last executing test programs: 30.830152297s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.'], 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d667363616368"]) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') getcwd(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0086401, &(0x7f0000000140)={0xfffffffe, 0x0}) write$cgroup_int(r1, &(0x7f0000000080)=0xfffffffffffffffc, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x2, 0x0, 0xa}}}, 0xb8}}, 0x0) 30.718887739s ago: executing program 1 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYBLOB="c819c587a36f08f252ea982917ae87118fe0d135a6c2ea69d180d2a8e7adc69079d1e81d53f25f0bb5e8fe47f1ffe4a09ed3b945db8d7465615114129bccd8b28f8a30614642519a91092fba4cc3526c3659c3b2c740eb7f9a450c2de1edf4fe4b69ddc78857b4142a0ada85649d634403bfaf1fb8af5f500ff7c78ee7ee4666cd75d8e09a1bce38835dbc629fb7b803d07262e2fd2c608a05d75a372d4088e945a64d5f290b3ba08cb547f7874f0b646040705fc760242b74d6e91749f780e00392dce9c616d457851c8fef616dfcc7f088ea11ce79eae18a9dacabcee0fdae7b706ee1c5e0eac4359d9dbc83"], 0x40}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 29.83975714s ago: executing program 1 (id=85): syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@remote, @random="abbf80c643d0", @val={@val, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @empty, @empty, @empty, @mcast2}}}}, 0x0) 29.838993986s ago: executing program 1 (id=86): io_uring_setup(0x5, &(0x7f00000002c0)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x200000a, 0x28011, r0, 0x8e205000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@getlink={0x50, 0x12, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, [@IFLA_WEIGHT={0x8, 0xf, 0xa86}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1fc}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd(0x0) eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000340)={r8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x3c}}, 0x20000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x52, 0x0, 0x0, {0x0, 0xa}, {0x3}, @const={0x0, {0x0, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) 28.890214228s ago: executing program 1 (id=93): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x44, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0x1d4, 0x2, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff6}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008002) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5c3, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x78, 0x3}, 0x20) 28.790699177s ago: executing program 0 (id=95): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0}) (async, rerun: 64) r6 = openat$fuse(0xffffff9c, &(0x7f0000002700), 0x2, 0x0) (async) r7 = openat$pmem0(0xffffff9c, &(0x7f0000002e40), 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x6003) (async, rerun: 64) sendfile(r6, r7, 0x0, 0x101) (rerun: 64) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) write$cgroup_int(r0, 0x0, 0x0) (rerun: 32) 28.690557981s ago: executing program 0 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee00) ioctl$PIO_UNIMAP(r1, 0x4b67, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "37c80a740562c24aaafe5f24a08ac4c6", 0x7}}}, 0x1a) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000023000b03d05a806f8c6394f91f24fc60", 0x14}], 0x1}, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mknod$loop(0x0, 0x0, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 28.687362693s ago: executing program 0 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000f50c00104000000000000000"], 0x54}}, 0x0) 28.672832679s ago: executing program 0 (id=98): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000001}) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000140)='./file0\x00') capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) ioprio_set$uid(0x3, 0x0, 0x2007) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000001}) (async) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') (async) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) (async) ioprio_set$uid(0x3, 0x0, 0x2007) (async) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) 28.550548522s ago: executing program 0 (id=99): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x1b4, r0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x37}}}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x5, 0x1, 0x3, 0xb9, 0x9, 0x2]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x81, 0x5eb]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x8, 0x7f, 0x9, 0x7, 0x7, 0x7, 0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x141}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x9, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x33, 0x7]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x9, 0xc9, 0x7, 0x6805, 0x2, 0x800]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x691}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80000001, 0x7, 0x5018cb2a]}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xab]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4bf}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x532}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x35}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1c1f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xd10, 0xa, 0x8, 0xfff, 0x20a6, 0x4, 0xb, 0xff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x2000c080}, 0x885) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async, rerun: 32) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (rerun: 32) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) (async, rerun: 32) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) (async, rerun: 64) write$tcp_congestion(r5, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r4) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150a0102000000000000963287041812df4f30e7090000000000000900010073797a3000000000"], 0x20}}, 0x0) (async) accept4$alg(r10, 0x0, 0x0, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r12, 0x541c, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 28.369832063s ago: executing program 0 (id=101): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x0, 0x8001}, 0x100, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xd75}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x8, 0x800000}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0xb56}, 0x8) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff20cc}, @in6={0xa, 0x4e24, 0x1, @empty, 0x4bffa016}]}, &(0x7f0000000380)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x3ff, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r3) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000480)=0x8001, &(0x7f00000004c0)=0x4) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x5e3d}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004004}, 0x4011) bind$netrom(r3, &(0x7f0000000700)={{0x3, @null, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x93}}, [0x2, 0xff, 0x3, 0xb7, 0x6, 0x4, 0x2be, 0x0, 0xc, 0x4, 0xb9e, 0x100, 0x4, 0x2, 0x8]}, &(0x7f0000000880)=0x100) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a40)={r1, 0x42, "e2f9de25129e4a7c88edb2875a76398232b2310ff9d3fbf69067d15b3beb1d7d5c76e1a5b3c1ec38f20767d1138d6e88985bd238e7d986ec81335f3fa68edcf3ebec"}, &(0x7f0000000ac0)=0x4a) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) fcntl$getownex(r4, 0x10, &(0x7f0000000b00)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x4c040) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000046c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004680)={&(0x7f0000000cc0)={0x3984, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x40c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x3d0, 0x4, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x27, 0x1, "da6a88885623403ee345eb2aa95db11968c7e329e3e641290fbfcf8347fae4aa6791bd"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x27, 0x2, "624b0e609a0d18837ac83ce89fdba9357fb917fe2a5f4069c35557ce2324a4e901a161"}, @NL80211_PKTPAT_PATTERN={0x28, 0x2, "6f76048321e4a97eee32b77f55faaea22caa656a34e95f170ca9687501f0f469bdb19cb6"}, @NL80211_PKTPAT_MASK={0x6d, 0x1, "149c6e97000a9a5be1a70351beebbcdb14824357b1f8295e3d5bfacc245d45bb97ab7c584a839e7e441d3b608d415dd5a3a2d945cd2c821c2e7006ea064b56610f3836030eb4038ff902cad3cf9077f216668d664131ee95909e9edeec3ff133b5c6909ba7220221db"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}, {0x4}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x75, 0x2, "f5542fc69d2c441aa659b3a5d6b934d9ebebff4f9f86c7a0941347ecf6c82d63c917c14729fa807c165c99a0b72fbed94122167379d9fb1fc2800507ffd04cd3ff1feb4cdbc95727740408b8a1f18517e073c802fbe6ab1710901cd4f4484c291081debba9d2614464af8e29bc40c9ca64"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_PATTERN={0xa7, 0x2, "021021d593fa444cf5a09c63036a7e882ee56de52b56cd9ff319261a05fabd513adf1ff92ac26a8ec7f9fbc312ee8f2f8a33952f583011e2f9cef9c6e1b3c3958747ebc730dd830926e59d9f364fcea733ba5e268c8b324e12a0da24eae8442eed0eec931d7bc8bd8e91efd0ea416ddcb4f1d7c9b19c3888155955d956e53762ef4e1913818ce0b896ec97402a51ad5f878013a61f1835eda79e703167b7af9db74421"}, @NL80211_PKTPAT_MASK={0xf7, 0x1, "46e48d80cb40839105c46d2defb2f8746530228f742d9a2b3cfb679cd9a93fcfd998f3c6305623094fedda81e3ef297a01de8d900ec431c3fa265ef2ac5997c480d77446b7da897638d0516203a3b60bacf66deaec9ff185107c6284651643ab1b0911a77b00d2bc868bea117c9a1ff52b1f567a0294ddc897a8c23dfa7af143dc1ac87c4a947d8b7e038f6f2f468c737177e9f5ca6ee52a38d5c2d9be9a46cc58e5056f4928c4867cb1a879cd931da9c211ae084aec3d3e33c5f8826d33369fd18c97fffe6b87859e0616f25ad7c389b2ee348b82ece935fe747647f6ba74e8a39bb3aff98810a7bc7b9b30b0fde7a29c37ee"}, @NL80211_PKTPAT_PATTERN={0x99, 0x2, "341735191a00c0762ee8247d1e3d04f97510af51798b54df86d6c13692d01f3827c78e0978738adf297729ab1510c4a2b37cb2b2a62a4fd836961ab0fdc8185d7eb377ae2809cfd4b584644a439e1daff975fd7973fa2cd7c7c46a0ee53d538dfa177a5c8320cd684697241aaa7832a827f0dc5d6136062b20111178c7d3d1dc71d7c5dad3c293fa33d7f76b87abbe3c5fabbe23a5"}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x34, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x26, 0x6, "ffa1a6369439494ecf5d36b75f92ed92f2006a35ec2bd5a85144a3bd1988bd462515"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2f60, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x98, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="697c66738f0f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1000}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6d9e}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ac9bcfa74006"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="ba50eaef664111654890aa91764218fb28062d55f885"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x154, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0xc2, 0xb, "b6f3bbb4044ec37288c4e6bc9d4ba5e49a525718bb6a12d9483ea6974e0cf55f5ebfc1dcf89c37e790ea8d45271a49c6b154c34dfb0aadf7a49a7b6a07a9b1619262c03ddd0eb3dc9da017ad659bb1ca6f56ebca415002698e67dc253adc246a3507601ee95c0f346e6bcc9100dcaff28d078b419fa50c28e8d8c58e38158c093bfd780cd163e6deee44b72aae1ff163ba3e2fd59e07fe2d339b173bef31aa51087fed633b97ba0b783bf304184846366d49cf1d3b7a316892687ae472b5"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x8a, 0x8, {0xfffffffa, 0xcb4, "4338b7e5ad5c46d5282a9b5b51ecf4574f780bca754446c7e7267e227bb1af6adf89317fa0dfd7af74b58121637a7867aac27670b0ec08473539973f30b42ea1722da1e3bdd32379f7ec0e295abafa9f5998cbcb12e742da9db34d8bd4a19aef77d91c45fdc6057e7eb50438be5ac371b78db224830135ce09b512433ed9"}}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1afc, 0x4, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x99, 0x2, "0c9f5823d711762d79915c4224fb584b2c73e2c9e981296e4af1a9d97e0fd515a261cb4a2b7f50c4beead38d37fe28530eb2b90ebddd4ddebb91958eaa0bf406cc8a44d1cb0a540a8e3dfceecde9bfc55868e156d74282e0dcd601f81c300c9c56a67b3513740314a2a7d17d5c9ae4f8dc09f4ca484685f39a9e29484d15bc132d7c2f4a35d640e6a01f124df8e2eef89247669cde"}, @NL80211_PKTPAT_PATTERN={0xd6, 0x2, "9288f6390055916a3ca8b1434250c20d6dbf912fd1178f27c2582f9bb356e1acc7d321a81d02a8c47ae131403eda3cb3651329973400f6243cf9c359a983bb3254f8a8222d5ddf0217ba95177e06713e83c390548b08ba0e7288d23581124e5594a055b54a1dae1460983b15f40c41e3c3e490ac9a51aaeafe077263ce4634fc6f1b6d3affe27a80d8284840eb4b428de1c10ff9635bca7b1410dcd31411b9f48084db99a4be155b6b6f50400e1c99a0496b48ac0bb33126f59c3a603fd4cf8dff585b519bea924405c10c4ae3ffc532112d"}, @NL80211_PKTPAT_PATTERN={0x87, 0x2, "2a28a07b8e55424cdda64573a987141f80d38344feff6b020f263b59733ddc9b20aeef156fbc3e26107b2b7d0634827910eee600d83e2db08c9d01312c046dd9b07215fa12608b3c3ed651f9aab58944e99dd21680b8d1ee8515a9dd438fae1bdff82469f7238799f93b3b53328f51e31894483c6474f800781be0cea050d890b18299"}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd9, 0x1, "ad6b3487d93295abf1c33b5edbd68f4d8a4e6242020b69b7d7ca15073ddc7dbac3ac65e59e610b2f99591c3e4ab920878bb71c1bc89f215c304808925f40c4fe9c19243e86c869853995bb2a4e8d90ace7fcefe08da8a77da31c0aa93020ddb9ab0c54fd061268dad03112b2fab0a77e0fcd5c2e86ea7a94d4a89fb120029f3f3af9a0aea978643a7828cf84dcce98815b4122dd5e2162009095faad1b1a4226fe82ad672a02faa3acb82cf3fa3af0d56e16d9505370c7dcae3f26cdbdaa9d87d37fa3ec2475299dba310999d9ba4ad5b3aa538c2f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0xfd, 0x1, "50b6380b091636d591dc2a34e679f6eec29a7f232e7e468a896e54e02331ba153863c5dc700b0b150fa763095d64d42e8db675e5eb8d9d8a0e8083f391f64fc84373424943f48a2f2830d4107eb1e8e85ea9f70b8eebcbad14e66de67e678dcfd6b0e01d27cd6fcccc23b3cbccb8aa8bad11bc497cd48e295c7f04d8ad5afb5d871ba39cb3bf87dfef3addba2f63960b5c6f6ae0af0fcda12e2035b089f98fa68476c7d5c5d7618a60c01a66fb09b50eb18b7c8c76f36da8545f75725697b7ad912d9f307f9930de65f5c826f557247849a28b42ce733ab7844f4cd6db68b21c9a5d9d54c6a1e15053575a83cbde56aacb8da0047fdf070eaf"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xce57}, @NL80211_PKTPAT_MASK={0xcf, 0x1, "a8c8483d4650bd59306968f207dca99a57625b2fd3288aa081e4900b6b874d5ed83cfc4849eb61a10dbfe6a9bdcb5fcdf69ebd7c239fb75dc78240112ec168dd3a6ccb8d846a648406a0d095017da7e55c7f86eb44c8f4b50e3657f73f5170d0291bcf1e85ff0569897838ed3164e0a6683a3f0fed05320e5263fbbc3d5f93855a737dd48e1dcbb7987edcc87ba9bd7a997a082b0bebe740bd3b4015aa6e249724060ee0f4e9a0851802142ef49479f502c50baf97f7e2ef215a5387973a3ad51dd39ba4d90f85d381d202"}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf1, 0x2, "b235f6cae5a9c4e0a384d832286f40927156f79abdc47e045343f1da7ca7ae8beb7e77cec0140cb08a487374b15a16cf0d5aba1b447d93c309aa3a6f55807430418bae2f9e8041435a4d717706a281fc91d22728546433f790fd77fb926e06e223a6ac77c06a3936edee257e1581d6b8bf71746787403a62e4f973e650a3a01f6095996a8096be589bfccb13dbc51175b21dd4d840f16c2fa2174c403526e42e2d620fc6ee4d667ae8dac692f5d8ca1d6d8925a048b2c400b1a1dcc84ffeadfdbef1dc364966c52724a1c8098546b53ff258cebf24c810ec5b4f41bff275daac179d6c52d1ad9fdc0550c272d7"}, @NL80211_PKTPAT_PATTERN={0xbe, 0x2, "9d7c55b00fb3ded689dc5b7b9313ec4003e4680d0891e93dba74e0a1b30de8e580c3754f49576a5a9e098af9a1538bbcf2a373d23090d0d068ceea5003ea61f1ce6577c19ede2979f20ee2387cc5d581b07268f5dd6595ed09e29038f9808d618998519cdca0f8a13719e7f3d554ec55f306ab0eff843001f6db997db5c16f0a7e61949560466110ea9a38721630b4b76f4de31fe2a3b0a23b2e8eeaf1dcbac502d3729d9a0236532d6f0a9939ff529fb9694b5df37d00ef893d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0xd4, 0x1, "654f71fc69d5ca50a7e05ae185688edb4994dc82186143f87c06df6742cf0afe478f718a7e34a76604161b08615c2b785d8f10fbdab28026e58bbfdf04bdacb8fdb1e6413a3d264f1e9938930fa238394907b1e9985fcb84bedfade3b7c50c83b7c29fec8d9b4ea521c0d920be6def8f60ace97ee341d9a3bf07d26767a985d395737d8247e5da834b21ec0efcd8b3464d8db2bb4702995653b21e8a743970fa000a687deb2e765747335d313f61782acaa7597a642b4b8613b785af6242760a7e9e8a256834383dcb936e4420a9b9d6"}]}, {0x1010, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x4d, 0x2, "7ba7a06b826f9817de2a4a5f806a6724debd1af6e8698dad2d37f734aa4796abdaf711fe18934669a664b26c5039a78ba6629e3c7cc91dcc4c7c86bb004d78378eb9550dca60dd1c7f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x88, 0x1, "90fadc26b39068e3b5e19288cfa0334ed4d07d874a149535accb967921c14b97daea90b140ffdb5df196ecd3cc734669f3aa88b0c373cd9e5d3a915f2e5a9c8c67d0f08e2455c07a4a891b2b05540ced5debbc6a413ae07e88dd4689052ade95876ea22974c8ae549113ea67749e4f28696b629bab4343b5e195cf11b3b89d65f408df70"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb1e4}, @NL80211_PKTPAT_MASK={0xd3, 0x1, "da2c11ffe5406f9b5bceadde761cf6774e5bbc4706e94ca12d43d320935cd35e19ddf759c30f17ab3d57b6748896b1f58449e8055e791017a48702fca270c497f957b5f03e2abb20f229257c1aa620951176a0fc25b8b7e3cfef12f21fc7902ff304f01ef9c61237a5c2450ce0366c7286d70eba46808a2d69538073b3d92328e63c283b3e5100de01a5890bac93be1ab24e920bc54168c563f3ed6ea8b8e758f113835d82c5bab87f8747be72be352f05f79c8e1c1f51084d11d39647292ffc7a24cbe385c148506920d9b697f80d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x100}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x31, 0x2, "e4e48ba383db5dd4d48ef93fbe4a6a0dcaab01ed05d1e3ac1f340e89702ef1b650cb04219d9533c179ac56070a"}, @NL80211_PKTPAT_PATTERN={0x6b, 0x2, "c21e34c3f4831abc6fc5ba6baec4a0a069d3d0b465b84c507316c1e060e8aac571f76c16324113def4c9357f066ec34490ed55a44ccd6447727dcf36c4adbb15977b1553cbe0fe72e456fb3d5b10a08c4bd3598a6b912113aa3a573d8098be644882d0bda16f56"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0xf9, 0x1, "f4a902be32e22f3f69f564b835d028a13db28f901b959b0775cd21d4e4ecfbef07836632ea8cde0bb0bdfab997e030065d6c54627c9f3ef1563de10da2c0c9672a992d45db79055b29c1368b1680cb4e1ab8b0feeaedcf075c84526c0c5da8a49f29da5c8a9139b39cae59634aeb787bd17bd0592d8bf21f7de4ee91e789b13e1466f691a0b3bc3297ad8f851d194c7f982b153eb9fb3a20c753f893b7cba2752ffa5d7e0f5d611e12b2bf8840279b70cc4312f0742b333ecc54d9164caae035aaed2ab1f249c23141fdf4e933b1b78561faec2e79162dabfeeef471c3184f9644a7d50f85da8631290608353b1fc2b01345e6540d"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1268, 0x4, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x61, 0x1, "5dbd4ae76694dfaef66f623b1aad60e58d21f4225e318593ac3ac1469a03c5c735dedba8e7ac39935abbfab635880d949c3d0d52bf89e022a0d3086b45af6d336421284a9deafcfbbff152d42c6c02f2a8ce667403e1a98e7c290328d0"}]}, {0x11fc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbd, 0x1, "817104fa37c0be7ae2a99b65d0fac6dd55dd6eb65c0093c421c34e64a9b676f179ad831cd14a97f6d8bd114dcc2823e7b25ed546306424cf991a16cf0eaec092b6de21d96d2131e7624ff2098053203b30b632ddeb3bd164b085a7edadeb225be340ad77bd2611af49e5b63e464cfe6cb9a49f607c250163bffe2d7ce5f74f610a33a47838410918cd7b9c0cc84408fbd26abb26307458d6d4aab2c88a796a99ad4fb487203d69e08473b0892be5d97935a933ca72dba6f834"}, @NL80211_PKTPAT_PATTERN={0x76, 0x2, "dcc0ebe9ba5905ff4c4797f27f4bff2763106d0571c68b72f0014fb4bec4bda70d4be032ea28b8821a0158cf6d1609b7cef4bdfde6477e2f2a34d5d80ed069679ade5fa5cb40da60708eff1a78aa5a9cf09e6d6df301ba27f1656f87a7158df57f75360d7514c855f640c00140bbe6988494"}, @NL80211_PKTPAT_PATTERN={0x7c, 0x2, "ddd152c36c768e5eaffd32292461e81523b986e91e2c93002d9f1386c57896fb8d72f489a6a62eac84851b2fadaf660c2a923b78c76b92d9b4426cf2eb8b231da350fda2e8d6f3db838ad3f11ff9a83a401cbb394e4439efe218d6d61aa8329e88282adcba1e7a04913bf9062cf37387484affddf094de52"}, @NL80211_PKTPAT_MASK={0x35, 0x1, "0e681ad3ce35e1cb29dac3ace761b82c6cc7d5724b6cc38c7438e4a0d83a80fe01da0ed1211d23a951075c9f302fb5840b"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "e0ebed278b0e54b43e72c1e077bfa3b6d3aae866c4641f3800f4df15b856c9fb6d02effb461920ec66449f27a56ddac25f5794304a5968232889c7bc8da37cda669f6e171f493f79bac335885a62e84cdea5e29443858d4b17b36c6a86a0b837705838ec2b273551f4415b7ea12abb7698484c829fa30dbd863711de360e5959a16c0c0262f4d18bae422b2dede1a0217ee2835362c689c336231af660624a6f10fadb8ee1601a21831d78d45a328b47fc05cba6c139b0433bd91a01d71a335d0e3fb634486ed7f167c4d837cef1ed8bdbb73935c193cfed1043beb200890c7c2dc99694684c47ddde2ecf87d3a0c752bbdbd54317445172c2081aa88a6d2de668b24cdac75a56602adde14571b14597424b859b76409575f2a85246532848cf9cad241e0ff82f9214a7ed1354d0e34f3fdfdeafe630d47af16590e7be98ed26c187bba49d50ca2eae9a7ac90b416141970dacb9f8523367323cdd37e129cfff559574d752416bd5c947dea1405eae89a1d7f3164cd1f3762c55b1ea7ebca366d13538eaf00c960f77ae28774dbeb56fe796ec82387069e65403386beeee215b081666178dd9b0d02eae01eb4824cfc1fe6fa9d9c00b857b0a9940325a4350b7dafd326ab947ff29da37678cf560c1d98cbac33b4f771b865874ee6a7247b9581db56b7ca1b37f5b112ee70fafa371e36f094d2067596b4086186fec430cee0b8baabdee1aed5efaa5609042d267284c606c4388d3cd864ad3b1262c454ea2da7594cc6cf2a62ac6835bc32614890914f87670d10571b05bffdb7c5f5ec1946fc478c47f8821b1d27bcc746208dcbc9677c9e35ad4cc054f3920617846180a422d853538c74c0672d9f41d55f684e0a3aa3dfb383b727a6bc9a85c96f7095a1b8b90d33a306cbe59bacc7c5757587e02bd66658244582fbe983f6ab61aca981c0e55ae0ccc77e923a9898c93cdd73aff01eaabaa9d1b24c8849b19878b015b3f1a365cd500f65d79bc6618e25c15bae9ff277fd10dc7058660eb159d9a4fba624699bd252f2102c9c983a2db4b1368373aa108cd422b77b57f2b244871fa1282dd4b972f81827bee5efeedc91ece54eb1057517e28ca319ad4bf62685d06c4378b16a08bf6aabeee0eace8f41e32d97e91afca8d00c2943a0a420dc4af210537dd8e0ad81d4c4e8e8acf6350ff25144f4b9abbdcc3da9473db9674fed036c22548c4a3aab42b2c302c1b66d22a8caf4c8db320ab785dc1f91a2c3a707d3f547c50ce5b0b316a058e12b7bbb067db5999fb6a40b96b04e7afbf4bb33bef447e4089790a03d20e86de59130976f77c0b302abb0fa65effdf1c6087c16dbd9dd6909475c1fdeb08f0ee0f633c59e63a8bfd170d4da8a6f36c8acf6e51969e007b8c1f37126fdea3d67c348963635c50bea1f9321bf595990756cd01ef90ca6c6e704da0b996a6f3fca56380176d6c41bb11f28624583a06fe85889e30470d6f862ee843c10bc628f40bd13b4b58c91edf50f14e52f00212301762fc165b3bd78af733fd2c6b417f1da569f151bc67210574412baf7231888dd4a7f9bba75ded319ffa0888d6ca22d439d46cd84765f98223918b4d77773b7500e15248ab21cc6625e0591f1352a2234554dd524ff987534cf3c0a0617ce1c5046a8f161a71fb4b1d11bfe9c8db1cd7627c33adbc17abdbf6096dd3ded0d85dc0feba8b4f8e02be38b55ff3d7f26572b8107edcb7f29d4081cd90aefc6f6674ba966bf934634055178eea487d15644d27564bc5a8ee1d0239f285ba56c80d626fbc9f3f7d2df56ccdf6a73ee76d7fbdb1e05995bd67056c6f5bf84a56b1cbbc80407d07a36fc880d6474e5b244e9880baeca0818d5cc85986566814cfd2cbae55f7e7d9e6a7838126eaae74821205dcf99a05d8626ea40ec5983bcb6f97b8359cd18e39c3b67aa4e2c0d95a30f4ac77ebd394c3da75b1d841f64b87b1a1fbbda8f937d4364d29300d3a32174421362983adca4766defb4af7d5aae720d5e6dd2d8761a10171febe31dbfd99bdaecb7050d4cedf163f854a96b8cd9bada36f90b2f8f0317ef2dad124baad17880afd098adc648cb6dc3e4e4cebd60b6c34b45e8ce44aee5af7461a9050299bdf6774f48771521c600fbcda5081cea4b381fc140c730a86b4ed6d5d8cb3fd888d654fecbb82c51537fa39259688064d9de74c9b1d38a2c6525a3e9501e51cf6365ea2b9cce37dd6eeddfac598e394f60218ba224f283d36208dd85578be68d8f373a948e3de5a4a353666257b5805a4091b195ca9fb8a95a2cfdd155c6651d17263935e991de9fba504728b9668e4319437f232ff8a03dbd04afce0c185b8564ed995068fe4448f9e542d7a225c8c231956524d8c80c426833d68f27df5021628a0f38c461ed91e09227673005c8a70cb453ba0174a8f753c047025449f40a365d077a9651fd137967774fd63b008248fc37ffeeadc2410ad8242642fa60be95d0f58f9b36a379ae8e14a930e51f08a18c12c795f16886c8e5c5bdaeb106b977fd0585f903f20c69e60c86367fa87dc5966c310eb760e15a439b971dbf67cdd40025905ab9b1559b9f09abf63919319669cd35c5038ddb1392e331154832b110c6765e2799beee6253d901247fd79bfa000d51904831ed8772aa2341b2297ed1288d8ca3d029147fca83b4d7055b1a7833d1f139f16248d6b6d8548d2e4c4097f2db7ad1ea00b903899a38237299987291988eafe76bd2a3721d65364d0d00f351e324ce891592695284c2e8ab9c071aee0d5905dd4589cd583c65834d9b6bb6578bc2773ac0d6aebeedcb21c9027f244618d20a29cf40784c0a7823796c74c46c6ed03abb5248beea8cc3a3ada8d2bbf44ed8581150c380ce7a07c6e0bebad39e3317d4d2df69eac14a6f192b9ab193bef600b5781709fb97831ed1e14110fe6566f4dec5002c4f1e287055db101e912f460e6e9f68a6f50ff0b2b0f8c2d7380db915acda3543ec1f60884932227df92087b72558422a2d3939b1dc545860624f0ed919cc99855d2b05038bc227034d45e23f603dfc9e4a13b3d3d328d4be70625f7ecf71cec126a65331e2c66dbc6223a5007d65cd62b1e11ee1c40a0018dfad3626cc958c0f3619e4651ac6a75da2a4e7bdc487226fbf6733da994dc8a32d5413f6ead47d0fea1470f5dc1180b4bf357abbcb17788deb4e7cf9e37d4e675cbda681c04e72c925cb13bc9dfc4b9e0a2991479846fdca8c9579b4a2f3cf1b6cbb3d033a45a33165b825ba0d8f97cb7f2748449c7dda333a21d39eb90d35d11e9b299c62a29b907162e75959d2638a1d366545a2a1160b0473347b7ab699b5ff86aee1351209073519b92197cff174534ad54f071550fe29a1cd0f494ffbaa7afeb670cb1764bc0039cf702174c21df6de700d807abde3c8f8b222b2e3900b1362e63cf92183883d43cfaa1cec6a6b284d9814724d4ce26419e7787a15878e72d881dc9a2c442fc68ae24361ab95fa28dd0ec66efe730381d03d26274435787620319b8dfdaba23a432c0adfe46830e6ff455de85d2d43b6b278fe24185228b79aa05ca5cbc07c177586906c7d15c108f54c46692c21263b33305a09aafd4efffd5e6fc0add9671d016852503efae9f97a1442e08fdf7089a22db8f7a8fb5e12faf9cf8f5d4478e217fcf567bb8c5a27376d33c631f303ec8bdb0ad2b64737f68c16a00104e9d4e59136d819139945ba3e5f06f295d599c5af217012568ac5129652ba11e67f4bcf6410d63ad4018f59610f7bf8d2215043935891517295c0736dc35ed280a70d01f179180dd302212a697144dc51c888982e067092dfb39278d16344fea78138f1c4a220aaac8370befa9fa724dc567168f04cbe97ba0c084927b618830873d03e96e3c8e84e5782ce686f91c97a9be5b5ee26ff33b4a2d8a3367e04cfa72e53fa19f45bb491c4c44c6c9b1db2633e825d26674a9a6c95e57e3f1c08dbe53b57301fa84b10b0f89fe3e7ab22e6f31d98ce40ebf1a028e2183e0d610f175d9fb9850a97f9ca886dba839db6c4d6f7db2fc75f11d072b622e917cdb92d8248fb18df003878f72e44415187c3aee70ecf766a6f45e9cbe83ef600e731994ca5c73b41fb592f0faa11f9fc5adaef27fc19a96d9302c9e360a5201a830d622e8472a2b32afca263c4fca306e8b375ffe88bab70366ce3cea798f1a7c94ab666e568fd92515f9e40945416dd5e107a5a5fa5aadabed3eb60a656fe6f657b5ace998856bb28706e2369d802d6c925368340fc4cc8f0c9a6bc78597af5b49558c35cf2c929759833eb9e1fcb264b5ae0521c89926dd1827e613c1047acce39254a0693051d4f69c8f63066cec27cf58af75ef8bd377d35df9f56397ec025732910829557dbfa5bbbd60869c917836b495c4491566bfdf8bc022ca1154523ea5c909773e2a54def7e5d98772bde54141259a37f265c0f5a4213f46d344ebfe7945cc065ec77c2c1a618b6c22870152a22291c1650dd7fa450d80af834f4f62a5a4c7c650bc16a986a856fbadc5787c6c39411985f2e9e25cf58aafcf32f1d88b47ae9bd713cb71e860767ed433006d04d4c3c7f2eacb3c161f4cb6966ad30083250c99b651efb950ecf6225a06f6ee1643cffe9dbfa03c9c1d0b93a4b60aa17f7b72a4dfe4e4208d779be9973d4770961ba8bd59af73ff63b139f30989c89804997d3557b570ff23d1ae4bccf423c755e019077fc0559fe01830238afe6888588837b3f37541b362e2df6d8f7d73fc74c93bc685b4602e98f6088e10d0f85982af08a989b706049bd4dd6f0fd71d041accfcf29d1190c9889eaf38de55afa5cfff784fabf45f45a7af31c94511be9d2de877a59343d53b461cf0adf0035d124417fc8c5ab5b75697ed935b57bc2abcaf15227ac3c5ad33b1b10a848d29a00a5491c9f2a675f67072cfdacfc5e7af2cc7fb34a5027d07290da6e366dfe2a71a01ce31377c12a05e2d11c16c565c1882f202e7a7308f811c5786f748240336cd10ff8af92acf6e6b63d96dd6c3134141017e042d5be34ab35d77f02b0414d2f2d6057138977ec56ce36cf77b61de6bcf3daa94d8e203a3afb62d361e31c34bd9733e799f7332475b8117b5b050f791bbf18c97fc808281db1e2a67761deac6c988a99967591d0de36c52d804407485a75ea477a1d066cf2deaaf96e2e9dcbab059ba352d4371082d58eca41b250525075544ef042222c8bd3e9c12c8b64869f12f3612cc2352e891f9a7a28c3e683912a7086111f31a954317bab8a5b0aafbd085b98c61a417a4a4198a397c42726ae130efc8bc57666b9a92b216ae14b1e528729402926d7faa218a991306ede135493c93909645530ce66caec044bba5bebe26bac93863463907c4ae82a40e9c7fa30751180fec13b2ca61ee893d09b5eccd89af1adb4026543313d3f6c55e0581d6c79acc632363bbdb8c30228de634deeef54a444a29d2bcf39bad50912428b1621c423d165e146ee4798daa5a675b991037633077e064a30e53ba14feb4645a5de43166f317cc1c7094a645e18e090c8a40dbd9cf564166f3fe99fa63d60ca3109173c2b4ed9810e846880f2f198d8e7e908cf7e27964d62a9f1e0aa2462944ddbb6bfd9880838180880136b25c36c1bcc1b0b2eac8fa1f3018f529c87cceaf159c82ab297235e12d42c8c317d2f21739e1a83f73b0b7ab124ac37c5bbfd34f1310e93a95d543baf13d7a46030a4af379613920eb4cfdaaa4d400091800e6626ed348348cfd107aeab9cf33"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x42c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x40c, 0x4, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x31f}, @NL80211_PKTPAT_MASK={0x4}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x59, 0x1, "6afe72dc3900dd8c22a6c0f9d94a34d4b4bcd2faf01c2135b72c2721e5164f0a1235e634f49200fb396026ab487f0a27897765fb40f5540695278d0df2cc8655d256b58e67eed361067727e2dd2061385182519827"}, @NL80211_PKTPAT_PATTERN={0xa8, 0x2, "377f08d0d1afee9a7a623a19e7e3e91df7f96d7ed1ac62967874eaae5d8c32a429c47f4923b65de8bed5b498e007856c445c9b82c24a1406e140c15f8ca5bac2fcb6e7275fa9d9a4a2b59375f24c76823890d7c3fd8c9a25f17d16d7b0e9d2000ae05448cb50c29b0469dafbedfe27b6dd4e5c16368f179d82aa2e97ad91581ea9bddd8bba1554bb13b3b3c3fc36041113fffc1279b6287a9797e0bf47246c2459762649"}, @NL80211_PKTPAT_PATTERN={0x62, 0x2, "2bd47c09441d945d1ecb2fb98d612db8c530001908db9ee7ce94791fde8f8fed8bc971c6dc54d88302598c21714955186e1faa56a0bbbfbb80e33b9f69db080a93af69044a8be86ad7feed48ea23d2fefc9518439480346c1efc3b08a8c3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff9}, @NL80211_PKTPAT_MASK={0xa1, 0x1, "86ab63a8c32816fd76ab758afa76b326c66ca31309b8ffd25ce80680ea46bb36e1693f5db6cf9264bc2d001e4b34ad130f251258b78854218972115269d2891c0e86d0f75c380a1e689a72727f02703c52d003c7da530ca9a5501df13e8261250556f5a75442f00872aa56b0953721db1447277e2ea1c5923e80179025c047136436fd6c82f60c04b3b8e734cc56383c0afebc321c7d974924060d3fe3"}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x56, 0x1, "b1493d1702169d792f512316a412cd780406926fd8ab85eef98a7da3671dc0e65b384a9ae4a995f4063ec926d6558319c44958594bbb74c8f994f30990d7958117d0e219ce2c68ebbac65dd2db88b7bf038d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffd}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x9b, 0x1, "1b8fc96cd17b3d63a4fc893ca8bf2b80b283ed19210661f8199ee08cdf4fb58dd5bc9d71c4495812bfbc46ba469a4e62569cb7feac362ff2078e9bf859087ae22319c1239771c0e9de402127166207f1432c6407b5c6bbb2246785b0d269cf6614f4e049e3da0b8e875cc85d4cce45d872e04c27bc5409860bd35b888ef4683ef0cf99ecb51aca725fce6d8f3d438fab3159f15d2d8815"}, @NL80211_PKTPAT_MASK={0x57, 0x1, "055b550b3360627583db0c252036088e98992e39a5b416b2fb51ae52a42597adc36ffb93c0d9a90d3d30666454c4f76f3747ad5e60bd6e9ed6aae61e7af03d1dbf7ea3f4d2467aa7f31ede0de1d99fab2e00e4"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x79, 0x1, "28121a128e876a8f3f9e2022385b125207b7233c0013c1eae95d0efa9d44fb643f0ebc51edc9222c9a11611ee96c744a26b37b1ea7c043c345ed2b0251c6eeb3b84a9d5f457bb5395dd3cc193bba40a119f775a9b648cefa1a8412f53e98d38cec0167f7532a7359dac46b2439e299d9eab9acd02b"}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x18, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="5b4dcfadc00e"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc854}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x98, 0x4, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x7e, 0x1, "804f18376318c55495bbdbd43edf0baab35d715977b0576c1404969cc86d5b08c764b5c315442bff6141bb445f7cb82b40ed5f9223dcc231178176154870ff2336d054a7c62d114dd398080c18050ef75d5e067d70a6ad37b04d18433fdce8c13fe028bee69d55b0fb83844a81bd2bbc72a6e336b94f8e18521c"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa, 0x2, "de206c54abfa"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xec, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xdc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x10, 0x9b1e}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x48, 0x8, {0x1ff, 0x9, "11a94b0aeae374576ca0825eb6d70b8eb8b63d40c4f8b38c17737577f9bebb0eb2833e1e675f8553aba0c5588004446554c88958aa7e0982ca0097bb"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x51, 0xb, "171aa0810b95a11db9e358c55061236821bb75f16abd368dc744c1ad76daf5ec558a9d0de19472b2195636755cb222feeda7ed5a95110a86e21586cedfb9d165dca61bf8a4cec9fff275db0ac9"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x4}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8, 0x6, 0x9}}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x3984}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000004700)='dctcp-reno\x00', 0xb) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000004740)='ip6erspan0\x00', 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004a00)={r3, 0x0, 0x99, 0xc0, &(0x7f0000004780)="904f395b487084dbb97a6a60798655cd4d9bfec2648acbdb020ed00dcb276ee549909b669e5316be51fc3b0f6ad029736fa02948714faf41033823fba073d6da7da93488113a5977ee07d6240e8914678acc1b0604a456c53e00eaa0be41fd8e1159051ade32c8bc68b1922400e9d3cd0c9aae4414015e2cadd3f43d1d4d33947de6aa08a67d395f12297caba01cf729e6a35fa51967f48d4d", &(0x7f0000004840)=""/192, 0x9, 0x0, 0xb4, 0x2c, &(0x7f0000004900)="baa11c1777caa223b46ecd860e5ad7d5129478a374b4c52ebf34ec4b9578047e83fc92904e39f3db5f5e3d8c96490607b47daa1e49b68b289a521f9d4b01ad8a300e831de3de5a705ec1aa806220952437283bf238292bdf79dcf2391e178dbd629dc2b65e03056ef1f7d812994aaa8088c208e6ce1da98675957104f9a254bad771a8b891f9a3a04dce8076193d987e10ea093fe95cd4156f7f5b38f60373d75aea6c8bc1eb4f430dde15ca437aff07eb601cc8", &(0x7f00000049c0)="489a1dc1162cdaff4314c4bfb209487c1e52004395a82ed7b1851f23981c85f2093ca20a6b9ecea355ee46b2", 0x1, 0x0, 0x6}, 0x50) recvmsg(r4, &(0x7f0000005ec0)={&(0x7f0000004a80)=@nfc_llcp, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000004b00)=""/81, 0x51}, {&(0x7f0000004b80)=""/108, 0x6c}, {&(0x7f0000004c00)=""/199, 0xc7}, {&(0x7f0000004d00)=""/138, 0x8a}, {&(0x7f0000004dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000005e40)=""/127, 0x7f}, 0x40000000) close_range(r0, r6, 0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000005f40)={0x2, &(0x7f0000005f00)=[{0xf6, 0x7, 0x7, 0x100}, {0x0, 0x99, 0x4, 0x7}]}) 28.348244123s ago: executing program 32 (id=101): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x0, 0x8001}, 0x100, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xd75}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x8, 0x800000}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0xb56}, 0x8) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff20cc}, @in6={0xa, 0x4e24, 0x1, @empty, 0x4bffa016}]}, &(0x7f0000000380)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x3ff, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r3) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000480)=0x8001, &(0x7f00000004c0)=0x4) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x5e3d}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004004}, 0x4011) bind$netrom(r3, &(0x7f0000000700)={{0x3, @null, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x93}}, [0x2, 0xff, 0x3, 0xb7, 0x6, 0x4, 0x2be, 0x0, 0xc, 0x4, 0xb9e, 0x100, 0x4, 0x2, 0x8]}, &(0x7f0000000880)=0x100) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a40)={r1, 0x42, "e2f9de25129e4a7c88edb2875a76398232b2310ff9d3fbf69067d15b3beb1d7d5c76e1a5b3c1ec38f20767d1138d6e88985bd238e7d986ec81335f3fa68edcf3ebec"}, &(0x7f0000000ac0)=0x4a) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) fcntl$getownex(r4, 0x10, &(0x7f0000000b00)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x4c040) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000046c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004680)={&(0x7f0000000cc0)={0x3984, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x40c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x3d0, 0x4, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x27, 0x1, "da6a88885623403ee345eb2aa95db11968c7e329e3e641290fbfcf8347fae4aa6791bd"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x27, 0x2, "624b0e609a0d18837ac83ce89fdba9357fb917fe2a5f4069c35557ce2324a4e901a161"}, @NL80211_PKTPAT_PATTERN={0x28, 0x2, "6f76048321e4a97eee32b77f55faaea22caa656a34e95f170ca9687501f0f469bdb19cb6"}, @NL80211_PKTPAT_MASK={0x6d, 0x1, "149c6e97000a9a5be1a70351beebbcdb14824357b1f8295e3d5bfacc245d45bb97ab7c584a839e7e441d3b608d415dd5a3a2d945cd2c821c2e7006ea064b56610f3836030eb4038ff902cad3cf9077f216668d664131ee95909e9edeec3ff133b5c6909ba7220221db"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}, {0x4}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x75, 0x2, "f5542fc69d2c441aa659b3a5d6b934d9ebebff4f9f86c7a0941347ecf6c82d63c917c14729fa807c165c99a0b72fbed94122167379d9fb1fc2800507ffd04cd3ff1feb4cdbc95727740408b8a1f18517e073c802fbe6ab1710901cd4f4484c291081debba9d2614464af8e29bc40c9ca64"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_PATTERN={0xa7, 0x2, "021021d593fa444cf5a09c63036a7e882ee56de52b56cd9ff319261a05fabd513adf1ff92ac26a8ec7f9fbc312ee8f2f8a33952f583011e2f9cef9c6e1b3c3958747ebc730dd830926e59d9f364fcea733ba5e268c8b324e12a0da24eae8442eed0eec931d7bc8bd8e91efd0ea416ddcb4f1d7c9b19c3888155955d956e53762ef4e1913818ce0b896ec97402a51ad5f878013a61f1835eda79e703167b7af9db74421"}, @NL80211_PKTPAT_MASK={0xf7, 0x1, "46e48d80cb40839105c46d2defb2f8746530228f742d9a2b3cfb679cd9a93fcfd998f3c6305623094fedda81e3ef297a01de8d900ec431c3fa265ef2ac5997c480d77446b7da897638d0516203a3b60bacf66deaec9ff185107c6284651643ab1b0911a77b00d2bc868bea117c9a1ff52b1f567a0294ddc897a8c23dfa7af143dc1ac87c4a947d8b7e038f6f2f468c737177e9f5ca6ee52a38d5c2d9be9a46cc58e5056f4928c4867cb1a879cd931da9c211ae084aec3d3e33c5f8826d33369fd18c97fffe6b87859e0616f25ad7c389b2ee348b82ece935fe747647f6ba74e8a39bb3aff98810a7bc7b9b30b0fde7a29c37ee"}, @NL80211_PKTPAT_PATTERN={0x99, 0x2, "341735191a00c0762ee8247d1e3d04f97510af51798b54df86d6c13692d01f3827c78e0978738adf297729ab1510c4a2b37cb2b2a62a4fd836961ab0fdc8185d7eb377ae2809cfd4b584644a439e1daff975fd7973fa2cd7c7c46a0ee53d538dfa177a5c8320cd684697241aaa7832a827f0dc5d6136062b20111178c7d3d1dc71d7c5dad3c293fa33d7f76b87abbe3c5fabbe23a5"}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x34, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x26, 0x6, "ffa1a6369439494ecf5d36b75f92ed92f2006a35ec2bd5a85144a3bd1988bd462515"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2f60, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x98, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="697c66738f0f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1000}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6d9e}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ac9bcfa74006"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="ba50eaef664111654890aa91764218fb28062d55f885"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x154, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0xc2, 0xb, "b6f3bbb4044ec37288c4e6bc9d4ba5e49a525718bb6a12d9483ea6974e0cf55f5ebfc1dcf89c37e790ea8d45271a49c6b154c34dfb0aadf7a49a7b6a07a9b1619262c03ddd0eb3dc9da017ad659bb1ca6f56ebca415002698e67dc253adc246a3507601ee95c0f346e6bcc9100dcaff28d078b419fa50c28e8d8c58e38158c093bfd780cd163e6deee44b72aae1ff163ba3e2fd59e07fe2d339b173bef31aa51087fed633b97ba0b783bf304184846366d49cf1d3b7a316892687ae472b5"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x8a, 0x8, {0xfffffffa, 0xcb4, "4338b7e5ad5c46d5282a9b5b51ecf4574f780bca754446c7e7267e227bb1af6adf89317fa0dfd7af74b58121637a7867aac27670b0ec08473539973f30b42ea1722da1e3bdd32379f7ec0e295abafa9f5998cbcb12e742da9db34d8bd4a19aef77d91c45fdc6057e7eb50438be5ac371b78db224830135ce09b512433ed9"}}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1afc, 0x4, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x99, 0x2, "0c9f5823d711762d79915c4224fb584b2c73e2c9e981296e4af1a9d97e0fd515a261cb4a2b7f50c4beead38d37fe28530eb2b90ebddd4ddebb91958eaa0bf406cc8a44d1cb0a540a8e3dfceecde9bfc55868e156d74282e0dcd601f81c300c9c56a67b3513740314a2a7d17d5c9ae4f8dc09f4ca484685f39a9e29484d15bc132d7c2f4a35d640e6a01f124df8e2eef89247669cde"}, @NL80211_PKTPAT_PATTERN={0xd6, 0x2, "9288f6390055916a3ca8b1434250c20d6dbf912fd1178f27c2582f9bb356e1acc7d321a81d02a8c47ae131403eda3cb3651329973400f6243cf9c359a983bb3254f8a8222d5ddf0217ba95177e06713e83c390548b08ba0e7288d23581124e5594a055b54a1dae1460983b15f40c41e3c3e490ac9a51aaeafe077263ce4634fc6f1b6d3affe27a80d8284840eb4b428de1c10ff9635bca7b1410dcd31411b9f48084db99a4be155b6b6f50400e1c99a0496b48ac0bb33126f59c3a603fd4cf8dff585b519bea924405c10c4ae3ffc532112d"}, @NL80211_PKTPAT_PATTERN={0x87, 0x2, "2a28a07b8e55424cdda64573a987141f80d38344feff6b020f263b59733ddc9b20aeef156fbc3e26107b2b7d0634827910eee600d83e2db08c9d01312c046dd9b07215fa12608b3c3ed651f9aab58944e99dd21680b8d1ee8515a9dd438fae1bdff82469f7238799f93b3b53328f51e31894483c6474f800781be0cea050d890b18299"}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd9, 0x1, "ad6b3487d93295abf1c33b5edbd68f4d8a4e6242020b69b7d7ca15073ddc7dbac3ac65e59e610b2f99591c3e4ab920878bb71c1bc89f215c304808925f40c4fe9c19243e86c869853995bb2a4e8d90ace7fcefe08da8a77da31c0aa93020ddb9ab0c54fd061268dad03112b2fab0a77e0fcd5c2e86ea7a94d4a89fb120029f3f3af9a0aea978643a7828cf84dcce98815b4122dd5e2162009095faad1b1a4226fe82ad672a02faa3acb82cf3fa3af0d56e16d9505370c7dcae3f26cdbdaa9d87d37fa3ec2475299dba310999d9ba4ad5b3aa538c2f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0xfd, 0x1, "50b6380b091636d591dc2a34e679f6eec29a7f232e7e468a896e54e02331ba153863c5dc700b0b150fa763095d64d42e8db675e5eb8d9d8a0e8083f391f64fc84373424943f48a2f2830d4107eb1e8e85ea9f70b8eebcbad14e66de67e678dcfd6b0e01d27cd6fcccc23b3cbccb8aa8bad11bc497cd48e295c7f04d8ad5afb5d871ba39cb3bf87dfef3addba2f63960b5c6f6ae0af0fcda12e2035b089f98fa68476c7d5c5d7618a60c01a66fb09b50eb18b7c8c76f36da8545f75725697b7ad912d9f307f9930de65f5c826f557247849a28b42ce733ab7844f4cd6db68b21c9a5d9d54c6a1e15053575a83cbde56aacb8da0047fdf070eaf"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xce57}, @NL80211_PKTPAT_MASK={0xcf, 0x1, "a8c8483d4650bd59306968f207dca99a57625b2fd3288aa081e4900b6b874d5ed83cfc4849eb61a10dbfe6a9bdcb5fcdf69ebd7c239fb75dc78240112ec168dd3a6ccb8d846a648406a0d095017da7e55c7f86eb44c8f4b50e3657f73f5170d0291bcf1e85ff0569897838ed3164e0a6683a3f0fed05320e5263fbbc3d5f93855a737dd48e1dcbb7987edcc87ba9bd7a997a082b0bebe740bd3b4015aa6e249724060ee0f4e9a0851802142ef49479f502c50baf97f7e2ef215a5387973a3ad51dd39ba4d90f85d381d202"}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf1, 0x2, "b235f6cae5a9c4e0a384d832286f40927156f79abdc47e045343f1da7ca7ae8beb7e77cec0140cb08a487374b15a16cf0d5aba1b447d93c309aa3a6f55807430418bae2f9e8041435a4d717706a281fc91d22728546433f790fd77fb926e06e223a6ac77c06a3936edee257e1581d6b8bf71746787403a62e4f973e650a3a01f6095996a8096be589bfccb13dbc51175b21dd4d840f16c2fa2174c403526e42e2d620fc6ee4d667ae8dac692f5d8ca1d6d8925a048b2c400b1a1dcc84ffeadfdbef1dc364966c52724a1c8098546b53ff258cebf24c810ec5b4f41bff275daac179d6c52d1ad9fdc0550c272d7"}, @NL80211_PKTPAT_PATTERN={0xbe, 0x2, "9d7c55b00fb3ded689dc5b7b9313ec4003e4680d0891e93dba74e0a1b30de8e580c3754f49576a5a9e098af9a1538bbcf2a373d23090d0d068ceea5003ea61f1ce6577c19ede2979f20ee2387cc5d581b07268f5dd6595ed09e29038f9808d618998519cdca0f8a13719e7f3d554ec55f306ab0eff843001f6db997db5c16f0a7e61949560466110ea9a38721630b4b76f4de31fe2a3b0a23b2e8eeaf1dcbac502d3729d9a0236532d6f0a9939ff529fb9694b5df37d00ef893d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0xd4, 0x1, "654f71fc69d5ca50a7e05ae185688edb4994dc82186143f87c06df6742cf0afe478f718a7e34a76604161b08615c2b785d8f10fbdab28026e58bbfdf04bdacb8fdb1e6413a3d264f1e9938930fa238394907b1e9985fcb84bedfade3b7c50c83b7c29fec8d9b4ea521c0d920be6def8f60ace97ee341d9a3bf07d26767a985d395737d8247e5da834b21ec0efcd8b3464d8db2bb4702995653b21e8a743970fa000a687deb2e765747335d313f61782acaa7597a642b4b8613b785af6242760a7e9e8a256834383dcb936e4420a9b9d6"}]}, {0x1010, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x4d, 0x2, "7ba7a06b826f9817de2a4a5f806a6724debd1af6e8698dad2d37f734aa4796abdaf711fe18934669a664b26c5039a78ba6629e3c7cc91dcc4c7c86bb004d78378eb9550dca60dd1c7f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x88, 0x1, "90fadc26b39068e3b5e19288cfa0334ed4d07d874a149535accb967921c14b97daea90b140ffdb5df196ecd3cc734669f3aa88b0c373cd9e5d3a915f2e5a9c8c67d0f08e2455c07a4a891b2b05540ced5debbc6a413ae07e88dd4689052ade95876ea22974c8ae549113ea67749e4f28696b629bab4343b5e195cf11b3b89d65f408df70"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb1e4}, @NL80211_PKTPAT_MASK={0xd3, 0x1, "da2c11ffe5406f9b5bceadde761cf6774e5bbc4706e94ca12d43d320935cd35e19ddf759c30f17ab3d57b6748896b1f58449e8055e791017a48702fca270c497f957b5f03e2abb20f229257c1aa620951176a0fc25b8b7e3cfef12f21fc7902ff304f01ef9c61237a5c2450ce0366c7286d70eba46808a2d69538073b3d92328e63c283b3e5100de01a5890bac93be1ab24e920bc54168c563f3ed6ea8b8e758f113835d82c5bab87f8747be72be352f05f79c8e1c1f51084d11d39647292ffc7a24cbe385c148506920d9b697f80d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x100}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x31, 0x2, "e4e48ba383db5dd4d48ef93fbe4a6a0dcaab01ed05d1e3ac1f340e89702ef1b650cb04219d9533c179ac56070a"}, @NL80211_PKTPAT_PATTERN={0x6b, 0x2, "c21e34c3f4831abc6fc5ba6baec4a0a069d3d0b465b84c507316c1e060e8aac571f76c16324113def4c9357f066ec34490ed55a44ccd6447727dcf36c4adbb15977b1553cbe0fe72e456fb3d5b10a08c4bd3598a6b912113aa3a573d8098be644882d0bda16f56"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0xf9, 0x1, "f4a902be32e22f3f69f564b835d028a13db28f901b959b0775cd21d4e4ecfbef07836632ea8cde0bb0bdfab997e030065d6c54627c9f3ef1563de10da2c0c9672a992d45db79055b29c1368b1680cb4e1ab8b0feeaedcf075c84526c0c5da8a49f29da5c8a9139b39cae59634aeb787bd17bd0592d8bf21f7de4ee91e789b13e1466f691a0b3bc3297ad8f851d194c7f982b153eb9fb3a20c753f893b7cba2752ffa5d7e0f5d611e12b2bf8840279b70cc4312f0742b333ecc54d9164caae035aaed2ab1f249c23141fdf4e933b1b78561faec2e79162dabfeeef471c3184f9644a7d50f85da8631290608353b1fc2b01345e6540d"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1268, 0x4, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x61, 0x1, "5dbd4ae76694dfaef66f623b1aad60e58d21f4225e318593ac3ac1469a03c5c735dedba8e7ac39935abbfab635880d949c3d0d52bf89e022a0d3086b45af6d336421284a9deafcfbbff152d42c6c02f2a8ce667403e1a98e7c290328d0"}]}, {0x11fc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbd, 0x1, "817104fa37c0be7ae2a99b65d0fac6dd55dd6eb65c0093c421c34e64a9b676f179ad831cd14a97f6d8bd114dcc2823e7b25ed546306424cf991a16cf0eaec092b6de21d96d2131e7624ff2098053203b30b632ddeb3bd164b085a7edadeb225be340ad77bd2611af49e5b63e464cfe6cb9a49f607c250163bffe2d7ce5f74f610a33a47838410918cd7b9c0cc84408fbd26abb26307458d6d4aab2c88a796a99ad4fb487203d69e08473b0892be5d97935a933ca72dba6f834"}, @NL80211_PKTPAT_PATTERN={0x76, 0x2, "dcc0ebe9ba5905ff4c4797f27f4bff2763106d0571c68b72f0014fb4bec4bda70d4be032ea28b8821a0158cf6d1609b7cef4bdfde6477e2f2a34d5d80ed069679ade5fa5cb40da60708eff1a78aa5a9cf09e6d6df301ba27f1656f87a7158df57f75360d7514c855f640c00140bbe6988494"}, @NL80211_PKTPAT_PATTERN={0x7c, 0x2, "ddd152c36c768e5eaffd32292461e81523b986e91e2c93002d9f1386c57896fb8d72f489a6a62eac84851b2fadaf660c2a923b78c76b92d9b4426cf2eb8b231da350fda2e8d6f3db838ad3f11ff9a83a401cbb394e4439efe218d6d61aa8329e88282adcba1e7a04913bf9062cf37387484affddf094de52"}, @NL80211_PKTPAT_MASK={0x35, 0x1, "0e681ad3ce35e1cb29dac3ace761b82c6cc7d5724b6cc38c7438e4a0d83a80fe01da0ed1211d23a951075c9f302fb5840b"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x42c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x40c, 0x4, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x31f}, @NL80211_PKTPAT_MASK={0x4}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x59, 0x1, "6afe72dc3900dd8c22a6c0f9d94a34d4b4bcd2faf01c2135b72c2721e5164f0a1235e634f49200fb396026ab487f0a27897765fb40f5540695278d0df2cc8655d256b58e67eed361067727e2dd2061385182519827"}, @NL80211_PKTPAT_PATTERN={0xa8, 0x2, "377f08d0d1afee9a7a623a19e7e3e91df7f96d7ed1ac62967874eaae5d8c32a429c47f4923b65de8bed5b498e007856c445c9b82c24a1406e140c15f8ca5bac2fcb6e7275fa9d9a4a2b59375f24c76823890d7c3fd8c9a25f17d16d7b0e9d2000ae05448cb50c29b0469dafbedfe27b6dd4e5c16368f179d82aa2e97ad91581ea9bddd8bba1554bb13b3b3c3fc36041113fffc1279b6287a9797e0bf47246c2459762649"}, @NL80211_PKTPAT_PATTERN={0x62, 0x2, "2bd47c09441d945d1ecb2fb98d612db8c530001908db9ee7ce94791fde8f8fed8bc971c6dc54d88302598c21714955186e1faa56a0bbbfbb80e33b9f69db080a93af69044a8be86ad7feed48ea23d2fefc9518439480346c1efc3b08a8c3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff9}, @NL80211_PKTPAT_MASK={0xa1, 0x1, "86ab63a8c32816fd76ab758afa76b326c66ca31309b8ffd25ce80680ea46bb36e1693f5db6cf9264bc2d001e4b34ad130f251258b78854218972115269d2891c0e86d0f75c380a1e689a72727f02703c52d003c7da530ca9a5501df13e8261250556f5a75442f00872aa56b0953721db1447277e2ea1c5923e80179025c047136436fd6c82f60c04b3b8e734cc56383c0afebc321c7d974924060d3fe3"}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x56, 0x1, "b1493d1702169d792f512316a412cd780406926fd8ab85eef98a7da3671dc0e65b384a9ae4a995f4063ec926d6558319c44958594bbb74c8f994f30990d7958117d0e219ce2c68ebbac65dd2db88b7bf038d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffd}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x9b, 0x1, "1b8fc96cd17b3d63a4fc893ca8bf2b80b283ed19210661f8199ee08cdf4fb58dd5bc9d71c4495812bfbc46ba469a4e62569cb7feac362ff2078e9bf859087ae22319c1239771c0e9de402127166207f1432c6407b5c6bbb2246785b0d269cf6614f4e049e3da0b8e875cc85d4cce45d872e04c27bc5409860bd35b888ef4683ef0cf99ecb51aca725fce6d8f3d438fab3159f15d2d8815"}, @NL80211_PKTPAT_MASK={0x57, 0x1, "055b550b3360627583db0c252036088e98992e39a5b416b2fb51ae52a42597adc36ffb93c0d9a90d3d30666454c4f76f3747ad5e60bd6e9ed6aae61e7af03d1dbf7ea3f4d2467aa7f31ede0de1d99fab2e00e4"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x79, 0x1, "28121a128e876a8f3f9e2022385b125207b7233c0013c1eae95d0efa9d44fb643f0ebc51edc9222c9a11611ee96c744a26b37b1ea7c043c345ed2b0251c6eeb3b84a9d5f457bb5395dd3cc193bba40a119f775a9b648cefa1a8412f53e98d38cec0167f7532a7359dac46b2439e299d9eab9acd02b"}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x18, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="5b4dcfadc00e"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc854}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x98, 0x4, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x7e, 0x1, "804f18376318c55495bbdbd43edf0baab35d715977b0576c1404969cc86d5b08c764b5c315442bff6141bb445f7cb82b40ed5f9223dcc231178176154870ff2336d054a7c62d114dd398080c18050ef75d5e067d70a6ad37b04d18433fdce8c13fe028bee69d55b0fb83844a81bd2bbc72a6e336b94f8e18521c"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa, 0x2, "de206c54abfa"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xec, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xdc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x10, 0x9b1e}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x48, 0x8, {0x1ff, 0x9, "11a94b0aeae374576ca0825eb6d70b8eb8b63d40c4f8b38c17737577f9bebb0eb2833e1e675f8553aba0c5588004446554c88958aa7e0982ca0097bb"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x51, 0xb, "171aa0810b95a11db9e358c55061236821bb75f16abd368dc744c1ad76daf5ec558a9d0de19472b2195636755cb222feeda7ed5a95110a86e21586cedfb9d165dca61bf8a4cec9fff275db0ac9"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x4}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8, 0x6, 0x9}}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x3984}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000004700)='dctcp-reno\x00', 0xb) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000004740)='ip6erspan0\x00', 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004a00)={r3, 0x0, 0x99, 0xc0, &(0x7f0000004780)="904f395b487084dbb97a6a60798655cd4d9bfec2648acbdb020ed00dcb276ee549909b669e5316be51fc3b0f6ad029736fa02948714faf41033823fba073d6da7da93488113a5977ee07d6240e8914678acc1b0604a456c53e00eaa0be41fd8e1159051ade32c8bc68b1922400e9d3cd0c9aae4414015e2cadd3f43d1d4d33947de6aa08a67d395f12297caba01cf729e6a35fa51967f48d4d", &(0x7f0000004840)=""/192, 0x9, 0x0, 0xb4, 0x2c, &(0x7f0000004900)="baa11c1777caa223b46ecd860e5ad7d5129478a374b4c52ebf34ec4b9578047e83fc92904e39f3db5f5e3d8c96490607b47daa1e49b68b289a521f9d4b01ad8a300e831de3de5a705ec1aa806220952437283bf238292bdf79dcf2391e178dbd629dc2b65e03056ef1f7d812994aaa8088c208e6ce1da98675957104f9a254bad771a8b891f9a3a04dce8076193d987e10ea093fe95cd4156f7f5b38f60373d75aea6c8bc1eb4f430dde15ca437aff07eb601cc8", &(0x7f00000049c0)="489a1dc1162cdaff4314c4bfb209487c1e52004395a82ed7b1851f23981c85f2093ca20a6b9ecea355ee46b2", 0x1, 0x0, 0x6}, 0x50) recvmsg(r4, &(0x7f0000005ec0)={&(0x7f0000004a80)=@nfc_llcp, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000004b00)=""/81, 0x51}, {&(0x7f0000004b80)=""/108, 0x6c}, {&(0x7f0000004c00)=""/199, 0xc7}, {&(0x7f0000004d00)=""/138, 0x8a}, {&(0x7f0000004dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000005e40)=""/127, 0x7f}, 0x40000000) close_range(r0, r6, 0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000005f40)={0x2, &(0x7f0000005f00)=[{0xf6, 0x7, 0x7, 0x100}, {0x0, 0x99, 0x4, 0x7}]}) 28.069080969s ago: executing program 1 (id=103): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendto$inet6(r1, 0x0, 0x0, 0x20044091, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000140)={r4}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltgid}], [], 0x6b}}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r9, 0x0, 0x100800001) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 16.490193087s ago: executing program 4 (id=213): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="c25499a20196f6ee75"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x11e, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r4, 0x0) (async) accept$inet6(r4, 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (async) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) (async) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) (async) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000010c0)=0x4) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) (async) mlockall(0x2) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="3751566d1a0190e8b0e77378f3b18f66bd32d946021b6e1c4b6f5823f567fd679f", 0x21) dup2(r0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 16.299540605s ago: executing program 4 (id=216): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x1f, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0xd1e05f1e10bc1fb6) 16.298980045s ago: executing program 4 (id=217): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b316, 0xfffffffc}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x13) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000380)=""/161, 0xa1, 0x0, &(0x7f0000000440)=""/80, 0x50}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xd, 0x2a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @generic={0x6, 0x2, 0x8, 0x8, 0xffffffcb}, @alu={0x4, 0x0, 0x7, 0x5, 0xa, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x20, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x7fff, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)=[{0x5, 0x4, 0x9, 0x8}], 0x10, 0x6, @void, @value}, 0x94) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mlock2(&(0x7f0000166000/0x1000)=nil, 0x1000, 0x1) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}) 16.216068489s ago: executing program 4 (id=219): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, r4}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="597e33832d9a9f9e6cfe0c28eee919bcd36356f26ad7091c5184a9e7ff4017774ea642fb79315a159c0d2f86aae8647493748afbad75d7525902f2c12b50cc4e9716565d3517dd1cf2a87457d1523885a527afcfb73f3d22d139a818683d104672752dd0939945b70a5c0e694edd2eed9d366b05cb398d19c93c762ccbab722fec2dd83f383160f65f8854e4bd484d183be3154c02cf3fc70fbf76e94584e6a02f73ed75141982b6efa1a04e87d2470d2c0f1e2d5686b200dc4faa0d729bf4f8ad9551ce6bfc209eebc73740ddf1f1e5b7858bf4a1cfde3df518cf1de95289a3bcdb92d6f75666fcc907175d111e41ab", @ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=r3], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x24, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa706ab144ffe0080045000058fffc0000002f9078ac1414bbac1414bbb480880b0000000000000800000086dd080088be00000000100000000100000e00000000080022eb00000000200000000200000000000000000000000800655800000001"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0xc, @sliced={0x8, [0x7, 0x0, 0x0, 0x29, 0x7279, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x3, 0x7, 0x1, 0x7, 0x3, 0x738, 0x8b0, 0x100, 0x0, 0x8, 0x8, 0x28, 0x0, 0x20, 0x3, 0x3, 0xe5, 0x8, 0x5], 0x3a3ff731}}) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000002840)=0x800000) socket(0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) gettid() syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) 16.110258462s ago: executing program 4 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x20044014) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000fddbdf250200000008001800ffffffff050012001a0000001400080070696d367265673000000000000000000c001000a94b416f000000000600030001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000200)={[&(0x7f0000000100)='\xe5=P\xecAN\x16\x16\x05\xe1\x97\r\x86\xd4\xa4W\xc3\x00\x00\x00', &(0x7f0000000140)='timers\x00']}, 0x1000) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15.854499711s ago: executing program 4 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000000c00104000000000000000"], 0x54}}, 0x0) 15.782222606s ago: executing program 33 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000000c00104000000000000000"], 0x54}}, 0x0) 13.057621328s ago: executing program 34 (id=103): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendto$inet6(r1, 0x0, 0x0, 0x20044091, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000140)={r4}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltgid}], [], 0x6b}}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r9, 0x0, 0x100800001) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 8.658891662s ago: executing program 6 (id=284): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x90000, 0x89) r1 = fanotify_init(0x200, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x20) open$dir(&(0x7f00000000c0)='./file0\x00', 0x84200, 0x8) (async) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x8c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 8.600023609s ago: executing program 5 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0xbd, @private1}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x9, 0x101, 0x820c, 0x6, 0x8001, 0x8, 0xfffffffd, 0xffffffff, r3}, &(0x7f0000000380)=0x20) ftruncate(0xffffffffffffffff, 0xc17c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r5, 0x4004480c, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780080013400000000008000640200000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f00000042c0)={0xfffff29e, 0xc000c, "e7249bdabd0aabc94fc7311befe6e691d5eb00", {0x3, 0x1200000}}) eventfd(0x7) r7 = fsopen(&(0x7f0000000340)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x8, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x0) 8.189423879s ago: executing program 6 (id=333): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000200)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000081", @ANYRES16=0x0, @ANYBLOB="000100000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0800090001ac0f00"], 0x24}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x16}, 0x60) getsockopt$nfc_llcp(r6, 0x118, 0x4, &(0x7f0000000140)=""/192, 0x20000057) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x10, r8) 8.100616938s ago: executing program 6 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x3) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x12800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 7.734072731s ago: executing program 5 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000000c00104000000000000001"], 0x54}}, 0x0) 7.66932799s ago: executing program 5 (id=341): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0xcfe, 0x5f, 0x0, 0x61f89ac7}}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="8035ec1a80469bcad723f9e7015af5eb639ec163afd8661a78f9a3e0aca49ecddaa04f9512e4f41e8a587537fd2f4212697b38cd1c6531a653bd369c1b7c87d2f926f5e044922387a3e4a1e4cb5a3997c19060c7f320590642cc1897c55123edaffbeaf86c766f80a02d623f376d87bef7d798e86029f5977f", 0x79}, {&(0x7f0000000080)="4ea440fa5c50fafe2711ea55e48e78f7d570cf2a18352817e89c3f", 0x1b}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x20004020) recvmmsg(r5, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/147, 0x93}], 0x1}, 0xd081}], 0x1, 0x2061, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e4"], 0xe4}}, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7f, {0x2, 0x0, @broadcast}}) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r6, 0x0, 0x4ffe6, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000001c0)={0x800, 0x6, 0x2}) ioctl$CDROM_SET_OPTIONS(r0, 0x80081270, 0x8) 6.979861421s ago: executing program 6 (id=347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xff}) (async) fcntl$lock(r0, 0x25, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 64) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0xcbfb}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) (async, rerun: 64) socket$inet6(0xa, 0x0, 0x0) (rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000021c0)='clear_refs\x00') (async, rerun: 64) prlimit64(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) close(r7) (async) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f0000000500)='asymmetric\x00', &(0x7f0000000840)={'syz', 0x3}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) tkill(0x0, 0x0) (async, rerun: 32) write$yama_ptrace_scope(r3, &(0x7f0000000040)='2\x00', 0x2) (rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 6.97958443s ago: executing program 35 (id=347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xff}) (async) fcntl$lock(r0, 0x25, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 64) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0xcbfb}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) (async, rerun: 64) socket$inet6(0xa, 0x0, 0x0) (rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000021c0)='clear_refs\x00') (async, rerun: 64) prlimit64(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) close(r7) (async) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f0000000500)='asymmetric\x00', &(0x7f0000000840)={'syz', 0x3}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) tkill(0x0, 0x0) (async, rerun: 32) write$yama_ptrace_scope(r3, &(0x7f0000000040)='2\x00', 0x2) (rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 6.817556079s ago: executing program 5 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000000c00104000000000000002"], 0x54}}, 0x0) 6.817118317s ago: executing program 5 (id=350): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x100000000, 0x3a, '\xca', 0x3a, 'autofs\x00', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x31) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(&(0x7f00000001c0)=@filename='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x224d080, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'}) 6.730372606s ago: executing program 5 (id=351): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0xc1100, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f00000003c0)=@bca={0x3, 0xbc, "9ad1e58ca182cd4b6b588fe0cc5cfdd90ca0e9e9fb68ff30c024d9562055b1e2380edf2fb28fd3f9e7612c691c3c10e12af7a6f3a50e821c3314dab5241397b3ddca38f8f1533c66ab7e05279f7271f1b8a7103efc4fea7bd0d8de4077d224c44ec67e048e9e689cfff6a36fac22bfb684860440c01a67f233e1c36547e205f66843fb04e2a53fdd1f798492953645be0eefe089e00ed8a29c6116e782e9aa696ef68ee6516f4bfdec92b3b42333cc22240aa00a7b380053bbcd6c8d"}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000140)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x7800007, 0x12, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r2, 0x81fd) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0x6370, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.409608778s ago: executing program 3 (id=411): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x7a}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x7a}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000004040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={r2, r3, r4}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb3b7e6656de"], 0xfdef) r7 = io_uring_setup(0x371f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x363}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) capset(&(0x7f0000000100)={0x20080522, r8}, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x83, 0xffffeffb}) (async) capset(&(0x7f0000000100)={0x20080522, r8}, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x83, 0xffffeffb}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2028) quotactl$Q_GETINFO(0x0, &(0x7f0000000180)=@filename='./file0/file0\x00', 0x0, 0x0) (async) quotactl$Q_GETINFO(0x0, &(0x7f0000000180)=@filename='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0x0, r10}, 0x50) (async) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0x0, r10}, 0x50) syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x12d000) (async) r11 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x12d000) ioctl$KDDELIO(r11, 0x4b35, 0x6) (async) ioctl$KDDELIO(r11, 0x4b35, 0x6) socket$inet6(0xa, 0x802, 0x0) (async) r12 = socket$inet6(0xa, 0x802, 0x0) ioctl$PIO_SCRNMAP(r11, 0x4b41, &(0x7f0000000480)="cdfcb833d3a60093dcfde37a21a9c532d0dc8cc903713294f919e833527982803fc023940eb5f8a040f1d90c12e2ac0b5884b5eeccf70a8e9d21f1c75b8c15e11522d1275e476ae8cbde2221bcf8b80d53c41127b5e7d75def57698cf2418800532264cab9be38415367fad2aec2eb96d6b91e268aa3bd8d374ef0219eb4fdf000943edad64c7ef6423ff8d0753fc7f9df544d5168bc01eeb2c8ede3743137260bb651845266bbe097bbd4ba0d4cc1e7a65d4c05b98899c0918d605ea52b864890d15cd89d2521dd991c1945f35857b89877be5dcc54") (async) ioctl$PIO_SCRNMAP(r11, 0x4b41, &(0x7f0000000480)="cdfcb833d3a60093dcfde37a21a9c532d0dc8cc903713294f919e833527982803fc023940eb5f8a040f1d90c12e2ac0b5884b5eeccf70a8e9d21f1c75b8c15e11522d1275e476ae8cbde2221bcf8b80d53c41127b5e7d75def57698cf2418800532264cab9be38415367fad2aec2eb96d6b91e268aa3bd8d374ef0219eb4fdf000943edad64c7ef6423ff8d0753fc7f9df544d5168bc01eeb2c8ede3743137260bb651845266bbe097bbd4ba0d4cc1e7a65d4c05b98899c0918d605ea52b864890d15cd89d2521dd991c1945f35857b89877be5dcc54") sendmsg$inet(r12, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c0717"], 0x38}, 0x0) 1.27888927s ago: executing program 3 (id=412): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x20004, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5d29f}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x7, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x5, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x5, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = userfaultfd(0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x290902, 0x87, 0xb}, 0x18) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x45}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7b}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c8e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x3}) syz_open_procfs$namespace(0x0, &(0x7f0000001240)='ns/uts\x00') socket$inet6_udplite(0xa, 0x2, 0x88) 1.136696009s ago: executing program 3 (id=413): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061111c0000000000180000000500000000000000fbff00009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x44050) 1.136259276s ago: executing program 3 (id=414): mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x9181071b531d207d, &(0x7f0000000140)=ANY=[@ANYBLOB="f499ae", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB="2c6703a752ecbe20e8da789ca0bd30b353f800000000000000", @ANYRESDEC, @ANYBLOB=',\x00']) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x80000001) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0xd00}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'bridge_slave_1\x00', 0x200}) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 980.352285ms ago: executing program 2 (id=417): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100033060000010000000000ac1e7e01000000000000000000000000ac1e030100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d532000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000a000100040000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400020000000000000020010000000000000000000000000002"], 0x154}}, 0x0) fsopen(0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffff2, 0x0) 979.838316ms ago: executing program 3 (id=418): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000000340)="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", 0x5ad, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x23}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faffdb41", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 419.57128ms ago: executing program 7 (id=423): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='uid_map\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = userfaultfd(0x801) sendmsg$AUDIT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0xf2c, 0x70bd2c, 0x25dfdbfd, {0x3, 0x1, 0x1, r0, 0x3, 0x6, 0x7ff, 0xb0be, 0x0, 0xfffff000, 0x5}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) listen(r7, 0x0) ppoll(&(0x7f00000002c0)=[{r7}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000b7b000/0x4000)=nil, &(0x7f0000199000/0x800000)=nil, 0x4000}) 419.167251ms ago: executing program 7 (id=424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0xfffffff5, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 360.097656ms ago: executing program 2 (id=425): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f404b1c91166001b60d003e0f01c80fc71dba4100b016eee3e726fbe74bf2ab6766c7442400030000006766c7442402000000006766c744240600000000670f011424", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x4, 0x6, 0xffffffff, 0x1, 0xf, 0xf}]}) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x40}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r1) fanotify_mark(r0, 0x1, 0x48001059, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfe93, &(0x7f0000000880)={@flat=@handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x0, 0x3a}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ftruncate(r5, 0xf4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500020000000800124000100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 358.641322ms ago: executing program 7 (id=426): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071112400000000008510000002000000850000000700000095000000400000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 190.233676ms ago: executing program 2 (id=427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000024c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8881}, 0x20048898) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4ac6a648a86d797743c5a2d545607e3aedca1c", @ANYRES16=r5, @ANYBLOB="000201040000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ffff00004000000010005e80080002000000000104000100"], 0x38}}, 0x0) 188.42424ms ago: executing program 2 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000000c00104000000000f5ff00"], 0x54}}, 0x0) 174.525585ms ago: executing program 2 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000300}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 151.862491ms ago: executing program 2 (id=430): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getuid() quotactl_fd$Q_SETINFO(r0, 0x0, r1, &(0x7f0000000000)={0x5, 0x8000000000000002, 0x0, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = eventfd(0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) r6 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r1, 0xee01}}, './file0\x00'}) r8 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) lchown(&(0x7f0000000180)='./file0\x00', r6, r7) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r4, 0x0, 0x2}) openat$bsg(0xffffffffffffff9c, 0x0, 0x741641, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0xffdf}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x558, 0x100000c, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x7}}]}, @common=@SET={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'wg2\x00', 'veth0\x00'}, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 99.924689ms ago: executing program 7 (id=431): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x2) read$msr(r0, &(0x7f0000000a40)=""/4096, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="030f00000000000000f13300"], 0x14}}, 0xcefddbb7765303b5) 99.623838ms ago: executing program 3 (id=432): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x4, 0x6, 0x2, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x81ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x40, r8, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}]}]}, 0x40}}, 0x0) r9 = dup(r5) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000709000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000003c0)="c4c26daee6b8010000000f01d9da7827c4e178102165f4b8080000000f23d00f21f835300000020f23f82e65660fe51ef20f0118ea040000002f00b98c0b0000b800480000ba000000000f30", 0x4c}], 0x1, 0x4, &(0x7f0000000440), 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 98.7199ms ago: executing program 7 (id=433): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00ffffffffff"], 0x6c}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x8}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fstat(r1, &(0x7f0000000380)) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1e0, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CT={0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1b565111}, @NFQA_PAYLOAD={0x17, 0xa, "ab8cdc8ab13520bfc4f7189b44d04e51819f67"}, @NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3e61}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf9c6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_CT={0xdc, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfbc}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x5, 0x4, 0x6a, 0x9]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x480}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3006}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_ID={0x8}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000084}, 0x800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mprotect(&(0x7f0000068000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00ffffffffff"], 0x6c}}, 0x0) (async) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x8}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) fstat(r1, &(0x7f0000000380)) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1e0, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CT={0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1b565111}, @NFQA_PAYLOAD={0x17, 0xa, "ab8cdc8ab13520bfc4f7189b44d04e51819f67"}, @NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3e61}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf9c6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_CT={0xdc, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfbc}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x5, 0x4, 0x6a, 0x9]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x480}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3006}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_ID={0x8}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000084}, 0x800) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) mprotect(&(0x7f0000068000/0x1000)=nil, 0x1000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) (async) 0s ago: executing program 7 (id=434): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r1, &(0x7f0000000000)=""/24, 0x18) (async) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x440}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) sendmsg$inet(r0, 0x0, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x3}, 0x1}) kernel console output (not intermixed with test programs): ] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 48.162672][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.166802][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 48.171074][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 48.179572][ T25] usb 7-1: string descriptor 0 read error: -22 [ 48.181521][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 48.184763][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.205718][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 48.518475][ T6085] overlayfs: conflicting options: metacopy=off,verity=require [ 48.578805][ T6086] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 48.585110][ T25] usb 7-1: USB disconnect, device number 2 [ 48.590082][ T6086] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 48.600283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.801595][ T6087] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 48.808061][ T6087] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 48.890225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.005260][ T1014] usb 5-1: USB disconnect, device number 2 [ 49.261847][ T6101] netlink: 260 bytes leftover after parsing attributes in process `syz.2.24'. [ 49.265301][ T6101] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24'. [ 49.268275][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'. [ 49.400319][ T5944] Bluetooth: hci1: command tx timeout [ 49.400451][ T5298] Bluetooth: hci2: command tx timeout [ 49.401999][ T5944] Bluetooth: hci3: command tx timeout [ 49.406200][ T5949] Bluetooth: hci0: command tx timeout [ 49.740393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.748316][ T6116] overlayfs: failed to resolve './file1': -2 [ 50.052152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.069906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.090075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.092455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.094798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.098336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.101036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.110096][ T1014] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 50.252511][ T39] kauditd_printk_skb: 103 callbacks suppressed [ 50.252522][ T39] audit: type=1400 audit(1730428935.360:218): avc: denied { setopt } for pid=6122 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.266853][ T6123] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 50.268848][ T39] audit: type=1400 audit(1730428935.370:219): avc: denied { setopt } for pid=6122 comm="syz.2.31" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.271596][ T1014] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 50.276895][ T39] audit: type=1400 audit(1730428935.370:220): avc: denied { write } for pid=6122 comm="syz.2.31" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.276909][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 50.276927][ T1014] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.291831][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.295312][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 50.300202][ T1014] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 50.302155][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 50.304895][ T1014] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.308194][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.311154][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 50.315015][ T1014] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 50.316969][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 50.319836][ T1014] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.322956][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.325824][ T1014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 50.330852][ T1014] usb 5-1: string descriptor 0 read error: -22 [ 50.332559][ T1014] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 50.335008][ T1014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.344567][ T1014] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 50.396078][ T6125] Bluetooth: (null): Invalid header checksum [ 50.488855][ T6127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.494074][ T6127] ipt_REJECT: TCP_RESET invalid for non-tcp [ 50.525982][ T39] audit: type=1400 audit(1730428935.630:221): avc: denied { create } for pid=6128 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.533243][ T39] audit: type=1400 audit(1730428935.630:222): avc: denied { getopt } for pid=6128 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.546382][ T6003] usb 5-1: USB disconnect, device number 3 [ 50.776267][ T39] audit: type=1400 audit(1730428935.880:223): avc: denied { setopt } for pid=6134 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.782865][ T39] audit: type=1400 audit(1730428935.880:224): avc: denied { bind } for pid=6134 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.788656][ T39] audit: type=1400 audit(1730428935.880:225): avc: denied { name_bind } for pid=6134 comm="syz.1.37" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.795149][ T39] audit: type=1400 audit(1730428935.880:226): avc: denied { node_bind } for pid=6134 comm="syz.1.37" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.801875][ T39] audit: type=1400 audit(1730428935.890:227): avc: denied { setopt } for pid=6134 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.816957][ T6138] Bluetooth: MGMT ver 1.23 [ 50.830484][ T1014] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.000141][ T1014] usb 8-1: Using ep0 maxpacket: 8 [ 51.003678][ T1014] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 51.006601][ T1014] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.010631][ T1014] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.014238][ T1014] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.017677][ T1014] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.022343][ T1014] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.025641][ T1014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.098693][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 51.101204][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 51.237422][ T1014] usb 8-1: usb_control_msg returned -32 [ 51.240251][ T1014] usbtmc 8-1:16.0: can't read capabilities [ 51.413737][ T6158] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 51.424987][ T6158] qnx6: unable to set blocksize [ 51.479937][ T5298] Bluetooth: hci3: command tx timeout [ 51.481843][ T5298] Bluetooth: hci2: command tx timeout [ 51.483573][ T5298] Bluetooth: hci1: command tx timeout [ 51.485015][ T5298] Bluetooth: hci0: command tx timeout [ 51.499396][ T6158] kvm: kvm [6157]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xfc003a98010002 [ 51.716097][ T6174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.765994][ T6184] veth0: entered promiscuous mode [ 51.767718][ T6184] veth0: entered allmulticast mode [ 51.943838][ T6201] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 51.950909][ T6201] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 52.013733][ T6206] 9p: Unknown Cache mode or invalid value fsca [ 52.146757][ T6003] usb 8-1: USB disconnect, device number 2 [ 52.490058][ T6219] binder: 6218:6219 unknown command 0 [ 52.491926][ T6219] binder: 6218:6219 ioctl c0306201 20000080 returned -22 [ 52.753345][ T6234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.776414][ T6242] 9p: Unknown Cache mode or invalid value fscach [ 52.935640][ T6259] capability: warning: `syz.1.74' uses 32-bit capabilities (legacy support in use) [ 52.949207][ T6259] [U] VÔ3¸ÂFÙ¾"WÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 53.038916][ T6268] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 53.043744][ T6268] qnx6: wrong signature (magic) in superblock #1. [ 53.046382][ T6268] qnx6: unable to read the first superblock [ 53.219362][ T6289] 9p: Unknown Cache mode or invalid value fscach [ 53.383686][ T5951] IPVS: starting estimator thread 0... [ 53.383897][ T6297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6297 comm=syz.2.83 [ 53.394654][ T6297] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.469950][ T6301] IPVS: using max 35 ests per chain, 84000 per kthread [ 53.479931][ T6003] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.569886][ T5949] Bluetooth: hci0: command tx timeout [ 53.569922][ T5298] Bluetooth: hci1: command tx timeout [ 53.570528][ T5944] Bluetooth: hci3: command tx timeout [ 53.570561][ T5953] Bluetooth: hci2: command tx timeout [ 53.639887][ T6003] usb 8-1: Using ep0 maxpacket: 8 [ 53.643335][ T6003] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 53.645569][ T6003] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 53.647883][ T6003] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 53.650496][ T6003] usb 8-1: config 250 has no interface number 0 [ 53.652508][ T6003] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 53.655507][ T6003] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 53.658227][ T6003] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 53.661379][ T6003] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 53.664489][ T6003] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 53.668148][ T6003] usb 8-1: config 250 interface 228 has no altsetting 0 [ 53.672096][ T6003] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 53.674982][ T6003] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 53.677534][ T6003] usb 8-1: Product: syz [ 53.678858][ T6003] usb 8-1: SerialNumber: syz [ 53.684942][ T6003] hub 8-1:250.228: bad descriptor, ignoring hub [ 53.686631][ T6003] hub 8-1:250.228: probe with driver hub failed with error -5 [ 53.889241][ T6003] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 53.911062][ T6003] usb 8-1: USB disconnect, device number 3 [ 53.914690][ T6003] usblp0: removed [ 54.090155][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 54.460640][ T6321] 9p: Unknown Cache mode or invalid value fscach [ 54.537298][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 55.137352][ T6328] ======================================================= [ 55.137352][ T6328] WARNING: The mand mount option has been deprecated and [ 55.137352][ T6328] and is ignored by this kernel. Remove the mand [ 55.137352][ T6328] option from the mount to silence this warning. [ 55.137352][ T6328] ======================================================= [ 55.333824][ T6339] netlink: 168 bytes leftover after parsing attributes in process `syz.0.96'. [ 55.381991][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 55.382001][ T39] audit: type=1400 audit(1730428940.490:290): avc: denied { block_suspend } for pid=6342 comm="syz.0.98" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.454193][ T39] audit: type=1400 audit(1730428940.560:291): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.483854][ T39] audit: type=1400 audit(1730428940.600:292): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.559266][ T39] audit: type=1400 audit(1730428940.660:293): avc: denied { create } for pid=6347 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.657158][ T1132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.718890][ T1132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.800245][ T1132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.804759][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.809381][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.814458][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.818292][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.822166][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.824618][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.832664][ T39] audit: type=1400 audit(1730428940.940:294): avc: denied { mounton } for pid=6351 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.878478][ T1132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.930126][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 55.975076][ T39] audit: type=1400 audit(1730428941.080:295): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 56.007154][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.009473][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.011957][ T6351] bridge_slave_0: entered allmulticast mode [ 56.014067][ T6351] bridge_slave_0: entered promiscuous mode [ 56.017510][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.019406][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.022020][ T6351] bridge_slave_1: entered allmulticast mode [ 56.024063][ T6351] bridge_slave_1: entered promiscuous mode [ 56.060364][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.073417][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.106809][ T1132] bridge_slave_1: left allmulticast mode [ 56.109252][ T1132] bridge_slave_1: left promiscuous mode [ 56.112183][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.119556][ T1132] bridge_slave_0: left allmulticast mode [ 56.122564][ T1132] bridge_slave_0: left promiscuous mode [ 56.124069][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.199770][ T39] audit: type=1400 audit(1730428941.300:296): avc: denied { read } for pid=6359 comm="syz.3.104" path="socket:[13355]" dev="sockfs" ino=13355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.428130][ T6365] binder: BINDER_SET_CONTEXT_MGR already set [ 56.430877][ T6365] binder: 6364:6365 ioctl 4018620d 20000300 returned -16 [ 56.433222][ T6365] binder: BINDER_SET_CONTEXT_MGR already set [ 56.435523][ T6365] binder: 6364:6365 ioctl 4018620d 20000300 returned -16 [ 56.438154][ T6365] binder: BINDER_SET_CONTEXT_MGR already set [ 56.447136][ T6365] binder: 6364:6365 ioctl 4018620d 20000300 returned -16 [ 56.452174][ T6365] binder: BINDER_SET_CONTEXT_MGR already set [ 56.454841][ T6365] binder: 6364:6365 ioctl 4018620d 20000300 returned -16 [ 56.480755][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.487399][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.493288][ T1132] bond0 (unregistering): Released all slaves [ 56.506892][ T6351] team0: Port device team_slave_0 added [ 56.518163][ T6351] team0: Port device team_slave_1 added [ 56.615709][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.618020][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.626780][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.643665][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.646176][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.655154][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.812365][ T6351] hsr_slave_0: entered promiscuous mode [ 56.819182][ T6351] hsr_slave_1: entered promiscuous mode [ 56.822192][ T6351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.823690][ T39] audit: type=1400 audit(1730428941.930:297): avc: denied { create } for pid=6369 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.824394][ T6351] Cannot create hsr debugfs directory [ 56.832342][ T39] audit: type=1400 audit(1730428941.930:298): avc: denied { setopt } for pid=6369 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.886552][ T39] audit: type=1400 audit(1730428941.990:299): avc: denied { read } for pid=5660 comm="dhcpcd" name="n103" dev="tmpfs" ino=2392 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.947541][ T1132] hsr_slave_0: left promiscuous mode [ 56.953597][ T1132] hsr_slave_1: left promiscuous mode [ 56.959574][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.962269][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.967776][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.972920][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.016751][ T1132] veth1_macvtap: left promiscuous mode [ 57.018692][ T1132] veth0_macvtap: left promiscuous mode [ 57.033966][ T1132] veth1_vlan: left promiscuous mode [ 57.035612][ T1132] veth0_vlan: left promiscuous mode [ 57.082029][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 57.126101][ T6386] mmap: syz.3.109 (6386) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.705673][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 57.793572][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 57.879988][ T5949] Bluetooth: hci0: command tx timeout [ 58.396902][ T6351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.406785][ T6351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.422202][ T6351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.426994][ T6351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.444682][ T6402] netlink: 256 bytes leftover after parsing attributes in process `syz.3.112'. [ 58.502134][ T6351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.512419][ T6351] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.516689][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.518615][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.530965][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.531895][ T6395] input: syz0 as /devices/virtual/input/input5 [ 58.533909][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.695543][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.810287][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 58.888819][ T6351] veth0_vlan: entered promiscuous mode [ 58.897717][ T6351] veth1_vlan: entered promiscuous mode [ 58.911721][ T6351] veth0_macvtap: entered promiscuous mode [ 58.915951][ T6351] veth1_macvtap: entered promiscuous mode [ 58.927105][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.930657][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.933515][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.936343][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.938993][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.943588][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.948561][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.955129][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.958223][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.961387][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.964700][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.968816][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.971604][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 58.972826][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.975013][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 58.978565][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.981552][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 58.989198][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 58.993713][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 58.994088][ T6351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.995624][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 58.998694][ T6351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.002369][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 59.006683][ T6351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.011077][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 59.013646][ T6351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.017208][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 59.022051][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 59.024971][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 59.028376][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 59.034210][ T9] usb 8-1: string descriptor 0 read error: -22 [ 59.035989][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.038493][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.055440][ T9] adutux 8-1:168.0: interrupt endpoints not found [ 59.078594][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.081172][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.096852][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.099970][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.156906][ T6461] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 2, id = 0 [ 59.261971][ T9] usb 8-1: USB disconnect, device number 4 [ 59.885934][ T6502] netlink: 'syz.3.126': attribute type 10 has an invalid length. [ 59.895691][ T6502] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.898533][ T6502] bond0: (slave team0): Enslaving as an active interface with an up link [ 59.904027][ T6502] netlink: 'syz.3.126': attribute type 10 has an invalid length. [ 59.907456][ T6502] bond0: (slave team0): Releasing backup interface [ 59.915352][ T6502] bridge0: port 3(team0) entered blocking state [ 59.917256][ T6502] bridge0: port 3(team0) entered disabled state [ 59.919052][ T6502] team0: entered allmulticast mode [ 59.921175][ T6502] team_slave_0: entered allmulticast mode [ 59.923026][ T6502] team_slave_1: entered allmulticast mode [ 59.925286][ T6502] team0: entered promiscuous mode [ 59.926706][ T6502] team_slave_0: entered promiscuous mode [ 59.928319][ T6502] team_slave_1: entered promiscuous mode [ 59.970919][ T5949] Bluetooth: hci0: command tx timeout [ 60.244132][ T6515] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 60.247954][ T6515] qnx6: wrong signature (magic) in superblock #1. [ 60.250851][ T6515] qnx6: unable to read the first superblock [ 60.319223][ T6519] netlink: 132 bytes leftover after parsing attributes in process `syz.4.132'. [ 60.610721][ T1014] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 60.760220][ T1014] usb 7-1: device descriptor read/64, error -71 [ 60.812098][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 60.812114][ T39] audit: type=1400 audit(1730428945.920:349): avc: denied { sqpoll } for pid=6533 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.878233][ T39] audit: type=1400 audit(1730428945.980:350): avc: denied { write } for pid=6530 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.924578][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.138'. [ 60.934346][ T6570] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 60.934746][ T6571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.139'. [ 60.996151][ T6578] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.142'. [ 60.998727][ T6578] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 61.000668][ T6580] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.003215][ T39] audit: type=1400 audit(1730428946.110:351): avc: denied { write } for pid=6577 comm="syz.3.142" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.011697][ T39] audit: type=1400 audit(1730428946.110:352): avc: denied { name_bind } for pid=6579 comm="syz.4.143" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 61.029954][ T1014] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 61.054573][ T6583] 9pnet_fd: Insufficient options for proto=fd [ 61.152360][ T39] audit: type=1400 audit(1730428946.260:353): avc: denied { shutdown } for pid=6581 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.159155][ T39] audit: type=1400 audit(1730428946.260:354): avc: denied { read } for pid=6581 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.170017][ T1014] usb 7-1: device descriptor read/64, error -71 [ 61.210583][ T1111] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 61.214517][ T1111] sr 2:0:0:0: [sr0] tag#17 Sense Key : Illegal Request [current] [ 61.217263][ T1111] sr 2:0:0:0: [sr0] tag#17 Add. Sense: Invalid command operation code [ 61.220296][ T1111] sr 2:0:0:0: [sr0] tag#17 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 61.223374][ T1111] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 61.227299][ T1111] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 61.231601][ T1111] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 61.290097][ T1014] usb usb7-port1: attempt power cycle [ 61.552726][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 61.629887][ T1014] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 61.650809][ T1014] usb 7-1: device descriptor read/8, error -71 [ 61.709935][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 61.713558][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.717801][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.721797][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.726687][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.732018][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.735505][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.899923][ T1014] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 61.920561][ T1014] usb 7-1: device descriptor read/8, error -71 [ 61.944247][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 61.945762][ T30] usbtmc 8-1:16.0: can't read capabilities [ 62.040208][ T1014] usb usb7-port1: unable to enumerate USB device [ 62.040627][ T5949] Bluetooth: hci0: command tx timeout [ 62.145946][ T39] audit: type=1400 audit(1730428947.250:355): avc: denied { write } for pid=6592 comm="syz.3.147" name="ip_vs" dev="proc" ino=4026533193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.151064][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.156385][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.159726][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.163299][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.166642][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.170568][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.174886][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.179176][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.182621][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.185791][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.189028][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.192529][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.196527][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.200944][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.204504][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.207840][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 62.212501][ T1014] usb 8-1: USB disconnect, device number 5 [ 62.710230][ T39] audit: type=1400 audit(1730428947.810:356): avc: denied { create } for pid=6599 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.717694][ T39] audit: type=1400 audit(1730428947.820:357): avc: denied { read } for pid=6599 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.754588][ T6602] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.150'. [ 62.757928][ T6602] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 62.762399][ T6602] overlay: Unknown parameter 'hash' [ 62.764577][ T39] audit: type=1400 audit(1730428947.870:358): avc: denied { ioctl } for pid=6599 comm="syz.4.149" path="socket:[14400]" dev="sockfs" ino=14400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.841990][ T6612] FAULT_INJECTION: forcing a failure. [ 62.841990][ T6612] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.847107][ T6612] CPU: 2 UID: 0 PID: 6612 Comm: syz.3.152 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 62.851289][ T6612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.855220][ T6612] Call Trace: [ 62.856440][ T6612] [ 62.857503][ T6612] dump_stack_lvl+0x16c/0x1f0 [ 62.859190][ T6612] should_fail_ex+0x497/0x5b0 [ 62.860852][ T6612] _copy_from_user+0x2e/0xd0 [ 62.862781][ T6612] copy_msghdr_from_user+0x99/0x160 [ 62.864488][ T6612] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 62.866816][ T6612] ? __pfx___lock_acquire+0x10/0x10 [ 62.869322][ T6612] ___sys_sendmsg+0xff/0x1e0 [ 62.871078][ T6612] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.873027][ T6612] ? lock_acquire+0x2f/0xb0 [ 62.874301][ T6612] ? __fget_files+0x40/0x3f0 [ 62.875570][ T6612] ? fdget+0x176/0x210 [ 62.876857][ T6612] __sys_sendmsg+0x117/0x1f0 [ 62.878288][ T6612] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.879673][ T6612] ? __fget_files+0x244/0x3f0 [ 62.880953][ T6612] do_syscall_64+0xcd/0x250 [ 62.882312][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.883996][ T6612] RIP: 0033:0x7f51cf77e719 [ 62.885533][ T6612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.891189][ T6612] RSP: 002b:00007f51d0612038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.893964][ T6612] RAX: ffffffffffffffda RBX: 00007f51cf935f80 RCX: 00007f51cf77e719 [ 62.896823][ T6612] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 62.899877][ T6612] RBP: 00007f51d0612090 R08: 0000000000000000 R09: 0000000000000000 [ 62.902811][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.905592][ T6612] R13: 0000000000000000 R14: 00007f51cf935f80 R15: 00007fff66879578 [ 62.908015][ T6612] [ 62.953450][ T6615] block device autoloading is deprecated and will be removed. [ 63.457235][ T6623] netlink: 104 bytes leftover after parsing attributes in process `syz.2.156'. [ 63.471019][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.156'. [ 63.653112][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.158'. [ 63.655524][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.158'. [ 63.939578][ T6638] FAULT_INJECTION: forcing a failure. [ 63.939578][ T6638] name failslab, interval 1, probability 0, space 0, times 1 [ 63.943474][ T6638] CPU: 2 UID: 0 PID: 6638 Comm: syz.4.161 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 63.946422][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.949707][ T6638] Call Trace: [ 63.951046][ T6638] [ 63.951977][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 63.953491][ T6638] should_fail_ex+0x497/0x5b0 [ 63.955111][ T6638] ? fs_reclaim_acquire+0xae/0x150 [ 63.956806][ T6638] should_failslab+0xc2/0x120 [ 63.958423][ T6638] kmem_cache_alloc_node_noprof+0x71/0x310 [ 63.960239][ T6638] ? __alloc_skb+0x2b1/0x380 [ 63.961586][ T6638] __alloc_skb+0x2b1/0x380 [ 63.963034][ T6638] ? __pfx___alloc_skb+0x10/0x10 [ 63.964872][ T6638] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 63.966796][ T6638] netlink_alloc_large_skb+0x69/0x130 [ 63.968603][ T6638] netlink_sendmsg+0x689/0xd70 [ 63.970446][ T6638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.971968][ T6638] ____sys_sendmsg+0xaaf/0xc90 [ 63.973335][ T6638] ? copy_msghdr_from_user+0x10b/0x160 [ 63.974876][ T6638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.976271][ T6638] ? __pfx___lock_acquire+0x10/0x10 [ 63.977657][ T6638] ___sys_sendmsg+0x135/0x1e0 [ 63.978929][ T6638] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.980312][ T6638] ? lock_acquire+0x2f/0xb0 [ 63.981688][ T6638] ? __fget_files+0x40/0x3f0 [ 63.983305][ T6638] ? fdget+0x176/0x210 [ 63.984740][ T6638] __sys_sendmsg+0x117/0x1f0 [ 63.986327][ T6638] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.988028][ T6638] ? __fget_files+0x244/0x3f0 [ 63.989448][ T6638] do_syscall_64+0xcd/0x250 [ 63.991369][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.993516][ T6638] RIP: 0033:0x7f64f017e719 [ 63.995078][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.000768][ T6638] RSP: 002b:00007f64f0e95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.003620][ T6638] RAX: ffffffffffffffda RBX: 00007f64f0335f80 RCX: 00007f64f017e719 [ 64.006052][ T6638] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 64.008208][ T6638] RBP: 00007f64f0e95090 R08: 0000000000000000 R09: 0000000000000000 [ 64.010320][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.012433][ T6638] R13: 0000000000000000 R14: 00007f64f0335f80 R15: 00007ffe6b2ad428 [ 64.014575][ T6638] [ 64.045727][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 64.130124][ T5949] Bluetooth: hci0: command tx timeout [ 64.171172][ T6646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6646 comm=syz.4.164 [ 64.568362][ T6657] gretap1: entered promiscuous mode [ 64.570524][ T6657] gretap1: entered allmulticast mode [ 65.059934][ T6673] capability: warning: `syz.4.170' uses deprecated v2 capabilities in a way that may be insecure [ 65.245304][ T6684] [U]  [ 65.341769][ T6686] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 65.424100][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 65.463049][ T6688] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 65.465573][ T6688] netlink: 224 bytes leftover after parsing attributes in process `syz.4.177'. [ 65.776916][ T6711] FAULT_INJECTION: forcing a failure. [ 65.776916][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.781288][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.2.182 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 65.784707][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.787962][ T6711] Call Trace: [ 65.789749][ T6711] [ 65.791063][ T6711] dump_stack_lvl+0x16c/0x1f0 [ 65.793035][ T6711] should_fail_ex+0x497/0x5b0 [ 65.794775][ T6711] _copy_from_iter+0x2a1/0x1560 [ 65.796808][ T6711] ? __pfx__copy_from_iter+0x10/0x10 [ 65.798774][ T6711] ? __virt_addr_valid+0x1a4/0x590 [ 65.800688][ T6711] ? __virt_addr_valid+0x5e/0x590 [ 65.802538][ T6711] ? __phys_addr_symbol+0x30/0x80 [ 65.804288][ T6711] ? __check_object_size+0x488/0x710 [ 65.806154][ T6711] netlink_sendmsg+0x813/0xd70 [ 65.807866][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.809853][ T6711] ____sys_sendmsg+0xaaf/0xc90 [ 65.811374][ T6711] ? copy_msghdr_from_user+0x10b/0x160 [ 65.813110][ T6711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.814992][ T6711] ? __pfx___lock_acquire+0x10/0x10 [ 65.816824][ T6711] ___sys_sendmsg+0x135/0x1e0 [ 65.818476][ T6711] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.820307][ T6711] ? lock_acquire+0x2f/0xb0 [ 65.822108][ T6711] ? __fget_files+0x40/0x3f0 [ 65.823979][ T6711] ? fdget+0x176/0x210 [ 65.825667][ T6711] __sys_sendmsg+0x117/0x1f0 [ 65.827410][ T6711] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.829601][ T6711] ? __fget_files+0x244/0x3f0 [ 65.831676][ T6711] do_syscall_64+0xcd/0x250 [ 65.833450][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.835481][ T6711] RIP: 0033:0x7fe094f7e719 [ 65.837009][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.843164][ T6711] RSP: 002b:00007fe095cf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.845864][ T6711] RAX: ffffffffffffffda RBX: 00007fe095135f80 RCX: 00007fe094f7e719 [ 65.848449][ T6711] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 65.851212][ T6711] RBP: 00007fe095cf5090 R08: 0000000000000000 R09: 0000000000000000 [ 65.853488][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.855546][ T6711] R13: 0000000000000000 R14: 00007fe095135f80 R15: 00007ffe6dcb6318 [ 65.857628][ T6711] [ 65.900044][ T6716] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 65.902665][ T6716] overlayfs: overlapping lowerdir path [ 65.913159][ T6716] openvswitch: netlink: Flow key attribute not present in set flow. [ 66.007045][ T6722] tipc: Started in network mode [ 66.009477][ T6722] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 66.012926][ T6722] tipc: Enabled bearer , priority 10 [ 66.016915][ T6722] openvswitch: netlink: Actions may not be safe on all matching packets [ 66.182540][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 66.182555][ T39] audit: type=1400 audit(1730428951.290:381): avc: denied { getopt } for pid=6743 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.193754][ T39] audit: type=1400 audit(1730428951.300:382): avc: denied { setattr } for pid=6743 comm="syz.3.190" name="TIPC" dev="sockfs" ino=11944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.230338][ T6751] FAULT_INJECTION: forcing a failure. [ 66.230338][ T6751] name failslab, interval 1, probability 0, space 0, times 0 [ 66.230553][ T39] audit: type=1400 audit(1730428951.340:383): avc: denied { connect } for pid=6750 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.233675][ T6751] CPU: 2 UID: 0 PID: 6751 Comm: syz.3.194 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 66.241231][ T6751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.244473][ T6751] Call Trace: [ 66.245502][ T6751] [ 66.245650][ T39] audit: type=1400 audit(1730428951.350:384): avc: denied { connect } for pid=6750 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 66.246236][ T6751] dump_stack_lvl+0x16c/0x1f0 [ 66.246414][ T6747] sp0: Synchronizing with TNC [ 66.255795][ T6751] should_fail_ex+0x497/0x5b0 [ 66.257173][ T6751] should_failslab+0xc2/0x120 [ 66.258387][ T6751] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 66.259760][ T6751] ? skb_clone+0x190/0x3f0 [ 66.260941][ T6751] skb_clone+0x190/0x3f0 [ 66.262042][ T6751] netlink_deliver_tap+0xab3/0xd90 [ 66.263818][ T6751] netlink_unicast+0x5e1/0x7f0 [ 66.265813][ T6751] ? __pfx_netlink_unicast+0x10/0x10 [ 66.268019][ T6751] netlink_sendmsg+0x8b8/0xd70 [ 66.270104][ T6751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.271737][ T6751] ____sys_sendmsg+0xaaf/0xc90 [ 66.273089][ T6751] ? copy_msghdr_from_user+0x10b/0x160 [ 66.275057][ T6751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.276969][ T6751] ? __pfx___lock_acquire+0x10/0x10 [ 66.278685][ T6751] ___sys_sendmsg+0x135/0x1e0 [ 66.280392][ T6751] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.282192][ T6751] ? lock_acquire+0x2f/0xb0 [ 66.283732][ T6751] ? __fget_files+0x40/0x3f0 [ 66.285300][ T6751] ? fdget+0x176/0x210 [ 66.286683][ T6751] __sys_sendmsg+0x117/0x1f0 [ 66.288237][ T6751] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.289942][ T6751] ? __fget_files+0x244/0x3f0 [ 66.291527][ T6751] do_syscall_64+0xcd/0x250 [ 66.293041][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.294980][ T6751] RIP: 0033:0x7f51cf77e719 [ 66.296607][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.302048][ T6751] RSP: 002b:00007f51d0612038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.304266][ T6751] RAX: ffffffffffffffda RBX: 00007f51cf935f80 RCX: 00007f51cf77e719 [ 66.306521][ T6751] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 66.308791][ T6751] RBP: 00007f51d0612090 R08: 0000000000000000 R09: 0000000000000000 [ 66.311286][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.314020][ T6751] R13: 0000000000000000 R14: 00007f51cf935f80 R15: 00007fff66879578 [ 66.316546][ T6751] [ 66.324286][ T39] audit: type=1400 audit(1730428951.430:385): avc: denied { setattr } for pid=6750 comm="syz.4.193" name="ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 66.367683][ T39] audit: type=1400 audit(1730428951.470:386): avc: denied { bind } for pid=6759 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.387970][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 66.394589][ T39] audit: type=1400 audit(1730428951.500:387): avc: denied { write } for pid=6746 comm="syz.2.192" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.454040][ T39] audit: type=1326 audit(1730428951.560:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.197" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51cf77e719 code=0x0 [ 66.521300][ T5949] Bluetooth: hci1: command tx timeout [ 67.153294][ T30] tipc: Node number set to 10005162 [ 67.227201][ T6775] netlink: 'syz.2.199': attribute type 5 has an invalid length. [ 67.281863][ T6784] FAULT_INJECTION: forcing a failure. [ 67.281863][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 67.285418][ T6784] CPU: 3 UID: 0 PID: 6784 Comm: syz.2.203 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 67.288723][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.289311][ T6786] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.292577][ T6784] Call Trace: [ 67.292586][ T6784] [ 67.292592][ T6784] dump_stack_lvl+0x16c/0x1f0 [ 67.292615][ T6784] should_fail_ex+0x497/0x5b0 [ 67.292628][ T6784] ? fs_reclaim_acquire+0xae/0x150 [ 67.292641][ T6784] should_failslab+0xc2/0x120 [ 67.292658][ T6784] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 67.292671][ T6784] ? skb_clone+0x190/0x3f0 [ 67.292686][ T6784] skb_clone+0x190/0x3f0 [ 67.292698][ T6784] nfnetlink_rcv_batch+0x1d9/0x24e0 [ 67.292721][ T6784] ? __pfx___lock_acquire+0x10/0x10 [ 67.292735][ T6784] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 67.292752][ T6784] ? find_held_lock+0x2d/0x110 [ 67.292769][ T6784] ? avc_has_perm_noaudit+0x119/0x3a0 [ 67.292790][ T6784] ? avc_has_perm_noaudit+0x143/0x3a0 [ 67.292806][ T6784] ? __asan_memset+0x23/0x50 [ 67.292816][ T6784] ? __nla_validate_parse+0x601/0x2880 [ 67.292834][ T6784] ? __pfx___nla_validate_parse+0x10/0x10 [ 67.292849][ T6784] ? find_held_lock+0x2d/0x110 [ 67.292862][ T6784] ? cap_capable+0x1cf/0x240 [ 67.292881][ T6784] ? __nla_parse+0x40/0x60 [ 67.292897][ T6784] nfnetlink_rcv+0x3c3/0x430 [ 67.292922][ T6784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 67.292942][ T6784] netlink_unicast+0x53c/0x7f0 [ 67.292960][ T6784] ? __pfx_netlink_unicast+0x10/0x10 [ 67.292980][ T6784] netlink_sendmsg+0x8b8/0xd70 [ 67.292998][ T6784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.293019][ T6784] ____sys_sendmsg+0xaaf/0xc90 [ 67.293035][ T6784] ? copy_msghdr_from_user+0x10b/0x160 [ 67.293048][ T6784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.301271][ T6786] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 67.302274][ T6784] ? __pfx___lock_acquire+0x10/0x10 [ 67.346316][ T6784] ___sys_sendmsg+0x135/0x1e0 [ 67.347662][ T6784] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.349089][ T6784] ? lock_acquire+0x2f/0xb0 [ 67.350273][ T6784] ? __fget_files+0x40/0x3f0 [ 67.351492][ T6784] ? fdget+0x176/0x210 [ 67.352722][ T6784] __sys_sendmsg+0x117/0x1f0 [ 67.353933][ T6784] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.355323][ T6784] ? __fget_files+0x244/0x3f0 [ 67.356668][ T6784] do_syscall_64+0xcd/0x250 [ 67.357899][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.359476][ T6784] RIP: 0033:0x7fe094f7e719 [ 67.360670][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.366103][ T6784] RSP: 002b:00007fe095cf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.368417][ T6784] RAX: ffffffffffffffda RBX: 00007fe095135f80 RCX: 00007fe094f7e719 [ 67.370517][ T6784] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 67.372907][ T6784] RBP: 00007fe095cf5090 R08: 0000000000000000 R09: 0000000000000000 [ 67.374967][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.377087][ T6784] R13: 0000000000000000 R14: 00007fe095135f80 R15: 00007ffe6dcb6318 [ 67.379633][ T6784] [ 67.407895][ T39] audit: type=1804 audit(1730428952.510:389): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.205" name="/newroot/39/file0/file0" dev="9p" ino=36449035 res=1 errno=0 [ 67.541683][ T6809] bond1: entered allmulticast mode [ 67.551774][ T39] audit: type=1400 audit(1730428952.660:390): avc: denied { mounton } for pid=6808 comm="syz.3.212" path="/proc/127/ns/mnt" dev="proc" ino=11992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 67.589973][ T6818] FAULT_INJECTION: forcing a failure. [ 67.589973][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 67.596286][ T6818] CPU: 3 UID: 0 PID: 6818 Comm: syz.3.214 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 67.599712][ T6818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.602995][ T6818] Call Trace: [ 67.604350][ T6818] [ 67.605181][ T6818] dump_stack_lvl+0x16c/0x1f0 [ 67.606467][ T6818] should_fail_ex+0x497/0x5b0 [ 67.607648][ T6818] ? fs_reclaim_acquire+0xae/0x150 [ 67.609015][ T6818] should_failslab+0xc2/0x120 [ 67.610241][ T6818] __kmalloc_cache_noprof+0x6b/0x300 [ 67.611688][ T6818] ? nfnl_err_add+0x4e/0x2d0 [ 67.613943][ T6818] nfnl_err_add+0x4e/0x2d0 [ 67.615886][ T6818] nfnetlink_rcv_batch+0xe40/0x24e0 [ 67.617878][ T6818] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 67.620090][ T6818] ? avc_has_perm_noaudit+0x119/0x3a0 [ 67.621870][ T6818] ? avc_has_perm_noaudit+0x143/0x3a0 [ 67.623699][ T6818] ? __nla_parse+0x40/0x60 [ 67.625310][ T6818] nfnetlink_rcv+0x3c3/0x430 [ 67.627013][ T6818] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 67.628773][ T6818] netlink_unicast+0x53c/0x7f0 [ 67.630508][ T6818] ? __pfx_netlink_unicast+0x10/0x10 [ 67.632416][ T6818] netlink_sendmsg+0x8b8/0xd70 [ 67.634071][ T6818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.635951][ T6818] ____sys_sendmsg+0xaaf/0xc90 [ 67.637575][ T6818] ? copy_msghdr_from_user+0x10b/0x160 [ 67.639313][ T6818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.641725][ T6818] ? __pfx___lock_acquire+0x10/0x10 [ 67.643990][ T6818] ___sys_sendmsg+0x135/0x1e0 [ 67.645836][ T6818] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.647812][ T6818] ? lock_acquire+0x2f/0xb0 [ 67.649604][ T6818] ? __fget_files+0x40/0x3f0 [ 67.651438][ T6818] ? fdget+0x176/0x210 [ 67.652976][ T6818] __sys_sendmsg+0x117/0x1f0 [ 67.654643][ T6818] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.656494][ T6818] ? __fget_files+0x244/0x3f0 [ 67.658256][ T6818] do_syscall_64+0xcd/0x250 [ 67.659928][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.662375][ T6818] RIP: 0033:0x7f51cf77e719 [ 67.664191][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.671118][ T6818] RSP: 002b:00007f51d0612038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.674590][ T6818] RAX: ffffffffffffffda RBX: 00007f51cf935f80 RCX: 00007f51cf77e719 [ 67.677739][ T6818] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 67.680552][ T6818] RBP: 00007f51d0612090 R08: 0000000000000000 R09: 0000000000000000 [ 67.683132][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.686109][ T6818] R13: 0000000000000000 R14: 00007f51cf935f80 R15: 00007fff66879578 [ 67.688984][ T6818] [ 67.737178][ T6825] UBIFS error (pid: 6825): cannot open "./file0", error -22 [ 68.027086][ T6845] FAULT_INJECTION: forcing a failure. [ 68.027086][ T6845] name failslab, interval 1, probability 0, space 0, times 0 [ 68.032879][ T6845] CPU: 2 UID: 0 PID: 6845 Comm: syz.3.223 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 68.035681][ T6845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.038898][ T6845] Call Trace: [ 68.039918][ T6845] [ 68.040978][ T6845] dump_stack_lvl+0x16c/0x1f0 [ 68.042483][ T6845] should_fail_ex+0x497/0x5b0 [ 68.044364][ T6845] ? fs_reclaim_acquire+0xae/0x150 [ 68.046510][ T6845] should_failslab+0xc2/0x120 [ 68.048012][ T6845] __kmalloc_cache_noprof+0x6b/0x300 [ 68.049754][ T6845] ? nfnl_err_add+0x4e/0x2d0 [ 68.051500][ T6845] nfnl_err_add+0x4e/0x2d0 [ 68.053335][ T6845] nfnetlink_rcv_batch+0xe40/0x24e0 [ 68.055276][ T6845] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 68.057208][ T6845] ? avc_has_perm_noaudit+0x119/0x3a0 [ 68.058649][ T6845] ? avc_has_perm_noaudit+0x143/0x3a0 [ 68.060273][ T6845] ? __nla_parse+0x40/0x60 [ 68.061930][ T6845] nfnetlink_rcv+0x3c3/0x430 [ 68.063542][ T6845] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 68.065417][ T6845] netlink_unicast+0x53c/0x7f0 [ 68.067372][ T6845] ? __pfx_netlink_unicast+0x10/0x10 [ 68.068973][ T6845] netlink_sendmsg+0x8b8/0xd70 [ 68.070836][ T6845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.072912][ T6845] ____sys_sendmsg+0xaaf/0xc90 [ 68.074564][ T6845] ? copy_msghdr_from_user+0x10b/0x160 [ 68.076185][ T6845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.077712][ T6845] ? __pfx___lock_acquire+0x10/0x10 [ 68.079103][ T6845] ___sys_sendmsg+0x135/0x1e0 [ 68.080355][ T6845] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.081790][ T6845] ? lock_acquire+0x2f/0xb0 [ 68.083204][ T6845] ? __fget_files+0x40/0x3f0 [ 68.084792][ T6845] ? fdget+0x176/0x210 [ 68.086072][ T6845] __sys_sendmsg+0x117/0x1f0 [ 68.087497][ T6845] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.089139][ T6845] ? __fget_files+0x244/0x3f0 [ 68.090501][ T6845] do_syscall_64+0xcd/0x250 [ 68.091840][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.093691][ T6845] RIP: 0033:0x7f51cf77e719 [ 68.095376][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.101500][ T6845] RSP: 002b:00007f51d0612038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.104764][ T6845] RAX: ffffffffffffffda RBX: 00007f51cf935f80 RCX: 00007f51cf77e719 [ 68.107708][ T6845] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 68.110588][ T6845] RBP: 00007f51d0612090 R08: 0000000000000000 R09: 0000000000000000 [ 68.112762][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.115485][ T6845] R13: 0000000000000000 R14: 00007f51cf935f80 R15: 00007fff66879578 [ 68.118247][ T6845] [ 68.153546][ T6848] trusted_key: encrypted_key: hex blob is missing [ 68.209216][ T6850] netlink: 'syz.3.225': attribute type 13 has an invalid length. [ 68.212223][ T6850] veth0_macvtap: left promiscuous mode [ 68.213701][ T6850] macvtap0: entered allmulticast mode [ 68.217518][ T6850] macvtap0: refused to change device tx_queue_len [ 68.354948][ T5298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.358611][ T5298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.364033][ T5298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.368377][ T5298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.371973][ T5298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.374933][ T5298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.470489][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 68.551346][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.553412][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.555334][ T6855] bridge_slave_0: entered allmulticast mode [ 68.557444][ T6855] bridge_slave_0: entered promiscuous mode [ 68.560290][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.562591][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.563792][ T6874] FAULT_INJECTION: forcing a failure. [ 68.563792][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 68.564786][ T6855] bridge_slave_1: entered allmulticast mode [ 68.568732][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.3.232 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 68.573757][ T6874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.575079][ T6855] bridge_slave_1: entered promiscuous mode [ 68.576575][ T6874] Call Trace: [ 68.579346][ T6874] [ 68.580055][ T6874] dump_stack_lvl+0x16c/0x1f0 [ 68.581387][ T6874] should_fail_ex+0x497/0x5b0 [ 68.582714][ T6874] ? fs_reclaim_acquire+0xae/0x150 [ 68.584220][ T6874] should_failslab+0xc2/0x120 [ 68.585468][ T6874] __kmalloc_cache_noprof+0x6b/0x300 [ 68.587022][ T6874] ? nfnl_err_add+0x4e/0x2d0 [ 68.588308][ T6874] nfnl_err_add+0x4e/0x2d0 [ 68.589730][ T6874] nfnetlink_rcv_batch+0xe40/0x24e0 [ 68.591200][ T6874] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 68.593067][ T6874] ? avc_has_perm_noaudit+0x119/0x3a0 [ 68.594781][ T6874] ? avc_has_perm_noaudit+0x143/0x3a0 [ 68.596429][ T6874] ? __nla_parse+0x40/0x60 [ 68.597643][ T6874] nfnetlink_rcv+0x3c3/0x430 [ 68.598870][ T6874] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 68.599905][ T5298] Bluetooth: hci1: command tx timeout [ 68.600282][ T6874] netlink_unicast+0x53c/0x7f0 [ 68.603470][ T6874] ? __pfx_netlink_unicast+0x10/0x10 [ 68.604881][ T6874] netlink_sendmsg+0x8b8/0xd70 [ 68.606095][ T6874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.607544][ T6874] ____sys_sendmsg+0xaaf/0xc90 [ 68.608903][ T6874] ? copy_msghdr_from_user+0x10b/0x160 [ 68.610313][ T6874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.611644][ T6874] ? __pfx___lock_acquire+0x10/0x10 [ 68.612999][ T6874] ___sys_sendmsg+0x135/0x1e0 [ 68.614164][ T6874] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.615607][ T6874] ? lock_acquire+0x2f/0xb0 [ 68.617205][ T6874] ? __fget_files+0x40/0x3f0 [ 68.618739][ T6874] ? fdget+0x176/0x210 [ 68.619827][ T6874] __sys_sendmsg+0x117/0x1f0 [ 68.621061][ T6874] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.622601][ T6874] ? __fget_files+0x244/0x3f0 [ 68.623980][ T6874] do_syscall_64+0xcd/0x250 [ 68.625188][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.626739][ T6874] RIP: 0033:0x7f51cf77e719 [ 68.627937][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.633197][ T6874] RSP: 002b:00007f51d0612038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.635871][ T6874] RAX: ffffffffffffffda RBX: 00007f51cf935f80 RCX: 00007f51cf77e719 [ 68.637953][ T6874] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 68.640022][ T6874] RBP: 00007f51d0612090 R08: 0000000000000000 R09: 0000000000000000 [ 68.642095][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.644353][ T6874] R13: 0000000000000000 R14: 00007f51cf935f80 R15: 00007fff66879578 [ 68.646395][ T6874] [ 68.670381][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.674310][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.697693][ T6855] team0: Port device team_slave_0 added [ 68.700433][ T6855] team0: Port device team_slave_1 added [ 68.721631][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.724245][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.731997][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.735886][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.737711][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.745775][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.791189][ T6855] hsr_slave_0: entered promiscuous mode [ 68.794264][ T6855] hsr_slave_1: entered promiscuous mode [ 68.796965][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.799880][ T6855] Cannot create hsr debugfs directory [ 68.842216][ T6883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.234'. [ 68.902723][ T6890] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 68.904982][ T6890] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.237'. [ 68.911942][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 68.914466][ T6892] bond0: option ad_select: unable to set because the bond device is up [ 68.932498][ T6855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.937109][ T6855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.943362][ T6855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.946599][ T6855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.006041][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.033928][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.041332][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.043430][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.049174][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.052155][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.055541][ T6906] FAULT_INJECTION: forcing a failure. [ 69.055541][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 69.059129][ T6906] CPU: 3 UID: 0 PID: 6906 Comm: syz.2.241 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 69.062846][ T6906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.066407][ T6906] Call Trace: [ 69.067331][ T6906] [ 69.068383][ T6906] dump_stack_lvl+0x16c/0x1f0 [ 69.069809][ T6906] should_fail_ex+0x497/0x5b0 [ 69.071252][ T6906] ? fs_reclaim_acquire+0xae/0x150 [ 69.072730][ T6906] should_failslab+0xc2/0x120 [ 69.074039][ T6906] kmem_cache_alloc_node_noprof+0x71/0x310 [ 69.075658][ T6906] ? __alloc_skb+0x2b1/0x380 [ 69.077038][ T6906] __alloc_skb+0x2b1/0x380 [ 69.078665][ T6906] ? __pfx___alloc_skb+0x10/0x10 [ 69.080677][ T6906] ? __pfx_nf_tables_abort+0x10/0x10 [ 69.082913][ T6906] netlink_ack+0x164/0xb90 [ 69.084469][ T6906] ? kasan_save_track+0x14/0x30 [ 69.085717][ T6855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.085996][ T6906] ? __kasan_kmalloc+0xaa/0xb0 [ 69.088835][ T6855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.090203][ T6906] nfnetlink_rcv_batch+0x1626/0x24e0 [ 69.090240][ T6906] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 69.090261][ T6906] ? avc_has_perm_noaudit+0x119/0x3a0 [ 69.090288][ T6906] ? avc_has_perm_noaudit+0x143/0x3a0 [ 69.090315][ T6906] ? __nla_parse+0x40/0x60 [ 69.090331][ T6906] nfnetlink_rcv+0x3c3/0x430 [ 69.090347][ T6906] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 69.105583][ T6906] netlink_unicast+0x53c/0x7f0 [ 69.107031][ T6906] ? __pfx_netlink_unicast+0x10/0x10 [ 69.108773][ T6906] netlink_sendmsg+0x8b8/0xd70 [ 69.110364][ T6906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.112161][ T6906] ____sys_sendmsg+0xaaf/0xc90 [ 69.113387][ T6906] ? copy_msghdr_from_user+0x10b/0x160 [ 69.114839][ T6906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.116286][ T6906] ? __pfx___lock_acquire+0x10/0x10 [ 69.117830][ T6906] ___sys_sendmsg+0x135/0x1e0 [ 69.119342][ T6906] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.120824][ T6906] ? lock_acquire+0x2f/0xb0 [ 69.122303][ T6906] ? __fget_files+0x40/0x3f0 [ 69.123558][ T6906] ? fdget+0x176/0x210 [ 69.124809][ T6906] __sys_sendmsg+0x117/0x1f0 [ 69.126079][ T6906] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.127776][ T6906] ? __fget_files+0x244/0x3f0 [ 69.129123][ T6906] do_syscall_64+0xcd/0x250 [ 69.130552][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.132203][ T6906] RIP: 0033:0x7fe094f7e719 [ 69.133407][ T6906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.138564][ T6906] RSP: 002b:00007fe095cf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.140782][ T6906] RAX: ffffffffffffffda RBX: 00007fe095135f80 RCX: 00007fe094f7e719 [ 69.142881][ T6906] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 69.145045][ T6906] RBP: 00007fe095cf5090 R08: 0000000000000000 R09: 0000000000000000 [ 69.147152][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.149434][ T6906] R13: 0000000000000000 R14: 00007fe095135f80 R15: 00007ffe6dcb6318 [ 69.151620][ T6906] [ 69.195251][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.285010][ T6927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.334915][ T6855] veth0_vlan: entered promiscuous mode [ 69.345412][ T6855] veth1_vlan: entered promiscuous mode [ 69.364291][ T6855] veth0_macvtap: entered promiscuous mode [ 69.368528][ T6855] veth1_macvtap: entered promiscuous mode [ 69.378799][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.382892][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.386653][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.391241][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.394798][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.398326][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.401561][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.404733][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.409304][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.416173][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.419062][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.422442][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.425602][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.428070][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.431340][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.434984][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.437872][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.442515][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.449384][ T6855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.452442][ T6855] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.454757][ T6855] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.456950][ T6855] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.492992][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.495835][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.507938][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.510322][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.591223][ T6943] overlayfs: missing 'workdir' [ 69.604399][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 69.635385][ T6945] Can't find a SQUASHFS superblock on nullb0 [ 70.252955][ T6976] netlink: 'syz.2.261': attribute type 2 has an invalid length. [ 70.263060][ T6976] : entered promiscuous mode [ 70.408443][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.414984][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.416963][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.419967][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.422656][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.424867][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.427931][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.434236][ T7001] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 70.434752][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.435001][ T7003] FAULT_INJECTION: forcing a failure. [ 70.435001][ T7003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.449976][ T5298] Bluetooth: hci0: command tx timeout [ 70.462675][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.467672][ T7003] CPU: 2 UID: 0 PID: 7003 Comm: syz.5.268 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 70.470482][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.472607][ T7003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.474484][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.477193][ T7003] Call Trace: [ 70.477202][ T7003] [ 70.478991][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.479872][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 70.479898][ T7003] should_fail_ex+0x497/0x5b0 [ 70.479912][ T7003] _copy_from_user+0x2e/0xd0 [ 70.479928][ T7003] copy_msghdr_from_user+0x99/0x160 [ 70.479942][ T7003] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 70.479957][ T7003] ? __pfx___lock_acquire+0x10/0x10 [ 70.479970][ T7003] ___sys_sendmsg+0xff/0x1e0 [ 70.480736][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.482765][ T7003] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.483988][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.485444][ T7003] ? lock_acquire+0x2f/0xb0 [ 70.486845][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.488457][ T7003] ? __fget_files+0x40/0x3f0 [ 70.488487][ T7003] ? fdget+0x176/0x210 [ 70.488505][ T7003] __sys_sendmsg+0x117/0x1f0 [ 70.494262][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.495355][ T7003] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.497205][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.498886][ T7003] ? __fget_files+0x244/0x3f0 [ 70.501040][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.502670][ T7003] do_syscall_64+0xcd/0x250 [ 70.504386][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.505597][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.507175][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.509449][ T7003] RIP: 0033:0x7f82cd77e719 [ 70.518896][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.519924][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.519949][ T7003] RSP: 002b:00007f82ce539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.519969][ T7003] RAX: ffffffffffffffda RBX: 00007f82cd935f80 RCX: 00007f82cd77e719 [ 70.519982][ T7003] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 70.519994][ T7003] RBP: 00007f82ce539090 R08: 0000000000000000 R09: 0000000000000000 [ 70.520006][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.520017][ T7003] R13: 0000000000000000 R14: 00007f82cd935f80 R15: 00007ffd0a8d0278 [ 70.520044][ T7003] [ 70.549912][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.552001][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.554093][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.556164][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.558125][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.562405][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.564338][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.566642][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.569374][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.572853][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.575315][ T5985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.581628][ T7011] tipc: Started in network mode [ 70.583178][ T7011] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.584481][ T5985] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 70.585124][ T1447] IPVS: starting estimator thread 0... [ 70.593624][ T7011] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 70.596153][ T7011] tipc: Enabled bearer , priority 10 [ 70.596929][ T7011] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.269'. [ 70.679955][ T5298] Bluetooth: hci1: command tx timeout [ 70.690134][ T7014] IPVS: using max 34 ests per chain, 81600 per kthread [ 70.729990][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 70.776712][ T7043] bridge2: entered promiscuous mode [ 70.778155][ T7043] bridge2: entered allmulticast mode [ 70.828526][ T7048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.279'. [ 70.869953][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 71.009798][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 71.083833][ T1409] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.093793][ T5949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.098900][ T5949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.104503][ T7074] FAULT_INJECTION: forcing a failure. [ 71.104503][ T7074] name failslab, interval 1, probability 0, space 0, times 0 [ 71.110784][ T7074] CPU: 1 UID: 0 PID: 7074 Comm: syz.5.285 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 71.111372][ T5949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.113532][ T7074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.117189][ T5949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.119443][ T7074] Call Trace: [ 71.122038][ T5949] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.122417][ T7074] [ 71.125383][ T5949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.125826][ T7074] dump_stack_lvl+0x16c/0x1f0 [ 71.125861][ T7074] should_fail_ex+0x497/0x5b0 [ 71.131467][ T7074] should_failslab+0xc2/0x120 [ 71.132762][ T7074] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 71.134391][ T7074] ? skb_clone+0x190/0x3f0 [ 71.135686][ T7074] skb_clone+0x190/0x3f0 [ 71.137121][ T7074] dev_queue_xmit_nit+0x38f/0xba0 [ 71.138768][ T7074] dev_hard_start_xmit+0x56/0x790 [ 71.140454][ T7074] ? __dev_queue_xmit+0x252/0x4350 [ 71.142403][ T7074] __dev_queue_xmit+0x7c7/0x4350 [ 71.144258][ T7074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 71.145932][ T7074] ? __skb_clone+0x570/0x760 [ 71.147321][ T7074] netlink_deliver_tap+0xa7d/0xd90 [ 71.149203][ T7074] netlink_unicast+0x6b4/0x7f0 [ 71.151048][ T7074] ? __pfx_netlink_unicast+0x10/0x10 [ 71.152870][ T7074] ? __pfx_nf_tables_abort+0x10/0x10 [ 71.154240][ T7074] netlink_ack+0x6a8/0xb90 [ 71.155607][ T7074] nfnetlink_rcv_batch+0x1626/0x24e0 [ 71.157283][ T7074] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 71.158705][ T7074] ? avc_has_perm_noaudit+0x119/0x3a0 [ 71.160165][ T7074] ? avc_has_perm_noaudit+0x143/0x3a0 [ 71.161777][ T7074] ? __nla_parse+0x40/0x60 [ 71.162964][ T7074] nfnetlink_rcv+0x3c3/0x430 [ 71.164549][ T7074] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 71.166213][ T7074] netlink_unicast+0x53c/0x7f0 [ 71.167691][ T7074] ? __pfx_netlink_unicast+0x10/0x10 [ 71.169384][ T7074] netlink_sendmsg+0x8b8/0xd70 [ 71.169934][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 71.170712][ T7074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.174122][ T7074] ____sys_sendmsg+0xaaf/0xc90 [ 71.175551][ T7074] ? copy_msghdr_from_user+0x10b/0x160 [ 71.177254][ T7074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.178931][ T7074] ? __pfx___lock_acquire+0x10/0x10 [ 71.180745][ T7074] ___sys_sendmsg+0x135/0x1e0 [ 71.183700][ T7074] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.185538][ T7074] ? lock_acquire+0x2f/0xb0 [ 71.187029][ T7074] ? __fget_files+0x40/0x3f0 [ 71.188319][ T7074] ? fdget+0x176/0x210 [ 71.189589][ T7074] __sys_sendmsg+0x117/0x1f0 [ 71.190909][ T7074] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.192414][ T7074] ? __fget_files+0x244/0x3f0 [ 71.193686][ T7074] do_syscall_64+0xcd/0x250 [ 71.194886][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.196424][ T7074] RIP: 0033:0x7f82cd77e719 [ 71.197586][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.202508][ T7074] RSP: 002b:00007f82ce539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.204649][ T7074] RAX: ffffffffffffffda RBX: 00007f82cd935f80 RCX: 00007f82cd77e719 [ 71.206641][ T7074] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 71.208638][ T7074] RBP: 00007f82ce539090 R08: 0000000000000000 R09: 0000000000000000 [ 71.210696][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.212777][ T7074] R13: 0000000000000000 R14: 00007f82cd935f80 R15: 00007ffd0a8d0278 [ 71.214769][ T7074] [ 71.293697][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 71.293712][ T39] audit: type=1400 audit(1730428956.400:423): avc: denied { create } for pid=7082 comm="syz.5.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 71.312688][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 71.376613][ T7073] chnl_net:caif_netlink_parms(): no params data found [ 71.395811][ T39] audit: type=1400 audit(1730428956.500:424): avc: denied { write } for pid=7094 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.396781][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 71.449863][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 71.492529][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.494701][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.496642][ T7073] bridge_slave_0: entered allmulticast mode [ 71.500177][ T7073] bridge_slave_0: entered promiscuous mode [ 71.503224][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.505169][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.507132][ T7073] bridge_slave_1: entered allmulticast mode [ 71.509485][ T7073] bridge_slave_1: entered promiscuous mode [ 71.517600][ T7096] kvm: kvm [7094]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 71.521684][ T7096] kvm: kvm [7094]: vcpu0, guest rIP: 0x1d Unhandled WRMSR(0xc1) = 0xd [ 71.553788][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.558271][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.589985][ T5986] tipc: Node number set to 2886997162 [ 71.612425][ T39] audit: type=1400 audit(1730428956.720:425): avc: denied { connect } for pid=7094 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.668447][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.692669][ T7073] team0: Port device team_slave_0 added [ 71.714090][ T7073] team0: Port device team_slave_1 added [ 71.729839][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 71.809434][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.821693][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.824133][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.839055][ T7073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.861729][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.865300][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.881759][ T7073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.912052][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.999605][ T7132] FAULT_INJECTION: forcing a failure. [ 71.999605][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 72.006703][ T7132] CPU: 1 UID: 0 PID: 7132 Comm: syz.2.294 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 72.009534][ T7132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.009834][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 72.012551][ T7132] Call Trace: [ 72.012561][ T7132] [ 72.012567][ T7132] dump_stack_lvl+0x16c/0x1f0 [ 72.017152][ T7132] should_fail_ex+0x497/0x5b0 [ 72.018383][ T7132] ? fs_reclaim_acquire+0xae/0x150 [ 72.019644][ T7132] should_failslab+0xc2/0x120 [ 72.020794][ T7132] kmem_cache_alloc_node_noprof+0x71/0x310 [ 72.022617][ T7132] ? __alloc_skb+0x2b1/0x380 [ 72.024013][ T7132] __alloc_skb+0x2b1/0x380 [ 72.025305][ T7132] ? __pfx___alloc_skb+0x10/0x10 [ 72.026665][ T7132] netlink_ack+0x164/0xb90 [ 72.028249][ T7132] ? kfree+0x14f/0x4b0 [ 72.029395][ T7132] nfnetlink_rcv_batch+0x1626/0x24e0 [ 72.030846][ T7132] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 72.032332][ T7132] ? avc_has_perm_noaudit+0x119/0x3a0 [ 72.033763][ T7132] ? avc_has_perm_noaudit+0x143/0x3a0 [ 72.035236][ T7132] ? __nla_parse+0x40/0x60 [ 72.036622][ T7132] nfnetlink_rcv+0x3c3/0x430 [ 72.037933][ T7132] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 72.039404][ T7132] netlink_unicast+0x53c/0x7f0 [ 72.040784][ T7132] ? __pfx_netlink_unicast+0x10/0x10 [ 72.042398][ T7132] netlink_sendmsg+0x8b8/0xd70 [ 72.043665][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.045242][ T7132] ____sys_sendmsg+0xaaf/0xc90 [ 72.046618][ T7132] ? copy_msghdr_from_user+0x10b/0x160 [ 72.048150][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.049617][ T7132] ? __pfx___lock_acquire+0x10/0x10 [ 72.051188][ T7132] ___sys_sendmsg+0x135/0x1e0 [ 72.052405][ T7132] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.053651][ T7132] ? lock_acquire+0x2f/0xb0 [ 72.054776][ T7132] ? __fget_files+0x40/0x3f0 [ 72.055978][ T7132] ? fdget+0x176/0x210 [ 72.057012][ T7132] __sys_sendmsg+0x117/0x1f0 [ 72.058163][ T7132] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.059416][ T7132] ? __fget_files+0x244/0x3f0 [ 72.060653][ T7132] do_syscall_64+0xcd/0x250 [ 72.062073][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.063775][ T7132] RIP: 0033:0x7fe094f7e719 [ 72.064942][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.070583][ T7132] RSP: 002b:00007fe095cf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.072951][ T7132] RAX: ffffffffffffffda RBX: 00007fe095135f80 RCX: 00007fe094f7e719 [ 72.075119][ T7132] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 72.077272][ T7132] RBP: 00007fe095cf5090 R08: 0000000000000000 R09: 0000000000000000 [ 72.079234][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.081234][ T7132] R13: 0000000000000000 R14: 00007fe095135f80 R15: 00007ffe6dcb6318 [ 72.083314][ T7132] [ 72.098195][ T7073] hsr_slave_0: entered promiscuous mode [ 72.105024][ T7073] hsr_slave_1: entered promiscuous mode [ 72.108054][ T7073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.113411][ T7073] Cannot create hsr debugfs directory [ 72.137341][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.219859][ T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 72.260863][ T7140] netlink: 'syz.2.295': attribute type 2 has an invalid length. [ 72.263124][ T7140] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.295'. [ 72.313987][ T69] bridge_slave_1: left allmulticast mode [ 72.318091][ T69] bridge_slave_1: left promiscuous mode [ 72.320495][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.325072][ T69] bridge_slave_0: left allmulticast mode [ 72.326965][ T69] bridge_slave_0: left promiscuous mode [ 72.328683][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.376536][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 72.379199][ T8] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 72.382171][ T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.385603][ T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.389951][ T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 72.393563][ T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 72.396885][ T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.401459][ T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.405310][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.520162][ T5949] Bluetooth: hci0: command tx timeout [ 72.539793][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 72.654284][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.661196][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.667588][ T69] bond0 (unregistering): Released all slaves [ 72.728628][ T7073] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 72.741708][ T7073] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 72.754891][ T7073] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.759438][ T7073] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.762266][ T5949] Bluetooth: hci1: command tx timeout [ 72.790366][ T7154] netlink: 596 bytes leftover after parsing attributes in process `syz.3.298'. [ 72.837142][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 72.839839][ T7155] netlink: 'syz.3.298': attribute type 7 has an invalid length. [ 72.841983][ T7155] netlink: 'syz.3.298': attribute type 8 has an invalid length. [ 72.844328][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 72.953318][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.968362][ T39] audit: type=1400 audit(1730428958.070:426): avc: denied { map } for pid=7160 comm="syz.3.299" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.973771][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.983937][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.985779][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.990710][ T39] audit: type=1400 audit(1730428958.070:427): avc: denied { execute } for pid=7160 comm="syz.3.299" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.005265][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.008775][ T6562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.053315][ T39] audit: type=1400 audit(1730428958.160:428): avc: denied { bind } for pid=7160 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.059608][ T7073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.063030][ T7073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.066280][ T39] audit: type=1400 audit(1730428958.170:429): avc: denied { write } for pid=7160 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.145718][ T69] hsr_slave_0: left promiscuous mode [ 73.153187][ T69] hsr_slave_1: left promiscuous mode [ 73.156089][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.158380][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.166341][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.168487][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.214705][ T69] veth1_macvtap: left promiscuous mode [ 73.216568][ T69] veth0_macvtap: left promiscuous mode [ 73.218164][ T69] veth1_vlan: left promiscuous mode [ 73.219601][ T69] veth0_vlan: left promiscuous mode [ 73.239905][ T5949] Bluetooth: hci4: command tx timeout [ 73.509326][ T8] usb 10-1: usb_control_msg returned -71 [ 73.512030][ T8] usbtmc 10-1:16.0: can't read capabilities [ 73.515608][ T8] usb 10-1: USB disconnect, device number 2 [ 73.559785][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 74.044343][ T69] team0 (unregistering): Port device team_slave_1 removed [ 74.133222][ T69] team0 (unregistering): Port device team_slave_0 removed [ 74.599880][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 74.599961][ T5949] Bluetooth: hci0: command tx timeout [ 74.842413][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.864735][ T7200] FAULT_INJECTION: forcing a failure. [ 74.864735][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 74.868303][ T7200] CPU: 3 UID: 0 PID: 7200 Comm: syz.5.307 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 74.871284][ T7200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.874283][ T7200] Call Trace: [ 74.875321][ T7200] [ 74.876162][ T7200] dump_stack_lvl+0x16c/0x1f0 [ 74.877613][ T7200] should_fail_ex+0x497/0x5b0 [ 74.879175][ T7200] ? fs_reclaim_acquire+0xae/0x150 [ 74.880621][ T7200] should_failslab+0xc2/0x120 [ 74.881828][ T7200] __kmalloc_noprof+0xcb/0x400 [ 74.883487][ T7200] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 74.885394][ T7200] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 74.887104][ T7200] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 74.889397][ T7200] ? bpf_lsm_capable+0x9/0x10 [ 74.890657][ T7200] ? security_capable+0x7e/0x260 [ 74.891971][ T7200] ? ns_capable+0xd7/0x110 [ 74.893187][ T7200] genl_rcv_msg+0x565/0x800 [ 74.894306][ T7200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.895665][ T7200] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 74.896994][ T7200] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 74.898420][ T7200] ? __pfx_nl80211_post_doit+0x10/0x10 [ 74.899736][ T7200] netlink_rcv_skb+0x16b/0x440 [ 74.900921][ T7200] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.902418][ T7200] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.903915][ T7200] ? down_read+0xc9/0x330 [ 74.905508][ T7200] ? __pfx_down_read+0x10/0x10 [ 74.906672][ T7200] ? netlink_deliver_tap+0x1ae/0xd90 [ 74.908088][ T7200] genl_rcv+0x28/0x40 [ 74.909162][ T7200] netlink_unicast+0x53c/0x7f0 [ 74.910568][ T7200] ? __pfx_netlink_unicast+0x10/0x10 [ 74.912276][ T7200] netlink_sendmsg+0x8b8/0xd70 [ 74.913473][ T7200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.914876][ T7200] ____sys_sendmsg+0xaaf/0xc90 [ 74.916129][ T7200] ? copy_msghdr_from_user+0x10b/0x160 [ 74.917795][ T7200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.919182][ T7200] ? __pfx___lock_acquire+0x10/0x10 [ 74.920471][ T7200] ___sys_sendmsg+0x135/0x1e0 [ 74.921606][ T7200] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.922967][ T7200] ? lock_acquire+0x2f/0xb0 [ 74.924119][ T7200] ? __fget_files+0x40/0x3f0 [ 74.925277][ T7200] ? fdget+0x176/0x210 [ 74.926390][ T7200] __sys_sendmsg+0x117/0x1f0 [ 74.927622][ T7200] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.929302][ T7200] ? __fget_files+0x244/0x3f0 [ 74.930453][ T7200] do_syscall_64+0xcd/0x250 [ 74.931652][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.933369][ T7200] RIP: 0033:0x7f82cd77e719 [ 74.934506][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.939354][ T7200] RSP: 002b:00007f82ce539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.941383][ T7200] RAX: ffffffffffffffda RBX: 00007f82cd935f80 RCX: 00007f82cd77e719 [ 74.943375][ T7200] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 74.945523][ T7200] RBP: 00007f82ce539090 R08: 0000000000000000 R09: 0000000000000000 [ 74.947644][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.949617][ T7200] R13: 0000000000000000 R14: 00007f82cd935f80 R15: 00007ffd0a8d0278 [ 74.951767][ T7200] [ 74.952696][ C3] vkms_vblank_simulate: vblank timer overrun [ 75.029852][ T39] audit: type=1400 audit(1730428960.130:430): avc: denied { append } for pid=7219 comm="syz.2.312" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.073984][ T7073] veth0_vlan: entered promiscuous mode [ 75.087718][ T7073] veth1_vlan: entered promiscuous mode [ 75.094392][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.314'. [ 75.102204][ T7073] veth0_macvtap: entered promiscuous mode [ 75.106878][ T7073] veth1_macvtap: entered promiscuous mode [ 75.114905][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.117556][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.120982][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.124079][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.126961][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.130377][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.132937][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.136379][ T7239] program syz.2.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.139810][ T7240] program syz.2.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.145727][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.152693][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.157833][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.161287][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.163839][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.166627][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.171432][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.174814][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.177978][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.181111][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.190438][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.197934][ T7243] FAULT_INJECTION: forcing a failure. [ 75.197934][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.200740][ T7073] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.202568][ T7243] CPU: 2 UID: 0 PID: 7243 Comm: syz.3.318 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 75.203910][ T7073] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.206517][ T7243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.206529][ T7243] Call Trace: [ 75.209575][ T7073] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.212626][ T7243] [ 75.212638][ T7243] dump_stack_lvl+0x16c/0x1f0 [ 75.212663][ T7243] should_fail_ex+0x497/0x5b0 [ 75.212680][ T7243] _copy_to_user+0x32/0xd0 [ 75.212696][ T7243] simple_read_from_buffer+0xd0/0x160 [ 75.212712][ T7243] proc_fail_nth_read+0x198/0x270 [ 75.212727][ T7243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.212740][ T7243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.212752][ T7243] vfs_read+0x1df/0xbe0 [ 75.212771][ T7243] ? __fget_files+0x23a/0x3f0 [ 75.212788][ T7243] ? fdget_pos+0x24c/0x360 [ 75.212804][ T7243] ? __pfx_lock_release+0x10/0x10 [ 75.212817][ T7243] ? trace_lock_acquire+0x14a/0x1d0 [ 75.212832][ T7243] ? __pfx_vfs_read+0x10/0x10 [ 75.212848][ T7243] ? __pfx___mutex_lock+0x10/0x10 [ 75.212871][ T7243] ? __fget_files+0x244/0x3f0 [ 75.212890][ T7243] ksys_read+0x12f/0x260 [ 75.212905][ T7243] ? __pfx_ksys_read+0x10/0x10 [ 75.212925][ T7243] do_syscall_64+0xcd/0x250 [ 75.212943][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.213016][ T7243] RIP: 0033:0x7f51cf77d15c [ 75.213032][ T7243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 75.213043][ T7243] RSP: 002b:00007f51d0612030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.213055][ T7243] RAX: ffffffffffffffda RBX: 00007f51cf935f80 RCX: 00007f51cf77d15c [ 75.213063][ T7243] RDX: 000000000000000f RSI: 00007f51d06120a0 RDI: 0000000000000005 [ 75.213070][ T7243] RBP: 00007f51d0612090 R08: 0000000000000000 R09: 0000000000000000 [ 75.213077][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.213083][ T7243] R13: 0000000000000000 R14: 00007f51cf935f80 R15: 00007fff66879578 [ 75.213098][ T7243] [ 75.264871][ T7073] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309774][ T39] audit: type=1400 audit(1730428960.410:431): avc: denied { read } for pid=7248 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.315495][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.317550][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.320462][ T5949] Bluetooth: hci4: command tx timeout [ 75.340312][ T7254] openvswitch: netlink: Missing valid actions attribute. [ 75.343208][ T7254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.345280][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.347896][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.376402][ T39] audit: type=1400 audit(1730428960.480:432): avc: denied { map } for pid=7253 comm="syz.3.322" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.451700][ T7271] 9pnet_fd: Insufficient options for proto=fd [ 75.461662][ T7265] netlink: 120 bytes leftover after parsing attributes in process `syz.6.284'. [ 75.844401][ T7310] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 76.679845][ C2] net_ratelimit: 1 callbacks suppressed [ 76.679868][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 76.680609][ T5949] Bluetooth: hci0: command tx timeout [ 76.831757][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 76.831771][ T39] audit: type=1400 audit(1730428961.940:441): avc: denied { name_bind } for pid=7368 comm="syz.3.345" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.848355][ T7369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7369 comm=syz.3.345 [ 76.852281][ T7369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 76.951582][ T7373] Bluetooth: MGMT ver 1.23 [ 76.987845][ T39] audit: type=1400 audit(1730428962.090:442): avc: denied { sys_chroot } for pid=7374 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 76.995781][ T39] audit: type=1400 audit(1730428962.090:443): avc: denied { setgid } for pid=7374 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 77.001592][ T39] audit: type=1400 audit(1730428962.090:444): avc: denied { setuid } for pid=7374 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 77.033834][ T6561] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.138189][ T5298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.142026][ T5298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.146022][ T5298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.153189][ T5298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.157065][ T5298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.160437][ T5298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.284579][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 77.335506][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.338157][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.340936][ T7376] bridge_slave_0: entered allmulticast mode [ 77.343985][ T7376] bridge_slave_0: entered promiscuous mode [ 77.347408][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.349494][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.351968][ T7376] bridge_slave_1: entered allmulticast mode [ 77.354085][ T7376] bridge_slave_1: entered promiscuous mode [ 77.381852][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.388257][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.419611][ T7376] team0: Port device team_slave_0 added [ 77.431133][ T7376] team0: Port device team_slave_1 added [ 77.459573][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.461496][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.471593][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.478016][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.483161][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.492677][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.501379][ T39] audit: type=1400 audit(1730428962.610:445): avc: denied { setopt } for pid=7391 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.515347][ T7392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.353'. [ 77.543373][ T7376] hsr_slave_0: entered promiscuous mode [ 77.545859][ T7376] hsr_slave_1: entered promiscuous mode [ 77.548389][ T7376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.550875][ T7376] Cannot create hsr debugfs directory [ 77.626997][ T7398] netlink: 120 bytes leftover after parsing attributes in process `syz.2.356'. [ 77.659399][ T7376] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 77.664776][ T7376] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 77.668146][ T7376] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 77.672645][ T7376] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 77.683261][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.683598][ T7399] netlink: 536 bytes leftover after parsing attributes in process `syz.2.356'. [ 77.685236][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.690979][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.694648][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.723575][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.729795][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 77.742002][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.751346][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.766448][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.773650][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.776232][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.781316][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.783194][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.805685][ T7403] process 'syz.3.358' launched '/dev/fd/5' with NULL argv: empty string added [ 77.809604][ T39] audit: type=1400 audit(1730428962.910:446): avc: denied { execute_no_trans } for pid=7402 comm="syz.3.358" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.841930][ T39] audit: type=1400 audit(1730428962.950:447): avc: denied { getopt } for pid=7406 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.862170][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 77.864591][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.360'. [ 77.893984][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.971214][ T39] audit: type=1400 audit(1730428963.080:448): avc: denied { setopt } for pid=7424 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.987945][ T39] audit: type=1400 audit(1730428963.090:449): avc: denied { write } for pid=7415 comm="syz.2.362" name="ip6_flowlabel" dev="proc" ino=4026533398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 78.008253][ T6561] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.031526][ T7376] veth0_vlan: entered promiscuous mode [ 78.036099][ T7376] veth1_vlan: entered promiscuous mode [ 78.074623][ T6561] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.080512][ T7376] veth0_macvtap: entered promiscuous mode [ 78.091073][ T7376] veth1_macvtap: entered promiscuous mode [ 78.097766][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.103391][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.103482][ T39] audit: type=1400 audit(1730428963.210:450): avc: denied { write } for pid=7424 comm="syz.3.363" dev="sockfs" ino=17928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.107060][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.115160][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.117743][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.120936][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.123445][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.126133][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.128714][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.131587][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.135701][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.157784][ T6561] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.163050][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.165801][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.168340][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.171237][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.173856][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.176778][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.179326][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.182162][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.184683][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.187328][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.190777][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.194758][ T7376] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.197061][ T7376] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.199309][ T7376] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.202154][ T7376] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.243626][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.246360][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.254317][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.256609][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.330332][ T6561] bridge_slave_1: left allmulticast mode [ 78.332652][ T6561] bridge_slave_1: left promiscuous mode [ 78.334229][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.341318][ T6561] bridge_slave_0: left allmulticast mode [ 78.342875][ T6561] bridge_slave_0: left promiscuous mode [ 78.345176][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.660790][ T6561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.665642][ T6561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.669662][ T6561] bond0 (unregistering): Released all slaves [ 78.760373][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 78.973936][ T6561] hsr_slave_0: left promiscuous mode [ 78.977541][ T6561] hsr_slave_1: left promiscuous mode [ 78.982735][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.984832][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.987974][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.991347][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.014631][ T6561] veth1_macvtap: left promiscuous mode [ 79.016154][ T6561] veth0_macvtap: left promiscuous mode [ 79.017613][ T6561] veth1_vlan: left promiscuous mode [ 79.018989][ T6561] veth0_vlan: left promiscuous mode [ 79.243942][ T5298] Bluetooth: hci2: command tx timeout [ 79.809885][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 79.933051][ T6561] team0 (unregistering): Port device team_slave_1 removed [ 79.945400][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.965094][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.026945][ T6561] team0 (unregistering): Port device team_slave_0 removed [ 80.185376][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.332620][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 80.343169][ T8] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.345885][ T8] usb 7-1: config 179 has no interface number 0 [ 80.347716][ T8] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.351061][ T8] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.354552][ T8] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.357483][ T8] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.360812][ T8] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.364894][ T8] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.367335][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.371003][ T7514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.657090][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input7 [ 80.797959][ T63] usb 7-1: USB disconnect, device number 7 [ 80.797963][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.803475][ T63] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 80.839829][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 80.919829][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.984268][ T7526] trusted_key: encrypted_key: insufficient parameters specified [ 81.116358][ T7541] netlink: 52 bytes leftover after parsing attributes in process `syz.7.386'. [ 81.116426][ T7540] netlink: 52 bytes leftover after parsing attributes in process `syz.7.386'. [ 81.119320][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.7.386'. [ 81.126024][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.386'. [ 81.330055][ T5949] Bluetooth: hci2: command tx timeout [ 81.332480][ T55] cfg80211: failed to load regulatory.db [ 81.879913][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 81.934316][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 81.934328][ T39] audit: type=1400 audit(1730428967.040:464): avc: denied { create } for pid=7619 comm="syz.3.398" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.948129][ T39] audit: type=1400 audit(1730428967.040:465): avc: denied { read } for pid=7619 comm="syz.3.398" name="file2" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.954669][ T39] audit: type=1400 audit(1730428967.040:466): avc: denied { open } for pid=7619 comm="syz.3.398" path="/111/file2" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.966812][ T39] audit: type=1400 audit(1730428967.040:467): avc: denied { ioctl } for pid=7619 comm="syz.3.398" path="/111/file2" dev="tmpfs" ino=624 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.977188][ T39] audit: type=1400 audit(1730428967.080:468): avc: denied { unlink } for pid=5950 comm="syz-executor" name="file2" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.021365][ T7628] __nla_validate_parse: 29 callbacks suppressed [ 82.021375][ T7628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.400'. [ 82.028313][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 82.180606][ T7636] netlink: 256 bytes leftover after parsing attributes in process `syz.2.402'. [ 82.184190][ T7636] trusted_key: encrypted_key: insufficient parameters specified [ 82.203291][ T7635] overlayfs: failed to resolve './file0': -2 [ 82.263685][ T39] audit: type=1400 audit(1730428967.370:469): avc: denied { setopt } for pid=7640 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.286422][ T39] audit: type=1400 audit(1730428967.390:470): avc: denied { bind } for pid=7638 comm="syz.7.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.293917][ T39] audit: type=1400 audit(1730428967.390:471): avc: denied { name_bind } for pid=7638 comm="syz.7.405" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 82.300810][ T39] audit: type=1400 audit(1730428967.390:472): avc: denied { node_bind } for pid=7638 comm="syz.7.405" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 82.307212][ T39] audit: type=1400 audit(1730428967.400:473): avc: denied { listen } for pid=7640 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.919914][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 83.107636][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 83.111678][ T7689] netlink: 'syz.3.418': attribute type 5 has an invalid length. [ 83.122232][ T7689] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.125053][ T7689] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.128020][ T7689] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.130504][ T7689] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.133918][ T7689] vxlan0: entered promiscuous mode [ 83.317116][ T7695] binder: BC_ATTEMPT_ACQUIRE not supported [ 83.319071][ T7694] binder: BC_ATTEMPT_ACQUIRE not supported [ 83.319877][ T7695] binder: 7693:7695 ioctl c0306201 20000500 returned -22 [ 83.321123][ T7694] binder: 7693:7694 ioctl c0306201 20000500 returned -22 [ 83.383400][ T7697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.393134][ T7698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.400113][ T5949] Bluetooth: hci2: command tx timeout [ 83.517669][ T7701] xt_bpf: check failed: parse error [ 83.679149][ T7713] kvm: MONITOR instruction emulated as NOP! [ 83.685288][ T7713] binder_alloc: 7712: binder_alloc_buf size 69360 failed, no address space [ 83.688163][ T7713] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 83.926925][ T7729] xt_hashlimit: size too large, truncated to 1048576 [ 83.961246][ T7735] netlink: 'syz.7.433': attribute type 6 has an invalid length. [ 83.969787][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 84.002167][ T7740] xt_cluster: node mask cannot exceed total number of nodes [ 84.025056][ T7732] netlink: 'syz.3.432': attribute type 11 has an invalid length. [ 84.032817][ T7743] program syz.7.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.066473][ T7744] BUG: Bad page state in process syz.7.434 pfn:3659a [ 84.068943][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x18c pfn:0x3659a [ 84.074345][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.077113][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 84.080161][ T7744] raw: 000000000000018c 0000000000000001 00000000ffffffff 0000000000000000 [ 84.083091][ T7744] page dumped because: page_pool leak [ 84.085280][ T7744] page_owner tracks the page as allocated [ 84.087371][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060804144, free_ts 83328433250 [ 84.093743][ T7744] post_alloc_hook+0x2d1/0x350 [ 84.095397][ T7744] get_page_from_freelist+0x101e/0x3070 [ 84.097425][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 84.099259][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.101250][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.103255][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 84.105369][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 84.107447][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.109641][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.111536][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.113508][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.115066][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.116601][ T7744] do_syscall_64+0xcd/0x250 [ 84.117978][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.119628][ T7744] page last free pid 43 tgid 43 stack trace: [ 84.121364][ T7744] free_unref_page+0x5f4/0xdc0 [ 84.122985][ T7744] __folio_put+0x30d/0x3d0 [ 84.124372][ T7744] migrate_folio_done+0x271/0x310 [ 84.125823][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 84.127445][ T7744] migrate_pages_sync+0x131/0x910 [ 84.128919][ T7744] migrate_pages+0x19ee/0x21f0 [ 84.130805][ T7744] compact_zone+0x1f68/0x4280 [ 84.132374][ T7744] compact_node+0x1a2/0x2d0 [ 84.133660][ T7744] kcompactd+0x76e/0xde0 [ 84.134892][ T7744] kthread+0x2c1/0x3a0 [ 84.136181][ T7744] ret_from_fork+0x45/0x80 [ 84.137530][ T7744] ret_from_fork_asm+0x1a/0x30 [ 84.138963][ T7744] Modules linked in: [ 84.140211][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Not tainted 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 84.143104][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.146230][ T7744] Call Trace: [ 84.147353][ T7744] [ 84.148421][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 84.149755][ T7744] bad_page+0xb3/0x1f0 [ 84.150815][ T7744] ? __pfx_bad_page+0x10/0x10 [ 84.152073][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 84.153471][ T7744] free_unref_page+0x657/0xdc0 [ 84.154748][ T7744] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 84.156618][ T7744] ? __phys_addr+0xc6/0x150 [ 84.157791][ T7744] skb_free_head+0xa0/0x1d0 [ 84.158899][ T7744] skb_release_data+0x560/0x730 [ 84.160176][ T7744] ? packet_rcv+0x16c/0x15a0 [ 84.161386][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.162634][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 84.163947][ T7744] packet_rcv+0x16c/0x15a0 [ 84.165206][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 84.166555][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 84.168237][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.170043][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 84.171575][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.173598][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.174931][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.176697][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.178351][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.180092][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 84.181463][ T7744] ? __build_skb_around+0x278/0x3b0 [ 84.182827][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 84.184741][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.186732][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.188881][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.190363][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.191782][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.193315][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.194876][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.196428][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.197954][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.199329][ T7744] ? 0xffffffffa0006f40 [ 84.200418][ T7744] ? 0xffffffffa0006f40 [ 84.201504][ T7744] ? 0xffffffffa0006f40 [ 84.202590][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.204126][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.205511][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.206692][ T7744] ? __fget_files+0x40/0x3f0 [ 84.207850][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.209247][ T7744] ? fput+0x30/0x390 [ 84.210520][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 84.212106][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.213811][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.214951][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 84.216207][ T7744] ? __schedule+0xe5d/0x5730 [ 84.217424][ T7744] ? __fget_files+0x23a/0x3f0 [ 84.218669][ T7744] ? do_futex+0x123/0x350 [ 84.219805][ T7744] ? __pfx_do_futex+0x10/0x10 [ 84.221073][ T7744] ? xfd_validate_state+0x5d/0x180 [ 84.222340][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.224031][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.225390][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.227139][ T7744] do_syscall_64+0xcd/0x250 [ 84.228654][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.230374][ T7744] RIP: 0033:0x7f783637e719 [ 84.231671][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.237337][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.239526][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 84.241603][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.243665][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.246326][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.248560][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 84.250885][ T7744] [ 84.251817][ T7744] Disabling lock debugging due to kernel taint [ 84.253408][ T7744] BUG: Bad page state in process syz.7.434 pfn:36599 [ 84.255359][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x18b pfn:0x36599 [ 84.257890][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.260084][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 84.262230][ T7744] raw: 000000000000018b 0000000000000001 00000000ffffffff 0000000000000000 [ 84.264589][ T7744] page dumped because: page_pool leak [ 84.266047][ T7744] page_owner tracks the page as allocated [ 84.267556][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060799531, free_ts 83328458972 [ 84.272895][ T7744] post_alloc_hook+0x2d1/0x350 [ 84.274157][ T7744] get_page_from_freelist+0x101e/0x3070 [ 84.275599][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 84.276984][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.278426][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.280024][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 84.281442][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 84.282809][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.284499][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.285979][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.287495][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.288849][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.290305][ T7744] do_syscall_64+0xcd/0x250 [ 84.291628][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.293354][ T7744] page last free pid 43 tgid 43 stack trace: [ 84.295075][ T7744] free_unref_page+0x5f4/0xdc0 [ 84.296362][ T7744] __folio_put+0x30d/0x3d0 [ 84.297540][ T7744] migrate_folio_done+0x271/0x310 [ 84.298876][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 84.300311][ T7744] migrate_pages_sync+0x131/0x910 [ 84.301631][ T7744] migrate_pages+0x19ee/0x21f0 [ 84.302884][ T7744] compact_zone+0x1f68/0x4280 [ 84.304134][ T7744] compact_node+0x1a2/0x2d0 [ 84.305364][ T7744] kcompactd+0x76e/0xde0 [ 84.306478][ T7744] kthread+0x2c1/0x3a0 [ 84.307555][ T7744] ret_from_fork+0x45/0x80 [ 84.308734][ T7744] ret_from_fork_asm+0x1a/0x30 [ 84.310044][ T7744] Modules linked in: [ 84.311076][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 84.314308][ T7744] Tainted: [B]=BAD_PAGE [ 84.315444][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.318559][ T7744] Call Trace: [ 84.319575][ T7744] [ 84.320426][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 84.321744][ T7744] bad_page+0xb3/0x1f0 [ 84.323016][ T7744] ? __pfx_bad_page+0x10/0x10 [ 84.324344][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 84.325858][ T7744] free_unref_page+0x657/0xdc0 [ 84.327257][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.328869][ T7744] ? __phys_addr+0xc6/0x150 [ 84.330128][ T7744] skb_free_head+0xa0/0x1d0 [ 84.331381][ T7744] skb_release_data+0x560/0x730 [ 84.332697][ T7744] ? packet_rcv+0x16c/0x15a0 [ 84.333900][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.335322][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 84.336901][ T7744] packet_rcv+0x16c/0x15a0 [ 84.338226][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 84.339617][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 84.341587][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.343715][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 84.345414][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.347148][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.348576][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.350575][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.352349][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.354320][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 84.355704][ T7744] ? __build_skb_around+0x278/0x3b0 [ 84.357090][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 84.358521][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.360340][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.362362][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.364412][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.365912][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.367653][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.369418][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.371207][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.373034][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.374483][ T7744] ? 0xffffffffa0006f40 [ 84.375578][ T7744] ? 0xffffffffa0006f40 [ 84.376703][ T7744] ? 0xffffffffa0006f40 [ 84.377802][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.379350][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.380719][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.382026][ T7744] ? __fget_files+0x40/0x3f0 [ 84.383425][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.385042][ T7744] ? fput+0x30/0x390 [ 84.386125][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 84.388218][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.389802][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.391338][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 84.392903][ T7744] ? __schedule+0xe5d/0x5730 [ 84.394291][ T7744] ? __fget_files+0x23a/0x3f0 [ 84.395578][ T7744] ? do_futex+0x123/0x350 [ 84.396746][ T7744] ? __pfx_do_futex+0x10/0x10 [ 84.398014][ T7744] ? xfd_validate_state+0x5d/0x180 [ 84.399371][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.400660][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.401850][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.403456][ T7744] do_syscall_64+0xcd/0x250 [ 84.404745][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.406365][ T7744] RIP: 0033:0x7f783637e719 [ 84.407599][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.413733][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.416509][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 84.418683][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.420766][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.422939][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.425309][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 84.427505][ T7744] [ 84.428559][ T7744] BUG: Bad page state in process syz.7.434 pfn:36598 [ 84.430598][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x18a pfn:0x36598 [ 84.433275][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.435157][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 84.437408][ T7744] raw: 000000000000018a 0000000000000001 00000000ffffffff 0000000000000000 [ 84.439634][ T7744] page dumped because: page_pool leak [ 84.441224][ T7744] page_owner tracks the page as allocated [ 84.442871][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060795390, free_ts 83328477211 [ 84.447880][ T7744] post_alloc_hook+0x2d1/0x350 [ 84.449199][ T7744] get_page_from_freelist+0x101e/0x3070 [ 84.451075][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 84.452654][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.454219][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.455919][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 84.457611][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 84.459193][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.461108][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.463258][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.464773][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.466058][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.467369][ T7744] do_syscall_64+0xcd/0x250 [ 84.468641][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.470374][ T7744] page last free pid 43 tgid 43 stack trace: [ 84.471976][ T7744] free_unref_page+0x5f4/0xdc0 [ 84.473262][ T7744] __folio_put+0x30d/0x3d0 [ 84.474610][ T7744] migrate_folio_done+0x271/0x310 [ 84.476259][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 84.477933][ T7744] migrate_pages_sync+0x131/0x910 [ 84.479508][ T7744] migrate_pages+0x19ee/0x21f0 [ 84.481211][ T7744] compact_zone+0x1f68/0x4280 [ 84.482669][ T7744] compact_node+0x1a2/0x2d0 [ 84.483991][ T7744] kcompactd+0x76e/0xde0 [ 84.485235][ T7744] kthread+0x2c1/0x3a0 [ 84.486338][ T7744] ret_from_fork+0x45/0x80 [ 84.487521][ T7744] ret_from_fork_asm+0x1a/0x30 [ 84.488863][ T7744] Modules linked in: [ 84.489970][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 84.493091][ T7744] Tainted: [B]=BAD_PAGE [ 84.494312][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.497274][ T7744] Call Trace: [ 84.498156][ T7744] [ 84.499043][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 84.500360][ T7744] bad_page+0xb3/0x1f0 [ 84.501449][ T7744] ? __pfx_bad_page+0x10/0x10 [ 84.502701][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 84.503995][ T7744] free_unref_page+0x657/0xdc0 [ 84.505257][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.506818][ T7744] ? __phys_addr+0xc6/0x150 [ 84.508026][ T7744] skb_free_head+0xa0/0x1d0 [ 84.509214][ T7744] skb_release_data+0x560/0x730 [ 84.510505][ T7744] ? packet_rcv+0x16c/0x15a0 [ 84.511787][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.513267][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 84.514674][ T7744] packet_rcv+0x16c/0x15a0 [ 84.516066][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 84.517575][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 84.519305][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.521020][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 84.522596][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.524670][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.526045][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.527735][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.529419][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.531478][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 84.532916][ T7744] ? __build_skb_around+0x278/0x3b0 [ 84.534390][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 84.535786][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.537461][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.539248][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.540903][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.542851][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.544690][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.546403][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.548623][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.550292][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.551686][ T7744] ? 0xffffffffa0006f40 [ 84.552809][ T7744] ? 0xffffffffa0006f40 [ 84.553906][ T7744] ? 0xffffffffa0006f40 [ 84.554992][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.556565][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.558091][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.559330][ T7744] ? __fget_files+0x40/0x3f0 [ 84.560600][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.562166][ T7744] ? fput+0x30/0x390 [ 84.563171][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 84.564613][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.566276][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.567514][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 84.568808][ T7744] ? __schedule+0xe5d/0x5730 [ 84.570270][ T7744] ? __fget_files+0x23a/0x3f0 [ 84.571713][ T7744] ? do_futex+0x123/0x350 [ 84.573019][ T7744] ? __pfx_do_futex+0x10/0x10 [ 84.574293][ T7744] ? xfd_validate_state+0x5d/0x180 [ 84.575676][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.576982][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.578193][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.579570][ T7744] do_syscall_64+0xcd/0x250 [ 84.580811][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.582616][ T7744] RIP: 0033:0x7f783637e719 [ 84.583996][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.589351][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.591558][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 84.593770][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.595845][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.597929][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.599999][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 84.602102][ T7744] [ 84.603009][ T7744] BUG: Bad page state in process syz.7.434 pfn:36597 [ 84.605299][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x189 pfn:0x36597 [ 84.607944][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.609871][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 84.612147][ T7744] raw: 0000000000000189 0000000000000001 00000000ffffffff 0000000000000000 [ 84.614680][ T7744] page dumped because: page_pool leak [ 84.616122][ T7744] page_owner tracks the page as allocated [ 84.617622][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060790945, free_ts 83328493923 [ 84.622043][ T7744] post_alloc_hook+0x2d1/0x350 [ 84.623373][ T7744] get_page_from_freelist+0x101e/0x3070 [ 84.625054][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 84.626699][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.628322][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.630064][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 84.631406][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 84.632933][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.634589][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.635985][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.637402][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.638538][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.639775][ T7744] do_syscall_64+0xcd/0x250 [ 84.640963][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.642703][ T7744] page last free pid 43 tgid 43 stack trace: [ 84.644424][ T7744] free_unref_page+0x5f4/0xdc0 [ 84.645909][ T7744] __folio_put+0x30d/0x3d0 [ 84.647216][ T7744] migrate_folio_done+0x271/0x310 [ 84.648634][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 84.650091][ T7744] migrate_pages_sync+0x131/0x910 [ 84.651409][ T7744] migrate_pages+0x19ee/0x21f0 [ 84.652700][ T7744] compact_zone+0x1f68/0x4280 [ 84.653932][ T7744] compact_node+0x1a2/0x2d0 [ 84.655218][ T7744] kcompactd+0x76e/0xde0 [ 84.656399][ T7744] kthread+0x2c1/0x3a0 [ 84.657510][ T7744] ret_from_fork+0x45/0x80 [ 84.658793][ T7744] ret_from_fork_asm+0x1a/0x30 [ 84.660453][ T7744] Modules linked in: [ 84.661916][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 84.665520][ T7744] Tainted: [B]=BAD_PAGE [ 84.666898][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.669990][ T7744] Call Trace: [ 84.671262][ T7744] [ 84.672280][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 84.673681][ T7744] bad_page+0xb3/0x1f0 [ 84.675057][ T7744] ? __pfx_bad_page+0x10/0x10 [ 84.676330][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 84.677621][ T7744] free_unref_page+0x657/0xdc0 [ 84.678885][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.680469][ T7744] ? __phys_addr+0xc6/0x150 [ 84.681660][ T7744] skb_free_head+0xa0/0x1d0 [ 84.682844][ T7744] skb_release_data+0x560/0x730 [ 84.684132][ T7744] ? packet_rcv+0x16c/0x15a0 [ 84.685694][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.686993][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 84.688450][ T7744] packet_rcv+0x16c/0x15a0 [ 84.689714][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 84.691066][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 84.692905][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.694635][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 84.696040][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.697659][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.698825][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.700482][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.702479][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.704590][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 84.706112][ T7744] ? __build_skb_around+0x278/0x3b0 [ 84.707792][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 84.709539][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.711874][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.714115][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.715904][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.717401][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.718927][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.720495][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.722227][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.724156][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.725652][ T7744] ? 0xffffffffa0006f40 [ 84.726757][ T7744] ? 0xffffffffa0006f40 [ 84.727874][ T7744] ? 0xffffffffa0006f40 [ 84.729247][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.730810][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.732256][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.733625][ T7744] ? __fget_files+0x40/0x3f0 [ 84.734852][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.736393][ T7744] ? fput+0x30/0x390 [ 84.737434][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 84.738716][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.740273][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.741417][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 84.742679][ T7744] ? __schedule+0xe5d/0x5730 [ 84.744040][ T7744] ? __fget_files+0x23a/0x3f0 [ 84.745474][ T7744] ? do_futex+0x123/0x350 [ 84.746686][ T7744] ? __pfx_do_futex+0x10/0x10 [ 84.748225][ T7744] ? xfd_validate_state+0x5d/0x180 [ 84.749590][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.751041][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.752405][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.753815][ T7744] do_syscall_64+0xcd/0x250 [ 84.755009][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.756581][ T7744] RIP: 0033:0x7f783637e719 [ 84.757728][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.762743][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.765247][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 84.767468][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.769867][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.772180][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.774282][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 84.776374][ T7744] [ 84.777286][ T7744] BUG: Bad page state in process syz.7.434 pfn:36596 [ 84.779070][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x188 pfn:0x36596 [ 84.781501][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.783718][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 84.786518][ T7744] raw: 0000000000000188 0000000000000001 00000000ffffffff 0000000000000000 [ 84.789062][ T7744] page dumped because: page_pool leak [ 84.790612][ T7744] page_owner tracks the page as allocated [ 84.792116][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060786775, free_ts 83328510948 [ 84.796430][ T7744] post_alloc_hook+0x2d1/0x350 [ 84.797719][ T7744] get_page_from_freelist+0x101e/0x3070 [ 84.799176][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 84.800627][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.802194][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.804236][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 84.805666][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 84.807314][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.809120][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.810731][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.812451][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.813730][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.815054][ T7744] do_syscall_64+0xcd/0x250 [ 84.816297][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.817884][ T7744] page last free pid 43 tgid 43 stack trace: [ 84.819421][ T7744] free_unref_page+0x5f4/0xdc0 [ 84.820747][ T7744] __folio_put+0x30d/0x3d0 [ 84.821935][ T7744] migrate_folio_done+0x271/0x310 [ 84.823280][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 84.825059][ T7744] migrate_pages_sync+0x131/0x910 [ 84.826592][ T7744] migrate_pages+0x19ee/0x21f0 [ 84.827858][ T7744] compact_zone+0x1f68/0x4280 [ 84.829419][ T7744] compact_node+0x1a2/0x2d0 [ 84.830929][ T7744] kcompactd+0x76e/0xde0 [ 84.832304][ T7744] kthread+0x2c1/0x3a0 [ 84.833383][ T7744] ret_from_fork+0x45/0x80 [ 84.834657][ T7744] ret_from_fork_asm+0x1a/0x30 [ 84.836089][ T7744] Modules linked in: [ 84.837365][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 84.841367][ T7744] Tainted: [B]=BAD_PAGE [ 84.842691][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.845985][ T7744] Call Trace: [ 84.846903][ T7744] [ 84.847728][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 84.849458][ T7744] bad_page+0xb3/0x1f0 [ 84.850907][ T7744] ? __pfx_bad_page+0x10/0x10 [ 84.852298][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 84.853570][ T7744] free_unref_page+0x657/0xdc0 [ 84.854749][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 84.856231][ T7744] ? __phys_addr+0xc6/0x150 [ 84.857451][ T7744] skb_free_head+0xa0/0x1d0 [ 84.858661][ T7744] skb_release_data+0x560/0x730 [ 84.859903][ T7744] ? packet_rcv+0x16c/0x15a0 [ 84.861106][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.862605][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 84.864241][ T7744] packet_rcv+0x16c/0x15a0 [ 84.865391][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 84.866867][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 84.868708][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 84.870966][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 84.872488][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.874190][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.875400][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 84.877165][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 84.878963][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 84.880887][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 84.882554][ T7744] ? __build_skb_around+0x278/0x3b0 [ 84.884217][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 84.885717][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 84.887565][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 84.889626][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 84.891251][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.892666][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 84.894204][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.895935][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 84.897506][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.899021][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 84.900420][ T7744] ? 0xffffffffa0006f40 [ 84.901635][ T7744] ? 0xffffffffa0006f40 [ 84.902739][ T7744] ? 0xffffffffa0006f40 [ 84.903828][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 84.906071][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.907682][ T7744] ? lock_acquire+0x2f/0xb0 [ 84.909491][ T7744] ? __fget_files+0x40/0x3f0 [ 84.910787][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.912638][ T7744] ? fput+0x30/0x390 [ 84.913894][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 84.915435][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 84.917308][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.918458][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 84.919729][ T7744] ? __schedule+0xe5d/0x5730 [ 84.920972][ T7744] ? __fget_files+0x23a/0x3f0 [ 84.922210][ T7744] ? do_futex+0x123/0x350 [ 84.923352][ T7744] ? __pfx_do_futex+0x10/0x10 [ 84.924603][ T7744] ? xfd_validate_state+0x5d/0x180 [ 84.925941][ T7744] ? rcu_is_watching+0x12/0xc0 [ 84.927203][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.928660][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.930033][ T7744] do_syscall_64+0xcd/0x250 [ 84.931236][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.932806][ T7744] RIP: 0033:0x7f783637e719 [ 84.933990][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.938939][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.941112][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 84.943209][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 84.945519][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 84.947603][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.950132][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 84.952252][ T7744] [ 84.953286][ T7744] BUG: Bad page state in process syz.7.434 pfn:36595 [ 84.955055][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x187 pfn:0x36595 [ 84.957384][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.959188][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 84.961500][ T7744] raw: 0000000000000187 0000000000000001 00000000ffffffff 0000000000000000 [ 84.963863][ T7744] page dumped because: page_pool leak [ 84.965287][ T7744] page_owner tracks the page as allocated [ 84.966829][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060782494, free_ts 83328527928 [ 84.971396][ T7744] post_alloc_hook+0x2d1/0x350 [ 84.972763][ T7744] get_page_from_freelist+0x101e/0x3070 [ 84.974234][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 84.975669][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 84.977098][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 84.978576][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 84.979961][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 84.981260][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 84.982817][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 84.984596][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 84.986037][ T7744] __sys_bpf+0xfc6/0x49a0 [ 84.987249][ T7744] __x64_sys_bpf+0x78/0xc0 [ 84.988436][ T7744] do_syscall_64+0xcd/0x250 [ 84.989643][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.991210][ T7744] page last free pid 43 tgid 43 stack trace: [ 84.992798][ T7744] free_unref_page+0x5f4/0xdc0 [ 84.994153][ T7744] __folio_put+0x30d/0x3d0 [ 84.995362][ T7744] migrate_folio_done+0x271/0x310 [ 84.996690][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 84.998064][ T7744] migrate_pages_sync+0x131/0x910 [ 84.999300][ T7744] migrate_pages+0x19ee/0x21f0 [ 85.000654][ T7744] compact_zone+0x1f68/0x4280 [ 85.001865][ T7744] compact_node+0x1a2/0x2d0 [ 85.003125][ T7744] kcompactd+0x76e/0xde0 [ 85.004357][ T7744] kthread+0x2c1/0x3a0 [ 85.005410][ T7744] ret_from_fork+0x45/0x80 [ 85.006551][ T7744] ret_from_fork_asm+0x1a/0x30 [ 85.007776][ T7744] Modules linked in: [ 85.008749][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 85.009842][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 85.011765][ T7744] Tainted: [B]=BAD_PAGE [ 85.011772][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.011779][ T7744] Call Trace: [ 85.011784][ T7744] [ 85.011789][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 85.020584][ T7744] bad_page+0xb3/0x1f0 [ 85.021594][ T7744] ? __pfx_bad_page+0x10/0x10 [ 85.022748][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 85.024005][ T7744] free_unref_page+0x657/0xdc0 [ 85.025290][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.026747][ T7744] ? __phys_addr+0xc6/0x150 [ 85.027839][ T7744] skb_free_head+0xa0/0x1d0 [ 85.028963][ T7744] skb_release_data+0x560/0x730 [ 85.030178][ T7744] ? packet_rcv+0x16c/0x15a0 [ 85.031321][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.032661][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 85.034098][ T7744] packet_rcv+0x16c/0x15a0 [ 85.035235][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 85.036451][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 85.038068][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.039675][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 85.040966][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.042535][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.043822][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.045476][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.047143][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.048961][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 85.050361][ T7744] ? __build_skb_around+0x278/0x3b0 [ 85.051711][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 85.053127][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.054768][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.056611][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.058096][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.059484][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.061039][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.062588][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.064088][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.065551][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.066906][ T7744] ? 0xffffffffa0006f40 [ 85.067971][ T7744] ? 0xffffffffa0006f40 [ 85.069014][ T7744] ? 0xffffffffa0006f40 [ 85.070156][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.071695][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.073138][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.074331][ T7744] ? __fget_files+0x40/0x3f0 [ 85.075537][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.077066][ T7744] ? fput+0x30/0x390 [ 85.078096][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 85.079351][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.080896][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.082032][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 85.083288][ T7744] ? __schedule+0xe5d/0x5730 [ 85.084514][ T7744] ? __fget_files+0x23a/0x3f0 [ 85.085751][ T7744] ? do_futex+0x123/0x350 [ 85.086881][ T7744] ? __pfx_do_futex+0x10/0x10 [ 85.088289][ T7744] ? xfd_validate_state+0x5d/0x180 [ 85.089640][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.090898][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.092101][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.093495][ T7744] do_syscall_64+0xcd/0x250 [ 85.094704][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.096261][ T7744] RIP: 0033:0x7f783637e719 [ 85.097432][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.103732][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.106039][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 85.108097][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.110155][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.112207][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.114257][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 85.116442][ T7744] [ 85.117499][ T7744] BUG: Bad page state in process syz.7.434 pfn:36594 [ 85.119331][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x186 pfn:0x36594 [ 85.121840][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.123748][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 85.126150][ T7744] raw: 0000000000000186 0000000000000001 00000000ffffffff 0000000000000000 [ 85.128401][ T7744] page dumped because: page_pool leak [ 85.129878][ T7744] page_owner tracks the page as allocated [ 85.131348][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060773767, free_ts 83328544669 [ 85.135780][ T7744] post_alloc_hook+0x2d1/0x350 [ 85.137063][ T7744] get_page_from_freelist+0x101e/0x3070 [ 85.138487][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 85.139945][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.141410][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.143076][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 85.144495][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 85.145849][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.147459][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.148845][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.150307][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.151485][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.152656][ T7744] do_syscall_64+0xcd/0x250 [ 85.153941][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.155481][ T7744] page last free pid 43 tgid 43 stack trace: [ 85.157031][ T7744] free_unref_page+0x5f4/0xdc0 [ 85.158283][ T7744] __folio_put+0x30d/0x3d0 [ 85.159465][ T7744] migrate_folio_done+0x271/0x310 [ 85.160924][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 85.162597][ T7744] migrate_pages_sync+0x131/0x910 [ 85.163899][ T7744] migrate_pages+0x19ee/0x21f0 [ 85.165195][ T7744] compact_zone+0x1f68/0x4280 [ 85.166463][ T7744] compact_node+0x1a2/0x2d0 [ 85.167659][ T7744] kcompactd+0x76e/0xde0 [ 85.168884][ T7744] kthread+0x2c1/0x3a0 [ 85.170114][ T7744] ret_from_fork+0x45/0x80 [ 85.171319][ T7744] ret_from_fork_asm+0x1a/0x30 [ 85.172861][ T7744] Modules linked in: [ 85.174058][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 85.177548][ T7744] Tainted: [B]=BAD_PAGE [ 85.178693][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.181662][ T7744] Call Trace: [ 85.182680][ T7744] [ 85.183493][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 85.185135][ T7744] bad_page+0xb3/0x1f0 [ 85.186849][ T7744] ? __pfx_bad_page+0x10/0x10 [ 85.188300][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 85.189703][ T7744] free_unref_page+0x657/0xdc0 [ 85.191029][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.192794][ T7744] ? __phys_addr+0xc6/0x150 [ 85.193987][ T7744] skb_free_head+0xa0/0x1d0 [ 85.195178][ T7744] skb_release_data+0x560/0x730 [ 85.196453][ T7744] ? packet_rcv+0x16c/0x15a0 [ 85.197780][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.199176][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 85.200653][ T7744] packet_rcv+0x16c/0x15a0 [ 85.201968][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 85.203279][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 85.204883][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.206785][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 85.208240][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.209973][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.211227][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.212944][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.215011][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.217149][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 85.218652][ T7744] ? __build_skb_around+0x278/0x3b0 [ 85.220029][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 85.221420][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.223496][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.225371][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.226832][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.228232][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.230068][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.231651][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.233346][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.234894][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.236298][ T7744] ? 0xffffffffa0006f40 [ 85.237401][ T7744] ? 0xffffffffa0006f40 [ 85.238499][ T7744] ? 0xffffffffa0006f40 [ 85.239606][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.241221][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.242647][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.244298][ T7744] ? __fget_files+0x40/0x3f0 [ 85.245646][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.247320][ T7744] ? fput+0x30/0x390 [ 85.248468][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 85.249830][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.251415][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.252684][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 85.254034][ T7744] ? __schedule+0xe5d/0x5730 [ 85.255357][ T7744] ? __fget_files+0x23a/0x3f0 [ 85.256778][ T7744] ? do_futex+0x123/0x350 [ 85.257926][ T7744] ? __pfx_do_futex+0x10/0x10 [ 85.259177][ T7744] ? xfd_validate_state+0x5d/0x180 [ 85.260537][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.261975][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.263184][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.264720][ T7744] do_syscall_64+0xcd/0x250 [ 85.266121][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.267768][ T7744] RIP: 0033:0x7f783637e719 [ 85.269232][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.274591][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.276776][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 85.278872][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.281199][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.283900][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.286066][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 85.288252][ T7744] [ 85.289188][ T7744] BUG: Bad page state in process syz.7.434 pfn:36593 [ 85.291239][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x185 pfn:0x36593 [ 85.293784][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.295658][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 85.297949][ T7744] raw: 0000000000000185 0000000000000001 00000000ffffffff 0000000000000000 [ 85.300292][ T7744] page dumped because: page_pool leak [ 85.301718][ T7744] page_owner tracks the page as allocated [ 85.303381][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060768769, free_ts 83328561175 [ 85.307810][ T7744] post_alloc_hook+0x2d1/0x350 [ 85.309364][ T7744] get_page_from_freelist+0x101e/0x3070 [ 85.311190][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 85.312903][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.314673][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.316477][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 85.317874][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 85.319214][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.321055][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.322452][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.324211][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.325533][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.326901][ T7744] do_syscall_64+0xcd/0x250 [ 85.328112][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.329736][ T7744] page last free pid 43 tgid 43 stack trace: [ 85.331314][ T7744] free_unref_page+0x5f4/0xdc0 [ 85.332617][ T7744] __folio_put+0x30d/0x3d0 [ 85.333917][ T7744] migrate_folio_done+0x271/0x310 [ 85.335275][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 85.336675][ T7744] migrate_pages_sync+0x131/0x910 [ 85.338018][ T7744] migrate_pages+0x19ee/0x21f0 [ 85.339288][ T7744] compact_zone+0x1f68/0x4280 [ 85.340615][ T7744] compact_node+0x1a2/0x2d0 [ 85.341826][ T7744] kcompactd+0x76e/0xde0 [ 85.342974][ T7744] kthread+0x2c1/0x3a0 [ 85.344146][ T7744] ret_from_fork+0x45/0x80 [ 85.345366][ T7744] ret_from_fork_asm+0x1a/0x30 [ 85.346629][ T7744] Modules linked in: [ 85.347660][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 85.350769][ T7744] Tainted: [B]=BAD_PAGE [ 85.351885][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.354789][ T7744] Call Trace: [ 85.355722][ T7744] [ 85.356539][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 85.357792][ T7744] bad_page+0xb3/0x1f0 [ 85.358879][ T7744] ? __pfx_bad_page+0x10/0x10 [ 85.360132][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 85.361416][ T7744] free_unref_page+0x657/0xdc0 [ 85.362675][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.364263][ T7744] ? __phys_addr+0xc6/0x150 [ 85.365454][ T7744] skb_free_head+0xa0/0x1d0 [ 85.366657][ T7744] skb_release_data+0x560/0x730 [ 85.367944][ T7744] ? packet_rcv+0x16c/0x15a0 [ 85.369183][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.370446][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 85.371772][ T7744] packet_rcv+0x16c/0x15a0 [ 85.372969][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 85.374251][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 85.375810][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.377563][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 85.378985][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.380716][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.381933][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.383736][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.385676][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.387824][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 85.389199][ T7744] ? __build_skb_around+0x278/0x3b0 [ 85.390561][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 85.392026][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.393667][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.395410][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.396945][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.398390][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.400178][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.402012][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.403835][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.405590][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.407072][ T7744] ? 0xffffffffa0006f40 [ 85.408247][ T7744] ? 0xffffffffa0006f40 [ 85.409401][ T7744] ? 0xffffffffa0006f40 [ 85.410517][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.412086][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.413476][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.414659][ T7744] ? __fget_files+0x40/0x3f0 [ 85.415866][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.417388][ T7744] ? fput+0x30/0x390 [ 85.418412][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 85.419660][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.421186][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.422313][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 85.423568][ T7744] ? __schedule+0xe5d/0x5730 [ 85.424831][ T7744] ? __fget_files+0x23a/0x3f0 [ 85.426076][ T7744] ? do_futex+0x123/0x350 [ 85.427212][ T7744] ? __pfx_do_futex+0x10/0x10 [ 85.428462][ T7744] ? xfd_validate_state+0x5d/0x180 [ 85.429824][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.431078][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.432276][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.433648][ T7744] do_syscall_64+0xcd/0x250 [ 85.434839][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.436383][ T7744] RIP: 0033:0x7f783637e719 [ 85.437555][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.442528][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.444667][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 85.446688][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.448735][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.450784][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.452840][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 85.454882][ T7744] [ 85.455797][ T7744] BUG: Bad page state in process syz.7.434 pfn:36592 [ 85.457536][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x184 pfn:0x36592 [ 85.459867][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.461723][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 85.463935][ T7744] raw: 0000000000000184 0000000000000001 00000000ffffffff 0000000000000000 [ 85.466154][ T7744] page dumped because: page_pool leak [ 85.467537][ T7744] page_owner tracks the page as allocated [ 85.469016][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060764519, free_ts 83328579573 [ 85.473416][ T7744] post_alloc_hook+0x2d1/0x350 [ 85.474688][ T7744] get_page_from_freelist+0x101e/0x3070 [ 85.476162][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 85.477531][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.478962][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.479924][ T5949] Bluetooth: hci2: command tx timeout [ 85.480633][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 85.480647][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 85.480657][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.480671][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.480684][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.480698][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.480708][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.480718][ T7744] do_syscall_64+0xcd/0x250 [ 85.480734][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.480752][ T7744] page last free pid 43 tgid 43 stack trace: [ 85.480758][ T7744] free_unref_page+0x5f4/0xdc0 [ 85.480768][ T7744] __folio_put+0x30d/0x3d0 [ 85.480780][ T7744] migrate_folio_done+0x271/0x310 [ 85.480792][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 85.480805][ T7744] migrate_pages_sync+0x131/0x910 [ 85.503291][ T7744] migrate_pages+0x19ee/0x21f0 [ 85.504808][ T7744] compact_zone+0x1f68/0x4280 [ 85.506380][ T7744] compact_node+0x1a2/0x2d0 [ 85.507659][ T7744] kcompactd+0x76e/0xde0 [ 85.508995][ T7744] kthread+0x2c1/0x3a0 [ 85.510135][ T7744] ret_from_fork+0x45/0x80 [ 85.511306][ T7744] ret_from_fork_asm+0x1a/0x30 [ 85.512675][ T7744] Modules linked in: [ 85.513718][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 85.516836][ T7744] Tainted: [B]=BAD_PAGE [ 85.517925][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.520713][ T7744] Call Trace: [ 85.521599][ T7744] [ 85.522375][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 85.523603][ T7744] bad_page+0xb3/0x1f0 [ 85.524675][ T7744] ? __pfx_bad_page+0x10/0x10 [ 85.525908][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 85.527175][ T7744] free_unref_page+0x657/0xdc0 [ 85.528461][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.530103][ T7744] ? __phys_addr+0xc6/0x150 [ 85.531346][ T7744] skb_free_head+0xa0/0x1d0 [ 85.532632][ T7744] skb_release_data+0x560/0x730 [ 85.533919][ T7744] ? packet_rcv+0x16c/0x15a0 [ 85.535142][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.536395][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 85.537712][ T7744] packet_rcv+0x16c/0x15a0 [ 85.538885][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 85.540144][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 85.541717][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.543415][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 85.544775][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.546460][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.547683][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.549405][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.551057][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.552944][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 85.554309][ T7744] ? __build_skb_around+0x278/0x3b0 [ 85.555685][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 85.557075][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.558702][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.560406][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.561892][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.563268][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.564795][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.566332][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.567890][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.569414][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.570790][ T7744] ? 0xffffffffa0006f40 [ 85.571890][ T7744] ? 0xffffffffa0006f40 [ 85.573019][ T7744] ? 0xffffffffa0006f40 [ 85.574105][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.575646][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.577070][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.578265][ T7744] ? __fget_files+0x40/0x3f0 [ 85.579484][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.581024][ T7744] ? fput+0x30/0x390 [ 85.582060][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 85.583325][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.585150][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.586301][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 85.587985][ T7744] ? __schedule+0xe5d/0x5730 [ 85.589419][ T7744] ? __fget_files+0x23a/0x3f0 [ 85.590918][ T7744] ? do_futex+0x123/0x350 [ 85.592168][ T7744] ? __pfx_do_futex+0x10/0x10 [ 85.593430][ T7744] ? xfd_validate_state+0x5d/0x180 [ 85.594807][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.596096][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.597329][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.598834][ T7744] do_syscall_64+0xcd/0x250 [ 85.600108][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.601712][ T7744] RIP: 0033:0x7f783637e719 [ 85.602935][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.608332][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.610593][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 85.612762][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.614884][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.617429][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.619680][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 85.621965][ T7744] [ 85.623010][ T7744] BUG: Bad page state in process syz.7.434 pfn:36591 [ 85.624922][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x183 pfn:0x36591 [ 85.627248][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.629306][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 85.631627][ T7744] raw: 0000000000000183 0000000000000001 00000000ffffffff 0000000000000000 [ 85.633976][ T7744] page dumped because: page_pool leak [ 85.635386][ T7744] page_owner tracks the page as allocated [ 85.637028][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060760110, free_ts 83328596791 [ 85.642022][ T7744] post_alloc_hook+0x2d1/0x350 [ 85.643511][ T7744] get_page_from_freelist+0x101e/0x3070 [ 85.645166][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 85.646562][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.648013][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.649572][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 85.651008][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 85.652387][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.654010][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.655396][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.656816][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.657948][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.659129][ T7744] do_syscall_64+0xcd/0x250 [ 85.660504][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.662084][ T7744] page last free pid 43 tgid 43 stack trace: [ 85.663643][ T7744] free_unref_page+0x5f4/0xdc0 [ 85.664889][ T7744] __folio_put+0x30d/0x3d0 [ 85.666053][ T7744] migrate_folio_done+0x271/0x310 [ 85.667368][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 85.668764][ T7744] migrate_pages_sync+0x131/0x910 [ 85.670138][ T7744] migrate_pages+0x19ee/0x21f0 [ 85.671435][ T7744] compact_zone+0x1f68/0x4280 [ 85.672755][ T7744] compact_node+0x1a2/0x2d0 [ 85.674015][ T7744] kcompactd+0x76e/0xde0 [ 85.675247][ T7744] kthread+0x2c1/0x3a0 [ 85.676491][ T7744] ret_from_fork+0x45/0x80 [ 85.677832][ T7744] ret_from_fork_asm+0x1a/0x30 [ 85.679236][ T7744] Modules linked in: [ 85.680418][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 85.683763][ T7744] Tainted: [B]=BAD_PAGE [ 85.684882][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.687666][ T7744] Call Trace: [ 85.688563][ T7744] [ 85.689358][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 85.690624][ T7744] bad_page+0xb3/0x1f0 [ 85.691711][ T7744] ? __pfx_bad_page+0x10/0x10 [ 85.692990][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 85.694284][ T7744] free_unref_page+0x657/0xdc0 [ 85.695554][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.697135][ T7744] ? __phys_addr+0xc6/0x150 [ 85.698332][ T7744] skb_free_head+0xa0/0x1d0 [ 85.699527][ T7744] skb_release_data+0x560/0x730 [ 85.700801][ T7744] ? packet_rcv+0x16c/0x15a0 [ 85.702016][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.703283][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 85.704642][ T7744] packet_rcv+0x16c/0x15a0 [ 85.705806][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 85.707251][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 85.708851][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.710591][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 85.712096][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.713915][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.715235][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.717056][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.718690][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.720769][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 85.722206][ T7744] ? __build_skb_around+0x278/0x3b0 [ 85.723580][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 85.724997][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.726642][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.728372][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.729877][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.731281][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.732919][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.734498][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.736054][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.737570][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.738938][ T7744] ? 0xffffffffa0006f40 [ 85.740086][ T7744] ? 0xffffffffa0006f40 [ 85.741182][ T7744] ? 0xffffffffa0006f40 [ 85.742270][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.743714][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.745143][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.746325][ T7744] ? __fget_files+0x40/0x3f0 [ 85.747518][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.749052][ T7744] ? fput+0x30/0x390 [ 85.750085][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 85.751347][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.752911][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.754128][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 85.755413][ T7744] ? __schedule+0xe5d/0x5730 [ 85.756670][ T7744] ? __fget_files+0x23a/0x3f0 [ 85.757891][ T7744] ? do_futex+0x123/0x350 [ 85.759004][ T7744] ? __pfx_do_futex+0x10/0x10 [ 85.760252][ T7744] ? xfd_validate_state+0x5d/0x180 [ 85.761595][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.762847][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.764034][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.765390][ T7744] do_syscall_64+0xcd/0x250 [ 85.766584][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.768070][ T7744] RIP: 0033:0x7f783637e719 [ 85.769231][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.774199][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.776362][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 85.778431][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.780354][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.782358][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.784356][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 85.786418][ T7744] [ 85.787347][ T7744] BUG: Bad page state in process syz.7.434 pfn:36590 [ 85.789146][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x182 pfn:0x36590 [ 85.791482][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.793357][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 85.795577][ T7744] raw: 0000000000000182 0000000000000001 00000000ffffffff 0000000000000000 [ 85.797884][ T7744] page dumped because: page_pool leak [ 85.799361][ T7744] page_owner tracks the page as allocated [ 85.801032][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060755732, free_ts 83328617760 [ 85.805628][ T7744] post_alloc_hook+0x2d1/0x350 [ 85.806857][ T7744] get_page_from_freelist+0x101e/0x3070 [ 85.808335][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 85.809775][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.811397][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.812986][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 85.814365][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 85.815719][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.817355][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.818731][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.820202][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.821346][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.822521][ T7744] do_syscall_64+0xcd/0x250 [ 85.823721][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.825292][ T7744] page last free pid 43 tgid 43 stack trace: [ 85.826848][ T7744] free_unref_page+0x5f4/0xdc0 [ 85.828105][ T7744] __folio_put+0x30d/0x3d0 [ 85.829285][ T7744] migrate_folio_done+0x271/0x310 [ 85.830649][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 85.832064][ T7744] migrate_pages_sync+0x131/0x910 [ 85.833357][ T7744] migrate_pages+0x19ee/0x21f0 [ 85.834621][ T7744] compact_zone+0x1f68/0x4280 [ 85.835846][ T7744] compact_node+0x1a2/0x2d0 [ 85.837046][ T7744] kcompactd+0x76e/0xde0 [ 85.838153][ T7744] kthread+0x2c1/0x3a0 [ 85.839222][ T7744] ret_from_fork+0x45/0x80 [ 85.840446][ T7744] ret_from_fork_asm+0x1a/0x30 [ 85.841707][ T7744] Modules linked in: [ 85.842739][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 85.845809][ T7744] Tainted: [B]=BAD_PAGE [ 85.847022][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.850117][ T7744] Call Trace: [ 85.851066][ T7744] [ 85.851858][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 85.853371][ T7744] bad_page+0xb3/0x1f0 [ 85.854532][ T7744] ? __pfx_bad_page+0x10/0x10 [ 85.855791][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 85.857114][ T7744] free_unref_page+0x657/0xdc0 [ 85.858476][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 85.860146][ T7744] ? __phys_addr+0xc6/0x150 [ 85.861408][ T7744] skb_free_head+0xa0/0x1d0 [ 85.862750][ T7744] skb_release_data+0x560/0x730 [ 85.864228][ T7744] ? packet_rcv+0x16c/0x15a0 [ 85.865584][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.866948][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 85.868474][ T7744] packet_rcv+0x16c/0x15a0 [ 85.869700][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 85.871009][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 85.872628][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.874332][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 85.875693][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.877361][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.878555][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 85.880333][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 85.881969][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.883687][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 85.885076][ T7744] ? __build_skb_around+0x278/0x3b0 [ 85.886460][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 85.887863][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 85.889497][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 85.891222][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 85.892663][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.894047][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 85.895574][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.897139][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 85.898699][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.900269][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.901660][ T7744] ? 0xffffffffa0006f40 [ 85.902757][ T7744] ? 0xffffffffa0006f40 [ 85.903858][ T7744] ? 0xffffffffa0006f40 [ 85.904997][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 85.906578][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.908566][ T7744] ? lock_acquire+0x2f/0xb0 [ 85.909856][ T7744] ? __fget_files+0x40/0x3f0 [ 85.911133][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.912726][ T7744] ? fput+0x30/0x390 [ 85.913812][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 85.915049][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.916591][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.917739][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 85.919008][ T7744] ? __schedule+0xe5d/0x5730 [ 85.920232][ T7744] ? __fget_files+0x23a/0x3f0 [ 85.921485][ T7744] ? do_futex+0x123/0x350 [ 85.922637][ T7744] ? __pfx_do_futex+0x10/0x10 [ 85.923876][ T7744] ? xfd_validate_state+0x5d/0x180 [ 85.925233][ T7744] ? rcu_is_watching+0x12/0xc0 [ 85.926496][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.927681][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.929094][ T7744] do_syscall_64+0xcd/0x250 [ 85.930411][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.932099][ T7744] RIP: 0033:0x7f783637e719 [ 85.933281][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.938446][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.940620][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 85.942704][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 85.945100][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 85.947406][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.949480][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 85.951579][ T7744] [ 85.952525][ T7744] BUG: Bad page state in process syz.7.434 pfn:362bf [ 85.954400][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x55b948a14 pfn:0x362bf [ 85.957098][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.959118][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 85.961589][ T7744] raw: 000000055b948a14 0000000000000001 00000000ffffffff 0000000000000000 [ 85.963955][ T7744] page dumped because: page_pool leak [ 85.965354][ T7744] page_owner tracks the page as allocated [ 85.966824][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060751400, free_ts 83318589265 [ 85.971105][ T7744] post_alloc_hook+0x2d1/0x350 [ 85.972389][ T7744] get_page_from_freelist+0x101e/0x3070 [ 85.973852][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 85.975225][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 85.976672][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 85.978041][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 85.979346][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 85.980713][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 85.982332][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 85.983704][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 85.985121][ T7744] __sys_bpf+0xfc6/0x49a0 [ 85.986252][ T7744] __x64_sys_bpf+0x78/0xc0 [ 85.987426][ T7744] do_syscall_64+0xcd/0x250 [ 85.988635][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.990255][ T7744] page last free pid 43 tgid 43 stack trace: [ 85.992120][ T7744] free_unref_page+0x5f4/0xdc0 [ 85.993364][ T7744] __folio_put+0x30d/0x3d0 [ 85.994536][ T7744] migrate_folio_done+0x271/0x310 [ 85.995862][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 85.997262][ T7744] migrate_pages_sync+0x131/0x910 [ 85.998573][ T7744] migrate_pages+0x19ee/0x21f0 [ 85.999887][ T7744] compact_zone+0x1f68/0x4280 [ 86.001125][ T7744] compact_node+0x1a2/0x2d0 [ 86.002227][ T7744] kcompactd+0x76e/0xde0 [ 86.003327][ T7744] kthread+0x2c1/0x3a0 [ 86.004411][ T7744] ret_from_fork+0x45/0x80 [ 86.005549][ T7744] ret_from_fork_asm+0x1a/0x30 [ 86.006865][ T7744] Modules linked in: [ 86.007885][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 86.010966][ T7744] Tainted: [B]=BAD_PAGE [ 86.012073][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.014841][ T7744] Call Trace: [ 86.015719][ T7744] [ 86.016527][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 86.017768][ T7744] bad_page+0xb3/0x1f0 [ 86.018840][ T7744] ? __pfx_bad_page+0x10/0x10 [ 86.020072][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 86.021350][ T7744] free_unref_page+0x657/0xdc0 [ 86.022597][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.024959][ T7744] ? __phys_addr+0xc6/0x150 [ 86.026256][ T7744] skb_free_head+0xa0/0x1d0 [ 86.027712][ T7744] skb_release_data+0x560/0x730 [ 86.029378][ T7744] ? packet_rcv+0x16c/0x15a0 [ 86.030661][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.032091][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 86.033605][ T7744] packet_rcv+0x16c/0x15a0 [ 86.034927][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 86.036321][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 86.038000][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.039687][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 86.039874][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 86.041064][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.041091][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.045847][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.047510][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.049235][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.050977][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 86.052359][ T7744] ? __build_skb_around+0x278/0x3b0 [ 86.053718][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 86.055183][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.056983][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.058871][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.060565][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.062109][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.063710][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.065256][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.066810][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.068343][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.069727][ T7744] ? 0xffffffffa0006f40 [ 86.070822][ T7744] ? 0xffffffffa0006f40 [ 86.071931][ T7744] ? 0xffffffffa0006f40 [ 86.073053][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.074601][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.076018][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.077212][ T7744] ? __fget_files+0x40/0x3f0 [ 86.078432][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.079977][ T7744] ? fput+0x30/0x390 [ 86.081009][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 86.082267][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.083798][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.084950][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 86.086198][ T7744] ? __schedule+0xe5d/0x5730 [ 86.087741][ T7744] ? __fget_files+0x23a/0x3f0 [ 86.088998][ T7744] ? do_futex+0x123/0x350 [ 86.090144][ T7744] ? __pfx_do_futex+0x10/0x10 [ 86.091389][ T7744] ? xfd_validate_state+0x5d/0x180 [ 86.092750][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.094111][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.095224][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.096566][ T7744] do_syscall_64+0xcd/0x250 [ 86.097701][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.099255][ T7744] RIP: 0033:0x7f783637e719 [ 86.100429][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.105278][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.107305][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 86.109318][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.111383][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.113533][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.115759][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 86.117978][ T7744] [ 86.118980][ T7744] BUG: Bad page state in process syz.7.434 pfn:362be [ 86.120926][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x55b94892c pfn:0x362be [ 86.123416][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.125293][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 86.128449][ T7744] raw: 000000055b94892c 0000000000000001 00000000ffffffff 0000000000000000 [ 86.130887][ T7744] page dumped because: page_pool leak [ 86.132382][ T7744] page_owner tracks the page as allocated [ 86.133877][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060747249, free_ts 83318602439 [ 86.138311][ T7744] post_alloc_hook+0x2d1/0x350 [ 86.139644][ T7744] get_page_from_freelist+0x101e/0x3070 [ 86.141234][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 86.142624][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.144077][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.145643][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 86.147031][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 86.148380][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.150033][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.151407][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.152824][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.153949][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.155109][ T7744] do_syscall_64+0xcd/0x250 [ 86.156325][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.157877][ T7744] page last free pid 43 tgid 43 stack trace: [ 86.159419][ T7744] free_unref_page+0x5f4/0xdc0 [ 86.160715][ T7744] __folio_put+0x30d/0x3d0 [ 86.161877][ T7744] migrate_folio_done+0x271/0x310 [ 86.163186][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 86.164563][ T7744] migrate_pages_sync+0x131/0x910 [ 86.166507][ T7744] migrate_pages+0x19ee/0x21f0 [ 86.168316][ T7744] compact_zone+0x1f68/0x4280 [ 86.169572][ T7744] compact_node+0x1a2/0x2d0 [ 86.170909][ T7744] kcompactd+0x76e/0xde0 [ 86.172060][ T7744] kthread+0x2c1/0x3a0 [ 86.173139][ T7744] ret_from_fork+0x45/0x80 [ 86.174404][ T7744] ret_from_fork_asm+0x1a/0x30 [ 86.175700][ T7744] Modules linked in: [ 86.176768][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 86.179867][ T7744] Tainted: [B]=BAD_PAGE [ 86.180933][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.183811][ T7744] Call Trace: [ 86.184915][ T7744] [ 86.185858][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 86.187333][ T7744] bad_page+0xb3/0x1f0 [ 86.188647][ T7744] ? __pfx_bad_page+0x10/0x10 [ 86.190121][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 86.191497][ T7744] free_unref_page+0x657/0xdc0 [ 86.192837][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.194408][ T7744] ? __phys_addr+0xc6/0x150 [ 86.195604][ T7744] skb_free_head+0xa0/0x1d0 [ 86.196805][ T7744] skb_release_data+0x560/0x730 [ 86.198087][ T7744] ? packet_rcv+0x16c/0x15a0 [ 86.199282][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.200530][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 86.201838][ T7744] packet_rcv+0x16c/0x15a0 [ 86.203028][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 86.204311][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 86.205877][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.207549][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 86.208923][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.210559][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.211752][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.213448][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.215053][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.216776][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 86.218093][ T7744] ? __build_skb_around+0x278/0x3b0 [ 86.219447][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 86.220819][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.222456][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.224265][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.225790][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.227302][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.228994][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.230640][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.232289][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.233902][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.235338][ T7744] ? 0xffffffffa0006f40 [ 86.236427][ T7744] ? 0xffffffffa0006f40 [ 86.237496][ T7744] ? 0xffffffffa0006f40 [ 86.238580][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.240132][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.241533][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.242692][ T7744] ? __fget_files+0x40/0x3f0 [ 86.243901][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.246068][ T7744] ? fput+0x30/0x390 [ 86.247268][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 86.248641][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.250204][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.251360][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 86.252659][ T7744] ? __schedule+0xe5d/0x5730 [ 86.253914][ T7744] ? __fget_files+0x23a/0x3f0 [ 86.255170][ T7744] ? do_futex+0x123/0x350 [ 86.256329][ T7744] ? __pfx_do_futex+0x10/0x10 [ 86.257634][ T7744] ? xfd_validate_state+0x5d/0x180 [ 86.259065][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.260422][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.261677][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.263108][ T7744] do_syscall_64+0xcd/0x250 [ 86.264315][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.265866][ T7744] RIP: 0033:0x7f783637e719 [ 86.267049][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.272055][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.274210][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 86.276257][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.278451][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.280630][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.282706][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 86.284787][ T7744] [ 86.285713][ T7744] BUG: Bad page state in process syz.7.434 pfn:362bd [ 86.287427][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x55b948a09 pfn:0x362bd [ 86.289918][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.291771][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 86.293982][ T7744] raw: 000000055b948a09 0000000000000001 00000000ffffffff 0000000000000000 [ 86.296227][ T7744] page dumped because: page_pool leak [ 86.297686][ T7744] page_owner tracks the page as allocated [ 86.299194][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060743029, free_ts 83318614819 [ 86.303541][ T7744] post_alloc_hook+0x2d1/0x350 [ 86.304915][ T7744] get_page_from_freelist+0x101e/0x3070 [ 86.306410][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 86.307808][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.309272][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.310911][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 86.312332][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 86.313757][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.315434][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.317045][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.318483][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.319625][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.320861][ T7744] do_syscall_64+0xcd/0x250 [ 86.322057][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.323599][ T7744] page last free pid 43 tgid 43 stack trace: [ 86.325247][ T7744] free_unref_page+0x5f4/0xdc0 [ 86.326807][ T7744] __folio_put+0x30d/0x3d0 [ 86.328025][ T7744] migrate_folio_done+0x271/0x310 [ 86.329403][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 86.330874][ T7744] migrate_pages_sync+0x131/0x910 [ 86.332320][ T7744] migrate_pages+0x19ee/0x21f0 [ 86.333670][ T7744] compact_zone+0x1f68/0x4280 [ 86.334994][ T7744] compact_node+0x1a2/0x2d0 [ 86.336273][ T7744] kcompactd+0x76e/0xde0 [ 86.337469][ T7744] kthread+0x2c1/0x3a0 [ 86.338674][ T7744] ret_from_fork+0x45/0x80 [ 86.339976][ T7744] ret_from_fork_asm+0x1a/0x30 [ 86.341256][ T7744] Modules linked in: [ 86.342292][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 86.345417][ T7744] Tainted: [B]=BAD_PAGE [ 86.346516][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.349338][ T7744] Call Trace: [ 86.350265][ T7744] [ 86.351052][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 86.352320][ T7744] bad_page+0xb3/0x1f0 [ 86.353391][ T7744] ? __pfx_bad_page+0x10/0x10 [ 86.354698][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 86.356069][ T7744] free_unref_page+0x657/0xdc0 [ 86.357337][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.358976][ T7744] ? __phys_addr+0xc6/0x150 [ 86.360247][ T7744] skb_free_head+0xa0/0x1d0 [ 86.361507][ T7744] skb_release_data+0x560/0x730 [ 86.362888][ T7744] ? packet_rcv+0x16c/0x15a0 [ 86.364181][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.365447][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 86.366785][ T7744] packet_rcv+0x16c/0x15a0 [ 86.368108][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 86.369551][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 86.371145][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.373025][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 86.374423][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.375989][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.377321][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.379111][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.380899][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.383002][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 86.384495][ T7744] ? __build_skb_around+0x278/0x3b0 [ 86.385934][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 86.387385][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.389371][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.391363][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.393016][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.394454][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.396003][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.397558][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.399104][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.400624][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.402021][ T7744] ? 0xffffffffa0006f40 [ 86.403217][ T7744] ? 0xffffffffa0006f40 [ 86.404337][ T7744] ? 0xffffffffa0006f40 [ 86.405430][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.406991][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.408554][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.410230][ T7744] ? __fget_files+0x40/0x3f0 [ 86.411454][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.413168][ T7744] ? fput+0x30/0x390 [ 86.414213][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 86.415533][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.417290][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.418595][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 86.420058][ T7744] ? __schedule+0xe5d/0x5730 [ 86.421445][ T7744] ? __fget_files+0x23a/0x3f0 [ 86.422802][ T7744] ? do_futex+0x123/0x350 [ 86.424250][ T7744] ? __pfx_do_futex+0x10/0x10 [ 86.425736][ T7744] ? xfd_validate_state+0x5d/0x180 [ 86.427173][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.428706][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.430047][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.431554][ T7744] do_syscall_64+0xcd/0x250 [ 86.432952][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.434490][ T7744] RIP: 0033:0x7f783637e719 [ 86.435663][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.440624][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.442794][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 86.444848][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.447049][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.449315][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.451411][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 86.453533][ T7744] [ 86.454564][ T7744] BUG: Bad page state in process syz.7.434 pfn:362bc [ 86.456339][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x282 pfn:0x362bc [ 86.458606][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.460622][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 86.463276][ T7744] raw: 0000000000000282 0000000000000001 00000000ffffffff 0000000000000000 [ 86.465526][ T7744] page dumped because: page_pool leak [ 86.466950][ T7744] page_owner tracks the page as allocated [ 86.468553][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060738787, free_ts 83318627508 [ 86.473705][ T7744] post_alloc_hook+0x2d1/0x350 [ 86.475014][ T7744] get_page_from_freelist+0x101e/0x3070 [ 86.476475][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 86.477874][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.479349][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.480996][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 86.482398][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 86.483754][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.485382][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.486779][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.488365][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.490419][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.491660][ T7744] do_syscall_64+0xcd/0x250 [ 86.492867][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.494469][ T7744] page last free pid 43 tgid 43 stack trace: [ 86.496209][ T7744] free_unref_page+0x5f4/0xdc0 [ 86.497648][ T7744] __folio_put+0x30d/0x3d0 [ 86.498923][ T7744] migrate_folio_done+0x271/0x310 [ 86.500523][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 86.502290][ T7744] migrate_pages_sync+0x131/0x910 [ 86.503901][ T7744] migrate_pages+0x19ee/0x21f0 [ 86.505344][ T7744] compact_zone+0x1f68/0x4280 [ 86.506613][ T7744] compact_node+0x1a2/0x2d0 [ 86.507815][ T7744] kcompactd+0x76e/0xde0 [ 86.508949][ T7744] kthread+0x2c1/0x3a0 [ 86.510089][ T7744] ret_from_fork+0x45/0x80 [ 86.511269][ T7744] ret_from_fork_asm+0x1a/0x30 [ 86.512730][ T7744] Modules linked in: [ 86.513772][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 86.516992][ T7744] Tainted: [B]=BAD_PAGE [ 86.518169][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.521202][ T7744] Call Trace: [ 86.522264][ T7744] [ 86.523518][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 86.524956][ T7744] bad_page+0xb3/0x1f0 [ 86.526084][ T7744] ? __pfx_bad_page+0x10/0x10 [ 86.527349][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 86.528784][ T7744] free_unref_page+0x657/0xdc0 [ 86.530091][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.531753][ T7744] ? __phys_addr+0xc6/0x150 [ 86.533084][ T7744] skb_free_head+0xa0/0x1d0 [ 86.534492][ T7744] skb_release_data+0x560/0x730 [ 86.535883][ T7744] ? packet_rcv+0x16c/0x15a0 [ 86.537407][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.538950][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 86.540385][ T7744] packet_rcv+0x16c/0x15a0 [ 86.541630][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 86.543212][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 86.545360][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.547095][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 86.548513][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.550218][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.551473][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.553196][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.554926][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.556749][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 86.558104][ T7744] ? __build_skb_around+0x278/0x3b0 [ 86.559420][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 86.560756][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.562575][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.564586][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.566699][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.568467][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.570477][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.572208][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.574050][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.575792][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.577206][ T7744] ? 0xffffffffa0006f40 [ 86.578272][ T7744] ? 0xffffffffa0006f40 [ 86.579441][ T7744] ? 0xffffffffa0006f40 [ 86.580677][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.582465][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.584028][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.585282][ T7744] ? __fget_files+0x40/0x3f0 [ 86.586683][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.588376][ T7744] ? fput+0x30/0x390 [ 86.589425][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 86.590682][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.592421][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.593634][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 86.594942][ T7744] ? __schedule+0xe5d/0x5730 [ 86.596184][ T7744] ? __fget_files+0x23a/0x3f0 [ 86.597447][ T7744] ? do_futex+0x123/0x350 [ 86.598655][ T7744] ? __pfx_do_futex+0x10/0x10 [ 86.599905][ T7744] ? xfd_validate_state+0x5d/0x180 [ 86.601272][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.602548][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.603900][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.605307][ T7744] do_syscall_64+0xcd/0x250 [ 86.606605][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.608183][ T7744] RIP: 0033:0x7f783637e719 [ 86.609374][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.614792][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.616985][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 86.618985][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.621213][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.623541][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.625861][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 86.628238][ T7744] [ 86.629238][ T7744] BUG: Bad page state in process syz.7.434 pfn:362bb [ 86.631255][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f40655f3 pfn:0x362bb [ 86.633760][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.635637][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 86.637964][ T7744] raw: 00000007f40655f3 0000000000000001 00000000ffffffff 0000000000000000 [ 86.640277][ T7744] page dumped because: page_pool leak [ 86.641702][ T7744] page_owner tracks the page as allocated [ 86.643387][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060734587, free_ts 83318641646 [ 86.648768][ T7744] post_alloc_hook+0x2d1/0x350 [ 86.650199][ T7744] get_page_from_freelist+0x101e/0x3070 [ 86.651755][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 86.653246][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.654790][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.656451][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 86.657920][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 86.659315][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.661051][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.662497][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.663964][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.665121][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.666432][ T7744] do_syscall_64+0xcd/0x250 [ 86.667814][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.669651][ T7744] page last free pid 43 tgid 43 stack trace: [ 86.671279][ T7744] free_unref_page+0x5f4/0xdc0 [ 86.672584][ T7744] __folio_put+0x30d/0x3d0 [ 86.673759][ T7744] migrate_folio_done+0x271/0x310 [ 86.675089][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 86.676500][ T7744] migrate_pages_sync+0x131/0x910 [ 86.677833][ T7744] migrate_pages+0x19ee/0x21f0 [ 86.679098][ T7744] compact_zone+0x1f68/0x4280 [ 86.680410][ T7744] compact_node+0x1a2/0x2d0 [ 86.681600][ T7744] kcompactd+0x76e/0xde0 [ 86.682728][ T7744] kthread+0x2c1/0x3a0 [ 86.683829][ T7744] ret_from_fork+0x45/0x80 [ 86.685017][ T7744] ret_from_fork_asm+0x1a/0x30 [ 86.686281][ T7744] Modules linked in: [ 86.687315][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 86.690843][ T7744] Tainted: [B]=BAD_PAGE [ 86.692140][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.695096][ T7744] Call Trace: [ 86.696061][ T7744] [ 86.696912][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 86.698262][ T7744] bad_page+0xb3/0x1f0 [ 86.699427][ T7744] ? __pfx_bad_page+0x10/0x10 [ 86.700719][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 86.702000][ T7744] free_unref_page+0x657/0xdc0 [ 86.703271][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.705021][ T7744] ? __phys_addr+0xc6/0x150 [ 86.706235][ T7744] skb_free_head+0xa0/0x1d0 [ 86.707446][ T7744] skb_release_data+0x560/0x730 [ 86.708737][ T7744] ? packet_rcv+0x16c/0x15a0 [ 86.709976][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.711261][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 86.712608][ T7744] packet_rcv+0x16c/0x15a0 [ 86.713892][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 86.715197][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 86.716810][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.718525][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 86.719986][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.721640][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.722831][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.724547][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.726298][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.728186][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 86.729573][ T7744] ? __build_skb_around+0x278/0x3b0 [ 86.731121][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 86.732657][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.734380][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.736117][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.737633][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.739028][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.740590][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.742134][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.743794][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.745366][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.746747][ T7744] ? 0xffffffffa0006f40 [ 86.747842][ T7744] ? 0xffffffffa0006f40 [ 86.749098][ T7744] ? 0xffffffffa0006f40 [ 86.750203][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.751783][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.753209][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.754405][ T7744] ? __fget_files+0x40/0x3f0 [ 86.755633][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.757326][ T7744] ? fput+0x30/0x390 [ 86.758446][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 86.759721][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.761288][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.762445][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 86.763711][ T7744] ? __schedule+0xe5d/0x5730 [ 86.764944][ T7744] ? __fget_files+0x23a/0x3f0 [ 86.766186][ T7744] ? do_futex+0x123/0x350 [ 86.767314][ T7744] ? __pfx_do_futex+0x10/0x10 [ 86.768559][ T7744] ? xfd_validate_state+0x5d/0x180 [ 86.769892][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.771332][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.772538][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.773904][ T7744] do_syscall_64+0xcd/0x250 [ 86.775106][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.776661][ T7744] RIP: 0033:0x7f783637e719 [ 86.777793][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.782818][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.784975][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 86.787452][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.789735][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.791925][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.794115][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 86.796214][ T7744] [ 86.797125][ T7744] BUG: Bad page state in process syz.7.434 pfn:362ba [ 86.798937][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x555d91814 pfn:0x362ba [ 86.801444][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.803400][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 86.805748][ T7744] raw: 0000000555d91814 0000000000000001 00000000ffffffff 0000000000000000 [ 86.808330][ T7744] page dumped because: page_pool leak [ 86.810222][ T7744] page_owner tracks the page as allocated [ 86.812033][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060730340, free_ts 83318655014 [ 86.816481][ T7744] post_alloc_hook+0x2d1/0x350 [ 86.817835][ T7744] get_page_from_freelist+0x101e/0x3070 [ 86.819280][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 86.820719][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.822162][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.823698][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 86.825223][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 86.827029][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 86.829651][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.831250][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.832709][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.833844][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.835017][ T7744] do_syscall_64+0xcd/0x250 [ 86.836328][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.837961][ T7744] page last free pid 43 tgid 43 stack trace: [ 86.839607][ T7744] free_unref_page+0x5f4/0xdc0 [ 86.840978][ T7744] __folio_put+0x30d/0x3d0 [ 86.842224][ T7744] migrate_folio_done+0x271/0x310 [ 86.843683][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 86.845390][ T7744] migrate_pages_sync+0x131/0x910 [ 86.846742][ T7744] migrate_pages+0x19ee/0x21f0 [ 86.848011][ T7744] compact_zone+0x1f68/0x4280 [ 86.849253][ T7744] compact_node+0x1a2/0x2d0 [ 86.850512][ T7744] kcompactd+0x76e/0xde0 [ 86.851796][ T7744] kthread+0x2c1/0x3a0 [ 86.852926][ T7744] ret_from_fork+0x45/0x80 [ 86.854185][ T7744] ret_from_fork_asm+0x1a/0x30 [ 86.855452][ T7744] Modules linked in: [ 86.856491][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 86.859604][ T7744] Tainted: [B]=BAD_PAGE [ 86.860712][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.863482][ T7744] Call Trace: [ 86.864376][ T7744] [ 86.865158][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 86.866538][ T7744] bad_page+0xb3/0x1f0 [ 86.867650][ T7744] ? __pfx_bad_page+0x10/0x10 [ 86.869052][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 86.870368][ T7744] free_unref_page+0x657/0xdc0 [ 86.871631][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 86.873380][ T7744] ? __phys_addr+0xc6/0x150 [ 86.874617][ T7744] skb_free_head+0xa0/0x1d0 [ 86.875832][ T7744] skb_release_data+0x560/0x730 [ 86.877129][ T7744] ? packet_rcv+0x16c/0x15a0 [ 86.878348][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.879625][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 86.880945][ T7744] packet_rcv+0x16c/0x15a0 [ 86.882100][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 86.883521][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 86.885316][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.886979][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 86.888308][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.889969][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.891197][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 86.892886][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 86.894554][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.896365][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 86.897922][ T7744] ? __build_skb_around+0x278/0x3b0 [ 86.899490][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 86.900977][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 86.902633][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 86.904613][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 86.906344][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 86.907903][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 86.909856][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.911641][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 86.913289][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.914030][ T7740] syz.2.430 (7740) used greatest stack depth: 21168 bytes left [ 86.914825][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 86.918328][ T7744] ? 0xffffffffa0006f40 [ 86.919413][ T7744] ? 0xffffffffa0006f40 [ 86.920484][ T7744] ? 0xffffffffa0006f40 [ 86.921581][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 86.923252][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 86.924695][ T7744] ? lock_acquire+0x2f/0xb0 [ 86.925906][ T7744] ? __fget_files+0x40/0x3f0 [ 86.927179][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.928778][ T7744] ? fput+0x30/0x390 [ 86.929837][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 86.931149][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.932803][ T7744] __sys_bpf+0xfc6/0x49a0 [ 86.934034][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 86.935328][ T7744] ? __schedule+0xe5d/0x5730 [ 86.936576][ T7744] ? __fget_files+0x23a/0x3f0 [ 86.937834][ T7744] ? do_futex+0x123/0x350 [ 86.938992][ T7744] ? __pfx_do_futex+0x10/0x10 [ 86.940266][ T7744] ? xfd_validate_state+0x5d/0x180 [ 86.941634][ T7744] ? rcu_is_watching+0x12/0xc0 [ 86.943050][ T7744] __x64_sys_bpf+0x78/0xc0 [ 86.944278][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.945661][ T7744] do_syscall_64+0xcd/0x250 [ 86.946874][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.948443][ T7744] RIP: 0033:0x7f783637e719 [ 86.949618][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.954921][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.957262][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 86.959341][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 86.961426][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 86.964016][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.966177][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 86.968331][ T7744] [ 86.969291][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b9 [ 86.971320][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x563c7b752 pfn:0x362b9 [ 86.973887][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.975740][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 86.977966][ T7744] raw: 0000000563c7b752 0000000000000001 00000000ffffffff 0000000000000000 [ 86.980259][ T7744] page dumped because: page_pool leak [ 86.981666][ T7744] page_owner tracks the page as allocated [ 86.983283][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060726100, free_ts 83318668677 [ 86.988221][ T7744] post_alloc_hook+0x2d1/0x350 [ 86.989496][ T7744] get_page_from_freelist+0x101e/0x3070 [ 86.990994][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 86.992476][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 86.993980][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 86.995553][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 86.996964][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 86.998412][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.000114][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.001529][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.002951][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.004114][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.005303][ T7744] do_syscall_64+0xcd/0x250 [ 87.006691][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.008285][ T7744] page last free pid 43 tgid 43 stack trace: [ 87.010053][ T7744] free_unref_page+0x5f4/0xdc0 [ 87.011384][ T7744] __folio_put+0x30d/0x3d0 [ 87.012739][ T7744] migrate_folio_done+0x271/0x310 [ 87.014097][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 87.015490][ T7744] migrate_pages_sync+0x131/0x910 [ 87.016822][ T7744] migrate_pages+0x19ee/0x21f0 [ 87.018124][ T7744] compact_zone+0x1f68/0x4280 [ 87.019404][ T7744] compact_node+0x1a2/0x2d0 [ 87.020775][ T7744] kcompactd+0x76e/0xde0 [ 87.021969][ T7744] kthread+0x2c1/0x3a0 [ 87.023118][ T7744] ret_from_fork+0x45/0x80 [ 87.024328][ T7744] ret_from_fork_asm+0x1a/0x30 [ 87.025651][ T7744] Modules linked in: [ 87.026908][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 87.030633][ T7744] Tainted: [B]=BAD_PAGE [ 87.031814][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.034653][ T7744] Call Trace: [ 87.035628][ T7744] [ 87.036429][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 87.037689][ T7744] bad_page+0xb3/0x1f0 [ 87.038767][ T7744] ? __pfx_bad_page+0x10/0x10 [ 87.040009][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 87.041285][ T7744] free_unref_page+0x657/0xdc0 [ 87.042541][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.044106][ T7744] ? __phys_addr+0xc6/0x150 [ 87.045296][ T7744] skb_free_head+0xa0/0x1d0 [ 87.046489][ T7744] skb_release_data+0x560/0x730 [ 87.047897][ T7744] ? packet_rcv+0x16c/0x15a0 [ 87.049170][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.050433][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 87.051771][ T7744] packet_rcv+0x16c/0x15a0 [ 87.052966][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 87.054255][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 87.055961][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.057674][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 87.059043][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.060721][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.061927][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.063591][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.065210][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.066936][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 87.068311][ T7744] ? __build_skb_around+0x278/0x3b0 [ 87.069673][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 87.071044][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.072695][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.074410][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.075868][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.077261][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.078778][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.080317][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.081850][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.084089][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.085497][ T7744] ? 0xffffffffa0006f40 [ 87.086608][ T7744] ? 0xffffffffa0006f40 [ 87.087725][ T7744] ? 0xffffffffa0006f40 [ 87.088843][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.089855][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 87.090677][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.093967][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.095171][ T7744] ? __fget_files+0x40/0x3f0 [ 87.096413][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.097946][ T7744] ? fput+0x30/0x390 [ 87.099027][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 87.100293][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.101837][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.102988][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 87.104308][ T7744] ? __schedule+0xe5d/0x5730 [ 87.105683][ T7744] ? __fget_files+0x23a/0x3f0 [ 87.107063][ T7744] ? do_futex+0x123/0x350 [ 87.108331][ T7744] ? __pfx_do_futex+0x10/0x10 [ 87.109709][ T7744] ? xfd_validate_state+0x5d/0x180 [ 87.111071][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.112487][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.113680][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.115087][ T7744] do_syscall_64+0xcd/0x250 [ 87.116347][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.117989][ T7744] RIP: 0033:0x7f783637e719 [ 87.119221][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.124936][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.127110][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 87.129298][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.131522][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.133815][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.135883][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 87.137954][ T7744] [ 87.138832][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b8 [ 87.140769][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x555d659c0 pfn:0x362b8 [ 87.143290][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.145395][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 87.147692][ T7744] raw: 0000000555d659c0 0000000000000001 00000000ffffffff 0000000000000000 [ 87.150387][ T7744] page dumped because: page_pool leak [ 87.152125][ T7744] page_owner tracks the page as allocated [ 87.153599][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060721654, free_ts 83318681633 [ 87.157857][ T7744] post_alloc_hook+0x2d1/0x350 [ 87.159111][ T7744] get_page_from_freelist+0x101e/0x3070 [ 87.160643][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 87.162024][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.163451][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.164995][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 87.166370][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 87.167715][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.169327][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.170757][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.172192][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.173332][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.174508][ T7744] do_syscall_64+0xcd/0x250 [ 87.175705][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.177261][ T7744] page last free pid 43 tgid 43 stack trace: [ 87.178822][ T7744] free_unref_page+0x5f4/0xdc0 [ 87.180131][ T7744] __folio_put+0x30d/0x3d0 [ 87.181275][ T7744] migrate_folio_done+0x271/0x310 [ 87.182598][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 87.184141][ T7744] migrate_pages_sync+0x131/0x910 [ 87.185477][ T7744] migrate_pages+0x19ee/0x21f0 [ 87.186757][ T7744] compact_zone+0x1f68/0x4280 [ 87.188034][ T7744] compact_node+0x1a2/0x2d0 [ 87.189250][ T7744] kcompactd+0x76e/0xde0 [ 87.190442][ T7744] kthread+0x2c1/0x3a0 [ 87.191528][ T7744] ret_from_fork+0x45/0x80 [ 87.192727][ T7744] ret_from_fork_asm+0x1a/0x30 [ 87.193989][ T7744] Modules linked in: [ 87.194992][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 87.198053][ T7744] Tainted: [B]=BAD_PAGE [ 87.199146][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.201924][ T7744] Call Trace: [ 87.202809][ T7744] [ 87.203582][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 87.204837][ T7744] bad_page+0xb3/0x1f0 [ 87.205908][ T7744] ? __pfx_bad_page+0x10/0x10 [ 87.207103][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 87.208313][ T7744] free_unref_page+0x657/0xdc0 [ 87.209567][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.211122][ T7744] ? __phys_addr+0xc6/0x150 [ 87.212316][ T7744] skb_free_head+0xa0/0x1d0 [ 87.213510][ T7744] skb_release_data+0x560/0x730 [ 87.214795][ T7744] ? packet_rcv+0x16c/0x15a0 [ 87.216023][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.217285][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 87.218607][ T7744] packet_rcv+0x16c/0x15a0 [ 87.219780][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 87.221071][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 87.222637][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.224342][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 87.225707][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.227394][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.228595][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.230254][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.231882][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.233640][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 87.234994][ T7744] ? __build_skb_around+0x278/0x3b0 [ 87.236374][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 87.237766][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.239411][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.241136][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.242599][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.243993][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.245521][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.247073][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.248620][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.250155][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.251543][ T7744] ? 0xffffffffa0006f40 [ 87.252938][ T7744] ? 0xffffffffa0006f40 [ 87.254095][ T7744] ? 0xffffffffa0006f40 [ 87.255189][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.256774][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.258199][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.259403][ T7744] ? __fget_files+0x40/0x3f0 [ 87.260632][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.262166][ T7744] ? fput+0x30/0x390 [ 87.263199][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 87.264493][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.266026][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.267167][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 87.268434][ T7744] ? __schedule+0xe5d/0x5730 [ 87.269654][ T7744] ? __fget_files+0x23a/0x3f0 [ 87.271121][ T7744] ? do_futex+0x123/0x350 [ 87.272368][ T7744] ? __pfx_do_futex+0x10/0x10 [ 87.273652][ T7744] ? xfd_validate_state+0x5d/0x180 [ 87.275008][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.276291][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.277633][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.279036][ T7744] do_syscall_64+0xcd/0x250 [ 87.280259][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.281799][ T7744] RIP: 0033:0x7f783637e719 [ 87.282978][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.288640][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.290913][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 87.293108][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.295155][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.297233][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.299394][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 87.301584][ T7744] [ 87.302541][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b7 [ 87.304600][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x157 pfn:0x362b7 [ 87.307266][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.309181][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 87.311468][ T7744] raw: 0000000000000157 0000000000000001 00000000ffffffff 0000000000000000 [ 87.313707][ T7744] page dumped because: page_pool leak [ 87.315100][ T7744] page_owner tracks the page as allocated [ 87.316614][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060717446, free_ts 83318766363 [ 87.321033][ T7744] post_alloc_hook+0x2d1/0x350 [ 87.322311][ T7744] get_page_from_freelist+0x101e/0x3070 [ 87.323771][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 87.325173][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.326651][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.328337][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 87.330059][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 87.331865][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.333557][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.335056][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.336565][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.337727][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.338912][ T7744] do_syscall_64+0xcd/0x250 [ 87.340204][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.341879][ T7744] page last free pid 43 tgid 43 stack trace: [ 87.343809][ T7744] free_unref_page+0x5f4/0xdc0 [ 87.345271][ T7744] __folio_put+0x30d/0x3d0 [ 87.346447][ T7744] migrate_folio_done+0x271/0x310 [ 87.347757][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 87.349144][ T7744] migrate_pages_sync+0x131/0x910 [ 87.350515][ T7744] migrate_pages+0x19ee/0x21f0 [ 87.351782][ T7744] compact_zone+0x1f68/0x4280 [ 87.353168][ T7744] compact_node+0x1a2/0x2d0 [ 87.354371][ T7744] kcompactd+0x76e/0xde0 [ 87.355488][ T7744] kthread+0x2c1/0x3a0 [ 87.356595][ T7744] ret_from_fork+0x45/0x80 [ 87.357843][ T7744] ret_from_fork_asm+0x1a/0x30 [ 87.359168][ T7744] Modules linked in: [ 87.360320][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 87.363756][ T7744] Tainted: [B]=BAD_PAGE [ 87.364887][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.367733][ T7744] Call Trace: [ 87.368739][ T7744] [ 87.369542][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 87.370820][ T7744] bad_page+0xb3/0x1f0 [ 87.371919][ T7744] ? __pfx_bad_page+0x10/0x10 [ 87.373202][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 87.374549][ T7744] free_unref_page+0x657/0xdc0 [ 87.375808][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.377422][ T7744] ? __phys_addr+0xc6/0x150 [ 87.378628][ T7744] skb_free_head+0xa0/0x1d0 [ 87.379834][ T7744] skb_release_data+0x560/0x730 [ 87.381130][ T7744] ? packet_rcv+0x16c/0x15a0 [ 87.382353][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.383613][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 87.384943][ T7744] packet_rcv+0x16c/0x15a0 [ 87.386249][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 87.387562][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 87.389164][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.391016][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 87.392486][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.394146][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.395332][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.396997][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.398607][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.400346][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 87.401712][ T7744] ? __build_skb_around+0x278/0x3b0 [ 87.403092][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 87.404482][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.406117][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.407834][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.409278][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.410614][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.412505][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.414041][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.415623][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.417186][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.418576][ T7744] ? 0xffffffffa0006f40 [ 87.419666][ T7744] ? 0xffffffffa0006f40 [ 87.420765][ T7744] ? 0xffffffffa0006f40 [ 87.421861][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.423552][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.425084][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.426362][ T7744] ? __fget_files+0x40/0x3f0 [ 87.428331][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.429869][ T7744] ? fput+0x30/0x390 [ 87.430929][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 87.432235][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.433766][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.434912][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 87.436455][ T7744] ? __schedule+0xe5d/0x5730 [ 87.437702][ T7744] ? __fget_files+0x23a/0x3f0 [ 87.438954][ T7744] ? do_futex+0x123/0x350 [ 87.440107][ T7744] ? __pfx_do_futex+0x10/0x10 [ 87.441359][ T7744] ? xfd_validate_state+0x5d/0x180 [ 87.442734][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.444070][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.445277][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.446667][ T7744] do_syscall_64+0xcd/0x250 [ 87.448187][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.449825][ T7744] RIP: 0033:0x7f783637e719 [ 87.451291][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.456470][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.458631][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 87.460702][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.462767][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.465118][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.467186][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 87.469546][ T7744] [ 87.470567][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b6 [ 87.472640][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x563c7b75c pfn:0x362b6 [ 87.475112][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.476961][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 87.479256][ T7744] raw: 0000000563c7b75c 0000000000000001 00000000ffffffff 0000000000000000 [ 87.481777][ T7744] page dumped because: page_pool leak [ 87.483515][ T7744] page_owner tracks the page as allocated [ 87.485374][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060713057, free_ts 83318784035 [ 87.489630][ T7744] post_alloc_hook+0x2d1/0x350 [ 87.490958][ T7744] get_page_from_freelist+0x101e/0x3070 [ 87.492402][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 87.494115][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.495601][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.497175][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 87.498582][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 87.500010][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.501614][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.503339][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.504800][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.506007][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.507269][ T7744] do_syscall_64+0xcd/0x250 [ 87.508565][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.510311][ T7744] page last free pid 43 tgid 43 stack trace: [ 87.511900][ T7744] free_unref_page+0x5f4/0xdc0 [ 87.513199][ T7744] __folio_put+0x30d/0x3d0 [ 87.514367][ T7744] migrate_folio_done+0x271/0x310 [ 87.515693][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 87.517143][ T7744] migrate_pages_sync+0x131/0x910 [ 87.518577][ T7744] migrate_pages+0x19ee/0x21f0 [ 87.520014][ T7744] compact_zone+0x1f68/0x4280 [ 87.521208][ T7744] compact_node+0x1a2/0x2d0 [ 87.522345][ T7744] kcompactd+0x76e/0xde0 [ 87.523539][ T7744] kthread+0x2c1/0x3a0 [ 87.524697][ T7744] ret_from_fork+0x45/0x80 [ 87.525934][ T7744] ret_from_fork_asm+0x1a/0x30 [ 87.527374][ T7744] Modules linked in: [ 87.528473][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 87.532258][ T7744] Tainted: [B]=BAD_PAGE [ 87.533516][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.536323][ T7744] Call Trace: [ 87.537241][ T7744] [ 87.538025][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 87.539299][ T7744] bad_page+0xb3/0x1f0 [ 87.540414][ T7744] ? __pfx_bad_page+0x10/0x10 [ 87.541662][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 87.543128][ T7744] free_unref_page+0x657/0xdc0 [ 87.544500][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.546206][ T7744] ? __phys_addr+0xc6/0x150 [ 87.547699][ T7744] skb_free_head+0xa0/0x1d0 [ 87.549084][ T7744] skb_release_data+0x560/0x730 [ 87.550610][ T7744] ? packet_rcv+0x16c/0x15a0 [ 87.552075][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.553391][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 87.554864][ T7744] packet_rcv+0x16c/0x15a0 [ 87.556107][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 87.557444][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 87.559031][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.560741][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 87.562123][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.563952][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.565331][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.567058][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.568702][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.570905][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 87.572408][ T7744] ? __build_skb_around+0x278/0x3b0 [ 87.573908][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 87.575404][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.577150][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.578903][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.580407][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.581803][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.583335][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.584886][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.586511][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.588033][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.589428][ T7744] ? 0xffffffffa0006f40 [ 87.590534][ T7744] ? 0xffffffffa0006f40 [ 87.591653][ T7744] ? 0xffffffffa0006f40 [ 87.592789][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.594388][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.595878][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.597088][ T7744] ? __fget_files+0x40/0x3f0 [ 87.598319][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.599865][ T7744] ? fput+0x30/0x390 [ 87.601030][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 87.602318][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.603858][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.605030][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 87.606293][ T7744] ? __schedule+0xe5d/0x5730 [ 87.607532][ T7744] ? __fget_files+0x23a/0x3f0 [ 87.608800][ T7744] ? do_futex+0x123/0x350 [ 87.609947][ T7744] ? __pfx_do_futex+0x10/0x10 [ 87.611218][ T7744] ? xfd_validate_state+0x5d/0x180 [ 87.612610][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.613870][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.615039][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.616501][ T7744] do_syscall_64+0xcd/0x250 [ 87.617747][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.619298][ T7744] RIP: 0033:0x7f783637e719 [ 87.620497][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.625744][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.627908][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 87.630057][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.632175][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.634209][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.636352][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 87.638509][ T7744] [ 87.639390][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b5 [ 87.641174][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f40655f9 pfn:0x362b5 [ 87.643583][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.645522][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 87.647836][ T7744] raw: 00000007f40655f9 0000000000000001 00000000ffffffff 0000000000000000 [ 87.650244][ T7744] page dumped because: page_pool leak [ 87.651721][ T7744] page_owner tracks the page as allocated [ 87.653247][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060708591, free_ts 83318797077 [ 87.657514][ T7744] post_alloc_hook+0x2d1/0x350 [ 87.658774][ T7744] get_page_from_freelist+0x101e/0x3070 [ 87.660261][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 87.661606][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.663001][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.664483][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 87.665833][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 87.667165][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.668695][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.670064][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.671371][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.672518][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.673641][ T7744] do_syscall_64+0xcd/0x250 [ 87.674827][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.676383][ T7744] page last free pid 43 tgid 43 stack trace: [ 87.677947][ T7744] free_unref_page+0x5f4/0xdc0 [ 87.679195][ T7744] __folio_put+0x30d/0x3d0 [ 87.680556][ T7744] migrate_folio_done+0x271/0x310 [ 87.682267][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 87.683728][ T7744] migrate_pages_sync+0x131/0x910 [ 87.685202][ T7744] migrate_pages+0x19ee/0x21f0 [ 87.686471][ T7744] compact_zone+0x1f68/0x4280 [ 87.687713][ T7744] compact_node+0x1a2/0x2d0 [ 87.689057][ T7744] kcompactd+0x76e/0xde0 [ 87.690549][ T7744] kthread+0x2c1/0x3a0 [ 87.691659][ T7744] ret_from_fork+0x45/0x80 [ 87.692877][ T7744] ret_from_fork_asm+0x1a/0x30 [ 87.694183][ T7744] Modules linked in: [ 87.695228][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 87.698303][ T7744] Tainted: [B]=BAD_PAGE [ 87.699411][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.702241][ T7744] Call Trace: [ 87.703136][ T7744] [ 87.703944][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 87.705206][ T7744] bad_page+0xb3/0x1f0 [ 87.706293][ T7744] ? __pfx_bad_page+0x10/0x10 [ 87.707537][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 87.708830][ T7744] free_unref_page+0x657/0xdc0 [ 87.710090][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.711671][ T7744] ? __phys_addr+0xc6/0x150 [ 87.712920][ T7744] skb_free_head+0xa0/0x1d0 [ 87.714134][ T7744] skb_release_data+0x560/0x730 [ 87.715428][ T7744] ? packet_rcv+0x16c/0x15a0 [ 87.716661][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.717943][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 87.719270][ T7744] packet_rcv+0x16c/0x15a0 [ 87.720462][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 87.721764][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 87.723371][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.725086][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 87.726460][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.728757][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.730159][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.732241][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.733853][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.735521][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 87.736890][ T7744] ? __build_skb_around+0x278/0x3b0 [ 87.738269][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 87.739658][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.741461][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.743408][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.744957][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.746349][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.747905][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.749566][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.751149][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.752826][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.754272][ T7744] ? 0xffffffffa0006f40 [ 87.755412][ T7744] ? 0xffffffffa0006f40 [ 87.756558][ T7744] ? 0xffffffffa0006f40 [ 87.757739][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.759361][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.760788][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.761983][ T7744] ? __fget_files+0x40/0x3f0 [ 87.763528][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.765128][ T7744] ? fput+0x30/0x390 [ 87.766303][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 87.767586][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.769149][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.770309][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 87.771587][ T7744] ? __schedule+0xe5d/0x5730 [ 87.772846][ T7744] ? __fget_files+0x23a/0x3f0 [ 87.774173][ T7744] ? do_futex+0x123/0x350 [ 87.775432][ T7744] ? __pfx_do_futex+0x10/0x10 [ 87.776820][ T7744] ? xfd_validate_state+0x5d/0x180 [ 87.778271][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.779590][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.780914][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.782411][ T7744] do_syscall_64+0xcd/0x250 [ 87.783722][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.785647][ T7744] RIP: 0033:0x7f783637e719 [ 87.787034][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.792624][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.795012][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 87.797080][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.799126][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.801279][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.803348][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 87.805667][ T7744] [ 87.806846][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b4 [ 87.808839][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xea pfn:0x362b4 [ 87.811704][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.813916][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 87.816308][ T7744] raw: 00000000000000ea 0000000000000001 00000000ffffffff 0000000000000000 [ 87.818695][ T7744] page dumped because: page_pool leak [ 87.820192][ T7744] page_owner tracks the page as allocated [ 87.821668][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060704421, free_ts 83318810011 [ 87.826031][ T7744] post_alloc_hook+0x2d1/0x350 [ 87.827187][ T7744] get_page_from_freelist+0x101e/0x3070 [ 87.828667][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 87.830194][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.831783][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.833459][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 87.834837][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 87.836377][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 87.838113][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.839567][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.841046][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.842185][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.843364][ T7744] do_syscall_64+0xcd/0x250 [ 87.844720][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.846368][ T7744] page last free pid 43 tgid 43 stack trace: [ 87.848008][ T7744] free_unref_page+0x5f4/0xdc0 [ 87.849261][ T7744] __folio_put+0x30d/0x3d0 [ 87.850769][ T7744] migrate_folio_done+0x271/0x310 [ 87.852373][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 87.853785][ T7744] migrate_pages_sync+0x131/0x910 [ 87.855117][ T7744] migrate_pages+0x19ee/0x21f0 [ 87.856405][ T7744] compact_zone+0x1f68/0x4280 [ 87.857625][ T7744] compact_node+0x1a2/0x2d0 [ 87.858837][ T7744] kcompactd+0x76e/0xde0 [ 87.860038][ T7744] kthread+0x2c1/0x3a0 [ 87.861125][ T7744] ret_from_fork+0x45/0x80 [ 87.862502][ T7744] ret_from_fork_asm+0x1a/0x30 [ 87.863775][ T7744] Modules linked in: [ 87.864855][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 87.868116][ T7744] Tainted: [B]=BAD_PAGE [ 87.869216][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.872168][ T7744] Call Trace: [ 87.873060][ T7744] [ 87.873849][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 87.875100][ T7744] bad_page+0xb3/0x1f0 [ 87.876202][ T7744] ? __pfx_bad_page+0x10/0x10 [ 87.877577][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 87.878885][ T7744] free_unref_page+0x657/0xdc0 [ 87.880276][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 87.881878][ T7744] ? __phys_addr+0xc6/0x150 [ 87.883264][ T7744] skb_free_head+0xa0/0x1d0 [ 87.884554][ T7744] skb_release_data+0x560/0x730 [ 87.885869][ T7744] ? packet_rcv+0x16c/0x15a0 [ 87.887107][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.888411][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 87.889750][ T7744] packet_rcv+0x16c/0x15a0 [ 87.890943][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 87.892265][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 87.893854][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 87.895559][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 87.897056][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.898746][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.899957][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 87.901615][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 87.903216][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 87.904965][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 87.906330][ T7744] ? __build_skb_around+0x278/0x3b0 [ 87.907696][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 87.909092][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 87.910796][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 87.912533][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 87.913994][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 87.915371][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 87.916893][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.918424][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 87.919961][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 87.921494][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 87.922872][ T7744] ? 0xffffffffa0006f40 [ 87.923972][ T7744] ? 0xffffffffa0006f40 [ 87.925041][ T7744] ? 0xffffffffa0006f40 [ 87.926122][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 87.927796][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 87.929347][ T7744] ? lock_acquire+0x2f/0xb0 [ 87.930530][ T7744] ? __fget_files+0x40/0x3f0 [ 87.931916][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.933491][ T7744] ? fput+0x30/0x390 [ 87.934534][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 87.935802][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 87.937461][ T7744] __sys_bpf+0xfc6/0x49a0 [ 87.938661][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 87.940005][ T7744] ? __schedule+0xe5d/0x5730 [ 87.941232][ T7744] ? __fget_files+0x23a/0x3f0 [ 87.942510][ T7744] ? do_futex+0x123/0x350 [ 87.943654][ T7744] ? __pfx_do_futex+0x10/0x10 [ 87.944916][ T7744] ? xfd_validate_state+0x5d/0x180 [ 87.946616][ T7744] ? rcu_is_watching+0x12/0xc0 [ 87.947876][ T7744] __x64_sys_bpf+0x78/0xc0 [ 87.949124][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.950523][ T7744] do_syscall_64+0xcd/0x250 [ 87.951752][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.953339][ T7744] RIP: 0033:0x7f783637e719 [ 87.954519][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.959518][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.961691][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 87.963734][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 87.965831][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 87.968191][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.970382][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 87.972483][ T7744] [ 87.973409][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b3 [ 87.975170][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x555d659be pfn:0x362b3 [ 87.977914][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.979847][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 87.982427][ T7744] raw: 0000000555d659be 0000000000000001 00000000ffffffff 0000000000000000 [ 87.984980][ T7744] page dumped because: page_pool leak [ 87.986418][ T7744] page_owner tracks the page as allocated [ 87.987942][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060700155, free_ts 83318822334 [ 87.992723][ T7744] post_alloc_hook+0x2d1/0x350 [ 87.993994][ T7744] get_page_from_freelist+0x101e/0x3070 [ 87.995454][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 87.996856][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 87.998306][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 87.999982][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 88.001369][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 88.002718][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.004530][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.005937][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.007508][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.008711][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.009953][ T7744] do_syscall_64+0xcd/0x250 [ 88.011166][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.012737][ T7744] page last free pid 43 tgid 43 stack trace: [ 88.014314][ T7744] free_unref_page+0x5f4/0xdc0 [ 88.015591][ T7744] __folio_put+0x30d/0x3d0 [ 88.016881][ T7744] migrate_folio_done+0x271/0x310 [ 88.018220][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 88.019612][ T7744] migrate_pages_sync+0x131/0x910 [ 88.021022][ T7744] migrate_pages+0x19ee/0x21f0 [ 88.022284][ T7744] compact_zone+0x1f68/0x4280 [ 88.023519][ T7744] compact_node+0x1a2/0x2d0 [ 88.024743][ T7744] kcompactd+0x76e/0xde0 [ 88.025865][ T7744] kthread+0x2c1/0x3a0 [ 88.026932][ T7744] ret_from_fork+0x45/0x80 [ 88.028101][ T7744] ret_from_fork_asm+0x1a/0x30 [ 88.029365][ T7744] Modules linked in: [ 88.030448][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 88.033567][ T7744] Tainted: [B]=BAD_PAGE [ 88.034646][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.037434][ T7744] Call Trace: [ 88.038324][ T7744] [ 88.039099][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 88.040406][ T7744] bad_page+0xb3/0x1f0 [ 88.041476][ T7744] ? __pfx_bad_page+0x10/0x10 [ 88.042808][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 88.044185][ T7744] free_unref_page+0x657/0xdc0 [ 88.045449][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.047132][ T7744] ? __phys_addr+0xc6/0x150 [ 88.048351][ T7744] skb_free_head+0xa0/0x1d0 [ 88.049584][ T7744] skb_release_data+0x560/0x730 [ 88.051070][ T7744] ? packet_rcv+0x16c/0x15a0 [ 88.052395][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.053700][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 88.055030][ T7744] packet_rcv+0x16c/0x15a0 [ 88.056221][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 88.057507][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 88.059099][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.060844][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 88.062205][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.063857][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.065065][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.066717][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.068511][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.070256][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 88.071625][ T7744] ? __build_skb_around+0x278/0x3b0 [ 88.073118][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 88.074567][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.076216][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.077950][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.079425][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.080821][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.082353][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.083893][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.085443][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.086964][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.088352][ T7744] ? 0xffffffffa0006f40 [ 88.089441][ T7744] ? 0xffffffffa0006f40 [ 88.090527][ T7744] ? 0xffffffffa0006f40 [ 88.091621][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.093183][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.094599][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.095788][ T7744] ? __fget_files+0x40/0x3f0 [ 88.097032][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.098493][ T7744] ? fput+0x30/0x390 [ 88.099525][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 88.100783][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.102261][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.103343][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 88.104541][ T7744] ? __schedule+0xe5d/0x5730 [ 88.106012][ T7744] ? __fget_files+0x23a/0x3f0 [ 88.107169][ T7744] ? do_futex+0x123/0x350 [ 88.108415][ T7744] ? __pfx_do_futex+0x10/0x10 [ 88.109789][ T7744] ? xfd_validate_state+0x5d/0x180 [ 88.111223][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.112480][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.113639][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.115015][ T7744] do_syscall_64+0xcd/0x250 [ 88.116254][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.117823][ T7744] RIP: 0033:0x7f783637e719 [ 88.119026][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.124254][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.126411][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 88.128590][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.129750][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 88.130658][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.134574][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.136633][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 88.138697][ T7744] [ 88.139605][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b2 [ 88.141409][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x362b2 [ 88.143696][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.145939][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 88.148308][ T7744] raw: 000000000000002f 0000000000000001 00000000ffffffff 0000000000000000 [ 88.150933][ T7744] page dumped because: page_pool leak [ 88.152346][ T7744] page_owner tracks the page as allocated [ 88.153864][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060695965, free_ts 83318836377 [ 88.158243][ T7744] post_alloc_hook+0x2d1/0x350 [ 88.159520][ T7744] get_page_from_freelist+0x101e/0x3070 [ 88.161045][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 88.162574][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.164284][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.165885][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 88.167551][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 88.169326][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.171141][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.172688][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.174098][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.175233][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.176408][ T7744] do_syscall_64+0xcd/0x250 [ 88.177618][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.179169][ T7744] page last free pid 43 tgid 43 stack trace: [ 88.180792][ T7744] free_unref_page+0x5f4/0xdc0 [ 88.182039][ T7744] __folio_put+0x30d/0x3d0 [ 88.183200][ T7744] migrate_folio_done+0x271/0x310 [ 88.184525][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 88.185908][ T7744] migrate_pages_sync+0x131/0x910 [ 88.187217][ T7744] migrate_pages+0x19ee/0x21f0 [ 88.188488][ T7744] compact_zone+0x1f68/0x4280 [ 88.189785][ T7744] compact_node+0x1a2/0x2d0 [ 88.190978][ T7744] kcompactd+0x76e/0xde0 [ 88.192107][ T7744] kthread+0x2c1/0x3a0 [ 88.193171][ T7744] ret_from_fork+0x45/0x80 [ 88.194325][ T7744] ret_from_fork_asm+0x1a/0x30 [ 88.195571][ T7744] Modules linked in: [ 88.196608][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 88.199687][ T7744] Tainted: [B]=BAD_PAGE [ 88.200771][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.203733][ T7744] Call Trace: [ 88.204876][ T7744] [ 88.205705][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 88.207097][ T7744] bad_page+0xb3/0x1f0 [ 88.208199][ T7744] ? __pfx_bad_page+0x10/0x10 [ 88.209432][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 88.210718][ T7744] free_unref_page+0x657/0xdc0 [ 88.212000][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.213581][ T7744] ? __phys_addr+0xc6/0x150 [ 88.214773][ T7744] skb_free_head+0xa0/0x1d0 [ 88.215981][ T7744] skb_release_data+0x560/0x730 [ 88.217257][ T7744] ? packet_rcv+0x16c/0x15a0 [ 88.218475][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.219726][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 88.221044][ T7744] packet_rcv+0x16c/0x15a0 [ 88.222224][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 88.223738][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 88.225477][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.227391][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 88.228911][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.230705][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.231964][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.233629][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.235262][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.237025][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 88.238404][ T7744] ? __build_skb_around+0x278/0x3b0 [ 88.239886][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 88.241310][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.242959][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.245072][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.246569][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.248179][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.249895][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.251734][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.253380][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.255127][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.256513][ T7744] ? 0xffffffffa0006f40 [ 88.257648][ T7744] ? 0xffffffffa0006f40 [ 88.258839][ T7744] ? 0xffffffffa0006f40 [ 88.260035][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.261734][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.263662][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.265477][ T7744] ? __fget_files+0x40/0x3f0 [ 88.266810][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.268372][ T7744] ? fput+0x30/0x390 [ 88.269414][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 88.270711][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.272292][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.273448][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 88.274821][ T7744] ? __schedule+0xe5d/0x5730 [ 88.276077][ T7744] ? __fget_files+0x23a/0x3f0 [ 88.277318][ T7744] ? do_futex+0x123/0x350 [ 88.278461][ T7744] ? __pfx_do_futex+0x10/0x10 [ 88.279709][ T7744] ? xfd_validate_state+0x5d/0x180 [ 88.281068][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.282457][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.283662][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.285050][ T7744] do_syscall_64+0xcd/0x250 [ 88.286246][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.287905][ T7744] RIP: 0033:0x7f783637e719 [ 88.289123][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.294100][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.296357][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 88.298449][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.300651][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.303010][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.305248][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 88.307338][ T7744] [ 88.308424][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b1 [ 88.310412][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x362b1 [ 88.312780][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.314703][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 88.316942][ T7744] raw: 000000000000002e 0000000000000001 00000000ffffffff 0000000000000000 [ 88.319174][ T7744] page dumped because: page_pool leak [ 88.320634][ T7744] page_owner tracks the page as allocated [ 88.322112][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060691575, free_ts 83318848463 [ 88.326475][ T7744] post_alloc_hook+0x2d1/0x350 [ 88.328146][ T7744] get_page_from_freelist+0x101e/0x3070 [ 88.329889][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 88.331382][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.332948][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.334509][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 88.335897][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 88.337279][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.338964][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.340607][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.342201][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.343479][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.344747][ T7744] do_syscall_64+0xcd/0x250 [ 88.346017][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.347643][ T7744] page last free pid 43 tgid 43 stack trace: [ 88.349226][ T7744] free_unref_page+0x5f4/0xdc0 [ 88.350677][ T7744] __folio_put+0x30d/0x3d0 [ 88.351878][ T7744] migrate_folio_done+0x271/0x310 [ 88.353408][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 88.354857][ T7744] migrate_pages_sync+0x131/0x910 [ 88.356203][ T7744] migrate_pages+0x19ee/0x21f0 [ 88.357474][ T7744] compact_zone+0x1f68/0x4280 [ 88.358732][ T7744] compact_node+0x1a2/0x2d0 [ 88.360016][ T7744] kcompactd+0x76e/0xde0 [ 88.361140][ T7744] kthread+0x2c1/0x3a0 [ 88.362337][ T7744] ret_from_fork+0x45/0x80 [ 88.363510][ T7744] ret_from_fork_asm+0x1a/0x30 [ 88.364789][ T7744] Modules linked in: [ 88.365973][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 88.369456][ T7744] Tainted: [B]=BAD_PAGE [ 88.370591][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.373505][ T7744] Call Trace: [ 88.374390][ T7744] [ 88.375167][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 88.376416][ T7744] bad_page+0xb3/0x1f0 [ 88.377496][ T7744] ? __pfx_bad_page+0x10/0x10 [ 88.378747][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 88.380034][ T7744] free_unref_page+0x657/0xdc0 [ 88.381292][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.382868][ T7744] ? __phys_addr+0xc6/0x150 [ 88.384367][ T7744] skb_free_head+0xa0/0x1d0 [ 88.385571][ T7744] skb_release_data+0x560/0x730 [ 88.386858][ T7744] ? packet_rcv+0x16c/0x15a0 [ 88.388081][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.389463][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 88.390813][ T7744] packet_rcv+0x16c/0x15a0 [ 88.392033][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 88.393230][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 88.394783][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.396486][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 88.397860][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.399505][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.400702][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.402352][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.403976][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.405708][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 88.407068][ T7744] ? __build_skb_around+0x278/0x3b0 [ 88.408451][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 88.409834][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.411465][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.413233][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.414694][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.416089][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.417613][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.419267][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.420853][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.422379][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.423789][ T7744] ? 0xffffffffa0006f40 [ 88.424892][ T7744] ? 0xffffffffa0006f40 [ 88.425992][ T7744] ? 0xffffffffa0006f40 [ 88.427079][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.428636][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.430032][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.431225][ T7744] ? __fget_files+0x40/0x3f0 [ 88.432458][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.433909][ T7744] ? fput+0x30/0x390 [ 88.434910][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 88.436112][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.437575][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.438688][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 88.439893][ T7744] ? __schedule+0xe5d/0x5730 [ 88.441083][ T7744] ? __fget_files+0x23a/0x3f0 [ 88.442246][ T7744] ? do_futex+0x123/0x350 [ 88.443359][ T7744] ? __pfx_do_futex+0x10/0x10 [ 88.444550][ T7744] ? xfd_validate_state+0x5d/0x180 [ 88.445847][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.447054][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.448210][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.449529][ T7744] do_syscall_64+0xcd/0x250 [ 88.450674][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.452194][ T7744] RIP: 0033:0x7f783637e719 [ 88.453351][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.458241][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.460396][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 88.462441][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.464857][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.466907][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.468956][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 88.471003][ T7744] [ 88.471945][ T7744] BUG: Bad page state in process syz.7.434 pfn:362b0 [ 88.473697][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f40655f7 pfn:0x362b0 [ 88.476149][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.478006][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 88.480282][ T7744] raw: 00000007f40655f7 0000000000000001 00000000ffffffff 0000000000000000 [ 88.482487][ T7744] page dumped because: page_pool leak [ 88.483885][ T7744] page_owner tracks the page as allocated [ 88.485370][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060687185, free_ts 83318860669 [ 88.489616][ T7744] post_alloc_hook+0x2d1/0x350 [ 88.490943][ T7744] get_page_from_freelist+0x101e/0x3070 [ 88.492402][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 88.493787][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.495232][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.496781][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 88.498143][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 88.499367][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.501076][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.502455][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.504038][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.505278][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.506482][ T7744] do_syscall_64+0xcd/0x250 [ 88.507665][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.509212][ T7744] page last free pid 43 tgid 43 stack trace: [ 88.510854][ T7744] free_unref_page+0x5f4/0xdc0 [ 88.512281][ T7744] __folio_put+0x30d/0x3d0 [ 88.513463][ T7744] migrate_folio_done+0x271/0x310 [ 88.514794][ T7744] migrate_pages_batch+0x1d66/0x31b0 [ 88.516195][ T7744] migrate_pages_sync+0x131/0x910 [ 88.517525][ T7744] migrate_pages+0x19ee/0x21f0 [ 88.518769][ T7744] compact_zone+0x1f68/0x4280 [ 88.520052][ T7744] compact_node+0x1a2/0x2d0 [ 88.521253][ T7744] kcompactd+0x76e/0xde0 [ 88.522376][ T7744] kthread+0x2c1/0x3a0 [ 88.523443][ T7744] ret_from_fork+0x45/0x80 [ 88.524614][ T7744] ret_from_fork_asm+0x1a/0x30 [ 88.525875][ T7744] Modules linked in: [ 88.526898][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 88.530039][ T7744] Tainted: [B]=BAD_PAGE [ 88.531280][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.534087][ T7744] Call Trace: [ 88.535028][ T7744] [ 88.535819][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 88.537150][ T7744] bad_page+0xb3/0x1f0 [ 88.538228][ T7744] ? __pfx_bad_page+0x10/0x10 [ 88.539460][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 88.540785][ T7744] free_unref_page+0x657/0xdc0 [ 88.542059][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.543644][ T7744] ? __phys_addr+0xc6/0x150 [ 88.544954][ T7744] skb_free_head+0xa0/0x1d0 [ 88.546292][ T7744] skb_release_data+0x560/0x730 [ 88.547581][ T7744] ? packet_rcv+0x16c/0x15a0 [ 88.548825][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.550076][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 88.551463][ T7744] packet_rcv+0x16c/0x15a0 [ 88.552679][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 88.553967][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 88.555652][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.557446][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 88.558892][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.560828][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.562231][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.564186][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.565969][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.567796][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 88.569144][ T7744] ? __build_skb_around+0x278/0x3b0 [ 88.570507][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 88.571906][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.573480][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.575185][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.576658][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.578079][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.579595][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.581147][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.582683][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.584224][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.585600][ T7744] ? 0xffffffffa0006f40 [ 88.586688][ T7744] ? 0xffffffffa0006f40 [ 88.587778][ T7744] ? 0xffffffffa0006f40 [ 88.588867][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.590431][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.591840][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.593003][ T7744] ? __fget_files+0x40/0x3f0 [ 88.594193][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.595687][ T7744] ? fput+0x30/0x390 [ 88.596742][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 88.597929][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.599449][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.600563][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 88.601820][ T7744] ? __schedule+0xe5d/0x5730 [ 88.603006][ T7744] ? __fget_files+0x23a/0x3f0 [ 88.604251][ T7744] ? do_futex+0x123/0x350 [ 88.605392][ T7744] ? __pfx_do_futex+0x10/0x10 [ 88.606632][ T7744] ? xfd_validate_state+0x5d/0x180 [ 88.608010][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.609381][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.610652][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.612165][ T7744] do_syscall_64+0xcd/0x250 [ 88.613463][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.615152][ T7744] RIP: 0033:0x7f783637e719 [ 88.616424][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.621484][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.623636][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 88.625812][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.627908][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.630005][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.632101][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 88.634158][ T7744] [ 88.635166][ T7744] BUG: Bad page state in process syz.7.434 pfn:4e81f [ 88.637182][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x532 pfn:0x4e81f [ 88.639960][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.641966][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 88.644203][ T7744] raw: 0000000000000532 0000000000000001 00000000ffffffff 0000000000000000 [ 88.646408][ T7744] page dumped because: page_pool leak [ 88.647794][ T7744] page_owner tracks the page as allocated [ 88.649223][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060682632, free_ts 84020025899 [ 88.653775][ T7744] post_alloc_hook+0x2d1/0x350 [ 88.655006][ T7744] get_page_from_freelist+0x101e/0x3070 [ 88.656453][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 88.657847][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.659353][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.660990][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 88.662459][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 88.664208][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.666079][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.667648][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.669334][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.670574][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.671777][ T7744] do_syscall_64+0xcd/0x250 [ 88.673095][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.674654][ T7744] page last free pid 5360 tgid 5360 stack trace: [ 88.676314][ T7744] free_unref_page+0x5f4/0xdc0 [ 88.677576][ T7744] __put_partials+0x14c/0x170 [ 88.678822][ T7744] qlist_free_all+0x4e/0x120 [ 88.680097][ T7744] kasan_quarantine_reduce+0x192/0x1e0 [ 88.681521][ T7744] __kasan_slab_alloc+0x69/0x90 [ 88.682813][ T7744] kmem_cache_alloc_noprof+0x121/0x2f0 [ 88.684254][ T7744] getname_flags.part.0+0x4c/0x550 [ 88.685609][ T7744] getname+0x8d/0xe0 [ 88.686651][ T7744] do_sys_openat2+0x104/0x1e0 [ 88.688136][ T7744] __x64_sys_openat+0x175/0x210 [ 88.689520][ T7744] do_syscall_64+0xcd/0x250 [ 88.690857][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.692534][ T7744] Modules linked in: [ 88.693580][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 88.696685][ T7744] Tainted: [B]=BAD_PAGE [ 88.697778][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.700586][ T7744] Call Trace: [ 88.701492][ T7744] [ 88.702287][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 88.703648][ T7744] bad_page+0xb3/0x1f0 [ 88.704850][ T7744] ? __pfx_bad_page+0x10/0x10 [ 88.706091][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 88.707422][ T7744] free_unref_page+0x657/0xdc0 [ 88.708859][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.710694][ T7744] ? __phys_addr+0xc6/0x150 [ 88.712076][ T7744] skb_free_head+0xa0/0x1d0 [ 88.713354][ T7744] skb_release_data+0x560/0x730 [ 88.714666][ T7744] ? packet_rcv+0x16c/0x15a0 [ 88.715891][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.717172][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 88.718499][ T7744] packet_rcv+0x16c/0x15a0 [ 88.719673][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 88.720979][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 88.722546][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.724251][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 88.725634][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.727289][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.728466][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.730097][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.731716][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.733458][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 88.734819][ T7744] ? __build_skb_around+0x278/0x3b0 [ 88.736181][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 88.737559][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.739168][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.740898][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.742357][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.743728][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.745243][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.746777][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.748314][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.749832][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.751204][ T7744] ? 0xffffffffa0006f40 [ 88.752308][ T7744] ? 0xffffffffa0006f40 [ 88.753394][ T7744] ? 0xffffffffa0006f40 [ 88.754482][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.756045][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.757446][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.758617][ T7744] ? __fget_files+0x40/0x3f0 [ 88.759827][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.761365][ T7744] ? fput+0x30/0x390 [ 88.762394][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 88.763649][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.765276][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.766437][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 88.767728][ T7744] ? __schedule+0xe5d/0x5730 [ 88.768961][ T7744] ? __fget_files+0x23a/0x3f0 [ 88.770198][ T7744] ? do_futex+0x123/0x350 [ 88.771336][ T7744] ? __pfx_do_futex+0x10/0x10 [ 88.772593][ T7744] ? xfd_validate_state+0x5d/0x180 [ 88.773935][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.775207][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.776490][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.777860][ T7744] do_syscall_64+0xcd/0x250 [ 88.779024][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.780597][ T7744] RIP: 0033:0x7f783637e719 [ 88.781768][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.786777][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.788871][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 88.790914][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.793005][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.795047][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.797110][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 88.799199][ T7744] [ 88.800123][ T7744] BUG: Bad page state in process syz.7.434 pfn:4e81e [ 88.801818][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x531 pfn:0x4e81e [ 88.803983][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.805716][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 88.807859][ T7744] raw: 0000000000000531 0000000000000001 00000000ffffffff 0000000000000000 [ 88.810109][ T7744] page dumped because: page_pool leak [ 88.811478][ T7744] page_owner tracks the page as allocated [ 88.812961][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060677160, free_ts 84020025899 [ 88.817062][ T7744] post_alloc_hook+0x2d1/0x350 [ 88.818304][ T7744] get_page_from_freelist+0x101e/0x3070 [ 88.819804][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 88.821212][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.822659][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.824214][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 88.825615][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 88.826969][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.828582][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.830023][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.831470][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.832632][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.833814][ T7744] do_syscall_64+0xcd/0x250 [ 88.835014][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.836568][ T7744] page last free pid 5360 tgid 5360 stack trace: [ 88.838206][ T7744] free_unref_page+0x5f4/0xdc0 [ 88.839464][ T7744] __put_partials+0x14c/0x170 [ 88.840761][ T7744] qlist_free_all+0x4e/0x120 [ 88.841979][ T7744] kasan_quarantine_reduce+0x192/0x1e0 [ 88.843402][ T7744] __kasan_slab_alloc+0x69/0x90 [ 88.844647][ T7744] kmem_cache_alloc_noprof+0x121/0x2f0 [ 88.846064][ T7744] getname_flags.part.0+0x4c/0x550 [ 88.847697][ T7744] getname+0x8d/0xe0 [ 88.848726][ T7744] do_sys_openat2+0x104/0x1e0 [ 88.850037][ T7744] __x64_sys_openat+0x175/0x210 [ 88.851334][ T7744] do_syscall_64+0xcd/0x250 [ 88.852660][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.854244][ T7744] Modules linked in: [ 88.855322][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 88.858462][ T7744] Tainted: [B]=BAD_PAGE [ 88.859562][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.862341][ T7744] Call Trace: [ 88.863350][ T7744] [ 88.864160][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 88.865434][ T7744] bad_page+0xb3/0x1f0 [ 88.866526][ T7744] ? __pfx_bad_page+0x10/0x10 [ 88.867780][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 88.869082][ T7744] free_unref_page+0x657/0xdc0 [ 88.870360][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 88.871965][ T7744] ? __phys_addr+0xc6/0x150 [ 88.873262][ T7744] skb_free_head+0xa0/0x1d0 [ 88.874481][ T7744] skb_release_data+0x560/0x730 [ 88.875775][ T7744] ? packet_rcv+0x16c/0x15a0 [ 88.877007][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.878252][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 88.879583][ T7744] packet_rcv+0x16c/0x15a0 [ 88.880764][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 88.882039][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 88.883602][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 88.885306][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 88.886738][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.888468][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.889665][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 88.891339][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 88.892962][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 88.894668][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 88.896045][ T7744] ? __build_skb_around+0x278/0x3b0 [ 88.897403][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 88.898819][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 88.900442][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 88.902150][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 88.903607][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.904999][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 88.906521][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.908364][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 88.910030][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.911563][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 88.912959][ T7744] ? 0xffffffffa0006f40 [ 88.914042][ T7744] ? 0xffffffffa0006f40 [ 88.915135][ T7744] ? 0xffffffffa0006f40 [ 88.916243][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 88.917794][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.919204][ T7744] ? lock_acquire+0x2f/0xb0 [ 88.920396][ T7744] ? __fget_files+0x40/0x3f0 [ 88.921613][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.923133][ T7744] ? fput+0x30/0x390 [ 88.924317][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 88.925582][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.927699][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.928935][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 88.930330][ T7744] ? __schedule+0xe5d/0x5730 [ 88.931562][ T7744] ? __fget_files+0x23a/0x3f0 [ 88.932880][ T7744] ? do_futex+0x123/0x350 [ 88.933992][ T7744] ? __pfx_do_futex+0x10/0x10 [ 88.935279][ T7744] ? xfd_validate_state+0x5d/0x180 [ 88.936618][ T7744] ? rcu_is_watching+0x12/0xc0 [ 88.937814][ T7744] __x64_sys_bpf+0x78/0xc0 [ 88.938986][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.940370][ T7744] do_syscall_64+0xcd/0x250 [ 88.941566][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.943190][ T7744] RIP: 0033:0x7f783637e719 [ 88.944358][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.949973][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.952335][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 88.954633][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 88.956825][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 88.958880][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.960954][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 88.963002][ T7744] [ 88.963859][ T7744] BUG: Bad page state in process syz.7.434 pfn:4e81d [ 88.965614][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x4e81d [ 88.967930][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.970259][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 88.972782][ T7744] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000 [ 88.975037][ T7744] page dumped because: page_pool leak [ 88.976573][ T7744] page_owner tracks the page as allocated [ 88.978199][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060672082, free_ts 84020025899 [ 88.982973][ T7744] post_alloc_hook+0x2d1/0x350 [ 88.984289][ T7744] get_page_from_freelist+0x101e/0x3070 [ 88.985921][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 88.987356][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 88.988855][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 88.990825][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 88.992451][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 88.993819][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 88.995449][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 88.996855][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 88.998267][ T7744] __sys_bpf+0xfc6/0x49a0 [ 88.999404][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.000646][ T7744] do_syscall_64+0xcd/0x250 [ 89.001869][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.003410][ T7744] page last free pid 5360 tgid 5360 stack trace: [ 89.005070][ T7744] free_unref_page+0x5f4/0xdc0 [ 89.006331][ T7744] __put_partials+0x14c/0x170 [ 89.007666][ T7744] qlist_free_all+0x4e/0x120 [ 89.009171][ T7744] kasan_quarantine_reduce+0x192/0x1e0 [ 89.010695][ T7744] __kasan_slab_alloc+0x69/0x90 [ 89.012019][ T7744] kmem_cache_alloc_noprof+0x121/0x2f0 [ 89.013649][ T7744] getname_flags.part.0+0x4c/0x550 [ 89.015124][ T7744] getname+0x8d/0xe0 [ 89.016221][ T7744] do_sys_openat2+0x104/0x1e0 [ 89.017466][ T7744] __x64_sys_openat+0x175/0x210 [ 89.018751][ T7744] do_syscall_64+0xcd/0x250 [ 89.020022][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.021566][ T7744] Modules linked in: [ 89.022593][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 89.025700][ T7744] Tainted: [B]=BAD_PAGE [ 89.026813][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.029614][ T7744] Call Trace: [ 89.030545][ T7744] [ 89.031365][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.032714][ T7744] bad_page+0xb3/0x1f0 [ 89.033841][ T7744] ? __pfx_bad_page+0x10/0x10 [ 89.035130][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 89.036545][ T7744] free_unref_page+0x657/0xdc0 [ 89.037923][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.039643][ T7744] ? __phys_addr+0xc6/0x150 [ 89.040853][ T7744] skb_free_head+0xa0/0x1d0 [ 89.042052][ T7744] skb_release_data+0x560/0x730 [ 89.043322][ T7744] ? packet_rcv+0x16c/0x15a0 [ 89.044513][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.045762][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 89.047068][ T7744] packet_rcv+0x16c/0x15a0 [ 89.048256][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 89.049538][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 89.051118][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.052852][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 89.054204][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.055841][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.057037][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.058681][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 89.060295][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.061991][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 89.063335][ T7744] ? __build_skb_around+0x278/0x3b0 [ 89.064701][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 89.066070][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 89.067851][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 89.069888][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 89.071799][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.073642][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.075637][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.077646][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.079436][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.080940][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 89.082581][ T7744] ? 0xffffffffa0006f40 [ 89.083685][ T7744] ? 0xffffffffa0006f40 [ 89.084827][ T7744] ? 0xffffffffa0006f40 [ 89.085915][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.087473][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.088902][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.090083][ T7744] ? __fget_files+0x40/0x3f0 [ 89.091561][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.093112][ T7744] ? fput+0x30/0x390 [ 89.094095][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 89.095299][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.096832][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.097921][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 89.099163][ T7744] ? __schedule+0xe5d/0x5730 [ 89.100398][ T7744] ? __fget_files+0x23a/0x3f0 [ 89.101595][ T7744] ? do_futex+0x123/0x350 [ 89.102703][ T7744] ? __pfx_do_futex+0x10/0x10 [ 89.103888][ T7744] ? xfd_validate_state+0x5d/0x180 [ 89.105583][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.106989][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.108242][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.109634][ T7744] do_syscall_64+0xcd/0x250 [ 89.111111][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.112820][ T7744] RIP: 0033:0x7f783637e719 [ 89.114247][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.119816][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.122312][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 89.124386][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.126505][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 89.128547][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.130507][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 89.132602][ T7744] [ 89.133484][ T7744] BUG: Bad page state in process syz.7.434 pfn:4e81c [ 89.135237][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e81fc00 pfn:0x4e81c [ 89.137869][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.139814][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 89.142058][ T7744] raw: ffff88804e81fc00 0000000000000001 00000000ffffffff 0000000000000000 [ 89.144305][ T7744] page dumped because: page_pool leak [ 89.145718][ T7744] page_owner tracks the page as allocated [ 89.147219][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060667050, free_ts 84020025899 [ 89.151942][ T7744] post_alloc_hook+0x2d1/0x350 [ 89.153341][ T7744] get_page_from_freelist+0x101e/0x3070 [ 89.154976][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 89.156558][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 89.158160][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 89.159887][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 89.161389][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 89.162788][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 89.164464][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.165796][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.167168][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.168276][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.169411][ T7744] do_syscall_64+0xcd/0x250 [ 89.169811][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 89.170609][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.174242][ T7744] page last free pid 5360 tgid 5360 stack trace: [ 89.175991][ T7744] free_unref_page+0x5f4/0xdc0 [ 89.177297][ T7744] __put_partials+0x14c/0x170 [ 89.178554][ T7744] qlist_free_all+0x4e/0x120 [ 89.179892][ T7744] kasan_quarantine_reduce+0x192/0x1e0 [ 89.181377][ T7744] __kasan_slab_alloc+0x69/0x90 [ 89.182631][ T7744] kmem_cache_alloc_noprof+0x121/0x2f0 [ 89.184023][ T7744] getname_flags.part.0+0x4c/0x550 [ 89.185353][ T7744] getname+0x8d/0xe0 [ 89.186376][ T7744] do_sys_openat2+0x104/0x1e0 [ 89.187595][ T7744] __x64_sys_openat+0x175/0x210 [ 89.188833][ T7744] do_syscall_64+0xcd/0x250 [ 89.190030][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.191560][ T7744] Modules linked in: [ 89.192630][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 89.195794][ T7744] Tainted: [B]=BAD_PAGE [ 89.196941][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.199676][ T7744] Call Trace: [ 89.200541][ T7744] [ 89.201294][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.202474][ T7744] bad_page+0xb3/0x1f0 [ 89.203633][ T7744] ? __pfx_bad_page+0x10/0x10 [ 89.204869][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 89.206101][ T7744] free_unref_page+0x657/0xdc0 [ 89.207312][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.208920][ T7744] ? __phys_addr+0xc6/0x150 [ 89.210131][ T7744] skb_free_head+0xa0/0x1d0 [ 89.211379][ T7744] skb_release_data+0x560/0x730 [ 89.212759][ T7744] ? packet_rcv+0x16c/0x15a0 [ 89.213951][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.215208][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 89.216547][ T7744] packet_rcv+0x16c/0x15a0 [ 89.217722][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 89.218952][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 89.220523][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.222105][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 89.223367][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.224990][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.226144][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.227764][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 89.229361][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.231098][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 89.232465][ T7744] ? __build_skb_around+0x278/0x3b0 [ 89.233826][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 89.235193][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 89.236820][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 89.238577][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 89.240073][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.241449][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.243383][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.245016][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.246618][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.248459][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 89.250105][ T7744] ? 0xffffffffa0006f40 [ 89.251400][ T7744] ? 0xffffffffa0006f40 [ 89.252667][ T7744] ? 0xffffffffa0006f40 [ 89.253821][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.255399][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.257014][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.258168][ T7744] ? __fget_files+0x40/0x3f0 [ 89.259389][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.260941][ T7744] ? fput+0x30/0x390 [ 89.261990][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 89.263255][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.264800][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.265939][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 89.267283][ T7744] ? __schedule+0xe5d/0x5730 [ 89.268454][ T7744] ? __fget_files+0x23a/0x3f0 [ 89.269632][ T7744] ? do_futex+0x123/0x350 [ 89.270720][ T7744] ? __pfx_do_futex+0x10/0x10 [ 89.271985][ T7744] ? xfd_validate_state+0x5d/0x180 [ 89.273509][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.274808][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.275936][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.277386][ T7744] do_syscall_64+0xcd/0x250 [ 89.278594][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.280168][ T7744] RIP: 0033:0x7f783637e719 [ 89.281418][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.286377][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.288537][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 89.290578][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.292617][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 89.294613][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.296531][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 89.298485][ T7744] [ 89.299352][ T7744] BUG: Bad page state in process syz.7.434 pfn:4e81b [ 89.301203][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x52e pfn:0x4e81b [ 89.303416][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.305246][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 89.307363][ T7744] raw: 000000000000052e 0000000000000001 00000000ffffffff 0000000000000000 [ 89.309655][ T7744] page dumped because: page_pool leak [ 89.311122][ T7744] page_owner tracks the page as allocated [ 89.312638][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060661332, free_ts 84020025899 [ 89.316911][ T7744] post_alloc_hook+0x2d1/0x350 [ 89.318156][ T7744] get_page_from_freelist+0x101e/0x3070 [ 89.319620][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 89.321080][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 89.322534][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 89.324102][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 89.325583][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 89.327007][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 89.328776][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.330288][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.331873][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.333084][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.334300][ T7744] do_syscall_64+0xcd/0x250 [ 89.335509][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.337077][ T7744] page last free pid 5360 tgid 5360 stack trace: [ 89.338728][ T7744] free_unref_page+0x5f4/0xdc0 [ 89.340068][ T7744] __put_partials+0x14c/0x170 [ 89.341329][ T7744] qlist_free_all+0x4e/0x120 [ 89.343049][ T7744] kasan_quarantine_reduce+0x192/0x1e0 [ 89.344504][ T7744] __kasan_slab_alloc+0x69/0x90 [ 89.345876][ T7744] kmem_cache_alloc_noprof+0x121/0x2f0 [ 89.347380][ T7744] getname_flags.part.0+0x4c/0x550 [ 89.348888][ T7744] getname+0x8d/0xe0 [ 89.350073][ T7744] do_sys_openat2+0x104/0x1e0 [ 89.351346][ T7744] __x64_sys_openat+0x175/0x210 [ 89.352694][ T7744] do_syscall_64+0xcd/0x250 [ 89.353926][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.355722][ T7744] Modules linked in: [ 89.356753][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 89.359765][ T7744] Tainted: [B]=BAD_PAGE [ 89.360899][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.363552][ T7744] Call Trace: [ 89.364557][ T7744] [ 89.365800][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.367191][ T7744] bad_page+0xb3/0x1f0 [ 89.368547][ T7744] ? __pfx_bad_page+0x10/0x10 [ 89.369865][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 89.371142][ T7744] free_unref_page+0x657/0xdc0 [ 89.372464][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.374125][ T7744] ? __phys_addr+0xc6/0x150 [ 89.375399][ T7744] skb_free_head+0xa0/0x1d0 [ 89.376712][ T7744] skb_release_data+0x560/0x730 [ 89.377918][ T7744] ? packet_rcv+0x16c/0x15a0 [ 89.379135][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.380406][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 89.381831][ T7744] packet_rcv+0x16c/0x15a0 [ 89.382976][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 89.384257][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 89.385757][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.387403][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 89.388731][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.390453][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.391694][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.393455][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 89.395096][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.396888][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 89.398074][ T7744] ? __build_skb_around+0x278/0x3b0 [ 89.399254][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 89.400569][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 89.402410][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 89.404345][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 89.405854][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.407384][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.409353][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.411193][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.413013][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.414779][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 89.416356][ T7744] ? 0xffffffffa0006f40 [ 89.417622][ T7744] ? 0xffffffffa0006f40 [ 89.418996][ T7744] ? 0xffffffffa0006f40 [ 89.420183][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.421665][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.423003][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.424222][ T7744] ? __fget_files+0x40/0x3f0 [ 89.425421][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.426973][ T7744] ? fput+0x30/0x390 [ 89.428126][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 89.429728][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.431210][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.432303][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 89.433567][ T7744] ? __schedule+0xe5d/0x5730 [ 89.434763][ T7744] ? __fget_files+0x23a/0x3f0 [ 89.436105][ T7744] ? do_futex+0x123/0x350 [ 89.437254][ T7744] ? __pfx_do_futex+0x10/0x10 [ 89.438494][ T7744] ? xfd_validate_state+0x5d/0x180 [ 89.439848][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.441244][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.442420][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.444121][ T7744] do_syscall_64+0xcd/0x250 [ 89.445453][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.447175][ T7744] RIP: 0033:0x7f783637e719 [ 89.448593][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.453654][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.455891][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 89.458102][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.460310][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 89.462673][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.464849][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 89.466876][ T7744] [ 89.467778][ T7744] BUG: Bad page state in process syz.7.434 pfn:4e81a [ 89.469548][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x52d pfn:0x4e81a [ 89.471924][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.473792][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 89.476013][ T7744] raw: 000000000000052d 0000000000000001 00000000ffffffff 0000000000000000 [ 89.478281][ T7744] page dumped because: page_pool leak [ 89.479766][ T7744] page_owner tracks the page as allocated [ 89.481438][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060656927, free_ts 84020025899 [ 89.485729][ T7744] post_alloc_hook+0x2d1/0x350 [ 89.487092][ T7744] get_page_from_freelist+0x101e/0x3070 [ 89.488578][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 89.490064][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 89.491572][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 89.493250][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 89.494703][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 89.496418][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 89.498320][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.500007][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.501742][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.503106][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.504527][ T7744] do_syscall_64+0xcd/0x250 [ 89.505896][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.507462][ T7744] page last free pid 5360 tgid 5360 stack trace: [ 89.509092][ T7744] free_unref_page+0x5f4/0xdc0 [ 89.510378][ T7744] __put_partials+0x14c/0x170 [ 89.511616][ T7744] qlist_free_all+0x4e/0x120 [ 89.512837][ T7744] kasan_quarantine_reduce+0x192/0x1e0 [ 89.514273][ T7744] __kasan_slab_alloc+0x69/0x90 [ 89.515536][ T7744] kmem_cache_alloc_noprof+0x121/0x2f0 [ 89.516902][ T7744] getname_flags.part.0+0x4c/0x550 [ 89.518223][ T7744] getname+0x8d/0xe0 [ 89.519261][ T7744] do_sys_openat2+0x104/0x1e0 [ 89.520561][ T7744] __x64_sys_openat+0x175/0x210 [ 89.521844][ T7744] do_syscall_64+0xcd/0x250 [ 89.523034][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.524582][ T7744] Modules linked in: [ 89.525617][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 89.528869][ T7744] Tainted: [B]=BAD_PAGE [ 89.529987][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.533104][ T7744] Call Trace: [ 89.534104][ T7744] [ 89.534897][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.536166][ T7744] bad_page+0xb3/0x1f0 [ 89.537227][ T7744] ? __pfx_bad_page+0x10/0x10 [ 89.538461][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 89.539722][ T7744] free_unref_page+0x657/0xdc0 [ 89.540965][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.542456][ T7744] ? __phys_addr+0xc6/0x150 [ 89.543587][ T7744] skb_free_head+0xa0/0x1d0 [ 89.544792][ T7744] skb_release_data+0x560/0x730 [ 89.546062][ T7744] ? packet_rcv+0x16c/0x15a0 [ 89.547224][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.548477][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 89.549808][ T7744] packet_rcv+0x16c/0x15a0 [ 89.550951][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 89.552228][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 89.553771][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.555558][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 89.557088][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.558977][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.560405][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.562360][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 89.564394][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.566188][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 89.567562][ T7744] ? __build_skb_around+0x278/0x3b0 [ 89.568937][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 89.570327][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 89.572109][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 89.573852][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 89.575402][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.576810][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.578345][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.579888][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.581451][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.582999][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 89.584394][ T7744] ? 0xffffffffa0006f40 [ 89.585490][ T7744] ? 0xffffffffa0006f40 [ 89.586588][ T7744] ? 0xffffffffa0006f40 [ 89.587685][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.589244][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.590659][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.591877][ T7744] ? __fget_files+0x40/0x3f0 [ 89.593111][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.594610][ T7744] ? fput+0x30/0x390 [ 89.595605][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 89.596868][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.598397][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.599537][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 89.600777][ T7744] ? __schedule+0xe5d/0x5730 [ 89.602000][ T7744] ? __fget_files+0x23a/0x3f0 [ 89.603250][ T7744] ? do_futex+0x123/0x350 [ 89.604483][ T7744] ? __pfx_do_futex+0x10/0x10 [ 89.605739][ T7744] ? xfd_validate_state+0x5d/0x180 [ 89.607245][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.608554][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.609737][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.611104][ T7744] do_syscall_64+0xcd/0x250 [ 89.612347][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.613915][ T7744] RIP: 0033:0x7f783637e719 [ 89.615195][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.620279][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.622395][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 89.624543][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.626611][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 89.628969][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.631023][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 89.633131][ T7744] [ 89.634007][ T7744] BUG: Bad page state in process syz.7.434 pfn:555d9 [ 89.635729][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880555d9aa8 pfn:0x555d9 [ 89.638313][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.640219][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 89.642431][ T7744] raw: ffff8880555d9aa8 0000000000000001 00000000ffffffff 0000000000000000 [ 89.644654][ T7744] page dumped because: page_pool leak [ 89.646053][ T7744] page_owner tracks the page as allocated [ 89.647526][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060632004, free_ts 84029889241 [ 89.651750][ T7744] post_alloc_hook+0x2d1/0x350 [ 89.652967][ T7744] get_page_from_freelist+0x101e/0x3070 [ 89.654360][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 89.655720][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 89.657140][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 89.658615][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 89.660028][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 89.661328][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 89.662906][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.664227][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.665575][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.666650][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.667759][ T7744] do_syscall_64+0xcd/0x250 [ 89.668914][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.670439][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 89.672053][ T7744] register_dummy_stack+0x8a/0xd0 [ 89.673317][ T7744] init_page_owner+0x48/0xc00 [ 89.674525][ T7744] page_ext_init+0x6b8/0xab0 [ 89.675706][ T7744] mm_core_init+0x12d/0x220 [ 89.676948][ T7744] Modules linked in: [ 89.677967][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 89.681077][ T7744] Tainted: [B]=BAD_PAGE [ 89.682153][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.684920][ T7744] Call Trace: [ 89.685799][ T7744] [ 89.686579][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.687813][ T7744] bad_page+0xb3/0x1f0 [ 89.688900][ T7744] ? __pfx_bad_page+0x10/0x10 [ 89.690135][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 89.691408][ T7744] free_unref_page+0x657/0xdc0 [ 89.692683][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.694244][ T7744] ? __phys_addr+0xc6/0x150 [ 89.695434][ T7744] skb_free_head+0xa0/0x1d0 [ 89.696641][ T7744] skb_release_data+0x560/0x730 [ 89.697910][ T7744] ? packet_rcv+0x16c/0x15a0 [ 89.699114][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.700367][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 89.701678][ T7744] packet_rcv+0x16c/0x15a0 [ 89.702850][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 89.704125][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 89.705670][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.707304][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 89.708625][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.710247][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.711422][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.713017][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 89.714553][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.716221][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 89.717563][ T7744] ? __build_skb_around+0x278/0x3b0 [ 89.718919][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 89.720305][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 89.721889][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 89.723617][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 89.725090][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.726602][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.728182][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.729871][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.731543][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.733198][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 89.734575][ T7744] ? 0xffffffffa0006f40 [ 89.735703][ T7744] ? 0xffffffffa0006f40 [ 89.736802][ T7744] ? 0xffffffffa0006f40 [ 89.737902][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.739424][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.740826][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.742018][ T7744] ? __fget_files+0x40/0x3f0 [ 89.743233][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.744760][ T7744] ? fput+0x30/0x390 [ 89.745817][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 89.747063][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.748602][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.749739][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 89.750986][ T7744] ? __schedule+0xe5d/0x5730 [ 89.752215][ T7744] ? __fget_files+0x23a/0x3f0 [ 89.753439][ T7744] ? do_futex+0x123/0x350 [ 89.754575][ T7744] ? __pfx_do_futex+0x10/0x10 [ 89.755797][ T7744] ? xfd_validate_state+0x5d/0x180 [ 89.757129][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.758370][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.759534][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.760867][ T7744] do_syscall_64+0xcd/0x250 [ 89.762026][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.763547][ T7744] RIP: 0033:0x7f783637e719 [ 89.765093][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.770082][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.772280][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 89.774447][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.776519][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 89.778594][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.780668][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 89.782746][ T7744] [ 89.783623][ T7744] BUG: Bad page state in process syz.7.434 pfn:4bebe [ 89.785334][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804bebef50 pfn:0x4bebe [ 89.787822][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.789588][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 89.791801][ T7744] raw: ffff88804bebef50 0000000000000001 00000000ffffffff 0000000000000000 [ 89.793934][ T7744] page dumped because: page_pool leak [ 89.795336][ T7744] page_owner tracks the page as allocated [ 89.796766][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060627622, free_ts 84029894725 [ 89.801013][ T7744] post_alloc_hook+0x2d1/0x350 [ 89.802194][ T7744] get_page_from_freelist+0x101e/0x3070 [ 89.803560][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 89.804885][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 89.806222][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 89.807751][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 89.809151][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 89.810546][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 89.812188][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.813571][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.814969][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.816105][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.817275][ T7744] do_syscall_64+0xcd/0x250 [ 89.818472][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.820067][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 89.821704][ T7744] register_dummy_stack+0x8a/0xd0 [ 89.823021][ T7744] init_page_owner+0x48/0xc00 [ 89.824273][ T7744] page_ext_init+0x6b8/0xab0 [ 89.825497][ T7744] mm_core_init+0x12d/0x220 [ 89.826686][ T7744] Modules linked in: [ 89.827717][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 89.830780][ T7744] Tainted: [B]=BAD_PAGE [ 89.831894][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.834625][ T7744] Call Trace: [ 89.835478][ T7744] [ 89.836241][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.837392][ T7744] bad_page+0xb3/0x1f0 [ 89.838451][ T7744] ? __pfx_bad_page+0x10/0x10 [ 89.839689][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 89.840986][ T7744] free_unref_page+0x657/0xdc0 [ 89.842240][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.843803][ T7744] ? __phys_addr+0xc6/0x150 [ 89.845241][ T7744] skb_free_head+0xa0/0x1d0 [ 89.846518][ T7744] skb_release_data+0x560/0x730 [ 89.847861][ T7744] ? packet_rcv+0x16c/0x15a0 [ 89.849143][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.850399][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 89.851740][ T7744] packet_rcv+0x16c/0x15a0 [ 89.852916][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 89.854187][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 89.855749][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 89.857448][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 89.858805][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.860468][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.861686][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 89.863334][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 89.864965][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 89.866703][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 89.868083][ T7744] ? __build_skb_around+0x278/0x3b0 [ 89.869446][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 89.870840][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 89.872509][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 89.874234][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 89.875700][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.877099][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.878627][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.880183][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.881675][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.883207][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 89.884597][ T7744] ? 0xffffffffa0006f40 [ 89.885682][ T7744] ? 0xffffffffa0006f40 [ 89.886774][ T7744] ? 0xffffffffa0006f40 [ 89.887849][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 89.889394][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.890987][ T7744] ? lock_acquire+0x2f/0xb0 [ 89.892245][ T7744] ? __fget_files+0x40/0x3f0 [ 89.893469][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.895024][ T7744] ? fput+0x30/0x390 [ 89.896078][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 89.897357][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.899078][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.900195][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 89.901443][ T7744] ? __schedule+0xe5d/0x5730 [ 89.902629][ T7744] ? __fget_files+0x23a/0x3f0 [ 89.904026][ T7744] ? do_futex+0x123/0x350 [ 89.905112][ T7744] ? __pfx_do_futex+0x10/0x10 [ 89.906308][ T7744] ? xfd_validate_state+0x5d/0x180 [ 89.907646][ T7744] ? rcu_is_watching+0x12/0xc0 [ 89.908929][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.910124][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.911497][ T7744] do_syscall_64+0xcd/0x250 [ 89.912752][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.914286][ T7744] RIP: 0033:0x7f783637e719 [ 89.915604][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.920763][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.922907][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 89.924952][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 89.927106][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 89.929544][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.931684][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 89.933853][ T7744] [ 89.934800][ T7744] BUG: Bad page state in process syz.7.434 pfn:319d5 [ 89.936576][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880319d5e58 pfn:0x319d5 [ 89.939168][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.941093][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 89.943298][ T7744] raw: ffff8880319d5e58 0000000000000001 00000000ffffffff 0000000000000000 [ 89.945497][ T7744] page dumped because: page_pool leak [ 89.946894][ T7744] page_owner tracks the page as allocated [ 89.948361][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060622962, free_ts 84029898670 [ 89.952759][ T7744] post_alloc_hook+0x2d1/0x350 [ 89.954050][ T7744] get_page_from_freelist+0x101e/0x3070 [ 89.955558][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 89.957002][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 89.958450][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 89.960061][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 89.961450][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 89.962794][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 89.964732][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 89.966273][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 89.967860][ T7744] __sys_bpf+0xfc6/0x49a0 [ 89.969121][ T7744] __x64_sys_bpf+0x78/0xc0 [ 89.970395][ T7744] do_syscall_64+0xcd/0x250 [ 89.971616][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.973250][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 89.975027][ T7744] register_dummy_stack+0x8a/0xd0 [ 89.976440][ T7744] init_page_owner+0x48/0xc00 [ 89.977738][ T7744] page_ext_init+0x6b8/0xab0 [ 89.979002][ T7744] mm_core_init+0x12d/0x220 [ 89.980279][ T7744] Modules linked in: [ 89.981337][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 89.984343][ T7744] Tainted: [B]=BAD_PAGE [ 89.985423][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.988209][ T7744] Call Trace: [ 89.989081][ T7744] [ 89.989863][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 89.991105][ T7744] bad_page+0xb3/0x1f0 [ 89.992194][ T7744] ? __pfx_bad_page+0x10/0x10 [ 89.993578][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 89.994977][ T7744] free_unref_page+0x657/0xdc0 [ 89.996275][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 89.997865][ T7744] ? __phys_addr+0xc6/0x150 [ 89.999065][ T7744] skb_free_head+0xa0/0x1d0 [ 90.000275][ T7744] skb_release_data+0x560/0x730 [ 90.001562][ T7744] ? packet_rcv+0x16c/0x15a0 [ 90.002783][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.004046][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 90.005362][ T7744] packet_rcv+0x16c/0x15a0 [ 90.006551][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 90.007823][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 90.009436][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.011128][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 90.012523][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.014100][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.015286][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.016951][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 90.018584][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.020333][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 90.021732][ T7744] ? __build_skb_around+0x278/0x3b0 [ 90.023069][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 90.024453][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 90.026077][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 90.027783][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 90.029599][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.031016][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.032500][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.033969][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.035593][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.037133][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.038511][ T7744] ? 0xffffffffa0006f40 [ 90.039603][ T7744] ? 0xffffffffa0006f40 [ 90.040708][ T7744] ? 0xffffffffa0006f40 [ 90.041805][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.043348][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.044759][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.045946][ T7744] ? __fget_files+0x40/0x3f0 [ 90.047164][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.048694][ T7744] ? fput+0x30/0x390 [ 90.049733][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 90.050995][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.052540][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.053667][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 90.054918][ T7744] ? __schedule+0xe5d/0x5730 [ 90.056136][ T7744] ? __fget_files+0x23a/0x3f0 [ 90.057394][ T7744] ? do_futex+0x123/0x350 [ 90.058521][ T7744] ? __pfx_do_futex+0x10/0x10 [ 90.059755][ T7744] ? xfd_validate_state+0x5d/0x180 [ 90.061098][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.062489][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.063669][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.065069][ T7744] do_syscall_64+0xcd/0x250 [ 90.066283][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.067818][ T7744] RIP: 0033:0x7f783637e719 [ 90.069004][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.073959][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.076299][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 90.078374][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.080574][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 90.082574][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.084536][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 90.086661][ T7744] [ 90.087582][ T7744] BUG: Bad page state in process syz.7.434 pfn:30815 [ 90.089346][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030815360 pfn:0x30815 [ 90.092026][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.093859][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 90.096070][ T7744] raw: ffff888030815360 0000000000000001 00000000ffffffff 0000000000000000 [ 90.098306][ T7744] page dumped because: page_pool leak [ 90.099760][ T7744] page_owner tracks the page as allocated [ 90.101233][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060618451, free_ts 84029904749 [ 90.105305][ T7744] post_alloc_hook+0x2d1/0x350 [ 90.106546][ T7744] get_page_from_freelist+0x101e/0x3070 [ 90.108006][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 90.109392][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 90.110878][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 90.112431][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 90.113816][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 90.115154][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 90.116813][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.118250][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.119626][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.120813][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.121903][ T7744] do_syscall_64+0xcd/0x250 [ 90.123098][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.124646][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 90.126279][ T7744] register_dummy_stack+0x8a/0xd0 [ 90.127704][ T7744] init_page_owner+0x48/0xc00 [ 90.128954][ T7744] page_ext_init+0x6b8/0xab0 [ 90.130237][ T7744] mm_core_init+0x12d/0x220 [ 90.131430][ T7744] Modules linked in: [ 90.132453][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 90.135709][ T7744] Tainted: [B]=BAD_PAGE [ 90.136810][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.139574][ T7744] Call Trace: [ 90.140469][ T7744] [ 90.141256][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 90.142486][ T7744] bad_page+0xb3/0x1f0 [ 90.143565][ T7744] ? __pfx_bad_page+0x10/0x10 [ 90.144829][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 90.146101][ T7744] free_unref_page+0x657/0xdc0 [ 90.147347][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 90.148919][ T7744] ? __phys_addr+0xc6/0x150 [ 90.150113][ T7744] skb_free_head+0xa0/0x1d0 [ 90.151307][ T7744] skb_release_data+0x560/0x730 [ 90.152604][ T7744] ? packet_rcv+0x16c/0x15a0 [ 90.153816][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.155069][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 90.156380][ T7744] packet_rcv+0x16c/0x15a0 [ 90.157552][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 90.158826][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 90.160364][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.162025][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 90.163332][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.165100][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.166259][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.167830][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 90.169418][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.171153][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 90.172535][ T7744] ? __build_skb_around+0x278/0x3b0 [ 90.173894][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 90.175282][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 90.176967][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 90.178723][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 90.180185][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.181538][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.183062][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.184518][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.186057][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.187508][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.188907][ T7744] ? 0xffffffffa0006f40 [ 90.189994][ T7744] ? 0xffffffffa0006f40 [ 90.191083][ T7744] ? 0xffffffffa0006f40 [ 90.192200][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.193741][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.195107][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.196248][ T7744] ? __fget_files+0x40/0x3f0 [ 90.197462][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.198995][ T7744] ? fput+0x30/0x390 [ 90.199868][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 90.200021][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 90.200040][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.205834][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.206967][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 90.208221][ T7744] ? __schedule+0xe5d/0x5730 [ 90.209415][ T7744] ? __fget_files+0x23a/0x3f0 [ 90.210620][ T7744] ? do_futex+0x123/0x350 [ 90.211760][ T7744] ? __pfx_do_futex+0x10/0x10 [ 90.213151][ T7744] ? xfd_validate_state+0x5d/0x180 [ 90.214469][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.215697][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.216853][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.218227][ T7744] do_syscall_64+0xcd/0x250 [ 90.219408][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.220909][ T7744] RIP: 0033:0x7f783637e719 [ 90.222076][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.227127][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.229646][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 90.231853][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.233834][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 90.235804][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.237778][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 90.239717][ T7744] [ 90.240594][ T7744] BUG: Bad page state in process syz.7.434 pfn:3081f [ 90.242232][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803081f4d8 pfn:0x3081f [ 90.244748][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.246515][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 90.248637][ T7744] raw: ffff88803081f4d8 0000000000000001 00000000ffffffff 0000000000000000 [ 90.250781][ T7744] page dumped because: page_pool leak [ 90.252082][ T7744] page_owner tracks the page as allocated [ 90.253440][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060613960, free_ts 84029909042 [ 90.257573][ T7744] post_alloc_hook+0x2d1/0x350 [ 90.258796][ T7744] get_page_from_freelist+0x101e/0x3070 [ 90.260222][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 90.261542][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 90.262969][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 90.264473][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 90.266036][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 90.267442][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 90.269050][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.270951][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.272432][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.273550][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.274675][ T7744] do_syscall_64+0xcd/0x250 [ 90.275870][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.277412][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 90.278997][ T7744] register_dummy_stack+0x8a/0xd0 [ 90.280327][ T7744] init_page_owner+0x48/0xc00 [ 90.281568][ T7744] page_ext_init+0x6b8/0xab0 [ 90.282787][ T7744] mm_core_init+0x12d/0x220 [ 90.283977][ T7744] Modules linked in: [ 90.284995][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 90.288001][ T7744] Tainted: [B]=BAD_PAGE [ 90.289039][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.291889][ T7744] Call Trace: [ 90.292837][ T7744] [ 90.293525][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 90.294779][ T7744] bad_page+0xb3/0x1f0 [ 90.295812][ T7744] ? __pfx_bad_page+0x10/0x10 [ 90.297000][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 90.298298][ T7744] free_unref_page+0x657/0xdc0 [ 90.299621][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 90.301225][ T7744] ? __phys_addr+0xc6/0x150 [ 90.302395][ T7744] skb_free_head+0xa0/0x1d0 [ 90.303598][ T7744] skb_release_data+0x560/0x730 [ 90.304930][ T7744] ? packet_rcv+0x16c/0x15a0 [ 90.306185][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.307469][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 90.309162][ T7744] packet_rcv+0x16c/0x15a0 [ 90.310332][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 90.311571][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 90.313158][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.314771][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 90.316073][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.317673][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.318838][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.320405][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 90.321932][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.323550][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 90.324875][ T7744] ? __build_skb_around+0x278/0x3b0 [ 90.326230][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 90.327560][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 90.329289][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 90.331554][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 90.333079][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.334423][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.335911][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.337495][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.339137][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.340681][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.342249][ T7744] ? 0xffffffffa0006f40 [ 90.343462][ T7744] ? 0xffffffffa0006f40 [ 90.344677][ T7744] ? 0xffffffffa0006f40 [ 90.345802][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.347402][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.348829][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.350012][ T7744] ? __fget_files+0x40/0x3f0 [ 90.351138][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.352623][ T7744] ? fput+0x30/0x390 [ 90.353583][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 90.354798][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.356217][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.357267][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 90.358433][ T7744] ? __schedule+0xe5d/0x5730 [ 90.359610][ T7744] ? __fget_files+0x23a/0x3f0 [ 90.360857][ T7744] ? do_futex+0x123/0x350 [ 90.362001][ T7744] ? __pfx_do_futex+0x10/0x10 [ 90.363246][ T7744] ? xfd_validate_state+0x5d/0x180 [ 90.364597][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.365905][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.367134][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.368586][ T7744] do_syscall_64+0xcd/0x250 [ 90.369760][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.371439][ T7744] RIP: 0033:0x7f783637e719 [ 90.372750][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.377867][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.380020][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 90.382078][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.384161][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 90.386204][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.388261][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 90.390308][ T7744] [ 90.391207][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b2b [ 90.393020][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b2b [ 90.395289][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.397153][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 90.399361][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 90.401633][ T7744] page dumped because: page_pool leak [ 90.403033][ T7744] page_owner tracks the page as allocated [ 90.404525][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060609642, free_ts 84029912980 [ 90.408790][ T7744] post_alloc_hook+0x2d1/0x350 [ 90.410095][ T7744] get_page_from_freelist+0x101e/0x3070 [ 90.411535][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 90.412927][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 90.414363][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 90.415894][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 90.417273][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 90.418560][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 90.420164][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.421540][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.422944][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.424252][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.425389][ T7744] do_syscall_64+0xcd/0x250 [ 90.426559][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.428120][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 90.429828][ T7744] register_dummy_stack+0x8a/0xd0 [ 90.431127][ T7744] init_page_owner+0x48/0xc00 [ 90.432379][ T7744] page_ext_init+0x6b8/0xab0 [ 90.433574][ T7744] mm_core_init+0x12d/0x220 [ 90.434746][ T7744] Modules linked in: [ 90.435762][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 90.438814][ T7744] Tainted: [B]=BAD_PAGE [ 90.439907][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.442649][ T7744] Call Trace: [ 90.443485][ T7744] [ 90.444247][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 90.445411][ T7744] bad_page+0xb3/0x1f0 [ 90.446492][ T7744] ? __pfx_bad_page+0x10/0x10 [ 90.447701][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 90.448989][ T7744] free_unref_page+0x657/0xdc0 [ 90.450365][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 90.452053][ T7744] ? __phys_addr+0xc6/0x150 [ 90.453237][ T7744] skb_free_head+0xa0/0x1d0 [ 90.454429][ T7744] skb_release_data+0x560/0x730 [ 90.455698][ T7744] ? packet_rcv+0x16c/0x15a0 [ 90.456919][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.458165][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 90.459476][ T7744] packet_rcv+0x16c/0x15a0 [ 90.460566][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 90.461771][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 90.463226][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.465059][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 90.466443][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.468229][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.469436][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.471106][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 90.472753][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.474489][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 90.475824][ T7744] ? __build_skb_around+0x278/0x3b0 [ 90.477200][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 90.478530][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 90.480223][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 90.481940][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 90.483415][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.485650][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.487779][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.489577][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.491248][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.492951][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.494367][ T7744] ? 0xffffffffa0006f40 [ 90.495413][ T7744] ? 0xffffffffa0006f40 [ 90.496482][ T7744] ? 0xffffffffa0006f40 [ 90.497555][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.499093][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.500507][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.501696][ T7744] ? __fget_files+0x40/0x3f0 [ 90.503000][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.504568][ T7744] ? fput+0x30/0x390 [ 90.505611][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 90.507284][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.508922][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.510013][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 90.511218][ T7744] ? __schedule+0xe5d/0x5730 [ 90.512479][ T7744] ? __fget_files+0x23a/0x3f0 [ 90.513716][ T7744] ? do_futex+0x123/0x350 [ 90.514862][ T7744] ? __pfx_do_futex+0x10/0x10 [ 90.516137][ T7744] ? xfd_validate_state+0x5d/0x180 [ 90.517524][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.518789][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.520019][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.521406][ T7744] do_syscall_64+0xcd/0x250 [ 90.522593][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.524191][ T7744] RIP: 0033:0x7f783637e719 [ 90.525444][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.530772][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.533023][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 90.535239][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.537300][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 90.539376][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.541614][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 90.544164][ T7744] [ 90.545759][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b2a [ 90.547658][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b2a [ 90.550373][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.552574][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 90.555100][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 90.557344][ T7744] page dumped because: page_pool leak [ 90.558744][ T7744] page_owner tracks the page as allocated [ 90.560331][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060605439, free_ts 84029916959 [ 90.564967][ T7744] post_alloc_hook+0x2d1/0x350 [ 90.566230][ T7744] get_page_from_freelist+0x101e/0x3070 [ 90.567686][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 90.569058][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 90.570518][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 90.572069][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 90.573378][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 90.574688][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 90.576309][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.577707][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.579270][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.580487][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.581630][ T7744] do_syscall_64+0xcd/0x250 [ 90.582773][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.584248][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 90.585813][ T7744] register_dummy_stack+0x8a/0xd0 [ 90.587089][ T7744] init_page_owner+0x48/0xc00 [ 90.588281][ T7744] page_ext_init+0x6b8/0xab0 [ 90.589449][ T7744] mm_core_init+0x12d/0x220 [ 90.590621][ T7744] Modules linked in: [ 90.591785][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 90.595097][ T7744] Tainted: [B]=BAD_PAGE [ 90.596525][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.599532][ T7744] Call Trace: [ 90.600381][ T7744] [ 90.601146][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 90.602348][ T7744] bad_page+0xb3/0x1f0 [ 90.603389][ T7744] ? __pfx_bad_page+0x10/0x10 [ 90.604587][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 90.605841][ T7744] free_unref_page+0x657/0xdc0 [ 90.607057][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 90.608572][ T7744] ? __phys_addr+0xc6/0x150 [ 90.609709][ T7744] skb_free_head+0xa0/0x1d0 [ 90.610856][ T7744] skb_release_data+0x560/0x730 [ 90.612116][ T7744] ? packet_rcv+0x16c/0x15a0 [ 90.613286][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.614473][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 90.615740][ T7744] packet_rcv+0x16c/0x15a0 [ 90.616909][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 90.618072][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 90.619632][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.621321][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 90.622681][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.624428][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.625626][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.627373][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 90.628999][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.630666][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 90.632027][ T7744] ? __build_skb_around+0x278/0x3b0 [ 90.633451][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 90.634799][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 90.636390][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 90.637998][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 90.639409][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.640752][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.642224][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.643803][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.645520][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.647181][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.648753][ T7744] ? 0xffffffffa0006f40 [ 90.649867][ T7744] ? 0xffffffffa0006f40 [ 90.650989][ T7744] ? 0xffffffffa0006f40 [ 90.652244][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.653811][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.655207][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.656420][ T7744] ? __fget_files+0x40/0x3f0 [ 90.657648][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.659119][ T7744] ? fput+0x30/0x390 [ 90.660160][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 90.661425][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.663465][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.664571][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 90.665834][ T7744] ? __schedule+0xe5d/0x5730 [ 90.667097][ T7744] ? __fget_files+0x23a/0x3f0 [ 90.668377][ T7744] ? do_futex+0x123/0x350 [ 90.669541][ T7744] ? __pfx_do_futex+0x10/0x10 [ 90.670766][ T7744] ? xfd_validate_state+0x5d/0x180 [ 90.672096][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.673318][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.674431][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.675743][ T7744] do_syscall_64+0xcd/0x250 [ 90.676927][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.678475][ T7744] RIP: 0033:0x7f783637e719 [ 90.679619][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.684665][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.686758][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 90.688858][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.691296][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 90.693724][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.696308][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 90.698507][ T7744] [ 90.699505][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b29 [ 90.701359][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b29 [ 90.703680][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.705552][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 90.707781][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 90.710060][ T7744] page dumped because: page_pool leak [ 90.711462][ T7744] page_owner tracks the page as allocated [ 90.713080][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060600960, free_ts 84029921247 [ 90.717284][ T7744] post_alloc_hook+0x2d1/0x350 [ 90.718497][ T7744] get_page_from_freelist+0x101e/0x3070 [ 90.719979][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 90.721357][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 90.722704][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 90.724160][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 90.725404][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 90.726676][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 90.728288][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.729677][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.731144][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.732313][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.733478][ T7744] do_syscall_64+0xcd/0x250 [ 90.734678][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.736245][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 90.737870][ T7744] register_dummy_stack+0x8a/0xd0 [ 90.739204][ T7744] init_page_owner+0x48/0xc00 [ 90.740512][ T7744] page_ext_init+0x6b8/0xab0 [ 90.741826][ T7744] mm_core_init+0x12d/0x220 [ 90.743046][ T7744] Modules linked in: [ 90.744138][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 90.747172][ T7744] Tainted: [B]=BAD_PAGE [ 90.748340][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.750999][ T7744] Call Trace: [ 90.751888][ T7744] [ 90.752683][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 90.753893][ T7744] bad_page+0xb3/0x1f0 [ 90.754916][ T7744] ? __pfx_bad_page+0x10/0x10 [ 90.756321][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 90.757577][ T7744] free_unref_page+0x657/0xdc0 [ 90.758792][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 90.760308][ T7744] ? __phys_addr+0xc6/0x150 [ 90.761490][ T7744] skb_free_head+0xa0/0x1d0 [ 90.762694][ T7744] skb_release_data+0x560/0x730 [ 90.763980][ T7744] ? packet_rcv+0x16c/0x15a0 [ 90.765208][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.766476][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 90.767803][ T7744] packet_rcv+0x16c/0x15a0 [ 90.768994][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 90.770273][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 90.771868][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.773583][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 90.775008][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.776881][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.778232][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.779912][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 90.781538][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.783278][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 90.784661][ T7744] ? __build_skb_around+0x278/0x3b0 [ 90.786037][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 90.787425][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 90.789028][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 90.791262][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 90.792754][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.794118][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.795639][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.797158][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.798663][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.800170][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.801495][ T7744] ? 0xffffffffa0006f40 [ 90.802646][ T7744] ? 0xffffffffa0006f40 [ 90.803676][ T7744] ? 0xffffffffa0006f40 [ 90.804741][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.806178][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.807475][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.808602][ T7744] ? __fget_files+0x40/0x3f0 [ 90.809747][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.811168][ T7744] ? fput+0x30/0x390 [ 90.812192][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 90.813400][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.814890][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.815941][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 90.817079][ T7744] ? __schedule+0xe5d/0x5730 [ 90.818185][ T7744] ? __fget_files+0x23a/0x3f0 [ 90.819369][ T7744] ? do_futex+0x123/0x350 [ 90.820511][ T7744] ? __pfx_do_futex+0x10/0x10 [ 90.821713][ T7744] ? xfd_validate_state+0x5d/0x180 [ 90.823011][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.824219][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.825331][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.826606][ T7744] do_syscall_64+0xcd/0x250 [ 90.827702][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.829228][ T7744] RIP: 0033:0x7f783637e719 [ 90.830328][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.835150][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.837274][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 90.839315][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.841432][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 90.843402][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.845416][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 90.847358][ T7744] [ 90.848232][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b2e [ 90.849902][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b2e [ 90.852073][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.853747][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 90.855873][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 90.857919][ T7744] page dumped because: page_pool leak [ 90.859268][ T7744] page_owner tracks the page as allocated [ 90.860699][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060596458, free_ts 84029924951 [ 90.864861][ T7744] post_alloc_hook+0x2d1/0x350 [ 90.866065][ T7744] get_page_from_freelist+0x101e/0x3070 [ 90.867398][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 90.868670][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 90.870095][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 90.871580][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 90.872928][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 90.874212][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 90.875867][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.877260][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.878623][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.879788][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.880892][ T7744] do_syscall_64+0xcd/0x250 [ 90.882033][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.883639][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 90.885249][ T7744] register_dummy_stack+0x8a/0xd0 [ 90.886550][ T7744] init_page_owner+0x48/0xc00 [ 90.887717][ T7744] page_ext_init+0x6b8/0xab0 [ 90.888940][ T7744] mm_core_init+0x12d/0x220 [ 90.890184][ T7744] Modules linked in: [ 90.891171][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 90.894275][ T7744] Tainted: [B]=BAD_PAGE [ 90.895340][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.898044][ T7744] Call Trace: [ 90.898927][ T7744] [ 90.899715][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 90.901046][ T7744] bad_page+0xb3/0x1f0 [ 90.902264][ T7744] ? __pfx_bad_page+0x10/0x10 [ 90.903586][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 90.905004][ T7744] free_unref_page+0x657/0xdc0 [ 90.906272][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 90.907846][ T7744] ? __phys_addr+0xc6/0x150 [ 90.908990][ T7744] skb_free_head+0xa0/0x1d0 [ 90.910132][ T7744] skb_release_data+0x560/0x730 [ 90.911342][ T7744] ? packet_rcv+0x16c/0x15a0 [ 90.912533][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.913735][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 90.914976][ T7744] packet_rcv+0x16c/0x15a0 [ 90.916184][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 90.917475][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 90.919048][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 90.920764][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 90.922146][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.923807][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.925012][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 90.926667][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 90.928294][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 90.930168][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 90.931695][ T7744] ? __build_skb_around+0x278/0x3b0 [ 90.933153][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 90.934545][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 90.936204][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 90.937913][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 90.939375][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 90.940776][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 90.942301][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.944046][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 90.945641][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.947523][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.948950][ T7744] ? 0xffffffffa0006f40 [ 90.950180][ T7744] ? 0xffffffffa0006f40 [ 90.951401][ T7744] ? 0xffffffffa0006f40 [ 90.952551][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 90.954191][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 90.955702][ T7744] ? lock_acquire+0x2f/0xb0 [ 90.956992][ T7744] ? __fget_files+0x40/0x3f0 [ 90.958261][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.959814][ T7744] ? fput+0x30/0x390 [ 90.960974][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 90.962249][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 90.963780][ T7744] __sys_bpf+0xfc6/0x49a0 [ 90.964944][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 90.966194][ T7744] ? __schedule+0xe5d/0x5730 [ 90.967404][ T7744] ? __fget_files+0x23a/0x3f0 [ 90.968643][ T7744] ? do_futex+0x123/0x350 [ 90.969772][ T7744] ? __pfx_do_futex+0x10/0x10 [ 90.970998][ T7744] ? xfd_validate_state+0x5d/0x180 [ 90.972350][ T7744] ? rcu_is_watching+0x12/0xc0 [ 90.973602][ T7744] __x64_sys_bpf+0x78/0xc0 [ 90.974766][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.976141][ T7744] do_syscall_64+0xcd/0x250 [ 90.977335][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.978869][ T7744] RIP: 0033:0x7f783637e719 [ 90.980044][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.985018][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.987154][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 90.989140][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 90.991288][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 90.993504][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.995629][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 90.997683][ T7744] [ 90.998625][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b2f [ 91.000425][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b2f [ 91.002694][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.004742][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 91.007021][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 91.009351][ T7744] page dumped because: page_pool leak [ 91.010879][ T7744] page_owner tracks the page as allocated [ 91.012323][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060592186, free_ts 84029928642 [ 91.016721][ T7744] post_alloc_hook+0x2d1/0x350 [ 91.017919][ T7744] get_page_from_freelist+0x101e/0x3070 [ 91.019370][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 91.020836][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 91.022284][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 91.023821][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 91.025461][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 91.026798][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 91.028443][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.029925][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.031343][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.032522][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.033726][ T7744] do_syscall_64+0xcd/0x250 [ 91.034944][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.036632][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 91.038322][ T7744] register_dummy_stack+0x8a/0xd0 [ 91.039773][ T7744] init_page_owner+0x48/0xc00 [ 91.041079][ T7744] page_ext_init+0x6b8/0xab0 [ 91.042326][ T7744] mm_core_init+0x12d/0x220 [ 91.043529][ T7744] Modules linked in: [ 91.044567][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 91.048002][ T7744] Tainted: [B]=BAD_PAGE [ 91.049086][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.052019][ T7744] Call Trace: [ 91.052908][ T7744] [ 91.053684][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 91.054934][ T7744] bad_page+0xb3/0x1f0 [ 91.056022][ T7744] ? __pfx_bad_page+0x10/0x10 [ 91.057258][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 91.058542][ T7744] free_unref_page+0x657/0xdc0 [ 91.059907][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 91.061500][ T7744] ? __phys_addr+0xc6/0x150 [ 91.062745][ T7744] skb_free_head+0xa0/0x1d0 [ 91.063917][ T7744] skb_release_data+0x560/0x730 [ 91.065339][ T7744] ? packet_rcv+0x16c/0x15a0 [ 91.066566][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.067820][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 91.069163][ T7744] packet_rcv+0x16c/0x15a0 [ 91.070428][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 91.071802][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 91.073347][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.074997][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 91.076253][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.077883][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.079066][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.080620][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.082085][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.083790][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 91.085149][ T7744] ? __build_skb_around+0x278/0x3b0 [ 91.086498][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 91.087868][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 91.089487][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.091180][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 91.092655][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.094031][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.095536][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.097074][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.098533][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.100048][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.101414][ T7744] ? 0xffffffffa0006f40 [ 91.102492][ T7744] ? 0xffffffffa0006f40 [ 91.103575][ T7744] ? 0xffffffffa0006f40 [ 91.104731][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.106207][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.107571][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.108754][ T7744] ? __fget_files+0x40/0x3f0 [ 91.109917][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.111398][ T7744] ? fput+0x30/0x390 [ 91.112419][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 91.113769][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.115384][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.116584][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 91.117840][ T7744] ? __schedule+0xe5d/0x5730 [ 91.119094][ T7744] ? __fget_files+0x23a/0x3f0 [ 91.120385][ T7744] ? do_futex+0x123/0x350 [ 91.121524][ T7744] ? __pfx_do_futex+0x10/0x10 [ 91.122765][ T7744] ? xfd_validate_state+0x5d/0x180 [ 91.124110][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.125284][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.126394][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.127690][ T7744] do_syscall_64+0xcd/0x250 [ 91.128950][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.130512][ T7744] RIP: 0033:0x7f783637e719 [ 91.131701][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.136685][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.138859][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 91.140888][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.142797][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 91.144939][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.147150][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 91.149175][ T7744] [ 91.150202][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b30 [ 91.152198][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b30 [ 91.154435][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.156371][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 91.158762][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 91.161364][ T7744] page dumped because: page_pool leak [ 91.162883][ T7744] page_owner tracks the page as allocated [ 91.164430][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060587944, free_ts 84029932258 [ 91.169422][ T7744] post_alloc_hook+0x2d1/0x350 [ 91.170795][ T7744] get_page_from_freelist+0x101e/0x3070 [ 91.172524][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 91.174101][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 91.175582][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 91.177154][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 91.178579][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 91.180112][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 91.181848][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.183333][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.185206][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.186544][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.187751][ T7744] do_syscall_64+0xcd/0x250 [ 91.189630][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.191483][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 91.193210][ T7744] register_dummy_stack+0x8a/0xd0 [ 91.194573][ T7744] init_page_owner+0x48/0xc00 [ 91.195822][ T7744] page_ext_init+0x6b8/0xab0 [ 91.197013][ T7744] mm_core_init+0x12d/0x220 [ 91.198278][ T7744] Modules linked in: [ 91.199383][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 91.202831][ T7744] Tainted: [B]=BAD_PAGE [ 91.204116][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.207304][ T7744] Call Trace: [ 91.208345][ T7744] [ 91.209123][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 91.210377][ T7744] bad_page+0xb3/0x1f0 [ 91.211455][ T7744] ? __pfx_bad_page+0x10/0x10 [ 91.212705][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 91.213978][ T7744] free_unref_page+0x657/0xdc0 [ 91.215305][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 91.216908][ T7744] ? __phys_addr+0xc6/0x150 [ 91.218113][ T7744] skb_free_head+0xa0/0x1d0 [ 91.219294][ T7744] skb_release_data+0x560/0x730 [ 91.220555][ T7744] ? packet_rcv+0x16c/0x15a0 [ 91.221924][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.223235][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 91.224545][ T7744] packet_rcv+0x16c/0x15a0 [ 91.225922][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 91.227317][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 91.229110][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.231076][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 91.232952][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.235048][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.236385][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.238102][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.239737][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.241495][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 91.242860][ T7744] ? __build_skb_around+0x278/0x3b0 [ 91.244228][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 91.245637][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 91.247281][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.249004][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 91.249843][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 91.250466][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.253849][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.255372][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.256915][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.258451][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.259981][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.261362][ T7744] ? 0xffffffffa0006f40 [ 91.262450][ T7744] ? 0xffffffffa0006f40 [ 91.263537][ T7744] ? 0xffffffffa0006f40 [ 91.264825][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.266556][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.267967][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.269171][ T7744] ? __fget_files+0x40/0x3f0 [ 91.270378][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.272060][ T7744] ? fput+0x30/0x390 [ 91.273082][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 91.274354][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.275865][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.277024][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 91.278273][ T7744] ? __schedule+0xe5d/0x5730 [ 91.279516][ T7744] ? __fget_files+0x23a/0x3f0 [ 91.280854][ T7744] ? do_futex+0x123/0x350 [ 91.282078][ T7744] ? __pfx_do_futex+0x10/0x10 [ 91.283507][ T7744] ? xfd_validate_state+0x5d/0x180 [ 91.285445][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.286728][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.288293][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.289733][ T7744] do_syscall_64+0xcd/0x250 [ 91.291053][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.292713][ T7744] RIP: 0033:0x7f783637e719 [ 91.293841][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.298822][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.300895][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 91.302925][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.305022][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 91.307394][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.309498][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 91.311599][ T7744] [ 91.312633][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b31 [ 91.314289][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b31 [ 91.316496][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.318325][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 91.320620][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 91.322977][ T7744] page dumped because: page_pool leak [ 91.324582][ T7744] page_owner tracks the page as allocated [ 91.326147][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060583701, free_ts 84029936032 [ 91.330791][ T7744] post_alloc_hook+0x2d1/0x350 [ 91.332118][ T7744] get_page_from_freelist+0x101e/0x3070 [ 91.333587][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 91.334977][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 91.336425][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 91.338102][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 91.339516][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 91.340975][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 91.342629][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.344012][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.345443][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.346581][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.347760][ T7744] do_syscall_64+0xcd/0x250 [ 91.348961][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.350564][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 91.352226][ T7744] register_dummy_stack+0x8a/0xd0 [ 91.353542][ T7744] init_page_owner+0x48/0xc00 [ 91.354777][ T7744] page_ext_init+0x6b8/0xab0 [ 91.355984][ T7744] mm_core_init+0x12d/0x220 [ 91.357194][ T7744] Modules linked in: [ 91.358188][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 91.361203][ T7744] Tainted: [B]=BAD_PAGE [ 91.362281][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.365039][ T7744] Call Trace: [ 91.365935][ T7744] [ 91.366787][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 91.368275][ T7744] bad_page+0xb3/0x1f0 [ 91.369648][ T7744] ? __pfx_bad_page+0x10/0x10 [ 91.371617][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 91.373030][ T7744] free_unref_page+0x657/0xdc0 [ 91.374424][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 91.376170][ T7744] ? __phys_addr+0xc6/0x150 [ 91.377411][ T7744] skb_free_head+0xa0/0x1d0 [ 91.378615][ T7744] skb_release_data+0x560/0x730 [ 91.379884][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 91.381241][ T7744] packet_rcv+0x16c/0x15a0 [ 91.382409][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 91.383802][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 91.385559][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.388204][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 91.389906][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.391587][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.392817][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.394534][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.396171][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.397912][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 91.399288][ T7744] ? __build_skb_around+0x278/0x3b0 [ 91.400660][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 91.402056][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 91.403698][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.405629][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 91.407313][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.408840][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.410390][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.411998][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.413570][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.415103][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.416600][ T7744] ? 0xffffffffa0006f40 [ 91.417716][ T7744] ? 0xffffffffa0006f40 [ 91.418829][ T7744] ? 0xffffffffa0006f40 [ 91.419910][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.421466][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.422892][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.424131][ T7744] ? __fget_files+0x40/0x3f0 [ 91.425359][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.426894][ T7744] ? fput+0x30/0x390 [ 91.427938][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 91.429202][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.430733][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.431885][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 91.433164][ T7744] ? __schedule+0xe5d/0x5730 [ 91.434386][ T7744] ? __fget_files+0x23a/0x3f0 [ 91.435637][ T7744] ? do_futex+0x123/0x350 [ 91.436790][ T7744] ? __pfx_do_futex+0x10/0x10 [ 91.438031][ T7744] ? xfd_validate_state+0x5d/0x180 [ 91.439361][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.440644][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.441816][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.443314][ T7744] do_syscall_64+0xcd/0x250 [ 91.444555][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.446258][ T7744] RIP: 0033:0x7f783637e719 [ 91.447428][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.452586][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.454711][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 91.456780][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.458771][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 91.460827][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.462882][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 91.464961][ T7744] [ 91.465879][ T7744] BUG: Bad page state in process syz.7.434 pfn:3643c [ 91.467649][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xe3 pfn:0x3643c [ 91.470139][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.472046][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 91.474306][ T7744] raw: 00000000000000e3 0000000000000001 00000000ffffffff 0000000000000000 [ 91.476557][ T7744] page dumped because: page_pool leak [ 91.477957][ T7744] page_owner tracks the page as allocated [ 91.479451][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060579496, free_ts 84029947430 [ 91.484131][ T7744] post_alloc_hook+0x2d1/0x350 [ 91.485430][ T7744] get_page_from_freelist+0x101e/0x3070 [ 91.486987][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 91.488615][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 91.490122][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 91.491685][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 91.493092][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 91.494464][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 91.496093][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.497465][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.498784][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.499992][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.501164][ T7744] do_syscall_64+0xcd/0x250 [ 91.502402][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.503962][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 91.505561][ T7744] register_dummy_stack+0x8a/0xd0 [ 91.506896][ T7744] init_page_owner+0x48/0xc00 [ 91.508129][ T7744] page_ext_init+0x6b8/0xab0 [ 91.509467][ T7744] mm_core_init+0x12d/0x220 [ 91.510868][ T7744] Modules linked in: [ 91.511947][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 91.515082][ T7744] Tainted: [B]=BAD_PAGE [ 91.516210][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.519074][ T7744] Call Trace: [ 91.519989][ T7744] [ 91.520772][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 91.522010][ T7744] bad_page+0xb3/0x1f0 [ 91.523084][ T7744] ? __pfx_bad_page+0x10/0x10 [ 91.524332][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 91.525611][ T7744] free_unref_page+0x657/0xdc0 [ 91.526870][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 91.528470][ T7744] ? __phys_addr+0xc6/0x150 [ 91.529664][ T7744] skb_free_head+0xa0/0x1d0 [ 91.530870][ T7744] skb_release_data+0x560/0x730 [ 91.532166][ T7744] ? packet_rcv+0x16c/0x15a0 [ 91.533395][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.534645][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 91.535977][ T7744] packet_rcv+0x16c/0x15a0 [ 91.537143][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 91.538440][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 91.540021][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.541695][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 91.543056][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.544704][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.545888][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.547549][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.549219][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.550963][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 91.552350][ T7744] ? __build_skb_around+0x278/0x3b0 [ 91.553717][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 91.555100][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 91.556702][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.558413][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 91.559845][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.561199][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.562661][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.564409][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.565925][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.567439][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.568837][ T7744] ? 0xffffffffa0006f40 [ 91.570024][ T7744] ? 0xffffffffa0006f40 [ 91.571142][ T7744] ? 0xffffffffa0006f40 [ 91.572320][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.573779][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.575190][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.576364][ T7744] ? __fget_files+0x40/0x3f0 [ 91.577510][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.578969][ T7744] ? fput+0x30/0x390 [ 91.579970][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 91.581154][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.582599][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.583737][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 91.584930][ T7744] ? __schedule+0xe5d/0x5730 [ 91.586071][ T7744] ? __fget_files+0x23a/0x3f0 [ 91.587268][ T7744] ? do_futex+0x123/0x350 [ 91.588339][ T7744] ? __pfx_do_futex+0x10/0x10 [ 91.589511][ T7744] ? xfd_validate_state+0x5d/0x180 [ 91.590765][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.591999][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.593098][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.594462][ T7744] do_syscall_64+0xcd/0x250 [ 91.595605][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.597060][ T7744] RIP: 0033:0x7f783637e719 [ 91.598177][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.602833][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.604839][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 91.607127][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.609386][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 91.611729][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.614236][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 91.616546][ T7744] [ 91.617585][ T7744] BUG: Bad page state in process syz.7.434 pfn:3643d [ 91.619468][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xe2 pfn:0x3643d [ 91.621904][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.623759][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 91.625982][ T7744] raw: 00000000000000e2 0000000000000001 00000000ffffffff 0000000000000000 [ 91.628214][ T7744] page dumped because: page_pool leak [ 91.629612][ T7744] page_owner tracks the page as allocated [ 91.631143][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060575429, free_ts 84029954829 [ 91.635510][ T7744] post_alloc_hook+0x2d1/0x350 [ 91.636756][ T7744] get_page_from_freelist+0x101e/0x3070 [ 91.638128][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 91.639447][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 91.640983][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 91.642552][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 91.643954][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 91.645286][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 91.646958][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.648347][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.649797][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.650926][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.652153][ T7744] do_syscall_64+0xcd/0x250 [ 91.653523][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.655298][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 91.657151][ T7744] register_dummy_stack+0x8a/0xd0 [ 91.658616][ T7744] init_page_owner+0x48/0xc00 [ 91.659969][ T7744] page_ext_init+0x6b8/0xab0 [ 91.661192][ T7744] mm_core_init+0x12d/0x220 [ 91.662392][ T7744] Modules linked in: [ 91.663458][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 91.666568][ T7744] Tainted: [B]=BAD_PAGE [ 91.667642][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.670971][ T7744] Call Trace: [ 91.671913][ T7744] [ 91.672669][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 91.673969][ T7744] bad_page+0xb3/0x1f0 [ 91.675032][ T7744] ? __pfx_bad_page+0x10/0x10 [ 91.676253][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 91.677433][ T7744] free_unref_page+0x657/0xdc0 [ 91.678637][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 91.680098][ T7744] ? __phys_addr+0xc6/0x150 [ 91.681218][ T7744] skb_free_head+0xa0/0x1d0 [ 91.682333][ T7744] skb_release_data+0x560/0x730 [ 91.683572][ T7744] ? packet_rcv+0x16c/0x15a0 [ 91.684764][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.685959][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 91.687216][ T7744] packet_rcv+0x16c/0x15a0 [ 91.688316][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 91.689480][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 91.690947][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.692580][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 91.693863][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.695396][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.696580][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.698130][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.699708][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.701424][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 91.702713][ T7744] ? __build_skb_around+0x278/0x3b0 [ 91.704013][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 91.705345][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 91.706906][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.708575][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 91.709977][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.711531][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.713151][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.714721][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.716682][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.718395][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.719953][ T7744] ? 0xffffffffa0006f40 [ 91.721107][ T7744] ? 0xffffffffa0006f40 [ 91.722267][ T7744] ? 0xffffffffa0006f40 [ 91.723456][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.725084][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.726491][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.728004][ T7744] ? __fget_files+0x40/0x3f0 [ 91.729201][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.730791][ T7744] ? fput+0x30/0x390 [ 91.731834][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 91.733059][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.734555][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.735664][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 91.736965][ T7744] ? __schedule+0xe5d/0x5730 [ 91.738126][ T7744] ? __fget_files+0x23a/0x3f0 [ 91.739352][ T7744] ? do_futex+0x123/0x350 [ 91.740442][ T7744] ? __pfx_do_futex+0x10/0x10 [ 91.741634][ T7744] ? xfd_validate_state+0x5d/0x180 [ 91.742872][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.744069][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.745147][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.746449][ T7744] do_syscall_64+0xcd/0x250 [ 91.747623][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.749148][ T7744] RIP: 0033:0x7f783637e719 [ 91.750286][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.755194][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.757374][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 91.759383][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.761386][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 91.763363][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.765367][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 91.767363][ T7744] [ 91.768267][ T7744] BUG: Bad page state in process syz.7.434 pfn:3643e [ 91.770066][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xe1 pfn:0x3643e [ 91.772369][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.774196][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 91.776438][ T7744] raw: 00000000000000e1 0000000000000001 00000000ffffffff 0000000000000000 [ 91.778643][ T7744] page dumped because: page_pool leak [ 91.780085][ T7744] page_owner tracks the page as allocated [ 91.781564][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060571167, free_ts 84029960120 [ 91.786008][ T7744] post_alloc_hook+0x2d1/0x350 [ 91.787282][ T7744] get_page_from_freelist+0x101e/0x3070 [ 91.788742][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 91.790629][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 91.792048][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 91.793541][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 91.794892][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 91.796206][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 91.797800][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.799119][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.800666][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.801890][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.803075][ T7744] do_syscall_64+0xcd/0x250 [ 91.804281][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.805807][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 91.807426][ T7744] register_dummy_stack+0x8a/0xd0 [ 91.808725][ T7744] init_page_owner+0x48/0xc00 [ 91.809994][ T7744] page_ext_init+0x6b8/0xab0 [ 91.811173][ T7744] mm_core_init+0x12d/0x220 [ 91.812384][ T7744] Modules linked in: [ 91.813414][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 91.816419][ T7744] Tainted: [B]=BAD_PAGE [ 91.817446][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.820217][ T7744] Call Trace: [ 91.821095][ T7744] [ 91.821871][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 91.823103][ T7744] bad_page+0xb3/0x1f0 [ 91.824183][ T7744] ? __pfx_bad_page+0x10/0x10 [ 91.825410][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 91.826694][ T7744] free_unref_page+0x657/0xdc0 [ 91.827953][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 91.829514][ T7744] ? __phys_addr+0xc6/0x150 [ 91.830683][ T7744] skb_free_head+0xa0/0x1d0 [ 91.831874][ T7744] skb_release_data+0x560/0x730 [ 91.833177][ T7744] ? packet_rcv+0x16c/0x15a0 [ 91.834398][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.835661][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 91.837001][ T7744] packet_rcv+0x16c/0x15a0 [ 91.838130][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 91.839398][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 91.840975][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.842649][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 91.844007][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.845667][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.846887][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.848597][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.850198][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.851953][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 91.853317][ T7744] ? __build_skb_around+0x278/0x3b0 [ 91.854676][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 91.856065][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 91.857695][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.859404][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 91.860867][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.862242][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.863746][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.865315][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.866851][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.868352][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.869744][ T7744] ? 0xffffffffa0006f40 [ 91.870830][ T7744] ? 0xffffffffa0006f40 [ 91.871942][ T7744] ? 0xffffffffa0006f40 [ 91.873027][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.874557][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.875968][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.877154][ T7744] ? __fget_files+0x40/0x3f0 [ 91.878364][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.879898][ T7744] ? fput+0x30/0x390 [ 91.880935][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 91.882199][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.883711][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.884857][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 91.886113][ T7744] ? __schedule+0xe5d/0x5730 [ 91.887325][ T7744] ? __fget_files+0x23a/0x3f0 [ 91.888494][ T7744] ? do_futex+0x123/0x350 [ 91.889582][ T7744] ? __pfx_do_futex+0x10/0x10 [ 91.891177][ T7744] ? xfd_validate_state+0x5d/0x180 [ 91.892600][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.893878][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.895075][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.896656][ T7744] do_syscall_64+0xcd/0x250 [ 91.898092][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.900068][ T7744] RIP: 0033:0x7f783637e719 [ 91.901556][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.907493][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.910170][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 91.912237][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.914279][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 91.916287][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.918264][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 91.920218][ T7744] [ 91.921176][ T7744] BUG: Bad page state in process syz.7.434 pfn:3643f [ 91.922885][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xe0 pfn:0x3643f [ 91.925118][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.926879][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 91.929086][ T7744] raw: 00000000000000e0 0000000000000001 00000000ffffffff 0000000000000000 [ 91.931330][ T7744] page dumped because: page_pool leak [ 91.932741][ T7744] page_owner tracks the page as allocated [ 91.934218][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060566982, free_ts 84029963820 [ 91.938301][ T7744] post_alloc_hook+0x2d1/0x350 [ 91.939538][ T7744] get_page_from_freelist+0x101e/0x3070 [ 91.940989][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 91.942360][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 91.943806][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 91.945329][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 91.946667][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 91.948339][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 91.950148][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 91.951533][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.952958][ T7744] __sys_bpf+0xfc6/0x49a0 [ 91.954098][ T7744] __x64_sys_bpf+0x78/0xc0 [ 91.955266][ T7744] do_syscall_64+0xcd/0x250 [ 91.956463][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.957989][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 91.959607][ T7744] register_dummy_stack+0x8a/0xd0 [ 91.960995][ T7744] init_page_owner+0x48/0xc00 [ 91.962225][ T7744] page_ext_init+0x6b8/0xab0 [ 91.963440][ T7744] mm_core_init+0x12d/0x220 [ 91.964632][ T7744] Modules linked in: [ 91.965652][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 91.968693][ T7744] Tainted: [B]=BAD_PAGE [ 91.969775][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.972512][ T7744] Call Trace: [ 91.973382][ T7744] [ 91.974165][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 91.975396][ T7744] bad_page+0xb3/0x1f0 [ 91.976472][ T7744] ? __pfx_bad_page+0x10/0x10 [ 91.977714][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 91.978982][ T7744] free_unref_page+0x657/0xdc0 [ 91.980265][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 91.981826][ T7744] ? __phys_addr+0xc6/0x150 [ 91.983057][ T7744] skb_free_head+0xa0/0x1d0 [ 91.984306][ T7744] skb_release_data+0x560/0x730 [ 91.985585][ T7744] ? packet_rcv+0x16c/0x15a0 [ 91.986820][ T7744] ? rcu_is_watching+0x12/0xc0 [ 91.988191][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 91.989598][ T7744] packet_rcv+0x16c/0x15a0 [ 91.990790][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 91.992096][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 91.993671][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.995319][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 91.996711][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.998329][ T7744] ? lock_acquire+0x2f/0xb0 [ 91.999518][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.001221][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.002831][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.004583][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 92.005925][ T7744] ? __build_skb_around+0x278/0x3b0 [ 92.007872][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 92.009299][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.010938][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.012629][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.014014][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.015393][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.016937][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.018447][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.020201][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.021877][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.023262][ T7744] ? 0xffffffffa0006f40 [ 92.024351][ T7744] ? 0xffffffffa0006f40 [ 92.025439][ T7744] ? 0xffffffffa0006f40 [ 92.026517][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.028055][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.029443][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.030623][ T7744] ? __fget_files+0x40/0x3f0 [ 92.031871][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.033405][ T7744] ? fput+0x30/0x390 [ 92.034438][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 92.035693][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.037219][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.038361][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 92.039614][ T7744] ? __schedule+0xe5d/0x5730 [ 92.040841][ T7744] ? __fget_files+0x23a/0x3f0 [ 92.042065][ T7744] ? do_futex+0x123/0x350 [ 92.043190][ T7744] ? __pfx_do_futex+0x10/0x10 [ 92.044817][ T7744] ? xfd_validate_state+0x5d/0x180 [ 92.046448][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.047765][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.049071][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.050534][ T7744] do_syscall_64+0xcd/0x250 [ 92.051765][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.053566][ T7744] RIP: 0033:0x7f783637e719 [ 92.054747][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.059755][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.061958][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 92.064043][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.066339][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 92.068625][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.070913][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 92.073275][ T7744] [ 92.074220][ T7744] BUG: Bad page state in process syz.7.434 pfn:36440 [ 92.075985][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xdf pfn:0x36440 [ 92.078248][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.080184][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 92.082455][ T7744] raw: 00000000000000df 0000000000000001 00000000ffffffff 0000000000000000 [ 92.084726][ T7744] page dumped because: page_pool leak [ 92.086129][ T7744] page_owner tracks the page as allocated [ 92.087562][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060562810, free_ts 84029967851 [ 92.092058][ T7744] post_alloc_hook+0x2d1/0x350 [ 92.093293][ T7744] get_page_from_freelist+0x101e/0x3070 [ 92.094719][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 92.096277][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.097697][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.099276][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 92.100854][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 92.102798][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.104532][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.106041][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.107501][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.108668][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.109908][ T7744] do_syscall_64+0xcd/0x250 [ 92.111124][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.112700][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 92.114332][ T7744] register_dummy_stack+0x8a/0xd0 [ 92.115732][ T7744] init_page_owner+0x48/0xc00 [ 92.117030][ T7744] page_ext_init+0x6b8/0xab0 [ 92.118399][ T7744] mm_core_init+0x12d/0x220 [ 92.119940][ T7744] Modules linked in: [ 92.121204][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 92.125000][ T7744] Tainted: [B]=BAD_PAGE [ 92.126250][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.129602][ T7744] Call Trace: [ 92.130488][ T7744] [ 92.131280][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 92.132645][ T7744] bad_page+0xb3/0x1f0 [ 92.133752][ T7744] ? __pfx_bad_page+0x10/0x10 [ 92.135026][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 92.136349][ T7744] free_unref_page+0x657/0xdc0 [ 92.137692][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.139320][ T7744] ? __phys_addr+0xc6/0x150 [ 92.140545][ T7744] skb_free_head+0xa0/0x1d0 [ 92.141754][ T7744] skb_release_data+0x560/0x730 [ 92.143053][ T7744] ? packet_rcv+0x16c/0x15a0 [ 92.144303][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.145581][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 92.146918][ T7744] packet_rcv+0x16c/0x15a0 [ 92.148109][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 92.149397][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 92.150973][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.152645][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 92.153945][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.155601][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.156816][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.158397][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.160028][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.161668][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 92.163046][ T7744] ? __build_skb_around+0x278/0x3b0 [ 92.164430][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 92.165807][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.167693][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.169606][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.171150][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.172502][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.174132][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.175665][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.177185][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.178722][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.180111][ T7744] ? 0xffffffffa0006f40 [ 92.181203][ T7744] ? 0xffffffffa0006f40 [ 92.182255][ T7744] ? 0xffffffffa0006f40 [ 92.183306][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.184849][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.186249][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.187433][ T7744] ? __fget_files+0x40/0x3f0 [ 92.188675][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.190510][ T7744] ? fput+0x30/0x390 [ 92.191564][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 92.192891][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.194453][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.195606][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 92.196882][ T7744] ? __schedule+0xe5d/0x5730 [ 92.198124][ T7744] ? __fget_files+0x23a/0x3f0 [ 92.199397][ T7744] ? do_futex+0x123/0x350 [ 92.200649][ T7744] ? __pfx_do_futex+0x10/0x10 [ 92.201907][ T7744] ? xfd_validate_state+0x5d/0x180 [ 92.203256][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.204729][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.206083][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.207437][ T7744] do_syscall_64+0xcd/0x250 [ 92.208627][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.210171][ T7744] RIP: 0033:0x7f783637e719 [ 92.211311][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.216300][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.218479][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 92.220540][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.222585][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 92.224634][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.226661][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 92.228724][ T7744] [ 92.229642][ T7744] BUG: Bad page state in process syz.7.434 pfn:36441 [ 92.231412][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xde pfn:0x36441 [ 92.233733][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.235586][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 92.237786][ T7744] raw: 00000000000000de 0000000000000001 00000000ffffffff 0000000000000000 [ 92.240009][ T7744] page dumped because: page_pool leak [ 92.241321][ T7744] page_owner tracks the page as allocated [ 92.242727][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060558659, free_ts 84029972355 [ 92.246952][ T7744] post_alloc_hook+0x2d1/0x350 [ 92.248211][ T7744] get_page_from_freelist+0x101e/0x3070 [ 92.249668][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 92.251101][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.252575][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.254131][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 92.255471][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 92.256781][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.258379][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.259798][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.261196][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.262316][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.263476][ T7744] do_syscall_64+0xcd/0x250 [ 92.264666][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.266197][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 92.267816][ T7744] register_dummy_stack+0x8a/0xd0 [ 92.269135][ T7744] init_page_owner+0x48/0xc00 [ 92.270368][ T7744] page_ext_init+0x6b8/0xab0 [ 92.271552][ T7744] mm_core_init+0x12d/0x220 [ 92.272772][ T7744] Modules linked in: [ 92.273797][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 92.276866][ T7744] Tainted: [B]=BAD_PAGE [ 92.277943][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.280721][ T7744] Call Trace: [ 92.281594][ T7744] [ 92.282368][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 92.283596][ T7744] bad_page+0xb3/0x1f0 [ 92.284676][ T7744] ? __pfx_bad_page+0x10/0x10 [ 92.285889][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 92.287154][ T7744] free_unref_page+0x657/0xdc0 [ 92.288408][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.289771][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 92.289960][ T7744] ? __phys_addr+0xc6/0x150 [ 92.293608][ T7744] skb_free_head+0xa0/0x1d0 [ 92.294798][ T7744] skb_release_data+0x560/0x730 [ 92.296062][ T7744] ? packet_rcv+0x16c/0x15a0 [ 92.297263][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.298507][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 92.299816][ T7744] packet_rcv+0x16c/0x15a0 [ 92.300991][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 92.302259][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 92.303827][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.305509][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 92.306858][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.308489][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.309659][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.311305][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.312921][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.314626][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 92.315963][ T7744] ? __build_skb_around+0x278/0x3b0 [ 92.317260][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 92.318619][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.320180][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.321810][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.323259][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.324632][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.326144][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.327674][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.329207][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.330707][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.332080][ T7744] ? 0xffffffffa0006f40 [ 92.333144][ T7744] ? 0xffffffffa0006f40 [ 92.334226][ T7744] ? 0xffffffffa0006f40 [ 92.335305][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.336849][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.338174][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.339249][ T7744] ? __fget_files+0x40/0x3f0 [ 92.340438][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.341964][ T7744] ? fput+0x30/0x390 [ 92.342996][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 92.344252][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.345768][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.346903][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 92.348186][ T7744] ? __schedule+0xe5d/0x5730 [ 92.349390][ T7744] ? __fget_files+0x23a/0x3f0 [ 92.350614][ T7744] ? do_futex+0x123/0x350 [ 92.351758][ T7744] ? __pfx_do_futex+0x10/0x10 [ 92.352990][ T7744] ? xfd_validate_state+0x5d/0x180 [ 92.354309][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.355558][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.356744][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.358105][ T7744] do_syscall_64+0xcd/0x250 [ 92.359305][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.360873][ T7744] RIP: 0033:0x7f783637e719 [ 92.362013][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.367191][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.369364][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 92.371425][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.373601][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 92.375652][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.377739][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 92.379810][ T7744] [ 92.380704][ T7744] BUG: Bad page state in process syz.7.434 pfn:36442 [ 92.382453][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xdd pfn:0x36442 [ 92.384734][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.386568][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 92.388772][ T7744] raw: 00000000000000dd 0000000000000001 00000000ffffffff 0000000000000000 [ 92.391053][ T7744] page dumped because: page_pool leak [ 92.392464][ T7744] page_owner tracks the page as allocated [ 92.393931][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060554391, free_ts 84029975954 [ 92.398161][ T7744] post_alloc_hook+0x2d1/0x350 [ 92.399410][ T7744] get_page_from_freelist+0x101e/0x3070 [ 92.400891][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 92.402267][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.403707][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.405243][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 92.407025][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 92.408440][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.410107][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.411453][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.412889][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.414039][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.415226][ T7744] do_syscall_64+0xcd/0x250 [ 92.416457][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.418037][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 92.419763][ T7744] register_dummy_stack+0x8a/0xd0 [ 92.421102][ T7744] init_page_owner+0x48/0xc00 [ 92.422350][ T7744] page_ext_init+0x6b8/0xab0 [ 92.423575][ T7744] mm_core_init+0x12d/0x220 [ 92.424773][ T7744] Modules linked in: [ 92.425802][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 92.428870][ T7744] Tainted: [B]=BAD_PAGE [ 92.429984][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.432755][ T7744] Call Trace: [ 92.433619][ T7744] [ 92.434392][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 92.435624][ T7744] bad_page+0xb3/0x1f0 [ 92.436702][ T7744] ? __pfx_bad_page+0x10/0x10 [ 92.437948][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 92.439231][ T7744] free_unref_page+0x657/0xdc0 [ 92.440494][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.442069][ T7744] ? __phys_addr+0xc6/0x150 [ 92.443263][ T7744] skb_free_head+0xa0/0x1d0 [ 92.444609][ T7744] skb_release_data+0x560/0x730 [ 92.445964][ T7744] ? packet_rcv+0x16c/0x15a0 [ 92.447184][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.448464][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 92.449789][ T7744] packet_rcv+0x16c/0x15a0 [ 92.450968][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 92.452375][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 92.453972][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.455677][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 92.457061][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.458708][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.459912][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.461564][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.463151][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.465005][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 92.466441][ T7744] ? __build_skb_around+0x278/0x3b0 [ 92.467894][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 92.469277][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.470905][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.472616][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.474077][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.475451][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.476997][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.478512][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.480061][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.481593][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.482964][ T7744] ? 0xffffffffa0006f40 [ 92.484050][ T7744] ? 0xffffffffa0006f40 [ 92.485112][ T7744] ? 0xffffffffa0006f40 [ 92.486836][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.488761][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.490316][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.491606][ T7744] ? __fget_files+0x40/0x3f0 [ 92.492908][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.494559][ T7744] ? fput+0x30/0x390 [ 92.495710][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 92.497132][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.498833][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.500096][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 92.501470][ T7744] ? __schedule+0xe5d/0x5730 [ 92.502807][ T7744] ? __fget_files+0x23a/0x3f0 [ 92.504095][ T7744] ? do_futex+0x123/0x350 [ 92.505228][ T7744] ? __pfx_do_futex+0x10/0x10 [ 92.506464][ T7744] ? xfd_validate_state+0x5d/0x180 [ 92.507794][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.509056][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.510224][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.511590][ T7744] do_syscall_64+0xcd/0x250 [ 92.512917][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.514480][ T7744] RIP: 0033:0x7f783637e719 [ 92.515658][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.520641][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.522858][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 92.524868][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.526960][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 92.529101][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.531345][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 92.533842][ T7744] [ 92.534877][ T7744] BUG: Bad page state in process syz.7.434 pfn:36443 [ 92.536835][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xdc pfn:0x36443 [ 92.539284][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.541318][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 92.543701][ T7744] raw: 00000000000000dc 0000000000000001 00000000ffffffff 0000000000000000 [ 92.545949][ T7744] page dumped because: page_pool leak [ 92.547352][ T7744] page_owner tracks the page as allocated [ 92.548854][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060549988, free_ts 84029983807 [ 92.553210][ T7744] post_alloc_hook+0x2d1/0x350 [ 92.554556][ T7744] get_page_from_freelist+0x101e/0x3070 [ 92.556084][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 92.557479][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.558905][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.560515][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 92.561906][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 92.563249][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.564866][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.566241][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.567859][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.569140][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.570380][ T7744] do_syscall_64+0xcd/0x250 [ 92.571582][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.573278][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 92.574922][ T7744] register_dummy_stack+0x8a/0xd0 [ 92.576247][ T7744] init_page_owner+0x48/0xc00 [ 92.577486][ T7744] page_ext_init+0x6b8/0xab0 [ 92.578704][ T7744] mm_core_init+0x12d/0x220 [ 92.579988][ T7744] Modules linked in: [ 92.581023][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 92.584059][ T7744] Tainted: [B]=BAD_PAGE [ 92.585551][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.588645][ T7744] Call Trace: [ 92.589534][ T7744] [ 92.590293][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 92.591670][ T7744] bad_page+0xb3/0x1f0 [ 92.592889][ T7744] ? __pfx_bad_page+0x10/0x10 [ 92.594214][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 92.595673][ T7744] free_unref_page+0x657/0xdc0 [ 92.597304][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.599340][ T7744] ? __phys_addr+0xc6/0x150 [ 92.600611][ T7744] skb_free_head+0xa0/0x1d0 [ 92.601805][ T7744] skb_release_data+0x560/0x730 [ 92.603080][ T7744] ? packet_rcv+0x16c/0x15a0 [ 92.604308][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.605575][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 92.606857][ T7744] packet_rcv+0x16c/0x15a0 [ 92.608034][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 92.609301][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 92.611117][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.612909][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 92.614317][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.615905][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.617107][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.618760][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.620398][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.622137][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 92.623507][ T7744] ? __build_skb_around+0x278/0x3b0 [ 92.624822][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 92.626170][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.628382][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.630113][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.631587][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.633017][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.634552][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.636231][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.637746][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.639248][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.640641][ T7744] ? 0xffffffffa0006f40 [ 92.641712][ T7744] ? 0xffffffffa0006f40 [ 92.642764][ T7744] ? 0xffffffffa0006f40 [ 92.643842][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.645392][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.646809][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.648010][ T7744] ? __fget_files+0x40/0x3f0 [ 92.649213][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.650666][ T7744] ? fput+0x30/0x390 [ 92.651688][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 92.652953][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.654470][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.655608][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 92.656898][ T7744] ? __schedule+0xe5d/0x5730 [ 92.658113][ T7744] ? __fget_files+0x23a/0x3f0 [ 92.659364][ T7744] ? do_futex+0x123/0x350 [ 92.660529][ T7744] ? __pfx_do_futex+0x10/0x10 [ 92.661752][ T7744] ? xfd_validate_state+0x5d/0x180 [ 92.663081][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.664400][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.665632][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.667091][ T7744] do_syscall_64+0xcd/0x250 [ 92.668336][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.669937][ T7744] RIP: 0033:0x7f783637e719 [ 92.671101][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.676037][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.678113][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 92.680083][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.682075][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 92.684082][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.686104][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 92.688052][ T7744] [ 92.688921][ T7744] BUG: Bad page state in process syz.7.434 pfn:36444 [ 92.690647][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xdb pfn:0x36444 [ 92.692868][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.694606][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 92.696799][ T7744] raw: 00000000000000db 0000000000000001 00000000ffffffff 0000000000000000 [ 92.698924][ T7744] page dumped because: page_pool leak [ 92.700335][ T7744] page_owner tracks the page as allocated [ 92.701766][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060545514, free_ts 84029987390 [ 92.706167][ T7744] post_alloc_hook+0x2d1/0x350 [ 92.707496][ T7744] get_page_from_freelist+0x101e/0x3070 [ 92.708962][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 92.710382][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.711809][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.713332][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 92.714685][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 92.715998][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.717517][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.718888][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.720278][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.721396][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.722516][ T7744] do_syscall_64+0xcd/0x250 [ 92.723680][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.725112][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 92.726648][ T7744] register_dummy_stack+0x8a/0xd0 [ 92.727983][ T7744] init_page_owner+0x48/0xc00 [ 92.729236][ T7744] page_ext_init+0x6b8/0xab0 [ 92.730484][ T7744] mm_core_init+0x12d/0x220 [ 92.731726][ T7744] Modules linked in: [ 92.732715][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 92.735663][ T7744] Tainted: [B]=BAD_PAGE [ 92.736711][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.739477][ T7744] Call Trace: [ 92.740342][ T7744] [ 92.741118][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 92.742346][ T7744] bad_page+0xb3/0x1f0 [ 92.743427][ T7744] ? __pfx_bad_page+0x10/0x10 [ 92.744675][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 92.745953][ T7744] free_unref_page+0x657/0xdc0 [ 92.747207][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.748776][ T7744] ? __phys_addr+0xc6/0x150 [ 92.749966][ T7744] skb_free_head+0xa0/0x1d0 [ 92.751186][ T7744] skb_release_data+0x560/0x730 [ 92.752485][ T7744] ? packet_rcv+0x16c/0x15a0 [ 92.753695][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.754954][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 92.756282][ T7744] packet_rcv+0x16c/0x15a0 [ 92.757395][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 92.758599][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 92.760091][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.761735][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 92.763077][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.764707][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.765857][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.767443][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.769017][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.770668][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 92.771971][ T7744] ? __build_skb_around+0x278/0x3b0 [ 92.773350][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 92.774777][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.776476][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.778147][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.779609][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.781040][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.782590][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.784149][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.785691][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.787278][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.788695][ T7744] ? 0xffffffffa0006f40 [ 92.789910][ T7744] ? 0xffffffffa0006f40 [ 92.791033][ T7744] ? 0xffffffffa0006f40 [ 92.792152][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.793839][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.795400][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.796845][ T7744] ? __fget_files+0x40/0x3f0 [ 92.798440][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.800350][ T7744] ? fput+0x30/0x390 [ 92.801504][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 92.802752][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.804580][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.805687][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 92.806869][ T7744] ? __schedule+0xe5d/0x5730 [ 92.808478][ T7744] ? __fget_files+0x23a/0x3f0 [ 92.809970][ T7744] ? do_futex+0x123/0x350 [ 92.811623][ T7744] ? __pfx_do_futex+0x10/0x10 [ 92.813184][ T7744] ? xfd_validate_state+0x5d/0x180 [ 92.814493][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.815682][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.817101][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.818855][ T7744] do_syscall_64+0xcd/0x250 [ 92.820380][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.822424][ T7744] RIP: 0033:0x7f783637e719 [ 92.823933][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.830092][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.833288][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 92.835837][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.837991][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 92.840090][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.842176][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 92.844293][ T7744] [ 92.845241][ T7744] BUG: Bad page state in process syz.7.434 pfn:3080b [ 92.846955][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803080b380 pfn:0x3080b [ 92.849484][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.851464][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 92.853808][ T7744] raw: ffff88803080b380 0000000000000001 00000000ffffffff 0000000000000000 [ 92.856115][ T7744] page dumped because: page_pool leak [ 92.857550][ T7744] page_owner tracks the page as allocated [ 92.859060][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060536921, free_ts 84029991023 [ 92.863920][ T7744] post_alloc_hook+0x2d1/0x350 [ 92.865499][ T7744] get_page_from_freelist+0x101e/0x3070 [ 92.867022][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 92.868479][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 92.870254][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 92.872053][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 92.873621][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 92.875142][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 92.876850][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.878295][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.879834][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.881044][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.882263][ T7744] do_syscall_64+0xcd/0x250 [ 92.883500][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.885105][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 92.886790][ T7744] register_dummy_stack+0x8a/0xd0 [ 92.888274][ T7744] init_page_owner+0x48/0xc00 [ 92.889601][ T7744] page_ext_init+0x6b8/0xab0 [ 92.890960][ T7744] mm_core_init+0x12d/0x220 [ 92.892307][ T7744] Modules linked in: [ 92.893391][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 92.896663][ T7744] Tainted: [B]=BAD_PAGE [ 92.897785][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.900539][ T7744] Call Trace: [ 92.901454][ T7744] [ 92.902271][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 92.903563][ T7744] bad_page+0xb3/0x1f0 [ 92.904667][ T7744] ? __pfx_bad_page+0x10/0x10 [ 92.905965][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 92.907469][ T7744] free_unref_page+0x657/0xdc0 [ 92.908932][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 92.910598][ T7744] ? __phys_addr+0xc6/0x150 [ 92.911961][ T7744] skb_free_head+0xa0/0x1d0 [ 92.913226][ T7744] skb_release_data+0x560/0x730 [ 92.914579][ T7744] ? packet_rcv+0x16c/0x15a0 [ 92.915870][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.917286][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 92.918655][ T7744] packet_rcv+0x16c/0x15a0 [ 92.919900][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 92.921249][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 92.922880][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 92.924648][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 92.926049][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.927712][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.928910][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 92.930568][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 92.932240][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 92.933995][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 92.935417][ T7744] ? __build_skb_around+0x278/0x3b0 [ 92.936811][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 92.938243][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 92.939946][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 92.941727][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 92.943239][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 92.944805][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.946394][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.948209][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.950021][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.951707][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.953163][ T7744] ? 0xffffffffa0006f40 [ 92.954313][ T7744] ? 0xffffffffa0006f40 [ 92.955463][ T7744] ? 0xffffffffa0006f40 [ 92.956615][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 92.958267][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 92.959771][ T7744] ? lock_acquire+0x2f/0xb0 [ 92.961248][ T7744] ? __fget_files+0x40/0x3f0 [ 92.962591][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.964219][ T7744] ? fput+0x30/0x390 [ 92.965290][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 92.966588][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.968123][ T7744] __sys_bpf+0xfc6/0x49a0 [ 92.969281][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 92.970585][ T7744] ? __schedule+0xe5d/0x5730 [ 92.971857][ T7744] ? __fget_files+0x23a/0x3f0 [ 92.973286][ T7744] ? do_futex+0x123/0x350 [ 92.974547][ T7744] ? __pfx_do_futex+0x10/0x10 [ 92.975783][ T7744] ? xfd_validate_state+0x5d/0x180 [ 92.977146][ T7744] ? rcu_is_watching+0x12/0xc0 [ 92.978415][ T7744] __x64_sys_bpf+0x78/0xc0 [ 92.979635][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.981060][ T7744] do_syscall_64+0xcd/0x250 [ 92.982299][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.983852][ T7744] RIP: 0033:0x7f783637e719 [ 92.985060][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.990552][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.992802][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 92.995003][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 92.997121][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 92.999308][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.001649][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 93.003966][ T7744] [ 93.005077][ T7744] BUG: Bad page state in process syz.7.434 pfn:50abb [ 93.007001][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1fb0 pfn:0x50abb [ 93.009601][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.011556][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 93.013897][ T7744] raw: 0000000000001fb0 0000000000000001 00000000ffffffff 0000000000000000 [ 93.016213][ T7744] page dumped because: page_pool leak [ 93.017658][ T7744] page_owner tracks the page as allocated [ 93.019202][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060532208, free_ts 84029994780 [ 93.023816][ T7744] post_alloc_hook+0x2d1/0x350 [ 93.025794][ T7744] get_page_from_freelist+0x101e/0x3070 [ 93.027289][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 93.028727][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.030299][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.031964][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 93.033390][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 93.034786][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.036448][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.037900][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.039351][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.040657][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.041900][ T7744] do_syscall_64+0xcd/0x250 [ 93.043159][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.044777][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 93.046468][ T7744] register_dummy_stack+0x8a/0xd0 [ 93.047785][ T7744] init_page_owner+0x48/0xc00 [ 93.049006][ T7744] page_ext_init+0x6b8/0xab0 [ 93.050354][ T7744] mm_core_init+0x12d/0x220 [ 93.051570][ T7744] Modules linked in: [ 93.052650][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 93.055808][ T7744] Tainted: [B]=BAD_PAGE [ 93.056936][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.059798][ T7744] Call Trace: [ 93.060722][ T7744] [ 93.061487][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 93.062772][ T7744] bad_page+0xb3/0x1f0 [ 93.063887][ T7744] ? __pfx_bad_page+0x10/0x10 [ 93.065172][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 93.066483][ T7744] free_unref_page+0x657/0xdc0 [ 93.068277][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.070242][ T7744] ? __phys_addr+0xc6/0x150 [ 93.071730][ T7744] skb_free_head+0xa0/0x1d0 [ 93.073091][ T7744] skb_release_data+0x560/0x730 [ 93.074423][ T7744] ? packet_rcv+0x16c/0x15a0 [ 93.075709][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.077031][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 93.078473][ T7744] packet_rcv+0x16c/0x15a0 [ 93.079729][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 93.081013][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 93.082636][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.084414][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 93.085854][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.087559][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.088823][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.090550][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.092283][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.094093][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 93.095524][ T7744] ? __build_skb_around+0x278/0x3b0 [ 93.096955][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 93.098390][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.100091][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.101885][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.103398][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.104865][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.106452][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.108060][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.109658][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.111252][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.112712][ T7744] ? 0xffffffffa0006f40 [ 93.113862][ T7744] ? 0xffffffffa0006f40 [ 93.115027][ T7744] ? 0xffffffffa0006f40 [ 93.116205][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.117855][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.119348][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.120682][ T7744] ? __fget_files+0x40/0x3f0 [ 93.121934][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.123502][ T7744] ? fput+0x30/0x390 [ 93.124575][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 93.125876][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.127445][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.128637][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 93.129933][ T7744] ? __schedule+0xe5d/0x5730 [ 93.131189][ T7744] ? __fget_files+0x23a/0x3f0 [ 93.132500][ T7744] ? do_futex+0x123/0x350 [ 93.133684][ T7744] ? __pfx_do_futex+0x10/0x10 [ 93.134966][ T7744] ? xfd_validate_state+0x5d/0x180 [ 93.136362][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.137663][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.138848][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.140213][ T7744] do_syscall_64+0xcd/0x250 [ 93.141625][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.143143][ T7744] RIP: 0033:0x7f783637e719 [ 93.144617][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.149797][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.152114][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 93.154257][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.156393][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 93.158526][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.160756][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 93.162914][ T7744] [ 93.163865][ T7744] BUG: Bad page state in process syz.7.434 pfn:36445 [ 93.166216][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xda pfn:0x36445 [ 93.168525][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.170634][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 93.173256][ T7744] raw: 00000000000000da 0000000000000001 00000000ffffffff 0000000000000000 [ 93.175558][ T7744] page dumped because: page_pool leak [ 93.177168][ T7744] page_owner tracks the page as allocated [ 93.178609][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060527889, free_ts 84029999693 [ 93.183823][ T7744] post_alloc_hook+0x2d1/0x350 [ 93.185123][ T7744] get_page_from_freelist+0x101e/0x3070 [ 93.186584][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 93.187969][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.189409][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.190963][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 93.192412][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 93.193784][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.195382][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.196761][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.198123][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.199301][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.200535][ T7744] do_syscall_64+0xcd/0x250 [ 93.201706][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.203233][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 93.204235][ T5298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.204897][ T7744] register_dummy_stack+0x8a/0xd0 [ 93.206889][ T5298] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.208050][ T7744] init_page_owner+0x48/0xc00 [ 93.210156][ T5298] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.211228][ T7744] page_ext_init+0x6b8/0xab0 [ 93.213703][ T5298] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.214393][ T7744] mm_core_init+0x12d/0x220 [ 93.217165][ T5298] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.217775][ T7744] Modules linked in: [ 93.219941][ T5298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.220773][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 93.226066][ T7744] Tainted: [B]=BAD_PAGE [ 93.227140][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.229964][ T7744] Call Trace: [ 93.230936][ T7744] [ 93.231848][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 93.233198][ T7744] bad_page+0xb3/0x1f0 [ 93.234431][ T7744] ? __pfx_bad_page+0x10/0x10 [ 93.235727][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 93.237100][ T7744] free_unref_page+0x657/0xdc0 [ 93.238423][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.240045][ T7744] ? __phys_addr+0xc6/0x150 [ 93.241284][ T7744] skb_free_head+0xa0/0x1d0 [ 93.242528][ T7744] skb_release_data+0x560/0x730 [ 93.243843][ T7744] ? packet_rcv+0x16c/0x15a0 [ 93.245095][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.246396][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 93.247759][ T7744] packet_rcv+0x16c/0x15a0 [ 93.248974][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 93.250300][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 93.251957][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.253702][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 93.255117][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.256847][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.258045][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.259770][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.261448][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.263568][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 93.265283][ T7744] ? __build_skb_around+0x278/0x3b0 [ 93.266989][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 93.268487][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.270237][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.272177][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.273706][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.275097][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.276767][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.278411][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.280095][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.281803][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.283346][ T7744] ? 0xffffffffa0006f40 [ 93.284779][ T7744] ? 0xffffffffa0006f40 [ 93.285961][ T7744] ? 0xffffffffa0006f40 [ 93.287140][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.288785][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.290325][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.291599][ T7744] ? __fget_files+0x40/0x3f0 [ 93.292918][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.293050][ T7858] chnl_net:caif_netlink_parms(): no params data found [ 93.294461][ T7744] ? fput+0x30/0x390 [ 93.298224][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 93.299692][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.301501][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.302892][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 93.304351][ T7744] ? __schedule+0xe5d/0x5730 [ 93.305771][ T7744] ? __fget_files+0x23a/0x3f0 [ 93.307008][ T7744] ? do_futex+0x123/0x350 [ 93.308481][ T7744] ? __pfx_do_futex+0x10/0x10 [ 93.309907][ T7744] ? xfd_validate_state+0x5d/0x180 [ 93.311484][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.313013][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.314311][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.315742][ T7744] do_syscall_64+0xcd/0x250 [ 93.317000][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.318583][ T7744] RIP: 0033:0x7f783637e719 [ 93.319806][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 93.319819][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.326945][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.329205][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 93.331342][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.333527][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 93.335652][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.337719][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 93.339827][ T7744] [ 93.340749][ T7744] BUG: Bad page state in process syz.7.434 pfn:36446 [ 93.342570][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xd9 pfn:0x36446 [ 93.344976][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.347148][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 93.349611][ T7744] raw: 00000000000000d9 0000000000000001 00000000ffffffff 0000000000000000 [ 93.352432][ T7744] page dumped because: page_pool leak [ 93.353966][ T7744] page_owner tracks the page as allocated [ 93.355501][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060523269, free_ts 84030003223 [ 93.360130][ T7744] post_alloc_hook+0x2d1/0x350 [ 93.361465][ T7744] get_page_from_freelist+0x101e/0x3070 [ 93.362967][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 93.364433][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.365906][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.367465][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 93.369575][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 93.371037][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.372838][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.374276][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.375758][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.376960][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.378197][ T7744] do_syscall_64+0xcd/0x250 [ 93.379495][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.381353][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 93.383220][ T7744] register_dummy_stack+0x8a/0xd0 [ 93.384712][ T7744] init_page_owner+0x48/0xc00 [ 93.386070][ T7744] page_ext_init+0x6b8/0xab0 [ 93.387390][ T7744] mm_core_init+0x12d/0x220 [ 93.388707][ T7744] Modules linked in: [ 93.389871][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 93.393553][ T7744] Tainted: [B]=BAD_PAGE [ 93.394760][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.397650][ T7744] Call Trace: [ 93.398574][ T7744] [ 93.399389][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 93.400697][ T7744] bad_page+0xb3/0x1f0 [ 93.401822][ T7744] ? __pfx_bad_page+0x10/0x10 [ 93.403107][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 93.404465][ T7744] free_unref_page+0x657/0xdc0 [ 93.405768][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.407384][ T7744] ? __phys_addr+0xc6/0x150 [ 93.408639][ T7744] skb_free_head+0xa0/0x1d0 [ 93.409864][ T7744] skb_release_data+0x560/0x730 [ 93.411182][ T7744] ? packet_rcv+0x16c/0x15a0 [ 93.412448][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.413743][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 93.415088][ T7744] packet_rcv+0x16c/0x15a0 [ 93.416353][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 93.417673][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 93.419263][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.420976][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 93.422402][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.424113][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.425356][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.427059][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.428866][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.430724][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 93.432294][ T7744] ? __build_skb_around+0x278/0x3b0 [ 93.433684][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 93.435115][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.436817][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.438532][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.440041][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.441416][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.443006][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.444607][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.446217][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.447692][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.449074][ T7744] ? 0xffffffffa0006f40 [ 93.450103][ T7744] ? 0xffffffffa0006f40 [ 93.451213][ T7744] ? 0xffffffffa0006f40 [ 93.452361][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.453955][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.455420][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.456665][ T7744] ? __fget_files+0x40/0x3f0 [ 93.457885][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.459422][ T7744] ? fput+0x30/0x390 [ 93.460515][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 93.461824][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.463394][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.464580][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 93.465810][ T7744] ? __schedule+0xe5d/0x5730 [ 93.466987][ T7744] ? __fget_files+0x23a/0x3f0 [ 93.468244][ T7744] ? do_futex+0x123/0x350 [ 93.469378][ T7744] ? __pfx_do_futex+0x10/0x10 [ 93.470817][ T7744] ? xfd_validate_state+0x5d/0x180 [ 93.472350][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.473630][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.474757][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.476144][ T7744] do_syscall_64+0xcd/0x250 [ 93.477354][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.478902][ T7744] RIP: 0033:0x7f783637e719 [ 93.480125][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.485176][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.487326][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 93.489365][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.491353][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 93.493397][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.495299][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 93.497238][ T7744] [ 93.498109][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b2d [ 93.499808][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b2d [ 93.502044][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.503790][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 93.505954][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 93.508221][ T7744] page dumped because: page_pool leak [ 93.509621][ T7744] page_owner tracks the page as allocated [ 93.511173][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060518626, free_ts 84030006813 [ 93.515431][ T7744] post_alloc_hook+0x2d1/0x350 [ 93.516708][ T7744] get_page_from_freelist+0x101e/0x3070 [ 93.518137][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 93.519508][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.521014][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.522569][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 93.523957][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 93.525269][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.526810][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.528136][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.529463][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.530582][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.531972][ T7744] do_syscall_64+0xcd/0x250 [ 93.533135][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.534522][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 93.536138][ T7744] register_dummy_stack+0x8a/0xd0 [ 93.537409][ T7744] init_page_owner+0x48/0xc00 [ 93.538682][ T7744] page_ext_init+0x6b8/0xab0 [ 93.539867][ T7744] mm_core_init+0x12d/0x220 [ 93.541070][ T7744] Modules linked in: [ 93.542139][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 93.546660][ T7744] Tainted: [B]=BAD_PAGE [ 93.547809][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.550982][ T7744] Call Trace: [ 93.551894][ T7744] [ 93.552694][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 93.553938][ T7744] bad_page+0xb3/0x1f0 [ 93.555072][ T7744] ? __pfx_bad_page+0x10/0x10 [ 93.556360][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 93.557653][ T7744] free_unref_page+0x657/0xdc0 [ 93.558937][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.560531][ T7744] ? __phys_addr+0xc6/0x150 [ 93.561763][ T7744] skb_free_head+0xa0/0x1d0 [ 93.563143][ T7744] skb_release_data+0x560/0x730 [ 93.564462][ T7744] ? packet_rcv+0x16c/0x15a0 [ 93.565700][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.567052][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 93.568528][ T7744] packet_rcv+0x16c/0x15a0 [ 93.569890][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 93.571209][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 93.572959][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.574725][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 93.576121][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.577769][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.578885][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.580572][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.582181][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.584544][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 93.585910][ T7744] ? __build_skb_around+0x278/0x3b0 [ 93.587277][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 93.588799][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.590503][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.592364][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.593800][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.595353][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.597074][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.598671][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.600318][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.602046][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.603700][ T7744] ? 0xffffffffa0006f40 [ 93.604966][ T7744] ? 0xffffffffa0006f40 [ 93.606328][ T7744] ? 0xffffffffa0006f40 [ 93.607554][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.609329][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.611023][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.612277][ T7744] ? __fget_files+0x40/0x3f0 [ 93.613713][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.615391][ T7744] ? fput+0x30/0x390 [ 93.616444][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 93.617743][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.619295][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.620445][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 93.621709][ T7744] ? __schedule+0xe5d/0x5730 [ 93.623294][ T7744] ? __fget_files+0x23a/0x3f0 [ 93.624605][ T7744] ? do_futex+0x123/0x350 [ 93.625731][ T7744] ? __pfx_do_futex+0x10/0x10 [ 93.626989][ T7744] ? xfd_validate_state+0x5d/0x180 [ 93.628375][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.629773][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.630969][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.632413][ T7744] do_syscall_64+0xcd/0x250 [ 93.633659][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.635286][ T7744] RIP: 0033:0x7f783637e719 [ 93.636527][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.641890][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.644044][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 93.646104][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.648574][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 93.650632][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.652705][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 93.654759][ T7744] [ 93.655688][ T7744] BUG: Bad page state in process syz.7.434 pfn:47b2c [ 93.657486][ T7744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47b2c [ 93.659794][ T7744] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.661646][ T7744] raw: 00fff00000000000 dead000000000040 ffff8880343ae000 0000000000000000 [ 93.663846][ T7744] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 93.665967][ T7744] page dumped because: page_pool leak [ 93.667324][ T7744] page_owner tracks the page as allocated [ 93.669059][ T7744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7744, tgid 7742 (syz.7.434), ts 84060514109, free_ts 84030010278 [ 93.673524][ T7744] post_alloc_hook+0x2d1/0x350 [ 93.674794][ T7744] get_page_from_freelist+0x101e/0x3070 [ 93.676266][ T7744] __alloc_pages_noprof+0x223/0x25a0 [ 93.677636][ T7744] alloc_pages_bulk_noprof+0x77c/0x1110 [ 93.679054][ T7744] __page_pool_alloc_pages_slow+0x18f/0x770 [ 93.680610][ T7744] page_pool_alloc_netmem+0xc4/0x160 [ 93.682014][ T7744] page_pool_alloc_pages+0x1a/0x60 [ 93.683352][ T7744] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 93.684966][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.686346][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.687755][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.688906][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.690141][ T7744] do_syscall_64+0xcd/0x250 [ 93.691352][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.692919][ T7744] page last free pid 7743 tgid 7742 stack trace: [ 93.694580][ T7744] register_dummy_stack+0x8a/0xd0 [ 93.695949][ T7744] init_page_owner+0x48/0xc00 [ 93.697191][ T7744] page_ext_init+0x6b8/0xab0 [ 93.698402][ T7744] mm_core_init+0x12d/0x220 [ 93.699655][ T7744] Modules linked in: [ 93.700737][ T7744] CPU: 1 UID: 0 PID: 7744 Comm: syz.7.434 Tainted: G B 6.12.0-rc5-syzkaller-00161-g90602c251cda #0 [ 93.704195][ T7744] Tainted: [B]=BAD_PAGE [ 93.705304][ T7744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.708120][ T7744] Call Trace: [ 93.709020][ T7744] [ 93.709810][ T7744] dump_stack_lvl+0x16c/0x1f0 [ 93.711018][ T7744] bad_page+0xb3/0x1f0 [ 93.712169][ T7744] ? __pfx_bad_page+0x10/0x10 [ 93.713474][ T7744] ? page_bad_reason+0x9d/0x1e0 [ 93.714725][ T7744] free_unref_page+0x657/0xdc0 [ 93.715958][ T7744] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 93.717594][ T7744] ? __phys_addr+0xc6/0x150 [ 93.718843][ T7744] skb_free_head+0xa0/0x1d0 [ 93.720186][ T7744] skb_release_data+0x560/0x730 [ 93.721602][ T7744] ? packet_rcv+0x16c/0x15a0 [ 93.722950][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.724286][ T7744] sk_skb_reason_drop+0x129/0x1a0 [ 93.725985][ T7744] packet_rcv+0x16c/0x15a0 [ 93.727345][ T7744] ? __pfx_packet_rcv+0x10/0x10 [ 93.728788][ T7744] __netif_receive_skb_list_core+0x6e0/0x950 [ 93.730444][ T7744] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 93.732513][ T7744] ? trace_lock_acquire+0x14a/0x1d0 [ 93.733900][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.735541][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.736779][ T7744] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 93.738479][ T7744] netif_receive_skb_list_internal+0x753/0xdb0 [ 93.740076][ T7744] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 93.741862][ T7744] ? __pfx_eth_type_trans+0x10/0x10 [ 93.743326][ T7744] ? __build_skb_around+0x278/0x3b0 [ 93.744723][ T7744] netif_receive_skb_list+0x4f/0x4a0 [ 93.746122][ T7744] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 93.747771][ T7744] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 93.749461][ T7744] ? bpf_test_timer_continue+0x150/0x3d0 [ 93.751256][ T7744] bpf_test_run_xdp_live+0x365/0x500 [ 93.752815][ T7744] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.754304][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.755793][ T7744] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.757336][ T7744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.758880][ T7744] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.760237][ T7744] ? 0xffffffffa0006f40 [ 93.761308][ T7744] ? 0xffffffffa0006f40 [ 93.762513][ T7744] ? 0xffffffffa0006f40 [ 93.763692][ T7744] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 93.765178][ T7744] bpf_prog_test_run_xdp+0x827/0x1580 [ 93.766522][ T7744] ? lock_acquire+0x2f/0xb0 [ 93.767690][ T7744] ? __fget_files+0x40/0x3f0 [ 93.768938][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.770486][ T7744] ? fput+0x30/0x390 [ 93.771533][ T7744] ? __bpf_prog_get+0xa0/0x290 [ 93.773102][ T7744] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.774704][ T7744] __sys_bpf+0xfc6/0x49a0 [ 93.775855][ T7744] ? __pfx___sys_bpf+0x10/0x10 [ 93.777139][ T7744] ? __schedule+0xe5d/0x5730 [ 93.778324][ T7744] ? __fget_files+0x23a/0x3f0 [ 93.779538][ T7744] ? do_futex+0x123/0x350 [ 93.780704][ T7744] ? __pfx_do_futex+0x10/0x10 [ 93.781963][ T7744] ? xfd_validate_state+0x5d/0x180 [ 93.783320][ T7744] ? rcu_is_watching+0x12/0xc0 [ 93.784943][ T7744] __x64_sys_bpf+0x78/0xc0 [ 93.786152][ T7744] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.787534][ T7744] do_syscall_64+0xcd/0x250 [ 93.788754][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.790332][ T7744] RIP: 0033:0x7f783637e719 [ 93.791524][ T7744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.796677][ T7744] RSP: 002b:00007f7835dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.798856][ T7744] RAX: ffffffffffffffda RBX: 00007f7836536058 RCX: 00007f783637e719 [ 93.800915][ T7744] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 93.803266][ T7744] RBP: 00007f78363f132e R08: 0000000000000000 R09: 0000000000000000 [ 93.805456][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.807359][ T7744] R13: 0000000000000000 R14: 00007f7836536058 R15: 00007ffeb543cef8 [ 93.809377][ T7744] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) VM DIAGNOSIS: 02:42:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000100 RBX=0000000000000240 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff811af831 RDI=0000000000000007 RBP=0000000000000039 RSP=ffffc900037d7b58 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900037d7c00 R13=ffff888042fd82d0 R14=0000000000000240 R15=0000000000000002 RIP=ffffffff811af83b RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f51d06126c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f47ca075440 CR3=000000004bbea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000f847880 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104007000009120 00000000000000a8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010100a0000000ff 0000000000003d00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c008000009120 0000000000020030 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010b0030000fffff 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010b0050000fffff 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01030058000fffff 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010900d8000001ff 0000000000003a00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104007000009120 0000000000020010 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51cf7f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51cf7f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51cf90c488 00007f51cf90c480 00007f51cf90c478 00007f51cf90c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51d046d100 00007f51cf90c440 00007f51cf90c458 00007f51cf90c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51cf90c498 00007f51cf90c490 00007f51cf90c488 00007f51cf90c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000615 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b5025 RDI=ffffffff9aaeac00 RBP=ffffffff9aaeabc0 RSP=ffffc900030c6b60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000063 R14=ffffffff850b4fc0 R15=0000000000000000 RIP=ffffffff850b504f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7835dde6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000053de0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36cd929d88b1dd60 c3b24c39995e5dac b1f1e6df71cbcb14 3738f4dfb7a19ba6 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3090cce8407a8144 b2dff05b36439875 349335f95a6d5b2b 9050f65cf677dce5 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7579ff98b45ce63 5254ccda8f126c59 435949597e778562 5b02b6d3936ee945 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 18e6fb88fa69c576 7f1dbc9e30261b9d 872fbf1505542f04 65a9dec4653d76de ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2bec28e39f2e8def 59afc1572a7b9545 641c5f86ac72fcf8 36cd929d88b1dd60 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000a5733 RBX=0000000000000002 RCX=ffffffff8b2325d9 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1adc0 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f5388 R15=0000000000000000 RIP=ffffffff8b2339bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000053de0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78363f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78363f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78363f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78363f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78363f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78363f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2caa1414ac000000 0000000000000000 00007bf59f96655a 8700000000000080 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f12b4423cc50903 175d332c2e93718b 9e55ec1acb09d40a c79f98045bef9c6a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880267fd388 RCX=0000000000000002 RDX=1ffff11004cffa75 RSI=ffff8880267fd388 RDI=ffff8880267fd3a8 RBP=ffffc9000584fb70 RSP=ffffc9000584fa20 R8 =0000000000000000 R9 =fffffbfff2dc5b90 R10=ffffffff96e2dc87 R11=0000000000000000 R12=ffff8880267fc880 R13=0000000000000004 R14=0000000000000002 R15=1ffff92000b09f4c RIP=ffffffff8169b6d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe095cd3f98 CR3=000000004452c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe094ff234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09510c488 00007fe09510c480 00007fe09510c478 00007fe09510c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe095c6d100 00007fe09510c440 00007fe09510c458 00007fe09510c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe09510c498 00007fe09510c490 00007fe09510c488 00007fe09510c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49425f444c004854 41005f5952415242 494c5f444c005f00 656d65675f6b6364 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000362e3200414e 41004c004c005042 494c444449004600 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000