last executing test programs:

1.018973636s ago: executing program 2 (id=857):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4020940d, &(0x7f0000000c00))

953.79809ms ago: executing program 2 (id=859):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4ddd, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x168, 0x9, 0x0, 0xa, 0x348, 0x250, 0x250, 0x348, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'team_slave_0\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x6000000, 0xa8, 0xc8, 0x0, {0x0, 0x28e}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast1, @remote, [], [], 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

883.845952ms ago: executing program 2 (id=862):
r0 = socket(0x21, 0x2, 0x2)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210})

829.543157ms ago: executing program 2 (id=865):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="e1465d32a2dd8990bcb69a78be1dee4e1d367dfa628beb5c1b53cffa04ccade8e8eaf231fc2bd91c7b505565ff89d7810e3ac603591eeb85b2dff98b540dca5f8d4b198fa048263eeb294b8e46ca699b", 0x50}, {&(0x7f0000001180)="ece4c7f8e24a7e738cc517fa995be0d672a7652026eb18e98574ff667e7da045f4b0cdda3d462220e054d8a7794a75b381906dbba3aed4b2759b7f1b85705e5f5858214e351c66da5cbb6137e2cadf412b11ccb8e267bbd89d8469ddaf3d4566e4c0bf636bd6", 0x66}, {&(0x7f0000001280)="c4ea09250c055b3f89c2cac32dbbef6f52e32c8c00ba15b2eb06f2d1f767e26f6b78085eece93834ea10e61b1e3411cc694c5e3baa5d6296fb42fad6390b6eb4e722f50408f82818ed1afeb277238ee059b42bf624e5d9304996ed4f2f52b0b78f745b6d71f5fb5054a3d5f6c2575bf76a607e0a8a662ed47670f6e8ee55f73349bbb7d7aa3cd93ae9144709e39ba1af7ec24e179871898d719b70827831c88803bc8d6b12b8c7ef7285484692", 0xad}, {&(0x7f0000001340)="d0b80cd6f4f63edcad8d34bd0b54c68f4890984627e82865c8e560a25851f4c3a3aeba82959418b32ea781f7fcda66798076b1c3db3e54954b234c47f5001957ecfbcd69971308cd29dfb63e5e080d784e879279b81959cff8e29ab4bcd27daef04341a90228577fe2d4b408b36a34e8f0901eb11fedc4cdbad9e83ce5cfd965ae5b9ca42b56268ae74556b4c6990ec89200676094c78e6f0345c6fcd412142eb93a211ef35d19f484024fbe1340e56c9156d4c0121a8e6a7b52170d92", 0xbd}, {&(0x7f0000001400)="89b904d75357e2e0184d851f7436e4200f65fad9ea60d8d53a9697e101d8da6b33af393477f0318908c3518d2c037cf688253b998d4bf21afb2d3e1e572ba664081e42fdca72111f10c0ba64ad6c02fc1e089bd7b535214fa8656f9c79e4f24af82540d68b8ecde824", 0x69}, {&(0x7f0000001480)="792816077d10222a7d593b749ca624a641bd58a07f9704846295af43e1c1eb47d297feaea4380a145ae70302fb96ba7393be33a560c29b", 0x37}, {&(0x7f00000014c0)="f6a3fb910efbe64dba36c57760eaf737ced6527cb5521441af78b02531496488c9e488f98aeef79e9bde9257ca513499d37a79ce48d798b66aa5fc7c2767f6c47ba28793b85d3fc0c0d818c25f2d234f9ca2b74fc57c7a02b03850bee2d47a27cd7a716d230f7474e15ae29118f0c08b8ccdf0ff68a45386034d6d6ea0a4374df6d418346dd0ed6f8dc18d29b4412da0081fa40675c9b1bae4d5aab31c5f7f667b3bb0e87c6d7107e236d9638cb3f3c6", 0xb0}], 0x7}}], 0x1, 0x0)

693.783889ms ago: executing program 2 (id=868):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}]}}]}, 0x3c}}, 0x0)

593.85362ms ago: executing program 2 (id=871):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x34000}, {0x0}], 0x2, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @dev}], 0x48}], 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4b1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bb}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000540)="3b14265d2a9eee7c089ecde19a2559ee3e316a782c3d0d50816bc0cb775db410d40152d7825fcc9e9a4b89872e3a016581fce14895e85588fbd5ad30af11d8728356da784e2cb2c4d6e1c81b34051158e783279257f03065923d67d99315a202c0b20db70f387aa9f5e31e6fa48590108d662484b9ca144e20644e25393f1a061cee472a8044941cfeb8d5daff40aa2dfd75fc0545e9f378ca35c41a0be68455f5f05bf159063a9136599f6fea50f3097823febd70af8cc496cd2574f629a3405ebeee7822097d826f21c0d5a1d47de8e1", &(0x7f0000001f40)=""/4096, &(0x7f0000000780)="0d8c1d61e348d64ba0f885366863622dc347a95321e40c05ca8d104817d1ae1fc904e3e650f6ceed36bf43b4ed5e6e670c70392d7723b6029f4df5daec6c4e08a30a32f6ed3d129b8e7e89c9f00cf4c8a814c2ecdb8c369e3e34cd2fd416d79f5a73f07a2a8ed117c6cab1fd6e8f158bb60a507ac2f48abd399ed4ba712785e5419760c443f74355396bd06906e0db1d036719e9a282f8e41f4b2ee24b70558151b948", &(0x7f0000000840)="1dd605aaa6ba45e8fd28ab14c48ae429156b52224382963609944a21dc246c3a9b87836a0306ccfc3f27c8b03542a86d75ca5321c36f5f4d1b98c19ee14a1432a92f8566e7374a9e62eac9575e34acc50d3031251c888da3f0e2ec5db00d29af3d4a12cbb8ba96b40b0698a9b749988b572371cff594ca268738cf3e", 0x5, r2}, 0x38)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$NS_GET_PARENT(r6, 0xb702, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000140)="3156cff2394930963656873e99c19c42cbc16a", &(0x7f0000000180)=""/26}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080))

329.624814ms ago: executing program 0 (id=877):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80)

240.788132ms ago: executing program 1 (id=879):
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0)

183.052071ms ago: executing program 1 (id=880):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36)

182.854283ms ago: executing program 0 (id=881):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)

122.7098ms ago: executing program 1 (id=882):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0)

122.375627ms ago: executing program 0 (id=883):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))

122.237696ms ago: executing program 1 (id=884):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

63.951359ms ago: executing program 0 (id=885):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x17230}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x800)

63.600495ms ago: executing program 1 (id=886):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.601045ms ago: executing program 1 (id=887):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

349.046µs ago: executing program 0 (id=888):
syz_emit_ethernet(0xd2, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x9c, 0x2f, 0x0, @ipv4, @local, {[@srh={0x3a, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@empty, @remote, @remote, @private2, @remote]}]}}}}}, 0x0)

0s ago: executing program 0 (id=889):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x4, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e, 0xe]}}, 0x0, 0x2c}, 0x28)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53979' (ED25519) to the list of known hosts.
syzkaller login: [   50.204137][ T5739] cgroup: Unknown subsys name 'net'
[   50.311118][ T5739] cgroup: Unknown subsys name 'cpuset'
[   50.317256][ T5739] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.301663][ T5739] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.999500][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.006100][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.009623][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.013325][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.016877][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.029442][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.033348][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.037907][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.041989][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.045640][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.048906][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.054192][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.059597][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.062735][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.097373][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.333893][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   57.373434][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   57.385625][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   57.455596][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.458959][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.461423][ T5811] bridge_slave_0: entered allmulticast mode
[   57.464231][ T5811] bridge_slave_0: entered promiscuous mode
[   57.485487][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.489122][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.492166][ T5811] bridge_slave_1: entered allmulticast mode
[   57.496159][ T5811] bridge_slave_1: entered promiscuous mode
[   57.573917][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.577551][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.580827][ T5815] bridge_slave_0: entered allmulticast mode
[   57.583832][ T5815] bridge_slave_0: entered promiscuous mode
[   57.601288][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.604504][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.608414][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.611363][ T5815] bridge_slave_1: entered allmulticast mode
[   57.615223][ T5815] bridge_slave_1: entered promiscuous mode
[   57.628093][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.631183][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.634443][ T5816] bridge_slave_0: entered allmulticast mode
[   57.638749][ T5816] bridge_slave_0: entered promiscuous mode
[   57.643564][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.662640][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.667225][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.670006][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.672675][ T5816] bridge_slave_1: entered allmulticast mode
[   57.675608][ T5816] bridge_slave_1: entered promiscuous mode
[   57.705235][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.721968][ T5811] team0: Port device team_slave_0 added
[   57.752824][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.758125][ T5811] team0: Port device team_slave_1 added
[   57.762339][ T5815] team0: Port device team_slave_0 added
[   57.766508][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.789177][ T5815] team0: Port device team_slave_1 added
[   57.799967][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.802681][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.813524][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.819670][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.821943][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.831454][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.862378][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.864744][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.874194][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.885447][ T5816] team0: Port device team_slave_0 added
[   57.891890][ T5816] team0: Port device team_slave_1 added
[   57.894893][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.898219][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.907499][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.955932][ T5811] hsr_slave_0: entered promiscuous mode
[   57.958933][ T5811] hsr_slave_1: entered promiscuous mode
[   57.963456][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.967538][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.978022][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.984100][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.987040][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.997483][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.058575][ T5815] hsr_slave_0: entered promiscuous mode
[   58.061747][ T5815] hsr_slave_1: entered promiscuous mode
[   58.064803][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.068749][ T5815] Cannot create hsr debugfs directory
[   58.130674][ T5816] hsr_slave_0: entered promiscuous mode
[   58.133232][ T5816] hsr_slave_1: entered promiscuous mode
[   58.135481][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.138912][ T5816] Cannot create hsr debugfs directory
[   58.391614][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.411200][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.427785][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.434638][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.487598][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.495451][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.514264][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.523945][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.584967][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.606987][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.626943][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.638944][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.642252][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.691115][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   58.709092][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.712150][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.733287][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.736474][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.766666][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.810406][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   58.823266][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.826314][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.832837][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.850637][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.853565][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.890975][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   58.928486][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.931486][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.947111][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.955450][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.958527][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.036629][ T5822] Bluetooth: hci0: command tx timeout
[   59.052340][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.100259][ T5811] veth0_vlan: entered promiscuous mode
[   59.112308][ T5811] veth1_vlan: entered promiscuous mode
[   59.116671][ T5822] Bluetooth: hci1: command tx timeout
[   59.119292][ T5822] Bluetooth: hci2: command tx timeout
[   59.152172][ T5811] veth0_macvtap: entered promiscuous mode
[   59.160000][ T5811] veth1_macvtap: entered promiscuous mode
[   59.177423][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.189156][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.198074][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.201760][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.205495][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.210848][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.237490][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.258908][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.343404][ T5815] veth0_vlan: entered promiscuous mode
[   59.357197][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.360494][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.361585][ T5815] veth1_vlan: entered promiscuous mode
[   59.379728][ T5816] veth0_vlan: entered promiscuous mode
[   59.404593][ T5816] veth1_vlan: entered promiscuous mode
[   59.423242][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.427856][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.445637][ T5815] veth0_macvtap: entered promiscuous mode
[   59.454310][ T5815] veth1_macvtap: entered promiscuous mode
[   59.472566][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.490160][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.492165][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.494602][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.504304][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.508160][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.511571][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.522509][ T5816] veth0_macvtap: entered promiscuous mode
[   59.534149][ T5816] veth1_macvtap: entered promiscuous mode
[   59.582860][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.603712][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.622804][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.636734][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.640304][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.643966][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.701178][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.703999][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.738124][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.741830][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.812516][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.821529][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.845584][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.858499][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.965034][ T5890] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[   60.019208][ T5894] nftables ruleset with unbound set
[   60.347646][ T5915] netlink: 'syz.1.18': attribute type 10 has an invalid length.
[   60.461028][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   60.541290][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'.
[   60.612406][ T5926] netlink: 'syz.0.22': attribute type 1 has an invalid length.
[   60.664115][ T5928] netlink: 84 bytes leftover after parsing attributes in process `syz.0.23'.
[   60.781947][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.784721][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.839628][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.845373][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.896347][ T5934] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.899744][ T5934] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.902866][ T5934] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.906478][ T5934] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.978904][ T5877] IPVS: starting estimator thread 0...
[   61.089524][ T5940] IPVS: using max 44 ests per chain, 105600 per kthread
[   61.116504][ T5822] Bluetooth: hci0: command tx timeout
[   61.206413][ T5822] Bluetooth: hci2: command tx timeout
[   61.208967][   T55] Bluetooth: hci1: command tx timeout
[   61.275994][ T5946] nbd0: detected capacity change from 0 to 63
[   61.281746][ T5823] block nbd0: Send control failed (result -32)
[   61.284163][ T5823] block nbd0: Request send failed, requeueing
[   61.287029][  T893] block nbd0: Receive control failed (result -32)
[   61.297231][ T5823] block nbd0: Dead connection, failed to find a fallback
[   61.304720][ T1116] block nbd0: Dead connection, failed to find a fallback
[   61.308303][ T1116] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.308448][ T5823] block nbd0: shutting down sockets
[   61.312497][ T1116] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.314251][ T5823] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.321379][ T5823] Buffer I/O error on dev nbd0, logical block 1, async page read
[   61.325105][ T5823] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.329809][ T5823] Buffer I/O error on dev nbd0, logical block 2, async page read
[   61.333532][ T5823] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.338166][ T5823] Buffer I/O error on dev nbd0, logical block 3, async page read
[   61.341561][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.345331][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.349981][ T5823] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.353872][ T5823] Buffer I/O error on dev nbd0, logical block 1, async page read
[   61.358848][ T5823] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.362716][ T5823] Buffer I/O error on dev nbd0, logical block 2, async page read
[   61.382776][ T5823] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.387113][ T5823] Buffer I/O error on dev nbd0, logical block 3, async page read
[   61.390394][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.393990][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read
[   61.406748][ T5823] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   61.416217][ T5823] Buffer I/O error on dev nbd0, logical block 1, async page read
[   61.422006][ T5823] ldm_validate_partition_table(): Disk read failed.
[   61.437996][ T5823] Dev nbd0: unable to read RDB block 0
[   61.442004][ T5823]  nbd0: unable to read partition table
[   61.464551][ T5823] ldm_validate_partition_table(): Disk read failed.
[   61.470145][ T5823] Dev nbd0: unable to read RDB block 0
[   61.473980][ T5823]  nbd0: unable to read partition table
[   61.604531][ T5957] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   61.613222][ T5957] netlink: 232 bytes leftover after parsing attributes in process `syz.2.34'.
[   61.919620][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'.
[   61.923422][ T5967] netlink: 'syz.2.40': attribute type 7 has an invalid length.
[   61.930734][ T5967] netlink: 'syz.2.40': attribute type 8 has an invalid length.
[   61.934163][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'.
[   61.953814][ T5967] gretap0: entered promiscuous mode
[   61.964675][ T5967] batadv_slave_1: entered promiscuous mode
[   62.147611][ T5981] netlink: 'syz.1.46': attribute type 2 has an invalid length.
[   62.530080][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'.
[   62.627223][ T6018] netlink: 44 bytes leftover after parsing attributes in process `syz.2.63'.
[   62.654782][ T6018] netlink: 'syz.2.63': attribute type 1 has an invalid length.
[   62.662660][ T6018] netlink: 224 bytes leftover after parsing attributes in process `syz.2.63'.
[   63.040969][ T6043] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'.
[   63.045198][ T6043] netlink: 'syz.2.76': attribute type 29 has an invalid length.
[   63.053065][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.100964][ T6043] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   63.196183][ T5822] Bluetooth: hci0: command tx timeout
[   63.276834][ T5822] Bluetooth: hci2: command tx timeout
[   63.279138][ T5822] Bluetooth: hci1: command tx timeout
[   63.632315][ T6070] netlink: 'syz.2.88': attribute type 11 has an invalid length.
[   63.635402][ T6070] netlink: 'syz.2.88': attribute type 11 has an invalid length.
[   64.199593][ T6109] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   64.265714][ T6112] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   64.372197][ T6116] netlink: 'syz.1.111': attribute type 12 has an invalid length.
[   65.220439][ T6168] pimreg: entered allmulticast mode
[   65.278550][ T6168] pimreg: left allmulticast mode
[   65.331292][ T6178] openvswitch: netlink: IP tunnel dst address not specified
[   65.356414][   T55] Bluetooth: hci1: command tx timeout
[   65.358444][   T55] Bluetooth: hci2: command tx timeout
[   65.453923][ T6186] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   65.461775][ T6186] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   65.695361][ T6195] bridge0: port 3(syz_tun) entered blocking state
[   65.698699][ T6195] bridge0: port 3(syz_tun) entered disabled state
[   65.701683][ T6195] syz_tun: entered allmulticast mode
[   65.705531][ T6195] syz_tun: entered promiscuous mode
[   65.710861][ T6195] bridge0: port 3(syz_tun) entered blocking state
[   65.713761][ T6195] bridge0: port 3(syz_tun) entered forwarding state
[   65.939387][ T6207] warning: `syz.0.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.963963][ T6211] __nla_validate_parse: 14 callbacks suppressed
[   65.963973][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'.
[   66.407749][ T6242] netlink: 'syz.0.168': attribute type 7 has an invalid length.
[   66.811039][ T6273] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   66.822225][ T6273] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   66.829500][ T6273] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   66.963551][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'.
[   66.972190][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'.
[   67.155996][ T6293] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.347126][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   67.516132][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   67.750061][ T6326] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   67.789444][ T6328] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   67.797072][ T6328] Zero length message leads to an empty skb
[   67.949307][ T6335] netlink: 'syz.1.211': attribute type 10 has an invalid length.
[   68.045783][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'.
[   68.139930][ T1270] cfg80211: failed to load regulatory.db
[   68.259682][ T6346] geneve2: entered allmulticast mode
[   68.707356][ T6385] sch_fq: defrate 0 ignored.
[   68.842319][ T6395] syzkaller0: entered promiscuous mode
[   68.845943][ T6395] syzkaller0: entered allmulticast mode
[   68.851864][ T6395] tipc: Started in network mode
[   68.853710][ T6395] tipc: Node identity 661ef12fdda, cluster identity 4711
[   68.858508][ T6395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.862260][ T6392] tipc: Resetting bearer <eth:syzkaller0>
[   68.871404][ T6392] tipc: Disabling bearer <eth:syzkaller0>
[   69.114361][ T6414] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   69.204879][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[   69.208933][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'.
[   69.304667][ T6424] syzkaller1: entered promiscuous mode
[   69.307669][ T6424] syzkaller1: entered allmulticast mode
[   69.825159][ T6468] netlink: 'syz.0.272': attribute type 4 has an invalid length.
[   69.827805][ T6468] netlink: 17 bytes leftover after parsing attributes in process `syz.0.272'.
[   69.989873][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'.
[   70.010907][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[   70.070310][ T6494] IPVS: Error connecting to the multicast addr
[   70.248893][ T6517] syzkaller0: entered promiscuous mode
[   70.250673][ T6517] syzkaller0: entered allmulticast mode
[   70.290481][ T6519] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   70.580406][ T6532] xt_CT: No such helper "netbios-ns"
[   71.071834][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'.
[   71.646984][ T6580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.316'.
[   71.780399][  T789] IPVS: starting estimator thread 0...
[   71.868756][ T6591] IPVS: using max 80 ests per chain, 192000 per kthread
[   71.932297][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'.
[   71.965733][ T6605] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.976838][ T6605] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.012999][ T6609] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   72.021300][ T6609] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   72.408271][ T6639] netlink: 104 bytes leftover after parsing attributes in process `syz.2.340'.
[   72.478850][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'.
[   72.735278][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.738658][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.743670][ T6669] sctp: [Deprecated]: syz.0.353 (pid 6669) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.743670][ T6669] Use struct sctp_sack_info instead
[   72.750724][ T6669] sctp: [Deprecated]: syz.0.353 (pid 6669) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.750724][ T6669] Use struct sctp_sack_info instead
[   72.810067][ T6673] netlink: 'syz.2.355': attribute type 1 has an invalid length.
[   72.813045][ T6673] netlink: 'syz.2.355': attribute type 10 has an invalid length.
[   72.816989][ T6673] netlink: 236 bytes leftover after parsing attributes in process `syz.2.355'.
[   72.844739][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.853192][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.908450][ T6656] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.911378][ T6656] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.915078][ T6656] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.920359][ T6656] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.271813][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[   73.275390][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[   73.348966][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.620255][ T6718] netlink: 324 bytes leftover after parsing attributes in process `syz.1.373'.
[   73.623449][ T6716] netlink: 180 bytes leftover after parsing attributes in process `syz.2.374'.
[   74.044937][ T6754] syzkaller0: entered promiscuous mode
[   74.049172][ T6754] syzkaller0: entered allmulticast mode
[   74.912527][ T6771] xt_hashlimit: max too large, truncated to 1048576
[   74.915088][ T6771] Cannot find add_set index 3 as target
[   75.604892][ T6822] batadv1: entered allmulticast mode
[   75.609443][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv1
[   75.687007][ T6829] netlink: 'syz.1.427': attribute type 2 has an invalid length.
[   76.761486][ T6884] __nla_validate_parse: 7 callbacks suppressed
[   76.761503][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'.
[   76.938039][ T6899] ip6t_srh: unknown srh match flags  4000
[   76.973290][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[   76.982138][ T6902] vlan2: entered promiscuous mode
[   76.983845][ T6902] bond0: entered promiscuous mode
[   76.986253][ T6902] bond_slave_0: entered promiscuous mode
[   76.988594][ T6902] bond_slave_1: entered promiscuous mode
[   77.454257][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[   77.512257][ T6936] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   77.526106][ T6936] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   78.487239][ T7024] netlink: 332 bytes leftover after parsing attributes in process `syz.0.501'.
[   78.490465][ T7024] netlink: 'syz.0.501': attribute type 2 has an invalid length.
[   78.493076][ T7024] netlink: 'syz.0.501': attribute type 5 has an invalid length.
[   78.744058][ T7040] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[   78.747937][ T7040] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   78.864380][ T7046] sctp: [Deprecated]: syz.2.511 (pid 7046) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.864380][ T7046] Use struct sctp_sack_info instead
[   78.907158][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.512'.
[   78.949831][ T7050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   79.060939][ T7056] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   79.064380][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'.
[   79.141953][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'.
[   79.412743][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.527'.
[   79.492809][ T7084] netlink: 'syz.2.529': attribute type 12 has an invalid length.
[   79.497278][ T7084] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.529'.
[   79.662993][ T7092] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   79.719970][ T7110] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.540'.
[   80.158721][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.162742][ T7144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   80.582562][ T7172] gretap1: entered promiscuous mode
[   80.585015][ T7172] gretap1: entered allmulticast mode
[   80.623225][ T7176] netlink: 'syz.2.571': attribute type 1 has an invalid length.
[   80.630015][ T7175] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   80.630134][ T7176] netlink: 'syz.2.571': attribute type 2 has an invalid length.
[   80.646974][ T7176] netlink: 'syz.2.571': attribute type 1 has an invalid length.
[   80.782367][ T7187] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   80.966604][ T7206] netlink: 'syz.1.585': attribute type 1 has an invalid length.
[   81.084682][ T7213] syzkaller1: entered promiscuous mode
[   81.087600][ T7213] syzkaller1: entered allmulticast mode
[   81.331589][ T7232] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   81.381348][ T7237] trusted_key: syz.2.600 sent an empty control message without MSG_MORE.
[   81.518518][ T7244] vxcan2: entered promiscuous mode
[   81.671938][ T7248] vlan2: entered promiscuous mode
[   81.674062][ T7248] team0: entered promiscuous mode
[   81.680841][ T7248] team_slave_0: entered promiscuous mode
[   81.684877][ T7248] team_slave_1: entered promiscuous mode
[   81.904940][ T7270] bond0: entered promiscuous mode
[   81.913133][ T7270] bond_slave_0: entered promiscuous mode
[   81.915419][ T7270] bond_slave_1: entered promiscuous mode
[   81.919650][ T7270] bond0: left promiscuous mode
[   81.921676][ T7270] bond_slave_0: left promiscuous mode
[   81.924150][ T7270] bond_slave_1: left promiscuous mode
[   82.137172][ T7280] pim6reg1: entered promiscuous mode
[   82.139073][ T7280] pim6reg1: entered allmulticast mode
[   82.247317][ T7284] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   82.293514][ T7288] __nla_validate_parse: 8 callbacks suppressed
[   82.293534][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[   82.564422][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'.
[   82.993922][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.652'.
[   83.260028][ T7379] netlink: 'syz.2.662': attribute type 5 has an invalid length.
[   84.462046][ T7427] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   84.487899][ T7430] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.685'.
[   84.501062][ T7427] tipc: Resetting bearer <eth:syzkaller0>
[   84.520829][ T7426] tipc: Resetting bearer <eth:syzkaller0>
[   85.301545][ T7426] tipc: Disabling bearer <eth:syzkaller0>
[   85.430540][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'.
[   85.434413][ T7443] netlink: 64 bytes leftover after parsing attributes in process `syz.2.690'.
[   85.442381][ T7443] tipc: Invalid UDP bearer configuration
[   85.442431][ T7443] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   85.477229][ T7448] openvswitch: netlink: Key type 78 is out of range max 32
[   85.643708][ T7461] netlink: 'syz.2.699': attribute type 15 has an invalid length.
[   85.658308][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'.
[   85.797278][ T7478] netlink: 'syz.0.707': attribute type 10 has an invalid length.
[   85.799944][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.707'.
[   85.811582][ T7478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.814932][ T7478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.821785][ T7478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.824751][ T7478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.837690][ T7478] geneve0: entered promiscuous mode
[   85.841690][ T7478] team0: Port device geneve0 added
[   85.917723][ T7488] netlink: 'syz.0.710': attribute type 1 has an invalid length.
[   86.245118][ T7525] bond0: option min_links: invalid value (18446744073709551604)
[   86.248800][ T7525] bond0: option min_links: allowed values 0 - 2147483647
[   86.310561][ T7533] netlink: 'syz.1.731': attribute type 2 has an invalid length.
[   86.316810][ T7533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.534207][ T7556] xt_hashlimit: size too large, truncated to 1048576
[   86.852565][ T7585] delete_channel: no stack
[   86.910828][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'.
[   87.099641][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'.
[   87.102919][ T7609] netlink: 'syz.1.766': attribute type 13 has an invalid length.
[   87.200850][ T7620] netlink: 'syz.0.771': attribute type 2 has an invalid length.
[   87.552811][ T7635] __nla_validate_parse: 1 callbacks suppressed
[   87.552829][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'.
[   87.597983][ T7635] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.624362][ T7635] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.636564][ T7635] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   87.642416][ T7635] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   87.692257][ T7640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.778'.
[   87.764841][ T7643] tipc: New replicast peer: 255.255.255.255
[   87.772403][ T7643] tipc: Enabled bearer <udp:syz2>, priority 10
[   87.836631][ T7643] vxcan3: entered allmulticast mode
[   88.216504][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[   88.633470][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.804'.
[   88.638017][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.804'.
[   88.706426][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.807'.
[   88.795514][ T7715] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   88.886487][ T5882] tipc: Node number set to 3149852975
[   89.164616][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'.
[   89.483398][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.712805][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'.
[   89.755793][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'.
[   89.766446][ T7789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.844'.
[   90.645005][ T7852] unsupported nlmsg_type 40
[   90.904389][ T7869] netlink: 'syz.0.877': attribute type 10 has an invalid length.
[   90.915290][ T7869] batman_adv: batadv0: Adding interface: team0
[   90.924651][ T7869] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.935587][ T7869] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   90.953316][ T7869] netlink: 'syz.0.877': attribute type 10 has an invalid length.
[   90.959581][ T7869] 8021q: adding VLAN 0 to HW filter on device team0
[   90.962066][ T7869] batman_adv: batadv0: Interface activated: team0
[   90.964397][ T7869] batman_adv: batadv0: Interface deactivated: team0
[   90.967192][ T7869] batman_adv: batadv0: Removing interface: team0
[   90.982416][ T7869] bridge0: port 3(team0) entered blocking state
[   90.986864][ T7869] bridge0: port 3(team0) entered disabled state
[   90.989045][ T7869] team0: entered allmulticast mode
[   90.990728][ T7869] team_slave_0: entered allmulticast mode
[   90.993018][ T7869] team_slave_1: entered allmulticast mode
[   90.994881][ T7869] geneve0: entered allmulticast mode
[   91.285696][ T1087] 
[   91.286807][ T1087] ======================================================
[   91.289828][ T1087] WARNING: possible circular locking dependency detected
[   91.292649][ T1087] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   91.296653][ T1087] ------------------------------------------------------
[   91.299658][ T1087] kworker/u10:5/1087 is trying to acquire lock:
[   91.302117][ T1087] ffff88810810e358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   91.305989][ T1087] 
[   91.305989][ T1087] but task is already holding lock:
[   91.309057][ T1087] ffff88810abae988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   91.313175][ T1087] 
[   91.313175][ T1087] which lock already depends on the new lock.
[   91.313175][ T1087] 
[   91.317457][ T1087] 
[   91.317457][ T1087] the existing dependency chain (in reverse order) is:
[   91.321284][ T1087] 
[   91.321284][ T1087] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   91.324848][ T1087]        lock_acquire+0x120/0x360
[   91.326907][ T1087]        down_write+0x96/0x1f0
[   91.328493][ T1087]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   91.330540][ T1087]        nbd_start_device+0x16c/0xac0
[   91.332297][ T1087]        nbd_genl_connect+0x1250/0x1930
[   91.334088][ T1087]        genl_family_rcv_msg_doit+0x215/0x300
[   91.336074][ T1087]        genl_rcv_msg+0x60e/0x790
[   91.337692][ T1087]        netlink_rcv_skb+0x208/0x470
[   91.339340][ T1087]        genl_rcv+0x28/0x40
[   91.340814][ T1087]        netlink_unicast+0x75b/0x8d0
[   91.342561][ T1087]        netlink_sendmsg+0x805/0xb30
[   91.344295][ T1087]        __sock_sendmsg+0x21c/0x270
[   91.346008][ T1087]        ____sys_sendmsg+0x505/0x830
[   91.347736][ T1087]        ___sys_sendmsg+0x21f/0x2a0
[   91.349432][ T1087]        __x64_sys_sendmsg+0x19b/0x260
[   91.351205][ T1087]        do_syscall_64+0xfa/0x3b0
[   91.352871][ T1087]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.354968][ T1087] 
[   91.354968][ T1087] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   91.357531][ T1087]        lock_acquire+0x120/0x360
[   91.359217][ T1087]        __mutex_lock+0x182/0xe80
[   91.360882][ T1087]        refcount_dec_and_mutex_lock+0x30/0xa0
[   91.362918][ T1087]        nbd_config_put+0x2c/0x790
[   91.364637][ T1087]        nbd_release+0xfe/0x140
[   91.366329][ T1087]        bdev_release+0x536/0x650
[   91.368332][ T1087]        blkdev_release+0x15/0x20
[   91.370137][ T1087]        __fput+0x44c/0xa70
[   91.371634][ T1087]        fput_close_sync+0x119/0x200
[   91.373354][ T1087]        __x64_sys_close+0x7f/0x110
[   91.375067][ T1087]        do_syscall_64+0xfa/0x3b0
[   91.376755][ T1087]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.378901][ T1087] 
[   91.378901][ T1087] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   91.381538][ T1087]        validate_chain+0xb9b/0x2140
[   91.383306][ T1087]        __lock_acquire+0xab9/0xd20
[   91.385117][ T1087]        lock_acquire+0x120/0x360
[   91.386918][ T1087]        __mutex_lock+0x182/0xe80
[   91.388663][ T1087]        __del_gendisk+0x129/0x9e0
[   91.390367][ T1087]        del_gendisk+0xe8/0x160
[   91.391962][ T1087]        nbd_dev_remove_work+0x47/0xe0
[   91.393736][ T1087]        process_scheduled_works+0xae1/0x17b0
[   91.395777][ T1087]        worker_thread+0x8a0/0xda0
[   91.397636][ T1087]        kthread+0x711/0x8a0
[   91.399454][ T1087]        ret_from_fork+0x3fc/0x770
[   91.401207][ T1087]        ret_from_fork_asm+0x1a/0x30
[   91.402965][ T1087] 
[   91.402965][ T1087] other info that might help us debug this:
[   91.402965][ T1087] 
[   91.406555][ T1087] Chain exists of:
[   91.406555][ T1087]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   91.406555][ T1087] 
[   91.411568][ T1087]  Possible unsafe locking scenario:
[   91.411568][ T1087] 
[   91.414332][ T1087]        CPU0                    CPU1
[   91.416568][ T1087]        ----                    ----
[   91.418842][ T1087]   rlock(&set->update_nr_hwq_lock);
[   91.420949][ T1087]                                lock(&nbd->config_lock);
[   91.423352][ T1087]                                lock(&set->update_nr_hwq_lock);
[   91.425902][ T1087]   lock(&disk->open_mutex);
[   91.427443][ T1087] 
[   91.427443][ T1087]  *** DEADLOCK ***
[   91.427443][ T1087] 
[   91.429961][ T1087] 3 locks held by kworker/u10:5/1087:
[   91.431733][ T1087]  #0: ffff888022968148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   91.435301][ T1087]  #1: ffffc90006fd7bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   91.439265][ T1087]  #2: ffff88810abae988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   91.442521][ T1087] 
[   91.442521][ T1087] stack backtrace:
[   91.444428][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: kworker/u10:5 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   91.444438][ T1087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.444444][ T1087] Workqueue: nbd-del nbd_dev_remove_work
[   91.444458][ T1087] Call Trace:
[   91.444463][ T1087]  <TASK>
[   91.444468][ T1087]  dump_stack_lvl+0x189/0x250
[   91.444482][ T1087]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.444492][ T1087]  ? __pfx__printk+0x10/0x10
[   91.444501][ T1087]  ? print_lock_name+0xde/0x100
[   91.444508][ T1087]  print_circular_bug+0x2ee/0x310
[   91.444517][ T1087]  check_noncircular+0x134/0x160
[   91.444525][ T1087]  validate_chain+0xb9b/0x2140
[   91.444533][ T1087]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   91.444542][ T1087]  ? arch_stack_walk+0x11c/0x150
[   91.444550][ T1087]  __lock_acquire+0xab9/0xd20
[   91.444561][ T1087]  ? __del_gendisk+0x129/0x9e0
[   91.444571][ T1087]  lock_acquire+0x120/0x360
[   91.444580][ T1087]  ? __del_gendisk+0x129/0x9e0
[   91.444590][ T1087]  ? check_path+0x21/0x40
[   91.444597][ T1087]  __mutex_lock+0x182/0xe80
[   91.444609][ T1087]  ? __del_gendisk+0x129/0x9e0
[   91.444620][ T1087]  ? __del_gendisk+0x129/0x9e0
[   91.444630][ T1087]  ? __pfx___mutex_lock+0x10/0x10
[   91.444640][ T1087]  ? __pfx___might_resched+0x10/0x10
[   91.444652][ T1087]  ? __lock_acquire+0xab9/0xd20
[   91.444661][ T1087]  ? disk_del_events+0xb5/0x210
[   91.444667][ T1087]  ? __del_gendisk+0xc1/0x9e0
[   91.444677][ T1087]  __del_gendisk+0x129/0x9e0
[   91.444687][ T1087]  ? del_gendisk+0xe0/0x160
[   91.444697][ T1087]  ? __pfx___del_gendisk+0x10/0x10
[   91.444707][ T1087]  ? down_read+0x1ad/0x2e0
[   91.444713][ T1087]  del_gendisk+0xe8/0x160
[   91.444723][ T1087]  nbd_dev_remove_work+0x47/0xe0
[   91.444733][ T1087]  ? process_scheduled_works+0x9ef/0x17b0
[   91.444743][ T1087]  process_scheduled_works+0xae1/0x17b0
[   91.444757][ T1087]  ? __pfx_process_scheduled_works+0x10/0x10
[   91.444769][ T1087]  worker_thread+0x8a0/0xda0
[   91.444783][ T1087]  kthread+0x711/0x8a0
[   91.444791][ T1087]  ? __pfx_worker_thread+0x10/0x10
[   91.444801][ T1087]  ? __pfx_kthread+0x10/0x10
[   91.444808][ T1087]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.444817][ T1087]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.444827][ T1087]  ? __pfx_kthread+0x10/0x10
[   91.444834][ T1087]  ret_from_fork+0x3fc/0x770
[   91.444845][ T1087]  ? __pfx_ret_from_fork+0x10/0x10
[   91.444855][ T1087]  ? __switch_to_asm+0x39/0x70
[   91.444861][ T1087]  ? __switch_to_asm+0x33/0x70
[   91.444868][ T1087]  ? __pfx_kthread+0x10/0x10
[   91.444874][ T1087]  ret_from_fork_asm+0x1a/0x30
[   91.444884][ T1087]  </TASK>

VM DIAGNOSIS:
09:56:37  Registers:
info registers vcpu 0

CPU#0
RAX=ffffc900042ff480 RBX=dffffc0000000000 RCX=ffff88802b231cc0 RDX=0000000000000000
RSI=0000000000000004 RDI=000000000000001f RBP=ffffc900042ff2d0 RSP=ffffc900042ff1e0
R8 =ffffea0000e15777 R9 =1ffffd40001c2aee R10=dffffc0000000000 R11=fffff940001c2aef
R12=ffffc900042ff340 R13=ffffea0000e15780 R14=0000000000000004 R15=0000000000000005
RIP=ffffffff81fbe803 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555576c45500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3059a1 CR3=0000000025248000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=6ac1cb429cc1993e 87563696304939f2
XMM02=00007fab24184478 00007fab24184450 XMM03=00007fab24184488 00007fab24184480
XMM04=00007fab24ced100 00007fab24184440 XMM05=00007fab24184458 00007fab241844a0
XMM06=00007fab24184498 00007fab24184490 XMM07=00007fab24184488 00007fab24184480
XMM08=500ab68b158f6efd b1cac617d18e2a7a XMM09=0000000000000000 00007fab24011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006fd6e10
R8 =ffff888021748237 R9 =1ffff110042e9046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4900 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ef1fffc CR3=000000010db24000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000f700002 000c000000400001
XMM02=07001400002b2129 5d2d27000a000a00 XMM03=0000000000000300 06000c0000000000
XMM04=9500000082000000 8500000000000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b0000000e000008 b700000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1852c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
