last executing test programs: 37.27655581s ago: executing program 2 (id=979): bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="d887", 0x2}], 0x1}, 0x4000041) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be4200"/280, 0x118}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d0", 0x43}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9", 0xd1}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba621", 0x19}, {&(0x7f0000000840)="a9ae40a02163bc35c9e4208cdd56e268b2e480846f59ccaa133e00d27a5c4ab4ee7b3866ee59c76e5cadb1d0c83da3fc7e7b21ef731e35ae9e0910506e240fef6e533d29f5cb41197ae85dad9e553bebc4fe3a5c5dcd378036d3", 0x5a}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9", 0x2f}, {&(0x7f0000001bc0)="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", 0x23e}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 36.610668127s ago: executing program 3 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9f9030800000000000000da41b0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 36.357513364s ago: executing program 3 (id=989): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_team\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000ea0a001000"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000005e0001ee00000000000000000c00000001000000000000800c00fe8008000200", @ANYRES32, @ANYBLOB], 0x28}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 36.252758181s ago: executing program 2 (id=990): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40}, {0x28, 0x0, 0x9, 0xfffff034}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="f4e5dd93639d", 0x6}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20, 0x4804}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4f9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89123839d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde00"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'ipvlan0\x00'}) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40}, {0x28, 0x0, 0x9, 0xfffff034}, {0x6}]}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0xa, 0x3, 0x2) (async) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="f4e5dd93639d", 0x6}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20, 0x4804}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'ipvlan0\x00'}) (async) 3.278513457s ago: executing program 4 (id=1004): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x0, 0x3, 0xa}, @IPSET_ATTR_MAXELEM={0x0, 0x13, 0x1, 0x0, 0x2f6}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0xbe}, @IPSET_ATTR_MAXELEM={0x0, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_REVISION, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x9}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x84}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x577}, @TCA_TBF_BURST={0x8, 0x6, 0x40000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0xe0a2ff6baa7cc2d2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xfffffffe}}]}}, @TCA_RATE={0x6}]}, 0x70}}, 0x4800) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f, r4}) ioctl$SIOCSIFHWADDR(r2, 0xff06, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff05, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.935890312s ago: executing program 1 (id=1005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000f72be8953a27d752c8b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000480)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r7, 0xfff) accept(r7, 0xfffffffffffffffd, &(0x7f0000000440)) connect$inet6(r6, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r10, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x4000000, 0x2000, 0xd80, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) 2.328337836s ago: executing program 4 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 2.023104402s ago: executing program 1 (id=1007): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1000, 0x0, 0x1d}}]}}]}, 0x14c}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000400000000000080000050000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYRES32, @ANYBLOB="0300"/24, @ANYRES32=r1, @ANYBLOB], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000038850000008200000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r6}, 0x10) (async) r7 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) 1.946577264s ago: executing program 2 (id=993): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x3d) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x0) 1.913443656s ago: executing program 4 (id=1008): unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r3 = accept(r2, 0x0, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r5, &(0x7f00000000c0)=""/29, 0x1d) r6 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.731453707s ago: executing program 2 (id=1009): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001540)=""/4098, 0x1002}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/233, 0xe9}], 0x1}, 0x6}, {{&(0x7f0000000300)=@x25, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000740)=""/87, 0x57}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/164, 0xa4}], 0x7, &(0x7f0000000a80)=""/187, 0xbb}, 0xda3}], 0x3, 0x40010020, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)={0x14, r7, 0xb09, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x409, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x200}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x8}]}, 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d93076d5", @ANYRES16=r9, @ANYBLOB="100026bd7000fbdbdf256700000008000100380000000800c400090000000800c40009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x58, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a87fa5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x17}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.587595394s ago: executing program 1 (id=1010): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000028cd2b5a46314d4c81933a3a862690b60000aa14000400ff0200000000000000000000000000010c0002"], 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xe8, 0xfcf3, 0x9, 0x1, 0x9, 0x200}}, {0x4}}]}]}, 0x6c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020400) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x803, 0x0) sendmmsg$alg(r8, &(0x7f0000006500)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="1e", 0x1}], 0x1, 0x0, 0x0, 0x4018004}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc004}], 0x2, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f800000010000100a35aa3857422890000000000", @ANYRES32=r1, @ANYBLOB="4010020000000000d0001680cc0001802800"], 0xf8}}, 0x0) 1.278088826s ago: executing program 1 (id=1013): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40ec1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x60}}, 0x0) 1.15207992s ago: executing program 0 (id=1014): syz_emit_ethernet(0x40, &(0x7f0000000fc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xa, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0xffc0, "33b5"}}}}}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160ae3650ab68675f80000000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48a80700000000000051f60a173780100003000601000008004465b9d1cffe", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x85, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x44, @mcast2, 0x8db}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfe}, &(0x7f0000000400)=0x9c) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x4, &(0x7f0000000280)=0x4, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x124, 0x3}, 0xc) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1c1e15582399572a3f2983e1a15eb78767b87da6d3da400d215326419919de0df00007736000000000000000000edd0c789d37a7dcf3f5b8c9aa5329c38e2ed4c0fe3a0eae2a169c0322b4e5b96dd251a4477da4961b81a965463617e444bfac080d03ac4fbf2d0c40e22aed01bea5ce1b4ca5e0b249366f1b777a13fcfad3d0a047371d2169230d0d0597e10f58c8e2b20cf205740044c15fab6d52121b0a6b2c122096848d4e29e968e20c1615b1e11c61d8e0c58fe667224e89b83ef29e04c0c6fdf73c50bf051d8651613e5bf65f9e91a91f5ce1080bcbad3aa36f82e9d367cb537444e25cdc8c21b60216d540ac605f39e02950b5af27d81a80cddc1a96754465fe43887165f7dc70939eefaf15dce85857c9329b2bbdcf10f5c85f110a42bcc3489b45f3ffd8a8fadf90cf9a6e35674a89b740ddc", 0x26f}, {0x0}], 0x2}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000140)=""/154, &(0x7f0000000000)=0x9a) read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) r8 = socket(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x3c, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31f2842f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004a001c0200000000000000000a000003"], 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 988.087293ms ago: executing program 1 (id=1015): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x44, 0x30, 0x0, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c0004800800034000000000080005400c00000008"], 0x3c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000031000008000400", @ANYBLOB="080001"], 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6}]}, 0x30}}, 0x0) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000051400022cbd70e95b39143d2bf86500fedbba2508000100000000000800030001000000080001ff0200000008000300030000005975514801fad2e09b4dff5173b2aa00000000d8892965a02cbf6de6b5e0d7fa7ce1b3c77058d72093a5272caa6a1804d59999c88f91"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_proto_private(r11, 0x89e0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r11) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYRES8=0x0], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 968.245288ms ago: executing program 0 (id=1016): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_team\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000ea0a001000"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000005e0001ee00000000000000000c00000001000000000000800c00fe8008000200", @ANYRES32, @ANYBLOB], 0x28}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="a5", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001d80)=""/45, 0x2d}], 0x1}}], 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000395f00009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000008500006262770608c97e8f095b6400b30000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 927.24011ms ago: executing program 4 (id=1017): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r3, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r4) r5 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a09091400"], 0x44}, 0x1, 0x1000000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000000, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) close(r5) r10 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$kcm(0x10, 0x2, 0x4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r13, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x4, 0x4, 0x3e0, 0x0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x430) 904.143426ms ago: executing program 3 (id=994): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="aa1e216699066bda24668c703b141b5716e494772557fd2e57d5351d0ffb5b842539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964f265b6bafcca51ec91f63c7c1519ef115660eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef4f", 0x9a}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) (async, rerun: 64) close(r2) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1414}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x10) (rerun: 64) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r7, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d617000000000000000000000080000000077e800000d0001007564703a73790000000000004400028008000100008000"], 0xa4}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}]}, 0x2c}}, 0x40000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 816.635848ms ago: executing program 0 (id=1018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0xc) setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 743.568664ms ago: executing program 2 (id=1019): socket(0x11, 0x800000003, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0xffffffffffffffa8) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r2, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x5}}}, 0x10, 0x0}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000140)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000100)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x74, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x54, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xf8}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r10, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000017c0)="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", 0xfe}, {&(0x7f00000018c0)="0690cdffc3c99d08640babd8b1faa6df615c25e02ab79f08aa99b6473bf9e1c984c8be7cd9e668d8de435074118a778b7a395ab8d1ff9a2bc104345405c59a67be46f397e4f18affabd1a72ac8c05c0ccf03403aaee3d0a6dae57ebdbe92c8e1d912f0439a346a59f0c752b42dad97a6ea36802269a0bc4e7d3461fd3857e37b464e9c2860e0eec11030a5706c82a236fa6d458bc3bf77effaace52765be5a6122cec973983f4cab0c2d3b8444198e9eac2219e35118558cfbb78d92321e83e32efefcaee4105d", 0xc7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000019c0)="32873e0af904df83eba8da63f6bfb47de07786850f9849cc565bc8b5acbabcee59573f9259737b46041f8f3012b3e4b3b8cc422bce4969af968d7f62ba8728353bd10f9264b0960bf984e2d3dfefefed7d276e23603c6daf3b16b18786ea1a45ae9835886b80c26e7c9b1073df97696fcffebde19f0286bf7586c37bb1ba1cbb7988f6dc8613d906928003f7129144c6c8f11ed9eec42226a692d02bd50b1614d82b7d8a36dfc9e9693c5bd961541331f93ec45068f046e82b3859193397a238", 0xc0}, {&(0x7f0000000140)="d4ab3d34f63ee8a52a98da63d502423f644afcb22e9987a427c884d1843a85a8332c3bee22db6ec450f567bea2bda0cb", 0x30}, {&(0x7f0000001a80)="5bdadc3c765839cfdb2b77ba98e32b72f8b7c2a87de32598190849e3c5c8b3f1acabd95724c84249b5bf71e803523dd2c9ba4c34d69ccff99a976bbed0e05482894e096cf41a5e094d337ff91ab3e6e94e5be5cc1dbf037cc84a775a419e3e0b9e23028f5cc71cbc1e3acc3d78d97acd94bf352d2380777aab62233e5ac8a674d53bdc40d9fb8a191e5e0e3d82364a6e6c7a8e5bf9eb09f004d483", 0x9b}, {&(0x7f0000001bc0)="dc4adc770ef68bafd0c48beba52a4e43b9197bc12e512b86731105f7de5cf43c060fc631c14780ac4d73df8bbd73771f0939f0e114ed3d8d6e395d3c9faeb6236c8f2ebff6eaba4c55619bc0e1d245809ef9e083d4736c23e48617996614979877c670597ccb35170523155648a8d74c1e9d3c18285a70d8567127bfa6be09340b8c52e779d3d82353921abc3f43500a5477b0249bd4030aefa808102094b7ccc6d6121566596112201313283517e1e9c3a69adedb052381ac9127d016adf71761cbfa", 0xc3}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010100}}}], 0x20}}, {{&(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f0000001f80)="782ad1f62e0378d0da6affa17342b37529ce224e75c3be31fd91ec3d9d7ab89eda082f5bb279e526137600f7a301410e89a9735feb3aa4915c6b811ab724ce39ea092ea4af3814c2211db270ddbcab0a4f834a30150ce17cd4380af76bbdbcbe6252d47058a5350db06541da8fa089b11431f4521ddca5f3d9fe9c90d5920f9f989ec9e9dc31d2d806a9f5a54bfa268b5809bd8df90f05950e1749d4b606352b14a0305c0c2e5e397ad38c73ea901623f9f52439d97a5d5f3818522b326d26d4c180ad372ba98d8739df7299d5fae3486b4424a0", 0xd4}, {&(0x7f00000002c0)="9c13b9a84e61d7b213cef3de213fe0cbd298", 0x12}, {&(0x7f0000001b40)="42480a5da76643c134cc03adb46fed8b332b7b011772e225b170ac7227", 0x1d}, {&(0x7f0000001d80)="2bccab8fcae8c999eb7d2e33b4fb8a238eaad53aa05746dcc0f503566d9bae4051966701b058ce9838596c70b8e30956755f7be5fd8970c6196a81128c8d50a6669faecd7fe17a91d0339da08c38e8579f6329a13da75b05e560d60ccba0fb63d30f2a3dbbd9b60b56b450efa2d8b963fcbe445cf3461c6a9d1cfba680", 0x7d}, {&(0x7f0000001e00)="b7ce10008ea665d7c6b4fa71c525afbf2aa96935500c0ddd1d8b7b1b8c62b1bd0914bbd5ab6c00cc8fc1a5239aec4d453cd068afa29f3a2c673d3718b843283651b2a6e469cb532915e18d648e8dda7392463db8025490c2836600e827a4f306d71a232e315764124de4a9d9065e7fd7c34c0e4e0c7168e95aa1086062b048bb5bf4344a36632078b68dcccb09602e538dbc80bd91d5b151bf3cf2f04c57e92374788916df6cba2f39c376e59b578b3a8a9b49b766c220b13005c5d802505ce540e8589ede5c19855a08ca7da3eae0d7bed31027df9ff350201780", 0xdb}, {&(0x7f0000001f00)="5f9b68626ebab4d91c5276552f9c1cdb6dbdb26f9d21792c893ee93bddbf98ddf0088e6d76b841050c0bf38c0938cdf4b2c95fd1b88e3f5016ea8760a50a3e9fb8d5", 0x42}, {&(0x7f0000001cc0)="ea21255a455e4f733fc185aa616df976e175f62f6f586d515150357cce71598dbb774d7ee9dc5d47b47acaef5be2c5099398108fafce07f38dddb03bf3ac512b501f75905c21358acceab6d4f02b5518d9b0fa94982a5e0399ece5f9725403c8fef0bcda6ca804de2946e42dbddfe7bdeefc64ee650d339330a73e82e217e13813", 0x81}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000480)="a3bf54c878d3a05b59c70f9c45eda8120e51be4f5ba0feb8bbbfdc27809d74e407a6745f4fe1a2d92b756fed78e22b68401144869bedd28dc0879fc2f6f48cc5f13cb706d666c4b67ff88a3773a6715ab0969f1fa5208268f1b8a94d99c110292a49c87534bbf4ed", 0x68}, {&(0x7f0000000600)="c3a2d5f1a8cbd8b07758914b35eebefda11a8d99afffe12d88c576505d04a8773b0cc19c6c4a5861d0ec95fd8e59ba23f64b27485a0426f4bbf9f91e5573913e93e81dad11f87e8a2c68bfc2", 0x4c}], 0xa, &(0x7f0000002100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x90}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x757c131c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x60}}, {{&(0x7f0000002180)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000002740)=[{&(0x7f00000021c0)="f702b593bcb0c8be473b944bfe1f51d3811ce4bc4d111d8f12e48342c66ce56c7e7771c9f6bab64deb550d2226584d16f7dbaf7111419d300f4a25a0351656811b4045608e0489f6160cc23bb4304e83cf6f7af27880b6bb8417bfd7b10517c0854f333b256b61028d00d796dd4dc6f48d782b41476d1adf841e67fe6a0a8166d810231bcfc8a1ed2f8c6d4331ba00aa9cfb7c661e54bdaf6ecfdbdeb9df9c6c96219803148337860819b6ad37bf9c2b1c48cfdec5605a5c169def674629689946a5b8eeeee3659731fff6679c7ed490c9960d4d84fa27d8fe53daf934dd0313b6a70b", 0xe3}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f00000022c0)="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", 0xfd}, {&(0x7f00000023c0)="a104f50f6da139b81cec89fdbe683ffca9aa87054b444cf7f83b354c67c94c02b0080be9184413b5ba3d1c99eaed3a24efe0f659f83315a361a36a4e090933c9ef223f269a8cbe442bf50b05912330550ebaab49d6968c3ac40b067ba5588e4b923b57ef8cdfa812bd904ee985c4255ab27bf24894407cca0073624f1015e18efa6f003345b75d4066863718560da483ad014138e2e8f929bbb2118c84beaacbd1b9f137e504d275a16c6f7a8555af7347d9ca7d802eda33306cc6ad", 0xbc}, {&(0x7f0000002480)="3ebde3bee3e3df770ef5b9db14962055b5637da337933f8bc382d07390a5d39617594f5a191024c79b7d4be2d26370c51dc44e29f370376c9e6c9cc6743b15bbc2bbb10128abd8e902307f896e1309f663f671cd962cfe56ec9d02085fe651956f7a2283aa1f989343b1775baa0ff4a625f16a2b1d5c5d2d47d22e191f30a19686156c48", 0x84}, {&(0x7f0000002540)="3d34282760ea4e5da6b838cd7a44dc3172466b822a046a0b2165324fe7e606d6104927e1d2fe20b4028d480483e9477cd4d05ab3e13266a41c79bc0361b26482f6db63036f6c9ff1378e1cc11a9e5846ca260116cd9748cd0b5a54686d37ec0a61550378e97ea9dfb3159515011e0d0d2513053c4258ee3abe39e3af53c5bb6841a2fa6e8b370261b2d5410c14ec4524a1ef01707a02597e54ad3234530b5e21abfbcbccd81a45045c18ac96185f61eb32f828000758d0121fce84c6c55772c623816dd372f4f35cab24a398998a1afba2e7fbd552ed593b003cc760dda205aa8df6b8388c79fd6a925ca3af2ea01d4c1434", 0xf2}, {&(0x7f0000002640)="885d1ab1f57c7fafda2c21861cf89f90908fafe8a9b47c6fa0dcd682f2df2c4964c6ff1a48bc2edde7e616e98f32f47fe96daa08ca10b955322a53ce09845c2e39c76db6b39553ed9b2e5a318f0d764dcc20a1c80c59b25c59e57925587ece517976d2bb26b05ce7b42b168af51b0c1c5ebb7822191400b144cd784425600af38fd6382a4550ed058dfdb61fe2a45325c81d139470b4d5f7e706383342165cbd9b4ce3efac45413f5aa4a36408753989d10ffd0201ae", 0xb6}, {&(0x7f0000002700)="f3584b67aedd585dd9f0cf2dd19ecdfe633461d465977a8dae7f8667a84f4446854df953ee348193fd789b6907627c7d69920998a0d7", 0x36}], 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="38000000000000000000e7ff0600937f91e6239be7d28913c900000000ac1e0001ac14141dffffffff0000140000000000c1cd0000000002000000ffffffff00000000140000000000000000000000010000004a0000000000000045f90a1f30777ce00000000000"], 0x68}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002840)="54653b031a83ec936474cabe967f80e0073e2e6e92a81dc1714af95ba204bd27957d6eb627de79a1deae4c23ae4d7fdfb8a0d71c8af3f42aa1c4e5", 0x3b}], 0x1, &(0x7f00000028c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}, {{&(0x7f0000002900)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000002940)="1444d9c6724ad3d7", 0x8}, {&(0x7f0000002980)="867a9686868b6c3a8d507316885c6afd13964586c85c8d84720c6d5fe098a06fc9661e43d1d19f1b57566a1caa584054ad4edf985b013c8c056542d3bcda0c88486610a7f069c86cb86a16fb14ffaec6f0f3c27a6b83f5b04edc761b4fc2a10b810b081bd94367625d22980d75f6928d8c3adb9f460e36a9ad2e82c55d2a2af8dc1091874c3c2d18f1bd3c09fde5e6351a2dc62bb30728526f163cf53fbf161cacd588c355f4976ef92a72962cc9b37332bac01eb551d0ce5fbe321b3481c1dff2a71937686458e0630f27cd9c9d6c7f789a", 0xd2}, {&(0x7f0000002a80)="252c565fdc5ae842ba85ce158e7ac8447e9ff2654721d11287dbcf2c8feaf72f7e3173a8ee0ebe2e100ce9e646c8356cd081fb8c5bc5386f06a63b6294f0e352a62d3546e603d06f6dd68f55926597003e2e48aa236955140caf2a65e4723ba18c49c1346b561c6177d1857a0d59d227323a67d256534761ba902c6aecb935700d7d5ddd6d3f0ee31b38e10906508016b867e45c931eb675f3650613f74491ede94069640b950444694fddf53a1734fc1fff06d67fcc4fc3", 0xb8}, {&(0x7f0000002b40)="cc42a80c15fabbb47f9a0c804f8233df88086147beb180c3bc7778b972a95220b44dad72ac63a388d2b2940a070e5a2183f9e6895002e652ba0cbcfb5af965aa70739a855261889056a7b59bedad362c723158b6195e719efabb91ff03bb805f8086f61425b13b01031ed0e5daf8c4dd57becb3e5c6b814cf695827233f9cea3696726d0739b3e13a3aa1d", 0x8b}, {&(0x7f0000002c00)="62483f20bb8660c05c5513bf88e17fbc9084ddd4721d37d75bb93b9e4e0b19faaa0c20dc2a83c20c6a28169e683cd57c5593f1814061e76c0c00d91d292a936b8d16a6017240c1dc470aae5083c86a4d184c784e8d18dda33cd9f1c9f3ff4e16632f6c323a15638c", 0x68}, {&(0x7f0000002c80)="ce28405d84befc2cd4d3733539ac046c1952892ad048a6f2dcea9875dd67741e96952180fe4923d34b83cdcbb461cea03292c77c14b4d42bbd6886b513c500aa6ac00a019a9ce65b5f992d9887ab93813cd1192584f242bb02fbe6c17f797a4d92b0b280d4e25059395c0cbe42b1e1b437b1d1bf1ad72c35084a4c08bd20342b76b5fcaf8e6cf79817dc80902d39e00a29b0b6f4f5d8c14a829e8f35cb7ba222cb78b9d4efe8dae3e36e73ac8c17bc316ea8ca9c048aa613579db69bd7cac1", 0xbf}, {&(0x7f0000002d40)="6093f5c9d69b0ad35a01f47f1216255d964de1663bd9bab7ad316867995c9f5599313aa7efaa97e4c5e6ee118ef1b121f33540dc6ddedde68d570cece6fd5a1e080cfd40c813df6ddca2ad4e390315eb89b72e0a390a85a7fba670a07f5bbf60b443bafcb393ac125aa6f33a44e15ea4", 0x70}, {&(0x7f0000002dc0)="e0532a23cb99853298bd62bfe808bbe21ac8cb6f4f5670f67c290c406f0474507891217393954c988d82124d8c95d98410be84630f10e17d33f91459130035b4b36b59bb811bbd3e066d582cf0247b123a8b7ae27bf6afac45f2e7c080bd0b0aafeff17fa12c83767ff4ecc7250ab0599f4834e508f0f0bd5cd149d86666670a1b5b0b3c9a87d21d2b1178c36eac851c640b2c096cc368d7d9cedfd1424b5857d22195674930c6824176a79898918f1c85cfa3008a2a4970", 0xb8}, {&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000002e80)="41b4372501e82a7a8cd1f47c6cd18f7a1d4d5dc9f921192d0441442dfdabddac584c7d2d90ec394f", 0x28}], 0xa, &(0x7f0000002f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}}, {{&(0x7f0000002fc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003080)=[{&(0x7f0000003000)="b3d93c62d7befdc93e8a8884f0ad17e09b26ff4a17a7adf110cf22fa2a75068baf872abc48e40ae72bf47031db7e5f1eb83ab64e9b5cf5f23faf9ee0ac7a2e4cb88640b2eed39e5d6a3e1e86d84f020d7523905f4a22c59ca46d2a554cb525", 0x5f}, {&(0x7f0000005140)="0a34f4b439550905f4433ebbd4da73d439136f8530a5f183af6cd403e9a8a73724a70d6f771c945f9b3678bc0a9ac944684b5c7bca4b0f5515c730a72e7556614b0d1d61eea0a3e9e69071fd1ad9d8a284ad03ebe53ec45f95bb04442e2fd88eb25f071c96201b5347a7579ac73a119094afbee12dc8b1c6be93df79134652d69c92cddb7ce161b5cdce0e3e607224c69cfbe8e9a41fdc2f630d3fd0bdb8ff4c4382", 0xa2}], 0x2, &(0x7f0000005200)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xab, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @rr={0x7, 0x27, 0xac, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @rand_addr=0x64010101, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x8d, 0x1, 0x2, [{@remote, 0x10000}, {@private=0xa010101, 0x26ad}]}, @end, @cipso={0x86, 0x14, 0x0, [{0x5, 0xe, "3239209fa7b3735fe22f82ef"}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ssrr={0x89, 0xb, 0x97, [@empty, @empty]}, @timestamp={0x44, 0x14, 0xee, 0x0, 0x2, [0x8, 0x3, 0x1, 0x8001]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@noop, @rr={0x7, 0x3, 0xb5}, @ssrr={0x89, 0x1f, 0x0, [@multicast2, @private=0xa010100, @empty, @loopback, @private=0xa010100, @empty, @multicast2]}, @cipso={0x86, 0x17, 0x3, [{0x2, 0x6, "91987476"}, {0x2, 0xb, "bca941345aa0beeeff"}]}, @timestamp_addr={0x44, 0x4, 0x7b, 0x1, 0x3}, @rr={0x7, 0xb, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x8f, [@multicast1, @empty, @multicast1, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x14, 0xef, 0x0, 0x1, [0x0, 0x5, 0x5, 0x0]}, @ssrr={0x89, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x17, 0x3c, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @private=0xa010101]}]}}}, @ip_tos_int={{0x14}}], 0x1b0}}, {{&(0x7f00000030c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000054c0)=[{&(0x7f0000005400)="d427e721aa674a51787ca2cd2b6df443eef19557c7b318aef67291575c5a75826da8a85dd69b78483626d7810537f3892e76ae9fa37a534a343ff929dfb775ff74d068322eecf61b110cd112cfc65fa31838e30a479f438490108233a7fd29b36c7d85cc3f4303c29ea65ff5d75b95f3772a24d4472a1feea5f077d4633f55c3a0754f0f007e8091e9560b880da043ee2e4631b919bf8792ec6c", 0x9a}], 0x1, &(0x7f0000005500)=[@ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x9, [0x1000]}, @end, @timestamp_prespec={0x44, 0x44, 0x76, 0x3, 0xb, [{@local, 0x7e29}, {@local, 0x9}, {@local, 0x4}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0xfffffffd}, {@remote, 0xffffff01}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x1ded56a6}]}]}}}], 0x60}}], 0x9, 0x0) 609.504125ms ago: executing program 0 (id=1020): socket$igmp(0x2, 0x3, 0x2) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x2, 0x1) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$inet6(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@empty, @loopback, 0x0}, &(0x7f0000000440)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) (async) accept4(r4, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000f4bd5979a5172e0700000000000000000000000000000000000000000000636c757374657200006db693c555d12b0101000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000004493000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000cac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES64=r5], 0x40}}, 0x0) 587.396381ms ago: executing program 3 (id=1021): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r2, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000580)='F', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007c40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)='z', 0x1}], 0x1}}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5c, "a5daea4df92eb0cf2e9cd3e9b4f0ca257c589e66facf28d12d1d9dc724d39580bd42bcc3cf685f963ea3952c0293271e286ae8f66d9b03225e74d377181a7cfb240dce8650115f396b03808df0fa5b9d9be5c82461c554487d45c909"}, &(0x7f0000000000)=0x64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x2, 0x6, 0x4f0, 0x50, 0xffffffc0, 0x4}, &(0x7f0000000080)=0x9c) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x5200, 0x8, 0x10200, 0x4, 0x2, 0x221b6114, 0xb6200000, 0x5}, &(0x7f0000000380)=0x20) 432.099574ms ago: executing program 4 (id=1022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0xfa, 0x0, 0x7, 0x0, 0xfe, 0x0, 0x40}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000040)=0x84) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@mpls_getnetconf={0x2c, 0x52, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8001}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 389.764094ms ago: executing program 0 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)={{0xe}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x0, 0x6, "196a2c089c697764e04f778971e1eb4e5504e59ad0aa3be400438785de8e4c4250fcbb6f574ece47262e6249150f6dd5e174a3df5f14e648ab21ff76bbd09bcd932a2a1b7b594e715fd18f3527927ed2c361dd27096ba22aebb97f5501061f32dd9560b139ad16d408de1670565cc180be1c4930ec407e019c73c9b6b5eabb237b3d3eb0ed1a6d4efd11b18fd2fccb6df60c8e3fbf185f80b781e5d3a31426fb75eff07cfefa641f14cbb2f5290d67f355b26d15f194b3f2741455a755d54a31e8777565d399def18cd2cb3f56f5658e93493e754be523db457c68b7"}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x44000) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="c47a1a8936580e4609156c6b6c902b486b57f1db2b28d1eb110149690ff142fa856ec29831ae6c891fb061b98f98e422633824a385880e686ee85107f971b0b5f5d48fb4bb5ef956ae40c6209e82e50880caba5ffa9dbdac85f499995f055d57aa8c5bc8d29918ee72f7c6dadde96d523e4408438ceae0c35fe7dfb8790aad76815315613e48315e7f706934320a4da2a912874def570c60d7e3ba9480567322b46b2505445db58baab0ab766f1a813cf685b8eb967a4f4aa08be09f294a1b329e94872f21a7a9bd15", 0xc9}, {&(0x7f0000000200)="f9ed4242891763adf7954618e1", 0xd}], 0x2, &(0x7f0000000380)=[{0x38, 0x111, 0x6, "4349f68d644b9a564c505be413367b055364ddb98ab875f0d5064b26637c77e2d91a89fa"}, {0xb8, 0x107, 0xfffffeff, "545e74d99b23dbad922f128b18f96c993afc0d2565ec8addaa202c49c9719cdb77e427f9f995e5dea4c46dd43531db72983b91c8567c1f6ea4f356d9a0d998a81244c0dbe116572f4ba6bb15b57a4df90707b94d866181f20647242847efe513678f39975b40db0a4a6fc97d2bb19f579891b0a1b95f5d7df75f6968527bae888c4e216db56a7dc2c3e42dfa698c5c6a4ffb516e43170da50e71ec56698d78684766db2655967afd"}, {0x18, 0x108, 0x6, "ede2cc067e16cdb8"}, {0xc0, 0x10d, 0x10000, "d5e9beec25684d08d99fd504e83fce6acd530314283c98bd9ff173d7e922b5088f1c574a84bcdf166c6f9f2670c9d607f2283e442e49a24d037a7d5acd8468de53a1d379f7c9f5a44a0fa8f2cec927b2bc3111a858e782ef56d18f5d15a5e91a644e84e0118ebc539c268c10e349149bd3014bfff4389f798c48bfca0b551ec1cee9331f0de00ff9e8deb228b12b4771419f9ba3989741dd4c380b0951235c77a37c787409bc5af65c"}, {0x38, 0x0, 0x8, "fe6e83936c03b3bf08c681e2b79a2a0f1272cbee1e24b1740436cd15420b384f86428e9e8d"}, {0x60, 0x10c, 0x212, "9bccb52802a667db3e2cb6043f03cc3c38f720d666921423ece8a65bd7b4f59720ce90a2b4760a247321333fdef67792d1747358a4153977b9bf7cc024ddf0086e392d81f5722b9c24836092d089cb"}], 0x260}}], 0x1, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200)={0x2, 0x3}, 0x4) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000600)="e841cbdc72c8dca6339fc81dc2603f3f66b5a968f34809c1a70003469b9bbf0471d94c716271af8253a7d2bab3af68e0b8edace7e2edab3da13c3d26024c4f231fd4cfae2eb090ad778635182fb70fe7554e9ca4bdd32ef6d2d3525a10ea880dd2c9c2db57c89edf25574457493934ba99b306c8a48ff8bc5a8748f6a8f65862689b2dfea3540742005111aa911b4c4e3b7bab74c414a40e150df614d688f7df4a4e3b05b622d176be2ba6d38da105b854ab5401") unshare(0x40600) socket(0x2000000015, 0x80005, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="b489e09b0addcf000000", 0xffffffffffffffd3}], 0x1, 0xa) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = epoll_create(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000500)) write$cgroup_int(r7, &(0x7f00000000c0)=0x4, 0x12) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000050021000000000008000a00", @ANYRES32=r8], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 269.372766ms ago: executing program 3 (id=1024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c250000000000206ea37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES16=r2, @ANYBLOB="010000000000000000001fffffff080001"], 0x60}}, 0x0) 163.952079ms ago: executing program 2 (id=1025): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000001540)={0x2, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) r4 = gettid() r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x8801) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704001480fc0b09000300", 0x2e}], 0x1}, 0x842) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bind$802154_dgram(r0, &(0x7f0000001540)={0x2, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) (async) gettid() (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x8801) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704001480fc0b09000300", 0x2e}], 0x1}, 0x842) (async) 121.558704ms ago: executing program 0 (id=1026): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x4000000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00'}}, 0x3def, 0x6, 0x10000, 0x921, 0x7}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0xf16, @loopback, 0xfffffffe}]}, &(0x7f0000000380)=0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) socket$kcm(0x21, 0x2, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000200)=""/43, 0x2b, 0x0, &(0x7f0000000240)=""/111, 0x6f}}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000f6ffffff181100004a1b57644e3ce9eddc71a850f464fa782c200705d2d547935452a1c4d51e82b934f97b90920894768bf87f3448bf9953ad0ba1eda45b0ba7", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186700000b000000000000000400000018000000020000000000000000000100bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2c6, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xf, 0x8, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x2, 0x2, 0xa}, {0x0, 0x4, 0x9, 0x4}], 0x10, 0x5, @void, @value}, 0x94) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendto$inet6(r6, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) 99.774811ms ago: executing program 4 (id=1027): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x40, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000000000ffff0c000001"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x22, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) splice(r6, 0x0, r8, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, 0x0, 0x20000004) write(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) unshare(0x40040000) 3.993954ms ago: executing program 3 (id=1028): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth0_to_team\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000ea0a001000"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000005e0001ee00000000000000000c00000001000000000000800c00fe8008000200", @ANYRES32, @ANYBLOB], 0x28}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="a5", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001d80)=""/45, 0x2d}], 0x1}}], 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000395f00009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000008500006262770608c97e8f095b6400b30000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 0s ago: executing program 1 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000003d0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r2, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r1, 0x1}, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x15c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xe}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbf76}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffff0d}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x64, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ff2146b7d7fd6a52e2e12cb389e5ee92"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a5eaa74a3db59ccc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7e823160bd0b95b614778bdf7a7f42640daf12c7c2e6e7c80b9b2c2f4a5e606f"}]}]}, 0x64}}, 0x840) kernel console output (not intermixed with test programs): tp: failed to load transform for md5: -2 [ 90.306220][ T5693] x_tables: duplicate underflow at hook 2 [ 90.349044][ T5693] x_tables: duplicate underflow at hook 2 [ 90.369826][ T5693] x_tables: duplicate underflow at hook 2 [ 90.429897][ T5693] x_tables: duplicate underflow at hook 2 [ 90.436144][ T5693] x_tables: duplicate underflow at hook 2 [ 90.448612][ T5699] warning: `syz.3.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.509212][ T5693] x_tables: duplicate underflow at hook 2 [ 90.515114][ T5693] x_tables: duplicate underflow at hook 2 [ 90.598428][ T5693] x_tables: duplicate underflow at hook 2 [ 90.604748][ T5693] x_tables: duplicate underflow at hook 2 [ 90.679048][ T5693] x_tables: duplicate underflow at hook 2 [ 90.941045][ T5716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.123'. [ 91.093471][ T5718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.124'. [ 91.187979][ T5728] batadv0: entered promiscuous mode [ 91.298322][ T5734] hsr0: entered promiscuous mode [ 91.577311][ T5745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.131'. [ 91.935863][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 91.978340][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 91.993244][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.137'. [ 92.059894][ T5758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 92.093391][ T5758] netlink: 56 bytes leftover after parsing attributes in process `syz.0.135'. [ 92.380530][ T5787] Bluetooth: MGMT ver 1.23 [ 92.451189][ T5790] Cannot find set identified by id 0 to match [ 92.992637][ T5814] validate_nla: 3 callbacks suppressed [ 92.992661][ T5814] netlink: 'syz.1.152': attribute type 23 has an invalid length. [ 134.698132][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.704546][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 174.298217][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.307906][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.378862][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.388068][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.396396][ T4622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.403953][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.414089][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.421598][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.430062][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 174.437393][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 174.447790][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.461674][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.533769][ T5241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.647197][ T5241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.655359][ T5241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.664813][ T5241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.681593][ T5241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 174.689872][ T5241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.900807][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 174.970975][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 174.979270][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 174.989049][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 174.998806][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 175.006177][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 175.241384][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.257833][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.266562][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.281273][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.281301][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.292209][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.309835][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.399962][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.490984][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.552678][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.764704][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 175.859799][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 175.886070][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.052767][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.203290][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.298621][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.306539][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.323428][ T5831] bridge_slave_0: entered allmulticast mode [ 176.335212][ T5831] bridge_slave_0: entered promiscuous mode [ 176.390812][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.422699][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 176.461586][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 176.484012][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.492854][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.500304][ T5831] bridge_slave_1: entered allmulticast mode [ 176.508165][ T5831] bridge_slave_1: entered promiscuous mode [ 176.617751][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.624909][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.636444][ T5832] bridge_slave_0: entered allmulticast mode [ 176.643614][ T5832] bridge_slave_0: entered promiscuous mode [ 176.693876][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.706267][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.715764][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.723114][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.730897][ T5832] bridge_slave_1: entered allmulticast mode [ 176.739636][ T5832] bridge_slave_1: entered promiscuous mode [ 176.819201][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.832212][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.847580][ T5241] Bluetooth: hci5: command tx timeout [ 176.891957][ T5831] team0: Port device team_slave_0 added [ 176.967160][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.974633][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.983181][ T5836] bridge_slave_0: entered allmulticast mode [ 176.991167][ T5836] bridge_slave_0: entered promiscuous mode [ 176.997685][ T5241] Bluetooth: hci6: command tx timeout [ 177.023962][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.031593][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.039447][ T5845] bridge_slave_0: entered allmulticast mode [ 177.048382][ T5845] bridge_slave_0: entered promiscuous mode [ 177.055829][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 177.067989][ T5241] Bluetooth: hci7: command tx timeout [ 177.089617][ T5831] team0: Port device team_slave_1 added [ 177.107278][ T5832] team0: Port device team_slave_0 added [ 177.139423][ T5832] team0: Port device team_slave_1 added [ 177.145642][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.175878][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.191776][ T5836] bridge_slave_1: entered allmulticast mode [ 177.206800][ T5836] bridge_slave_1: entered promiscuous mode [ 177.215117][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.223194][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.230739][ T5229] Bluetooth: hci8: command tx timeout [ 177.230938][ T5845] bridge_slave_1: entered allmulticast mode [ 177.246069][ T5845] bridge_slave_1: entered promiscuous mode [ 177.398587][ T5229] Bluetooth: hci0: command tx timeout [ 177.439303][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.446310][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.484667][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.518938][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.530862][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.561385][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.571093][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.600199][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.642535][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.650043][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.677317][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.696291][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.710798][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.746074][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.753302][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.780856][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.794947][ T51] bridge_slave_1: left allmulticast mode [ 177.801329][ T51] bridge_slave_1: left promiscuous mode [ 177.808250][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.820925][ T51] bridge_slave_0: left allmulticast mode [ 177.826584][ T51] bridge_slave_0: left promiscuous mode [ 177.833038][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.844533][ T51] bridge_slave_1: left allmulticast mode [ 177.850989][ T51] bridge_slave_1: left promiscuous mode [ 177.856701][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.869280][ T51] bridge_slave_0: left allmulticast mode [ 177.875131][ T51] bridge_slave_0: left promiscuous mode [ 177.881294][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.416556][ T51] bond0 (unregistering): left allmulticast mode [ 178.423700][ T51] bond_slave_0: left allmulticast mode [ 178.430467][ T51] bond_slave_1: left allmulticast mode [ 178.435964][ T51] bond0 (unregistering): left promiscuous mode [ 178.442736][ T51] bond_slave_0: left promiscuous mode [ 178.449098][ T51] bond_slave_1: left promiscuous mode [ 178.470654][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.485623][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.496634][ T51] bond0 (unregistering): Released all slaves [ 178.602295][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.613505][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.625271][ T51] bond0 (unregistering): Released all slaves [ 178.667320][ T5845] team0: Port device team_slave_0 added [ 178.782717][ T5845] team0: Port device team_slave_1 added [ 178.803255][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.810709][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.820135][ T5839] bridge_slave_0: entered allmulticast mode [ 178.827305][ T5839] bridge_slave_0: entered promiscuous mode [ 178.856486][ T5832] hsr_slave_0: entered promiscuous mode [ 178.862947][ T5832] hsr_slave_1: entered promiscuous mode [ 178.869852][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.879335][ T5832] Cannot create hsr debugfs directory [ 178.889630][ T5836] team0: Port device team_slave_0 added [ 178.898035][ T5836] team0: Port device team_slave_1 added [ 178.908428][ T5229] Bluetooth: hci5: command tx timeout [ 178.932421][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.939708][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.966085][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.978973][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.986178][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.994225][ T5839] bridge_slave_1: entered allmulticast mode [ 179.003979][ T5839] bridge_slave_1: entered promiscuous mode [ 179.067843][ T5229] Bluetooth: hci6: command tx timeout [ 179.076304][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.084775][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.114281][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.147756][ T5229] Bluetooth: hci7: command tx timeout [ 179.185072][ T5831] hsr_slave_0: entered promiscuous mode [ 179.193388][ T5831] hsr_slave_1: entered promiscuous mode [ 179.200563][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.208699][ T5831] Cannot create hsr debugfs directory [ 179.220023][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.232160][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.256701][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.267748][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.294566][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.307550][ T5229] Bluetooth: hci8: command tx timeout [ 179.377264][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.384752][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.412393][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.457973][ T5845] hsr_slave_0: entered promiscuous mode [ 179.464413][ T5845] hsr_slave_1: entered promiscuous mode [ 179.470835][ T5229] Bluetooth: hci0: command tx timeout [ 179.476974][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.485069][ T5845] Cannot create hsr debugfs directory [ 179.494059][ T5839] team0: Port device team_slave_0 added [ 179.503071][ T5839] team0: Port device team_slave_1 added [ 179.604630][ T5836] hsr_slave_0: entered promiscuous mode [ 179.611766][ T5836] hsr_slave_1: entered promiscuous mode [ 179.618932][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.626800][ T5836] Cannot create hsr debugfs directory [ 179.767104][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.778053][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.810358][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.839955][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.846959][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.890480][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.222145][ T51] hsr_slave_0: left promiscuous mode [ 180.228576][ T51] hsr_slave_1: left promiscuous mode [ 180.234647][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.243111][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.255369][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.263406][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.289981][ T51] hsr_slave_0: left promiscuous mode [ 180.296091][ T51] hsr_slave_1: left promiscuous mode [ 180.307907][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.315390][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.327641][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.335107][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.366613][ T51] veth1_macvtap: left promiscuous mode [ 180.373082][ T51] veth0_macvtap: left promiscuous mode [ 180.378876][ T51] veth1_vlan: left promiscuous mode [ 180.384434][ T51] veth0_vlan: left promiscuous mode [ 180.392276][ T51] veth1_macvtap: left promiscuous mode [ 180.397983][ T51] veth0_macvtap: left promiscuous mode [ 180.404326][ T51] veth1_vlan: left promiscuous mode [ 180.409772][ T51] veth0_vlan: left promiscuous mode [ 180.913850][ T51] team0 (unregistering): Port device team_slave_1 removed [ 180.951963][ T51] team0 (unregistering): Port device team_slave_0 removed [ 180.997753][ T5229] Bluetooth: hci5: command tx timeout [ 181.161860][ T5229] Bluetooth: hci6: command tx timeout [ 181.227813][ T5229] Bluetooth: hci7: command tx timeout [ 181.389593][ T5229] Bluetooth: hci8: command tx timeout [ 181.557776][ T5229] Bluetooth: hci0: command tx timeout [ 181.626760][ T51] team0 (unregistering): Port device team_slave_1 removed [ 181.677204][ T51] team0 (unregistering): Port device team_slave_0 removed [ 182.098859][ T5839] hsr_slave_0: entered promiscuous mode [ 182.106349][ T5839] hsr_slave_1: entered promiscuous mode [ 182.211739][ T5832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.321431][ T5832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.421471][ T5832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.522755][ T5832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.762773][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.793095][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.907944][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.924204][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.068158][ T5229] Bluetooth: hci5: command tx timeout [ 183.185011][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.238241][ T5229] Bluetooth: hci6: command tx timeout [ 183.299431][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.310033][ T5229] Bluetooth: hci7: command tx timeout [ 183.347147][ T5845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.417328][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.480315][ T5845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.480404][ T5229] Bluetooth: hci8: command tx timeout [ 183.529798][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.553809][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.592700][ T5845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.629084][ T5229] Bluetooth: hci0: command tx timeout [ 183.631605][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.669239][ T5845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.696906][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.704143][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.744546][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.751713][ T2464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.849395][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.876347][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.917143][ T51] bridge_slave_1: left allmulticast mode [ 183.924536][ T51] bridge_slave_1: left promiscuous mode [ 183.946342][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.967165][ T51] bridge_slave_0: left allmulticast mode [ 183.974200][ T51] bridge_slave_0: left promiscuous mode [ 183.987776][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.001099][ T51] team0: left allmulticast mode [ 184.006020][ T51] team_slave_0: left allmulticast mode [ 184.022522][ T51] team_slave_1: left allmulticast mode [ 184.036301][ T51] team0: left promiscuous mode [ 184.041970][ T51] team_slave_0: left promiscuous mode [ 184.058829][ T51] team_slave_1: left promiscuous mode [ 184.064729][ T51] bridge0: port 3(team0) entered disabled state [ 184.082151][ T51] bridge_slave_1: left allmulticast mode [ 184.093804][ T51] bridge_slave_1: left promiscuous mode [ 184.103502][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.114184][ T51] bridge_slave_0: left allmulticast mode [ 184.120053][ T51] bridge_slave_0: left promiscuous mode [ 184.125791][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.138592][ T51] bridge_slave_1: left allmulticast mode [ 184.147540][ T51] bridge_slave_1: left promiscuous mode [ 184.153432][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.169326][ T51] bridge_slave_0: left allmulticast mode [ 184.175133][ T51] bridge_slave_0: left promiscuous mode [ 184.181550][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.776671][ T51] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 184.947115][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.959547][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.970705][ T51] bond0 (unregistering): Released all slaves [ 184.984050][ T51] bond1 (unregistering): Released all slaves [ 185.086772][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.098683][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.110313][ T51] bond0 (unregistering): Released all slaves [ 185.198371][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.213147][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.224327][ T51] bond0 (unregistering): Released all slaves [ 185.345225][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.464162][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.482464][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.496457][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.736279][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.067157][ T5832] veth0_vlan: entered promiscuous mode [ 186.110383][ T5832] veth1_vlan: entered promiscuous mode [ 186.182840][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.310404][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.324360][ T5832] veth0_macvtap: entered promiscuous mode [ 186.334775][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.342240][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.381966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.389165][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.402484][ T5832] veth1_macvtap: entered promiscuous mode [ 186.454379][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.465195][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.482239][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.493040][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.503422][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.514638][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.526880][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.560097][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.571033][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.581431][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.593404][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.603662][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.614759][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.626792][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.656491][ T51] hsr_slave_0: left promiscuous mode [ 186.672130][ T51] hsr_slave_1: left promiscuous mode [ 186.679127][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.686601][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.695388][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.703433][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.715312][ T51] hsr_slave_0: left promiscuous mode [ 186.722152][ T51] hsr_slave_1: left promiscuous mode [ 186.728796][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.736243][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.744863][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.752562][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.761495][ T51] batman_adv: batadv0: Removing interface: ipvlan1 [ 186.772366][ T51] hsr_slave_0: left promiscuous mode [ 186.779042][ T51] hsr_slave_1: left promiscuous mode [ 186.785031][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.792810][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.801329][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.808909][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.850791][ T51] veth1_macvtap: left promiscuous mode [ 186.856383][ T51] veth0_macvtap: left promiscuous mode [ 186.862129][ T51] veth1_vlan: left promiscuous mode [ 186.867514][ T51] veth0_vlan: left promiscuous mode [ 186.873936][ T51] veth1_macvtap: left promiscuous mode [ 186.880201][ T51] veth0_macvtap: left promiscuous mode [ 186.885755][ T51] veth1_vlan: left promiscuous mode [ 186.891270][ T51] veth0_vlan: left promiscuous mode [ 186.897597][ T51] veth1_macvtap: left promiscuous mode [ 186.903239][ T51] veth0_macvtap: left promiscuous mode [ 186.909882][ T51] veth1_vlan: left promiscuous mode [ 186.915176][ T51] veth0_vlan: left promiscuous mode [ 187.475211][ T51] team0 (unregistering): Port device team_slave_1 removed [ 187.513180][ T51] team0 (unregistering): Port device team_slave_0 removed [ 188.120033][ T51] team0 (unregistering): Port device team_slave_1 removed [ 188.155599][ T51] team0 (unregistering): Port device team_slave_0 removed [ 188.774952][ T51] team0 (unregistering): Port device team_slave_1 removed [ 188.814153][ T51] team0 (unregistering): Port device team_slave_0 removed [ 189.126230][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.135422][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.144761][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.153961][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.203768][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.244824][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.257288][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.272287][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.303592][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.331298][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.528056][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.568705][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.592443][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.605807][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.645531][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.656534][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.745641][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.759515][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.796739][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.805000][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.828237][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.855066][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.897160][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.002017][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.106631][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.163604][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.170885][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.235650][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.243395][ T2516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.319396][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.423726][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.540404][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.547608][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.580593][ T5845] veth0_vlan: entered promiscuous mode [ 190.631698][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.638880][ T2533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.663886][ T5845] veth1_vlan: entered promiscuous mode [ 190.741792][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.835609][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.901404][ T5845] veth0_macvtap: entered promiscuous mode [ 190.924952][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.932136][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.980097][ T5845] veth1_macvtap: entered promiscuous mode [ 191.030675][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.037868][ T2516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.136200][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.186748][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.204774][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.222094][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.290585][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.315962][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.340733][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.392221][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.427565][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.436342][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.466635][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.609960][ T5831] veth0_vlan: entered promiscuous mode [ 191.641962][ T6049] netlink: 'syz.1.164': attribute type 29 has an invalid length. [ 191.681186][ T6049] netlink: 'syz.1.164': attribute type 29 has an invalid length. [ 191.694008][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.734002][ T5831] veth1_vlan: entered promiscuous mode [ 191.751390][ T6049] netlink: 'syz.1.164': attribute type 29 has an invalid length. [ 191.820936][ T6049] netlink: 'syz.1.164': attribute type 29 has an invalid length. [ 191.840533][ T2552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.853631][ T6049] __nla_validate_parse: 1 callbacks suppressed [ 191.853652][ T6049] netlink: 96 bytes leftover after parsing attributes in process `syz.1.164'. [ 191.855804][ T2552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.865948][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.941892][ T5831] veth0_macvtap: entered promiscuous mode [ 191.976310][ T5831] veth1_macvtap: entered promiscuous mode [ 191.991493][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.001704][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.127147][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.138490][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.148577][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.159151][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.170608][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.180535][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.191181][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.201922][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.213183][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.226021][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.277341][ T5836] veth0_vlan: entered promiscuous mode [ 192.289872][ T5836] veth1_vlan: entered promiscuous mode [ 192.321218][ T5836] veth0_macvtap: entered promiscuous mode [ 192.330643][ T5836] veth1_macvtap: entered promiscuous mode [ 192.347936][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.357657][ T6066] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.158'. [ 192.358755][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.377549][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.388077][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.398003][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.409041][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.421472][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.432373][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.442968][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.452956][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.463487][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.473568][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.484207][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.495622][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.530710][ T5839] veth0_vlan: entered promiscuous mode [ 192.552793][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.572195][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.584247][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.602135][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.652890][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.663754][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.694757][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.721201][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.753177][ T5839] veth1_vlan: entered promiscuous mode [ 192.981370][ T5839] veth0_macvtap: entered promiscuous mode [ 193.046416][ T5839] veth1_macvtap: entered promiscuous mode [ 193.063400][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.091874][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.166478][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.183850][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.202101][ T6088] xt_cluster: node mask cannot exceed total number of nodes [ 193.204417][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.255106][ T6088] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 193.257511][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.274279][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.284881][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.297515][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.308773][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.318872][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.330396][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.341867][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.362784][ T2516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.388836][ T2516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.443324][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.459347][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.473928][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.485363][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.495950][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.525568][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.537258][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.549615][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.560972][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.638608][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.654520][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.671588][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.715963][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.727028][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.736890][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.800633][ T6101] netlink: 830 bytes leftover after parsing attributes in process `syz.4.170'. [ 193.823892][ T6101] bond_slave_0: entered promiscuous mode [ 193.829959][ T6101] bond_slave_1: entered promiscuous mode [ 194.221660][ T2552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.255985][ T2552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.282715][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 194.497046][ T2533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.511603][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518895][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.546303][ T2533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.777960][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 195.541300][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'. [ 195.884728][ T6172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.918007][ T6215] dummy0: entered promiscuous mode [ 196.924853][ T6215] team0: Device macsec1 is up. Set it down before adding it as a team port [ 196.949818][ T6215] dummy0: left promiscuous mode [ 197.265427][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.192'. [ 197.361745][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.192'. [ 198.517626][ T6294] dccp_invalid_packet: P.Data Offset(10) too large [ 198.585086][ T6294] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 198.638284][ T6300] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.212'. [ 198.659253][ T6300] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 199.364794][ T6324] netlink: 596 bytes leftover after parsing attributes in process `syz.4.218'. [ 199.442867][ T6342] macvlan2: entered promiscuous mode [ 199.448661][ T6342] vlan0: entered promiscuous mode [ 200.777282][ T6404] netlink: 256 bytes leftover after parsing attributes in process `syz.1.240'. [ 200.935714][ T6414] netlink: 596 bytes leftover after parsing attributes in process `syz.3.239'. [ 231.034632][ T6421] delete_channel: no stack [ 231.041801][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'. [ 231.167882][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 231.358102][ T6435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.890428][ T6450] syzkaller0: entered promiscuous mode [ 231.896518][ T6450] syzkaller0: entered allmulticast mode [ 231.915044][ T51] syzkaller0: tun_net_xmit 48 [ 231.966393][ T6464] netlink: 596 bytes leftover after parsing attributes in process `syz.3.254'. [ 232.027277][ T6467] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 233.659840][ T6477] ip_vti0: entered promiscuous mode [ 233.665098][ T6477] ip_vti0: entered allmulticast mode [ 234.038017][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.266'. [ 234.103381][ T6506] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 234.123397][ T6514] bridge0: port 2(bridge_slave_1) entered listening state [ 234.251089][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 234.393414][ T6527] syzkaller0: entered promiscuous mode [ 234.399524][ T6527] syzkaller0: entered allmulticast mode [ 234.407128][ T51] syzkaller0: tun_net_xmit 48 [ 234.468918][ T6530] Bluetooth: MGMT ver 1.23 [ 234.569502][ T6533] netlink: 'syz.1.273': attribute type 10 has an invalid length. [ 234.829913][ T6524] infiniband syz2: set active [ 234.843141][ T6524] infiniband syz2: added team_slave_1 [ 234.902611][ T6524] syz2: rxe_create_cq: returned err = -12 [ 234.913797][ T6524] infiniband syz2: Couldn't create ib_mad CQ [ 234.932011][ T6524] infiniband syz2: Couldn't open port 1 [ 235.023230][ T6524] RDS/IB: syz2: added [ 235.040503][ T6524] smc: adding ib device syz2 with port count 1 [ 235.066093][ T6524] smc: ib device syz2 port 1 has pnetid [ 236.432700][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 236.513699][ T5241] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.520336][ T5229] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 236.751191][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.284'. [ 236.970750][ T6562] netlink: 'syz.4.284': attribute type 10 has an invalid length. [ 237.068182][ T6562] batman_adv: batadv0: Adding interface: team0 [ 237.115626][ T6562] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.184746][ T6562] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 237.533085][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 237.834533][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 237.901912][ T6580] syzkaller0: entered promiscuous mode [ 237.913529][ T6580] syzkaller0: entered allmulticast mode [ 237.924545][ T62] syzkaller0: tun_net_xmit 48 [ 237.940979][ T6580] syzkaller0: create flow: hash 1407746421 index 1 [ 238.073918][ T6579] syzkaller0: delete flow: hash 1407746421 index 1 [ 239.623478][ T6603] netlink: 64126 bytes leftover after parsing attributes in process `syz.1.295'. [ 239.663087][ T6538] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 239.684073][ T6538] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 239.746711][ T6606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'. [ 239.771689][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 240.289636][ T6621] bridge_slave_0: left allmulticast mode [ 240.295443][ T6621] bridge_slave_0: left promiscuous mode [ 240.343586][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.392752][ T6621] bridge_slave_1: left allmulticast mode [ 240.403412][ T6621] bridge_slave_1: left promiscuous mode [ 240.425940][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.475772][ T6621] bond0: (slave bond_slave_0): Releasing backup interface [ 240.554531][ T6621] bond0: (slave bond_slave_1): Releasing backup interface [ 240.663884][ T6621] team0: Port device team_slave_0 removed [ 240.711526][ T6621] infiniband syz2: set down [ 240.719850][ T6621] team0: Port device team_slave_1 removed [ 240.726706][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.736116][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.746682][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.763804][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.760250][ T6638] netlink: 'syz.0.304': attribute type 16 has an invalid length. [ 242.768640][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.0.304'. [ 242.781620][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.977154][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 242.995294][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 243.042481][ T6645] erspan0: entered promiscuous mode [ 243.093474][ T6645] batadv_slave_1: entered promiscuous mode [ 243.739344][ T6669] geneve2: entered promiscuous mode [ 243.744605][ T6669] geneve2: entered allmulticast mode [ 243.755725][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 243.935687][ T6678] xt_cgroup: invalid path, errno=-2 [ 244.166399][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.610681][ T6701] netlink: 596 bytes leftover after parsing attributes in process `syz.4.321'. [ 244.706533][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 245.356435][ T6732] team_slave_0: entered promiscuous mode [ 245.362630][ T6732] team_slave_1: entered promiscuous mode [ 245.435502][ T6732] macvtap1: entered promiscuous mode [ 245.448827][ T6732] team0: entered promiscuous mode [ 245.454891][ T6732] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 245.485568][ T6735] netlink: 'syz.2.330': attribute type 29 has an invalid length. [ 245.517233][ T6736] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.817744][ T6745] netlink: 'syz.2.333': attribute type 10 has an invalid length. [ 245.897932][ T6745] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 246.251779][ T6758] sctp: [Deprecated]: syz.3.339 (pid 6758) Use of int in max_burst socket option. [ 246.251779][ T6758] Use struct sctp_assoc_value instead [ 247.946181][ T6828] netlink: 140 bytes leftover after parsing attributes in process `syz.2.355'. [ 248.205567][ T6839] netlink: 106968 bytes leftover after parsing attributes in process `syz.1.354'. [ 248.223220][ T6839] openvswitch: netlink: Message has 5 unknown bytes. [ 249.293905][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'. [ 249.324291][ T6840] netlink: 'syz.2.356': attribute type 11 has an invalid length. [ 249.628936][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 249.670541][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 249.770514][ T6855] IPv6: sit1: Disabled Multicast RS [ 250.281495][ T6883] IPVS: Error connecting to the multicast addr [ 250.804832][ T6903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.369'. [ 250.958644][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 251.117661][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.373'. [ 251.179026][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 251.217612][ T6929] bond0: option ad_select: unable to set because the bond device is up [ 251.217883][ T12] bond0: (slave bond_slave_0): interface is now down [ 251.266174][ T12] bond0: (slave bond_slave_1): interface is now down [ 251.277330][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 251.292215][ T6927] bridge_slave_1: left allmulticast mode [ 251.298750][ T6927] bridge_slave_1: left promiscuous mode [ 251.305508][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.309265][ T12] bond0: (slave bond_slave_0): interface is now down [ 251.336628][ T12] bond0: (slave bond_slave_1): interface is now down [ 251.346415][ T6927] bridge_slave_0: left promiscuous mode [ 251.352625][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.358499][ T12] bond0: (slave bond_slave_0): interface is now down [ 251.366564][ T12] bond0: (slave bond_slave_1): interface is now down [ 251.388874][ T2464] bond0: (slave bond_slave_0): interface is now down [ 251.395743][ T2464] bond0: (slave bond_slave_1): interface is now down [ 251.416620][ T6940] netlink: 'syz.1.376': attribute type 9 has an invalid length. [ 251.426110][ T2552] bond0: (slave bond_slave_0): interface is now down [ 251.433130][ T2552] bond0: (slave bond_slave_1): interface is now down [ 251.473197][ T2552] bond0: (slave bond_slave_0): interface is now down [ 251.480761][ T2552] bond0: (slave bond_slave_1): interface is now down [ 251.508412][ T2552] bond0: (slave bond_slave_0): interface is now down [ 251.515365][ T2552] bond0: (slave bond_slave_1): interface is now down [ 251.539034][ T12] bond0: (slave bond_slave_0): interface is now down [ 251.565186][ T12] bond0: (slave bond_slave_1): interface is now down [ 251.604347][ T2516] bond0: (slave bond_slave_0): interface is now down [ 251.618945][ T2516] bond0: (slave bond_slave_1): interface is now down [ 251.678818][ T2516] bond0: (slave bond_slave_0): interface is now down [ 251.692354][ T2516] bond0: (slave bond_slave_1): interface is now down [ 251.699399][ T6945] netlink: 'syz.0.377': attribute type 75 has an invalid length. [ 251.721478][ T2516] bond0: now running without any active interface! [ 251.748842][ T6947] netlink: 'syz.2.378': attribute type 10 has an invalid length. [ 251.841810][ T6947] macvlan0: entered promiscuous mode [ 251.847358][ T6947] macvlan0: entered allmulticast mode [ 251.885014][ T6947] veth1_vlan: entered allmulticast mode [ 251.909009][ T6947] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 252.133891][ T6972] netlink: 'syz.2.382': attribute type 7 has an invalid length. [ 252.419408][ T6973] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 252.517105][ T6973] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.629970][ T6987] syzkaller0: entered promiscuous mode [ 252.639162][ T6987] syzkaller0: entered allmulticast mode [ 252.660295][ T12] syzkaller0: tun_net_xmit 48 [ 254.756817][ T7023] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 254.767743][ T7030] sctp: [Deprecated]: syz.3.395 (pid 7030) Use of int in max_burst socket option deprecated. [ 254.767743][ T7030] Use struct sctp_assoc_value instead [ 254.782704][ T7023] __nla_validate_parse: 3 callbacks suppressed [ 254.782725][ T7023] netlink: 224 bytes leftover after parsing attributes in process `syz.3.395'. [ 255.123467][ T7053] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.402'. [ 255.615839][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.827143][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.407'. [ 255.950753][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.960645][ T7079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 256.200402][ T7091] netlink: 596 bytes leftover after parsing attributes in process `syz.4.414'. [ 256.319826][ T7097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.579476][ T7110] netlink: 296 bytes leftover after parsing attributes in process `syz.3.419'. [ 256.605763][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.419'. [ 256.921274][ T7128] netlink: 'syz.3.425': attribute type 21 has an invalid length. [ 256.929730][ T7128] netlink: 168 bytes leftover after parsing attributes in process `syz.3.425'. [ 257.363808][ T7144] netlink: 596 bytes leftover after parsing attributes in process `syz.3.432'. [ 257.492455][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 257.764445][ T7173] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 257.793950][ T7173] x_tables: ip_tables: osf match: only valid for protocol 6 [ 258.047564][ T7190] netlink: 'syz.2.445': attribute type 22 has an invalid length. [ 258.599024][ T7218] netlink: 'syz.0.455': attribute type 9 has an invalid length. [ 258.713367][ T7222] netlink: 'syz.0.455': attribute type 9 has an invalid length. [ 258.751660][ T7221] xt_TCPMSS: Only works on TCP SYN packets [ 259.235282][ T7252] netlink: 'syz.4.466': attribute type 4 has an invalid length. [ 259.897405][ T7278] __nla_validate_parse: 4 callbacks suppressed [ 259.927565][ T7278] netlink: 596 bytes leftover after parsing attributes in process `syz.0.473'. [ 260.508029][ T7302] netlink: 'syz.2.482': attribute type 3 has an invalid length. [ 260.515948][ T7302] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.482'. [ 260.559109][ T7308] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 260.643522][ T7310] sctp: [Deprecated]: syz.2.484 (pid 7310) Use of int in max_burst socket option. [ 260.643522][ T7310] Use struct sctp_assoc_value instead [ 260.958903][ T7323] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 260.975572][ T7323] netlink: 224 bytes leftover after parsing attributes in process `syz.4.487'. [ 261.216222][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 261.883753][ T7347] netlink: 100 bytes leftover after parsing attributes in process `syz.2.494'. [ 261.908492][ T7347] netlink: 100 bytes leftover after parsing attributes in process `syz.2.494'. [ 262.536812][ T7362] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 262.574962][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 262.628724][ T7362] gretap0: entered promiscuous mode [ 262.639942][ T7362] macvtap1: entered promiscuous mode [ 262.668063][ T7362] macvtap1: entered allmulticast mode [ 262.682583][ T7362] gretap0: entered allmulticast mode [ 263.705220][ T7390] netlink: 'syz.2.505': attribute type 8 has an invalid length. [ 264.795785][ T7413] macvlan2: entered promiscuous mode [ 264.814705][ T7413] macvlan2: entered allmulticast mode [ 264.823522][ T7413] bridge0: entered promiscuous mode [ 264.843964][ T7413] bond0: entered allmulticast mode [ 264.855050][ T7413] bridge0: entered allmulticast mode [ 264.863195][ T7413] bond0: entered promiscuous mode [ 264.874955][ T7413] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.892286][ T7413] team0: Port device macvlan2 added [ 264.912785][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 265.089689][ T7430] netlink: 116 bytes leftover after parsing attributes in process `syz.2.521'. [ 265.652525][ T7462] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 266.396296][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 266.751361][ T7502] netlink: 84 bytes leftover after parsing attributes in process `syz.2.541'. [ 267.565240][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'. [ 267.823771][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 267.903073][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 268.430872][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'. [ 268.964993][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.564'. [ 268.970557][ T7579] team_slave_0: entered promiscuous mode [ 268.979699][ T7579] team_slave_1: entered promiscuous mode [ 269.021998][ T7580] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 269.038127][ T7580] team_slave_0: left promiscuous mode [ 269.047698][ T7580] team_slave_1: left promiscuous mode [ 269.075023][ T7580] team_slave_0: entered promiscuous mode [ 269.080848][ T7580] team_slave_1: entered promiscuous mode [ 269.109002][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.139422][ T7580] bond0: (slave team0): Enslaving as an active interface with an up link [ 269.187891][ T7573] team_slave_0: left promiscuous mode [ 269.194026][ T7573] team_slave_1: left promiscuous mode [ 269.201343][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 270.266993][ T7639] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 270.275583][ T7639] __nla_validate_parse: 5 callbacks suppressed [ 270.275597][ T7639] netlink: 224 bytes leftover after parsing attributes in process `syz.2.583'. [ 270.709579][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 270.732009][ T7645] netlink: 596 bytes leftover after parsing attributes in process `syz.0.584'. [ 271.299705][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 272.506063][ T7672] netlink: 72 bytes leftover after parsing attributes in process `syz.1.591'. [ 272.679213][ T7684] IPVS: set_ctl: invalid protocol: 22 172.30.1.1:20002 [ 272.830044][ T7692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.596'. [ 273.104442][ T7704] netlink: 'syz.3.600': attribute type 3 has an invalid length. [ 273.147258][ T7704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'. [ 273.167926][ T7710] netlink: 248 bytes leftover after parsing attributes in process `syz.3.600'. [ 273.310846][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'. [ 273.496798][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 274.017907][ T7736] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 274.058990][ T7738] ipip0: entered promiscuous mode [ 274.525195][ T7753] xt_cluster: you have exceeded the maximum number of cluster nodes (600 > 32) [ 274.574570][ T7761] Cannot find add_set index 0 as target [ 274.593763][ T7763] pimreg: entered allmulticast mode [ 275.501610][ T7810] __nla_validate_parse: 7 callbacks suppressed [ 275.501633][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 275.567322][ T7807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.586569][ T7807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.645426][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.933570][ T7824] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 275.996273][ T7826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.634'. [ 276.002982][ T7827] netlink: 68 bytes leftover after parsing attributes in process `syz.1.634'. [ 276.168713][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 276.186963][ T7833] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 276.209811][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 276.232021][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.636'. [ 276.251341][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 276.293183][ T7835] netlink: 596 bytes leftover after parsing attributes in process `syz.4.638'. [ 276.463213][ T7845] wg2: entered promiscuous mode [ 276.508169][ T7845] team0: Device wg2 is of different type [ 276.527991][ T7844] batadv0: entered allmulticast mode [ 276.581222][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'. [ 277.031775][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.648'. [ 277.283488][ T7878] ip6gretap0: entered promiscuous mode [ 277.315255][ T7878] vlan3: entered promiscuous mode [ 277.356242][ T7878] ip6gretap0: left promiscuous mode [ 277.694793][ T7904] netlink: 'syz.2.659': attribute type 20 has an invalid length. [ 277.929331][ T7915] bond0: option mode: unable to set because the bond device has slaves [ 278.283487][ T7927] bridge1: entered promiscuous mode [ 278.308467][ T7927] bridge1: entered allmulticast mode [ 278.411249][ T7927] team0: Port device bridge1 added [ 278.431392][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.095005][ T7963] bond1: entered promiscuous mode [ 279.132020][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.644048][ T8002] ÊüðÿG: entered promiscuous mode [ 279.661240][ T8006] xt_check_table_hooks: 56 callbacks suppressed [ 279.661348][ T8006] x_tables: duplicate underflow at hook 1 [ 279.815312][ T8002] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 279.926840][ T8002] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 279.985956][ T8002] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 280.003561][ T8002] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 280.166154][ T8029] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 1, id = 0 [ 280.472912][ T8041] netlink: 'syz.0.697': attribute type 7 has an invalid length. [ 280.480810][ T8041] netlink: 'syz.0.697': attribute type 8 has an invalid length. [ 280.770211][ T8050] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 281.034639][ T8063] netlink: 'syz.0.705': attribute type 2 has an invalid length. [ 281.083438][ T8065] __nla_validate_parse: 21 callbacks suppressed [ 281.083468][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 281.441705][ T8085] netlink: 80 bytes leftover after parsing attributes in process `syz.0.713'. [ 281.489919][ T8088] netlink: 'syz.4.712': attribute type 10 has an invalid length. [ 281.513656][ T8088] netlink: 'syz.4.712': attribute type 10 has an invalid length. [ 281.621433][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 281.645082][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'. [ 282.176990][ T8127] netlink: 44 bytes leftover after parsing attributes in process `syz.3.722'. [ 283.013037][ T8152] pim6reg: entered allmulticast mode [ 283.068287][ T8152] batadv_slave_0: entered allmulticast mode [ 284.085286][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 284.094791][ T8219] netlink: 48 bytes leftover after parsing attributes in process `syz.3.755'. [ 284.103906][ T8219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.755'. [ 284.117186][ T8219] vlan3: entered allmulticast mode [ 284.162775][ T8227] netlink: 'syz.3.755': attribute type 2 has an invalid length. [ 284.241707][ T8232] netlink: 'syz.2.757': attribute type 3 has an invalid length. [ 284.258494][ T8232] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.757'. [ 284.293296][ T8234] netlink: 209584 bytes leftover after parsing attributes in process `syz.1.759'. [ 285.578253][ T8273] xt_CT: No such helper "syz0" [ 285.611026][ T8279] bridge1: entered promiscuous mode [ 285.616647][ T8279] bridge1: entered allmulticast mode [ 285.627146][ T8279] team0: Port device bridge1 added [ 285.643252][ T8279] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 285.712190][ T8279] bridge0: port 1(ip6gretap0) entered blocking state [ 285.752965][ T8279] bridge0: port 1(ip6gretap0) entered disabled state [ 285.767918][ T8279] ip6gretap0: entered allmulticast mode [ 285.786126][ T8279] ip6gretap0: entered promiscuous mode [ 285.826873][ T8289] dvmrp0: entered allmulticast mode [ 285.840988][ T8289] dvmrp0: left allmulticast mode [ 285.930968][ T8293] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 285.975393][ T8295] syz.1.775[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.975516][ T8295] syz.1.775[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.979355][ T8293] xt_socket: unknown flags 0x4 [ 285.987345][ T8295] syz.1.775[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.269174][ T8304] __nla_validate_parse: 10 callbacks suppressed [ 286.269197][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.779'. [ 286.307291][ T8307] dccp_invalid_packet: P.Data Offset(100) too large [ 286.309314][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 286.667006][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 286.695874][ T8325] netlink: 596 bytes leftover after parsing attributes in process `syz.1.787'. [ 286.756733][ T8332] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 286.765406][ T8332] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.788'. [ 286.775616][ T8332] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 286.786445][ T8332] netlink: 'syz.2.788': attribute type 2 has an invalid length. [ 286.991913][ T8342] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.001438][ T8342] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.010282][ T8342] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.019265][ T8342] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.036577][ T8341] netlink: 'syz.2.790': attribute type 21 has an invalid length. [ 287.051721][ T8341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.790'. [ 287.468843][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.797'. [ 287.486322][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 287.509177][ T8361] netlink: 'syz.0.797': attribute type 5 has an invalid length. [ 287.768110][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 288.144314][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 288.284540][ T8382] netlink: 'syz.4.804': attribute type 9 has an invalid length. [ 288.768529][ T8410] bridge0: port 3(vlan2) entered blocking state [ 288.790807][ T8410] bridge0: port 3(vlan2) entered disabled state [ 288.800131][ T8410] vlan2: entered allmulticast mode [ 288.806917][ T8410] vlan2: entered promiscuous mode [ 289.033913][ T8422] netdevsim netdevsim0 : renamed from netdevsim0 [ 290.402430][ T8483] validate_nla: 4 callbacks suppressed [ 290.402452][ T8483] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 291.337291][ T8519] __nla_validate_parse: 9 callbacks suppressed [ 291.337321][ T8519] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.845'. [ 291.353084][ T8519] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 291.363795][ T8519] netlink: 'syz.0.845': attribute type 11 has an invalid length. [ 291.920537][ T8547] dvmrp0: entered allmulticast mode [ 292.191726][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 292.316505][ T8567] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 292.346891][ T8570] netlink: 5 bytes leftover after parsing attributes in process `syz.0.856'. [ 292.357367][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 292.827622][ T8579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.858'. [ 294.334959][ T8597] ip6tnl1: entered promiscuous mode [ 294.662820][ T8597] ip6tnl1: entered allmulticast mode [ 294.832821][ T8617] netlink: 2 bytes leftover after parsing attributes in process `syz.1.869'. [ 294.858121][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 295.244117][ T8628] netlink: 'syz.2.872': attribute type 10 has an invalid length. [ 295.309412][ T8629] Dead loop on virtual device ipvlan1, fix it urgently! [ 295.321817][ T8629] syz.1.874 (8629) used greatest stack depth: 8024 bytes left [ 295.906486][ T8654] nlmon0: entered promiscuous mode [ 295.946820][ T8654] vlan0: entered promiscuous mode [ 295.985651][ T8654] nlmon0: left promiscuous mode [ 296.572049][ T8665] syzkaller0: entered promiscuous mode [ 296.577731][ T8665] syzkaller0: entered allmulticast mode [ 296.604173][ T12] syzkaller0: tun_net_xmit 48 [ 296.629371][ T8665] syzkaller0: tun_net_xmit 1280 [ 296.630300][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 296.637359][ T8665] syzkaller0: create flow: hash 1407746421 index 1 [ 296.662178][ T8649] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 296.827900][ T8662] syzkaller0: delete flow: hash 1407746421 index 1 [ 297.026508][ T8698] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.888'. [ 298.988801][ T4622] Bluetooth: hci7: command 0x0406 tx timeout [ 298.996545][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 299.000016][ T4622] Bluetooth: hci8: command 0x0405 tx timeout [ 299.003563][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 299.037167][ T4684] udevd[4684]: worker [6436] terminated by signal 33 (Unknown signal 33) [ 299.047853][ T4684] udevd[4684]: worker [6436] failed while handling '/devices/virtual/block/loop4' [ 299.215092][ T8736] syzkaller0: entered promiscuous mode [ 299.223086][ T8736] syzkaller0: entered allmulticast mode [ 299.231087][ T51] syzkaller0: tun_net_xmit 48 [ 299.259433][ T8736] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 299.276997][ T8736] syzkaller0: Linktype set failed because interface is up [ 299.780564][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 301.595819][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.614429][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.664379][ T8782] netlink: 116 bytes leftover after parsing attributes in process `syz.1.909'. [ 301.878771][ T8790] trusted_key: syz.1.912 sent an empty control message without MSG_MORE. [ 302.321686][ T8806] FAULT_INJECTION: forcing a failure. [ 302.321686][ T8806] name failslab, interval 1, probability 0, space 0, times 0 [ 302.341344][ T8806] CPU: 1 UID: 0 PID: 8806 Comm: syz.2.917 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 302.351749][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.361841][ T8806] Call Trace: [ 302.365136][ T8806] [ 302.368091][ T8806] dump_stack_lvl+0x241/0x360 [ 302.372814][ T8806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.378131][ T8806] ? __pfx__printk+0x10/0x10 [ 302.382762][ T8806] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 302.388770][ T8806] ? __pfx___might_resched+0x10/0x10 [ 302.394105][ T8806] should_fail_ex+0x3b0/0x4e0 [ 302.398838][ T8806] should_failslab+0xac/0x100 [ 302.403561][ T8806] ? __alloc_skb+0x1c3/0x440 [ 302.408199][ T8806] kmem_cache_alloc_node_noprof+0x71/0x320 [ 302.414053][ T8806] ? __mutex_unlock_slowpath+0x21d/0x750 [ 302.419730][ T8806] __alloc_skb+0x1c3/0x440 [ 302.424202][ T8806] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.430227][ T8806] ? __pfx___alloc_skb+0x10/0x10 [ 302.435215][ T8806] ? net_generic+0x1c0/0x240 [ 302.439823][ T8806] ? pfkey_broadcast+0x3e3/0x400 [ 302.444806][ T8806] pfkey_sendmsg+0xce4/0x1050 [ 302.449543][ T8806] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 302.454723][ T8806] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.459713][ T8806] ? __pfx_lock_release+0x10/0x10 [ 302.465065][ T8806] ? aa_sock_msg_perm+0x91/0x160 [ 302.470222][ T8806] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 302.475558][ T8806] __sock_sendmsg+0x221/0x270 [ 302.480374][ T8806] ____sys_sendmsg+0x52a/0x7e0 [ 302.485195][ T8806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.490619][ T8806] __sys_sendmsg+0x292/0x380 [ 302.495363][ T8806] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.500532][ T8806] ? __pfx_vfs_write+0x10/0x10 [ 302.505374][ T8806] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.511750][ T8806] ? do_syscall_64+0x100/0x230 [ 302.516554][ T8806] ? do_syscall_64+0xb6/0x230 [ 302.521278][ T8806] do_syscall_64+0xf3/0x230 [ 302.526086][ T8806] ? clear_bhb_loop+0x35/0x90 [ 302.531063][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.537010][ T8806] RIP: 0033:0x7fe38417dff9 [ 302.541473][ T8806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.562003][ T8806] RSP: 002b:00007fe384f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.570513][ T8806] RAX: ffffffffffffffda RBX: 00007fe384335f80 RCX: 00007fe38417dff9 [ 302.578522][ T8806] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 302.586737][ T8806] RBP: 00007fe384f77090 R08: 0000000000000000 R09: 0000000000000000 [ 302.595295][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.603296][ T8806] R13: 0000000000000000 R14: 00007fe384335f80 R15: 00007ffceeb830e8 [ 302.611368][ T8806] [ 302.846812][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 302.892574][ T8817] syzkaller0: entered promiscuous mode [ 302.937613][ T8817] syzkaller0: entered allmulticast mode [ 302.946006][ T35] syzkaller0: tun_net_xmit 48 [ 302.977080][ T8817] syzkaller0: create flow: hash 1407746421 index 1 [ 303.064186][ T8815] syzkaller0: delete flow: hash 1407746421 index 1 [ 304.909372][ T8857] netlink: 'syz.1.931': attribute type 21 has an invalid length. [ 304.996945][ T8861] netlink: 188 bytes leftover after parsing attributes in process `syz.0.932'. [ 305.408094][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 305.431545][ T8883] syzkaller0: entered promiscuous mode [ 305.437219][ T8883] syzkaller0: entered allmulticast mode [ 305.447744][ T12] syzkaller0: tun_net_xmit 48 [ 305.467239][ T8883] syzkaller0: tun_net_xmit 1280 [ 305.485431][ T8883] syzkaller0: create flow: hash 1407746421 index 1 [ 305.582667][ T8881] syzkaller0: delete flow: hash 1407746421 index 1 [ 305.836884][ T8894] netlink: 32 bytes leftover after parsing attributes in process `syz.2.942'. [ 307.852574][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 307.874330][ T8907] bridge4: entered promiscuous mode [ 307.886500][ T8907] bridge4: entered allmulticast mode [ 307.896892][ T8907] team0: Port device bridge4 added [ 308.069922][ T8936] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 308.107877][ T8936] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.952'. [ 308.128661][ T8936] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 308.146059][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 308.184136][ T8943] FAULT_INJECTION: forcing a failure. [ 308.184136][ T8943] name failslab, interval 1, probability 0, space 0, times 0 [ 308.221970][ T8943] CPU: 0 UID: 0 PID: 8943 Comm: syz.0.955 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 308.232288][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.242569][ T8943] Call Trace: [ 308.245898][ T8943] [ 308.248871][ T8943] dump_stack_lvl+0x241/0x360 [ 308.253610][ T8943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.258869][ T8943] ? __pfx__printk+0x10/0x10 [ 308.263599][ T8943] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 308.269190][ T8943] ? __pfx___might_resched+0x10/0x10 [ 308.274526][ T8943] should_fail_ex+0x3b0/0x4e0 [ 308.279265][ T8943] ? skb_clone+0x20c/0x390 [ 308.283719][ T8943] should_failslab+0xac/0x100 [ 308.288435][ T8943] ? skb_clone+0x20c/0x390 [ 308.292893][ T8943] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 308.298310][ T8943] ? __pfx_lock_release+0x10/0x10 [ 308.303395][ T8943] skb_clone+0x20c/0x390 [ 308.307677][ T8943] pfkey_broadcast_one+0x99/0x330 [ 308.312743][ T8943] ? pfkey_broadcast+0x45/0x400 [ 308.317625][ T8943] pfkey_broadcast+0x3ca/0x400 [ 308.322431][ T8943] ? pfkey_broadcast+0x45/0x400 [ 308.327321][ T8943] pfkey_sendmsg+0xe10/0x1050 [ 308.332037][ T8943] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 308.337175][ T8943] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.342041][ T8943] ? __pfx_lock_release+0x10/0x10 [ 308.347114][ T8943] ? aa_sock_msg_perm+0x91/0x160 [ 308.352093][ T8943] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 308.357211][ T8943] __sock_sendmsg+0x221/0x270 [ 308.361907][ T8943] ____sys_sendmsg+0x52a/0x7e0 [ 308.366684][ T8943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.371992][ T8943] __sys_sendmsg+0x292/0x380 [ 308.376617][ T8943] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.381753][ T8943] ? __pfx_vfs_write+0x10/0x10 [ 308.386557][ T8943] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.392925][ T8943] ? do_syscall_64+0x100/0x230 [ 308.397699][ T8943] ? do_syscall_64+0xb6/0x230 [ 308.402391][ T8943] do_syscall_64+0xf3/0x230 [ 308.406901][ T8943] ? clear_bhb_loop+0x35/0x90 [ 308.411588][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.417496][ T8943] RIP: 0033:0x7f51a837dff9 [ 308.421921][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.441546][ T8943] RSP: 002b:00007f51a917c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.449976][ T8943] RAX: ffffffffffffffda RBX: 00007f51a8535f80 RCX: 00007f51a837dff9 [ 308.457955][ T8943] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 308.465932][ T8943] RBP: 00007f51a917c090 R08: 0000000000000000 R09: 0000000000000000 [ 308.473930][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.481908][ T8943] R13: 0000000000000000 R14: 00007f51a8535f80 R15: 00007ffdeccf5ea8 [ 308.489985][ T8943] [ 308.809237][ T8960] IPVS: length: 240 != 8 [ 309.113976][ T8969] syzkaller0: entered promiscuous mode [ 309.120720][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 309.130950][ T8969] syzkaller0: entered allmulticast mode [ 309.159659][ T12] syzkaller0: tun_net_xmit 48 [ 309.269815][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 309.506351][ T8992] FAULT_INJECTION: forcing a failure. [ 309.506351][ T8992] name failslab, interval 1, probability 0, space 0, times 0 [ 309.534422][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.2.969 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 309.544744][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.555134][ T8992] Call Trace: [ 309.558453][ T8992] [ 309.561433][ T8992] dump_stack_lvl+0x241/0x360 [ 309.566608][ T8992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.571916][ T8992] ? __pfx__printk+0x10/0x10 [ 309.576571][ T8992] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 309.582261][ T8992] ? __pfx___might_resched+0x10/0x10 [ 309.587676][ T8992] should_fail_ex+0x3b0/0x4e0 [ 309.592390][ T8992] ? skb_clone+0x20c/0x390 [ 309.597519][ T8992] should_failslab+0xac/0x100 [ 309.602215][ T8992] ? skb_clone+0x20c/0x390 [ 309.606639][ T8992] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 309.612041][ T8992] ? __pfx_lock_release+0x10/0x10 [ 309.617096][ T8992] skb_clone+0x20c/0x390 [ 309.621356][ T8992] pfkey_broadcast_one+0x99/0x330 [ 309.626395][ T8992] ? pfkey_broadcast+0x45/0x400 [ 309.631258][ T8992] pfkey_broadcast+0x3ca/0x400 [ 309.636035][ T8992] ? pfkey_broadcast+0x45/0x400 [ 309.640905][ T8992] pfkey_sendmsg+0xe10/0x1050 [ 309.645608][ T8992] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 309.650746][ T8992] ? __pfx_aa_sk_perm+0x10/0x10 [ 309.655621][ T8992] ? __pfx_lock_release+0x10/0x10 [ 309.660676][ T8992] ? aa_sock_msg_perm+0x91/0x160 [ 309.665636][ T8992] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 309.670764][ T8992] __sock_sendmsg+0x221/0x270 [ 309.675459][ T8992] ____sys_sendmsg+0x52a/0x7e0 [ 309.680249][ T8992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.685556][ T8992] __sys_sendmsg+0x292/0x380 [ 309.690158][ T8992] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.695299][ T8992] ? __pfx_vfs_write+0x10/0x10 [ 309.700132][ T8992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.706479][ T8992] ? do_syscall_64+0x100/0x230 [ 309.711256][ T8992] ? do_syscall_64+0xb6/0x230 [ 309.715940][ T8992] do_syscall_64+0xf3/0x230 [ 309.720451][ T8992] ? clear_bhb_loop+0x35/0x90 [ 309.725139][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.731053][ T8992] RIP: 0033:0x7fe38417dff9 [ 309.735479][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.755103][ T8992] RSP: 002b:00007fe384f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.763550][ T8992] RAX: ffffffffffffffda RBX: 00007fe384335f80 RCX: 00007fe38417dff9 [ 309.771549][ T8992] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 309.779552][ T8992] RBP: 00007fe384f77090 R08: 0000000000000000 R09: 0000000000000000 [ 309.787534][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.795516][ T8992] R13: 0000000000000000 R14: 00007fe384335f80 R15: 00007ffceeb830e8 [ 309.804053][ T8992] [ 309.896153][ T8997] netlink: 'syz.4.970': attribute type 75 has an invalid length. [ 311.410168][ T8990] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 311.567234][ T9008] netlink: 72 bytes leftover after parsing attributes in process `syz.4.974'. [ 312.306739][ T9034] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 312.325379][ T9034] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.980'. [ 312.344377][ T9034] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 313.009971][ T9056] syzkaller0: entered promiscuous mode [ 313.033278][ T9056] syzkaller0: entered allmulticast mode [ 313.056513][ T2533] syzkaller0: tun_net_xmit 48 [ 313.105065][ T9056] syzkaller0: tun_net_xmit 1280 [ 313.112339][ T9056] syzkaller0: create flow: hash 1407746421 index 1 [ 313.363112][ T9055] syzkaller0: delete flow: hash 1407746421 index 1 [ 327.562495][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.612232][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.657702][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.959223][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.967022][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.979581][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.989054][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.997053][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.004831][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.012413][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.062684][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 328.070267][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.156812][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.168391][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.182135][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.261082][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.274991][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 328.293823][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.318330][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.333772][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.358720][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.368340][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.368708][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.382159][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.393659][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.401095][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.401107][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.402604][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.459769][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 328.467136][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.932327][ T2552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.114308][ T5235] Bluetooth: hci2: command tx timeout [ 330.130797][ T2552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.228393][ T2552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.267666][ T5235] Bluetooth: hci1: command tx timeout [ 330.319799][ T2552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.428367][ T5235] Bluetooth: hci3: command tx timeout [ 330.508070][ T5235] Bluetooth: hci6: command tx timeout [ 330.517736][ T5235] Bluetooth: hci4: command tx timeout [ 330.534681][ T9078] chnl_net:caif_netlink_parms(): no params data found [ 330.731271][ T2552] vlan2: left allmulticast mode [ 330.736182][ T2552] vlan2: left promiscuous mode [ 330.741309][ T2552] bridge0: port 3(vlan2) entered disabled state [ 330.751454][ T2552] bridge_slave_1: left allmulticast mode [ 330.757220][ T2552] bridge_slave_1: left promiscuous mode [ 330.763003][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.772538][ T2552] bridge_slave_0: left allmulticast mode [ 330.778636][ T2552] bridge_slave_0: left promiscuous mode [ 330.784765][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.080353][ T2552] team0: Port device bridge1 removed [ 331.316553][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.329555][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.341882][ T2552] bond0 (unregistering): Released all slaves [ 331.356023][ T2552] bond1 (unregistering): Released all slaves [ 331.472256][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.479907][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.487099][ T9078] bridge_slave_0: entered allmulticast mode [ 331.494327][ T9078] bridge_slave_0: entered promiscuous mode [ 331.503885][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.517584][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.524835][ T9078] bridge_slave_1: entered allmulticast mode [ 331.538341][ T9078] bridge_slave_1: entered promiscuous mode [ 331.613376][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.650307][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 331.679022][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.748243][ T9078] team0: Port device team_slave_0 added [ 331.816243][ T9078] team0: Port device team_slave_1 added [ 331.923733][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 332.083285][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.097619][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.126055][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.144291][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.151860][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.187600][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.198153][ T5235] Bluetooth: hci2: command tx timeout [ 332.262941][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.285033][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.303357][ T9075] bridge_slave_0: entered allmulticast mode [ 332.316059][ T9075] bridge_slave_0: entered promiscuous mode [ 332.336730][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.347595][ T5235] Bluetooth: hci1: command tx timeout [ 332.354098][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.368976][ T9075] bridge_slave_1: entered allmulticast mode [ 332.385977][ T9075] bridge_slave_1: entered promiscuous mode [ 332.423368][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 332.495877][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.504973][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.513325][ T9080] bridge_slave_0: entered allmulticast mode [ 332.518390][ T5235] Bluetooth: hci3: command tx timeout [ 332.521013][ T9080] bridge_slave_0: entered promiscuous mode [ 332.536104][ T2552] hsr_slave_0: left promiscuous mode [ 332.542138][ T2552] hsr_slave_1: left promiscuous mode [ 332.548494][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.556940][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.564447][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.576356][ T2552] veth1_vlan: left promiscuous mode [ 332.581885][ T2552] veth0_vlan: left promiscuous mode [ 332.587752][ T5235] Bluetooth: hci4: command tx timeout [ 332.588572][ T5240] Bluetooth: hci6: command tx timeout [ 333.003987][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 333.051053][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 333.532386][ T9078] hsr_slave_0: entered promiscuous mode [ 333.539007][ T9078] hsr_slave_1: entered promiscuous mode [ 333.545202][ T9078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.553017][ T9078] Cannot create hsr debugfs directory [ 333.574875][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.587158][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.595782][ T9080] bridge_slave_1: entered allmulticast mode [ 333.604582][ T9080] bridge_slave_1: entered promiscuous mode [ 333.630359][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.642682][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.767522][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.805645][ T9075] team0: Port device team_slave_0 added [ 333.890593][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.898933][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.906301][ T9069] bridge_slave_0: entered allmulticast mode [ 333.916876][ T9069] bridge_slave_0: entered promiscuous mode [ 333.930324][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.943581][ T9075] team0: Port device team_slave_1 added [ 334.006725][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.014931][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.024306][ T9069] bridge_slave_1: entered allmulticast mode [ 334.033911][ T9069] bridge_slave_1: entered promiscuous mode [ 334.162840][ T9080] team0: Port device team_slave_0 added [ 334.172475][ T9080] team0: Port device team_slave_1 added [ 334.179475][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.186458][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.215739][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.232434][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.249120][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.267596][ T5240] Bluetooth: hci2: command tx timeout [ 334.293356][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.399218][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.411485][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.424988][ T9082] chnl_net:caif_netlink_parms(): no params data found [ 334.431993][ T5240] Bluetooth: hci1: command tx timeout [ 334.442791][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.450662][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.477031][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.490201][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.497175][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.523261][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.590370][ T5240] Bluetooth: hci3: command tx timeout [ 334.593823][ T9069] team0: Port device team_slave_0 added [ 334.654614][ T9075] hsr_slave_0: entered promiscuous mode [ 334.662239][ T9075] hsr_slave_1: entered promiscuous mode [ 334.668200][ T5240] Bluetooth: hci6: command tx timeout [ 334.668242][ T5240] Bluetooth: hci4: command tx timeout [ 334.692476][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.700198][ T9075] Cannot create hsr debugfs directory [ 334.715333][ T9069] team0: Port device team_slave_1 added [ 334.742670][ T9080] hsr_slave_0: entered promiscuous mode [ 334.753000][ T9080] hsr_slave_1: entered promiscuous mode [ 334.759546][ T9080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.767132][ T9080] Cannot create hsr debugfs directory [ 334.828184][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.835196][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.864410][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.936404][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.943792][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.970791][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.014152][ T9078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.024933][ T9078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.207593][ T9078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.218041][ T9078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.276729][ T9069] hsr_slave_0: entered promiscuous mode [ 335.292503][ T9069] hsr_slave_1: entered promiscuous mode [ 335.309735][ T9069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.317367][ T9069] Cannot create hsr debugfs directory [ 335.356640][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.364130][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.372184][ T9082] bridge_slave_0: entered allmulticast mode [ 335.379881][ T9082] bridge_slave_0: entered promiscuous mode [ 335.419119][ T9078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.430015][ T9078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.539282][ T9078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.549993][ T9078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.566489][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.576206][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.584553][ T9082] bridge_slave_1: entered allmulticast mode [ 335.591769][ T9082] bridge_slave_1: entered promiscuous mode [ 335.718814][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.757608][ T2552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.793366][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.844703][ T2552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.878253][ T9082] team0: Port device team_slave_0 added [ 335.914018][ T9082] team0: Port device team_slave_1 added [ 335.935513][ T2552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.038087][ T2552] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.054063][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.061352][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.098039][ T9082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.120465][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.137521][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.174768][ T9082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.292583][ T9075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.326649][ T9078] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 336.348293][ T5235] Bluetooth: hci2: command tx timeout [ 336.361756][ T9078] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 336.401820][ T9078] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 336.444727][ T9075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.507553][ T5235] Bluetooth: hci1: command tx timeout [ 336.519695][ T9082] hsr_slave_0: entered promiscuous mode [ 336.538937][ T9082] hsr_slave_1: entered promiscuous mode [ 336.546304][ T9082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.554582][ T9082] Cannot create hsr debugfs directory [ 336.574399][ T9078] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 336.611032][ T9075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.671980][ T5235] Bluetooth: hci3: command tx timeout [ 336.734440][ T9075] bond0: (slave netdevsim0): Releasing backup interface [ 336.744884][ T9075] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 336.754453][ T5235] Bluetooth: hci4: command tx timeout [ 336.754462][ T5240] Bluetooth: hci6: command tx timeout [ 336.766140][ T9075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.784506][ T2552] bridge_slave_1: left allmulticast mode [ 336.790850][ T2552] bridge_slave_1: left promiscuous mode [ 336.796574][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.806262][ T2552] bridge_slave_0: left allmulticast mode [ 336.812283][ T2552] bridge_slave_0: left promiscuous mode [ 336.818434][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.832878][ T2552] ip6gretap0: left allmulticast mode [ 336.838456][ T2552] ip6gretap0: left promiscuous mode [ 336.843811][ T2552] bridge0: port 1(ip6gretap0) entered disabled state [ 336.871962][ T2552] bond_slave_0: left promiscuous mode [ 336.877952][ T2552] bond_slave_1: left promiscuous mode [ 337.174113][ T2552] erspan0 (unregistering): left promiscuous mode [ 337.194554][ T2552] gretap0 (unregistering): left allmulticast mode [ 337.543342][ T2552] team0: Port device bridge1 removed [ 337.732611][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.746280][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.758696][ T2552] bond0 (unregistering): Released all slaves [ 337.771230][ T2552] bond1 (unregistering): Released all slaves [ 337.969352][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.993895][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.025318][ T2552] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 338.052066][ T2552] bond0 (unregistering): Released all slaves [ 338.790182][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.935378][ T9078] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.995090][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.002261][ T2533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.027862][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.035048][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.221146][ T9078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.280814][ T9080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.304050][ T9080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.382054][ T9080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.405801][ T9080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.709958][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.743912][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.778398][ T2552] hsr_slave_0: left promiscuous mode [ 339.786221][ T2552] hsr_slave_1: left promiscuous mode [ 339.808461][ T2552] batman_adv: batadv0: Removing interface: team0 [ 339.817110][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.835810][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.844626][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.852435][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.861972][ T2552] batadv_slave_1: left promiscuous mode [ 339.875502][ T2552] hsr_slave_0: left promiscuous mode [ 339.883172][ T2552] hsr_slave_1: left promiscuous mode [ 339.890383][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.898534][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.905974][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.937016][ T2552] veth1_macvtap: left promiscuous mode [ 339.942896][ T2552] veth0_macvtap: left promiscuous mode [ 339.949161][ T2552] veth1_vlan: left promiscuous mode [ 339.954461][ T2552] veth0_vlan: left promiscuous mode [ 339.960900][ T2552] team0: left promiscuous mode [ 339.966154][ T2552] team_slave_0: left promiscuous mode [ 339.971991][ T2552] team_slave_1: left promiscuous mode [ 339.978626][ T2552] vlan0: left promiscuous mode [ 339.983712][ T2552] veth1_macvtap: left promiscuous mode [ 339.989320][ T2552] veth0_macvtap: left promiscuous mode [ 339.994962][ T2552] veth1_vlan: left promiscuous mode [ 340.000495][ T2552] veth0_vlan: left promiscuous mode [ 340.206538][ T2552] pim6reg (unregistering): left allmulticast mode [ 340.522409][ T2552] batadv_slave_0 (unregistering): left allmulticast mode [ 340.568251][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 340.622528][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 341.392030][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 341.433047][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 341.876964][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.909615][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.916800][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.974504][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.981801][ T9173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.113287][ T9080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.135517][ T9080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.238518][ T9069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.262811][ T9069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.282119][ T9069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.320634][ T9069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.558015][ T9078] veth0_vlan: entered promiscuous mode [ 342.622097][ T9082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.645511][ T9075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.657096][ T9075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.734141][ T9082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.769869][ T9075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.781245][ T9075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.791772][ T9078] veth1_vlan: entered promiscuous mode [ 342.835473][ T9082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.873609][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.962036][ T9082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.050386][ T9078] veth0_macvtap: entered promiscuous mode [ 343.154164][ T9078] veth1_macvtap: entered promiscuous mode [ 343.203519][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.273236][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.284332][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.299081][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.310224][ T9080] veth0_vlan: entered promiscuous mode [ 343.323051][ T9080] veth1_vlan: entered promiscuous mode [ 343.384278][ T9078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.401902][ T9078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.413187][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.437080][ T9082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.456172][ T9082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.471055][ T9078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.487161][ T9078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.496661][ T9078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.505737][ T9078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.529263][ T9082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.540723][ T9082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.582103][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.601612][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.668597][ T9080] veth0_macvtap: entered promiscuous mode [ 343.705910][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.740915][ T9080] veth1_macvtap: entered promiscuous mode [ 343.766942][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.774139][ T9173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.804471][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.837061][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.848970][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.871059][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.891539][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.913273][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.920466][ T9173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.958719][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.971873][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.982135][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.992687][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.004606][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.029830][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.037003][ T9173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.061903][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.069094][ T9173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.110511][ T9080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.121188][ T9080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.130681][ T9080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.139957][ T9080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.225188][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.242253][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.315572][ T9173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.346920][ T9173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.492806][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.572490][ T2533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.609696][ T2533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.664158][ T9082] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.726856][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.734050][ T2533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.799293][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.806532][ T2533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.885937][ T2533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.908901][ T2533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.006171][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.047189][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.232950][ T9075] veth0_vlan: entered promiscuous mode [ 345.316447][ T9075] veth1_vlan: entered promiscuous mode [ 345.395018][ T9069] veth0_vlan: entered promiscuous mode [ 345.450024][ T9069] veth1_vlan: entered promiscuous mode [ 345.535943][ T9075] veth0_macvtap: entered promiscuous mode [ 345.710380][ T9075] veth1_macvtap: entered promiscuous mode [ 345.788191][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.799119][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.809526][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.820603][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.830632][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.841407][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.853092][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.869385][ T9069] veth0_macvtap: entered promiscuous mode [ 345.892473][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.911506][ T9307] netlink: 'syz.4.1002': attribute type 21 has an invalid length. [ 345.919668][ T9307] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1002'. [ 345.931750][ T9069] veth1_macvtap: entered promiscuous mode [ 345.950392][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.964507][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.985390][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.005176][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.015776][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.026780][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.047197][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.114555][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.127185][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.153140][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.188782][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.207622][ T9323] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1004'. [ 346.217174][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.229756][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.240000][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.260231][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.278269][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.291082][ T9075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.301229][ T9075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.313003][ T9075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.322550][ T9075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.352402][ T9330] Bluetooth: MGMT ver 1.23 [ 346.368223][ T9328] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 346.383457][ T9329] netlink: 'syz.1.1003': attribute type 5 has an invalid length. [ 346.435948][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.460929][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.481126][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.499883][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.510512][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.521824][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.532866][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.543677][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.555612][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.564363][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 346.578725][ T9069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.597127][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 346.606556][ T9069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.616756][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1005'. [ 346.626681][ T9069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.646768][ T9069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.768343][ T9082] veth0_vlan: entered promiscuous mode [ 346.813514][ T9082] veth1_vlan: entered promiscuous mode [ 346.900936][ T2464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.919435][ T2464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.949214][ T2533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.977007][ T2533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.009477][ T9082] veth0_macvtap: entered promiscuous mode [ 347.061453][ T9082] veth1_macvtap: entered promiscuous mode [ 347.081183][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.110404][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.150798][ T2516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.163652][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.176662][ T2516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.185022][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.196251][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.218822][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.249320][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.263637][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.274195][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.296230][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.337037][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.362550][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.389952][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.429463][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.479832][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.506453][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.529186][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.557508][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.581011][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.596886][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.616186][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.641537][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.662428][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.689489][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.765397][ T9082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.783176][ T9082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.807542][ T9082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.816724][ T9082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.847319][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.886935][ T9371] vlan2: entered promiscuous mode [ 347.892304][ T9371] vlan2: entered allmulticast mode [ 348.034354][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 348.056108][ T9373] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1010'. [ 348.091767][ T9173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.118486][ T9173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.138345][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 348.147830][ T9379] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 348.195481][ T9381] ip6gre1: entered allmulticast mode [ 348.316671][ T2464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.355012][ T2464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.373587][ T9383] ip6_vti0: entered allmulticast mode [ 349.520292][ T9432] BUG: Bad page state in process syz.4.1027 pfn:4d492 [ 349.527648][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d492f00 pfn:0x4d492 [ 349.537897][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 349.545169][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 349.553872][ T9432] raw: ffff88804d492f00 0000000000000001 00000000ffffffff 0000000000000000 [ 349.562540][ T9432] page dumped because: page_pool leak [ 349.568099][ T9432] page_owner tracks the page as allocated [ 349.573864][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463196522, free_ts 348809408529 [ 349.591060][ T9432] post_alloc_hook+0x1f3/0x230 [ 349.595884][ T9432] get_page_from_freelist+0x3045/0x3190 [ 349.601535][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 349.606790][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 349.612390][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 349.618911][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 349.624165][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 349.629669][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 349.635107][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 349.640211][ T9432] __sys_bpf+0x48d/0x810 [ 349.644507][ T9432] __x64_sys_bpf+0x7c/0x90 [ 349.649027][ T9432] do_syscall_64+0xf3/0x230 [ 349.653582][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.659615][ T9432] page last free pid 9173 tgid 9173 stack trace: [ 349.665978][ T9432] free_unref_page+0xcfb/0xf20 [ 349.670850][ T9432] vfree+0x186/0x2e0 [ 349.674798][ T9432] prealloc_destroy+0x24c/0x310 [ 349.679758][ T9432] htab_map_free+0x7b9/0xa70 [ 349.684415][ T9432] bpf_map_free_deferred+0xe4/0x100 [ 349.689734][ T9432] process_scheduled_works+0xa63/0x1850 [ 349.695330][ T9432] worker_thread+0x870/0xd30 [ 349.700054][ T9432] kthread+0x2f0/0x390 [ 349.704172][ T9432] ret_from_fork+0x4b/0x80 [ 349.708712][ T9432] ret_from_fork_asm+0x1a/0x30 [ 349.713538][ T9432] Modules linked in: [ 349.717526][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 349.727883][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.737966][ T9432] Call Trace: [ 349.741251][ T9432] [ 349.744184][ T9432] dump_stack_lvl+0x241/0x360 [ 349.748887][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.754124][ T9432] ? __pfx_print_modules+0x10/0x10 [ 349.759256][ T9432] ? pcpu_memcg_post_alloc_hook+0x12a/0x720 [ 349.765172][ T9432] bad_page+0x166/0x1b0 [ 349.769351][ T9432] free_unref_page+0xed0/0xf20 [ 349.774162][ T9432] skb_release_data+0x6dc/0x8a0 [ 349.779040][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 349.784080][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 349.789840][ T9432] ? mark_lock+0x9a/0x360 [ 349.794190][ T9432] ? __lock_acquire+0x1384/0x2050 [ 349.799262][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 349.805364][ T9432] ? mark_lock+0x9a/0x360 [ 349.809708][ T9432] ? __lock_acquire+0x1384/0x2050 [ 349.814776][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 349.820793][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 349.827499][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 349.834068][ T9432] ? read_tsc+0x9/0x20 [ 349.838245][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 349.843467][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 349.849807][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 349.855982][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 349.862325][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 349.869040][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 349.874341][ T9432] ? __phys_addr+0xba/0x170 [ 349.878946][ T9432] ? build_skb_around+0x111/0x260 [ 349.883997][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 349.889943][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 349.895248][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 349.900740][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 349.906664][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 349.912234][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 349.918065][ T9432] ? synchronize_rcu+0x11b/0x360 [ 349.923015][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 349.928363][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 349.934634][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 349.940591][ T9432] ? _copy_from_user+0xa6/0xe0 [ 349.945371][ T9432] ? bpf_test_init+0x15a/0x180 [ 349.950149][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 349.955630][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 349.961030][ T9432] ? __pfx_lock_release+0x10/0x10 [ 349.966090][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 349.971915][ T9432] ? __fget_files+0x29/0x470 [ 349.976527][ T9432] ? fput+0x1a8/0x230 [ 349.980530][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 349.986360][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 349.991326][ T9432] __sys_bpf+0x48d/0x810 [ 349.995586][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 350.000362][ T9432] ? __sys_bind+0x108/0x2d0 [ 350.004898][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.010902][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.017253][ T9432] ? do_syscall_64+0x100/0x230 [ 350.022044][ T9432] __x64_sys_bpf+0x7c/0x90 [ 350.026470][ T9432] do_syscall_64+0xf3/0x230 [ 350.030987][ T9432] ? clear_bhb_loop+0x35/0x90 [ 350.035684][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.041595][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 350.046020][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.065659][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.074091][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 350.082078][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 350.090062][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 350.098048][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.106029][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 350.114051][ T9432] [ 350.117430][ T9432] Disabling lock debugging due to kernel taint [ 350.123636][ T9432] BUG: Bad page state in process syz.4.1027 pfn:5ec46 [ 350.130569][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ec46f00 pfn:0x5ec46 [ 350.140751][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 350.147940][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 350.156568][ T9432] raw: ffff88805ec46f00 0000000000000001 00000000ffffffff 0000000000000000 [ 350.165218][ T9432] page dumped because: page_pool leak [ 350.170652][ T9432] page_owner tracks the page as allocated [ 350.176482][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463184076, free_ts 348819250758 [ 350.193591][ T9432] post_alloc_hook+0x1f3/0x230 [ 350.198433][ T9432] get_page_from_freelist+0x3045/0x3190 [ 350.204021][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 350.209314][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 350.214806][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 350.220787][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 350.226051][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 350.231514][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 350.236986][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 350.242017][ T9432] __sys_bpf+0x48d/0x810 [ 350.246308][ T9432] __x64_sys_bpf+0x7c/0x90 [ 350.250847][ T9432] do_syscall_64+0xf3/0x230 [ 350.255384][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.261367][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 350.267748][ T9432] free_unref_page+0xcfb/0xf20 [ 350.272554][ T9432] __put_partials+0xeb/0x130 [ 350.277179][ T9432] put_cpu_partial+0x17c/0x250 [ 350.282003][ T9432] __slab_free+0x2ea/0x3d0 [ 350.286472][ T9432] qlist_free_all+0x9a/0x140 [ 350.291109][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 350.296592][ T9432] __kasan_slab_alloc+0x23/0x80 [ 350.301590][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 350.307088][ T9432] getname_flags+0xb7/0x540 [ 350.311694][ T9432] __x64_sys_unlink+0x3a/0x50 [ 350.316402][ T9432] do_syscall_64+0xf3/0x230 [ 350.321160][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.327100][ T9432] Modules linked in: [ 350.331067][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 350.342912][ T9432] Tainted: [B]=BAD_PAGE [ 350.347063][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.357131][ T9432] Call Trace: [ 350.360410][ T9432] [ 350.363350][ T9432] dump_stack_lvl+0x241/0x360 [ 350.368051][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.373272][ T9432] ? __pfx_print_modules+0x10/0x10 [ 350.378409][ T9432] bad_page+0x166/0x1b0 [ 350.382567][ T9432] free_unref_page+0xed0/0xf20 [ 350.387342][ T9432] skb_release_data+0x6dc/0x8a0 [ 350.392221][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 350.397274][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 350.403038][ T9432] ? mark_lock+0x9a/0x360 [ 350.407389][ T9432] ? __lock_acquire+0x1384/0x2050 [ 350.412465][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 350.418547][ T9432] ? mark_lock+0x9a/0x360 [ 350.422882][ T9432] ? __lock_acquire+0x1384/0x2050 [ 350.427923][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 350.433917][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 350.440520][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 350.447037][ T9432] ? read_tsc+0x9/0x20 [ 350.451131][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 350.456343][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 350.462678][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 350.468843][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 350.475185][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 350.481869][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 350.487074][ T9432] ? __phys_addr+0xba/0x170 [ 350.491598][ T9432] ? build_skb_around+0x111/0x260 [ 350.496641][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 350.502555][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 350.507852][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 350.513346][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 350.519257][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 350.524820][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 350.530646][ T9432] ? synchronize_rcu+0x11b/0x360 [ 350.535591][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 350.540899][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 350.547172][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 350.553092][ T9432] ? _copy_from_user+0xa6/0xe0 [ 350.557867][ T9432] ? bpf_test_init+0x15a/0x180 [ 350.562635][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 350.568123][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 350.573510][ T9432] ? __pfx_lock_release+0x10/0x10 [ 350.578548][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 350.584364][ T9432] ? __fget_files+0x29/0x470 [ 350.588964][ T9432] ? fput+0x1a8/0x230 [ 350.592955][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 350.598778][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 350.603727][ T9432] __sys_bpf+0x48d/0x810 [ 350.607977][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 350.612752][ T9432] ? __sys_bind+0x108/0x2d0 [ 350.617274][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.623274][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.629636][ T9432] ? do_syscall_64+0x100/0x230 [ 350.634436][ T9432] __x64_sys_bpf+0x7c/0x90 [ 350.638877][ T9432] do_syscall_64+0xf3/0x230 [ 350.643412][ T9432] ? clear_bhb_loop+0x35/0x90 [ 350.648110][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.654116][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 350.658543][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.678159][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.686581][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 350.694567][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 350.702550][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 350.710529][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.718509][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 350.726509][ T9432] [ 350.729654][ T9432] BUG: Bad page state in process syz.4.1027 pfn:2f7b7 [ 350.736522][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f7b7f00 pfn:0x2f7b7 [ 350.746657][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 350.753854][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 350.762527][ T9432] raw: ffff88802f7b7f00 0000000000000001 00000000ffffffff 0000000000000000 [ 350.771189][ T9432] page dumped because: page_pool leak [ 350.776577][ T9432] page_owner tracks the page as allocated [ 350.782348][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463171540, free_ts 348819270593 [ 350.799694][ T9432] post_alloc_hook+0x1f3/0x230 [ 350.804507][ T9432] get_page_from_freelist+0x3045/0x3190 [ 350.810134][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 350.815363][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 350.820887][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 350.826826][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 350.832099][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 350.837706][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 350.843129][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 350.848135][ T9432] __sys_bpf+0x48d/0x810 [ 350.852404][ T9432] __x64_sys_bpf+0x7c/0x90 [ 350.856843][ T9432] do_syscall_64+0xf3/0x230 [ 350.861403][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.867337][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 350.873715][ T9432] free_unref_page+0xcfb/0xf20 [ 350.878542][ T9432] __put_partials+0xeb/0x130 [ 350.883168][ T9432] put_cpu_partial+0x17c/0x250 [ 350.888345][ T9432] __slab_free+0x2ea/0x3d0 [ 350.892790][ T9432] qlist_free_all+0x9a/0x140 [ 350.897442][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 350.902927][ T9432] __kasan_slab_alloc+0x23/0x80 [ 350.907820][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 350.913301][ T9432] getname_flags+0xb7/0x540 [ 350.917912][ T9432] __x64_sys_unlink+0x3a/0x50 [ 350.922617][ T9432] do_syscall_64+0xf3/0x230 [ 350.927147][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.933087][ T9432] Modules linked in: [ 350.936988][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 350.948795][ T9432] Tainted: [B]=BAD_PAGE [ 350.952945][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.963001][ T9432] Call Trace: [ 350.966281][ T9432] [ 350.969215][ T9432] dump_stack_lvl+0x241/0x360 [ 350.973922][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.979148][ T9432] ? __pfx_print_modules+0x10/0x10 [ 350.984273][ T9432] bad_page+0x166/0x1b0 [ 350.988450][ T9432] free_unref_page+0xed0/0xf20 [ 350.993240][ T9432] skb_release_data+0x6dc/0x8a0 [ 350.998104][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 351.003134][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 351.008862][ T9432] ? mark_lock+0x9a/0x360 [ 351.013201][ T9432] ? __lock_acquire+0x1384/0x2050 [ 351.018253][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 351.024336][ T9432] ? mark_lock+0x9a/0x360 [ 351.028675][ T9432] ? __lock_acquire+0x1384/0x2050 [ 351.033838][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 351.039842][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 351.046442][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 351.052957][ T9432] ? read_tsc+0x9/0x20 [ 351.057038][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 351.062247][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 351.068754][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 351.074925][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 351.081262][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 351.088038][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 351.093250][ T9432] ? __phys_addr+0xba/0x170 [ 351.097779][ T9432] ? build_skb_around+0x111/0x260 [ 351.102823][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 351.108730][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 351.114027][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 351.119500][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 351.125498][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 351.131083][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 351.136921][ T9432] ? synchronize_rcu+0x11b/0x360 [ 351.141886][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 351.147284][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 351.153544][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 351.159463][ T9432] ? _copy_from_user+0xa6/0xe0 [ 351.164238][ T9432] ? bpf_test_init+0x15a/0x180 [ 351.169013][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 351.174485][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 351.179874][ T9432] ? __pfx_lock_release+0x10/0x10 [ 351.184916][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 351.190743][ T9432] ? __fget_files+0x29/0x470 [ 351.195695][ T9432] ? fput+0x1a8/0x230 [ 351.199685][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 351.205521][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 351.210473][ T9432] __sys_bpf+0x48d/0x810 [ 351.214733][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 351.219502][ T9432] ? __sys_bind+0x108/0x2d0 [ 351.224024][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.230023][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.236371][ T9432] ? do_syscall_64+0x100/0x230 [ 351.241142][ T9432] __x64_sys_bpf+0x7c/0x90 [ 351.245569][ T9432] do_syscall_64+0xf3/0x230 [ 351.250080][ T9432] ? clear_bhb_loop+0x35/0x90 [ 351.254765][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.260670][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 351.265086][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.284693][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.293117][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 351.301091][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 351.309062][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 351.317034][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.325006][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 351.332987][ T9432] [ 351.336116][ T9432] BUG: Bad page state in process syz.4.1027 pfn:5a899 [ 351.343040][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a899f00 pfn:0x5a899 [ 351.353182][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 351.360349][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 351.368999][ T9432] raw: ffff88805a899f00 0000000000000001 00000000ffffffff 0000000000000000 [ 351.377643][ T9432] page dumped because: page_pool leak [ 351.383038][ T9432] page_owner tracks the page as allocated [ 351.388828][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463158727, free_ts 348828812868 [ 351.405934][ T9432] post_alloc_hook+0x1f3/0x230 [ 351.410810][ T9432] get_page_from_freelist+0x3045/0x3190 [ 351.416396][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 351.421682][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 351.427176][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 351.433159][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 351.438431][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 351.443858][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 351.449291][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 351.454267][ T9432] __sys_bpf+0x48d/0x810 [ 351.458595][ T9432] __x64_sys_bpf+0x7c/0x90 [ 351.463036][ T9432] do_syscall_64+0xf3/0x230 [ 351.467596][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.473542][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 351.479906][ T9432] free_unref_page+0xcfb/0xf20 [ 351.484717][ T9432] __put_partials+0xeb/0x130 [ 351.489380][ T9432] put_cpu_partial+0x17c/0x250 [ 351.494175][ T9432] __slab_free+0x2ea/0x3d0 [ 351.498655][ T9432] qlist_free_all+0x9a/0x140 [ 351.503273][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 351.508807][ T9432] __kasan_slab_alloc+0x23/0x80 [ 351.513683][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 351.519199][ T9432] getname_flags+0xb7/0x540 [ 351.523735][ T9432] __x64_sys_unlink+0x3a/0x50 [ 351.528488][ T9432] do_syscall_64+0xf3/0x230 [ 351.533018][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.538978][ T9432] Modules linked in: [ 351.542907][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 351.554717][ T9432] Tainted: [B]=BAD_PAGE [ 351.558862][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 351.568920][ T9432] Call Trace: [ 351.572200][ T9432] [ 351.575128][ T9432] dump_stack_lvl+0x241/0x360 [ 351.579822][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.585032][ T9432] ? __pfx_print_modules+0x10/0x10 [ 351.590163][ T9432] bad_page+0x166/0x1b0 [ 351.594345][ T9432] free_unref_page+0xed0/0xf20 [ 351.599149][ T9432] skb_release_data+0x6dc/0x8a0 [ 351.604047][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 351.609083][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 351.614816][ T9432] ? mark_lock+0x9a/0x360 [ 351.619154][ T9432] ? __lock_acquire+0x1384/0x2050 [ 351.624296][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 351.630374][ T9432] ? mark_lock+0x9a/0x360 [ 351.635004][ T9432] ? __lock_acquire+0x1384/0x2050 [ 351.640259][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 351.646268][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 351.652879][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 351.659403][ T9432] ? read_tsc+0x9/0x20 [ 351.663483][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 351.668696][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 351.675034][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 351.681208][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 351.687546][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 351.694227][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 351.699455][ T9432] ? __phys_addr+0xba/0x170 [ 351.703967][ T9432] ? build_skb_around+0x111/0x260 [ 351.709028][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 351.714957][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 351.720253][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 351.725725][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 351.731630][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 351.737201][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 351.743024][ T9432] ? synchronize_rcu+0x11b/0x360 [ 351.747981][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 351.753294][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 351.759547][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 351.765459][ T9432] ? _copy_from_user+0xa6/0xe0 [ 351.770319][ T9432] ? bpf_test_init+0x15a/0x180 [ 351.775092][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 351.780590][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 351.786004][ T9432] ? __pfx_lock_release+0x10/0x10 [ 351.791085][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 351.796932][ T9432] ? __fget_files+0x29/0x470 [ 351.801539][ T9432] ? fput+0x1a8/0x230 [ 351.805630][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 351.811459][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 351.816413][ T9432] __sys_bpf+0x48d/0x810 [ 351.820664][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 351.825519][ T9432] ? __sys_bind+0x108/0x2d0 [ 351.830046][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.836040][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.842553][ T9432] ? do_syscall_64+0x100/0x230 [ 351.847322][ T9432] __x64_sys_bpf+0x7c/0x90 [ 351.851752][ T9432] do_syscall_64+0xf3/0x230 [ 351.856258][ T9432] ? clear_bhb_loop+0x35/0x90 [ 351.860936][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.866835][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 351.871362][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.891060][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.899507][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 351.907485][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 351.915458][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 351.923433][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.931404][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 351.939389][ T9432] [ 351.942512][ T9432] BUG: Bad page state in process syz.4.1027 pfn:7ce64 [ 351.949421][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ce64f00 pfn:0x7ce64 [ 351.959557][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 351.966710][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 351.975371][ T9432] raw: ffff88807ce64f00 0000000000000001 00000000ffffffff 0000000000000000 [ 351.984013][ T9432] page dumped because: page_pool leak [ 351.989411][ T9432] page_owner tracks the page as allocated [ 351.995115][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463145897, free_ts 348828842274 [ 352.012202][ T9432] post_alloc_hook+0x1f3/0x230 [ 352.017021][ T9432] get_page_from_freelist+0x3045/0x3190 [ 352.022632][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 352.027875][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 352.033341][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 352.039299][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 352.044541][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 352.049972][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 352.055374][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 352.060357][ T9432] __sys_bpf+0x48d/0x810 [ 352.064645][ T9432] __x64_sys_bpf+0x7c/0x90 [ 352.069105][ T9432] do_syscall_64+0xf3/0x230 [ 352.073647][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.079697][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 352.086123][ T9432] free_unref_page+0xcfb/0xf20 [ 352.090951][ T9432] __put_partials+0xeb/0x130 [ 352.095603][ T9432] put_cpu_partial+0x17c/0x250 [ 352.100418][ T9432] __slab_free+0x2ea/0x3d0 [ 352.104862][ T9432] qlist_free_all+0x9a/0x140 [ 352.109510][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 352.114999][ T9432] __kasan_slab_alloc+0x23/0x80 [ 352.119931][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 352.125421][ T9432] getname_flags+0xb7/0x540 [ 352.129969][ T9432] __x64_sys_unlink+0x3a/0x50 [ 352.134665][ T9432] do_syscall_64+0xf3/0x230 [ 352.139212][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.145140][ T9432] Modules linked in: [ 352.149093][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 352.160929][ T9432] Tainted: [B]=BAD_PAGE [ 352.165074][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.175128][ T9432] Call Trace: [ 352.178409][ T9432] [ 352.181338][ T9432] dump_stack_lvl+0x241/0x360 [ 352.186033][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.191267][ T9432] ? __pfx_print_modules+0x10/0x10 [ 352.196390][ T9432] bad_page+0x166/0x1b0 [ 352.200548][ T9432] free_unref_page+0xed0/0xf20 [ 352.205326][ T9432] skb_release_data+0x6dc/0x8a0 [ 352.210202][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 352.215251][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 352.220977][ T9432] ? mark_lock+0x9a/0x360 [ 352.225306][ T9432] ? __lock_acquire+0x1384/0x2050 [ 352.230431][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 352.236519][ T9432] ? mark_lock+0x9a/0x360 [ 352.240883][ T9432] ? __lock_acquire+0x1384/0x2050 [ 352.245928][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 352.251944][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 352.258568][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 352.265103][ T9432] ? read_tsc+0x9/0x20 [ 352.269207][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 352.274420][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 352.280758][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 352.286923][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 352.293257][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 352.299940][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 352.305149][ T9432] ? __phys_addr+0xba/0x170 [ 352.310012][ T9432] ? build_skb_around+0x111/0x260 [ 352.315065][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 352.320976][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 352.326276][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 352.331761][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 352.337686][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 352.343248][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 352.349239][ T9432] ? synchronize_rcu+0x11b/0x360 [ 352.354187][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 352.359494][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 352.365751][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 352.371669][ T9432] ? _copy_from_user+0xa6/0xe0 [ 352.376444][ T9432] ? bpf_test_init+0x15a/0x180 [ 352.381213][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 352.386682][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 352.392065][ T9432] ? __pfx_lock_release+0x10/0x10 [ 352.397109][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 352.402932][ T9432] ? __fget_files+0x29/0x470 [ 352.407533][ T9432] ? fput+0x1a8/0x230 [ 352.411520][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 352.417338][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 352.422290][ T9432] __sys_bpf+0x48d/0x810 [ 352.426537][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 352.431305][ T9432] ? __sys_bind+0x108/0x2d0 [ 352.435820][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.441816][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.448159][ T9432] ? do_syscall_64+0x100/0x230 [ 352.452927][ T9432] __x64_sys_bpf+0x7c/0x90 [ 352.457348][ T9432] do_syscall_64+0xf3/0x230 [ 352.461871][ T9432] ? clear_bhb_loop+0x35/0x90 [ 352.466553][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.472546][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 352.476967][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.496838][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.505439][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 352.513420][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 352.521486][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 352.529462][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.537434][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 352.545416][ T9432] [ 352.548523][ T9432] BUG: Bad page state in process syz.4.1027 pfn:5ec93 [ 352.555392][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ec93f00 pfn:0x5ec93 [ 352.565529][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 352.572723][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 352.581393][ T9432] raw: ffff88805ec93f00 0000000000000001 00000000ffffffff 0000000000000000 [ 352.590027][ T9432] page dumped because: page_pool leak [ 352.595416][ T9432] page_owner tracks the page as allocated [ 352.601226][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463132823, free_ts 348828852752 [ 352.618331][ T9432] post_alloc_hook+0x1f3/0x230 [ 352.623132][ T9432] get_page_from_freelist+0x3045/0x3190 [ 352.628829][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 352.634400][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 352.639909][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 352.645834][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 352.651089][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 352.656497][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 352.661963][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 352.666926][ T9432] __sys_bpf+0x48d/0x810 [ 352.671232][ T9432] __x64_sys_bpf+0x7c/0x90 [ 352.675671][ T9432] do_syscall_64+0xf3/0x230 [ 352.680217][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.686144][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 352.692600][ T9432] free_unref_page+0xcfb/0xf20 [ 352.697437][ T9432] __put_partials+0xeb/0x130 [ 352.702064][ T9432] put_cpu_partial+0x17c/0x250 [ 352.706845][ T9432] __slab_free+0x2ea/0x3d0 [ 352.711326][ T9432] qlist_free_all+0x9a/0x140 [ 352.715940][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 352.721465][ T9432] __kasan_slab_alloc+0x23/0x80 [ 352.726344][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 352.731861][ T9432] getname_flags+0xb7/0x540 [ 352.736404][ T9432] __x64_sys_unlink+0x3a/0x50 [ 352.741153][ T9432] do_syscall_64+0xf3/0x230 [ 352.745676][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.751622][ T9432] Modules linked in: [ 352.755562][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 352.767375][ T9432] Tainted: [B]=BAD_PAGE [ 352.771556][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.781624][ T9432] Call Trace: [ 352.784902][ T9432] [ 352.787834][ T9432] dump_stack_lvl+0x241/0x360 [ 352.792525][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.797731][ T9432] ? __pfx_print_modules+0x10/0x10 [ 352.802853][ T9432] bad_page+0x166/0x1b0 [ 352.807150][ T9432] free_unref_page+0xed0/0xf20 [ 352.811943][ T9432] skb_release_data+0x6dc/0x8a0 [ 352.816811][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 352.821841][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 352.827652][ T9432] ? mark_lock+0x9a/0x360 [ 352.831992][ T9432] ? __lock_acquire+0x1384/0x2050 [ 352.837034][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 352.843111][ T9432] ? mark_lock+0x9a/0x360 [ 352.847452][ T9432] ? __lock_acquire+0x1384/0x2050 [ 352.852521][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 352.858520][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 352.865137][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 352.871668][ T9432] ? read_tsc+0x9/0x20 [ 352.875755][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 352.880968][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 352.887302][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 352.893553][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 352.899891][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 352.906573][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 352.911779][ T9432] ? __phys_addr+0xba/0x170 [ 352.916288][ T9432] ? build_skb_around+0x111/0x260 [ 352.921329][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 352.927237][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 352.932540][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 352.938022][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 352.943926][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 352.949503][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 352.955324][ T9432] ? synchronize_rcu+0x11b/0x360 [ 352.960271][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 352.965573][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 352.971829][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 352.977840][ T9432] ? _copy_from_user+0xa6/0xe0 [ 352.982620][ T9432] ? bpf_test_init+0x15a/0x180 [ 352.987397][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 352.992869][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 352.998258][ T9432] ? __pfx_lock_release+0x10/0x10 [ 353.003298][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 353.009123][ T9432] ? __fget_files+0x29/0x470 [ 353.013725][ T9432] ? fput+0x1a8/0x230 [ 353.017728][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 353.023554][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 353.028504][ T9432] __sys_bpf+0x48d/0x810 [ 353.032754][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 353.037610][ T9432] ? __sys_bind+0x108/0x2d0 [ 353.042134][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.048131][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.054469][ T9432] ? do_syscall_64+0x100/0x230 [ 353.059239][ T9432] __x64_sys_bpf+0x7c/0x90 [ 353.063660][ T9432] do_syscall_64+0xf3/0x230 [ 353.068167][ T9432] ? clear_bhb_loop+0x35/0x90 [ 353.072847][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.078760][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 353.083182][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.102793][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.111306][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 353.119288][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 353.127287][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 353.135347][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.143319][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 353.151305][ T9432] [ 353.154416][ T9432] BUG: Bad page state in process syz.4.1027 pfn:4d867 [ 353.161338][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d867f00 pfn:0x4d867 [ 353.171469][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 353.178658][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 353.187276][ T9432] raw: ffff88804d867f00 0000000000000001 00000000ffffffff 0000000000000000 [ 353.195950][ T9432] page dumped because: page_pool leak [ 353.201354][ T9432] page_owner tracks the page as allocated [ 353.207069][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463120593, free_ts 348829004949 [ 353.224317][ T9432] post_alloc_hook+0x1f3/0x230 [ 353.229160][ T9432] get_page_from_freelist+0x3045/0x3190 [ 353.234740][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 353.240016][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 353.245587][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 353.251716][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 353.257088][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 353.262540][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 353.267987][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 353.272965][ T9432] __sys_bpf+0x48d/0x810 [ 353.277223][ T9432] __x64_sys_bpf+0x7c/0x90 [ 353.281690][ T9432] do_syscall_64+0xf3/0x230 [ 353.286219][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.292166][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 353.298555][ T9432] free_unref_page+0xcfb/0xf20 [ 353.303360][ T9432] __put_partials+0xeb/0x130 [ 353.308016][ T9432] put_cpu_partial+0x17c/0x250 [ 353.312814][ T9432] __slab_free+0x2ea/0x3d0 [ 353.317401][ T9432] qlist_free_all+0x9a/0x140 [ 353.322021][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 353.327565][ T9432] __kasan_slab_alloc+0x23/0x80 [ 353.332448][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 353.338002][ T9432] getname_flags+0xb7/0x540 [ 353.342555][ T9432] __x64_sys_unlink+0x3a/0x50 [ 353.347274][ T9432] do_syscall_64+0xf3/0x230 [ 353.351854][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.357807][ T9432] Modules linked in: [ 353.361701][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 353.373525][ T9432] Tainted: [B]=BAD_PAGE [ 353.377708][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.387789][ T9432] Call Trace: [ 353.391251][ T9432] [ 353.394199][ T9432] dump_stack_lvl+0x241/0x360 [ 353.398891][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.404113][ T9432] ? __pfx_print_modules+0x10/0x10 [ 353.409238][ T9432] bad_page+0x166/0x1b0 [ 353.413398][ T9432] free_unref_page+0xed0/0xf20 [ 353.418190][ T9432] skb_release_data+0x6dc/0x8a0 [ 353.423085][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 353.428200][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 353.433925][ T9432] ? mark_lock+0x9a/0x360 [ 353.438256][ T9432] ? __lock_acquire+0x1384/0x2050 [ 353.443291][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 353.449553][ T9432] ? mark_lock+0x9a/0x360 [ 353.453905][ T9432] ? __lock_acquire+0x1384/0x2050 [ 353.458940][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 353.464921][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 353.471520][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 353.478039][ T9432] ? read_tsc+0x9/0x20 [ 353.482124][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 353.487361][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 353.493712][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 353.499899][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 353.506236][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 353.512918][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 353.518122][ T9432] ? __phys_addr+0xba/0x170 [ 353.522626][ T9432] ? build_skb_around+0x111/0x260 [ 353.527667][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 353.533569][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 353.538861][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 353.544335][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 353.550261][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 353.555823][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 353.561638][ T9432] ? synchronize_rcu+0x11b/0x360 [ 353.566579][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 353.571881][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 353.578153][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 353.584118][ T9432] ? _copy_from_user+0xa6/0xe0 [ 353.588907][ T9432] ? bpf_test_init+0x15a/0x180 [ 353.593687][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 353.599179][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 353.604596][ T9432] ? __pfx_lock_release+0x10/0x10 [ 353.609636][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 353.615476][ T9432] ? __fget_files+0x29/0x470 [ 353.620106][ T9432] ? fput+0x1a8/0x230 [ 353.624126][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 353.629980][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 353.634934][ T9432] __sys_bpf+0x48d/0x810 [ 353.639209][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 353.643994][ T9432] ? __sys_bind+0x108/0x2d0 [ 353.648539][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.654642][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.661000][ T9432] ? do_syscall_64+0x100/0x230 [ 353.665784][ T9432] __x64_sys_bpf+0x7c/0x90 [ 353.670220][ T9432] do_syscall_64+0xf3/0x230 [ 353.674735][ T9432] ? clear_bhb_loop+0x35/0x90 [ 353.679423][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.685424][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 353.689848][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.709463][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.717914][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 353.725919][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 353.734022][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 353.742012][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.749989][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 353.757984][ T9432] [ 353.761115][ T9432] BUG: Bad page state in process syz.4.1027 pfn:64942 [ 353.768469][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888064942000 pfn:0x64942 [ 353.778735][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 353.785879][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 353.794553][ T9432] raw: ffff888064942000 0000000000000001 00000000ffffffff 0000000000000000 [ 353.803212][ T9432] page dumped because: page_pool leak [ 353.808621][ T9432] page_owner tracks the page as allocated [ 353.814351][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463108042, free_ts 348829240224 [ 353.831437][ T9432] post_alloc_hook+0x1f3/0x230 [ 353.836230][ T9432] get_page_from_freelist+0x3045/0x3190 [ 353.841845][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 353.847066][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 353.852660][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 353.858627][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 353.863855][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 353.869293][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 353.874698][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 353.879692][ T9432] __sys_bpf+0x48d/0x810 [ 353.883971][ T9432] __x64_sys_bpf+0x7c/0x90 [ 353.888459][ T9432] do_syscall_64+0xf3/0x230 [ 353.892985][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.898933][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 353.905278][ T9432] free_unref_page+0xcfb/0xf20 [ 353.910108][ T9432] __slab_free+0x31b/0x3d0 [ 353.914650][ T9432] qlist_free_all+0x9a/0x140 [ 353.919294][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 353.924772][ T9432] __kasan_slab_alloc+0x23/0x80 [ 353.929665][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 353.935233][ T9432] getname_flags+0xb7/0x540 [ 353.939879][ T9432] __x64_sys_unlink+0x3a/0x50 [ 353.944580][ T9432] do_syscall_64+0xf3/0x230 [ 353.949144][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.955187][ T9432] Modules linked in: [ 353.959135][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 353.970964][ T9432] Tainted: [B]=BAD_PAGE [ 353.975122][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.985204][ T9432] Call Trace: [ 353.988920][ T9432] [ 353.991860][ T9432] dump_stack_lvl+0x241/0x360 [ 353.996599][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.001818][ T9432] ? __pfx_print_modules+0x10/0x10 [ 354.006948][ T9432] bad_page+0x166/0x1b0 [ 354.011112][ T9432] free_unref_page+0xed0/0xf20 [ 354.015994][ T9432] skb_release_data+0x6dc/0x8a0 [ 354.020875][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 354.026045][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 354.032034][ T9432] ? mark_lock+0x9a/0x360 [ 354.036365][ T9432] ? __lock_acquire+0x1384/0x2050 [ 354.041418][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 354.047599][ T9432] ? mark_lock+0x9a/0x360 [ 354.051924][ T9432] ? __lock_acquire+0x1384/0x2050 [ 354.057323][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 354.063406][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 354.070277][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 354.077331][ T9432] ? read_tsc+0x9/0x20 [ 354.081425][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 354.086639][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 354.092977][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 354.099158][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 354.105499][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 354.112180][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 354.117390][ T9432] ? __phys_addr+0xba/0x170 [ 354.121905][ T9432] ? build_skb_around+0x111/0x260 [ 354.126947][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 354.132854][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 354.138152][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 354.143624][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 354.149544][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 354.155105][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 354.160923][ T9432] ? synchronize_rcu+0x11b/0x360 [ 354.165868][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 354.171170][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 354.177429][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 354.183341][ T9432] ? _copy_from_user+0xa6/0xe0 [ 354.188113][ T9432] ? bpf_test_init+0x15a/0x180 [ 354.192894][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 354.198371][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 354.203762][ T9432] ? __pfx_lock_release+0x10/0x10 [ 354.208807][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 354.214625][ T9432] ? __fget_files+0x29/0x470 [ 354.219227][ T9432] ? fput+0x1a8/0x230 [ 354.223216][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 354.229037][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 354.233987][ T9432] __sys_bpf+0x48d/0x810 [ 354.238239][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 354.243015][ T9432] ? __sys_bind+0x108/0x2d0 [ 354.247544][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.253537][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.259886][ T9432] ? do_syscall_64+0x100/0x230 [ 354.264676][ T9432] __x64_sys_bpf+0x7c/0x90 [ 354.269203][ T9432] do_syscall_64+0xf3/0x230 [ 354.273713][ T9432] ? clear_bhb_loop+0x35/0x90 [ 354.278399][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.284305][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 354.288723][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.308342][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.317290][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 354.325268][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 354.333244][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 354.341234][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.349216][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 354.357199][ T9432] [ 354.360329][ T9432] BUG: Bad page state in process syz.4.1027 pfn:302cc [ 354.367202][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880302cc000 pfn:0x302cc [ 354.377358][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 354.384561][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 354.393209][ T9432] raw: ffff8880302cc000 0000000000000001 00000000ffffffff 0000000000000000 [ 354.401851][ T9432] page dumped because: page_pool leak [ 354.407231][ T9432] page_owner tracks the page as allocated [ 354.412989][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463095494, free_ts 348829347596 [ 354.430060][ T9432] post_alloc_hook+0x1f3/0x230 [ 354.434836][ T9432] get_page_from_freelist+0x3045/0x3190 [ 354.440422][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 354.445647][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 354.451141][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 354.457065][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 354.462339][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 354.467766][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 354.473143][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 354.478130][ T9432] __sys_bpf+0x48d/0x810 [ 354.482410][ T9432] __x64_sys_bpf+0x7c/0x90 [ 354.486829][ T9432] do_syscall_64+0xf3/0x230 [ 354.491371][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.497293][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 354.503669][ T9432] free_unref_page+0xcfb/0xf20 [ 354.508507][ T9432] __put_partials+0xeb/0x130 [ 354.513228][ T9432] put_cpu_partial+0x17c/0x250 [ 354.518070][ T9432] __slab_free+0x2ea/0x3d0 [ 354.522518][ T9432] qlist_free_all+0x9a/0x140 [ 354.527141][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 354.532642][ T9432] __kasan_slab_alloc+0x23/0x80 [ 354.537562][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 354.543053][ T9432] getname_flags+0xb7/0x540 [ 354.547610][ T9432] __x64_sys_unlink+0x3a/0x50 [ 354.552331][ T9432] do_syscall_64+0xf3/0x230 [ 354.556833][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.562795][ T9432] Modules linked in: [ 354.566718][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 354.578547][ T9432] Tainted: [B]=BAD_PAGE [ 354.582701][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.592752][ T9432] Call Trace: [ 354.596026][ T9432] [ 354.598977][ T9432] dump_stack_lvl+0x241/0x360 [ 354.603760][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.608971][ T9432] ? __pfx_print_modules+0x10/0x10 [ 354.614092][ T9432] bad_page+0x166/0x1b0 [ 354.618264][ T9432] free_unref_page+0xed0/0xf20 [ 354.623064][ T9432] skb_release_data+0x6dc/0x8a0 [ 354.627920][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 354.632955][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 354.638681][ T9432] ? mark_lock+0x9a/0x360 [ 354.643116][ T9432] ? __lock_acquire+0x1384/0x2050 [ 354.648150][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 354.654232][ T9432] ? mark_lock+0x9a/0x360 [ 354.658560][ T9432] ? __lock_acquire+0x1384/0x2050 [ 354.663594][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 354.669593][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 354.676210][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 354.682723][ T9432] ? read_tsc+0x9/0x20 [ 354.686888][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 354.692098][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 354.698436][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 354.704691][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 354.711031][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 354.717807][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 354.723025][ T9432] ? __phys_addr+0xba/0x170 [ 354.727535][ T9432] ? build_skb_around+0x111/0x260 [ 354.732572][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 354.738476][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 354.743771][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 354.749240][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 354.755144][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 354.760703][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 354.766520][ T9432] ? synchronize_rcu+0x11b/0x360 [ 354.771470][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 354.776860][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 354.783214][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 354.789244][ T9432] ? _copy_from_user+0xa6/0xe0 [ 354.794311][ T9432] ? bpf_test_init+0x15a/0x180 [ 354.799106][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 354.804683][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 354.810167][ T9432] ? __pfx_lock_release+0x10/0x10 [ 354.815215][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 354.821048][ T9432] ? __fget_files+0x29/0x470 [ 354.825654][ T9432] ? fput+0x1a8/0x230 [ 354.829648][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 354.835506][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 354.840544][ T9432] __sys_bpf+0x48d/0x810 [ 354.844797][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 354.849569][ T9432] ? __sys_bind+0x108/0x2d0 [ 354.854089][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.860084][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.866423][ T9432] ? do_syscall_64+0x100/0x230 [ 354.871194][ T9432] __x64_sys_bpf+0x7c/0x90 [ 354.875618][ T9432] do_syscall_64+0xf3/0x230 [ 354.880142][ T9432] ? clear_bhb_loop+0x35/0x90 [ 354.884823][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.890727][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 354.895433][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.915064][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.923490][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 354.931468][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 354.939441][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 354.947413][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.955397][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 354.963382][ T9432] [ 354.966532][ T9432] BUG: Bad page state in process syz.4.1027 pfn:2fbdf [ 354.973542][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fbdff00 pfn:0x2fbdf [ 354.983686][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 354.991206][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 354.999929][ T9432] raw: ffff88802fbdff00 0000000000000001 00000000ffffffff 0000000000000000 [ 355.008561][ T9432] page dumped because: page_pool leak [ 355.013930][ T9432] page_owner tracks the page as allocated [ 355.019795][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463082913, free_ts 348829359244 [ 355.036870][ T9432] post_alloc_hook+0x1f3/0x230 [ 355.041693][ T9432] get_page_from_freelist+0x3045/0x3190 [ 355.047261][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 355.052503][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 355.058024][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 355.063946][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 355.069202][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 355.074609][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 355.080040][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 355.085000][ T9432] __sys_bpf+0x48d/0x810 [ 355.089306][ T9432] __x64_sys_bpf+0x7c/0x90 [ 355.093740][ T9432] do_syscall_64+0xf3/0x230 [ 355.098285][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.104210][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 355.110572][ T9432] free_unref_page+0xcfb/0xf20 [ 355.115376][ T9432] __put_partials+0xeb/0x130 [ 355.120036][ T9432] put_cpu_partial+0x17c/0x250 [ 355.124821][ T9432] __slab_free+0x2ea/0x3d0 [ 355.129331][ T9432] qlist_free_all+0x9a/0x140 [ 355.133934][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 355.139600][ T9432] __kasan_slab_alloc+0x23/0x80 [ 355.144473][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 355.150000][ T9432] getname_flags+0xb7/0x540 [ 355.154523][ T9432] __x64_sys_unlink+0x3a/0x50 [ 355.159262][ T9432] do_syscall_64+0xf3/0x230 [ 355.163793][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.169761][ T9432] Modules linked in: [ 355.173679][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 355.185482][ T9432] Tainted: [B]=BAD_PAGE [ 355.189629][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.199679][ T9432] Call Trace: [ 355.202950][ T9432] [ 355.205874][ T9432] dump_stack_lvl+0x241/0x360 [ 355.210559][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.215761][ T9432] ? __pfx_print_modules+0x10/0x10 [ 355.220907][ T9432] bad_page+0x166/0x1b0 [ 355.225173][ T9432] free_unref_page+0xed0/0xf20 [ 355.230052][ T9432] skb_release_data+0x6dc/0x8a0 [ 355.234929][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 355.239973][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 355.245696][ T9432] ? mark_lock+0x9a/0x360 [ 355.250034][ T9432] ? __lock_acquire+0x1384/0x2050 [ 355.255255][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 355.261339][ T9432] ? mark_lock+0x9a/0x360 [ 355.265664][ T9432] ? __lock_acquire+0x1384/0x2050 [ 355.270700][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 355.276699][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 355.283309][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 355.289921][ T9432] ? read_tsc+0x9/0x20 [ 355.294014][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 355.299233][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.305589][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 355.311789][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.318165][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 355.324862][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 355.330080][ T9432] ? __phys_addr+0xba/0x170 [ 355.334597][ T9432] ? build_skb_around+0x111/0x260 [ 355.339660][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 355.345567][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 355.350872][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 355.356345][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 355.362250][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 355.367814][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 355.373647][ T9432] ? synchronize_rcu+0x11b/0x360 [ 355.378595][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 355.383995][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 355.390252][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 355.396163][ T9432] ? _copy_from_user+0xa6/0xe0 [ 355.400935][ T9432] ? bpf_test_init+0x15a/0x180 [ 355.405708][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 355.411179][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 355.416565][ T9432] ? __pfx_lock_release+0x10/0x10 [ 355.421613][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 355.427438][ T9432] ? __fget_files+0x29/0x470 [ 355.432052][ T9432] ? fput+0x1a8/0x230 [ 355.436047][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 355.441888][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 355.446836][ T9432] __sys_bpf+0x48d/0x810 [ 355.451110][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 355.455883][ T9432] ? __sys_bind+0x108/0x2d0 [ 355.460404][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.466416][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.472757][ T9432] ? do_syscall_64+0x100/0x230 [ 355.477528][ T9432] __x64_sys_bpf+0x7c/0x90 [ 355.481953][ T9432] do_syscall_64+0xf3/0x230 [ 355.486455][ T9432] ? clear_bhb_loop+0x35/0x90 [ 355.491137][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.497062][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 355.501482][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.521093][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.529523][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 355.537509][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 355.545494][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 355.553471][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.561444][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 355.569428][ T9432] [ 355.572564][ T9432] BUG: Bad page state in process syz.4.1027 pfn:5a876 [ 355.579481][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a876f00 pfn:0x5a876 [ 355.589609][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 355.596795][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 355.605427][ T9432] raw: ffff88805a876f00 0000000000000001 00000000ffffffff 0000000000000000 [ 355.614041][ T9432] page dumped because: page_pool leak [ 355.619459][ T9432] page_owner tracks the page as allocated [ 355.625193][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463070552, free_ts 348829399506 [ 355.642315][ T9432] post_alloc_hook+0x1f3/0x230 [ 355.647130][ T9432] get_page_from_freelist+0x3045/0x3190 [ 355.652741][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 355.657987][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 355.663486][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 355.669463][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 355.674700][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 355.680138][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 355.685544][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 355.690541][ T9432] __sys_bpf+0x48d/0x810 [ 355.694819][ T9432] __x64_sys_bpf+0x7c/0x90 [ 355.699288][ T9432] do_syscall_64+0xf3/0x230 [ 355.703827][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.709795][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 355.716141][ T9432] free_unref_page+0xcfb/0xf20 [ 355.720991][ T9432] __put_partials+0xeb/0x130 [ 355.725605][ T9432] put_cpu_partial+0x17c/0x250 [ 355.730408][ T9432] __slab_free+0x2ea/0x3d0 [ 355.734847][ T9432] qlist_free_all+0x9a/0x140 [ 355.739496][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 355.745085][ T9432] __kasan_slab_alloc+0x23/0x80 [ 355.750006][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 355.755489][ T9432] getname_flags+0xb7/0x540 [ 355.760038][ T9432] __x64_sys_unlink+0x3a/0x50 [ 355.764734][ T9432] do_syscall_64+0xf3/0x230 [ 355.769293][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.775217][ T9432] Modules linked in: [ 355.779157][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 355.790983][ T9432] Tainted: [B]=BAD_PAGE [ 355.795125][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.805296][ T9432] Call Trace: [ 355.808580][ T9432] [ 355.811520][ T9432] dump_stack_lvl+0x241/0x360 [ 355.816259][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.821467][ T9432] ? __pfx_print_modules+0x10/0x10 [ 355.826604][ T9432] bad_page+0x166/0x1b0 [ 355.830782][ T9432] free_unref_page+0xed0/0xf20 [ 355.835581][ T9432] skb_release_data+0x6dc/0x8a0 [ 355.840466][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 355.845525][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 355.851277][ T9432] ? mark_lock+0x9a/0x360 [ 355.855613][ T9432] ? __lock_acquire+0x1384/0x2050 [ 355.860662][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 355.866745][ T9432] ? mark_lock+0x9a/0x360 [ 355.871079][ T9432] ? __lock_acquire+0x1384/0x2050 [ 355.876123][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 355.882114][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 355.888713][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 355.895226][ T9432] ? read_tsc+0x9/0x20 [ 355.899304][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 355.904516][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.910858][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 355.917021][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.923360][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 355.930042][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 355.935245][ T9432] ? __phys_addr+0xba/0x170 [ 355.939755][ T9432] ? build_skb_around+0x111/0x260 [ 355.944800][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 355.950712][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 355.956113][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 355.961635][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 355.967563][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 355.973137][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 355.978984][ T9432] ? synchronize_rcu+0x11b/0x360 [ 355.983945][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 355.989254][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 355.995518][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 356.001433][ T9432] ? _copy_from_user+0xa6/0xe0 [ 356.006314][ T9432] ? bpf_test_init+0x15a/0x180 [ 356.011123][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 356.016616][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.022025][ T9432] ? __pfx_lock_release+0x10/0x10 [ 356.027071][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.032895][ T9432] ? __fget_files+0x29/0x470 [ 356.037517][ T9432] ? fput+0x1a8/0x230 [ 356.041530][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.047357][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 356.052321][ T9432] __sys_bpf+0x48d/0x810 [ 356.056578][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 356.061351][ T9432] ? __sys_bind+0x108/0x2d0 [ 356.065871][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.071951][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.078291][ T9432] ? do_syscall_64+0x100/0x230 [ 356.083062][ T9432] __x64_sys_bpf+0x7c/0x90 [ 356.087489][ T9432] do_syscall_64+0xf3/0x230 [ 356.092010][ T9432] ? clear_bhb_loop+0x35/0x90 [ 356.096689][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.102593][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 356.107032][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.126643][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.135066][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 356.143047][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 356.151047][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 356.159024][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.166998][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 356.174982][ T9432] [ 356.178113][ T9432] BUG: Bad page state in process syz.4.1027 pfn:7d349 [ 356.184986][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d349f00 pfn:0x7d349 [ 356.195128][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 356.202306][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 356.211169][ T9432] raw: ffff88807d349f00 0000000000000001 00000000ffffffff 0000000000000000 [ 356.219790][ T9432] page dumped because: page_pool leak [ 356.225168][ T9432] page_owner tracks the page as allocated [ 356.230925][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463057964, free_ts 348829409814 [ 356.248025][ T9432] post_alloc_hook+0x1f3/0x230 [ 356.252813][ T9432] get_page_from_freelist+0x3045/0x3190 [ 356.258420][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 356.263654][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 356.269192][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 356.275127][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 356.280388][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 356.285795][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.291242][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 356.296209][ T9432] __sys_bpf+0x48d/0x810 [ 356.300523][ T9432] __x64_sys_bpf+0x7c/0x90 [ 356.304958][ T9432] do_syscall_64+0xf3/0x230 [ 356.309529][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.315609][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 356.321994][ T9432] free_unref_page+0xcfb/0xf20 [ 356.326797][ T9432] __put_partials+0xeb/0x130 [ 356.331442][ T9432] put_cpu_partial+0x17c/0x250 [ 356.336263][ T9432] __slab_free+0x2ea/0x3d0 [ 356.340753][ T9432] qlist_free_all+0x9a/0x140 [ 356.345404][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 356.350922][ T9432] __kasan_slab_alloc+0x23/0x80 [ 356.355807][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 356.361339][ T9432] getname_flags+0xb7/0x540 [ 356.365866][ T9432] __x64_sys_unlink+0x3a/0x50 [ 356.370584][ T9432] do_syscall_64+0xf3/0x230 [ 356.375107][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.381150][ T9432] Modules linked in: [ 356.385069][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 356.396873][ T9432] Tainted: [B]=BAD_PAGE [ 356.401047][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.411106][ T9432] Call Trace: [ 356.414384][ T9432] [ 356.417312][ T9432] dump_stack_lvl+0x241/0x360 [ 356.422002][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.427237][ T9432] ? __pfx_print_modules+0x10/0x10 [ 356.432363][ T9432] bad_page+0x166/0x1b0 [ 356.436526][ T9432] free_unref_page+0xed0/0xf20 [ 356.441321][ T9432] skb_release_data+0x6dc/0x8a0 [ 356.446192][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 356.451239][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 356.456976][ T9432] ? mark_lock+0x9a/0x360 [ 356.461321][ T9432] ? __lock_acquire+0x1384/0x2050 [ 356.466408][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 356.472670][ T9432] ? mark_lock+0x9a/0x360 [ 356.477007][ T9432] ? __lock_acquire+0x1384/0x2050 [ 356.482227][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 356.488310][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 356.494910][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 356.501419][ T9432] ? read_tsc+0x9/0x20 [ 356.505502][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 356.510725][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 356.517456][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 356.523622][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 356.529967][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 356.536651][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 356.541853][ T9432] ? __phys_addr+0xba/0x170 [ 356.546364][ T9432] ? build_skb_around+0x111/0x260 [ 356.551404][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 356.557349][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 356.562660][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 356.568138][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 356.574045][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 356.579606][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 356.585422][ T9432] ? synchronize_rcu+0x11b/0x360 [ 356.590378][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 356.595682][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 356.601940][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 356.607957][ T9432] ? _copy_from_user+0xa6/0xe0 [ 356.612744][ T9432] ? bpf_test_init+0x15a/0x180 [ 356.617526][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 356.623016][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.628436][ T9432] ? __pfx_lock_release+0x10/0x10 [ 356.633493][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.639336][ T9432] ? __fget_files+0x29/0x470 [ 356.643949][ T9432] ? fput+0x1a8/0x230 [ 356.647955][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.653798][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 356.658764][ T9432] __sys_bpf+0x48d/0x810 [ 356.663045][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 356.667823][ T9432] ? __sys_bind+0x108/0x2d0 [ 356.672344][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.678353][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.684707][ T9432] ? do_syscall_64+0x100/0x230 [ 356.689481][ T9432] __x64_sys_bpf+0x7c/0x90 [ 356.693909][ T9432] do_syscall_64+0xf3/0x230 [ 356.698417][ T9432] ? clear_bhb_loop+0x35/0x90 [ 356.703099][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.709024][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 356.713470][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.733110][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.741536][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 356.749512][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 356.757508][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 356.765495][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.773541][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 356.781647][ T9432] [ 356.784779][ T9432] BUG: Bad page state in process syz.4.1027 pfn:2e7b7 [ 356.791707][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e7b73c0 pfn:0x2e7b7 [ 356.801925][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 356.809109][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 356.817833][ T9432] raw: ffff88802e7b73c0 0000000000000001 00000000ffffffff 0000000000000000 [ 356.826432][ T9432] page dumped because: page_pool leak [ 356.831870][ T9432] page_owner tracks the page as allocated [ 356.837645][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463045268, free_ts 348829419764 [ 356.854747][ T9432] post_alloc_hook+0x1f3/0x230 [ 356.859594][ T9432] get_page_from_freelist+0x3045/0x3190 [ 356.865172][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 356.870421][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 356.875907][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 356.881857][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 356.887143][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 356.892608][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.898132][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 356.903097][ T9432] __sys_bpf+0x48d/0x810 [ 356.907435][ T9432] __x64_sys_bpf+0x7c/0x90 [ 356.912007][ T9432] do_syscall_64+0xf3/0x230 [ 356.916554][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.922635][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 356.929166][ T9432] free_unref_page+0xcfb/0xf20 [ 356.933952][ T9432] __put_partials+0xeb/0x130 [ 356.938585][ T9432] put_cpu_partial+0x17c/0x250 [ 356.943368][ T9432] __slab_free+0x2ea/0x3d0 [ 356.947837][ T9432] qlist_free_all+0x9a/0x140 [ 356.952530][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 356.958026][ T9432] __kasan_slab_alloc+0x23/0x80 [ 356.962897][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 356.968412][ T9432] getname_flags+0xb7/0x540 [ 356.972941][ T9432] __x64_sys_unlink+0x3a/0x50 [ 356.977685][ T9432] do_syscall_64+0xf3/0x230 [ 356.982210][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.988263][ T9432] Modules linked in: [ 356.992198][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 357.004023][ T9432] Tainted: [B]=BAD_PAGE [ 357.008168][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.018327][ T9432] Call Trace: [ 357.021616][ T9432] [ 357.024563][ T9432] dump_stack_lvl+0x241/0x360 [ 357.029254][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.034477][ T9432] ? __pfx_print_modules+0x10/0x10 [ 357.039611][ T9432] bad_page+0x166/0x1b0 [ 357.043767][ T9432] free_unref_page+0xed0/0xf20 [ 357.048550][ T9432] skb_release_data+0x6dc/0x8a0 [ 357.053426][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 357.058469][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 357.064296][ T9432] ? mark_lock+0x9a/0x360 [ 357.068638][ T9432] ? __lock_acquire+0x1384/0x2050 [ 357.073684][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 357.079783][ T9432] ? mark_lock+0x9a/0x360 [ 357.084119][ T9432] ? __lock_acquire+0x1384/0x2050 [ 357.089164][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 357.095155][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 357.101755][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 357.108274][ T9432] ? read_tsc+0x9/0x20 [ 357.112357][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 357.117569][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 357.123902][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 357.130063][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 357.136395][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 357.143076][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 357.148309][ T9432] ? __phys_addr+0xba/0x170 [ 357.152822][ T9432] ? build_skb_around+0x111/0x260 [ 357.157865][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 357.163774][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 357.169073][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 357.174549][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 357.180481][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 357.186041][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 357.191860][ T9432] ? synchronize_rcu+0x11b/0x360 [ 357.196802][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 357.202101][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 357.208355][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 357.214266][ T9432] ? _copy_from_user+0xa6/0xe0 [ 357.219038][ T9432] ? bpf_test_init+0x15a/0x180 [ 357.223806][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 357.229276][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 357.234699][ T9432] ? __pfx_lock_release+0x10/0x10 [ 357.239740][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.245555][ T9432] ? __fget_files+0x29/0x470 [ 357.250156][ T9432] ? fput+0x1a8/0x230 [ 357.254147][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.259964][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 357.264911][ T9432] __sys_bpf+0x48d/0x810 [ 357.269161][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 357.273931][ T9432] ? __sys_bind+0x108/0x2d0 [ 357.278453][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.284447][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.290784][ T9432] ? do_syscall_64+0x100/0x230 [ 357.295560][ T9432] __x64_sys_bpf+0x7c/0x90 [ 357.299985][ T9432] do_syscall_64+0xf3/0x230 [ 357.304491][ T9432] ? clear_bhb_loop+0x35/0x90 [ 357.309169][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.315071][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 357.319491][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.339099][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.347518][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 357.355491][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 357.363462][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 357.371437][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.379411][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 357.387399][ T9432] [ 357.390522][ T9432] BUG: Bad page state in process syz.4.1027 pfn:7e294 [ 357.397430][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e294f00 pfn:0x7e294 [ 357.407557][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 357.414703][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 357.423352][ T9432] raw: ffff88807e294f00 0000000000000001 00000000ffffffff 0000000000000000 [ 357.431987][ T9432] page dumped because: page_pool leak [ 357.437403][ T9432] page_owner tracks the page as allocated [ 357.443148][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463032623, free_ts 348829429906 [ 357.460209][ T9432] post_alloc_hook+0x1f3/0x230 [ 357.465001][ T9432] get_page_from_freelist+0x3045/0x3190 [ 357.470596][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 357.475818][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 357.481322][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 357.487241][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 357.492492][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 357.497917][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 357.503292][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 357.508285][ T9432] __sys_bpf+0x48d/0x810 [ 357.512551][ T9432] __x64_sys_bpf+0x7c/0x90 [ 357.516964][ T9432] do_syscall_64+0xf3/0x230 [ 357.521509][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.527468][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 357.533813][ T9432] free_unref_page+0xcfb/0xf20 [ 357.538648][ T9432] __put_partials+0xeb/0x130 [ 357.543276][ T9432] put_cpu_partial+0x17c/0x250 [ 357.548089][ T9432] __slab_free+0x2ea/0x3d0 [ 357.552518][ T9432] qlist_free_all+0x9a/0x140 [ 357.557100][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 357.562610][ T9432] __kasan_slab_alloc+0x23/0x80 [ 357.567511][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 357.572972][ T9432] getname_flags+0xb7/0x540 [ 357.577532][ T9432] __x64_sys_unlink+0x3a/0x50 [ 357.582228][ T9432] do_syscall_64+0xf3/0x230 [ 357.586725][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.592671][ T9432] Modules linked in: [ 357.596585][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 357.608382][ T9432] Tainted: [B]=BAD_PAGE [ 357.612520][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.622563][ T9432] Call Trace: [ 357.625833][ T9432] [ 357.628755][ T9432] dump_stack_lvl+0x241/0x360 [ 357.633438][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.638640][ T9432] ? __pfx_print_modules+0x10/0x10 [ 357.643758][ T9432] bad_page+0x166/0x1b0 [ 357.647925][ T9432] free_unref_page+0xed0/0xf20 [ 357.652719][ T9432] skb_release_data+0x6dc/0x8a0 [ 357.657571][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 357.662590][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 357.668310][ T9432] ? mark_lock+0x9a/0x360 [ 357.672659][ T9432] ? __lock_acquire+0x1384/0x2050 [ 357.677700][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 357.683789][ T9432] ? mark_lock+0x9a/0x360 [ 357.688117][ T9432] ? __lock_acquire+0x1384/0x2050 [ 357.693152][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 357.699147][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 357.705761][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 357.712273][ T9432] ? read_tsc+0x9/0x20 [ 357.716351][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 357.721557][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 357.727884][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 357.734068][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 357.740421][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 357.747114][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 357.752337][ T9432] ? __phys_addr+0xba/0x170 [ 357.756888][ T9432] ? build_skb_around+0x111/0x260 [ 357.761927][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 357.767834][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 357.773133][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 357.778605][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 357.784515][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 357.790081][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 357.795919][ T9432] ? synchronize_rcu+0x11b/0x360 [ 357.800891][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 357.806243][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 357.812516][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 357.818441][ T9432] ? _copy_from_user+0xa6/0xe0 [ 357.823219][ T9432] ? bpf_test_init+0x15a/0x180 [ 357.827997][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 357.833471][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 357.838861][ T9432] ? __pfx_lock_release+0x10/0x10 [ 357.843906][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.849726][ T9432] ? __fget_files+0x29/0x470 [ 357.854332][ T9432] ? fput+0x1a8/0x230 [ 357.858320][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.864141][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 357.869090][ T9432] __sys_bpf+0x48d/0x810 [ 357.873358][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 357.878128][ T9432] ? __sys_bind+0x108/0x2d0 [ 357.882673][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.888680][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.895028][ T9432] ? do_syscall_64+0x100/0x230 [ 357.899800][ T9432] __x64_sys_bpf+0x7c/0x90 [ 357.904243][ T9432] do_syscall_64+0xf3/0x230 [ 357.908766][ T9432] ? clear_bhb_loop+0x35/0x90 [ 357.913473][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.919407][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 357.923836][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.943456][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.951895][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 357.959888][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 357.967874][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 357.975854][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.983828][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 357.991819][ T9432] [ 357.994963][ T9432] BUG: Bad page state in process syz.4.1027 pfn:1fb2e [ 358.001970][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801fb2ef00 pfn:0x1fb2e [ 358.012104][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 358.019283][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 358.027929][ T9432] raw: ffff88801fb2ef00 0000000000000001 00000000ffffffff 0000000000000000 [ 358.036538][ T9432] page dumped because: page_pool leak [ 358.041958][ T9432] page_owner tracks the page as allocated [ 358.047730][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463019998, free_ts 348829582450 [ 358.064834][ T9432] post_alloc_hook+0x1f3/0x230 [ 358.069653][ T9432] get_page_from_freelist+0x3045/0x3190 [ 358.075201][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 358.080450][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 358.085939][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 358.091901][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 358.097134][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 358.102579][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 358.108023][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 358.112973][ T9432] __sys_bpf+0x48d/0x810 [ 358.117212][ T9432] __x64_sys_bpf+0x7c/0x90 [ 358.121672][ T9432] do_syscall_64+0xf3/0x230 [ 358.126192][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.132156][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 358.138526][ T9432] free_unref_page+0xcfb/0xf20 [ 358.143341][ T9432] __put_partials+0xeb/0x130 [ 358.148008][ T9432] put_cpu_partial+0x17c/0x250 [ 358.152788][ T9432] __slab_free+0x2ea/0x3d0 [ 358.157199][ T9432] qlist_free_all+0x9a/0x140 [ 358.161832][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 358.167308][ T9432] __kasan_slab_alloc+0x23/0x80 [ 358.172204][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 358.177709][ T9432] getname_flags+0xb7/0x540 [ 358.182213][ T9432] __x64_sys_unlink+0x3a/0x50 [ 358.186880][ T9432] do_syscall_64+0xf3/0x230 [ 358.191439][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.197412][ T9432] Modules linked in: [ 358.201327][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 358.213125][ T9432] Tainted: [B]=BAD_PAGE [ 358.217264][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.227310][ T9432] Call Trace: [ 358.230585][ T9432] [ 358.233512][ T9432] dump_stack_lvl+0x241/0x360 [ 358.238200][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.243426][ T9432] ? __pfx_print_modules+0x10/0x10 [ 358.248553][ T9432] bad_page+0x166/0x1b0 [ 358.252723][ T9432] free_unref_page+0xed0/0xf20 [ 358.257503][ T9432] skb_release_data+0x6dc/0x8a0 [ 358.262364][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 358.267410][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 358.273141][ T9432] ? mark_lock+0x9a/0x360 [ 358.277475][ T9432] ? __lock_acquire+0x1384/0x2050 [ 358.282517][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 358.288594][ T9432] ? mark_lock+0x9a/0x360 [ 358.292927][ T9432] ? __lock_acquire+0x1384/0x2050 [ 358.297979][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 358.303974][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 358.310574][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 358.317082][ T9432] ? read_tsc+0x9/0x20 [ 358.321157][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 358.326365][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.332701][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 358.338868][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.345206][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 358.351893][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 358.357101][ T9432] ? __phys_addr+0xba/0x170 [ 358.361618][ T9432] ? build_skb_around+0x111/0x260 [ 358.366661][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 358.372572][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 358.377870][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 358.383342][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 358.389254][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 358.394821][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 358.400657][ T9432] ? synchronize_rcu+0x11b/0x360 [ 358.405609][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 358.410910][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 358.417162][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 358.423073][ T9432] ? _copy_from_user+0xa6/0xe0 [ 358.427845][ T9432] ? bpf_test_init+0x15a/0x180 [ 358.432618][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 358.438090][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 358.443476][ T9432] ? __pfx_lock_release+0x10/0x10 [ 358.448520][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.454337][ T9432] ? __fget_files+0x29/0x470 [ 358.458949][ T9432] ? fput+0x1a8/0x230 [ 358.462939][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.468757][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 358.473704][ T9432] __sys_bpf+0x48d/0x810 [ 358.477952][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 358.482746][ T9432] ? __sys_bind+0x108/0x2d0 [ 358.487268][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.493260][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.499616][ T9432] ? do_syscall_64+0x100/0x230 [ 358.504391][ T9432] __x64_sys_bpf+0x7c/0x90 [ 358.508816][ T9432] do_syscall_64+0xf3/0x230 [ 358.513324][ T9432] ? clear_bhb_loop+0x35/0x90 [ 358.518006][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.523912][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 358.528331][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.547942][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.556362][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 358.564339][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 358.572448][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 358.580447][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.588442][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 358.596434][ T9432] [ 358.599551][ T9432] BUG: Bad page state in process syz.4.1027 pfn:2c6bf [ 358.606422][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c6bff00 pfn:0x2c6bf [ 358.616562][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 358.623763][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 358.632433][ T9432] raw: ffff88802c6bff00 0000000000000001 00000000ffffffff 0000000000000000 [ 358.641066][ T9432] page dumped because: page_pool leak [ 358.646454][ T9432] page_owner tracks the page as allocated [ 358.652212][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349463007440, free_ts 348829592879 [ 358.669285][ T9432] post_alloc_hook+0x1f3/0x230 [ 358.674086][ T9432] get_page_from_freelist+0x3045/0x3190 [ 358.679706][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 358.685016][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 358.690521][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 358.696450][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 358.701753][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 358.707166][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 358.712608][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 358.717615][ T9432] __sys_bpf+0x48d/0x810 [ 358.721881][ T9432] __x64_sys_bpf+0x7c/0x90 [ 358.726300][ T9432] do_syscall_64+0xf3/0x230 [ 358.730842][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.736765][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 358.743126][ T9432] free_unref_page+0xcfb/0xf20 [ 358.747964][ T9432] __put_partials+0xeb/0x130 [ 358.752583][ T9432] put_cpu_partial+0x17c/0x250 [ 358.757357][ T9432] __slab_free+0x2ea/0x3d0 [ 358.761885][ T9432] qlist_free_all+0x9a/0x140 [ 358.766498][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 358.772002][ T9432] __kasan_slab_alloc+0x23/0x80 [ 358.776871][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 358.782384][ T9432] getname_flags+0xb7/0x540 [ 358.786930][ T9432] __x64_sys_unlink+0x3a/0x50 [ 358.791653][ T9432] do_syscall_64+0xf3/0x230 [ 358.796177][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.802132][ T9432] Modules linked in: [ 358.806049][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 358.817852][ T9432] Tainted: [B]=BAD_PAGE [ 358.821993][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.832058][ T9432] Call Trace: [ 358.835331][ T9432] [ 358.838255][ T9432] dump_stack_lvl+0x241/0x360 [ 358.843056][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.848271][ T9432] ? __pfx_print_modules+0x10/0x10 [ 358.853392][ T9432] bad_page+0x166/0x1b0 [ 358.857561][ T9432] free_unref_page+0xed0/0xf20 [ 358.862365][ T9432] skb_release_data+0x6dc/0x8a0 [ 358.867277][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 358.872303][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 358.878028][ T9432] ? mark_lock+0x9a/0x360 [ 358.882357][ T9432] ? __lock_acquire+0x1384/0x2050 [ 358.887393][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 358.893490][ T9432] ? mark_lock+0x9a/0x360 [ 358.897812][ T9432] ? __lock_acquire+0x1384/0x2050 [ 358.902841][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 358.908834][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 358.915435][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 358.921948][ T9432] ? read_tsc+0x9/0x20 [ 358.926038][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 358.931265][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.937605][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 358.943784][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.950130][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 358.956820][ T9432] ? __pfx_eth_type_trans+0x10/0x10 [ 358.962032][ T9432] ? __phys_addr+0xba/0x170 [ 358.966537][ T9432] ? build_skb_around+0x111/0x260 [ 358.971572][ T9432] ? __xdp_build_skb_from_frame+0x338/0x650 [ 358.977483][ T9432] netif_receive_skb_list+0x55/0x4b0 [ 358.982779][ T9432] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 358.988258][ T9432] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 358.994163][ T9432] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 358.999721][ T9432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 359.005536][ T9432] ? synchronize_rcu+0x11b/0x360 [ 359.010491][ T9432] ? __pfx_synchronize_rcu+0x10/0x10 [ 359.015799][ T9432] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 359.022080][ T9432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 359.028004][ T9432] ? _copy_from_user+0xa6/0xe0 [ 359.032779][ T9432] ? bpf_test_init+0x15a/0x180 [ 359.037558][ T9432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 359.043024][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 359.048411][ T9432] ? __pfx_lock_release+0x10/0x10 [ 359.053451][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 359.059272][ T9432] ? __fget_files+0x29/0x470 [ 359.063869][ T9432] ? fput+0x1a8/0x230 [ 359.067859][ T9432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 359.073680][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 359.078628][ T9432] __sys_bpf+0x48d/0x810 [ 359.082884][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 359.087650][ T9432] ? __sys_bind+0x108/0x2d0 [ 359.092165][ T9432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.098156][ T9432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.104492][ T9432] ? do_syscall_64+0x100/0x230 [ 359.109260][ T9432] __x64_sys_bpf+0x7c/0x90 [ 359.113683][ T9432] do_syscall_64+0xf3/0x230 [ 359.118188][ T9432] ? clear_bhb_loop+0x35/0x90 [ 359.122886][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.128791][ T9432] RIP: 0033:0x7fd2cd17dff9 [ 359.133209][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.152854][ T9432] RSP: 002b:00007fd2cdf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.161291][ T9432] RAX: ffffffffffffffda RBX: 00007fd2cd336058 RCX: 00007fd2cd17dff9 [ 359.169268][ T9432] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 359.177249][ T9432] RBP: 00007fd2cd1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 359.185246][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.193246][ T9432] R13: 0000000000000000 R14: 00007fd2cd336058 R15: 00007ffc8d1cf7e8 [ 359.201242][ T9432] [ 359.204371][ T9432] BUG: Bad page state in process syz.4.1027 pfn:5e1f7 [ 359.211310][ T9432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e1f7f00 pfn:0x5e1f7 [ 359.221437][ T9432] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 359.228608][ T9432] raw: 00fff00000000000 dead000000000040 ffff8880656e2000 0000000000000000 [ 359.237224][ T9432] raw: ffff88805e1f7f00 0000000000000001 00000000ffffffff 0000000000000000 [ 359.245863][ T9432] page dumped because: page_pool leak [ 359.251270][ T9432] page_owner tracks the page as allocated [ 359.256997][ T9432] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9432, tgid 9421 (syz.4.1027), ts 349462995016, free_ts 348829602697 [ 359.274088][ T9432] post_alloc_hook+0x1f3/0x230 [ 359.278927][ T9432] get_page_from_freelist+0x3045/0x3190 [ 359.284495][ T9432] __alloc_pages_noprof+0x256/0x6c0 [ 359.289741][ T9432] alloc_pages_bulk_noprof+0x729/0xd40 [ 359.295219][ T9432] __page_pool_alloc_pages_slow+0x122/0x690 [ 359.301169][ T9432] page_pool_alloc_pages+0xd0/0x1c0 [ 359.306399][ T9432] bpf_test_run_xdp_live+0x950/0x2160 [ 359.311828][ T9432] bpf_prog_test_run_xdp+0x805/0x11e0 [ 359.317247][ T9432] bpf_prog_test_run+0x2e4/0x360 [ 359.322267][ T9432] __sys_bpf+0x48d/0x810 [ 359.326535][ T9432] __x64_sys_bpf+0x7c/0x90 [ 359.331002][ T9432] do_syscall_64+0xf3/0x230 [ 359.335523][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.341467][ T9432] page last free pid 9082 tgid 9082 stack trace: [ 359.347846][ T9432] free_unref_page+0xcfb/0xf20 [ 359.352637][ T9432] __put_partials+0xeb/0x130 [ 359.357228][ T9432] put_cpu_partial+0x17c/0x250 [ 359.362030][ T9432] __slab_free+0x2ea/0x3d0 [ 359.366473][ T9432] qlist_free_all+0x9a/0x140 [ 359.371115][ T9432] kasan_quarantine_reduce+0x14f/0x170 [ 359.376587][ T9432] __kasan_slab_alloc+0x23/0x80 [ 359.381486][ T9432] kmem_cache_alloc_noprof+0x135/0x2a0 [ 359.386968][ T9432] getname_flags+0xb7/0x540 [ 359.391515][ T9432] __x64_sys_unlink+0x3a/0x50 [ 359.396211][ T9432] do_syscall_64+0xf3/0x230 [ 359.400790][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.406714][ T9432] Modules linked in: [ 359.410645][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.4.1027 Tainted: G B 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 359.422465][ T9432] Tainted: [B]=BAD_PAGE [ 359.426604][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.436652][ T9432] Call Trace: [ 359.439926][ T9432] [ 359.442847][ T9432] dump_stack_lvl+0x241/0x360 [ 359.447533][ T9432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.452733][ T9432] ? __pfx_print_modules+0x10/0x10 [ 359.457851][ T9432] bad_page+0x166/0x1b0 [ 359.462005][ T9432] free_unref_page+0xed0/0xf20 [ 359.466773][ T9432] skb_release_data+0x6dc/0x8a0 [ 359.471640][ T9432] sk_skb_reason_drop+0x1c9/0x380 [ 359.476701][ T9432] __netif_receive_skb_core+0x3edd/0x4570 [ 359.482453][ T9432] ? mark_lock+0x9a/0x360 [ 359.486817][ T9432] ? __lock_acquire+0x1384/0x2050 [ 359.491877][ T9432] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 359.497973][ T9432] ? mark_lock+0x9a/0x360 [ 359.502319][ T9432] ? __lock_acquire+0x1384/0x2050 [ 359.507363][ T9432] __netif_receive_skb_list_core+0x2b1/0x980 [ 359.513362][ T9432] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 359.519962][ T9432] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 359.526485][ T9432] ? read_tsc+0x9/0x20 [ 359.530572][ T9432] ? timekeeping_get_ns+0x2c0/0x420 [ 359.535799][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 359.542134][ T9432] netif_receive_skb_list_internal+0xa51/0xe30 [ 359.548337][ T9432] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 359.554672][ T9432] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 359.561352][ T9432] ? __pfx_eth_type_trans+0x10/0x10