.827149][ T8396] netlink: 'syz.1.1055': attribute type 1 has an invalid length.
[  113.069965][ T8410] bridge4: entered allmulticast mode
[  113.279898][ T8427] __nla_validate_parse: 7 callbacks suppressed
[  113.279912][ T8427] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1070'.
[  113.327150][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'.
[  113.332389][ T8430] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1071'.
[  113.338699][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'.
[  113.486644][ T8438] syz_tun: entered allmulticast mode
[  113.494474][ T8437] syz_tun: left allmulticast mode
[  113.514410][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  113.614182][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1079'.
[  113.622908][ T8448] netlink: 'syz.1.1080': attribute type 5 has an invalid length.
[  113.775690][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  113.937097][ T8475] gre0: left allmulticast mode
[  113.939565][ T8475] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1093'.
[  113.943710][ T8475] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  114.414773][ T8510] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  114.442092][ T8508] 
[  114.443191][ T8508] ======================================================
[  114.445926][ T8508] WARNING: possible circular locking dependency detected
[  114.448632][ T8508] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  114.452607][ T8508] ------------------------------------------------------
[  114.455379][ T8508] syz.2.1107/8508 is trying to acquire lock:
[  114.457512][ T8508] ffff88801afd9188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  114.460963][ T8508] 
[  114.460963][ T8508] but task is already holding lock:
[  114.463788][ T8508] ffff88801afd9230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  114.467492][ T8508] 
[  114.467492][ T8508] which lock already depends on the new lock.
[  114.467492][ T8508] 
[  114.470714][ T8508] 
[  114.470714][ T8508] the existing dependency chain (in reverse order) is:
[  114.474130][ T8508] 
[  114.474130][ T8508] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  114.477139][ T8508]        lock_acquire+0x120/0x360
[  114.479179][ T8508]        __mutex_lock+0x182/0xe80
[  114.481220][ T8508]        refcount_dec_and_mutex_lock+0x30/0xa0
[  114.483663][ T8508]        nbd_config_put+0x2c/0x790
[  114.485661][ T8508]        nbd_release+0xfe/0x140
[  114.487619][ T8508]        bdev_release+0x536/0x650
[  114.489644][ T8508]        blkdev_release+0x15/0x20
[  114.491733][ T8508]        __fput+0x44c/0xa70
[  114.493554][ T8508]        fput_close_sync+0x119/0x200
[  114.495635][ T8508]        __x64_sys_close+0x7f/0x110
[  114.497676][ T8508]        do_syscall_64+0xfa/0x3b0
[  114.499663][ T8508]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.502188][ T8508] 
[  114.502188][ T8508] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  114.505269][ T8508]        lock_acquire+0x120/0x360
[  114.507290][ T8508]        __mutex_lock+0x182/0xe80
[  114.509313][ T8508]        __del_gendisk+0x129/0x9e0
[  114.511404][ T8508]        del_gendisk+0xe8/0x160
[  114.513404][ T8508]        nbd_dev_remove_work+0x47/0xe0
[  114.515585][ T8508]        process_scheduled_works+0xae1/0x17b0
[  114.517966][ T8508]        worker_thread+0x8a0/0xda0
[  114.519649][ T8508]        kthread+0x711/0x8a0
[  114.521230][ T8508]        ret_from_fork+0x3fc/0x770
[  114.523310][ T8508]        ret_from_fork_asm+0x1a/0x30
[  114.525178][ T8508] 
[  114.525178][ T8508] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  114.528029][ T8508]        validate_chain+0xb9b/0x2140
[  114.529748][ T8508]        __lock_acquire+0xab9/0xd20
[  114.531522][ T8508]        lock_acquire+0x120/0x360
[  114.533163][ T8508]        down_write+0x96/0x1f0
[  114.534674][ T8508]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  114.536735][ T8508]        nbd_start_device+0x16c/0xac0
[  114.538433][ T8508]        nbd_genl_connect+0x1250/0x1930
[  114.540687][ T8508]        genl_family_rcv_msg_doit+0x215/0x300
[  114.543065][ T8508]        genl_rcv_msg+0x60e/0x790
[  114.545052][ T8508]        netlink_rcv_skb+0x208/0x470
[  114.547167][ T8508]        genl_rcv+0x28/0x40
[  114.548973][ T8508]        netlink_unicast+0x75b/0x8d0
[  114.551052][ T8508]        netlink_sendmsg+0x805/0xb30
[  114.553174][ T8508]        __sock_sendmsg+0x21c/0x270
[  114.555180][ T8508]        ____sys_sendmsg+0x505/0x830
[  114.557220][ T8508]        ___sys_sendmsg+0x21f/0x2a0
[  114.559270][ T8508]        __x64_sys_sendmsg+0x19b/0x260
[  114.561408][ T8508]        do_syscall_64+0xfa/0x3b0
[  114.563410][ T8508]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.565937][ T8508] 
[  114.565937][ T8508] other info that might help us debug this:
[  114.565937][ T8508] 
[  114.569909][ T8508] Chain exists of:
[  114.569909][ T8508]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  114.569909][ T8508] 
[  114.575371][ T8508]  Possible unsafe locking scenario:
[  114.575371][ T8508] 
[  114.578250][ T8508]        CPU0                    CPU1
[  114.580304][ T8508]        ----                    ----
[  114.582358][ T8508]   lock(&nbd->config_lock);
[  114.584125][ T8508]                                lock(&disk->open_mutex);
[  114.586854][ T8508]                                lock(&nbd->config_lock);
[  114.589548][ T8508]   lock(&set->update_nr_hwq_lock);
[  114.591614][ T8508] 
[  114.591614][ T8508]  *** DEADLOCK ***
[  114.591614][ T8508] 
[  114.594747][ T8508] 3 locks held by syz.2.1107/8508:
[  114.596720][ T8508]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  114.599831][ T8508]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  114.603343][ T8508]  #2: ffff88801afd9230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  114.606899][ T8508] 
[  114.606899][ T8508] stack backtrace:
[  114.608719][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.2.1107 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  114.608730][ T8508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.608737][ T8508] Call Trace:
[  114.608743][ T8508]  <TASK>
[  114.608784][ T8508]  dump_stack_lvl+0x189/0x250
[  114.608799][ T8508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.608810][ T8508]  ? __pfx__printk+0x10/0x10
[  114.608823][ T8508]  ? print_lock_name+0xde/0x100
[  114.608835][ T8508]  print_circular_bug+0x2ee/0x310
[  114.608847][ T8508]  check_noncircular+0x134/0x160
[  114.608857][ T8508]  validate_chain+0xb9b/0x2140
[  114.608870][ T8508]  __lock_acquire+0xab9/0xd20
[  114.608879][ T8508]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  114.608888][ T8508]  lock_acquire+0x120/0x360
[  114.608895][ T8508]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  114.608905][ T8508]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  114.608914][ T8508]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.608925][ T8508]  down_write+0x96/0x1f0
[  114.608934][ T8508]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  114.608943][ T8508]  ? __pfx_down_write+0x10/0x10
[  114.608955][ T8508]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  114.608965][ T8508]  ? nbd_add_socket+0x688/0x9a0
[  114.608976][ T8508]  ? nbd_add_socket+0x688/0x9a0
[  114.608987][ T8508]  nbd_start_device+0x16c/0xac0
[  114.608997][ T8508]  ? __nla_parse+0x40/0x60
[  114.609006][ T8508]  nbd_genl_connect+0x1250/0x1930
[  114.609016][ T8508]  ? __pfx_nbd_genl_connect+0x10/0x10
[  114.609028][ T8508]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  114.609037][ T8508]  genl_family_rcv_msg_doit+0x215/0x300
[  114.609051][ T8508]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  114.609066][ T8508]  genl_rcv_msg+0x60e/0x790
[  114.609079][ T8508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  114.609090][ T8508]  ? __pfx_nbd_genl_connect+0x10/0x10
[  114.609100][ T8508]  netlink_rcv_skb+0x208/0x470
[  114.609109][ T8508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  114.609120][ T8508]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  114.609152][ T8508]  ? down_read+0x1ad/0x2e0
[  114.609163][ T8508]  genl_rcv+0x28/0x40
[  114.609175][ T8508]  netlink_unicast+0x75b/0x8d0
[  114.609186][ T8508]  netlink_sendmsg+0x805/0xb30
[  114.609198][ T8508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.609210][ T8508]  ? aa_sock_msg_perm+0x94/0x160
[  114.609222][ T8508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.609230][ T8508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.609239][ T8508]  __sock_sendmsg+0x21c/0x270
[  114.609248][ T8508]  ____sys_sendmsg+0x505/0x830
[  114.609259][ T8508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.609270][ T8508]  ? import_iovec+0x74/0xa0
[  114.609279][ T8508]  ___sys_sendmsg+0x21f/0x2a0
[  114.609289][ T8508]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.609305][ T8508]  ? __fget_files+0x2a/0x420
[  114.609315][ T8508]  ? __fget_files+0x3a0/0x420
[  114.609327][ T8508]  __x64_sys_sendmsg+0x19b/0x260
[  114.609337][ T8508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  114.609349][ T8508]  ? __sys_socketpair+0x4a9/0x560
[  114.609357][ T8508]  ? do_syscall_64+0xbe/0x3b0
[  114.609366][ T8508]  do_syscall_64+0xfa/0x3b0
[  114.609373][ T8508]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.609380][ T8508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.609388][ T8508]  ? exc_page_fault+0x9f/0xf0
[  114.609400][ T8508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.609409][ T8508] RIP: 0033:0x7f6ecc38e929
[  114.609419][ T8508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.609427][ T8508] RSP: 002b:00007f6ecd1bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.609436][ T8508] RAX: ffffffffffffffda RBX: 00007f6ecc5b5fa0 RCX: 00007f6ecc38e929
[  114.609442][ T8508] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  114.609447][ T8508] RBP: 00007f6ecc410b39 R08: 0000000000000000 R09: 0000000000000000
[  114.609452][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.609457][ T8508] R13: 0000000000000000 R14: 00007f6ecc5b5fa0 R15: 00007ffc527f8948
[  114.609465][ T8508]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  114.859308][ T8508] nbd2: detected capacity change from 0 to 63
[  114.862970][ T8511] block nbd2: NBD_DISCONNECT
[  114.864925][ T8511] block nbd2: Disconnected due to user request.
[  114.868092][ T8511] block nbd2: shutting down sockets
[  114.938469][ T5832] syz-executor (5832) used greatest stack depth: 19896 bytes left
[  115.193202][ T5860] bridge_slave_1: left promiscuous mode
[  115.195502][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.200200][ T5860] bridge_slave_0: left promiscuous mode
[  115.203220][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.340731][ T5860] bond1 (unregistering): (slave bridge1): Releasing active interface
[  115.569739][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.574040][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.577441][ T5860] bond0 (unregistering): Released all slaves
[  115.582261][ T5860] bond1 (unregistering): Released all slaves
[  115.633596][ T5860] tipc: Left network mode
[  115.794540][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.798200][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.008554][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  116.028887][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  116.476732][ T5860] IPVS: stop unused estimator thread 0...
[  116.522912][ T5860] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.553893][ T5860] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.591490][ T5860] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.644814][ T5860] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.711779][ T5860] batadv0: left allmulticast mode
[  116.713491][ T5860] bridge0: port 3(batadv0) entered disabled state
[  116.716123][ T5860] bridge_slave_1: left allmulticast mode
[  116.717819][ T5860] bridge_slave_1: left promiscuous mode
[  116.719675][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.727761][ T5860] bridge_slave_0: left allmulticast mode
[  116.729578][ T5860] bridge_slave_0: left promiscuous mode
[  116.732744][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.982732][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.986577][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.989525][ T5860] bond0 (unregistering): Released all slaves
[  117.054624][ T5860] bond1 (unregistering): Released all slaves
[  117.242860][ T5860] hsr_slave_0: left promiscuous mode
[  117.245398][ T5860] hsr_slave_1: left promiscuous mode
[  117.247798][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.251044][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.791792][ T5860] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
20:08:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012ec RDI=00000000000012ed RBP=00000000000003f8 RSP=ffffc9000277e710
R8 =ffff888021850237 R9 =1ffff1100430a046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78fa R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6ecd1bb6c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555577c925c8 CR3=000000010f568000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81b96663 ffffffff81686e5e
XMM02=00007f6a7bb85478 ffffffff81686e5e XMM03=00007f6a7bb85488 00007f6a7bb85480
XMM04=00007f6a7c6ed100 00007f6a7bb85440 XMM05=00007f6a7bb85458 00007f6a7bb854a0
XMM06=00007f6a7bb85498 00007f6a7bb85490 XMM07=00007f6a7bb85488 00007f6a7bb85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6a7ba11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88813663b1c0 RCX=ffff88802357b980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000381f6c0 RSP=ffffc9000381f560
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e912 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555577c77500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fef01ce56c0 CR3=000000010ec0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fef01011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
