last executing test programs: 203.591071ms ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0xffffff81, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc0c0) 0s ago: executing program 3 (id=6): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 85.543960][ T5851] cgroup: Unknown subsys name 'net' [ 85.652146][ T5851] cgroup: Unknown subsys name 'cpuset' [ 85.661406][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.579105][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.251669][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.260070][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.267874][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.278802][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.278848][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.287794][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.301477][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.310201][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.310270][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.328865][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.338634][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.352042][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.360400][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.372966][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.376978][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.380608][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.389030][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.396147][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.409002][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.423200][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.428982][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.437887][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.446202][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.455548][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.469698][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.139604][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.194867][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 92.212358][ T982] cfg80211: failed to load regulatory.db [ 92.300504][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.393854][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 92.536002][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.543594][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.551593][ T5865] bridge_slave_0: entered allmulticast mode [ 92.559050][ T5865] bridge_slave_0: entered promiscuous mode [ 92.581446][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.588695][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.595943][ T5862] bridge_slave_0: entered allmulticast mode [ 92.603418][ T5862] bridge_slave_0: entered promiscuous mode [ 92.611648][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 92.629597][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.636792][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.644687][ T5865] bridge_slave_1: entered allmulticast mode [ 92.652317][ T5865] bridge_slave_1: entered promiscuous mode [ 92.693388][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.700776][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.708024][ T5862] bridge_slave_1: entered allmulticast mode [ 92.716375][ T5862] bridge_slave_1: entered promiscuous mode [ 92.764254][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.831379][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.872737][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.925625][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.935360][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.943141][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.950432][ T5863] bridge_slave_0: entered allmulticast mode [ 92.957548][ T5863] bridge_slave_0: entered promiscuous mode [ 93.010256][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.017476][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.024810][ T5863] bridge_slave_1: entered allmulticast mode [ 93.032893][ T5863] bridge_slave_1: entered promiscuous mode [ 93.046852][ T5865] team0: Port device team_slave_0 added [ 93.107556][ T5865] team0: Port device team_slave_1 added [ 93.131337][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.138635][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.146403][ T5864] bridge_slave_0: entered allmulticast mode [ 93.155145][ T5864] bridge_slave_0: entered promiscuous mode [ 93.164168][ T5862] team0: Port device team_slave_0 added [ 93.222446][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.230137][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.257020][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.271830][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.279119][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.286315][ T5864] bridge_slave_1: entered allmulticast mode [ 93.295316][ T5864] bridge_slave_1: entered promiscuous mode [ 93.319307][ T5862] team0: Port device team_slave_1 added [ 93.327825][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.338834][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.346029][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.353948][ T5867] bridge_slave_0: entered allmulticast mode [ 93.363422][ T5867] bridge_slave_0: entered promiscuous mode [ 93.372161][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.379520][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.405709][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.447317][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.456762][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.464386][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.472718][ T5867] bridge_slave_1: entered allmulticast mode [ 93.480186][ T5867] bridge_slave_1: entered promiscuous mode [ 93.489408][ T5879] Bluetooth: hci4: command tx timeout [ 93.495173][ T5879] Bluetooth: hci0: command tx timeout [ 93.500457][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.501051][ T5875] Bluetooth: hci1: command tx timeout [ 93.509818][ T5868] Bluetooth: hci2: command tx timeout [ 93.515936][ T5185] Bluetooth: hci3: command tx timeout [ 93.524877][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.636596][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.643852][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.670817][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.684971][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.692053][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.718779][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.741674][ T5863] team0: Port device team_slave_0 added [ 93.753861][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.765002][ T5864] team0: Port device team_slave_0 added [ 93.773920][ T5863] team0: Port device team_slave_1 added [ 93.847664][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.875013][ T5864] team0: Port device team_slave_1 added [ 93.912907][ T5862] hsr_slave_0: entered promiscuous mode [ 93.921126][ T5862] hsr_slave_1: entered promiscuous mode [ 93.982294][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.989421][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.016530][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.034435][ T5865] hsr_slave_0: entered promiscuous mode [ 94.041430][ T5865] hsr_slave_1: entered promiscuous mode [ 94.047648][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 94.053604][ T5865] Cannot create hsr debugfs directory [ 94.081840][ T5867] team0: Port device team_slave_0 added [ 94.088669][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.095668][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.122917][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.145709][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.153173][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.179804][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.210918][ T5867] team0: Port device team_slave_1 added [ 94.217533][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.224670][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.251278][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.400523][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.407631][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.434200][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.480294][ T5863] hsr_slave_0: entered promiscuous mode [ 94.486754][ T5863] hsr_slave_1: entered promiscuous mode [ 94.493446][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 94.499404][ T5863] Cannot create hsr debugfs directory [ 94.518163][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.525527][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.552978][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.615956][ T5864] hsr_slave_0: entered promiscuous mode [ 94.622912][ T5864] hsr_slave_1: entered promiscuous mode [ 94.629794][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 94.635558][ T5864] Cannot create hsr debugfs directory [ 94.771816][ T5867] hsr_slave_0: entered promiscuous mode [ 94.778801][ T5867] hsr_slave_1: entered promiscuous mode [ 94.785106][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 94.791090][ T5867] Cannot create hsr debugfs directory [ 95.207985][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.235721][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.282457][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.293865][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.347856][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.367439][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.381832][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.406093][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.495185][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.505983][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.553340][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.567415][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.574772][ T5185] Bluetooth: hci3: command tx timeout [ 95.574799][ T5868] Bluetooth: hci1: command tx timeout [ 95.580943][ T5875] Bluetooth: hci0: command tx timeout [ 95.581001][ T5875] Bluetooth: hci4: command tx timeout [ 95.581140][ T5875] Bluetooth: hci2: command tx timeout [ 95.730924][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.742361][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.752713][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.772131][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.902022][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.909193][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.920428][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.931792][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.948330][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.964698][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.026011][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.044716][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.082747][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.090188][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.102136][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.109330][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.146975][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.154293][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.167088][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.174401][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.252093][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.324559][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.376598][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.383909][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.414777][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.421999][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.435856][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.627920][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.657519][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.698156][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.705417][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.767845][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.775372][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.826889][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.910912][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.918075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.957438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.964686][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.137758][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.160709][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.243742][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.452969][ T5862] veth0_vlan: entered promiscuous mode [ 97.509612][ T5862] veth1_vlan: entered promiscuous mode [ 97.613118][ T5863] veth0_vlan: entered promiscuous mode [ 97.650632][ T5185] Bluetooth: hci2: command tx timeout [ 97.656106][ T5185] Bluetooth: hci4: command tx timeout [ 97.664290][ T5879] Bluetooth: hci0: command tx timeout [ 97.669961][ T5875] Bluetooth: hci1: command tx timeout [ 97.675711][ T5868] Bluetooth: hci3: command tx timeout [ 97.711583][ T5862] veth0_macvtap: entered promiscuous mode [ 97.735356][ T5863] veth1_vlan: entered promiscuous mode [ 97.753155][ T5862] veth1_macvtap: entered promiscuous mode [ 97.835230][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.860960][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.873468][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.889253][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.931254][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.941005][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.962792][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.972014][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.995903][ T5863] veth0_macvtap: entered promiscuous mode [ 98.036553][ T5863] veth1_macvtap: entered promiscuous mode [ 98.071512][ T5865] veth0_vlan: entered promiscuous mode [ 98.147173][ T5865] veth1_vlan: entered promiscuous mode [ 98.165034][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.193694][ T5867] veth0_vlan: entered promiscuous mode [ 98.228189][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.240340][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.252392][ T5864] veth0_vlan: entered promiscuous mode [ 98.260778][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.277527][ T5867] veth1_vlan: entered promiscuous mode [ 98.322859][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.332400][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.357002][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.366311][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.385864][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.399717][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.424522][ T5864] veth1_vlan: entered promiscuous mode [ 98.433953][ T5865] veth0_macvtap: entered promiscuous mode [ 98.461082][ T5865] veth1_macvtap: entered promiscuous mode [ 98.509915][ T5867] veth0_macvtap: entered promiscuous mode [ 98.548212][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.567061][ T5867] veth1_macvtap: entered promiscuous mode [ 98.592541][ T5864] veth0_macvtap: entered promiscuous mode [ 98.648633][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.658187][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.687588][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.710858][ T5864] veth1_macvtap: entered promiscuous mode [ 98.723447][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.735933][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.782787][ T1114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.805558][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.837307][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.849737][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.869486][ T1114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.904218][ T1114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.931153][ T5987] ------------[ cut here ]------------ [ 98.936670][ T5987] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 98.964026][ T5987] WARNING: CPU: 1 PID: 5987 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 98.974665][ T5987] Modules linked in: [ 98.978840][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 98.987984][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.996304][ T1114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.998106][ T5987] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 99.012419][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.013647][ T5987] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 0f 32 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 99.042918][ T5987] RSP: 0018:ffffc9000456ef08 EFLAGS: 00010282 [ 99.049405][ T5987] RAX: 762c418d80eb4500 RBX: fffffffe00000030 RCX: 0000000000080000 [ 99.057657][ T5987] RDX: ffffc9000c2eb000 RSI: 000000000001888b RDI: 000000000001888c [ 99.065769][ T5987] RBP: 0000000000000030 R08: 0000000000000003 R09: 0000000000000004 [ 99.073913][ T5987] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88814e45e168 [ 99.082101][ T5987] R13: ffff88814e45e188 R14: ffff88814e45e1a0 R15: 0000000000000000 [ 99.090368][ T5987] FS: 00007fe7c438d6c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 99.099548][ T5987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.106181][ T5987] CR2: 0000200000004000 CR3: 000000007e32c000 CR4: 00000000003526f0 [ 99.114430][ T5987] Call Trace: [ 99.117755][ T5987] [ 99.120784][ T5987] reg_set_min_max+0x264/0x300 [ 99.125643][ T5987] check_cond_jmp_op+0x1625/0x2910 [ 99.131035][ T5987] ? reg_bounds_sanity_check+0x80d/0xc20 [ 99.136750][ T5987] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 99.142461][ T5987] ? __check_reg_arg+0x21f/0x490 [ 99.147552][ T5987] ? do_check+0x2796/0xe520 [ 99.152364][ T5987] do_check+0x6751/0xe520 [ 99.156782][ T5987] ? __pfx_do_check+0x10/0x10 [ 99.161939][ T5987] ? init_func_state+0x1ddf/0x2d20 [ 99.167114][ T5987] do_check_common+0x1949/0x24f0 [ 99.172517][ T5987] bpf_check+0x1746a/0x1d2d0 [ 99.177155][ T5987] ? is_bpf_text_address+0x26/0x2b0 [ 99.182490][ T5987] ? kernel_text_address+0xa5/0xe0 [ 99.187646][ T5987] ? __kernel_text_address+0xd/0x40 [ 99.193028][ T5987] ? __lock_acquire+0xab9/0xd20 [ 99.198016][ T5987] ? __mutex_trylock_common+0x153/0x260 [ 99.203700][ T5987] ? __pfx___mutex_trylock_common+0x10/0x10 [ 99.209738][ T5987] ? css_rstat_updated+0x23a/0x4f0 [ 99.215017][ T5987] ? __lock_acquire+0xab9/0xd20 [ 99.219991][ T5987] ? __pfx_bpf_check+0x10/0x10 [ 99.224787][ T5987] ? ktime_get_with_offset+0x8c/0x2a0 [ 99.230294][ T5987] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 99.236656][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.242031][ T5987] ? ktime_get_with_offset+0x8c/0x2a0 [ 99.247429][ T5987] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 99.254191][ T5987] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 99.261118][ T5987] ? __asan_memset+0x22/0x50 [ 99.265745][ T5987] ? bpf_obj_name_cpy+0x194/0x1e0 [ 99.270851][ T5987] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 99.276079][ T5987] ? security_bpf_prog_load+0x7f/0x310 [ 99.281699][ T5987] bpf_prog_load+0x1318/0x1930 [ 99.286496][ T5987] ? __pfx_bpf_prog_load+0x10/0x10 [ 99.291768][ T5987] ? bpf_lsm_bpf+0x9/0x20 [ 99.296167][ T5987] ? security_bpf+0x7e/0x300 [ 99.300948][ T5987] __sys_bpf+0x528/0x870 [ 99.305320][ T5987] ? __pfx___sys_bpf+0x10/0x10 [ 99.310285][ T5987] ? rcu_is_watching+0x15/0xb0 [ 99.315105][ T5987] __x64_sys_bpf+0x7c/0x90 [ 99.319607][ T5987] do_syscall_64+0xfa/0x3b0 [ 99.324156][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.329889][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.336008][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 99.340849][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.347434][ T5987] RIP: 0033:0x7fe7c358ebe9 [ 99.351994][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.372340][ T5987] RSP: 002b:00007fe7c438d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.381371][ T5987] RAX: ffffffffffffffda RBX: 00007fe7c37c5fa0 RCX: 00007fe7c358ebe9 [ 99.389542][ T5987] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 99.397559][ T5987] RBP: 00007fe7c3611e19 R08: 0000000000000000 R09: 0000000000000000 [ 99.405649][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.413781][ T5987] R13: 00007fe7c37c6038 R14: 00007fe7c37c5fa0 R15: 00007ffc2fbea0e8 [ 99.422039][ T5987] [ 99.425113][ T5987] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.432409][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 99.441480][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.451647][ T5987] Call Trace: [ 99.454953][ T5987] [ 99.458064][ T5987] dump_stack_lvl+0x99/0x250 [ 99.462657][ T5987] ? __asan_memcpy+0x40/0x70 [ 99.467334][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.472542][ T5987] ? __pfx__printk+0x10/0x10 [ 99.477142][ T5987] vpanic+0x281/0x750 [ 99.481144][ T5987] ? __pfx__printk+0x10/0x10 [ 99.485916][ T5987] ? __pfx_vpanic+0x10/0x10 [ 99.490510][ T5987] ? is_bpf_text_address+0x26/0x2b0 [ 99.495751][ T5987] panic+0xb9/0xc0 [ 99.499496][ T5987] ? __pfx_panic+0x10/0x10 [ 99.503948][ T5987] __warn+0x31b/0x4b0 [ 99.507937][ T5987] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 99.513590][ T5987] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 99.519231][ T5987] report_bug+0x2be/0x4f0 [ 99.523657][ T5987] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 99.529298][ T5987] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 99.535059][ T5987] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 99.540700][ T5987] handle_bug+0x84/0x160 [ 99.545644][ T5987] exc_invalid_op+0x1a/0x50 [ 99.550165][ T5987] asm_exc_invalid_op+0x1a/0x20 [ 99.555014][ T5987] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 99.561264][ T5987] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 0f 32 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 99.581053][ T5987] RSP: 0018:ffffc9000456ef08 EFLAGS: 00010282 [ 99.587203][ T5987] RAX: 762c418d80eb4500 RBX: fffffffe00000030 RCX: 0000000000080000 [ 99.595197][ T5987] RDX: ffffc9000c2eb000 RSI: 000000000001888b RDI: 000000000001888c [ 99.603192][ T5987] RBP: 0000000000000030 R08: 0000000000000003 R09: 0000000000000004 [ 99.611192][ T5987] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88814e45e168 [ 99.619172][ T5987] R13: ffff88814e45e188 R14: ffff88814e45e1a0 R15: 0000000000000000 [ 99.627266][ T5987] reg_set_min_max+0x264/0x300 [ 99.632036][ T5987] check_cond_jmp_op+0x1625/0x2910 [ 99.637204][ T5987] ? reg_bounds_sanity_check+0x80d/0xc20 [ 99.642885][ T5987] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 99.648356][ T5987] ? __check_reg_arg+0x21f/0x490 [ 99.653476][ T5987] ? do_check+0x2796/0xe520 [ 99.657986][ T5987] do_check+0x6751/0xe520 [ 99.662420][ T5987] ? __pfx_do_check+0x10/0x10 [ 99.667216][ T5987] ? init_func_state+0x1ddf/0x2d20 [ 99.672432][ T5987] do_check_common+0x1949/0x24f0 [ 99.677397][ T5987] bpf_check+0x1746a/0x1d2d0 [ 99.682002][ T5987] ? is_bpf_text_address+0x26/0x2b0 [ 99.687223][ T5987] ? kernel_text_address+0xa5/0xe0 [ 99.692430][ T5987] ? __kernel_text_address+0xd/0x40 [ 99.697659][ T5987] ? __lock_acquire+0xab9/0xd20 [ 99.702524][ T5987] ? __mutex_trylock_common+0x153/0x260 [ 99.708164][ T5987] ? __pfx___mutex_trylock_common+0x10/0x10 [ 99.714158][ T5987] ? css_rstat_updated+0x23a/0x4f0 [ 99.719281][ T5987] ? __lock_acquire+0xab9/0xd20 [ 99.724186][ T5987] ? __pfx_bpf_check+0x10/0x10 [ 99.728955][ T5987] ? ktime_get_with_offset+0x8c/0x2a0 [ 99.734436][ T5987] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 99.740772][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.746160][ T5987] ? ktime_get_with_offset+0x8c/0x2a0 [ 99.751721][ T5987] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 99.758143][ T5987] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 99.764863][ T5987] ? __asan_memset+0x22/0x50 [ 99.769495][ T5987] ? bpf_obj_name_cpy+0x194/0x1e0 [ 99.774717][ T5987] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 99.779922][ T5987] ? security_bpf_prog_load+0x7f/0x310 [ 99.785402][ T5987] bpf_prog_load+0x1318/0x1930 [ 99.790185][ T5987] ? __pfx_bpf_prog_load+0x10/0x10 [ 99.795335][ T5987] ? bpf_lsm_bpf+0x9/0x20 [ 99.799936][ T5987] ? security_bpf+0x7e/0x300 [ 99.804533][ T5987] __sys_bpf+0x528/0x870 [ 99.808884][ T5987] ? __pfx___sys_bpf+0x10/0x10 [ 99.813670][ T5987] ? rcu_is_watching+0x15/0xb0 [ 99.818884][ T5987] __x64_sys_bpf+0x7c/0x90 [ 99.823302][ T5987] do_syscall_64+0xfa/0x3b0 [ 99.827813][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.833021][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.839174][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 99.843853][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.849742][ T5987] RIP: 0033:0x7fe7c358ebe9 [ 99.854292][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.873995][ T5987] RSP: 002b:00007fe7c438d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.882592][ T5987] RAX: ffffffffffffffda RBX: 00007fe7c37c5fa0 RCX: 00007fe7c358ebe9 [ 99.890659][ T5987] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 99.898636][ T5987] RBP: 00007fe7c3611e19 R08: 0000000000000000 R09: 0000000000000000 [ 99.906610][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.914578][ T5987] R13: 00007fe7c37c6038 R14: 00007fe7c37c5fa0 R15: 00007ffc2fbea0e8 [ 99.922563][ T5987] [ 99.925947][ T5987] Kernel Offset: disabled [ 99.930379][ T5987] Rebooting in 86400 seconds..