last executing test programs: 22.100171711s ago: executing program 0 (id=1): write(0xffffffffffffffff, &(0x7f0000000040)="3a03", 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r4, 0x101, 0x2, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.903308119s ago: executing program 4 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r4, 0x29, 0x2, 0x6, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x400, 0x9}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r8}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={r8, 0xb, "793b4ede5ec7c0d6f18c11"}, &(0x7f0000000080)=0x13) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x74}}, 0x40000) 2.693650714s ago: executing program 4 (id=145): r0 = socket(0x10, 0x2, 0xfffffffd) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000880)="b01da46be7a8376e54b1378b864e4ef0e40926aaea711cfb9f7d6f36d78fde1bf23087ca43a83411f7688b8e38a1916fc5e1771666cdd514251df5787c3bf607fb2c200b31cc96c01152a449db2b2d51ec684842895e145c1b0cfcca227bd29e2a09a181bc642d47d2ca4d4406557d864967cdd70c9f4fce77419c2fc2a9aa05e612dfbbb771072ce08ac453aad52d55ac2ce7ba9a7d32fa663dd4d2805f45c61ec82b4abbf9c4b49cadb6f7b7b4aefbdef9658312aa21e03c16f98bef5a0ee711dc59ea8c9f0613f6349ed26baf716237059a85e14cd3261799162ed68c77717b69b56af192a247be1571c1ebed8fc7d6a560b646d977db64fc76e4700100243449282504e883b9759234a333c0b936299760ac38271d3093524c7ffc328e8e7211a8642487ff35387ebd661ceee53b0bf2a05a7c2e499fba895951e2d5a482b47955101074a1ac693ac7ce9d4628d5221ce3ac5ccf6dce548b30b37ed78b26a5eedfda70700a6358e412e714cbaf92fe5f041c7436282765d4ee787a0ecdbc698cb633a619eee67e5f2fd2395192cc351f229a0a1be7d81e008e98576a19615528a298707b99dbbaebe4a9e1e4f1be62d452b894d9287774b7484272d775f3f7a174c0e5a26739c6a5d1a6a17b5e06566070c1ec8c8f10f7c0d4ddcc1b485f5888b0c91312904d957d4cc11d84495f29c989493258fe227a820438dc450d0994576d9a37424d923498524d89f5c5b791c1aed4d0870fcbe1aafa3495ce68d64517a250e2fb4d4f7eae0dab0da54f0aa8f1ce36f847b82adcfe22537e40d53f8865930a5d1c671dbf27326ad85373dcfc6ba8bc4aed458224f37b3668a3b0d8f3c788ca54933ec27f8b17b702cdc76f2fcb99c94b8c6ba9e0c71be977f3e6a2c2852a47c5a947208ff163261a0c7e939de0a21d007c2e130473d8ab0e30598ef9562b5366a1dbf92ac3496ac484bb06ca9d6a2cf685d7b4e7b7b60625b4831cc704550e1cc220fa42c1fb4e98ef5dbf5ac47880603570de7a63d4934f4c804419361c2833f4b9709abc147eb3fa71f58b3f434b46450df68b6a50cc21624a682754144442f70d9bd03079bcec8b41ec02f9db804458238aa92d2442a898ddd793ebab3b73d69a0600807c65e306309fdce09d839db62164e895dce3378516cb735e5cc0c99a8e773f4dbf0e400d08ace5e81cdae4d4f7cb19360ca36cd878a7252491ada4cda6ba145997aef721d9da705473c1f271c4d114cb0b13ea905b3a81d830bd514bc2a3279d2d37d75d2ef19563e0a7760f4901a9e94346fbbf8e330cf2f0b391a128974ecb4276f137067cabdc028723d46f2f855b76c8414faa61f4a978da9c01e92f99f99fcbd2d546817ccc21ca4545e986cf303a755d65abc74b11f71f9a4e1bef3ea9360ee5e218b6643cd026431accd77029556be9cd5bc61d2dd8b4c6df20c8e2701331b01321ad3c7a0da81e6a6f81521873eb93627e388e76b9c022ac91ea2f7ad4c6bd069e343703ac98c703e692c6d45e48812c6589278da9b0952d04b7e23457f96881e43f95fca78f19c7bd08f943869c544e179c045383531d31672b646c849698318f0968d4f86134b49988650f8d2c7d5ff81ff113a556bc3fc1437f227718b8399b042b500f28040a759ea14af1ab78ac9db657286d3dc3dd2c0829db541b996e9b8b9eb5af3aa0d6234c8bca02ab19a210f94434a7571a6197efbb9c13799509bfd92d8d73c46707aacaf6b4e316beb8770906a713e7738c65797832575481dcf848a7ee2ef89bc86220631755453e3f71120c8f8f37c81e14f79bba9319efa5d32564885acf3a9e94087f997739e6332fe8b292882a6a3f65b1424d670cdbf121d8fc06f719f5928b0c4d040d24123d4bb76a532bdf8c8173814eda531143f321f0c96bd8f0f6a32490213200785cb2e90c94a941ea8626628e3973ff7227953b1995dfd3c8ac40bb105888ae2c2e750823f4140f6c38cfba9908e1747132adfed4008e96420ddda4a9d85b06af9dce050e638810d8c39381b4ec615932b98058829f73035112baa9463e357fc0f41216c1af30635308479138a52278f9ccf37c804db7f59ac8df33abbbc6affd09f14340b25d4bc50f2aabd16823ecba73ecaa0d6ce64e89f6bc8e0e63bb785314100f053b97a1bf99c360b0eba58d467c44bb1cee0f17b30b384e99521282d5699906c8cfdc63f6d023ce2e021e64490e2cb4abb4d35ccd6f54c535e27dc3c57286b86de9f42591681181c9b58312f2062bf4aff33a7a6ffa5959e3aba4453cdf9eba3f1ea21f9fcf176b06003564b18b7e602686a1525f55f5a7b5a7ad5e93d4a6cec9904fa0f6743e2beb8b2d4f6b32cca94026a0add76f1f61806e662af69d97372661a93f2c6f119487de30556e30810e9a0b0a172a9f819b7bf872fead80d01c5cd522c620837ae60db2c2cb17f2841b7f95a8929807a1d0f647334ff559c5136d94f20eb1d98922b2ce32de6837a5f56f91c18650cf84c84d1c59cf646710a30236da24126723c5b8eab7d712c2af9baebbebd24296bd10ec7aee50a7e88c3d005096663215a2270a36658b18df2873345643a0cbfe7bedc5e2e63522028636bb53c8bad05ad4ce3d683ad245a16acf605b18ecc05aca31e5e10ac85131783d013f8371438d0e50f49e3fbd35e1b2c41ec77872593e6420ea9f776e4ae4bb6612b80fcbbd9fbba7ea020eba3985f67fcbd087689688ff4a78ef985161a97e84149452803a58e2a1b05bc1786deabf880091399936cf93a2b6b9dfa9b2211a8da3434cf59d50020fd5eef8e42643bce9b13ca9eb73613e8b3f9661eefa8dfba71093a414ca67c13bd8d8bca481a3579913fc2b341b8f7e33fb0ed4e17c373cb358f7a19949e35139b5af758b88e4c0934275392c36cd106903ed6978cb24d8714bde1e3edb8a28f5b50ff3e81d9b650d8bb845302f11484ee2d1e663950a22692591a108b0f5aa4d56e9cfa0a90fad93a2a1a152b18de9e231f9e18de655b0700bf8fcd78684bb7a1d8a6f514596ed942c1056377d7bdca8a206211427cee87b94fb2b6f437c0c92230903c17c7799671be515dd3b1164f08a67c5d32cc03e6369c0f519d0a70ac900fc028a588c9d2d784e0fc17a93b1c64c54a1fe570ca4ffa7a2b0d9694e3a99a2eb1d9035308140144595ac4a92f8b7b6834d8cb9cc12857a00dc9f5fb18c29166ce5cc21c6373bceb1417b84eac942a93f03b24219da7dfabc3c57a32d2305112c644312fd45d6bf630ecc39ca7fcd3127ad230c58011d69653c59afb1b31e1cc5b9816a4f405707f371b6457c5a1f3ce95ee841e2aed3a17ec6f70ab934fb1c14b04e9a3a0092fae618f1d834bef769afb83408bab3afca7dc5b3bad452a2cde9d0f44f95f15e2bf6ca3e6e4494a8f50cda163ad2d4ede5c277884c20a2e7de08913af34f421cd1d79cf66dbe6ad175093e26c302ad54bae4a0e5380fdfa259c43a0b74968f9ebe81acb6749bd9efab0ac554bcd0c99f6dfbc0524f88e3a6658b12d6e00ad1c3c620150917ce6f25391a596874f09793f92311534b053ae3bac53d8711af4cdd55016972285ffb0419afbe46769f4b4bd021317bd4678b7a9e6bb8719c02a2da0e3456732737cfdabff0d517642c8be9190b58ac1c3cda54bb290cd367c842b2591250afbaee3df3b47db4b30e65f751ebac083c1e07b833f7f98ee08c997bc1d0ccb2e28688ec2f0af1f62c85d6ed59899c8061d52a6d73a7df3b4018c94df52503aafc81cb3e568f37619c1928073d3d4a34a6c996394ab7e9f4f8b19fdf5fa52bf2a69a946f84b8c46c264416b968ae72df4ceb170bc0ba45aae736719650f65c37517321f2119b3a51206125079a96bb59333b3016f77a1a5c0aeaa965f5afc3323ecd2c3086ac86a039a5c98565bff18f58862360922e3ddcd6e00e58b3780e004c64b0f6c44b809869475012b59d4b1b3a1a3329fc011b3916d314cdc39adfe3ab0f862dd8cf3f6a0f7e41014a7dbe0ec0c262d172c5dd800a48e56d9f2eafb8a33f15f491d808b5c59f794dbcb336b1b0604718535f994ad57a45a1c5022c288c26e84a6272fbabd1fa6616767e0c24560faa8efe5c6f340829cbacacbc9868b92c54f79f9a540347991ae6b65b615d59ae34e95a1c49b8ccec597f0e30af017a2323b5763316d236da5f7281dd6c22fd5fce908c996813066044a8b34fc664b881a90f74707279b3a1e92061cebc10f125c6c4bffa6c2ea1b65284339161fac777cfd80b03553097dcbe964ab8274c7f5f70130f8f3ec09489e7e5563c5be7fd16f1f5d69c6d649fd98e63139818f4395b44524f88858b0d00d7efd1374a0290d5f423d506c66ff5e69db33abf5b323234f22c9363e1154b1a4f04c86a92c8258e31880a8c1f45f5fbdf7867c3400304a979f9ae56158fc775eb57a3be1da9da105c4b31021de0c175c59171e733a8fcf3b162e8ce2a6d48d39c4125abd4804c8dde844def31869834b5b5c6b8154585f507a9b2c8a7276b10dbcc40c9ac101848eb279dd8d0fdc732e3aa6aba38eb2082db56ad6fc2f65ecf5621424e904ea9864cfe9a7d8f9499dd4e9d3250cf283ae2ee1cb654acb3927cefdf456478b891bc631c54f75c0847c9bd8fc27dc507c35eb11a8ff4f84de236bc1e3c76abcee613cef5ccd4fb6404ab425094c91ca8d31521b2af1b47549a1070de596fcf6a675a4d55ee8adaa6ec330872858c907e3dc0ebeb9def63d15a9f4b9263fdf299005f6579d819041bba149fb4c3bafaea4f49efc4b64868f526045392f175c48c67b49f3d452eef7fd71888a1f5efda57c30d3a584d4d3c33b3d542892b51cadfb782218a3127383aeb8ad4e6bee3ba9542ae5f50492a6f3cce7ea255e47671b8849be99881bb7e6cc7e55e9880767b5d715f603f873623a6770dd4a9ad97e2c41108cc3dc9a91b93f0c4e6cd9f4f72e75d53144a5a09b298be6489fb5acab989558ed98eb70b58f44dac62a63aa7c2d267c6a6be389db029f4a149ccc0717f402ae613284da6c62f2842a93efba899a82eb4a45a8e34e702c54953f69f5b2ed4297c2596222294faf68331d1ad157fc18f2e1f0d505ab97c5c3fb73b03e78658f50d99f7eff220faae1836964b8a4a71f87072740916d999a5a2faf6f11fa2f701403ec56023ac08ceb467662b0a6afde8ac06efc6cabafd80ae0759d840f16a2db8300f5f14bd321a50887c488683fc13a9aeb4ee133c83553a8e9d5151acdf24743769dd68706537aef7091824797561fd9498ef974b46e2b33c01569d1f556eceab9142a516e41b3d9e4690e13fdfb8c36ab40cf31664668d050b7974d0bf743cd762398b904acd731950b46f0f3e7f5d378c565e32c3042978a370e7b8db1a52ee4396089a775bd84cb387f95c9fc2063cc198109c25ff7f63ec8c8cf6422e7ab23ed81ec980df14e786476f8368b71898dcebcfd62676e662773525ce117ef34a7304ac63004519cf79b9c9ef49b6a72729ece84002316b36720cf6583085c7653e48047bde44e7f28ebf0dc7750d22f2eee0a77846193e93c1d6fa74d2583602f579a170a73088208de669be2f2b19a3cdfec3e517d165e3ec7a3a1f835b792387cdf22ff798f5ef52574c3cfb291338edb1465e976a8b41e97fddb1e129013bd9c7de16225e6a5432f030f5e362a827f9df7fd9cab95dc6c9975ac0f661d94d9cdc452e01ee3b74c4ef3309126ed38d218da9c75ec96fc9fdc7252894d969f5b948d5cbfaa862c1f91aeb", 0x1000}, {&(0x7f0000000300)="7a91757ab9ae12843081f94b69be6da78f45056ab4a38de9e54c033cff73549643c50c488ab6a093d969c4c56b76d9f691a650e743c324d2d98d9d", 0x3b}, {&(0x7f0000001900)="35d724b18310b5d557a28ee690eb38091a30cad075cfb3176845dba9321ba59f86e42922f4732f07412898de92e9ede2f1f132b9151175a26fc94b0f40d656bc04007744524f321dcde7e8c323746cc1b43dc41193c01fbd943007fb2e76c4ac18f4ceed2c9ea78bd49992ebe071f9433d3c68d999115d4f2c4bd2f26cf3e9db998e30f002a481dc97d165c42d72e29b239b92b8870d9cb1f31a42d90f501b57d4a0108d3bb019c9843c7dd8c6169b132e87a53d6a8afe0fff0cc079e222409a89926e01e550931badade56417963a40b2f8e70cd41a909ec94f237612da8a497631124450f98118091beff0c6770cbee8906ea6ff98d9", 0xf7}], 0x3}, 0x0) socket(0x2b, 0x80801, 0x1) socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d809f2e2ff", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000240)=0x40, &(0x7f0000000480)=0x2) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYRES8=r5, @ANYRESOCT=r6, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000200"/28], 0x48) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ee0000000000000000000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$key(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2, 0x2, 0x1c, 0x7, 0xa, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@private=0xa010102, 0x25, 0x14, 0x14}, @sadb_address={0x3, 0x5, 0x5f, 0x5d92e8b655bca620, 0x0, @in={0x2, 0x4e23, @loopback}}]}, 0x50}}, 0x44001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x5, &(0x7f0000002380)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r8}, 0x20) sendto$inet(r8, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) 2.601269105s ago: executing program 1 (id=147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000001900)="81", 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x68, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x201, @void, @void, @val={0x3, 0x1, 0xb2}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x68}}, 0x240400c0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$alg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}, 0x0) 1.561009992s ago: executing program 1 (id=151): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000540)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x140, 0x4) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2100, 0x0) 1.544209652s ago: executing program 4 (id=152): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r5, 0x80080400) syz_emit_ethernet(0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabb24701bd39bee9780df2fb8aaabaaaaaa008100000088f54098474daac50652af028f86a105a5aae5"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000840)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x8, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x892f, 0x8}}}}}}, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvfrom(r5, &(0x7f0000000100)=""/46, 0x2e, 0x40000121, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @loopback}, 0x0, 0x4, 0x3}}, 0x80) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xfd, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000ebff0000000073afd8848b009db89500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000004740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/23, 0x17}}], 0x1, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0xb, 0xda}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x4}, {0x6, 0x2}]}, @const={0xe, 0x0, 0x0, 0xa, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/231, 0x7f, 0xe7, 0x0, 0x8, 0x10000, @value}, 0x28) 1.520609152s ago: executing program 2 (id=153): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000c00071b48013d030100000000009500000000000000bc26000000000000bf67200000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000bc0)={0x29c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "e7e1b55e8e43c451ebd1ec4fff5da8d2cee4258e6ce23bb23d2cdd0d1da8f369bfa134"}}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x342a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000100ff05008a"], 0x30}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000706010200001d2405000100070000000800054000000d770500010007"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070043d5ad00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x61}]}, 0x24}}, 0x144) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xf, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x50}}, {{0x6, 0x0, 0x7}, {0xc}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x98, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r10, &(0x7f0000000100), &(0x7f0000000140)=@udp6, 0x1}, 0x20) sendmsg$kcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)}, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000080)) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x7, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 1.392966031s ago: executing program 1 (id=155): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f000000b0c0)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c) sendmmsg$inet(r8, &(0x7f0000001080)=[{{&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000001240)="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", 0xdc4}], 0x1}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r5, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x6, 0x6, 0x2, 0x0, 0x1010, 0x1, 0x7f, '\x00', 0x0, r10, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex=r9, 0x5, 0x1, 0x17be000, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x20, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="f3965ffc", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x101, 0x93, &(0x7f0000000280)=""/147, 0x41000, 0xb, '\x00', r9, @cgroup_sysctl, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x5, 0x9, 0xffffffff}, 0x10, r11, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0x1, 0x4}, {0x5, 0x5, 0xe, 0x6}, {0x1, 0x1, 0xc}, {0x0, 0x2, 0xb}], 0x10, 0x81, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYBLOB="b77a6f586550674d477391eeac9ec91a93b3c3a39fcaeb0417f2396332c65136149b7f02b903243f930022d3e342d89e9203522fff05eea91238ac96920441fe0f032e5a16674ef7e0e2246799b365e180889661e91f829a7fb17f4ca692ee3bc93a3efeccb133d7ab3e277b31da6d9c5b591ee4b0542ca68cd26117d40177984247e65edbeb2ed58fa49bbe218e9501daed2e6bff24ea6c75a54bb817d06300cff5daff59ab78c5bc79759ca8b7e20498369a85e60f007902e7b1377387e10c54a88cf7309013310f5740a626df4716c5d8acee", @ANYRES32=r0, @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES64=r4, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) r13 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r13, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4) setsockopt$MRT_FLUSH(r13, 0x0, 0xd4, &(0x7f00000001c0)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.306548451s ago: executing program 1 (id=157): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0xd5, 0x6, 0x50, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x20, 0x40, 0x1d5d, 0xf084}}) syz_emit_ethernet(0x6e, &(0x7f0000000380)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "080080", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@routing={0x16, 0x0, 0x0, 0x9}]}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', r2, 0x10, 0x8, 0x7, 0x5, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x67, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}, {[@ra={0x94, 0x4, 0x1}, @generic={0x86, 0x6, "40b64414"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xbc, 0x0, 0x3, [0x8]}, @lsrr={0x83, 0xb, 0x28, [@multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}, @generic={0x83, 0x6, "dc8cf363"}, @lsrr={0x83, 0x13, 0x4e, [@remote, @rand_addr=0x64010101, @empty, @multicast2]}]}}}}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000404000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.143107533s ago: executing program 2 (id=158): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7}, 0xe) tee(r4, r3, 0x80000001, 0x0) (async) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0)) 1.137796894s ago: executing program 2 (id=159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x6137, 0xd, 0x3, 0x1, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x5, 0x3}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32b85c2c410900010073797a3000000000080005400000000f2c0000001d0a05080000000000000000010000000900020073797a3000000000090001"], 0xb0}}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 954.637285ms ago: executing program 0 (id=66): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @empty}, &(0x7f0000000080)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x3, [@datasec={0x7, 0x4, 0x0, 0xf, 0x3, [{0x4, 0x80, 0x1ff}, {0x3, 0x1, 0x81}, {0x2, 0x7fffffff, 0x9}, {0x5, 0x2, 0x8}], "b265fe"}, @restrict={0x4}, @struct={0x0, 0x4, 0x0, 0x4, 0x0, 0xf7d, [{0xd, 0x3, 0xfffffff5}, {0xb, 0x2, 0x10001}, {0x10, 0x2, 0x3}, {0x3, 0x2, 0x13c}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000180)=""/165, 0xc7, 0xa5, 0xfffffffe, 0x0, 0x10000, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x20000400) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000fa445a912dda22c108b1a54fefedeb95b2f605504ddc3e5e831338dc00c3c02be7f3fc2ab42902b53f470239ee63b5ca1a4b2c5b66c9d7a977229b6fb925473be2d74796b2af00d7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000002a00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='neigh_update\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000d80)='neigh_update\x00', r3}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r6, 0xfff) accept(r6, 0xfffffffffffffffd, &(0x7f0000000440)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r8 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x541b, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) 887.108015ms ago: executing program 3 (id=161): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x10, 0x5, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x3c}}, 0x0) 776.939203ms ago: executing program 3 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@can_newroute={0x1c, 0x18, 0x3, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff000000000000000105000000100000000000000000000004"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 757.789905ms ago: executing program 2 (id=163): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x40, 0x700, 0x298, 0x8, {{0x4c, 0x4, 0x1, 0x4, 0x130, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x7, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0xb, 0x3, 0x3, [{@multicast2, 0x4}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x9}, {@loopback, 0xffff}, {@private=0xa010102, 0x9}, {@multicast1, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010101, 0x3}]}, @noop, @cipso={0x86, 0x2a, 0x0, [{0x0, 0x2}, {0x0, 0x3, 'M'}, {0x0, 0xc, "8e3cd2cfbca71207096f"}, {0x2, 0x4, "a319"}, {0x2, 0x2}, {0x0, 0xd, "907f66bbdcc12856548bcd"}]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0xe, [{@remote, 0x99}, {@rand_addr=0x64010101}]}, @lsrr={0x83, 0x17, 0x2b, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @local]}, @ssrr={0x89, 0x1b, 0xef, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast, @multicast2, @broadcast]}, @cipso={0x86, 0x43, 0x1, [{0x6, 0x11, "32edf5445255864689893f2a9c83b2"}, {0x6, 0x6, "8275afbd"}, {0x7, 0x12, "b8e308266d6b8cd96a482c6c0fd7c33c"}, {0x2, 0x9, "a4c46a7fe2e0c7"}, {0x1, 0xb, "638cfaec115d29f212"}]}, @lsrr={0x83, 0x13, 0x9c, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', r3, 0x29, 0x3, 0x9, 0x2, 0x12, @dev={0xfe, 0x80, '\x00', 0x3b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x2dc2, 0xa164}}) r5 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x88}}, 0xc0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000580)=""/14, 0x2000, 0x1000, 0x77246620}, 0x20) socket$kcm(0x29, 0x5, 0x0) openat$cgroup(r1, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r2) r9 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r9, &(0x7f0000000680)={0x1d, r4, 0x1, {0x2, 0xff}, 0xfe}, 0x18) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$cgroup_root(0xffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r12) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x3a, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={r5, 0x20, &(0x7f0000000dc0)={&(0x7f0000000c80)=""/5, 0x5, 0x0, &(0x7f0000000cc0)=""/253, 0xfd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xf, 0xb, &(0x7f0000000740)=@raw=[@generic={0xe0, 0x6, 0x5, 0x60, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x3e}], &(0x7f00000007c0)='GPL\x00', 0x1e303c63, 0xe9, &(0x7f0000000800)=""/233, 0x40f00, 0x44, '\x00', r13, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x0, 0x9, 0x9}, 0x10, r14, 0xffffffffffffffff, 0x2, &(0x7f0000000e40)=[r5, r5, r5, r5, r5, r10], &(0x7f0000000e80)=[{0x0, 0x1, 0x2, 0xb}, {0x5, 0x1, 0x0, 0x2}], 0x10, 0x70, @void, @value}, 0x94) readv(r11, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/224, 0xe0}, {&(0x7f0000001080)=""/128, 0x80}, {&(0x7f0000001100)=""/180, 0xb4}], 0x3) accept4$llc(0xffffffffffffffff, &(0x7f0000001200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001240)=0x10, 0x800) 615.09382ms ago: executing program 3 (id=164): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf8400000000000007040000f0ffffffb70200000800fff818230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000201000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 572.686433ms ago: executing program 4 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000000032ad5689af2cd10c399296dfe080ef6a1638745d3678d4ec167f9a1baa51702deddd7e1c5636a12140025a34747f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r1 = socket$nl_generic(0x11, 0x3, 0x10) (async, rerun: 64) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaaaaaaaa07000000cd60e400ff0038"], 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000001180)={0x6, '\x00', {0x1}}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_vlan\x00', {0x4}, 0x13}) (async) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0x5ea}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x98, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x10}, @loopback, 0xff000000, 0xffffffff, 'sit0\x00', 'macvlan1\x00', {}, {}, 0x21, 0x2, 0x2d}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0x81]}}, @common=@ah={{0x30}, {[0x5, 0x2]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="cb495922e6cc", 0x8, 0x6, [0x6, 0x22, 0x3c, 0x2c, 0x3b, 0x12, 0x9, 0x35, 0xb, 0x2b, 0x4, 0xc, 0x2d, 0x1d, 0x3a, 0x2a], 0x0, 0xbf66, 0x8000000000000001}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7, 0x3, [0x30, 0x3f, 0x1a, 0x25, 0x22, 0x2c, 0x3b, 0x3f, 0xf, 0x5, 0x1b, 0x20, 0x7, 0x30, 0x30, 0x6], 0x0, 0x81, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 32) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000040), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x10) 552.703621ms ago: executing program 0 (id=166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='workqueue_activate_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$unix(r1, &(0x7f0000000f00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000780)="ff", 0x1}], 0x1}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) getsockname$unix(r1, &(0x7f0000000440)=@abs, &(0x7f0000000600)=0x6e) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000580)="b2", &(0x7f0000000640)=""/138}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000800000001a000000280022800400008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0xfffffff8}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180c9f0900348321f61d110040", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000079510100f0ffffff185000000100"/48], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) unshare(0x20000400) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x4}}, 0x10) write$ppp(r4, &(0x7f00000001c0)="38d5", 0x2) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000000)=0x6) 507.042099ms ago: executing program 2 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="f84a413d420cf00eaf3dc28fb0ca560cf29095f2a61e044f334366960716281ea02ef8ba7849dcd52c4434dcdf", 0x2d}, {&(0x7f0000000140)="63970171878c19f4d4e13cfb2d91ffa1450a67253021e2cbede839eac6f96331fc98515c34f052f181ebe7ad1a996ae5786eed4508fc25b6e63d4af0e17ff0fa4342e10ed2dd58dc21d4ecb350f2c51abbe84f07b0c2bfcab7fada1cb66fb9f792fa37dca6f06b6b4e063372c497b2ff1785b95302613e660c4d69fdfbeff0ba93dc1e13af615b70d23c58eb080eb09e7a2843b196daec758b93f2", 0x9b}, {&(0x7f0000000200)="6892487b9509dda3563f7ff4a21d8986e613cf7a76540bd12313f14b614e22b6a93de994a5b08f5fad16dd10ae2f5051de52a5e9cf1e2b03b35684e7974817eedf6a6d0666eb7b0317f4e1f97bb33b1d445309363ab3f2bd07b4f98bc25e60930cc66aacd936cf03b0e00ca8dd056453066f11526be433a139fa290b39ec86b15d86c8211f8c85fe2698565e48ca377b044c85ad9d9677f20e152c1e9dd0ec81b661c7b57b9848ee0cdf019f2d6a6d97b67cda98cc3c62c17481e164e413779992ffc1510ff82550e17b108702e3851a5c01204a7b82c609cb0ad08ce7449bcbd065c3045bbb57c794a2", 0xea}], 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010007000000000000000300000a1c0000000b0a010200000000000000000100000308000f4000000001140000001000010000000000000000000000000ab4b2c6bca9232c38feaf5868fa2daf377255c99a189c047e4345d5bb063d5361a6419a5ea2efc653d3305c887e33e555f8326de1a4f0e4217a0ab99c3c0f3564f5657caa8c119deb34fe2fbd0cd0f965271d60ce6c"], 0x44}}, 0x0) 505.951871ms ago: executing program 3 (id=168): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa1eaff0000000007010000f8ffffffbfa400d8ad05002d9c2eba0000000000070900000000000000020000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018660000010000000000000005000000180000006002000000000000080000001835000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000f8ffffff"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x27, &(0x7f0000000400)=""/39, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0xc, 0x0, 0xa3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1, r1], 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES64=r7, @ANYBLOB="012181745b98c99d49cbd80300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r9, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c00028008000100040000000800070000000000080003"], 0x4c}}, 0x0) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1807000000000000000000181100003c263e6e70e703a53f284a77aac415050de3c8408567675ebb6ba29d1f3ee7372d03f0b56f5fbb614eb9675e3cd6ebfdad6a8ea90b126b3510fa4e9664c7698d17ac9aa45e7434aafefc4a8190910b3e8e1b7677037dec5d18680b414cb36bc91de60d05d556b2885d8ceaa2bba34bb77e31e7174e8700bd1a0900efd3db3906b8facf1ffab23d10d72826a8dc9065", @ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) (async, rerun: 32) unshare(0x2040400) (async, rerun: 32) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="36340100000000000000f4ffffffffffff010100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 352.566036ms ago: executing program 1 (id=169): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="75c1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000340)="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", 0x217}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a", 0x5f}], 0x3}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c004cb3797e2108fdffff8fee82633ec5ff00000000040000280800180061de9a543921455b02ac0f846a122e2556"], 0x1c}, 0x1, 0x3000000, 0x0, 0x11}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) 344.68185ms ago: executing program 2 (id=170): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) r3 = socket(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x20000002, 0x3}}, 0xffffffffffffffb4) r4 = gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000005c0)=r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x4, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r7, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) unshare(0x100) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x7fffffff, 0x10, 0xffffffffffffffff, 0xb, '\x00', r10, 0xffffffffffffffff, 0x2, 0x40, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r4) 259.059675ms ago: executing program 3 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x30, 0x20, 0x4, 0x3}}, @common=@inet=@recent0={{0xf8}, {0xd2, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x6, 0x1}, {0x4, 0x5, 0x724c6391272edc75}, 0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [], [0x0, 0x0, 0x1b87df313c7e6d5e, 0xff000000], 'ip6erspan0\x00', 'bridge_slave_1\x00', {0xff}}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 258.485447ms ago: executing program 4 (id=172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x41880}, 0x24000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x1c}}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000a}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1800}, 0x804) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), r3) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r3) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x6, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r7, &(0x7f0000000780)="48b00c19224e57796c6b1d3e4bdbbd9e1782534daeac3d642b326e2fd3fc02a8874041e0d4fd9f41a750ad33a1a28ac353565ad09801a07baa101e82731b8e912f0c8ce239b0461a719ee8c0da44d6582db2744231e294d779dbe69581a4f6bf3b5ed1eb55be56f667676860b15fdd5aafe8908de7c56f2ab65b8f4aee48ff4a19b899712865aa6df2e957ae1984d76b494d333eb001", &(0x7f0000000840)=""/234}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x168, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4c}, @val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7311e3bed8606a5fe3cce2b4e4e754a11f5b118e7e661fc3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2ffe50706c45decae5263411cf98f80aa3e2e7c967a5e225"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4b39646067ddefa43a780166d0424da735dc1fcfc2e8179c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "463321cf99991485e018a2cb5dd96e17c809387e7ae15e57"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x24000090) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000c40)) r10 = socket$inet6(0xa, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r3) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000e40)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r10, 0x3c202000) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ec0), r3) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, r12, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, ')\'\x1b##&+:\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '^-\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc095}, 0xc4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000001040)) 232.053942ms ago: executing program 0 (id=173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, r1, 0x701, 0x4000, 0x25dfdbfb, {0x19}}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1505000000000000140012800b0001800100006c616e00000401028008000500061a0d45e0e00b01a8d98b0df7840256ceace43d53d31a0c80f55f61b0e40e5e7bc5ddb131a2ba15504d315a9282f338825a024eca084e138ed6babfd94e00210f6f09669c3c902c183c87dc5291c83ff007b475ce7699645035e027f5085a9886052aadebeb6c506ce72803db309fa1d5e51e85501daf0c8f42ed2547af28dc7e8398460bf455b7c5724ef87b53fbc956b10b9ff7820c3a78ea1ab31ba302d717b77d53fa7d492b758cd4fba3a33c458e02d4005145628166f0c7fe77ae3e006e23", @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001bc0)={@private2, 0x0}, &(0x7f0000001c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'team0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="0d6506c8ff36352f4a5552c3cbfbec92d3ee95", 0x13}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0xfffc, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="61534b5575340d2becefe0ba777dd8ba643f20be31179e6c798ad38f7bf51f723d61a2201c41f3713d84e9d2b6f84f740a0a70c86b889770f1e565c1f8d51121d75592ef2cd730e331e2bcd6", 0x4c}, {&(0x7f0000000180)="8016280fbd264644a74cb4e53723e41d4de00f07014ba3ef2af1f5f06f2397cdf11688bf6da016e4", 0x28}], 0x2, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x18}}, {{&(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="6b3ac700b4710ecd", 0x8}, {&(0x7f00000002c0)="09818b0bf56eb6", 0x7}, {&(0x7f0000000300)="7e3c75ea99e0a02269a70547709a17c1632c96d867e22823340c866c905665", 0x1f}, {&(0x7f0000000340)="14cfed133c000c46db0ab2a983f69ab5cedfc02350541624ac19dd57e3d34730faa0298bf968bb32ec969c4c65be2e9e3263a900f249486ccc82518df258fbeb52e8a38def5c6081", 0x48}], 0x4, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}], 0x50}}, {{&(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="61b2522ed0da48788488d834e805855b4a4abe797c0649de0dfe673563e43c264e36d6a501656eb11e84f22e", 0x2c}, {&(0x7f0000000580)="c73dc08e04b6aa0a0ff88cd559911b9fcc7715efa5e0797d89b1d875e44c52c314ad52af1d8e5db79bd31bb0c2e3541480870ac97615afa56ad84ec026b31771", 0x40}], 0x2}}, {{&(0x7f0000000600)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000740)="b172d1f70035bc2298b2fb3885abca09b494f5c758b8cdb3b8eaf21b2812c8d00588b29433237184869ab6ce982c72350ccf396f201cfc2f246e4902afb582f61cad2d2d7a83c6005d6a2ba95b09b01eed2e0df88dc4004d4db41e0bc5ea92fecb7728d60c58bb1112d251279615b78cb80f9818fc448a733209d5c81799062a2e3f6603651ad244b5f67a340d4afa085ce261782934f5e6d6122eb7c228ca9402f805c6dd0bb424110d1eaf1f473434b16a9a0569d407a13c413aa72594964f01d6e76caffc06b703f7d44c42d30165298f", 0xd2}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000640)=',.Kou', 0x5}, {&(0x7f0000001840)="79e0654229f36924f02178d9d0be95bcba608ab3662796d2e0395774df35cd19df77202ac78cd2feaa81cbfa4190b11aa3b57c83e2729837e21c6550e744ec7af2d78ad750df3d1e7070bb409ada2114b9b6441c938bc5845e4c37a5c87844c271265da9282c73562d7effdffc21c86d2953341f6fc937e38a32", 0x7a}, {&(0x7f0000000680)="55e5c472554120cdbda4acb14c46fb3ec1c70341e0e80d4c06ca9d3402917bda0f708417e587f686b9eb33363e56af7499e87c54b944b00efce22d", 0x3b}], 0x5}}, {{&(0x7f0000001940)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001980)="320e3631dcbeb3af2da4e5f2f4", 0xd}, {&(0x7f00000019c0)="2f186d540830ea6cf780c0d034fa3b0be97b87e2f24c7e147a7d65aab0ed2bf5633adf1fb353f9ac72b1360cd333ae040b2a5e96938477033c9cca3105249ab16b05d106478e94fa145fe790da340f904c5bca1ff913cee2807e5050f51fd4da9bc131f1e1ff4dd43f56a2b4e3a4ed8dcbf0dc2d8d338a52b7e151c3f82cf6a548243235fbe3ae7fe627bc65013cdb9f7f7114616bc7397a58844cde6b239bfc56b6543d0f59f40400f6b19862d1f62e88ff5b0368356ab6345133e62f55ddf6aca50a5c5acab2", 0xc7}, {&(0x7f0000001ac0)="d2224ebb052a406bff3ff66b7c925f903eb5caeec9b518cb9d2ad6c452965f57a55de1424c7b75c8995a9e97f9452890bdf576d63b552d67b7967748b759dcbb4eb5393f160f703d16b526fc671e9c5a12249ef7aa45b80c5949bb5ef544935cf46a57fd77f8316ed8492285a868b8561f67280e7f2db49426189d349ad228a372d180f99ebcd81663e13f12ad85e11586d4a43d32dff272dc4c9691", 0x9c}], 0x3, &(0x7f0000001c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{&(0x7f0000001c80)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001cc0)="33145ea6e17b4b3e59a51f101edc15a466f697470658b20e7087e3684acf44ee5b7e7043477d5b0cf48e85317004a0c69936477f2b711381f64cc52897a7ad083ccf08e343016892da3c87bcb10cf86cc89515ec6598ff1886b5cf21dc406c740ed2b11e7e1f10ec3a65f54e61a1282381506c297f", 0x75}, {&(0x7f0000001d40)="a06728c118526e41a88a4b4c86393ee1ee142213fe57d43500f52da641c610173af4a259d6985d9e", 0x28}, {&(0x7f0000001d80)="92228cdfdd69799da3c6b7131cb13beac503d751e4c7760e95661940c0cdd5466a6b12297fa405a2e5bacfdf481b5b7954cf9915a6da777592cc8e2a1696b248f03c322126c1d4bab36fe56715dd635cd60a501f0b508c5f13dadf829ab974501f295686b058981add29884773c28ede7d9ff5492dbfd8f66f063db1ef3f2728892806a5874ec72a974ceebdd2b94c5b9ed17b07adc4d5df492a9dfb450fbd687c7b0f1f93671e082a29d3824c87aee4694f0a3be3ea5f886528d5a7f4c27fea52fcbe8d04197c676884ad369afd0e2eb486b489c7218c98dc7db67f1ecf275ac9844a4cea5a3c394a10d457988113898a", 0xf1}, {&(0x7f0000001e80)="d0417e53d8deec208a4ecb92587c0518a677919aff3a18e4d8139a734b30ba852406fa36931a9df2684a19f3803d4b8eaac082c5c3cfa5304f300bebfb916879481cfe18c683b27a250028b4c3102d8f593a376bdfeac9062248048a9212c1da89df17f421dc7e6495c9728975743febf133f3fe3193d37d3f72cfd7325f3c030b926d1eef8166ba2665346b2b143155433da7f4976e2771285910b106b1a354c90af564dc515dc0f6d0fac32746d88ff642a5ab9a31", 0xb6}], 0x4, &(0x7f0000001fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @multicast2}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@generic={0x88, 0xa, "a6423d790deb5ac6"}, @timestamp={0x44, 0x10, 0xc, 0x0, 0x0, [0x6, 0x7, 0x200]}, @lsrr={0x83, 0x7, 0x13, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x2c, [@rand_addr=0x64010100]}, @generic={0x89, 0x4, "b377"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x1, [{@empty, 0x3099}]}, @generic={0x88, 0xa, "7b577235cf49685d"}]}}}], 0x78}}], 0x7, 0x80) 171.454431ms ago: executing program 1 (id=174): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x54}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x0, 0x122, 0x311}, @NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x4}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 22.584439ms ago: executing program 4 (id=175): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 699.953µs ago: executing program 3 (id=176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003400000000714000000020a01"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r7}, 0x10) 0s ago: executing program 0 (id=177): socket$packet(0x11, 0x2, 0x300) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200090000000000080000000100000080010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET={0x38, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x8}, {0x22}, {0x8}, {0x8}, {0x8}, {0x8}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x70}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c038c6cca4941bfb2706bb3425c6d3411a3549ec47170e7e73320a7e994d050000006d5c98c71d0b909ee32420561aa313d1a26297ecf82cbf14bac9b39f266952d22b4b8b237ed819809c80852653adeb6701fc54137ad2e0d8e7d4744b599b337dcfeafd4f9d6b5cd2167db3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) socket$inet6_sctp(0xa, 0x0, 0x84) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async, rerun: 32) r7 = socket$inet6(0xa, 0x3, 0x3) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000000000200000008000100feffffff"], 0x1c}}, 0x0) (async) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@private, 0x0, 0x1}}, 0xe8) (async, rerun: 64) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r11, 0x8b32, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.198' (ED25519) to the list of known hosts. [ 66.592254][ T5218] cgroup: Unknown subsys name 'net' [ 66.710217][ T5218] cgroup: Unknown subsys name 'cpuset' [ 66.718803][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.285419][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.535280][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.547104][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.555690][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.564079][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.573686][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.582900][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.591395][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.599806][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.607988][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.616292][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.624454][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.633209][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.634813][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.652704][ T5248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.656499][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.661291][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.675063][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.676542][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.682377][ T5248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.696853][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.704329][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.705278][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.713050][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.719410][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.739245][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.747577][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.757171][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.768948][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.779947][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.787907][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.183279][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 71.211352][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 71.350738][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 71.391988][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.400234][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.408153][ T5228] bridge_slave_0: entered allmulticast mode [ 71.415116][ T5228] bridge_slave_0: entered promiscuous mode [ 71.439480][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 71.474744][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 71.490228][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.500628][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.509182][ T5228] bridge_slave_1: entered allmulticast mode [ 71.516636][ T5228] bridge_slave_1: entered promiscuous mode [ 71.550450][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.557725][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.564910][ T5245] bridge_slave_0: entered allmulticast mode [ 71.572917][ T5245] bridge_slave_0: entered promiscuous mode [ 71.584848][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.592274][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.599679][ T5245] bridge_slave_1: entered allmulticast mode [ 71.606733][ T5245] bridge_slave_1: entered promiscuous mode [ 71.705119][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.736179][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.753467][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.779054][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.785541][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.803476][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.871860][ T5228] team0: Port device team_slave_0 added [ 71.879981][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.887499][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.894669][ T5229] bridge_slave_0: entered allmulticast mode [ 71.901730][ T5229] bridge_slave_0: entered promiscuous mode [ 71.909656][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.916920][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.924287][ T5229] bridge_slave_1: entered allmulticast mode [ 71.931381][ T5229] bridge_slave_1: entered promiscuous mode [ 71.947205][ T5245] team0: Port device team_slave_0 added [ 71.953990][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.961843][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.969445][ T5232] bridge_slave_0: entered allmulticast mode [ 71.976324][ T5232] bridge_slave_0: entered promiscuous mode [ 71.993441][ T5228] team0: Port device team_slave_1 added [ 72.023052][ T5245] team0: Port device team_slave_1 added [ 72.029275][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.036972][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.044285][ T5232] bridge_slave_1: entered allmulticast mode [ 72.052211][ T5232] bridge_slave_1: entered promiscuous mode [ 72.059310][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.066842][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.074030][ T5230] bridge_slave_0: entered allmulticast mode [ 72.080953][ T5230] bridge_slave_0: entered promiscuous mode [ 72.130806][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.141893][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.149695][ T5230] bridge_slave_1: entered allmulticast mode [ 72.160924][ T5230] bridge_slave_1: entered promiscuous mode [ 72.174854][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.182687][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.208887][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.222533][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.229814][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.256375][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.269659][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.284017][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.291225][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.317428][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.360889][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.379925][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.387778][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.413975][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.432008][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.453634][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.473382][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.512051][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.534651][ T5229] team0: Port device team_slave_0 added [ 72.562712][ T5228] hsr_slave_0: entered promiscuous mode [ 72.569504][ T5228] hsr_slave_1: entered promiscuous mode [ 72.597838][ T5229] team0: Port device team_slave_1 added [ 72.616868][ T5232] team0: Port device team_slave_0 added [ 72.631333][ T5230] team0: Port device team_slave_0 added [ 72.640206][ T5230] team0: Port device team_slave_1 added [ 72.656474][ T5245] hsr_slave_0: entered promiscuous mode [ 72.663053][ T5245] hsr_slave_1: entered promiscuous mode [ 72.673538][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.681548][ T5245] Cannot create hsr debugfs directory [ 72.699594][ T5232] team0: Port device team_slave_1 added [ 72.727812][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.734808][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.760846][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.809747][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.817933][ T5249] Bluetooth: hci1: command tx timeout [ 72.824230][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.829919][ T5249] Bluetooth: hci2: command tx timeout [ 72.850377][ T5238] Bluetooth: hci0: command tx timeout [ 72.861666][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.897104][ T5238] Bluetooth: hci4: command tx timeout [ 72.897112][ T5249] Bluetooth: hci3: command tx timeout [ 72.915387][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.922458][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.949138][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.962210][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.969383][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.995830][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.010395][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.017862][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.044682][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.070937][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.079024][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.105176][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.176745][ T5232] hsr_slave_0: entered promiscuous mode [ 73.182995][ T5232] hsr_slave_1: entered promiscuous mode [ 73.189763][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.197499][ T5232] Cannot create hsr debugfs directory [ 73.256584][ T5229] hsr_slave_0: entered promiscuous mode [ 73.263114][ T5229] hsr_slave_1: entered promiscuous mode [ 73.272569][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.280705][ T5229] Cannot create hsr debugfs directory [ 73.333829][ T5230] hsr_slave_0: entered promiscuous mode [ 73.340505][ T5230] hsr_slave_1: entered promiscuous mode [ 73.348642][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.356359][ T5230] Cannot create hsr debugfs directory [ 73.601378][ T5245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.625756][ T5245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.646370][ T5245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.656528][ T5245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.714468][ T5228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.725233][ T5228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.743794][ T5228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.754947][ T5228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.835782][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.849474][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.865060][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.875834][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.934969][ T5232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.950761][ T5232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.968425][ T5232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.978793][ T5232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.065722][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.091516][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.105412][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.122038][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.133960][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.150260][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.192107][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.239149][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.270572][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.278376][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.289519][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.297086][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.312295][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.319511][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.382318][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.389483][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.483439][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.495173][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.505206][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.563390][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.592315][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.622709][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.629907][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.661455][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.725388][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.732581][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.750348][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.757546][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.780470][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.787636][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.831734][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.838952][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.859310][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.866507][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.895305][ T5232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.896686][ T5238] Bluetooth: hci0: command tx timeout [ 74.907459][ T5249] Bluetooth: hci2: command tx timeout [ 74.914836][ T5238] Bluetooth: hci1: command tx timeout [ 74.924293][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.977571][ T5238] Bluetooth: hci3: command tx timeout [ 74.977581][ T5249] Bluetooth: hci4: command tx timeout [ 75.033038][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.081203][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.249605][ T5245] veth0_vlan: entered promiscuous mode [ 75.283699][ T5245] veth1_vlan: entered promiscuous mode [ 75.351380][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.433846][ T5245] veth0_macvtap: entered promiscuous mode [ 75.490285][ T5245] veth1_macvtap: entered promiscuous mode [ 75.552669][ T5232] veth0_vlan: entered promiscuous mode [ 75.571411][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.593240][ T5232] veth1_vlan: entered promiscuous mode [ 75.614925][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.628238][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.657406][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.695071][ T5245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.704441][ T5245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.718936][ T5245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.729614][ T5245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.801540][ T5229] veth0_vlan: entered promiscuous mode [ 75.831748][ T5232] veth0_macvtap: entered promiscuous mode [ 75.855510][ T5229] veth1_vlan: entered promiscuous mode [ 75.873409][ T5228] veth0_vlan: entered promiscuous mode [ 75.891235][ T5232] veth1_macvtap: entered promiscuous mode [ 75.945577][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.946933][ T5230] veth0_vlan: entered promiscuous mode [ 75.960500][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.990270][ T5230] veth1_vlan: entered promiscuous mode [ 76.002777][ T5228] veth1_vlan: entered promiscuous mode [ 76.025471][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.036871][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.050893][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.078980][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.082193][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.100312][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.103469][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.112833][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.178092][ T5232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.188096][ T5232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.197303][ T5232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.206488][ T5232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.220223][ T5229] veth0_macvtap: entered promiscuous mode [ 76.231059][ T5245] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.233793][ T5228] veth0_macvtap: entered promiscuous mode [ 76.279523][ T5230] veth0_macvtap: entered promiscuous mode [ 76.295117][ T5228] veth1_macvtap: entered promiscuous mode [ 76.312853][ T5229] veth1_macvtap: entered promiscuous mode [ 76.344941][ T5230] veth1_macvtap: entered promiscuous mode [ 76.437687][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.451732][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.461890][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.473016][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.487014][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.512341][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.525287][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.535255][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.546339][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.557290][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.568628][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.581362][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.603917][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.621352][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.649868][ T5314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.683355][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.694312][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.705656][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.717633][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.728847][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.740620][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.757454][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.769111][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.780467][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.795405][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.816840][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.826968][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.838584][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.850363][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.870556][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.881879][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.892133][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.905258][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.915492][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.927108][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.938938][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.948295][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.961372][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.971884][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.983217][ T5238] Bluetooth: hci1: command tx timeout [ 76.986922][ T5249] Bluetooth: hci0: command tx timeout [ 76.988835][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.994250][ T5238] Bluetooth: hci2: command tx timeout [ 77.004038][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.020560][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.030517][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.042169][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.053831][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.062579][ T5238] Bluetooth: hci3: command tx timeout [ 77.068318][ T5249] Bluetooth: hci4: command tx timeout [ 77.089109][ T5314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.119195][ T5228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.128720][ T5228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.138077][ T5228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153145][ T5228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.170656][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.179622][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.190843][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.199657][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.235038][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.246980][ T5312] dccp_close: ABORT with 32 bytes unread [ 77.261422][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.271011][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.279971][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.303881][ T5314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.341846][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.350699][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.394011][ T5314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.514822][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.544880][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.557345][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.566508][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.737702][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.754049][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.754870][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.766971][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.843707][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.861608][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.921002][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.952586][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.974937][ T5325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.214092][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.243927][ T5334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.272430][ T5334] xt_SECMARK: invalid mode: 0 [ 78.284238][ T5337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.347177][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 78.653459][ T5356] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.704211][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.728853][ T5356] netlink: 'syz.1.12': attribute type 9 has an invalid length. [ 78.768846][ T5356] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.808008][ T5361] x_tables: duplicate underflow at hook 2 [ 79.053983][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 79.066371][ T5238] Bluetooth: hci2: command tx timeout [ 79.071833][ T5238] Bluetooth: hci0: command tx timeout [ 79.077600][ T5249] Bluetooth: hci1: command tx timeout [ 79.136880][ T5238] Bluetooth: hci4: command tx timeout [ 79.142359][ T5238] Bluetooth: hci3: command tx timeout [ 79.306295][ T5376] netlink: 'syz.1.19': attribute type 12 has an invalid length. [ 79.445513][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 79.461822][ T5353] dccp_close: ABORT with 32 bytes unread [ 79.510908][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 79.545350][ T5386] netlink: 25 bytes leftover after parsing attributes in process `syz.2.22'. [ 79.983289][ T5410] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 80.052869][ T5413] Bluetooth: MGMT ver 1.23 [ 80.120047][ T5417] Illegal XDP return value 4294967274 on prog (id 11) dev N/A, expect packet loss! [ 80.500528][ T5430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.622560][ T5314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.714075][ T5314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.843571][ T5314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.970764][ T5231] IPVS: starting estimator thread 0... [ 81.042283][ T5314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.076124][ T5447] IPVS: using max 18 ests per chain, 43200 per kthread [ 81.410791][ T5450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.512242][ T5439] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 81.914068][ T5450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.015810][ T5448] dccp_close: ABORT with 32 bytes unread [ 82.100503][ T5238] Bluetooth: hci0: command 0x0401 tx timeout [ 82.121528][ T5249] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 82.227956][ T5450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.569574][ T5450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.596678][ T5468] batman_adv: batadv0: Adding interface: dummy0 [ 82.603013][ T5468] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.656346][ T5468] batman_adv: batadv0: Interface activated: dummy0 [ 82.733955][ T5468] batadv0: mtu less than device minimum [ 82.748452][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.762086][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.775317][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.788198][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.800990][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.813763][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.826555][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.839271][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.852216][ T5468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.957656][ T5450] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.030493][ T5450] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.073287][ T5450] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.090522][ T5450] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.370907][ T5481] tipc: Started in network mode [ 83.398151][ T5481] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 83.486077][ T5481] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 83.495751][ T5481] tipc: Enabled bearer , priority 10 [ 83.920152][ T52] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 84.607290][ T5282] tipc: Node number set to 1 [ 85.750778][ T5513] __nla_validate_parse: 1 callbacks suppressed [ 85.750801][ T5513] netlink: 220 bytes leftover after parsing attributes in process `syz.2.53'. [ 85.781491][ T5512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.53'. [ 85.853997][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 85.873489][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 85.999829][ T5528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.57'. [ 86.021527][ T5529] netlink: 52 bytes leftover after parsing attributes in process `syz.2.56'. [ 86.049675][ T5528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.57'. [ 86.346373][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 86.404545][ T5546] syz_tun: entered promiscuous mode [ 86.410711][ T5546] macsec1: entered promiscuous mode [ 86.463703][ T5546] syz_tun: left promiscuous mode [ 86.528165][ T5552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.095515][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.111134][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.121741][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.131105][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.147293][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.149408][ T8] cfg80211: failed to load regulatory.db [ 87.167807][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.244182][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 87.441572][ T5584] netlink: 68 bytes leftover after parsing attributes in process `syz.1.73'. [ 87.454293][ T5584] Zero length message leads to an empty skb [ 87.620321][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.220720][ T5249] Bluetooth: hci4: command tx timeout [ 89.352442][ T52] bridge_slave_1: left allmulticast mode [ 89.363306][ T52] bridge_slave_1: left promiscuous mode [ 89.370475][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.405132][ T52] bridge_slave_0: left allmulticast mode [ 89.419164][ T52] bridge_slave_0: left promiscuous mode [ 89.425128][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.054526][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.073323][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.085303][ T52] bond0 (unregistering): Released all slaves [ 90.203510][ T5622] FAULT_INJECTION: forcing a failure. [ 90.203510][ T5622] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.222150][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz.4.85 Not tainted 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 90.232915][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.243032][ T5622] Call Trace: [ 90.246361][ T5622] [ 90.249332][ T5622] dump_stack_lvl+0x241/0x360 [ 90.254099][ T5622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.259353][ T5622] ? __pfx__printk+0x10/0x10 [ 90.264030][ T5622] ? __pfx_lock_release+0x10/0x10 [ 90.269228][ T5622] should_fail_ex+0x3b0/0x4e0 [ 90.273983][ T5622] _copy_from_iter+0x1ed/0x1d60 [ 90.278961][ T5622] ? __virt_addr_valid+0x183/0x530 [ 90.284135][ T5622] ? __pfx_lock_release+0x10/0x10 [ 90.289225][ T5622] ? __pfx__copy_from_iter+0x10/0x10 [ 90.294540][ T5622] ? __virt_addr_valid+0x183/0x530 [ 90.299670][ T5622] ? __virt_addr_valid+0x183/0x530 [ 90.304893][ T5622] ? __virt_addr_valid+0x45f/0x530 [ 90.310024][ T5622] ? __check_object_size+0x48e/0x900 [ 90.315364][ T5622] netlink_sendmsg+0x73d/0xcb0 [ 90.320151][ T5622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.325538][ T5622] ? aa_sock_msg_perm+0x91/0x160 [ 90.330500][ T5622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.335941][ T5622] __sock_sendmsg+0x221/0x270 [ 90.340640][ T5622] ____sys_sendmsg+0x52a/0x7e0 [ 90.345446][ T5622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.350760][ T5622] __sys_sendmsg+0x292/0x380 [ 90.355364][ T5622] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.360602][ T5622] ? __pfx_vfs_write+0x10/0x10 [ 90.365398][ T5622] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.371770][ T5622] ? do_syscall_64+0x100/0x230 [ 90.376628][ T5622] ? do_syscall_64+0xb6/0x230 [ 90.381369][ T5622] do_syscall_64+0xf3/0x230 [ 90.385931][ T5622] ? clear_bhb_loop+0x35/0x90 [ 90.390644][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.396575][ T5622] RIP: 0033:0x7f349557dff9 [ 90.401006][ T5622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.420648][ T5622] RSP: 002b:00007f3496444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.429115][ T5622] RAX: ffffffffffffffda RBX: 00007f3495735f80 RCX: 00007f349557dff9 [ 90.437100][ T5622] RDX: 0000000000000600 RSI: 0000000020000540 RDI: 0000000000000005 [ 90.445085][ T5622] RBP: 00007f3496444090 R08: 0000000000000000 R09: 0000000000000000 [ 90.453085][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.461068][ T5622] R13: 0000000000000000 R14: 00007f3495735f80 R15: 00007ffc64710758 [ 90.469066][ T5622] [ 90.726295][ T5638] netlink: 'syz.3.90': attribute type 5 has an invalid length. [ 90.769449][ T5641] __nla_validate_parse: 4 callbacks suppressed [ 90.769470][ T5641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.91'. [ 90.916180][ T5572] chnl_net:caif_netlink_parms(): no params data found [ 91.072897][ T52] hsr_slave_0: left promiscuous mode [ 91.115811][ T52] hsr_slave_1: left promiscuous mode [ 91.157644][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.174802][ T5658] Cannot find del_set index 286 as target [ 91.180624][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.226475][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.244434][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.280396][ T52] veth1_macvtap: left promiscuous mode [ 91.286672][ T52] veth0_macvtap: left promiscuous mode [ 91.292377][ T52] veth1_vlan: left promiscuous mode [ 91.298889][ T52] veth0_vlan: left promiscuous mode [ 91.306034][ T5249] Bluetooth: hci4: command tx timeout [ 91.886434][ T52] team0 (unregistering): Port device team_slave_1 removed [ 91.932573][ T52] team0 (unregistering): Port device team_slave_0 removed [ 92.311131][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 92.345424][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 92.381807][ T5673] tap0: tun_chr_ioctl cmd 1074812118 [ 92.397194][ T5675] tap0: tun_chr_ioctl cmd 1074025677 [ 92.403986][ T5675] tap0: linktype set to 780 [ 92.438732][ T5674] vlan2: entered promiscuous mode [ 92.452446][ T5674] xfrm0: entered promiscuous mode [ 92.460111][ T5674] vlan2: entered allmulticast mode [ 92.465532][ T5674] xfrm0: entered allmulticast mode [ 92.480585][ T5674] team0: Device vlan2 is up. Set it down before adding it as a team port [ 92.491686][ T5674] xfrm0: left allmulticast mode [ 92.501059][ T5681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.510356][ T5674] xfrm0: left promiscuous mode [ 92.588934][ T5679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 92.607324][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 92.778358][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.809889][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.826449][ T5572] bridge_slave_0: entered allmulticast mode [ 92.842173][ T5572] bridge_slave_0: entered promiscuous mode [ 92.869676][ T5696] warning: `syz.1.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.916376][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.931292][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.946693][ T5572] bridge_slave_1: entered allmulticast mode [ 92.961361][ T5572] bridge_slave_1: entered promiscuous mode [ 93.064179][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 93.115035][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.155836][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.232145][ T5719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.114'. [ 93.245404][ T5721] netlink: 80 bytes leftover after parsing attributes in process `syz.2.116'. [ 93.270240][ T5572] team0: Port device team_slave_0 added [ 93.284080][ T5572] team0: Port device team_slave_1 added [ 93.375771][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.383176][ T5249] Bluetooth: hci4: command tx timeout [ 93.400749][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.474505][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.497868][ T5733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 93.508216][ T5733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 93.520226][ T5733] netlink: 'syz.2.119': attribute type 6 has an invalid length. [ 93.594636][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.609305][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.641361][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.779064][ T5572] hsr_slave_0: entered promiscuous mode [ 93.806310][ T5572] hsr_slave_1: entered promiscuous mode [ 93.831566][ T5572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.844217][ T5572] Cannot create hsr debugfs directory [ 94.160100][ T5754] netlink: 'syz.4.124': attribute type 10 has an invalid length. [ 94.219440][ T5754] team0: Port device wlan1 added [ 94.407247][ T5766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.683893][ T5775] netlink: 'syz.4.130': attribute type 2 has an invalid length. [ 95.153346][ T5572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.187440][ T5572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.215780][ T5572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.272394][ T5572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.419454][ T5807] net_ratelimit: 10 callbacks suppressed [ 95.419474][ T5807] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 95.456350][ T5249] Bluetooth: hci4: command tx timeout [ 95.698339][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.749739][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.777203][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.784384][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.837619][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.844828][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.981426][ T5828] netlink: 'syz.1.147': attribute type 10 has an invalid length. [ 96.175208][ T5840] __nla_validate_parse: 4 callbacks suppressed [ 96.175232][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 96.239554][ T5843] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.148'. [ 96.303465][ T5835] netlink: 140 bytes leftover after parsing attributes in process `syz.3.148'. [ 96.413209][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.516451][ T5572] veth0_vlan: entered promiscuous mode [ 96.533751][ T5572] veth1_vlan: entered promiscuous mode [ 96.600013][ T5572] veth0_macvtap: entered promiscuous mode [ 96.611987][ T5572] veth1_macvtap: entered promiscuous mode [ 96.641432][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.666016][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.686050][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.701018][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.721790][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.733106][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.745245][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.758670][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.777175][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.817819][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.850935][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.877484][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.916030][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.940936][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.973561][ T5857] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 96.981875][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.005914][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.016940][ T5857] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.152'. [ 97.028026][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.043305][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.053193][ T5864] netlink: 36 bytes leftover after parsing attributes in process `syz.1.155'. [ 97.093754][ T5572] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126182][ T5572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.135362][ T5572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.152136][ T5572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.285025][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.309757][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.364919][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.384414][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.536170][ T5249] Bluetooth: hci4: command tx timeout [ 97.557931][ T5884] netlink: 'syz.3.161': attribute type 5 has an invalid length. [ 97.595621][ T5884] : entered promiscuous mode [ 98.030091][ T5904] tipc: Can't bind to reserved service type 0 [ 98.245007][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 98.254979][ T5920] xt_ecn: cannot match TCP bits for non-tcp packets [ 98.271702][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 98.487130][ T5929] BUG: Bad page state in process syz.1.174 pfn:24bd5 [ 98.494247][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024bd5f00 pfn:0x24bd5 [ 98.504460][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.504623][ T5934] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 98.511750][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 98.511779][ T5929] raw: ffff888024bd5f00 0000000000000001 00000000ffffffff 0000000000000000 [ 98.511793][ T5929] page dumped because: page_pool leak [ 98.511815][ T5929] page_owner tracks the page as allocated [ 98.511830][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455145525, free_ts 98371275879 [ 98.511867][ T5929] post_alloc_hook+0x1f3/0x230 [ 98.511905][ T5929] get_page_from_freelist+0x3045/0x3190 [ 98.511931][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 98.511954][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 98.511977][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 98.512010][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 98.512039][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 98.512073][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 98.512105][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 98.512131][ T5929] __sys_bpf+0x48d/0x810 [ 98.577119][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 98.580809][ T5929] __x64_sys_bpf+0x7c/0x90 [ 98.592753][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 98.597521][ T5929] do_syscall_64+0xf3/0x230 [ 98.597552][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.597586][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 98.597602][ T5929] free_unref_folios+0xf12/0x18d0 [ 98.662060][ T5929] folios_put_refs+0x76c/0x860 [ 98.666951][ T5929] free_pages_and_swap_cache+0x5c8/0x690 [ 98.672909][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 98.677669][ T5929] tlb_finish_mmu+0xd4/0x200 [ 98.682320][ T5929] exit_mmap+0x496/0xc40 [ 98.686677][ T5929] __mmput+0x115/0x390 [ 98.691000][ T5929] exit_mm+0x220/0x310 [ 98.695297][ T5929] do_exit+0x9b2/0x28e0 [ 98.699562][ T5929] do_group_exit+0x207/0x2c0 [ 98.704640][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 98.707845][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 98.710003][ T5929] x64_sys_call+0x2634/0x2640 [ 98.723612][ T5929] do_syscall_64+0xf3/0x230 [ 98.728223][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.734408][ T5929] Modules linked in: [ 98.738525][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Not tainted 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 98.749421][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.759592][ T5929] Call Trace: [ 98.762886][ T5929] [ 98.765952][ T5929] dump_stack_lvl+0x241/0x360 [ 98.770751][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.775983][ T5929] ? __pfx_print_modules+0x10/0x10 [ 98.781132][ T5929] ? __lock_acquire+0x1384/0x2050 [ 98.786193][ T5929] bad_page+0x166/0x1b0 [ 98.790457][ T5929] free_unref_page+0xed0/0xf20 [ 98.795239][ T5929] skb_release_data+0x6dc/0x8a0 [ 98.800303][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 98.805343][ T5929] ? packet_rcv+0x159/0x14b0 [ 98.810043][ T5929] packet_rcv+0x16f/0x14b0 [ 98.814484][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 98.819352][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 98.825361][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 98.832001][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.839165][ T5929] ? read_tsc+0x9/0x20 [ 98.843279][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 98.848617][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 98.855067][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 98.861543][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 98.867891][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.874695][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 98.880028][ T5929] ? __phys_addr+0xba/0x170 [ 98.884560][ T5929] ? build_skb_around+0x111/0x260 [ 98.889691][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 98.895967][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 98.901527][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 98.907040][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 98.913008][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 98.918774][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.924712][ T5929] ? synchronize_rcu+0x11b/0x360 [ 98.930057][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 98.935580][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 98.941978][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.948006][ T5929] ? _copy_from_user+0xa6/0xe0 [ 98.952922][ T5929] ? bpf_test_init+0x15a/0x180 [ 98.957727][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 98.963329][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 98.969045][ T5929] ? __pfx_lock_release+0x10/0x10 [ 98.974118][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.980047][ T5929] ? __fget_files+0x29/0x470 [ 98.984677][ T5929] ? fput+0x1a8/0x230 [ 98.988684][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.994516][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 98.999481][ T5929] __sys_bpf+0x48d/0x810 [ 99.003750][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 99.008549][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.014642][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.021009][ T5929] ? do_syscall_64+0x100/0x230 [ 99.025791][ T5929] __x64_sys_bpf+0x7c/0x90 [ 99.030342][ T5929] do_syscall_64+0xf3/0x230 [ 99.034882][ T5929] ? clear_bhb_loop+0x35/0x90 [ 99.039586][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.045679][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 99.050196][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.069908][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.078344][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 99.086339][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.094331][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 99.102319][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.110312][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 99.118316][ T5929] [ 99.121428][ T5929] Disabling lock debugging due to kernel taint [ 99.127676][ T5929] BUG: Bad page state in process syz.1.174 pfn:31898 [ 99.134560][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031898f00 pfn:0x31898 [ 99.144710][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.152007][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 99.160670][ T5929] raw: ffff888031898f00 0000000000000001 00000000ffffffff 0000000000000000 [ 99.169439][ T5929] page dumped because: page_pool leak [ 99.174931][ T5929] page_owner tracks the page as allocated [ 99.180810][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455132811, free_ts 98371285671 [ 99.197752][ T5929] post_alloc_hook+0x1f3/0x230 [ 99.202572][ T5929] get_page_from_freelist+0x3045/0x3190 [ 99.208197][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 99.213446][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 99.218997][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 99.224911][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 99.230189][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 99.235635][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 99.241105][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 99.246113][ T5929] __sys_bpf+0x48d/0x810 [ 99.250426][ T5929] __x64_sys_bpf+0x7c/0x90 [ 99.254867][ T5929] do_syscall_64+0xf3/0x230 [ 99.259529][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.265477][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 99.271877][ T5929] free_unref_folios+0xf12/0x18d0 [ 99.276986][ T5929] folios_put_refs+0x76c/0x860 [ 99.281787][ T5929] free_pages_and_swap_cache+0x5c8/0x690 [ 99.287493][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 99.292146][ T5929] tlb_finish_mmu+0xd4/0x200 [ 99.296918][ T5929] exit_mmap+0x496/0xc40 [ 99.301205][ T5929] __mmput+0x115/0x390 [ 99.305761][ T5929] exit_mm+0x220/0x310 [ 99.309916][ T5929] do_exit+0x9b2/0x28e0 [ 99.314110][ T5929] do_group_exit+0x207/0x2c0 [ 99.318797][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 99.323863][ T5929] x64_sys_call+0x2634/0x2640 [ 99.328706][ T5929] do_syscall_64+0xf3/0x230 [ 99.333248][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.339301][ T5929] Modules linked in: [ 99.343250][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 99.355525][ T5929] Tainted: [B]=BAD_PAGE [ 99.359695][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.369756][ T5929] Call Trace: [ 99.373043][ T5929] [ 99.375998][ T5929] dump_stack_lvl+0x241/0x360 [ 99.380833][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.386061][ T5929] ? __pfx_print_modules+0x10/0x10 [ 99.391212][ T5929] bad_page+0x166/0x1b0 [ 99.395382][ T5929] free_unref_page+0xed0/0xf20 [ 99.400177][ T5929] skb_release_data+0x6dc/0x8a0 [ 99.405042][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 99.410166][ T5929] ? packet_rcv+0x159/0x14b0 [ 99.415118][ T5929] packet_rcv+0x16f/0x14b0 [ 99.419549][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 99.424407][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 99.430410][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 99.437045][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.443701][ T5929] ? read_tsc+0x9/0x20 [ 99.447785][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 99.453000][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 99.459597][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 99.465766][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 99.472116][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.478826][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 99.484039][ T5929] ? __phys_addr+0xba/0x170 [ 99.488813][ T5929] ? build_skb_around+0x111/0x260 [ 99.494027][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 99.499961][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 99.505270][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 99.510749][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 99.516660][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 99.522225][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.528044][ T5929] ? synchronize_rcu+0x11b/0x360 [ 99.533002][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 99.538312][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 99.544572][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.550686][ T5929] ? _copy_from_user+0xa6/0xe0 [ 99.555464][ T5929] ? bpf_test_init+0x15a/0x180 [ 99.560241][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 99.565911][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 99.571327][ T5929] ? __pfx_lock_release+0x10/0x10 [ 99.576387][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.582565][ T5929] ? __fget_files+0x29/0x470 [ 99.587174][ T5929] ? fput+0x1a8/0x230 [ 99.591174][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.597001][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 99.601959][ T5929] __sys_bpf+0x48d/0x810 [ 99.606222][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 99.611264][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.617263][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.623638][ T5929] ? do_syscall_64+0x100/0x230 [ 99.628592][ T5929] __x64_sys_bpf+0x7c/0x90 [ 99.633288][ T5929] do_syscall_64+0xf3/0x230 [ 99.637911][ T5929] ? clear_bhb_loop+0x35/0x90 [ 99.642627][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.648575][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 99.653094][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.672888][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.681348][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 99.689695][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.697700][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 99.705711][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.713898][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 99.721996][ T5929] [ 99.725404][ T5929] BUG: Bad page state in process syz.1.174 pfn:20364 [ 99.732251][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020364d80 pfn:0x20364 [ 99.742660][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.749867][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 99.758682][ T5929] raw: ffff888020364d80 0000000000000001 00000000ffffffff 0000000000000000 [ 99.767347][ T5929] page dumped because: page_pool leak [ 99.772732][ T5929] page_owner tracks the page as allocated [ 99.778513][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455119932, free_ts 98371295457 [ 99.795433][ T5929] post_alloc_hook+0x1f3/0x230 [ 99.800386][ T5929] get_page_from_freelist+0x3045/0x3190 [ 99.806171][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 99.811417][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 99.816966][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 99.822914][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 99.828218][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 99.833645][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 99.839208][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 99.844200][ T5929] __sys_bpf+0x48d/0x810 [ 99.848540][ T5929] __x64_sys_bpf+0x7c/0x90 [ 99.853003][ T5929] do_syscall_64+0xf3/0x230 [ 99.857599][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.863728][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 99.870197][ T5929] free_unref_folios+0xf12/0x18d0 [ 99.875315][ T5929] folios_put_refs+0x76c/0x860 [ 99.880172][ T5929] free_pages_and_swap_cache+0x5c8/0x690 [ 99.885888][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 99.890619][ T5929] tlb_finish_mmu+0xd4/0x200 [ 99.895418][ T5929] exit_mmap+0x496/0xc40 [ 99.899743][ T5929] __mmput+0x115/0x390 [ 99.903836][ T5929] exit_mm+0x220/0x310 [ 99.907973][ T5929] do_exit+0x9b2/0x28e0 [ 99.912331][ T5929] do_group_exit+0x207/0x2c0 [ 99.917001][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 99.922073][ T5929] x64_sys_call+0x2634/0x2640 [ 99.926821][ T5929] do_syscall_64+0xf3/0x230 [ 99.931335][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.937316][ T5929] Modules linked in: [ 99.941245][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 99.953319][ T5929] Tainted: [B]=BAD_PAGE [ 99.957471][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.967633][ T5929] Call Trace: [ 99.970915][ T5929] [ 99.973848][ T5929] dump_stack_lvl+0x241/0x360 [ 99.978533][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.983763][ T5929] ? __pfx_print_modules+0x10/0x10 [ 99.989168][ T5929] bad_page+0x166/0x1b0 [ 99.993366][ T5929] free_unref_page+0xed0/0xf20 [ 99.998167][ T5929] skb_release_data+0x6dc/0x8a0 [ 100.003066][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 100.008127][ T5929] ? packet_rcv+0x159/0x14b0 [ 100.012904][ T5929] packet_rcv+0x16f/0x14b0 [ 100.017346][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 100.022206][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 100.028219][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 100.034821][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.041337][ T5929] ? read_tsc+0x9/0x20 [ 100.045513][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 100.050835][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.057570][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 100.063745][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.070087][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.076788][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 100.081997][ T5929] ? __phys_addr+0xba/0x170 [ 100.086507][ T5929] ? build_skb_around+0x111/0x260 [ 100.091559][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 100.097479][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 100.102796][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 100.108298][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 100.114236][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 100.119812][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.125643][ T5929] ? synchronize_rcu+0x11b/0x360 [ 100.130597][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 100.135929][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 100.142193][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.148159][ T5929] ? _copy_from_user+0xa6/0xe0 [ 100.152953][ T5929] ? bpf_test_init+0x15a/0x180 [ 100.157737][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 100.163214][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 100.168607][ T5929] ? __pfx_lock_release+0x10/0x10 [ 100.173674][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.179496][ T5929] ? __fget_files+0x29/0x470 [ 100.184102][ T5929] ? fput+0x1a8/0x230 [ 100.188098][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.193918][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 100.198882][ T5929] __sys_bpf+0x48d/0x810 [ 100.203160][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 100.207948][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.213943][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.220368][ T5929] ? do_syscall_64+0x100/0x230 [ 100.225148][ T5929] __x64_sys_bpf+0x7c/0x90 [ 100.229786][ T5929] do_syscall_64+0xf3/0x230 [ 100.234356][ T5929] ? clear_bhb_loop+0x35/0x90 [ 100.239078][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.245017][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 100.249471][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.269264][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.277778][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 100.285837][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.293925][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 100.301919][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.310015][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 100.318009][ T5929] [ 100.321111][ T5929] BUG: Bad page state in process syz.1.174 pfn:7c5a2 [ 100.327934][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c5a2 [ 100.336755][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.343880][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 100.352692][ T5929] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 100.361313][ T5929] page dumped because: page_pool leak [ 100.366743][ T5929] page_owner tracks the page as allocated [ 100.372567][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455106731, free_ts 98371305168 [ 100.389657][ T5929] post_alloc_hook+0x1f3/0x230 [ 100.394456][ T5929] get_page_from_freelist+0x3045/0x3190 [ 100.400105][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 100.405334][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 100.411108][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 100.417083][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 100.422354][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 100.427856][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 100.433247][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 100.438411][ T5929] __sys_bpf+0x48d/0x810 [ 100.442687][ T5929] __x64_sys_bpf+0x7c/0x90 [ 100.447182][ T5929] do_syscall_64+0xf3/0x230 [ 100.451711][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.457649][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 100.463993][ T5929] free_unref_folios+0xf12/0x18d0 [ 100.469129][ T5929] folios_put_refs+0x76c/0x860 [ 100.474053][ T5929] free_pages_and_swap_cache+0x5c8/0x690 [ 100.479740][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 100.484348][ T5929] tlb_finish_mmu+0xd4/0x200 [ 100.488993][ T5929] exit_mmap+0x496/0xc40 [ 100.493253][ T5929] __mmput+0x115/0x390 [ 100.497362][ T5929] exit_mm+0x220/0x310 [ 100.501436][ T5929] do_exit+0x9b2/0x28e0 [ 100.505589][ T5929] do_group_exit+0x207/0x2c0 [ 100.510210][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 100.515247][ T5929] x64_sys_call+0x2634/0x2640 [ 100.519962][ T5929] do_syscall_64+0xf3/0x230 [ 100.524477][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.530452][ T5929] Modules linked in: [ 100.534476][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 100.546641][ T5929] Tainted: [B]=BAD_PAGE [ 100.550798][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.560868][ T5929] Call Trace: [ 100.564159][ T5929] [ 100.567093][ T5929] dump_stack_lvl+0x241/0x360 [ 100.571804][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.577199][ T5929] ? __pfx_print_modules+0x10/0x10 [ 100.582330][ T5929] bad_page+0x166/0x1b0 [ 100.586512][ T5929] free_unref_page+0xed0/0xf20 [ 100.591308][ T5929] skb_release_data+0x6dc/0x8a0 [ 100.596267][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 100.601321][ T5929] ? packet_rcv+0x159/0x14b0 [ 100.606230][ T5929] packet_rcv+0x16f/0x14b0 [ 100.610749][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 100.615634][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 100.621644][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 100.628419][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.634966][ T5929] ? read_tsc+0x9/0x20 [ 100.639061][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 100.644285][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.650694][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 100.656891][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.663273][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.669966][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 100.675368][ T5929] ? __phys_addr+0xba/0x170 [ 100.679903][ T5929] ? build_skb_around+0x111/0x260 [ 100.684937][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 100.690855][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 100.696175][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 100.701703][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 100.707838][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 100.713519][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.719461][ T5929] ? synchronize_rcu+0x11b/0x360 [ 100.724439][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 100.729835][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 100.736210][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.742347][ T5929] ? _copy_from_user+0xa6/0xe0 [ 100.747226][ T5929] ? bpf_test_init+0x15a/0x180 [ 100.752031][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 100.757583][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 100.762999][ T5929] ? __pfx_lock_release+0x10/0x10 [ 100.768197][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.774085][ T5929] ? __fget_files+0x29/0x470 [ 100.778837][ T5929] ? fput+0x1a8/0x230 [ 100.782829][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.788670][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 100.793702][ T5929] __sys_bpf+0x48d/0x810 [ 100.797983][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 100.803077][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.809093][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.815457][ T5929] ? do_syscall_64+0x100/0x230 [ 100.820242][ T5929] __x64_sys_bpf+0x7c/0x90 [ 100.824695][ T5929] do_syscall_64+0xf3/0x230 [ 100.829222][ T5929] ? clear_bhb_loop+0x35/0x90 [ 100.833908][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.839857][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 100.844321][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.863949][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.872412][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 100.880404][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.888404][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 100.896431][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.904661][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 100.912683][ T5929] [ 100.915779][ T5929] BUG: Bad page state in process syz.1.174 pfn:246b7 [ 100.922584][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880246b7e58 pfn:0x246b7 [ 100.932785][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.939980][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 100.948663][ T5929] raw: ffff8880246b7e58 0000000000000001 00000000ffffffff 0000000000000000 [ 100.957425][ T5929] page dumped because: page_pool leak [ 100.962906][ T5929] page_owner tracks the page as allocated [ 100.968656][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455093993, free_ts 98371321231 [ 100.985679][ T5929] post_alloc_hook+0x1f3/0x230 [ 100.990505][ T5929] get_page_from_freelist+0x3045/0x3190 [ 100.996391][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 101.001826][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 101.007359][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 101.013382][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 101.018632][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 101.024077][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.029545][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 101.034676][ T5929] __sys_bpf+0x48d/0x810 [ 101.038964][ T5929] __x64_sys_bpf+0x7c/0x90 [ 101.043475][ T5929] do_syscall_64+0xf3/0x230 [ 101.048189][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.054100][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 101.060472][ T5929] free_unref_page+0xcfb/0xf20 [ 101.065283][ T5929] tlb_finish_mmu+0x11f/0x200 [ 101.070003][ T5929] exit_mmap+0x496/0xc40 [ 101.074264][ T5929] __mmput+0x115/0x390 [ 101.078382][ T5929] exit_mm+0x220/0x310 [ 101.082463][ T5929] do_exit+0x9b2/0x28e0 [ 101.086668][ T5929] do_group_exit+0x207/0x2c0 [ 101.091398][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 101.096453][ T5929] x64_sys_call+0x2634/0x2640 [ 101.101136][ T5929] do_syscall_64+0xf3/0x230 [ 101.105746][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.111695][ T5929] Modules linked in: [ 101.115597][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 101.128128][ T5929] Tainted: [B]=BAD_PAGE [ 101.132277][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.143115][ T5929] Call Trace: [ 101.146398][ T5929] [ 101.149414][ T5929] dump_stack_lvl+0x241/0x360 [ 101.154096][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.159298][ T5929] ? __pfx_print_modules+0x10/0x10 [ 101.164421][ T5929] bad_page+0x166/0x1b0 [ 101.168608][ T5929] free_unref_page+0xed0/0xf20 [ 101.173537][ T5929] skb_release_data+0x6dc/0x8a0 [ 101.178760][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 101.184061][ T5929] ? packet_rcv+0x159/0x14b0 [ 101.188664][ T5929] packet_rcv+0x16f/0x14b0 [ 101.193198][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 101.198069][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 101.204088][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 101.210722][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.217348][ T5929] ? read_tsc+0x9/0x20 [ 101.221544][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 101.226789][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 101.233130][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 101.239310][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 101.245750][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.252452][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 101.257666][ T5929] ? __phys_addr+0xba/0x170 [ 101.262180][ T5929] ? build_skb_around+0x111/0x260 [ 101.267587][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 101.273534][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 101.278846][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 101.284524][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 101.290709][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 101.296390][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.302241][ T5929] ? synchronize_rcu+0x11b/0x360 [ 101.307193][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 101.312502][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 101.318784][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.324742][ T5929] ? _copy_from_user+0xa6/0xe0 [ 101.329534][ T5929] ? bpf_test_init+0x15a/0x180 [ 101.334326][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 101.339828][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.345241][ T5929] ? __pfx_lock_release+0x10/0x10 [ 101.350306][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.356246][ T5929] ? __fget_files+0x29/0x470 [ 101.360866][ T5929] ? fput+0x1a8/0x230 [ 101.364871][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.370899][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 101.375987][ T5929] __sys_bpf+0x48d/0x810 [ 101.380255][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 101.385211][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.391219][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.397576][ T5929] ? do_syscall_64+0x100/0x230 [ 101.402359][ T5929] __x64_sys_bpf+0x7c/0x90 [ 101.406789][ T5929] do_syscall_64+0xf3/0x230 [ 101.411308][ T5929] ? clear_bhb_loop+0x35/0x90 [ 101.416043][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.421988][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 101.426639][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.446372][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.454902][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 101.462893][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.470895][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 101.479152][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.487230][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 101.495254][ T5929] [ 101.498375][ T5929] BUG: Bad page state in process syz.1.174 pfn:1c70a [ 101.505174][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801c70af00 pfn:0x1c70a [ 101.515284][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.522548][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 101.531265][ T5929] raw: ffff88801c70af00 0000000000000001 00000000ffffffff 0000000000000000 [ 101.540694][ T5929] page dumped because: page_pool leak [ 101.546138][ T5929] page_owner tracks the page as allocated [ 101.551877][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455081293, free_ts 98371333039 [ 101.568693][ T5929] post_alloc_hook+0x1f3/0x230 [ 101.573485][ T5929] get_page_from_freelist+0x3045/0x3190 [ 101.579186][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 101.584402][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 101.589922][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 101.595984][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 101.601229][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 101.606658][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.612077][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 101.617076][ T5929] __sys_bpf+0x48d/0x810 [ 101.621340][ T5929] __x64_sys_bpf+0x7c/0x90 [ 101.625949][ T5929] do_syscall_64+0xf3/0x230 [ 101.630488][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.636555][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 101.643147][ T5929] free_unref_page+0xcfb/0xf20 [ 101.647972][ T5929] tlb_finish_mmu+0x11f/0x200 [ 101.652654][ T5929] exit_mmap+0x496/0xc40 [ 101.656951][ T5929] __mmput+0x115/0x390 [ 101.661048][ T5929] exit_mm+0x220/0x310 [ 101.665115][ T5929] do_exit+0x9b2/0x28e0 [ 101.669297][ T5929] do_group_exit+0x207/0x2c0 [ 101.673896][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 101.679015][ T5929] x64_sys_call+0x2634/0x2640 [ 101.683721][ T5929] do_syscall_64+0xf3/0x230 [ 101.688391][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.694325][ T5929] Modules linked in: [ 101.698280][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 101.710478][ T5929] Tainted: [B]=BAD_PAGE [ 101.714630][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.724707][ T5929] Call Trace: [ 101.728001][ T5929] [ 101.730940][ T5929] dump_stack_lvl+0x241/0x360 [ 101.735718][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.740937][ T5929] ? __pfx_print_modules+0x10/0x10 [ 101.746124][ T5929] bad_page+0x166/0x1b0 [ 101.750344][ T5929] free_unref_page+0xed0/0xf20 [ 101.755127][ T5929] skb_release_data+0x6dc/0x8a0 [ 101.759997][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 101.765050][ T5929] ? packet_rcv+0x159/0x14b0 [ 101.769673][ T5929] packet_rcv+0x16f/0x14b0 [ 101.774115][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 101.778988][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 101.785025][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 101.791620][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.798135][ T5929] ? read_tsc+0x9/0x20 [ 101.802245][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 101.807486][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 101.813862][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 101.820163][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 101.826526][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.833248][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 101.838466][ T5929] ? __phys_addr+0xba/0x170 [ 101.843075][ T5929] ? build_skb_around+0x111/0x260 [ 101.848148][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 101.854053][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 101.859360][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 101.864964][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 101.870977][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 101.876623][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.882437][ T5929] ? synchronize_rcu+0x11b/0x360 [ 101.887399][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 101.892800][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 101.899101][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.905220][ T5929] ? _copy_from_user+0xa6/0xe0 [ 101.910079][ T5929] ? bpf_test_init+0x15a/0x180 [ 101.914865][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 101.920533][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.925949][ T5929] ? __pfx_lock_release+0x10/0x10 [ 101.930997][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.937257][ T5929] ? __fget_files+0x29/0x470 [ 101.941942][ T5929] ? fput+0x1a8/0x230 [ 101.946034][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.952461][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 101.957618][ T5929] __sys_bpf+0x48d/0x810 [ 101.962060][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 101.966853][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.972859][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.979200][ T5929] ? do_syscall_64+0x100/0x230 [ 101.983974][ T5929] __x64_sys_bpf+0x7c/0x90 [ 101.988425][ T5929] do_syscall_64+0xf3/0x230 [ 101.992931][ T5929] ? clear_bhb_loop+0x35/0x90 [ 101.997617][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.003609][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 102.008098][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.027899][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.036412][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 102.044386][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 102.052401][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 102.060418][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.068488][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 102.076475][ T5929] [ 102.079577][ T5929] BUG: Bad page state in process syz.1.174 pfn:5c06a [ 102.086470][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805c06a000 pfn:0x5c06a [ 102.096690][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 102.103811][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 102.112509][ T5929] raw: ffff88805c06a000 0000000000000001 00000000ffffffff 0000000000000000 [ 102.121129][ T5929] page dumped because: page_pool leak [ 102.126520][ T5929] page_owner tracks the page as allocated [ 102.132239][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455068478, free_ts 98371344121 [ 102.149075][ T5929] post_alloc_hook+0x1f3/0x230 [ 102.153863][ T5929] get_page_from_freelist+0x3045/0x3190 [ 102.159454][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 102.164659][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 102.170148][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 102.176165][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 102.181411][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 102.186834][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 102.192218][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 102.197218][ T5929] __sys_bpf+0x48d/0x810 [ 102.201462][ T5929] __x64_sys_bpf+0x7c/0x90 [ 102.205926][ T5929] do_syscall_64+0xf3/0x230 [ 102.210484][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.216428][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 102.222761][ T5929] free_unref_page+0xcfb/0xf20 [ 102.227553][ T5929] tlb_finish_mmu+0x11f/0x200 [ 102.232243][ T5929] exit_mmap+0x496/0xc40 [ 102.236534][ T5929] __mmput+0x115/0x390 [ 102.240639][ T5929] exit_mm+0x220/0x310 [ 102.244725][ T5929] do_exit+0x9b2/0x28e0 [ 102.248920][ T5929] do_group_exit+0x207/0x2c0 [ 102.253533][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 102.258602][ T5929] x64_sys_call+0x2634/0x2640 [ 102.263286][ T5929] do_syscall_64+0xf3/0x230 [ 102.267846][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.273868][ T5929] Modules linked in: [ 102.277801][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 102.289881][ T5929] Tainted: [B]=BAD_PAGE [ 102.294121][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.304180][ T5929] Call Trace: [ 102.307470][ T5929] [ 102.310403][ T5929] dump_stack_lvl+0x241/0x360 [ 102.315101][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.320316][ T5929] ? __pfx_print_modules+0x10/0x10 [ 102.325443][ T5929] bad_page+0x166/0x1b0 [ 102.329615][ T5929] free_unref_page+0xed0/0xf20 [ 102.334379][ T5929] skb_release_data+0x6dc/0x8a0 [ 102.339266][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 102.344338][ T5929] ? packet_rcv+0x159/0x14b0 [ 102.348970][ T5929] packet_rcv+0x16f/0x14b0 [ 102.353397][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 102.358265][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 102.364256][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 102.370998][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 102.377524][ T5929] ? read_tsc+0x9/0x20 [ 102.381608][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 102.386859][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.393266][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 102.399528][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.405871][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 102.412591][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 102.417812][ T5929] ? __phys_addr+0xba/0x170 [ 102.422351][ T5929] ? build_skb_around+0x111/0x260 [ 102.427402][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 102.433409][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 102.438724][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 102.444218][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 102.450150][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 102.455709][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 102.461550][ T5929] ? synchronize_rcu+0x11b/0x360 [ 102.466764][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 102.472156][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 102.478434][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 102.484435][ T5929] ? _copy_from_user+0xa6/0xe0 [ 102.489311][ T5929] ? bpf_test_init+0x15a/0x180 [ 102.494125][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 102.499812][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 102.505197][ T5929] ? __pfx_lock_release+0x10/0x10 [ 102.510257][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.516262][ T5929] ? __fget_files+0x29/0x470 [ 102.520873][ T5929] ? fput+0x1a8/0x230 [ 102.524865][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.530743][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 102.535727][ T5929] __sys_bpf+0x48d/0x810 [ 102.540003][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 102.544801][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.550817][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.557254][ T5929] ? do_syscall_64+0x100/0x230 [ 102.562029][ T5929] __x64_sys_bpf+0x7c/0x90 [ 102.566627][ T5929] do_syscall_64+0xf3/0x230 [ 102.571151][ T5929] ? clear_bhb_loop+0x35/0x90 [ 102.575930][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.581973][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 102.586409][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.606045][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.614496][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 102.622468][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 102.630527][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 102.638515][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.646596][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 102.654582][ T5929] [ 102.657671][ T5929] BUG: Bad page state in process syz.1.174 pfn:69e96 [ 102.664520][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69e96 [ 102.673493][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 102.680663][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 102.689289][ T5929] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 102.697922][ T5929] page dumped because: page_pool leak [ 102.703318][ T5929] page_owner tracks the page as allocated [ 102.709095][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455055753, free_ts 98371355653 [ 102.726066][ T5929] post_alloc_hook+0x1f3/0x230 [ 102.730865][ T5929] get_page_from_freelist+0x3045/0x3190 [ 102.736462][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 102.741683][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 102.747172][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 102.753074][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 102.758329][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 102.763722][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 102.769139][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 102.774257][ T5929] __sys_bpf+0x48d/0x810 [ 102.778536][ T5929] __x64_sys_bpf+0x7c/0x90 [ 102.782975][ T5929] do_syscall_64+0xf3/0x230 [ 102.787520][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.793447][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 102.799794][ T5929] free_unref_page+0xcfb/0xf20 [ 102.804557][ T5929] tlb_finish_mmu+0x11f/0x200 [ 102.809264][ T5929] exit_mmap+0x496/0xc40 [ 102.813523][ T5929] __mmput+0x115/0x390 [ 102.817623][ T5929] exit_mm+0x220/0x310 [ 102.821695][ T5929] do_exit+0x9b2/0x28e0 [ 102.825902][ T5929] do_group_exit+0x207/0x2c0 [ 102.830513][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 102.835539][ T5929] x64_sys_call+0x2634/0x2640 [ 102.840258][ T5929] do_syscall_64+0xf3/0x230 [ 102.844764][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.850696][ T5929] Modules linked in: [ 102.854591][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 102.866672][ T5929] Tainted: [B]=BAD_PAGE [ 102.870838][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.880900][ T5929] Call Trace: [ 102.884181][ T5929] [ 102.887123][ T5929] dump_stack_lvl+0x241/0x360 [ 102.892003][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.897205][ T5929] ? __pfx_print_modules+0x10/0x10 [ 102.902329][ T5929] bad_page+0x166/0x1b0 [ 102.906642][ T5929] free_unref_page+0xed0/0xf20 [ 102.911445][ T5929] skb_release_data+0x6dc/0x8a0 [ 102.916455][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 102.921511][ T5929] ? packet_rcv+0x159/0x14b0 [ 102.926113][ T5929] packet_rcv+0x16f/0x14b0 [ 102.930544][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 102.935584][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 102.941594][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 102.948213][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 102.954745][ T5929] ? read_tsc+0x9/0x20 [ 102.958834][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 102.964063][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.970520][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 102.976792][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.983202][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 102.990015][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 102.995250][ T5929] ? __phys_addr+0xba/0x170 [ 102.999768][ T5929] ? build_skb_around+0x111/0x260 [ 103.004811][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 103.010844][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 103.016148][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 103.021802][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 103.027705][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 103.033274][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 103.039087][ T5929] ? synchronize_rcu+0x11b/0x360 [ 103.044232][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 103.049625][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 103.056159][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 103.062090][ T5929] ? _copy_from_user+0xa6/0xe0 [ 103.066869][ T5929] ? bpf_test_init+0x15a/0x180 [ 103.071736][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 103.077226][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.082701][ T5929] ? __pfx_lock_release+0x10/0x10 [ 103.087758][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.093684][ T5929] ? __fget_files+0x29/0x470 [ 103.098303][ T5929] ? fput+0x1a8/0x230 [ 103.102297][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.108479][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 103.113429][ T5929] __sys_bpf+0x48d/0x810 [ 103.117940][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 103.122730][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.128739][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.135232][ T5929] ? do_syscall_64+0x100/0x230 [ 103.140047][ T5929] __x64_sys_bpf+0x7c/0x90 [ 103.144487][ T5929] do_syscall_64+0xf3/0x230 [ 103.149015][ T5929] ? clear_bhb_loop+0x35/0x90 [ 103.153802][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.159749][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 103.164195][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.183817][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.192416][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 103.200391][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 103.208396][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 103.216472][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.224442][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 103.232460][ T5929] [ 103.235547][ T5929] BUG: Bad page state in process syz.1.174 pfn:2236f [ 103.242346][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802236f000 pfn:0x2236f [ 103.252445][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.259650][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 103.268298][ T5929] raw: ffff88802236f000 0000000000000001 00000000ffffffff 0000000000000000 [ 103.276943][ T5929] page dumped because: page_pool leak [ 103.282346][ T5929] page_owner tracks the page as allocated [ 103.288108][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455043012, free_ts 98371366518 [ 103.304912][ T5929] post_alloc_hook+0x1f3/0x230 [ 103.309749][ T5929] get_page_from_freelist+0x3045/0x3190 [ 103.315440][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 103.320687][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 103.326190][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 103.332120][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 103.337541][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 103.343008][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.348411][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 103.353348][ T5929] __sys_bpf+0x48d/0x810 [ 103.357636][ T5929] __x64_sys_bpf+0x7c/0x90 [ 103.362075][ T5929] do_syscall_64+0xf3/0x230 [ 103.366598][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.372497][ T5929] page last free pid 5919 tgid 5919 stack trace: [ 103.378868][ T5929] free_unref_page+0xcfb/0xf20 [ 103.383743][ T5929] tlb_finish_mmu+0x11f/0x200 [ 103.388474][ T5929] exit_mmap+0x496/0xc40 [ 103.392731][ T5929] __mmput+0x115/0x390 [ 103.396876][ T5929] exit_mm+0x220/0x310 [ 103.401049][ T5929] do_exit+0x9b2/0x28e0 [ 103.405224][ T5929] do_group_exit+0x207/0x2c0 [ 103.409958][ T5929] __x64_sys_exit_group+0x3f/0x40 [ 103.415006][ T5929] x64_sys_call+0x2634/0x2640 [ 103.419730][ T5929] do_syscall_64+0xf3/0x230 [ 103.424296][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.430256][ T5929] Modules linked in: [ 103.434180][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 103.446272][ T5929] Tainted: [B]=BAD_PAGE [ 103.450475][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.460545][ T5929] Call Trace: [ 103.463876][ T5929] [ 103.466857][ T5929] dump_stack_lvl+0x241/0x360 [ 103.471560][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.476777][ T5929] ? __pfx_print_modules+0x10/0x10 [ 103.481917][ T5929] bad_page+0x166/0x1b0 [ 103.486089][ T5929] free_unref_page+0xed0/0xf20 [ 103.490876][ T5929] skb_release_data+0x6dc/0x8a0 [ 103.495734][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 103.500759][ T5929] ? packet_rcv+0x159/0x14b0 [ 103.505362][ T5929] packet_rcv+0x16f/0x14b0 [ 103.509787][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 103.514642][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 103.520645][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 103.527255][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 103.533764][ T5929] ? read_tsc+0x9/0x20 [ 103.537911][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 103.543160][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 103.549532][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 103.555729][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 103.562064][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 103.568754][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 103.573968][ T5929] ? __phys_addr+0xba/0x170 [ 103.578487][ T5929] ? build_skb_around+0x111/0x260 [ 103.583634][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 103.589778][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 103.595231][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 103.600866][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 103.606777][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 103.612342][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 103.618158][ T5929] ? synchronize_rcu+0x11b/0x360 [ 103.623099][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 103.628488][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 103.634940][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 103.640926][ T5929] ? _copy_from_user+0xa6/0xe0 [ 103.645802][ T5929] ? bpf_test_init+0x15a/0x180 [ 103.650604][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 103.656108][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.661691][ T5929] ? __pfx_lock_release+0x10/0x10 [ 103.666762][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.672889][ T5929] ? __fget_files+0x29/0x470 [ 103.677683][ T5929] ? fput+0x1a8/0x230 [ 103.681693][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.687547][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 103.692532][ T5929] __sys_bpf+0x48d/0x810 [ 103.696962][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 103.701746][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.707824][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.714162][ T5929] ? do_syscall_64+0x100/0x230 [ 103.718950][ T5929] __x64_sys_bpf+0x7c/0x90 [ 103.723367][ T5929] do_syscall_64+0xf3/0x230 [ 103.727900][ T5929] ? clear_bhb_loop+0x35/0x90 [ 103.732579][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.738483][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 103.742907][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.762785][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.771470][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 103.779468][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 103.787715][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 103.796162][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.804163][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 103.812147][ T5929] [ 103.815317][ T5929] BUG: Bad page state in process syz.1.174 pfn:30495 [ 103.822109][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030495dc0 pfn:0x30495 [ 103.832295][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.839491][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 103.848202][ T5929] raw: ffff888030495dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 103.856825][ T5929] page dumped because: page_pool leak [ 103.862246][ T5929] page_owner tracks the page as allocated [ 103.868011][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455030293, free_ts 98378877537 [ 103.884807][ T5929] post_alloc_hook+0x1f3/0x230 [ 103.889635][ T5929] get_page_from_freelist+0x3045/0x3190 [ 103.895209][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 103.900470][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 103.905967][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 103.911893][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 103.917147][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 103.922531][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.928075][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 103.933018][ T5929] __sys_bpf+0x48d/0x810 [ 103.937309][ T5929] __x64_sys_bpf+0x7c/0x90 [ 103.941770][ T5929] do_syscall_64+0xf3/0x230 [ 103.946826][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.953088][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 103.959795][ T5929] free_unref_folios+0xf12/0x18d0 [ 103.964909][ T5929] folios_put_refs+0x76c/0x860 [ 103.969712][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 103.975375][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 103.980005][ T5929] tlb_finish_mmu+0xd4/0x200 [ 103.984599][ T5929] exit_mmap+0x496/0xc40 [ 103.988974][ T5929] __mmput+0x115/0x390 [ 103.993176][ T5929] exit_mm+0x220/0x310 [ 103.997398][ T5929] do_exit+0x9b2/0x28e0 [ 104.001562][ T5929] do_group_exit+0x207/0x2c0 [ 104.006202][ T5929] get_signal+0x16a3/0x1740 [ 104.010749][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 104.016352][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 104.021931][ T5929] do_syscall_64+0x100/0x230 [ 104.026576][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.032505][ T5929] Modules linked in: [ 104.036458][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 104.048567][ T5929] Tainted: [B]=BAD_PAGE [ 104.052737][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.062919][ T5929] Call Trace: [ 104.066199][ T5929] [ 104.069134][ T5929] dump_stack_lvl+0x241/0x360 [ 104.073843][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.079039][ T5929] ? __pfx_print_modules+0x10/0x10 [ 104.084245][ T5929] bad_page+0x166/0x1b0 [ 104.088410][ T5929] free_unref_page+0xed0/0xf20 [ 104.093288][ T5929] skb_release_data+0x6dc/0x8a0 [ 104.098168][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 104.103217][ T5929] ? packet_rcv+0x159/0x14b0 [ 104.107826][ T5929] packet_rcv+0x16f/0x14b0 [ 104.112255][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 104.117109][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 104.123094][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 104.129683][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 104.136185][ T5929] ? read_tsc+0x9/0x20 [ 104.140271][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 104.145477][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 104.151903][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 104.158067][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 104.164409][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 104.171097][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 104.176341][ T5929] ? __phys_addr+0xba/0x170 [ 104.180851][ T5929] ? build_skb_around+0x111/0x260 [ 104.185883][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 104.191789][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 104.197093][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 104.202592][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 104.208500][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 104.214074][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 104.220007][ T5929] ? synchronize_rcu+0x11b/0x360 [ 104.224956][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 104.230249][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 104.236497][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 104.242396][ T5929] ? _copy_from_user+0xa6/0xe0 [ 104.247193][ T5929] ? bpf_test_init+0x15a/0x180 [ 104.252076][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 104.257555][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 104.262948][ T5929] ? __pfx_lock_release+0x10/0x10 [ 104.268007][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.273837][ T5929] ? __fget_files+0x29/0x470 [ 104.278570][ T5929] ? fput+0x1a8/0x230 [ 104.282586][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.288417][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 104.293375][ T5929] __sys_bpf+0x48d/0x810 [ 104.297652][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 104.302458][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.308451][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.314808][ T5929] ? do_syscall_64+0x100/0x230 [ 104.319618][ T5929] __x64_sys_bpf+0x7c/0x90 [ 104.324152][ T5929] do_syscall_64+0xf3/0x230 [ 104.328663][ T5929] ? clear_bhb_loop+0x35/0x90 [ 104.333345][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.339248][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 104.343662][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.363710][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.372132][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 104.380207][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 104.388278][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 104.396349][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.404437][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 104.412540][ T5929] [ 104.415658][ T5929] BUG: Bad page state in process syz.1.174 pfn:24ce4 [ 104.422479][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24ce4 [ 104.431315][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.438574][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 104.447221][ T5929] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.456153][ T5929] page dumped because: page_pool leak [ 104.461545][ T5929] page_owner tracks the page as allocated [ 104.467384][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455017396, free_ts 98378888036 [ 104.484267][ T5929] post_alloc_hook+0x1f3/0x230 [ 104.489076][ T5929] get_page_from_freelist+0x3045/0x3190 [ 104.494634][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 104.499897][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 104.505529][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 104.511510][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 104.516788][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 104.522211][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 104.527656][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 104.532714][ T5929] __sys_bpf+0x48d/0x810 [ 104.537077][ T5929] __x64_sys_bpf+0x7c/0x90 [ 104.541492][ T5929] do_syscall_64+0xf3/0x230 [ 104.546029][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.551969][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 104.558432][ T5929] free_unref_folios+0xf12/0x18d0 [ 104.563465][ T5929] folios_put_refs+0x76c/0x860 [ 104.568263][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 104.573899][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 104.578581][ T5929] tlb_finish_mmu+0xd4/0x200 [ 104.583223][ T5929] exit_mmap+0x496/0xc40 [ 104.587612][ T5929] __mmput+0x115/0x390 [ 104.591702][ T5929] exit_mm+0x220/0x310 [ 104.595781][ T5929] do_exit+0x9b2/0x28e0 [ 104.599973][ T5929] do_group_exit+0x207/0x2c0 [ 104.604566][ T5929] get_signal+0x16a3/0x1740 [ 104.609112][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 104.614668][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 104.620257][ T5929] do_syscall_64+0x100/0x230 [ 104.625026][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.631320][ T5929] Modules linked in: [ 104.635227][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 104.647299][ T5929] Tainted: [B]=BAD_PAGE [ 104.651441][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.661584][ T5929] Call Trace: [ 104.664948][ T5929] [ 104.667879][ T5929] dump_stack_lvl+0x241/0x360 [ 104.672556][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.677839][ T5929] ? __pfx_print_modules+0x10/0x10 [ 104.683071][ T5929] bad_page+0x166/0x1b0 [ 104.687348][ T5929] free_unref_page+0xed0/0xf20 [ 104.692146][ T5929] skb_release_data+0x6dc/0x8a0 [ 104.697014][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 104.702065][ T5929] ? packet_rcv+0x159/0x14b0 [ 104.706675][ T5929] packet_rcv+0x16f/0x14b0 [ 104.711199][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 104.716057][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 104.722047][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 104.728639][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 104.735142][ T5929] ? read_tsc+0x9/0x20 [ 104.739217][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 104.744428][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 104.751047][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 104.757268][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 104.763611][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 104.770297][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 104.775513][ T5929] ? __phys_addr+0xba/0x170 [ 104.780104][ T5929] ? build_skb_around+0x111/0x260 [ 104.785125][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 104.791042][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 104.796345][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 104.801830][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 104.807737][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 104.813302][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 104.819127][ T5929] ? synchronize_rcu+0x11b/0x360 [ 104.824068][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 104.829365][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 104.835612][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 104.841542][ T5929] ? _copy_from_user+0xa6/0xe0 [ 104.846348][ T5929] ? bpf_test_init+0x15a/0x180 [ 104.851394][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 104.856861][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 104.862242][ T5929] ? __pfx_lock_release+0x10/0x10 [ 104.867278][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.873089][ T5929] ? __fget_files+0x29/0x470 [ 104.877686][ T5929] ? fput+0x1a8/0x230 [ 104.881784][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.887610][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 104.892607][ T5929] __sys_bpf+0x48d/0x810 [ 104.896877][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 104.901652][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.907754][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.914123][ T5929] ? do_syscall_64+0x100/0x230 [ 104.918931][ T5929] __x64_sys_bpf+0x7c/0x90 [ 104.923385][ T5929] do_syscall_64+0xf3/0x230 [ 104.927927][ T5929] ? clear_bhb_loop+0x35/0x90 [ 104.932632][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.938538][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 104.942957][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.962574][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.971076][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 104.979052][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 104.987125][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 104.995118][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.003186][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 105.011173][ T5929] [ 105.014339][ T5929] BUG: Bad page state in process syz.1.174 pfn:7e6d9 [ 105.021135][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e6d9f00 pfn:0x7e6d9 [ 105.031253][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 105.038405][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 105.047013][ T5929] raw: ffff88807e6d9f00 0000000000000001 00000000ffffffff 0000000000000000 [ 105.055604][ T5929] page dumped because: page_pool leak [ 105.061004][ T5929] page_owner tracks the page as allocated [ 105.066784][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98455004882, free_ts 98378898676 [ 105.083621][ T5929] post_alloc_hook+0x1f3/0x230 [ 105.088558][ T5929] get_page_from_freelist+0x3045/0x3190 [ 105.094117][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 105.099372][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 105.104949][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 105.110888][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 105.116140][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 105.121553][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 105.126993][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 105.131947][ T5929] __sys_bpf+0x48d/0x810 [ 105.136300][ T5929] __x64_sys_bpf+0x7c/0x90 [ 105.140754][ T5929] do_syscall_64+0xf3/0x230 [ 105.145255][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.151189][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 105.157555][ T5929] free_unref_folios+0xf12/0x18d0 [ 105.162582][ T5929] folios_put_refs+0x76c/0x860 [ 105.167409][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 105.173066][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 105.177828][ T5929] tlb_finish_mmu+0xd4/0x200 [ 105.182426][ T5929] exit_mmap+0x496/0xc40 [ 105.186717][ T5929] __mmput+0x115/0x390 [ 105.190812][ T5929] exit_mm+0x220/0x310 [ 105.194882][ T5929] do_exit+0x9b2/0x28e0 [ 105.199080][ T5929] do_group_exit+0x207/0x2c0 [ 105.203672][ T5929] get_signal+0x16a3/0x1740 [ 105.208231][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 105.213802][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 105.219402][ T5929] do_syscall_64+0x100/0x230 [ 105.224114][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.230059][ T5929] Modules linked in: [ 105.233970][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 105.246043][ T5929] Tainted: [B]=BAD_PAGE [ 105.250198][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.260254][ T5929] Call Trace: [ 105.263659][ T5929] [ 105.266632][ T5929] dump_stack_lvl+0x241/0x360 [ 105.271339][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.276551][ T5929] ? __pfx_print_modules+0x10/0x10 [ 105.281756][ T5929] bad_page+0x166/0x1b0 [ 105.285935][ T5929] free_unref_page+0xed0/0xf20 [ 105.290724][ T5929] skb_release_data+0x6dc/0x8a0 [ 105.295678][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 105.300766][ T5929] ? packet_rcv+0x159/0x14b0 [ 105.305362][ T5929] packet_rcv+0x16f/0x14b0 [ 105.309787][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 105.314638][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 105.320636][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 105.327246][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 105.333843][ T5929] ? read_tsc+0x9/0x20 [ 105.337931][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 105.343162][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 105.349495][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 105.355683][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 105.362012][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 105.368687][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 105.373971][ T5929] ? __phys_addr+0xba/0x170 [ 105.378558][ T5929] ? build_skb_around+0x111/0x260 [ 105.383582][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 105.389506][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 105.394823][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 105.400295][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 105.406205][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 105.411766][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 105.417581][ T5929] ? synchronize_rcu+0x11b/0x360 [ 105.422541][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 105.427851][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 105.434129][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 105.440045][ T5929] ? _copy_from_user+0xa6/0xe0 [ 105.444883][ T5929] ? bpf_test_init+0x15a/0x180 [ 105.449762][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 105.455240][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 105.460636][ T5929] ? __pfx_lock_release+0x10/0x10 [ 105.465740][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 105.471583][ T5929] ? __fget_files+0x29/0x470 [ 105.476193][ T5929] ? fput+0x1a8/0x230 [ 105.480186][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 105.486021][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 105.491004][ T5929] __sys_bpf+0x48d/0x810 [ 105.495280][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 105.500059][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.506154][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.512590][ T5929] ? do_syscall_64+0x100/0x230 [ 105.517446][ T5929] __x64_sys_bpf+0x7c/0x90 [ 105.521950][ T5929] do_syscall_64+0xf3/0x230 [ 105.526475][ T5929] ? clear_bhb_loop+0x35/0x90 [ 105.531162][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.537094][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 105.541531][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.561163][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.569578][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 105.577663][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 105.585735][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 105.593800][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.601868][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 105.609846][ T5929] [ 105.612927][ T5929] BUG: Bad page state in process syz.1.174 pfn:7c5af [ 105.619718][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c5af000 pfn:0x7c5af [ 105.629911][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 105.637080][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 105.645683][ T5929] raw: ffff88807c5af000 0000000000000001 00000000ffffffff 0000000000000000 [ 105.654296][ T5929] page dumped because: page_pool leak [ 105.659695][ T5929] page_owner tracks the page as allocated [ 105.665412][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98454992185, free_ts 98378909067 [ 105.682481][ T5929] post_alloc_hook+0x1f3/0x230 [ 105.687562][ T5929] get_page_from_freelist+0x3045/0x3190 [ 105.693159][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 105.698393][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 105.703852][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 105.709810][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 105.715033][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 105.720475][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 105.725906][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 105.730874][ T5929] __sys_bpf+0x48d/0x810 [ 105.735130][ T5929] __x64_sys_bpf+0x7c/0x90 [ 105.739593][ T5929] do_syscall_64+0xf3/0x230 [ 105.744111][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.750045][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 105.756440][ T5929] free_unref_folios+0xf12/0x18d0 [ 105.761486][ T5929] folios_put_refs+0x76c/0x860 [ 105.766465][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 105.772102][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 105.776935][ T5929] tlb_finish_mmu+0xd4/0x200 [ 105.781542][ T5929] exit_mmap+0x496/0xc40 [ 105.785792][ T5929] __mmput+0x115/0x390 [ 105.789913][ T5929] exit_mm+0x220/0x310 [ 105.794008][ T5929] do_exit+0x9b2/0x28e0 [ 105.798345][ T5929] do_group_exit+0x207/0x2c0 [ 105.802950][ T5929] get_signal+0x16a3/0x1740 [ 105.807514][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 105.813186][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 105.818776][ T5929] do_syscall_64+0x100/0x230 [ 105.823455][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.829399][ T5929] Modules linked in: [ 105.833307][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 105.845387][ T5929] Tainted: [B]=BAD_PAGE [ 105.849643][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.859806][ T5929] Call Trace: [ 105.863091][ T5929] [ 105.866284][ T5929] dump_stack_lvl+0x241/0x360 [ 105.870970][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.876169][ T5929] ? __pfx_print_modules+0x10/0x10 [ 105.881295][ T5929] bad_page+0x166/0x1b0 [ 105.885553][ T5929] free_unref_page+0xed0/0xf20 [ 105.890331][ T5929] skb_release_data+0x6dc/0x8a0 [ 105.895194][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 105.900485][ T5929] ? packet_rcv+0x159/0x14b0 [ 105.905097][ T5929] packet_rcv+0x16f/0x14b0 [ 105.909525][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 105.914382][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 105.920398][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 105.927015][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 105.933593][ T5929] ? read_tsc+0x9/0x20 [ 105.937724][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 105.943024][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 105.949391][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 105.955597][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 105.962065][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 105.969049][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 105.974256][ T5929] ? __phys_addr+0xba/0x170 [ 105.978776][ T5929] ? build_skb_around+0x111/0x260 [ 105.983889][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 105.989820][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 105.995122][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 106.000730][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 106.006656][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 106.012284][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 106.018128][ T5929] ? synchronize_rcu+0x11b/0x360 [ 106.023082][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 106.028414][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 106.034756][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 106.040722][ T5929] ? _copy_from_user+0xa6/0xe0 [ 106.045525][ T5929] ? bpf_test_init+0x15a/0x180 [ 106.050392][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 106.055873][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 106.061273][ T5929] ? __pfx_lock_release+0x10/0x10 [ 106.066310][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 106.072122][ T5929] ? __fget_files+0x29/0x470 [ 106.076804][ T5929] ? fput+0x1a8/0x230 [ 106.080786][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 106.086616][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 106.091592][ T5929] __sys_bpf+0x48d/0x810 [ 106.095926][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 106.100708][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.106699][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.113041][ T5929] ? do_syscall_64+0x100/0x230 [ 106.117805][ T5929] __x64_sys_bpf+0x7c/0x90 [ 106.122220][ T5929] do_syscall_64+0xf3/0x230 [ 106.126720][ T5929] ? clear_bhb_loop+0x35/0x90 [ 106.131390][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.137304][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 106.141738][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.161352][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.169778][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 106.177852][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 106.185862][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 106.193880][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.201862][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 106.209850][ T5929] [ 106.212940][ T5929] BUG: Bad page state in process syz.1.174 pfn:69df8 [ 106.219735][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69df8 [ 106.228546][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.235687][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 106.244362][ T5929] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 106.252995][ T5929] page dumped because: page_pool leak [ 106.258484][ T5929] page_owner tracks the page as allocated [ 106.264221][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98454979521, free_ts 98378919704 [ 106.281062][ T5929] post_alloc_hook+0x1f3/0x230 [ 106.285889][ T5929] get_page_from_freelist+0x3045/0x3190 [ 106.291458][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 106.296699][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 106.302158][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 106.308091][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 106.313395][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 106.318894][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 106.324276][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 106.329240][ T5929] __sys_bpf+0x48d/0x810 [ 106.333483][ T5929] __x64_sys_bpf+0x7c/0x90 [ 106.337967][ T5929] do_syscall_64+0xf3/0x230 [ 106.342488][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.348437][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 106.354781][ T5929] free_unref_folios+0xf12/0x18d0 [ 106.360025][ T5929] folios_put_refs+0x76c/0x860 [ 106.364987][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 106.370655][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 106.375267][ T5929] tlb_finish_mmu+0xd4/0x200 [ 106.379893][ T5929] exit_mmap+0x496/0xc40 [ 106.384237][ T5929] __mmput+0x115/0x390 [ 106.388346][ T5929] exit_mm+0x220/0x310 [ 106.392414][ T5929] do_exit+0x9b2/0x28e0 [ 106.396612][ T5929] do_group_exit+0x207/0x2c0 [ 106.401238][ T5929] get_signal+0x16a3/0x1740 [ 106.405744][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 106.411345][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 106.416957][ T5929] do_syscall_64+0x100/0x230 [ 106.421570][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.427539][ T5929] Modules linked in: [ 106.431479][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 106.443656][ T5929] Tainted: [B]=BAD_PAGE [ 106.447889][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.457949][ T5929] Call Trace: [ 106.461241][ T5929] [ 106.464187][ T5929] dump_stack_lvl+0x241/0x360 [ 106.468867][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.474088][ T5929] ? __pfx_print_modules+0x10/0x10 [ 106.479226][ T5929] bad_page+0x166/0x1b0 [ 106.483405][ T5929] free_unref_page+0xed0/0xf20 [ 106.488195][ T5929] skb_release_data+0x6dc/0x8a0 [ 106.493078][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 106.498117][ T5929] ? packet_rcv+0x159/0x14b0 [ 106.502754][ T5929] packet_rcv+0x16f/0x14b0 [ 106.507210][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 106.512200][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 106.518200][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 106.524821][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 106.531331][ T5929] ? read_tsc+0x9/0x20 [ 106.535496][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 106.540741][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 106.547081][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 106.553257][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 106.559619][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 106.566305][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 106.571506][ T5929] ? __phys_addr+0xba/0x170 [ 106.576013][ T5929] ? build_skb_around+0x111/0x260 [ 106.581400][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 106.587332][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 106.592652][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 106.598138][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 106.604046][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 106.609610][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 106.615509][ T5929] ? synchronize_rcu+0x11b/0x360 [ 106.620470][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 106.625767][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 106.632034][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 106.637964][ T5929] ? _copy_from_user+0xa6/0xe0 [ 106.642759][ T5929] ? bpf_test_init+0x15a/0x180 [ 106.647535][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 106.653004][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 106.658395][ T5929] ? __pfx_lock_release+0x10/0x10 [ 106.663437][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 106.669268][ T5929] ? __fget_files+0x29/0x470 [ 106.673881][ T5929] ? fput+0x1a8/0x230 [ 106.677898][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 106.683717][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 106.688695][ T5929] __sys_bpf+0x48d/0x810 [ 106.692972][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 106.697776][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.703767][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.710129][ T5929] ? do_syscall_64+0x100/0x230 [ 106.714893][ T5929] __x64_sys_bpf+0x7c/0x90 [ 106.719314][ T5929] do_syscall_64+0xf3/0x230 [ 106.723832][ T5929] ? clear_bhb_loop+0x35/0x90 [ 106.728507][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.734533][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 106.738963][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.758681][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.767102][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 106.775158][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 106.783217][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 106.791193][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.799164][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 106.807171][ T5929] [ 106.810253][ T5929] BUG: Bad page state in process syz.1.174 pfn:25aa7 [ 106.817060][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25aa7 [ 106.825886][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.833130][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 106.841740][ T5929] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 106.850435][ T5929] page dumped because: page_pool leak [ 106.855794][ T5929] page_owner tracks the page as allocated [ 106.861537][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98454966617, free_ts 98378929544 [ 106.878347][ T5929] post_alloc_hook+0x1f3/0x230 [ 106.883142][ T5929] get_page_from_freelist+0x3045/0x3190 [ 106.888723][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 106.893940][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 106.899441][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 106.905426][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 106.910718][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 106.916136][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 106.921517][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 106.926506][ T5929] __sys_bpf+0x48d/0x810 [ 106.930778][ T5929] __x64_sys_bpf+0x7c/0x90 [ 106.935306][ T5929] do_syscall_64+0xf3/0x230 [ 106.940022][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.945964][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 106.952284][ T5929] free_unref_folios+0xf12/0x18d0 [ 106.957355][ T5929] folios_put_refs+0x76c/0x860 [ 106.962178][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 106.967945][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 106.972565][ T5929] tlb_finish_mmu+0xd4/0x200 [ 106.977198][ T5929] exit_mmap+0x496/0xc40 [ 106.981458][ T5929] __mmput+0x115/0x390 [ 106.985533][ T5929] exit_mm+0x220/0x310 [ 106.989683][ T5929] do_exit+0x9b2/0x28e0 [ 106.993862][ T5929] do_group_exit+0x207/0x2c0 [ 106.998517][ T5929] get_signal+0x16a3/0x1740 [ 107.003028][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 107.008694][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 107.014421][ T5929] do_syscall_64+0x100/0x230 [ 107.019041][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.024946][ T5929] Modules linked in: [ 107.028867][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 107.041029][ T5929] Tainted: [B]=BAD_PAGE [ 107.045175][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.055228][ T5929] Call Trace: [ 107.058509][ T5929] [ 107.061440][ T5929] dump_stack_lvl+0x241/0x360 [ 107.066189][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.071405][ T5929] ? __pfx_print_modules+0x10/0x10 [ 107.076560][ T5929] bad_page+0x166/0x1b0 [ 107.080849][ T5929] free_unref_page+0xed0/0xf20 [ 107.085939][ T5929] skb_release_data+0x6dc/0x8a0 [ 107.090838][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 107.095888][ T5929] ? packet_rcv+0x159/0x14b0 [ 107.100516][ T5929] packet_rcv+0x16f/0x14b0 [ 107.104975][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 107.109832][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 107.115843][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 107.122519][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 107.129032][ T5929] ? read_tsc+0x9/0x20 [ 107.133106][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 107.138417][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 107.144764][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 107.150924][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 107.157257][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 107.163946][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 107.169325][ T5929] ? __phys_addr+0xba/0x170 [ 107.173840][ T5929] ? build_skb_around+0x111/0x260 [ 107.178875][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 107.184774][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 107.190084][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 107.195652][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 107.201600][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 107.207158][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 107.212986][ T5929] ? synchronize_rcu+0x11b/0x360 [ 107.217951][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 107.223339][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 107.229590][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 107.235511][ T5929] ? _copy_from_user+0xa6/0xe0 [ 107.241023][ T5929] ? bpf_test_init+0x15a/0x180 [ 107.245906][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 107.251418][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 107.256844][ T5929] ? __pfx_lock_release+0x10/0x10 [ 107.261886][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.267792][ T5929] ? __fget_files+0x29/0x470 [ 107.272488][ T5929] ? fput+0x1a8/0x230 [ 107.276513][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.282337][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 107.287300][ T5929] __sys_bpf+0x48d/0x810 [ 107.291585][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 107.296399][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.302515][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.308897][ T5929] ? do_syscall_64+0x100/0x230 [ 107.313662][ T5929] __x64_sys_bpf+0x7c/0x90 [ 107.318114][ T5929] do_syscall_64+0xf3/0x230 [ 107.322706][ T5929] ? clear_bhb_loop+0x35/0x90 [ 107.327399][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.333400][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 107.337838][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.357478][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.365935][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 107.373933][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 107.381922][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 107.390082][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.398070][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 107.406108][ T5929] [ 107.409215][ T5929] BUG: Bad page state in process syz.1.174 pfn:7b5d6 [ 107.416043][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801c2ac000 pfn:0x7b5d6 [ 107.426782][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 107.433927][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 107.442679][ T5929] raw: ffff88801c2ac000 0000000000000001 00000000ffffffff 0000000000000000 [ 107.451308][ T5929] page dumped because: page_pool leak [ 107.456901][ T5929] page_owner tracks the page as allocated [ 107.462626][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98454953692, free_ts 98378939287 [ 107.479705][ T5929] post_alloc_hook+0x1f3/0x230 [ 107.484493][ T5929] get_page_from_freelist+0x3045/0x3190 [ 107.490087][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 107.495404][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 107.501067][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 107.507105][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 107.512349][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 107.517801][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 107.523192][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 107.528174][ T5929] __sys_bpf+0x48d/0x810 [ 107.532420][ T5929] __x64_sys_bpf+0x7c/0x90 [ 107.536890][ T5929] do_syscall_64+0xf3/0x230 [ 107.541439][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.547379][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 107.553699][ T5929] free_unref_folios+0xf12/0x18d0 [ 107.558937][ T5929] folios_put_refs+0x76c/0x860 [ 107.563704][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 107.569390][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 107.574005][ T5929] tlb_finish_mmu+0xd4/0x200 [ 107.578645][ T5929] exit_mmap+0x496/0xc40 [ 107.582893][ T5929] __mmput+0x115/0x390 [ 107.587017][ T5929] exit_mm+0x220/0x310 [ 107.591384][ T5929] do_exit+0x9b2/0x28e0 [ 107.595539][ T5929] do_group_exit+0x207/0x2c0 [ 107.600193][ T5929] get_signal+0x16a3/0x1740 [ 107.604787][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 107.610370][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 107.615988][ T5929] do_syscall_64+0x100/0x230 [ 107.620634][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.626615][ T5929] Modules linked in: [ 107.630679][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 107.642927][ T5929] Tainted: [B]=BAD_PAGE [ 107.647184][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.657414][ T5929] Call Trace: [ 107.660693][ T5929] [ 107.663633][ T5929] dump_stack_lvl+0x241/0x360 [ 107.668321][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.673529][ T5929] ? __pfx_print_modules+0x10/0x10 [ 107.678679][ T5929] bad_page+0x166/0x1b0 [ 107.682878][ T5929] free_unref_page+0xed0/0xf20 [ 107.687669][ T5929] skb_release_data+0x6dc/0x8a0 [ 107.692567][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 107.697630][ T5929] ? packet_rcv+0x159/0x14b0 [ 107.702342][ T5929] packet_rcv+0x16f/0x14b0 [ 107.706809][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 107.711666][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 107.717767][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 107.724358][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 107.730862][ T5929] ? read_tsc+0x9/0x20 [ 107.734958][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 107.740262][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 107.746771][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 107.752939][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 107.759288][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 107.766252][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 107.771457][ T5929] ? __phys_addr+0xba/0x170 [ 107.776053][ T5929] ? build_skb_around+0x111/0x260 [ 107.781089][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 107.787022][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 107.792435][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 107.797926][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 107.803825][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 107.809376][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 107.815198][ T5929] ? synchronize_rcu+0x11b/0x360 [ 107.820135][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 107.825514][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 107.831780][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 107.837695][ T5929] ? _copy_from_user+0xa6/0xe0 [ 107.842497][ T5929] ? bpf_test_init+0x15a/0x180 [ 107.847267][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 107.852763][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 107.858166][ T5929] ? __pfx_lock_release+0x10/0x10 [ 107.863376][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.869274][ T5929] ? __fget_files+0x29/0x470 [ 107.873867][ T5929] ? fput+0x1a8/0x230 [ 107.877867][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.883685][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 107.888654][ T5929] __sys_bpf+0x48d/0x810 [ 107.892933][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 107.897732][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.903893][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.910315][ T5929] ? do_syscall_64+0x100/0x230 [ 107.915076][ T5929] __x64_sys_bpf+0x7c/0x90 [ 107.919594][ T5929] do_syscall_64+0xf3/0x230 [ 107.924268][ T5929] ? clear_bhb_loop+0x35/0x90 [ 107.928945][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.934843][ T5929] RIP: 0033:0x7f0c5f57dff9 [ 107.939351][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.958977][ T5929] RSP: 002b:00007f0c602ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.967863][ T5929] RAX: ffffffffffffffda RBX: 00007f0c5f736058 RCX: 00007f0c5f57dff9 [ 107.976383][ T5929] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 107.984470][ T5929] RBP: 00007f0c5f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 107.992471][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.000552][ T5929] R13: 0000000000000000 R14: 00007f0c5f736058 R15: 00007ffd522bd628 [ 108.008707][ T5929] [ 108.011823][ T5929] BUG: Bad page state in process syz.1.174 pfn:7930d [ 108.018735][ T5929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7930d [ 108.027667][ T5929] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 108.034803][ T5929] raw: 00fff00000000000 dead000000000040 ffff88805f0b7000 0000000000000000 [ 108.043749][ T5929] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 108.052422][ T5929] page dumped because: page_pool leak [ 108.057992][ T5929] page_owner tracks the page as allocated [ 108.063793][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5929, tgid 5926 (syz.1.174), ts 98454940957, free_ts 98378949435 [ 108.080696][ T5929] post_alloc_hook+0x1f3/0x230 [ 108.085569][ T5929] get_page_from_freelist+0x3045/0x3190 [ 108.091166][ T5929] __alloc_pages_noprof+0x256/0x6c0 [ 108.096414][ T5929] alloc_pages_bulk_noprof+0x729/0xd40 [ 108.101911][ T5929] __page_pool_alloc_pages_slow+0x122/0x690 [ 108.107889][ T5929] page_pool_alloc_pages+0xd0/0x1c0 [ 108.113404][ T5929] bpf_test_run_xdp_live+0x950/0x2160 [ 108.118918][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 108.124302][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 108.129297][ T5929] __sys_bpf+0x48d/0x810 [ 108.133550][ T5929] __x64_sys_bpf+0x7c/0x90 [ 108.138096][ T5929] do_syscall_64+0xf3/0x230 [ 108.142602][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.148614][ T5929] page last free pid 5920 tgid 5917 stack trace: [ 108.154940][ T5929] free_unref_folios+0xf12/0x18d0 [ 108.160107][ T5929] folios_put_refs+0x76c/0x860 [ 108.164911][ T5929] free_pages_and_swap_cache+0x2ea/0x690 [ 108.170688][ T5929] tlb_flush_mmu+0x3a3/0x680 [ 108.175317][ T5929] tlb_finish_mmu+0xd4/0x200 [ 108.180119][ T5929] exit_mmap+0x496/0xc40 [ 108.184448][ T5929] __mmput+0x115/0x390 [ 108.188603][ T5929] exit_mm+0x220/0x310 [ 108.192799][ T5929] do_exit+0x9b2/0x28e0 [ 108.196991][ T5929] do_group_exit+0x207/0x2c0 [ 108.201582][ T5929] get_signal+0x16a3/0x1740 [ 108.206135][ T5929] arch_do_signal_or_restart+0x96/0x860 [ 108.211721][ T5929] syscall_exit_to_user_mode+0xc9/0x370 [ 108.217308][ T5929] do_syscall_64+0x100/0x230 [ 108.221966][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.227898][ T5929] Modules linked in: [ 108.231795][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.174 Tainted: G B 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 [ 108.243955][ T5929] Tainted: [B]=BAD_PAGE [ 108.248116][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.258171][ T5929] Call Trace: [ 108.261537][ T5929] [ 108.264480][ T5929] dump_stack_lvl+0x241/0x360 [ 108.269208][ T5929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.274521][ T5929] ? __pfx_print_modules+0x10/0x10 [ 108.279757][ T5929] bad_page+0x166/0x1b0 [ 108.283922][ T5929] free_unref_page+0xed0/0xf20 [ 108.288711][ T5929] skb_release_data+0x6dc/0x8a0 [ 108.293606][ T5929] sk_skb_reason_drop+0x1c9/0x380 [ 108.298655][ T5929] ? packet_rcv+0x159/0x14b0 [ 108.303378][ T5929] packet_rcv+0x16f/0x14b0 [ 108.307859][ T5929] ? __pfx_packet_rcv+0x10/0x10 [ 108.312721][ T5929] __netif_receive_skb_list_core+0x8b7/0x980 [ 108.318719][ T5929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 108.325399][ T5929] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 108.332014][ T5929] ? read_tsc+0x9/0x20 [ 108.336101][ T5929] ? timekeeping_get_ns+0x2c0/0x420 [ 108.341335][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 108.347680][ T5929] netif_receive_skb_list_internal+0xa51/0xe30 [ 108.353956][ T5929] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 108.360313][ T5929] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 108.367010][ T5929] ? __pfx_eth_type_trans+0x10/0x10 [ 108.372216][ T5929] ? __phys_addr+0xba/0x170 [ 108.376747][ T5929] ? build_skb_around+0x111/0x260 [ 108.381808][ T5929] ? __xdp_build_skb_from_frame+0x338/0x650 [ 108.387754][ T5929] netif_receive_skb_list+0x55/0x4b0 [ 108.393082][ T5929] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 108.398744][ T5929] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 108.404680][ T5929] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 108.410373][ T5929] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 108.416763][ T5929] ? synchronize_rcu+0x11b/0x360 [ 108.421881][ T5929] ? __pfx_synchronize_rcu+0x10/0x10 [ 108.427178][ T5929] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 108.433424][ T5929] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 108.439520][ T5929] ? _copy_from_user+0xa6/0xe0 [ 108.444291][ T5929] ? bpf_test_init+0x15a/0x180 [ 108.449081][ T5929] ? xdp_convert_md_to_buff+0x5b/0x330 [ 108.454569][ T5929] bpf_prog_test_run_xdp+0x805/0x11e0 [ 108.459952][ T5929] ? __pfx_lock_release+0x10/0x10 [ 108.464988][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 108.470911][ T5929] ? __fget_files+0x29/0x470 [ 108.475526][ T5929] ? fput+0x1a8/0x230 [ 108.479523][ T5929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 108.485341][ T5929] bpf_prog_test_run+0x2e4/0x360 [ 108.490298][ T5929] __sys_bpf+0x48d/0x810 [ 108.494638][ T5929] ? __pfx___sys_bpf+0x10/0x10 [ 108.499455][ T5929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.505542][ T5929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.512000][ T5929] ? do_syscall_64+0x100/0x230 [ 108.516830][ T5929] __x64_sys_bpf+0x7c/0x90 [ 108.521278][ T5929] do_syscall_64+0xf3/0x230 [ 108.525915][ T5929] ? clear_bhb_loop+0x35/0x90