last executing test programs:

380.527292ms ago: executing program 2 (id=271):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x0)

329.491154ms ago: executing program 0 (id=273):
r0 = socket(0xa, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0xa, 'hash\x00', 0x2, 0x0, 'streebog512-generic\x00'}, 0x58)

329.351453ms ago: executing program 2 (id=274):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000200)={0xb, 0xc39, 0x256}, 0xc)

268.936045ms ago: executing program 0 (id=276):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000)

220.439395ms ago: executing program 0 (id=278):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x4b}, 0x1, 0x0, 0x0, 0x20040084}, 0x10)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/77, 0x4d}], 0x1}, 0x12001)

220.136674ms ago: executing program 2 (id=280):
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b91f0000000000008000f0", 0x3a}], 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)

220.05774ms ago: executing program 1 (id=281):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)

139.943278ms ago: executing program 2 (id=282):
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

139.516913ms ago: executing program 1 (id=283):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d40)={0x2c, r1, 0x1, 0x0, 0xfffffffd, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}]}, 0x2c}}, 0x0)

139.381567ms ago: executing program 0 (id=284):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020301080000000000df0000000000000900020000000002ec"], 0x20}}, 0x44800)

139.221018ms ago: executing program 0 (id=285):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}]}, 0x30}}, 0x0)

80.528883ms ago: executing program 2 (id=286):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000300), 0x9)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000080)=""/195, 0xc3}], 0x2}, 0x7f}], 0x2, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0xc991)

80.396454ms ago: executing program 1 (id=287):
r0 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)

80.170878ms ago: executing program 0 (id=288):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003"], 0x68}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x1c}}, 0x4000084)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0xa, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

80.034231ms ago: executing program 1 (id=289):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x6}}], 0x1, 0x8094)

249.12µs ago: executing program 1 (id=290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

62.861µs ago: executing program 2 (id=291):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)

0s ago: executing program 1 (id=292):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10318' (ED25519) to the list of known hosts.
syzkaller login: [   41.193649][ T5779] cgroup: Unknown subsys name 'net'
[   41.398253][ T5779] cgroup: Unknown subsys name 'cpuset'
[   41.401794][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.771219][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.727818][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.730939][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.733478][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.736322][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.739195][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.739290][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.741859][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.746842][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.748198][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.752162][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.755399][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.758737][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.764454][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.777168][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.787204][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.952377][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.994168][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   46.078839][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.081342][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.083789][ T5833] bridge_slave_0: entered allmulticast mode
[   46.086809][ T5833] bridge_slave_0: entered promiscuous mode
[   46.104033][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   46.111912][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.115032][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.117249][ T5833] bridge_slave_1: entered allmulticast mode
[   46.119898][ T5833] bridge_slave_1: entered promiscuous mode
[   46.169701][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.172137][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.174588][ T5835] bridge_slave_0: entered allmulticast mode
[   46.177272][ T5835] bridge_slave_0: entered promiscuous mode
[   46.182276][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.196158][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.198484][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.200712][ T5835] bridge_slave_1: entered allmulticast mode
[   46.203474][ T5835] bridge_slave_1: entered promiscuous mode
[   46.214578][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.239632][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.242670][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.245302][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.247530][ T5840] bridge_slave_0: entered allmulticast mode
[   46.250152][ T5840] bridge_slave_0: entered promiscuous mode
[   46.262418][ T5833] team0: Port device team_slave_0 added
[   46.265715][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.270282][ T5833] team0: Port device team_slave_1 added
[   46.272271][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.275523][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.277728][ T5840] bridge_slave_1: entered allmulticast mode
[   46.280315][ T5840] bridge_slave_1: entered promiscuous mode
[   46.325076][ T5835] team0: Port device team_slave_0 added
[   46.327668][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.330040][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.340671][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.346986][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.351309][ T5835] team0: Port device team_slave_1 added
[   46.353614][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.355983][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.363987][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.368972][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.403423][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.405964][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.413917][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.419509][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.421704][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.430195][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.436292][ T5840] team0: Port device team_slave_0 added
[   46.464709][ T5833] hsr_slave_0: entered promiscuous mode
[   46.467083][ T5833] hsr_slave_1: entered promiscuous mode
[   46.470990][ T5840] team0: Port device team_slave_1 added
[   46.496923][ T5835] hsr_slave_0: entered promiscuous mode
[   46.499354][ T5835] hsr_slave_1: entered promiscuous mode
[   46.501527][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.504063][ T5835] Cannot create hsr debugfs directory
[   46.514865][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.517019][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.525108][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.539669][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.541883][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.550238][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.612135][ T5840] hsr_slave_0: entered promiscuous mode
[   46.615439][ T5840] hsr_slave_1: entered promiscuous mode
[   46.617593][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.620091][ T5840] Cannot create hsr debugfs directory
[   46.774086][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.786709][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.795639][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.805481][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.826409][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.832846][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.838170][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.842842][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.865908][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.868238][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.870891][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.873152][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.895444][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.908650][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.912897][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.915293][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.917651][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.919927][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.926707][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.930818][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.977597][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.980960][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.983923][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.987617][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.002104][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.018884][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.028432][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   47.049173][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   47.052829][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.055120][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.067328][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.069599][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.073418][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.075690][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.097236][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.099550][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.112430][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.127086][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.146566][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   47.168614][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.171002][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.178365][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.180568][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.261801][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.289043][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.308769][ T5833] veth0_vlan: entered promiscuous mode
[   47.317480][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.322256][ T5833] veth1_vlan: entered promiscuous mode
[   47.357552][ T5835] veth0_vlan: entered promiscuous mode
[   47.363420][ T5833] veth0_macvtap: entered promiscuous mode
[   47.369694][ T5833] veth1_macvtap: entered promiscuous mode
[   47.382065][ T5835] veth1_vlan: entered promiscuous mode
[   47.388202][ T5840] veth0_vlan: entered promiscuous mode
[   47.392222][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.401566][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.407257][ T5840] veth1_vlan: entered promiscuous mode
[   47.410524][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.413444][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.416767][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.419486][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.449564][ T5835] veth0_macvtap: entered promiscuous mode
[   47.458491][ T5835] veth1_macvtap: entered promiscuous mode
[   47.489454][ T5840] veth0_macvtap: entered promiscuous mode
[   47.489517][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.493524][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.497674][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.499901][ T5840] veth1_macvtap: entered promiscuous mode
[   47.506471][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.513113][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.517587][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.520329][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.522972][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.537296][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.540192][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.566610][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.570848][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.577501][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.580313][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.583146][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.587002][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.602311][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.632692][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.639785][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.661654][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.664400][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.679695][ T5901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   47.699804][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.702231][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.746120][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.755734][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.775115][ T5839] Bluetooth: hci0: command tx timeout
[   47.800390][ T5910] bridge_slave_0: left allmulticast mode
[   47.802389][ T5910] bridge_slave_0: left promiscuous mode
[   47.806524][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.812479][ T5910] bridge_slave_1: left allmulticast mode
[   47.816020][ T5910] bridge_slave_1: left promiscuous mode
[   47.817923][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.824211][ T5910] bond0: (slave bond_slave_0): Releasing backup interface
[   47.833814][ T5910] bond0: (slave bond_slave_1): Releasing backup interface
[   47.843965][ T5910] team0: Port device team_slave_0 removed
[   47.852792][ T5910] team0: Port device team_slave_1 removed
[   47.855611][ T5839] Bluetooth: hci2: command tx timeout
[   47.855650][ T5837] Bluetooth: hci1: command tx timeout
[   47.858686][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.861787][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.867060][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.870720][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.877491][ T5917] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   47.880033][ T5917] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6'.
[   48.087383][ T5935] Zero length message leads to an empty skb
[   48.139408][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.141926][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.189798][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.196149][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.242882][ T5935] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.246310][ T5935] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.249043][ T5935] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.251803][ T5935] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.351180][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.539148][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'.
[   48.558132][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   48.618220][ T5977] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET)
[   48.620630][ T5977] syzkaller1: entered promiscuous mode
[   48.622516][ T5977] syzkaller1: entered allmulticast mode
[   48.626043][ T5972] nbd2: detected capacity change from 0 to 63
[   48.630462][ T5978] block nbd2: NBD_DISCONNECT
[   48.634174][ T5978] block nbd2: Disconnected due to user request.
[   48.646546][ T5978] block nbd2: shutting down sockets
[   48.660496][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.663541][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   48.666141][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.669062][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   48.671552][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.674419][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   48.676823][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.679624][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   48.682653][ T5845] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.687634][ T5845] Buffer I/O error on dev nbd2, logical block 0, async page read
[   48.691020][ T5845] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.693844][ T5845] Buffer I/O error on dev nbd2, logical block 1, async page read
[   48.697172][ T5845] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.700055][ T5845] Buffer I/O error on dev nbd2, logical block 2, async page read
[   48.702596][ T5845] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.706721][ T5845] Buffer I/O error on dev nbd2, logical block 3, async page read
[   48.709289][ T5845] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.712174][ T5845] Buffer I/O error on dev nbd2, logical block 0, async page read
[   48.716446][ T5845] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   48.719356][ T5845] Buffer I/O error on dev nbd2, logical block 1, async page read
[   48.723202][ T5845] ldm_validate_partition_table(): Disk read failed.
[   48.726490][ T5845] Dev nbd2: unable to read RDB block 0
[   48.729146][ T5845]  nbd2: unable to read partition table
[   48.735917][ T5845] ldm_validate_partition_table(): Disk read failed.
[   48.738709][ T5845] Dev nbd2: unable to read RDB block 0
[   48.741250][ T5845]  nbd2: unable to read partition table
[   48.793636][ T5984] syzkaller1: entered promiscuous mode
[   48.797474][ T5984] syzkaller1: entered allmulticast mode
[   49.864563][ T5837] Bluetooth: hci0: command tx timeout
[   49.934491][ T5837] Bluetooth: hci1: command tx timeout
[   49.934913][ T5839] Bluetooth: hci2: command tx timeout
[   49.963980][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'.
[   50.156253][ T6043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.62'.
[   50.267531][ T6054] netlink: 'syz.0.67': attribute type 10 has an invalid length.
[   50.585550][ T5296] IPVS: starting estimator thread 0...
[   50.675368][ T6069] IPVS: using max 79 ests per chain, 189600 per kthread
[   50.863323][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'.
[   50.870128][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   51.061687][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.267002][ T6108] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.88'.
[   51.413287][ T6128] netlink: 14 bytes leftover after parsing attributes in process `syz.2.96'.
[   51.416605][ T6128] hsr_slave_0: left promiscuous mode
[   51.418837][ T6128] hsr_slave_1: left promiscuous mode
[   51.934433][ T5839] Bluetooth: hci0: command tx timeout
[   52.014387][ T5839] Bluetooth: hci1: command tx timeout
[   52.024535][ T5839] Bluetooth: hci2: command tx timeout
[   52.521736][ T6191] netlink: 'syz.0.121': attribute type 1 has an invalid length.
[   52.911891][ T5296] IPVS: starting estimator thread 0...
[   52.995138][ T6236] IPVS: using max 79 ests per chain, 189600 per kthread
[   53.374125][ T6278] raw_sendmsg: syz.2.154 forgot to set AF_INET. Fix it!
[   53.512197][ T6295] __nla_validate_parse: 4 callbacks suppressed
[   53.512208][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.160'.
[   53.585163][ T6304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   53.663275][ T6313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.671829][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[   53.695729][ T6314] veth0: entered promiscuous mode
[   53.699944][ T6314] veth0: left promiscuous mode
[   53.702424][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.173'.
[   53.710098][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.173'.
[   53.807513][ T6328] netlink: 156 bytes leftover after parsing attributes in process `syz.0.178'.
[   54.014412][ T5839] Bluetooth: hci0: command tx timeout
[   54.105308][ T5839] Bluetooth: hci2: command tx timeout
[   54.106666][ T5837] Bluetooth: hci1: command tx timeout
[   54.315206][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'.
[   54.465411][ T6384] Driver unsupported XDP return value 0 on prog  (id 36) dev N/A, expect packet loss!
[   54.906688][ T6407] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   55.223577][ T6417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.216'.
[   55.419725][ T6437] tipc: Started in network mode
[   55.421457][ T6437] tipc: Node identity 2e07d7a5efe, cluster identity 4711
[   55.431332][ T6437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.437163][ T6437] syzkaller0: entered promiscuous mode
[   55.441228][ T6437] syzkaller0: entered allmulticast mode
[   55.453681][ T6437] tipc: Resetting bearer <eth:syzkaller0>
[   55.458193][ T6436] tipc: Resetting bearer <eth:syzkaller0>
[   55.478838][ T6436] tipc: Disabling bearer <eth:syzkaller0>
[   55.489447][ T6443] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   55.647506][ T6463] pim6reg: entered allmulticast mode
[   55.650197][ T6461] pim6reg: left allmulticast mode
[   55.773885][ T6480] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   56.076269][ T6522] warning: `syz.2.264' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.116610][ T6530] netlink: 'syz.0.268': attribute type 30 has an invalid length.
[   56.183143][ T6537] netlink: 'syz.2.271': attribute type 29 has an invalid length.
[   56.186824][ T6537] netlink: 'syz.2.271': attribute type 29 has an invalid length.
[   56.272100][ T6543] IPVS: Scheduler module ip_vs_sip not found
[   56.387556][ T6564] netlink: 'syz.1.283': attribute type 3 has an invalid length.
[   56.423241][ T6568] netlink: 'syz.0.285': attribute type 3 has an invalid length.
[   56.548715][ T6574] netlink: 'syz.0.288': attribute type 1 has an invalid length.
[   56.551164][ T6574] netlink: 224 bytes leftover after parsing attributes in process `syz.0.288'.
[   56.617534][   T27] 
[   56.618388][   T27] ======================================================
[   56.620554][   T27] WARNING: possible circular locking dependency detected
[   56.622768][   T27] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   56.625897][   T27] ------------------------------------------------------
[   56.628078][   T27] kworker/u10:0/27 is trying to acquire lock:
[   56.630024][   T27] ffff88810881c358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   56.633135][   T27] 
[   56.633135][   T27] but task is already holding lock:
[   56.635404][   T27] ffff8880216b8188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   56.638384][   T27] 
[   56.638384][   T27] which lock already depends on the new lock.
[   56.638384][   T27] 
[   56.641589][   T27] 
[   56.641589][   T27] the existing dependency chain (in reverse order) is:
[   56.644542][   T27] 
[   56.644542][   T27] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   56.647475][   T27]        lock_acquire+0x120/0x360
[   56.649271][   T27]        down_write+0x96/0x1f0
[   56.650929][   T27]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   56.653043][   T27]        nbd_start_device+0x16c/0xac0
[   56.654889][   T27]        nbd_genl_connect+0x1250/0x1930
[   56.656849][   T27]        genl_family_rcv_msg_doit+0x215/0x300
[   56.658906][   T27]        genl_rcv_msg+0x60e/0x790
[   56.660508][   T27]        netlink_rcv_skb+0x208/0x470
[   56.662179][   T27]        genl_rcv+0x28/0x40
[   56.663723][   T27]        netlink_unicast+0x75b/0x8d0
[   56.665632][   T27]        netlink_sendmsg+0x805/0xb30
[   56.667457][   T27]        __sock_sendmsg+0x21c/0x270
[   56.669249][   T27]        ____sys_sendmsg+0x505/0x830
[   56.671125][   T27]        ___sys_sendmsg+0x21f/0x2a0
[   56.672942][   T27]        __x64_sys_sendmsg+0x19b/0x260
[   56.674783][   T27]        do_syscall_64+0xfa/0x3b0
[   56.676509][   T27]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.678529][   T27] 
[   56.678529][   T27] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   56.681006][   T27]        lock_acquire+0x120/0x360
[   56.682679][   T27]        __mutex_lock+0x182/0xe80
[   56.684423][   T27]        refcount_dec_and_mutex_lock+0x30/0xa0
[   56.686469][   T27]        nbd_config_put+0x2c/0x790
[   56.688187][   T27]        nbd_release+0xfe/0x140
[   56.689803][   T27]        bdev_release+0x536/0x650
[   56.691415][   T27]        blkdev_release+0x15/0x20
[   56.693032][   T27]        __fput+0x44c/0xa70
[   56.694505][   T27]        fput_close_sync+0x119/0x200
[   56.696230][   T27]        __x64_sys_close+0x7f/0x110
[   56.697949][   T27]        do_syscall_64+0xfa/0x3b0
[   56.699594][   T27]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.701701][   T27] 
[   56.701701][   T27] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   56.704230][   T27]        validate_chain+0xb9b/0x2140
[   56.705956][   T27]        __lock_acquire+0xab9/0xd20
[   56.707559][   T27]        lock_acquire+0x120/0x360
[   56.709151][   T27]        __mutex_lock+0x182/0xe80
[   56.710719][   T27]        __del_gendisk+0x129/0x9e0
[   56.712426][   T27]        del_gendisk+0xe8/0x160
[   56.713969][   T27]        nbd_dev_remove_work+0x47/0xe0
[   56.715657][   T27]        process_scheduled_works+0xae1/0x17b0
[   56.717493][   T27]        worker_thread+0x8a0/0xda0
[   56.719073][   T27]        kthread+0x711/0x8a0
[   56.720498][   T27]        ret_from_fork+0x3fc/0x770
[   56.722096][   T27]        ret_from_fork_asm+0x1a/0x30
[   56.723770][   T27] 
[   56.723770][   T27] other info that might help us debug this:
[   56.723770][   T27] 
[   56.726887][   T27] Chain exists of:
[   56.726887][   T27]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   56.726887][   T27] 
[   56.731222][   T27]  Possible unsafe locking scenario:
[   56.731222][   T27] 
[   56.733509][   T27]        CPU0                    CPU1
[   56.735205][   T27]        ----                    ----
[   56.736972][   T27]   rlock(&set->update_nr_hwq_lock);
[   56.738719][   T27]                                lock(&nbd->config_lock);
[   56.740968][   T27]                                lock(&set->update_nr_hwq_lock);
[   56.743369][   T27]   lock(&disk->open_mutex);
[   56.744903][   T27] 
[   56.744903][   T27]  *** DEADLOCK ***
[   56.744903][   T27] 
[   56.747367][   T27] 3 locks held by kworker/u10:0/27:
[   56.748998][   T27]  #0: ffff8880216af948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   56.752393][   T27]  #1: ffffc9000060fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   56.756212][   T27]  #2: ffff8880216b8188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   56.759372][   T27] 
[   56.759372][   T27] stack backtrace:
[   56.761260][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   56.761270][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.761277][   T27] Workqueue: nbd-del nbd_dev_remove_work
[   56.761287][   T27] Call Trace:
[   56.761293][   T27]  <TASK>
[   56.761298][   T27]  dump_stack_lvl+0x189/0x250
[   56.761309][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[   56.761317][   T27]  ? __pfx__printk+0x10/0x10
[   56.761329][   T27]  ? print_lock_name+0xde/0x100
[   56.761338][   T27]  print_circular_bug+0x2ee/0x310
[   56.761349][   T27]  check_noncircular+0x134/0x160
[   56.761359][   T27]  validate_chain+0xb9b/0x2140
[   56.761369][   T27]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   56.761379][   T27]  ? arch_stack_walk+0x11c/0x150
[   56.761390][   T27]  __lock_acquire+0xab9/0xd20
[   56.761399][   T27]  ? __del_gendisk+0x129/0x9e0
[   56.761406][   T27]  lock_acquire+0x120/0x360
[   56.761417][   T27]  ? __del_gendisk+0x129/0x9e0
[   56.761425][   T27]  ? check_path+0x21/0x40
[   56.761434][   T27]  __mutex_lock+0x182/0xe80
[   56.761442][   T27]  ? __del_gendisk+0x129/0x9e0
[   56.761450][   T27]  ? __del_gendisk+0x129/0x9e0
[   56.761458][   T27]  ? __pfx___mutex_lock+0x10/0x10
[   56.761464][   T27]  ? __pfx___might_resched+0x10/0x10
[   56.761474][   T27]  ? __lock_acquire+0xab9/0xd20
[   56.761480][   T27]  ? disk_del_events+0xb5/0x210
[   56.761488][   T27]  ? __del_gendisk+0xc1/0x9e0
[   56.761495][   T27]  __del_gendisk+0x129/0x9e0
[   56.761503][   T27]  ? del_gendisk+0xe0/0x160
[   56.761511][   T27]  ? __pfx___del_gendisk+0x10/0x10
[   56.761519][   T27]  ? down_read+0x1ad/0x2e0
[   56.761526][   T27]  del_gendisk+0xe8/0x160
[   56.761534][   T27]  nbd_dev_remove_work+0x47/0xe0
[   56.761541][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[   56.761549][   T27]  process_scheduled_works+0xae1/0x17b0
[   56.761560][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[   56.761570][   T27]  worker_thread+0x8a0/0xda0
[   56.761583][   T27]  kthread+0x711/0x8a0
[   56.761593][   T27]  ? __pfx_worker_thread+0x10/0x10
[   56.761601][   T27]  ? __pfx_kthread+0x10/0x10
[   56.761631][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[   56.761642][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[   56.761648][   T27]  ? __pfx_kthread+0x10/0x10
[   56.761657][   T27]  ret_from_fork+0x3fc/0x770
[   56.761665][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[   56.761673][   T27]  ? __switch_to_asm+0x39/0x70
[   56.761681][   T27]  ? __switch_to_asm+0x33/0x70
[   56.761690][   T27]  ? __pfx_kthread+0x10/0x10
[   56.761699][   T27]  ret_from_fork_asm+0x1a/0x30
[   56.761710][   T27]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   57.462762][   T12] bridge_slave_1: left allmulticast mode
[   57.464776][   T12] bridge_slave_1: left promiscuous mode
[   57.468295][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.472792][   T12] bridge_slave_0: left allmulticast mode
[   57.474707][   T12] bridge_slave_0: left promiscuous mode
[   57.476700][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.609253][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.612377][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.615713][   T12] bond0 (unregistering): Released all slaves
[   57.774148][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.779406][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.887949][   T12] team0 (unregistering): Port device team_slave_1 removed
[   57.900575][   T12] team0 (unregistering): Port device team_slave_0 removed
[   58.250538][   T12] IPVS: stop unused estimator thread 0...
[   58.312755][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.373778][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.409993][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.439336][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.502096][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.536800][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.584048][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.617853][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.659475][   T12] bridge_slave_1: left allmulticast mode
[   58.661549][   T12] bridge_slave_1: left promiscuous mode
[   58.664023][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.678082][   T12] bridge_slave_0: left allmulticast mode
[   58.679870][   T12] bridge_slave_0: left promiscuous mode
[   58.681670][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.750917][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.755998][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.759823][   T12] bond0 (unregistering): Released all slaves
[   58.821808][   T12] bond0 (unregistering): Released all slaves
[   58.867734][   T12] tipc: Left network mode
[   59.070253][   T12] hsr_slave_0: left promiscuous mode
[   59.072132][   T12] hsr_slave_1: left promiscuous mode
[   59.073981][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.078973][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.081419][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.083844][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.087777][   T12] hsr_slave_0: left promiscuous mode
[   59.089813][   T12] hsr_slave_1: left promiscuous mode
[   59.093571][   T12] veth1_macvtap: left promiscuous mode
[   59.095621][   T12] veth0_macvtap: left promiscuous mode
[   59.097397][   T12] veth1_vlan: left promiscuous mode
[   59.099084][   T12] veth0_vlan: left promiscuous mode
[   59.101022][   T12] veth1_macvtap: left promiscuous mode
[   59.102779][   T12] veth0_macvtap: left promiscuous mode
[   59.107518][   T12] veth1_vlan: left promiscuous mode
[   59.109213][   T12] veth0_vlan: left promiscuous mode
[   59.196198][   T12] team0 (unregistering): Port device team_slave_1 removed
[   59.204090][   T12] team0 (unregistering): Port device team_slave_0 removed
[   59.850167][   T12] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
14:07:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000001 RCX=6122e84c05690900 RDX=00000000000a72ac
RSI=ffffffff8be28fa0 RDI=ffffffff8be28f60 RBP=dffffc0000000000 RSP=ffffc90000007718
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000007838 R11=ffffffff81acf6a0
R12=ffffffff82191c5e R13=ffffffff90e26570 R14=ffffc900000077e8 R15=000000000001191c
RIP=ffffffff81729c64 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555593878500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f62608e56c0 CR3=0000000028c80000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f625fc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000060ee10
R8 =ffff888107460237 R9 =1ffff11020e8c046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7909 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555895ec5c8 CR3=0000000028252000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000411 0000000000000000
XMM06=ffff0000ff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffffff XMM09=0000316100302d78 722f736575657571
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
