last executing test programs: 1.040381984s ago: executing program 2 (id=3): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000180000000000000000100008510"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd5) perf_event_open(&(0x7f0000000700)={0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x1b, 0x4}]}, {0x0, [0x5f, 0x0, 0x30, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f0000000340)=""/22, 0x31, 0x16, 0x1, 0x80000001, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7ff, 0x100, 0x59, 0x100c, 0x1, 0x3, '\x00', 0x0, r5, 0x4, 0x0, 0x0, 0x1f, @void, @value, @void, @value}, 0xffffffffffffffd2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000680)=ANY=[], 0x5) r8 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000080), 0x9) syz_clone(0xc0126080, 0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) 1.038627093s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 540.405906ms ago: executing program 3 (id=6): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000002500)={0x0, 0x2a, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 270.796292ms ago: executing program 3 (id=7): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x26, 0x2, 0x4, &(0x7f0000000140)) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff20100000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 127.669181ms ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) 102.800728ms ago: executing program 3 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000000), 0x20000000}, 0x20) 0s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. syzkaller login: [ 51.872794][ T5816] cgroup: Unknown subsys name 'net' [ 52.007274][ T5816] cgroup: Unknown subsys name 'cpuset' [ 52.015212][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.332048][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.018982][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.034114][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.047178][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.055578][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.063193][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.071846][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.079755][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.088095][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.095780][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.108510][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.113911][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.123220][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.131690][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.139624][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.146720][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.153831][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.158745][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.161358][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.169997][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.176780][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.190402][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.195621][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.197792][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.204845][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.224500][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.233505][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.241424][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.251182][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.260772][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.268339][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.672314][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 56.720007][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 56.730241][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 56.781663][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 56.835733][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 56.932232][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.939519][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.947649][ T5833] bridge_slave_0: entered allmulticast mode [ 56.956106][ T5833] bridge_slave_0: entered promiscuous mode [ 56.964895][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.971978][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.979415][ T5833] bridge_slave_1: entered allmulticast mode [ 56.986399][ T5833] bridge_slave_1: entered promiscuous mode [ 57.021451][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.029076][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.036602][ T5837] bridge_slave_0: entered allmulticast mode [ 57.043111][ T5837] bridge_slave_0: entered promiscuous mode [ 57.063252][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.070729][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.078005][ T5846] bridge_slave_0: entered allmulticast mode [ 57.087515][ T5846] bridge_slave_0: entered promiscuous mode [ 57.118600][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.125808][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.132887][ T5837] bridge_slave_1: entered allmulticast mode [ 57.140186][ T5837] bridge_slave_1: entered promiscuous mode [ 57.148959][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.160546][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.169871][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.177141][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.184399][ T5846] bridge_slave_1: entered allmulticast mode [ 57.190924][ T5846] bridge_slave_1: entered promiscuous mode [ 57.203526][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.211553][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.219081][ T5836] bridge_slave_0: entered allmulticast mode [ 57.226840][ T5836] bridge_slave_0: entered promiscuous mode [ 57.235465][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.242871][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.250451][ T5829] bridge_slave_0: entered allmulticast mode [ 57.257234][ T5829] bridge_slave_0: entered promiscuous mode [ 57.264644][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.271725][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.278917][ T5829] bridge_slave_1: entered allmulticast mode [ 57.285929][ T5829] bridge_slave_1: entered promiscuous mode [ 57.312112][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.319277][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.326595][ T5836] bridge_slave_1: entered allmulticast mode [ 57.333104][ T5836] bridge_slave_1: entered promiscuous mode [ 57.388159][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.407564][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.418482][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.431328][ T5833] team0: Port device team_slave_0 added [ 57.442627][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.453134][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.471362][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.489239][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.508295][ T5833] team0: Port device team_slave_1 added [ 57.518070][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.537938][ T5836] team0: Port device team_slave_0 added [ 57.553047][ T5829] team0: Port device team_slave_0 added [ 57.581061][ T5836] team0: Port device team_slave_1 added [ 57.593201][ T5829] team0: Port device team_slave_1 added [ 57.604300][ T5837] team0: Port device team_slave_0 added [ 57.636157][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.643107][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.670042][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.691839][ T5837] team0: Port device team_slave_1 added [ 57.698401][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.705676][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.731697][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.745858][ T5846] team0: Port device team_slave_0 added [ 57.752127][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.759174][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.786228][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.811604][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.823585][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.849729][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.875382][ T5846] team0: Port device team_slave_1 added [ 57.888999][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.896140][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.922293][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.951962][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.958977][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.985024][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.000816][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.008969][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.035343][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.053579][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.060824][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.089463][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.118272][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.125288][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.152489][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.177125][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.184170][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.210537][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.221292][ T5838] Bluetooth: hci3: command tx timeout [ 58.227209][ T5838] Bluetooth: hci1: command tx timeout [ 58.237403][ T5836] hsr_slave_0: entered promiscuous mode [ 58.244554][ T5836] hsr_slave_1: entered promiscuous mode [ 58.290406][ T5833] hsr_slave_0: entered promiscuous mode [ 58.296095][ T5847] Bluetooth: hci2: command tx timeout [ 58.302454][ T5833] hsr_slave_1: entered promiscuous mode [ 58.304564][ T5838] Bluetooth: hci0: command tx timeout [ 58.314051][ T5847] Bluetooth: hci4: command tx timeout [ 58.316377][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.329353][ T5833] Cannot create hsr debugfs directory [ 58.346803][ T5846] hsr_slave_0: entered promiscuous mode [ 58.352966][ T5846] hsr_slave_1: entered promiscuous mode [ 58.359485][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.367527][ T5846] Cannot create hsr debugfs directory [ 58.413003][ T5829] hsr_slave_0: entered promiscuous mode [ 58.422748][ T5829] hsr_slave_1: entered promiscuous mode [ 58.430279][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.438486][ T5829] Cannot create hsr debugfs directory [ 58.447628][ T5837] hsr_slave_0: entered promiscuous mode [ 58.457063][ T5837] hsr_slave_1: entered promiscuous mode [ 58.463500][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.471086][ T5837] Cannot create hsr debugfs directory [ 58.785390][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.808430][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.823323][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.836775][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.853393][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.873577][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.882689][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.907507][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.956646][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.990823][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.010067][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.045782][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.059436][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.087795][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.115506][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.125320][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.187130][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.200095][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.221570][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.244791][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.275448][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.284630][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.329832][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.349113][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.356416][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.372438][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.385238][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.405615][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.412697][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.443855][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.450986][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.461517][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.468653][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.497620][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.541203][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.548307][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.557731][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.564858][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.635467][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.689700][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.728011][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.760355][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.816647][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.835681][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.872711][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.880400][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.946811][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.978680][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.985846][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.009215][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.016319][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.028597][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.035680][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.069098][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.137645][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.158348][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.242990][ T5846] veth0_vlan: entered promiscuous mode [ 60.300655][ T5847] Bluetooth: hci1: command tx timeout [ 60.305119][ T5846] veth1_vlan: entered promiscuous mode [ 60.309131][ T5847] Bluetooth: hci3: command tx timeout [ 60.355752][ T5836] veth0_vlan: entered promiscuous mode [ 60.374870][ T5838] Bluetooth: hci0: command tx timeout [ 60.375235][ T5835] Bluetooth: hci2: command tx timeout [ 60.380337][ T5847] Bluetooth: hci4: command tx timeout [ 60.404994][ T5836] veth1_vlan: entered promiscuous mode [ 60.479703][ T5836] veth0_macvtap: entered promiscuous mode [ 60.509646][ T5846] veth0_macvtap: entered promiscuous mode [ 60.548862][ T5846] veth1_macvtap: entered promiscuous mode [ 60.559914][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.569383][ T5836] veth1_macvtap: entered promiscuous mode [ 60.606945][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.619503][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.636586][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.645542][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.656696][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.667820][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.688183][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.701828][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.712676][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.732550][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.744141][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.752861][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.761656][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.782354][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.791430][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.800988][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.809897][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.841608][ T5833] veth0_vlan: entered promiscuous mode [ 60.877775][ T5833] veth1_vlan: entered promiscuous mode [ 60.889656][ T5829] veth0_vlan: entered promiscuous mode [ 60.942902][ T5829] veth1_vlan: entered promiscuous mode [ 61.008927][ T5833] veth0_macvtap: entered promiscuous mode [ 61.021324][ T5837] veth0_vlan: entered promiscuous mode [ 61.040011][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.051301][ T5837] veth1_vlan: entered promiscuous mode [ 61.064873][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.075446][ T5833] veth1_macvtap: entered promiscuous mode [ 61.095161][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.102994][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.154771][ T5829] veth0_macvtap: entered promiscuous mode [ 61.167093][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.179697][ T5837] veth0_macvtap: entered promiscuous mode [ 61.189701][ T5837] veth1_macvtap: entered promiscuous mode [ 61.195591][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.197609][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.215304][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.225231][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.235717][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.246677][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.255516][ T5829] veth1_macvtap: entered promiscuous mode [ 61.273868][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.282034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.299973][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.312952][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.323160][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.335040][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.352099][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.377344][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.389026][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.399225][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.410028][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.420855][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.431535][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.443538][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.450546][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.470099][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.479189][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.489343][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.498610][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.513180][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.524574][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.534527][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.545081][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.554937][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.565466][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.576530][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.593554][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.607594][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.619245][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.630788][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.640736][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.651577][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.661597][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.672171][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.683487][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.718920][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.727938][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.737491][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.746317][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.803678][ C1] hrtimer: interrupt took 47910 ns [ 61.841569][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.858234][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.879793][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.913752][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.943700][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.969196][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.000463][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.011903][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.043024][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.109309][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.118640][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.129145][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.139031][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.305702][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.316412][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.328499][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.336677][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.363877][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.374569][ T5847] Bluetooth: hci3: command tx timeout [ 62.375241][ T5835] Bluetooth: hci1: command tx timeout [ 62.394046][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.454489][ T5835] Bluetooth: hci2: command tx timeout [ 62.459984][ T5847] Bluetooth: hci4: command tx timeout [ 62.460039][ T5838] Bluetooth: hci0: command tx timeout [ 62.501997][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.511078][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.609640][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.660016][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.732321][ T68] [ 62.734691][ T68] ====================================================== [ 62.741720][ T68] WARNING: possible circular locking dependency detected [ 62.748759][ T68] 6.13.0-rc1-syzkaller-00035-ge10500b69c3f #0 Not tainted [ 62.755873][ T68] ------------------------------------------------------ [ 62.762896][ T68] kworker/u8:4/68 is trying to acquire lock: [ 62.768882][ T68] ffff8880b8729430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 62.777554][ T68] [ 62.777554][ T68] but task is already holding lock: [ 62.784913][ T68] ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 62.793447][ T68] [ 62.793447][ T68] which lock already depends on the new lock. [ 62.793447][ T68] [ 62.803841][ T68] [ 62.803841][ T68] the existing dependency chain (in reverse order) is: [ 62.812843][ T68] [ 62.812843][ T68] -> #1 (&base->lock){-.-.}-{2:2}: [ 62.820136][ T68] lock_acquire+0x1ed/0x550 [ 62.825155][ T68] _raw_spin_lock_irqsave+0xd5/0x120 [ 62.830953][ T68] lock_timer_base+0x112/0x240 [ 62.836229][ T68] __mod_timer+0x1ca/0xeb0 [ 62.841156][ T68] queue_delayed_work_on+0x1ca/0x390 [ 62.846956][ T68] kvfree_call_rcu+0x47f/0x790 [ 62.852232][ T68] pwq_release_workfn+0x664/0x800 [ 62.857766][ T68] kthread_worker_fn+0x4f7/0xb70 [ 62.863212][ T68] kthread+0x2f0/0x390 [ 62.867792][ T68] ret_from_fork+0x4b/0x80 [ 62.872746][ T68] ret_from_fork_asm+0x1a/0x30 [ 62.878036][ T68] [ 62.878036][ T68] -> #0 (krc.lock){..-.}-{2:2}: [ 62.885075][ T68] validate_chain+0x18ef/0x5920 [ 62.890442][ T68] __lock_acquire+0x1397/0x2100 [ 62.895805][ T68] lock_acquire+0x1ed/0x550 [ 62.900817][ T68] _raw_spin_lock+0x2e/0x40 [ 62.905830][ T68] kvfree_call_rcu+0x18a/0x790 [ 62.911104][ T68] trie_delete_elem+0x546/0x6a0 [ 62.916466][ T68] bpf_prog_8c8ab8634bca3061+0x43/0x4d [ 62.922438][ T68] bpf_trace_run4+0x334/0x590 [ 62.927622][ T68] __alloc_pages_noprof+0x6e4/0x710 [ 62.933330][ T68] alloc_pages_mpol_noprof+0x3e8/0x680 [ 62.939313][ T68] alloc_slab_page+0x6a/0x140 [ 62.944508][ T68] allocate_slab+0x5a/0x2f0 [ 62.949525][ T68] ___slab_alloc+0xcd1/0x14b0 [ 62.954712][ T68] __slab_alloc+0x58/0xa0 [ 62.959551][ T68] kmem_cache_alloc_noprof+0x268/0x380 [ 62.965524][ T68] fill_pool+0x260/0x680 [ 62.970273][ T68] debug_object_activate+0x493/0x580 [ 62.976073][ T68] __mod_timer+0x89d/0xeb0 [ 62.980996][ T68] queue_delayed_work_on+0x1ca/0x390 [ 62.986788][ T68] process_scheduled_works+0xa66/0x1840 [ 62.992842][ T68] worker_thread+0x870/0xd30 [ 62.997962][ T68] kthread+0x2f0/0x390 [ 63.002548][ T68] ret_from_fork+0x4b/0x80 [ 63.007475][ T68] ret_from_fork_asm+0x1a/0x30 [ 63.012749][ T68] [ 63.012749][ T68] other info that might help us debug this: [ 63.012749][ T68] [ 63.022961][ T68] Possible unsafe locking scenario: [ 63.022961][ T68] [ 63.030397][ T68] CPU0 CPU1 [ 63.035750][ T68] ---- ---- [ 63.041099][ T68] lock(&base->lock); [ 63.045165][ T68] lock(krc.lock); [ 63.051483][ T68] lock(&base->lock); [ 63.058060][ T68] lock(krc.lock); [ 63.061860][ T68] [ 63.061860][ T68] *** DEADLOCK *** [ 63.061860][ T68] [ 63.069987][ T68] 5 locks held by kworker/u8:4/68: [ 63.075082][ T68] #0: ffff88803186e148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 63.086388][ T68] #1: ffffc9000216fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 63.099516][ T68] #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 63.108478][ T68] #3: ffffffff8f08ca80 (fill_pool_map-wait-type-override){+.+.}-{4:4}, at: debug_object_activate+0x46b/0x580 [ 63.120132][ T68] #4: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 63.129519][ T68] [ 63.129519][ T68] stack backtrace: [ 63.135412][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc1-syzkaller-00035-ge10500b69c3f #0 [ 63.146160][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.156207][ T68] Workqueue: bat_events batadv_nc_worker [ 63.161845][ T68] Call Trace: [ 63.165113][ T68] [ 63.168036][ T68] dump_stack_lvl+0x241/0x360 [ 63.172707][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.179045][ T68] ? __pfx__printk+0x10/0x10 [ 63.183632][ T68] print_circular_bug+0x13a/0x1b0 [ 63.188657][ T68] check_noncircular+0x36a/0x4a0 [ 63.193590][ T68] ? __pfx_check_noncircular+0x10/0x10 [ 63.199048][ T68] validate_chain+0x18ef/0x5920 [ 63.203893][ T68] ? __pfx_validate_chain+0x10/0x10 [ 63.209092][ T68] ? __pfx_validate_chain+0x10/0x10 [ 63.214282][ T68] ? mark_lock+0x9a/0x360 [ 63.218614][ T68] ? __lock_acquire+0x1397/0x2100 [ 63.223634][ T68] ? mark_lock+0x9a/0x360 [ 63.227963][ T68] ? mark_lock+0x9a/0x360 [ 63.232285][ T68] __lock_acquire+0x1397/0x2100 [ 63.237135][ T68] lock_acquire+0x1ed/0x550 [ 63.241644][ T68] ? kvfree_call_rcu+0x18a/0x790 [ 63.246579][ T68] ? __pfx_lock_acquire+0x10/0x10 [ 63.251595][ T68] ? debug_object_active_state+0x239/0x360 [ 63.257401][ T68] ? __pfx_debug_object_active_state+0x10/0x10 [ 63.263550][ T68] ? __virt_addr_valid+0x183/0x530 [ 63.268653][ T68] ? __virt_addr_valid+0x183/0x530 [ 63.273756][ T68] ? __virt_addr_valid+0x45f/0x530 [ 63.278857][ T68] ? __phys_addr+0xba/0x170 [ 63.283350][ T68] _raw_spin_lock+0x2e/0x40 [ 63.287843][ T68] ? kvfree_call_rcu+0x18a/0x790 [ 63.292775][ T68] kvfree_call_rcu+0x18a/0x790 [ 63.297532][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.303414][ T68] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 63.308695][ T68] ? longest_prefix_match+0x49f/0x650 [ 63.314060][ T68] trie_delete_elem+0x546/0x6a0 [ 63.318910][ T68] ? bpf_trace_run4+0x244/0x590 [ 63.323748][ T68] bpf_prog_8c8ab8634bca3061+0x43/0x4d [ 63.329193][ T68] bpf_trace_run4+0x334/0x590 [ 63.333862][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 63.338801][ T68] ? __pfx_bpf_trace_run4+0x10/0x10 [ 63.343992][ T68] __alloc_pages_noprof+0x6e4/0x710 [ 63.349184][ T68] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 63.354907][ T68] alloc_pages_mpol_noprof+0x3e8/0x680 [ 63.360364][ T68] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 63.366341][ T68] ? alloc_pages_noprof+0xef/0x170 [ 63.371444][ T68] alloc_slab_page+0x6a/0x140 [ 63.376117][ T68] allocate_slab+0x5a/0x2f0 [ 63.380610][ T68] ___slab_alloc+0xcd1/0x14b0 [ 63.385277][ T68] ? fill_pool+0x260/0x680 [ 63.389683][ T68] ? fill_pool+0x260/0x680 [ 63.394086][ T68] __slab_alloc+0x58/0xa0 [ 63.398404][ T68] ? fill_pool+0x260/0x680 [ 63.402804][ T68] kmem_cache_alloc_noprof+0x268/0x380 [ 63.408257][ T68] fill_pool+0x260/0x680 [ 63.412488][ T68] ? __pfx_fill_pool_from_freelist+0x10/0x10 [ 63.418456][ T68] ? __pfx_fill_pool+0x10/0x10 [ 63.423210][ T68] ? debug_object_activate+0x46b/0x580 [ 63.428663][ T68] ? debug_object_activate+0x46b/0x580 [ 63.434114][ T68] debug_object_activate+0x493/0x580 [ 63.439396][ T68] ? __pfx_debug_object_activate+0x10/0x10 [ 63.445195][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 63.450554][ T68] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.455746][ T68] __mod_timer+0x89d/0xeb0 [ 63.460157][ T68] ? __pfx___mod_timer+0x10/0x10 [ 63.465085][ T68] ? __local_bh_enable_ip+0x168/0x200 [ 63.470449][ T68] ? __pfx_lock_release+0x10/0x10 [ 63.475462][ T68] ? batadv_nc_purge_paths+0x312/0x3b0 [ 63.480912][ T68] ? __queue_delayed_work+0x1ae/0x250 [ 63.486274][ T68] queue_delayed_work_on+0x1ca/0x390 [ 63.491552][ T68] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 63.497346][ T68] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 63.503140][ T68] ? batadv_nc_worker+0x4fa/0x610 [ 63.508152][ T68] ? process_scheduled_works+0x976/0x1840 [ 63.513858][ T68] process_scheduled_works+0xa66/0x1840 [ 63.519400][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 63.525369][ T68] ? assign_work+0x364/0x3d0 [ 63.529948][ T68] worker_thread+0x870/0xd30 [ 63.534534][ T68] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.540437][ T68] ? __kthread_parkme+0x169/0x1d0 [ 63.545461][ T68] ? __pfx_worker_thread+0x10/0x10 [ 63.550566][ T68] kthread+0x2f0/0x390 [ 63.554640][ T68] ? __pfx_worker_thread+0x10/0x10 [ 63.559750][ T68] ? __pfx_kthread+0x10/0x10 [ 63.564340][ T68] ret_from_fork+0x4b/0x80 [ 63.568760][ T68] ? __pfx_kthread+0x10/0x10 [ 63.573342][ T68] ret_from_fork_asm+0x1a/0x30 [ 63.578099][ T68] [ 63.643307][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.658926][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.464162][ T5838] Bluetooth: hci1: command tx timeout [ 64.464195][ T5835] Bluetooth: hci3: command tx timeout [ 64.534070][ T5835] Bluetooth: hci0: command tx timeout [ 64.543883][ T5835] Bluetooth: hci2: command tx timeout [ 64.545601][ T5838] Bluetooth: hci4: command tx timeout [ 71.574953][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.581373][ T1295] ieee802154 phy1 wpan1: encryption failed: -22