last executing test programs: 3.180238317s ago: executing program 2 (id=44): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 3.173619841s ago: executing program 1 (id=45): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x4000, 0xa35d0e41aad6cab5, 0x1, 0x3}, 0x1c) 3.067197492s ago: executing program 3 (id=48): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95", 0xc0}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.900059644s ago: executing program 1 (id=50): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.876392485s ago: executing program 3 (id=51): sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2.640356208s ago: executing program 2 (id=53): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700"], 0x70}}, 0x0) 2.566956227s ago: executing program 1 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0xea5bc50b6199d77e) 2.566626589s ago: executing program 3 (id=56): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x6, 0x1, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) 2.421351426s ago: executing program 2 (id=58): unshare(0x2040400) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10) 2.287959212s ago: executing program 3 (id=61): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="c6", 0x1}], 0x1}, 0x20008840) 2.287700955s ago: executing program 1 (id=62): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x86, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd47e0ffff00004000638877fbac14140cac14140c07029f89052f87e577ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) 2.198230945s ago: executing program 2 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.010373002s ago: executing program 3 (id=66): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x27) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000340)={r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, r4, 0x4, r1}, 0x10) 1.966072941s ago: executing program 2 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 1.696394509s ago: executing program 0 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x8, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.619617315s ago: executing program 4 (id=71): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.572288792s ago: executing program 0 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 1.459003878s ago: executing program 4 (id=73): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000001340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.384325544s ago: executing program 0 (id=74): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.244375209s ago: executing program 0 (id=75): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) 1.23318081s ago: executing program 4 (id=76): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1.088299727s ago: executing program 4 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.064169212s ago: executing program 4 (id=78): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 961.513917ms ago: executing program 4 (id=79): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) 172.419371ms ago: executing program 0 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000600)="5099e8e9", &(0x7f0000000180)=""/74}, 0x20) 172.008462ms ago: executing program 1 (id=81): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) 146.153575ms ago: executing program 3 (id=82): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 139.97529ms ago: executing program 2 (id=83): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 65.580391ms ago: executing program 0 (id=84): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="c6", 0x1}], 0x1}, 0x20000000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x18, 0x0}, 0x2) 0s ago: executing program 1 (id=85): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="82", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x48000}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 85.509255][ T5852] cgroup: Unknown subsys name 'net' [ 85.639926][ T5852] cgroup: Unknown subsys name 'cpuset' [ 85.649318][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.438052][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.747863][ T5882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.755782][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.763639][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.763697][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.779883][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.782600][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.795042][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.796718][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.803350][ T5886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.817323][ T5886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.817887][ T5884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.824850][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.833075][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.848122][ T5884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.857466][ T5886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.858177][ T5884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.871777][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.876539][ T5884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.887231][ T5884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.895200][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.908601][ T5882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.929657][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.937172][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.945303][ T5882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.953253][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.101867][ T10] cfg80211: failed to load regulatory.db [ 92.584422][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 92.669038][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.868388][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 92.909457][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 92.920683][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 93.020253][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.027861][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.035280][ T5867] bridge_slave_0: entered allmulticast mode [ 93.044423][ T5867] bridge_slave_0: entered promiscuous mode [ 93.082186][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.089484][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.097401][ T5863] bridge_slave_0: entered allmulticast mode [ 93.104622][ T5863] bridge_slave_0: entered promiscuous mode [ 93.112587][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.119826][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.127314][ T5867] bridge_slave_1: entered allmulticast mode [ 93.134510][ T5867] bridge_slave_1: entered promiscuous mode [ 93.181825][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.189214][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.196910][ T5863] bridge_slave_1: entered allmulticast mode [ 93.204235][ T5863] bridge_slave_1: entered promiscuous mode [ 93.299064][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.331856][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.352062][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.376191][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.384090][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.392026][ T5866] bridge_slave_0: entered allmulticast mode [ 93.399545][ T5866] bridge_slave_0: entered promiscuous mode [ 93.409531][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.416751][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.423923][ T5866] bridge_slave_1: entered allmulticast mode [ 93.431946][ T5866] bridge_slave_1: entered promiscuous mode [ 93.441062][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.504790][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.512363][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.520238][ T5873] bridge_slave_0: entered allmulticast mode [ 93.527951][ T5873] bridge_slave_0: entered promiscuous mode [ 93.589793][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.597881][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.605067][ T5874] bridge_slave_0: entered allmulticast mode [ 93.612531][ T5874] bridge_slave_0: entered promiscuous mode [ 93.634384][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.641869][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.649198][ T5873] bridge_slave_1: entered allmulticast mode [ 93.657355][ T5873] bridge_slave_1: entered promiscuous mode [ 93.689929][ T5863] team0: Port device team_slave_0 added [ 93.696919][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.704120][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.711454][ T5874] bridge_slave_1: entered allmulticast mode [ 93.718720][ T5874] bridge_slave_1: entered promiscuous mode [ 93.727454][ T5867] team0: Port device team_slave_0 added [ 93.764574][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.777120][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.788507][ T5863] team0: Port device team_slave_1 added [ 93.797310][ T5867] team0: Port device team_slave_1 added [ 93.817889][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.843778][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.888854][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.901856][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.936796][ T5869] Bluetooth: hci1: command tx timeout [ 93.942628][ T5884] Bluetooth: hci0: command tx timeout [ 93.942637][ T5880] Bluetooth: hci4: command tx timeout [ 93.998286][ T5873] team0: Port device team_slave_0 added [ 94.015836][ T5884] Bluetooth: hci3: command tx timeout [ 94.016557][ T5869] Bluetooth: hci2: command tx timeout [ 94.029817][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.037103][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.063380][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.076771][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.083742][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.110727][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.137573][ T5873] team0: Port device team_slave_1 added [ 94.146487][ T5874] team0: Port device team_slave_0 added [ 94.154133][ T5866] team0: Port device team_slave_0 added [ 94.160957][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.168322][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.195254][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.208194][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.215278][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.241711][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.268465][ T5874] team0: Port device team_slave_1 added [ 94.289623][ T5866] team0: Port device team_slave_1 added [ 94.297229][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.304263][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.330532][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.384579][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.391706][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.417970][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.485560][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.492962][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.519739][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.545376][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.553080][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.579072][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.620040][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.628019][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.653998][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.679535][ T5863] hsr_slave_0: entered promiscuous mode [ 94.686515][ T5863] hsr_slave_1: entered promiscuous mode [ 94.693664][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.700754][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.727341][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.757368][ T5867] hsr_slave_0: entered promiscuous mode [ 94.763797][ T5867] hsr_slave_1: entered promiscuous mode [ 94.771009][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 94.777104][ T5867] Cannot create hsr debugfs directory [ 94.820289][ T5873] hsr_slave_0: entered promiscuous mode [ 94.826847][ T5873] hsr_slave_1: entered promiscuous mode [ 94.832965][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 94.839001][ T5873] Cannot create hsr debugfs directory [ 95.021505][ T5866] hsr_slave_0: entered promiscuous mode [ 95.029290][ T5866] hsr_slave_1: entered promiscuous mode [ 95.035437][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 95.041553][ T5866] Cannot create hsr debugfs directory [ 95.060313][ T5874] hsr_slave_0: entered promiscuous mode [ 95.068926][ T5874] hsr_slave_1: entered promiscuous mode [ 95.075157][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 95.081083][ T5874] Cannot create hsr debugfs directory [ 95.641019][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.663651][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.690667][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.715158][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.760368][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.771591][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.790799][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.811693][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.894954][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.924276][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.952397][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.977946][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.015730][ T5869] Bluetooth: hci0: command tx timeout [ 96.027145][ T5869] Bluetooth: hci1: command tx timeout [ 96.027371][ T5884] Bluetooth: hci4: command tx timeout [ 96.054758][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.073757][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.097177][ T5884] Bluetooth: hci2: command tx timeout [ 96.102641][ T5884] Bluetooth: hci3: command tx timeout [ 96.120356][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.159017][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.214595][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.232340][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.247878][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.264702][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.287444][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.356746][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.395369][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.402716][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.438777][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.457232][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.464376][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.529432][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.591678][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.598856][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.610451][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.617659][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.668218][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.680407][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.714175][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.793105][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.821620][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.842338][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.881859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.889078][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.927953][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.935151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.951261][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.958415][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.034183][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.041430][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.063527][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.070763][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.135532][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.142819][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.303601][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.328218][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.540494][ T5867] veth0_vlan: entered promiscuous mode [ 97.579179][ T5867] veth1_vlan: entered promiscuous mode [ 97.599185][ T5863] veth0_vlan: entered promiscuous mode [ 97.640564][ T5863] veth1_vlan: entered promiscuous mode [ 97.733418][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.819146][ T5867] veth0_macvtap: entered promiscuous mode [ 97.877116][ T5867] veth1_macvtap: entered promiscuous mode [ 97.900563][ T5863] veth0_macvtap: entered promiscuous mode [ 97.925333][ T5863] veth1_macvtap: entered promiscuous mode [ 97.951746][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.964610][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.981267][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.034623][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.043369][ T5866] veth0_vlan: entered promiscuous mode [ 98.057996][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.083627][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.096448][ T5869] Bluetooth: hci1: command tx timeout [ 98.102274][ T5869] Bluetooth: hci0: command tx timeout [ 98.107931][ T5884] Bluetooth: hci4: command tx timeout [ 98.121095][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.134633][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.157101][ T5866] veth1_vlan: entered promiscuous mode [ 98.178125][ T5869] Bluetooth: hci2: command tx timeout [ 98.183661][ T5884] Bluetooth: hci3: command tx timeout [ 98.211699][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.231075][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.247884][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.285793][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.294583][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.347985][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.461908][ T5874] veth0_vlan: entered promiscuous mode [ 98.481294][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.491970][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.527676][ T5866] veth0_macvtap: entered promiscuous mode [ 98.543257][ T5874] veth1_vlan: entered promiscuous mode [ 98.564955][ T5866] veth1_macvtap: entered promiscuous mode [ 98.583554][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.593340][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.642807][ T5873] veth0_vlan: entered promiscuous mode [ 98.657878][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.670324][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.715052][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.734418][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.743785][ T5873] veth1_vlan: entered promiscuous mode [ 98.765498][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.779562][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.824490][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.829151][ T5874] veth0_macvtap: entered promiscuous mode [ 98.871298][ T5873] veth0_macvtap: entered promiscuous mode [ 98.907170][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.937679][ T5874] veth1_macvtap: entered promiscuous mode [ 98.960285][ T5873] veth1_macvtap: entered promiscuous mode [ 98.981738][ T3486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.010718][ T3486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.033203][ T1152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.049303][ T5989] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.131710][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.172157][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.262513][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.308959][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.395233][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.406123][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.415260][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.442542][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.452461][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.462367][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.474640][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.594838][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.618052][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.655038][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.666094][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 99.677196][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 99.790447][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.819453][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.827356][ T5942] IPVS: starting estimator thread 0... [ 99.878043][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.899438][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.926324][ T6007] IPVS: using max 26 ests per chain, 62400 per kthread [ 99.975532][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'. [ 100.008074][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.020814][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.157479][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.178809][ T5884] Bluetooth: hci4: command tx timeout [ 100.184340][ T5869] Bluetooth: hci0: command tx timeout [ 100.191440][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.192915][ T5880] Bluetooth: hci1: command tx timeout [ 100.236846][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.259845][ T5880] Bluetooth: hci3: command tx timeout [ 100.265304][ T5880] Bluetooth: hci2: command tx timeout [ 100.303001][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.384495][ T6058] netlink: 'syz.4.32': attribute type 4 has an invalid length. [ 101.423713][ T6058] netlink: 'syz.4.32': attribute type 4 has an invalid length. [ 101.616496][ T6066] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET) [ 102.663639][ T6108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 102.820951][ T6111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.53'. [ 102.889402][ T6115] syz_tun: entered allmulticast mode [ 102.930790][ T6113] syz_tun: left allmulticast mode [ 103.036732][ T6121] tipc: Can't bind to reserved service type 1 [ 105.130182][ T6173] syzkaller0: entered promiscuous mode [ 105.142644][ T6173] syzkaller0: entered allmulticast mode [ 105.340989][ T6181] ------------[ cut here ]------------ [ 105.346636][ T6181] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0)(1) [ 105.396719][ T6181] WARNING: CPU: 1 PID: 6181 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 105.407213][ T6181] Modules linked in: [ 105.411773][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 105.421569][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.431748][ T6181] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 105.438191][ T6181] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 0f 32 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 105.458910][ T6181] RSP: 0018:ffffc9000b006f08 EFLAGS: 00010282 [ 105.465030][ T6181] RAX: 685f404f0086e900 RBX: 0000000000000000 RCX: 0000000000080000 [ 105.473713][ T6181] RDX: ffffc9000be8b000 RSI: 00000000000071e9 RDI: 00000000000071ea [ 105.482490][ T6181] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 105.490922][ T6181] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88802944a348 [ 105.499099][ T6181] R13: ffff88802944a368 R14: ffff88802944a380 R15: 0000000000000000 [ 105.507157][ T6181] FS: 00007fdbeacd96c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 105.517002][ T6181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.523633][ T6181] CR2: 0000200000001d80 CR3: 0000000030170000 CR4: 00000000003526f0 [ 105.532496][ T6181] Call Trace: [ 105.541028][ T6181] [ 105.544047][ T6181] reg_set_min_max+0x264/0x300 [ 105.549095][ T6181] check_cond_jmp_op+0x159b/0x2910 [ 105.554279][ T6181] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 105.559855][ T6181] ? push_jmp_history+0x1dd/0x6f0 [ 105.564937][ T6181] do_check+0x6751/0xe520 [ 105.569393][ T6181] ? __kasan_kmalloc+0x93/0xb0 [ 105.574201][ T6181] ? do_check_common+0x209/0x24f0 [ 105.579382][ T6181] ? __pfx_do_check+0x10/0x10 [ 105.584108][ T6181] ? init_func_state+0x1ddf/0x2d20 [ 105.589346][ T6181] do_check_common+0x1949/0x24f0 [ 105.594338][ T6181] bpf_check+0x1746a/0x1d2d0 [ 105.599021][ T6181] ? is_bpf_text_address+0x26/0x2b0 [ 105.604281][ T6181] ? kernel_text_address+0xa5/0xe0 [ 105.609498][ T6181] ? __kernel_text_address+0xd/0x40 [ 105.615388][ T6181] ? __lock_acquire+0xab9/0xd20 [ 105.621007][ T6181] ? __mutex_trylock_common+0x153/0x260 [ 105.626854][ T6181] ? __pfx___mutex_trylock_common+0x10/0x10 [ 105.632795][ T6181] ? css_rstat_updated+0x23a/0x4f0 [ 105.638027][ T6181] ? __lock_acquire+0xab9/0xd20 [ 105.642921][ T6181] ? __pfx_bpf_check+0x10/0x10 [ 105.647777][ T6181] ? ktime_get_with_offset+0x8c/0x2a0 [ 105.653203][ T6181] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 105.659534][ T6181] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.664814][ T6181] ? ktime_get_with_offset+0x8c/0x2a0 [ 105.670305][ T6181] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 105.676637][ T6181] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 105.683299][ T6181] ? __asan_memset+0x22/0x50 [ 105.687970][ T6181] ? bpf_obj_name_cpy+0x194/0x1e0 [ 105.693022][ T6181] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 105.699837][ T6181] ? security_bpf_prog_load+0x7f/0x310 [ 105.705364][ T6181] bpf_prog_load+0x1318/0x1930 [ 105.711107][ T6181] ? __pfx_bpf_prog_load+0x10/0x10 [ 105.716363][ T6181] ? bpf_lsm_bpf+0x9/0x20 [ 105.720732][ T6181] ? security_bpf+0x7e/0x300 [ 105.725356][ T6181] __sys_bpf+0x528/0x870 [ 105.730169][ T6181] ? __pfx___sys_bpf+0x10/0x10 [ 105.734970][ T6181] ? rcu_is_watching+0x15/0xb0 [ 105.740397][ T6181] __x64_sys_bpf+0x7c/0x90 [ 105.744854][ T6181] do_syscall_64+0xfa/0x3b0 [ 105.749424][ T6181] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.754670][ T6181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.760854][ T6181] ? clear_bhb_loop+0x60/0xb0 [ 105.765575][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.771569][ T6181] RIP: 0033:0x7fdbe9d8ebe9 [ 105.776980][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.797166][ T6181] RSP: 002b:00007fdbeacd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.805679][ T6181] RAX: ffffffffffffffda RBX: 00007fdbe9fc5fa0 RCX: 00007fdbe9d8ebe9 [ 105.813695][ T6181] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 105.822408][ T6181] RBP: 00007fdbe9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 105.831005][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.839091][ T6181] R13: 00007fdbe9fc6038 R14: 00007fdbe9fc5fa0 R15: 00007fff1e5dc128 [ 105.847142][ T6181] [ 105.850170][ T6181] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.857475][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 105.866603][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.876667][ T6181] Call Trace: [ 105.879981][ T6181] [ 105.882917][ T6181] dump_stack_lvl+0x99/0x250 [ 105.887635][ T6181] ? __asan_memcpy+0x40/0x70 [ 105.892239][ T6181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.897463][ T6181] ? __pfx__printk+0x10/0x10 [ 105.902080][ T6181] vpanic+0x281/0x750 [ 105.906093][ T6181] ? __pfx__printk+0x10/0x10 [ 105.910721][ T6181] ? __pfx_vpanic+0x10/0x10 [ 105.915262][ T6181] ? is_bpf_text_address+0x26/0x2b0 [ 105.920519][ T6181] panic+0xb9/0xc0 [ 105.924264][ T6181] ? __pfx_panic+0x10/0x10 [ 105.928733][ T6181] __warn+0x31b/0x4b0 [ 105.932731][ T6181] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 105.938394][ T6181] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 105.944042][ T6181] report_bug+0x2be/0x4f0 [ 105.948393][ T6181] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 105.954061][ T6181] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 105.959715][ T6181] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 105.965373][ T6181] handle_bug+0x84/0x160 [ 105.969632][ T6181] exc_invalid_op+0x1a/0x50 [ 105.974147][ T6181] asm_exc_invalid_op+0x1a/0x20 [ 105.979011][ T6181] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 105.985273][ T6181] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 0f 32 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 106.004989][ T6181] RSP: 0018:ffffc9000b006f08 EFLAGS: 00010282 [ 106.011069][ T6181] RAX: 685f404f0086e900 RBX: 0000000000000000 RCX: 0000000000080000 [ 106.019152][ T6181] RDX: ffffc9000be8b000 RSI: 00000000000071e9 RDI: 00000000000071ea [ 106.027138][ T6181] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 106.035121][ T6181] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88802944a348 [ 106.043106][ T6181] R13: ffff88802944a368 R14: ffff88802944a380 R15: 0000000000000000 [ 106.051124][ T6181] reg_set_min_max+0x264/0x300 [ 106.055920][ T6181] check_cond_jmp_op+0x159b/0x2910 [ 106.061092][ T6181] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 106.066590][ T6181] ? push_jmp_history+0x1dd/0x6f0 [ 106.071639][ T6181] do_check+0x6751/0xe520 [ 106.076087][ T6181] ? __kasan_kmalloc+0x93/0xb0 [ 106.080866][ T6181] ? do_check_common+0x209/0x24f0 [ 106.085969][ T6181] ? __pfx_do_check+0x10/0x10 [ 106.090658][ T6181] ? init_func_state+0x1ddf/0x2d20 [ 106.095892][ T6181] do_check_common+0x1949/0x24f0 [ 106.100888][ T6181] bpf_check+0x1746a/0x1d2d0 [ 106.105504][ T6181] ? is_bpf_text_address+0x26/0x2b0 [ 106.110745][ T6181] ? kernel_text_address+0xa5/0xe0 [ 106.115889][ T6181] ? __kernel_text_address+0xd/0x40 [ 106.121147][ T6181] ? __lock_acquire+0xab9/0xd20 [ 106.126055][ T6181] ? __mutex_trylock_common+0x153/0x260 [ 106.131632][ T6181] ? __pfx___mutex_trylock_common+0x10/0x10 [ 106.137559][ T6181] ? css_rstat_updated+0x23a/0x4f0 [ 106.142710][ T6181] ? __lock_acquire+0xab9/0xd20 [ 106.147583][ T6181] ? __pfx_bpf_check+0x10/0x10 [ 106.152372][ T6181] ? ktime_get_with_offset+0x8c/0x2a0 [ 106.157778][ T6181] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 106.164040][ T6181] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.169273][ T6181] ? ktime_get_with_offset+0x8c/0x2a0 [ 106.174661][ T6181] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 106.180915][ T6181] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 106.187551][ T6181] ? __asan_memset+0x22/0x50 [ 106.192158][ T6181] ? bpf_obj_name_cpy+0x194/0x1e0 [ 106.197189][ T6181] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 106.202399][ T6181] ? security_bpf_prog_load+0x7f/0x310 [ 106.207883][ T6181] bpf_prog_load+0x1318/0x1930 [ 106.212731][ T6181] ? __pfx_bpf_prog_load+0x10/0x10 [ 106.217890][ T6181] ? bpf_lsm_bpf+0x9/0x20 [ 106.222260][ T6181] ? security_bpf+0x7e/0x300 [ 106.226876][ T6181] __sys_bpf+0x528/0x870 [ 106.231150][ T6181] ? __pfx___sys_bpf+0x10/0x10 [ 106.235971][ T6181] ? rcu_is_watching+0x15/0xb0 [ 106.240770][ T6181] __x64_sys_bpf+0x7c/0x90 [ 106.245211][ T6181] do_syscall_64+0xfa/0x3b0 [ 106.249728][ T6181] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.254949][ T6181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.261041][ T6181] ? clear_bhb_loop+0x60/0xb0 [ 106.265748][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.271661][ T6181] RIP: 0033:0x7fdbe9d8ebe9 [ 106.276086][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.295727][ T6181] RSP: 002b:00007fdbeacd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.304163][ T6181] RAX: ffffffffffffffda RBX: 00007fdbe9fc5fa0 RCX: 00007fdbe9d8ebe9 [ 106.312146][ T6181] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 106.320126][ T6181] RBP: 00007fdbe9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 106.328199][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.336186][ T6181] R13: 00007fdbe9fc6038 R14: 00007fdbe9fc5fa0 R15: 00007fff1e5dc128 [ 106.344409][ T6181] [ 106.347747][ T6181] Kernel Offset: disabled [ 106.352076][ T6181] Rebooting in 86400 seconds..