last executing test programs: 2.16500109s ago: executing program 1 (id=467): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x398}}, 0x0) 2.138870817s ago: executing program 3 (id=469): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x22020600) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000040)}, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r3, 0xbabc) (async) listen(r3, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003600), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000003740)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003700)={&(0x7f0000003640)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="080026bd7000ffdbdf255d0000000c00990008000000030000000800a500000000004c00a6800a00060008021100000100000a000600ffffffffffff00004a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000800a500010000004000926edf72fd373adc5e60def5faa6800a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600080211000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x8048) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000037c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001b00)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001b00)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001b40)={0x0, @broadcast, @loopback}, &(0x7f0000001b80)=0xc) sendmmsg$inet6(r1, &(0x7f0000003480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xb5b5, @local, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000040)="64ec57393efa163dda0f77b673e74f27150106e2181a89e9a3068094e12bb7d06dda0706f235ad44c9d41c8f55ec410aedf8c32d2bbb5244c97ec1fd20840c2b9910b791075744428f5325b89bda38482156f350d021d7691503dd9e", 0x5c}], 0x2, &(0x7f0000001500)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x80}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x32, 0x1e, '\x00', [@ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xffffffff}, @calipso={0x7, 0x58, {0x1, 0x14, 0x81, 0xfffc, [0xe, 0x2, 0x4, 0x333b0cdd, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7]}}, @generic={0x3, 0x48, "d618741571f78b55615ff86d668cb507054fec1a3fbdb8bb0f6432eb6afcf5a7c3a0068f6cc11a77132487dc67cec8851a3f14cc5f6ab213d1ed0db564a1cd861cc33bc66e32c441"}, @generic={0x2, 0x47, "228f1811cbaae2956a22fc6a0d5cb79d4e1b3b07f29dbddf35f9b943b81936defaba8c36a56e1854b61a7f42a029352b23eb17ee5f19fc28c65eff65660eac56aa94a1d4a1953a"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x84, 0x0, 0x1, 0x8}}}], 0x160}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="0383eb3a5689cbda8ffb957c148a722b426eb0ee44577f08beedd98d6429ddc267dde52a", 0x24}, {&(0x7f0000000380)="2ce25eb1f362e5b5e011a74af95b6a1c0ea1c04aaba9b3b0544d26a3be7b96b7d785c19a8e949923d04de017e33c05603ef147b6e30c303a44e1b537637cc26a23473818681ca545b9f078f64b974865f8e578388827db26e35fb07efd27340e2a06c4895909385fd672e4aadd7dcc54b1573e9af7f33b8bed5b7a0b0655868ec8864127dc3fa4c3b82e88d0122443637b3ef5a1c794844a08f701d4bae148213203750b92375479fc60047eaf94d0442e70db5a197d97c5915c9e04168d6562e62d2b392874df3a464f8d7c10b338c2ae2abe459bba7e3417b8a07f2f5c91cf1cd74b940019dcb91b650e71e3fd84b4872dd3c4", 0xf4}, {&(0x7f0000000140)="aaf6376d07c0a5d65ed64d007d2cb21dc4", 0x11}, {&(0x7f0000001680)="fe3b1d7cdb15044b73b4d100ead771872b52b63fc041bdfe10d2e588ff1816371bb99293878c126091a5f447dd7d8da8d04ec018550d17f0ca485ea93d5961363c30d7660444a4be1b5604a85879726fae50d36bb2f15d84cd1154a21aea4f867090d14d7a0833c1439995eb04a77fc1b29096380dd94ca867d2a87a209ed56260ad4e2b9f02def839b332a004bc259414851a2a934f957db35982a4e97cf362feca62a4e827c27037260a4b7800d8c7", 0xb0}, {&(0x7f0000000180)="af0f59fbd0460d2d4f84d247c140d29caa289eac9c5efe6ab53b8b8afb4fc3334250d47ad5a1da06dd7a9e2415581c7d78ccd70e75", 0x35}, {&(0x7f0000000240)="1296fdd47f4450ddb710eb2c9cec19ca5891ed9760a333e491ed4c3666fda6f2111c2a1d095c54e5b11db0b799865d06bd01bae9c6", 0x35}], 0x6, &(0x7f00000017c0)=[@rthdr={{0x58, 0x29, 0x39, {0x53, 0x8, 0x1, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, @remote]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x11, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3c, 0x5, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x50, 0x5, [0x2, 0x7, 0x9]}}, @pad1, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x65, 0x20, '\x00', [@pad1, @generic={0x2, 0xfe, "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"}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x2, 0x5, 0x0, [@local]}}}], 0x228}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @private0, 0x4}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001a00)="f82d51a81988ab3ea8ea93fe28e0289e9ae6540c7c751fd949cdd9d49ec332de4ec76e408341128b41afe7bed6996488307ce1500d94e2b9356230afcb6e13dbc1e524b7d76ef926c0b8e267075d4c52dd7cda1d10d83b1e56d8f9ceb38573b114d6c7b71c141f26d0ee0492555ec22607e31137d766867349c8f40a3026e4cdda504cd5121e10426960106fb18a673002c89930b973114180e17ac0cc033ebcb3443e204d20b029adc8ba0e119ef034eec69ddf3e02a4ab92302287916e8aa4", 0xc0}], 0x1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=r6, @ANYBLOB="00000000a80000000000000029000000390000003212000d000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001fc020000000000000000000000000001fc00000000000000000000000000000000000000000000000000ffff64010102fe8000000000000000000000000000bb00000000000000000000000000000001fe8000000000000000000000000000131400000000000000290000003e000000000000000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=r7, @ANYBLOB="000000002000000000000000690000003600000008000000000000000101000000000000140000000000000029000000340000000d0000000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000280000000000000029000000390000000002020200000000000000000000000000000000000000011400000000000000290000000b0000000000000500000000"], 0x1b0}}, {{&(0x7f0000001d80)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001dc0)="56c12e7ee40d87aa99ec4217165d3753908162bf2b44f5c9bc6583a33d9ad518aa88c0170f904a379666fa4f4c16393ce3b5054b3e75f557df0a615aa15ac0d9c8f38095e81989b1ea9b59ba7f093cbd1587cd5a8eba9815789d9e68f317ee3aa8e817dd904b6d8eb754dc52aeaf810b5f98ed37a5d6c826e6a2430d6a7c8056d077eb0ad8cfd1d99f4547282a4e31b1f11cb58c9437900f71fd8591ac9093a33a5aa5cfe4ce0386bd946d6e92146501021d92ec2f1a411145036cd4f95c3960994e64383a1bb0efe49f69f0048c4dd92c7e9fb0cc5097a615e089fa47f208575d828e21c06a9f19df80dbb3ba112728f5", 0xf1}, {&(0x7f0000001ec0)="ffc96577c36bd91f8159dd9e16b6d0cb38dacb25a723d1e81e", 0x19}, {&(0x7f0000001f00)="c7ef25b7ae61efd8b72dcffc4c798ee61fff943d801169ada02b5eaa64f57d3d1f08d513f48c6a68476fa118a5250f08ef6829b760143dac73f429882a905e522f27b5a79ccc2bc0895122cd0347fe47ee3c6b9b34df066d2797ade0d154285deb335048e059e49d472a651ed28f2a42d862d7a9ebe914e97406536dbb33378f686f6720f9", 0x85}, {&(0x7f0000001fc0)="17a2e9f2ba5a70b9435fa759b59437107c8dbbaa199203fa3c33d30ea6406f4cdf921d8bf6ad26efceef46377e043d693e52a9cc48b100037524781ed1b35f81f1ecb981d8bb258529b127d2b1edd54942884cdd6cb29c265fe9f25e31a0d2e7224e61ff4c5730d707cacb46da1378898a1a16a281135429d2da787379768d85306bc34c954b1287e9ee9b12a0457666f1fe0c6bf26228115d80c6d28bf2d661de153d863e8ec2b9b29a6db82460d361", 0xb0}, {&(0x7f0000002080)="2e1c6e9d02a7dd523c1445381f6bd0d1f7bef181b5135ea59ab42476c4adcc68382b3b9b8fc850fb97e02aa9c3d3aa3bea7ba76cd2e6ac4a60d82b907b03427ab2340ccb0df7deae151fe040f4f4d560f4c77b0c0082e804503a8251584c715d69fcf717864011ba36134daab0ad1bf5aec208ccace35411645913cf26a1bce4cb3a78b98587bb26eb0d462b230b81601349c907d07a602f51eea28dffc63914e3d00a6d16a1de", 0xa7}, {&(0x7f0000002140)="42fc4746c719f96d0055", 0xa}, {&(0x7f0000002180)="b9d62c3427", 0x5}], 0x7}}, {{&(0x7f0000002240)={0xa, 0x4e24, 0xffffffff, @mcast2, 0x8}, 0x1c, &(0x7f0000002280)}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000022c0)="5cc8d8e3243e06899f686338ec8b477bf8535dfaba8694eba2863c2b0cb6e2bac9f89865b6b8d74fb46d818ad897ccfcad2887f90cb4b878a88b16e06bdf423cb8f075db7648a5391554fba4fd2ef27dc8b5b1ba21ba8e5c8d7ca849d84aee3255a0e0f8e48cdabbc03fec4393d8eaa55a1fd74415bb7621960f295c8db3e81e5e8a8526ce3c273890a11c6543dba96f3e61b1fb3e05c2acadef", 0x9a}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="9186dc65f9382e48ab6f19f4eed87ef07da85d152953892c559ba6dec3c2b4a3cafa8a6181478affb2e577eb82ff675a5f55c6808db234041c4c4770ed1dbdd519b652593cb4016f62f1e20f03cc24b8ae3fa0796ec29f5ee8394b3a64eeb9f73d", 0x61}], 0x3, &(0x7f0000003440)=[@hoplimit={{0x14, 0x29, 0x34, 0xd}}], 0x18}}], 0x6, 0x40050) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000003780)=@req={0x0, 0xc, 0x1, 0x7}, 0x10) 1.954349284s ago: executing program 1 (id=471): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r7, 0x0, r10}, 0x10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000100)={0x0, 0x95, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x62, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040840) 1.930167918s ago: executing program 3 (id=472): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) (async) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003b0007010000000020000000047c000004000000140003"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b242b263222086e16a3330100", @ANYRES32=r4], 0x20}}, 0x0) 1.864853629s ago: executing program 0 (id=473): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.759836288s ago: executing program 0 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x0, 0x400, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004080}, 0x20044004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) unshare(0x68040200) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) sendmsg$xdp(r9, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x7, r11, 0x35}, 0x10, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x40000}, 0x4c094) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x10, 0x1400, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x95) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r12, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 1.714788805s ago: executing program 3 (id=476): socket$kcm(0xa, 0x3, 0x3a) (async) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3f}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x700}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3f}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x700}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020400030e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a0000"], 0x70}}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020400030e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a0000"], 0x70}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4082, 0xff2}], 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) 1.663127345s ago: executing program 1 (id=478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x8010, r1, 0x782b5000) socket$inet6(0xa, 0x5, 0x1) 1.522205472s ago: executing program 3 (id=480): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x4000, @loopback, 0x8}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400), 0x4) 1.447888503s ago: executing program 4 (id=481): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x398}}, 0x0) 1.157273862s ago: executing program 4 (id=482): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t\x00', @ANYRES32=r0], 0x1000f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000006de31e8d1e208c7aca00"/37], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) 1.05478436s ago: executing program 2 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@ipv6_newroute={0x3c, 0x18, 0xe19, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001600)=ANY=[]) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@updsa={0x144, 0x1a, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0xff97, 0x2}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'crct10dif\x00'}, 0x0, 0xa0}}, @tfcpad={0x8, 0x16, 0x800}]}, 0x144}}, 0x2004c804) (async) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0x6}}}, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="24d3a624e78120803ea4824bf10145a3e5e9f0acae9f704b0f6294089653e32f5e2718f576be18c081b2f5c9eb5d05ef2752baf36a2c9c53a88853cee9955d0299ad8f52ec6e08ce7611ecf4f74c314b4c3a", @ANYRES16=0x0, @ANYBLOB="070600000000000000003000000008000200", @ANYRES32=r7, @ANYBLOB="0500330002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000844}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n'], 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000085c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x48}, {0x2, 0x3, 0x6}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r14, @ANYBLOB="01000000000000000000030000001400018006000100020000000800030000000000"], 0x28}}, 0x24) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 990.580652ms ago: executing program 4 (id=484): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008000000000000000ad00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000002300008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x0, '\x00', r4, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x310, 0x0, 0x3e0, 0x1b0, 0x310, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @empty, [], [], [0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffdd1) sendto$inet6(r5, &(0x7f0000000200)="77e98ef7e4569f2961ab4fe4e763e5730a5d4e2662bec742fb007f2637fa2be66f50a7d66f7f950ffe998d", 0x2b, 0x40, &(0x7f0000000440)={0xa, 0x4e20, 0x8, @loopback, 0xfb6}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400), 0x4) 800.838581ms ago: executing program 2 (id=485): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r0, 0x1, 0x70bd27, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "17329e8944881e241f4d605a6b0998e0"}]}, 0x48}}, 0x48040) 777.126917ms ago: executing program 0 (id=486): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010100}, 0x2, 0x4, 0x2, 0x3}}, 0x80, 0x0}, 0x20000001) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000100)=0xffff, 0x4) 606.768552ms ago: executing program 2 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000ffffffffffffff0000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074022fa003108000640"], 0xe0}}, 0x0) 606.284877ms ago: executing program 4 (id=488): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r7, 0x0, r10}, 0x10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000100)={0x0, 0x95, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x62, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040840) 604.546131ms ago: executing program 1 (id=489): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x4e21, @multicast2}}, 0x1}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 534.629971ms ago: executing program 0 (id=490): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x81, 0x1f, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000}, 0x8000, 0x0, 0x8000, 0x3}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001cc0)={0x1, 'veth1_macvtap\x00'}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000002140)=0x30) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e23, @rand_addr=0xfffffc13}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0xf9, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@ipv6_newroute={0x38, 0x18, 0x20, 0x70bd2c, 0x25dfdbfe, {0xa, 0xb0, 0xe07353530efdd973, 0xc, 0xfe, 0x0, 0x0, 0x1, 0x1800}, [@RTA_UID={0x8, 0x19, r6}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x2, 0x3, r4}}, @RTA_UID={0x8, 0x19, r8}]}, 0x38}}, 0x0) 500.270081ms ago: executing program 2 (id=491): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000114000980100002800c00", @ANYRESOCT=r0], 0x98}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private=0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2da59e1e198767aa}, {0x4}, {0x0, 0x0, 0x80000001}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 414.791976ms ago: executing program 3 (id=492): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) 342.054275ms ago: executing program 1 (id=493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="df4800000000000000000c0000002c0003802800038069f460340800010002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000340)="86", 0x1}], 0x1, 0xfffffffd, 0x0) 335.451051ms ago: executing program 0 (id=494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) 266.802327ms ago: executing program 3 (id=495): r0 = socket(0x1d, 0x2, 0x7) getsockname$packet(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000140)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000640)=ANY=[], 0x30}, 0x20000014) sendto$packet(r2, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c800) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x6) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 266.378252ms ago: executing program 2 (id=496): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff000000000000000105000000100000000000000000000004"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES64=r7], 0x40}}, 0x0) 242.636281ms ago: executing program 4 (id=497): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2da59e1e198767aa}, {0x4}, {0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x200000000000000}, 0x0) 166.409313ms ago: executing program 0 (id=498): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x3, 0xfffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00'}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) 98.749764ms ago: executing program 1 (id=499): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x8010, r1, 0x782b5000) socket$inet6(0xa, 0x5, 0x1) 70.954762ms ago: executing program 4 (id=500): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x7, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r2, &(0x7f0000000200), &(0x7f0000000ec0)=""/99}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x4, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x400000000000282, 0x0) 0s ago: executing program 2 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000110000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074022fa003108000640"], 0xe0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 50.810601][ T5219] cgroup: Unknown subsys name 'net' [ 50.919856][ T5219] cgroup: Unknown subsys name 'cpuset' [ 50.927529][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.224183][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.125367][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.134219][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.142035][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.150029][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.157673][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.165025][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.293154][ T4625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.305917][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.314302][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.323745][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.331032][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.352996][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.380274][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.383025][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.390190][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.398463][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.408632][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.411120][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.416425][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.429390][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.434138][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.444689][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.452060][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.459738][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.460405][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.477017][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.480117][ T4625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.502738][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.510296][ T4625] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.529446][ T4625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.618856][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 54.734919][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.742039][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.749790][ T5229] bridge_slave_0: entered allmulticast mode [ 54.756567][ T5229] bridge_slave_0: entered promiscuous mode [ 54.767023][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.774245][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.781330][ T5229] bridge_slave_1: entered allmulticast mode [ 54.788385][ T5229] bridge_slave_1: entered promiscuous mode [ 54.833578][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.859728][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.910105][ T5229] team0: Port device team_slave_0 added [ 54.931836][ T5229] team0: Port device team_slave_1 added [ 55.012692][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.020071][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.046192][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.078685][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.086452][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.113254][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.148148][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 55.210588][ T5229] hsr_slave_0: entered promiscuous mode [ 55.217276][ T5229] hsr_slave_1: entered promiscuous mode [ 55.242362][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 55.252674][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 55.314607][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 55.420821][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.428176][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.436204][ T5232] bridge_slave_0: entered allmulticast mode [ 55.442668][ T5232] bridge_slave_0: entered promiscuous mode [ 55.450160][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.457487][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.464918][ T5232] bridge_slave_1: entered allmulticast mode [ 55.471408][ T5232] bridge_slave_1: entered promiscuous mode [ 55.551200][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.558388][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.565960][ T5241] bridge_slave_0: entered allmulticast mode [ 55.572427][ T5241] bridge_slave_0: entered promiscuous mode [ 55.579295][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.589672][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.597053][ T5233] bridge_slave_0: entered allmulticast mode [ 55.604818][ T5233] bridge_slave_0: entered promiscuous mode [ 55.611836][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.619161][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.626554][ T5233] bridge_slave_1: entered allmulticast mode [ 55.633539][ T5233] bridge_slave_1: entered promiscuous mode [ 55.640425][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.647591][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.655515][ T5235] bridge_slave_0: entered allmulticast mode [ 55.661996][ T5235] bridge_slave_0: entered promiscuous mode [ 55.670675][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.686961][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.694134][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.701239][ T5241] bridge_slave_1: entered allmulticast mode [ 55.708082][ T5241] bridge_slave_1: entered promiscuous mode [ 55.741852][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.748975][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.756469][ T5235] bridge_slave_1: entered allmulticast mode [ 55.763114][ T5235] bridge_slave_1: entered promiscuous mode [ 55.771279][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.803235][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.844425][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.865723][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.878061][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.890100][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.901763][ T5232] team0: Port device team_slave_0 added [ 55.909640][ T5232] team0: Port device team_slave_1 added [ 55.937037][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.970780][ T5241] team0: Port device team_slave_0 added [ 55.979188][ T5233] team0: Port device team_slave_0 added [ 56.008824][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.015906][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.041920][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.055370][ T5241] team0: Port device team_slave_1 added [ 56.061602][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.068654][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.094699][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.107713][ T5233] team0: Port device team_slave_1 added [ 56.119581][ T5235] team0: Port device team_slave_0 added [ 56.127335][ T5235] team0: Port device team_slave_1 added [ 56.193540][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.200499][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.213847][ T4625] Bluetooth: hci0: command tx timeout [ 56.232463][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.247115][ T5229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.256627][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.266558][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.294173][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.305778][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.312728][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.339444][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.359165][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.366224][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.392667][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.404044][ T5229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.413402][ T5229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.422000][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.429293][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.455278][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.467058][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.474392][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.500557][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.516507][ T5232] hsr_slave_0: entered promiscuous mode [ 56.522611][ T5232] hsr_slave_1: entered promiscuous mode [ 56.529007][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.535120][ T4625] Bluetooth: hci3: command tx timeout [ 56.536754][ T5240] Bluetooth: hci1: command tx timeout [ 56.542329][ T5232] Cannot create hsr debugfs directory [ 56.566073][ T5229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.613275][ T5240] Bluetooth: hci2: command tx timeout [ 56.613826][ T4625] Bluetooth: hci4: command tx timeout [ 56.654323][ T5233] hsr_slave_0: entered promiscuous mode [ 56.660433][ T5233] hsr_slave_1: entered promiscuous mode [ 56.666847][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.675064][ T5233] Cannot create hsr debugfs directory [ 56.739076][ T5241] hsr_slave_0: entered promiscuous mode [ 56.746050][ T5241] hsr_slave_1: entered promiscuous mode [ 56.752161][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.760591][ T5241] Cannot create hsr debugfs directory [ 56.778456][ T5235] hsr_slave_0: entered promiscuous mode [ 56.785181][ T5235] hsr_slave_1: entered promiscuous mode [ 56.791070][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.799073][ T5235] Cannot create hsr debugfs directory [ 56.940674][ T5232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.952378][ T5232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.990858][ T5232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.999577][ T5232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.127656][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.174379][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.181180][ T5235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.192197][ T5235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.213280][ T5235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.228212][ T5235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.244601][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.251806][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.275026][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.282185][ T3873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.318355][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.337857][ T5233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.353910][ T5233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.379288][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.401565][ T5233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.421597][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.428728][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.449378][ T5233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.474086][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.501468][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.508564][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.529016][ T5241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.547757][ T5241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.588092][ T5241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.606162][ T5241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.687449][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.763818][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.777821][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.800020][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.807198][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.819362][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.826521][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.951993][ T5229] veth0_vlan: entered promiscuous mode [ 57.989900][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.000022][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.025363][ T5229] veth1_vlan: entered promiscuous mode [ 58.040764][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.071275][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.097823][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.110756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.117907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.141705][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.148852][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.182008][ T5229] veth0_macvtap: entered promiscuous mode [ 58.197143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.204301][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.225545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.232672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.275332][ T5229] veth1_macvtap: entered promiscuous mode [ 58.295952][ T4625] Bluetooth: hci0: command tx timeout [ 58.319457][ T5232] veth0_vlan: entered promiscuous mode [ 58.331518][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.367500][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.388299][ T5232] veth1_vlan: entered promiscuous mode [ 58.399359][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.440429][ T5241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.459482][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.486509][ T5229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.497873][ T5229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.510342][ T5229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.520012][ T5229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.602345][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.614032][ T4625] Bluetooth: hci1: command tx timeout [ 58.615532][ T5240] Bluetooth: hci3: command tx timeout [ 58.630677][ T5235] veth0_vlan: entered promiscuous mode [ 58.649322][ T5235] veth1_vlan: entered promiscuous mode [ 58.659283][ T5232] veth0_macvtap: entered promiscuous mode [ 58.693113][ T5240] Bluetooth: hci2: command tx timeout [ 58.693872][ T4625] Bluetooth: hci4: command tx timeout [ 58.724817][ T5232] veth1_macvtap: entered promiscuous mode [ 58.749570][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.750548][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.771059][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.785410][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.804352][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.836466][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.849784][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.861370][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.875033][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.886415][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.896846][ T5235] veth0_macvtap: entered promiscuous mode [ 58.930243][ T5235] veth1_macvtap: entered promiscuous mode [ 58.950245][ T5232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.959990][ T5232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.968065][ T5229] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.970228][ T5232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.992534][ T5232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.012494][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.030189][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.041603][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.062864][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.076481][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.121130][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.136391][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.150330][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.162438][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.180455][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.202242][ T5311] bridge_slave_0: left allmulticast mode [ 59.208329][ T5311] bridge_slave_0: left promiscuous mode [ 59.218160][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.230279][ T5311] bridge_slave_1: left allmulticast mode [ 59.239610][ T5311] bridge_slave_1: left promiscuous mode [ 59.246175][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.258413][ T5311] bond0: (slave bond_slave_0): Releasing backup interface [ 59.272010][ T5311] bond0: (slave bond_slave_1): Releasing backup interface [ 59.290975][ T5311] team0: Port device team_slave_0 removed [ 59.300031][ T5311] team0: Port device team_slave_1 removed [ 59.306471][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.314815][ T5311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.326200][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.335170][ T5311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.366295][ T5235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.379962][ T5235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.391924][ T5235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.403481][ T5235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.417926][ T5312] wg2: entered promiscuous mode [ 59.432061][ T5312] team0: Port device wg2 added [ 59.439028][ T5313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.529854][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.577398][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.593593][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.614729][ T5233] veth0_vlan: entered promiscuous mode [ 59.654857][ T3873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.657490][ T5233] veth1_vlan: entered promiscuous mode [ 59.673176][ T3873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.740736][ T5241] veth0_vlan: entered promiscuous mode [ 59.780554][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.792202][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.805706][ T5233] veth0_macvtap: entered promiscuous mode [ 59.820664][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.829490][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.838778][ T5241] veth1_vlan: entered promiscuous mode [ 59.943466][ T5233] veth1_macvtap: entered promiscuous mode [ 60.036170][ T5324] team0: Port device wg2 removed [ 60.081763][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.101180][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.111939][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.129901][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.149694][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.168986][ T5326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.184264][ T5324] team0: Port device wg2 added [ 60.226225][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.244546][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.254996][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.265885][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.278507][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.312687][ T5233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.329614][ T5233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.339837][ T5233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.349491][ T5233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.373162][ T4625] Bluetooth: hci0: command tx timeout [ 60.388448][ T5324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 60.418211][ T5332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.424120][ T5241] veth0_macvtap: entered promiscuous mode [ 60.483905][ T5241] veth1_macvtap: entered promiscuous mode [ 60.693324][ T4625] Bluetooth: hci1: command tx timeout [ 60.693932][ T5231] Bluetooth: hci3: command tx timeout [ 60.719132][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.773625][ T5231] Bluetooth: hci2: command tx timeout [ 60.778808][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.779057][ T5240] Bluetooth: hci4: command tx timeout [ 60.790867][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.813706][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.826582][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.838485][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.854383][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.914396][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.922271][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.934817][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.954812][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.974279][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.999283][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.019753][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.037631][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.045027][ T5352] x_tables: ip_tables: udp match: only valid for protocol 17 [ 61.048936][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.138789][ T5241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.139168][ T5352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 61.163206][ T5241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.171929][ T5241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.181242][ T5241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.213566][ T5352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'. [ 61.222386][ T5352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 61.235190][ T733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.249357][ T733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.259293][ T5355] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 61.291117][ T5352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 61.316901][ T5359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.358565][ T5359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.503997][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.520214][ T5361] raw_sendmsg: syz.4.5 forgot to set AF_INET. Fix it! [ 61.531369][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.631926][ T5363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 61.750212][ T5372] SET target dimension over the limit! [ 61.866997][ T3873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.868213][ T5371] tipc: Started in network mode [ 61.880630][ T3873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.932940][ T5371] tipc: Node identity 41be, cluster identity 4711 [ 61.939819][ T5371] tipc: Node number set to 16830 [ 61.957160][ T5371] tipc: Cannot configure node identity twice [ 62.085425][ T5374] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 62.149844][ T5374] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 62.443008][ T5381] bridge_slave_0: left allmulticast mode [ 62.448814][ T5381] bridge_slave_0: left promiscuous mode [ 62.455620][ T5240] Bluetooth: hci0: command tx timeout [ 62.461378][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.478125][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 62.491838][ T5381] bridge_slave_1: left allmulticast mode [ 62.498256][ T5381] bridge_slave_1: left promiscuous mode [ 62.504264][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.517250][ T5381] bond0: (slave bond_slave_0): Releasing backup interface [ 62.540536][ T5381] bond0: (slave bond_slave_1): Releasing backup interface [ 62.569112][ T5381] team0: Port device team_slave_0 removed [ 62.580374][ T5381] team0: Port device team_slave_1 removed [ 62.589834][ T5381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.598948][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.609104][ T5381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.617564][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.638086][ T5386] wg2: entered promiscuous mode [ 62.672385][ T5386] team0: Port device wg2 added [ 62.705935][ T5392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.749426][ T5391] bridge_slave_0: left allmulticast mode [ 62.755529][ T5391] bridge_slave_0: left promiscuous mode [ 62.761274][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.773583][ T5240] Bluetooth: hci1: command tx timeout [ 62.780625][ T5391] bridge_slave_1: left allmulticast mode [ 62.783922][ T5240] Bluetooth: hci3: command tx timeout [ 62.787016][ T5391] bridge_slave_1: left promiscuous mode [ 62.804892][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.822366][ T5391] bond0: (slave bond_slave_0): Releasing backup interface [ 62.838526][ T5391] bond0: (slave bond_slave_1): Releasing backup interface [ 62.853775][ T5231] Bluetooth: hci2: command tx timeout [ 62.859382][ T5240] Bluetooth: hci4: command tx timeout [ 62.867761][ T5391] team0: Port device team_slave_0 removed [ 62.882457][ T5391] team0: Port device team_slave_1 removed [ 62.888976][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.900187][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.908991][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.920643][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.088613][ T5396] wg2: entered promiscuous mode [ 63.127236][ T5396] team0: Port device wg2 added [ 63.137264][ T5397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 63.167977][ T5401] bridge_slave_0: left allmulticast mode [ 63.175188][ T5401] bridge_slave_0: left promiscuous mode [ 63.186941][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.224459][ T5401] bridge_slave_1: left allmulticast mode [ 63.230980][ T5401] bridge_slave_1: left promiscuous mode [ 63.237598][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.258204][ T5409] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 63.272109][ T5401] bond0: (slave bond_slave_0): Releasing backup interface [ 63.305246][ T5401] bond0: (slave bond_slave_1): Releasing backup interface [ 63.346159][ T5401] team0: Port device team_slave_0 removed [ 63.367255][ T5401] team0: Port device team_slave_1 removed [ 63.374872][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.383728][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.393985][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.401574][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.431312][ T5402] wg2: entered promiscuous mode [ 63.478219][ T5402] team0: Port device wg2 added [ 63.751753][ T5417] bridge_slave_0: left allmulticast mode [ 63.769354][ T5417] bridge_slave_0: left promiscuous mode [ 63.782513][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.805435][ T5417] bridge_slave_1: left allmulticast mode [ 63.811214][ T5417] bridge_slave_1: left promiscuous mode [ 63.819222][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.830697][ T5417] bond0: (slave bond_slave_0): Releasing backup interface [ 63.845804][ T5417] bond0: (slave bond_slave_1): Releasing backup interface [ 63.878835][ T5417] team0: Port device team_slave_0 removed [ 63.902566][ T5417] team0: Port device team_slave_1 removed [ 63.909112][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.917318][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.927144][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.935160][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.959547][ T5419] wg2: entered promiscuous mode [ 63.989684][ T5419] team0: Port device wg2 added [ 64.332252][ T5429] Cannot find add_set index 0 as target [ 64.398716][ T5430] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 64.605692][ T5438] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 64.612111][ T5433] team0: Port device wg2 removed [ 64.685577][ T5437] team0: Port device wg2 added [ 64.796991][ T5442] __nla_validate_parse: 2 callbacks suppressed [ 64.797010][ T5442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 64.936900][ T5452] hsr0: entered promiscuous mode [ 65.071059][ T5448] netlink: 112 bytes leftover after parsing attributes in process `syz.3.39'. [ 65.115103][ T5454] team0: Port device wg2 removed [ 65.159168][ T5461] team0: Port device wg2 added [ 65.201947][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 65.859580][ T5492] warning: `syz.1.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.382216][ T5512] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 66.611475][ T5525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.710269][ T5524] team0: Port device wg2 removed [ 66.766220][ T5529] team0: Port device wg2 added [ 66.824322][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.64'. [ 66.884904][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 66.912261][ T5541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 67.544691][ T5572] netlink: 'syz.2.82': attribute type 10 has an invalid length. [ 67.654898][ T5572] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 67.657685][ T5575] xt_hashlimit: max too large, truncated to 1048576 [ 67.684381][ T5575] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 67.880064][ T5583] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.152204][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 68.166515][ T5599] netlink: 71 bytes leftover after parsing attributes in process `syz.3.96'. [ 68.178184][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 68.188618][ T5599] netlink: 71 bytes leftover after parsing attributes in process `syz.3.96'. [ 68.200549][ T5599] Zero length message leads to an empty skb [ 68.546712][ T5616] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 69.091859][ T5629] team0: Port device wg2 removed [ 69.131581][ T5633] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 69.146580][ T5634] team0: Port device wg2 added [ 69.936639][ T5673] __nla_validate_parse: 8 callbacks suppressed [ 69.936657][ T5673] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.121'. [ 69.955280][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 69.976273][ T5675] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 70.035318][ T5675] syz.3.122 (5675) used greatest stack depth: 18160 bytes left [ 70.144054][ T5679] team0: Port device wg2 removed [ 70.190032][ T5682] team0: Port device wg2 added [ 70.267156][ T5679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.124'. [ 70.757909][ T5712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.188866][ T5736] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 71.309571][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 71.322946][ T5741] batadv0: default FDB implementation only supports local addresses [ 71.406442][ T5747] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 71.503709][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.510094][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.649391][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 71.667208][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 71.842692][ T5764] netlink: 156 bytes leftover after parsing attributes in process `syz.1.154'. [ 71.993008][ T5772] netlink: 'syz.3.157': attribute type 2 has an invalid length. [ 72.063113][ T5769] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 72.347917][ T5782] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 72.691905][ T5797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 72.731168][ T5797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 72.788396][ T5797] netlink: 'syz.2.164': attribute type 4 has an invalid length. [ 72.915208][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 73.062286][ T5825] ip6gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 73.236250][ T5831] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 74.052599][ T5874] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 74.083773][ T5874] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 74.137741][ T5877] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 74.349165][ T5884] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 75.012537][ T5923] __nla_validate_parse: 5 callbacks suppressed [ 75.012555][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 75.484801][ T5941] FAULT_INJECTION: forcing a failure. [ 75.484801][ T5941] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.498694][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.4.206 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 75.509335][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.519429][ T5941] Call Trace: [ 75.522740][ T5941] [ 75.525685][ T5941] dump_stack_lvl+0x241/0x360 [ 75.530404][ T5941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.535632][ T5941] ? __pfx__printk+0x10/0x10 [ 75.540261][ T5941] ? __pfx_lock_release+0x10/0x10 [ 75.545369][ T5941] should_fail_ex+0x3b0/0x4e0 [ 75.550074][ T5941] _copy_from_user+0x2f/0xe0 [ 75.554684][ T5941] copy_msghdr_from_user+0xae/0x680 [ 75.559913][ T5941] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 75.565766][ T5941] __sys_sendmsg+0x22d/0x380 [ 75.570393][ T5941] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.575538][ T5941] ? __pfx_vfs_write+0x10/0x10 [ 75.580348][ T5941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.586700][ T5941] ? do_syscall_64+0x100/0x230 [ 75.591490][ T5941] ? do_syscall_64+0xb6/0x230 [ 75.596191][ T5941] do_syscall_64+0xf3/0x230 [ 75.600717][ T5941] ? clear_bhb_loop+0x35/0x90 [ 75.600932][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 75.605402][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.605438][ T5941] RIP: 0033:0x7fef9a17dff9 [ 75.605460][ T5941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.605474][ T5941] RSP: 002b:00007fef9b05c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.605496][ T5941] RAX: ffffffffffffffda RBX: 00007fef9a335f80 RCX: 00007fef9a17dff9 [ 75.605509][ T5941] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 75.605521][ T5941] RBP: 00007fef9b05c090 R08: 0000000000000000 R09: 0000000000000000 [ 75.605533][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.605543][ T5941] R13: 0000000000000000 R14: 00007fef9a335f80 R15: 00007ffdc8daa138 [ 75.605570][ T5941] [ 76.000515][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 76.021082][ T5959] netlink: 'syz.3.213': attribute type 2 has an invalid length. [ 76.348837][ T5969] netlink: 68 bytes leftover after parsing attributes in process `syz.2.215'. [ 76.359291][ T5969] netlink: 68 bytes leftover after parsing attributes in process `syz.2.215'. [ 76.373693][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.218'. [ 76.410926][ T5978] Bluetooth: MGMT ver 1.23 [ 76.638324][ T941] cfg80211: failed to load regulatory.db [ 76.830863][ T5998] netlink: 'syz.4.227': attribute type 2 has an invalid length. [ 77.033171][ T6006] team0: Port device wg2 removed [ 77.064122][ T6013] ebt_among: src integrity fail: 100 [ 77.104296][ T6006] bond0: (slave wlan1): Releasing backup interface [ 77.141466][ T6009] team0: Port device wg2 added [ 77.151899][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 77.191450][ T6017] team0: Port device wg2 removed [ 77.249310][ T6018] team0: Port device wg2 added [ 77.273267][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'. [ 77.522022][ T5824] tipc: Subscription rejected, illegal request [ 77.605036][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 77.691366][ T6037] netlink: 'syz.4.240': attribute type 2 has an invalid length. [ 78.238878][ T6063] x_tables: duplicate underflow at hook 1 [ 78.248299][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 78.273318][ T6068] gretap0: entered promiscuous mode [ 78.283470][ T6068] gretap0: entered allmulticast mode [ 78.528089][ T6082] netlink: 'syz.4.257': attribute type 2 has an invalid length. [ 78.567294][ T6084] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.590840][ T6084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.958689][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.982254][ T6097] Can't find ip_set type dash:net,net [ 79.286883][ T6116] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 79.319501][ T6118] netlink: 'syz.4.270': attribute type 2 has an invalid length. [ 79.335713][ T6118] FAULT_INJECTION: forcing a failure. [ 79.335713][ T6118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.399406][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.4.270 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 79.410043][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.420110][ T6118] Call Trace: [ 79.423398][ T6118] [ 79.426335][ T6118] dump_stack_lvl+0x241/0x360 [ 79.431019][ T6118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.436238][ T6118] ? __pfx__printk+0x10/0x10 [ 79.440826][ T6118] ? __pfx_lock_release+0x10/0x10 [ 79.445857][ T6118] should_fail_ex+0x3b0/0x4e0 [ 79.450538][ T6118] _copy_from_user+0x2f/0xe0 [ 79.455126][ T6118] copy_msghdr_from_user+0xae/0x680 [ 79.460327][ T6118] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 79.466156][ T6118] __sys_sendmsg+0x22d/0x380 [ 79.470748][ T6118] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.475894][ T6118] ? __pfx_vfs_write+0x10/0x10 [ 79.480667][ T6118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.486993][ T6118] ? do_syscall_64+0x100/0x230 [ 79.491755][ T6118] ? do_syscall_64+0xb6/0x230 [ 79.496432][ T6118] do_syscall_64+0xf3/0x230 [ 79.500933][ T6118] ? clear_bhb_loop+0x35/0x90 [ 79.505628][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.511542][ T6118] RIP: 0033:0x7fef9a17dff9 [ 79.515968][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.535577][ T6118] RSP: 002b:00007fef9b05c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.544003][ T6118] RAX: ffffffffffffffda RBX: 00007fef9a335f80 RCX: 00007fef9a17dff9 [ 79.551972][ T6118] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 79.559936][ T6118] RBP: 00007fef9b05c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.567905][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.575898][ T6118] R13: 0000000000000000 R14: 00007fef9a335f80 R15: 00007ffdc8daa138 [ 79.583890][ T6118] [ 79.602883][ T6123] bridge0: port 1(vlan3) entered blocking state [ 79.609978][ T6123] bridge0: port 1(vlan3) entered disabled state [ 79.624674][ T6123] vlan3: entered allmulticast mode [ 79.633740][ T6123] vlan3: left allmulticast mode [ 79.924792][ T6135] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 79.957005][ T6135] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 80.237664][ T6146] team0: Port device wg2 removed [ 80.279363][ T6162] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 80.361527][ T6149] team0: Port device wg2 added [ 80.403223][ T6155] __nla_validate_parse: 3 callbacks suppressed [ 80.433132][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'. [ 80.976364][ T6190] netlink: 'syz.0.291': attribute type 2 has an invalid length. [ 81.344106][ T6209] FAULT_INJECTION: forcing a failure. [ 81.344106][ T6209] name failslab, interval 1, probability 0, space 0, times 0 [ 81.369388][ T6209] CPU: 1 UID: 0 PID: 6209 Comm: syz.2.297 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 81.380024][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.390102][ T6209] Call Trace: [ 81.393400][ T6209] [ 81.396357][ T6209] dump_stack_lvl+0x241/0x360 [ 81.401074][ T6209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.406302][ T6209] ? __pfx__printk+0x10/0x10 [ 81.410917][ T6209] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 81.416405][ T6209] ? __pfx___might_resched+0x10/0x10 [ 81.421718][ T6209] should_fail_ex+0x3b0/0x4e0 [ 81.426434][ T6209] should_failslab+0xac/0x100 [ 81.431135][ T6209] ? xfrm_policy_alloc+0x77/0x2a0 [ 81.436186][ T6209] __kmalloc_cache_noprof+0x6c/0x2c0 [ 81.441502][ T6209] xfrm_policy_alloc+0x77/0x2a0 [ 81.446362][ T6209] xfrm_policy_construct+0x31/0x10c0 [ 81.451649][ T6209] ? aa_get_newest_label+0xff/0x6f0 [ 81.456867][ T6209] ? verify_newpolicy_info+0x340/0x4b0 [ 81.462332][ T6209] xfrm_add_policy+0x270/0x980 [ 81.467095][ T6209] ? __pfx_xfrm_add_policy+0x10/0x10 [ 81.472376][ T6209] ? apparmor_capable+0x13b/0x1b0 [ 81.477405][ T6209] ? __nla_parse+0x40/0x60 [ 81.481818][ T6209] xfrm_user_rcv_msg+0x75b/0xa80 [ 81.486752][ T6209] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 81.492231][ T6209] ? __mutex_trylock_common+0x183/0x2e0 [ 81.497787][ T6209] ? __pfx___might_resched+0x10/0x10 [ 81.503080][ T6209] netlink_rcv_skb+0x1e3/0x430 [ 81.507842][ T6209] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 81.513314][ T6209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.518618][ T6209] xfrm_netlink_rcv+0x79/0x90 [ 81.523288][ T6209] netlink_unicast+0x7f6/0x990 [ 81.528064][ T6209] ? __pfx_netlink_unicast+0x10/0x10 [ 81.533345][ T6209] ? __virt_addr_valid+0x183/0x530 [ 81.538454][ T6209] ? __check_object_size+0x48e/0x900 [ 81.543737][ T6209] netlink_sendmsg+0x8e4/0xcb0 [ 81.548507][ T6209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.553799][ T6209] ? aa_sock_msg_perm+0x91/0x160 [ 81.558738][ T6209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.564029][ T6209] __sock_sendmsg+0x221/0x270 [ 81.568733][ T6209] ____sys_sendmsg+0x52a/0x7e0 [ 81.573511][ T6209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.578867][ T6209] __sys_sendmsg+0x292/0x380 [ 81.583462][ T6209] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.588582][ T6209] ? __pfx_vfs_write+0x10/0x10 [ 81.593357][ T6209] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.599679][ T6209] ? do_syscall_64+0x100/0x230 [ 81.604439][ T6209] ? do_syscall_64+0xb6/0x230 [ 81.609111][ T6209] do_syscall_64+0xf3/0x230 [ 81.613612][ T6209] ? clear_bhb_loop+0x35/0x90 [ 81.618284][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.624175][ T6209] RIP: 0033:0x7f9a3637dff9 [ 81.628586][ T6209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.648183][ T6209] RSP: 002b:00007f9a37118038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.656593][ T6209] RAX: ffffffffffffffda RBX: 00007f9a36535f80 RCX: 00007f9a3637dff9 [ 81.664559][ T6209] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 81.672523][ T6209] RBP: 00007f9a37118090 R08: 0000000000000000 R09: 0000000000000000 [ 81.680488][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.688456][ T6209] R13: 0000000000000000 R14: 00007f9a36535f80 R15: 00007ffc0b7a5758 [ 81.696439][ T6209] [ 81.767162][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.298'. [ 81.837754][ T6208] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 81.858371][ T6214] pim6reg: entered allmulticast mode [ 81.882161][ T6206] pim6reg: left allmulticast mode [ 82.236625][ T6231] netlink: 72 bytes leftover after parsing attributes in process `syz.3.303'. [ 82.409701][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 82.415509][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'. [ 82.510282][ T6245] bond0: (slave syz_tun): Releasing backup interface [ 82.611603][ T6245] team0: Port device wg2 removed [ 82.703271][ T6246] team0: Port device wg2 added [ 82.739831][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 82.757986][ T6250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.975207][ T6263] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 83.077684][ T6266] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.088130][ T6266] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 83.913521][ T6305] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 83.945571][ T6305] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 83.979155][ T6307] Cannot find add_set index 32768 as target [ 83.983782][ T6305] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 85.317616][ T6315] team0: Port device wg2 removed [ 85.375281][ T6320] team0: Port device wg2 added [ 85.406627][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.328'. [ 85.766715][ T6345] netlink: 'syz.2.336': attribute type 22 has an invalid length. [ 85.844552][ T6354] netlink: 'syz.0.339': attribute type 2 has an invalid length. [ 85.860359][ T6354] FAULT_INJECTION: forcing a failure. [ 85.860359][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 85.882811][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.0.339 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 85.893434][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.903509][ T6354] Call Trace: [ 85.906807][ T6354] [ 85.909766][ T6354] dump_stack_lvl+0x241/0x360 [ 85.914477][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.919703][ T6354] ? __pfx__printk+0x10/0x10 [ 85.924367][ T6354] ? ref_tracker_alloc+0x332/0x490 [ 85.929504][ T6354] should_fail_ex+0x3b0/0x4e0 [ 85.934213][ T6354] ? skb_clone+0x20c/0x390 [ 85.938656][ T6354] should_failslab+0xac/0x100 [ 85.943358][ T6354] ? skb_clone+0x20c/0x390 [ 85.947797][ T6354] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 85.953201][ T6354] skb_clone+0x20c/0x390 [ 85.957471][ T6354] __netlink_deliver_tap+0x3cc/0x7c0 [ 85.962789][ T6354] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.968001][ T6354] netlink_deliver_tap+0x19d/0x1b0 [ 85.973115][ T6354] netlink_unicast+0x7c4/0x990 [ 85.977911][ T6354] ? __pfx_netlink_unicast+0x10/0x10 [ 85.983219][ T6354] ? __virt_addr_valid+0x183/0x530 [ 85.988332][ T6354] ? __check_object_size+0x48e/0x900 [ 85.993631][ T6354] netlink_sendmsg+0x8e4/0xcb0 [ 85.998393][ T6354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.003685][ T6354] ? aa_sock_msg_perm+0x91/0x160 [ 86.008644][ T6354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.013963][ T6354] __sock_sendmsg+0x221/0x270 [ 86.018654][ T6354] ____sys_sendmsg+0x52a/0x7e0 [ 86.023432][ T6354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.028801][ T6354] __sys_sendmsg+0x292/0x380 [ 86.033405][ T6354] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.038536][ T6354] ? __pfx_vfs_write+0x10/0x10 [ 86.043353][ T6354] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.049695][ T6354] ? do_syscall_64+0x100/0x230 [ 86.054472][ T6354] ? do_syscall_64+0xb6/0x230 [ 86.059152][ T6354] do_syscall_64+0xf3/0x230 [ 86.063669][ T6354] ? clear_bhb_loop+0x35/0x90 [ 86.068372][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.074259][ T6354] RIP: 0033:0x7f6cb1f7dff9 [ 86.078668][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.098293][ T6354] RSP: 002b:00007f6cb2d5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.106699][ T6354] RAX: ffffffffffffffda RBX: 00007f6cb2135f80 RCX: 00007f6cb1f7dff9 [ 86.114671][ T6354] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 86.122635][ T6354] RBP: 00007f6cb2d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 86.130598][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.138575][ T6354] R13: 0000000000000000 R14: 00007f6cb2135f80 R15: 00007ffe15877ad8 [ 86.146594][ T6354] [ 86.290266][ T6368] FAULT_INJECTION: forcing a failure. [ 86.290266][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 86.307631][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.2.344 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 86.318258][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.328330][ T6368] Call Trace: [ 86.331637][ T6368] [ 86.334589][ T6368] dump_stack_lvl+0x241/0x360 [ 86.339301][ T6368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.344525][ T6368] ? __pfx__printk+0x10/0x10 [ 86.349148][ T6368] ? netlink_broadcast_filtered+0x1260/0x12a0 [ 86.355252][ T6368] should_fail_ex+0x3b0/0x4e0 [ 86.359964][ T6368] should_failslab+0xac/0x100 [ 86.364669][ T6368] ? __alloc_skb+0x1c3/0x440 [ 86.369287][ T6368] kmem_cache_alloc_node_noprof+0x71/0x320 [ 86.375126][ T6368] __alloc_skb+0x1c3/0x440 [ 86.379575][ T6368] ? __pfx___alloc_skb+0x10/0x10 [ 86.384536][ T6368] ? xfrm_policy_insert+0x665/0x940 [ 86.389761][ T6368] ? _local_bh_enable+0xb0/0xb0 [ 86.394684][ T6368] ? pfkey_xfrm_policy2msg_size+0x5c5/0x7e0 [ 86.400641][ T6368] pfkey_send_policy_notify+0x14c/0x920 [ 86.406211][ T6368] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 86.412306][ T6368] km_policy_notify+0x126/0x210 [ 86.417204][ T6368] ? km_policy_notify+0x2e/0x210 [ 86.422205][ T6368] xfrm_add_policy+0x54c/0x980 [ 86.427000][ T6368] ? __pfx_xfrm_add_policy+0x10/0x10 [ 86.432307][ T6368] ? apparmor_capable+0x13b/0x1b0 [ 86.437363][ T6368] ? __nla_parse+0x40/0x60 [ 86.441807][ T6368] xfrm_user_rcv_msg+0x75b/0xa80 [ 86.446771][ T6368] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 86.452295][ T6368] ? __mutex_trylock_common+0x183/0x2e0 [ 86.457862][ T6368] ? __pfx___might_resched+0x10/0x10 [ 86.463158][ T6368] netlink_rcv_skb+0x1e3/0x430 [ 86.467919][ T6368] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 86.473375][ T6368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.478674][ T6368] xfrm_netlink_rcv+0x79/0x90 [ 86.483352][ T6368] netlink_unicast+0x7f6/0x990 [ 86.488143][ T6368] ? __pfx_netlink_unicast+0x10/0x10 [ 86.493465][ T6368] ? __virt_addr_valid+0x183/0x530 [ 86.498577][ T6368] ? __check_object_size+0x48e/0x900 [ 86.503887][ T6368] netlink_sendmsg+0x8e4/0xcb0 [ 86.508655][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.513996][ T6368] ? aa_sock_msg_perm+0x91/0x160 [ 86.518935][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.524212][ T6368] __sock_sendmsg+0x221/0x270 [ 86.528890][ T6368] ____sys_sendmsg+0x52a/0x7e0 [ 86.533658][ T6368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.538955][ T6368] __sys_sendmsg+0x292/0x380 [ 86.543543][ T6368] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.548668][ T6368] ? __pfx_vfs_write+0x10/0x10 [ 86.553462][ T6368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.559809][ T6368] ? do_syscall_64+0x100/0x230 [ 86.564581][ T6368] ? do_syscall_64+0xb6/0x230 [ 86.569274][ T6368] do_syscall_64+0xf3/0x230 [ 86.573786][ T6368] ? clear_bhb_loop+0x35/0x90 [ 86.578463][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.584353][ T6368] RIP: 0033:0x7f9a3637dff9 [ 86.588764][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.608368][ T6368] RSP: 002b:00007f9a37118038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.616782][ T6368] RAX: ffffffffffffffda RBX: 00007f9a36535f80 RCX: 00007f9a3637dff9 [ 86.624758][ T6368] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 86.632723][ T6368] RBP: 00007f9a37118090 R08: 0000000000000000 R09: 0000000000000000 [ 86.640694][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.648660][ T6368] R13: 0000000000000000 R14: 00007f9a36535f80 R15: 00007ffc0b7a5758 [ 86.656640][ T6368] [ 86.872167][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 86.887544][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 86.953477][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 87.012639][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 87.076928][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'. [ 87.090286][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'. [ 87.137378][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 87.531527][ T6410] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 87.922876][ T6427] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.947185][ T6427] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 88.058505][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 88.092466][ T6435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.366'. [ 88.152341][ T6435] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 88.160559][ T6435] netlink: 'syz.1.366': attribute type 2 has an invalid length. [ 88.379600][ T6445] FAULT_INJECTION: forcing a failure. [ 88.379600][ T6445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.416637][ T6445] CPU: 1 UID: 0 PID: 6445 Comm: syz.2.370 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 88.427281][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.437366][ T6445] Call Trace: [ 88.440667][ T6445] [ 88.443624][ T6445] dump_stack_lvl+0x241/0x360 [ 88.448334][ T6445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.453567][ T6445] ? __pfx__printk+0x10/0x10 [ 88.458188][ T6445] ? snprintf+0xda/0x120 [ 88.462450][ T6445] should_fail_ex+0x3b0/0x4e0 [ 88.467140][ T6445] _copy_to_user+0x2f/0xb0 [ 88.471557][ T6445] simple_read_from_buffer+0xca/0x150 [ 88.476933][ T6445] proc_fail_nth_read+0x1e9/0x250 [ 88.481969][ T6445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.487521][ T6445] ? rw_verify_area+0x55e/0x6f0 [ 88.492397][ T6445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.497943][ T6445] vfs_read+0x201/0xbc0 [ 88.502100][ T6445] ? __pfx_lock_release+0x10/0x10 [ 88.507128][ T6445] ? __pfx_vfs_read+0x10/0x10 [ 88.511804][ T6445] ? __fget_files+0x3f3/0x470 [ 88.516483][ T6445] ? fdget_pos+0x24e/0x320 [ 88.520894][ T6445] ksys_read+0x183/0x2b0 [ 88.525131][ T6445] ? __pfx_ksys_read+0x10/0x10 [ 88.529889][ T6445] ? do_syscall_64+0x100/0x230 [ 88.534654][ T6445] ? do_syscall_64+0xb6/0x230 [ 88.539335][ T6445] do_syscall_64+0xf3/0x230 [ 88.543883][ T6445] ? clear_bhb_loop+0x35/0x90 [ 88.548560][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.554450][ T6445] RIP: 0033:0x7f9a3637ca3c [ 88.558865][ T6445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 88.578477][ T6445] RSP: 002b:00007f9a37118030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.586909][ T6445] RAX: ffffffffffffffda RBX: 00007f9a36535f80 RCX: 00007f9a3637ca3c [ 88.594880][ T6445] RDX: 000000000000000f RSI: 00007f9a371180a0 RDI: 0000000000000004 [ 88.602845][ T6445] RBP: 00007f9a37118090 R08: 0000000000000000 R09: 0000000000000000 [ 88.610808][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.618777][ T6445] R13: 0000000000000000 R14: 00007f9a36535f80 R15: 00007ffc0b7a5758 [ 88.626758][ T6445] [ 88.709273][ T6448] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 88.897924][ T6462] trusted_key: syz.2.377 sent an empty control message without MSG_MORE. [ 88.971684][ T6469] xt_NFQUEUE: number of total queues is 0 [ 89.320989][ T6490] x_tables: unsorted underflow at hook 3 [ 89.342706][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 89.497460][ T5240] Bluetooth: hci2: command tx timeout [ 89.574924][ T6503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.654234][ T6508] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 89.893252][ T6513] xt_SECMARK: invalid mode: 0 [ 90.058023][ T6518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.212584][ T6541] netlink: 892 bytes leftover after parsing attributes in process `syz.2.398'. [ 90.338541][ T6548] netlink: 'syz.0.403': attribute type 13 has an invalid length. [ 90.727215][ T6566] netlink: 'syz.4.407': attribute type 2 has an invalid length. [ 90.738515][ T6566] FAULT_INJECTION: forcing a failure. [ 90.738515][ T6566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.751792][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: syz.4.407 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 90.762412][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.772478][ T6566] Call Trace: [ 90.775751][ T6566] [ 90.778676][ T6566] dump_stack_lvl+0x241/0x360 [ 90.783360][ T6566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.788574][ T6566] ? __pfx__printk+0x10/0x10 [ 90.793173][ T6566] ? snprintf+0xda/0x120 [ 90.797421][ T6566] should_fail_ex+0x3b0/0x4e0 [ 90.802100][ T6566] _copy_to_user+0x2f/0xb0 [ 90.806513][ T6566] simple_read_from_buffer+0xca/0x150 [ 90.811907][ T6566] proc_fail_nth_read+0x1e9/0x250 [ 90.816934][ T6566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.822478][ T6566] ? rw_verify_area+0x55e/0x6f0 [ 90.827329][ T6566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.832875][ T6566] vfs_read+0x201/0xbc0 [ 90.837027][ T6566] ? __pfx_lock_release+0x10/0x10 [ 90.842056][ T6566] ? __pfx_vfs_read+0x10/0x10 [ 90.846733][ T6566] ? __fget_files+0x3f3/0x470 [ 90.851414][ T6566] ? fdget_pos+0x24e/0x320 [ 90.855825][ T6566] ksys_read+0x183/0x2b0 [ 90.860063][ T6566] ? __pfx_ksys_read+0x10/0x10 [ 90.864848][ T6566] ? do_syscall_64+0x100/0x230 [ 90.869630][ T6566] ? do_syscall_64+0xb6/0x230 [ 90.874314][ T6566] do_syscall_64+0xf3/0x230 [ 90.878814][ T6566] ? clear_bhb_loop+0x35/0x90 [ 90.883488][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.889397][ T6566] RIP: 0033:0x7fef9a17ca3c [ 90.893808][ T6566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 90.913416][ T6566] RSP: 002b:00007fef9b05c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.921829][ T6566] RAX: ffffffffffffffda RBX: 00007fef9a335f80 RCX: 00007fef9a17ca3c [ 90.929794][ T6566] RDX: 000000000000000f RSI: 00007fef9b05c0a0 RDI: 0000000000000007 [ 90.937765][ T6566] RBP: 00007fef9b05c090 R08: 0000000000000000 R09: 0000000000000000 [ 90.945772][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.953735][ T6566] R13: 0000000000000000 R14: 00007fef9a335f80 R15: 00007ffdc8daa138 [ 90.961712][ T6566] [ 91.104494][ T6544] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 91.238033][ T6577] netlink: 'syz.0.410': attribute type 39 has an invalid length. [ 91.659089][ T6595] pim6reg: entered allmulticast mode [ 91.687200][ T6595] pim6reg: left allmulticast mode [ 91.741477][ T6601] Bluetooth: MGMT ver 1.23 [ 92.087702][ T6631] __nla_validate_parse: 3 callbacks suppressed [ 92.087720][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.431'. [ 92.293813][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'. [ 92.315607][ T5240] Bluetooth: hci2: command 0x0401 tx timeout [ 92.332327][ T6642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.433'. [ 92.827048][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'. [ 92.838747][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 93.117980][ T6685] netlink: 'syz.1.448': attribute type 3 has an invalid length. [ 93.612517][ T6712] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 93.934695][ T6732] team0: Port device wg2 removed [ 93.965873][ T6732] team0: Port device wg2 added [ 93.994227][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.464'. [ 94.239447][ T6738] netlink: 892 bytes leftover after parsing attributes in process `syz.1.467'. [ 94.584615][ T6747] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 94.968952][ T6773] team0: Port device wg2 removed [ 95.014269][ T6783] netlink: 892 bytes leftover after parsing attributes in process `syz.4.481'. [ 95.017106][ T6771] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 95.124491][ T6778] team0: Port device wg2 added [ 95.130204][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.479'. [ 95.450975][ T6792] IPv6: Can't replace route, no match found [ 95.474198][ T6795] IPv6: Can't replace route, no match found [ 95.488014][ T6790] IPv6: Can't replace route, no match found [ 95.927545][ T6812] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 95.955201][ T6816] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 95.976031][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 96.424287][ T6834] BUG: Bad page state in process syz.0.498 pfn:2f6fc [ 96.431300][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f6ff800 pfn:0x2f6fc [ 96.441483][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.448682][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 96.457366][ T6834] raw: ffff88802f6ff800 0000000000000001 00000000ffffffff 0000000000000000 [ 96.466020][ T6834] page dumped because: page_pool leak [ 96.471439][ T6834] page_owner tracks the page as allocated [ 96.477510][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373033870, free_ts 96347838142 [ 96.494339][ T6834] post_alloc_hook+0x1f3/0x230 [ 96.499152][ T6834] get_page_from_freelist+0x3045/0x3190 [ 96.504791][ T6834] __alloc_pages_noprof+0x292/0x710 [ 96.510019][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 96.515550][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 96.521471][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 96.526741][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 96.532142][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 96.537587][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 96.542546][ T6834] __sys_bpf+0x48d/0x810 [ 96.546859][ T6834] __x64_sys_bpf+0x7c/0x90 [ 96.551299][ T6834] do_syscall_64+0xf3/0x230 [ 96.555875][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.561804][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 96.568201][ T6834] free_unref_folios+0xf12/0x18d0 [ 96.573306][ T6834] folios_put_refs+0x76c/0x860 [ 96.578111][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 96.583821][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 96.588438][ T6834] tlb_finish_mmu+0xd4/0x200 [ 96.593114][ T6834] exit_mmap+0x496/0xc40 [ 96.597374][ T6834] __mmput+0x115/0x390 [ 96.601451][ T6834] exit_mm+0x220/0x310 [ 96.605592][ T6834] do_exit+0x9b2/0x28e0 [ 96.609765][ T6834] do_group_exit+0x207/0x2c0 [ 96.614415][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 96.619459][ T6834] x64_sys_call+0x2634/0x2640 [ 96.624209][ T6834] do_syscall_64+0xf3/0x230 [ 96.628727][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.634665][ T6834] Modules linked in: [ 96.638579][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Not tainted 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 96.649194][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.659248][ T6834] Call Trace: [ 96.662525][ T6834] [ 96.665462][ T6834] dump_stack_lvl+0x241/0x360 [ 96.670161][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.675388][ T6834] ? __pfx_print_modules+0x10/0x10 [ 96.680550][ T6834] bad_page+0x166/0x1b0 [ 96.684737][ T6834] free_unref_page+0xed0/0xf20 [ 96.689549][ T6834] skb_release_data+0x6dc/0x8a0 [ 96.694439][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 96.699489][ T6834] ? packet_rcv+0x159/0x14b0 [ 96.704112][ T6834] packet_rcv+0x16f/0x14b0 [ 96.708573][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 96.713461][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 96.719484][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 96.726107][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 96.732632][ T6834] ? read_tsc+0x9/0x20 [ 96.736713][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 96.741938][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 96.748291][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 96.754462][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 96.760831][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 96.767549][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 96.772787][ T6834] ? __phys_addr+0xba/0x170 [ 96.777317][ T6834] ? build_skb_around+0x111/0x260 [ 96.782350][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 96.788253][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 96.793564][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 96.799064][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 96.805033][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 96.810615][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 96.816437][ T6834] ? synchronize_rcu+0x11b/0x360 [ 96.821374][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 96.826697][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 96.833004][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.838926][ T6834] ? _copy_from_user+0xa6/0xe0 [ 96.843703][ T6834] ? bpf_test_init+0x15a/0x180 [ 96.848494][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 96.853988][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 96.859379][ T6834] ? __pfx_lock_release+0x10/0x10 [ 96.864430][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.870248][ T6834] ? __fget_files+0x29/0x470 [ 96.874858][ T6834] ? fput+0x1a8/0x230 [ 96.878863][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.884695][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 96.889654][ T6834] __sys_bpf+0x48d/0x810 [ 96.893908][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 96.898683][ T6834] ? __sys_bind+0x108/0x2d0 [ 96.903211][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.909211][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.915566][ T6834] ? do_syscall_64+0x100/0x230 [ 96.920381][ T6834] __x64_sys_bpf+0x7c/0x90 [ 96.924810][ T6834] do_syscall_64+0xf3/0x230 [ 96.929340][ T6834] ? clear_bhb_loop+0x35/0x90 [ 96.934030][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.939951][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 96.944372][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.964004][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.972443][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 96.980461][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 96.988445][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 96.996454][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.004449][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 97.012449][ T6834] [ 97.015541][ T6834] Disabling lock debugging due to kernel taint [ 97.021713][ T6834] BUG: Bad page state in process syz.0.498 pfn:3010c [ 97.028514][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20177 pfn:0x3010c [ 97.037653][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.044824][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 97.053460][ T6834] raw: 0000000000020177 0000000000000001 00000000ffffffff 0000000000000000 [ 97.062042][ T6834] page dumped because: page_pool leak [ 97.067437][ T6834] page_owner tracks the page as allocated [ 97.073185][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373022726, free_ts 96347846873 [ 97.089990][ T6834] post_alloc_hook+0x1f3/0x230 [ 97.094789][ T6834] get_page_from_freelist+0x3045/0x3190 [ 97.100335][ T6834] __alloc_pages_noprof+0x292/0x710 [ 97.105597][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 97.111065][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 97.116985][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 97.122207][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 97.127630][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 97.133047][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 97.138003][ T6834] __sys_bpf+0x48d/0x810 [ 97.142258][ T6834] __x64_sys_bpf+0x7c/0x90 [ 97.146721][ T6834] do_syscall_64+0xf3/0x230 [ 97.151244][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.157187][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 97.163545][ T6834] free_unref_folios+0xf12/0x18d0 [ 97.168626][ T6834] folios_put_refs+0x76c/0x860 [ 97.173437][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 97.179074][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 97.183746][ T6834] tlb_finish_mmu+0xd4/0x200 [ 97.188359][ T6834] exit_mmap+0x496/0xc40 [ 97.192596][ T6834] __mmput+0x115/0x390 [ 97.196706][ T6834] exit_mm+0x220/0x310 [ 97.200783][ T6834] do_exit+0x9b2/0x28e0 [ 97.204984][ T6834] do_group_exit+0x207/0x2c0 [ 97.209578][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 97.214623][ T6834] x64_sys_call+0x2634/0x2640 [ 97.219317][ T6834] do_syscall_64+0xf3/0x230 [ 97.223904][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.229831][ T6834] Modules linked in: [ 97.233760][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 97.245841][ T6834] Tainted: [B]=BAD_PAGE [ 97.249980][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.260028][ T6834] Call Trace: [ 97.263317][ T6834] [ 97.266240][ T6834] dump_stack_lvl+0x241/0x360 [ 97.270915][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.276107][ T6834] ? __pfx_print_modules+0x10/0x10 [ 97.281216][ T6834] bad_page+0x166/0x1b0 [ 97.285366][ T6834] free_unref_page+0xed0/0xf20 [ 97.290126][ T6834] skb_release_data+0x6dc/0x8a0 [ 97.294975][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 97.300002][ T6834] ? packet_rcv+0x159/0x14b0 [ 97.304587][ T6834] packet_rcv+0x16f/0x14b0 [ 97.309009][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 97.313862][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 97.319840][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 97.326419][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 97.332917][ T6834] ? read_tsc+0x9/0x20 [ 97.336978][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 97.342175][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 97.348498][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 97.354651][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 97.360980][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 97.367652][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 97.372880][ T6834] ? __phys_addr+0xba/0x170 [ 97.377373][ T6834] ? build_skb_around+0x111/0x260 [ 97.382421][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 97.388316][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 97.393611][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 97.399069][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 97.404978][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 97.410530][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.416334][ T6834] ? synchronize_rcu+0x11b/0x360 [ 97.421321][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 97.426616][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 97.432872][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.438810][ T6834] ? _copy_from_user+0xa6/0xe0 [ 97.443579][ T6834] ? bpf_test_init+0x15a/0x180 [ 97.448351][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 97.453820][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 97.459195][ T6834] ? __pfx_lock_release+0x10/0x10 [ 97.464224][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.470023][ T6834] ? __fget_files+0x29/0x470 [ 97.474612][ T6834] ? fput+0x1a8/0x230 [ 97.478589][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.484386][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 97.489318][ T6834] __sys_bpf+0x48d/0x810 [ 97.493566][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 97.498330][ T6834] ? __sys_bind+0x108/0x2d0 [ 97.502826][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.508814][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.515138][ T6834] ? do_syscall_64+0x100/0x230 [ 97.519896][ T6834] __x64_sys_bpf+0x7c/0x90 [ 97.524301][ T6834] do_syscall_64+0xf3/0x230 [ 97.528796][ T6834] ? clear_bhb_loop+0x35/0x90 [ 97.533468][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.539352][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 97.543756][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.563364][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.571781][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 97.579756][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 97.587728][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 97.595696][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.603664][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 97.611634][ T6834] [ 97.614749][ T6834] BUG: Bad page state in process syz.0.498 pfn:301bb [ 97.621522][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880301bb000 pfn:0x301bb [ 97.631618][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.638772][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 97.647387][ T6834] raw: ffff8880301bb000 0000000000000001 00000000ffffffff 0000000000000000 [ 97.655990][ T6834] page dumped because: page_pool leak [ 97.661358][ T6834] page_owner tracks the page as allocated [ 97.667102][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373012233, free_ts 96347856187 [ 97.683886][ T6834] post_alloc_hook+0x1f3/0x230 [ 97.688647][ T6834] get_page_from_freelist+0x3045/0x3190 [ 97.694236][ T6834] __alloc_pages_noprof+0x292/0x710 [ 97.699444][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 97.704924][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 97.710826][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 97.716074][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 97.721464][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 97.726862][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 97.731809][ T6834] __sys_bpf+0x48d/0x810 [ 97.736075][ T6834] __x64_sys_bpf+0x7c/0x90 [ 97.740495][ T6834] do_syscall_64+0xf3/0x230 [ 97.745019][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.750917][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 97.757271][ T6834] free_unref_folios+0xf12/0x18d0 [ 97.762305][ T6834] folios_put_refs+0x76c/0x860 [ 97.767104][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 97.772782][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 97.777377][ T6834] tlb_finish_mmu+0xd4/0x200 [ 97.781955][ T6834] exit_mmap+0x496/0xc40 [ 97.786222][ T6834] __mmput+0x115/0x390 [ 97.790299][ T6834] exit_mm+0x220/0x310 [ 97.794393][ T6834] do_exit+0x9b2/0x28e0 [ 97.798551][ T6834] do_group_exit+0x207/0x2c0 [ 97.803157][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 97.808188][ T6834] x64_sys_call+0x2634/0x2640 [ 97.812894][ T6834] do_syscall_64+0xf3/0x230 [ 97.817403][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.823316][ T6834] Modules linked in: [ 97.827234][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 97.839301][ T6834] Tainted: [B]=BAD_PAGE [ 97.843441][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.853492][ T6834] Call Trace: [ 97.856769][ T6834] [ 97.859704][ T6834] dump_stack_lvl+0x241/0x360 [ 97.864397][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.869590][ T6834] ? __pfx_print_modules+0x10/0x10 [ 97.874710][ T6834] bad_page+0x166/0x1b0 [ 97.878856][ T6834] free_unref_page+0xed0/0xf20 [ 97.883633][ T6834] skb_release_data+0x6dc/0x8a0 [ 97.888515][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 97.893537][ T6834] ? packet_rcv+0x159/0x14b0 [ 97.898144][ T6834] packet_rcv+0x16f/0x14b0 [ 97.902554][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 97.907402][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 97.913391][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 97.919993][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 97.926486][ T6834] ? read_tsc+0x9/0x20 [ 97.930562][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 97.935749][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 97.942071][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 97.948232][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 97.954549][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 97.961215][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 97.966439][ T6834] ? __phys_addr+0xba/0x170 [ 97.970938][ T6834] ? build_skb_around+0x111/0x260 [ 97.975954][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 97.981839][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 97.987132][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 97.992576][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 97.998460][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 98.003995][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.009791][ T6834] ? synchronize_rcu+0x11b/0x360 [ 98.014730][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 98.020007][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 98.026236][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.032121][ T6834] ? _copy_from_user+0xa6/0xe0 [ 98.036876][ T6834] ? bpf_test_init+0x15a/0x180 [ 98.041632][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 98.047096][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 98.052456][ T6834] ? __pfx_lock_release+0x10/0x10 [ 98.057474][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.063266][ T6834] ? __fget_files+0x29/0x470 [ 98.067845][ T6834] ? fput+0x1a8/0x230 [ 98.071813][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.077609][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 98.082538][ T6834] __sys_bpf+0x48d/0x810 [ 98.086772][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 98.091519][ T6834] ? __sys_bind+0x108/0x2d0 [ 98.096010][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.102014][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.108333][ T6834] ? do_syscall_64+0x100/0x230 [ 98.113097][ T6834] __x64_sys_bpf+0x7c/0x90 [ 98.117516][ T6834] do_syscall_64+0xf3/0x230 [ 98.122005][ T6834] ? clear_bhb_loop+0x35/0x90 [ 98.126674][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.132553][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 98.136954][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.156551][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.164953][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 98.172919][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 98.180918][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 98.188881][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.196842][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 98.204824][ T6834] [ 98.207915][ T6834] BUG: Bad page state in process syz.0.498 pfn:307b9 [ 98.214722][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x307b9 [ 98.223520][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.230620][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 98.239231][ T6834] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 98.247854][ T6834] page dumped because: page_pool leak [ 98.253256][ T6834] page_owner tracks the page as allocated [ 98.258990][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373001083, free_ts 96347865333 [ 98.275811][ T6834] post_alloc_hook+0x1f3/0x230 [ 98.280586][ T6834] get_page_from_freelist+0x3045/0x3190 [ 98.286156][ T6834] __alloc_pages_noprof+0x292/0x710 [ 98.291360][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 98.296840][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 98.302787][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 98.307991][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 98.313386][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 98.318760][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 98.323717][ T6834] __sys_bpf+0x48d/0x810 [ 98.327973][ T6834] __x64_sys_bpf+0x7c/0x90 [ 98.332400][ T6834] do_syscall_64+0xf3/0x230 [ 98.336943][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.342858][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 98.349165][ T6834] free_unref_folios+0xf12/0x18d0 [ 98.354216][ T6834] folios_put_refs+0x76c/0x860 [ 98.359013][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 98.364670][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 98.369266][ T6834] tlb_finish_mmu+0xd4/0x200 [ 98.373888][ T6834] exit_mmap+0x496/0xc40 [ 98.378138][ T6834] __mmput+0x115/0x390 [ 98.382197][ T6834] exit_mm+0x220/0x310 [ 98.386285][ T6834] do_exit+0x9b2/0x28e0 [ 98.390446][ T6834] do_group_exit+0x207/0x2c0 [ 98.395075][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 98.400119][ T6834] x64_sys_call+0x2634/0x2640 [ 98.404830][ T6834] do_syscall_64+0xf3/0x230 [ 98.409339][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.415256][ T6834] Modules linked in: [ 98.419157][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 98.431203][ T6834] Tainted: [B]=BAD_PAGE [ 98.435355][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.445437][ T6834] Call Trace: [ 98.448723][ T6834] [ 98.451672][ T6834] dump_stack_lvl+0x241/0x360 [ 98.456378][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.461571][ T6834] ? __pfx_print_modules+0x10/0x10 [ 98.466685][ T6834] bad_page+0x166/0x1b0 [ 98.470835][ T6834] free_unref_page+0xed0/0xf20 [ 98.475596][ T6834] skb_release_data+0x6dc/0x8a0 [ 98.480443][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 98.485454][ T6834] ? packet_rcv+0x159/0x14b0 [ 98.490037][ T6834] packet_rcv+0x16f/0x14b0 [ 98.494462][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 98.499321][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 98.505295][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 98.511871][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 98.518367][ T6834] ? read_tsc+0x9/0x20 [ 98.522424][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 98.527625][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 98.533982][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 98.540146][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 98.546475][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 98.553165][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 98.558371][ T6834] ? __phys_addr+0xba/0x170 [ 98.562864][ T6834] ? build_skb_around+0x111/0x260 [ 98.567880][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 98.573780][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 98.579080][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 98.584545][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 98.590456][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 98.595997][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 98.601796][ T6834] ? synchronize_rcu+0x11b/0x360 [ 98.606732][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 98.612024][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 98.618297][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 98.624182][ T6834] ? _copy_from_user+0xa6/0xe0 [ 98.628947][ T6834] ? bpf_test_init+0x15a/0x180 [ 98.633711][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 98.639174][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 98.644537][ T6834] ? __pfx_lock_release+0x10/0x10 [ 98.649559][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.655356][ T6834] ? __fget_files+0x29/0x470 [ 98.659943][ T6834] ? fput+0x1a8/0x230 [ 98.663916][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 98.669709][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 98.674643][ T6834] __sys_bpf+0x48d/0x810 [ 98.678879][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 98.683636][ T6834] ? __sys_bind+0x108/0x2d0 [ 98.688126][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.694107][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.700452][ T6834] ? do_syscall_64+0x100/0x230 [ 98.705218][ T6834] __x64_sys_bpf+0x7c/0x90 [ 98.709627][ T6834] do_syscall_64+0xf3/0x230 [ 98.714136][ T6834] ? clear_bhb_loop+0x35/0x90 [ 98.718829][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.724711][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 98.729111][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.748725][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.757138][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 98.765102][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 98.773075][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 98.781085][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.789061][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 98.797029][ T6834] [ 98.800105][ T6834] BUG: Bad page state in process syz.0.498 pfn:2d6d6 [ 98.806907][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d6d7180 pfn:0x2d6d6 [ 98.816995][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.824144][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 98.832769][ T6834] raw: ffff88802d6d7180 0000000000000001 00000000ffffffff 0000000000000000 [ 98.841352][ T6834] page dumped because: page_pool leak [ 98.846756][ T6834] page_owner tracks the page as allocated [ 98.852469][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372989790, free_ts 96347875146 [ 98.869255][ T6834] post_alloc_hook+0x1f3/0x230 [ 98.874073][ T6834] get_page_from_freelist+0x3045/0x3190 [ 98.879627][ T6834] __alloc_pages_noprof+0x292/0x710 [ 98.884860][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 98.890329][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 98.896252][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 98.901459][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 98.906851][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 98.912226][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 98.917217][ T6834] __sys_bpf+0x48d/0x810 [ 98.921463][ T6834] __x64_sys_bpf+0x7c/0x90 [ 98.925903][ T6834] do_syscall_64+0xf3/0x230 [ 98.930411][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.936329][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 98.942667][ T6834] free_unref_folios+0xf12/0x18d0 [ 98.947737][ T6834] folios_put_refs+0x76c/0x860 [ 98.952506][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 98.958174][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 98.962805][ T6834] tlb_finish_mmu+0xd4/0x200 [ 98.967432][ T6834] exit_mmap+0x496/0xc40 [ 98.971660][ T6834] __mmput+0x115/0x390 [ 98.975752][ T6834] exit_mm+0x220/0x310 [ 98.979824][ T6834] do_exit+0x9b2/0x28e0 [ 98.984000][ T6834] do_group_exit+0x207/0x2c0 [ 98.988595][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 98.993651][ T6834] x64_sys_call+0x2634/0x2640 [ 98.998359][ T6834] do_syscall_64+0xf3/0x230 [ 99.002897][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.008794][ T6834] Modules linked in: [ 99.012676][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 99.024722][ T6834] Tainted: [B]=BAD_PAGE [ 99.028853][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.038895][ T6834] Call Trace: [ 99.042162][ T6834] [ 99.045080][ T6834] dump_stack_lvl+0x241/0x360 [ 99.049755][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.054940][ T6834] ? __pfx_print_modules+0x10/0x10 [ 99.060041][ T6834] bad_page+0x166/0x1b0 [ 99.064184][ T6834] free_unref_page+0xed0/0xf20 [ 99.068942][ T6834] skb_release_data+0x6dc/0x8a0 [ 99.073799][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 99.078832][ T6834] ? packet_rcv+0x159/0x14b0 [ 99.083410][ T6834] packet_rcv+0x16f/0x14b0 [ 99.087818][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 99.092656][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 99.098639][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 99.105214][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.111703][ T6834] ? read_tsc+0x9/0x20 [ 99.115762][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 99.120953][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 99.127288][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 99.133444][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 99.139779][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.146440][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 99.151636][ T6834] ? __phys_addr+0xba/0x170 [ 99.156143][ T6834] ? build_skb_around+0x111/0x260 [ 99.161155][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 99.167045][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 99.172321][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 99.177767][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 99.183651][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 99.189185][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.194979][ T6834] ? synchronize_rcu+0x11b/0x360 [ 99.199904][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 99.205178][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 99.211409][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.217294][ T6834] ? _copy_from_user+0xa6/0xe0 [ 99.222073][ T6834] ? bpf_test_init+0x15a/0x180 [ 99.226827][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 99.232285][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 99.237651][ T6834] ? __pfx_lock_release+0x10/0x10 [ 99.242676][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.248473][ T6834] ? __fget_files+0x29/0x470 [ 99.253076][ T6834] ? fput+0x1a8/0x230 [ 99.257064][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.262864][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 99.267809][ T6834] __sys_bpf+0x48d/0x810 [ 99.272046][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 99.276802][ T6834] ? __sys_bind+0x108/0x2d0 [ 99.281313][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.287292][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.293677][ T6834] ? do_syscall_64+0x100/0x230 [ 99.298478][ T6834] __x64_sys_bpf+0x7c/0x90 [ 99.302910][ T6834] do_syscall_64+0xf3/0x230 [ 99.307411][ T6834] ? clear_bhb_loop+0x35/0x90 [ 99.312089][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.317989][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 99.322411][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.342001][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.350397][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 99.358355][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.366313][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 99.374292][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.382302][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 99.390264][ T6834] [ 99.393343][ T6834] BUG: Bad page state in process syz.0.498 pfn:302ca [ 99.400110][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880302cadc0 pfn:0x302ca [ 99.410216][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.417358][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 99.425971][ T6834] raw: ffff8880302cadc0 0000000000000001 00000000ffffffff 0000000000000000 [ 99.434570][ T6834] page dumped because: page_pool leak [ 99.439935][ T6834] page_owner tracks the page as allocated [ 99.445677][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372977932, free_ts 96347884408 [ 99.462465][ T6834] post_alloc_hook+0x1f3/0x230 [ 99.467257][ T6834] get_page_from_freelist+0x3045/0x3190 [ 99.472845][ T6834] __alloc_pages_noprof+0x292/0x710 [ 99.478045][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 99.483539][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 99.489452][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 99.494675][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 99.500051][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 99.505443][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 99.510387][ T6834] __sys_bpf+0x48d/0x810 [ 99.514651][ T6834] __x64_sys_bpf+0x7c/0x90 [ 99.519096][ T6834] do_syscall_64+0xf3/0x230 [ 99.523625][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.529523][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 99.535864][ T6834] free_unref_folios+0xf12/0x18d0 [ 99.540902][ T6834] folios_put_refs+0x76c/0x860 [ 99.545693][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 99.551335][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 99.555949][ T6834] tlb_finish_mmu+0xd4/0x200 [ 99.560547][ T6834] exit_mmap+0x496/0xc40 [ 99.564808][ T6834] __mmput+0x115/0x390 [ 99.568895][ T6834] exit_mm+0x220/0x310 [ 99.573007][ T6834] do_exit+0x9b2/0x28e0 [ 99.577167][ T6834] do_group_exit+0x207/0x2c0 [ 99.581741][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 99.586814][ T6834] x64_sys_call+0x2634/0x2640 [ 99.591511][ T6834] do_syscall_64+0xf3/0x230 [ 99.596038][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.601938][ T6834] Modules linked in: [ 99.605859][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 99.617925][ T6834] Tainted: [B]=BAD_PAGE [ 99.622056][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.632104][ T6834] Call Trace: [ 99.635377][ T6834] [ 99.638314][ T6834] dump_stack_lvl+0x241/0x360 [ 99.642996][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.648182][ T6834] ? __pfx_print_modules+0x10/0x10 [ 99.653304][ T6834] bad_page+0x166/0x1b0 [ 99.657479][ T6834] free_unref_page+0xed0/0xf20 [ 99.662239][ T6834] skb_release_data+0x6dc/0x8a0 [ 99.667106][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 99.672115][ T6834] ? packet_rcv+0x159/0x14b0 [ 99.676698][ T6834] packet_rcv+0x16f/0x14b0 [ 99.681103][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 99.685940][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 99.691908][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 99.698483][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 99.704984][ T6834] ? read_tsc+0x9/0x20 [ 99.709038][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 99.714238][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 99.720579][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 99.726721][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 99.733047][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 99.739728][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 99.744917][ T6834] ? __phys_addr+0xba/0x170 [ 99.749424][ T6834] ? build_skb_around+0x111/0x260 [ 99.754442][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 99.760351][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 99.765635][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 99.771080][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 99.776962][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 99.782491][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.788284][ T6834] ? synchronize_rcu+0x11b/0x360 [ 99.793220][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 99.798516][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 99.804750][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.810635][ T6834] ? _copy_from_user+0xa6/0xe0 [ 99.815400][ T6834] ? bpf_test_init+0x15a/0x180 [ 99.820163][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 99.825609][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 99.830968][ T6834] ? __pfx_lock_release+0x10/0x10 [ 99.835987][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.841777][ T6834] ? __fget_files+0x29/0x470 [ 99.846388][ T6834] ? fput+0x1a8/0x230 [ 99.850368][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.856157][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 99.861087][ T6834] __sys_bpf+0x48d/0x810 [ 99.865354][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 99.870111][ T6834] ? __sys_bind+0x108/0x2d0 [ 99.874601][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.880572][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.886889][ T6834] ? do_syscall_64+0x100/0x230 [ 99.891641][ T6834] __x64_sys_bpf+0x7c/0x90 [ 99.896042][ T6834] do_syscall_64+0xf3/0x230 [ 99.900550][ T6834] ? clear_bhb_loop+0x35/0x90 [ 99.905213][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.911091][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 99.915510][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.935101][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.943502][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 99.951490][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 99.959470][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 99.967434][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.975392][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 99.983355][ T6834] [ 99.986429][ T6834] BUG: Bad page state in process syz.0.498 pfn:20ab0 [ 99.993226][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020ab0dc0 pfn:0x20ab0 [ 100.003320][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.010434][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 100.019048][ T6834] raw: ffff888020ab0dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 100.027651][ T6834] page dumped because: page_pool leak [ 100.033041][ T6834] page_owner tracks the page as allocated [ 100.038753][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372966258, free_ts 96347893812 [ 100.055554][ T6834] post_alloc_hook+0x1f3/0x230 [ 100.060329][ T6834] get_page_from_freelist+0x3045/0x3190 [ 100.065894][ T6834] __alloc_pages_noprof+0x292/0x710 [ 100.071104][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 100.076580][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 100.082484][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 100.087715][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 100.093125][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 100.098503][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 100.103460][ T6834] __sys_bpf+0x48d/0x810 [ 100.107711][ T6834] __x64_sys_bpf+0x7c/0x90 [ 100.112118][ T6834] do_syscall_64+0xf3/0x230 [ 100.116675][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.122575][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 100.128938][ T6834] free_unref_folios+0xf12/0x18d0 [ 100.133994][ T6834] folios_put_refs+0x76c/0x860 [ 100.138790][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 100.144451][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 100.149050][ T6834] tlb_finish_mmu+0xd4/0x200 [ 100.153668][ T6834] exit_mmap+0x496/0xc40 [ 100.157911][ T6834] __mmput+0x115/0x390 [ 100.161969][ T6834] exit_mm+0x220/0x310 [ 100.166051][ T6834] do_exit+0x9b2/0x28e0 [ 100.170213][ T6834] do_group_exit+0x207/0x2c0 [ 100.174824][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 100.179855][ T6834] x64_sys_call+0x2634/0x2640 [ 100.184601][ T6834] do_syscall_64+0xf3/0x230 [ 100.189112][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.195033][ T6834] Modules linked in: [ 100.198931][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 100.210986][ T6834] Tainted: [B]=BAD_PAGE [ 100.215120][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.225159][ T6834] Call Trace: [ 100.228427][ T6834] [ 100.231344][ T6834] dump_stack_lvl+0x241/0x360 [ 100.236015][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.241204][ T6834] ? __pfx_print_modules+0x10/0x10 [ 100.246305][ T6834] bad_page+0x166/0x1b0 [ 100.250464][ T6834] free_unref_page+0xed0/0xf20 [ 100.255236][ T6834] skb_release_data+0x6dc/0x8a0 [ 100.260108][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 100.265119][ T6834] ? packet_rcv+0x159/0x14b0 [ 100.269737][ T6834] packet_rcv+0x16f/0x14b0 [ 100.274169][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 100.279024][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 100.284995][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 100.291569][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.298059][ T6834] ? read_tsc+0x9/0x20 [ 100.302116][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 100.307302][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.313626][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 100.319788][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.326119][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.332786][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 100.337997][ T6834] ? __phys_addr+0xba/0x170 [ 100.342487][ T6834] ? build_skb_around+0x111/0x260 [ 100.347494][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 100.353400][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 100.358695][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 100.364150][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 100.370051][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 100.375587][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.381381][ T6834] ? synchronize_rcu+0x11b/0x360 [ 100.386311][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 100.391588][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 100.397818][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.403711][ T6834] ? _copy_from_user+0xa6/0xe0 [ 100.408463][ T6834] ? bpf_test_init+0x15a/0x180 [ 100.413220][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 100.418684][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 100.424043][ T6834] ? __pfx_lock_release+0x10/0x10 [ 100.429097][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.434889][ T6834] ? __fget_files+0x29/0x470 [ 100.439470][ T6834] ? fput+0x1a8/0x230 [ 100.443447][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.449237][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 100.454176][ T6834] __sys_bpf+0x48d/0x810 [ 100.458425][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 100.463216][ T6834] ? __sys_bind+0x108/0x2d0 [ 100.467705][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.473685][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.480024][ T6834] ? do_syscall_64+0x100/0x230 [ 100.484774][ T6834] __x64_sys_bpf+0x7c/0x90 [ 100.489178][ T6834] do_syscall_64+0xf3/0x230 [ 100.493680][ T6834] ? clear_bhb_loop+0x35/0x90 [ 100.498364][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.504244][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 100.508669][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.528279][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.536692][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 100.544649][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 100.552615][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 100.560598][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.568588][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 100.576569][ T6834] [ 100.579648][ T6834] BUG: Bad page state in process syz.0.498 pfn:2f6a2 [ 100.586449][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f6a2dc0 pfn:0x2f6a2 [ 100.596544][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.603699][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 100.612290][ T6834] raw: ffff88802f6a2dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 100.620901][ T6834] page dumped because: page_pool leak [ 100.626290][ T6834] page_owner tracks the page as allocated [ 100.631988][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372954600, free_ts 96347903645 [ 100.648805][ T6834] post_alloc_hook+0x1f3/0x230 [ 100.653639][ T6834] get_page_from_freelist+0x3045/0x3190 [ 100.659213][ T6834] __alloc_pages_noprof+0x292/0x710 [ 100.664457][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 100.669925][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 100.675847][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 100.681074][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 100.686468][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 100.691844][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 100.696811][ T6834] __sys_bpf+0x48d/0x810 [ 100.701062][ T6834] __x64_sys_bpf+0x7c/0x90 [ 100.705513][ T6834] do_syscall_64+0xf3/0x230 [ 100.710023][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.715938][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 100.722262][ T6834] free_unref_folios+0xf12/0x18d0 [ 100.727307][ T6834] folios_put_refs+0x76c/0x860 [ 100.732079][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 100.737749][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 100.742343][ T6834] tlb_finish_mmu+0xd4/0x200 [ 100.746948][ T6834] exit_mmap+0x496/0xc40 [ 100.751201][ T6834] __mmput+0x115/0x390 [ 100.755322][ T6834] exit_mm+0x220/0x310 [ 100.759393][ T6834] do_exit+0x9b2/0x28e0 [ 100.763570][ T6834] do_group_exit+0x207/0x2c0 [ 100.768162][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 100.773222][ T6834] x64_sys_call+0x2634/0x2640 [ 100.777911][ T6834] do_syscall_64+0xf3/0x230 [ 100.782408][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.788337][ T6834] Modules linked in: [ 100.792242][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 100.804313][ T6834] Tainted: [B]=BAD_PAGE [ 100.808453][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.818495][ T6834] Call Trace: [ 100.821787][ T6834] [ 100.824731][ T6834] dump_stack_lvl+0x241/0x360 [ 100.829414][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.834624][ T6834] ? __pfx_print_modules+0x10/0x10 [ 100.839737][ T6834] bad_page+0x166/0x1b0 [ 100.843896][ T6834] free_unref_page+0xed0/0xf20 [ 100.848657][ T6834] skb_release_data+0x6dc/0x8a0 [ 100.853515][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 100.858557][ T6834] ? packet_rcv+0x159/0x14b0 [ 100.863140][ T6834] packet_rcv+0x16f/0x14b0 [ 100.867552][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 100.872403][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 100.878389][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 100.884971][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 100.891497][ T6834] ? read_tsc+0x9/0x20 [ 100.895585][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 100.900774][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.907110][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 100.913271][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 100.919611][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 100.926281][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 100.931479][ T6834] ? __phys_addr+0xba/0x170 [ 100.935981][ T6834] ? build_skb_around+0x111/0x260 [ 100.940995][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 100.946883][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 100.952203][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 100.957660][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 100.963548][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 100.969080][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 100.974893][ T6834] ? synchronize_rcu+0x11b/0x360 [ 100.979822][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 100.985100][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 100.991330][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 100.997227][ T6834] ? _copy_from_user+0xa6/0xe0 [ 101.001980][ T6834] ? bpf_test_init+0x15a/0x180 [ 101.006726][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 101.012171][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.017539][ T6834] ? __pfx_lock_release+0x10/0x10 [ 101.022555][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.028349][ T6834] ? __fget_files+0x29/0x470 [ 101.032951][ T6834] ? fput+0x1a8/0x230 [ 101.036937][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.042732][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 101.047673][ T6834] __sys_bpf+0x48d/0x810 [ 101.051903][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 101.056657][ T6834] ? __sys_bind+0x108/0x2d0 [ 101.061148][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.067119][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.073446][ T6834] ? do_syscall_64+0x100/0x230 [ 101.078214][ T6834] __x64_sys_bpf+0x7c/0x90 [ 101.082619][ T6834] do_syscall_64+0xf3/0x230 [ 101.087115][ T6834] ? clear_bhb_loop+0x35/0x90 [ 101.091781][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.097661][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 101.102064][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.121660][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.130072][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 101.138057][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.146028][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 101.153993][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.161964][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 101.169924][ T6834] [ 101.173000][ T6834] BUG: Bad page state in process syz.0.498 pfn:2cc74 [ 101.179776][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802cc74c98 pfn:0x2cc74 [ 101.189865][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.197001][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 101.205616][ T6834] raw: ffff88802cc74c98 0000000000000001 00000000ffffffff 0000000000000000 [ 101.214240][ T6834] page dumped because: page_pool leak [ 101.219636][ T6834] page_owner tracks the page as allocated [ 101.225368][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372937990, free_ts 96347912907 [ 101.242160][ T6834] post_alloc_hook+0x1f3/0x230 [ 101.246967][ T6834] get_page_from_freelist+0x3045/0x3190 [ 101.252520][ T6834] __alloc_pages_noprof+0x292/0x710 [ 101.257746][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 101.263238][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 101.269124][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 101.274348][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 101.279726][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.285116][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 101.290079][ T6834] __sys_bpf+0x48d/0x810 [ 101.294346][ T6834] __x64_sys_bpf+0x7c/0x90 [ 101.298771][ T6834] do_syscall_64+0xf3/0x230 [ 101.303309][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.309205][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 101.315551][ T6834] free_unref_folios+0xf12/0x18d0 [ 101.320595][ T6834] folios_put_refs+0x76c/0x860 [ 101.325377][ T6834] free_pages_and_swap_cache+0x5c8/0x690 [ 101.331022][ T6834] tlb_flush_mmu+0x3a3/0x680 [ 101.335659][ T6834] tlb_finish_mmu+0xd4/0x200 [ 101.340252][ T6834] exit_mmap+0x496/0xc40 [ 101.344521][ T6834] __mmput+0x115/0x390 [ 101.348603][ T6834] exit_mm+0x220/0x310 [ 101.352666][ T6834] do_exit+0x9b2/0x28e0 [ 101.356842][ T6834] do_group_exit+0x207/0x2c0 [ 101.361459][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 101.366498][ T6834] x64_sys_call+0x2634/0x2640 [ 101.371185][ T6834] do_syscall_64+0xf3/0x230 [ 101.375718][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.381617][ T6834] Modules linked in: [ 101.385529][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 101.397600][ T6834] Tainted: [B]=BAD_PAGE [ 101.401749][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.411793][ T6834] Call Trace: [ 101.415061][ T6834] [ 101.417987][ T6834] dump_stack_lvl+0x241/0x360 [ 101.422695][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.427890][ T6834] ? __pfx_print_modules+0x10/0x10 [ 101.433016][ T6834] bad_page+0x166/0x1b0 [ 101.437186][ T6834] free_unref_page+0xed0/0xf20 [ 101.441952][ T6834] skb_release_data+0x6dc/0x8a0 [ 101.446798][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 101.451812][ T6834] ? packet_rcv+0x159/0x14b0 [ 101.456393][ T6834] packet_rcv+0x16f/0x14b0 [ 101.460802][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 101.465651][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 101.471623][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 101.478202][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 101.484695][ T6834] ? read_tsc+0x9/0x20 [ 101.488752][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 101.493953][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 101.500326][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 101.506478][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 101.512841][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 101.519521][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 101.524728][ T6834] ? __phys_addr+0xba/0x170 [ 101.529235][ T6834] ? build_skb_around+0x111/0x260 [ 101.534254][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 101.540164][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 101.545456][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 101.550919][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 101.556830][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 101.562361][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.568169][ T6834] ? synchronize_rcu+0x11b/0x360 [ 101.573106][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 101.578419][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 101.584655][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.590545][ T6834] ? _copy_from_user+0xa6/0xe0 [ 101.595311][ T6834] ? bpf_test_init+0x15a/0x180 [ 101.600066][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 101.605511][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.610869][ T6834] ? __pfx_lock_release+0x10/0x10 [ 101.615909][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.621701][ T6834] ? __fget_files+0x29/0x470 [ 101.626279][ T6834] ? fput+0x1a8/0x230 [ 101.630246][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.636038][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 101.641006][ T6834] __sys_bpf+0x48d/0x810 [ 101.645242][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 101.649990][ T6834] ? __sys_bind+0x108/0x2d0 [ 101.654484][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.660455][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.666775][ T6834] ? do_syscall_64+0x100/0x230 [ 101.671529][ T6834] __x64_sys_bpf+0x7c/0x90 [ 101.675934][ T6834] do_syscall_64+0xf3/0x230 [ 101.680427][ T6834] ? clear_bhb_loop+0x35/0x90 [ 101.685114][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.690993][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 101.695394][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.714985][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.723405][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 101.731381][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 101.739337][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 101.747304][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.755267][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 101.763242][ T6834] [ 101.766319][ T6834] BUG: Bad page state in process syz.0.498 pfn:7d61d [ 101.773115][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d61db40 pfn:0x7d61d [ 101.783220][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.790354][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 101.798965][ T6834] raw: ffff88807d61db40 0000000000000001 00000000ffffffff 0000000000000000 [ 101.807567][ T6834] page dumped because: page_pool leak [ 101.812957][ T6834] page_owner tracks the page as allocated [ 101.818667][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372927277, free_ts 96347927682 [ 101.835448][ T6834] post_alloc_hook+0x1f3/0x230 [ 101.840244][ T6834] get_page_from_freelist+0x3045/0x3190 [ 101.845832][ T6834] __alloc_pages_noprof+0x292/0x710 [ 101.851033][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 101.856517][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 101.862422][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 101.867647][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 101.873052][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 101.878425][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 101.883388][ T6834] __sys_bpf+0x48d/0x810 [ 101.887642][ T6834] __x64_sys_bpf+0x7c/0x90 [ 101.892044][ T6834] do_syscall_64+0xf3/0x230 [ 101.896581][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.902483][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 101.908838][ T6834] free_unref_page+0xcfb/0xf20 [ 101.913652][ T6834] tlb_finish_mmu+0x11f/0x200 [ 101.918335][ T6834] exit_mmap+0x496/0xc40 [ 101.922564][ T6834] __mmput+0x115/0x390 [ 101.926678][ T6834] exit_mm+0x220/0x310 [ 101.930759][ T6834] do_exit+0x9b2/0x28e0 [ 101.934927][ T6834] do_group_exit+0x207/0x2c0 [ 101.939519][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 101.944557][ T6834] x64_sys_call+0x2634/0x2640 [ 101.949240][ T6834] do_syscall_64+0xf3/0x230 [ 101.953775][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.959683][ T6834] Modules linked in: [ 101.963596][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 101.975661][ T6834] Tainted: [B]=BAD_PAGE [ 101.979798][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.989836][ T6834] Call Trace: [ 101.993112][ T6834] [ 101.996041][ T6834] dump_stack_lvl+0x241/0x360 [ 102.000709][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.005894][ T6834] ? __pfx_print_modules+0x10/0x10 [ 102.010995][ T6834] bad_page+0x166/0x1b0 [ 102.015148][ T6834] free_unref_page+0xed0/0xf20 [ 102.019926][ T6834] skb_release_data+0x6dc/0x8a0 [ 102.024767][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 102.029776][ T6834] ? packet_rcv+0x159/0x14b0 [ 102.034363][ T6834] packet_rcv+0x16f/0x14b0 [ 102.038789][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 102.043646][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 102.049613][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 102.056190][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 102.062720][ T6834] ? read_tsc+0x9/0x20 [ 102.066791][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 102.071978][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.078301][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 102.084443][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.090776][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 102.097440][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 102.102625][ T6834] ? __phys_addr+0xba/0x170 [ 102.107109][ T6834] ? build_skb_around+0x111/0x260 [ 102.112119][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 102.118003][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 102.123298][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 102.128762][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 102.134645][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 102.140177][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 102.145965][ T6834] ? synchronize_rcu+0x11b/0x360 [ 102.150893][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 102.156173][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 102.162430][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 102.168313][ T6834] ? _copy_from_user+0xa6/0xe0 [ 102.173077][ T6834] ? bpf_test_init+0x15a/0x180 [ 102.177841][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 102.183284][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 102.188648][ T6834] ? __pfx_lock_release+0x10/0x10 [ 102.193685][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.199509][ T6834] ? __fget_files+0x29/0x470 [ 102.204087][ T6834] ? fput+0x1a8/0x230 [ 102.208053][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.213851][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 102.218811][ T6834] __sys_bpf+0x48d/0x810 [ 102.223046][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 102.227794][ T6834] ? __sys_bind+0x108/0x2d0 [ 102.232294][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.238268][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.244585][ T6834] ? do_syscall_64+0x100/0x230 [ 102.249334][ T6834] __x64_sys_bpf+0x7c/0x90 [ 102.253746][ T6834] do_syscall_64+0xf3/0x230 [ 102.258254][ T6834] ? clear_bhb_loop+0x35/0x90 [ 102.262926][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.268815][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 102.273271][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.292883][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.301287][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 102.309286][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 102.317242][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 102.325230][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.333192][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 102.341152][ T6834] [ 102.344241][ T6834] BUG: Bad page state in process syz.0.498 pfn:2d45e [ 102.351013][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d45edc0 pfn:0x2d45e [ 102.361116][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 102.368283][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 102.376908][ T6834] raw: ffff88802d45edc0 0000000000000001 00000000ffffffff 0000000000000000 [ 102.385516][ T6834] page dumped because: page_pool leak [ 102.390868][ T6834] page_owner tracks the page as allocated [ 102.396602][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372915631, free_ts 96347938668 [ 102.413375][ T6834] post_alloc_hook+0x1f3/0x230 [ 102.418135][ T6834] get_page_from_freelist+0x3045/0x3190 [ 102.423701][ T6834] __alloc_pages_noprof+0x292/0x710 [ 102.428906][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 102.434379][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 102.440279][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 102.445499][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 102.450877][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 102.456275][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 102.461218][ T6834] __sys_bpf+0x48d/0x810 [ 102.465483][ T6834] __x64_sys_bpf+0x7c/0x90 [ 102.469904][ T6834] do_syscall_64+0xf3/0x230 [ 102.474424][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.480341][ T6834] page last free pid 6832 tgid 6832 stack trace: [ 102.486692][ T6834] free_unref_page+0xcfb/0xf20 [ 102.491471][ T6834] tlb_finish_mmu+0x11f/0x200 [ 102.496166][ T6834] exit_mmap+0x496/0xc40 [ 102.500410][ T6834] __mmput+0x115/0x390 [ 102.504506][ T6834] exit_mm+0x220/0x310 [ 102.508599][ T6834] do_exit+0x9b2/0x28e0 [ 102.512780][ T6834] do_group_exit+0x207/0x2c0 [ 102.517379][ T6834] __x64_sys_exit_group+0x3f/0x40 [ 102.522386][ T6834] x64_sys_call+0x2634/0x2640 [ 102.527084][ T6834] do_syscall_64+0xf3/0x230 [ 102.531593][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.537504][ T6834] Modules linked in: [ 102.541431][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 102.553478][ T6834] Tainted: [B]=BAD_PAGE [ 102.557614][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.567657][ T6834] Call Trace: [ 102.570928][ T6834] [ 102.573853][ T6834] dump_stack_lvl+0x241/0x360 [ 102.578522][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.583718][ T6834] ? __pfx_print_modules+0x10/0x10 [ 102.588842][ T6834] bad_page+0x166/0x1b0 [ 102.592988][ T6834] free_unref_page+0xed0/0xf20 [ 102.597744][ T6834] skb_release_data+0x6dc/0x8a0 [ 102.602580][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 102.607591][ T6834] ? packet_rcv+0x159/0x14b0 [ 102.612172][ T6834] packet_rcv+0x16f/0x14b0 [ 102.616588][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 102.621429][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 102.627400][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 102.633976][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 102.640463][ T6834] ? read_tsc+0x9/0x20 [ 102.644525][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 102.649711][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.656025][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 102.662176][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 102.668492][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 102.675157][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 102.680373][ T6834] ? __phys_addr+0xba/0x170 [ 102.684863][ T6834] ? build_skb_around+0x111/0x260 [ 102.689882][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 102.695777][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 102.701052][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 102.706497][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 102.712380][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 102.717913][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 102.723711][ T6834] ? synchronize_rcu+0x11b/0x360 [ 102.728650][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 102.733925][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 102.740154][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 102.746036][ T6834] ? _copy_from_user+0xa6/0xe0 [ 102.750787][ T6834] ? bpf_test_init+0x15a/0x180 [ 102.755533][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 102.760984][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 102.766363][ T6834] ? __pfx_lock_release+0x10/0x10 [ 102.771380][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.777170][ T6834] ? __fget_files+0x29/0x470 [ 102.781748][ T6834] ? fput+0x1a8/0x230 [ 102.785728][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 102.791565][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 102.796492][ T6834] __sys_bpf+0x48d/0x810 [ 102.800720][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 102.805477][ T6834] ? __sys_bind+0x108/0x2d0 [ 102.809978][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.815946][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.822263][ T6834] ? do_syscall_64+0x100/0x230 [ 102.827016][ T6834] __x64_sys_bpf+0x7c/0x90 [ 102.831428][ T6834] do_syscall_64+0xf3/0x230 [ 102.835921][ T6834] ? clear_bhb_loop+0x35/0x90 [ 102.840587][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.846485][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 102.850882][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.870472][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.878871][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 102.886835][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 102.894793][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 102.902754][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.910722][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 102.918696][ T6834] [ 102.921764][ T6834] BUG: Bad page state in process syz.0.498 pfn:24861 [ 102.928557][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024861c30 pfn:0x24861 [ 102.938664][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 102.945797][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 102.954408][ T6834] raw: ffff888024861c30 0000000000000001 00000000ffffffff 0000000000000000 [ 102.963041][ T6834] page dumped because: page_pool leak [ 102.968423][ T6834] page_owner tracks the page as allocated [ 102.974173][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372904869, free_ts 96354262152 [ 102.990964][ T6834] post_alloc_hook+0x1f3/0x230 [ 102.995763][ T6834] get_page_from_freelist+0x3045/0x3190 [ 103.001326][ T6834] __alloc_pages_noprof+0x292/0x710 [ 103.006543][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 103.012002][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 103.017916][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 103.023170][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 103.028553][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.033963][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 103.038905][ T6834] __sys_bpf+0x48d/0x810 [ 103.043168][ T6834] __x64_sys_bpf+0x7c/0x90 [ 103.047593][ T6834] do_syscall_64+0xf3/0x230 [ 103.052081][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.057988][ T6834] page last free pid 47 tgid 47 stack trace: [ 103.063990][ T6834] free_unref_page+0xcfb/0xf20 [ 103.068770][ T6834] vfree+0x186/0x2e0 [ 103.072662][ T6834] process_scheduled_works+0xa63/0x1850 [ 103.078241][ T6834] worker_thread+0x870/0xd30 [ 103.082867][ T6834] kthread+0x2f0/0x390 [ 103.086951][ T6834] ret_from_fork+0x4b/0x80 [ 103.091356][ T6834] ret_from_fork_asm+0x1a/0x30 [ 103.096139][ T6834] Modules linked in: [ 103.100080][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 103.112132][ T6834] Tainted: [B]=BAD_PAGE [ 103.116281][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.126319][ T6834] Call Trace: [ 103.129583][ T6834] [ 103.132529][ T6834] dump_stack_lvl+0x241/0x360 [ 103.137199][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.142384][ T6834] ? __pfx_print_modules+0x10/0x10 [ 103.147485][ T6834] bad_page+0x166/0x1b0 [ 103.151628][ T6834] free_unref_page+0xed0/0xf20 [ 103.156385][ T6834] skb_release_data+0x6dc/0x8a0 [ 103.161224][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 103.166266][ T6834] ? packet_rcv+0x159/0x14b0 [ 103.170846][ T6834] packet_rcv+0x16f/0x14b0 [ 103.175252][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 103.180090][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 103.186076][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 103.192653][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 103.199155][ T6834] ? read_tsc+0x9/0x20 [ 103.203236][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 103.208450][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 103.214784][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 103.220927][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 103.227249][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 103.233913][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 103.239096][ T6834] ? __phys_addr+0xba/0x170 [ 103.243596][ T6834] ? build_skb_around+0x111/0x260 [ 103.248634][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 103.254524][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 103.259801][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 103.265252][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 103.271136][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 103.276682][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 103.282478][ T6834] ? synchronize_rcu+0x11b/0x360 [ 103.287407][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 103.292682][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 103.298919][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 103.304802][ T6834] ? _copy_from_user+0xa6/0xe0 [ 103.309556][ T6834] ? bpf_test_init+0x15a/0x180 [ 103.314311][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 103.319763][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.325140][ T6834] ? __pfx_lock_release+0x10/0x10 [ 103.330161][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.335978][ T6834] ? __fget_files+0x29/0x470 [ 103.340560][ T6834] ? fput+0x1a8/0x230 [ 103.344532][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.350324][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 103.355252][ T6834] __sys_bpf+0x48d/0x810 [ 103.359496][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 103.364254][ T6834] ? __sys_bind+0x108/0x2d0 [ 103.368773][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.374757][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.381073][ T6834] ? do_syscall_64+0x100/0x230 [ 103.385828][ T6834] __x64_sys_bpf+0x7c/0x90 [ 103.390234][ T6834] do_syscall_64+0xf3/0x230 [ 103.394725][ T6834] ? clear_bhb_loop+0x35/0x90 [ 103.399403][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.405293][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 103.409724][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.429314][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.437726][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 103.445695][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 103.453665][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 103.461621][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.469580][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 103.477544][ T6834] [ 103.480623][ T6834] BUG: Bad page state in process syz.0.498 pfn:246ca [ 103.487419][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880246caa00 pfn:0x246ca [ 103.497532][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.504668][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 103.513267][ T6834] raw: ffff8880246caa00 0000000000000001 00000000ffffffff 0000000000000000 [ 103.521830][ T6834] page dumped because: page_pool leak [ 103.527218][ T6834] page_owner tracks the page as allocated [ 103.532952][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372893212, free_ts 96361017443 [ 103.549719][ T6834] post_alloc_hook+0x1f3/0x230 [ 103.554562][ T6834] get_page_from_freelist+0x3045/0x3190 [ 103.560108][ T6834] __alloc_pages_noprof+0x292/0x710 [ 103.565323][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 103.570796][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 103.576752][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 103.581974][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 103.587397][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.592798][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 103.597727][ T6834] __sys_bpf+0x48d/0x810 [ 103.601964][ T6834] __x64_sys_bpf+0x7c/0x90 [ 103.606447][ T6834] do_syscall_64+0xf3/0x230 [ 103.610977][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.616899][ T6834] page last free pid 5232 tgid 5232 stack trace: [ 103.623253][ T6834] free_unref_page+0xcfb/0xf20 [ 103.628034][ T6834] __slab_free+0x31b/0x3d0 [ 103.632473][ T6834] qlist_free_all+0x9a/0x140 [ 103.637075][ T6834] kasan_quarantine_reduce+0x14f/0x170 [ 103.642582][ T6834] __kasan_slab_alloc+0x23/0x80 [ 103.647453][ T6834] kmem_cache_alloc_noprof+0x135/0x2a0 [ 103.652934][ T6834] getname_flags+0xb7/0x540 [ 103.657427][ T6834] __x64_sys_unlink+0x3a/0x50 [ 103.662099][ T6834] do_syscall_64+0xf3/0x230 [ 103.666621][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.672527][ T6834] Modules linked in: [ 103.676443][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 103.688509][ T6834] Tainted: [B]=BAD_PAGE [ 103.692651][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.702689][ T6834] Call Trace: [ 103.705959][ T6834] [ 103.708877][ T6834] dump_stack_lvl+0x241/0x360 [ 103.713543][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.718730][ T6834] ? __pfx_print_modules+0x10/0x10 [ 103.723844][ T6834] bad_page+0x166/0x1b0 [ 103.728007][ T6834] free_unref_page+0xed0/0xf20 [ 103.732774][ T6834] skb_release_data+0x6dc/0x8a0 [ 103.737642][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 103.742650][ T6834] ? packet_rcv+0x159/0x14b0 [ 103.747251][ T6834] packet_rcv+0x16f/0x14b0 [ 103.751659][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 103.756508][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 103.762499][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 103.769073][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 103.775566][ T6834] ? read_tsc+0x9/0x20 [ 103.779624][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 103.784815][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 103.791158][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 103.797317][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 103.803645][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 103.810347][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 103.815538][ T6834] ? __phys_addr+0xba/0x170 [ 103.820025][ T6834] ? build_skb_around+0x111/0x260 [ 103.825069][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 103.830967][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 103.836256][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 103.841719][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 103.847601][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 103.853148][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 103.858955][ T6834] ? synchronize_rcu+0x11b/0x360 [ 103.863894][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 103.869188][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 103.875420][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 103.881325][ T6834] ? _copy_from_user+0xa6/0xe0 [ 103.886106][ T6834] ? bpf_test_init+0x15a/0x180 [ 103.890865][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 103.896336][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.901737][ T6834] ? __pfx_lock_release+0x10/0x10 [ 103.906763][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.912563][ T6834] ? __fget_files+0x29/0x470 [ 103.917148][ T6834] ? fput+0x1a8/0x230 [ 103.921121][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.926915][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 103.931842][ T6834] __sys_bpf+0x48d/0x810 [ 103.936074][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 103.940831][ T6834] ? __sys_bind+0x108/0x2d0 [ 103.945325][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.951298][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.957627][ T6834] ? do_syscall_64+0x100/0x230 [ 103.962378][ T6834] __x64_sys_bpf+0x7c/0x90 [ 103.966781][ T6834] do_syscall_64+0xf3/0x230 [ 103.971271][ T6834] ? clear_bhb_loop+0x35/0x90 [ 103.975938][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.981816][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 103.986215][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.005807][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.014274][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 104.022247][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 104.030210][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 104.038166][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.046122][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 104.054118][ T6834] [ 104.057191][ T6834] BUG: Bad page state in process syz.0.498 pfn:30ec3 [ 104.063984][ T6834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030ec3000 pfn:0x30ec3 [ 104.074077][ T6834] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.081196][ T6834] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 104.089830][ T6834] raw: ffff888030ec3000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.098451][ T6834] page dumped because: page_pool leak [ 104.103843][ T6834] page_owner tracks the page as allocated [ 104.109555][ T6834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96372876567, free_ts 96361146948 [ 104.126323][ T6834] post_alloc_hook+0x1f3/0x230 [ 104.131101][ T6834] get_page_from_freelist+0x3045/0x3190 [ 104.136668][ T6834] __alloc_pages_noprof+0x292/0x710 [ 104.141871][ T6834] alloc_pages_bulk_noprof+0x729/0xd40 [ 104.147344][ T6834] __page_pool_alloc_pages_slow+0x122/0x690 [ 104.153264][ T6834] page_pool_alloc_pages+0xd0/0x1c0 [ 104.158454][ T6834] bpf_test_run_xdp_live+0x950/0x2160 [ 104.163846][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 104.169223][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 104.174181][ T6834] __sys_bpf+0x48d/0x810 [ 104.178426][ T6834] __x64_sys_bpf+0x7c/0x90 [ 104.182869][ T6834] do_syscall_64+0xf3/0x230 [ 104.187386][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.193302][ T6834] page last free pid 5232 tgid 5232 stack trace: [ 104.199625][ T6834] free_unref_page+0xcfb/0xf20 [ 104.204418][ T6834] __put_partials+0xeb/0x130 [ 104.209017][ T6834] put_cpu_partial+0x17c/0x250 [ 104.213812][ T6834] __slab_free+0x2ea/0x3d0 [ 104.218230][ T6834] qlist_free_all+0x9a/0x140 [ 104.222841][ T6834] kasan_quarantine_reduce+0x14f/0x170 [ 104.228321][ T6834] __kasan_slab_alloc+0x23/0x80 [ 104.233202][ T6834] kmem_cache_alloc_noprof+0x135/0x2a0 [ 104.238665][ T6834] getname_flags+0xb7/0x540 [ 104.243193][ T6834] __x64_sys_unlink+0x3a/0x50 [ 104.247885][ T6834] do_syscall_64+0xf3/0x230 [ 104.252382][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.258292][ T6834] Modules linked in: [ 104.262202][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 104.274258][ T6834] Tainted: [B]=BAD_PAGE [ 104.278398][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.288436][ T6834] Call Trace: [ 104.291704][ T6834] [ 104.294625][ T6834] dump_stack_lvl+0x241/0x360 [ 104.299300][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.304489][ T6834] ? __pfx_print_modules+0x10/0x10 [ 104.309594][ T6834] bad_page+0x166/0x1b0 [ 104.313764][ T6834] free_unref_page+0xed0/0xf20 [ 104.318518][ T6834] skb_release_data+0x6dc/0x8a0 [ 104.323372][ T6834] sk_skb_reason_drop+0x1c9/0x380 [ 104.328403][ T6834] ? packet_rcv+0x159/0x14b0 [ 104.332982][ T6834] packet_rcv+0x16f/0x14b0 [ 104.337388][ T6834] ? __pfx_packet_rcv+0x10/0x10 [ 104.342226][ T6834] __netif_receive_skb_list_core+0x8b7/0x980 [ 104.348200][ T6834] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 104.354794][ T6834] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 104.361282][ T6834] ? read_tsc+0x9/0x20 [ 104.365343][ T6834] ? timekeeping_get_ns+0x2c0/0x420 [ 104.370533][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 104.376847][ T6834] netif_receive_skb_list_internal+0xa51/0xe30 [ 104.383000][ T6834] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 104.389373][ T6834] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 104.396036][ T6834] ? __pfx_eth_type_trans+0x10/0x10 [ 104.401238][ T6834] ? __phys_addr+0xba/0x170 [ 104.405735][ T6834] ? build_skb_around+0x111/0x260 [ 104.410745][ T6834] ? __xdp_build_skb_from_frame+0x338/0x650 [ 104.416628][ T6834] netif_receive_skb_list+0x55/0x4b0 [ 104.421903][ T6834] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 104.427352][ T6834] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 104.433247][ T6834] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 104.438802][ T6834] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 104.444590][ T6834] ? synchronize_rcu+0x11b/0x360 [ 104.449517][ T6834] ? __pfx_synchronize_rcu+0x10/0x10 [ 104.454833][ T6834] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 104.461067][ T6834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 104.466947][ T6834] ? _copy_from_user+0xa6/0xe0 [ 104.471717][ T6834] ? bpf_test_init+0x15a/0x180 [ 104.476471][ T6834] ? xdp_convert_md_to_buff+0x5b/0x330 [ 104.481925][ T6834] bpf_prog_test_run_xdp+0x805/0x11e0 [ 104.487301][ T6834] ? __pfx_lock_release+0x10/0x10 [ 104.492318][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.498119][ T6834] ? __fget_files+0x29/0x470 [ 104.502696][ T6834] ? fput+0x1a8/0x230 [ 104.506670][ T6834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 104.512472][ T6834] bpf_prog_test_run+0x2e4/0x360 [ 104.517401][ T6834] __sys_bpf+0x48d/0x810 [ 104.521651][ T6834] ? __pfx___sys_bpf+0x10/0x10 [ 104.526401][ T6834] ? __sys_bind+0x108/0x2d0 [ 104.530890][ T6834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.536868][ T6834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.543204][ T6834] ? do_syscall_64+0x100/0x230 [ 104.547981][ T6834] __x64_sys_bpf+0x7c/0x90 [ 104.552388][ T6834] do_syscall_64+0xf3/0x230 [ 104.556898][ T6834] ? clear_bhb_loop+0x35/0x90 [ 104.561569][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.567472][ T6834] RIP: 0033:0x7f6cb1f7dff9 [ 104.571877][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.591475][ T6834] RSP: 002b:00007f6cb2d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.599902][ T6834] RAX: ffffffffffffffda RBX: 00007f6cb2136058 RCX: 00007f6cb1f7dff9 [ 104.607869][ T6834] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 104.615831][ T6834] RBP: 00007f6cb1ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 104.623807][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.631777][ T6834] R13: 0000000000000000 R14: 00007f6cb2136058 R15: 00007ffe15877ad8 [ 104.639749][ T6834] [ 104.682028][ T6829] BUG: Bad page state in process syz.0.498 pfn:30fbf [ 104.704931][ T6829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030fbfdc0 pfn:0x30fbf [ 104.715706][ T6829] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.728195][ T6829] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 104.737276][ T6829] raw: ffff888030fbfdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 104.747108][ T6829] page dumped because: page_pool leak [ 104.752473][ T6829] page_owner tracks the page as allocated [ 104.758377][ T6829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373388549, free_ts 96092615456 [ 104.779050][ T6829] post_alloc_hook+0x1f3/0x230 [ 104.784142][ T6829] get_page_from_freelist+0x3045/0x3190 [ 104.789711][ T6829] __alloc_pages_noprof+0x292/0x710 [ 104.794939][ T6829] alloc_pages_bulk_noprof+0x729/0xd40 [ 104.800506][ T6829] __page_pool_alloc_pages_slow+0x122/0x690 [ 104.807466][ T6829] page_pool_alloc_pages+0xd0/0x1c0 [ 104.812665][ T6829] bpf_test_run_xdp_live+0x950/0x2160 [ 104.818080][ T6829] bpf_prog_test_run_xdp+0x805/0x11e0 [ 104.823859][ T6829] bpf_prog_test_run+0x2e4/0x360 [ 104.828833][ T6829] __sys_bpf+0x48d/0x810 [ 104.833108][ T6829] __x64_sys_bpf+0x7c/0x90 [ 104.837618][ T6829] do_syscall_64+0xf3/0x230 [ 104.842154][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.848066][ T6829] page last free pid 5281 tgid 5281 stack trace: [ 104.854551][ T6829] free_unref_page+0xcfb/0xf20 [ 104.859310][ T6829] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 104.865076][ T6829] __apply_to_page_range+0x806/0xde0 [ 104.870449][ T6829] kasan_release_vmalloc+0x9a/0xb0 [ 104.875603][ T6829] purge_vmap_node+0x417/0x810 [ 104.880438][ T6829] __purge_vmap_area_lazy+0x708/0xae0 [ 104.886847][ T6829] drain_vmap_area_work+0x27/0x40 [ 104.891869][ T6829] process_scheduled_works+0xa63/0x1850 [ 104.897460][ T6829] worker_thread+0x870/0xd30 [ 104.902213][ T6829] kthread+0x2f0/0x390 [ 104.906338][ T6829] ret_from_fork+0x4b/0x80 [ 104.910762][ T6829] ret_from_fork_asm+0x1a/0x30 [ 104.915693][ T6829] Modules linked in: [ 104.919604][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 104.931683][ T6829] Tainted: [B]=BAD_PAGE [ 104.935827][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.945874][ T6829] Call Trace: [ 104.949160][ T6829] [ 104.952080][ T6829] dump_stack_lvl+0x241/0x360 [ 104.956748][ T6829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.961956][ T6829] ? __pfx_print_modules+0x10/0x10 [ 104.967084][ T6829] bad_page+0x166/0x1b0 [ 104.971242][ T6829] free_unref_page+0xed0/0xf20 [ 104.976008][ T6829] skb_release_data+0x6dc/0x8a0 [ 104.980847][ T6829] sk_skb_reason_drop+0x1c9/0x380 [ 104.985859][ T6829] skb_queue_purge_reason+0x3c5/0x500 [ 104.991220][ T6829] ? packet_release+0xae4/0xcd0 [ 104.996069][ T6829] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 105.001952][ T6829] ? rcu_is_watching+0x15/0xb0 [ 105.006700][ T6829] ? kfree+0x4e/0x440 [ 105.010678][ T6829] ? packet_release+0xa7f/0xcd0 [ 105.015522][ T6829] packet_release+0xb15/0xcd0 [ 105.020190][ T6829] ? __pfx_packet_release+0x10/0x10 [ 105.025393][ T6829] ? down_write+0x18c/0x220 [ 105.029890][ T6829] ? __pfx_down_write+0x10/0x10 [ 105.034736][ T6829] sock_close+0xbc/0x240 [ 105.038970][ T6829] ? __pfx_sock_close+0x10/0x10 [ 105.043813][ T6829] __fput+0x23f/0x880 [ 105.047817][ T6829] task_work_run+0x24f/0x310 [ 105.052400][ T6829] ? __pfx_task_work_run+0x10/0x10 [ 105.057509][ T6829] ? irqtime_account_irq+0xd4/0x1e0 [ 105.062703][ T6829] ? rcu_is_watching+0x15/0xb0 [ 105.067461][ T6829] syscall_exit_to_user_mode+0x168/0x370 [ 105.073087][ T6829] do_syscall_64+0x100/0x230 [ 105.077668][ T6829] ? clear_bhb_loop+0x35/0x90 [ 105.082334][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.088222][ T6829] RIP: 0033:0x7f6cb1f7dff9 [ 105.092623][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.112218][ T6829] RSP: 002b:00007ffe15877c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 105.120621][ T6829] RAX: 0000000000000000 RBX: 00007f6cb2137a80 RCX: 00007f6cb1f7dff9 [ 105.128581][ T6829] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 105.136540][ T6829] RBP: 00007f6cb2137a80 R08: 0000000000000006 R09: 00007ffe15877f2f [ 105.144499][ T6829] R10: 00000000003ffa04 R11: 0000000000000246 R12: 0000000000017b24 [ 105.152463][ T6829] R13: 00007ffe15877d40 R14: 0000000000000032 R15: ffffffffffffffff [ 105.160440][ T6829] [ 105.167160][ T6829] BUG: Bad page state in process syz.0.498 pfn:1ffea [ 105.174014][ T6829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801ffeab80 pfn:0x1ffea [ 105.184290][ T6829] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 105.191425][ T6829] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 105.200051][ T6829] raw: ffff88801ffeab80 0000000000000001 00000000ffffffff 0000000000000000 [ 105.208690][ T6829] page dumped because: page_pool leak [ 105.214084][ T6829] page_owner tracks the page as allocated [ 105.219792][ T6829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373382255, free_ts 96007795056 [ 105.236773][ T6829] post_alloc_hook+0x1f3/0x230 [ 105.241542][ T6829] get_page_from_freelist+0x3045/0x3190 [ 105.247110][ T6829] __alloc_pages_noprof+0x292/0x710 [ 105.252312][ T6829] alloc_pages_bulk_noprof+0x729/0xd40 [ 105.257899][ T6829] __page_pool_alloc_pages_slow+0x122/0x690 [ 105.263876][ T6829] page_pool_alloc_pages+0xd0/0x1c0 [ 105.269089][ T6829] bpf_test_run_xdp_live+0x950/0x2160 [ 105.275479][ T6829] bpf_prog_test_run_xdp+0x805/0x11e0 [ 105.280848][ T6829] bpf_prog_test_run+0x2e4/0x360 [ 105.285820][ T6829] __sys_bpf+0x48d/0x810 [ 105.290065][ T6829] __x64_sys_bpf+0x7c/0x90 [ 105.294514][ T6829] do_syscall_64+0xf3/0x230 [ 105.299046][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.304985][ T6829] page last free pid 6811 tgid 6806 stack trace: [ 105.311323][ T6829] free_unref_folios+0xf12/0x18d0 [ 105.316457][ T6829] folios_put_refs+0x76c/0x860 [ 105.321233][ T6829] free_pages_and_swap_cache+0x2ea/0x690 [ 105.326917][ T6829] tlb_flush_mmu+0x3a3/0x680 [ 105.331610][ T6829] tlb_finish_mmu+0xd4/0x200 [ 105.337177][ T6829] exit_mmap+0x496/0xc40 [ 105.341422][ T6829] __mmput+0x115/0x390 [ 105.345558][ T6829] exit_mm+0x220/0x310 [ 105.349646][ T6829] do_exit+0x9b2/0x28e0 [ 105.353903][ T6829] do_group_exit+0x207/0x2c0 [ 105.358514][ T6829] get_signal+0x16a3/0x1740 [ 105.363048][ T6829] arch_do_signal_or_restart+0x96/0x860 [ 105.368730][ T6829] syscall_exit_to_user_mode+0xc9/0x370 [ 105.374321][ T6829] do_syscall_64+0x100/0x230 [ 105.378940][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.385723][ T6829] Modules linked in: [ 105.389630][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 105.401676][ T6829] Tainted: [B]=BAD_PAGE [ 105.405821][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.415868][ T6829] Call Trace: [ 105.419151][ T6829] [ 105.422068][ T6829] dump_stack_lvl+0x241/0x360 [ 105.426735][ T6829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.431929][ T6829] ? __pfx_print_modules+0x10/0x10 [ 105.437141][ T6829] bad_page+0x166/0x1b0 [ 105.441288][ T6829] free_unref_page+0xed0/0xf20 [ 105.446056][ T6829] skb_release_data+0x6dc/0x8a0 [ 105.450908][ T6829] sk_skb_reason_drop+0x1c9/0x380 [ 105.455945][ T6829] skb_queue_purge_reason+0x3c5/0x500 [ 105.461319][ T6829] ? packet_release+0xae4/0xcd0 [ 105.466165][ T6829] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 105.472060][ T6829] ? rcu_is_watching+0x15/0xb0 [ 105.476813][ T6829] ? kfree+0x4e/0x440 [ 105.480797][ T6829] ? packet_release+0xa7f/0xcd0 [ 105.485653][ T6829] packet_release+0xb15/0xcd0 [ 105.490337][ T6829] ? __pfx_packet_release+0x10/0x10 [ 105.495527][ T6829] ? down_write+0x18c/0x220 [ 105.500029][ T6829] ? __pfx_down_write+0x10/0x10 [ 105.504872][ T6829] sock_close+0xbc/0x240 [ 105.509105][ T6829] ? __pfx_sock_close+0x10/0x10 [ 105.513960][ T6829] __fput+0x23f/0x880 [ 105.517946][ T6829] task_work_run+0x24f/0x310 [ 105.522529][ T6829] ? __pfx_task_work_run+0x10/0x10 [ 105.527627][ T6829] ? irqtime_account_irq+0xd4/0x1e0 [ 105.532824][ T6829] ? rcu_is_watching+0x15/0xb0 [ 105.537578][ T6829] syscall_exit_to_user_mode+0x168/0x370 [ 105.543207][ T6829] do_syscall_64+0x100/0x230 [ 105.547791][ T6829] ? clear_bhb_loop+0x35/0x90 [ 105.552461][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.558346][ T6829] RIP: 0033:0x7f6cb1f7dff9 [ 105.562766][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.582374][ T6829] RSP: 002b:00007ffe15877c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 105.590780][ T6829] RAX: 0000000000000000 RBX: 00007f6cb2137a80 RCX: 00007f6cb1f7dff9 [ 105.598739][ T6829] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 105.606706][ T6829] RBP: 00007f6cb2137a80 R08: 0000000000000006 R09: 00007ffe15877f2f [ 105.614666][ T6829] R10: 00000000003ffa04 R11: 0000000000000246 R12: 0000000000017b24 [ 105.622622][ T6829] R13: 00007ffe15877d40 R14: 0000000000000032 R15: ffffffffffffffff [ 105.630596][ T6829] [ 105.637271][ T6829] BUG: Bad page state in process syz.0.498 pfn:318d9 [ 105.644278][ T6829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880318d9dc0 pfn:0x318d9 [ 105.655451][ T6829] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 105.662562][ T6829] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 105.671248][ T6829] raw: ffff8880318d9dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 105.679956][ T6829] page dumped because: page_pool leak [ 105.685386][ T6829] page_owner tracks the page as allocated [ 105.691095][ T6829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373376186, free_ts 96007804932 [ 105.707980][ T6829] post_alloc_hook+0x1f3/0x230 [ 105.712884][ T6829] get_page_from_freelist+0x3045/0x3190 [ 105.718450][ T6829] __alloc_pages_noprof+0x292/0x710 [ 105.723684][ T6829] alloc_pages_bulk_noprof+0x729/0xd40 [ 105.729145][ T6829] __page_pool_alloc_pages_slow+0x122/0x690 [ 105.735082][ T6829] page_pool_alloc_pages+0xd0/0x1c0 [ 105.740286][ T6829] bpf_test_run_xdp_live+0x950/0x2160 [ 105.746746][ T6829] bpf_prog_test_run_xdp+0x805/0x11e0 [ 105.752126][ T6829] bpf_prog_test_run+0x2e4/0x360 [ 105.757104][ T6829] __sys_bpf+0x48d/0x810 [ 105.761353][ T6829] __x64_sys_bpf+0x7c/0x90 [ 105.765806][ T6829] do_syscall_64+0xf3/0x230 [ 105.770322][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.776259][ T6829] page last free pid 6811 tgid 6806 stack trace: [ 105.782587][ T6829] free_unref_folios+0xf12/0x18d0 [ 105.787674][ T6829] folios_put_refs+0x76c/0x860 [ 105.792475][ T6829] free_pages_and_swap_cache+0x2ea/0x690 [ 105.798259][ T6829] tlb_flush_mmu+0x3a3/0x680 [ 105.802898][ T6829] tlb_finish_mmu+0xd4/0x200 [ 105.807497][ T6829] exit_mmap+0x496/0xc40 [ 105.811729][ T6829] __mmput+0x115/0x390 [ 105.815828][ T6829] exit_mm+0x220/0x310 [ 105.819926][ T6829] do_exit+0x9b2/0x28e0 [ 105.824144][ T6829] do_group_exit+0x207/0x2c0 [ 105.828745][ T6829] get_signal+0x16a3/0x1740 [ 105.833291][ T6829] arch_do_signal_or_restart+0x96/0x860 [ 105.838842][ T6829] syscall_exit_to_user_mode+0xc9/0x370 [ 105.844610][ T6829] do_syscall_64+0x100/0x230 [ 105.849213][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.856001][ T6829] Modules linked in: [ 105.859906][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 105.871978][ T6829] Tainted: [B]=BAD_PAGE [ 105.876113][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.886148][ T6829] Call Trace: [ 105.889416][ T6829] [ 105.892331][ T6829] dump_stack_lvl+0x241/0x360 [ 105.896998][ T6829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.902182][ T6829] ? __pfx_print_modules+0x10/0x10 [ 105.907311][ T6829] bad_page+0x166/0x1b0 [ 105.911475][ T6829] free_unref_page+0xed0/0xf20 [ 105.916245][ T6829] skb_release_data+0x6dc/0x8a0 [ 105.921091][ T6829] sk_skb_reason_drop+0x1c9/0x380 [ 105.926105][ T6829] skb_queue_purge_reason+0x3c5/0x500 [ 105.931466][ T6829] ? packet_release+0xae4/0xcd0 [ 105.936315][ T6829] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 105.942214][ T6829] ? rcu_is_watching+0x15/0xb0 [ 105.946969][ T6829] ? kfree+0x4e/0x440 [ 105.950941][ T6829] ? packet_release+0xa7f/0xcd0 [ 105.955786][ T6829] packet_release+0xb15/0xcd0 [ 105.960496][ T6829] ? __pfx_packet_release+0x10/0x10 [ 105.965683][ T6829] ? down_write+0x18c/0x220 [ 105.970180][ T6829] ? __pfx_down_write+0x10/0x10 [ 105.975022][ T6829] sock_close+0xbc/0x240 [ 105.979259][ T6829] ? __pfx_sock_close+0x10/0x10 [ 105.984102][ T6829] __fput+0x23f/0x880 [ 105.988080][ T6829] task_work_run+0x24f/0x310 [ 105.992659][ T6829] ? __pfx_task_work_run+0x10/0x10 [ 105.997791][ T6829] ? irqtime_account_irq+0xd4/0x1e0 [ 106.002981][ T6829] ? rcu_is_watching+0x15/0xb0 [ 106.007744][ T6829] syscall_exit_to_user_mode+0x168/0x370 [ 106.013399][ T6829] do_syscall_64+0x100/0x230 [ 106.017982][ T6829] ? clear_bhb_loop+0x35/0x90 [ 106.022651][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.028534][ T6829] RIP: 0033:0x7f6cb1f7dff9 [ 106.032937][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.052530][ T6829] RSP: 002b:00007ffe15877c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.060934][ T6829] RAX: 0000000000000000 RBX: 00007f6cb2137a80 RCX: 00007f6cb1f7dff9 [ 106.068903][ T6829] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.076864][ T6829] RBP: 00007f6cb2137a80 R08: 0000000000000006 R09: 00007ffe15877f2f [ 106.084822][ T6829] R10: 00000000003ffa04 R11: 0000000000000246 R12: 0000000000017b24 [ 106.092778][ T6829] R13: 00007ffe15877d40 R14: 0000000000000032 R15: ffffffffffffffff [ 106.100740][ T6829] [ 106.108190][ T6829] BUG: Bad page state in process syz.0.498 pfn:30310 [ 106.115005][ T6829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030310000 pfn:0x30310 [ 106.125380][ T6829] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.132497][ T6829] raw: 00fff00000000000 dead000000000040 ffff888071ebc000 0000000000000000 [ 106.141131][ T6829] raw: ffff888030310000 0000000000000001 00000000ffffffff 0000000000000000 [ 106.149767][ T6829] page dumped because: page_pool leak [ 106.155316][ T6829] page_owner tracks the page as allocated [ 106.161045][ T6829] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6834, tgid 6829 (syz.0.498), ts 96373369810, free_ts 96007814140 [ 106.177860][ T6829] post_alloc_hook+0x1f3/0x230 [ 106.182634][ T6829] get_page_from_freelist+0x3045/0x3190 [ 106.188202][ T6829] __alloc_pages_noprof+0x292/0x710 [ 106.193433][ T6829] alloc_pages_bulk_noprof+0x729/0xd40 [ 106.198885][ T6829] __page_pool_alloc_pages_slow+0x122/0x690 [ 106.204838][ T6829] page_pool_alloc_pages+0xd0/0x1c0 [ 106.210069][ T6829] bpf_test_run_xdp_live+0x950/0x2160 [ 106.216609][ T6829] bpf_prog_test_run_xdp+0x805/0x11e0 [ 106.221988][ T6829] bpf_prog_test_run+0x2e4/0x360 [ 106.226960][ T6829] __sys_bpf+0x48d/0x810 [ 106.231249][ T6829] __x64_sys_bpf+0x7c/0x90 [ 106.235717][ T6829] do_syscall_64+0xf3/0x230 [ 106.240226][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.246155][ T6829] page last free pid 6811 tgid 6806 stack trace: [ 106.252510][ T6829] free_unref_folios+0xf12/0x18d0 [ 106.257767][ T6829] folios_put_refs+0x76c/0x860 [ 106.262585][ T6829] free_pages_and_swap_cache+0x2ea/0x690 [ 106.268252][ T6829] tlb_flush_mmu+0x3a3/0x680 [ 106.272888][ T6829] tlb_finish_mmu+0xd4/0x200 [ 106.277482][ T6829] exit_mmap+0x496/0xc40 [ 106.281727][ T6829] __mmput+0x115/0x390 [ 106.285829][ T6829] exit_mm+0x220/0x310 [ 106.289899][ T6829] do_exit+0x9b2/0x28e0 [ 106.294142][ T6829] do_group_exit+0x207/0x2c0 [ 106.298739][ T6829] get_signal+0x16a3/0x1740 [ 106.303278][ T6829] arch_do_signal_or_restart+0x96/0x860 [ 106.308828][ T6829] syscall_exit_to_user_mode+0xc9/0x370 [ 106.314409][ T6829] do_syscall_64+0x100/0x230 [ 106.319006][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.325770][ T6829] Modules linked in: [ 106.329664][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.0.498 Tainted: G B 6.12.0-rc2-syzkaller-00501-gd677aebd663d #0 [ 106.341736][ T6829] Tainted: [B]=BAD_PAGE [ 106.345871][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.355915][ T6829] Call Trace: [ 106.359228][ T6829] [ 106.362168][ T6829] dump_stack_lvl+0x241/0x360 [ 106.366836][ T6829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.372034][ T6829] ? __pfx_print_modules+0x10/0x10 [ 106.377140][ T6829] bad_page+0x166/0x1b0 [ 106.381292][ T6829] free_unref_page+0xed0/0xf20 [ 106.386073][ T6829] skb_release_data+0x6dc/0x8a0 [ 106.390922][ T6829] sk_skb_reason_drop+0x1c9/0x380 [ 106.395949][ T6829] skb_queue_purge_reason+0x3c5/0x500 [ 106.401332][ T6829] ? packet_release+0xae4/0xcd0 [ 106.406187][ T6829] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 106.412084][ T6829] ? rcu_is_watching+0x15/0xb0 [ 106.416843][ T6829] ? kfree+0x4e/0x440 [ 106.420815][ T6829] ? packet_release+0xa7f/0xcd0 [ 106.425669][ T6829] packet_release+0xb15/0xcd0 [ 106.430337][ T6829] ? __pfx_packet_release+0x10/0x10 [ 106.435528][ T6829] ? down_write+0x18c/0x220