last executing test programs: 47.44857205s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 32.122941879s ago: executing program 1 (id=4): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) fcntl$dupfd(r2, 0x0, r1) 26.740454114s ago: executing program 0 (id=5): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) 22.688383047s ago: executing program 1 (id=6): pivot_root(0x0, 0x0) timerfd_create(0x9, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) 16.504626415s ago: executing program 0 (id=7): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x0) 13.889947108s ago: executing program 1 (id=8): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x4000080) 10.917647461s ago: executing program 0 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x80}}, 0x10) 9.356475827s ago: executing program 1 (id=10): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 7.237375903s ago: executing program 0 (id=11): clock_getres(0xa00, 0x0) 4.122933834s ago: executing program 1 (id=12): r0 = socket(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8) 2.832574374s ago: executing program 0 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 1 (id=14): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001420000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:13396' (ED25519) to the list of known hosts. syzkaller login: [ 616.270311][ T3194] cgroup: Unknown subsys name 'net' [ 619.421125][ T3194] cgroup: Unknown subsys name 'cpuset' [ 620.564526][ T3194] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 775.072620][ T3194] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 936.822532][ T3201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.598903][ T3201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.737350][ T3202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.261269][ T3202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.968936][ T3201] hsr_slave_0: entered promiscuous mode [ 951.034392][ T3201] hsr_slave_1: entered promiscuous mode [ 953.212754][ T3202] hsr_slave_0: entered promiscuous mode [ 953.245154][ T3202] hsr_slave_1: entered promiscuous mode [ 953.262813][ T3202] debugfs: 'hsr0' already exists in 'hsr' [ 953.271831][ T3202] Cannot create hsr debugfs directory [ 962.844672][ T3201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 963.162437][ T3201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 963.352105][ T3201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 963.498366][ T3201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 966.170360][ T3202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 966.809989][ T3202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 967.004670][ T3202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 967.282290][ T3202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 991.023545][ T3201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.308535][ T3202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.744960][ T3201] veth0_vlan: entered promiscuous mode [ 1057.486473][ T3201] veth1_vlan: entered promiscuous mode [ 1060.604220][ T3201] veth0_macvtap: entered promiscuous mode [ 1061.055105][ T3201] veth1_macvtap: entered promiscuous mode [ 1064.524661][ T2538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.623190][ T2538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.672364][ T3261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.749816][ T3261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.459480][ T3202] veth0_vlan: entered promiscuous mode [ 1069.408691][ T3202] veth1_vlan: entered promiscuous mode [ 1070.785024][ T3201] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1071.809796][ T3202] veth0_macvtap: entered promiscuous mode [ 1072.608306][ T3202] veth1_macvtap: entered promiscuous mode [ 1075.878339][ T3261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.889532][ T3766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.892157][ T3766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.894575][ T3766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.872124][ T3850] [ 1129.876556][ T3850] ============================= [ 1129.878225][ T3850] WARNING: suspicious RCU usage [ 1129.895359][ T3850] syzkaller #0 Not tainted [ 1129.898837][ T3850] ----------------------------- [ 1129.900193][ T3850] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1129.902124][ T3850] [ 1129.902124][ T3850] other info that might help us debug this: [ 1129.902124][ T3850] [ 1129.904044][ T3850] [ 1129.904044][ T3850] rcu_scheduler_active = 2, debug_locks = 1 [ 1129.909183][ T3850] 1 lock held by syz.0.13/3850: [ 1129.910803][ T3850] #0: ffffffff887f51d8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: bpf_prog_test_run_syscall+0x2c6/0xe74 [ 1129.920016][ T3850] [ 1129.920016][ T3850] stack backtrace: [ 1129.922122][ T3850] CPU: 0 UID: 0 PID: 3850 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT [ 1129.922776][ T3850] Hardware name: riscv-virtio,qemu (DT) [ 1129.923333][ T3850] Call Trace: [ 1129.923759][ T3850] [] dump_backtrace+0x2e/0x3c [ 1129.924551][ T3850] [] show_stack+0x30/0x3c [ 1129.925053][ T3850] [] dump_stack_lvl+0x114/0x1ac [ 1129.925826][ T3850] [] dump_stack+0x1c/0x28 [ 1129.926554][ T3850] [] lockdep_rcu_suspicious+0x19e/0x268 [ 1129.927137][ T3850] [] get_callchain_entry+0x370/0x3f8 [ 1129.927772][ T3850] [] get_perf_callchain+0x390/0x904 [ 1129.928408][ T3850] [] __bpf_get_stack+0x538/0xa88 [ 1129.929020][ T3850] [] bpf_get_stack+0x34/0x44 [ 1129.929595][ T3850] [] bpf_get_stack_raw_tp+0xc2/0x114 [ 1129.930538][ T3850] [] bpf_prog_e8e6327ccf46c9a7+0x4a/0x5c [ 1129.931776][ T3850] [] bpf_prog_test_run_syscall+0x4fe/0xe74 [ 1129.932509][ T3850] [] __sys_bpf+0x1292/0x54dc [ 1129.933134][ T3850] [] __riscv_sys_bpf+0x70/0xd0 [ 1129.933740][ T3850] [] syscall_handler+0x92/0x114 [ 1129.934398][ T3850] [] do_trap_ecall_u+0x402/0x680 [ 1129.935059][ T3850] [] handle_exception+0x15e/0x16a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1137.133723][ T3852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1155.550634][ T3766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.052901][ T3766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0