last executing test programs: 24.760160246s ago: executing program 0 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) 14.597197201s ago: executing program 0 (id=141): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 13.929837315s ago: executing program 0 (id=142): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) openat$urandom(0xffffffffffffff9c, 0x0, 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)) eventfd2(0x80000000, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r5) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x14, r6, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) 9.846636007s ago: executing program 0 (id=144): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 9.34712651s ago: executing program 0 (id=147): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r5, 0x0) connect$unix(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r7, 0x0, 0x0, 0x48040) 8.828608034s ago: executing program 1 (id=149): r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) 8.43595329s ago: executing program 1 (id=150): keyctl$clear(0x3, 0xfffffffffffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 8.340825146s ago: executing program 1 (id=151): socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r4, 0x0, 0x0, 0x1}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1220}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) 4.879496436s ago: executing program 1 (id=152): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 4.37171827s ago: executing program 1 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0xfffffffffffffffe, 0x4) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000927000/0x7000)=nil, 0x2) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r5, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 3.962108027s ago: executing program 0 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002600)={0x0, 0x0, 0xe4}, 0x0, 0x0, &(0x7f00000026c0)="878d6303953135fcf851412e7de488b3896566772ad2e6fa0fcb84e0cbc93ffa9ce35ec53a003ca35cacc6b4e57af82f95a7d2d93aca389f353ff5da9e3419f4cd3231e8ab282d986e4f438923e50a60a1fa57d082aeacb1ce6db9535ad499df2b07ca1a0b577b3ce1b07c22551291d23378c9c0c14aa282081e4f17b99ff8eb934cbd97a6e8647b2fa9513a0d0efaebddda8d0b6490024daa7974fe6b5915fc5647b636c09da42d3c372698b8e86beb5bd9994e3c86b6afa97d2be7e78068cb649dba03c09e5832203cd71ada5e5d3ba2d62123566bcfa1bd090ee25280ff8b66a74af3") r0 = getpid() getpgid(r0) process_vm_writev(r0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/83, 0x53}, {&(0x7f0000000400)=""/4096, 0x1000}, {0x0}], 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 0s ago: executing program 1 (id=155): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46882' (ED25519) to the list of known hosts. syzkaller login: [ 85.749282][ T3312] cgroup: Unknown subsys name 'net' [ 85.991584][ T3312] cgroup: Unknown subsys name 'cpuset' [ 86.015083][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.408012][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.471504][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.533938][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.683166][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.704957][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.688871][ T3318] hsr_slave_0: entered promiscuous mode [ 97.695212][ T3318] hsr_slave_1: entered promiscuous mode [ 97.862516][ T3317] hsr_slave_0: entered promiscuous mode [ 97.867269][ T3317] hsr_slave_1: entered promiscuous mode [ 97.878046][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 97.881647][ T3317] Cannot create hsr debugfs directory [ 98.864440][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.903100][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.934694][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.962601][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.083495][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.109423][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.128503][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.161531][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.016645][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.264409][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.488040][ T3318] veth0_vlan: entered promiscuous mode [ 103.543435][ T3318] veth1_vlan: entered promiscuous mode [ 103.667262][ T3317] veth0_vlan: entered promiscuous mode [ 103.734145][ T3317] veth1_vlan: entered promiscuous mode [ 103.806179][ T3318] veth0_macvtap: entered promiscuous mode [ 103.834265][ T3318] veth1_macvtap: entered promiscuous mode [ 103.873749][ T3317] veth0_macvtap: entered promiscuous mode [ 103.916568][ T3317] veth1_macvtap: entered promiscuous mode [ 104.014661][ T1739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.015472][ T1739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.015636][ T1739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.015787][ T1739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.248230][ T1734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.254178][ T1734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.270052][ T1734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.274954][ T1734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.498980][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.911917][ T3463] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.071551][ T3463] usb 1-1: Using ep0 maxpacket: 16 [ 107.117912][ T3463] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.118787][ T3463] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.119073][ T3463] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.119286][ T3463] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.182790][ T3463] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.183912][ T3463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.184241][ T3463] usb 1-1: Product: syz [ 107.184711][ T3463] usb 1-1: Manufacturer: syz [ 107.184862][ T3463] usb 1-1: SerialNumber: syz [ 108.083519][ T3463] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 108.293252][ T3464] usb 1-1: USB disconnect, device number 2 [ 108.360001][ T3476] usblp0: removed [ 114.432127][ T3238] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.590953][ T3238] usb 1-1: Using ep0 maxpacket: 16 [ 114.607425][ T3238] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 114.607717][ T3238] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 114.607837][ T3238] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 114.607996][ T3238] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 114.608073][ T3238] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 114.608144][ T3238] usb 1-1: config 1 interface 0 has no altsetting 0 [ 114.608230][ T3238] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 114.608494][ T3238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.628933][ T3238] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 114.852560][ T3238] scsi host0: usb-storage 1-1:1.0 [ 115.048475][ T3238] usb 1-1: USB disconnect, device number 3 [ 120.510080][ T3563] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.32' sets config #32769 [ 122.762604][ T3571] Zero length message leads to an empty skb [ 142.943609][ T3664] mmap: syz.0.64 (3664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.995864][ T3664] netlink: 'syz.0.64': attribute type 4 has an invalid length. [ 145.429644][ T3674] ptrace attach of "/syz-executor exec"[3675] was attempted by "/syz-executor exec"[3674] [ 148.576217][ T3689] futex_wake_op: syz.1.72 tries to shift op by -1; fix this program [ 148.591807][ T3689] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.945612][ T3712] binder: 3711:3712 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 154.220028][ T3714] binder: 3713:3714 tried to acquire reference to desc 0, got 1 instead [ 154.227422][ T3714] binder: 3713:3714 got reply transaction with bad transaction stack, transaction 5 has target 3713:0 [ 154.231493][ T3714] binder: 3713:3714 transaction reply to 0:0 failed 6/29201/-71, code 0 size 0-0 line 3150 [ 154.235735][ T3586] binder: release 3713:3714 transaction 5 out, still active [ 154.238485][ T3586] binder: undelivered TRANSACTION_COMPLETE [ 154.240069][ T3586] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.253189][ T3586] binder: send failed reply for transaction 5, target dead [ 155.202860][ T3725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.78'. [ 164.014369][ T3755] fuse: Bad value for 'fd' [ 168.611292][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.781333][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 168.792782][ T10] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 168.797057][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.801699][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 126, changing to 10 [ 168.804606][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34720, setting to 1024 [ 168.806471][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.808632][ T10] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 168.810275][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.825251][ T10] usb 1-1: config 0 descriptor?? [ 168.834157][ T3764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.861522][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input1 [ 169.118486][ T10] usb 1-1: USB disconnect, device number 4 [ 180.881869][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 187.244121][ T3822] syzkaller0: entered promiscuous mode [ 187.244537][ T3822] syzkaller0: entered allmulticast mode [ 188.576706][ T3835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 188.717490][ T40] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.720228][ T40] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.727175][ T40] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.727447][ T40] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.421723][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 189.591020][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 189.612142][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 189.613530][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.617082][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.622050][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.627111][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.629105][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.634482][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.922285][ T10] usb 1-1: usb_control_msg returned -32 [ 189.923718][ T10] usbtmc 1-1:16.0: can't read capabilities [ 194.675648][ T3855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.677242][ T3855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.581774][ T3238] usb 1-1: USB disconnect, device number 5 [ 198.421516][ T3238] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 198.581309][ T3238] usb 1-1: Using ep0 maxpacket: 16 [ 198.592565][ T3238] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.592940][ T3238] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.593153][ T3238] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 198.593288][ T3238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.605105][ T3238] usb 1-1: config 0 descriptor?? [ 199.105365][ T3238] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 199.805981][ T3873] binder: 3872:3873 tried to acquire reference to desc 0, got 1 instead [ 199.822467][ T3873] binder: 3872:3873 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 199.834479][ T3873] binder: 3873 RLIMIT_NICE not set [ 199.838063][ T3873] binder: 3873 RLIMIT_NICE not set [ 199.856134][ T3873] binder: 3872:3873 got reply transaction with bad transaction stack, transaction 11 has target 3872:3873 [ 199.860236][ T3873] binder: 3872:3873 transaction reply to 0:0 failed 12/29201/-71, code 0 size 0-0 line 3150 [ 199.864586][ T3238] binder: release 3872:3873 transaction 11 out, still active [ 199.864943][ T3238] binder: undelivered TRANSACTION_COMPLETE [ 199.865261][ T3238] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.874706][ T3238] binder: release 3872:3873 transaction 11 in, still active [ 199.875132][ T3238] binder: send failed reply for transaction 11, target dead [ 200.125397][ T3394] usb 1-1: USB disconnect, device number 6 [ 203.109671][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 203.134741][ T3394] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.623987][ T3903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.128183][ T3908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.142473][ T3908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.051937][ T3935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'. [ 222.079522][ T3956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 229.810816][ T3972] ================================================================== [ 229.814419][ T3972] BUG: KASAN: invalid-access in __memcpy+0xc/0x54 [ 229.816664][ T3972] Write at addr fcff800086cb5180 by task syz.1.155/3972 [ 229.817149][ T3972] Pointer tag: [fc], memory tag: [fe] [ 229.817230][ T3972] [ 229.818020][ T3972] CPU: 1 UID: 0 PID: 3972 Comm: syz.1.155 Not tainted syzkaller #0 PREEMPT [ 229.818356][ T3972] Hardware name: linux,dummy-virt (DT) [ 229.818648][ T3972] Call trace: [ 229.818953][ T3972] show_stack+0x18/0x24 (C) [ 229.819287][ T3972] dump_stack_lvl+0x78/0x90 [ 229.819402][ T3972] print_report+0x108/0x61c [ 229.819461][ T3972] kasan_report+0x88/0xac [ 229.819510][ T3972] __do_kernel_fault+0x170/0x1c8 [ 229.819563][ T3972] do_bad_area+0x68/0x78 [ 229.819612][ T3972] do_tag_check_fault+0x34/0x44 [ 229.819701][ T3972] do_mem_abort+0x44/0x94 [ 229.819752][ T3972] el1_abort+0x44/0x68 [ 229.819803][ T3972] el1h_64_sync_handler+0x50/0xac [ 229.819853][ T3972] el1h_64_sync+0x6c/0x70 [ 229.820014][ T3972] __memcpy+0xc/0x54 (P) [ 229.820071][ T3972] do_misc_fixups+0x1554/0x1afc [ 229.820125][ T3972] bpf_check+0x1384/0x293c [ 229.820176][ T3972] bpf_prog_load+0x63c/0xd40 [ 229.820224][ T3972] __sys_bpf+0x2e0/0x1a88 [ 229.820271][ T3972] __arm64_sys_bpf+0x24/0x34 [ 229.820317][ T3972] invoke_syscall+0x48/0x110 [ 229.820470][ T3972] el0_svc_common.constprop.0+0x40/0xe0 [ 229.820587][ T3972] do_el0_svc+0x1c/0x28 [ 229.820641][ T3972] el0_svc+0x34/0x128 [ 229.820684][ T3972] el0t_64_sync_handler+0xa0/0xe4 [ 229.820727][ T3972] el0t_64_sync+0x1a4/0x1a8 [ 229.820969][ T3972] [ 229.821236][ T3972] The buggy address belongs to a 1-page vmalloc region starting at 0xfcff800086cb5000 allocated at bpf_check+0x8c/0x293c [ 229.822660][ T3972] The buggy address belongs to the physical page: [ 229.823042][ T3972] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x48b81 [ 229.823398][ T3972] flags: 0x1ffcc0000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x3) [ 229.824364][ T3972] raw: 01ffcc0000000000 0000000000000000 dead000000000122 0000000000000000 [ 229.824434][ T3972] raw: ffffffffffffffff 0000000000000000 00000001ffffffff 0000000000000000 [ 229.824562][ T3972] page dumped because: kasan: bad access detected [ 229.824608][ T3972] [ 229.824640][ T3972] Memory state around the buggy address: [ 229.825104][ T3972] Unable to handle kernel paging request at virtual address ffff800086cb4f00 [ 229.825248][ T3972] Mem abort info: [ 229.825286][ T3972] ESR = 0x0000000096000007 [ 229.825367][ T3972] EC = 0x25: DABT (current EL), IL = 32 bits [ 229.825430][ T3972] SET = 0, FnV = 0 [ 229.825479][ T3972] EA = 0, S1PTW = 0 [ 229.825535][ T3972] FSC = 0x07: level 3 translation fault [ 229.825601][ T3972] Data abort info: [ 229.825644][ T3972] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 229.825694][ T3972] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 229.825750][ T3972] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 229.825891][ T3972] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042a58000 [ 229.825969][ T3972] [ffff800086cb4f00] pgd=1000000042fcc003, p4d=1000000042fcd003, pud=1000000042fce003, pmd=1000000048812403, pte=0000000000000000 [ 229.827492][ T3972] Internal error: Oops: 0000000096000007 [#1] SMP [ 229.847073][ T3972] Modules linked in: [ 229.848128][ T3972] CPU: 1 UID: 0 PID: 3972 Comm: syz.1.155 Not tainted syzkaller #0 PREEMPT [ 229.848864][ T3972] Hardware name: linux,dummy-virt (DT) [ 229.849479][ T3972] pstate: 624020c9 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 229.850004][ T3972] pc : kasan_metadata_fetch_row+0xc/0x28 [ 229.851304][ T3972] lr : print_report+0x29c/0x61c [ 229.851638][ T3972] sp : ffff800085eb35a0 [ 229.851934][ T3972] x29: ffff800085eb35a0 x28: fcf000000b270000 x27: f7ff800086cb3060 [ 229.852654][ T3972] x26: 0000000000000060 x25: ffff800082517e30 x24: ffff800082517e38 [ 229.853222][ T3972] x23: ffff800086cb5180 x22: ffff8000824e8710 x21: ffff800086cb5000 [ 229.853776][ T3972] x20: 00000000fffffffe x19: ffff800086cb4f00 x18: 0000000000000010 [ 229.854319][ T3972] x17: 0000000000000000 x16: 0000000000006400 x15: ffff800085eb3420 [ 229.854840][ T3972] x14: ffff800085eb361c x13: ffff800085eb3609 x12: ffff800082adf268 [ 229.855381][ T3972] x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8 [ 229.855997][ T3972] x8 : fcf000000b270000 x7 : 0000000000000010 x6 : ffff800081ce18c0 [ 229.856600][ T3972] x5 : 0000000000000030 x4 : 0000000000000002 x3 : ffff800086cb5000 [ 229.857250][ T3972] x2 : ffff800086cb4f00 x1 : ffff800086cb4f10 x0 : ffff800085eb35f8 [ 229.858007][ T3972] Call trace: [ 229.858563][ T3972] kasan_metadata_fetch_row+0xc/0x28 (P) [ 229.859147][ T3972] kasan_report+0x88/0xac [ 229.859507][ T3972] __do_kernel_fault+0x170/0x1c8 [ 229.859874][ T3972] do_bad_area+0x68/0x78 [ 229.860212][ T3972] do_tag_check_fault+0x34/0x44 [ 229.860828][ T3972] do_mem_abort+0x44/0x94 [ 229.861198][ T3972] el1_abort+0x44/0x68 [ 229.861499][ T3972] el1h_64_sync_handler+0x50/0xac [ 229.861849][ T3972] el1h_64_sync+0x6c/0x70 [ 229.862331][ T3972] __memcpy+0xc/0x54 (P) [ 229.862693][ T3972] do_misc_fixups+0x1554/0x1afc [ 229.863045][ T3972] bpf_check+0x1384/0x293c [ 229.863366][ T3972] bpf_prog_load+0x63c/0xd40 [ 229.863687][ T3972] __sys_bpf+0x2e0/0x1a88 [ 229.864008][ T3972] __arm64_sys_bpf+0x24/0x34 [ 229.864378][ T3972] invoke_syscall+0x48/0x110 [ 229.864720][ T3972] el0_svc_common.constprop.0+0x40/0xe0 [ 229.865114][ T3972] do_el0_svc+0x1c/0x28 [ 229.865433][ T3972] el0_svc+0x34/0x128 [ 229.865741][ T3972] el0t_64_sync_handler+0xa0/0xe4 [ 229.866102][ T3972] el0t_64_sync+0x1a4/0x1a8 [ 229.866822][ T3972] Code: d65f03c0 91040023 aa0103e2 91004021 (d9600042) [ 229.867905][ T3972] ---[ end trace 0000000000000000 ]--- [ 229.868893][ T3972] Kernel panic - not syncing: Oops: Fatal exception [ 229.869593][ T3972] SMP: stopping secondary CPUs [ 229.870806][ T3972] Kernel Offset: disabled [ 229.871542][ T3972] CPU features: 0x000000,00068cc1,7ef8cf80,957fff3f [ 229.873009][ T3972] Memory Limit: none [ 229.874647][ T3972] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:24:13 Registers: info registers vcpu 0 CPU#0 PC=ffff80008033fba0 X00=ffff800082deae68 X01=ffff800082dec000 X02=0000000000000000 X03=ffff800082deaf70 X04=ffff800082dec000 X05=ffff800082deaf18 X06=ffff800082deaf30 X07=ffff800082debca0 X08=ffff800082deaeb8 X09=fbf00000032ee500 X10=0000000000000001 X11=0000000000000001 X12=0000000000000019 X13=0000000000000001 X14=0000000000000387 X15=ffff800081bd4430 X16=ffff800082de8000 X17=fff07ffffcef4000 X18=0000000000000000 X19=ffff800080171398 X20=ffff800082deaf70 X21=0000000000000000 X22=0000000000000027 X23=00000000008bf1b0 X24=fff000007aabf1b0 X25=fff000007a200000 X26=ffff800082a01000 X27=ffff800082d7d948 X28=00000000ec38bf1b X29=ffff800082deaea0 X30=80df80008033fbf0 SP=ffff800082deb150 PSTATE=60402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffc871f000:3233353837393533 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffff0000000000ff:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ff00000f00000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffffff0000ff Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000fffff00f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000cccccc00 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaaeb6eac90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaaeb6e7f70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffc871e9e0:0000ffffc871e9e0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffc871e9b0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000809303e8 X00=0000000000000002 X01=0000000000000018 X02=ffff800082e15018 X03=ffff800082badf28 X04=f0f00000030e5880 X05=0000000000000037 X06=0000000000000029 X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082badf58 X10=0000000000000001 X11=ffff800085eb30c0 X12=ffff800082adf268 X13=ffff800085eb2e9d X14=ffff800085eb2ea8 X15=ffff800085eb2d10 X16=0000000000006400 X17=0000000000000000 X18=00000000ffffffff X19=f4f0000003043014 X20=ffff80008093058c X21=f0f00000030e5880 X22=f4f0000003043031 X23=0000000000000000 X24=0000000000000000 X25=00000000000000c0 X26=ffffffffffffffff X27=ffff800082751000 X28=ffffffffffffffff X29=ffff800085eb2fc0 X30=ffff8000809305b4 SP=ffff800085eb2fc0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:e9b5dba5b5c0fbcf:71374491428a2f98 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ab1c5ed5923f82a4:59f111f13956c25b Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:550c7dc3243185be:12835b01d807aa98 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c19bf1749bdc06a7:80deb1fe72be5d74 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:240ca1cc0fc19dc6:efbe4786e49b69c1 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:76f988da5cb0a9dc:4a7484aa2de92c6f Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bf597fc7b00327c8:a831c66d983e5152 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:1429296706ca6351:d5a79147c6e00bf3 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:53380d134d2c6dfc:2e1b213827b70a85 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:92722c8581c2c92e:766a0abb650a7354 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c76c51a3c24b8b70:a81a664ba2bfe8a1 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:106aa070f40e3585:d6990624d192e819 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:34b0bcb52748774c:1e376c0819a4c116 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:682e6ff35b9cca4f:4ed8aa4a391c0cb3 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8cc7020884c87814:78a5636f748f82ee Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c67178f2bef9a3f7:a4506ceb90befffa Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3f1e5e78c0f818b1:54521ff8fdef1825 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b759b2014d24d5ca:d02c24849eac5e28 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c3da4b11ff790e63:1c450fa72530b4f7 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:356645013caac898:0c90352d4ea690ef Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:374e72746c56c455:13a5fcb07ba31553 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:5b6168fc6f10a2e6:b625c654484b1fdb Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:50a14d1984418677:94ea731699c037e5 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fbd7bdf3fba46c8f:b0e0a218df6590e9 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:91fe7d3a2fe7d0e3:583e4e2b11992eec Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ff809be34f8cc93b:1b205dc8f73ccd5c Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:11875b9d6a846c8d:b67511095e0ff9b3 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000