last executing test programs: 1.669973757s ago: executing program 1 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.474298816s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 1.349924199s ago: executing program 2 (id=114): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ab}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 1.266117444s ago: executing program 0 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 1.265596756s ago: executing program 1 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c0000800800034000000002"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.169913271s ago: executing program 2 (id=118): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}]}, 0x18}, 0x1, 0x7}, 0x0) 1.136434753s ago: executing program 4 (id=119): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000810030000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.06648075s ago: executing program 0 (id=120): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 1.040272612s ago: executing program 1 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.031703037s ago: executing program 3 (id=122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 962.776203ms ago: executing program 0 (id=123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001800000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) 881.91025ms ago: executing program 4 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40000) 880.728397ms ago: executing program 2 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 816.955759ms ago: executing program 1 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x27, 0x107, 0xfffffffd, 0x0, {0x9, 0x7c}}, 0x14}}, 0xc000) 809.686806ms ago: executing program 3 (id=127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b0d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={0x0, r0}, 0x18) 706.584413ms ago: executing program 0 (id=128): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 706.200504ms ago: executing program 4 (id=129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000e8008500000083000000bf0900000000000055090100000000009500000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000030000008500000085000000b70000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 633.590878ms ago: executing program 3 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r0}, 0x18) 627.312078ms ago: executing program 2 (id=131): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x10, 0x0, 0x7, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 566.414567ms ago: executing program 1 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x8000) 522.87666ms ago: executing program 4 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000cc0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 462.718448ms ago: executing program 0 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x1, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x4, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x8, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0xffffc848, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0xffff, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x1ff, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0xc, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0x3845, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000201}, {0x4, 0x2, 0x1, 0xa, 0x1fb, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 379.181656ms ago: executing program 3 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) close(r0) 374.514399ms ago: executing program 2 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 283.441627ms ago: executing program 4 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 216.181378ms ago: executing program 3 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 143.009616ms ago: executing program 0 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 142.359966ms ago: executing program 2 (id=140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x40}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 100.383169ms ago: executing program 4 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 0s ago: executing program 3 (id=142): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 84.836102][ T5819] cgroup: Unknown subsys name 'net' [ 84.971230][ T5819] cgroup: Unknown subsys name 'cpuset' [ 84.981063][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.730619][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.018689][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.026650][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.037538][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.045208][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.054733][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.063125][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.070991][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.079314][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.087696][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.096208][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.105347][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.114305][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.122000][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.130013][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.135644][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.140277][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.153222][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.161283][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.172040][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.180002][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.215032][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.225073][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.233072][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.243472][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.253514][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.954959][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.085985][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 92.162312][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.225706][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 92.264148][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 92.430097][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.438416][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.445800][ T5835] bridge_slave_0: entered allmulticast mode [ 92.453868][ T5835] bridge_slave_0: entered promiscuous mode [ 92.502171][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.510625][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.517901][ T5835] bridge_slave_1: entered allmulticast mode [ 92.525173][ T5835] bridge_slave_1: entered promiscuous mode [ 92.545440][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.552740][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.560040][ T5829] bridge_slave_0: entered allmulticast mode [ 92.567567][ T5829] bridge_slave_0: entered promiscuous mode [ 92.619084][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.626356][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.633732][ T5829] bridge_slave_1: entered allmulticast mode [ 92.641707][ T5829] bridge_slave_1: entered promiscuous mode [ 92.678153][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.685327][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.692942][ T5836] bridge_slave_0: entered allmulticast mode [ 92.700209][ T5836] bridge_slave_0: entered promiscuous mode [ 92.709206][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.716371][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.724322][ T5836] bridge_slave_1: entered allmulticast mode [ 92.731957][ T5836] bridge_slave_1: entered promiscuous mode [ 92.764396][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.771917][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.779503][ T5845] bridge_slave_0: entered allmulticast mode [ 92.786825][ T5845] bridge_slave_0: entered promiscuous mode [ 92.799390][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.847724][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.854879][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.862584][ T5845] bridge_slave_1: entered allmulticast mode [ 92.870020][ T5845] bridge_slave_1: entered promiscuous mode [ 92.880897][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.905557][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.914994][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.922442][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.929760][ T5830] bridge_slave_0: entered allmulticast mode [ 92.937110][ T5830] bridge_slave_0: entered promiscuous mode [ 92.972208][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.983737][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.993416][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.001314][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.009495][ T5830] bridge_slave_1: entered allmulticast mode [ 93.016763][ T5830] bridge_slave_1: entered promiscuous mode [ 93.051961][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.096716][ T5835] team0: Port device team_slave_0 added [ 93.107025][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.156272][ T5835] team0: Port device team_slave_1 added [ 93.164637][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.193170][ T5829] team0: Port device team_slave_0 added [ 93.201744][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.245739][ T5836] team0: Port device team_slave_0 added [ 93.253768][ T5829] team0: Port device team_slave_1 added [ 93.263416][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.273341][ T53] Bluetooth: hci2: command tx timeout [ 93.279320][ T5151] Bluetooth: hci3: command tx timeout [ 93.279327][ T5844] Bluetooth: hci0: command tx timeout [ 93.290507][ T53] Bluetooth: hci1: command tx timeout [ 93.317802][ T5836] team0: Port device team_slave_1 added [ 93.347918][ T53] Bluetooth: hci4: command tx timeout [ 93.356165][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.363276][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.390166][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.406060][ T5845] team0: Port device team_slave_0 added [ 93.454657][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.462411][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.488579][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.501680][ T5845] team0: Port device team_slave_1 added [ 93.520292][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.527612][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.553934][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.568265][ T5830] team0: Port device team_slave_0 added [ 93.593611][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.600835][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.626855][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.638783][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.645768][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.672644][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.686120][ T5830] team0: Port device team_slave_1 added [ 93.706879][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.714287][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.740756][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.772817][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.780098][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.806142][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.851776][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.859043][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.885646][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.917033][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.924228][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.951074][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.004798][ T5835] hsr_slave_0: entered promiscuous mode [ 94.011772][ T5835] hsr_slave_1: entered promiscuous mode [ 94.019646][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.026610][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.053368][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.104549][ T5829] hsr_slave_0: entered promiscuous mode [ 94.111284][ T5829] hsr_slave_1: entered promiscuous mode [ 94.117865][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 94.123841][ T5829] Cannot create hsr debugfs directory [ 94.147743][ T5836] hsr_slave_0: entered promiscuous mode [ 94.154331][ T5836] hsr_slave_1: entered promiscuous mode [ 94.161205][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 94.166980][ T5836] Cannot create hsr debugfs directory [ 94.236180][ T5845] hsr_slave_0: entered promiscuous mode [ 94.243005][ T5845] hsr_slave_1: entered promiscuous mode [ 94.249784][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 94.255537][ T5845] Cannot create hsr debugfs directory [ 94.352374][ T5830] hsr_slave_0: entered promiscuous mode [ 94.359223][ T5830] hsr_slave_1: entered promiscuous mode [ 94.365396][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 94.371278][ T5830] Cannot create hsr debugfs directory [ 94.914482][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.932067][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.959660][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.971800][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.039312][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.069608][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.081372][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.097733][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.174845][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.188392][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.204514][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.219786][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.329109][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.348363][ T5151] Bluetooth: hci3: command tx timeout [ 95.348387][ T5844] Bluetooth: hci2: command tx timeout [ 95.354072][ T5837] Bluetooth: hci0: command tx timeout [ 95.365717][ T53] Bluetooth: hci1: command tx timeout [ 95.374161][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.393355][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.422070][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.429599][ T53] Bluetooth: hci4: command tx timeout [ 95.506144][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.519650][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.531462][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.552938][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.564929][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.621234][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.645489][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.665162][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.672509][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.683224][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.690408][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.780859][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.803057][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.810265][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.846225][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.853403][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.914898][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.992555][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.026947][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.072399][ T4527] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.079629][ T4527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.110588][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.117822][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.189206][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.204462][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.231607][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.238877][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.294658][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.301941][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.340551][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.366668][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.421360][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.428601][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.473321][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.480646][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.671879][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.695584][ T5835] veth0_vlan: entered promiscuous mode [ 96.769519][ T5835] veth1_vlan: entered promiscuous mode [ 96.819834][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.944103][ T5835] veth0_macvtap: entered promiscuous mode [ 96.988685][ T5835] veth1_macvtap: entered promiscuous mode [ 97.054670][ T5830] veth0_vlan: entered promiscuous mode [ 97.093059][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.129674][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.139869][ T5830] veth1_vlan: entered promiscuous mode [ 97.175093][ T4359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.195580][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.204913][ T4359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.221442][ T4359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.233869][ T4359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.288428][ T794] cfg80211: failed to load regulatory.db [ 97.345146][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.416144][ T5830] veth0_macvtap: entered promiscuous mode [ 97.430501][ T53] Bluetooth: hci1: command tx timeout [ 97.430544][ T5837] Bluetooth: hci0: command tx timeout [ 97.435974][ T5151] Bluetooth: hci3: command tx timeout [ 97.445620][ T5844] Bluetooth: hci2: command tx timeout [ 97.473702][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.483068][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.491245][ T5829] veth0_vlan: entered promiscuous mode [ 97.503091][ T5830] veth1_macvtap: entered promiscuous mode [ 97.513081][ T5837] Bluetooth: hci4: command tx timeout [ 97.554080][ T5829] veth1_vlan: entered promiscuous mode [ 97.579656][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.593493][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.619653][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.645045][ T5836] veth0_vlan: entered promiscuous mode [ 97.664197][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.693782][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.726593][ T5836] veth1_vlan: entered promiscuous mode [ 97.738630][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.750926][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.791099][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.801656][ T5829] veth0_macvtap: entered promiscuous mode [ 97.815931][ T5829] veth1_macvtap: entered promiscuous mode [ 97.831592][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.846830][ T5845] veth0_vlan: entered promiscuous mode [ 97.914901][ T5845] veth1_vlan: entered promiscuous mode [ 97.982001][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.994941][ T5836] veth0_macvtap: entered promiscuous mode [ 98.012205][ T5955] netlink: 'syz.1.6': attribute type 29 has an invalid length. [ 98.030031][ T5955] netlink: 'syz.1.6': attribute type 29 has an invalid length. [ 98.046467][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.084270][ T5836] veth1_macvtap: entered promiscuous mode [ 98.105449][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.121011][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.152811][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.171854][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190675][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.230348][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.262735][ T5845] veth0_macvtap: entered promiscuous mode [ 98.267470][ T4195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.276342][ T4195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.313763][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.345965][ T5845] veth1_macvtap: entered promiscuous mode [ 98.419997][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.509393][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.521912][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.544114][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.559421][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.604831][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.652667][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.768496][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.776385][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.793620][ T5967] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 98.842506][ T5967] team0: Port device syz_tun added [ 98.851302][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.918033][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.940841][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.955449][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.982659][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.994096][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.149055][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.181816][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.270044][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.284419][ T5971] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.302935][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.478992][ T4527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.486903][ T4527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.519040][ T5844] Bluetooth: hci2: command tx timeout [ 99.525438][ T53] Bluetooth: hci1: command tx timeout [ 99.526826][ T5837] Bluetooth: hci0: command tx timeout [ 99.537481][ T5151] Bluetooth: hci3: command tx timeout [ 99.587606][ T5151] Bluetooth: hci4: command tx timeout [ 99.699058][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.757677][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.334294][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 101.376054][ T5996] Set syz1 is full, maxelem 6117 reached [ 101.581439][ C0] hrtimer: interrupt took 96095 ns [ 101.769609][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.812951][ T6021] netlink: 348 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.823604][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.833593][ T6027] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.843380][ T6021] netlink: 348 bytes leftover after parsing attributes in process `syz.2.31'. [ 101.881995][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.205265][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.300899][ T6021] netlink: 348 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.389930][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 102.450517][ T6021] netlink: 348 bytes leftover after parsing attributes in process `syz.2.31'. [ 105.284773][ T6119] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 105.328300][ T6119] .`: renamed from bond0 (while UP) [ 106.413019][ T6155] __nla_validate_parse: 7 callbacks suppressed [ 106.413038][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 106.913119][ T6162] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 107.841528][ T6199] Zero length message leads to an empty skb [ 109.270955][ T6267] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 109.303659][ T6265] ------------[ cut here ]------------ [ 109.309780][ T6265] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 109.310718][ T6267] netlink: 'syz.4.141': attribute type 2 has an invalid length. [ 109.332164][ T6265] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.0.139/6265 [ 109.349331][ T6265] Modules linked in: [ 109.353330][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(full) [ 109.364170][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.375722][ T6265] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 109.382595][ T6265] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 109.402599][ T6265] RSP: 0018:ffffc9000be76ef0 EFLAGS: 00010246 [ 109.408970][ T6265] RAX: dffffc0000000000 RBX: 1ffff1100a9fe004 RCX: 0000000000000000 [ 109.417047][ T6265] RDX: ffffffff8b71cd00 RSI: ffffffff8b725480 RDI: ffffffff8f8615a0 [ 109.425169][ T6265] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 109.428601][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 109.438291][ T6265] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888054ff0020 [ 109.450221][ T6265] R13: 0000000000000000 R14: 1ffff1100a9fe003 R15: 0000000000000000 [ 109.459351][ T6265] FS: 00007f20e52fa6c0(0000) GS:ffff888125e34000(0000) knlGS:0000000000000000 [ 109.469275][ T6265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.475925][ T6265] CR2: 00002000000054c0 CR3: 0000000078606000 CR4: 00000000003526f0 [ 109.484148][ T6265] Call Trace: [ 109.487541][ T6265] [ 109.490553][ T6265] reg_set_min_max+0x28c/0x340 [ 109.495373][ T6265] check_cond_jmp_op+0x19c6/0x2e20 [ 109.500656][ T6265] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 109.506171][ T6265] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 109.512383][ T6265] ? incomplete_read_marks+0x15e/0x1f0 [ 109.517985][ T6265] do_check+0x58ae/0xea60 [ 109.522454][ T6265] ? __pfx_do_check+0x10/0x10 [ 109.527249][ T6265] ? init_func_state+0x1ab2/0x28d0 [ 109.532437][ T6265] do_check_common+0x19cc/0x25b0 [ 109.537582][ T6265] bpf_check+0x5e7a/0x1c300 [ 109.542139][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 109.547119][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 109.552212][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 109.557306][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 109.563102][ T6265] ? css_rstat_updated+0x239/0x520 [ 109.569210][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 109.574226][ T6265] ? __pfx_bpf_check+0x10/0x10 [ 109.579626][ T6265] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 109.585946][ T6265] ? lockdep_hardirqs_on+0x98/0x140 [ 109.592007][ T6265] ? ktime_get_with_offset+0x93/0x2a0 [ 109.597873][ T6265] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 109.604190][ T6265] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 109.610912][ T6265] ? __asan_memset+0x22/0x50 [ 109.615561][ T6265] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 109.620879][ T6265] ? security_bpf_prog_load+0x125/0x3f0 [ 109.626489][ T6265] bpf_prog_load+0x13ba/0x1a10 [ 109.631418][ T6265] ? __pfx_bpf_prog_load+0x10/0x10 [ 109.636630][ T6265] ? bpf_lsm_bpf+0x9/0x20 [ 109.641178][ T6265] ? security_bpf+0x7e/0x300 [ 109.645921][ T6265] __sys_bpf+0x5c3/0x8a0 [ 109.650314][ T6265] ? __pfx___sys_bpf+0x10/0x10 [ 109.655173][ T6265] ? rcu_is_watching+0x15/0xb0 [ 109.660087][ T6265] __x64_sys_bpf+0x7c/0x90 [ 109.665388][ T6265] do_syscall_64+0xfa/0xf80 [ 109.670791][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.676930][ T6265] ? clear_bhb_loop+0x60/0xb0 [ 109.681749][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.687757][ T6265] RIP: 0033:0x7f20e438f749 [ 109.692241][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.712076][ T6265] RSP: 002b:00007f20e52fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.720632][ T6265] RAX: ffffffffffffffda RBX: 00007f20e45e5fa0 RCX: 00007f20e438f749 [ 109.728739][ T6265] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 109.736923][ T6265] RBP: 00007f20e4413f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.745075][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.753175][ T6265] R13: 00007f20e45e6038 R14: 00007f20e45e5fa0 R15: 00007ffcfbf8ff38 [ 109.761293][ T6265] [ 109.765001][ T6265] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.772337][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(full) [ 109.781587][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.791686][ T6265] Call Trace: [ 109.795000][ T6265] [ 109.797963][ T6265] dump_stack_lvl+0x99/0x250 [ 109.802587][ T6265] ? __asan_memcpy+0x40/0x70 [ 109.807211][ T6265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.812447][ T6265] ? __pfx__printk+0x10/0x10 [ 109.817094][ T6265] vpanic+0x237/0x6d0 [ 109.821110][ T6265] ? __pfx_vpanic+0x10/0x10 [ 109.825656][ T6265] ? is_bpf_text_address+0x292/0x2b0 [ 109.830989][ T6265] ? is_bpf_text_address+0x26/0x2b0 [ 109.836230][ T6265] panic+0xb9/0xc0 [ 109.839988][ T6265] ? __pfx_panic+0x10/0x10 [ 109.844524][ T6265] __warn+0x317/0x4b0 [ 109.848576][ T6265] ? reg_bounds_sanity_check+0x201/0xc30 [ 109.854266][ T6265] ? reg_bounds_sanity_check+0x201/0xc30 [ 109.859932][ T6265] __report_bug+0x288/0x500 [ 109.864513][ T6265] ? reg_bounds_sanity_check+0x201/0xc30 [ 109.870206][ T6265] ? __pfx___report_bug+0x10/0x10 [ 109.875286][ T6265] ? check_cond_jmp_op+0x1840/0x2e20 [ 109.880604][ T6265] ? do_check+0x58ae/0xea60 [ 109.885152][ T6265] ? do_check_common+0x19cc/0x25b0 [ 109.890342][ T6265] ? bpf_check+0x5e7a/0x1c300 [ 109.895054][ T6265] ? bpf_prog_load+0x13ba/0x1a10 [ 109.900030][ T6265] ? __sys_bpf+0x5c3/0x8a0 [ 109.904479][ T6265] ? __x64_sys_bpf+0x7c/0x90 [ 109.909104][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.915201][ T6265] report_bug_entry+0x19a/0x290 [ 109.920090][ T6265] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 109.925763][ T6265] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 109.931541][ T6265] handle_bug+0xca/0x200 [ 109.935819][ T6265] exc_invalid_op+0x1a/0x50 [ 109.940359][ T6265] asm_exc_invalid_op+0x1a/0x20 [ 109.945238][ T6265] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 109.951575][ T6265] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 109.971864][ T6265] RSP: 0018:ffffc9000be76ef0 EFLAGS: 00010246 [ 109.977974][ T6265] RAX: dffffc0000000000 RBX: 1ffff1100a9fe004 RCX: 0000000000000000 [ 109.985988][ T6265] RDX: ffffffff8b71cd00 RSI: ffffffff8b725480 RDI: ffffffff8f8615a0 [ 109.993996][ T6265] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 110.002011][ T6265] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888054ff0020 [ 110.010022][ T6265] R13: 0000000000000000 R14: 1ffff1100a9fe003 R15: 0000000000000000 [ 110.018073][ T6265] reg_set_min_max+0x28c/0x340 [ 110.022908][ T6265] check_cond_jmp_op+0x19c6/0x2e20 [ 110.028083][ T6265] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 110.033594][ T6265] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 110.039616][ T6265] ? incomplete_read_marks+0x15e/0x1f0 [ 110.045125][ T6265] do_check+0x58ae/0xea60 [ 110.049555][ T6265] ? __pfx_do_check+0x10/0x10 [ 110.054274][ T6265] ? init_func_state+0x1ab2/0x28d0 [ 110.059461][ T6265] do_check_common+0x19cc/0x25b0 [ 110.064454][ T6265] bpf_check+0x5e7a/0x1c300 [ 110.069124][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 110.074108][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 110.079105][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 110.084082][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 110.089053][ T6265] ? css_rstat_updated+0x239/0x520 [ 110.094223][ T6265] ? __lock_acquire+0x6b6/0x2cf0 [ 110.099211][ T6265] ? __pfx_bpf_check+0x10/0x10 [ 110.104013][ T6265] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 110.110294][ T6265] ? lockdep_hardirqs_on+0x98/0x140 [ 110.115525][ T6265] ? ktime_get_with_offset+0x93/0x2a0 [ 110.120935][ T6265] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 110.127219][ T6265] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 110.133856][ T6265] ? __asan_memset+0x22/0x50 [ 110.138474][ T6265] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 110.143721][ T6265] ? security_bpf_prog_load+0x125/0x3f0 [ 110.149314][ T6265] bpf_prog_load+0x13ba/0x1a10 [ 110.154126][ T6265] ? __pfx_bpf_prog_load+0x10/0x10 [ 110.159303][ T6265] ? bpf_lsm_bpf+0x9/0x20 [ 110.163755][ T6265] ? security_bpf+0x7e/0x300 [ 110.168462][ T6265] __sys_bpf+0x5c3/0x8a0 [ 110.172751][ T6265] ? __pfx___sys_bpf+0x10/0x10 [ 110.177576][ T6265] ? rcu_is_watching+0x15/0xb0 [ 110.182399][ T6265] __x64_sys_bpf+0x7c/0x90 [ 110.186858][ T6265] do_syscall_64+0xfa/0xf80 [ 110.191403][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.197503][ T6265] ? clear_bhb_loop+0x60/0xb0 [ 110.202228][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.208163][ T6265] RIP: 0033:0x7f20e438f749 [ 110.212620][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.232260][ T6265] RSP: 002b:00007f20e52fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.240806][ T6265] RAX: ffffffffffffffda RBX: 00007f20e45e5fa0 RCX: 00007f20e438f749 [ 110.248809][ T6265] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 110.256819][ T6265] RBP: 00007f20e4413f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.264823][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.272845][ T6265] R13: 00007f20e45e6038 R14: 00007f20e45e5fa0 R15: 00007ffcfbf8ff38 [ 110.280898][ T6265] [ 110.284544][ T6265] Kernel Offset: disabled [ 110.288890][ T6265] Rebooting in 86400 seconds..