last executing test programs: 3.233084368s ago: executing program 1 (id=2347): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000001c0)="7f7a45608074975928da1b33ee3103ca47afc4a5d5d2dc76f6fdd8a1bb1c4bc109e8f4b50b3915e456d383fac1a232ca75de2e80c227aa8f6f994297ec84d12f77d3fb80e7b8c48d15a54f3ad06f5ba0a1b6bc54ac376ecfaa239831de4258eca0dfd8a6", 0x64}, {&(0x7f00000005c0)="f38c6762f4d8b8c7d7491416cf456c7a1faa178f7ac19b713746c9b1b49d4398fdb89aa74157e28730884bed1b6a60eb820d53312ef11cbbbb077266be38f0df9c1b981e6b9a5f7e816c64bf84a384d54117455359ce151e60de6de5d3c10894f397c7b1689d150c13cb75cf4c864d54450939af98cba4336f65", 0x7a}, {&(0x7f0000000640)="3daa6c8a12f7afc40687db8412b5fcc9971b58e2a922b75b8f2b09a4960675f830f99ad0215e86acbfaea13ab441ff15f0dbae4cd833627a8f866fc9d3b0e0d6e479829ffbcbe2184f01469ad140fbef3dffec697c6be70446474d383f852b651fd415c7c090f7b28c633af9b78d9108fc2e208cbd5aa961a959ba7af0cc44592d2a57ce3e3424a52048ecbb05150e0751ddb08fcfa9e68d01000000c4de87683472061c581a3dc1fad3afcbb84745b3aaba83ec64041f959d", 0xb9}, {&(0x7f0000000700)="29e176434161bd6c9a44564699f038690a04ace0c44a04589de01e23a7b5172b6a5b2ef6db415544a26237a1067fa3a2fb5c415e455a91d7d75aba618f6d04492aba6ddd79d19efd614226659595f9ad635398a5370f086b4738e845f671364a6d887b37d3c3807fe3a45ff2bb8d1075bfc270cc7b66aba6cebae03431b225abeac8e09274e757ca0a6703100d7fbc2682bfa3891dca185c810f229820e61fae317f29cf724e32c0e0c84f485711ec5823db7dadfb43ac90b335f95f195ac8b974fdee117d94884866d88d9792ac24022ab5721a2b0aa04ecb16d6e0c26c0af5a4f9cb194167c1076253a3a73023a2d455", 0xf1}, {&(0x7f0000000880)="90de4616b86d41d57846b12a45cc03279eb4c82d6b6e479892b43ff004f9c53da7e636237ab031678f32753489f2dcd949e3aa02b93e3d91bf00d4f7876e8c603f812b74635560ff5b31dcf83c78", 0x4e}], 0x5}, 0x200c1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c000000000b010800000000000000000000000408000340000000010800024000000005080003400000000008000340000000000800014000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) close(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x40, @remote}, @in={0x2, 0x4e23, @remote}], 0x5c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x213}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r5) 2.208989128s ago: executing program 0 (id=2360): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a40)={r1, 0x31, 0x0, [0xad6, 0x100, 0x1, 0x31, 0x44359c18], [0x1f, 0xae9, 0x400, 0x6f7, 0x100, 0x8, 0x3f, 0x8000000000000001, 0x100000000, 0xffffffffffffff7f, 0xff, 0x3, 0x200, 0x9c, 0x2, 0x2, 0x4000000, 0x8, 0x100, 0x3ff, 0x179a, 0x7fffffffffffffff, 0x78f, 0x6, 0x4, 0xfffffffffffffeff, 0x4, 0x9, 0x6, 0x9, 0x2, 0x0, 0x800, 0x8000, 0x3, 0x9, 0xb2, 0x8, 0x400, 0x80000001, 0xfffffffffffffffd, 0x9, 0x80000001, 0x10001, 0x0, 0x1, 0x9, 0x5, 0x7, 0x7f, 0xfe, 0x1b0, 0x1ff, 0x88a, 0xcf, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x401, 0x0, 0x5, 0x9f4, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x500, 0x6, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xa5, 0x20, 0x6, 0x1000, 0x60, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x1f, 0x5, 0xa1, 0x400, 0x1, 0x4, 0xfffffffffffffffd, 0x800, 0x81, 0x3, 0x2, 0x3, 0x3fad, 0x8000000000000001, 0x1, 0x4, 0x2, 0x5c, 0x62fe9d90, 0x150, 0x81, 0x8000000000000001, 0xb172, 0x4, 0x1, 0xe8, 0x8, 0x2, 0xa2, 0x8, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000d00)={r1, 0x9, 0x1, [0x6, 0x6, 0xf, 0xffffffff, 0x100], [0x5, 0x800, 0x1, 0x0, 0xfffffffffffffff8, 0x7, 0x5, 0x1, 0x200, 0x7fffffffffffffff, 0x2, 0x5e7e, 0x7fffffffffffffff, 0x5473, 0x1, 0x100000001, 0x8001, 0xe3e, 0x7d285613, 0x400, 0x2, 0xfff, 0xcb, 0x8800000000000000, 0x1, 0x8000000000000000, 0x9, 0x2, 0x1, 0x3, 0x2, 0x640b, 0x8, 0x200, 0x100000000, 0x3, 0x5, 0x4, 0x8002, 0x7, 0x11e12e5b, 0xffffffffffffff01, 0x5, 0x300000000, 0xc, 0x31, 0x180000000, 0xffffffff, 0x2, 0xffffffff, 0x8, 0x35ab, 0xff, 0x9, 0x7, 0x4, 0x24, 0x1, 0x8, 0x2, 0x5, 0x1ff, 0x4, 0x2, 0x4, 0x1, 0x8, 0x7fffffffffffffff, 0x1, 0xc8a, 0x9, 0x10001, 0x8, 0x8, 0x10, 0xebbb, 0x6, 0xa, 0x2a1, 0xfffffffffffffffa, 0x7, 0xa, 0x7fff, 0x7fffffffffffffff, 0x63, 0x2, 0x2, 0x2, 0x5, 0x0, 0x10001, 0x10, 0x7, 0xd, 0x40, 0x4, 0xc, 0x8000, 0x1, 0x7, 0x800, 0x0, 0x1, 0xff, 0x9, 0x3, 0x9, 0x0, 0x2, 0xff, 0x4cd, 0x368, 0xfffffffffffffffb, 0x4, 0x0, 0x9, 0x62, 0x4, 0xffffffffffffffff, 0x10040000000, 0x9]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r3, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="3db5", 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="5e0700000000000005020003c91000000000000000000000ffff640101020720000048b5d6110003060609000700000000000000f30b00000000000097000000f4ff0000"], 0x40) 2.077140112s ago: executing program 1 (id=2363): unshare(0x22020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='contention_begin\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000040000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1.995832501s ago: executing program 3 (id=2364): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0xf, @empty, 0xe}, {0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x66010101}, 0xcf9a}, 0xffffffffffffffff, {[0x5, 0x7f, 0x0, 0x8, 0x1ff, 0x5, 0x2, 0x8]}}, 0x5c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000001d00"/24], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100), 0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x150, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xca}, &(0x7f00000001c0)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120003000000000000000100f4ffffffffffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7, &(0x7f0000000100)}, 0x20) pwritev(r5, &(0x7f00000007c0)=[{&(0x7f00000001c0)="330c0c6e29ceeae40705e5ddaf2048ced76bf186eeba0ee983ae0379011f864cd4ccd5438e766c3057419d4461d966a61e4a18f13f6b3c600246db902c2e13bc2793b574a52e5d190b4694d95d25da366cc459e2c49b4a7a49d94f321f8878609f1f81864b44725b2cf4bad550a80ec466848b5e59735936e4f0eb75bd2c0a8bbf1de46ad4f8a6dbf19e3d29b417bdf98f2243b6a79dcacf0f8683319f50c8d6b7bb33e066392ff8352f9d4ce06b83c2a17260553f8604ee346c7db684f7dbdaef92c94e7af6da455f", 0xc9}, {0x0}, {&(0x7f00000004c0)="38b294b8051be06c24d7f5e39d944a13910672adb43e6e4ebf4a0f671cb05114f0e9f0fe38b7063e3cdd6fdcdc58cdd56e7a23ed47b986dc57602d1409dffa96a34f25aa055fed17e1281a400f7801000000000000002df260fb8c66eb60983fa3ccb36acf7b86242f0fc13bcf5c014ef681d62beb8904100e07049560c4d591995e1ae6d4a6969be860091d44c33a5e1f05dbcfd9c0665e6d809bb3c9fcfb74f2d93e05556a6ae854e87d", 0xab}, {&(0x7f0000000880)="35a14ca55d8a35868cda5e68920305579221c3dee10c067a46d68113fffcc3b73be561a87c83a9c030422cf3662517df9ad07550a94dadd89e4299c8b7042828da974b41000480006bea1701ee1b46e9394b50a72d25e70006ce8129432e6658d6d73750895337debcfdcf6d240a785739260c5288f0b42823de97e0620569e8d9a1148aa916adf36aaabf84286e2e891e80795f10e6d184c6fda45b2348d5bf4be32e06969f4980c4babbc9847310e19fb38c591f0d06beb4a3122e1543ea812e", 0xc1}, {&(0x7f0000000580)="42866fdeba18e900e61e81094041183a3ea2bd360e0bd07ad4b66fe8328c3273b5b2894898b3a1bcd1e07c0d5d8f40f2bf409da70f67f8df353609a3f2848cac25ab592321a4353635e8e2984f0167cf91c47d870227f4c4b534c1d18ec5b38b2775dfb69a9c53a14e08dab3f19aebd80a", 0x71}, {&(0x7f0000000600)="965ed613a3a937c92b1f3173dde828eda5925ba2083c7a76fcfe841f7971ffa75bb0312267f11d9db5881c22ce1e05f705ea4819e64476e159ad548ac8532968a614cd409a13a696e3c28198088373261704cf7b8cbc328a54b53e5c94bf899c0a85f2d96d5d78a483bd064d8704085920961968bf59a9a31db33039ab06a365069df2bda7b4ee605abb63e1e3437119814e0e406978df27b747f41bb3396ead84487b6285ee886499f8713ee88aed95ddbc0b2dbcf701238cf7", 0xba}, {&(0x7f00000006c0)="eaca674ab92a461024f9f8da210acce65ddc7cca801d34f8f639616319a7e26bb49d52e639f68939f2650849cbbbc3e096d1a00e02964008e9a1d2e0fcbc0efbca68aa2d03715740bf96dd6ad743a0be7916221bf9a2f8cc35f475c7151a4da11ec28d68d4b91ac8b1eeeef5f824d76b716cf1c4f26b94375f480d582216050cefde7aab19077ab8c83a5e6feac351061eeb845e4d05b5e89d5172c9e9d294989f834488b7a67c2df444b2fe2a71f0f203b8107bdfe9da250aacab11398fe5faf482fac25f01353e770e1ab80c1dacdc1f06bda477a69c3f1d0c5e66ec324ac37b02a68e8fbe", 0xe6}, {&(0x7f0000001240)="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", 0xcd7}, {&(0x7f0000001f40)}, {&(0x7f0000002f40)="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", 0xff3}], 0xa, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/80, 0x0, 0xc00, 0x0, 0x1}, 0x20) setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/136, 0x88}], 0x1}}], 0x1, 0x20, 0x0) 1.791612075s ago: executing program 1 (id=2366): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008", @ANYRES32=r1], 0x4c}}, 0x0) 1.697675446s ago: executing program 0 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.675907679s ago: executing program 0 (id=2368): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x63a781bb1d31913b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000180ffffffffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000100000000000000001"], 0x48}}], 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x4000004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.578068245s ago: executing program 1 (id=2369): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000300)="1f", 0x1}], 0x1}}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x0, 0xa000}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000130000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000080), &(0x7f0000001840)=@udp6=r5}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x20, 0x10, 0xba8, 0x6, {{0x17, 0x4, 0x2, 0x3b, 0x5c, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x11, 0x1, [{0x5, 0xb, "f861ecff13ed613356"}]}, @noop, @noop, @ssrr={0x89, 0x27, 0x96, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, @local, @rand_addr=0x64010102, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0xf6, 0x0, 0x2, [0x4051, 0x79]}, @end]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r8}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xcbc0}, {}, 0xfffffffd, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x32}, 0xa, @in=@empty, 0x3506, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) 1.470249502s ago: executing program 0 (id=2372): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) 1.37246295s ago: executing program 0 (id=2374): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000001c0)="7f7a45608074975928da1b33ee3103ca47afc4a5d5d2dc76f6fdd8a1bb1c4bc109e8f4b50b3915e456d383fac1a232ca75de2e80c227aa8f6f994297ec84d12f77d3fb80e7b8c48d15a54f3ad06f5ba0a1b6bc54ac376ecfaa239831de4258eca0dfd8a6", 0x64}, {&(0x7f00000005c0)="f38c6762f4d8b8c7d7491416cf456c7a1faa178f7ac19b713746c9b1b49d4398fdb89aa74157e28730884bed1b6a60eb820d53312ef11cbbbb077266be38f0df9c1b981e6b9a5f7e816c64bf84a384d54117455359ce151e60de6de5d3c10894f397c7b1689d150c13cb75cf4c864d54450939af98cba4336f65", 0x7a}, {&(0x7f0000000640)="3daa6c8a12f7afc40687db8412b5fcc9971b58e2a922b75b8f2b09a4960675f830f99ad0215e86acbfaea13ab441ff15f0dbae4cd833627a8f866fc9d3b0e0d6e479829ffbcbe2184f01469ad140fbef3dffec697c6be70446474d383f852b651fd415c7c090f7b28c633af9b78d9108fc2e208cbd5aa961a959ba7af0cc44592d2a57ce3e3424a52048ecbb05150e0751ddb08fcfa9e68d01000000c4de87683472061c581a3dc1fad3afcbb84745b3aaba83ec64041f959d", 0xb9}, {&(0x7f0000000700)="29e176434161bd6c9a44564699f038690a04ace0c44a04589de01e23a7b5172b6a5b2ef6db415544a26237a1067fa3a2fb5c415e455a91d7d75aba618f6d04492aba6ddd79d19efd614226659595f9ad635398a5370f086b4738e845f671364a6d887b37d3c3807fe3a45ff2bb8d1075bfc270cc7b66aba6cebae03431b225abeac8e09274e757ca0a6703100d7fbc2682bfa3891dca185c810f229820e61fae317f29cf724e32c0e0c84f485711ec5823db7dadfb43ac90b335f95f195ac8b974fdee117d94884866d88d9792ac24022ab5721a2b0aa04ecb16d6e0c26c0af5a4f9cb194167c1076253a3a73023a2d455", 0xf1}, {&(0x7f0000000880)="90de4616b86d41d57846b12a45cc03279eb4c82d6b6e479892b43ff004f9c53da7e636237ab031678f32753489f2dcd949e3aa02b93e3d91bf00d4f7876e8c603f812b74635560ff5b31dcf83c78", 0x4e}], 0x5}, 0x200c1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c000000000b010800000000000000000000000408000340000000010800024000000005080003400000000008000340000000000800014000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) close(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x40, @remote}, @in={0x2, 0x4e23, @remote}], 0x5c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x213}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r5) 1.363108756s ago: executing program 2 (id=2375): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10, 0x0}, 0x840) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="018008000100000000001c0003800800020003000000"], 0x48}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000000000100000004001e0001000000", 0x24) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r9, 0x5}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100070100000000000000000200"/36], 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.170084523s ago: executing program 2 (id=2377): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a40)={r1, 0x31, 0x0, [0xad6, 0x100, 0x1, 0x31, 0x44359c18], [0x1f, 0xae9, 0x400, 0x6f7, 0x100, 0x8, 0x3f, 0x8000000000000001, 0x100000000, 0xffffffffffffff7f, 0xff, 0x3, 0x200, 0x9c, 0x2, 0x2, 0x4000000, 0x8, 0x100, 0x3ff, 0x179a, 0x7fffffffffffffff, 0x78f, 0x6, 0x4, 0xfffffffffffffeff, 0x4, 0x9, 0x6, 0x9, 0x2, 0x0, 0x800, 0x8000, 0x3, 0x9, 0xb2, 0x8, 0x400, 0x80000001, 0xfffffffffffffffd, 0x9, 0x80000001, 0x10001, 0x0, 0x1, 0x9, 0x5, 0x7, 0x7f, 0xfe, 0x1b0, 0x1ff, 0x88a, 0xcf, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x401, 0x0, 0x5, 0x9f4, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x500, 0x6, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xa5, 0x20, 0x6, 0x1000, 0x60, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x1f, 0x5, 0xa1, 0x400, 0x1, 0x4, 0xfffffffffffffffd, 0x800, 0x81, 0x3, 0x2, 0x3, 0x3fad, 0x8000000000000001, 0x1, 0x4, 0x2, 0x5c, 0x62fe9d90, 0x150, 0x81, 0x8000000000000001, 0xb172, 0x4, 0x1, 0xe8, 0x8, 0x2, 0xa2, 0x8, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000d00)={r1, 0x9, 0x1, [0x6, 0x6, 0xf, 0xffffffff, 0x100], [0x5, 0x800, 0x1, 0x0, 0xfffffffffffffff8, 0x7, 0x5, 0x1, 0x200, 0x7fffffffffffffff, 0x2, 0x5e7e, 0x7fffffffffffffff, 0x5473, 0x1, 0x100000001, 0x8001, 0xe3e, 0x7d285613, 0x400, 0x2, 0xfff, 0xcb, 0x8800000000000000, 0x1, 0x8000000000000000, 0x9, 0x2, 0x1, 0x3, 0x2, 0x640b, 0x8, 0x200, 0x100000000, 0x3, 0x5, 0x4, 0x8002, 0x7, 0x11e12e5b, 0xffffffffffffff01, 0x5, 0x300000000, 0xc, 0x31, 0x180000000, 0xffffffff, 0x2, 0xffffffff, 0x8, 0x35ab, 0xff, 0x9, 0x7, 0x4, 0x24, 0x1, 0x8, 0x2, 0x5, 0x1ff, 0x4, 0x2, 0x4, 0x1, 0x8, 0x7fffffffffffffff, 0x1, 0xc8a, 0x9, 0x10001, 0x8, 0x8, 0x10, 0xebbb, 0x6, 0xa, 0x2a1, 0xfffffffffffffffa, 0x7, 0xa, 0x7fff, 0x7fffffffffffffff, 0x63, 0x2, 0x2, 0x2, 0x5, 0x0, 0x10001, 0x10, 0x7, 0xd, 0x40, 0x4, 0xc, 0x8000, 0x1, 0x7, 0x800, 0x0, 0x1, 0xff, 0x9, 0x3, 0x9, 0x0, 0x2, 0xff, 0x4cd, 0x368, 0xfffffffffffffffb, 0x4, 0x0, 0x9, 0x62, 0x4, 0xffffffffffffffff, 0x10040000000, 0x9]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r3, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="3db5", 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="5e0700000000000005020003c91000000000000000000000ffff640101020720000048b5d6110003060609000700000000000000f30b00000000000097000000f4ff0000"], 0x40) 1.146627816s ago: executing program 4 (id=2378): unshare(0x22020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000040000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1.095328289s ago: executing program 3 (id=2379): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008", @ANYRES32=r1], 0x4c}}, 0x0) 867.079391ms ago: executing program 4 (id=2380): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200", 0x55}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1414010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800400010000000000240001"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000104000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010062726964676500004c00028005002900010000000500190007000000050019000000000008001c000000700005002500010000000500170001000000050007000f000000050016000100000005002400"], 0x7c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 839.178476ms ago: executing program 3 (id=2381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 790.435273ms ago: executing program 2 (id=2382): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xf000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x8000) socket$kcm(0xa, 0x6, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000ffff2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xc}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {0x0}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}]}}]}, 0x90}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 645.303607ms ago: executing program 3 (id=2383): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x63a781bb1d31913b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000180ffffffffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000100000000000000001"], 0x48}}], 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x4000004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 544.968774ms ago: executing program 4 (id=2384): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) 498.249231ms ago: executing program 1 (id=2385): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)}, 0x0) 454.426326ms ago: executing program 3 (id=2386): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000013c0)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={&(0x7f0000000080)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72bf6fdbd1101712924188cf6067c1a40f6f56bd41d501c5df68eac2365dabec", 0x36}}, 0x0) 361.700853ms ago: executing program 4 (id=2387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001600010000000000000000000a080000", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 302.145172ms ago: executing program 2 (id=2388): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10, 0x0}, 0x840) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="018008000100000000001c0003800800020003000000"], 0x48}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000000000100000004001e0001000000", 0x24) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r9, 0x5}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100070100000000000000000200"/36], 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 295.332997ms ago: executing program 3 (id=2389): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x61, 0x0, 0x29) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000009030000000000000000000001050020008000000000000000000000030000000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f00000002c0)="05ef35eb706c2a4a7c8b649337902898048edb7620f26884eb1e8506c4c66d78547f6ecc58361284d6b73c7b8ae9bbb67cf6ac36cd0e6c2eab41b3da595981fbe0018e2d5c9f7b84e187f495f01b47aee3a65e498918e4dd76ca8a931c0fc98d8e32797f596c9775225f4e161674b85ae7354093d801ae50f673e8d1185fc3a8439a4f0a25d55529e774c6102e449eaad85be41828bd9f") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x10, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x4040080) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002a000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, 0x0, 0x0}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r11}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=@dellinkprop={0xfc, 0x6d, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x800, 0x1430}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5b30}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg1\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PORT_SELF={0x84, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, ':$\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0aff8fb9a8c2e354e6f4fe79b563e2d5"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "377346ce4f37f32825e0bd16f6025c03"}, @IFLA_PORT_PROFILE={0x9, 0x2, '%^+0\x00'}, @IFLA_PORT_PROFILE={0xa, 0x2, '.@\b}&\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6a34912fbcc7820b9e12b880537a3c07"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4162ecb36035a68be9c022618eb9bc49"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3f949bbe}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008004}, 0x4008010) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 184.632528ms ago: executing program 4 (id=2390): unshare(0x22020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000040000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 158.273903ms ago: executing program 0 (id=2391): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008", @ANYRES32=r1], 0x4c}}, 0x0) 130.002257ms ago: executing program 1 (id=2392): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000a40)={r2, 0x31, 0x0, [0xad6, 0x100, 0x1, 0x31, 0x44359c18], [0x1f, 0xae9, 0x400, 0x6f7, 0x100, 0x8, 0x3f, 0x8000000000000001, 0x100000000, 0xffffffffffffff7f, 0xff, 0x3, 0x200, 0x9c, 0x2, 0x2, 0x4000000, 0x8, 0x100, 0x3ff, 0x179a, 0x7fffffffffffffff, 0x78f, 0x6, 0x4, 0xfffffffffffffeff, 0x4, 0x9, 0x6, 0x9, 0x2, 0x0, 0x800, 0x8000, 0x3, 0x9, 0xb2, 0x8, 0x400, 0x80000001, 0xfffffffffffffffd, 0x9, 0x80000001, 0x10001, 0x0, 0x1, 0x9, 0x5, 0x7, 0x7f, 0xfe, 0x1b0, 0x1ff, 0x88a, 0xcf, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x401, 0x0, 0x5, 0x9f4, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x500, 0x6, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xa5, 0x20, 0x6, 0x1000, 0x60, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x1f, 0x5, 0xa1, 0x400, 0x1, 0x4, 0xfffffffffffffffd, 0x800, 0x81, 0x3, 0x2, 0x3, 0x3fad, 0x8000000000000001, 0x1, 0x4, 0x2, 0x5c, 0x62fe9d90, 0x150, 0x81, 0x8000000000000001, 0xb172, 0x4, 0x1, 0xe8, 0x8, 0x2, 0xa2, 0x8, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000d00)={r2, 0x9, 0x1, [0x6, 0x6, 0xf, 0xffffffff, 0x100], [0x5, 0x800, 0x1, 0x0, 0xfffffffffffffff8, 0x7, 0x5, 0x1, 0x200, 0x7fffffffffffffff, 0x2, 0x5e7e, 0x7fffffffffffffff, 0x5473, 0x1, 0x100000001, 0x8001, 0xe3e, 0x7d285613, 0x400, 0x2, 0xfff, 0xcb, 0x8800000000000000, 0x1, 0x8000000000000000, 0x9, 0x2, 0x1, 0x3, 0x2, 0x640b, 0x8, 0x200, 0x100000000, 0x3, 0x5, 0x4, 0x8002, 0x7, 0x11e12e5b, 0xffffffffffffff01, 0x5, 0x300000000, 0xc, 0x31, 0x180000000, 0xffffffff, 0x2, 0xffffffff, 0x8, 0x35ab, 0xff, 0x9, 0x7, 0x4, 0x24, 0x1, 0x8, 0x2, 0x5, 0x1ff, 0x4, 0x2, 0x4, 0x1, 0x8, 0x7fffffffffffffff, 0x1, 0xc8a, 0x9, 0x10001, 0x8, 0x8, 0x10, 0xebbb, 0x6, 0xa, 0x2a1, 0xfffffffffffffffa, 0x7, 0xa, 0x7fff, 0x7fffffffffffffff, 0x63, 0x2, 0x2, 0x2, 0x5, 0x0, 0x10001, 0x10, 0x7, 0xd, 0x40, 0x4, 0xc, 0x8000, 0x1, 0x7, 0x800, 0x0, 0x1, 0xff, 0x9, 0x3, 0x9, 0x0, 0x2, 0xff, 0x4cd, 0x368, 0xfffffffffffffffb, 0x4, 0x0, 0x9, 0x62, 0x4, 0xffffffffffffffff, 0x10040000000, 0x9]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="3db5", 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="5e0700000000000005020003c91000000000000000000000ffff640101020720000048b5d6110003060609000700000000000000f30b00000000000097000000f4ff0000"], 0x40) 129.197287ms ago: executing program 2 (id=2393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0) 68.781313ms ago: executing program 2 (id=2394): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000e500d00000005efb5ca1ca26e438ce84b10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff0200000800278e9bdd"], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000007b00000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa35a1000000000000050006"], 0xa0}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=2395): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200", 0x55}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1414010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800400010000000000240001"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000104000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010062726964676500004c00028005002900010000000500190007000000050019000000000008001c000000700005002500010000000500170001000000050007000f000000050016000100000005002400"], 0x7c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) kernel console output (not intermixed with test programs): 422'. [ 300.365379][ T9878] unknown channel width for channel at 909000KHz? [ 300.389937][ T9878] unknown channel width for channel at 909000KHz? [ 300.403224][ T9878] unknown channel width for channel at 909000KHz? [ 300.744153][ T9894] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1434'. [ 300.806079][ T9896] netlink: 'syz.2.1435': attribute type 10 has an invalid length. [ 300.842389][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.849668][ T9898] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.1436'. [ 300.873438][ T9896] team0: Port device bond0 added [ 301.102932][ T9907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.136460][ T9907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.174281][ T9907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.226246][ T9907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.992912][ T9944] FAULT_INJECTION: forcing a failure. [ 301.992912][ T9944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.031785][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.0.1454 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 302.042168][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.052245][ T9944] Call Trace: [ 302.055536][ T9944] [ 302.058481][ T9944] dump_stack_lvl+0x241/0x360 [ 302.063197][ T9944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.068414][ T9944] ? __pfx__printk+0x10/0x10 [ 302.073025][ T9944] ? __pfx_lock_release+0x10/0x10 [ 302.078078][ T9944] should_fail_ex+0x3b0/0x4e0 [ 302.082795][ T9944] _copy_from_iter+0x1ed/0x1d60 [ 302.087664][ T9944] ? __virt_addr_valid+0x183/0x530 [ 302.092808][ T9944] ? __pfx_lock_release+0x10/0x10 [ 302.097872][ T9944] ? __pfx__copy_from_iter+0x10/0x10 [ 302.103187][ T9944] ? __virt_addr_valid+0x183/0x530 [ 302.108334][ T9944] ? __virt_addr_valid+0x183/0x530 [ 302.113458][ T9944] ? __virt_addr_valid+0x45f/0x530 [ 302.118622][ T9944] ? __check_object_size+0x48e/0x900 [ 302.123933][ T9944] netlink_sendmsg+0x73d/0xcb0 [ 302.128731][ T9944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.134057][ T9944] ? aa_sock_msg_perm+0x91/0x160 [ 302.139020][ T9944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.144333][ T9944] __sock_sendmsg+0x221/0x270 [ 302.149040][ T9944] ____sys_sendmsg+0x52a/0x7e0 [ 302.153916][ T9944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.159229][ T9944] __sys_sendmsg+0x292/0x380 [ 302.163918][ T9944] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.169051][ T9944] ? __pfx_vfs_write+0x10/0x10 [ 302.173853][ T9944] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.180203][ T9944] ? do_syscall_64+0x100/0x230 [ 302.184994][ T9944] ? do_syscall_64+0xb6/0x230 [ 302.189701][ T9944] do_syscall_64+0xf3/0x230 [ 302.194220][ T9944] ? clear_bhb_loop+0x35/0x90 [ 302.198916][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.204833][ T9944] RIP: 0033:0x7f014577dff9 [ 302.209263][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.228899][ T9944] RSP: 002b:00007f01464ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.237337][ T9944] RAX: ffffffffffffffda RBX: 00007f0145935f80 RCX: 00007f014577dff9 [ 302.245327][ T9944] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 302.253312][ T9944] RBP: 00007f01464ff090 R08: 0000000000000000 R09: 0000000000000000 [ 302.261312][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.269301][ T9944] R13: 0000000000000000 R14: 00007f0145935f80 R15: 00007ffda23df228 [ 302.277302][ T9944] [ 302.768152][ T9974] __nla_validate_parse: 6 callbacks suppressed [ 302.768172][ T9974] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1468'. [ 302.812934][ T9974] syz_tun: left allmulticast mode [ 302.819596][ T9974] syz_tun: left promiscuous mode [ 303.073824][ T9988] xt_hashlimit: invalid interval [ 303.327757][ T9999] veth0_vlan: left promiscuous mode [ 303.998502][ T9992] delete_channel: no stack [ 304.212086][T10015] Bluetooth: MGMT ver 1.23 [ 304.294077][T10017] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1485'. [ 304.357737][T10020] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1486'. [ 304.478889][T10027] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 304.513928][T10027] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 304.700154][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 305.035169][T10058] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1499'. [ 305.093005][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 305.425721][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 305.490985][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 305.782476][T10100] FAULT_INJECTION: forcing a failure. [ 305.782476][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 305.822225][T10100] CPU: 1 UID: 0 PID: 10100 Comm: syz.4.1517 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 305.832707][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.842806][T10100] Call Trace: [ 305.846111][T10100] [ 305.849073][T10100] dump_stack_lvl+0x241/0x360 [ 305.853785][T10100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.859005][T10100] ? __pfx__printk+0x10/0x10 [ 305.863617][T10100] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 305.869101][T10100] ? __pfx___might_resched+0x10/0x10 [ 305.874408][T10100] should_fail_ex+0x3b0/0x4e0 [ 305.879105][T10100] should_failslab+0xac/0x100 [ 305.883799][T10100] ? __request_module+0x2b9/0x650 [ 305.888832][T10100] __kmalloc_cache_noprof+0x6c/0x2c0 [ 305.894154][T10100] __request_module+0x2b9/0x650 [ 305.899010][T10100] ? __pfx_aa_get_newest_label+0x10/0x10 [ 305.904644][T10100] ? capable+0x79/0xe0 [ 305.908716][T10100] ? __pfx___request_module+0x10/0x10 [ 305.914100][T10100] ? apparmor_capable+0x13b/0x1b0 [ 305.919132][T10100] ? dev_load+0x21/0x1f0 [ 305.923383][T10100] dev_ioctl+0x5fc/0x1340 [ 305.927715][T10100] sock_do_ioctl+0x240/0x460 [ 305.932321][T10100] ? __pfx_sock_do_ioctl+0x10/0x10 [ 305.937446][T10100] sock_ioctl+0x626/0x8e0 [ 305.941772][T10100] ? __pfx_sock_ioctl+0x10/0x10 [ 305.946618][T10100] ? __fget_files+0x29/0x470 [ 305.951203][T10100] ? __fget_files+0x3f3/0x470 [ 305.955878][T10100] ? __pfx_sock_ioctl+0x10/0x10 [ 305.960730][T10100] __se_sys_ioctl+0xf9/0x170 [ 305.965326][T10100] do_syscall_64+0xf3/0x230 [ 305.969830][T10100] ? clear_bhb_loop+0x35/0x90 [ 305.974588][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.980485][T10100] RIP: 0033:0x7f75f837dff9 [ 305.984896][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.004521][T10100] RSP: 002b:00007f75f90ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.012956][T10100] RAX: ffffffffffffffda RBX: 00007f75f8535f80 RCX: 00007f75f837dff9 [ 306.020930][T10100] RDX: 0000000020000180 RSI: 0000000000008923 RDI: 0000000000000003 [ 306.028898][T10100] RBP: 00007f75f90ae090 R08: 0000000000000000 R09: 0000000000000000 [ 306.036866][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.044830][T10100] R13: 0000000000000000 R14: 00007f75f8535f80 R15: 00007fffda4d52c8 [ 306.052807][T10100] [ 306.365277][T10118] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 307.000701][T10133] nft_compat: unsupported protocol 1 [ 307.162045][T10144] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1530'. [ 307.204933][T10148] FAULT_INJECTION: forcing a failure. [ 307.204933][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 307.219328][T10148] CPU: 0 UID: 0 PID: 10148 Comm: syz.1.1531 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 307.229781][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.239937][T10148] Call Trace: [ 307.243230][T10148] [ 307.246159][T10148] dump_stack_lvl+0x241/0x360 [ 307.250849][T10148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.256051][T10148] ? __pfx__printk+0x10/0x10 [ 307.260649][T10148] ? ref_tracker_alloc+0x332/0x490 [ 307.265776][T10148] should_fail_ex+0x3b0/0x4e0 [ 307.270458][T10148] ? skb_clone+0x20c/0x390 [ 307.274870][T10148] should_failslab+0xac/0x100 [ 307.279552][T10148] ? skb_clone+0x20c/0x390 [ 307.283984][T10148] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 307.289357][T10148] skb_clone+0x20c/0x390 [ 307.293599][T10148] __netlink_deliver_tap+0x3cc/0x7c0 [ 307.298890][T10148] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.304088][T10148] netlink_deliver_tap+0x19d/0x1b0 [ 307.309207][T10148] netlink_unicast+0x7c4/0x990 [ 307.313972][T10148] ? __pfx_netlink_unicast+0x10/0x10 [ 307.319257][T10148] ? __virt_addr_valid+0x183/0x530 [ 307.324364][T10148] ? __check_object_size+0x48e/0x900 [ 307.329651][T10148] netlink_sendmsg+0x8e4/0xcb0 [ 307.334427][T10148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.339737][T10148] ? aa_sock_msg_perm+0x91/0x160 [ 307.344692][T10148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.349992][T10148] __sock_sendmsg+0x221/0x270 [ 307.354676][T10148] ____sys_sendmsg+0x52a/0x7e0 [ 307.359444][T10148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.364732][T10148] __sys_sendmsg+0x292/0x380 [ 307.369317][T10148] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.374428][T10148] ? __pfx_vfs_write+0x10/0x10 [ 307.379214][T10148] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.385545][T10148] ? do_syscall_64+0x100/0x230 [ 307.390307][T10148] ? do_syscall_64+0xb6/0x230 [ 307.394980][T10148] do_syscall_64+0xf3/0x230 [ 307.399483][T10148] ? clear_bhb_loop+0x35/0x90 [ 307.404155][T10148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.410077][T10148] RIP: 0033:0x7f90ec17dff9 [ 307.414506][T10148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.434127][T10148] RSP: 002b:00007f90ed020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.442545][T10148] RAX: ffffffffffffffda RBX: 00007f90ec335f80 RCX: 00007f90ec17dff9 [ 307.450513][T10148] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 307.458477][T10148] RBP: 00007f90ed020090 R08: 0000000000000000 R09: 0000000000000000 [ 307.466440][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.474412][T10148] R13: 0000000000000000 R14: 00007f90ec335f80 R15: 00007ffd69b9e8f8 [ 307.482399][T10148] [ 307.511650][T10148] netlink: 'syz.1.1531': attribute type 3 has an invalid length. [ 307.543182][T10148] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1531'. [ 308.005642][T10177] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 308.028243][T10177] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 308.188994][T10185] ɶƣ0GC¦: entered promiscuous mode [ 308.213661][T10185] netlink: 'syz.2.1544': attribute type 1 has an invalid length. [ 308.483120][T10198] __nla_validate_parse: 3 callbacks suppressed [ 308.483140][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1553'. [ 308.528675][T10200] openvswitch: netlink: Actions may not be safe on all matching packets [ 308.655173][T10204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 308.746501][T10209] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 308.761248][T10209] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 308.836221][T10204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 309.015597][T10216] syzkaller0: entered promiscuous mode [ 309.021405][T10216] syzkaller0: entered allmulticast mode [ 311.418797][T10220] syzkaller0: entered promiscuous mode [ 311.424289][T10220] syzkaller0: entered allmulticast mode [ 313.413100][T10228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.420382][T10228] IPv6: NLM_F_CREATE should be set when creating new route [ 313.470179][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'. [ 313.492044][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'. [ 313.655761][T10256] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 313.701223][T10256] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 313.887550][T10260] syzkaller0: entered promiscuous mode [ 313.897157][T10260] syzkaller0: entered allmulticast mode [ 315.792287][T10270] ip6tnl0: mtu greater than device maximum [ 315.824277][T10283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1582'. [ 315.877228][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 316.153600][T10308] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 316.185218][T10308] netlink: 'syz.2.1589': attribute type 1 has an invalid length. [ 317.230972][T10349] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 317.294015][T10349] netlink: 'syz.0.1601': attribute type 1 has an invalid length. [ 317.338112][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.345172][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.576030][T10368] syzkaller1: entered promiscuous mode [ 317.598164][T10368] syzkaller1: entered allmulticast mode [ 317.618921][T10368] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 317.820666][T10376] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1610'. [ 318.107056][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 318.274625][T10390] vxcan1: entered allmulticast mode [ 318.309644][T10394] netlink: 'syz.4.1614': attribute type 39 has an invalid length. [ 318.327147][T10394] vxcan1: left allmulticast mode [ 318.345154][T10397] IPVS: set_ctl: invalid protocol: 47 172.20.20.68:20004 [ 318.561192][T10406] xt_hashlimit: max too large, truncated to 1048576 [ 318.594507][T10408] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.130757][T10440] FAULT_INJECTION: forcing a failure. [ 319.130757][T10440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.166600][T10440] CPU: 1 UID: 0 PID: 10440 Comm: syz.2.1633 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 319.177081][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.187161][T10440] Call Trace: [ 319.190465][T10440] [ 319.193416][T10440] dump_stack_lvl+0x241/0x360 [ 319.198218][T10440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.203500][T10440] ? __pfx__printk+0x10/0x10 [ 319.208139][T10440] ? snprintf+0xda/0x120 [ 319.212414][T10440] should_fail_ex+0x3b0/0x4e0 [ 319.217135][T10440] _copy_to_user+0x2f/0xb0 [ 319.221580][T10440] simple_read_from_buffer+0xca/0x150 [ 319.226991][T10440] proc_fail_nth_read+0x1e9/0x250 [ 319.232053][T10440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.237639][T10440] ? rw_verify_area+0x55e/0x6f0 [ 319.242523][T10440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.248105][T10440] vfs_read+0x201/0xbc0 [ 319.252295][T10440] ? __pfx_lock_release+0x10/0x10 [ 319.257361][T10440] ? __pfx_vfs_read+0x10/0x10 [ 319.262174][T10440] ? __fget_files+0x3f3/0x470 [ 319.266885][T10440] ? fdget_pos+0x24e/0x320 [ 319.271332][T10440] ksys_read+0x183/0x2b0 [ 319.275612][T10440] ? __pfx_ksys_read+0x10/0x10 [ 319.280408][T10440] ? do_syscall_64+0x100/0x230 [ 319.285203][T10440] ? do_syscall_64+0xb6/0x230 [ 319.289909][T10440] do_syscall_64+0xf3/0x230 [ 319.294443][T10440] ? clear_bhb_loop+0x35/0x90 [ 319.299149][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.305077][T10440] RIP: 0033:0x7f955ab7ca3c [ 319.309518][T10440] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 319.329339][T10440] RSP: 002b:00007f955b95b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.337785][T10440] RAX: ffffffffffffffda RBX: 00007f955ad35f80 RCX: 00007f955ab7ca3c [ 319.345863][T10440] RDX: 000000000000000f RSI: 00007f955b95b0a0 RDI: 0000000000000003 [ 319.353843][T10440] RBP: 00007f955b95b090 R08: 0000000000000000 R09: 0000000000000000 [ 319.361816][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.369802][T10440] R13: 0000000000000000 R14: 00007f955ad35f80 R15: 00007ffe2d6f9718 [ 319.377800][T10440] [ 319.617008][T10454] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.691080][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 319.721000][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 320.115685][T10486] FAULT_INJECTION: forcing a failure. [ 320.115685][T10486] name failslab, interval 1, probability 0, space 0, times 0 [ 320.162741][T10486] CPU: 1 UID: 0 PID: 10486 Comm: syz.4.1650 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 320.173305][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 320.183390][T10486] Call Trace: [ 320.186697][T10486] [ 320.189666][T10486] dump_stack_lvl+0x241/0x360 [ 320.194381][T10486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.199613][T10486] ? __pfx__printk+0x10/0x10 [ 320.204242][T10486] ? __kmalloc_noprof+0xb0/0x400 [ 320.209221][T10486] ? __pfx___might_resched+0x10/0x10 [ 320.214543][T10486] should_fail_ex+0x3b0/0x4e0 [ 320.219259][T10486] ? security_sk_alloc+0x53/0x360 [ 320.224311][T10486] should_failslab+0xac/0x100 [ 320.229110][T10486] ? security_sk_alloc+0x53/0x360 [ 320.234165][T10486] __kmalloc_noprof+0xd8/0x400 [ 320.239051][T10486] ? sk_prot_alloc+0xe0/0x210 [ 320.243775][T10486] ? rcu_is_watching+0x15/0xb0 [ 320.248651][T10486] security_sk_alloc+0x53/0x360 [ 320.253526][T10486] sk_prot_alloc+0xfa/0x210 [ 320.258055][T10486] ? sk_alloc+0x26/0x370 [ 320.262353][T10486] sk_alloc+0x38/0x370 [ 320.266453][T10486] ? bpf_test_init+0x15a/0x180 [ 320.271346][T10486] ? bpf_ctx_init+0x162/0x1b0 [ 320.276032][T10486] bpf_prog_test_run_skb+0x3bd/0x1820 [ 320.281495][T10486] ? __pfx_lock_release+0x10/0x10 [ 320.286535][T10486] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 320.292345][T10486] ? fput+0x1a8/0x230 [ 320.296322][T10486] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 320.302135][T10486] bpf_prog_test_run+0x2e4/0x360 [ 320.307165][T10486] __sys_bpf+0x48d/0x810 [ 320.311408][T10486] ? __pfx___sys_bpf+0x10/0x10 [ 320.316175][T10486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.322157][T10486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.328492][T10486] ? do_syscall_64+0x100/0x230 [ 320.333258][T10486] __x64_sys_bpf+0x7c/0x90 [ 320.337705][T10486] do_syscall_64+0xf3/0x230 [ 320.342207][T10486] ? clear_bhb_loop+0x35/0x90 [ 320.346887][T10486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.352864][T10486] RIP: 0033:0x7f75f837dff9 [ 320.357295][T10486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.376994][T10486] RSP: 002b:00007f75f90ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.385406][T10486] RAX: ffffffffffffffda RBX: 00007f75f8535f80 RCX: 00007f75f837dff9 [ 320.393385][T10486] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a [ 320.401370][T10486] RBP: 00007f75f90ae090 R08: 0000000000000000 R09: 0000000000000000 [ 320.409371][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.417343][T10486] R13: 0000000000000000 R14: 00007f75f8535f80 R15: 00007fffda4d52c8 [ 320.425500][T10486] [ 320.524644][T10499] dccp_invalid_packet: P.Data Offset(0) too small [ 320.948040][T10513] net veth1_virt_wifi ÿÿÿ: renamed from virt_wifi0 [ 321.010753][T10515] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 321.185509][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'. [ 321.195717][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 321.223422][T10525] batadv0: entered promiscuous mode [ 321.229711][T10525] macvtap1: entered promiscuous mode [ 321.235169][T10525] macvtap1: entered allmulticast mode [ 321.240798][T10525] batadv0: entered allmulticast mode [ 321.249139][T10525] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 321.270580][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 321.283491][T10527] batadv0: left allmulticast mode [ 321.290004][T10527] batadv0: left promiscuous mode [ 321.513611][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 321.578512][T10541] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1670'. [ 321.873092][T10550] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1672'. [ 322.046856][T10558] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 322.079263][T10558] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 322.395092][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'. [ 322.406796][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 322.418492][T10581] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 323.113749][T10611] FAULT_INJECTION: forcing a failure. [ 323.113749][T10611] name failslab, interval 1, probability 0, space 0, times 0 [ 323.147748][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.0.1691 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 323.158231][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 323.168314][T10611] Call Trace: [ 323.171607][T10611] [ 323.174537][T10611] dump_stack_lvl+0x241/0x360 [ 323.179270][T10611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.184568][T10611] ? __pfx__printk+0x10/0x10 [ 323.189170][T10611] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 323.195155][T10611] ? __pfx___might_resched+0x10/0x10 [ 323.200447][T10611] should_fail_ex+0x3b0/0x4e0 [ 323.205222][T10611] should_failslab+0xac/0x100 [ 323.209918][T10611] ? __alloc_skb+0x1c3/0x440 [ 323.214526][T10611] kmem_cache_alloc_node_noprof+0x71/0x320 [ 323.220351][T10611] __alloc_skb+0x1c3/0x440 [ 323.224781][T10611] ? __pfx___alloc_skb+0x10/0x10 [ 323.229745][T10611] ? netlink_autobind+0xd6/0x2f0 [ 323.234675][T10611] ? netlink_autobind+0x2b0/0x2f0 [ 323.239712][T10611] netlink_sendmsg+0x638/0xcb0 [ 323.244483][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.249771][T10611] ? aa_sock_msg_perm+0x91/0x160 [ 323.254710][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.259992][T10611] __sock_sendmsg+0x221/0x270 [ 323.264674][T10611] ____sys_sendmsg+0x52a/0x7e0 [ 323.269441][T10611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.274836][T10611] __sys_sendmsg+0x292/0x380 [ 323.279427][T10611] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.284539][T10611] ? __pfx_vfs_write+0x10/0x10 [ 323.289316][T10611] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.295649][T10611] ? do_syscall_64+0x100/0x230 [ 323.300416][T10611] ? do_syscall_64+0xb6/0x230 [ 323.305091][T10611] do_syscall_64+0xf3/0x230 [ 323.309585][T10611] ? clear_bhb_loop+0x35/0x90 [ 323.314282][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.320192][T10611] RIP: 0033:0x7f014577dff9 [ 323.324611][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.344232][T10611] RSP: 002b:00007f01464ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.352652][T10611] RAX: ffffffffffffffda RBX: 00007f0145935f80 RCX: 00007f014577dff9 [ 323.360617][T10611] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 323.368599][T10611] RBP: 00007f01464ff090 R08: 0000000000000000 R09: 0000000000000000 [ 323.376563][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.384532][T10611] R13: 0000000000000000 R14: 00007f0145935f80 R15: 00007ffda23df228 [ 323.392526][T10611] [ 323.879332][T10625] syzkaller0: entered promiscuous mode [ 323.898935][T10625] syzkaller0: entered allmulticast mode [ 326.476884][T10670] __nla_validate_parse: 6 callbacks suppressed [ 326.476915][T10670] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1704'. [ 327.042347][T10694] FAULT_INJECTION: forcing a failure. [ 327.042347][T10694] name failslab, interval 1, probability 0, space 0, times 0 [ 327.055418][T10694] CPU: 1 UID: 0 PID: 10694 Comm: syz.2.1715 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 327.065859][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 327.075935][T10694] Call Trace: [ 327.079237][T10694] [ 327.082188][T10694] dump_stack_lvl+0x241/0x360 [ 327.086901][T10694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.092121][T10694] ? __pfx__printk+0x10/0x10 [ 327.096733][T10694] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 327.102740][T10694] ? __pfx___might_resched+0x10/0x10 [ 327.108066][T10694] should_fail_ex+0x3b0/0x4e0 [ 327.112781][T10694] should_failslab+0xac/0x100 [ 327.117481][T10694] ? __alloc_skb+0x1c3/0x440 [ 327.118762][T10691] syzkaller0: entered promiscuous mode [ 327.122082][T10694] kmem_cache_alloc_node_noprof+0x71/0x320 [ 327.133340][T10694] __alloc_skb+0x1c3/0x440 [ 327.133491][T10691] syzkaller0: entered allmulticast mode [ 327.137762][T10694] ? __pfx___alloc_skb+0x10/0x10 [ 327.137790][T10694] ? netlink_autobind+0xd6/0x2f0 [ 327.137807][T10694] ? netlink_autobind+0x2b0/0x2f0 [ 327.137827][T10694] netlink_sendmsg+0x638/0xcb0 [ 327.137860][T10694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.168390][T10694] ? aa_sock_msg_perm+0x91/0x160 [ 327.173356][T10694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.178675][T10694] __sock_sendmsg+0x221/0x270 [ 327.183384][T10694] ____sys_sendmsg+0x52a/0x7e0 [ 327.188192][T10694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.193525][T10694] __sys_sendmsg+0x292/0x380 [ 327.198156][T10694] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.203309][T10694] ? __pfx_vfs_write+0x10/0x10 [ 327.208135][T10694] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.214491][T10694] ? do_syscall_64+0x100/0x230 [ 327.219279][T10694] ? do_syscall_64+0xb6/0x230 [ 327.223982][T10694] do_syscall_64+0xf3/0x230 [ 327.228510][T10694] ? clear_bhb_loop+0x35/0x90 [ 327.233216][T10694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.239137][T10694] RIP: 0033:0x7f955ab7dff9 [ 327.243561][T10694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.263168][T10694] RSP: 002b:00007f955b95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.271600][T10694] RAX: ffffffffffffffda RBX: 00007f955ad35f80 RCX: 00007f955ab7dff9 [ 327.279603][T10694] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 327.287601][T10694] RBP: 00007f955b95b090 R08: 0000000000000000 R09: 0000000000000000 [ 327.295590][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.303578][T10694] R13: 0000000000000000 R14: 00007f955ad35f80 R15: 00007ffe2d6f9718 [ 327.311565][T10694] [ 327.382287][T10703] sctp: [Deprecated]: syz.2.1719 (pid 10703) Use of int in max_burst socket option. [ 327.382287][T10703] Use struct sctp_assoc_value instead [ 327.876266][T10717] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1721'. [ 329.395748][T10701] gretap0: entered promiscuous mode [ 329.402486][T10701] team0: entered promiscuous mode [ 329.410348][T10701] team_slave_0: entered promiscuous mode [ 329.416470][T10701] team_slave_1: entered promiscuous mode [ 329.616596][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 329.666922][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 329.781992][T10741] FAULT_INJECTION: forcing a failure. [ 329.781992][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 329.793063][T10744] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1732'. [ 329.804313][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.2.1730 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 329.814763][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.824851][T10741] Call Trace: [ 329.828146][T10741] [ 329.831075][T10741] dump_stack_lvl+0x241/0x360 [ 329.835760][T10741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.840986][T10741] ? __pfx__printk+0x10/0x10 [ 329.845622][T10741] ? __kmalloc_noprof+0xb0/0x400 [ 329.850598][T10741] ? __pfx___might_resched+0x10/0x10 [ 329.855921][T10741] should_fail_ex+0x3b0/0x4e0 [ 329.860653][T10741] ? fib6_info_alloc+0x2e/0xf0 [ 329.865450][T10741] should_failslab+0xac/0x100 [ 329.870149][T10741] ? fib6_info_alloc+0x2e/0xf0 [ 329.874942][T10741] __kmalloc_noprof+0xd8/0x400 [ 329.879760][T10741] fib6_info_alloc+0x2e/0xf0 [ 329.884358][T10741] ip6_route_info_create+0x445/0x12b0 [ 329.889761][T10741] ip6_route_add+0x28/0x160 [ 329.894289][T10741] inet6_rtm_newroute+0x2ca/0x2310 [ 329.899435][T10741] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 329.905004][T10741] ? __mutex_lock+0x9a1/0xd70 [ 329.909710][T10741] ? __pfx_lock_release+0x10/0x10 [ 329.914739][T10741] ? do_raw_spin_lock+0x14f/0x370 [ 329.919793][T10741] ? do_raw_spin_unlock+0x13c/0x8b0 [ 329.925031][T10741] ? __mutex_lock+0x9ab/0xd70 [ 329.929741][T10741] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 329.935439][T10741] rtnetlink_rcv_msg+0x73f/0xcf0 [ 329.940403][T10741] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 329.945563][T10741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.951038][T10741] ? ref_tracker_free+0x643/0x7e0 [ 329.956091][T10741] netlink_rcv_skb+0x1e3/0x430 [ 329.960964][T10741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 329.966469][T10741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.971875][T10741] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.977095][T10741] netlink_unicast+0x7f6/0x990 [ 329.981909][T10741] ? __pfx_netlink_unicast+0x10/0x10 [ 329.987230][T10741] ? __virt_addr_valid+0x183/0x530 [ 329.992365][T10741] ? __check_object_size+0x48e/0x900 [ 329.997680][T10741] netlink_sendmsg+0x8e4/0xcb0 [ 330.002519][T10741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.007833][T10741] ? aa_sock_msg_perm+0x91/0x160 [ 330.012810][T10741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.018136][T10741] __sock_sendmsg+0x221/0x270 [ 330.022846][T10741] ____sys_sendmsg+0x52a/0x7e0 [ 330.027649][T10741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.032959][T10741] __sys_sendmsg+0x292/0x380 [ 330.037565][T10741] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.042700][T10741] ? __pfx_vfs_write+0x10/0x10 [ 330.047504][T10741] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.053858][T10741] ? do_syscall_64+0x100/0x230 [ 330.058641][T10741] ? do_syscall_64+0xb6/0x230 [ 330.063350][T10741] do_syscall_64+0xf3/0x230 [ 330.067879][T10741] ? clear_bhb_loop+0x35/0x90 [ 330.072575][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.078483][T10741] RIP: 0033:0x7f955ab7dff9 [ 330.082912][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.102608][T10741] RSP: 002b:00007f955b95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.111042][T10741] RAX: ffffffffffffffda RBX: 00007f955ad35f80 RCX: 00007f955ab7dff9 [ 330.119027][T10741] RDX: 0000000010004044 RSI: 00000000200000c0 RDI: 0000000000000006 [ 330.127036][T10741] RBP: 00007f955b95b090 R08: 0000000000000000 R09: 0000000000000000 [ 330.135037][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.143038][T10741] R13: 0000000000000000 R14: 00007f955ad35f80 R15: 00007ffe2d6f9718 [ 330.151039][T10741] [ 330.229534][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'. [ 330.401723][T10754] syzkaller0: entered promiscuous mode [ 330.421148][T10754] syzkaller0: entered allmulticast mode [ 330.733107][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 332.508416][T10792] FAULT_INJECTION: forcing a failure. [ 332.508416][T10792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.559078][T10792] CPU: 1 UID: 0 PID: 10792 Comm: syz.1.1746 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 332.569552][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 332.579630][T10792] Call Trace: [ 332.582928][T10792] [ 332.585869][T10792] dump_stack_lvl+0x241/0x360 [ 332.590577][T10792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.595811][T10792] ? __pfx__printk+0x10/0x10 [ 332.600430][T10792] ? __pfx_lock_release+0x10/0x10 [ 332.605485][T10792] should_fail_ex+0x3b0/0x4e0 [ 332.610208][T10792] _copy_from_iter+0x1ed/0x1d60 [ 332.615078][T10792] ? __virt_addr_valid+0x183/0x530 [ 332.620393][T10792] ? __pfx_lock_release+0x10/0x10 [ 332.625450][T10792] ? __alloc_skb+0x28f/0x440 [ 332.630065][T10792] ? __pfx__copy_from_iter+0x10/0x10 [ 332.635373][T10792] ? __virt_addr_valid+0x183/0x530 [ 332.640505][T10792] ? __virt_addr_valid+0x183/0x530 [ 332.645636][T10792] ? __virt_addr_valid+0x45f/0x530 [ 332.650772][T10792] ? __check_object_size+0x48e/0x900 [ 332.656086][T10792] netlink_sendmsg+0x73d/0xcb0 [ 332.660892][T10792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.666219][T10792] ? aa_sock_msg_perm+0x91/0x160 [ 332.671189][T10792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.676505][T10792] __sock_sendmsg+0x221/0x270 [ 332.681220][T10792] ____sys_sendmsg+0x52a/0x7e0 [ 332.686019][T10792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.691430][T10792] __sys_sendmsg+0x292/0x380 [ 332.696050][T10792] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.701203][T10792] ? __pfx_vfs_write+0x10/0x10 [ 332.706018][T10792] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.712382][T10792] ? do_syscall_64+0x100/0x230 [ 332.717173][T10792] ? do_syscall_64+0xb6/0x230 [ 332.721872][T10792] do_syscall_64+0xf3/0x230 [ 332.726402][T10792] ? clear_bhb_loop+0x35/0x90 [ 332.731098][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.737014][T10792] RIP: 0033:0x7f90ec17dff9 [ 332.741446][T10792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.761073][T10792] RSP: 002b:00007f90ed020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.769491][T10792] RAX: ffffffffffffffda RBX: 00007f90ec335f80 RCX: 00007f90ec17dff9 [ 332.777460][T10792] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 332.785431][T10792] RBP: 00007f90ed020090 R08: 0000000000000000 R09: 0000000000000000 [ 332.793405][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.801378][T10792] R13: 0000000000000000 R14: 00007f90ec335f80 R15: 00007ffd69b9e8f8 [ 332.809358][T10792] [ 333.207029][T10803] openvswitch: netlink: Actions may not be safe on all matching packets [ 333.222254][T10803] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1750'. [ 333.468405][T10807] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1752'. [ 333.502326][T10809] sctp: [Deprecated]: syz.2.1753 (pid 10809) Use of int in max_burst socket option. [ 333.502326][T10809] Use struct sctp_assoc_value instead [ 333.764264][T10829] ip6gretap0: entered promiscuous mode [ 333.841075][T10832] nftables ruleset with unbound chain [ 336.477226][T10829] ip6gretap0: left promiscuous mode [ 336.587011][T10833] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1758'. [ 336.634007][T10844] gretap1: entered promiscuous mode [ 337.557266][T10882] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 337.632893][T10882] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.650875][T10888] sctp: [Deprecated]: syz.2.1771 (pid 10888) Use of int in max_burst socket option. [ 337.650875][T10888] Use struct sctp_assoc_value instead [ 337.653763][T10882] bond0: (slave team0): Enslaving as an active interface with an up link [ 337.685833][T10886] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 337.800645][T10894] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1770'. [ 337.813758][T10886] bond0: (slave team0): Releasing backup interface [ 338.213938][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1780'. [ 338.238066][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 338.577993][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 338.614566][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 338.638998][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 339.390814][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 339.429621][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 339.481042][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 339.493953][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 339.611088][T10986] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1801'. [ 340.175044][T11022] FAULT_INJECTION: forcing a failure. [ 340.175044][T11022] name failslab, interval 1, probability 0, space 0, times 0 [ 340.209682][T11022] CPU: 1 UID: 0 PID: 11022 Comm: syz.4.1812 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 340.220343][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.230620][T11022] Call Trace: [ 340.233932][T11022] [ 340.236886][T11022] dump_stack_lvl+0x241/0x360 [ 340.241603][T11022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.246844][T11022] ? __pfx__printk+0x10/0x10 [ 340.251998][T11022] ? __kmalloc_noprof+0xb0/0x400 [ 340.256971][T11022] ? __pfx___might_resched+0x10/0x10 [ 340.262279][T11022] should_fail_ex+0x3b0/0x4e0 [ 340.266969][T11022] ? fib6_info_alloc+0x2e/0xf0 [ 340.271748][T11022] should_failslab+0xac/0x100 [ 340.276435][T11022] ? fib6_info_alloc+0x2e/0xf0 [ 340.281228][T11022] __kmalloc_noprof+0xd8/0x400 [ 340.286043][T11022] fib6_info_alloc+0x2e/0xf0 [ 340.290677][T11022] ip6_route_info_create+0x445/0x12b0 [ 340.296440][T11022] ip6_route_add+0x28/0x160 [ 340.301142][T11022] inet6_rtm_newroute+0x2ca/0x2310 [ 340.306271][T11022] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 340.311907][T11022] ? __mutex_trylock_common+0x183/0x2e0 [ 340.317449][T11022] ? __pfx___might_resched+0x10/0x10 [ 340.322758][T11022] ? __pfx___mutex_trylock_common+0x10/0x10 [ 340.328671][T11022] ? rcu_is_watching+0x15/0xb0 [ 340.333442][T11022] ? trace_contention_end+0x3c/0x120 [ 340.338730][T11022] ? __mutex_lock+0x2ef/0xd70 [ 340.343423][T11022] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 340.349063][T11022] rtnetlink_rcv_msg+0x73f/0xcf0 [ 340.354003][T11022] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 340.359218][T11022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.364710][T11022] ? ref_tracker_free+0x643/0x7e0 [ 340.369758][T11022] netlink_rcv_skb+0x1e3/0x430 [ 340.374539][T11022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.380003][T11022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.385305][T11022] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.390539][T11022] netlink_unicast+0x7f6/0x990 [ 340.395325][T11022] ? __pfx_netlink_unicast+0x10/0x10 [ 340.400615][T11022] ? __virt_addr_valid+0x183/0x530 [ 340.405731][T11022] ? __check_object_size+0x48e/0x900 [ 340.411018][T11022] netlink_sendmsg+0x8e4/0xcb0 [ 340.415791][T11022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.421163][T11022] ? aa_sock_msg_perm+0x91/0x160 [ 340.426098][T11022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.431388][T11022] __sock_sendmsg+0x221/0x270 [ 340.436066][T11022] ____sys_sendmsg+0x52a/0x7e0 [ 340.440830][T11022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.446119][T11022] __sys_sendmsg+0x292/0x380 [ 340.450754][T11022] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.455886][T11022] ? __pfx_vfs_write+0x10/0x10 [ 340.460769][T11022] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.467106][T11022] ? do_syscall_64+0x100/0x230 [ 340.471871][T11022] ? do_syscall_64+0xb6/0x230 [ 340.476543][T11022] do_syscall_64+0xf3/0x230 [ 340.481037][T11022] ? clear_bhb_loop+0x35/0x90 [ 340.485709][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.491602][T11022] RIP: 0033:0x7f75f837dff9 [ 340.496101][T11022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.515711][T11022] RSP: 002b:00007f75f90ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.524130][T11022] RAX: ffffffffffffffda RBX: 00007f75f8535f80 RCX: 00007f75f837dff9 [ 340.532106][T11022] RDX: 0000000010004044 RSI: 00000000200000c0 RDI: 0000000000000006 [ 340.540072][T11022] RBP: 00007f75f90ae090 R08: 0000000000000000 R09: 0000000000000000 [ 340.548038][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.556005][T11022] R13: 0000000000000000 R14: 00007f75f8535f80 R15: 00007fffda4d52c8 [ 340.563986][T11022] [ 340.603984][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'. [ 340.991154][T11050] xt_bpf: check failed: parse error [ 341.058649][T11052] bond0: (slave bond_slave_0): Releasing backup interface [ 341.139454][T11052] bond0: (slave bond_slave_1): Releasing backup interface [ 341.230616][T11052] team0: Port device team_slave_0 removed [ 341.276131][T11052] team0: Port device team_slave_1 removed [ 341.294558][T11052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.312827][T11052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.335477][T11052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.372876][T11052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.448282][T11059] veth1_to_team: entered promiscuous mode [ 341.490352][T11059] team0: Port device veth1_to_team added [ 342.063955][T11097] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 342.201188][T11105] FAULT_INJECTION: forcing a failure. [ 342.201188][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 342.220788][T11105] CPU: 1 UID: 0 PID: 11105 Comm: syz.3.1838 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 342.231240][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.241328][T11105] Call Trace: [ 342.244626][T11105] [ 342.247582][T11105] dump_stack_lvl+0x241/0x360 [ 342.252286][T11105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.257588][T11105] ? __pfx__printk+0x10/0x10 [ 342.262294][T11105] ? __kmalloc_noprof+0xb0/0x400 [ 342.267257][T11105] ? __pfx___might_resched+0x10/0x10 [ 342.272566][T11105] should_fail_ex+0x3b0/0x4e0 [ 342.277265][T11105] ? fib6_info_alloc+0x2e/0xf0 [ 342.282126][T11105] should_failslab+0xac/0x100 [ 342.286811][T11105] ? fib6_info_alloc+0x2e/0xf0 [ 342.291603][T11105] __kmalloc_noprof+0xd8/0x400 [ 342.296394][T11105] fib6_info_alloc+0x2e/0xf0 [ 342.301020][T11105] ip6_route_info_create+0x445/0x12b0 [ 342.306431][T11105] ip6_route_add+0x28/0x160 [ 342.310976][T11105] inet6_rtm_newroute+0x2ca/0x2310 [ 342.316148][T11105] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 342.321815][T11105] ? __mutex_lock+0x9a1/0xd70 [ 342.326520][T11105] ? __pfx_lock_release+0x10/0x10 [ 342.331570][T11105] ? do_raw_spin_lock+0x14f/0x370 [ 342.336632][T11105] ? do_raw_spin_unlock+0x13c/0x8b0 [ 342.341872][T11105] ? __mutex_lock+0x9ab/0xd70 [ 342.346687][T11105] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 342.352270][T11105] rtnetlink_rcv_msg+0x73f/0xcf0 [ 342.357231][T11105] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 342.362390][T11105] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.367972][T11105] ? ref_tracker_free+0x643/0x7e0 [ 342.373018][T11105] netlink_rcv_skb+0x1e3/0x430 [ 342.377798][T11105] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.383276][T11105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.388581][T11105] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.393793][T11105] netlink_unicast+0x7f6/0x990 [ 342.398586][T11105] ? __pfx_netlink_unicast+0x10/0x10 [ 342.403904][T11105] ? __virt_addr_valid+0x183/0x530 [ 342.409037][T11105] ? __check_object_size+0x48e/0x900 [ 342.414352][T11105] netlink_sendmsg+0x8e4/0xcb0 [ 342.419166][T11105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.424589][T11105] ? aa_sock_msg_perm+0x91/0x160 [ 342.429529][T11105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.434837][T11105] __sock_sendmsg+0x221/0x270 [ 342.439561][T11105] ____sys_sendmsg+0x52a/0x7e0 [ 342.444364][T11105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.449698][T11105] __sys_sendmsg+0x292/0x380 [ 342.454315][T11105] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.459445][T11105] ? __pfx_vfs_write+0x10/0x10 [ 342.464251][T11105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.470590][T11105] ? do_syscall_64+0x100/0x230 [ 342.475379][T11105] ? do_syscall_64+0xb6/0x230 [ 342.480097][T11105] do_syscall_64+0xf3/0x230 [ 342.484633][T11105] ? clear_bhb_loop+0x35/0x90 [ 342.489445][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.495388][T11105] RIP: 0033:0x7ff8b1d7dff9 [ 342.499839][T11105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.519653][T11105] RSP: 002b:00007ff8b2ad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.528090][T11105] RAX: ffffffffffffffda RBX: 00007ff8b1f35f80 RCX: 00007ff8b1d7dff9 [ 342.536101][T11105] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 342.544094][T11105] RBP: 00007ff8b2ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.552169][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.560164][T11105] R13: 0000000000000000 R14: 00007ff8b1f35f80 R15: 00007ffe3dc1bd98 [ 342.568197][T11105] [ 343.290744][T11139] syzkaller0: refused to change device tx_queue_len [ 343.565118][T11158] __nla_validate_parse: 5 callbacks suppressed [ 343.565139][T11158] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1857'. [ 343.607033][T11158] dvmrp8: entered allmulticast mode [ 343.635105][T11158] dvmrp8: left allmulticast mode [ 343.708538][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1857'. [ 343.836851][T11175] netlink: 'syz.1.1863': attribute type 3 has an invalid length. [ 343.844635][T11175] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1863'. [ 343.923265][T11175] sctp: [Deprecated]: syz.1.1863 (pid 11175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.923265][T11175] Use struct sctp_sack_info instead [ 343.972964][T11180] sctp: [Deprecated]: syz.4.1865 (pid 11180) Use of int in max_burst socket option. [ 343.972964][T11180] Use struct sctp_assoc_value instead [ 344.350538][T11183] syzkaller0: refused to change device tx_queue_len [ 344.818685][T11222] netlink: 'syz.4.1876': attribute type 4 has an invalid length. [ 344.877902][T11222] netlink: 'syz.4.1876': attribute type 4 has an invalid length. [ 345.045150][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 345.222896][T11249] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 346.242759][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 346.486978][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 346.524881][T11291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1903'. [ 346.807856][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 346.839760][T11308] FAULT_INJECTION: forcing a failure. [ 346.839760][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 346.890088][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.4.1909 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 346.900559][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.910641][T11308] Call Trace: [ 346.913948][T11308] [ 346.916988][T11308] dump_stack_lvl+0x241/0x360 [ 346.921714][T11308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.927028][T11308] ? __pfx__printk+0x10/0x10 [ 346.931630][T11308] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 346.937622][T11308] ? __pfx___might_resched+0x10/0x10 [ 346.942912][T11308] should_fail_ex+0x3b0/0x4e0 [ 346.947600][T11308] should_failslab+0xac/0x100 [ 346.952278][T11308] ? __alloc_skb+0x1c3/0x440 [ 346.956875][T11308] kmem_cache_alloc_node_noprof+0x71/0x320 [ 346.962683][T11308] __alloc_skb+0x1c3/0x440 [ 346.967106][T11308] ? __pfx___alloc_skb+0x10/0x10 [ 346.972047][T11308] ? netlink_ack_tlv_len+0x6e/0x200 [ 346.977259][T11308] netlink_ack+0x13f/0xa30 [ 346.981683][T11308] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.987163][T11308] netlink_rcv_skb+0x262/0x430 [ 346.992100][T11308] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.997558][T11308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.002859][T11308] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.008057][T11308] netlink_unicast+0x7f6/0x990 [ 347.012824][T11308] ? __pfx_netlink_unicast+0x10/0x10 [ 347.018102][T11308] ? __virt_addr_valid+0x183/0x530 [ 347.023208][T11308] ? __check_object_size+0x48e/0x900 [ 347.028494][T11308] netlink_sendmsg+0x8e4/0xcb0 [ 347.033263][T11308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.038550][T11308] ? aa_sock_msg_perm+0x91/0x160 [ 347.043482][T11308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.048776][T11308] __sock_sendmsg+0x221/0x270 [ 347.053470][T11308] ____sys_sendmsg+0x52a/0x7e0 [ 347.058334][T11308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.063634][T11308] __sys_sendmsg+0x292/0x380 [ 347.068246][T11308] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.073363][T11308] ? __pfx_vfs_write+0x10/0x10 [ 347.078235][T11308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.084562][T11308] ? do_syscall_64+0x100/0x230 [ 347.089322][T11308] ? do_syscall_64+0xb6/0x230 [ 347.093994][T11308] do_syscall_64+0xf3/0x230 [ 347.098493][T11308] ? clear_bhb_loop+0x35/0x90 [ 347.103166][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.109061][T11308] RIP: 0033:0x7f75f837dff9 [ 347.113489][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.133096][T11308] RSP: 002b:00007f75f90ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.141543][T11308] RAX: ffffffffffffffda RBX: 00007f75f8535f80 RCX: 00007f75f837dff9 [ 347.149535][T11308] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 347.157516][T11308] RBP: 00007f75f90ae090 R08: 0000000000000000 R09: 0000000000000000 [ 347.165491][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.173473][T11308] R13: 0000000000000000 R14: 00007f75f8535f80 R15: 00007fffda4d52c8 [ 347.181455][T11308] [ 347.469808][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 347.530285][T11337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1919'. [ 347.647669][T11343] xt_l2tp: v2 doesn't support IP mode [ 348.658051][T11378] __nla_validate_parse: 1 callbacks suppressed [ 348.658072][T11378] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1932'. [ 348.706741][T11380] netlink: 'syz.0.1934': attribute type 3 has an invalid length. [ 348.714549][T11380] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1934'. [ 348.919614][T11388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1936'. [ 349.011922][T11390] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 349.922370][T11396] vlan0: entered promiscuous mode [ 349.967932][T11396] bond0: entered promiscuous mode [ 349.991986][T11396] bond_slave_0: entered promiscuous mode [ 350.007034][T11396] bond_slave_1: entered promiscuous mode [ 350.033867][T11396] bond0: left promiscuous mode [ 350.045355][T11396] bond_slave_0: left promiscuous mode [ 350.055500][T11396] bond_slave_1: left promiscuous mode [ 350.120582][T11404] tun0: tun_chr_ioctl cmd 1074025680 [ 350.230998][T11422] netlink: 'syz.3.1946': attribute type 3 has an invalid length. [ 350.246889][T11422] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1946'. [ 350.401386][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 350.415324][T11434] tipc: Started in network mode [ 350.433878][T11434] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 350.456668][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 350.467009][T11434] tipc: Enabling of bearer rejected, failed to enable media [ 350.610445][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1956'. [ 350.723294][T11440] delete_channel: no stack [ 350.790360][T11455] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1958'. [ 351.255743][T11481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1968'. [ 351.276273][T11484] FAULT_INJECTION: forcing a failure. [ 351.276273][T11484] name failslab, interval 1, probability 0, space 0, times 0 [ 351.304384][T11484] CPU: 1 UID: 0 PID: 11484 Comm: syz.0.1969 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 351.314863][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 351.324945][T11484] Call Trace: [ 351.328331][T11484] [ 351.331282][T11484] dump_stack_lvl+0x241/0x360 [ 351.335999][T11484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.341236][T11484] ? __pfx__printk+0x10/0x10 [ 351.345863][T11484] ? ref_tracker_alloc+0x332/0x490 [ 351.351002][T11484] should_fail_ex+0x3b0/0x4e0 [ 351.355689][T11484] ? skb_clone+0x20c/0x390 [ 351.360102][T11484] should_failslab+0xac/0x100 [ 351.364802][T11484] ? skb_clone+0x20c/0x390 [ 351.369238][T11484] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 351.374632][T11484] skb_clone+0x20c/0x390 [ 351.378882][T11484] __netlink_deliver_tap+0x3cc/0x7c0 [ 351.384194][T11484] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.389394][T11484] netlink_deliver_tap+0x19d/0x1b0 [ 351.394507][T11484] netlink_unicast+0x7c4/0x990 [ 351.399277][T11484] ? __pfx_netlink_unicast+0x10/0x10 [ 351.404559][T11484] ? __virt_addr_valid+0x183/0x530 [ 351.409672][T11484] ? __check_object_size+0x48e/0x900 [ 351.414955][T11484] netlink_sendmsg+0x8e4/0xcb0 [ 351.419734][T11484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.425022][T11484] ? aa_sock_msg_perm+0x91/0x160 [ 351.429962][T11484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.435268][T11484] __sock_sendmsg+0x221/0x270 [ 351.440053][T11484] ____sys_sendmsg+0x52a/0x7e0 [ 351.444836][T11484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.450137][T11484] __sys_sendmsg+0x292/0x380 [ 351.454734][T11484] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.459857][T11484] ? __pfx_vfs_write+0x10/0x10 [ 351.464817][T11484] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.471143][T11484] ? do_syscall_64+0x100/0x230 [ 351.475902][T11484] ? do_syscall_64+0xb6/0x230 [ 351.480571][T11484] do_syscall_64+0xf3/0x230 [ 351.485067][T11484] ? clear_bhb_loop+0x35/0x90 [ 351.489737][T11484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.495627][T11484] RIP: 0033:0x7f014577dff9 [ 351.500039][T11484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.519641][T11484] RSP: 002b:00007f01464ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.528158][T11484] RAX: ffffffffffffffda RBX: 00007f0145935f80 RCX: 00007f014577dff9 [ 351.536127][T11484] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 351.544091][T11484] RBP: 00007f01464ff090 R08: 0000000000000000 R09: 0000000000000000 [ 351.552076][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.560054][T11484] R13: 0000000000000000 R14: 00007f0145935f80 R15: 00007ffda23df228 [ 351.568036][T11484] [ 351.625932][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 351.767409][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1972'. [ 351.887296][T11501] xt_NFQUEUE: number of total queues is 0 [ 352.296209][T11525] batadv0: entered promiscuous mode [ 352.321865][T11525] macvtap1: entered promiscuous mode [ 352.337068][T11525] macvtap1: entered allmulticast mode [ 352.342505][T11525] batadv0: entered allmulticast mode [ 352.381115][T11525] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 352.678211][T11546] netlink: 'syz.3.1991': attribute type 21 has an invalid length. [ 352.703020][T11546] netlink: 'syz.3.1991': attribute type 5 has an invalid length. [ 353.005065][T11569] nbd: must specify at least one socket [ 353.519119][T11602] netlink: 'syz.1.2012': attribute type 1 has an invalid length. [ 353.602941][T11602] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 353.636820][T11602] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 353.681885][T11602] bond2: (slave ip6gre1): making interface the new active one [ 353.698901][T11602] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 353.981933][T11625] FAULT_INJECTION: forcing a failure. [ 353.981933][T11625] name failslab, interval 1, probability 0, space 0, times 0 [ 354.047657][T11625] CPU: 0 UID: 0 PID: 11625 Comm: syz.4.2016 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 354.056941][T11627] __nla_validate_parse: 8 callbacks suppressed [ 354.056968][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 354.058199][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.058216][T11625] Call Trace: [ 354.058224][T11625] [ 354.058234][T11625] dump_stack_lvl+0x241/0x360 [ 354.094721][T11625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.099957][T11625] ? __pfx__printk+0x10/0x10 [ 354.104580][T11625] ? __kmalloc_noprof+0xb0/0x400 [ 354.109551][T11625] ? __pfx___might_resched+0x10/0x10 [ 354.114869][T11625] ? __mutex_lock+0x2ef/0xd70 [ 354.119580][T11625] should_fail_ex+0x3b0/0x4e0 [ 354.124293][T11625] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 354.130560][T11625] should_failslab+0xac/0x100 [ 354.135275][T11625] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 354.141545][T11625] __kmalloc_noprof+0xd8/0x400 [ 354.146332][T11625] ? __asan_memcpy+0x40/0x70 [ 354.150957][T11625] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 354.157055][T11625] genl_rcv_msg+0x802/0xec0 [ 354.161580][T11625] ? mark_lock+0x9a/0x360 [ 354.165944][T11625] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.171017][T11625] ? __pfx_lock_acquire+0x10/0x10 [ 354.176072][T11625] ? __pfx_ctrl_getfamily+0x10/0x10 [ 354.181394][T11625] ? __pfx___might_resched+0x10/0x10 [ 354.186724][T11625] netlink_rcv_skb+0x1e3/0x430 [ 354.191524][T11625] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.196755][T11625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.202099][T11625] genl_rcv+0x28/0x40 [ 354.206104][T11625] netlink_unicast+0x7f6/0x990 [ 354.210905][T11625] ? __pfx_netlink_unicast+0x10/0x10 [ 354.216217][T11625] ? __virt_addr_valid+0x183/0x530 [ 354.221356][T11625] ? __check_object_size+0x48e/0x900 [ 354.226670][T11625] netlink_sendmsg+0x8e4/0xcb0 [ 354.231477][T11625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.236791][T11625] ? aa_sock_msg_perm+0x91/0x160 [ 354.241754][T11625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.247062][T11625] __sock_sendmsg+0x221/0x270 [ 354.251768][T11625] __sys_sendto+0x39b/0x4f0 [ 354.256302][T11625] ? __pfx___sys_sendto+0x10/0x10 [ 354.261349][T11625] ? __mutex_unlock_slowpath+0x21d/0x750 [ 354.267033][T11625] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.273043][T11625] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.279406][T11625] __x64_sys_sendto+0xde/0x100 [ 354.284207][T11625] do_syscall_64+0xf3/0x230 [ 354.288733][T11625] ? clear_bhb_loop+0x35/0x90 [ 354.293433][T11625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.299356][T11625] RIP: 0033:0x7f75f837fe8c [ 354.303798][T11625] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 354.323608][T11625] RSP: 002b:00007f75f90acec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.332065][T11625] RAX: ffffffffffffffda RBX: 00007f75f90acfc0 RCX: 00007f75f837fe8c [ 354.340066][T11625] RDX: 0000000000000028 RSI: 00007f75f90ad010 RDI: 0000000000000004 [ 354.348155][T11625] RBP: 0000000000000000 R08: 00007f75f90acf14 R09: 000000000000000c [ 354.356152][T11625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 354.364151][T11625] R13: 00007f75f90acf68 R14: 00007f75f90ad010 R15: 0000000000000000 [ 354.372173][T11625] [ 354.531137][T11637] netlink: 'syz.4.2020': attribute type 24 has an invalid length. [ 354.987905][T11659] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 355.027951][T11659] bond0: (slave bond_slave_0): Releasing backup interface [ 355.229900][T11675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2034'. [ 355.260690][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 356.321707][T11717] netlink: 'syz.3.2043': attribute type 3 has an invalid length. [ 356.330392][T11717] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2043'. [ 356.715667][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 356.788451][T11737] FAULT_INJECTION: forcing a failure. [ 356.788451][T11737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.802674][T11737] CPU: 1 UID: 0 PID: 11737 Comm: syz.3.2050 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 356.813215][T11737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.823421][T11737] Call Trace: [ 356.826702][T11737] [ 356.829625][T11737] dump_stack_lvl+0x241/0x360 [ 356.834310][T11737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.839509][T11737] ? __pfx__printk+0x10/0x10 [ 356.844098][T11737] ? __schedule+0x189d/0x4b30 [ 356.848783][T11737] should_fail_ex+0x3b0/0x4e0 [ 356.853461][T11737] _copy_from_user+0x2f/0xe0 [ 356.858054][T11737] move_addr_to_kernel+0x82/0x150 [ 356.863080][T11737] __sys_connect+0xc1/0x300 [ 356.867582][T11737] ? __pfx___sys_connect+0x10/0x10 [ 356.872700][T11737] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.880510][T11737] ? do_syscall_64+0x100/0x230 [ 356.885285][T11737] __x64_sys_connect+0x7a/0x90 [ 356.890058][T11737] do_syscall_64+0xf3/0x230 [ 356.894657][T11737] ? clear_bhb_loop+0x35/0x90 [ 356.899336][T11737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.905232][T11737] RIP: 0033:0x7ff8b1d7dff9 [ 356.909659][T11737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.929697][T11737] RSP: 002b:00007ff8b2ad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 356.938113][T11737] RAX: ffffffffffffffda RBX: 00007ff8b1f35f80 RCX: 00007ff8b1d7dff9 [ 356.946082][T11737] RDX: 0000000000000048 RSI: 0000000020000300 RDI: 0000000000000005 [ 356.954050][T11737] RBP: 00007ff8b2ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.962017][T11737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.970073][T11737] R13: 0000000000000000 R14: 00007ff8b1f35f80 R15: 00007ffe3dc1bd98 [ 356.978143][T11737] [ 357.020052][T11738] netlink: 'syz.4.2049': attribute type 2 has an invalid length. [ 357.248683][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'. [ 357.470925][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 358.289335][T11820] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2066'. [ 358.524525][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 358.576195][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 358.604346][T11837] batadv0: entered promiscuous mode [ 358.613809][T11837] macvtap1: entered promiscuous mode [ 358.623465][T11837] macvtap1: entered allmulticast mode [ 358.632658][T11837] batadv0: entered allmulticast mode [ 358.649783][T11837] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 358.939680][T11861] FAULT_INJECTION: forcing a failure. [ 358.939680][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.999250][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.0.2077 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 359.009729][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.019817][T11861] Call Trace: [ 359.023119][T11861] [ 359.026046][T11861] dump_stack_lvl+0x241/0x360 [ 359.030732][T11861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.036018][T11861] ? __pfx__printk+0x10/0x10 [ 359.040608][T11861] ? snprintf+0xda/0x120 [ 359.044845][T11861] should_fail_ex+0x3b0/0x4e0 [ 359.049532][T11861] _copy_to_user+0x2f/0xb0 [ 359.053974][T11861] simple_read_from_buffer+0xca/0x150 [ 359.059390][T11861] proc_fail_nth_read+0x1e9/0x250 [ 359.064451][T11861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.070041][T11861] ? rw_verify_area+0x55e/0x6f0 [ 359.074921][T11861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.080512][T11861] vfs_read+0x201/0xbc0 [ 359.084710][T11861] ? __pfx_lock_release+0x10/0x10 [ 359.089775][T11861] ? __pfx_vfs_read+0x10/0x10 [ 359.094491][T11861] ? __fget_files+0x3f3/0x470 [ 359.099202][T11861] ? fdget_pos+0x24e/0x320 [ 359.103650][T11861] ksys_read+0x183/0x2b0 [ 359.107930][T11861] ? __pfx_ksys_read+0x10/0x10 [ 359.112730][T11861] ? do_syscall_64+0x100/0x230 [ 359.117527][T11861] ? do_syscall_64+0xb6/0x230 [ 359.122238][T11861] do_syscall_64+0xf3/0x230 [ 359.126767][T11861] ? clear_bhb_loop+0x35/0x90 [ 359.131470][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.137397][T11861] RIP: 0033:0x7f014577ca3c [ 359.142971][T11861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 359.162610][T11861] RSP: 002b:00007f01464de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.171056][T11861] RAX: ffffffffffffffda RBX: 00007f0145936058 RCX: 00007f014577ca3c [ 359.179055][T11861] RDX: 000000000000000f RSI: 00007f01464de0a0 RDI: 0000000000000003 [ 359.187055][T11861] RBP: 00007f01464de090 R08: 0000000000000000 R09: 0000000000000000 [ 359.195051][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.203129][T11861] R13: 0000000000000001 R14: 00007f0145936058 R15: 00007ffda23df228 [ 359.211145][T11861] [ 359.239380][T11870] __nla_validate_parse: 2 callbacks suppressed [ 359.239399][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2081'. [ 359.263659][T11870] bridge5: port 1(bridge_slave_1) entered blocking state [ 359.271715][T11870] bridge5: port 1(bridge_slave_1) entered disabled state [ 359.279714][T11870] bridge_slave_1: entered allmulticast mode [ 359.287916][T11870] bridge_slave_1: entered promiscuous mode [ 359.532713][T11887] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2087'. [ 359.728791][T11893] netlink: 'syz.0.2090': attribute type 4 has an invalid length. [ 359.794845][T11893] netlink: 'syz.0.2090': attribute type 2 has an invalid length. [ 359.826005][T11897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.004159][T11907] syz_tun (unregistering): left promiscuous mode [ 360.023391][T11903] ip6gre0: entered allmulticast mode [ 360.030470][T11904] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.2093'. [ 360.053741][T11908] netlink: 'syz.4.2093': attribute type 10 has an invalid length. [ 360.082588][T11904] netlink: 'syz.4.2093': attribute type 3 has an invalid length. [ 360.103953][T11904] netlink: 105 bytes leftover after parsing attributes in process `syz.4.2093'. [ 360.296337][T11923] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.337688][T11926] FAULT_INJECTION: forcing a failure. [ 360.337688][T11926] name failslab, interval 1, probability 0, space 0, times 0 [ 360.374396][T11926] CPU: 0 UID: 0 PID: 11926 Comm: syz.1.2100 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 360.384889][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.394963][T11926] Call Trace: [ 360.398269][T11926] [ 360.401225][T11926] dump_stack_lvl+0x241/0x360 [ 360.405941][T11926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.411178][T11926] ? __pfx__printk+0x10/0x10 [ 360.415819][T11926] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 360.422112][T11926] ? __pfx___might_resched+0x10/0x10 [ 360.427445][T11926] should_fail_ex+0x3b0/0x4e0 [ 360.432165][T11926] should_failslab+0xac/0x100 [ 360.436873][T11926] ? __alloc_skb+0x1c3/0x440 [ 360.441497][T11926] kmem_cache_alloc_node_noprof+0x71/0x320 [ 360.447335][T11926] ? idr_get_next+0x3c6/0x4a0 [ 360.452044][T11926] __alloc_skb+0x1c3/0x440 [ 360.456502][T11926] ? __pfx___alloc_skb+0x10/0x10 [ 360.461491][T11926] ctrl_getfamily+0x48c/0x6b0 [ 360.466204][T11926] ? __pfx_ctrl_getfamily+0x10/0x10 [ 360.471435][T11926] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 360.477799][T11926] genl_rcv_msg+0xb14/0xec0 [ 360.482326][T11926] ? mark_lock+0x9a/0x360 [ 360.486777][T11926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.491855][T11926] ? __pfx_lock_acquire+0x10/0x10 [ 360.496902][T11926] ? __pfx_ctrl_getfamily+0x10/0x10 [ 360.502188][T11926] ? __pfx___might_resched+0x10/0x10 [ 360.507495][T11926] netlink_rcv_skb+0x1e3/0x430 [ 360.512394][T11926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.517432][T11926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.522746][T11926] genl_rcv+0x28/0x40 [ 360.526732][T11926] netlink_unicast+0x7f6/0x990 [ 360.531537][T11926] ? __pfx_netlink_unicast+0x10/0x10 [ 360.536834][T11926] ? __virt_addr_valid+0x183/0x530 [ 360.541938][T11926] ? __check_object_size+0x48e/0x900 [ 360.547229][T11926] netlink_sendmsg+0x8e4/0xcb0 [ 360.551998][T11926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.557288][T11926] ? aa_sock_msg_perm+0x91/0x160 [ 360.562219][T11926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.567515][T11926] __sock_sendmsg+0x221/0x270 [ 360.572193][T11926] __sys_sendto+0x39b/0x4f0 [ 360.576715][T11926] ? __pfx___sys_sendto+0x10/0x10 [ 360.581752][T11926] ? __mutex_unlock_slowpath+0x21d/0x750 [ 360.587390][T11926] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.593365][T11926] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.599689][T11926] __x64_sys_sendto+0xde/0x100 [ 360.604452][T11926] do_syscall_64+0xf3/0x230 [ 360.608964][T11926] ? clear_bhb_loop+0x35/0x90 [ 360.613633][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.619539][T11926] RIP: 0033:0x7f90ec17fe8c [ 360.623975][T11926] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 360.643596][T11926] RSP: 002b:00007f90ed01eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 360.652007][T11926] RAX: ffffffffffffffda RBX: 00007f90ed01efc0 RCX: 00007f90ec17fe8c [ 360.659972][T11926] RDX: 0000000000000028 RSI: 00007f90ed01f010 RDI: 0000000000000004 [ 360.667943][T11926] RBP: 0000000000000000 R08: 00007f90ed01ef14 R09: 000000000000000c [ 360.675906][T11926] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 360.683873][T11926] R13: 00007f90ed01ef68 R14: 00007f90ed01f010 R15: 0000000000000000 [ 360.691861][T11926] [ 361.369231][T11967] netlink: 5424 bytes leftover after parsing attributes in process `syz.4.2119'. [ 361.397077][T11967] netlink: 5424 bytes leftover after parsing attributes in process `syz.4.2119'. [ 361.410626][T11974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2121'. [ 361.903777][T12004] openvswitch: netlink: Key type 117 is out of range max 32 [ 362.027341][T12006] netlink: 'syz.2.2130': attribute type 3 has an invalid length. [ 362.045430][T12006] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2130'. [ 362.092724][T12008] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2131'. [ 362.187674][T12011] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2132'. [ 362.562575][T12031] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 362.576210][T12031] netlink: 'syz.4.2138': attribute type 1 has an invalid length. [ 362.776249][T12039] syzkaller0: entered promiscuous mode [ 362.796336][T12039] syzkaller0: entered allmulticast mode [ 365.205124][T12057] __nla_validate_parse: 3 callbacks suppressed [ 365.205145][T12057] netlink: 636 bytes leftover after parsing attributes in process `syz.3.2147'. [ 365.237255][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2147'. [ 365.271996][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2147'. [ 365.313395][T12057] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2147'. [ 365.321306][T12074] FAULT_INJECTION: forcing a failure. [ 365.321306][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 365.381458][T12074] CPU: 1 UID: 0 PID: 12074 Comm: syz.2.2151 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 365.392384][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 365.402562][T12074] Call Trace: [ 365.405861][T12074] [ 365.408819][T12074] dump_stack_lvl+0x241/0x360 [ 365.413548][T12074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.418800][T12074] ? __pfx__printk+0x10/0x10 [ 365.423460][T12074] should_fail_ex+0x3b0/0x4e0 [ 365.428282][T12074] should_failslab+0xac/0x100 [ 365.433034][T12074] ? __alloc_skb+0x1c3/0x440 [ 365.437664][T12074] kmem_cache_alloc_node_noprof+0x71/0x320 [ 365.443688][T12074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.449874][T12074] __alloc_skb+0x1c3/0x440 [ 365.454481][T12074] ? __pfx___alloc_skb+0x10/0x10 [ 365.459641][T12074] ? __local_bh_enable_ip+0x168/0x200 [ 365.465193][T12074] ? nr_connect+0x627/0xe10 [ 365.469753][T12074] nr_write_internal+0xd6/0xd30 [ 365.474743][T12074] nr_establish_data_link+0x62/0xb0 [ 365.480097][T12074] nr_connect+0x6cc/0xe10 [ 365.484821][T12074] ? __pfx_nr_connect+0x10/0x10 [ 365.489797][T12074] ? __pfx_aa_sk_perm+0x10/0x10 [ 365.494821][T12074] ? __might_fault+0xaa/0x120 [ 365.499721][T12074] ? __might_fault+0xc6/0x120 [ 365.504541][T12074] ? __pfx_nr_connect+0x10/0x10 [ 365.509442][T12074] __sys_connect+0x2d1/0x300 [ 365.514249][T12074] ? __pfx___sys_connect+0x10/0x10 [ 365.519498][T12074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.526304][T12074] ? do_syscall_64+0x100/0x230 [ 365.531216][T12074] __x64_sys_connect+0x7a/0x90 [ 365.536046][T12074] do_syscall_64+0xf3/0x230 [ 365.540677][T12074] ? clear_bhb_loop+0x35/0x90 [ 365.545394][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.551616][T12074] RIP: 0033:0x7f955ab7dff9 [ 365.556160][T12074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.576692][T12074] RSP: 002b:00007f955b95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 365.585359][T12074] RAX: ffffffffffffffda RBX: 00007f955ad35f80 RCX: 00007f955ab7dff9 [ 365.593542][T12074] RDX: 0000000000000048 RSI: 0000000020000300 RDI: 0000000000000005 [ 365.601635][T12074] RBP: 00007f955b95b090 R08: 0000000000000000 R09: 0000000000000000 [ 365.609432][T12090] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 365.609957][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.609977][T12074] R13: 0000000000000000 R14: 00007f955ad35f80 R15: 00007ffe2d6f9718 [ 365.610008][T12074] [ 365.730736][T12090] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 366.256793][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2160'. [ 366.362204][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 366.416839][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2160'. [ 366.473936][T12114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2160'. [ 366.538741][T12114] vlan2: entered allmulticast mode [ 366.857367][T12156] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 366.908947][T12156] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 367.019864][T12163] ax25_connect(): syz.4.2170 uses autobind, please contact jreuter@yaina.de [ 367.095971][T12166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.214427][T12166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.308589][T12180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2173'. [ 367.309592][T12166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.412395][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2171'. [ 367.757498][T12205] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 367.817070][T12205] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 368.519766][T12250] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 368.540794][T12250] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 368.603742][T12254] netlink: 'syz.3.2200': attribute type 3 has an invalid length. [ 369.282620][T12294] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 369.326339][T12294] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 369.548904][T12303] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 369.795804][T12315] nlmon0: entered promiscuous mode [ 369.815205][T12315] vlan2: entered promiscuous mode [ 369.841801][T12315] nlmon0: left promiscuous mode [ 370.132234][T12337] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 370.145115][T12337] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 370.462701][T12354] FAULT_INJECTION: forcing a failure. [ 370.462701][T12354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.506013][T12354] CPU: 1 UID: 0 PID: 12354 Comm: syz.4.2234 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 370.516480][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.526559][T12354] Call Trace: [ 370.529945][T12354] [ 370.532897][T12354] dump_stack_lvl+0x241/0x360 [ 370.537616][T12354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.542842][T12354] ? __pfx__printk+0x10/0x10 [ 370.547469][T12354] ? __pfx_lock_release+0x10/0x10 [ 370.552526][T12354] should_fail_ex+0x3b0/0x4e0 [ 370.557234][T12354] _copy_from_user+0x2f/0xe0 [ 370.561847][T12354] copy_msghdr_from_user+0xae/0x680 [ 370.567078][T12354] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 370.572969][T12354] __sys_sendmsg+0x22d/0x380 [ 370.577585][T12354] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.582732][T12354] ? __pfx_vfs_write+0x10/0x10 [ 370.587638][T12354] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.593988][T12354] ? do_syscall_64+0x100/0x230 [ 370.598765][T12354] ? do_syscall_64+0xb6/0x230 [ 370.603459][T12354] do_syscall_64+0xf3/0x230 [ 370.607967][T12354] ? clear_bhb_loop+0x35/0x90 [ 370.612756][T12354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.618663][T12354] RIP: 0033:0x7f75f837dff9 [ 370.623087][T12354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.642694][T12354] RSP: 002b:00007f75f90ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.651106][T12354] RAX: ffffffffffffffda RBX: 00007f75f8535f80 RCX: 00007f75f837dff9 [ 370.659071][T12354] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 370.667034][T12354] RBP: 00007f75f90ae090 R08: 0000000000000000 R09: 0000000000000000 [ 370.675083][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.683046][T12354] R13: 0000000000000000 R14: 00007f75f8535f80 R15: 00007fffda4d52c8 [ 370.691024][T12354] [ 370.800195][T12364] Cannot find add_set index 0 as target [ 370.864641][T12369] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 370.900620][T12369] netlink: 'syz.3.2239': attribute type 1 has an invalid length. [ 371.459253][T12393] __nla_validate_parse: 4 callbacks suppressed [ 371.459275][T12393] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2246'. [ 371.486744][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2246'. [ 371.509241][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 371.705535][T12406] netlink: 'syz.1.2249': attribute type 12 has an invalid length. [ 371.892639][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 372.033975][T12429] netlink: 'syz.3.2260': attribute type 43 has an invalid length. [ 372.096061][T12432] sctp: [Deprecated]: syz.0.2259 (pid 12432) Use of int in max_burst socket option. [ 372.096061][T12432] Use struct sctp_assoc_value instead [ 372.892200][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'. [ 373.044419][T12459] Unsupported ieee802154 address type: 0 [ 377.391497][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 377.397628][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 377.403705][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 377.409830][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 382.858494][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.321230][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.333436][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.344360][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.368279][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.385486][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 399.393271][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 399.523482][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.533255][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.542462][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.550682][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.559733][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 399.567532][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.638003][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.653050][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 399.661555][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.669991][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.677561][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 399.708525][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.715729][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.717446][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.726201][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.742624][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.756504][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.771672][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.782956][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.797920][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.798053][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 399.824030][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 399.824519][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.839146][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.006729][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.135489][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.240570][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.311509][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.563722][T12503] chnl_net:caif_netlink_parms(): no params data found [ 400.992327][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.004583][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.016155][ T12] bond0 (unregistering): Released all slaves [ 401.067692][T12494] chnl_net:caif_netlink_parms(): no params data found [ 401.091526][T12501] chnl_net:caif_netlink_parms(): no params data found [ 401.109402][T12499] chnl_net:caif_netlink_parms(): no params data found [ 401.142177][ T12] ɶƣ0GC¦: left promiscuous mode [ 401.183241][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.200908][T12503] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.208855][T12503] bridge_slave_0: entered allmulticast mode [ 401.215471][T12503] bridge_slave_0: entered promiscuous mode [ 401.270128][ T12] : left promiscuous mode [ 401.281830][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.290785][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.302141][T12503] bridge_slave_1: entered allmulticast mode [ 401.310762][T12503] bridge_slave_1: entered promiscuous mode [ 401.497277][ T55] Bluetooth: hci2: command tx timeout [ 401.515931][T12497] chnl_net:caif_netlink_parms(): no params data found [ 401.595126][T12494] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.612100][T12494] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.626927][T12494] bridge_slave_0: entered allmulticast mode [ 401.634128][T12494] bridge_slave_0: entered promiscuous mode [ 401.646201][T12494] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.653753][T12494] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.657254][ T55] Bluetooth: hci1: command tx timeout [ 401.668207][T12494] bridge_slave_1: entered allmulticast mode [ 401.675204][T12494] bridge_slave_1: entered promiscuous mode [ 401.705581][T12503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.730619][T12503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.814607][T12494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.852263][ T12] hsr_slave_0: left promiscuous mode [ 401.861439][ T12] hsr_slave_1: left promiscuous mode [ 401.868413][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.875829][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.884902][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.893159][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.896720][ T55] Bluetooth: hci5: command tx timeout [ 401.906042][ T5229] Bluetooth: hci0: command tx timeout [ 401.906101][ T5238] Bluetooth: hci3: command tx timeout [ 401.932215][ T12] batadv0: left allmulticast mode [ 401.943307][ T12] batadv0: left promiscuous mode [ 401.948452][ T12] veth1_macvtap: left promiscuous mode [ 401.953979][ T12] veth0_macvtap: left promiscuous mode [ 401.960033][ T12] veth1_vlan: left promiscuous mode [ 402.442643][ T12] team0 (unregistering): Port device team_slave_1 removed [ 402.489172][ T12] team0 (unregistering): Port device team_slave_0 removed [ 403.021938][T12494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.052765][T12503] team0: Port device team_slave_0 added [ 403.059652][T12501] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.073082][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.080593][T12501] bridge_slave_0: entered allmulticast mode [ 403.088353][T12501] bridge_slave_0: entered promiscuous mode [ 403.131732][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.145073][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.153372][T12499] bridge_slave_0: entered allmulticast mode [ 403.161080][T12499] bridge_slave_0: entered promiscuous mode [ 403.187897][T12503] team0: Port device team_slave_1 added [ 403.201621][T12501] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.209863][T12501] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.220173][T12501] bridge_slave_1: entered allmulticast mode [ 403.227586][T12501] bridge_slave_1: entered promiscuous mode [ 403.263331][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.279678][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.287469][T12499] bridge_slave_1: entered allmulticast mode [ 403.294378][T12499] bridge_slave_1: entered promiscuous mode [ 403.324457][T12494] team0: Port device team_slave_0 added [ 403.340146][T12494] team0: Port device team_slave_1 added [ 403.363287][T12503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.371236][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.397877][T12503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.456074][T12499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.476245][T12503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.483972][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.511587][T12503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.535788][T12501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.545278][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.552705][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.563479][T12497] bridge_slave_0: entered allmulticast mode [ 403.571370][T12497] bridge_slave_0: entered promiscuous mode [ 403.578295][ T5238] Bluetooth: hci2: command tx timeout [ 403.585662][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.593618][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.601687][T12497] bridge_slave_1: entered allmulticast mode [ 403.609450][T12497] bridge_slave_1: entered promiscuous mode [ 403.619771][T12499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.636905][T12494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.643902][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.672116][T12494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.742034][ T5238] Bluetooth: hci1: command tx timeout [ 403.751472][T12501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.804867][T12494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.814931][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.849003][T12494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.877823][T12503] hsr_slave_0: entered promiscuous mode [ 403.889873][T12503] hsr_slave_1: entered promiscuous mode [ 403.902909][T12503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.913563][T12503] Cannot create hsr debugfs directory [ 403.972371][T12501] team0: Port device team_slave_0 added [ 403.976853][ T55] Bluetooth: hci0: command tx timeout [ 403.984294][ T5229] Bluetooth: hci3: command tx timeout [ 403.990045][ T5238] Bluetooth: hci5: command tx timeout [ 404.015000][T12499] team0: Port device team_slave_0 added [ 404.065855][T12501] team0: Port device team_slave_1 added [ 404.114978][T12497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.141927][T12499] team0: Port device team_slave_1 added [ 404.177500][T12494] hsr_slave_0: entered promiscuous mode [ 404.186203][T12494] hsr_slave_1: entered promiscuous mode [ 404.193410][T12494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.201360][T12494] Cannot create hsr debugfs directory [ 404.265783][T12497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.306985][T12501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.314215][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.343029][T12501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.402758][T12499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.409883][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.436930][T12499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.452011][T12501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.459136][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.485550][T12501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.506299][T12497] team0: Port device team_slave_0 added [ 404.522993][T12499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.530368][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.556769][T12499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.594696][T12497] team0: Port device team_slave_1 added [ 404.687628][T12497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.694714][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.723675][T12497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.743854][T12497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.756248][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.794188][T12497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.876146][T12501] hsr_slave_0: entered promiscuous mode [ 404.884027][T12501] hsr_slave_1: entered promiscuous mode [ 404.892084][T12501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.903021][T12501] Cannot create hsr debugfs directory [ 404.933773][T12499] hsr_slave_0: entered promiscuous mode [ 404.950945][T12499] hsr_slave_1: entered promiscuous mode [ 404.958600][T12499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.966206][T12499] Cannot create hsr debugfs directory [ 405.240168][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.314312][T12497] hsr_slave_0: entered promiscuous mode [ 405.321322][T12497] hsr_slave_1: entered promiscuous mode [ 405.341367][T12497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.348998][T12497] Cannot create hsr debugfs directory [ 405.393502][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.483442][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.590511][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.654946][T12494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.665573][ T55] Bluetooth: hci2: command tx timeout [ 405.770967][T12494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.817418][ T55] Bluetooth: hci1: command tx timeout [ 405.895932][T12494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.981474][T12494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.026627][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.057913][ T55] Bluetooth: hci0: command tx timeout [ 406.063366][ T55] Bluetooth: hci5: command tx timeout [ 406.068970][ T5238] Bluetooth: hci3: command tx timeout [ 406.117430][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.172165][T12494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.210044][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.227739][T12494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.240189][T12494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.264851][T12494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.317482][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.442613][T12503] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.513030][T12503] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.534534][T12503] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.569443][T12503] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.789017][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.873174][T12494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.902945][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.953712][T12494] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.001167][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.008450][T11803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.044011][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.092245][T12503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.133740][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.140935][T11807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.187689][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.292335][T12503] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.320620][T12501] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.415270][T12501] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.474550][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.481865][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.517610][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.524754][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.555514][T12501] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.633763][T12501] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.736837][ T55] Bluetooth: hci2: command tx timeout [ 407.750764][ T12] bridge_slave_1: left allmulticast mode [ 407.766600][ T12] bridge_slave_1: left promiscuous mode [ 407.779024][ T12] bridge5: port 1(bridge_slave_1) entered disabled state [ 407.897009][ T55] Bluetooth: hci1: command tx timeout [ 408.067809][ T12] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 408.141084][ T55] Bluetooth: hci5: command tx timeout [ 408.145016][ T5238] Bluetooth: hci3: command tx timeout [ 408.147941][ T5229] Bluetooth: hci0: command tx timeout [ 408.392229][ T12] gretap0 (unregistering): left promiscuous mode [ 409.277201][ T12] team0: Port device bond0 removed [ 409.285692][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.303613][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.314538][ T12] bond0 (unregistering): Released all slaves [ 409.325239][ T12] bond1 (unregistering): Released all slaves [ 409.453498][ T12] bond0 (unregistering): Released all slaves [ 409.466785][ T12] bond1 (unregistering): Released all slaves [ 409.477308][ T12] bond2 (unregistering): Released all slaves [ 409.611932][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.626034][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.642513][ T12] bond0 (unregistering): Released all slaves [ 409.653834][ T12] bond1 (unregistering): Released all slaves [ 409.735056][T12503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.772158][T12503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.821862][ T12] ɶƣ0GC¦: left promiscuous mode [ 409.906544][ T12] ɶƣ0GC¦: left promiscuous mode [ 410.003928][T12499] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.048753][ T12] ɶƣ0GC¦: left promiscuous mode [ 410.127626][T12499] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.178630][T12499] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.317469][T12499] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.363685][T12503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.482730][T12494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.671387][T12501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.773023][T12501] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.821684][T12494] veth0_vlan: entered promiscuous mode [ 410.862233][T12497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.874568][T12497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.884268][T12497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.899257][T12497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.933023][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.940284][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.951873][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.959073][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.989931][T12494] veth1_vlan: entered promiscuous mode [ 411.064522][T12499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.155095][T12503] veth0_vlan: entered promiscuous mode [ 411.170156][T12494] veth0_macvtap: entered promiscuous mode [ 411.184809][T12494] veth1_macvtap: entered promiscuous mode [ 411.218286][T12499] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.233157][T12503] veth1_vlan: entered promiscuous mode [ 411.251831][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.258991][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.361623][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.368815][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.382916][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.393728][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.403999][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.414670][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.426326][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.437914][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.449446][T12494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.474398][T12503] veth0_macvtap: entered promiscuous mode [ 411.515666][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.527561][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.538104][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.548770][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.559114][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.570089][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.581372][T12494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.610278][ T12] hsr_slave_0: left promiscuous mode [ 411.616135][ T12] hsr_slave_1: left promiscuous mode [ 411.626134][ T12] hsr_slave_0: left promiscuous mode [ 411.632357][ T12] hsr_slave_1: left promiscuous mode [ 411.639777][ T12] team0: left promiscuous mode [ 411.644649][ T12] team_slave_0: left promiscuous mode [ 411.651605][ T12] team_slave_1: left promiscuous mode [ 411.660387][ T12] batadv_slave_0: left promiscuous mode [ 411.674044][ T12] hsr_slave_0: left promiscuous mode [ 411.680213][ T12] hsr_slave_1: left promiscuous mode [ 411.686078][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.693725][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.702258][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.710327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.750598][ T12] veth1_macvtap: left promiscuous mode [ 411.756131][ T12] veth0_macvtap: left promiscuous mode [ 411.764927][ T12] veth1_vlan: left promiscuous mode [ 411.770331][ T12] veth0_vlan: left promiscuous mode [ 411.776651][ T12] veth1_macvtap: left promiscuous mode [ 411.782200][ T12] veth0_macvtap: left promiscuous mode [ 411.787969][ T12] veth1_vlan: left promiscuous mode [ 411.794548][ T12] veth0_vlan: left promiscuous mode [ 411.801012][ T12] veth1_macvtap: left promiscuous mode [ 411.808327][ T12] veth0_macvtap: left promiscuous mode [ 411.813985][ T12] veth1_vlan: left promiscuous mode [ 411.819984][ T12] veth0_vlan: left promiscuous mode [ 412.466219][ T12] team0 (unregistering): Port device team_slave_1 removed [ 412.514841][ T12] team0 (unregistering): Port device team_slave_0 removed [ 413.290346][ T12] team0 (unregistering): Port device veth1_to_team removed [ 414.100300][ T12] team0 (unregistering): Port device team_slave_1 removed [ 414.145170][ T12] team0 (unregistering): Port device team_slave_0 removed [ 414.584991][T12503] veth1_macvtap: entered promiscuous mode [ 414.609764][T12494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.619853][T12494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.632437][T12494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.641639][T12494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.663059][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.674467][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.685623][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.702721][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.712656][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.723343][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.735727][T12503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.780187][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.800337][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.810411][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.821929][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.832233][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.843376][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.861343][T12503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.910849][T12503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.924926][T12503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.934295][T12503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.945018][T12503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.973575][T12501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.992619][T12497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.147414][T11807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.155287][T11807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.164615][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.193996][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.201164][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.287593][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.294825][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.438243][T11807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.446110][T11807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.477612][T12501] veth0_vlan: entered promiscuous mode [ 415.554424][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.559398][T12501] veth1_vlan: entered promiscuous mode [ 415.572431][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.622764][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.637216][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.661166][T12499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.801086][T12501] veth0_macvtap: entered promiscuous mode [ 415.834900][T12501] veth1_macvtap: entered promiscuous mode [ 415.999620][T12499] veth0_vlan: entered promiscuous mode [ 416.076932][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.088056][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.103766][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.124223][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.144242][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.169295][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.180042][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.190917][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.202784][T12501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.249703][T12686] veth1_macvtap: entered allmulticast mode [ 416.280909][T12497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.308218][T12499] veth1_vlan: entered promiscuous mode [ 416.320806][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.340511][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.356007][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.366867][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.378241][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.389837][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.399877][T12501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.410433][T12501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.421928][T12501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.506309][T12499] veth0_macvtap: entered promiscuous mode [ 416.515861][T12499] veth1_macvtap: entered promiscuous mode [ 416.539659][T12501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.561561][T12501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.573589][T12501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.584043][T12501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.616086][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.630684][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.641298][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.652170][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.662387][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.673098][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.684188][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.696318][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.707143][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.722737][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.734480][T12499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.795029][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.816567][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.836477][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.856651][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.876510][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.889274][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.906035][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.932496][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.954320][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.965030][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.982379][T12499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.043045][T12499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.067011][T12499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.075850][T12499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.097389][T12499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.163549][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2290'. [ 417.213697][T12497] veth0_vlan: entered promiscuous mode [ 417.290920][T12497] veth1_vlan: entered promiscuous mode [ 417.352694][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.378160][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.395705][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.418192][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.483387][T12497] veth0_macvtap: entered promiscuous mode [ 417.517996][T11807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.522878][T12497] veth1_macvtap: entered promiscuous mode [ 417.545222][T11807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.613473][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.625852][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.648040][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.659654][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.671667][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.682575][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.692936][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.704909][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.731508][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.747381][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.760616][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.771780][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.782581][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.798624][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.814005][T12497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.849593][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.896940][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.926558][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.948831][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.965382][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.978083][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.988395][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.998565][T12724] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2298'. [ 418.001054][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.032798][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.045032][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.068911][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.088351][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.106057][T12497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.127708][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2297'. [ 418.171713][T12497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.181665][T12497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.193333][T12497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.211702][T12497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.428489][T11807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.458457][T11807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.512733][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.535991][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.875320][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2302'. [ 418.952244][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2303'. [ 419.004949][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2302'. [ 419.221329][T12755] ɶƣ0GC¦: entered promiscuous mode [ 419.260533][T12755] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 419.443692][T12761] syzkaller0: entered promiscuous mode [ 419.459819][T12761] syzkaller0: entered allmulticast mode [ 421.508956][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2310'. [ 421.571060][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'. [ 421.597039][T12767] bridge_slave_1: left allmulticast mode [ 421.602831][T12767] bridge_slave_1: left promiscuous mode [ 421.617648][T12767] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.660654][T12767] bridge_slave_0: left allmulticast mode [ 421.667208][T12767] bridge_slave_0: left promiscuous mode [ 421.672993][T12767] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.786121][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2311'. [ 421.947829][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2315'. [ 422.098350][T12798] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 422.118255][T12798] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 422.522101][T12816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2326'. [ 422.871186][T12828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2329'. [ 423.119207][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2331'. [ 423.210460][T12839] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 423.280544][T12837] ɶƣ0GC¦: entered promiscuous mode [ 423.288080][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2330'. [ 423.326560][T12838] bridge_slave_1: left allmulticast mode [ 423.345870][T12838] bridge_slave_1: left promiscuous mode [ 423.361178][T12838] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.401994][T12838] bridge_slave_0: left allmulticast mode [ 423.409456][T12838] bridge_slave_0: left promiscuous mode [ 423.415640][T12838] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.526533][T12852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2339'. [ 423.645571][T12856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2341'. [ 423.804424][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2345'. [ 424.214033][T12883] ɶƣ0GC¦: entered promiscuous mode [ 424.252011][T12883] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 424.420419][T12890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2352'. [ 424.801828][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 424.810918][T12904] bridge_slave_1: left allmulticast mode [ 424.811278][T12906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2358'. [ 424.816823][T12904] bridge_slave_1: left promiscuous mode [ 424.816990][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.861401][T12904] bridge_slave_0: left allmulticast mode [ 424.868280][T12904] bridge_slave_0: left promiscuous mode [ 424.875282][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.322959][T12925] ɶƣ0GC¦: entered promiscuous mode [ 425.377022][T12925] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 426.348514][T12968] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 426.426724][T12968] netlink: 'syz.4.2380': attribute type 1 has an invalid length. [ 427.074764][T13000] sctp: [Deprecated]: syz.2.2394 (pid 13000) Use of int in max_burst socket option. [ 427.074764][T13000] Use struct sctp_assoc_value instead [ 427.179328][T13004] BUG: Bad page state in process syz.2.2394 pfn:46918 [ 427.186912][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888046918000 pfn:0x46918 [ 427.190542][T13005] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 427.197091][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 427.197132][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 427.197151][T13004] raw: ffff888046918000 0000000000000001 00000000ffffffff 0000000000000000 [ 427.197163][T13004] page dumped because: page_pool leak [ 427.197187][T13004] page_owner tracks the page as allocated [ 427.197201][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155640371, free_ts 421814225461 [ 427.197239][T13004] post_alloc_hook+0x1f3/0x230 [ 427.197268][T13004] get_page_from_freelist+0x3045/0x3190 [ 427.197286][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 427.197302][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 427.197318][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 427.197343][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 427.231201][T13005] netlink: 'syz.4.2395': attribute type 1 has an invalid length. [ 427.235578][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 427.304367][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 427.309878][T13004] bpf_prog_test_run+0x2e4/0x360 [ 427.314869][T13004] __sys_bpf+0x48d/0x810 [ 427.319269][T13004] __x64_sys_bpf+0x7c/0x90 [ 427.323725][T13004] do_syscall_64+0xf3/0x230 [ 427.328374][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.334316][T13004] page last free pid 12775 tgid 12774 stack trace: [ 427.340992][T13004] free_unref_folios+0xf12/0x18d0 [ 427.346075][T13004] folios_put_refs+0x76c/0x860 [ 427.350994][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 427.356754][T13004] tlb_flush_mmu+0x3a3/0x680 [ 427.361391][T13004] tlb_finish_mmu+0xd4/0x200 [ 427.366021][T13004] exit_mmap+0x496/0xc40 [ 427.370412][T13004] __mmput+0x115/0x390 [ 427.374520][T13004] exit_mm+0x220/0x310 [ 427.378718][T13004] do_exit+0x9b2/0x28e0 [ 427.382910][T13004] do_group_exit+0x207/0x2c0 [ 427.387640][T13004] get_signal+0x176f/0x1810 [ 427.392277][T13004] arch_do_signal_or_restart+0x96/0x860 [ 427.397967][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 427.403652][T13004] do_syscall_64+0x100/0x230 [ 427.408429][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.414368][T13004] Modules linked in: [ 427.418446][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 427.428984][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.439073][T13004] Call Trace: [ 427.442384][T13004] [ 427.445340][T13004] dump_stack_lvl+0x241/0x360 [ 427.450062][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.455306][T13004] ? __pfx_print_modules+0x10/0x10 [ 427.460466][T13004] ? pcpu_memcg_post_alloc_hook+0x12a/0x720 [ 427.466411][T13004] bad_page+0x166/0x1b0 [ 427.470611][T13004] free_unref_page+0xed0/0xf20 [ 427.475414][T13004] skb_release_data+0x6dc/0x8a0 [ 427.480312][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 427.485473][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 427.491231][T13004] ? mark_lock+0x9a/0x360 [ 427.495592][T13004] ? __lock_acquire+0x1384/0x2050 [ 427.500668][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 427.506995][T13004] ? mark_lock+0x9a/0x360 [ 427.511366][T13004] ? __lock_acquire+0x1384/0x2050 [ 427.516425][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 427.522531][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 427.529144][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 427.535692][T13004] ? read_tsc+0x9/0x20 [ 427.539805][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 427.545068][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 427.551410][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 427.557595][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 427.563919][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 427.570618][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 427.575841][T13004] ? __phys_addr+0xba/0x170 [ 427.580379][T13004] ? build_skb_around+0x111/0x260 [ 427.585463][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 427.591501][T13004] netif_receive_skb_list+0x55/0x4b0 [ 427.596912][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 427.602413][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 427.608375][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 427.613970][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 427.619866][T13004] ? synchronize_rcu+0x11b/0x360 [ 427.624802][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 427.630125][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 427.636417][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 427.642375][T13004] ? _copy_from_user+0xa6/0xe0 [ 427.647178][T13004] ? bpf_test_init+0x15a/0x180 [ 427.651971][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 427.657479][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 427.662939][T13004] ? __pfx_lock_release+0x10/0x10 [ 427.668014][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 427.673861][T13004] ? __fget_files+0x29/0x470 [ 427.678495][T13004] ? fput+0x1a8/0x230 [ 427.682508][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 427.688329][T13004] bpf_prog_test_run+0x2e4/0x360 [ 427.693268][T13004] __sys_bpf+0x48d/0x810 [ 427.697513][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 427.702290][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 427.708304][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.714668][T13004] ? do_syscall_64+0x100/0x230 [ 427.719497][T13004] __x64_sys_bpf+0x7c/0x90 [ 427.723940][T13004] do_syscall_64+0xf3/0x230 [ 427.728470][T13004] ? clear_bhb_loop+0x35/0x90 [ 427.733162][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.739069][T13004] RIP: 0033:0x7f71fe37dff9 [ 427.743496][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.763203][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.771619][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 427.779799][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 427.787781][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 427.795749][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.803713][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 427.811776][T13004] [ 427.814932][T13004] Disabling lock debugging due to kernel taint [ 427.821184][T13004] BUG: Bad page state in process syz.2.2394 pfn:29600 [ 427.828301][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029600f00 pfn:0x29600 [ 427.838544][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 427.845683][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 427.854369][T13004] raw: ffff888029600f00 0000000000000001 00000000ffffffff 0000000000000000 [ 427.863041][T13004] page dumped because: page_pool leak [ 427.869043][T13004] page_owner tracks the page as allocated [ 427.874772][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155628821, free_ts 421814235651 [ 427.892085][T13004] post_alloc_hook+0x1f3/0x230 [ 427.896963][T13004] get_page_from_freelist+0x3045/0x3190 [ 427.902556][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 427.907866][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 427.913355][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 427.919387][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 427.924643][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 427.930147][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 427.935555][T13004] bpf_prog_test_run+0x2e4/0x360 [ 427.940696][T13004] __sys_bpf+0x48d/0x810 [ 427.944970][T13004] __x64_sys_bpf+0x7c/0x90 [ 427.949514][T13004] do_syscall_64+0xf3/0x230 [ 427.954043][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.960086][T13004] page last free pid 12775 tgid 12774 stack trace: [ 427.966822][T13004] free_unref_folios+0xf12/0x18d0 [ 427.971883][T13004] folios_put_refs+0x76c/0x860 [ 427.976773][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 427.982437][T13004] tlb_flush_mmu+0x3a3/0x680 [ 427.987143][T13004] tlb_finish_mmu+0xd4/0x200 [ 427.991759][T13004] exit_mmap+0x496/0xc40 [ 427.996019][T13004] __mmput+0x115/0x390 [ 428.000230][T13004] exit_mm+0x220/0x310 [ 428.004328][T13004] do_exit+0x9b2/0x28e0 [ 428.008602][T13004] do_group_exit+0x207/0x2c0 [ 428.013212][T13004] get_signal+0x176f/0x1810 [ 428.017834][T13004] arch_do_signal_or_restart+0x96/0x860 [ 428.023407][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 428.029099][T13004] do_syscall_64+0x100/0x230 [ 428.033714][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.039737][T13004] Modules linked in: [ 428.043665][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 428.055577][T13004] Tainted: [B]=BAD_PAGE [ 428.059737][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.069806][T13004] Call Trace: [ 428.073115][T13004] [ 428.076583][T13004] dump_stack_lvl+0x241/0x360 [ 428.081283][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.086495][T13004] ? __pfx_print_modules+0x10/0x10 [ 428.091622][T13004] bad_page+0x166/0x1b0 [ 428.096140][T13004] free_unref_page+0xed0/0xf20 [ 428.100996][T13004] skb_release_data+0x6dc/0x8a0 [ 428.105874][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 428.110919][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 428.116756][T13004] ? mark_lock+0x9a/0x360 [ 428.121098][T13004] ? __lock_acquire+0x1384/0x2050 [ 428.126213][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 428.132274][T13004] ? mark_lock+0x9a/0x360 [ 428.136611][T13004] ? __lock_acquire+0x1384/0x2050 [ 428.141653][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 428.147655][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 428.154465][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 428.160979][T13004] ? read_tsc+0x9/0x20 [ 428.165062][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 428.170259][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 428.176581][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 428.182817][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 428.189168][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 428.195841][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 428.201032][T13004] ? __phys_addr+0xba/0x170 [ 428.205531][T13004] ? build_skb_around+0x111/0x260 [ 428.210555][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 428.216445][T13004] netif_receive_skb_list+0x55/0x4b0 [ 428.221912][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 428.227398][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 428.233302][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 428.238875][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 428.244674][T13004] ? synchronize_rcu+0x11b/0x360 [ 428.249608][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 428.254892][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 428.261132][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 428.267187][T13004] ? _copy_from_user+0xa6/0xe0 [ 428.271976][T13004] ? bpf_test_init+0x15a/0x180 [ 428.276752][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 428.282248][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 428.288121][T13004] ? __pfx_lock_release+0x10/0x10 [ 428.293248][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.299079][T13004] ? __fget_files+0x29/0x470 [ 428.303690][T13004] ? fput+0x1a8/0x230 [ 428.307680][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.313504][T13004] bpf_prog_test_run+0x2e4/0x360 [ 428.318446][T13004] __sys_bpf+0x48d/0x810 [ 428.322714][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 428.327501][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.333510][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.339862][T13004] ? do_syscall_64+0x100/0x230 [ 428.344720][T13004] __x64_sys_bpf+0x7c/0x90 [ 428.349144][T13004] do_syscall_64+0xf3/0x230 [ 428.353669][T13004] ? clear_bhb_loop+0x35/0x90 [ 428.358365][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.364254][T13004] RIP: 0033:0x7f71fe37dff9 [ 428.368655][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.388275][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.396696][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 428.404677][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 428.412639][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 428.420627][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.428589][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 428.436668][T13004] [ 428.439795][T13004] BUG: Bad page state in process syz.2.2394 pfn:735a4 [ 428.446748][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880735a4000 pfn:0x735a4 [ 428.456893][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 428.464000][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 428.472654][T13004] raw: ffff8880735a4000 0000000000000001 00000000ffffffff 0000000000000000 [ 428.481328][T13004] page dumped because: page_pool leak [ 428.486750][T13004] page_owner tracks the page as allocated [ 428.492466][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155617507, free_ts 421814244744 [ 428.509800][T13004] post_alloc_hook+0x1f3/0x230 [ 428.514602][T13004] get_page_from_freelist+0x3045/0x3190 [ 428.520273][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 428.525493][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 428.531023][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 428.537040][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 428.542269][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 428.547726][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 428.553172][T13004] bpf_prog_test_run+0x2e4/0x360 [ 428.558216][T13004] __sys_bpf+0x48d/0x810 [ 428.562476][T13004] __x64_sys_bpf+0x7c/0x90 [ 428.567023][T13004] do_syscall_64+0xf3/0x230 [ 428.571533][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.577498][T13004] page last free pid 12775 tgid 12774 stack trace: [ 428.584012][T13004] free_unref_folios+0xf12/0x18d0 [ 428.589107][T13004] folios_put_refs+0x76c/0x860 [ 428.593889][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 428.599592][T13004] tlb_flush_mmu+0x3a3/0x680 [ 428.604202][T13004] tlb_finish_mmu+0xd4/0x200 [ 428.608905][T13004] exit_mmap+0x496/0xc40 [ 428.613154][T13004] __mmput+0x115/0x390 [ 428.617402][T13004] exit_mm+0x220/0x310 [ 428.621485][T13004] do_exit+0x9b2/0x28e0 [ 428.625627][T13004] do_group_exit+0x207/0x2c0 [ 428.630278][T13004] get_signal+0x176f/0x1810 [ 428.634806][T13004] arch_do_signal_or_restart+0x96/0x860 [ 428.640437][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 428.645998][T13004] do_syscall_64+0x100/0x230 [ 428.650686][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.656701][T13004] Modules linked in: [ 428.660609][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 428.672530][T13004] Tainted: [B]=BAD_PAGE [ 428.676672][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.686714][T13004] Call Trace: [ 428.690008][T13004] [ 428.692922][T13004] dump_stack_lvl+0x241/0x360 [ 428.697601][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.702790][T13004] ? __pfx_print_modules+0x10/0x10 [ 428.707894][T13004] bad_page+0x166/0x1b0 [ 428.712039][T13004] free_unref_page+0xed0/0xf20 [ 428.716813][T13004] skb_release_data+0x6dc/0x8a0 [ 428.721676][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 428.726695][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 428.732403][T13004] ? mark_lock+0x9a/0x360 [ 428.736805][T13004] ? __lock_acquire+0x1384/0x2050 [ 428.741824][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 428.747912][T13004] ? mark_lock+0x9a/0x360 [ 428.752238][T13004] ? __lock_acquire+0x1384/0x2050 [ 428.757273][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 428.763265][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 428.769873][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 428.776493][T13004] ? read_tsc+0x9/0x20 [ 428.780571][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 428.785760][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 428.792078][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 428.798245][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 428.804563][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 428.811227][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 428.816426][T13004] ? __phys_addr+0xba/0x170 [ 428.820931][T13004] ? build_skb_around+0x111/0x260 [ 428.825983][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 428.831869][T13004] netif_receive_skb_list+0x55/0x4b0 [ 428.837183][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 428.842637][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 428.848521][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 428.854059][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 428.859853][T13004] ? synchronize_rcu+0x11b/0x360 [ 428.864964][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 428.870266][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 428.876530][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 428.882450][T13004] ? _copy_from_user+0xa6/0xe0 [ 428.887205][T13004] ? bpf_test_init+0x15a/0x180 [ 428.891959][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 428.897409][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 428.902872][T13004] ? __pfx_lock_release+0x10/0x10 [ 428.907907][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.913715][T13004] ? __fget_files+0x29/0x470 [ 428.918337][T13004] ? fput+0x1a8/0x230 [ 428.922329][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.928216][T13004] bpf_prog_test_run+0x2e4/0x360 [ 428.933206][T13004] __sys_bpf+0x48d/0x810 [ 428.937442][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 428.942196][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.948188][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.954614][T13004] ? do_syscall_64+0x100/0x230 [ 428.959469][T13004] __x64_sys_bpf+0x7c/0x90 [ 428.963880][T13004] do_syscall_64+0xf3/0x230 [ 428.968393][T13004] ? clear_bhb_loop+0x35/0x90 [ 428.973090][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.978984][T13004] RIP: 0033:0x7f71fe37dff9 [ 428.983478][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.003170][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.011663][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 429.019655][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 429.027709][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 429.035757][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.043736][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 429.051726][T13004] [ 429.054849][T13004] BUG: Bad page state in process syz.2.2394 pfn:7e463 [ 429.061896][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e463000 pfn:0x7e463 [ 429.072076][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 429.079373][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 429.088032][T13004] raw: ffff88807e463000 0000000000000001 00000000ffffffff 0000000000000000 [ 429.096724][T13004] page dumped because: page_pool leak [ 429.102120][T13004] page_owner tracks the page as allocated [ 429.107934][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155605993, free_ts 421814261557 [ 429.125214][T13004] post_alloc_hook+0x1f3/0x230 [ 429.130168][T13004] get_page_from_freelist+0x3045/0x3190 [ 429.135733][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 429.141026][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 429.146607][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 429.152527][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 429.157794][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 429.163184][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 429.168630][T13004] bpf_prog_test_run+0x2e4/0x360 [ 429.173589][T13004] __sys_bpf+0x48d/0x810 [ 429.177966][T13004] __x64_sys_bpf+0x7c/0x90 [ 429.182394][T13004] do_syscall_64+0xf3/0x230 [ 429.187002][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.192927][T13004] page last free pid 12775 tgid 12774 stack trace: [ 429.199548][T13004] free_unref_folios+0xf12/0x18d0 [ 429.204589][T13004] folios_put_refs+0x76c/0x860 [ 429.209397][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 429.215048][T13004] tlb_flush_mmu+0x3a3/0x680 [ 429.219720][T13004] tlb_finish_mmu+0xd4/0x200 [ 429.224365][T13004] exit_mmap+0x496/0xc40 [ 429.228669][T13004] __mmput+0x115/0x390 [ 429.232777][T13004] exit_mm+0x220/0x310 [ 429.236922][T13004] do_exit+0x9b2/0x28e0 [ 429.241095][T13004] do_group_exit+0x207/0x2c0 [ 429.245675][T13004] get_signal+0x176f/0x1810 [ 429.250243][T13004] arch_do_signal_or_restart+0x96/0x860 [ 429.255807][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 429.261400][T13004] do_syscall_64+0x100/0x230 [ 429.266008][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.272091][T13004] Modules linked in: [ 429.276144][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 429.288051][T13004] Tainted: [B]=BAD_PAGE [ 429.292195][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.302260][T13004] Call Trace: [ 429.305555][T13004] [ 429.308514][T13004] dump_stack_lvl+0x241/0x360 [ 429.313214][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.318424][T13004] ? __pfx_print_modules+0x10/0x10 [ 429.323646][T13004] bad_page+0x166/0x1b0 [ 429.327808][T13004] free_unref_page+0xed0/0xf20 [ 429.332589][T13004] skb_release_data+0x6dc/0x8a0 [ 429.337443][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 429.342467][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 429.348226][T13004] ? mark_lock+0x9a/0x360 [ 429.352558][T13004] ? __lock_acquire+0x1384/0x2050 [ 429.357578][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 429.363645][T13004] ? mark_lock+0x9a/0x360 [ 429.367970][T13004] ? __lock_acquire+0x1384/0x2050 [ 429.372997][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 429.378985][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 429.385588][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 429.392095][T13004] ? read_tsc+0x9/0x20 [ 429.396164][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 429.401368][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 429.407692][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 429.413853][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 429.420205][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 429.426905][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 429.432127][T13004] ? __phys_addr+0xba/0x170 [ 429.436625][T13004] ? build_skb_around+0x111/0x260 [ 429.441658][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 429.447589][T13004] netif_receive_skb_list+0x55/0x4b0 [ 429.452881][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 429.458366][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 429.464351][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 429.469901][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 429.475711][T13004] ? synchronize_rcu+0x11b/0x360 [ 429.480662][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 429.485973][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 429.492221][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 429.498122][T13004] ? _copy_from_user+0xa6/0xe0 [ 429.502892][T13004] ? bpf_test_init+0x15a/0x180 [ 429.507805][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 429.513396][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 429.518864][T13004] ? __pfx_lock_release+0x10/0x10 [ 429.523899][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 429.529736][T13004] ? __fget_files+0x29/0x470 [ 429.534340][T13004] ? fput+0x1a8/0x230 [ 429.538314][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 429.544139][T13004] bpf_prog_test_run+0x2e4/0x360 [ 429.549091][T13004] __sys_bpf+0x48d/0x810 [ 429.553332][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 429.558100][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.564091][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.570427][T13004] ? do_syscall_64+0x100/0x230 [ 429.575187][T13004] __x64_sys_bpf+0x7c/0x90 [ 429.579620][T13004] do_syscall_64+0xf3/0x230 [ 429.584137][T13004] ? clear_bhb_loop+0x35/0x90 [ 429.588824][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.594729][T13004] RIP: 0033:0x7f71fe37dff9 [ 429.599138][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.618737][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.627167][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 429.635249][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 429.643222][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 429.651222][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.659188][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 429.667157][T13004] [ 429.670252][T13004] BUG: Bad page state in process syz.2.2394 pfn:31611 [ 429.677166][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880316117c0 pfn:0x31611 [ 429.687279][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 429.694394][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 429.703046][T13004] raw: ffff8880316117c0 0000000000000001 00000000ffffffff 0000000000000000 [ 429.711785][T13004] page dumped because: page_pool leak [ 429.717220][T13004] page_owner tracks the page as allocated [ 429.722937][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155594646, free_ts 421814270712 [ 429.740272][T13004] post_alloc_hook+0x1f3/0x230 [ 429.745078][T13004] get_page_from_freelist+0x3045/0x3190 [ 429.750676][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 429.755915][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 429.761439][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 429.767418][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 429.772647][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 429.778097][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 429.783496][T13004] bpf_prog_test_run+0x2e4/0x360 [ 429.788527][T13004] __sys_bpf+0x48d/0x810 [ 429.792792][T13004] __x64_sys_bpf+0x7c/0x90 [ 429.797314][T13004] do_syscall_64+0xf3/0x230 [ 429.801867][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.807848][T13004] page last free pid 12775 tgid 12774 stack trace: [ 429.814393][T13004] free_unref_folios+0xf12/0x18d0 [ 429.819515][T13004] folios_put_refs+0x76c/0x860 [ 429.824299][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 429.830005][T13004] tlb_flush_mmu+0x3a3/0x680 [ 429.834890][T13004] tlb_finish_mmu+0xd4/0x200 [ 429.839580][T13004] exit_mmap+0x496/0xc40 [ 429.843867][T13004] __mmput+0x115/0x390 [ 429.848152][T13004] exit_mm+0x220/0x310 [ 429.852264][T13004] do_exit+0x9b2/0x28e0 [ 429.856497][T13004] do_group_exit+0x207/0x2c0 [ 429.861201][T13004] get_signal+0x176f/0x1810 [ 429.865714][T13004] arch_do_signal_or_restart+0x96/0x860 [ 429.871374][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 429.876996][T13004] do_syscall_64+0x100/0x230 [ 429.881614][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.887719][T13004] Modules linked in: [ 429.891640][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 429.903589][T13004] Tainted: [B]=BAD_PAGE [ 429.907752][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.917805][T13004] Call Trace: [ 429.921087][T13004] [ 429.924113][T13004] dump_stack_lvl+0x241/0x360 [ 429.928824][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.934044][T13004] ? __pfx_print_modules+0x10/0x10 [ 429.939153][T13004] bad_page+0x166/0x1b0 [ 429.943318][T13004] free_unref_page+0xed0/0xf20 [ 429.948114][T13004] skb_release_data+0x6dc/0x8a0 [ 429.952988][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 429.958008][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 429.963730][T13004] ? mark_lock+0x9a/0x360 [ 429.968070][T13004] ? __lock_acquire+0x1384/0x2050 [ 429.973093][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 429.979158][T13004] ? mark_lock+0x9a/0x360 [ 429.983486][T13004] ? __lock_acquire+0x1384/0x2050 [ 429.988601][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 429.994584][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 430.001183][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 430.007696][T13004] ? read_tsc+0x9/0x20 [ 430.011808][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 430.017038][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 430.023365][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 430.029516][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 430.035855][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 430.042624][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 430.047830][T13004] ? __phys_addr+0xba/0x170 [ 430.052343][T13004] ? build_skb_around+0x111/0x260 [ 430.057370][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 430.063268][T13004] netif_receive_skb_list+0x55/0x4b0 [ 430.068646][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 430.074123][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 430.080024][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 430.085594][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 430.091418][T13004] ? synchronize_rcu+0x11b/0x360 [ 430.096388][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 430.101705][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 430.108135][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 430.114144][T13004] ? _copy_from_user+0xa6/0xe0 [ 430.118916][T13004] ? bpf_test_init+0x15a/0x180 [ 430.123774][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 430.129242][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 430.134647][T13004] ? __pfx_lock_release+0x10/0x10 [ 430.139706][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 430.145656][T13004] ? __fget_files+0x29/0x470 [ 430.150287][T13004] ? fput+0x1a8/0x230 [ 430.154294][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 430.160145][T13004] bpf_prog_test_run+0x2e4/0x360 [ 430.165093][T13004] __sys_bpf+0x48d/0x810 [ 430.169427][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 430.174198][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.180183][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.186521][T13004] ? do_syscall_64+0x100/0x230 [ 430.191309][T13004] __x64_sys_bpf+0x7c/0x90 [ 430.195747][T13004] do_syscall_64+0xf3/0x230 [ 430.200261][T13004] ? clear_bhb_loop+0x35/0x90 [ 430.205066][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.211052][T13004] RIP: 0033:0x7f71fe37dff9 [ 430.215468][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.235087][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.243499][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 430.251477][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 430.259446][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 430.267412][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.275434][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 430.283417][T13004] [ 430.286582][T13004] BUG: Bad page state in process syz.2.2394 pfn:419fc [ 430.293446][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880419fc4d8 pfn:0x419fc [ 430.303771][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 430.310988][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 430.319641][T13004] raw: ffff8880419fc4d8 0000000000000001 00000000ffffffff 0000000000000000 [ 430.328285][T13004] page dumped because: page_pool leak [ 430.333656][T13004] page_owner tracks the page as allocated [ 430.339420][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155583056, free_ts 421814280087 [ 430.356866][T13004] post_alloc_hook+0x1f3/0x230 [ 430.361629][T13004] get_page_from_freelist+0x3045/0x3190 [ 430.367299][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 430.372705][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 430.378229][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 430.384140][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 430.389412][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 430.395240][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 430.400733][T13004] bpf_prog_test_run+0x2e4/0x360 [ 430.405734][T13004] __sys_bpf+0x48d/0x810 [ 430.410164][T13004] __x64_sys_bpf+0x7c/0x90 [ 430.414613][T13004] do_syscall_64+0xf3/0x230 [ 430.419207][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.425131][T13004] page last free pid 12775 tgid 12774 stack trace: [ 430.431709][T13004] free_unref_folios+0xf12/0x18d0 [ 430.436850][T13004] folios_put_refs+0x76c/0x860 [ 430.441648][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 430.447445][T13004] tlb_flush_mmu+0x3a3/0x680 [ 430.452055][T13004] tlb_finish_mmu+0xd4/0x200 [ 430.457007][T13004] exit_mmap+0x496/0xc40 [ 430.461260][T13004] __mmput+0x115/0x390 [ 430.465334][T13004] exit_mm+0x220/0x310 [ 430.469504][T13004] do_exit+0x9b2/0x28e0 [ 430.473674][T13004] do_group_exit+0x207/0x2c0 [ 430.478384][T13004] get_signal+0x176f/0x1810 [ 430.482937][T13004] arch_do_signal_or_restart+0x96/0x860 [ 430.488596][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 430.494186][T13004] do_syscall_64+0x100/0x230 [ 430.498961][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.505023][T13004] Modules linked in: [ 430.509073][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 430.521191][T13004] Tainted: [B]=BAD_PAGE [ 430.525444][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.535595][T13004] Call Trace: [ 430.539313][T13004] [ 430.542241][T13004] dump_stack_lvl+0x241/0x360 [ 430.547028][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.552251][T13004] ? __pfx_print_modules+0x10/0x10 [ 430.557393][T13004] bad_page+0x166/0x1b0 [ 430.561555][T13004] free_unref_page+0xed0/0xf20 [ 430.566339][T13004] skb_release_data+0x6dc/0x8a0 [ 430.571227][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 430.576370][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 430.582197][T13004] ? mark_lock+0x9a/0x360 [ 430.586525][T13004] ? __lock_acquire+0x1384/0x2050 [ 430.591593][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 430.597665][T13004] ? mark_lock+0x9a/0x360 [ 430.602015][T13004] ? __lock_acquire+0x1384/0x2050 [ 430.607199][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 430.613304][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 430.620105][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 430.626636][T13004] ? read_tsc+0x9/0x20 [ 430.630728][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 430.635945][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 430.642300][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 430.648484][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 430.654830][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 430.661529][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 430.666737][T13004] ? __phys_addr+0xba/0x170 [ 430.671257][T13004] ? build_skb_around+0x111/0x260 [ 430.676299][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 430.682226][T13004] netif_receive_skb_list+0x55/0x4b0 [ 430.687530][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 430.693022][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 430.698930][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 430.704502][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 430.710332][T13004] ? synchronize_rcu+0x11b/0x360 [ 430.715281][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 430.720578][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 430.726846][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 430.732950][T13004] ? _copy_from_user+0xa6/0xe0 [ 430.737728][T13004] ? bpf_test_init+0x15a/0x180 [ 430.742518][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 430.747995][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 430.753419][T13004] ? __pfx_lock_release+0x10/0x10 [ 430.758473][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 430.764297][T13004] ? __fget_files+0x29/0x470 [ 430.768906][T13004] ? fput+0x1a8/0x230 [ 430.773013][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 430.778940][T13004] bpf_prog_test_run+0x2e4/0x360 [ 430.783894][T13004] __sys_bpf+0x48d/0x810 [ 430.788433][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 430.793508][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.799607][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.805985][T13004] ? do_syscall_64+0x100/0x230 [ 430.810780][T13004] __x64_sys_bpf+0x7c/0x90 [ 430.815249][T13004] do_syscall_64+0xf3/0x230 [ 430.819791][T13004] ? clear_bhb_loop+0x35/0x90 [ 430.824475][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.830398][T13004] RIP: 0033:0x7f71fe37dff9 [ 430.834818][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.854528][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.862946][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 430.870931][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 430.878920][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 430.886887][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.894960][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 430.903055][T13004] [ 430.906333][T13004] BUG: Bad page state in process syz.2.2394 pfn:30bf4 [ 430.913260][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030bf4ba0 pfn:0x30bf4 [ 430.923470][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 430.930743][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 430.939526][T13004] raw: ffff888030bf4ba0 0000000000000001 00000000ffffffff 0000000000000000 [ 430.948336][T13004] page dumped because: page_pool leak [ 430.953744][T13004] page_owner tracks the page as allocated [ 430.959979][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155571243, free_ts 421814288242 [ 430.977306][T13004] post_alloc_hook+0x1f3/0x230 [ 430.982214][T13004] get_page_from_freelist+0x3045/0x3190 [ 430.987891][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 430.993135][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 430.998751][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 431.004689][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 431.010059][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 431.015470][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 431.021420][T13004] bpf_prog_test_run+0x2e4/0x360 [ 431.026570][T13004] __sys_bpf+0x48d/0x810 [ 431.030906][T13004] __x64_sys_bpf+0x7c/0x90 [ 431.035343][T13004] do_syscall_64+0xf3/0x230 [ 431.039920][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.045861][T13004] page last free pid 12775 tgid 12774 stack trace: [ 431.052476][T13004] free_unref_folios+0xf12/0x18d0 [ 431.057640][T13004] folios_put_refs+0x76c/0x860 [ 431.062435][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 431.068195][T13004] tlb_flush_mmu+0x3a3/0x680 [ 431.072801][T13004] tlb_finish_mmu+0xd4/0x200 [ 431.077498][T13004] exit_mmap+0x496/0xc40 [ 431.081780][T13004] __mmput+0x115/0x390 [ 431.085928][T13004] exit_mm+0x220/0x310 [ 431.090182][T13004] do_exit+0x9b2/0x28e0 [ 431.094437][T13004] do_group_exit+0x207/0x2c0 [ 431.099354][T13004] get_signal+0x176f/0x1810 [ 431.103879][T13004] arch_do_signal_or_restart+0x96/0x860 [ 431.109564][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 431.115224][T13004] do_syscall_64+0x100/0x230 [ 431.119895][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.125997][T13004] Modules linked in: [ 431.130011][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 431.141956][T13004] Tainted: [B]=BAD_PAGE [ 431.146203][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.156346][T13004] Call Trace: [ 431.159637][T13004] [ 431.162554][T13004] dump_stack_lvl+0x241/0x360 [ 431.167244][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.172457][T13004] ? __pfx_print_modules+0x10/0x10 [ 431.177581][T13004] bad_page+0x166/0x1b0 [ 431.181741][T13004] free_unref_page+0xed0/0xf20 [ 431.186525][T13004] skb_release_data+0x6dc/0x8a0 [ 431.191391][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 431.196414][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 431.202130][T13004] ? mark_lock+0x9a/0x360 [ 431.206444][T13004] ? __lock_acquire+0x1384/0x2050 [ 431.211460][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 431.217619][T13004] ? mark_lock+0x9a/0x360 [ 431.221944][T13004] ? __lock_acquire+0x1384/0x2050 [ 431.226974][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 431.232971][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 431.239560][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 431.246195][T13004] ? read_tsc+0x9/0x20 [ 431.250286][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 431.255473][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 431.261816][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 431.267981][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 431.274325][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 431.281017][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 431.286225][T13004] ? __phys_addr+0xba/0x170 [ 431.290731][T13004] ? build_skb_around+0x111/0x260 [ 431.295886][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 431.301782][T13004] netif_receive_skb_list+0x55/0x4b0 [ 431.307068][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 431.312545][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 431.318485][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 431.324039][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 431.329951][T13004] ? synchronize_rcu+0x11b/0x360 [ 431.334954][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 431.340349][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 431.346614][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 431.352521][T13004] ? _copy_from_user+0xa6/0xe0 [ 431.357288][T13004] ? bpf_test_init+0x15a/0x180 [ 431.362062][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 431.367536][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 431.372929][T13004] ? __pfx_lock_release+0x10/0x10 [ 431.377962][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.383868][T13004] ? __fget_files+0x29/0x470 [ 431.388487][T13004] ? fput+0x1a8/0x230 [ 431.392574][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.398520][T13004] bpf_prog_test_run+0x2e4/0x360 [ 431.403485][T13004] __sys_bpf+0x48d/0x810 [ 431.407747][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 431.412572][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.418559][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.424890][T13004] ? do_syscall_64+0x100/0x230 [ 431.429661][T13004] __x64_sys_bpf+0x7c/0x90 [ 431.434156][T13004] do_syscall_64+0xf3/0x230 [ 431.438676][T13004] ? clear_bhb_loop+0x35/0x90 [ 431.443375][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.449270][T13004] RIP: 0033:0x7f71fe37dff9 [ 431.453734][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.473428][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.481879][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 431.489865][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 431.497837][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 431.505804][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.513815][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 431.521784][T13004] [ 431.524915][T13004] BUG: Bad page state in process syz.2.2394 pfn:1cbc0 [ 431.531875][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801cbc0870 pfn:0x1cbc0 [ 431.542074][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 431.549270][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 431.558074][T13004] raw: ffff88801cbc0870 0000000000000001 00000000ffffffff 0000000000000000 [ 431.566730][T13004] page dumped because: page_pool leak [ 431.572200][T13004] page_owner tracks the page as allocated [ 431.577998][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155559247, free_ts 421814297670 [ 431.595296][T13004] post_alloc_hook+0x1f3/0x230 [ 431.600160][T13004] get_page_from_freelist+0x3045/0x3190 [ 431.605728][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 431.611030][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 431.616600][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 431.622513][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 431.627779][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 431.633169][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 431.638737][T13004] bpf_prog_test_run+0x2e4/0x360 [ 431.643696][T13004] __sys_bpf+0x48d/0x810 [ 431.648082][T13004] __x64_sys_bpf+0x7c/0x90 [ 431.652521][T13004] do_syscall_64+0xf3/0x230 [ 431.657110][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.663104][T13004] page last free pid 12775 tgid 12774 stack trace: [ 431.669683][T13004] free_unref_folios+0xf12/0x18d0 [ 431.674748][T13004] folios_put_refs+0x76c/0x860 [ 431.680317][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 431.685981][T13004] tlb_flush_mmu+0x3a3/0x680 [ 431.690668][T13004] tlb_finish_mmu+0xd4/0x200 [ 431.695276][T13004] exit_mmap+0x496/0xc40 [ 431.699590][T13004] __mmput+0x115/0x390 [ 431.703685][T13004] exit_mm+0x220/0x310 [ 431.707874][T13004] do_exit+0x9b2/0x28e0 [ 431.712122][T13004] do_group_exit+0x207/0x2c0 [ 431.716835][T13004] get_signal+0x176f/0x1810 [ 431.721351][T13004] arch_do_signal_or_restart+0x96/0x860 [ 431.727037][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 431.732613][T13004] do_syscall_64+0x100/0x230 [ 431.737303][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.743230][T13004] Modules linked in: [ 431.747259][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 431.759165][T13004] Tainted: [B]=BAD_PAGE [ 431.763302][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.773363][T13004] Call Trace: [ 431.776632][T13004] [ 431.779572][T13004] dump_stack_lvl+0x241/0x360 [ 431.784257][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.789469][T13004] ? __pfx_print_modules+0x10/0x10 [ 431.794577][T13004] bad_page+0x166/0x1b0 [ 431.798724][T13004] free_unref_page+0xed0/0xf20 [ 431.803484][T13004] skb_release_data+0x6dc/0x8a0 [ 431.808362][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 431.813423][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 431.819153][T13004] ? mark_lock+0x9a/0x360 [ 431.823563][T13004] ? __lock_acquire+0x1384/0x2050 [ 431.828613][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 431.834776][T13004] ? mark_lock+0x9a/0x360 [ 431.839119][T13004] ? __lock_acquire+0x1384/0x2050 [ 431.844140][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 431.850218][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 431.856813][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 431.863340][T13004] ? read_tsc+0x9/0x20 [ 431.867498][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 431.872696][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 431.879027][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 431.885168][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 431.891547][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 431.898206][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 431.903381][T13004] ? __phys_addr+0xba/0x170 [ 431.907882][T13004] ? build_skb_around+0x111/0x260 [ 431.912932][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 431.918917][T13004] netif_receive_skb_list+0x55/0x4b0 [ 431.924210][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 431.929673][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 431.935557][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 431.941190][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 431.947005][T13004] ? synchronize_rcu+0x11b/0x360 [ 431.951948][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 431.957252][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 431.963520][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 431.969426][T13004] ? _copy_from_user+0xa6/0xe0 [ 431.974186][T13004] ? bpf_test_init+0x15a/0x180 [ 431.978960][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 431.984418][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 431.989810][T13004] ? __pfx_lock_release+0x10/0x10 [ 431.994932][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.000824][T13004] ? __fget_files+0x29/0x470 [ 432.005403][T13004] ? fput+0x1a8/0x230 [ 432.009393][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.015215][T13004] bpf_prog_test_run+0x2e4/0x360 [ 432.020160][T13004] __sys_bpf+0x48d/0x810 [ 432.024401][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 432.029173][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.035156][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.041487][T13004] ? do_syscall_64+0x100/0x230 [ 432.046261][T13004] __x64_sys_bpf+0x7c/0x90 [ 432.050667][T13004] do_syscall_64+0xf3/0x230 [ 432.055213][T13004] ? clear_bhb_loop+0x35/0x90 [ 432.059973][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.065878][T13004] RIP: 0033:0x7f71fe37dff9 [ 432.070363][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.089974][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.098488][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 432.106455][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 432.114425][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 432.122483][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.130567][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 432.138584][T13004] [ 432.141726][T13004] BUG: Bad page state in process syz.2.2394 pfn:25e0d [ 432.148895][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025e0ddc0 pfn:0x25e0d [ 432.159123][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 432.166227][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 432.174959][T13004] raw: ffff888025e0ddc0 0000000000000001 00000000ffffffff 0000000000000000 [ 432.183676][T13004] page dumped because: page_pool leak [ 432.189170][T13004] page_owner tracks the page as allocated [ 432.194922][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155547929, free_ts 421814306661 [ 432.212531][T13004] post_alloc_hook+0x1f3/0x230 [ 432.217371][T13004] get_page_from_freelist+0x3045/0x3190 [ 432.222928][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 432.228161][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 432.233622][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 432.239587][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 432.244841][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 432.250346][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 432.255744][T13004] bpf_prog_test_run+0x2e4/0x360 [ 432.260844][T13004] __sys_bpf+0x48d/0x810 [ 432.265120][T13004] __x64_sys_bpf+0x7c/0x90 [ 432.269601][T13004] do_syscall_64+0xf3/0x230 [ 432.274241][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.280285][T13004] page last free pid 12775 tgid 12774 stack trace: [ 432.286849][T13004] free_unref_folios+0xf12/0x18d0 [ 432.291908][T13004] folios_put_refs+0x76c/0x860 [ 432.296738][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 432.302392][T13004] tlb_flush_mmu+0x3a3/0x680 [ 432.307046][T13004] tlb_finish_mmu+0xd4/0x200 [ 432.311661][T13004] exit_mmap+0x496/0xc40 [ 432.315908][T13004] __mmput+0x115/0x390 [ 432.320143][T13004] exit_mm+0x220/0x310 [ 432.324583][T13004] do_exit+0x9b2/0x28e0 [ 432.328798][T13004] do_group_exit+0x207/0x2c0 [ 432.333415][T13004] get_signal+0x176f/0x1810 [ 432.337998][T13004] arch_do_signal_or_restart+0x96/0x860 [ 432.343578][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 432.349190][T13004] do_syscall_64+0x100/0x230 [ 432.353821][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.359770][T13004] Modules linked in: [ 432.363684][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 432.375585][T13004] Tainted: [B]=BAD_PAGE [ 432.379898][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 432.390044][T13004] Call Trace: [ 432.393333][T13004] [ 432.396257][T13004] dump_stack_lvl+0x241/0x360 [ 432.400931][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.406116][T13004] ? __pfx_print_modules+0x10/0x10 [ 432.411215][T13004] bad_page+0x166/0x1b0 [ 432.415373][T13004] free_unref_page+0xed0/0xf20 [ 432.420135][T13004] skb_release_data+0x6dc/0x8a0 [ 432.424974][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 432.429983][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 432.435690][T13004] ? mark_lock+0x9a/0x360 [ 432.440008][T13004] ? __lock_acquire+0x1384/0x2050 [ 432.445020][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 432.451086][T13004] ? mark_lock+0x9a/0x360 [ 432.455432][T13004] ? __lock_acquire+0x1384/0x2050 [ 432.460459][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 432.466434][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 432.473032][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 432.479533][T13004] ? read_tsc+0x9/0x20 [ 432.483604][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 432.488869][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 432.495196][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 432.501356][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 432.507676][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 432.514421][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 432.519624][T13004] ? __phys_addr+0xba/0x170 [ 432.524113][T13004] ? build_skb_around+0x111/0x260 [ 432.529125][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 432.535022][T13004] netif_receive_skb_list+0x55/0x4b0 [ 432.540293][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 432.545828][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 432.551729][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 432.557319][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 432.563115][T13004] ? synchronize_rcu+0x11b/0x360 [ 432.568048][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 432.573350][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 432.579589][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 432.585582][T13004] ? _copy_from_user+0xa6/0xe0 [ 432.590375][T13004] ? bpf_test_init+0x15a/0x180 [ 432.595132][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 432.600680][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 432.606071][T13004] ? __pfx_lock_release+0x10/0x10 [ 432.611091][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.616907][T13004] ? __fget_files+0x29/0x470 [ 432.621506][T13004] ? fput+0x1a8/0x230 [ 432.625565][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.631379][T13004] bpf_prog_test_run+0x2e4/0x360 [ 432.636319][T13004] __sys_bpf+0x48d/0x810 [ 432.640576][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 432.645329][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.651296][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.657656][T13004] ? do_syscall_64+0x100/0x230 [ 432.662430][T13004] __x64_sys_bpf+0x7c/0x90 [ 432.666838][T13004] do_syscall_64+0xf3/0x230 [ 432.671341][T13004] ? clear_bhb_loop+0x35/0x90 [ 432.676019][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.681898][T13004] RIP: 0033:0x7f71fe37dff9 [ 432.686293][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.705973][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.714370][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 432.722337][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 432.730312][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 432.738280][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.746254][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 432.754303][T13004] [ 432.757452][T13004] BUG: Bad page state in process syz.2.2394 pfn:6657c [ 432.764329][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806657ca00 pfn:0x6657c [ 432.774471][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 432.781643][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 432.790375][T13004] raw: ffff88806657ca00 0000000000000001 00000000ffffffff 0000000000000000 [ 432.799020][T13004] page dumped because: page_pool leak [ 432.804397][T13004] page_owner tracks the page as allocated [ 432.810169][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155536444, free_ts 421814315246 [ 432.827538][T13004] post_alloc_hook+0x1f3/0x230 [ 432.832325][T13004] get_page_from_freelist+0x3045/0x3190 [ 432.837958][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 432.843180][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 432.848752][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 432.854678][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 432.859970][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 432.865394][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 432.870885][T13004] bpf_prog_test_run+0x2e4/0x360 [ 432.875869][T13004] __sys_bpf+0x48d/0x810 [ 432.880172][T13004] __x64_sys_bpf+0x7c/0x90 [ 432.884613][T13004] do_syscall_64+0xf3/0x230 [ 432.889193][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.895219][T13004] page last free pid 12775 tgid 12774 stack trace: [ 432.901814][T13004] free_unref_folios+0xf12/0x18d0 [ 432.906953][T13004] folios_put_refs+0x76c/0x860 [ 432.911755][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 432.917471][T13004] tlb_flush_mmu+0x3a3/0x680 [ 432.922083][T13004] tlb_finish_mmu+0xd4/0x200 [ 432.926742][T13004] exit_mmap+0x496/0xc40 [ 432.931000][T13004] __mmput+0x115/0x390 [ 432.935060][T13004] exit_mm+0x220/0x310 [ 432.939204][T13004] do_exit+0x9b2/0x28e0 [ 432.943372][T13004] do_group_exit+0x207/0x2c0 [ 432.948015][T13004] get_signal+0x176f/0x1810 [ 432.952531][T13004] arch_do_signal_or_restart+0x96/0x860 [ 432.958208][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 432.963781][T13004] do_syscall_64+0x100/0x230 [ 432.968453][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.974403][T13004] Modules linked in: [ 432.978374][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 432.990288][T13004] Tainted: [B]=BAD_PAGE [ 432.994421][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 433.004562][T13004] Call Trace: [ 433.007832][T13004] [ 433.010754][T13004] dump_stack_lvl+0x241/0x360 [ 433.015528][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.020735][T13004] ? __pfx_print_modules+0x10/0x10 [ 433.025855][T13004] bad_page+0x166/0x1b0 [ 433.030097][T13004] free_unref_page+0xed0/0xf20 [ 433.034860][T13004] skb_release_data+0x6dc/0x8a0 [ 433.039709][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 433.044750][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 433.050478][T13004] ? mark_lock+0x9a/0x360 [ 433.054790][T13004] ? __lock_acquire+0x1384/0x2050 [ 433.059803][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 433.065863][T13004] ? mark_lock+0x9a/0x360 [ 433.070194][T13004] ? __lock_acquire+0x1384/0x2050 [ 433.075252][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 433.081255][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 433.087860][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 433.094386][T13004] ? read_tsc+0x9/0x20 [ 433.098475][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 433.103675][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 433.110266][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 433.116436][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 433.122870][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 433.129628][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 433.134816][T13004] ? __phys_addr+0xba/0x170 [ 433.139320][T13004] ? build_skb_around+0x111/0x260 [ 433.144346][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 433.150249][T13004] netif_receive_skb_list+0x55/0x4b0 [ 433.155534][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 433.160990][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 433.166982][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 433.172546][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 433.178342][T13004] ? synchronize_rcu+0x11b/0x360 [ 433.183286][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 433.188587][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 433.194854][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 433.200773][T13004] ? _copy_from_user+0xa6/0xe0 [ 433.205526][T13004] ? bpf_test_init+0x15a/0x180 [ 433.210277][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 433.215739][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 433.221101][T13004] ? __pfx_lock_release+0x10/0x10 [ 433.226111][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.231931][T13004] ? __fget_files+0x29/0x470 [ 433.236522][T13004] ? fput+0x1a8/0x230 [ 433.240520][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.246327][T13004] bpf_prog_test_run+0x2e4/0x360 [ 433.251262][T13004] __sys_bpf+0x48d/0x810 [ 433.255528][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 433.260292][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.266276][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.272733][T13004] ? do_syscall_64+0x100/0x230 [ 433.277496][T13004] __x64_sys_bpf+0x7c/0x90 [ 433.281936][T13004] do_syscall_64+0xf3/0x230 [ 433.286441][T13004] ? clear_bhb_loop+0x35/0x90 [ 433.291214][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.297123][T13004] RIP: 0033:0x7f71fe37dff9 [ 433.301538][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.321150][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.329564][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 433.337536][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 433.345548][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 433.353534][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.361501][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 433.369491][T13004] [ 433.372701][T13004] BUG: Bad page state in process syz.2.2394 pfn:71b52 [ 433.379679][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888071b52dc0 pfn:0x71b52 [ 433.390008][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 433.397178][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 433.405781][T13004] raw: ffff888071b52dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 433.414449][T13004] page dumped because: page_pool leak [ 433.419873][T13004] page_owner tracks the page as allocated [ 433.425586][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155525101, free_ts 421814324172 [ 433.442883][T13004] post_alloc_hook+0x1f3/0x230 [ 433.447777][T13004] get_page_from_freelist+0x3045/0x3190 [ 433.453339][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 433.458598][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 433.464076][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 433.470059][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 433.475284][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 433.480819][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 433.486234][T13004] bpf_prog_test_run+0x2e4/0x360 [ 433.491265][T13004] __sys_bpf+0x48d/0x810 [ 433.495533][T13004] __x64_sys_bpf+0x7c/0x90 [ 433.500017][T13004] do_syscall_64+0xf3/0x230 [ 433.504557][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.510524][T13004] page last free pid 12775 tgid 12774 stack trace: [ 433.517224][T13004] free_unref_folios+0xf12/0x18d0 [ 433.522277][T13004] folios_put_refs+0x76c/0x860 [ 433.527143][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 433.532812][T13004] tlb_flush_mmu+0x3a3/0x680 [ 433.537518][T13004] tlb_finish_mmu+0xd4/0x200 [ 433.542143][T13004] exit_mmap+0x496/0xc40 [ 433.546477][T13004] __mmput+0x115/0x390 [ 433.550573][T13004] exit_mm+0x220/0x310 [ 433.554624][T13004] do_exit+0x9b2/0x28e0 [ 433.558870][T13004] do_group_exit+0x207/0x2c0 [ 433.563502][T13004] get_signal+0x176f/0x1810 [ 433.568066][T13004] arch_do_signal_or_restart+0x96/0x860 [ 433.573720][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 433.579357][T13004] do_syscall_64+0x100/0x230 [ 433.583995][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.589969][T13004] Modules linked in: [ 433.593884][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 433.605775][T13004] Tainted: [B]=BAD_PAGE [ 433.609934][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 433.619994][T13004] Call Trace: [ 433.623261][T13004] [ 433.626178][T13004] dump_stack_lvl+0x241/0x360 [ 433.630870][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.636091][T13004] ? __pfx_print_modules+0x10/0x10 [ 433.641194][T13004] bad_page+0x166/0x1b0 [ 433.645344][T13004] free_unref_page+0xed0/0xf20 [ 433.650318][T13004] skb_release_data+0x6dc/0x8a0 [ 433.655159][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 433.660173][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 433.665873][T13004] ? mark_lock+0x9a/0x360 [ 433.670186][T13004] ? __lock_acquire+0x1384/0x2050 [ 433.675199][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 433.681261][T13004] ? mark_lock+0x9a/0x360 [ 433.685574][T13004] ? __lock_acquire+0x1384/0x2050 [ 433.690605][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 433.696593][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 433.703201][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 433.709817][T13004] ? read_tsc+0x9/0x20 [ 433.713876][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 433.719063][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 433.725381][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 433.731626][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 433.738011][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 433.744701][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 433.749935][T13004] ? __phys_addr+0xba/0x170 [ 433.754439][T13004] ? build_skb_around+0x111/0x260 [ 433.759464][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 433.765348][T13004] netif_receive_skb_list+0x55/0x4b0 [ 433.770637][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 433.776168][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 433.782053][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 433.787682][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 433.793732][T13004] ? synchronize_rcu+0x11b/0x360 [ 433.798669][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 433.803982][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 433.810297][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 433.816186][T13004] ? _copy_from_user+0xa6/0xe0 [ 433.820935][T13004] ? bpf_test_init+0x15a/0x180 [ 433.825704][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 433.831280][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 433.836682][T13004] ? __pfx_lock_release+0x10/0x10 [ 433.842103][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.847926][T13004] ? __fget_files+0x29/0x470 [ 433.852551][T13004] ? fput+0x1a8/0x230 [ 433.856554][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.862367][T13004] bpf_prog_test_run+0x2e4/0x360 [ 433.867313][T13004] __sys_bpf+0x48d/0x810 [ 433.871562][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 433.876358][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.882557][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.888987][T13004] ? do_syscall_64+0x100/0x230 [ 433.893784][T13004] __x64_sys_bpf+0x7c/0x90 [ 433.898209][T13004] do_syscall_64+0xf3/0x230 [ 433.902740][T13004] ? clear_bhb_loop+0x35/0x90 [ 433.907502][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.913400][T13004] RIP: 0033:0x7f71fe37dff9 [ 433.917814][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.937431][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.945848][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 433.953823][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 433.961821][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 433.969894][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.977916][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 433.985902][T13004] [ 433.989039][T13004] BUG: Bad page state in process syz.2.2394 pfn:323b6 [ 433.996010][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880323b6000 pfn:0x323b6 [ 434.006158][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 434.013422][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 434.022078][T13004] raw: ffff8880323b6000 0000000000000001 00000000ffffffff 0000000000000000 [ 434.030774][T13004] page dumped because: page_pool leak [ 434.036147][T13004] page_owner tracks the page as allocated [ 434.041956][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155513660, free_ts 421814333809 [ 434.059233][T13004] post_alloc_hook+0x1f3/0x230 [ 434.064192][T13004] get_page_from_freelist+0x3045/0x3190 [ 434.069836][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 434.075060][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 434.080578][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 434.086568][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 434.091787][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 434.097249][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 434.102715][T13004] bpf_prog_test_run+0x2e4/0x360 [ 434.107734][T13004] __sys_bpf+0x48d/0x810 [ 434.111988][T13004] __x64_sys_bpf+0x7c/0x90 [ 434.116508][T13004] do_syscall_64+0xf3/0x230 [ 434.121032][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.127004][T13004] page last free pid 12775 tgid 12774 stack trace: [ 434.133519][T13004] free_unref_folios+0xf12/0x18d0 [ 434.138652][T13004] folios_put_refs+0x76c/0x860 [ 434.143442][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 434.149520][T13004] tlb_flush_mmu+0x3a3/0x680 [ 434.154134][T13004] tlb_finish_mmu+0xd4/0x200 [ 434.158821][T13004] exit_mmap+0x496/0xc40 [ 434.163168][T13004] __mmput+0x115/0x390 [ 434.167357][T13004] exit_mm+0x220/0x310 [ 434.171441][T13004] do_exit+0x9b2/0x28e0 [ 434.175616][T13004] do_group_exit+0x207/0x2c0 [ 434.180299][T13004] get_signal+0x176f/0x1810 [ 434.184820][T13004] arch_do_signal_or_restart+0x96/0x860 [ 434.190627][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 434.196475][T13004] do_syscall_64+0x100/0x230 [ 434.201080][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.207065][T13004] Modules linked in: [ 434.210981][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 434.222875][T13004] Tainted: [B]=BAD_PAGE [ 434.227011][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 434.237062][T13004] Call Trace: [ 434.240331][T13004] [ 434.243273][T13004] dump_stack_lvl+0x241/0x360 [ 434.247978][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.253191][T13004] ? __pfx_print_modules+0x10/0x10 [ 434.258311][T13004] bad_page+0x166/0x1b0 [ 434.262473][T13004] free_unref_page+0xed0/0xf20 [ 434.267247][T13004] skb_release_data+0x6dc/0x8a0 [ 434.272398][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 434.277426][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 434.283175][T13004] ? mark_lock+0x9a/0x360 [ 434.287524][T13004] ? __lock_acquire+0x1384/0x2050 [ 434.292571][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 434.298656][T13004] ? mark_lock+0x9a/0x360 [ 434.302970][T13004] ? __lock_acquire+0x1384/0x2050 [ 434.308076][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 434.314067][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 434.320676][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 434.327180][T13004] ? read_tsc+0x9/0x20 [ 434.331243][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 434.336442][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 434.342786][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 434.348972][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 434.355294][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 434.362060][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 434.367273][T13004] ? __phys_addr+0xba/0x170 [ 434.371798][T13004] ? build_skb_around+0x111/0x260 [ 434.376828][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 434.382822][T13004] netif_receive_skb_list+0x55/0x4b0 [ 434.388112][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 434.393803][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 434.399708][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 434.405270][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 434.411078][T13004] ? synchronize_rcu+0x11b/0x360 [ 434.416016][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 434.421311][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 434.427596][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 434.433506][T13004] ? _copy_from_user+0xa6/0xe0 [ 434.438289][T13004] ? bpf_test_init+0x15a/0x180 [ 434.443059][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 434.448510][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 434.453889][T13004] ? __pfx_lock_release+0x10/0x10 [ 434.458906][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 434.464787][T13004] ? __fget_files+0x29/0x470 [ 434.469385][T13004] ? fput+0x1a8/0x230 [ 434.473473][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 434.479290][T13004] bpf_prog_test_run+0x2e4/0x360 [ 434.484230][T13004] __sys_bpf+0x48d/0x810 [ 434.488475][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 434.493229][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 434.499320][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.505639][T13004] ? do_syscall_64+0x100/0x230 [ 434.510413][T13004] __x64_sys_bpf+0x7c/0x90 [ 434.514822][T13004] do_syscall_64+0xf3/0x230 [ 434.519317][T13004] ? clear_bhb_loop+0x35/0x90 [ 434.523981][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.529864][T13004] RIP: 0033:0x7f71fe37dff9 [ 434.534280][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.554060][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.562468][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 434.570437][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 434.578397][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 434.586445][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.594400][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 434.602513][T13004] [ 434.605672][T13004] BUG: Bad page state in process syz.2.2394 pfn:5ffcb [ 434.612672][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ffcb780 pfn:0x5ffcb [ 434.622863][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 434.630114][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 434.638920][T13004] raw: ffff88805ffcb780 0000000000000001 00000000ffffffff 0000000000000000 [ 434.647629][T13004] page dumped because: page_pool leak [ 434.653036][T13004] page_owner tracks the page as allocated [ 434.658862][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155502008, free_ts 421814394801 [ 434.676169][T13004] post_alloc_hook+0x1f3/0x230 [ 434.681045][T13004] get_page_from_freelist+0x3045/0x3190 [ 434.686723][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 434.691961][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 434.697526][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 434.703446][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 434.708744][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 434.714131][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 434.719589][T13004] bpf_prog_test_run+0x2e4/0x360 [ 434.724629][T13004] __sys_bpf+0x48d/0x810 [ 434.729045][T13004] __x64_sys_bpf+0x7c/0x90 [ 434.733558][T13004] do_syscall_64+0xf3/0x230 [ 434.738161][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.744083][T13004] page last free pid 12775 tgid 12774 stack trace: [ 434.750685][T13004] free_unref_folios+0xf12/0x18d0 [ 434.755910][T13004] folios_put_refs+0x76c/0x860 [ 434.760735][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 434.766444][T13004] tlb_flush_mmu+0x3a3/0x680 [ 434.771112][T13004] tlb_finish_mmu+0xd4/0x200 [ 434.775864][T13004] exit_mmap+0x496/0xc40 [ 434.780166][T13004] __mmput+0x115/0x390 [ 434.784250][T13004] exit_mm+0x220/0x310 [ 434.788378][T13004] do_exit+0x9b2/0x28e0 [ 434.792643][T13004] do_group_exit+0x207/0x2c0 [ 434.797302][T13004] get_signal+0x176f/0x1810 [ 434.801918][T13004] arch_do_signal_or_restart+0x96/0x860 [ 434.807520][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 434.813088][T13004] do_syscall_64+0x100/0x230 [ 434.817727][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.823654][T13004] Modules linked in: [ 434.827630][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 434.839542][T13004] Tainted: [B]=BAD_PAGE [ 434.843705][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 434.853800][T13004] Call Trace: [ 434.857120][T13004] [ 434.860040][T13004] dump_stack_lvl+0x241/0x360 [ 434.864733][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.870029][T13004] ? __pfx_print_modules+0x10/0x10 [ 434.875144][T13004] bad_page+0x166/0x1b0 [ 434.879296][T13004] free_unref_page+0xed0/0xf20 [ 434.884056][T13004] skb_release_data+0x6dc/0x8a0 [ 434.888929][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 434.893972][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 434.899689][T13004] ? mark_lock+0x9a/0x360 [ 434.904014][T13004] ? __lock_acquire+0x1384/0x2050 [ 434.909036][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 434.915184][T13004] ? mark_lock+0x9a/0x360 [ 434.919518][T13004] ? __lock_acquire+0x1384/0x2050 [ 434.924540][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 434.930619][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 434.937222][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 434.943755][T13004] ? read_tsc+0x9/0x20 [ 434.947826][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 434.953045][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 434.959361][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 434.965503][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 434.971826][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 434.978538][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 434.983745][T13004] ? __phys_addr+0xba/0x170 [ 434.988270][T13004] ? build_skb_around+0x111/0x260 [ 434.993406][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 434.999302][T13004] netif_receive_skb_list+0x55/0x4b0 [ 435.004595][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 435.010073][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 435.015993][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 435.021548][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 435.027369][T13004] ? synchronize_rcu+0x11b/0x360 [ 435.032329][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 435.037749][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 435.044019][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 435.049944][T13004] ? _copy_from_user+0xa6/0xe0 [ 435.054708][T13004] ? bpf_test_init+0x15a/0x180 [ 435.059475][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 435.064932][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 435.070306][T13004] ? __pfx_lock_release+0x10/0x10 [ 435.075349][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.081169][T13004] ? __fget_files+0x29/0x470 [ 435.085784][T13004] ? fput+0x1a8/0x230 [ 435.089769][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.095596][T13004] bpf_prog_test_run+0x2e4/0x360 [ 435.100542][T13004] __sys_bpf+0x48d/0x810 [ 435.104817][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 435.109847][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.115834][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.122194][T13004] ? do_syscall_64+0x100/0x230 [ 435.127039][T13004] __x64_sys_bpf+0x7c/0x90 [ 435.131441][T13004] do_syscall_64+0xf3/0x230 [ 435.135931][T13004] ? clear_bhb_loop+0x35/0x90 [ 435.140608][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.146549][T13004] RIP: 0033:0x7f71fe37dff9 [ 435.150974][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.170668][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.179079][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 435.187199][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 435.195368][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 435.203357][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.211331][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 435.219335][T13004] [ 435.222436][T13004] BUG: Bad page state in process syz.2.2394 pfn:5f971 [ 435.229356][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f971f00 pfn:0x5f971 [ 435.239488][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 435.247060][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 435.255664][T13004] raw: ffff88805f971f00 0000000000000001 00000000ffffffff 0000000000000000 [ 435.264332][T13004] page dumped because: page_pool leak [ 435.269753][T13004] page_owner tracks the page as allocated [ 435.275508][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155490146, free_ts 421814404375 [ 435.292792][T13004] post_alloc_hook+0x1f3/0x230 [ 435.297730][T13004] get_page_from_freelist+0x3045/0x3190 [ 435.303325][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 435.308586][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 435.314089][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 435.320046][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 435.325284][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 435.330743][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 435.336141][T13004] bpf_prog_test_run+0x2e4/0x360 [ 435.341145][T13004] __sys_bpf+0x48d/0x810 [ 435.345414][T13004] __x64_sys_bpf+0x7c/0x90 [ 435.349936][T13004] do_syscall_64+0xf3/0x230 [ 435.354455][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.360410][T13004] page last free pid 12775 tgid 12774 stack trace: [ 435.366983][T13004] free_unref_folios+0xf12/0x18d0 [ 435.372023][T13004] folios_put_refs+0x76c/0x860 [ 435.376841][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 435.382487][T13004] tlb_flush_mmu+0x3a3/0x680 [ 435.387120][T13004] tlb_finish_mmu+0xd4/0x200 [ 435.391719][T13004] exit_mmap+0x496/0xc40 [ 435.395943][T13004] __mmput+0x115/0x390 [ 435.400059][T13004] exit_mm+0x220/0x310 [ 435.404199][T13004] do_exit+0x9b2/0x28e0 [ 435.408446][T13004] do_group_exit+0x207/0x2c0 [ 435.413056][T13004] get_signal+0x176f/0x1810 [ 435.417627][T13004] arch_do_signal_or_restart+0x96/0x860 [ 435.423222][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 435.428828][T13004] do_syscall_64+0x100/0x230 [ 435.433428][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.439413][T13004] Modules linked in: [ 435.443325][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 435.455211][T13004] Tainted: [B]=BAD_PAGE [ 435.459371][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 435.469411][T13004] Call Trace: [ 435.472673][T13004] [ 435.475610][T13004] dump_stack_lvl+0x241/0x360 [ 435.480296][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.485519][T13004] ? __pfx_print_modules+0x10/0x10 [ 435.490665][T13004] bad_page+0x166/0x1b0 [ 435.494816][T13004] free_unref_page+0xed0/0xf20 [ 435.499581][T13004] skb_release_data+0x6dc/0x8a0 [ 435.504443][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 435.509484][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 435.515295][T13004] ? mark_lock+0x9a/0x360 [ 435.519619][T13004] ? __lock_acquire+0x1384/0x2050 [ 435.524650][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 435.530743][T13004] ? mark_lock+0x9a/0x360 [ 435.535083][T13004] ? __lock_acquire+0x1384/0x2050 [ 435.540130][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 435.546097][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 435.552681][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 435.559189][T13004] ? read_tsc+0x9/0x20 [ 435.563355][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 435.568551][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 435.574894][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 435.581054][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 435.587395][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 435.594078][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 435.599274][T13004] ? __phys_addr+0xba/0x170 [ 435.603803][T13004] ? build_skb_around+0x111/0x260 [ 435.608830][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 435.614750][T13004] netif_receive_skb_list+0x55/0x4b0 [ 435.620043][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 435.625592][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 435.631559][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 435.637117][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 435.642931][T13004] ? synchronize_rcu+0x11b/0x360 [ 435.647882][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 435.653183][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 435.659426][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 435.665316][T13004] ? _copy_from_user+0xa6/0xe0 [ 435.670073][T13004] ? bpf_test_init+0x15a/0x180 [ 435.674827][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 435.680296][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 435.685672][T13004] ? __pfx_lock_release+0x10/0x10 [ 435.690692][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.696501][T13004] ? __fget_files+0x29/0x470 [ 435.701139][T13004] ? fput+0x1a8/0x230 [ 435.705111][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.711000][T13004] bpf_prog_test_run+0x2e4/0x360 [ 435.715947][T13004] __sys_bpf+0x48d/0x810 [ 435.720184][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 435.724955][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.730946][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.737281][T13004] ? do_syscall_64+0x100/0x230 [ 435.742034][T13004] __x64_sys_bpf+0x7c/0x90 [ 435.746443][T13004] do_syscall_64+0xf3/0x230 [ 435.750953][T13004] ? clear_bhb_loop+0x35/0x90 [ 435.755617][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.761515][T13004] RIP: 0033:0x7f71fe37dff9 [ 435.765934][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.785567][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.793972][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 435.801939][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 435.809987][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 435.817981][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.825961][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 435.833952][T13004] [ 435.837152][T13004] BUG: Bad page state in process syz.2.2394 pfn:2f60f [ 435.844005][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f60ff50 pfn:0x2f60f [ 435.854133][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 435.861330][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 435.869993][T13004] raw: ffff88802f60ff50 0000000000000001 00000000ffffffff 0000000000000000 [ 435.878650][T13004] page dumped because: page_pool leak [ 435.884020][T13004] page_owner tracks the page as allocated [ 435.889807][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155479757, free_ts 421814413229 [ 435.907065][T13004] post_alloc_hook+0x1f3/0x230 [ 435.911844][T13004] get_page_from_freelist+0x3045/0x3190 [ 435.917502][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 435.922744][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 435.928274][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 435.934193][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 435.939655][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 435.945192][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 435.950670][T13004] bpf_prog_test_run+0x2e4/0x360 [ 435.955648][T13004] __sys_bpf+0x48d/0x810 [ 435.959962][T13004] __x64_sys_bpf+0x7c/0x90 [ 435.964422][T13004] do_syscall_64+0xf3/0x230 [ 435.968979][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.975160][T13004] page last free pid 12775 tgid 12774 stack trace: [ 435.981816][T13004] free_unref_folios+0xf12/0x18d0 [ 435.986946][T13004] folios_put_refs+0x76c/0x860 [ 435.991814][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 435.997526][T13004] tlb_flush_mmu+0x3a3/0x680 [ 436.002137][T13004] tlb_finish_mmu+0xd4/0x200 [ 436.006813][T13004] exit_mmap+0x496/0xc40 [ 436.011076][T13004] __mmput+0x115/0x390 [ 436.015134][T13004] exit_mm+0x220/0x310 [ 436.019296][T13004] do_exit+0x9b2/0x28e0 [ 436.023467][T13004] do_group_exit+0x207/0x2c0 [ 436.028108][T13004] get_signal+0x176f/0x1810 [ 436.032633][T13004] arch_do_signal_or_restart+0x96/0x860 [ 436.038289][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 436.043954][T13004] do_syscall_64+0x100/0x230 [ 436.048615][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.054550][T13004] Modules linked in: [ 436.058522][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 436.070433][T13004] Tainted: [B]=BAD_PAGE [ 436.074567][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.084602][T13004] Call Trace: [ 436.087869][T13004] [ 436.090785][T13004] dump_stack_lvl+0x241/0x360 [ 436.095474][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.100668][T13004] ? __pfx_print_modules+0x10/0x10 [ 436.105882][T13004] bad_page+0x166/0x1b0 [ 436.110022][T13004] free_unref_page+0xed0/0xf20 [ 436.114773][T13004] skb_release_data+0x6dc/0x8a0 [ 436.119633][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 436.124699][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 436.130591][T13004] ? mark_lock+0x9a/0x360 [ 436.134929][T13004] ? __lock_acquire+0x1384/0x2050 [ 436.139975][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 436.146054][T13004] ? mark_lock+0x9a/0x360 [ 436.150392][T13004] ? __lock_acquire+0x1384/0x2050 [ 436.155435][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 436.161436][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 436.168032][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 436.174544][T13004] ? read_tsc+0x9/0x20 [ 436.178701][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 436.183941][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.190272][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 436.196443][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.202797][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 436.209472][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 436.214675][T13004] ? __phys_addr+0xba/0x170 [ 436.219178][T13004] ? build_skb_around+0x111/0x260 [ 436.224195][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 436.230075][T13004] netif_receive_skb_list+0x55/0x4b0 [ 436.235345][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 436.240798][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 436.246689][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 436.252305][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 436.258184][T13004] ? synchronize_rcu+0x11b/0x360 [ 436.263131][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 436.268930][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 436.275182][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 436.281161][T13004] ? _copy_from_user+0xa6/0xe0 [ 436.285919][T13004] ? bpf_test_init+0x15a/0x180 [ 436.290686][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 436.296145][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 436.301522][T13004] ? __pfx_lock_release+0x10/0x10 [ 436.306578][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.312413][T13004] ? __fget_files+0x29/0x470 [ 436.317007][T13004] ? fput+0x1a8/0x230 [ 436.320999][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.326837][T13004] bpf_prog_test_run+0x2e4/0x360 [ 436.331805][T13004] __sys_bpf+0x48d/0x810 [ 436.336052][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 436.340911][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.346909][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.353240][T13004] ? do_syscall_64+0x100/0x230 [ 436.358010][T13004] __x64_sys_bpf+0x7c/0x90 [ 436.362427][T13004] do_syscall_64+0xf3/0x230 [ 436.366940][T13004] ? clear_bhb_loop+0x35/0x90 [ 436.371634][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.377529][T13004] RIP: 0033:0x7f71fe37dff9 [ 436.381934][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.401527][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.409926][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 436.417987][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 436.426051][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 436.434010][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.441961][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 436.449927][T13004] [ 436.453033][T13004] BUG: Bad page state in process syz.2.2394 pfn:42f17 [ 436.459979][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888042f17e88 pfn:0x42f17 [ 436.470101][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 436.477267][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 436.485856][T13004] raw: ffff888042f17e88 0000000000000001 00000000ffffffff 0000000000000000 [ 436.494512][T13004] page dumped because: page_pool leak [ 436.499933][T13004] page_owner tracks the page as allocated [ 436.505633][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155468438, free_ts 421814422674 [ 436.522899][T13004] post_alloc_hook+0x1f3/0x230 [ 436.527801][T13004] get_page_from_freelist+0x3045/0x3190 [ 436.533364][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 436.538962][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 436.544428][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 436.550479][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 436.555707][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 436.561170][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 436.566749][T13004] bpf_prog_test_run+0x2e4/0x360 [ 436.571712][T13004] __sys_bpf+0x48d/0x810 [ 436.575946][T13004] __x64_sys_bpf+0x7c/0x90 [ 436.580433][T13004] do_syscall_64+0xf3/0x230 [ 436.584948][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.590905][T13004] page last free pid 12775 tgid 12774 stack trace: [ 436.597511][T13004] free_unref_folios+0xf12/0x18d0 [ 436.602552][T13004] folios_put_refs+0x76c/0x860 [ 436.607398][T13004] free_pages_and_swap_cache+0x5c8/0x690 [ 436.613135][T13004] tlb_flush_mmu+0x3a3/0x680 [ 436.617780][T13004] tlb_finish_mmu+0xd4/0x200 [ 436.622376][T13004] exit_mmap+0x496/0xc40 [ 436.626740][T13004] __mmput+0x115/0x390 [ 436.630817][T13004] exit_mm+0x220/0x310 [ 436.634865][T13004] do_exit+0x9b2/0x28e0 [ 436.639075][T13004] do_group_exit+0x207/0x2c0 [ 436.643674][T13004] get_signal+0x176f/0x1810 [ 436.648279][T13004] arch_do_signal_or_restart+0x96/0x860 [ 436.653839][T13004] syscall_exit_to_user_mode+0xc9/0x370 [ 436.659474][T13004] do_syscall_64+0x100/0x230 [ 436.664071][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.670028][T13004] Modules linked in: [ 436.673928][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.2.2394 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 436.685805][T13004] Tainted: [B]=BAD_PAGE [ 436.690033][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.700069][T13004] Call Trace: [ 436.703330][T13004] [ 436.706260][T13004] dump_stack_lvl+0x241/0x360 [ 436.710949][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.716144][T13004] ? __pfx_print_modules+0x10/0x10 [ 436.721251][T13004] bad_page+0x166/0x1b0 [ 436.725411][T13004] free_unref_page+0xed0/0xf20 [ 436.730184][T13004] skb_release_data+0x6dc/0x8a0 [ 436.735028][T13004] sk_skb_reason_drop+0x1c9/0x380 [ 436.740036][T13004] __netif_receive_skb_core+0x3edd/0x4570 [ 436.745740][T13004] ? mark_lock+0x9a/0x360 [ 436.750080][T13004] ? __lock_acquire+0x1384/0x2050 [ 436.755144][T13004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 436.761204][T13004] ? mark_lock+0x9a/0x360 [ 436.765516][T13004] ? __lock_acquire+0x1384/0x2050 [ 436.770536][T13004] __netif_receive_skb_list_core+0x2b1/0x980 [ 436.776512][T13004] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 436.783126][T13004] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 436.789624][T13004] ? read_tsc+0x9/0x20 [ 436.793712][T13004] ? timekeeping_get_ns+0x2c0/0x420 [ 436.799008][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.805366][T13004] netif_receive_skb_list_internal+0xa51/0xe30 [ 436.811541][T13004] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.817959][T13004] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 436.824621][T13004] ? __pfx_eth_type_trans+0x10/0x10 [ 436.829893][T13004] ? __phys_addr+0xba/0x170 [ 436.834384][T13004] ? build_skb_around+0x111/0x260 [ 436.839406][T13004] ? __xdp_build_skb_from_frame+0x338/0x650 [ 436.845282][T13004] netif_receive_skb_list+0x55/0x4b0 [ 436.850640][T13004] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 436.856118][T13004] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 436.862006][T13004] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 436.867541][T13004] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 436.873333][T13004] ? synchronize_rcu+0x11b/0x360 [ 436.878268][T13004] ? __pfx_synchronize_rcu+0x10/0x10 [ 436.883574][T13004] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 436.889813][T13004] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 436.895784][T13004] ? _copy_from_user+0xa6/0xe0 [ 436.900622][T13004] ? bpf_test_init+0x15a/0x180 [ 436.905367][T13004] ? xdp_convert_md_to_buff+0x5b/0x330 [ 436.910814][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 436.916170][T13004] ? __pfx_lock_release+0x10/0x10 [ 436.921252][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.927158][T13004] ? __fget_files+0x29/0x470 [ 436.931804][T13004] ? fput+0x1a8/0x230 [ 436.935782][T13004] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.941589][T13004] bpf_prog_test_run+0x2e4/0x360 [ 436.946532][T13004] __sys_bpf+0x48d/0x810 [ 436.950877][T13004] ? __pfx___sys_bpf+0x10/0x10 [ 436.955651][T13004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.961665][T13004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.967987][T13004] ? do_syscall_64+0x100/0x230 [ 436.972736][T13004] __x64_sys_bpf+0x7c/0x90 [ 436.977155][T13004] do_syscall_64+0xf3/0x230 [ 436.981673][T13004] ? clear_bhb_loop+0x35/0x90 [ 436.986339][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.992238][T13004] RIP: 0033:0x7f71fe37dff9 [ 436.996649][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.016240][T13004] RSP: 002b:00007f71ff1e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.024646][T13004] RAX: ffffffffffffffda RBX: 00007f71fe536058 RCX: 00007f71fe37dff9 [ 437.032904][T13004] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 437.040865][T13004] RBP: 00007f71fe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 437.048928][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.056880][T13004] R13: 0000000000000000 R14: 00007f71fe536058 R15: 00007fff7b55bb78 [ 437.064962][T13004] [ 437.068106][T13004] BUG: Bad page state in process syz.2.2394 pfn:32300 [ 437.075049][T13004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880323000f0 pfn:0x32300 [ 437.085211][T13004] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 437.092402][T13004] raw: 00fff00000000000 dead000000000040 ffff88807210f000 0000000000000000 [ 437.101048][T13004] raw: ffff8880323000f0 0000000000000001 00000000ffffffff 0000000000000000 [ 437.109693][T13004] page dumped because: page_pool leak [ 437.115568][T13004] page_owner tracks the page as allocated [ 437.121398][T13004] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13004, tgid 12999 (syz.2.2394), ts 427155456915, free_ts 421814432231 [ 437.138680][T13004] post_alloc_hook+0x1f3/0x230 [ 437.143459][T13004] get_page_from_freelist+0x3045/0x3190 [ 437.149225][T13004] __alloc_pages_noprof+0x256/0x6c0 [ 437.154469][T13004] alloc_pages_bulk_noprof+0x729/0xd40 [ 437.160022][T13004] __page_pool_alloc_pages_slow+0x122/0x690 [ 437.165938][T13004] page_pool_alloc_pages+0xd0/0x1c0 [ 437.171201][T13004] bpf_test_run_xdp_live+0x950/0x2160 [ 437.176701][T13004] bpf_prog_test_run_xdp+0x805/0x11e0 [ 437.182089][T13004] bpf_prog_test_run+0x2e4/0x360 [ 437.187142][T13004] __sys_bpf+0x48d/0x810 [ 437.191401][T13004] __x64_sys_bpf+0x7c/0x90 [ 437.195821][T13004] do_syscall_64+0xf3/0x230 [ 437.200412][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.206442][T13004] page last free pid 12775 tgid 12774 stack trace: [ 437.212953][T13004] free_unref_folios+0xf12/0x18d0 [ 437.218063][T13004] folios_put_refs+0x76c/0x860