last executing test programs:

1.34205781s ago: executing program 1 (id=578):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000002780)={'veth0_to_hsr\x00', @ifru_data=0x0})

1.292724123s ago: executing program 1 (id=580):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000020}, 0x24000080)

1.292436024s ago: executing program 1 (id=581):
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x20008880)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
listen(r1, 0x6b4)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000300)={0x1d, r3, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0x0, 0x6}}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="81b641f1f3843704b62f069ded94732f088d19d97920b7eaa12ad93b9abf160c94017a6e980b04d0695caeeed58669d1436c94e227280a60381e5cb1c9ec20ff29c7ec1e8f8d4c4abc3550ac8ae9dc280b2161e0ac110cf39f088daeb9a80064cf00dfaba123b8690fb9ae1a665f3dfca2", 0x71}], 0x1}, 0x4008081)
setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000a00)=[{0x2, 0x3, {0x2, 0x0, 0x1}, {0x2, 0xff, 0xf7a59104b40dfa67}, 0xfd}, {0x0, 0x0, {0x2, 0xf0}, {0x2, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}], 0x80)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

412.956399ms ago: executing program 2 (id=595):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

362.883851ms ago: executing program 2 (id=596):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000700)="044cf1313b", 0x5}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x8, 0x4}, 0xc)

323.945248ms ago: executing program 2 (id=597):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000009f00)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x7, 0x6, "bf82ec", 0xf98, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x5f, 0x1, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0xe}, 0x2, {0x1, 0x3, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "66648d6a71d213957267fae251a299222351af712e6721c4100e3c2f44e840b11f76f524201905d2359af61bd4ae10b0f83949ec966eac5b305dc1c23f3e23511e37e7076cae501248dd009f654cb85671a8c67b368dd6e7ab7806f75289f210c9b57db0463bd656f5cbc9d7b69de707cd4f72cd20d4cffdfe3b0597872e02bd0ef36b3819f5eec740ea02168f8af5c2fe4e44be"}}}}}}, 0xfce)

312.793486ms ago: executing program 0 (id=598):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb6, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)

222.637056ms ago: executing program 0 (id=599):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90)

222.431859ms ago: executing program 0 (id=600):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)

171.390677ms ago: executing program 0 (id=601):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36)

164.326212ms ago: executing program 1 (id=602):
r0 = epoll_create(0x20000000)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80000020})
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7, 0x0, 0x0)

163.607032ms ago: executing program 2 (id=603):
pselect6(0x69, &(0x7f00000001c0)={0xfffffffffffff801, 0x0, 0x3, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

92.080407ms ago: executing program 0 (id=604):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x44008090}, 0x2048044)

91.774331ms ago: executing program 1 (id=605):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

91.61776ms ago: executing program 2 (id=606):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)

10.482335ms ago: executing program 0 (id=607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)

610.414µs ago: executing program 1 (id=608):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x20000800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0)
readv(r5, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=r5], 0x80}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$kcm(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028190000bca30000000000003403000040feffff720af1ff0000000071a4f1ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0)

0s ago: executing program 2 (id=609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffb8, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35752' (ED25519) to the list of known hosts.
syzkaller login: [   56.870572][ T5814] cgroup: Unknown subsys name 'net'
[   57.032496][ T5814] cgroup: Unknown subsys name 'cpuset'
[   57.038376][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.008529][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.108590][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.173301][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   69.300786][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.304361][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.306736][ T5853] bridge_slave_0: entered allmulticast mode
[   69.309959][ T5853] bridge_slave_0: entered promiscuous mode
[   69.314389][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.316564][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.319652][ T5853] bridge_slave_1: entered allmulticast mode
[   69.323137][ T5853] bridge_slave_1: entered promiscuous mode
[   69.345946][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.350914][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.375746][ T5853] team0: Port device team_slave_0 added
[   69.380422][ T5853] team0: Port device team_slave_1 added
[   69.402043][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.404513][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.412837][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.418094][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.420371][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.429150][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.462903][ T5853] hsr_slave_0: entered promiscuous mode
[   69.465519][ T5853] hsr_slave_1: entered promiscuous mode
[   69.585449][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.594813][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.603172][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.609419][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.642124][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.644979][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.648204][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.651087][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.710677][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.727990][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.732498][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.745064][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   69.753075][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.755423][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.771196][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.774256][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.877057][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.908773][ T5853] veth0_vlan: entered promiscuous mode
[   69.914456][ T5853] veth1_vlan: entered promiscuous mode
[   69.934828][ T5853] veth0_macvtap: entered promiscuous mode
[   69.939669][ T5853] veth1_macvtap: entered promiscuous mode
[   69.952569][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.962700][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.968510][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.971300][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.973989][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.976655][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.082694][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.084841][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.163990][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.167343][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.170971][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.175018][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.178163][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.204782][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.208050][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.211651][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.215278][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.218208][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.313009][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.318892][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.322024][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.324812][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.328459][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.331946][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.495103][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   72.596209][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.598798][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.601348][ T5891] bridge_slave_0: entered allmulticast mode
[   72.604408][ T5891] bridge_slave_0: entered promiscuous mode
[   72.623033][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.626105][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.629990][ T5891] bridge_slave_1: entered allmulticast mode
[   72.632936][ T5891] bridge_slave_1: entered promiscuous mode
[   72.703176][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.714778][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.770587][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   72.800219][ T5891] team0: Port device team_slave_0 added
[   72.815049][ T5891] team0: Port device team_slave_1 added
[   72.867976][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.870599][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.882114][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.892919][ T5893] chnl_net:caif_netlink_parms(): no params data found
[   72.901512][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.904097][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.914320][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.978960][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.981414][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.983600][ T5888] bridge_slave_0: entered allmulticast mode
[   72.986408][ T5888] bridge_slave_0: entered promiscuous mode
[   73.005207][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.008179][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.010420][ T5888] bridge_slave_1: entered allmulticast mode
[   73.013146][ T5888] bridge_slave_1: entered promiscuous mode
[   73.060070][ T5891] hsr_slave_0: entered promiscuous mode
[   73.062516][ T5891] hsr_slave_1: entered promiscuous mode
[   73.065354][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.069063][ T5891] Cannot create hsr debugfs directory
[   73.070954][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.073442][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.075693][ T5893] bridge_slave_0: entered allmulticast mode
[   73.081294][ T5893] bridge_slave_0: entered promiscuous mode
[   73.096411][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.100777][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.103376][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.105977][ T5893] bridge_slave_1: entered allmulticast mode
[   73.109246][ T5893] bridge_slave_1: entered promiscuous mode
[   73.123326][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.157503][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.182675][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.202884][ T5888] team0: Port device team_slave_0 added
[   73.222796][ T5888] team0: Port device team_slave_1 added
[   73.246832][ T5893] team0: Port device team_slave_0 added
[   73.267630][ T5893] team0: Port device team_slave_1 added
[   73.319605][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.327697][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.330128][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.338816][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.363020][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.365790][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.376323][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.381351][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.383973][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.393618][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.411722][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.435342][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.439904][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.448094][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.515545][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.578276][ T5893] hsr_slave_0: entered promiscuous mode
[   73.580674][ T5893] hsr_slave_1: entered promiscuous mode
[   73.583092][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.585837][ T5893] Cannot create hsr debugfs directory
[   73.592303][ T5888] hsr_slave_0: entered promiscuous mode
[   73.595042][ T5888] hsr_slave_1: entered promiscuous mode
[   73.597782][ T5888] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.600318][ T5888] Cannot create hsr debugfs directory
[   73.725929][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.771140][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.779174][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.794928][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.941787][   T13] bridge_slave_1: left allmulticast mode
[   73.943736][   T13] bridge_slave_1: left promiscuous mode
[   73.946137][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.970577][   T13] bridge_slave_0: left allmulticast mode
[   73.972656][   T13] bridge_slave_0: left promiscuous mode
[   73.974719][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.199374][   T55] Bluetooth: hci0: command tx timeout
[   74.266368][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.272687][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.277137][   T13] bond0 (unregistering): Released all slaves
[   74.277460][   T55] Bluetooth: hci1: command tx timeout
[   74.358029][   T55] Bluetooth: hci2: command tx timeout
[   74.407248][   T13] hsr_slave_0: left promiscuous mode
[   74.410262][   T13] hsr_slave_1: left promiscuous mode
[   74.413306][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.416239][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.421558][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.423937][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.435278][   T13] veth1_macvtap: left promiscuous mode
[   74.438616][   T13] veth0_macvtap: left promiscuous mode
[   74.440991][   T13] veth1_vlan: left promiscuous mode
[   74.443397][   T13] veth0_vlan: left promiscuous mode
[   74.782189][   T13] team0 (unregistering): Port device team_slave_1 removed
[   74.810362][   T13] team0 (unregistering): Port device team_slave_0 removed
[   75.138189][ T5888] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.151636][ T5888] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.160418][ T5888] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.166991][ T5888] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.330094][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.418931][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   75.435014][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.437443][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.456310][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.458556][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.466407][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.519796][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   75.543459][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.546214][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.559578][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.562492][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.626468][ T5893] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.653608][ T5893] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.662603][ T5893] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.680349][ T5893] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.815486][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.845031][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[   75.864393][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.867244][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.890771][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.893171][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.934528][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.972954][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.019039][ T5888] veth0_vlan: entered promiscuous mode
[   76.033175][ T5888] veth1_vlan: entered promiscuous mode
[   76.051719][ T5891] veth0_vlan: entered promiscuous mode
[   76.063455][ T5891] veth1_vlan: entered promiscuous mode
[   76.084680][ T5888] veth0_macvtap: entered promiscuous mode
[   76.100221][ T5888] veth1_macvtap: entered promiscuous mode
[   76.130835][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.133999][ T5891] veth0_macvtap: entered promiscuous mode
[   76.142446][ T5891] veth1_macvtap: entered promiscuous mode
[   76.151374][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.162006][ T5888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.165705][ T5888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.170420][ T5888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.173323][ T5888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.193079][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.215300][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.239979][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.243704][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.246414][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.252032][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.254915][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.288137][   T55] Bluetooth: hci0: command tx timeout
[   76.357588][   T55] Bluetooth: hci1: command tx timeout
[   76.360741][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.363201][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.373559][ T5893] veth0_vlan: entered promiscuous mode
[   76.393876][ T5893] veth1_vlan: entered promiscuous mode
[   76.400580][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.403439][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.438483][   T55] Bluetooth: hci2: command tx timeout
[   76.450243][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.462234][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.475697][ T5893] veth0_macvtap: entered promiscuous mode
[   76.481568][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.484939][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.489870][ T5893] veth1_macvtap: entered promiscuous mode
[   76.529941][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.550044][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.569531][ T5893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.573032][ T5893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.575919][ T5893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.587627][ T5893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.624145][ T5979] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18'.
[   76.630301][ T5979] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18'.
[   76.633689][ T5979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18'.
[   76.738712][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.741763][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.770087][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.773168][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.655595][ T6024] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   77.660320][ T6024] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   77.853704][ T6026] Bluetooth: MGMT ver 1.23
[   77.913631][ T6035] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET)
[   78.366837][ T5219] Bluetooth: hci0: command tx timeout
[   78.457336][ T5219] Bluetooth: hci1: command tx timeout
[   78.527505][ T5219] Bluetooth: hci2: command tx timeout
[   79.330290][ T6060] syzkaller0: entered promiscuous mode
[   79.332583][ T6060] syzkaller0: entered allmulticast mode
[   79.336596][   T12] syzkaller0: tun_net_xmit 70
[   79.340888][ T6060] syzkaller0: tun_chr_ioctl cmd 1074025677
[   79.343219][ T6060] syzkaller0: Linktype set failed because interface is up
[   79.518374][ T6068] dvmrp1: entered allmulticast mode
[   79.522214][ T6068] dvmrp1: left allmulticast mode
[   79.878010][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   80.437471][   T55] Bluetooth: hci0: command 0x0419 tx timeout
[   80.495967][ T6124] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   80.500685][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[   80.517760][   T55] Bluetooth: hci1: command tx timeout
[   80.588648][ T6128] netlink: 'syz.0.83': attribute type 11 has an invalid length.
[   80.597612][   T55] Bluetooth: hci2: command tx timeout
[   80.746891][ T6114] Zero length message leads to an empty skb
[   81.133012][ T6160] delete_channel: no stack
[   81.214313][ T6165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.93'.
[   81.220242][ T6165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.93'.
[   81.307844][ T6169] netlink: 'syz.1.92': attribute type 6 has an invalid length.
[   81.404060][ T6172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.504490][ T6178] vxcan1: entered allmulticast mode
[   81.508796][ T6178] vxcan1: left allmulticast mode
[   81.592558][ T6178] raw_sendmsg: syz.0.98 forgot to set AF_INET. Fix it!
[   82.117976][ T6220] netlink: 'syz.1.113': attribute type 13 has an invalid length.
[   82.120991][ T6220] netlink: 'syz.1.113': attribute type 17 has an invalid length.
[   82.228703][   T24] IPVS: starting estimator thread 0...
[   82.337411][ T6229] IPVS: using max 43 ests per chain, 103200 per kthread
[   82.405580][ T6237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.527429][   T55] Bluetooth: hci0: command 0x0419 tx timeout
[   82.924367][ T6220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.122435][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'.
[   83.161816][ T6257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.131'.
[   83.224916][   T13] IPVS: stop unused estimator thread 0...
[   83.227930][ T6263] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   83.231673][ T6263] netlink: 'syz.2.134': attribute type 2 has an invalid length.
[   83.235043][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[   83.422387][ T6275] tipc: Started in network mode
[   83.424113][ T6275] tipc: Node identity 829ece2efc7, cluster identity 4711
[   83.426468][ T6275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.430138][ T6275] syzkaller0: entered promiscuous mode
[   83.432042][ T6275] syzkaller0: entered allmulticast mode
[   83.463271][ T6275] tipc: Resetting bearer <eth:syzkaller0>
[   83.470050][ T6274] tipc: Resetting bearer <eth:syzkaller0>
[   83.483748][ T6274] tipc: Disabling bearer <eth:syzkaller0>
[   83.506863][ T6277] syzkaller1: entered promiscuous mode
[   83.513353][ T6277] syzkaller1: entered allmulticast mode
[   83.625677][ T6285] netlink: 'syz.2.145': attribute type 2 has an invalid length.
[   83.633989][ T6285] netlink: 119 bytes leftover after parsing attributes in process `syz.2.145'.
[   83.708429][ T6289] erspan0: entered promiscuous mode
[   83.712516][ T6289] batman_adv: batadv0: Adding interface: macvlan3
[   83.714591][ T6289] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.723608][ T6289] batman_adv: batadv0: Interface activated: macvlan3
[   83.779805][ T6288] syzkaller0: create flow: hash 2588053468 index 1
[   83.799539][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'.
[   83.811451][ T6288] syzkaller0: delete flow: hash 2588053468 index 1
[   84.803146][ T6299] netlink: 96 bytes leftover after parsing attributes in process `syz.1.152'.
[   84.939265][ T6307] netlink: 'syz.0.157': attribute type 1 has an invalid length.
[   85.183013][ T6327] sctp: [Deprecated]: syz.1.162 (pid 6327) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.183013][ T6327] Use struct sctp_sack_info instead
[   85.415851][ T6337] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.485200][ T6337] netlink: 'syz.1.164': attribute type 10 has an invalid length.
[   85.550117][ T6337] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.554964][ T6337] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   85.838468][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   85.849631][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.853529][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.252342][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   86.256107][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   86.267753][ T6376] netlink: 52 bytes leftover after parsing attributes in process `syz.0.185'.
[   86.443853][  T789] cfg80211: failed to load regulatory.db
[   87.009298][ T6428] netlink: 'syz.0.204': attribute type 13 has an invalid length.
[   87.011444][ T6429] nbd: must specify at least one socket
[   87.369237][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.901305][ T6415] syz.0.204 (6415) used greatest stack depth: 19408 bytes left
[   88.041575][ T6463] warning: `syz.2.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.573343][ T6488] __nla_validate_parse: 5 callbacks suppressed
[   88.573360][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'.
[   88.597340][ T6486] nbd1: detected capacity change from 0 to 63
[   88.615099][   T57] block nbd1: Receive control failed (result -104)
[   89.279213][ T6520] Driver unsupported XDP return value 0 on prog  (id 40) dev N/A, expect packet loss!
[   89.342553][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   89.365271][ T6522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.249'.
[   89.411153][ T6522] netlink: 'syz.0.249': attribute type 1 has an invalid length.
[   89.414472][ T6522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.249'.
[   89.422344][ T6526] tc_dump_action: action bad kind
[   89.690534][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[   89.710449][ T6535] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.726569][ T6535] bond_slave_0: entered promiscuous mode
[   89.729180][ T6535] bond_slave_1: entered promiscuous mode
[   89.731199][ T6535] batadv0: entered promiscuous mode
[   89.734672][ T6535] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   89.741736][ T6535] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[   89.853131][ T6542] netlink: 564 bytes leftover after parsing attributes in process `syz.1.258'.
[   89.855965][ T6542] netlink: 171 bytes leftover after parsing attributes in process `syz.1.258'.
[   89.859215][ T6542] netlink: 5 bytes leftover after parsing attributes in process `syz.1.258'.
[   89.862805][ T6542] netlink: 9 bytes leftover after parsing attributes in process `syz.1.258'.
[   89.865769][ T6542] netlink: 102 bytes leftover after parsing attributes in process `syz.1.258'.
[   90.123565][ T6553] netlink: 'syz.2.262': attribute type 3 has an invalid length.
[   90.444589][ T6570] bridge: RTM_NEWNEIGH with invalid ether address
[   90.492969][ T6572] ieee802154 phy1 wpan1: encryption failed: -22
[   90.495865][ T6572] ieee802154 phy1 wpan1: encryption failed: -22
[   91.878367][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[   92.208383][ T6633] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   92.211011][ T6633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.839285][ T6662] sctp: [Deprecated]: syz.0.303 (pid 6662) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.839285][ T6662] Use struct sctp_sack_info instead
[   93.246762][ T6687] tc_dump_action: action bad kind
[   93.770632][ T6719] __nla_validate_parse: 7 callbacks suppressed
[   93.770649][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[   93.777411][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'.
[   94.479735][ T6764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.416324][ T6764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.509035][ T6764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.591181][ T6764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.656602][ T6786] syz.1.357: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   95.661762][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.1.357 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   95.661798][ T6786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.661805][ T6786] Call Trace:
[   95.661810][ T6786]  <TASK>
[   95.661844][ T6786]  dump_stack_lvl+0x189/0x250
[   95.661865][ T6786]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.661876][ T6786]  ? __pfx__printk+0x10/0x10
[   95.661891][ T6786]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.661905][ T6786]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.661918][ T6786]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   95.661931][ T6786]  warn_alloc+0x214/0x310
[   95.661940][ T6786]  ? stack_depot_save_flags+0x445/0x900
[   95.661952][ T6786]  ? __pfx_warn_alloc+0x10/0x10
[   95.661961][ T6786]  ? kasan_save_track+0x4f/0x80
[   95.661975][ T6786]  ? xskq_create+0x56/0x170
[   95.661984][ T6786]  ? xsk_init_queue+0xb0/0x110
[   95.661990][ T6786]  ? xsk_setsockopt+0x43f/0x710
[   95.662002][ T6786]  ? do_sock_setsockopt+0x17c/0x1b0
[   95.662014][ T6786]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   95.662025][ T6786]  ? do_syscall_64+0xfa/0x3b0
[   95.662034][ T6786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.662046][ T6786]  __vmalloc_node_range_noprof+0x125/0x12f0
[   95.662073][ T6786]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   95.662088][ T6786]  ? __kasan_kmalloc+0x93/0xb0
[   95.662100][ T6786]  vmalloc_user_noprof+0xad/0xf0
[   95.662112][ T6786]  ? xskq_create+0xbf/0x170
[   95.662120][ T6786]  xskq_create+0xbf/0x170
[   95.662130][ T6786]  xsk_init_queue+0xb0/0x110
[   95.662145][ T6786]  xsk_setsockopt+0x43f/0x710
[   95.662160][ T6786]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.662174][ T6786]  ? __fget_files+0x2a/0x420
[   95.662184][ T6786]  ? aa_sock_opt_perm+0x74/0x110
[   95.662198][ T6786]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   95.662208][ T6786]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.662221][ T6786]  do_sock_setsockopt+0x17c/0x1b0
[   95.662235][ T6786]  __x64_sys_setsockopt+0x13f/0x1b0
[   95.662249][ T6786]  do_syscall_64+0xfa/0x3b0
[   95.662257][ T6786]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.662265][ T6786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.662273][ T6786]  ? exc_page_fault+0x9f/0xf0
[   95.662282][ T6786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.662294][ T6786] RIP: 0033:0x7fb2b7d8e9a9
[   95.662310][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.662343][ T6786] RSP: 002b:00007fb2b8b1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   95.662360][ T6786] RAX: ffffffffffffffda RBX: 00007fb2b7fb6080 RCX: 00007fb2b7d8e9a9
[   95.662372][ T6786] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   95.662380][ T6786] RBP: 00007fb2b7e10d69 R08: 0000000000000004 R09: 0000000000000000
[   95.662391][ T6786] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.662402][ T6786] R13: 0000000000000000 R14: 00007fb2b7fb6080 R15: 00007ffd8a3260b8
[   95.662427][ T6786]  </TASK>
[   95.662435][ T6786] Mem-Info:
[   95.716882][ T6764] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.728883][ T6786] active_anon:5451 inactive_anon:0 isolated_anon:0
[   95.728883][ T6786]  active_file:1103 inactive_file:38231 isolated_file:0
[   95.728883][ T6786]  unevictable:1768 dirty:398 writeback:0
[   95.728883][ T6786]  slab_reclaimable:9170 slab_unreclaimable:67414
[   95.728883][ T6786]  mapped:18272 shmem:2442 pagetables:925
[   95.728883][ T6786]  sec_pagetables:0 bounce:0
[   95.728883][ T6786]  kernel_misc_reclaimable:0
[   95.728883][ T6786]  free:292605 free_pcp:16103 free_cma:0
[   95.777374][ T6764] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.782814][ T6786] Node 0 active_anon:13520kB inactive_anon:0kB active_file:2864kB inactive_file:141440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33676kB dirty:1112kB writeback:0kB shmem:5156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5656kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.799274][ T6764] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.811242][ T6786] Node 1 active_anon:8284kB inactive_anon:0kB active_file:1548kB inactive_file:11484kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39412kB dirty:480kB writeback:0kB shmem:4612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5816kB pagetables:1320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.843194][ T6786] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   95.850080][ T6764] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.864295][ T6786] lowmem_reserve[]: 0 812 812 812 812
[   95.866958][ T6786] Node 0 DMA32 free:252740kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13520kB inactive_anon:0kB active_file:2864kB inactive_file:141440kB unevictable:3536kB writepending:1112kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:34640kB local_pcp:19640kB free_cma:0kB
[   95.880588][ T6786] lowmem_reserve[]: 0 0 0 0 0
[   95.884778][ T6786] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   96.027053][ T6787] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   96.027603][ T6786] lowmem_reserve[]: 0 0 854 854 854
[   96.032382][ T6786] Node 1 Normal free:443272kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8488kB inactive_anon:0kB active_file:1548kB inactive_file:11484kB unevictable:3536kB writepending:480kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30380kB local_pcp:15588kB free_cma:0kB
[   96.056387][ T6786] lowmem_reserve[]: 0 0 0 0 0
[   96.098677][ T6786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   96.145965][ T6786] Node 0 DMA32: 1018*4kB (UM) 880*8kB (UME) 430*16kB (UME) 108*32kB (ME) 62*64kB (UME) 39*128kB (UM) 15*256kB (UM) 6*512kB (M) 3*1024kB (UM) 3*2048kB (ME) 50*4096kB (UM) = 251336kB
[   96.202006][ T6786] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   96.218222][ T6791] tipc: Started in network mode
[   96.222633][ T6791] tipc: Node identity f2a626918d, cluster identity 4711
[   96.227889][ T6786] Node 1 Normal: 488*4kB (ME) 147*8kB (UME) 331*16kB (UME) 300*32kB (UME) 85*64kB (UM) 28*128kB (UME) 10*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 2*2048kB (ME) 98*4096kB (UM) = 443304kB
[   96.248415][ T6791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.252203][ T6786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.260089][ T6791] syzkaller0: entered promiscuous mode
[   96.265283][ T6786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.271369][ T6791] syzkaller0: entered allmulticast mode
[   96.282217][ T6786] 41792 total pagecache pages
[   96.291661][ T6786] 0 pages in swap cache
[   96.307838][ T6786] Free swap  = 124996kB
[   96.318210][ T6786] Total swap = 124996kB
[   96.322919][ T6786] 786301 pages RAM
[   96.325218][ T6786] 0 pages HighMem/MovableOnly
[   96.330302][ T6786] 241056 pages reserved
[   96.342808][ T6791] tipc: Resetting bearer <eth:syzkaller0>
[   96.345505][ T6786] 0 pages cma reserved
[   96.368375][ T6790] tipc: Resetting bearer <eth:syzkaller0>
[   96.389157][ T6790] tipc: Disabling bearer <eth:syzkaller0>
[   96.539841][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'.
[   96.749783][ T6807] block nbd0: server does not support multiple connections per device.
[   96.759330][ T6807] block nbd0: shutting down sockets
[   96.849346][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'.
[   97.255685][ T6847] tipc: Cannot configure node identity twice
[   97.320817][ T6851] netlink: 'syz.1.386': attribute type 15 has an invalid length.
[   97.327250][ T6851] netlink: 'syz.1.386': attribute type 7 has an invalid length.
[   97.334244][ T6851] netlink: 52 bytes leftover after parsing attributes in process `syz.1.386'.
[   97.425058][ T6855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.446883][ T6856] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   97.694313][ T6874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.740634][ T6876] xt_TPROXY: Can be used only with -p tcp or -p udp
[   98.119118][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   98.634543][ T6930] xt_cgroup: invalid path, errno=-2
[   98.734964][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'.
[   98.752702][ T6937] hsr_slave_0: left promiscuous mode
[   98.755958][ T6937] hsr_slave_1: left promiscuous mode
[   98.774728][ T6939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.426'.
[   99.340508][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.433'.
[   99.566439][ T6968] SET target dimension over the limit!
[   99.943104][ T6989] lo speed is unknown, defaulting to 1000
[   99.945591][ T6989] lo speed is unknown, defaulting to 1000
[   99.950106][ T6989] lo speed is unknown, defaulting to 1000
[   99.960778][ T6989] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.974301][ T6989] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  100.016265][ T6989] lo speed is unknown, defaulting to 1000
[  100.021431][ T6989] lo speed is unknown, defaulting to 1000
[  100.025555][ T6989] lo speed is unknown, defaulting to 1000
[  101.071245][ T7009] lo speed is unknown, defaulting to 1000
[  101.925615][ T7049] netlink: 'syz.2.475': attribute type 58 has an invalid length.
[  101.929203][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'.
[  102.419297][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'.
[  103.016641][ T7099] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.204807][ T7114] macvlan0: entered allmulticast mode
[  103.206679][ T7114] veth1_vlan: entered allmulticast mode
[  103.274140][ T7117] netlink: 17 bytes leftover after parsing attributes in process `syz.2.506'.
[  103.487702][ T7127] lo speed is unknown, defaulting to 1000
[  103.584117][ T7136] netlink: 'syz.2.514': attribute type 4 has an invalid length.
[  103.597530][ T7136] netlink: 'syz.2.514': attribute type 4 has an invalid length.
[  103.965194][ T7152] netlink: 'syz.1.520': attribute type 10 has an invalid length.
[  104.045501][ T7152] 8021q: adding VLAN 0 to HW filter on device team0
[  104.056592][ T7152] team_slave_0: entered promiscuous mode
[  104.058603][ T7152] team_slave_1: entered promiscuous mode
[  104.080673][ T7152] bond0: (slave team0): Enslaving as an active interface with an up link
[  104.362765][ T7179] xt_l2tp: missing protocol rule (udp|l2tpip)
[  104.479239][ T7188] xt_policy: output policy not valid in PREROUTING and INPUT
[  104.806938][ T7215] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.549'.
[  104.810541][ T7215] netlink: zone id is out of range
[  104.812132][ T7215] netlink: zone id is out of range
[  104.813660][ T7215] netlink: zone id is out of range
[  104.815385][ T7215] netlink: zone id is out of range
[  104.819091][ T7215] netlink: zone id is out of range
[  104.820944][ T7215] netlink: zone id is out of range
[  104.822597][ T7215] netlink: zone id is out of range
[  104.824275][ T7215] netlink: zone id is out of range
[  104.826082][ T7215] netlink: zone id is out of range
[  104.828396][ T7215] netlink: zone id is out of range
[  105.949016][ T7263] netlink: 'syz.0.569': attribute type 2 has an invalid length.
[  106.146369][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.575'.
[  106.297942][ T7284] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.332976][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'.
[  106.360679][ T7284] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.430993][ T7284] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.493286][ T7284] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.602555][ T7284] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.613409][ T7284] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.633475][ T7284] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.652800][ T7284] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.692989][ T7296] xt_limit: Overflow, try lower: 0/0
[  107.050171][ T7317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  107.170619][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'.
[  107.257010][ T7327] syz.2.596 (7327) used greatest stack depth: 17464 bytes left
[  107.518848][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'.
[  107.521063][ T7344] block nbd0: Unsupported socket: shutdown callout must be supported.
[  107.521617][ T7345] netlink: 'syz.1.605': attribute type 20 has an invalid length.
[  107.526627][ T7345] netlink: 'syz.1.605': attribute type 21 has an invalid length.
[  107.641679][  T141] 
[  107.642492][  T141] ======================================================
[  107.644576][  T141] WARNING: possible circular locking dependency detected
[  107.646878][  T141] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  107.650227][  T141] ------------------------------------------------------
[  107.652653][  T141] kworker/u9:3/141 is trying to acquire lock:
[  107.654617][  T141] ffff888022941358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  107.657592][  T141] 
[  107.657592][  T141] but task is already holding lock:
[  107.659914][  T141] ffff88802293b988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  107.662808][  T141] 
[  107.662808][  T141] which lock already depends on the new lock.
[  107.662808][  T141] 
[  107.666098][  T141] 
[  107.666098][  T141] the existing dependency chain (in reverse order) is:
[  107.669033][  T141] 
[  107.669033][  T141] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  107.671702][  T141]        lock_acquire+0x120/0x360
[  107.673236][  T141]        down_write+0x96/0x1f0
[  107.674712][  T141]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  107.676600][  T141]        nbd_start_device+0x16c/0xac0
[  107.678229][  T141]        nbd_genl_connect+0x1250/0x1930
[  107.679900][  T141]        genl_family_rcv_msg_doit+0x215/0x300
[  107.681996][  T141]        genl_rcv_msg+0x60e/0x790
[  107.683628][  T141]        netlink_rcv_skb+0x208/0x470
[  107.685257][  T141]        genl_rcv+0x28/0x40
[  107.686586][  T141]        netlink_unicast+0x75c/0x8e0
[  107.688128][  T141]        netlink_sendmsg+0x805/0xb30
[  107.689696][  T141]        __sock_sendmsg+0x21c/0x270
[  107.691361][  T141]        ____sys_sendmsg+0x505/0x830
[  107.693021][  T141]        ___sys_sendmsg+0x21f/0x2a0
[  107.694556][  T141]        __x64_sys_sendmsg+0x19b/0x260
[  107.696193][  T141]        do_syscall_64+0xfa/0x3b0
[  107.697855][  T141]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.699824][  T141] 
[  107.699824][  T141] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  107.702133][  T141]        lock_acquire+0x120/0x360
[  107.703608][  T141]        __mutex_lock+0x182/0xe80
[  107.705201][  T141]        refcount_dec_and_mutex_lock+0x30/0xa0
[  107.707100][  T141]        nbd_config_put+0x2c/0x790
[  107.708670][  T141]        nbd_release+0xfe/0x140
[  107.710205][  T141]        bdev_release+0x536/0x650
[  107.711761][  T141]        blkdev_release+0x15/0x20
[  107.713265][  T141]        __fput+0x44c/0xa70
[  107.714598][  T141]        fput_close_sync+0x119/0x200
[  107.716189][  T141]        __x64_sys_close+0x7f/0x110
[  107.717813][  T141]        do_syscall_64+0xfa/0x3b0
[  107.719400][  T141]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.721356][  T141] 
[  107.721356][  T141] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  107.723782][  T141]        validate_chain+0xb9b/0x2140
[  107.725397][  T141]        __lock_acquire+0xab9/0xd20
[  107.727109][  T141]        lock_acquire+0x120/0x360
[  107.728688][  T141]        __mutex_lock+0x182/0xe80
[  107.730319][  T141]        __del_gendisk+0x129/0x9e0
[  107.731858][  T141]        del_gendisk+0xe8/0x160
[  107.733368][  T141]        nbd_dev_remove_work+0x47/0xe0
[  107.735085][  T141]        process_scheduled_works+0xae1/0x17b0
[  107.737305][  T141]        worker_thread+0x8a0/0xda0
[  107.738933][  T141]        kthread+0x711/0x8a0
[  107.740364][  T141]        ret_from_fork+0x3fc/0x770
[  107.741951][  T141]        ret_from_fork_asm+0x1a/0x30
[  107.743582][  T141] 
[  107.743582][  T141] other info that might help us debug this:
[  107.743582][  T141] 
[  107.747177][  T141] Chain exists of:
[  107.747177][  T141]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  107.747177][  T141] 
[  107.751898][  T141]  Possible unsafe locking scenario:
[  107.751898][  T141] 
[  107.754055][  T141]        CPU0                    CPU1
[  107.755714][  T141]        ----                    ----
[  107.757496][  T141]   rlock(&set->update_nr_hwq_lock);
[  107.759242][  T141]                                lock(&nbd->config_lock);
[  107.761397][  T141]                                lock(&set->update_nr_hwq_lock);
[  107.764159][  T141]   lock(&disk->open_mutex);
[  107.765944][  T141] 
[  107.765944][  T141]  *** DEADLOCK ***
[  107.765944][  T141] 
[  107.768534][  T141] 3 locks held by kworker/u9:3/141:
[  107.770125][  T141]  #0: ffff88802293b148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  107.773532][  T141]  #1: ffffc9000174fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  107.777440][  T141]  #2: ffff88802293b988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  107.781002][  T141] 
[  107.781002][  T141] stack backtrace:
[  107.783118][  T141] CPU: 0 UID: 0 PID: 141 Comm: kworker/u9:3 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  107.783134][  T141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.783145][  T141] Workqueue: nbd-del nbd_dev_remove_work
[  107.783168][  T141] Call Trace:
[  107.783178][  T141]  <TASK>
[  107.783187][  T141]  dump_stack_lvl+0x189/0x250
[  107.783206][  T141]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.783215][  T141]  ? __pfx__printk+0x10/0x10
[  107.783227][  T141]  ? print_lock_name+0xde/0x100
[  107.783238][  T141]  print_circular_bug+0x2ee/0x310
[  107.783250][  T141]  check_noncircular+0x134/0x160
[  107.783261][  T141]  validate_chain+0xb9b/0x2140
[  107.783272][  T141]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  107.783285][  T141]  ? arch_stack_walk+0x11c/0x150
[  107.783298][  T141]  __lock_acquire+0xab9/0xd20
[  107.783307][  T141]  ? __del_gendisk+0x129/0x9e0
[  107.783317][  T141]  lock_acquire+0x120/0x360
[  107.783325][  T141]  ? __del_gendisk+0x129/0x9e0
[  107.783336][  T141]  ? check_path+0x21/0x40
[  107.783345][  T141]  __mutex_lock+0x182/0xe80
[  107.783356][  T141]  ? __del_gendisk+0x129/0x9e0
[  107.783367][  T141]  ? __del_gendisk+0x129/0x9e0
[  107.783376][  T141]  ? __pfx___mutex_lock+0x10/0x10
[  107.783384][  T141]  ? __pfx___might_resched+0x10/0x10
[  107.783396][  T141]  ? __lock_acquire+0xab9/0xd20
[  107.783404][  T141]  ? disk_del_events+0xb5/0x210
[  107.783415][  T141]  ? __del_gendisk+0xc1/0x9e0
[  107.783425][  T141]  __del_gendisk+0x129/0x9e0
[  107.783435][  T141]  ? del_gendisk+0xe0/0x160
[  107.783445][  T141]  ? __pfx___del_gendisk+0x10/0x10
[  107.783456][  T141]  ? down_read+0x1ad/0x2e0
[  107.783465][  T141]  del_gendisk+0xe8/0x160
[  107.783475][  T141]  nbd_dev_remove_work+0x47/0xe0
[  107.783485][  T141]  ? process_scheduled_works+0x9ef/0x17b0
[  107.783495][  T141]  process_scheduled_works+0xae1/0x17b0
[  107.783508][  T141]  ? __pfx_process_scheduled_works+0x10/0x10
[  107.783519][  T141]  worker_thread+0x8a0/0xda0
[  107.783529][  T141]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.783543][  T141]  ? __kthread_parkme+0x7b/0x200
[  107.783555][  T141]  kthread+0x711/0x8a0
[  107.783566][  T141]  ? __pfx_worker_thread+0x10/0x10
[  107.783574][  T141]  ? __pfx_kthread+0x10/0x10
[  107.783585][  T141]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.783604][  T141]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.783612][  T141]  ? __pfx_kthread+0x10/0x10
[  107.783644][  T141]  ret_from_fork+0x3fc/0x770
[  107.783654][  T141]  ? __pfx_ret_from_fork+0x10/0x10
[  107.783663][  T141]  ? __switch_to_asm+0x39/0x70
[  107.783673][  T141]  ? __switch_to_asm+0x33/0x70
[  107.783683][  T141]  ? __pfx_kthread+0x10/0x10
[  107.783693][  T141]  ret_from_fork_asm+0x1a/0x30
[  107.783707][  T141]  </TASK>

VM DIAGNOSIS:
15:53:31  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000174ee10
R8 =ffff888106ad8237 R9 =1ffff11020d5b046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8b4 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc7a1c3fd0 CR3=0000000119b84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=00005590e9745820 00005590e97507a0
XMM06=00005590e974f000 00005590e973e740 XMM07=00005590e9734390 00005590e9745140
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff8881018487b0 RBX=0000000000000000 RCX=ffff8880235d9cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc900037df338
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940008873f9
R12=00000000055487b0 R13=dffffc0000000000 R14=ffff88805fffa801 R15=0000000000001000
RIP=ffffffff822d4e86 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555555dd500 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000cc000 CR3=0000000113882000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffff00
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb2b7e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
