last executing test programs: 872.767154ms ago: executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d808f2e2ff", 0x14}], 0x1}, 0x0) 689.862645ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000070000008500000007000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89fb, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000007c0)={'vlan1\x00', @link_local}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006001100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 579.27813ms ago: executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0300000000ec76b6e67b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/0\x00\xff\xff\xff\xd9_,\xae\xf4t\x00AE\xf44'}, 0x30) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0xfc, @dev}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1}, 0x3e8) 422.025944ms ago: executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002}]}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x5, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'dvmrp1\x00', 0x1000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r0, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0xe1, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmsg$inet(r1, &(0x7f0000000d00)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)="36a9e169e0985db4db2820747739f91b393f8f9071c290da4e91688651d47312595dd4059f9ca46e5283e51efb86409886f1e3cd5a573d8b38e436244d5dfddba0bddaa25a1eef7d708ba467ef75a182c37a1c5c97b32d0da24fd011f0977b585ee9500de2b5b0b380102b2d64", 0x6d}, {&(0x7f00000001c0)="db88795375df2a8007a34e398d2b952031bd4c255f31e20a010189b1812705c313aa878fb712ce92824d892535df5eb4bab74bb643356dc95da1e9e9b836f70653cfb4ac4145cf5713a61e977f7dcd77066f62ab532ec5909c7c5b28066fa6eb3acd955bfcac994e3644b77d8f7b173d57ec2280cb10c947efa838ebcf0647de5ca7b0fe277dbc986d674cf6e6335739320c38b80a90b31e9c5950ac54677d88b501fb7056b5bd9da908af0b6d9623909e2f1d90b4c84f5b6986d21d9001eceb04625d2fdfb126ad47f10890", 0xcc}, {&(0x7f0000000540)="bcea9bc64149015114e047ab1e2f84a1fee18cc50246524bed0d63fb4576ad7089c1227ef6897723584292fb6da08d2905ac58e009ca394f9196300690d9b5917e0cf20caaf0242d0cde28f4c18e671f17bea858d1010b21e399732b51e879385196b0e3d7a45d5bbcd84c30b7ba62c5b966cf2ef91f18f7b35e94489f0b55b97ecb82d44c15fb94e4992acf12c73590a8a7bf8558abf538c3c607cc4fd7bae6b81ebd09e2719dc5e0fe607ad99abfa5f39a80e838e46ddecbd3186279ecb0012604ee75da9d11c7794d020fc17168d794ea81548feaf1dcc4151a556910ef6c31adf79bc3794e82042fa26781991f8968f16bbe12a180", 0xf7}, {&(0x7f00000002c0)="ba4ba4ee52b44a06b53ae413c659f4efb2168d2b68f6d1625e8f67e631e4746e4f3bcea6c7f1d7a7c3f6a69ba30726152dd7727f70c9a9c850b3efb91a5172eaab184c41139f8263805e80a66fa7a1147c4f0217194e176fefc066012eb065f1144d411f8c43c0d4994bb3f0f188926f3ddb1ac689fbfbcbb30d7a8bd26afe0ba95d214e36bb23a2b7dc11afcfcb77c389c1aced7922940645d5492b407b9c88e7645c3d5d55c166f3e4e58a8dff3a", 0xaf}, {&(0x7f0000000640)="4e77dd7dfa63a64dc1f54030472d8886b0b8f87360aae6372b6d51363c6cbd011bb0e4b654f6b89bb61f6d68da206b9a8e3f3ee0de034d2da7beaf82784070425cd8b7dba7ff42529870139cb849e71ff7fcb15ce15514eb89226ac7bb8de7a61aab353011f2b7b46161cf5fc65b3ba9fdc082a228de9a1699f79a4f80cebffb9035234fa7d9a3334c5c5841b02fc4394509a30068d8e5e068b80875bbf8bcc8a94e2efea3e5c0b03e32cc1cef921d0c3ed10ed639b33631", 0xb8}, {&(0x7f0000000700)="4390ac9d327cc5c08a254c9a9c91063bde95f56b8351c73712bc1e49a996f1ae2bad900616fdae773b677c83c1a74afe6161a7ca1a9a627ef72e8713f0c66e584c5ac57ca9f3c45d741469bec4e6f0ab7199ad", 0x53}], 0x6, &(0x7f0000000e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x5, "2fd8e0"}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0xb8}, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f94b24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc60100c064064000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='jbd2_checkpoint_stats\x00', r7}, 0x10) write$cgroup_subtree(r7, &(0x7f0000002300)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102900fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 194.557439ms ago: executing program 4: socket$kcm(0x23, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x900, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000500)=""/130, 0x0, 0x0, 0xdf, 0xc4, &(0x7f0000000840)="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", &(0x7f00000005c0)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x1, 0x8000, 0x1}, 0x24) 78.145737ms ago: executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r3}, 0x5e) socket$kcm(0x1e, 0x1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x26, 0x0, 0xc) 57.983527ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x3a0ffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40086602, &(0x7f0000000000)=0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000010000000000000e020000001e000000000000220000000604000000002e2e6100"], 0x0, 0x39}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8917, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x6}]}, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xffe6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x4000) write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x1b) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. 2024/06/01 11:22:39 fuzzer started 2024/06/01 11:22:39 dialing manager at 10.128.0.169:30014 [ 55.892098][ T5099] cgroup: Unknown subsys name 'net' [ 56.154154][ T5099] cgroup: Unknown subsys name 'rlimit' 2024/06/01 11:22:41 starting 5 executor processes [ 57.108048][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.853987][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.871888][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.880930][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.912067][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.919796][ T5115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.927442][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.036160][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.044965][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.052733][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.063642][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.072198][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.091056][ T5121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.091182][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.106112][ T5121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.114201][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.132962][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.143225][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.151496][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.158942][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.167634][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.177362][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.186637][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.194789][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.202903][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.230175][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.251300][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.261357][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.269568][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.281871][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.289541][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.489195][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 58.651820][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.659523][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.667516][ T5113] bridge_slave_0: entered allmulticast mode [ 58.675423][ T5113] bridge_slave_0: entered promiscuous mode [ 58.684922][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.692294][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.699529][ T5113] bridge_slave_1: entered allmulticast mode [ 58.706462][ T5113] bridge_slave_1: entered promiscuous mode [ 58.779396][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.835166][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.909335][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 58.946705][ T5113] team0: Port device team_slave_0 added [ 58.963283][ T5113] team0: Port device team_slave_1 added [ 59.029125][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 59.054727][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 59.066862][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.073939][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.100957][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.149609][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.156758][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.182761][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.254046][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 59.275219][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.282701][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.289844][ T5116] bridge_slave_0: entered allmulticast mode [ 59.297465][ T5116] bridge_slave_0: entered promiscuous mode [ 59.310446][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.317732][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.325589][ T5116] bridge_slave_1: entered allmulticast mode [ 59.333432][ T5116] bridge_slave_1: entered promiscuous mode [ 59.455149][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.469279][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.487922][ T5113] hsr_slave_0: entered promiscuous mode [ 59.494657][ T5113] hsr_slave_1: entered promiscuous mode [ 59.557475][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.568135][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.575423][ T5122] bridge_slave_0: entered allmulticast mode [ 59.583676][ T5122] bridge_slave_0: entered promiscuous mode [ 59.596334][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.603816][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.611098][ T5117] bridge_slave_0: entered allmulticast mode [ 59.617924][ T5117] bridge_slave_0: entered promiscuous mode [ 59.625805][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.633262][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.641321][ T5117] bridge_slave_1: entered allmulticast mode [ 59.648114][ T5117] bridge_slave_1: entered promiscuous mode [ 59.696527][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.706830][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.714574][ T5122] bridge_slave_1: entered allmulticast mode [ 59.722344][ T5122] bridge_slave_1: entered promiscuous mode [ 59.742085][ T5116] team0: Port device team_slave_0 added [ 59.763092][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.770295][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.777625][ T5124] bridge_slave_0: entered allmulticast mode [ 59.785166][ T5124] bridge_slave_0: entered promiscuous mode [ 59.794386][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.802084][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.809249][ T5124] bridge_slave_1: entered allmulticast mode [ 59.817702][ T5124] bridge_slave_1: entered promiscuous mode [ 59.857099][ T5116] team0: Port device team_slave_1 added [ 59.893086][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.905482][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.918347][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.956421][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.991685][ T5121] Bluetooth: hci0: command tx timeout [ 59.996136][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.004360][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.030495][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.044114][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.051247][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.077859][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.102827][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.116135][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.151221][ T5121] Bluetooth: hci1: command tx timeout [ 60.193586][ T5122] team0: Port device team_slave_0 added [ 60.215874][ T5117] team0: Port device team_slave_0 added [ 60.226405][ T5117] team0: Port device team_slave_1 added [ 60.241306][ T5120] Bluetooth: hci2: command tx timeout [ 60.241473][ T5121] Bluetooth: hci3: command tx timeout [ 60.257219][ T5116] hsr_slave_0: entered promiscuous mode [ 60.263732][ T5116] hsr_slave_1: entered promiscuous mode [ 60.269889][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.278461][ T5116] Cannot create hsr debugfs directory [ 60.286237][ T5122] team0: Port device team_slave_1 added [ 60.307431][ T5124] team0: Port device team_slave_0 added [ 60.355001][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.362448][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.388919][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.399915][ T5121] Bluetooth: hci4: command tx timeout [ 60.408338][ T5124] team0: Port device team_slave_1 added [ 60.426189][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.434921][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.461422][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.473863][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.481079][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.507979][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.532883][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.539854][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.565912][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.588757][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.595884][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.622074][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.699020][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.706096][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.733286][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.819716][ T5124] hsr_slave_0: entered promiscuous mode [ 60.829089][ T5124] hsr_slave_1: entered promiscuous mode [ 60.835621][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.843389][ T5124] Cannot create hsr debugfs directory [ 60.859257][ T5122] hsr_slave_0: entered promiscuous mode [ 60.866465][ T5122] hsr_slave_1: entered promiscuous mode [ 60.875128][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.882745][ T5122] Cannot create hsr debugfs directory [ 60.915376][ T5117] hsr_slave_0: entered promiscuous mode [ 60.922300][ T5117] hsr_slave_1: entered promiscuous mode [ 60.928706][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.936730][ T5117] Cannot create hsr debugfs directory [ 61.016798][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.082593][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.130339][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.143505][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.404242][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.416494][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.447431][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.458480][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.521426][ T5124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.532802][ T5124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.564383][ T5124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.574700][ T5124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.656547][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.679135][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.690501][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.732025][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.741801][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.833980][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.843038][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.853818][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.881089][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.891725][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.933641][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.941053][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.965480][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.998439][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.005885][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.071552][ T5121] Bluetooth: hci0: command tx timeout [ 62.085744][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.113330][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.120428][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.164776][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.171976][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.195589][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.231978][ T5121] Bluetooth: hci1: command tx timeout [ 62.243717][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.289176][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.314357][ T5121] Bluetooth: hci3: command tx timeout [ 62.314417][ T5120] Bluetooth: hci2: command tx timeout [ 62.350683][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.357886][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.403398][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.433431][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.446973][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.454191][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.481425][ T5120] Bluetooth: hci4: command tx timeout [ 62.488618][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.495833][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.564546][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.602727][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.609915][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.620549][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.627662][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.659535][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.693275][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.709945][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.717195][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.863294][ T5122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.909468][ T5113] veth0_vlan: entered promiscuous mode [ 62.966823][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.056248][ T5113] veth1_vlan: entered promiscuous mode [ 63.203548][ T5113] veth0_macvtap: entered promiscuous mode [ 63.231600][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.277154][ T5113] veth1_macvtap: entered promiscuous mode [ 63.293061][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.317412][ T5116] veth0_vlan: entered promiscuous mode [ 63.376872][ T5124] veth0_vlan: entered promiscuous mode [ 63.398898][ T5116] veth1_vlan: entered promiscuous mode [ 63.419765][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.434390][ T5124] veth1_vlan: entered promiscuous mode [ 63.468549][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.481957][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.529857][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.542349][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.552654][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.562434][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.588561][ T5124] veth0_macvtap: entered promiscuous mode [ 63.605972][ T5116] veth0_macvtap: entered promiscuous mode [ 63.620589][ T5124] veth1_macvtap: entered promiscuous mode [ 63.654989][ T5116] veth1_macvtap: entered promiscuous mode [ 63.699979][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.711992][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.723771][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.734762][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.746737][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.759623][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.779283][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.789970][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.800332][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.811116][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.824467][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.835468][ T5122] veth0_vlan: entered promiscuous mode [ 63.864742][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.875985][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.886252][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.904116][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.917893][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.933202][ T5117] veth0_vlan: entered promiscuous mode [ 63.958682][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.967709][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.977304][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.986220][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.011950][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.012137][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.024579][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.038254][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.038913][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.049576][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.077120][ T5117] veth1_vlan: entered promiscuous mode [ 64.088678][ T5122] veth1_vlan: entered promiscuous mode [ 64.151761][ T5120] Bluetooth: hci0: command tx timeout [ 64.182349][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.208342][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.208524][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.282443][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.299521][ T5122] veth0_macvtap: entered promiscuous mode [ 64.315065][ T5120] Bluetooth: hci1: command tx timeout [ 64.338234][ T2816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.342329][ T5122] veth1_macvtap: entered promiscuous mode [ 64.354188][ T2816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.379621][ T5117] veth0_macvtap: entered promiscuous mode [ 64.390557][ T5117] veth1_macvtap: entered promiscuous mode [ 64.397033][ T5120] Bluetooth: hci2: command tx timeout [ 64.404036][ T5121] Bluetooth: hci3: command tx timeout [ 64.431097][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.458801][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.480750][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.493628][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.505724][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.517745][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.527698][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.538633][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.552934][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.561142][ T5121] Bluetooth: hci4: command tx timeout [ 64.618869][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.638911][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.663781][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.675182][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.685198][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.697413][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.713845][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.728825][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.731198][ C0] hrtimer: interrupt took 140817 ns [ 64.766098][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.776948][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.787730][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.812758][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.826669][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.842284][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.857534][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.875877][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.894898][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.905320][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.917391][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.926363][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.942073][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.962679][ T5200] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 64.975223][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.994337][ T5202] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 65.002756][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.002801][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.002813][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.002827][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.002838][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.002850][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.002859][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.002872][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.015574][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.095747][ T5202] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.119106][ T5203] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 65.133047][ T5203] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 65.143637][ T5203] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.188870][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.199953][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.210023][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.219152][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.594587][ C0] [ 65.596965][ C0] ====================================================== [ 65.603965][ C0] WARNING: possible circular locking dependency detected [ 65.610963][ C0] 6.9.0-syzkaller-12123-g531876c80004 #0 Not tainted [ 65.617613][ C0] ------------------------------------------------------ [ 65.624603][ C0] syz-executor.1/5209 is trying to acquire lock: [ 65.630980][ C0] ffff88807c0dc1d8 (&qs->lock){-...}-{2:2}, at: __queue_map_get+0x14b/0x4d0 [ 65.639678][ C0] [ 65.639678][ C0] but task is already holding lock: [ 65.647013][ C0] ffffc900041c10d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x211/0x4f0 [ 65.656552][ C0] [ 65.656552][ C0] which lock already depends on the new lock. [ 65.656552][ C0] [ 65.666934][ C0] [ 65.666934][ C0] the existing dependency chain (in reverse order) is: [ 65.675923][ C0] [ 65.675923][ C0] -> #1 (&rb->spinlock){-.-.}-{2:2}: [ 65.683380][ C0] lock_acquire+0x1ed/0x550 [ 65.688410][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 65.694202][ C0] __bpf_ringbuf_reserve+0x211/0x4f0 [ 65.699985][ C0] bpf_ringbuf_output+0x67/0x1e0 [ 65.705484][ C0] bpf_prog_0359230584593a1e+0x43/0x47 [ 65.711444][ C0] trace_call_bpf+0x369/0x8a0 [ 65.716619][ C0] perf_trace_run_bpf_submit+0x7c/0x1d0 [ 65.722670][ C0] perf_trace_lock+0x388/0x490 [ 65.727929][ C0] lock_release+0x986/0x9f0 [ 65.732936][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 65.739152][ C0] __queue_map_get+0x2e2/0x4d0 [ 65.744424][ C0] bpf_prog_00798911c748094f+0x42/0x46 [ 65.750378][ C0] bpf_trace_run2+0x2ec/0x540 [ 65.755553][ C0] trace_contention_end+0xf5/0x120 [ 65.761162][ C0] __mutex_lock+0x2e5/0xd70 [ 65.766164][ C0] device_pm_add+0x78/0x320 [ 65.771173][ C0] device_add+0x5e8/0xbf0 [ 65.776000][ C0] wiphy_register+0x1d3f/0x2b30 [ 65.781346][ C0] ieee80211_register_hw+0x3098/0x3d80 [ 65.787298][ C0] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 65.793511][ C0] hwsim_new_radio_nl+0xe4c/0x21d0 [ 65.799117][ C0] genl_rcv_msg+0xb14/0xec0 [ 65.804121][ C0] netlink_rcv_skb+0x1e3/0x430 [ 65.809378][ C0] genl_rcv+0x28/0x40 [ 65.813853][ C0] netlink_unicast+0x7ea/0x980 [ 65.819201][ C0] netlink_sendmsg+0x8db/0xcb0 [ 65.824471][ C0] __sock_sendmsg+0x221/0x270 [ 65.829646][ C0] __sys_sendto+0x3a4/0x4f0 [ 65.834644][ C0] __x64_sys_sendto+0xde/0x100 [ 65.839907][ C0] do_syscall_64+0xf3/0x230 [ 65.844908][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.851296][ C0] [ 65.851296][ C0] -> #0 (&qs->lock){-...}-{2:2}: [ 65.858395][ C0] validate_chain+0x18e0/0x5900 [ 65.863742][ C0] __lock_acquire+0x1346/0x1fd0 [ 65.869090][ C0] lock_acquire+0x1ed/0x550 [ 65.874106][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 65.879888][ C0] __queue_map_get+0x14b/0x4d0 [ 65.885152][ C0] bpf_prog_00798911c748094f+0x42/0x46 [ 65.891109][ C0] bpf_trace_run2+0x2ec/0x540 [ 65.896282][ C0] trace_contention_end+0x114/0x140 [ 65.901978][ C0] __pv_queued_spin_lock_slowpath+0xb81/0xdc0 [ 65.908555][ C0] queued_spin_lock_slowpath+0x42/0x50 [ 65.914510][ C0] do_raw_spin_lock+0x272/0x370 [ 65.919857][ C0] _raw_spin_lock_irqsave+0xe1/0x120 [ 65.925649][ C0] __bpf_ringbuf_reserve+0x211/0x4f0 [ 65.931433][ C0] bpf_ringbuf_output+0x67/0x1e0 [ 65.936869][ C0] bpf_prog_0359230584593a1e+0x43/0x47 [ 65.942820][ C0] trace_call_bpf+0x369/0x8a0 [ 65.947993][ C0] perf_trace_run_bpf_submit+0x7c/0x1d0 [ 65.954034][ C0] perf_trace_lock+0x388/0x490 [ 65.959304][ C0] lock_release+0x986/0x9f0 [ 65.964301][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 65.970518][ C0] debug_object_activate+0x3e4/0x510 [ 65.976311][ C0] enqueue_hrtimer+0x30/0x3c0 [ 65.981488][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 65.987182][ C0] hrtimer_interrupt+0x396/0x990 [ 65.992633][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 65.999196][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 66.005339][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.011814][ C0] smp_call_function_many_cond+0x1865/0x29d0 [ 66.018292][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 66.023911][ C0] text_poke_bp_batch+0x352/0xb30 [ 66.029443][ C0] text_poke_finish+0x30/0x50 [ 66.034614][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 66.041088][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 66.047479][ C0] static_key_enable+0x1a/0x20 [ 66.052738][ C0] tracepoint_add_func+0x953/0x9e0 [ 66.058356][ C0] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 66.065786][ C0] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 66.071654][ C0] bpf_raw_tracepoint_open+0x1c2/0x240 [ 66.077618][ C0] __sys_bpf+0x3c0/0x810 [ 66.082359][ C0] __x64_sys_bpf+0x7c/0x90 [ 66.087271][ C0] do_syscall_64+0xf3/0x230 [ 66.092269][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.098673][ C0] [ 66.098673][ C0] other info that might help us debug this: [ 66.098673][ C0] [ 66.108964][ C0] Possible unsafe locking scenario: [ 66.108964][ C0] [ 66.116385][ C0] CPU0 CPU1 [ 66.121723][ C0] ---- ---- [ 66.127059][ C0] lock(&rb->spinlock); [ 66.131279][ C0] lock(&qs->lock); [ 66.137673][ C0] lock(&rb->spinlock); [ 66.144410][ C0] lock(&qs->lock); [ 66.148279][ C0] [ 66.148279][ C0] *** DEADLOCK *** [ 66.148279][ C0] [ 66.156395][ C0] 9 locks held by syz-executor.1/5209: [ 66.161835][ C0] #0: ffffffff8e3808a8 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register_prio_may_exist+0xbb/0x190 [ 66.173721][ C0] #1: ffffffff8e1ce470 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 66.183437][ C0] #2: ffffffff8e3e1928 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xd7/0x260 [ 66.194205][ C0] #3: ffffffff8e1e3548 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0x17/0x30 [ 66.204625][ C0] #4: ffff8880b942c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x670/0xd50 [ 66.214952][ C0] #5: ffffffff94985ff8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 66.225271][ C0] #6: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xbc/0x8a0 [ 66.234548][ C0] #7: ffffc900041c10d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x211/0x4f0 [ 66.244523][ C0] #8: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 66.253889][ C0] [ 66.253889][ C0] stack backtrace: [ 66.259762][ C0] CPU: 0 PID: 5209 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-12123-g531876c80004 #0 [ 66.269723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 66.279763][ C0] Call Trace: [ 66.283021][ C0] [ 66.285845][ C0] dump_stack_lvl+0x241/0x360 [ 66.290500][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.295698][ C0] ? print_circular_bug+0x130/0x1a0 [ 66.300881][ C0] check_noncircular+0x36a/0x4a0 [ 66.305819][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 66.310999][ C0] ? __pfx_check_noncircular+0x10/0x10 [ 66.316453][ C0] ? lockdep_lock+0x123/0x2b0 [ 66.321108][ C0] ? deref_stack_reg+0x1c7/0x260 [ 66.326024][ C0] ? __bfs+0x368/0x6f0 [ 66.330333][ C0] validate_chain+0x18e0/0x5900 [ 66.335161][ C0] ? __pfx___bfs+0x10/0x10 [ 66.339562][ C0] ? mark_lock_irq+0x8e1/0xc20 [ 66.344328][ C0] ? __pfx_validate_chain+0x10/0x10 [ 66.349507][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 66.354876][ C0] ? lockdep_unlock+0x16a/0x300 [ 66.359699][ C0] ? __pfx_lockdep_unlock+0x10/0x10 [ 66.364881][ C0] ? validate_chain+0x11e/0x5900 [ 66.369798][ C0] ? mark_lock+0x9a/0x350 [ 66.374106][ C0] __lock_acquire+0x1346/0x1fd0 [ 66.378939][ C0] lock_acquire+0x1ed/0x550 [ 66.383417][ C0] ? __queue_map_get+0x14b/0x4d0 [ 66.388336][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 66.393339][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 66.398343][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 66.403607][ C0] ? __queue_map_get+0x14b/0x4d0 [ 66.408520][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 66.414411][ C0] __queue_map_get+0x14b/0x4d0 [ 66.419160][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 66.424158][ C0] ? perf_trace_buf_alloc+0x12e/0x2f0 [ 66.429509][ C0] ? __pfx___queue_map_get+0x10/0x10 [ 66.434790][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 66.439991][ C0] ? perf_swevent_get_recursion_context+0xe3/0x160 [ 66.446473][ C0] ? perf_trace_buf_alloc+0x12e/0x2f0 [ 66.451822][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 66.456652][ C0] bpf_prog_00798911c748094f+0x42/0x46 [ 66.462089][ C0] bpf_trace_run2+0x2ec/0x540 [ 66.466750][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 66.471934][ C0] ? trace_contention_end+0x75/0x140 [ 66.477200][ C0] trace_contention_end+0x114/0x140 [ 66.482391][ C0] __pv_queued_spin_lock_slowpath+0xb81/0xdc0 [ 66.488443][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 66.495014][ C0] queued_spin_lock_slowpath+0x42/0x50 [ 66.500453][ C0] do_raw_spin_lock+0x272/0x370 [ 66.505300][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.510666][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 66.515681][ C0] _raw_spin_lock_irqsave+0xe1/0x120 [ 66.520945][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 66.526821][ C0] __bpf_ringbuf_reserve+0x211/0x4f0 [ 66.532087][ C0] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 66.537872][ C0] ? trace_call_bpf+0xbc/0x8a0 [ 66.542613][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 66.547811][ C0] bpf_ringbuf_output+0x67/0x1e0 [ 66.552755][ C0] bpf_prog_0359230584593a1e+0x43/0x47 [ 66.558214][ C0] trace_call_bpf+0x369/0x8a0 [ 66.562917][ C0] ? trace_call_bpf+0xbc/0x8a0 [ 66.567681][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 66.572874][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 66.578147][ C0] perf_trace_run_bpf_submit+0x7c/0x1d0 [ 66.583682][ C0] perf_trace_lock+0x388/0x490 [ 66.588421][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 66.593424][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 66.598695][ C0] ? debug_object_activate+0x3e4/0x510 [ 66.604129][ C0] ? debug_object_activate+0x3e4/0x510 [ 66.609565][ C0] lock_release+0x986/0x9f0 [ 66.614069][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 66.619095][ C0] ? __pfx_lock_release+0x10/0x10 [ 66.624195][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.629549][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 66.635509][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 66.641207][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 66.647518][ C0] debug_object_activate+0x3e4/0x510 [ 66.652780][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 66.658566][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 66.663654][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 66.669178][ C0] enqueue_hrtimer+0x30/0x3c0 [ 66.673840][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 66.679040][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 66.685040][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 66.690767][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 66.696813][ C0] hrtimer_interrupt+0x396/0x990 [ 66.701745][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 66.707708][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 66.713326][ C0] [ 66.716258][ C0] [ 66.719169][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.725139][ C0] RIP: 0010:smp_call_function_many_cond+0x1865/0x29d0 [ 66.731881][ C0] Code: 89 e6 83 e6 01 31 ff e8 99 09 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 44 05 0c 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 28 05 0c 00 eb e4 44 [ 66.751463][ C0] RSP: 0018:ffffc90004137660 EFLAGS: 00000283 [ 66.757533][ C0] RAX: 0000000000000000 RBX: 1ffff110172a88a9 RCX: 0000000000040000 [ 66.765484][ C0] RDX: ffffc90009651000 RSI: 000000000000c291 RDI: 000000000000c292 [ 66.773433][ C0] RBP: ffffc90004137840 R08: ffffffff818a0f27 R09: 1ffffffff25f50b0 [ 66.781380][ C0] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: dffffc0000000000 [ 66.789329][ C0] R13: ffff8880b9544548 R14: ffff8880b943f900 R15: 0000000000000001 [ 66.797281][ C0] ? smp_call_function_many_cond+0x1847/0x29d0 [ 66.803422][ C0] ? rt_mutex_slowlock+0x37a/0x710 [ 66.808510][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 66.813513][ C0] ? rt_mutex_slowlock+0x37a/0x710 [ 66.818613][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 66.824918][ C0] ? __pfx___might_resched+0x10/0x10 [ 66.830184][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 66.835710][ C0] ? __pfx___might_resched+0x10/0x10 [ 66.840977][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 66.845981][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 66.851073][ C0] text_poke_bp_batch+0x352/0xb30 [ 66.856096][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 66.861633][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 66.866640][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 66.872859][ C0] text_poke_finish+0x30/0x50 [ 66.877529][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 66.883488][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 66.889362][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 66.895580][ C0] static_key_enable+0x1a/0x20 [ 66.900324][ C0] tracepoint_add_func+0x953/0x9e0 [ 66.905416][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 66.910589][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 66.916810][ C0] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 66.923729][ C0] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 66.931160][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 66.937408][ C0] ? bpf_probe_register+0x6f/0x1f0 [ 66.942516][ C0] ? bpf_probe_register+0x134/0x1f0 [ 66.947705][ C0] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 66.953063][ C0] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 66.958944][ C0] bpf_raw_tracepoint_open+0x1c2/0x240 [ 66.964383][ C0] __sys_bpf+0x3c0/0x810 [ 66.968609][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 66.973377][ C0] ? perf_trace_run_bpf_submit+0x12d/0x1d0 [ 66.979256][ C0] __x64_sys_bpf+0x7c/0x90 [ 66.983655][ C0] do_syscall_64+0xf3/0x230 [ 66.988136][ C0] ? clear_bhb_loop+0x35/0x90 [ 66.992790][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.998685][ C0] RIP: 0033:0x7fd9fd87cee9 [ 67.003078][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 67.022660][ C0] RSP: 002b:00007fd9fe61a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.031051][ C0] RAX: ffffffffffffffda RBX: 00007fd9fd9b3fa0 RCX: 00007fd9fd87cee9 [ 67.039018][ C0] RDX: 0000000000000010 RSI: 0000000020000180 RDI: 0000000000000011 [ 67.046983][ C0] RBP: 00007fd9fd8c947f R08: 0000000000000000 R09: 0000000000000000 [ 67.054931][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.062878][ C0] R13: 000000000000000b R14: 00007fd9fd9b3fa0 R15: 00007ffc1ce86fb8 [ 67.070837][ C0] [ 67.141060][ T5121] Bluetooth: hci0: command tx timeout [ 67.146554][ T5121] Bluetooth: hci1: command tx timeout [ 67.149313][ T5117] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 67.152064][ T5121] Bluetooth: hci2: command tx timeout [ 67.165229][ T5121] Bluetooth: hci3: command tx timeout [ 67.170751][ T5121] Bluetooth: hci4: command tx timeout 2024/06/01 11:22:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 67.500907][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.508796][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.749825][ T5214] syzkaller0: entered promiscuous mode