last executing test programs: 2.719241657s ago: executing program 4 (id=127): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf2, 0x2, 0x2, 0x1e, 0x1, 0x5, 0xfffffffa}}, {0x4}}]}]}, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x27, &(0x7f0000000240)=0xfffffffc, 0x4) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x4c, 0x1a, 0x0, 0x75, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 2.704136764s ago: executing program 3 (id=129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r6, 0x201, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4, 0xe}]]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000700000034000180060005004e240000060005004e22000008000700", @ANYRES32, @ANYBLOB="08000300e0000002060001000b0000000600010002"], 0x7c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@ipv6_newnexthop={0x88, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0xa}, @NHA_OIF={0x8, 0x5, r10}, @NHA_ENCAP={0x60, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x5c, 0x1, {0x6, 0x58, 0x1, 0xfc, 0x8, [@dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x14}, @local, @private0]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4840}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.439088392s ago: executing program 4 (id=131): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="9802000010001fff0300"/20, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x298}}, 0x4000) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x0, 0x0]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x7}}}}}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRESOCT=r2, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB="5ab1c543", @ANYRESOCT], 0xb4}}, 0x0) connect$packet(r0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @broadcast}, 0x14) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001439) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)=0x4) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r9}], 0x1, 0x0, 0x0, 0x0) close(r8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100270000003e0002802c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c00028005000100000000000800074000000000100005800a000100512e3933310000005cf4ab5aed48ec1e5ffea637a832"], 0xa4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r5], 0x48}}, 0x0) 2.228696431s ago: executing program 1 (id=134): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000071104e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.current\x00', 0x26e1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='spi_message_done\x00', r2, 0x0, 0x9}, 0x18) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.774182737s ago: executing program 3 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000ebe4b667bb8c527e21d92af92252abca473e02a3000000000000003c00eae8931a9dcfa72f20b0241177a0e3c0632e0ca6b8950b63a2858fc85776f89a7adc6a060d581d358b3067c004fb55e586ea5a812af7f21c2bf61d2909b5b9c0de9bf2974af2533ff55c8aa006b12137330fdfe0ee98852aab5788ed4e55cda1f4b3fe09b10ee084bd749eef"], &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.714746298s ago: executing program 0 (id=138): r0 = socket(0x2a, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0xf, 0xc}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x2c0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x290, 0x2, [@TCA_FLOW_EMATCHES={0x28c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x5}, "ed75e2fae0"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x7}, "0e887e3174c9ba846637edad004e88480ceb3ba83fe627ddec02d71469f46a71ed307ff97180b6cf452a2064eddf1f2c7503ff934449de192a8f10073e146122632b22676eef1f7b072dd70f5a19031ca016ff08f7f2513e0dc244f23de34c2d81781763637c08ae5356421782c3b49f35cbb8bc24aa1ccdd49950d898eece937fa2d8f1f12396735c82642886e28b7fae042f827fb1a2babfeed2af70911e0ca1650f5f01b58148781aaae9634b8a68f15194c8f9"}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x100}, {0xfb8}}}]}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x0, 0x0, 0x0, {{0x3}, [@TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="7b647f", @TCF_META_TYPE_VAR="b4c0"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPT={0x14c, 0x0, 0x0, 0x0, {{0x4, 0x9, 0x1586}, [@TCA_EM_IPT_MATCH_DATA={0x4e, 0x5, "fcfefec03c5dde4f276b782c9072b1183646de77684cad1bd33c3f453b1cc4f748e219c1dda66c0f711682af25f81fa98131cbd7a33eb2d4396d7ed584ebbba335bf55d0af9754cffda1"}, @TCA_EM_IPT_MATCH_DATA={0xb2, 0x5, "032b3848a9735cd2bec360448067edc46ab9354c15e7a57eb0c7492d66daf3246ec59c0082db554e60967abee2d5523a9381f55b1b13e59848d9a7db7d72d7e6f2860d8385b336b03e4b963205dc191f255632fb23f1cefc57dd0ac8b88d352b1954fbc0a5fd20a2f59e758232948d920ca127b50c100b94e66b50c55cf6d0f012b158c6acb376f62e38c08ab88e4c7ff08221e8673b3d4d63cac6e202076ad4893295a863d0ed93b0a39fca64e9"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4a}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x2c0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000380)=0x200200, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r0, 0xfffffffffffffffc) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000006c0)=0x100000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x8, r7}, 0x10) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x30) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000"], 0x10}}, 0x0) socket(0x11, 0x1, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="79408ec3004c410b", 0x8}], 0x1, 0x0, 0x590}}], 0x1, 0x8008801) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet_sctp(r3, &(0x7f0000002d80)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf685}, 0x1c, &(0x7f0000002bc0)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="200000000000000084000000020000000400080002000000faffffffff4daaf8cec475ce9c54bc159cc0a4d9ed8450b03b3d18885506", @ANYRES32=0x0], 0x20, 0x4}, 0x24040050) 1.542854875s ago: executing program 1 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x7, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x24) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb702000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r5 = socket$kcm(0x29, 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x7}]}]}, 0x34}}, 0xc000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "e1d0fc36e0260c81"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x72, 0x0, 0x0, "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", 0x0, "a1f0de968aed1ab3700bf22bd9990c5555cc398c"}}]}, 0x14c}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r2, r4}) (async) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)="9e84a9884a71bd46f30fe2a04514a8340c3d4401cb3c7cb8d10872a09f1281ee3157563f094c4f9e35f9d6ee59bdefa957b8edbaebb4ac2bee9f93374a201b7a94bfa1eb16bc56285a9347b209fe6dffb8cfe3755f3b34e65aeed99b275d09df367622fda0b4d66c948e00789f9718b02cad2144d15a3f39146356be8d73cc5bc4df7e58f68c59c193dfcd36747fa6ae1d", 0x91}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000005c0)="4494fb682074de7f4625f590a6ffe1e4dd5a3b937c303743855b01db60e9cf5b29f321a0e57ad28fc71564fa84ca4c126c8a713c1be80e02e94502b9bff0d580338852cc6a56f810bb3cd2435cb7ad3e16275cd0d5d02ef16408f529746440959301f7d4b2e58236407b6e8707a78b26b8805a35b96d83b9313e4ac17ad4978f9335728f4ed4b01f4a27e817a063883e1f70887ce4402be3c8d7aa5422f704b5a3169502892b2f53c1a4fd6b54e8b917786d12c47a382dfc2cb69fd0845c7b032e612b424703e14fcb513c711c0570ad7dd87ac33e528fecd2d289a9dfa568671162a273cf13a7", 0xe7}, {&(0x7f00000027c0)="3dfbe1f563aed7acaae47eca31a107c62a632caf2f3d9095876c99c27cf857ebd5b95e9a94fe01ea23c3b4bb91894492f44975e35743188f21ed6b0ad26ae265e012d70cccfcddca8e35747b4a2f5e2d152632ec90e3c6c9ab517f3fcc905d115e7e9f6f2d77c0e213604a242e843be38061c4faaa27b999202f9c4c1238b8973fc1ac0b5084f25296ef75810d12b1232768c8be7cae2f96f7ab1c03a43b9890e897f0090dfd739e9c3da2fd6e19a2c3aabe64546823d03de8277117427fc12d6f852e3a7d933dbda44a6afbc0ae65d355abbf3a5f138faa7bc36cedd75b3ba154186e2f0cee13bcaddd181a95e496587147edd4e0f3cf50c56bf411fc529395c24eaff697e2a85a337675a01d5954b4f63efb467cffca54510104062dd78813dd53ac5e124903d2753d3f3eebf2d8d56b9cdf9101517b4c2ed10f427a71fd17fb19afbb087dff169a56a731eeabbaacee7f377c9729088c4f8278bcc521af6aa2d79b83c8793f44c2d9962d769ceb82b0572787b4", 0x175}, {0x0}], 0x5, &(0x7f00000009c0)=[{0x40, 0x119, 0x6, "ca2c6b6a4a05322d28082e6b5cda4883657d570103a93eeb95d389f03548f6a11e7fc70bfdb7dd51ef88f917aea3"}, {0x20, 0x113, 0xbf, "33eb82ecf55f46b92f"}], 0x60}, 0x80) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r9, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x700, 0x8000, 0x98fc, 0x6, {{0x1a, 0x4, 0x3, 0x6, 0x68, 0x68, 0x0, 0x5, 0x2d, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x7, 0x1c, [@dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_prespec={0x44, 0x1c, 0xa1, 0x3, 0xd, [{@local, 0x7}, {@local, 0x81}, {@broadcast, 0x1000}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x11, "3690a8038e7ae8aa0568955d556776"}, {0x5, 0xd, "97e18031be869604297ca5"}]}, @generic={0x7, 0xa, "645ac3e442193147"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl1\x00', r10, 0x2f, 0x6, 0x1, 0x3c00, 0xb, @local, @remote, 0x20, 0x10, 0x6, 0xf23}}) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@delsa={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbff, {@in=@rand_addr=0x64010102, 0x4d3, 0x2, 0x32}, [@mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x34}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 1.491202368s ago: executing program 3 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0xc4}}, 0x4004051) accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000080)=0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000ff7b00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trrr'], 0xa) r6 = accept4(r0, &(0x7f0000000540)=@isdn, &(0x7f0000000640)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000680)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x1e, 0xf}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4) socket$netlink(0x10, 0x3, 0xa) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000010000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0x0) 1.246553811s ago: executing program 1 (id=141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x3, 0x3, 0x4}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000090000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x96, 0x0, 0x0, 0x41000, 0x4a, '\x00', r8, @sk_msg, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x1, 0x0, &(0x7f00000005c0)=[{0x0, 0x3, 0xa, 0x7}], 0x10, 0x10000, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)={0xcc, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:net,net\x00'}]}, 0xcc}}, 0x4021) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendfile(r9, r11, 0x0, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000ff0f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r3, @ANYBLOB="000009e5ffffffffb603000000000000850000000c000000b7000000000000001811000092a07534c9ab3ba852348d51029a17b58fb7c7e7b6a92402cbf58b86daa6286298902511cdceaca7ea396ee4ab9ed148ee7ef0cdb70ebad927aa7859c40537c00fa007099a9808ee83fc413c457db32b0fd83974e60002356a7219fd6826ac068f5f1df54bb0be004d6581fe65712b3d628e804237433c19b0034dd510ddccbbf43c2d7bef7031ed5001b11c3794865e47b4ba94e95a6d355422eb54590fb28e00986dcce5f3f2d13a2d2da2fe92afe3060e88c1fec1", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800002ecb45587b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008306e0fff0ffffff18000000050000000000000001000000850000005200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000240)=r11, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) (async) setsockopt$inet6_tcp_int(r14, 0x6, 0x1e, &(0x7f00000001c0)=0xfffff0fc, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r16 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r16, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15], 0x4c}}, 0x0) 1.150197236s ago: executing program 1 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xbb, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030001000000050003dedb1b3863c5da7c0005000000080002000100000004000880"], 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000006c0)=0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_remove_blocks\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in=@loopback}, {}, {0x0, 0x8}, 0x0, 0x1, 0x1}, {{@in6=@loopback}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.107802954s ago: executing program 0 (id=143): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000000000000900"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.063130083s ago: executing program 4 (id=144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500148900fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000094780000"], 0x0) socket(0x0, 0x0, 0x3a) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x90, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x18, 0x35, 0x24, 0x6c, 0x36, 0x18, 0x1, 0x48, 0x60, 0x24, 0x2, 0x1b, 0x3, 0x1, 0x24, 0x60, 0xb, 0x16, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0xfffb, 0x5, 0x3, 0x9, 0xfff, 0xd]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x4}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x4}, {0x2, 0xa}, {0x5, 0x1}, {0x4, 0x5}, {0x2}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x5, 0x3}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x4}, {}, {0x2}, {0x6, 0x9}, {0x7, 0x5}, {0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x90}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1, 0x0, 0x0, 0x60}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000190001112734d100000000008020000000110005007e000008000300", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) r9 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x0) bind$bt_hci(r9, &(0x7f0000000380)={0x1f, 0xffffffffffffffff}, 0x6) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x2000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@RTA_PRIORITY={0x8, 0x1e, 0x7}, @RTA_MULTIPATH={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in=@remote, 0x0, 0x32}, @in6=@empty, {}, {0x0, 0x0, 0x4}}, 0x0, 0xa0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1.009646309s ago: executing program 2 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000009000000300003800800"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) 997.474471ms ago: executing program 3 (id=146): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f07059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa01aa00000000000000080045000030000000000067907830010100ac1414bb21009078120002282500000000000000000000000000d7aea6d9a22a"], 0x0) r1 = socket(0x10, 0x3, 0x7fd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r2, @ANYBLOB="140006"], 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="840000002000010000000000000000000a80100000000001180001001400110076657468305f746f576873720000000014000100fc01000000000000000000000000000008000a000700000008000a000101000008000f00ffffffff140002"], 0x84}}, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000200)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xa, 0x0, 0x58, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x40, 0x1, 0x4, 0x80000000}}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e000000e90a00000800000001000015fd000000", @ANYRES32=0x1, @ANYBLOB='y\x00'/20, @ANYRES32=r7, @ANYRES8=r4, @ANYBLOB="0500000005000000010000000200"/28], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a698700000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c000180080001400000000005001400ff00000005000500020000000500010006000000"], 0x6c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000006c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='ext4_alloc_da_blocks\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000005140408000000000000000008000100000000000800030000000000"], 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) epoll_create(0x0) socket$rxrpc(0x21, 0x2, 0xb) 891.359813ms ago: executing program 0 (id=147): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6c00000010000304000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001f0000000600050088a80000060001000000000008000500", @ANYRES32=r4], 0x6c}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x80000001}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 802.970892ms ago: executing program 2 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000077cb0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = epoll_create1(0x80000) epoll_wait(r4, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x3) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000077cb0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async) epoll_create1(0x80000) (async) epoll_wait(r4, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x3) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) bind$tipc(r6, 0x0, 0x0) (async) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) 732.862004ms ago: executing program 4 (id=149): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x10, 0x20, 0x5d2, 0x8, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x68, 0x0, 0x38, 0x29, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xa1, [@loopback, @private=0xa010102]}, @noop, @timestamp={0x44, 0x10, 0xcf, 0x0, 0x1, [0x6, 0x101, 0xfffffff7]}, @timestamp_addr={0x44, 0x24, 0xab, 0x1, 0x5, [{@local, 0x2}, {@empty, 0x9}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x5}]}, @ssrr={0x89, 0x7, 0x72, [@rand_addr=0x64010101]}, @rr={0x7, 0x17, 0x3f, [@multicast2, @empty, @broadcast, @multicast2, @multicast2]}, @noop, @noop]}}}}}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffff, 0x6}, {0x3, 0x9}, {0x2, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x814) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc) (async) unshare(0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r4}, 0xc) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) 659.280313ms ago: executing program 3 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=@gettaction={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x801, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000240)={'veth1_to_bond\x00', 0x400}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r9, 0x5, 0x0, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000004000000000000000002000000240004801d0001801a000100630002400000000c08000140000000000900010073797a3000000000098a9a84cfec76bb087c6fcf00020073798a3200000000140000001100010000000000000000000000000a0000000000"], 0x78}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 657.930533ms ago: executing program 1 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000b000014000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090500000000019400000000070000b7020000000000006b9af0ff000000007609000000000000dbaaf0fff1000000bf86000000000000070800000d000000bfa400000000000007040000f0ffffff560000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee4300000000001000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) 597.210349ms ago: executing program 2 (id=152): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfee2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000580)) (async) sendmmsg$alg(r0, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="90d73f4ea88ec91036ab5d5129b7dad4fc46c0cf87a0f55489adc002f38794e79e53b67cc52f9ae81e07a6b22feb667c85cd8241fa1c5330981b444af3a1ee2e94de422b6c94b4126d7c9d0d8672a35f6673ff0b5103da38b7d9e5dce80db7cf4e2f5cc14a60683f2eefcc8277ae49fa800c95ccdb8d992815d894ea211aeb8eab655859d89859918f2e5365395619e5a313ba2f8e5b996bdf3ed704634dd46ed2825578e9d149ed4ade46373eac155c659859658d35be64de92ffd3beb01b87c566e7fef7"}, {&(0x7f0000000300)="b53a47bc98f7b880583506c5361c82eafd866f60f0ef3ce287cd8a06e2f541dc17b7f6862fc961ff757d4cd7b2a31c99af6a4516bd8afa7f6dd7f43fba3223ffdff717fbbecab01d3575c1e70f47d01aa6a5c99acbe27df9e302bf6e5a584e6cab2fdd5f7f"}, {&(0x7f0000000700)="b83e8951f4ecdc08131c2e47e6471e838148674d0f48fe94f93a9c9552d1787cd37cc5a630859809c7151728e768544fd42e9421bab54a392065f19604bbe853263c3492daa723455daf6d3a3e24f02a4c8767a0f0e2a1d10064dd2b17f6b004f865f22c617154d948e89b730866e8371265030d693212be831eba6f14eb0c84d32df642a837b5b18abb4ce1e6f78093e5b0cb09b873de9a2ab957a246997a301ac449237e217622e8700be3314f558700f5a74b961fbbeee1e064d220462208b345328d8cb6fcf8c31db651fc6f49d2d214061edc17a17a44f5baa879fae07d27e7d0b9a93d0c4eafa87e1f538e99df78f7bfb9dc4447a9bd"}, {&(0x7f0000000000)="f2761dea98a26b60591a39f292c67e65"}], 0x0, &(0x7f0000000840)=[@assoc={0x0, 0x117, 0x4, 0x2}], 0x0, 0x10}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001940)="8b3e0807291816409abe96095412cb6d35fa95ceb4246740dfc13d519695fe1bc2af0ad3e7e168e51d98a386a7ddb9f9c2748f414d04629c25a4a075f7cec962bc43123aec45afd1cd052445e23a915ec01684c156e5f621e6acc54eaa12705510436bca9768faa37cccba5bb330ee41a21177e4a0563ec48f30f101a07b7da696519cf372bfa478bc32282595721d22bbd7b205503bd544394b35f99abb2535a62f8a9b2db8e5c71ff4b5f58a09bd1b5ed6a347d60a55f4fd11ccae6a2c7994549b7c800c44c978589482a5e40ee5c84e04a3c289f66417170c0ef1157ebcf5d65f2e442f2d632d002e59a5b823a84d559af751a9894cae2f8c683d14159530011423ceb50f45859a31b0161816c9cf5cae3de7fe4113d50b4adbcc7e16fadab405143c747ebe32235cbb205456045974101bb603c440e773b3915bc5302eaee69e7da25e7b4c48e4442821be5f1cd8aabad80c7489da01a24582f7c2a7e1c1e4591f4bd76d0ede8a3afb9a7d3f342a0b5b7d8c2f89feff5e6520e197e8c3c9e9c657d5930d917ce9805b3d88071b6d8838239c584feabb6e6d36208b889f7f9410b1fbeeecafdeaa2283485e9ec88e68b9ee0eb9e728f9b22c798922814b665213872d0323eb3ceb7da5b25f363532073235a63963e60f12d2c59d692d3164eac5268b3394da96676d930ee7bcc95315914e0f2593ff837422370deaeab035035293ba6f5fda481e785f3a511b347248a28f67c46fb7bf807aafd7fde9d0730d69fdec8f7c616763a52a53c33dd0d61efcafd23fb18eb0a9404653c2bfb65d73ae03ae7c812a6c503b4a5b1a428e263805ea47d2268a83798d854aacd388a716b2c201248bc975c0394ed70a8d1517bc7a27d4703faeeda0c78b912f7b5bf6da152f646d976e1c9701ecc7be51e2853d7908a4d9f6aab62089f6520c5169d7b09b7210e20720b8c193b2195b1ce75f9518d207e1e50d958a70712d5acff3d9d2d3838676b48aa5c66d872db910c3ee77c9f7278442e87b6cdd7f462ddddccb83a325a865dedca3413af85b108650ed3b9dca77c609d913e29c662dc90cf27083a02d7bc80a5b1f782a18c216a8050e0ba79a69c5c454d85aeb27ca66cbaf880ec4229bac8de80f53031f93e6e3b21f77b02c86e3f4947973719740d28033a6364d41dfffa2df8edf03e5ff766b0c0cf86bffac37c83059f9b8785e70af738f3b5cd49f5617ac24b52aa49e6175a3e555549ac0433860d5bf9b05cded0467c91dd0b69c522f72d1495be7e0e734d4cf07f5cc3229ae7fe2cf295db1f7ecffc824bb1c661f253e8ffb49abb4b22829149288a7e799bc09c3fd438b74c13ddecbb9b564a975efc397d0850aee6c8efafe354f5fb20f75b3e90ae64e1e167cdaacb4ce9e8b3515bed1fbc71a074d484a6504a7407df750994a10785b83e3af05e4fded98b86476e7843665e4c5cb929b5a2971aee763f1040e4bf1b33a43620f582292d59e8db0014056009d87009cfdb6ba446b5cff929dfae218a088c018479ce49e3b5f1bbd8bfbe606807efd9cd44838845d6673fe2654b11710d0e926a0105e8b266e0b11114ed258f3ca79a522bb32cac3980f0ed62d9f6402a28831e8b14e52412a3da59fc37aeaefc80bbedb86c5cca3f64de1df1c1290aeaa9f9d92487e0aa349b4531acf1d1a8477f3861238ce0e02ee8daaa9b81d819357883bd040c6548acc726331c9fc4c1a9501d6549a45e189d4e923dc635f5b173a6ac785d41464b4cd4a7e924bebf6ad0c70f8011725bc737881e0ccdf5bf11a2759b720fb0077b7228518085bdec291b7a0ca0f9bfcd0f5799d720c71f4a7923f95be6c6d2eacf8259bee97cb7bd21f6c4b0650862219ba59e0752c6d1dd546ca64dd68815ae0ecd13bdb35df35da74b10f10068339ae160268f5d16e974d334a8bef0c57e865ff2671ce1e9f7ec9d92678ef35abb7f9f5eb3360e96c39fa225a95282d318055667025f71e2a30bef7e9863a5060617bd9241ed11e1235122bc2493e6412d306aba2992d70bf1ff78f2515aba98ab37eb6da12e4ad13889579f52767164e94a2ae59063acf5ee3c120f4cd2c2026946115ce04d339f1650119089a69a0726bfc7ddc035bf526be463bfe6f3e978ccae097dd7bc960617548a7a5f86fc125d34223939ec06fc82907a6cc5083cbb383a85e51df8fdb069e693652f47e96c850607a6a68610adcf7ff96ffcd8fbda1bd8d5f079a4fd7a1b1caf135e925b30455c0a5f06f9f47273537dc9413af426c299b5ee422d5264557915e576015f50471d2677a78507907d37c12ffdd264a35c9964d631776dc699132041c888847573e8c97829c34a03f6cd68123f693dfe875ebb26502c3f20043d147b801cdd735ff9ddaf5e2aacc0419b690285e1d869d96316d1fa1c08121d62fc8784cb5bc0816d9ecc2ec24327f6c7b5ff29b4a224818583abd68dd676ec3e564a826b6dd6f78d58b5373a496b4dc55ca24c675ef663e0ef2cbbee37807b66df1db9c018716966d294b3196997e7cfabf9b2b0ba79034d630b13e47798d49bc5f2e0820c392080e74d1b41159d852b9fe38294918dba9da35638e45c469380e3a00c75364d106725ba9862c9bc2985fd6612eea3dd9c1c93926d13c7fa219505e354b33aa42e3e1bee4fd2b300508e948fe2270b0f1d4664b05ed85c16eaf66bba7be4a9478e1c1bbe851ae41583bb09f4f23d90f6971f9e678f8c8a2bd14b3a1e6005e153ac962bded4137a228dbb78257c9075111e4169f43eab31864514d011b176a756e039657deedbf5f00ebb0564067826173020cc52022d5906c798fd6f51bc97ba29d7fc860b58607982dbaceeae377163fea52faaa2491b7ccc6071713622b87c36deab08cf82ea397ff46930687468c3b944d473c2fdeaa2114f5f0e702425a3b32e23036eb0da65c4f6ab12c5b284658f31ddd79a4ee03bed96cc198a2c9bb83d827b638bf846b82af740da93f5fdf2eb19d50d673e78e100b4005cfd0ef10101be45cd7e74105a8a9bf1daeb817e62eea41329d73d931ce6e3e3c3d7cb93801524ed1b466f761b86e456689377bec520540c956382850f3222ce58875d6de642a17e956173ff0d8f5f147b49542ca3ed52747e0c2687df9b9390fe36cbe0bc2e34b91189364baebe0644cde42619f3f0450f96f55ca28f032efccdfc8afd9a000998e6154c215fd43fbb2cc88fbb1f18e4fe5ca24a8874b697473d0b8baac16dcc547dc54f196d08356307531e8c81ef4da09524c7a5079c7c7bedfbc434ea21581103460625e179d73e88b31258a73946da09813537c6a42b312d7e23898bf2e7f70501d3ba2e013a391870e912ffa91cbf2751b378c22f0a04fa9abc775769cdbe9826d0c660a0acbdb31db788044e64b959a1f60ce4f6509ee25cf7caaef3c5f13e7afccb184876d7765869595e2db87b160fa2b609ac7a9462ddc9b4df2c560ea5082d3ebe952f98d1472b2af9f2e633dba9397e10928542793e83f85ae20930b440bf26d85e3013832531db0e0292e517e9d55d26a529b0b0b29d7d98101c0394a1e962364a0d13ff0b8d7184b99e7118629f6802ab1e4e1b32b9e357a544c3c2702c6d06202eccc3cd70acb902c7b09318f6c56e81d847247e0a657cbb44bb9f711ab7a3b2a1d0826611eb750aedaa13209f1cfd8a674690354acc828f25cce551f1beba925109ef64ff9778311282995e2d40868e72bb7f4b295559de54257eba3becf8b6883a7d6ef370209c4e4181961182e7afffab2de7335b4b226178281a8c6bd1db91635494e15d49e0c1ad8b7d5b38b8bf14806192f42186d0992c071e465ad100ed453868cbccafe9015375e3811e3f62958c95e0483c3cb848a3b25fb983f8bc84502e0abcf6e70f052317e1e3dc0dcc41f3fb4eb8b1e032efae3b875ff0d41afb82542871529dfc2ca1671736e8946918659b4c6963c4262823d29c61ace751bf99977f6f6dd0ba29b2cff8f80c0899c12cf39fbe3cdafdcbe949c964a58364c6963b5a97fe65c1caeba0ec23a9cac2bf6fdd1d63bbeb8ea3d3bf6f51fee12d35940f2ff069e5778d727f2fea666551e98e057b0fb10534958057d8778a48bbf17a0e9dd7bb44977ef95a365f33896532762631a3ed9188bd418787bbf2fcceee885e303fea84820c6af96d42430ffd0ccee1881e7d4021d7d6af5f278939f2f82d014ab5f3daa38fc07dca971889db05e7dfe4d013266da7997a56b9e1ceec20589a4d684c7aa171a255b86cae7a494b66bd25c55beabcf033ae14bd0c248493b85c649816efa8ae05bdde3d59ad4eaf5e501ded407ef40ad1b99455f57dc3f1f9acc6676366ba6a03dd1c0a723f7c9438d81b77ca4fd9eaee038f1fd05a38bd4452256abc4f6de2e3c31f169b5aad258758c8c8301e71c55f9d8a5e59f3c7e6ae6b5a9ee87579ffcc465ec7549a0f7b50d6c903481f2a3b5fe2ab8ce086942ead5b8617c8c3dcf528a95eadd61c110325f80903446699531e7a64fdf2f62b45c4ec481d18f88f22c0721694b97d54057ebda90cc269aa4ee1cceb2c0cd550f6fc23d12f96ae62b46134dc9fae07acae77683aa00fc22ed8fe7aa9b78fdf02058356d35500bf74af292f8bd9a181ce874e3fcd98b37eec1999bcd2143e7a1bacaffbae830f4cbc5a8ba1094d65bb3914f55b50862ee778c4b523f4391e5a9a83e7b72bea8d39804780b53aa28558034087d9f502a41baf6e1c539690033eb3dcc23385025ec9450d02dfe75b2dacac3cb8930ae75aef2f1c1e6b131ffaa6463f79afca2b663c4b232c76d472e2b30c3d71ead4ce631e9dadd268a80bbea6599902d03626d3f238dd0b48eaa7958a47c1123d09c2e2b69fb63ef20e04214ad2b74e70900769063175040a9e1eb8c5a59b12d2400408a79c62e22fd40585d6b2f8149ebe02e239e72cce11a751916eceef0c67239224cb33f30c39bc56e86a0926bd054fe5e4a741182334c9ed30f501883bc50ab0f6896cb626b0eb8ec6606046e58e7fa82d357b5703070f25242b86da9e381a1bd3311492f9dac8827758a3662640015450d27749427fbb0cc2e9607263cc973f10fad119c1d77f1c7161785bead542317d458d41b3c4c0451a4c8a2a89e7f8e0fd0bc978ab178ce38fa23064991d3b21d7039d34c9fca87cbd4955a48f979d0aaa6a471cdcc0ccc9f0b6b4f5ea485238251d78a18aee632a3b3b4a82612e47f066aded16d08a58cb01ce379c1347a7b602509983795e08a95ede605a101748d025dadb81129e58e81280ac44067d712879729768a940f728af854213cedd9206120c65371f69ae97d8258d7c3a928efc65f1c05cac6ad78263096d2f2eb608845c7dfa5f829822bcd36c3ac66473e223a985bc3d384d45950c2a75df048e8b3211c7846d23fe331c0a852272fe6f57a0ba35f575c7c67a768a23f71ade50e011168fbb75b3ec273adbd4fee3d9372197fe859a0a495db1109e3ff8c69ba86e05a0695f270e95e8febf25f93a26286b083da9565519a464f2aeb8b735bff9a35a095fd84258be35b6c757dd3d6bbb722a342ab1c7d20773422204073cdfdf4af653c48b9505217e7658ff080cb5f630a6c9abaafff6c7e57667ae0af02f2e3f02a5316cb7ee9c7e034f950dea09da32bf0c60fe07f7e7013bab2ebe2e3edb3be447072069c1514cb5def92e54e3f4f476085ae9708ffa0134122ff6afb9346571b305a7ff4eba6f08cd45b0bbafcecd619a8df30e5a10b6eb7279074da8a487eacb45e"}, {&(0x7f0000000880)="c52db6bbf128a6db2916d7bf8f4427ecb4fc47ac9643eea22017c7bfe3901bf742d62d0834aa4101e36c4b86797deaa7dd9683fed5d3ab8d3f828116b3bc0bb24ec7780fe76de451b508b3b2bc0623e1dbb1d1a45f0876230343e49423c502fe226dc4b422edd75c14e043c70991ab213caf8a037da3109f2ea8315154483af4123e4b39a6fe2022210c84bd1163f59c56688b2e32991e4bee72da29324560773bb6518a802a40d5a400606326626b497093b4ca5499d8196e4dd29438ddac8b4b0f1f250249866811360f1bfb8ab483"}, {&(0x7f0000000980)="1198b9f733bf56b23e571c9fad8c5030259bc09e750fa67c25c89215d5753bde73d9fc0c2f89ee34c661f159ca308c96c2ecd0dcb29dcf16d52ae91ef6434f260bdc2e1680fb8b379e13003ac1d5327fa0845aec1791e677e3c5ad56c8706906c4db2796a28a29342b2b72a76dd3aacc46ab3b1be9af791adcd98640e00c"}, {&(0x7f0000000a00)="6dd8b6cc05d6252cf88e4606129c5924cc8eef6b9d0fe743eb80426aa68b0f"}, {&(0x7f0000000a40)="d3e55e26483e7f64d06e95ea6cd9f2ba3783b9ae918bf2f8de15061b224ac60fb8a7027c1319b0824d542b425bebc1d4fca5fc714c708e84e0a7c665a2ddfddc29da0b44955ee84cee4ea4dc08319e2b54903c128f7db1b5fd23c06d305f99cf477b18767358d44bddcc6aad476f9264195b3d2bf06dee56881d05f3cb10d49db2816639fa92f0477bdcb6aa352e527a9ab05a79b544a6e06fcadeeb3e81a4cfbe8f70e14088dbc6fe32c1a03fb8f12b6e65c85b11e5351cffdbd417557e0a7fed336ead16d263ba98fcb9fd3d62d0"}, {&(0x7f0000000bc0)="79a3d1135c1114b2db8bd25cbb86c663675c2e7966c056050dc3597c4814b3dfe3dc96b470207afb025a49f067ba31108365cecad306788541d49444af68d1b752a9acc1bb690bad0418e941ad9d4876053bc44448feab2cdd7e2b0ab8aa616eb0b62ecf20d3632905fde6bbf437f7ffe8e0067036918203148b1ac4cbd5393eba4e0c"}, {&(0x7f0000000e00)="6d2afd2edf85d5afcb83396d64e4c5ebaa0f620ca7d65dbaf269889c3484bccae73335f5db7908b0af07cd175523b24ecec4d457fd4c3b14735681c79d21f45b90eb706a748ac82b9308fd2c0eed21536cbbdafd1041cb2b38cfc580fd3b13904a46ea40b2d772e95e2dbb7a9a6801d5c98c2c043cf13ea9f5fdd9ead2df64e1b7a0f49771175edcc4ac71ad693305b5dc453f72"}, {&(0x7f0000000ec0)="973863327d31596285b69a5534cf36aa5e95af6a1a7aaab4abe1502e81facd4a54d1c2f7fa4993772acfe9ee47"}, {&(0x7f0000000f00)="450a5be086d5d83463d7df57d05e947dc886f8f020189ecb88deb7ca689d99e26e776645d5e2275d66d975c55f22b249e3a3950fd024f2f078fb298e248f40949fba9764028d8b02bf0202156a08d2400c328431caf956dca301b02b84566de51662f4e59bb6e406091f13"}, {&(0x7f0000000f80)="9d4d0455ac791a88e3a793f6952976357b2965ef7e9b1625866de2aa34c8789c13b51dbccf1b8daabfa31f762d280a5daa1013a6504638d8d186f05cb4f332af443b8b449b59ace888bf89f3cf7ff715118ef02a5b37d47cc326df5646b86dc6c491f98d1f2627f210147480bb307ef4f18deb27a94572050d1f61b7783a94edc06219c45e0a7bffb0c6b486b66783ff044c388840700eccac4e102689e62ca969048fc883feb29a32e94815b26a292d191b432bed541e997f5e228eec7b24e4e6ad964e5a42db8a5347d861dbcf0e508a6d7af426fbde9af8f868fe3cfd23683f"}], 0x0, &(0x7f0000001140)=[@op={0x0, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0x3}, @iv={0x0, 0x117, 0x2, 0x0, "37c0f60f415488cfdf2f578e0e17478412aa136ad6b86a3325105b4bd5d445043e8c808abe742a960a20443a005062a3aacca8b5141adb0da863a8fd72c280a0f53d7f716fab4e2fd939cfe0ba64027c2fed7abd949c6e2391aacfabb7f5eb9311b3aecf9bd78d4ec726fc4350260147ac23d4f5711fb6cbc6b12df78eef25028a4c35"}, @assoc={0x0, 0x117, 0x4, 0x401}], 0x0, 0x4008000}], 0x4924924924925a7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x9, 0x16, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x14f, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, [@ringbuf_query, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0xff, 0x63, &(0x7f0000000500)=""/99, 0x41100, 0x4, '\x00', r2, @cgroup_sock=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000c80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x0, 0x4, 0x3}, {0x1, 0x4, 0xb, 0x1}, {0x1, 0x3, 0x8, 0x7}, {0x1, 0x3, 0x8, 0x4}, {0x0, 0x1, 0xa, 0x6}, {0x4, 0x5, 0xd, 0xb}, {0x1, 0x3, 0xa, 0x8}], 0x10, 0x80000000, @void, @value}, 0x94) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0xfffffffd, 0x7ffffffe}, 0xfffffffffffffd4f) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_IFINDEX={0x8}]}, 0x24}}, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) (async, rerun: 32) sendmmsg(r6, &(0x7f00000080c0), 0x0, 0x0) (async, rerun: 32) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r5) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) (async) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000010, @multicast2, 0xffff, 0x0, 'ovf\x00', 0x3f, 0x0, 0x7}, 0x2c) (async) socket$nl_generic(0x10, 0x3, 0x10) 578.25471ms ago: executing program 0 (id=153): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2804200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x3, 0x5d84eb56, 0x7, 0x1, 0x5, 0x31}, {0xe25c, 0x8, 0xfffffffffffffff8, 0x10000, 0x1, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000500)='ns/user\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x22008001}, 0x41) openat$ppp(0xffffff9c, &(0x7f0000000700), 0xd8002, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x88c5) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000008c0)={0x3, &(0x7f0000000880)=[{0x9, 0xef, 0x8, 0x9}, {0x892, 0x1, 0xbb}, {0xb, 0x40, 0x8, 0x8}]}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000900)=0x1, 0x4) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000009c0)={{}, 0x9, &(0x7f0000000940)=[0xfffffffffffffffa, 0x5, 0x6, 0xffffffffffff0000, 0x7, 0x6d, 0x1, 0x2, 0x6], 0x0, 0xd}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1e0111}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x42c, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfc, {0x3, 0x1, 0x3b, [0x8, 0x2, 0xfffffffe, 0x2, 0xff, 0x9, 0x7, 0x8, 0x6, 0x1, 0x7, 0x8, 0x9, 0x9, 0x3, 0x81, 0x2, 0xed, 0x6, 0x4, 0x1533ceac, 0x2, 0x1, 0x1, 0x6, 0x10001, 0x6, 0x6, 0x7, 0x5, 0x899d, 0x200000, 0x3, 0x7538, 0xb8, 0xbe5e, 0x1, 0x9, 0x8, 0x7, 0xc000, 0x5, 0xc78d, 0x4, 0x8aaf, 0xd2, 0x8b6d, 0x684, 0x3db, 0x101, 0x3, 0x5, 0xfd0, 0x5c, 0x8, 0x10, 0x101, 0x6, 0x2909, 0x9, 0x0, 0xb6fc, 0x94a4, 0xc70], [0x4, 0xbb5, 0x574424a2, 0x80000000, 0xfffffffe, 0x8, 0x5, 0x8, 0x10, 0x800, 0x8001, 0x7, 0xb, 0x7c, 0x0, 0xffff, 0x91, 0x6, 0xff, 0x7, 0x734b, 0xbac, 0x1, 0x1, 0xbc65, 0x5, 0x5, 0x4, 0x5, 0xa5d, 0x8001, 0xd, 0xe, 0xc89e, 0x9, 0xb7ac, 0x59, 0xa498, 0x0, 0x7, 0x4, 0x0, 0x1000, 0x9, 0x4, 0x800, 0x5, 0x2, 0x6, 0x6, 0x5, 0x5, 0x0, 0x1, 0x0, 0x4, 0x68d, 0x6, 0x0, 0x5, 0x6, 0x5, 0xfffff800, 0x7], [0x4, 0x75a3, 0x608, 0x6, 0x6, 0x7a6d, 0x9, 0x6, 0xff, 0x1, 0x94e5, 0x100, 0x800, 0x40000000, 0x2, 0xd, 0x2, 0x5a, 0xd, 0x3, 0x8, 0x7, 0x5, 0x7f7, 0xff, 0x0, 0x4, 0xf2, 0x8001, 0x55d, 0x1, 0x3, 0x1000, 0x2, 0x2c9ac3d4, 0xf35, 0x80000000, 0x9, 0x62, 0x4f3e, 0xe2, 0x8000, 0xc27, 0x9, 0x6, 0x0, 0x6, 0x5, 0xca9, 0x5, 0xf, 0xf9, 0x4, 0x2, 0x6, 0xffff, 0xff, 0x25143186, 0x401, 0x1, 0x8, 0x1, 0x6, 0x6], [0x9, 0x8, 0x400, 0x3, 0xfff, 0xffffffff, 0x5f976065, 0xa, 0x1, 0x5, 0x32, 0x9, 0x6, 0x0, 0x5, 0x8, 0x0, 0x1, 0xa57, 0x240, 0x9, 0xf0, 0xce9, 0x706, 0x113, 0xe, 0x3, 0x3, 0x800, 0x7, 0x6, 0x8, 0x40, 0x6, 0x1, 0x7, 0x2, 0xe, 0x1, 0x1, 0x7, 0xfffffffe, 0x7, 0x0, 0x3, 0x401, 0xa, 0x3, 0x5, 0xffff, 0xa, 0x3ff, 0x9, 0xa, 0x0, 0xa0, 0x4, 0x4, 0x5, 0x6, 0x0, 0x8060, 0x2b81, 0x200], 0xc, ['nl80211\x00', '\x00', '{@\x00']}, ["", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40044) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000f40), r7) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000010c0)={0x0, 0xeb42, 0xffff, 0x5}, &(0x7f0000001100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001140)={0xff, 0x42a6, 0x200, 0xf, 0x7, 0x2, 0x10000, 0x7f, r9}, &(0x7f0000001180)=0x20) ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f00000011c0)) r10 = epoll_create1(0x80000) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r11) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001240)='veth0_macvtap\x00', 0x10) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000001280), &(0x7f00000012c0)=0x4) 438.00254ms ago: executing program 3 (id=154): r0 = socket(0x2a, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0xf, 0xc}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x2b8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x288, 0x2, [@TCA_FLOW_EMATCHES={0x284, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x5}, "ed75e2fae0"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x7}, "0e887e3174c9ba846637edad004e88480ceb3ba83fe627ddec02d71469f46a71ed307ff97180b6cf452a2064eddf1f2c7503ff934449de192a8f10073e146122632b22676eef1f7b072dd70f5a19031ca016ff08f7f2513e0dc244f23de34c2d81781763637c08ae5356421782c3b49f35cbb8bc24aa1ccdd49950d898eece937fa2d8f1f12396735c82642886e28b7fae042f827fb1a2babfeed2af70911e0ca1650f5f01b58148781aaae9634b8a68f15194c8f9"}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x100}, {0xfb8}}}]}, @TCA_EMATCH_TREE_LIST={0x170, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x0, 0x0, 0x0, {{0x3}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPT={0x14c, 0x0, 0x0, 0x0, {{0x4, 0x9, 0x1586}, [@TCA_EM_IPT_MATCH_DATA={0x4e, 0x5, "fcfefec03c5dde4f276b782c9072b1183646de77684cad1bd33c3f453b1cc4f748e219c1dda66c0f711682af25f81fa98131cbd7a33eb2d4396d7ed584ebbba335bf55d0af9754cffda1"}, @TCA_EM_IPT_MATCH_DATA={0xb2, 0x5, "032b3848a9735cd2bec360448067edc46ab9354c15e7a57eb0c7492d66daf3246ec59c0082db554e60967abee2d5523a9381f55b1b13e59848d9a7db7d72d7e6f2860d8385b336b03e4b963205dc191f255632fb23f1cefc57dd0ac8b88d352b1954fbc0a5fd20a2f59e758232948d920ca127b50c100b94e66b50c55cf6d0f012b158c6acb376f62e38c08ab88e4c7ff08221e8673b3d4d63cac6e202076ad4893295a863d0ed93b0a39fca64e9"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4a}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x2b8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000380)=0x200200, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r0, 0xfffffffffffffffc) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000006c0)=0x100000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x8, r7}, 0x10) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x30) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000"], 0x10}}, 0x0) socket(0x11, 0x1, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="79408ec3004c410b", 0x8}], 0x1, 0x0, 0x590}}], 0x1, 0x8008801) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet_sctp(r3, &(0x7f0000002d80)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf685}, 0x1c, &(0x7f0000002bc0)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="200000000000000084000000020000000400080002000000faffffffff4daaf8cec475ce9c54bc159cc0a4d9ed8450b03b3d18885506", @ANYRES32=0x0], 0x20, 0x4}, 0x24040050) 417.983389ms ago: executing program 4 (id=155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002180)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xd8}}, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}]}, 0x2c}}, 0x802) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61152000000000006113500000000000bf5000000000000004000000080000003d03feff00000000250500000000000069163e0000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 395.819304ms ago: executing program 2 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0xc4}}, 0x4004051) accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000080)=0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000ff7b00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trrr'], 0xa) r6 = accept4(r0, &(0x7f0000000540)=@isdn, &(0x7f0000000640)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000680)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x1e, 0xf}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4) socket$netlink(0x10, 0x3, 0xa) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000010000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0x0) 346.121828ms ago: executing program 0 (id=157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="5952d4bd4d9d5b5666ba7a844cd292c9845ca99020e22a25b08b893fc1cf14876bea655ee8cd68d0f975ee4582521f48584755eade596a38fa2ee21dd46c2663df8ee595d5e28ffb3fc471df74c7511cd6d9b893fee829e670dc53f622190587af2e7327c1960a588a1f82f8ac39dce3562f8e324e6844a50c1901a74755126b71e8565b9e3ef93c32dbc227d405505d6daadca7cf8667f7a2bd4c7dadb0f47dea9d9b7f664e9138004ef770485ff19de418a8701e50cadf0db6cb2e2f2ce7769660451308df001e4e0f17228807b5a240cf07cab9b663f75b34e739045f8068038165fca622b95731565e64525b107849f80aeb8edff2", 0xf7}, {&(0x7f0000000100)="d599a5", 0x3}, {&(0x7f0000000fc0)="8e02ce374a95c3f22fb4328f2cb9d29b687f81454c18", 0x16}], 0x3}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) listen(r0, 0x2) (async) listen(r0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 345.703166ms ago: executing program 2 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000000009000000300003800800"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) 290.291963ms ago: executing program 2 (id=159): syz_emit_ethernet(0xaa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) unshare(0x42000000) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0xfffffffffffffdc4) recvmsg(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000700)=""/197, 0xc5}, {&(0x7f0000000800)=""/18, 0x12}, {&(0x7f0000000880)=""/8, 0x8}, {&(0x7f00000008c0)=""/119, 0x77}], 0x6}, 0x400120c3) bind$can_raw(r1, &(0x7f00000005c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f00000002c0)=@can={{0x0, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "80ce7d5da971a005"}, 0x10}, 0x1, 0x0, 0x0, 0x14015}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000e40300f8a2241a138129ab00000000000018339eb3c5b8aa5937bfadef236323be2262813bbd1582476747692db8280e1dd8bdfa037e595b93d1fcb1a4dbd2c7018d7c48d03d7d84a5b8de7680e635c0ede0277908d2e2da701371f8743a7155d45da5351d50497567bc29acba", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/92}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 194.9449ms ago: executing program 1 (id=160): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x7ff, 0x3, 0x1, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 47.991324ms ago: executing program 4 (id=161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x3, 0x1, 0x1}}, 0x2e) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) (async, rerun: 32) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_bridge\x00'}}, 0x1e) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYBLOB="b6f589bb", @ANYRESDEC=r0], &(0x7f0000000180)='syzkaller\x00', 0x1, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=162): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8080) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r6}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000380)={0xd6, 0x4, 0x2, 0x4, 0xffffff72}, 0x14) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x4}]}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0xc) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000480)=0x1, 0x4) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="270e0000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 50.996897][ T5217] cgroup: Unknown subsys name 'net' [ 51.126577][ T5217] cgroup: Unknown subsys name 'cpuset' [ 51.134983][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.372292][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.466502][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.474240][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.481845][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.491296][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.499291][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.501613][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.507307][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.521282][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.528270][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.532122][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.535488][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.543578][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.551537][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.557618][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.564135][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.571246][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.577557][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.584909][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.599985][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.600083][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.615276][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.616492][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.630390][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.631042][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.638246][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.652370][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.661225][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.664295][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.675854][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.676192][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.025178][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 55.105714][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 55.116863][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 55.202987][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 55.272463][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.280758][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.288327][ T5231] bridge_slave_0: entered allmulticast mode [ 55.295447][ T5231] bridge_slave_0: entered promiscuous mode [ 55.330820][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 55.345080][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.352197][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.359525][ T5231] bridge_slave_1: entered allmulticast mode [ 55.366112][ T5231] bridge_slave_1: entered promiscuous mode [ 55.426600][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.436811][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.444345][ T5228] bridge_slave_0: entered allmulticast mode [ 55.450844][ T5228] bridge_slave_0: entered promiscuous mode [ 55.459094][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.466305][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.473548][ T5228] bridge_slave_1: entered allmulticast mode [ 55.480385][ T5228] bridge_slave_1: entered promiscuous mode [ 55.487372][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.494549][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.501832][ T5232] bridge_slave_0: entered allmulticast mode [ 55.510031][ T5232] bridge_slave_0: entered promiscuous mode [ 55.540526][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.570768][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.577976][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.585528][ T5232] bridge_slave_1: entered allmulticast mode [ 55.592086][ T5232] bridge_slave_1: entered promiscuous mode [ 55.603654][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.660816][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.691804][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.700213][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.707927][ T5227] bridge_slave_0: entered allmulticast mode [ 55.715960][ T5227] bridge_slave_0: entered promiscuous mode [ 55.725018][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.744574][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.767744][ T5231] team0: Port device team_slave_0 added [ 55.776107][ T5231] team0: Port device team_slave_1 added [ 55.782076][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.789331][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.796861][ T5227] bridge_slave_1: entered allmulticast mode [ 55.803778][ T5227] bridge_slave_1: entered promiscuous mode [ 55.820292][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.837549][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.845297][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.852429][ T5229] bridge_slave_0: entered allmulticast mode [ 55.859600][ T5229] bridge_slave_0: entered promiscuous mode [ 55.874570][ T5228] team0: Port device team_slave_0 added [ 55.893843][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.900932][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.908272][ T5229] bridge_slave_1: entered allmulticast mode [ 55.915062][ T5229] bridge_slave_1: entered promiscuous mode [ 55.938675][ T5228] team0: Port device team_slave_1 added [ 55.959205][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.968713][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.995101][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.015319][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.029337][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.055896][ T5232] team0: Port device team_slave_0 added [ 56.062208][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.069586][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.095754][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.107734][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.115385][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.141547][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.154903][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.171614][ T5232] team0: Port device team_slave_1 added [ 56.178018][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.185531][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.212683][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.243138][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.287208][ T5227] team0: Port device team_slave_0 added [ 56.304538][ T5228] hsr_slave_0: entered promiscuous mode [ 56.310738][ T5228] hsr_slave_1: entered promiscuous mode [ 56.332778][ T5227] team0: Port device team_slave_1 added [ 56.346515][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.356019][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.382554][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.395990][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.402946][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.428979][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.451605][ T5229] team0: Port device team_slave_0 added [ 56.482300][ T5231] hsr_slave_0: entered promiscuous mode [ 56.488925][ T5231] hsr_slave_1: entered promiscuous mode [ 56.495666][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.503902][ T5231] Cannot create hsr debugfs directory [ 56.510548][ T5229] team0: Port device team_slave_1 added [ 56.517287][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.524296][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.550263][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.562328][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.569349][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.595660][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.657128][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.664176][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.674523][ T5242] Bluetooth: hci3: command tx timeout [ 56.690386][ T54] Bluetooth: hci4: command tx timeout [ 56.701681][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.715140][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.722099][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.748111][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.763619][ T54] Bluetooth: hci0: command tx timeout [ 56.763655][ T5242] Bluetooth: hci2: command tx timeout [ 56.769273][ T54] Bluetooth: hci1: command tx timeout [ 56.812469][ T5232] hsr_slave_0: entered promiscuous mode [ 56.819545][ T5232] hsr_slave_1: entered promiscuous mode [ 56.829395][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.837289][ T5232] Cannot create hsr debugfs directory [ 56.888940][ T5227] hsr_slave_0: entered promiscuous mode [ 56.895630][ T5227] hsr_slave_1: entered promiscuous mode [ 56.901630][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.909329][ T5227] Cannot create hsr debugfs directory [ 56.943144][ T5229] hsr_slave_0: entered promiscuous mode [ 56.949383][ T5229] hsr_slave_1: entered promiscuous mode [ 56.955767][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.963403][ T5229] Cannot create hsr debugfs directory [ 57.194808][ T5231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.211572][ T5231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.237050][ T5231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.267241][ T5231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.302210][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.316553][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.342322][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.369257][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.384717][ T5232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.405279][ T5232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.431546][ T5232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.448724][ T5232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.488453][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.498919][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.527782][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.537238][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.610031][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.618919][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.645650][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.652836][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.677473][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.729464][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.768327][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.775596][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.807735][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.829559][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.837211][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.849713][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.912000][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.921813][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.932857][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.939974][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.974582][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.989855][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.996976][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.009888][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.016989][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.042681][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.049792][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.099687][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.122847][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.145541][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.152666][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.187320][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.194484][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.261544][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.301893][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.337327][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.344499][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.355451][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.362949][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.440184][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.490273][ T5229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.509885][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.616086][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.638401][ T5231] veth0_vlan: entered promiscuous mode [ 58.690359][ T5231] veth1_vlan: entered promiscuous mode [ 58.762630][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.769696][ T54] Bluetooth: hci4: command tx timeout [ 58.775476][ T4623] Bluetooth: hci3: command tx timeout [ 58.790711][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.815910][ T5232] veth0_vlan: entered promiscuous mode [ 58.829487][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.835166][ T4623] Bluetooth: hci2: command tx timeout [ 58.836947][ T54] Bluetooth: hci0: command tx timeout [ 58.841738][ T4623] Bluetooth: hci1: command tx timeout [ 58.876723][ T5232] veth1_vlan: entered promiscuous mode [ 58.924384][ T5231] veth0_macvtap: entered promiscuous mode [ 58.948883][ T5228] veth0_vlan: entered promiscuous mode [ 58.972406][ T5231] veth1_macvtap: entered promiscuous mode [ 58.996760][ T5228] veth1_vlan: entered promiscuous mode [ 59.049176][ T5227] veth0_vlan: entered promiscuous mode [ 59.070631][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.098518][ T5228] veth0_macvtap: entered promiscuous mode [ 59.111718][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.120581][ T5232] veth0_macvtap: entered promiscuous mode [ 59.131621][ T5232] veth1_macvtap: entered promiscuous mode [ 59.139697][ T5228] veth1_macvtap: entered promiscuous mode [ 59.156859][ T5227] veth1_vlan: entered promiscuous mode [ 59.174235][ T5231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.184524][ T5231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.194951][ T5231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.204203][ T5231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.218961][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.230692][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.242233][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.272257][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.285255][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.296708][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.328776][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.339368][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.349597][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.360389][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.372091][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.401323][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.420042][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.429272][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.438913][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.451520][ T5229] veth0_vlan: entered promiscuous mode [ 59.481195][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.492228][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.504691][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.515706][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.526824][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.561483][ T5232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.572383][ T5232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.581446][ T5232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.590258][ T5232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.610505][ T5229] veth1_vlan: entered promiscuous mode [ 59.627994][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.629462][ T5227] veth0_macvtap: entered promiscuous mode [ 59.655216][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.672402][ T5229] veth0_macvtap: entered promiscuous mode [ 59.703158][ T5229] veth1_macvtap: entered promiscuous mode [ 59.720276][ T5227] veth1_macvtap: entered promiscuous mode [ 59.756115][ T2520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.788012][ T2520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.797880][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.814749][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.824824][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.835812][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.845752][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.856220][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.867176][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.877604][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.888311][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.898308][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.909623][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.919526][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.930120][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.940963][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.952258][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.965377][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.974376][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.983068][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.020718][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.021200][ T5231] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.040311][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.051595][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.061154][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.069855][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.081182][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.092050][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.102639][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.114250][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.125983][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.135835][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.146387][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.157781][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.169797][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.180495][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.190496][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.201333][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.211298][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.222241][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.232582][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.244267][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.256083][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.280639][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.301850][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.310668][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.326022][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.371896][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.382457][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.430337][ T2520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.440747][ T2520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.656272][ T2520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.684120][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.691983][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.712773][ T2520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.799603][ T2520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.809689][ T2520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.840031][ T5242] Bluetooth: hci3: command tx timeout [ 60.846179][ T4623] Bluetooth: hci4: command tx timeout [ 60.856363][ T5324] netlink: 'syz.3.6': attribute type 11 has an invalid length. [ 60.867831][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.890465][ T5322] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 60.912290][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.914477][ T4623] Bluetooth: hci1: command tx timeout [ 60.924468][ T5242] Bluetooth: hci0: command tx timeout [ 60.925080][ T4623] Bluetooth: hci2: command tx timeout [ 60.937012][ T5322] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1'. [ 61.068450][ T5325] netlink: 'syz.0.1': attribute type 9 has an invalid length. [ 61.113430][ T5325] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1'. [ 61.190424][ T5331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7'. [ 61.300699][ T5336] vlan2: entered promiscuous mode [ 61.321641][ T5336] team0: entered promiscuous mode [ 61.337452][ T5336] team_slave_0: entered promiscuous mode [ 61.362714][ T5336] team_slave_1: entered promiscuous mode [ 61.383660][ T5336] vlan2: entered allmulticast mode [ 61.389653][ T5336] team0: entered allmulticast mode [ 61.399806][ T5336] team_slave_0: entered allmulticast mode [ 61.434458][ T5336] team_slave_1: entered allmulticast mode [ 61.457176][ T5336] team0: left allmulticast mode [ 61.466505][ T5336] team_slave_0: left allmulticast mode [ 61.477549][ T5336] team_slave_1: left allmulticast mode [ 61.486079][ T5336] team0: left promiscuous mode [ 61.491130][ T5336] team_slave_0: left promiscuous mode [ 61.499880][ T5336] team_slave_1: left promiscuous mode [ 61.617635][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 61.708886][ T5343] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 61.962676][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 61.997217][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.084015][ T5355] bridge_slave_0 (unregistering): left allmulticast mode [ 62.123331][ T5355] bridge_slave_0 (unregistering): left promiscuous mode [ 62.135055][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.281083][ T5368] netlink: 180 bytes leftover after parsing attributes in process `syz.2.18'. [ 62.291797][ T5368] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 62.308197][ T5368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 62.382205][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 62.405717][ T5365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17'. [ 62.489291][ T5376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 62.525630][ T5376] vlan2: entered promiscuous mode [ 62.530750][ T5376] team_slave_0: entered promiscuous mode [ 62.642489][ T5382] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.724710][ T5388] FAULT_INJECTION: forcing a failure. [ 62.724710][ T5388] name failslab, interval 1, probability 0, space 0, times 1 [ 62.746228][ T5388] CPU: 0 UID: 0 PID: 5388 Comm: syz.4.25 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 62.756790][ T5388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.766890][ T5388] Call Trace: [ 62.770185][ T5388] [ 62.773132][ T5388] dump_stack_lvl+0x241/0x360 [ 62.777855][ T5388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.783086][ T5388] ? __pfx__printk+0x10/0x10 [ 62.787704][ T5388] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 62.793191][ T5388] ? __pfx___might_resched+0x10/0x10 [ 62.798509][ T5388] should_fail_ex+0x3b0/0x4e0 [ 62.803221][ T5388] should_failslab+0xac/0x100 [ 62.807922][ T5388] ? vlan_vid_add+0x31c/0x760 [ 62.812620][ T5388] __kmalloc_cache_noprof+0x6c/0x2c0 [ 62.817933][ T5388] vlan_vid_add+0x31c/0x760 [ 62.822471][ T5388] register_vlan_dev+0x9f/0x810 [ 62.827343][ T5388] ? vlan_changelink+0x4c8/0x570 [ 62.832270][ T5388] ? vlan_check_real_dev+0x20b/0x320 [ 62.837563][ T5388] vlan_newlink+0x476/0x5c0 [ 62.842072][ T5388] ? __pfx_vlan_newlink+0x10/0x10 [ 62.847114][ T5388] rtnl_newlink+0x1591/0x20a0 [ 62.851819][ T5388] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.856851][ T5388] ? __pfx___mutex_trylock_common+0x10/0x10 [ 62.862751][ T5388] ? rcu_is_watching+0x15/0xb0 [ 62.867509][ T5388] ? trace_contention_end+0x3c/0x120 [ 62.872787][ T5388] ? __mutex_lock+0x2ef/0xd70 [ 62.877460][ T5388] ? __pfx_lock_release+0x10/0x10 [ 62.882493][ T5388] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.887514][ T5388] rtnetlink_rcv_msg+0x73f/0xcf0 [ 62.892446][ T5388] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 62.897559][ T5388] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.903018][ T5388] ? ref_tracker_free+0x643/0x7e0 [ 62.908041][ T5388] netlink_rcv_skb+0x1e3/0x430 [ 62.912803][ T5388] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.918256][ T5388] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.923545][ T5388] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.928740][ T5388] netlink_unicast+0x7f6/0x990 [ 62.933589][ T5388] ? __pfx_netlink_unicast+0x10/0x10 [ 62.938872][ T5388] ? __virt_addr_valid+0x183/0x530 [ 62.943998][ T5388] ? __check_object_size+0x48e/0x900 [ 62.949295][ T5388] netlink_sendmsg+0x8e4/0xcb0 [ 62.954100][ T5388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.959415][ T5388] ? aa_sock_msg_perm+0x91/0x160 [ 62.964370][ T5388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.969646][ T5388] __sock_sendmsg+0x221/0x270 [ 62.974322][ T5388] ____sys_sendmsg+0x52a/0x7e0 [ 62.979081][ T5388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.984385][ T5388] __sys_sendmsg+0x292/0x380 [ 62.988982][ T5388] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.994089][ T5388] ? __pfx_vfs_write+0x10/0x10 [ 62.998872][ T5388] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.005209][ T5388] ? do_syscall_64+0x100/0x230 [ 63.005805][ T4623] Bluetooth: hci0: command tx timeout [ 63.009973][ T5388] ? do_syscall_64+0xb6/0x230 [ 63.015384][ T54] Bluetooth: hci1: command tx timeout [ 63.019977][ T5388] do_syscall_64+0xf3/0x230 [ 63.029839][ T5388] ? clear_bhb_loop+0x35/0x90 [ 63.034529][ T5388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.040458][ T5388] RIP: 0033:0x7f531517dff9 [ 63.044896][ T5388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.064508][ T5388] RSP: 002b:00007f531603c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.072916][ T5388] RAX: ffffffffffffffda RBX: 00007f5315335f80 RCX: 00007f531517dff9 [ 63.080890][ T5388] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 63.088863][ T5388] RBP: 00007f531603c090 R08: 0000000000000000 R09: 0000000000000000 [ 63.096915][ T5388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.104893][ T5388] R13: 0000000000000000 R14: 00007f5315335f80 R15: 00007ffccbbc8968 [ 63.112908][ T5388] [ 63.117487][ T54] Bluetooth: hci4: command tx timeout [ 63.123341][ T4623] Bluetooth: hci3: command tx timeout [ 63.124765][ T5242] Bluetooth: hci2: command tx timeout [ 63.231044][ T5401] FAULT_INJECTION: forcing a failure. [ 63.231044][ T5401] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.291262][ T5401] CPU: 0 UID: 0 PID: 5401 Comm: syz.0.28 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 63.301824][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.311889][ T5401] Call Trace: [ 63.315172][ T5401] [ 63.318102][ T5401] dump_stack_lvl+0x241/0x360 [ 63.322780][ T5401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.327974][ T5401] ? __pfx__printk+0x10/0x10 [ 63.332567][ T5401] ? snprintf+0xda/0x120 [ 63.336811][ T5401] should_fail_ex+0x3b0/0x4e0 [ 63.341493][ T5401] _copy_to_user+0x2f/0xb0 [ 63.345914][ T5401] simple_read_from_buffer+0xca/0x150 [ 63.351292][ T5401] proc_fail_nth_read+0x1e9/0x250 [ 63.356317][ T5401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.361864][ T5401] ? rw_verify_area+0x55e/0x6f0 [ 63.366719][ T5401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.372268][ T5401] vfs_read+0x201/0xbc0 [ 63.376423][ T5401] ? __pfx_lock_release+0x10/0x10 [ 63.381454][ T5401] ? __pfx_vfs_read+0x10/0x10 [ 63.386133][ T5401] ? __fget_files+0x3f3/0x470 [ 63.390828][ T5401] ? fdget_pos+0x24e/0x320 [ 63.395259][ T5401] ksys_read+0x183/0x2b0 [ 63.399503][ T5401] ? __pfx_ksys_read+0x10/0x10 [ 63.404262][ T5401] ? do_syscall_64+0x100/0x230 [ 63.409044][ T5401] ? do_syscall_64+0xb6/0x230 [ 63.413752][ T5401] do_syscall_64+0xf3/0x230 [ 63.418255][ T5401] ? clear_bhb_loop+0x35/0x90 [ 63.422936][ T5401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.428837][ T5401] RIP: 0033:0x7fb8ca57ca3c [ 63.433252][ T5401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 63.452857][ T5401] RSP: 002b:00007fb8cb425030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.461270][ T5401] RAX: ffffffffffffffda RBX: 00007fb8ca735f80 RCX: 00007fb8ca57ca3c [ 63.469235][ T5401] RDX: 000000000000000f RSI: 00007fb8cb4250a0 RDI: 0000000000000003 [ 63.477199][ T5401] RBP: 00007fb8cb425090 R08: 0000000000000000 R09: 0000000000000000 [ 63.485167][ T5401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.493136][ T5401] R13: 0000000000000000 R14: 00007fb8ca735f80 R15: 00007ffc2d992248 [ 63.501211][ T5401] [ 63.840867][ T5426] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 63.863672][ T5426] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 63.872757][ T5426] gretap1: entered promiscuous mode [ 63.880072][ T5426] gretap1: entered allmulticast mode [ 64.153973][ T5442] Zero length message leads to an empty skb [ 64.275329][ T5438] netlink: 'syz.2.37': attribute type 13 has an invalid length. [ 64.305845][ T5438] veth0_macvtap: left promiscuous mode [ 64.325489][ T5438] macvtap0: entered allmulticast mode [ 64.347591][ T5438] macvtap0: refused to change device tx_queue_len [ 64.666895][ T5458] tipc: Started in network mode [ 64.671916][ T5458] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 64.691946][ T5458] tipc: Enabling of bearer rejected, failed to enable media [ 65.140637][ T5470] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 65.564824][ T5493] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.952251][ T5505] __nla_validate_parse: 14 callbacks suppressed [ 65.952268][ T5505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'. [ 65.973772][ T5505] FAULT_INJECTION: forcing a failure. [ 65.973772][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 66.006075][ T5505] CPU: 0 UID: 0 PID: 5505 Comm: syz.3.56 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 66.016633][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.026716][ T5505] Call Trace: [ 66.030020][ T5505] [ 66.032968][ T5505] dump_stack_lvl+0x241/0x360 [ 66.037676][ T5505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.042898][ T5505] ? __pfx__printk+0x10/0x10 [ 66.047521][ T5505] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 66.053009][ T5505] ? __pfx___might_resched+0x10/0x10 [ 66.058327][ T5505] should_fail_ex+0x3b0/0x4e0 [ 66.063047][ T5505] should_failslab+0xac/0x100 [ 66.067754][ T5505] ? vlan_vid_add+0x31c/0x760 [ 66.072456][ T5505] __kmalloc_cache_noprof+0x6c/0x2c0 [ 66.077773][ T5505] vlan_vid_add+0x31c/0x760 [ 66.081014][ T5514] x_tables: duplicate underflow at hook 3 [ 66.082291][ T5505] register_vlan_dev+0x9f/0x810 [ 66.092875][ T5505] ? vlan_changelink+0x4c8/0x570 [ 66.097829][ T5505] ? vlan_check_real_dev+0x20b/0x320 [ 66.103146][ T5505] vlan_newlink+0x476/0x5c0 [ 66.107653][ T5505] ? __pfx_vlan_newlink+0x10/0x10 [ 66.112670][ T5505] rtnl_newlink+0x1591/0x20a0 [ 66.117369][ T5505] ? __pfx_rtnl_newlink+0x10/0x10 [ 66.122396][ T5505] ? __pfx___mutex_trylock_common+0x10/0x10 [ 66.128292][ T5505] ? rcu_is_watching+0x15/0xb0 [ 66.133053][ T5505] ? trace_contention_end+0x3c/0x120 [ 66.138345][ T5505] ? __mutex_lock+0x2ef/0xd70 [ 66.143020][ T5505] ? __pfx_lock_release+0x10/0x10 [ 66.148054][ T5505] ? __pfx_rtnl_newlink+0x10/0x10 [ 66.153076][ T5505] rtnetlink_rcv_msg+0x73f/0xcf0 [ 66.158010][ T5505] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 66.163128][ T5505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.168595][ T5505] ? ref_tracker_free+0x643/0x7e0 [ 66.173621][ T5505] netlink_rcv_skb+0x1e3/0x430 [ 66.178386][ T5505] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.183844][ T5505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 66.189142][ T5505] ? netlink_deliver_tap+0x2e/0x1b0 [ 66.194342][ T5505] netlink_unicast+0x7f6/0x990 [ 66.199107][ T5505] ? __pfx_netlink_unicast+0x10/0x10 [ 66.204387][ T5505] ? __virt_addr_valid+0x183/0x530 [ 66.209493][ T5505] ? __check_object_size+0x48e/0x900 [ 66.214781][ T5505] netlink_sendmsg+0x8e4/0xcb0 [ 66.219551][ T5505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.224853][ T5505] ? aa_sock_msg_perm+0x91/0x160 [ 66.229816][ T5505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.235110][ T5505] __sock_sendmsg+0x221/0x270 [ 66.239800][ T5505] ____sys_sendmsg+0x52a/0x7e0 [ 66.244575][ T5505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.249870][ T5505] __sys_sendmsg+0x292/0x380 [ 66.254456][ T5505] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.259578][ T5505] ? __pfx_vfs_write+0x10/0x10 [ 66.264363][ T5505] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.270783][ T5505] ? do_syscall_64+0x100/0x230 [ 66.275548][ T5505] ? do_syscall_64+0xb6/0x230 [ 66.280225][ T5505] do_syscall_64+0xf3/0x230 [ 66.284722][ T5505] ? clear_bhb_loop+0x35/0x90 [ 66.289397][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.295293][ T5505] RIP: 0033:0x7effb297dff9 [ 66.299703][ T5505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.319368][ T5505] RSP: 002b:00007effb3712038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.327785][ T5505] RAX: ffffffffffffffda RBX: 00007effb2b35f80 RCX: 00007effb297dff9 [ 66.335781][ T5505] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 66.343770][ T5505] RBP: 00007effb3712090 R08: 0000000000000000 R09: 0000000000000000 [ 66.351734][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.359698][ T5505] R13: 0000000000000000 R14: 00007effb2b35f80 R15: 00007ffcb34f5d38 [ 66.367681][ T5505] [ 66.425455][ T5310] IPVS: starting estimator thread 0... [ 66.435991][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 66.536514][ T5510] vlan2: entered allmulticast mode [ 66.542623][ T5510] bond0: entered allmulticast mode [ 66.548663][ T5510] bond_slave_0: entered allmulticast mode [ 66.554607][ T5510] bond_slave_1: entered allmulticast mode [ 66.568894][ T5510] bond0: left allmulticast mode [ 66.574143][ T5510] bond_slave_0: left allmulticast mode [ 66.579717][ T5510] bond_slave_1: left allmulticast mode [ 66.601275][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.608843][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.618256][ T5524] IPVS: using max 18 ests per chain, 43200 per kthread [ 66.640663][ T5520] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 66.815448][ T5534] netlink: 48 bytes leftover after parsing attributes in process `syz.3.63'. [ 66.849816][ T5535] bridge_slave_0: left allmulticast mode [ 66.877320][ T5535] bridge_slave_0: left promiscuous mode [ 66.901167][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.908412][ T5542] netlink: 64 bytes leftover after parsing attributes in process `syz.2.64'. [ 66.925077][ T5543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'. [ 66.967527][ T5535] bridge_slave_1: left allmulticast mode [ 66.974497][ T5535] bridge_slave_1: left promiscuous mode [ 66.982524][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.004790][ T5535] bond0: (slave bond_slave_0): Releasing backup interface [ 67.031935][ T5535] bond0: (slave bond_slave_1): Releasing backup interface [ 67.099929][ T5535] team0: Port device team_slave_0 removed [ 67.118220][ T5535] team0: Port device team_slave_1 removed [ 67.128851][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.140088][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.150659][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.162218][ T5535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.192521][ T5545] netlink: 'syz.4.65': attribute type 5 has an invalid length. [ 67.231601][ T5545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'. [ 67.308021][ T5553] wg2: entered promiscuous mode [ 67.364461][ T5553] team0: Port device wg2 added [ 67.416379][ T5563] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 67.580642][ T5573] Cannot find add_set index 0 as target [ 67.789302][ T5588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.77'. [ 68.062337][ T5595] netlink: 'syz.1.82': attribute type 12 has an invalid length. [ 68.301048][ T5609] Bluetooth: MGMT ver 1.23 [ 68.523939][ T5618] IPv6: addrconf: prefix option has invalid lifetime [ 68.529842][ T5609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.577979][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 68.625656][ T5623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.92'. [ 68.715157][ T5609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.817165][ T5609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.916785][ T5609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.954014][ T5639] netlink: 'syz.2.96': attribute type 2 has an invalid length. [ 68.962558][ T5639] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 68.972764][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 69.034856][ T5609] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.069203][ T5609] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.086214][ T5609] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.100993][ T5609] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.278785][ T5646] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 69.288899][ T5646] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 69.301144][ T5615] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 69.320966][ T5646] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 69.537852][ T5660] netlink: 'syz.4.105': attribute type 2 has an invalid length. [ 69.571338][ T5660] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 69.809918][ T5674] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 70.001111][ T5684] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 70.008050][ T5684] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 70.299764][ T5702] openvswitch: netlink: Actions may not be safe on all matching packets [ 70.333414][ T5703] netlink: zone id is out of range [ 70.351979][ T5703] netlink: get zone limit has 4 unknown bytes [ 70.523985][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 70.563758][ T5711] vlan2: entered promiscuous mode [ 70.577469][ T5711] team_slave_0: entered promiscuous mode [ 70.675570][ T5709] geneve0: entered promiscuous mode [ 70.701469][ T5709] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 70.770631][ T5716] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 70.782731][ T5722] tipc: Cannot configure node identity twice [ 70.793916][ T5725] warning: `syz.1.130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.911544][ T5726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.919174][ T5726] IPv6: NLM_F_CREATE should be set when creating new route [ 71.007379][ T5725] __nla_validate_parse: 12 callbacks suppressed [ 71.007397][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 71.030606][ T5733] netlink: 148 bytes leftover after parsing attributes in process `syz.4.131'. [ 71.071680][ T5735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.133'. [ 71.165323][ T5741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.131'. [ 71.185552][ T5741] netlink: 2 bytes leftover after parsing attributes in process `syz.4.131'. [ 71.557981][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.580005][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.324971][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 72.424561][ T5784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.145'. [ 72.437970][ T5786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.146'. [ 72.535486][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'. [ 72.592459][ T5792] vlan2: entered promiscuous mode [ 72.641150][ T5792] team_slave_0: entered promiscuous mode [ 72.764795][ T5802] macvlan0: entered allmulticast mode [ 72.770223][ T5802] veth1_vlan: entered allmulticast mode [ 72.866903][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 73.340688][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bffe [ 73.347696][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bffe [ 73.356604][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.363791][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 73.372405][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 73.381053][ T5847] page dumped because: page_pool leak [ 73.386482][ T5847] page_owner tracks the page as allocated [ 73.392218][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271825869, free_ts 12509439552 [ 73.409068][ T5847] post_alloc_hook+0x1f3/0x230 [ 73.413929][ T5847] get_page_from_freelist+0x3045/0x3190 [ 73.419506][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 73.424792][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 73.430287][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 73.436259][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 73.441484][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 73.446935][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 73.452338][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 73.457358][ T5847] __sys_bpf+0x48d/0x810 [ 73.461625][ T5847] __x64_sys_bpf+0x7c/0x90 [ 73.466120][ T5847] do_syscall_64+0xf3/0x230 [ 73.470643][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.476608][ T5847] page last free pid 1 tgid 1 stack trace: [ 73.482437][ T5847] free_unref_page+0xcfb/0xf20 [ 73.487269][ T5847] free_contig_range+0x152/0x550 [ 73.492236][ T5847] destroy_args+0x8a/0x840 [ 73.496742][ T5847] debug_vm_pgtable+0x4be/0x550 [ 73.501625][ T5847] do_one_initcall+0x248/0x880 [ 73.506470][ T5847] do_initcall_level+0x157/0x210 [ 73.511444][ T5847] do_initcalls+0x3f/0x80 [ 73.515843][ T5847] kernel_init_freeable+0x435/0x5d0 [ 73.521067][ T5847] kernel_init+0x1d/0x2b0 [ 73.525471][ T5847] ret_from_fork+0x4b/0x80 [ 73.529945][ T5847] ret_from_fork_asm+0x1a/0x30 [ 73.534779][ T5847] Modules linked in: [ 73.538791][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 73.549376][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.559556][ T5847] Call Trace: [ 73.562833][ T5847] [ 73.565767][ T5847] dump_stack_lvl+0x241/0x360 [ 73.570443][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.575666][ T5847] ? __pfx_print_modules+0x10/0x10 [ 73.580809][ T5847] bad_page+0x166/0x1b0 [ 73.584979][ T5847] free_unref_page+0xed0/0xf20 [ 73.589760][ T5847] skb_release_data+0x6dc/0x8a0 [ 73.594651][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 73.599727][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 73.605482][ T5847] ? mark_lock+0x9a/0x360 [ 73.609941][ T5847] ? __lock_acquire+0x1384/0x2050 [ 73.615021][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 73.621109][ T5847] ? mark_lock+0x9a/0x360 [ 73.625436][ T5847] ? __lock_acquire+0x1384/0x2050 [ 73.630467][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 73.636451][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 73.643034][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 73.649551][ T5847] ? read_tsc+0x9/0x20 [ 73.653647][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 73.658971][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 73.665330][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 73.671516][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 73.677879][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 73.684587][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 73.689815][ T5847] ? __phys_addr+0xba/0x170 [ 73.694346][ T5847] ? build_skb_around+0x111/0x260 [ 73.699396][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 73.705331][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 73.710654][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 73.716148][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 73.722090][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 73.727663][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 73.733478][ T5847] ? synchronize_rcu+0x11b/0x360 [ 73.738439][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 73.743749][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 73.750036][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 73.755950][ T5847] ? _copy_from_user+0xa6/0xe0 [ 73.760739][ T5847] ? bpf_test_init+0x15a/0x180 [ 73.765502][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 73.770964][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 73.776424][ T5847] ? __pfx_lock_release+0x10/0x10 [ 73.781451][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.787279][ T5847] ? __fget_files+0x29/0x470 [ 73.791870][ T5847] ? fput+0x1a8/0x230 [ 73.795858][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 73.801697][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 73.806765][ T5847] __sys_bpf+0x48d/0x810 [ 73.811050][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 73.815855][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.821873][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.828241][ T5847] ? do_syscall_64+0x100/0x230 [ 73.833036][ T5847] __x64_sys_bpf+0x7c/0x90 [ 73.837481][ T5847] do_syscall_64+0xf3/0x230 [ 73.842017][ T5847] ? clear_bhb_loop+0x35/0x90 [ 73.846721][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.852646][ T5847] RIP: 0033:0x7f724a97dff9 [ 73.857093][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.876743][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.885184][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 73.893186][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 73.901179][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 73.909177][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.917176][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 73.925200][ T5847] [ 73.928315][ T5847] Disabling lock debugging due to kernel taint [ 73.934533][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bffd [ 73.941301][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bffd [ 73.950106][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.957281][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 73.965912][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 73.974580][ T5847] page dumped because: page_pool leak [ 73.980045][ T5847] page_owner tracks the page as allocated [ 73.985820][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271814254, free_ts 12509434871 [ 74.002613][ T5847] post_alloc_hook+0x1f3/0x230 [ 74.007411][ T5847] get_page_from_freelist+0x3045/0x3190 [ 74.012967][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 74.018211][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 74.023816][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 74.029723][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 74.034953][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 74.040347][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 74.045788][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 74.050732][ T5847] __sys_bpf+0x48d/0x810 [ 74.055010][ T5847] __x64_sys_bpf+0x7c/0x90 [ 74.059429][ T5847] do_syscall_64+0xf3/0x230 [ 74.063973][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.069885][ T5847] page last free pid 1 tgid 1 stack trace: [ 74.075716][ T5847] free_unref_page+0xcfb/0xf20 [ 74.080483][ T5847] free_contig_range+0x152/0x550 [ 74.085526][ T5847] destroy_args+0x8a/0x840 [ 74.089966][ T5847] debug_vm_pgtable+0x4be/0x550 [ 74.094866][ T5847] do_one_initcall+0x248/0x880 [ 74.099647][ T5847] do_initcall_level+0x157/0x210 [ 74.104625][ T5847] do_initcalls+0x3f/0x80 [ 74.108974][ T5847] kernel_init_freeable+0x435/0x5d0 [ 74.114217][ T5847] kernel_init+0x1d/0x2b0 [ 74.118583][ T5847] ret_from_fork+0x4b/0x80 [ 74.123020][ T5847] ret_from_fork_asm+0x1a/0x30 [ 74.127941][ T5847] Modules linked in: [ 74.131843][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 74.143895][ T5847] Tainted: [B]=BAD_PAGE [ 74.148027][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.158068][ T5847] Call Trace: [ 74.161339][ T5847] [ 74.164256][ T5847] dump_stack_lvl+0x241/0x360 [ 74.168925][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.174106][ T5847] ? __pfx_print_modules+0x10/0x10 [ 74.179206][ T5847] bad_page+0x166/0x1b0 [ 74.183358][ T5847] free_unref_page+0xed0/0xf20 [ 74.188123][ T5847] skb_release_data+0x6dc/0x8a0 [ 74.192968][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 74.197978][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 74.203682][ T5847] ? mark_lock+0x9a/0x360 [ 74.207995][ T5847] ? __lock_acquire+0x1384/0x2050 [ 74.213006][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 74.219061][ T5847] ? mark_lock+0x9a/0x360 [ 74.223384][ T5847] ? __lock_acquire+0x1384/0x2050 [ 74.228409][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 74.234484][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 74.241091][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.247590][ T5847] ? read_tsc+0x9/0x20 [ 74.251647][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 74.256840][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 74.263182][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 74.269340][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 74.275657][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.282320][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 74.287510][ T5847] ? __phys_addr+0xba/0x170 [ 74.292013][ T5847] ? build_skb_around+0x111/0x260 [ 74.297019][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 74.302901][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 74.308178][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 74.313653][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 74.319552][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 74.325086][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.330882][ T5847] ? synchronize_rcu+0x11b/0x360 [ 74.335809][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 74.341088][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 74.347321][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.353219][ T5847] ? _copy_from_user+0xa6/0xe0 [ 74.358066][ T5847] ? bpf_test_init+0x15a/0x180 [ 74.362819][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 74.368280][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 74.373648][ T5847] ? __pfx_lock_release+0x10/0x10 [ 74.378671][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.384483][ T5847] ? __fget_files+0x29/0x470 [ 74.389093][ T5847] ? fput+0x1a8/0x230 [ 74.393061][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.398861][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 74.403876][ T5847] __sys_bpf+0x48d/0x810 [ 74.408117][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 74.412882][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.418851][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.425167][ T5847] ? do_syscall_64+0x100/0x230 [ 74.429923][ T5847] __x64_sys_bpf+0x7c/0x90 [ 74.434349][ T5847] do_syscall_64+0xf3/0x230 [ 74.438854][ T5847] ? clear_bhb_loop+0x35/0x90 [ 74.443543][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.449436][ T5847] RIP: 0033:0x7f724a97dff9 [ 74.453841][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.473442][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.481853][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 74.489824][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 74.497794][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 74.506537][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.514508][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 74.522487][ T5847] [ 74.525642][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bffc [ 74.532405][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bffc [ 74.541201][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.548350][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 74.556969][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 74.565572][ T5847] page dumped because: page_pool leak [ 74.570925][ T5847] page_owner tracks the page as allocated [ 74.576665][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271802937, free_ts 12509430093 [ 74.593454][ T5847] post_alloc_hook+0x1f3/0x230 [ 74.598227][ T5847] get_page_from_freelist+0x3045/0x3190 [ 74.603811][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 74.609028][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 74.614545][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 74.620451][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 74.625681][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 74.631077][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 74.636522][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 74.641506][ T5847] __sys_bpf+0x48d/0x810 [ 74.645783][ T5847] __x64_sys_bpf+0x7c/0x90 [ 74.650211][ T5847] do_syscall_64+0xf3/0x230 [ 74.654771][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.660682][ T5847] page last free pid 1 tgid 1 stack trace: [ 74.666519][ T5847] free_unref_page+0xcfb/0xf20 [ 74.671307][ T5847] free_contig_range+0x152/0x550 [ 74.676274][ T5847] destroy_args+0x8a/0x840 [ 74.680693][ T5847] debug_vm_pgtable+0x4be/0x550 [ 74.685589][ T5847] do_one_initcall+0x248/0x880 [ 74.690363][ T5847] do_initcall_level+0x157/0x210 [ 74.695333][ T5847] do_initcalls+0x3f/0x80 [ 74.699662][ T5847] kernel_init_freeable+0x435/0x5d0 [ 74.704919][ T5847] kernel_init+0x1d/0x2b0 [ 74.709275][ T5847] ret_from_fork+0x4b/0x80 [ 74.713739][ T5847] ret_from_fork_asm+0x1a/0x30 [ 74.718688][ T5847] Modules linked in: [ 74.722590][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 74.734643][ T5847] Tainted: [B]=BAD_PAGE [ 74.738782][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.748829][ T5847] Call Trace: [ 74.752118][ T5847] [ 74.755045][ T5847] dump_stack_lvl+0x241/0x360 [ 74.759715][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.764899][ T5847] ? __pfx_print_modules+0x10/0x10 [ 74.769999][ T5847] bad_page+0x166/0x1b0 [ 74.774154][ T5847] free_unref_page+0xed0/0xf20 [ 74.778923][ T5847] skb_release_data+0x6dc/0x8a0 [ 74.783779][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 74.788788][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 74.794493][ T5847] ? mark_lock+0x9a/0x360 [ 74.798804][ T5847] ? __lock_acquire+0x1384/0x2050 [ 74.803816][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 74.809870][ T5847] ? mark_lock+0x9a/0x360 [ 74.814183][ T5847] ? __lock_acquire+0x1384/0x2050 [ 74.819199][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 74.825181][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 74.831785][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.838291][ T5847] ? read_tsc+0x9/0x20 [ 74.842349][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 74.847539][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 74.853875][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 74.860028][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 74.866362][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.873026][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 74.878220][ T5847] ? __phys_addr+0xba/0x170 [ 74.882715][ T5847] ? build_skb_around+0x111/0x260 [ 74.887729][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 74.893623][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 74.898899][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 74.904348][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 74.910234][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 74.915771][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.921561][ T5847] ? synchronize_rcu+0x11b/0x360 [ 74.926561][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 74.931847][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 74.938085][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.943982][ T5847] ? _copy_from_user+0xa6/0xe0 [ 74.948745][ T5847] ? bpf_test_init+0x15a/0x180 [ 74.953500][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 74.958951][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 74.964322][ T5847] ? __pfx_lock_release+0x10/0x10 [ 74.969346][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.975147][ T5847] ? __fget_files+0x29/0x470 [ 74.979729][ T5847] ? fput+0x1a8/0x230 [ 74.983706][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.989519][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 74.994447][ T5847] __sys_bpf+0x48d/0x810 [ 74.998676][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 75.003434][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 75.009424][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.015745][ T5847] ? do_syscall_64+0x100/0x230 [ 75.020493][ T5847] __x64_sys_bpf+0x7c/0x90 [ 75.024907][ T5847] do_syscall_64+0xf3/0x230 [ 75.029415][ T5847] ? clear_bhb_loop+0x35/0x90 [ 75.034083][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.039965][ T5847] RIP: 0033:0x7f724a97dff9 [ 75.044362][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.063964][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.072372][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 75.080337][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.088645][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 75.096629][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.104584][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 75.112542][ T5847] [ 75.115622][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bffb [ 75.122385][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bffb [ 75.131179][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.138334][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 75.146946][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 75.155544][ T5847] page dumped because: page_pool leak [ 75.160896][ T5847] page_owner tracks the page as allocated [ 75.166644][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271791348, free_ts 12509425321 [ 75.183434][ T5847] post_alloc_hook+0x1f3/0x230 [ 75.188193][ T5847] get_page_from_freelist+0x3045/0x3190 [ 75.193784][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 75.198990][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 75.204474][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 75.210378][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 75.215619][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 75.221000][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 75.226409][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 75.231360][ T5847] __sys_bpf+0x48d/0x810 [ 75.235648][ T5847] __x64_sys_bpf+0x7c/0x90 [ 75.240065][ T5847] do_syscall_64+0xf3/0x230 [ 75.244601][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.250531][ T5847] page last free pid 1 tgid 1 stack trace: [ 75.256396][ T5847] free_unref_page+0xcfb/0xf20 [ 75.261164][ T5847] free_contig_range+0x152/0x550 [ 75.266218][ T5847] destroy_args+0x8a/0x840 [ 75.270639][ T5847] debug_vm_pgtable+0x4be/0x550 [ 75.275528][ T5847] do_one_initcall+0x248/0x880 [ 75.280300][ T5847] do_initcall_level+0x157/0x210 [ 75.285270][ T5847] do_initcalls+0x3f/0x80 [ 75.289600][ T5847] kernel_init_freeable+0x435/0x5d0 [ 75.294846][ T5847] kernel_init+0x1d/0x2b0 [ 75.299196][ T5847] ret_from_fork+0x4b/0x80 [ 75.303649][ T5847] ret_from_fork_asm+0x1a/0x30 [ 75.308427][ T5847] Modules linked in: [ 75.312317][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 75.324381][ T5847] Tainted: [B]=BAD_PAGE [ 75.328516][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.338556][ T5847] Call Trace: [ 75.341820][ T5847] [ 75.344740][ T5847] dump_stack_lvl+0x241/0x360 [ 75.349404][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.354589][ T5847] ? __pfx_print_modules+0x10/0x10 [ 75.359704][ T5847] bad_page+0x166/0x1b0 [ 75.363861][ T5847] free_unref_page+0xed0/0xf20 [ 75.368628][ T5847] skb_release_data+0x6dc/0x8a0 [ 75.373471][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 75.378493][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 75.384208][ T5847] ? mark_lock+0x9a/0x360 [ 75.388525][ T5847] ? __lock_acquire+0x1384/0x2050 [ 75.393545][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 75.399602][ T5847] ? mark_lock+0x9a/0x360 [ 75.403926][ T5847] ? __lock_acquire+0x1384/0x2050 [ 75.408943][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 75.414928][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 75.421533][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.428041][ T5847] ? read_tsc+0x9/0x20 [ 75.432096][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 75.437282][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 75.443594][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 75.449736][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 75.456047][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.462710][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 75.467896][ T5847] ? __phys_addr+0xba/0x170 [ 75.472386][ T5847] ? build_skb_around+0x111/0x260 [ 75.477404][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 75.483306][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 75.488603][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 75.494061][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 75.499961][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 75.505515][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.511322][ T5847] ? synchronize_rcu+0x11b/0x360 [ 75.516249][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 75.521525][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 75.527754][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.533638][ T5847] ? _copy_from_user+0xa6/0xe0 [ 75.538823][ T5847] ? bpf_test_init+0x15a/0x180 [ 75.543571][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 75.549018][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 75.554380][ T5847] ? __pfx_lock_release+0x10/0x10 [ 75.559393][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.565201][ T5847] ? __fget_files+0x29/0x470 [ 75.569798][ T5847] ? fput+0x1a8/0x230 [ 75.573780][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.579580][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 75.584510][ T5847] __sys_bpf+0x48d/0x810 [ 75.588737][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 75.593489][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 75.599462][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.605798][ T5847] ? do_syscall_64+0x100/0x230 [ 75.610545][ T5847] __x64_sys_bpf+0x7c/0x90 [ 75.614956][ T5847] do_syscall_64+0xf3/0x230 [ 75.619459][ T5847] ? clear_bhb_loop+0x35/0x90 [ 75.624118][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.629998][ T5847] RIP: 0033:0x7f724a97dff9 [ 75.634398][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.653991][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.662407][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 75.670374][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 75.678343][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 75.686302][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.694259][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 75.702222][ T5847] [ 75.705299][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bffa [ 75.712062][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bffa [ 75.720854][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.727988][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 75.736693][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 75.745291][ T5847] page dumped because: page_pool leak [ 75.750641][ T5847] page_owner tracks the page as allocated [ 75.756377][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271780100, free_ts 12509420253 [ 75.773173][ T5847] post_alloc_hook+0x1f3/0x230 [ 75.777979][ T5847] get_page_from_freelist+0x3045/0x3190 [ 75.783560][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 75.788765][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 75.794279][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 75.800207][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 75.805438][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 75.810823][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 75.816236][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 75.821191][ T5847] __sys_bpf+0x48d/0x810 [ 75.825565][ T5847] __x64_sys_bpf+0x7c/0x90 [ 75.830025][ T5847] do_syscall_64+0xf3/0x230 [ 75.834549][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.840474][ T5847] page last free pid 1 tgid 1 stack trace: [ 75.846305][ T5847] free_unref_page+0xcfb/0xf20 [ 75.851079][ T5847] free_contig_range+0x152/0x550 [ 75.856044][ T5847] destroy_args+0x8a/0x840 [ 75.860483][ T5847] debug_vm_pgtable+0x4be/0x550 [ 75.865366][ T5847] do_one_initcall+0x248/0x880 [ 75.870227][ T5847] do_initcall_level+0x157/0x210 [ 75.875222][ T5847] do_initcalls+0x3f/0x80 [ 75.879557][ T5847] kernel_init_freeable+0x435/0x5d0 [ 75.884812][ T5847] kernel_init+0x1d/0x2b0 [ 75.889164][ T5847] ret_from_fork+0x4b/0x80 [ 75.893622][ T5847] ret_from_fork_asm+0x1a/0x30 [ 75.898416][ T5847] Modules linked in: [ 75.902298][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 75.914349][ T5847] Tainted: [B]=BAD_PAGE [ 75.918494][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.928534][ T5847] Call Trace: [ 75.931824][ T5847] [ 75.934749][ T5847] dump_stack_lvl+0x241/0x360 [ 75.939442][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.944625][ T5847] ? __pfx_print_modules+0x10/0x10 [ 75.949735][ T5847] bad_page+0x166/0x1b0 [ 75.953889][ T5847] free_unref_page+0xed0/0xf20 [ 75.958659][ T5847] skb_release_data+0x6dc/0x8a0 [ 75.963527][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 75.968627][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 75.974357][ T5847] ? mark_lock+0x9a/0x360 [ 75.978673][ T5847] ? __lock_acquire+0x1384/0x2050 [ 75.983691][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 75.989749][ T5847] ? mark_lock+0x9a/0x360 [ 75.994068][ T5847] ? __lock_acquire+0x1384/0x2050 [ 75.999088][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 76.005058][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 76.011649][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.018144][ T5847] ? read_tsc+0x9/0x20 [ 76.022207][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 76.027398][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 76.033712][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 76.039854][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 76.046168][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.052841][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 76.058041][ T5847] ? __phys_addr+0xba/0x170 [ 76.062566][ T5847] ? build_skb_around+0x111/0x260 [ 76.067597][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 76.073497][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 76.078810][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 76.084379][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 76.090317][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 76.095872][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.101666][ T5847] ? synchronize_rcu+0x11b/0x360 [ 76.106591][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 76.111866][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 76.118103][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.124014][ T5847] ? _copy_from_user+0xa6/0xe0 [ 76.128766][ T5847] ? bpf_test_init+0x15a/0x180 [ 76.133523][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 76.138992][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 76.144368][ T5847] ? __pfx_lock_release+0x10/0x10 [ 76.149384][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.155179][ T5847] ? __fget_files+0x29/0x470 [ 76.159755][ T5847] ? fput+0x1a8/0x230 [ 76.163732][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.169546][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 76.174493][ T5847] __sys_bpf+0x48d/0x810 [ 76.178730][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 76.183483][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.189490][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.195806][ T5847] ? do_syscall_64+0x100/0x230 [ 76.200561][ T5847] __x64_sys_bpf+0x7c/0x90 [ 76.204977][ T5847] do_syscall_64+0xf3/0x230 [ 76.209489][ T5847] ? clear_bhb_loop+0x35/0x90 [ 76.214177][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.220062][ T5847] RIP: 0033:0x7f724a97dff9 [ 76.224469][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.244064][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.252464][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 76.260447][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.268409][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 76.276367][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.284319][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 76.292283][ T5847] [ 76.295355][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff9 [ 76.302115][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff9 [ 76.310906][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.318044][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 76.326652][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 76.335262][ T5847] page dumped because: page_pool leak [ 76.340611][ T5847] page_owner tracks the page as allocated [ 76.346369][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271768768, free_ts 12509415205 [ 76.363166][ T5847] post_alloc_hook+0x1f3/0x230 [ 76.367976][ T5847] get_page_from_freelist+0x3045/0x3190 [ 76.373544][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 76.378761][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 76.384247][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 76.390146][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 76.395367][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 76.400768][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 76.406188][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 76.411132][ T5847] __sys_bpf+0x48d/0x810 [ 76.415405][ T5847] __x64_sys_bpf+0x7c/0x90 [ 76.419824][ T5847] do_syscall_64+0xf3/0x230 [ 76.424347][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.430251][ T5847] page last free pid 1 tgid 1 stack trace: [ 76.436075][ T5847] free_unref_page+0xcfb/0xf20 [ 76.440839][ T5847] free_contig_range+0x152/0x550 [ 76.445798][ T5847] destroy_args+0x8a/0x840 [ 76.450215][ T5847] debug_vm_pgtable+0x4be/0x550 [ 76.455088][ T5847] do_one_initcall+0x248/0x880 [ 76.459859][ T5847] do_initcall_level+0x157/0x210 [ 76.464831][ T5847] do_initcalls+0x3f/0x80 [ 76.469160][ T5847] kernel_init_freeable+0x435/0x5d0 [ 76.474395][ T5847] kernel_init+0x1d/0x2b0 [ 76.478728][ T5847] ret_from_fork+0x4b/0x80 [ 76.483131][ T5847] ret_from_fork_asm+0x1a/0x30 [ 76.487936][ T5847] Modules linked in: [ 76.491832][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 76.503883][ T5847] Tainted: [B]=BAD_PAGE [ 76.508033][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.518158][ T5847] Call Trace: [ 76.521425][ T5847] [ 76.524341][ T5847] dump_stack_lvl+0x241/0x360 [ 76.529006][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.534185][ T5847] ? __pfx_print_modules+0x10/0x10 [ 76.539287][ T5847] bad_page+0x166/0x1b0 [ 76.543443][ T5847] free_unref_page+0xed0/0xf20 [ 76.548219][ T5847] skb_release_data+0x6dc/0x8a0 [ 76.553070][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 76.558093][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 76.563811][ T5847] ? mark_lock+0x9a/0x360 [ 76.568121][ T5847] ? __lock_acquire+0x1384/0x2050 [ 76.573150][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 76.579211][ T5847] ? mark_lock+0x9a/0x360 [ 76.583529][ T5847] ? __lock_acquire+0x1384/0x2050 [ 76.588544][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 76.594528][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 76.601133][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 76.607641][ T5847] ? read_tsc+0x9/0x20 [ 76.611697][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 76.616880][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 76.623195][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 76.629350][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 76.635661][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 76.642319][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 76.647504][ T5847] ? __phys_addr+0xba/0x170 [ 76.651995][ T5847] ? build_skb_around+0x111/0x260 [ 76.657001][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 76.662879][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 76.668147][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 76.673594][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 76.679472][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 76.685009][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 76.690800][ T5847] ? synchronize_rcu+0x11b/0x360 [ 76.693715][ T937] cfg80211: failed to load regulatory.db [ 76.695715][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 76.706634][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 76.712890][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 76.718773][ T5847] ? _copy_from_user+0xa6/0xe0 [ 76.723526][ T5847] ? bpf_test_init+0x15a/0x180 [ 76.728275][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 76.733720][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 76.739080][ T5847] ? __pfx_lock_release+0x10/0x10 [ 76.744114][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.749930][ T5847] ? __fget_files+0x29/0x470 [ 76.754510][ T5847] ? fput+0x1a8/0x230 [ 76.758474][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 76.764266][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 76.769189][ T5847] __sys_bpf+0x48d/0x810 [ 76.773416][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 76.778181][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.784145][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.790474][ T5847] ? do_syscall_64+0x100/0x230 [ 76.795229][ T5847] __x64_sys_bpf+0x7c/0x90 [ 76.799633][ T5847] do_syscall_64+0xf3/0x230 [ 76.804124][ T5847] ? clear_bhb_loop+0x35/0x90 [ 76.808803][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.814685][ T5847] RIP: 0033:0x7f724a97dff9 [ 76.819091][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.838694][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.847094][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 76.855048][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 76.863022][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 76.870974][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.878943][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 76.886933][ T5847] [ 76.890021][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff8 [ 76.896807][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff8 [ 76.905589][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.912710][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 76.921424][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 76.930038][ T5847] page dumped because: page_pool leak [ 76.935428][ T5847] page_owner tracks the page as allocated [ 76.941162][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271757319, free_ts 12509410126 [ 76.957943][ T5847] post_alloc_hook+0x1f3/0x230 [ 76.962717][ T5847] get_page_from_freelist+0x3045/0x3190 [ 76.968292][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 76.973519][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 76.978974][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 76.984915][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 76.990125][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 76.995523][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 77.000903][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 77.005877][ T5847] __sys_bpf+0x48d/0x810 [ 77.010133][ T5847] __x64_sys_bpf+0x7c/0x90 [ 77.014616][ T5847] do_syscall_64+0xf3/0x230 [ 77.019122][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.025078][ T5847] page last free pid 1 tgid 1 stack trace: [ 77.030891][ T5847] free_unref_page+0xcfb/0xf20 [ 77.035708][ T5847] free_contig_range+0x152/0x550 [ 77.040712][ T5847] destroy_args+0x8a/0x840 [ 77.045218][ T5847] debug_vm_pgtable+0x4be/0x550 [ 77.050079][ T5847] do_one_initcall+0x248/0x880 [ 77.054876][ T5847] do_initcall_level+0x157/0x210 [ 77.059819][ T5847] do_initcalls+0x3f/0x80 [ 77.064187][ T5847] kernel_init_freeable+0x435/0x5d0 [ 77.069423][ T5847] kernel_init+0x1d/0x2b0 [ 77.073794][ T5847] ret_from_fork+0x4b/0x80 [ 77.078225][ T5847] ret_from_fork_asm+0x1a/0x30 [ 77.082976][ T5847] Modules linked in: [ 77.086922][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 77.099007][ T5847] Tainted: [B]=BAD_PAGE [ 77.103139][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.113186][ T5847] Call Trace: [ 77.116495][ T5847] [ 77.119425][ T5847] dump_stack_lvl+0x241/0x360 [ 77.124098][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.129292][ T5847] ? __pfx_print_modules+0x10/0x10 [ 77.134414][ T5847] bad_page+0x166/0x1b0 [ 77.138558][ T5847] free_unref_page+0xed0/0xf20 [ 77.143318][ T5847] skb_release_data+0x6dc/0x8a0 [ 77.148177][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 77.153201][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 77.158919][ T5847] ? mark_lock+0x9a/0x360 [ 77.163237][ T5847] ? __lock_acquire+0x1384/0x2050 [ 77.168251][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 77.174341][ T5847] ? mark_lock+0x9a/0x360 [ 77.178656][ T5847] ? __lock_acquire+0x1384/0x2050 [ 77.183672][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 77.189651][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 77.196246][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.202763][ T5847] ? read_tsc+0x9/0x20 [ 77.206824][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 77.212013][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 77.218335][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 77.224494][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 77.230816][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.237499][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 77.242710][ T5847] ? __phys_addr+0xba/0x170 [ 77.247226][ T5847] ? build_skb_around+0x111/0x260 [ 77.252259][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 77.258142][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 77.263424][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 77.268878][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 77.274860][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 77.280425][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.286228][ T5847] ? synchronize_rcu+0x11b/0x360 [ 77.291153][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 77.296474][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 77.302712][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.308594][ T5847] ? _copy_from_user+0xa6/0xe0 [ 77.313350][ T5847] ? bpf_test_init+0x15a/0x180 [ 77.318109][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 77.323563][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 77.328947][ T5847] ? __pfx_lock_release+0x10/0x10 [ 77.333975][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.339792][ T5847] ? __fget_files+0x29/0x470 [ 77.344387][ T5847] ? fput+0x1a8/0x230 [ 77.348379][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.354186][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 77.359123][ T5847] __sys_bpf+0x48d/0x810 [ 77.363361][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 77.368130][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.374112][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.380431][ T5847] ? do_syscall_64+0x100/0x230 [ 77.385210][ T5847] __x64_sys_bpf+0x7c/0x90 [ 77.389629][ T5847] do_syscall_64+0xf3/0x230 [ 77.394128][ T5847] ? clear_bhb_loop+0x35/0x90 [ 77.398805][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.404696][ T5847] RIP: 0033:0x7f724a97dff9 [ 77.409108][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.428796][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.437197][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 77.445177][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 77.453154][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 77.461222][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.469200][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 77.477186][ T5847] [ 77.480300][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff7 [ 77.487099][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff7 [ 77.495919][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 77.503019][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 77.511651][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 77.520346][ T5847] page dumped because: page_pool leak [ 77.525745][ T5847] page_owner tracks the page as allocated [ 77.531463][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271746121, free_ts 12509405090 [ 77.548343][ T5847] post_alloc_hook+0x1f3/0x230 [ 77.553150][ T5847] get_page_from_freelist+0x3045/0x3190 [ 77.558761][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 77.564018][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 77.569488][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 77.575425][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 77.580644][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 77.586053][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 77.591443][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 77.596421][ T5847] __sys_bpf+0x48d/0x810 [ 77.600672][ T5847] __x64_sys_bpf+0x7c/0x90 [ 77.605118][ T5847] do_syscall_64+0xf3/0x230 [ 77.609624][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.615551][ T5847] page last free pid 1 tgid 1 stack trace: [ 77.621388][ T5847] free_unref_page+0xcfb/0xf20 [ 77.626209][ T5847] free_contig_range+0x152/0x550 [ 77.631153][ T5847] destroy_args+0x8a/0x840 [ 77.635685][ T5847] debug_vm_pgtable+0x4be/0x550 [ 77.640545][ T5847] do_one_initcall+0x248/0x880 [ 77.645370][ T5847] do_initcall_level+0x157/0x210 [ 77.650311][ T5847] do_initcalls+0x3f/0x80 [ 77.654684][ T5847] kernel_init_freeable+0x435/0x5d0 [ 77.659892][ T5847] kernel_init+0x1d/0x2b0 [ 77.664261][ T5847] ret_from_fork+0x4b/0x80 [ 77.668694][ T5847] ret_from_fork_asm+0x1a/0x30 [ 77.673517][ T5847] Modules linked in: [ 77.677419][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 77.689475][ T5847] Tainted: [B]=BAD_PAGE [ 77.693622][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.703771][ T5847] Call Trace: [ 77.707037][ T5847] [ 77.709953][ T5847] dump_stack_lvl+0x241/0x360 [ 77.714648][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.719848][ T5847] ? __pfx_print_modules+0x10/0x10 [ 77.724953][ T5847] bad_page+0x166/0x1b0 [ 77.729102][ T5847] free_unref_page+0xed0/0xf20 [ 77.733868][ T5847] skb_release_data+0x6dc/0x8a0 [ 77.738725][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 77.743741][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 77.749447][ T5847] ? mark_lock+0x9a/0x360 [ 77.753764][ T5847] ? __lock_acquire+0x1384/0x2050 [ 77.758781][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 77.764833][ T5847] ? mark_lock+0x9a/0x360 [ 77.769148][ T5847] ? __lock_acquire+0x1384/0x2050 [ 77.774169][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 77.780141][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 77.786731][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 77.793228][ T5847] ? read_tsc+0x9/0x20 [ 77.797295][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 77.802535][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 77.808894][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 77.815055][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 77.821378][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 77.828047][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 77.833257][ T5847] ? __phys_addr+0xba/0x170 [ 77.837767][ T5847] ? build_skb_around+0x111/0x260 [ 77.842777][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 77.848659][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 77.853937][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 77.859389][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 77.865446][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 77.870981][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 77.876792][ T5847] ? synchronize_rcu+0x11b/0x360 [ 77.881717][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 77.886998][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 77.893239][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 77.899120][ T5847] ? _copy_from_user+0xa6/0xe0 [ 77.903878][ T5847] ? bpf_test_init+0x15a/0x180 [ 77.908629][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 77.914075][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 77.919546][ T5847] ? __pfx_lock_release+0x10/0x10 [ 77.924561][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.930362][ T5847] ? __fget_files+0x29/0x470 [ 77.934958][ T5847] ? fput+0x1a8/0x230 [ 77.938950][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 77.944746][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 77.949672][ T5847] __sys_bpf+0x48d/0x810 [ 77.953972][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 77.958724][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.964709][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.971027][ T5847] ? do_syscall_64+0x100/0x230 [ 77.975775][ T5847] __x64_sys_bpf+0x7c/0x90 [ 77.980176][ T5847] do_syscall_64+0xf3/0x230 [ 77.984672][ T5847] ? clear_bhb_loop+0x35/0x90 [ 77.989352][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.995235][ T5847] RIP: 0033:0x7f724a97dff9 [ 77.999631][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.019393][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.027789][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 78.035759][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 78.043731][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 78.051685][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.059638][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 78.067607][ T5847] [ 78.070697][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff6 [ 78.077586][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff6 [ 78.086384][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.093535][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 78.102128][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 78.110743][ T5847] page dumped because: page_pool leak [ 78.116159][ T5847] page_owner tracks the page as allocated [ 78.121855][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271734710, free_ts 12509400089 [ 78.138847][ T5847] post_alloc_hook+0x1f3/0x230 [ 78.143668][ T5847] get_page_from_freelist+0x3045/0x3190 [ 78.149224][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 78.154445][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 78.159908][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 78.165840][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 78.171042][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 78.176444][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 78.181826][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 78.186790][ T5847] __sys_bpf+0x48d/0x810 [ 78.191072][ T5847] __x64_sys_bpf+0x7c/0x90 [ 78.195530][ T5847] do_syscall_64+0xf3/0x230 [ 78.200050][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.205982][ T5847] page last free pid 1 tgid 1 stack trace: [ 78.211784][ T5847] free_unref_page+0xcfb/0xf20 [ 78.216579][ T5847] free_contig_range+0x152/0x550 [ 78.221561][ T5847] destroy_args+0x8a/0x840 [ 78.226119][ T5847] debug_vm_pgtable+0x4be/0x550 [ 78.230977][ T5847] do_one_initcall+0x248/0x880 [ 78.235774][ T5847] do_initcall_level+0x157/0x210 [ 78.240779][ T5847] do_initcalls+0x3f/0x80 [ 78.245145][ T5847] kernel_init_freeable+0x435/0x5d0 [ 78.250355][ T5847] kernel_init+0x1d/0x2b0 [ 78.254747][ T5847] ret_from_fork+0x4b/0x80 [ 78.259206][ T5847] ret_from_fork_asm+0x1a/0x30 [ 78.264013][ T5847] Modules linked in: [ 78.267937][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 78.280076][ T5847] Tainted: [B]=BAD_PAGE [ 78.284210][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.294340][ T5847] Call Trace: [ 78.297637][ T5847] [ 78.300643][ T5847] dump_stack_lvl+0x241/0x360 [ 78.305333][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.310515][ T5847] ? __pfx_print_modules+0x10/0x10 [ 78.315633][ T5847] bad_page+0x166/0x1b0 [ 78.319793][ T5847] free_unref_page+0xed0/0xf20 [ 78.324558][ T5847] skb_release_data+0x6dc/0x8a0 [ 78.329414][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 78.334427][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 78.340131][ T5847] ? mark_lock+0x9a/0x360 [ 78.344448][ T5847] ? __lock_acquire+0x1384/0x2050 [ 78.349476][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 78.355547][ T5847] ? mark_lock+0x9a/0x360 [ 78.359860][ T5847] ? __lock_acquire+0x1384/0x2050 [ 78.364885][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 78.370852][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 78.377432][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.383928][ T5847] ? read_tsc+0x9/0x20 [ 78.387996][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 78.393199][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 78.399527][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 78.405674][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 78.411989][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 78.418651][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 78.423848][ T5847] ? __phys_addr+0xba/0x170 [ 78.428363][ T5847] ? build_skb_around+0x111/0x260 [ 78.433379][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 78.439275][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 78.444555][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 78.450008][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 78.455922][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 78.461461][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.467257][ T5847] ? synchronize_rcu+0x11b/0x360 [ 78.472234][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 78.477520][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 78.483758][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.489737][ T5847] ? _copy_from_user+0xa6/0xe0 [ 78.494504][ T5847] ? bpf_test_init+0x15a/0x180 [ 78.499276][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 78.504777][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 78.510162][ T5847] ? __pfx_lock_release+0x10/0x10 [ 78.515185][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.520985][ T5847] ? __fget_files+0x29/0x470 [ 78.525567][ T5847] ? fput+0x1a8/0x230 [ 78.529546][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.535372][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 78.540301][ T5847] __sys_bpf+0x48d/0x810 [ 78.544531][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 78.549287][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.555260][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.561582][ T5847] ? do_syscall_64+0x100/0x230 [ 78.566335][ T5847] __x64_sys_bpf+0x7c/0x90 [ 78.570759][ T5847] do_syscall_64+0xf3/0x230 [ 78.575252][ T5847] ? clear_bhb_loop+0x35/0x90 [ 78.579918][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.585811][ T5847] RIP: 0033:0x7f724a97dff9 [ 78.590215][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.610092][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.618491][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 78.626448][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 78.634402][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 78.642357][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.650345][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 78.658306][ T5847] [ 78.661381][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff5 [ 78.668163][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff5 [ 78.676943][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.684099][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 78.692677][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 78.701286][ T5847] page dumped because: page_pool leak [ 78.706713][ T5847] page_owner tracks the page as allocated [ 78.712501][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271723386, free_ts 12509395584 [ 78.729283][ T5847] post_alloc_hook+0x1f3/0x230 [ 78.734104][ T5847] get_page_from_freelist+0x3045/0x3190 [ 78.739668][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 78.744889][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 78.750466][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 78.756391][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 78.761683][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 78.767084][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 78.772459][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 78.777418][ T5847] __sys_bpf+0x48d/0x810 [ 78.781662][ T5847] __x64_sys_bpf+0x7c/0x90 [ 78.786113][ T5847] do_syscall_64+0xf3/0x230 [ 78.790613][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.796534][ T5847] page last free pid 1 tgid 1 stack trace: [ 78.802353][ T5847] free_unref_page+0xcfb/0xf20 [ 78.807144][ T5847] free_contig_range+0x152/0x550 [ 78.812110][ T5847] destroy_args+0x8a/0x840 [ 78.816550][ T5847] debug_vm_pgtable+0x4be/0x550 [ 78.821426][ T5847] do_one_initcall+0x248/0x880 [ 78.826213][ T5847] do_initcall_level+0x157/0x210 [ 78.831155][ T5847] do_initcalls+0x3f/0x80 [ 78.835512][ T5847] kernel_init_freeable+0x435/0x5d0 [ 78.840712][ T5847] kernel_init+0x1d/0x2b0 [ 78.845081][ T5847] ret_from_fork+0x4b/0x80 [ 78.849505][ T5847] ret_from_fork_asm+0x1a/0x30 [ 78.854310][ T5847] Modules linked in: [ 78.858210][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 78.870263][ T5847] Tainted: [B]=BAD_PAGE [ 78.874393][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.884457][ T5847] Call Trace: [ 78.887807][ T5847] [ 78.890722][ T5847] dump_stack_lvl+0x241/0x360 [ 78.895387][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.900566][ T5847] ? __pfx_print_modules+0x10/0x10 [ 78.905665][ T5847] bad_page+0x166/0x1b0 [ 78.909815][ T5847] free_unref_page+0xed0/0xf20 [ 78.914574][ T5847] skb_release_data+0x6dc/0x8a0 [ 78.919432][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 78.924440][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 78.930145][ T5847] ? mark_lock+0x9a/0x360 [ 78.934457][ T5847] ? __lock_acquire+0x1384/0x2050 [ 78.939471][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 78.945559][ T5847] ? mark_lock+0x9a/0x360 [ 78.949870][ T5847] ? __lock_acquire+0x1384/0x2050 [ 78.954896][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 78.960903][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 78.967487][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 78.973985][ T5847] ? read_tsc+0x9/0x20 [ 78.978060][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 78.983339][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 78.989655][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 78.995803][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 79.002118][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.008777][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 79.013971][ T5847] ? __phys_addr+0xba/0x170 [ 79.018565][ T5847] ? build_skb_around+0x111/0x260 [ 79.023573][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 79.029454][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 79.034727][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 79.040193][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 79.046090][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 79.051643][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.057438][ T5847] ? synchronize_rcu+0x11b/0x360 [ 79.062368][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 79.067649][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 79.073884][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.079769][ T5847] ? _copy_from_user+0xa6/0xe0 [ 79.084520][ T5847] ? bpf_test_init+0x15a/0x180 [ 79.089269][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 79.094718][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 79.100081][ T5847] ? __pfx_lock_release+0x10/0x10 [ 79.105095][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.110890][ T5847] ? __fget_files+0x29/0x470 [ 79.115488][ T5847] ? fput+0x1a8/0x230 [ 79.119486][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.125408][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 79.130341][ T5847] __sys_bpf+0x48d/0x810 [ 79.134571][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 79.139322][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.145293][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.151616][ T5847] ? do_syscall_64+0x100/0x230 [ 79.156368][ T5847] __x64_sys_bpf+0x7c/0x90 [ 79.160785][ T5847] do_syscall_64+0xf3/0x230 [ 79.165296][ T5847] ? clear_bhb_loop+0x35/0x90 [ 79.170006][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.175901][ T5847] RIP: 0033:0x7f724a97dff9 [ 79.180324][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.199918][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.208321][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 79.216300][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.224266][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 79.232245][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.240295][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 79.248263][ T5847] [ 79.251358][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff4 [ 79.258173][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff4 [ 79.266973][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.274125][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 79.282710][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 79.291316][ T5847] page dumped because: page_pool leak [ 79.296714][ T5847] page_owner tracks the page as allocated [ 79.302413][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271712109, free_ts 12509391032 [ 79.319205][ T5847] post_alloc_hook+0x1f3/0x230 [ 79.324035][ T5847] get_page_from_freelist+0x3045/0x3190 [ 79.329597][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 79.334830][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 79.340294][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 79.346246][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 79.351467][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 79.356896][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 79.362346][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 79.367339][ T5847] __sys_bpf+0x48d/0x810 [ 79.371611][ T5847] __x64_sys_bpf+0x7c/0x90 [ 79.376107][ T5847] do_syscall_64+0xf3/0x230 [ 79.380626][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.386579][ T5847] page last free pid 1 tgid 1 stack trace: [ 79.392393][ T5847] free_unref_page+0xcfb/0xf20 [ 79.397215][ T5847] free_contig_range+0x152/0x550 [ 79.402170][ T5847] destroy_args+0x8a/0x840 [ 79.406644][ T5847] debug_vm_pgtable+0x4be/0x550 [ 79.411504][ T5847] do_one_initcall+0x248/0x880 [ 79.416408][ T5847] do_initcall_level+0x157/0x210 [ 79.421446][ T5847] do_initcalls+0x3f/0x80 [ 79.425809][ T5847] kernel_init_freeable+0x435/0x5d0 [ 79.431080][ T5847] kernel_init+0x1d/0x2b0 [ 79.435459][ T5847] ret_from_fork+0x4b/0x80 [ 79.439887][ T5847] ret_from_fork_asm+0x1a/0x30 [ 79.444683][ T5847] Modules linked in: [ 79.448580][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 79.460628][ T5847] Tainted: [B]=BAD_PAGE [ 79.464760][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.474828][ T5847] Call Trace: [ 79.478111][ T5847] [ 79.481044][ T5847] dump_stack_lvl+0x241/0x360 [ 79.485710][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.490890][ T5847] ? __pfx_print_modules+0x10/0x10 [ 79.496013][ T5847] bad_page+0x166/0x1b0 [ 79.500159][ T5847] free_unref_page+0xed0/0xf20 [ 79.504923][ T5847] skb_release_data+0x6dc/0x8a0 [ 79.509788][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 79.514802][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 79.520524][ T5847] ? mark_lock+0x9a/0x360 [ 79.524839][ T5847] ? __lock_acquire+0x1384/0x2050 [ 79.529855][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 79.535920][ T5847] ? mark_lock+0x9a/0x360 [ 79.540238][ T5847] ? __lock_acquire+0x1384/0x2050 [ 79.545255][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 79.551221][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 79.557797][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 79.564284][ T5847] ? read_tsc+0x9/0x20 [ 79.568341][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 79.573536][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 79.580028][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 79.586176][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 79.592492][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 79.599257][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 79.604453][ T5847] ? __phys_addr+0xba/0x170 [ 79.608981][ T5847] ? build_skb_around+0x111/0x260 [ 79.613996][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 79.619890][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 79.625161][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 79.630613][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 79.636495][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 79.642027][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 79.647819][ T5847] ? synchronize_rcu+0x11b/0x360 [ 79.652841][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 79.658120][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 79.664351][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.670228][ T5847] ? _copy_from_user+0xa6/0xe0 [ 79.674989][ T5847] ? bpf_test_init+0x15a/0x180 [ 79.679777][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 79.685229][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 79.690594][ T5847] ? __pfx_lock_release+0x10/0x10 [ 79.695614][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.701408][ T5847] ? __fget_files+0x29/0x470 [ 79.705992][ T5847] ? fput+0x1a8/0x230 [ 79.709988][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.715798][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 79.720757][ T5847] __sys_bpf+0x48d/0x810 [ 79.725021][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 79.729897][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.735886][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.742204][ T5847] ? do_syscall_64+0x100/0x230 [ 79.746948][ T5847] __x64_sys_bpf+0x7c/0x90 [ 79.751368][ T5847] do_syscall_64+0xf3/0x230 [ 79.755859][ T5847] ? clear_bhb_loop+0x35/0x90 [ 79.760536][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.766417][ T5847] RIP: 0033:0x7f724a97dff9 [ 79.770814][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.790416][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.798842][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 79.806810][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 79.814769][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 79.822734][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.830709][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 79.838676][ T5847] [ 79.841761][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff3 [ 79.848563][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff3 [ 79.857362][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 79.864621][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 79.873255][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 79.881829][ T5847] page dumped because: page_pool leak [ 79.887229][ T5847] page_owner tracks the page as allocated [ 79.892940][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271701234, free_ts 12509386362 [ 79.909733][ T5847] post_alloc_hook+0x1f3/0x230 [ 79.914550][ T5847] get_page_from_freelist+0x3045/0x3190 [ 79.920108][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 79.925429][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 79.930922][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 79.936942][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 79.942209][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 79.947624][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 79.953090][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 79.958065][ T5847] __sys_bpf+0x48d/0x810 [ 79.962313][ T5847] __x64_sys_bpf+0x7c/0x90 [ 79.966762][ T5847] do_syscall_64+0xf3/0x230 [ 79.971277][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.977221][ T5847] page last free pid 1 tgid 1 stack trace: [ 79.983026][ T5847] free_unref_page+0xcfb/0xf20 [ 79.987824][ T5847] free_contig_range+0x152/0x550 [ 79.992776][ T5847] destroy_args+0x8a/0x840 [ 79.997226][ T5847] debug_vm_pgtable+0x4be/0x550 [ 80.002085][ T5847] do_one_initcall+0x248/0x880 [ 80.006921][ T5847] do_initcall_level+0x157/0x210 [ 80.011884][ T5847] do_initcalls+0x3f/0x80 [ 80.016239][ T5847] kernel_init_freeable+0x435/0x5d0 [ 80.021439][ T5847] kernel_init+0x1d/0x2b0 [ 80.025810][ T5847] ret_from_fork+0x4b/0x80 [ 80.030267][ T5847] ret_from_fork_asm+0x1a/0x30 [ 80.035080][ T5847] Modules linked in: [ 80.038984][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 80.051038][ T5847] Tainted: [B]=BAD_PAGE [ 80.055173][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.065214][ T5847] Call Trace: [ 80.068483][ T5847] [ 80.071410][ T5847] dump_stack_lvl+0x241/0x360 [ 80.076082][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.081275][ T5847] ? __pfx_print_modules+0x10/0x10 [ 80.086392][ T5847] bad_page+0x166/0x1b0 [ 80.090540][ T5847] free_unref_page+0xed0/0xf20 [ 80.095294][ T5847] skb_release_data+0x6dc/0x8a0 [ 80.100131][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 80.105167][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 80.110884][ T5847] ? mark_lock+0x9a/0x360 [ 80.115232][ T5847] ? __lock_acquire+0x1384/0x2050 [ 80.120258][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 80.126324][ T5847] ? mark_lock+0x9a/0x360 [ 80.130669][ T5847] ? __lock_acquire+0x1384/0x2050 [ 80.135691][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 80.141669][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 80.148254][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.154757][ T5847] ? read_tsc+0x9/0x20 [ 80.158906][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 80.164096][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 80.170416][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 80.176562][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 80.182914][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.189582][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 80.194779][ T5847] ? __phys_addr+0xba/0x170 [ 80.199295][ T5847] ? build_skb_around+0x111/0x260 [ 80.204309][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 80.210189][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 80.215470][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 80.220918][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 80.226804][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 80.232341][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.238139][ T5847] ? synchronize_rcu+0x11b/0x360 [ 80.243073][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 80.248386][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 80.254624][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.260513][ T5847] ? _copy_from_user+0xa6/0xe0 [ 80.265267][ T5847] ? bpf_test_init+0x15a/0x180 [ 80.270036][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 80.275492][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 80.280877][ T5847] ? __pfx_lock_release+0x10/0x10 [ 80.285908][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.291721][ T5847] ? __fget_files+0x29/0x470 [ 80.296316][ T5847] ? fput+0x1a8/0x230 [ 80.300290][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.306098][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 80.311052][ T5847] __sys_bpf+0x48d/0x810 [ 80.315302][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 80.320143][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.326119][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.332436][ T5847] ? do_syscall_64+0x100/0x230 [ 80.337202][ T5847] __x64_sys_bpf+0x7c/0x90 [ 80.341605][ T5847] do_syscall_64+0xf3/0x230 [ 80.346121][ T5847] ? clear_bhb_loop+0x35/0x90 [ 80.350786][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.356678][ T5847] RIP: 0033:0x7f724a97dff9 [ 80.361080][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.380681][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.389108][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 80.397098][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.405060][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 80.413015][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.420974][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 80.428937][ T5847] [ 80.432021][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff2 [ 80.438825][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff2 [ 80.447621][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 80.454783][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 80.463396][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 80.471964][ T5847] page dumped because: page_pool leak [ 80.477361][ T5847] page_owner tracks the page as allocated [ 80.483107][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271689682, free_ts 12509381737 [ 80.499911][ T5847] post_alloc_hook+0x1f3/0x230 [ 80.504739][ T5847] get_page_from_freelist+0x3045/0x3190 [ 80.510312][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 80.515545][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 80.521009][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 80.527025][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 80.532243][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 80.537657][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 80.543038][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 80.548008][ T5847] __sys_bpf+0x48d/0x810 [ 80.552283][ T5847] __x64_sys_bpf+0x7c/0x90 [ 80.556915][ T5847] do_syscall_64+0xf3/0x230 [ 80.561443][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.567371][ T5847] page last free pid 1 tgid 1 stack trace: [ 80.573294][ T5847] free_unref_page+0xcfb/0xf20 [ 80.578070][ T5847] free_contig_range+0x152/0x550 [ 80.583006][ T5847] destroy_args+0x8a/0x840 [ 80.587456][ T5847] debug_vm_pgtable+0x4be/0x550 [ 80.592407][ T5847] do_one_initcall+0x248/0x880 [ 80.597210][ T5847] do_initcall_level+0x157/0x210 [ 80.602156][ T5847] do_initcalls+0x3f/0x80 [ 80.606515][ T5847] kernel_init_freeable+0x435/0x5d0 [ 80.611718][ T5847] kernel_init+0x1d/0x2b0 [ 80.616098][ T5847] ret_from_fork+0x4b/0x80 [ 80.620527][ T5847] ret_from_fork_asm+0x1a/0x30 [ 80.625351][ T5847] Modules linked in: [ 80.629250][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 80.641402][ T5847] Tainted: [B]=BAD_PAGE [ 80.645534][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.655575][ T5847] Call Trace: [ 80.658847][ T5847] [ 80.661770][ T5847] dump_stack_lvl+0x241/0x360 [ 80.666432][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.671611][ T5847] ? __pfx_print_modules+0x10/0x10 [ 80.676716][ T5847] bad_page+0x166/0x1b0 [ 80.680868][ T5847] free_unref_page+0xed0/0xf20 [ 80.685631][ T5847] skb_release_data+0x6dc/0x8a0 [ 80.690489][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 80.695497][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 80.701208][ T5847] ? mark_lock+0x9a/0x360 [ 80.705524][ T5847] ? __lock_acquire+0x1384/0x2050 [ 80.710555][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 80.716611][ T5847] ? mark_lock+0x9a/0x360 [ 80.720928][ T5847] ? __lock_acquire+0x1384/0x2050 [ 80.725942][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 80.731909][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 80.738489][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 80.744978][ T5847] ? read_tsc+0x9/0x20 [ 80.749033][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 80.754219][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 80.760531][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 80.766683][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 80.773003][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 80.779664][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 80.784862][ T5847] ? __phys_addr+0xba/0x170 [ 80.789368][ T5847] ? build_skb_around+0x111/0x260 [ 80.794374][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 80.800270][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 80.805571][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 80.811020][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 80.816903][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 80.822463][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 80.828260][ T5847] ? synchronize_rcu+0x11b/0x360 [ 80.833195][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 80.838495][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 80.844751][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 80.850644][ T5847] ? _copy_from_user+0xa6/0xe0 [ 80.855399][ T5847] ? bpf_test_init+0x15a/0x180 [ 80.860153][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 80.865603][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 80.870967][ T5847] ? __pfx_lock_release+0x10/0x10 [ 80.875984][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.881778][ T5847] ? __fget_files+0x29/0x470 [ 80.886360][ T5847] ? fput+0x1a8/0x230 [ 80.890379][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.896521][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 80.901459][ T5847] __sys_bpf+0x48d/0x810 [ 80.905707][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 80.910459][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.916449][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.922772][ T5847] ? do_syscall_64+0x100/0x230 [ 80.927533][ T5847] __x64_sys_bpf+0x7c/0x90 [ 80.932034][ T5847] do_syscall_64+0xf3/0x230 [ 80.936527][ T5847] ? clear_bhb_loop+0x35/0x90 [ 80.941191][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.947104][ T5847] RIP: 0033:0x7f724a97dff9 [ 80.951507][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.971108][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.979530][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 80.987490][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 80.995448][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 81.003502][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.011565][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 81.019620][ T5847] [ 81.022707][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff1 [ 81.029513][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff1 [ 81.038305][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.045452][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 81.054061][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 81.062631][ T5847] page dumped because: page_pool leak [ 81.068028][ T5847] page_owner tracks the page as allocated [ 81.073783][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271678352, free_ts 12509377085 [ 81.090578][ T5847] post_alloc_hook+0x1f3/0x230 [ 81.095465][ T5847] get_page_from_freelist+0x3045/0x3190 [ 81.101037][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 81.106280][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 81.111851][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 81.117780][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 81.123012][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 81.128562][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 81.134007][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 81.138972][ T5847] __sys_bpf+0x48d/0x810 [ 81.143276][ T5847] __x64_sys_bpf+0x7c/0x90 [ 81.147702][ T5847] do_syscall_64+0xf3/0x230 [ 81.152193][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.158124][ T5847] page last free pid 1 tgid 1 stack trace: [ 81.164030][ T5847] free_unref_page+0xcfb/0xf20 [ 81.168793][ T5847] free_contig_range+0x152/0x550 [ 81.173777][ T5847] destroy_args+0x8a/0x840 [ 81.178205][ T5847] debug_vm_pgtable+0x4be/0x550 [ 81.183046][ T5847] do_one_initcall+0x248/0x880 [ 81.187876][ T5847] do_initcall_level+0x157/0x210 [ 81.192850][ T5847] do_initcalls+0x3f/0x80 [ 81.197273][ T5847] kernel_init_freeable+0x435/0x5d0 [ 81.202496][ T5847] kernel_init+0x1d/0x2b0 [ 81.206886][ T5847] ret_from_fork+0x4b/0x80 [ 81.211316][ T5847] ret_from_fork_asm+0x1a/0x30 [ 81.216130][ T5847] Modules linked in: [ 81.220037][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 81.232094][ T5847] Tainted: [B]=BAD_PAGE [ 81.236228][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.246267][ T5847] Call Trace: [ 81.249534][ T5847] [ 81.252447][ T5847] dump_stack_lvl+0x241/0x360 [ 81.257135][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.262319][ T5847] ? __pfx_print_modules+0x10/0x10 [ 81.267419][ T5847] bad_page+0x166/0x1b0 [ 81.271558][ T5847] free_unref_page+0xed0/0xf20 [ 81.276322][ T5847] skb_release_data+0x6dc/0x8a0 [ 81.281165][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 81.286184][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 81.291898][ T5847] ? mark_lock+0x9a/0x360 [ 81.296211][ T5847] ? __lock_acquire+0x1384/0x2050 [ 81.301226][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 81.307287][ T5847] ? mark_lock+0x9a/0x360 [ 81.311609][ T5847] ? __lock_acquire+0x1384/0x2050 [ 81.316634][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 81.322606][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 81.329194][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 81.335698][ T5847] ? read_tsc+0x9/0x20 [ 81.339808][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 81.344992][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 81.351308][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 81.357449][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 81.363775][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 81.370436][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 81.375621][ T5847] ? __phys_addr+0xba/0x170 [ 81.380106][ T5847] ? build_skb_around+0x111/0x260 [ 81.385112][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 81.391085][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 81.396366][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 81.401818][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 81.407708][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 81.413259][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 81.419077][ T5847] ? synchronize_rcu+0x11b/0x360 [ 81.424015][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 81.429311][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 81.435565][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 81.441445][ T5847] ? _copy_from_user+0xa6/0xe0 [ 81.446195][ T5847] ? bpf_test_init+0x15a/0x180 [ 81.450948][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 81.456409][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 81.461941][ T5847] ? __pfx_lock_release+0x10/0x10 [ 81.466957][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.472751][ T5847] ? __fget_files+0x29/0x470 [ 81.477346][ T5847] ? fput+0x1a8/0x230 [ 81.481334][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.487129][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 81.492055][ T5847] __sys_bpf+0x48d/0x810 [ 81.496281][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 81.501034][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.507094][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.513436][ T5847] ? do_syscall_64+0x100/0x230 [ 81.518189][ T5847] __x64_sys_bpf+0x7c/0x90 [ 81.522601][ T5847] do_syscall_64+0xf3/0x230 [ 81.527104][ T5847] ? clear_bhb_loop+0x35/0x90 [ 81.531798][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.537698][ T5847] RIP: 0033:0x7f724a97dff9 [ 81.542102][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.561705][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.570198][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 81.578166][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 81.586139][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 81.594103][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.602154][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 81.610123][ T5847] [ 81.613225][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bff0 [ 81.619998][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bff0 [ 81.628802][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.635981][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 81.644620][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 81.653250][ T5847] page dumped because: page_pool leak [ 81.658620][ T5847] page_owner tracks the page as allocated [ 81.664362][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271666889, free_ts 12509372343 [ 81.681155][ T5847] post_alloc_hook+0x1f3/0x230 [ 81.685977][ T5847] get_page_from_freelist+0x3045/0x3190 [ 81.691554][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 81.696790][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 81.702251][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 81.708267][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 81.713514][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 81.718901][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 81.724327][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 81.729276][ T5847] __sys_bpf+0x48d/0x810 [ 81.733559][ T5847] __x64_sys_bpf+0x7c/0x90 [ 81.737981][ T5847] do_syscall_64+0xf3/0x230 [ 81.742468][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.748392][ T5847] page last free pid 1 tgid 1 stack trace: [ 81.754231][ T5847] free_unref_page+0xcfb/0xf20 [ 81.758990][ T5847] free_contig_range+0x152/0x550 [ 81.763968][ T5847] destroy_args+0x8a/0x840 [ 81.768390][ T5847] debug_vm_pgtable+0x4be/0x550 [ 81.773275][ T5847] do_one_initcall+0x248/0x880 [ 81.778050][ T5847] do_initcall_level+0x157/0x210 [ 81.782979][ T5847] do_initcalls+0x3f/0x80 [ 81.787333][ T5847] kernel_init_freeable+0x435/0x5d0 [ 81.792532][ T5847] kernel_init+0x1d/0x2b0 [ 81.796894][ T5847] ret_from_fork+0x4b/0x80 [ 81.801321][ T5847] ret_from_fork_asm+0x1a/0x30 [ 81.806117][ T5847] Modules linked in: [ 81.810029][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 81.822075][ T5847] Tainted: [B]=BAD_PAGE [ 81.826213][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.836252][ T5847] Call Trace: [ 81.839517][ T5847] [ 81.842434][ T5847] dump_stack_lvl+0x241/0x360 [ 81.847099][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.852280][ T5847] ? __pfx_print_modules+0x10/0x10 [ 81.857382][ T5847] bad_page+0x166/0x1b0 [ 81.861546][ T5847] free_unref_page+0xed0/0xf20 [ 81.866311][ T5847] skb_release_data+0x6dc/0x8a0 [ 81.871158][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 81.876170][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 81.881875][ T5847] ? mark_lock+0x9a/0x360 [ 81.886187][ T5847] ? __lock_acquire+0x1384/0x2050 [ 81.891201][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 81.897255][ T5847] ? mark_lock+0x9a/0x360 [ 81.901587][ T5847] ? __lock_acquire+0x1384/0x2050 [ 81.906603][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 81.912572][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 81.919152][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 81.925661][ T5847] ? read_tsc+0x9/0x20 [ 81.929744][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 81.934933][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 81.941246][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 81.947827][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 81.954162][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 81.960825][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 81.966017][ T5847] ? __phys_addr+0xba/0x170 [ 81.970521][ T5847] ? build_skb_around+0x111/0x260 [ 81.975554][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 81.981441][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 81.986716][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 81.992163][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 81.998042][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 82.003577][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.009370][ T5847] ? synchronize_rcu+0x11b/0x360 [ 82.014303][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 82.019601][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 82.025834][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.031750][ T5847] ? _copy_from_user+0xa6/0xe0 [ 82.036508][ T5847] ? bpf_test_init+0x15a/0x180 [ 82.041279][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 82.046725][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.052084][ T5847] ? __pfx_lock_release+0x10/0x10 [ 82.057100][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.062892][ T5847] ? __fget_files+0x29/0x470 [ 82.067476][ T5847] ? fput+0x1a8/0x230 [ 82.071445][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.077250][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 82.082177][ T5847] __sys_bpf+0x48d/0x810 [ 82.086426][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 82.091188][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.097157][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.103485][ T5847] ? do_syscall_64+0x100/0x230 [ 82.108236][ T5847] __x64_sys_bpf+0x7c/0x90 [ 82.112646][ T5847] do_syscall_64+0xf3/0x230 [ 82.117139][ T5847] ? clear_bhb_loop+0x35/0x90 [ 82.121803][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.127780][ T5847] RIP: 0033:0x7f724a97dff9 [ 82.132268][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.151870][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.160276][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 82.168237][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.176192][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 82.184147][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.192100][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 82.200063][ T5847] [ 82.203138][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bfef [ 82.209953][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bfef [ 82.218759][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.225929][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 82.234578][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 82.243154][ T5847] page dumped because: page_pool leak [ 82.248559][ T5847] page_owner tracks the page as allocated [ 82.254303][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271655515, free_ts 12509367570 [ 82.271105][ T5847] post_alloc_hook+0x1f3/0x230 [ 82.275930][ T5847] get_page_from_freelist+0x3045/0x3190 [ 82.281492][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 82.286745][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 82.292213][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 82.298140][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 82.303396][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 82.308783][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.314190][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 82.319134][ T5847] __sys_bpf+0x48d/0x810 [ 82.323400][ T5847] __x64_sys_bpf+0x7c/0x90 [ 82.327820][ T5847] do_syscall_64+0xf3/0x230 [ 82.332310][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.338247][ T5847] page last free pid 1 tgid 1 stack trace: [ 82.344176][ T5847] free_unref_page+0xcfb/0xf20 [ 82.348949][ T5847] free_contig_range+0x152/0x550 [ 82.353929][ T5847] destroy_args+0x8a/0x840 [ 82.358365][ T5847] debug_vm_pgtable+0x4be/0x550 [ 82.363251][ T5847] do_one_initcall+0x248/0x880 [ 82.368049][ T5847] do_initcall_level+0x157/0x210 [ 82.372973][ T5847] do_initcalls+0x3f/0x80 [ 82.377365][ T5847] kernel_init_freeable+0x435/0x5d0 [ 82.382568][ T5847] kernel_init+0x1d/0x2b0 [ 82.386931][ T5847] ret_from_fork+0x4b/0x80 [ 82.391356][ T5847] ret_from_fork_asm+0x1a/0x30 [ 82.396152][ T5847] Modules linked in: [ 82.400052][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 82.412104][ T5847] Tainted: [B]=BAD_PAGE [ 82.416246][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.426289][ T5847] Call Trace: [ 82.429570][ T5847] [ 82.432495][ T5847] dump_stack_lvl+0x241/0x360 [ 82.437172][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.442377][ T5847] ? __pfx_print_modules+0x10/0x10 [ 82.447480][ T5847] bad_page+0x166/0x1b0 [ 82.451632][ T5847] free_unref_page+0xed0/0xf20 [ 82.456398][ T5847] skb_release_data+0x6dc/0x8a0 [ 82.461257][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 82.466352][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 82.472069][ T5847] ? mark_lock+0x9a/0x360 [ 82.476380][ T5847] ? __lock_acquire+0x1384/0x2050 [ 82.481399][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 82.487540][ T5847] ? mark_lock+0x9a/0x360 [ 82.491854][ T5847] ? __lock_acquire+0x1384/0x2050 [ 82.496869][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 82.502839][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 82.509419][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 82.515915][ T5847] ? read_tsc+0x9/0x20 [ 82.520020][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 82.525240][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.531557][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 82.537725][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 82.544049][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 82.550716][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 82.555915][ T5847] ? __phys_addr+0xba/0x170 [ 82.560446][ T5847] ? build_skb_around+0x111/0x260 [ 82.565459][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 82.571348][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 82.576626][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 82.582076][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 82.587960][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 82.593497][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.599287][ T5847] ? synchronize_rcu+0x11b/0x360 [ 82.604220][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 82.609513][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 82.615747][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.621640][ T5847] ? _copy_from_user+0xa6/0xe0 [ 82.626387][ T5847] ? bpf_test_init+0x15a/0x180 [ 82.631147][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 82.636606][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.642000][ T5847] ? __pfx_lock_release+0x10/0x10 [ 82.647037][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.652843][ T5847] ? __fget_files+0x29/0x470 [ 82.657442][ T5847] ? fput+0x1a8/0x230 [ 82.661416][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.667735][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 82.672665][ T5847] __sys_bpf+0x48d/0x810 [ 82.676898][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 82.681650][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.687672][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.693991][ T5847] ? do_syscall_64+0x100/0x230 [ 82.698756][ T5847] __x64_sys_bpf+0x7c/0x90 [ 82.703254][ T5847] do_syscall_64+0xf3/0x230 [ 82.707759][ T5847] ? clear_bhb_loop+0x35/0x90 [ 82.712425][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.718395][ T5847] RIP: 0033:0x7f724a97dff9 [ 82.722795][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.742388][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.750800][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 82.758961][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 82.766938][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 82.774898][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.782855][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 82.790821][ T5847] [ 82.793916][ T5847] BUG: Bad page state in process syz.1.160 pfn:5bfee [ 82.800677][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bfee [ 82.809470][ T5847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.816656][ T5847] raw: 00fff00000000000 dead000000000040 ffff888061f16000 0000000000000000 [ 82.825314][ T5847] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 82.833935][ T5847] page dumped because: page_pool leak [ 82.839298][ T5847] page_owner tracks the page as allocated [ 82.845062][ T5847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5847, tgid 5840 (syz.1.160), ts 73271644420, free_ts 12509362970 [ 82.861865][ T5847] post_alloc_hook+0x1f3/0x230 [ 82.866670][ T5847] get_page_from_freelist+0x3045/0x3190 [ 82.872226][ T5847] __alloc_pages_noprof+0x256/0x6c0 [ 82.877457][ T5847] alloc_pages_bulk_noprof+0x729/0xd40 [ 82.882925][ T5847] __page_pool_alloc_pages_slow+0x122/0x690 [ 82.888855][ T5847] page_pool_alloc_pages+0xd0/0x1c0 [ 82.894088][ T5847] bpf_test_run_xdp_live+0x950/0x2160 [ 82.899453][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 82.904870][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 82.909820][ T5847] __sys_bpf+0x48d/0x810 [ 82.914107][ T5847] __x64_sys_bpf+0x7c/0x90 [ 82.918711][ T5847] do_syscall_64+0xf3/0x230 [ 82.923249][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.929156][ T5847] page last free pid 1 tgid 1 stack trace: [ 82.934996][ T5847] free_unref_page+0xcfb/0xf20 [ 82.939763][ T5847] free_contig_range+0x152/0x550 [ 82.944726][ T5847] destroy_args+0x8a/0x840 [ 82.949155][ T5847] debug_vm_pgtable+0x4be/0x550 [ 82.954073][ T5847] do_one_initcall+0x248/0x880 [ 82.958852][ T5847] do_initcall_level+0x157/0x210 [ 82.963826][ T5847] do_initcalls+0x3f/0x80 [ 82.968163][ T5847] kernel_init_freeable+0x435/0x5d0 [ 82.973402][ T5847] kernel_init+0x1d/0x2b0 [ 82.977740][ T5847] ret_from_fork+0x4b/0x80 [ 82.982149][ T5847] ret_from_fork_asm+0x1a/0x30 [ 82.986948][ T5847] Modules linked in: [ 82.990849][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.1.160 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 83.002985][ T5847] Tainted: [B]=BAD_PAGE [ 83.007118][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.017159][ T5847] Call Trace: [ 83.020432][ T5847] [ 83.023351][ T5847] dump_stack_lvl+0x241/0x360 [ 83.028039][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.033239][ T5847] ? __pfx_print_modules+0x10/0x10 [ 83.038537][ T5847] bad_page+0x166/0x1b0 [ 83.042680][ T5847] free_unref_page+0xed0/0xf20 [ 83.047440][ T5847] skb_release_data+0x6dc/0x8a0 [ 83.052297][ T5847] sk_skb_reason_drop+0x1c9/0x380 [ 83.057326][ T5847] __netif_receive_skb_core+0x3edd/0x4570 [ 83.063036][ T5847] ? mark_lock+0x9a/0x360 [ 83.067357][ T5847] ? __lock_acquire+0x1384/0x2050 [ 83.072377][ T5847] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 83.078469][ T5847] ? mark_lock+0x9a/0x360 [ 83.082803][ T5847] ? __lock_acquire+0x1384/0x2050 [ 83.087830][ T5847] __netif_receive_skb_list_core+0x2b1/0x980 [ 83.093813][ T5847] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 83.100422][ T5847] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 83.106915][ T5847] ? read_tsc+0x9/0x20 [ 83.110995][ T5847] ? timekeeping_get_ns+0x2c0/0x420 [ 83.116193][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.122513][ T5847] netif_receive_skb_list_internal+0xa51/0xe30 [ 83.128663][ T5847] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 83.134980][ T5847] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 83.141647][ T5847] ? __pfx_eth_type_trans+0x10/0x10 [ 83.147278][ T5847] ? __phys_addr+0xba/0x170 [ 83.151766][ T5847] ? build_skb_around+0x111/0x260 [ 83.156780][ T5847] ? __xdp_build_skb_from_frame+0x338/0x650 [ 83.162669][ T5847] netif_receive_skb_list+0x55/0x4b0 [ 83.167942][ T5847] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 83.173401][ T5847] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 83.179303][ T5847] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 83.184839][ T5847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 83.190633][ T5847] ? synchronize_rcu+0x11b/0x360 [ 83.195574][ T5847] ? __pfx_synchronize_rcu+0x10/0x10 [ 83.200873][ T5847] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 83.207107][ T5847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 83.212988][ T5847] ? _copy_from_user+0xa6/0xe0 [ 83.217741][ T5847] ? bpf_test_init+0x15a/0x180 [ 83.222491][ T5847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 83.227937][ T5847] bpf_prog_test_run_xdp+0x805/0x11e0 [ 83.233324][ T5847] ? __pfx_lock_release+0x10/0x10 [ 83.238356][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.244178][ T5847] ? __fget_files+0x29/0x470 [ 83.248785][ T5847] ? fput+0x1a8/0x230 [ 83.252764][ T5847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 83.258572][ T5847] bpf_prog_test_run+0x2e4/0x360 [ 83.263504][ T5847] __sys_bpf+0x48d/0x810 [ 83.267734][ T5847] ? __pfx___sys_bpf+0x10/0x10 [ 83.272497][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.278471][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.284810][ T5847] ? do_syscall_64+0x100/0x230 [ 83.289564][ T5847] __x64_sys_bpf+0x7c/0x90 [ 83.293974][ T5847] do_syscall_64+0xf3/0x230 [ 83.298480][ T5847] ? clear_bhb_loop+0x35/0x90 [ 83.303163][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.309060][ T5847] RIP: 0033:0x7f724a97dff9 [ 83.313459][ T5847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.333139][ T5847] RSP: 002b:00007f724b732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.341542][ T5847] RAX: ffffffffffffffda RBX: 00007f724ab36058 RCX: 00007f724a97dff9 [ 83.349509][ T5847] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 83.357469][ T5847] RBP: 00007f724a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 83.365430][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.373398][ T5847] R13: 0000000000000000 R14: 00007f724ab36058 R15: 00007ffff3612268 [ 83.381372][ T5847]