last executing test programs: 1.306720139s ago: executing program 0 (id=5): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x1c, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.182483521s ago: executing program 0 (id=6): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="15000000100000000004"], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0}, 0x808) 1.097160173s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f00000005c0)=""/194, 0xc2, 0x0, &(0x7f00000006c0)=""/185, 0xb9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0xffffffa7, 0x15, &(0x7f0000000380)=""/21, 0x41000, 0x0, '\x00', r1, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x2, 0x5, 0x1, 0xa}, {0x4, 0x1, 0x9}, {0x1, 0x5, 0x5, 0xc}, {0x2, 0x1, 0x40000, 0x1}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000500001000000010000000050000000400000000000011030000000600000000305f2e00"], &(0x7f0000000940)=""/78, 0x2d, 0x4e, 0x0, 0xfffffff8}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0xfff, 0x8, 0x9034}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 736.206448ms ago: executing program 0 (id=7): r0 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4d", 0x7}], 0x1, 0x0, 0x0, 0x900}, 0x0) 572.902401ms ago: executing program 0 (id=8): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e", 0x23}], 0x1}, 0x0) 361.171244ms ago: executing program 0 (id=9): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0x29, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000880)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000000680)=""/78, 0x4e}, {&(0x7f0000000700)=""/186, 0xba}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000040) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000000040100000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000444c878db1198a778195faf621a8c0b0db8c485c667a8ff3ffdb7788000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$sock(r1, &(0x7f0000000c80)={&(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xfff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x1}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)="f0f10e4497e032b3d5e9aebea6b45775e338629f3a3014ed148812fe05a7b71913a7d8423ed53da5219ff2136981b0dcfee1394103fd8e6ac11a11b0220366dfc6210ccf898e638d1af206abe16777a0cba117840d56c15a5a776a3ec7af770ab22796b05e37a76efc0aada349ef3530278a3a66db018c803e00211a960f34aa875d64693173169698f4f12296b9d4e2029b226e8da0fba55171a6814e5b8598e63ddf1c8b35de6fdd504036ab7daed5dfe1994274d81724bcb03315b91e9e7392b4f9f4485d10e53b104e6f9b79dcb6beb6a61d91d638d73acac7826c", 0xdd}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000b40)="a37d7f3fcbb0d36fb315eccd5888fdd274099f5ae9517a9a9ac7f74d151795b1e5d7f63bb6a8fab53f41c5195e5997b1dc20dcbeb722eb2e237c4ea32f73bc061bcfa8adb019373dbcedf519100361b6da686dca7565c6ea57441aa634417f18bebe3c52a5b419457bdf20529d968174e17f9f8ca449134ac8d49630567ef5dd823faa4ac112102deb7861ee5a4b280ae7bfd7d06f4d944d6324359aeef01ab4aceb37265809", 0xa6}], 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1008, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004", 0xd5}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f94424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) socketpair(0x18, 0x800, 0x0, &(0x7f0000000980)) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 182.116827ms ago: executing program 3 (id=10): perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.69291ms ago: executing program 0 (id=11): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000f000000180000000000000000000000000000009500000000000000846bdab3ee67f88bffb73826c5f82839a2756bd52b2f8f914b1ba42e6b0e7ed0388f8c5818adb3c980afb3f8a6efbb9ddbf3aab033ba3bd652d837bb47636b061a"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 0s ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.49' (ED25519) to the list of known hosts. [ 63.267677][ T5759] cgroup: Unknown subsys name 'net' [ 63.400914][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.736690][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.503061][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.514308][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.517539][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.529954][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.530134][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.545893][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.545897][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.546104][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.564916][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.575888][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.583419][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.585003][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.592042][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.599152][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.606011][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.612313][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.619775][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.629847][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.636707][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.641296][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.647691][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.672965][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.681967][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.692342][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.138979][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 67.223077][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 67.262182][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 67.281497][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 67.309243][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.316629][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.323996][ T5776] bridge_slave_0: entered allmulticast mode [ 67.331349][ T5776] bridge_slave_0: entered promiscuous mode [ 67.364241][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.371721][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.379165][ T5776] bridge_slave_1: entered allmulticast mode [ 67.386074][ T5776] bridge_slave_1: entered promiscuous mode [ 67.473987][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.481375][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.488784][ T5770] bridge_slave_0: entered allmulticast mode [ 67.495914][ T5770] bridge_slave_0: entered promiscuous mode [ 67.503408][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.510837][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.518865][ T5770] bridge_slave_1: entered allmulticast mode [ 67.525760][ T5770] bridge_slave_1: entered promiscuous mode [ 67.535974][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.582200][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.600486][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.609410][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.616688][ T5768] bridge_slave_0: entered allmulticast mode [ 67.623363][ T5768] bridge_slave_0: entered promiscuous mode [ 67.631230][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.638546][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.646742][ T5768] bridge_slave_1: entered allmulticast mode [ 67.653430][ T5768] bridge_slave_1: entered promiscuous mode [ 67.701915][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.722120][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.729594][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.736980][ T5769] bridge_slave_0: entered allmulticast mode [ 67.743687][ T5769] bridge_slave_0: entered promiscuous mode [ 67.765899][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.777078][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.800260][ T5776] team0: Port device team_slave_0 added [ 67.809014][ T5776] team0: Port device team_slave_1 added [ 67.816099][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.823251][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.830980][ T5769] bridge_slave_1: entered allmulticast mode [ 67.838024][ T5769] bridge_slave_1: entered promiscuous mode [ 67.856187][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.932012][ T5770] team0: Port device team_slave_0 added [ 67.940653][ T5770] team0: Port device team_slave_1 added [ 67.957967][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.965350][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.991571][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.006738][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.019528][ T5768] team0: Port device team_slave_0 added [ 68.028484][ T5768] team0: Port device team_slave_1 added [ 68.043394][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.050704][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.076817][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.097371][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.128942][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.136007][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.163421][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.177559][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.184732][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.210922][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.247729][ T5769] team0: Port device team_slave_0 added [ 68.283571][ T5769] team0: Port device team_slave_1 added [ 68.302367][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.309424][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.335374][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.348321][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.355366][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.381748][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.407582][ T5776] hsr_slave_0: entered promiscuous mode [ 68.414076][ T5776] hsr_slave_1: entered promiscuous mode [ 68.460889][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.468781][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.494860][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.543433][ T5770] hsr_slave_0: entered promiscuous mode [ 68.549782][ T5770] hsr_slave_1: entered promiscuous mode [ 68.556349][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.564883][ T5770] Cannot create hsr debugfs directory [ 68.570969][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.578195][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.604254][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.629210][ T5768] hsr_slave_0: entered promiscuous mode [ 68.639181][ T5768] hsr_slave_1: entered promiscuous mode [ 68.645939][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.653529][ T5768] Cannot create hsr debugfs directory [ 68.695042][ T5773] Bluetooth: hci3: command tx timeout [ 68.695053][ T5092] Bluetooth: hci1: command tx timeout [ 68.695350][ T5781] Bluetooth: hci0: command tx timeout [ 68.774889][ T5781] Bluetooth: hci2: command tx timeout [ 68.828378][ T5769] hsr_slave_0: entered promiscuous mode [ 68.835749][ T5769] hsr_slave_1: entered promiscuous mode [ 68.841894][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.849641][ T5769] Cannot create hsr debugfs directory [ 69.107019][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.120467][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.131508][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.141390][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.207262][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.220735][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.231516][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.243302][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.340935][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.351953][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.366886][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.404769][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.454987][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.485462][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.495331][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.508589][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.560057][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.608361][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.645768][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.660000][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.667453][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.683181][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.690336][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.719578][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.748962][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.756226][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.780235][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.787373][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.866326][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.889357][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.912592][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.978572][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.009649][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.046581][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.053786][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.070931][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.078509][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.097288][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.104499][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.114056][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.121300][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.252033][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.352468][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.442100][ T5776] veth0_vlan: entered promiscuous mode [ 70.476855][ T5776] veth1_vlan: entered promiscuous mode [ 70.516525][ T5768] veth0_vlan: entered promiscuous mode [ 70.551405][ T5768] veth1_vlan: entered promiscuous mode [ 70.584069][ T5776] veth0_macvtap: entered promiscuous mode [ 70.630465][ T5776] veth1_macvtap: entered promiscuous mode [ 70.656822][ T5768] veth0_macvtap: entered promiscuous mode [ 70.693965][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.710183][ T5768] veth1_macvtap: entered promiscuous mode [ 70.730933][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.749104][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.768228][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.778008][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.787898][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.787987][ T5781] Bluetooth: hci0: command tx timeout [ 70.798515][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.802629][ T5773] Bluetooth: hci1: command tx timeout [ 70.811267][ T5092] Bluetooth: hci3: command tx timeout [ 70.835063][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.846103][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.856687][ T5773] Bluetooth: hci2: command tx timeout [ 70.859973][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.886038][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.898474][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.909977][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.922047][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.936267][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.945204][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.953901][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.962764][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.063089][ T5770] veth0_vlan: entered promiscuous mode [ 71.118311][ T5770] veth1_vlan: entered promiscuous mode [ 71.149700][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.169649][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.222018][ T5769] veth0_vlan: entered promiscuous mode [ 71.233978][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.238029][ T5769] veth1_vlan: entered promiscuous mode [ 71.250441][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.253432][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.273729][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.320138][ T5770] veth0_macvtap: entered promiscuous mode [ 71.358643][ T5770] veth1_macvtap: entered promiscuous mode [ 71.416618][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.433768][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.450845][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.489500][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.502404][ T5861] Illegal XDP return value 4292170992 on prog (id 2) dev N/A, expect packet loss! [ 71.503601][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.541458][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.586685][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.603801][ T5769] veth0_macvtap: entered promiscuous mode [ 71.650645][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.673463][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.680726][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.690372][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.700371][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.710961][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.723095][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.747829][ T5769] veth1_macvtap: entered promiscuous mode [ 71.775655][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.799178][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.822960][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.832023][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.844404][ C1] hrtimer: interrupt took 57825 ns [ 71.938369][ T5865] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 71.966755][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.977567][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.999637][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.029349][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.048694][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.068936][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.095766][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.138045][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.181913][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.210677][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.248161][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.269362][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.311827][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.363589][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.509349][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.548652][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.562044][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.571055][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.657318][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.690824][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.823085][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.850994][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.863451][ T5773] Bluetooth: hci0: command tx timeout [ 72.863477][ T5781] Bluetooth: hci3: command tx timeout [ 72.868914][ T5773] Bluetooth: hci1: command tx timeout [ 72.896027][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.903906][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.914783][ T5880] [ 72.917151][ T5880] ====================================================== [ 72.924172][ T5880] WARNING: possible circular locking dependency detected [ 72.931201][ T5880] 6.6.94-syzkaller #0 Not tainted [ 72.936225][ T5880] ------------------------------------------------------ [ 72.943248][ T5880] syz.3.12/5880 is trying to acquire lock: [ 72.949059][ T5880] ffff8880b8e295a8 (krc.lock){....}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 72.957709][ T5880] [ 72.957709][ T5880] but task is already holding lock: [ 72.965069][ T5880] ffff8880b8e2b958 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xf3/0x1000 [ 72.975151][ T5880] [ 72.975151][ T5880] which lock already depends on the new lock. [ 72.975151][ T5880] [ 72.985627][ T5880] [ 72.985627][ T5880] the existing dependency chain (in reverse order) is: [ 72.994715][ T5880] [ 72.994715][ T5880] -> #1 (hrtimer_bases.lock){-.-.}-{2:2}: [ 73.002615][ T5880] _raw_spin_lock_irqsave+0xa8/0xf0 [ 73.008510][ T5880] hrtimer_start_range_ns+0xf3/0x1000 [ 73.014427][ T5880] kvfree_call_rcu+0x5d5/0x780 [ 73.019717][ T5880] rtnl_register_internal+0x486/0x590 [ 73.025605][ T5880] rtnl_register+0x32/0x70 [ 73.030542][ T5880] ip_rt_init+0x2ec/0x390 [ 73.035382][ T5880] ip_init+0xe/0x20 [ 73.039695][ T5880] inet_init+0x2c1/0x3e0 [ 73.044442][ T5880] do_one_initcall+0x1fd/0x750 [ 73.049720][ T5880] do_initcall_level+0x137/0x1f0 [ 73.055173][ T5880] do_initcalls+0x69/0xd0 [ 73.060013][ T5880] kernel_init_freeable+0x3d2/0x570 [ 73.065722][ T5880] kernel_init+0x1d/0x1c0 [ 73.070561][ T5880] ret_from_fork+0x48/0x80 [ 73.075487][ T5880] ret_from_fork_asm+0x11/0x20 [ 73.080761][ T5880] [ 73.080761][ T5880] -> #0 (krc.lock){....}-{2:2}: [ 73.087795][ T5880] __lock_acquire+0x2ddb/0x7c80 [ 73.093156][ T5880] lock_acquire+0x197/0x410 [ 73.098170][ T5880] _raw_spin_lock+0x2e/0x40 [ 73.103185][ T5880] kvfree_call_rcu+0x15a/0x780 [ 73.108463][ T5880] trie_delete_elem+0x535/0x6a0 [ 73.113828][ T5880] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 73.119984][ T5880] bpf_trace_run2+0x1d1/0x3c0 [ 73.125176][ T5880] __bpf_trace_hrtimer_start+0xfb/0x150 [ 73.131234][ T5880] enqueue_hrtimer+0x318/0x370 [ 73.136506][ T5880] hrtimer_start_range_ns+0xb4c/0x1000 [ 73.142471][ T5880] futex_wait_queue+0xac/0x1b0 [ 73.147745][ T5880] futex_wait+0x19f/0x530 [ 73.152581][ T5880] do_futex+0x2ff/0x3e0 [ 73.157247][ T5880] __se_sys_futex+0x36f/0x3f0 [ 73.162429][ T5880] do_syscall_64+0x55/0xb0 [ 73.167382][ T5880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.173801][ T5880] [ 73.173801][ T5880] other info that might help us debug this: [ 73.173801][ T5880] [ 73.184012][ T5880] Possible unsafe locking scenario: [ 73.184012][ T5880] [ 73.191447][ T5880] CPU0 CPU1 [ 73.196798][ T5880] ---- ---- [ 73.202146][ T5880] lock(hrtimer_bases.lock); [ 73.206825][ T5880] lock(krc.lock); [ 73.213146][ T5880] lock(hrtimer_bases.lock); [ 73.220331][ T5880] lock(krc.lock); [ 73.224126][ T5880] [ 73.224126][ T5880] *** DEADLOCK *** [ 73.224126][ T5880] [ 73.232256][ T5880] 2 locks held by syz.3.12/5880: [ 73.237174][ T5880] #0: ffff8880b8e2b958 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xf3/0x1000 [ 73.247684][ T5880] #1: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 73.256980][ T5880] [ 73.256980][ T5880] stack backtrace: [ 73.262864][ T5880] CPU: 0 PID: 5880 Comm: syz.3.12 Not tainted 6.6.94-syzkaller #0 [ 73.270653][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.280702][ T5880] Call Trace: [ 73.283968][ T5880] [ 73.286891][ T5880] dump_stack_lvl+0x16c/0x230 [ 73.291565][ T5880] ? load_image+0x3b0/0x3b0 [ 73.296060][ T5880] ? show_regs_print_info+0x20/0x20 [ 73.301249][ T5880] ? print_circular_bug+0x12b/0x1a0 [ 73.306434][ T5880] check_noncircular+0x2bd/0x3c0 [ 73.311363][ T5880] ? print_deadlock_bug+0x5d0/0x5d0 [ 73.316548][ T5880] ? lockdep_lock+0xe0/0x220 [ 73.321128][ T5880] ? _find_first_zero_bit+0xd3/0x100 [ 73.326401][ T5880] __lock_acquire+0x2ddb/0x7c80 [ 73.331243][ T5880] ? stack_trace_snprint+0xf0/0xf0 [ 73.336342][ T5880] ? __stack_depot_save+0x560/0x630 [ 73.341530][ T5880] ? verify_lock_unused+0x140/0x140 [ 73.346713][ T5880] ? kasan_save_stack+0x4d/0x60 [ 73.351553][ T5880] ? kasan_save_stack+0x3e/0x60 [ 73.356391][ T5880] ? __kasan_record_aux_stack+0xaf/0xc0 [ 73.361929][ T5880] ? kvfree_call_rcu+0xee/0x780 [ 73.366774][ T5880] ? trie_delete_elem+0x535/0x6a0 [ 73.371793][ T5880] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 73.377410][ T5880] ? bpf_trace_run2+0x1d1/0x3c0 [ 73.382244][ T5880] ? __bpf_trace_hrtimer_start+0xfb/0x150 [ 73.387953][ T5880] ? enqueue_hrtimer+0x318/0x370 [ 73.392879][ T5880] ? hrtimer_start_range_ns+0xb4c/0x1000 [ 73.398498][ T5880] ? futex_wait_queue+0xac/0x1b0 [ 73.403422][ T5880] ? futex_wait+0x19f/0x530 [ 73.407913][ T5880] ? do_futex+0x2ff/0x3e0 [ 73.412228][ T5880] ? __se_sys_futex+0x36f/0x3f0 [ 73.417063][ T5880] ? do_syscall_64+0x55/0xb0 [ 73.421641][ T5880] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.427703][ T5880] lock_acquire+0x197/0x410 [ 73.432193][ T5880] ? kvfree_call_rcu+0x15a/0x780 [ 73.437121][ T5880] ? read_lock_is_recursive+0x20/0x20 [ 73.442483][ T5880] ? __phys_addr+0xba/0x170 [ 73.446974][ T5880] _raw_spin_lock+0x2e/0x40 [ 73.451471][ T5880] ? kvfree_call_rcu+0x15a/0x780 [ 73.456396][ T5880] kvfree_call_rcu+0x15a/0x780 [ 73.461157][ T5880] ? call_rcu+0x920/0x920 [ 73.465474][ T5880] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 73.471359][ T5880] ? _raw_spin_unlock+0x40/0x40 [ 73.476199][ T5880] trie_delete_elem+0x535/0x6a0 [ 73.481045][ T5880] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 73.486491][ T5880] bpf_trace_run2+0x1d1/0x3c0 [ 73.491155][ T5880] ? bpf_trace_run2+0xde/0x3c0 [ 73.495903][ T5880] ? bpf_trace_run1+0x3b0/0x3b0 [ 73.500739][ T5880] ? __bpf_trace_hrtimer_start+0xe7/0x150 [ 73.506464][ T5880] __bpf_trace_hrtimer_start+0xfb/0x150 [ 73.512000][ T5880] ? _raw_spin_unlock+0x40/0x40 [ 73.516845][ T5880] ? __bpf_trace_hrtimer_init+0x190/0x190 [ 73.522562][ T5880] enqueue_hrtimer+0x318/0x370 [ 73.527315][ T5880] hrtimer_start_range_ns+0xb4c/0x1000 [ 73.532767][ T5880] ? futex_wait_queue+0x27/0x1b0 [ 73.537691][ T5880] futex_wait_queue+0xac/0x1b0 [ 73.542442][ T5880] futex_wait+0x19f/0x530 [ 73.546764][ T5880] ? futex_wait_setup+0x260/0x260 [ 73.551800][ T5880] ? __remove_hrtimer+0x470/0x470 [ 73.556815][ T5880] ? seqcount_lockdep_reader_access+0x124/0x1c0 [ 73.563046][ T5880] ? lockdep_hardirqs_on+0x98/0x150 [ 73.568234][ T5880] do_futex+0x2ff/0x3e0 [ 73.572374][ T5880] ? _copy_from_user+0xa5/0xe0 [ 73.577127][ T5880] ? __ia32_sys_get_robust_list+0x90/0x90 [ 73.582833][ T5880] ? read_tsc+0x9/0x20 [ 73.586887][ T5880] ? ktime_get+0x24b/0x280 [ 73.591291][ T5880] __se_sys_futex+0x36f/0x3f0 [ 73.595955][ T5880] ? __x64_sys_futex+0xf0/0xf0 [ 73.600704][ T5880] ? __x64_sys_futex+0x21/0xf0 [ 73.605453][ T5880] do_syscall_64+0x55/0xb0 [ 73.609861][ T5880] ? clear_bhb_loop+0x40/0x90 [ 73.614531][ T5880] ? clear_bhb_loop+0x40/0x90 [ 73.619194][ T5880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.625084][ T5880] RIP: 0033:0x7fc4ec98e929 [ 73.629482][ T5880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.649094][ T5880] RSP: 002b:00007ffdb3f78768 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.657502][ T5880] RAX: ffffffffffffffda RBX: 0000000000011cb9 RCX: 00007fc4ec98e929 [ 73.665461][ T5880] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc4ecbb5fac [ 73.673419][ T5880] RBP: 0000000000000032 R08: 0000000000745ac3 R09: 00000007b3f78a5f [ 73.681379][ T5880] R10: 00007ffdb3f78860 R11: 0000000000000246 R12: 00007fc4ecbb5fac [ 73.689339][ T5880] R13: 00007ffdb3f78860 R14: 0000000000011ceb R15: 00007ffdb3f78880 [ 73.697304][ T5880] [ 73.717358][ T5781] Bluetooth: hci2: command tx timeout [ 73.768705][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.779469][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.935596][ T5092] Bluetooth: hci0: command tx timeout [ 74.935726][ T5773] Bluetooth: hci3: command tx timeout [ 74.941127][ T5781] Bluetooth: hci1: command tx timeout [ 75.745006][ T5781] Bluetooth: hci2: command tx timeout [ 81.902492][ T9] cfg80211: failed to load regulatory.db