last executing test programs: 3.606842219s ago: executing program 3 (id=765): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r1, 0xfff, 0xda, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x74}}, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000900)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xb}, @device_a, @device_a, @initial, {0x6, 0x7f}, @device_a, @void, @value=@ver_80211n={0x0, 0xd, 0x0, 0x2, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0xe5, "c647145767a97ee7b4a1df891594d7cb508a41267f7fbf97c1c9955b1e43ccf7fde7bc0d1f52a4bf24ae8b34c4b1e64acabe9d777d3922b4d6c1b0a1ec8d5141c75591d16948decc2abe4a7d994be6de24c2230fe7587c3828448322e465b0f4802419029440491eea6d3e7dde7216a54baf066de648c44090462a91bd629a7386fc9f62010052850ac10723e22a99cfb88adf53a8ddbe4fad01795f22fb311d5b5b9400c9d29a383b4634a2ea0a85857a61adfafb1bad53988cba645573f962e121e606921edf36ffcf206e45fd95ad877226ff6f7c90213fda0352b543e33907badcc7b5"}, {@device_b, @broadcast, 0x26, "c3acb41e98726a9cdad74658f38d3d46e6bbd359287d7f248d97913cc0e810394decb3acf409"}, {@broadcast}, {@broadcast, @broadcast, 0xf3, "b30850a0a7c64278acadcf07d344d52bdc2905e013ea46b81adfcaf0bb49782d680791adfda3c16d579eabf88fb220aec533cde72cd949687084bbe443682f819403aa50dc08bf3d7e7fce00f79b7ed61aa55df85fe2b422cff2b047e802ef78bb2757e0116bdae9a2f26ce28ff3e39d28e16097da60b181e8d83774f954dac63d258692a7994a2073cce46069e1bfd8f38d3a2ec4c05f8514a870ab8ab99e1ac27fcb86bcceb351a7dea5fd906f13b75b3bfb5329bacb954c313b97fb4a6603a1ddc548585dca72dec63fb8b46a819778c19e17033a2133c57a7db6c939ad8072914048c264d6a6f169b73b0f6a04dbcbb46b"}]}, 0x25e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="ad7f8a90ba9e50000000", @ANYRES16=r10, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x38, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) r12 = socket(0x27, 0x5, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, @broadcast}}}}) 2.601550133s ago: executing program 2 (id=776): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x8040480) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000000), 0x4) 2.592600636s ago: executing program 3 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000440)={0x8, 'wlan0\x00', {'dvmrp0\x00'}, 0x4}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) close(0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="7b38eda58c944daa9d2d103e401d64c98e605fff52f5987af40aa70894507ac553c6800c91c2ff234aeac9e830c82cfedb7740f38a0f3eb720437518c58ee063726f99228a327e44407d0af4b33ac9de7f327bc7a10608add3dc0ec2ab8eabcfac7ae781e9ec351872782ba764b581923b732ec4d1e9177792b8a3ac9928e74ae9ead77711f29841c9bc9451d0531c2d7f52705e0aa0fd1e91027708c2d7a0", 0x9f}, {&(0x7f0000000240)="99dcd654fabc74ffd35f44d12ad887e363bd9e555c0e255efe872f0a1689b5bfba9202549b90cab8cf2fbfca0916becdcbfdc0d3c29daeacf7e4fb6ddaed5a50d6351480baea9db5140c09f4b4641716a3683c9f7806eb480a5c1a696e563e75fa8389cbc1b1c8917b5094b7829653789125a3a191b5efdce522ace1cdd42ed385479999db6b0938aedabe44b9872a7537479939b462962e531d17b5e4044f3786934b1800a244b08930722a3fc3d369e19b8d897870", 0xb6}], 0x2, &(0x7f0000000840)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x2f, 0xc, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x9, 0x0, [0x4, 0x2, 0x80, 0x8001, 0x2, 0x8ac6, 0xbeb, 0x2, 0xd5]}}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hopopts={{0x38, 0x29, 0x36, {0x8, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @mcast2}, @pad1, @ra={0x5, 0x2, 0xfff8}]}}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x2b, 0x14, '\x00', [@ra={0x5, 0x2, 0x435f}, @generic={0x3, 0x9a, "98ba14cdd774add802605cbff5ab7640f7c38a940b8060734e36569c653a2f309b34585c007657dcc6ae660810a472221566baf2267769c05b03fe1ad26651267078e390c6f9b153a59edfd161daac5d5846a086af7def00d828636dc02440190353edce239c0afec53febb8977d772ae29be3c9bbfbc10f6d2fdb34169ec053822968b496045415d02e68cf26030d8ef99014729dcfd547ea88"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hopopts={{0x30, 0x29, 0x36, {0x3b, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}}, @dstopts={{0x298, 0x29, 0x37, {0x3c, 0x4f, '\x00', [@pad1, @generic={0x7f, 0xad, "39c64a859b616c11089591b9263e3e1916e14057ee7b45fee698e406090aa1bf2a64ab5e7bef80f50bf54796cd8d572c971fd16ad522df8f89ec36216a1c720d98299949c95d6f5b12968d0e8aae565a1834f47fd684c8ee621ceee31d11a49365c2c439b65fa64be111bf31e9de1b4af6d3c974a1e1df6fd1b0f34266812ec59cc97e5e3521de53d1ea17d0e7672558c96e16efb9674dfb049ec521573d77a06a59082f9c336cc2440c98978e"}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x72, 0xe7, "b30fc19123f283e30064f73de2698a9caf6a09d4d95fb1e74c3d4a9b9c12071de1243c5da1dc75e5ab641f646a514c3d47f5294662b67426d459bf8f9e2e72b08460b6c005d0255f9680e9bd1e60127cd0cef5a59f4cb0c5340eb51a5cd0eb802126a150148cbfc82397834c50a137206e718666aaad154f6656d31787c894a19f9ed092e0bcb411246dabf152250ede0fa8657c10024f272e965972e43be1606dacc423447b0b0e53d825603961289bc4c475861f901a91c421b1a8a1683b967d35705fcc571bff143e4d5382bd051477fcc65c6f8a18f6f035ac2a4598efd247c3e54e75e556"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @jumbo={0xc2, 0x4, 0xc8a2}, @generic={0x4, 0xc2, "bb63745d3ced991141f34b0f2e798b44f186f4e8eab22a93f87418f45ce4f5bd3694bc2f3a8e3b6aae85bd0a2decc4f9198c13df454592fc82e2f5793899334201754f117d33adc1c4dae156c1b8227a8a5f3ee0e05f95cd5ec623a789ff347fc27275e2ab399d1ca8acdba955498052ea3118d6081c314e72db206e0384b29c11fb9d144a138f8c519f0f44cf322198a89cbf6cdfeef48b76344e49f33c97f585962687a0bce22cc7959eb194409eef049d611f9e87c2a5639c6a875452bfbe4440"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1b9}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x87, 0x14, 0x2, 0x6, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @local}, @empty, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x550}}], 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r3, 0x2}, 0x8) 2.094127093s ago: executing program 4 (id=781): getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @remote, 0x0, 0x0, 0x1, 0x180, 0x7ff, 0x28}) 1.995258829s ago: executing program 4 (id=782): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffd86, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000000202050d00000000000000000000000a34000a80300002802c00018014000300fe88000000000000000000000000010114000400fe80000040ffffff9b1c0001800c00028005000100000000ad51ae1441ee04dc25000c0002800500010088000000080008400000000300"/125], 0x74}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffd86, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000000202050d00000000000000000000000a34000a80300002802c00018014000300fe88000000000000000000000000010114000400fe80000040ffffff9b1c0001800c00028005000100000000ad51ae1441ee04dc25000c0002800500010088000000080008400000000300"/125], 0x74}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) (async) 1.873194729s ago: executing program 4 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x20040080) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x112}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x4, 0x1, 0x8c30}]}}]}, 0x5c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230000074a4ff7eb4"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r6, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x360, 0x24, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xf}, {0x8, 0x7}, {0x5, 0x7}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0x1, 0x6, 0x1, 0x5, 0x0, 0x7}}, {0x12, 0x2, [0x2ed, 0x8, 0x2, 0xeb, 0xffdd, 0x200, 0x5]}}, {{0x1c, 0x1, {0x7, 0x0, 0x55, 0x10000, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0x100, 0x8, 0x0, 0x6, 0x1ff, 0x6]}}]}, @qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xc3, '\x00', 0x8, 0x5, 0x3, 0x100}}]}}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x7, 0x7, 0x0, 0xc, 0x5, 0x6}}, {0x10, 0x2, [0x6, 0xfe01, 0x7ff, 0x5, 0x3, 0x4]}}, {{0x1c, 0x1, {0x2, 0x7, 0x4, 0xfffffffa, 0x0, 0x6, 0x6, 0x4}}, {0xc, 0x2, [0x7, 0x8000, 0x1, 0x3000]}}, {{0x1c, 0x1, {0xc9, 0x6, 0x5, 0x5, 0x0, 0x5, 0xd, 0x6}}, {0x10, 0x2, [0x101, 0x401, 0x1, 0x6, 0xfff7, 0x52a]}}, {{0x1c, 0x1, {0x5, 0x4, 0x1, 0x3, 0x0, 0x3348, 0x92, 0x5}}, {0xe, 0x2, [0x1, 0x7, 0x3, 0x4, 0xa]}}, {{0x1c, 0x1, {0x3, 0x13, 0x1, 0x900000, 0x1, 0x4b16, 0x26f, 0xa}}, {0x18, 0x2, [0x95, 0x0, 0x8, 0x428, 0x301c, 0x462, 0x8, 0x1ff, 0x3, 0x10e1]}}, {{0x1c, 0x1, {0x9, 0xaf, 0x1, 0x8, 0x2, 0x9c6d, 0x5, 0x5}}, {0xe, 0x2, [0x7, 0x29fd, 0x5, 0x8, 0x8f]}}, {{0x1c, 0x1, {0x6, 0x3, 0xffff, 0x6, 0x0, 0x6, 0x1b, 0x6}}, {0x10, 0x2, [0x8, 0x9, 0x8, 0x6, 0x8, 0x200]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd8, 0x7f, 0x101, 0x80000000, 0x2, 0xcffe, 0xfffffffd, 0x3}}, {0xa, 0x2, [0xd, 0x8, 0x1]}}, {{0x1c, 0x1, {0x8, 0x51, 0x5, 0xfff, 0x0, 0xe, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x276d, 0xa, 0x2]}}, {{0x1c, 0x1, {0x8, 0x7, 0x100, 0x9, 0x2, 0x8, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0xbbe7, 0xff, 0x800]}}, {{0x1c, 0x1, {0x9, 0x7, 0x6, 0x4, 0x0, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x1000, 0x3, 0x6]}}, {{0x1c, 0x1, {0x5, 0x8, 0x800, 0xb, 0x0, 0x3, 0x100, 0x2}}, {0x8, 0x2, [0x7fff, 0x2]}}, {{0x1c, 0x1, {0x1, 0x8, 0xb9d2, 0x4, 0x1, 0xa, 0xdb, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x2b, 0x5, 0x5, 0x7053, 0x2, 0x4, 0xac0, 0x2}}, {0x8, 0x2, [0x166, 0x64a9]}}, {{0x1c, 0x1, {0x1, 0xf8, 0x3ff, 0x2, 0x2, 0x4c, 0x3, 0x9}}, {0x16, 0x2, [0x7, 0xe0c, 0x5, 0xed, 0xfffb, 0x2, 0x25, 0x8, 0x5]}}, {{0x1c, 0x1, {0x10, 0x10, 0x8000, 0x9, 0x2, 0x10000, 0x3, 0x1}}, {0x6, 0x2, [0x57]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2b}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x40480c4) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x12, 0xffffffffffffffff, 0x0) 1.676479535s ago: executing program 2 (id=785): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x840000000002, 0x3, 0x100) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) syz_init_net_socket$x25(0x27, 0x5, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @local}}}], 0x68}}], 0x1, 0x48800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000000100000400000000000000", @ANYRES32, @ANYBLOB="0000c5acaa96da59de76dffa000000000000", @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRES64=r5], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) pwritev(r10, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x0) bind$alg(r11, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r11, 0x0, 0x0, 0x0) 1.647623439s ago: executing program 3 (id=786): unshare(0x22020400) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) (async) unshare(0x10010000) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) 1.530129896s ago: executing program 3 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfa}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000000000000000000000000000620000000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xbc, 0x24, 0xf0b, 0x8000000, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}]}}]}, 0xbc}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000000)=0x2e8000, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.473849727s ago: executing program 4 (id=788): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) (fail_nth: 9) 1.437092647s ago: executing program 2 (id=789): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], &(0x7f0000000640)=""/4096, 0xc5, 0x1000, 0x0, 0x6a31513, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\b'], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 970.42021ms ago: executing program 1 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010220000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x700}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x34, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0xcd97cbc8e794b0f7, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x890) 890.186672ms ago: executing program 3 (id=791): getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @remote, 0x0, 0x0, 0x1, 0x180, 0x7ff, 0x28}) 889.139127ms ago: executing program 4 (id=792): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x64, r3, 0xd00, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x10}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x64}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r5, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtclass={0x880, 0x28, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xe68cae220a3e3d54}, {0xfff1}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x80c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0xe, 0x1, 0x5, 0x4, 0x2, 0x2, 0x400, 0xa, 0x0, 0x7ff, 0xffffffff, 0x1, 0xfffffff6, 0x40, 0x5, 0x3, 0x4, 0x3ff, 0x7, 0x0, 0x100000, 0x10, 0x2, 0x8, 0xea0, 0x1, 0x6, 0x7, 0x100, 0x5, 0x2, 0xced, 0x4, 0x5, 0x400, 0x8, 0x3a3f, 0x1, 0x5, 0x696, 0x1, 0x6, 0x3, 0x7, 0xffffffff, 0x2b, 0x0, 0x8, 0x1, 0xb0, 0x800, 0x4, 0x0, 0x7, 0x2, 0x3, 0x37d0000, 0x3, 0x1d, 0x6, 0x3, 0x9, 0x7, 0x5, 0x5, 0x9, 0x1a, 0x1ff, 0x4, 0x2, 0x1ff, 0x2, 0x6, 0xffffffff, 0x5, 0x1, 0xb07, 0x4, 0xff, 0xb8, 0xf, 0x6f17, 0x4, 0x3, 0x4, 0x0, 0x1, 0x7, 0x1, 0x70, 0x5, 0x3, 0x5da, 0x809, 0xf, 0x8, 0x9, 0x63fd, 0x7fffffff, 0x9, 0x7, 0xd6, 0x8, 0x2, 0xfffffff3, 0x8, 0x8000, 0x1, 0x7fffffff, 0x8, 0x4, 0x6, 0x75e3, 0x4, 0x3, 0x1, 0xfffffffc, 0x0, 0xa34, 0x2, 0x2, 0x5, 0xffff, 0xf2, 0x800, 0x9, 0x0, 0x7, 0x3, 0x0, 0x1, 0x80000000, 0xb, 0x0, 0x10, 0x9, 0x7a1, 0x2000, 0x1, 0x3, 0x1, 0x76b, 0x0, 0x2, 0x2, 0x8da, 0x7ff, 0x3, 0x3, 0x9, 0x8000, 0x6bf6, 0xfffffffe, 0x4, 0x10001, 0x7, 0x3, 0x5, 0x1d, 0x7f, 0x4, 0x0, 0x200, 0xe54, 0x6, 0x1, 0xe, 0x10, 0x7, 0x10000, 0x8, 0xfffffeff, 0x5, 0xffff, 0x4, 0x80000001, 0x2, 0x3, 0x80, 0x5, 0x2, 0xfffffff1, 0x8, 0x7, 0xffffffff, 0x8, 0x2, 0x80, 0x2, 0x5, 0x9, 0x401, 0x4, 0x7, 0x8000, 0xffff, 0x9, 0x9, 0xfffffe00, 0x8, 0x2, 0xd, 0x9, 0x401, 0x81, 0x2, 0x6, 0x5, 0x9, 0x6c, 0x3, 0x8, 0x0, 0x5, 0x1, 0x400, 0x2, 0x400, 0x6, 0x3, 0x32, 0x6, 0x3, 0x8000, 0xfffffffa, 0x71, 0x9b, 0x1, 0x702, 0x4, 0x8, 0x0, 0x2, 0x4, 0x3ff0c21, 0x7, 0xffffffff, 0x9, 0x0, 0x2, 0x803a, 0x6, 0xa71b, 0x0, 0x8, 0x1, 0x3, 0x91, 0x0, 0xcd7, 0x82, 0xb, 0x0, 0xcad4, 0x6, 0xf8c]}, @TCA_HTB_RTAB={0x404, 0x4, [0x0, 0x80000000, 0x990, 0x8, 0x9, 0x6, 0x5, 0x2, 0x9, 0x3ff, 0xff, 0x0, 0xa1, 0x3, 0x2, 0xd24e, 0x2, 0xc, 0x0, 0x3, 0x2, 0x5, 0xf, 0x0, 0x5, 0xba, 0x8, 0xf3, 0x2, 0x4, 0x458, 0x9, 0x734, 0x1000, 0x9, 0x3, 0x1, 0x1, 0x4, 0x9, 0x8, 0x75e, 0xbf, 0x3, 0x3bcd, 0x9, 0x2fb, 0x3, 0x6, 0x7, 0xffff, 0x10000, 0x8, 0x4, 0xf7, 0x10001, 0xe, 0x4, 0xffff, 0x9, 0x0, 0xfff, 0x0, 0x4, 0xd5f, 0x0, 0x6, 0x0, 0x3, 0x6, 0x2, 0x0, 0xc0000000, 0x5, 0x200, 0x8, 0x1000, 0x0, 0xb3f, 0x7, 0x2, 0x5, 0x1000, 0x2, 0xfffffe01, 0x7fffffff, 0x3, 0x3, 0x1, 0x0, 0x5, 0x8, 0xfffffffe, 0x7, 0x8, 0x8, 0x81, 0x7, 0x8, 0x80000001, 0x5, 0x1, 0x1ff, 0x80000001, 0x2, 0x2, 0x81, 0xff, 0x13e7289a, 0x80000000, 0x0, 0x1, 0x10, 0x2, 0x100, 0x4, 0x0, 0x2, 0x3, 0x846d, 0x7, 0x9, 0x3a, 0xcb5f, 0x7ff, 0x100, 0x5, 0x7, 0x7, 0x6, 0xb4, 0x7fff, 0x3, 0x6, 0x5, 0x67e3, 0x4, 0x8e, 0x1, 0x80, 0x6, 0xbe7f, 0x4, 0x8, 0x9, 0x8, 0x2, 0x7d8, 0x5, 0x0, 0x401, 0x6, 0xd, 0x80000000, 0x9, 0xd5, 0x0, 0x3, 0x101, 0x81, 0xb82, 0xfffff995, 0x401, 0x7, 0x4, 0x9, 0x6, 0x2, 0x4, 0x9, 0x35a5, 0x9, 0x7ff, 0xc2a, 0xe6fd, 0x7, 0x2, 0x9, 0x8, 0x1000, 0x5, 0x7fff, 0x6, 0x7c637be9, 0x1, 0x140000, 0x7, 0x0, 0x3, 0x81, 0x101, 0x1, 0x10001, 0x3, 0x8, 0xe2, 0x0, 0x5, 0xbf, 0x7, 0xb847, 0x44, 0x9, 0x2, 0x0, 0x7, 0xa, 0x4, 0x2, 0x8100, 0x1, 0x6, 0xfffffffa, 0xe0c1, 0x8000, 0x4, 0xbe4, 0x1, 0x9, 0xa48, 0x1, 0x4, 0x5, 0x9, 0x1, 0x7, 0x3, 0x0, 0x9, 0x5, 0x0, 0x2, 0xff, 0x10, 0xd3a, 0x8b, 0xf, 0xfffeffff, 0x3, 0x3b4, 0x10, 0x2, 0x8, 0x8, 0x0, 0x9bb5, 0x10, 0x9, 0xfff, 0x101, 0x81, 0x80000000, 0x8000, 0x3, 0x8, 0x9]}]}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x880}}, 0x1) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r0, 0xffffe000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRES16=r8, @ANYBLOB="010500d78c4ec80000", @ANYRES32=r10], 0x2c}}, 0x20004010) socket$can_j1939(0x1d, 0x2, 0x7) recvfrom(r0, &(0x7f0000000000)=""/144, 0x90, 0x16130, 0x0, 0x0) 841.285404ms ago: executing program 2 (id=793): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x3, 'erspan0\x00', {0x5}, 0xec}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a00ac1e0001000000000000000000000000e00000010000000000000000000000000000a9"], 0x38}}, 0x0) 779.989099ms ago: executing program 3 (id=794): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) 731.331922ms ago: executing program 0 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000440)={0x8, 'wlan0\x00', {'dvmrp0\x00'}, 0x4}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="7b38eda58c944daa9d2d103e401d64c98e605fff52f5987af40aa70894507ac553c6800c91c2ff234aeac9e830c82cfedb7740f38a0f3eb720437518c58ee063726f99228a327e44407d0af4b33ac9de7f327bc7a10608add3dc0ec2ab8eabcfac7ae781e9ec351872782ba764b581923b732ec4d1e9177792b8a3ac9928e74ae9ead77711f29841c9bc9451d0531c2d7f52705e0aa0fd1e91027708c2d7a0", 0x9f}, {&(0x7f0000000240)="99dcd654fabc74ffd35f44d12ad887e363bd9e555c0e255efe872f0a1689b5bfba9202549b90cab8cf2fbfca0916becdcbfdc0d3c29daeacf7e4fb6ddaed5a50d6351480baea9db5140c09f4b4641716a3683c9f7806eb480a5c1a696e563e75fa8389cbc1b1c8917b5094b7829653789125a3a191b5efdce522ace1cdd42ed385479999db6b0938aedabe44b9872a7537479939b462962e531d17b5e4044f3786934b1800a244b08930722a3fc3d369e19b8d897870", 0xb6}], 0x2, &(0x7f0000000840)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x2f, 0xc, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x9, 0x0, [0x4, 0x2, 0x80, 0x8001, 0x2, 0x8ac6, 0xbeb, 0x2, 0xd5]}}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hopopts={{0x38, 0x29, 0x36, {0x8, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @mcast2}, @pad1, @ra={0x5, 0x2, 0xfff8}]}}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x2b, 0x14, '\x00', [@ra={0x5, 0x2, 0x435f}, @generic={0x3, 0x9a, "98ba14cdd774add802605cbff5ab7640f7c38a940b8060734e36569c653a2f309b34585c007657dcc6ae660810a472221566baf2267769c05b03fe1ad26651267078e390c6f9b153a59edfd161daac5d5846a086af7def00d828636dc02440190353edce239c0afec53febb8977d772ae29be3c9bbfbc10f6d2fdb34169ec053822968b496045415d02e68cf26030d8ef99014729dcfd547ea88"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hopopts={{0x30, 0x29, 0x36, {0x3b, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}}, @dstopts={{0x298, 0x29, 0x37, {0x3c, 0x4f, '\x00', [@pad1, @generic={0x7f, 0xad, "39c64a859b616c11089591b9263e3e1916e14057ee7b45fee698e406090aa1bf2a64ab5e7bef80f50bf54796cd8d572c971fd16ad522df8f89ec36216a1c720d98299949c95d6f5b12968d0e8aae565a1834f47fd684c8ee621ceee31d11a49365c2c439b65fa64be111bf31e9de1b4af6d3c974a1e1df6fd1b0f34266812ec59cc97e5e3521de53d1ea17d0e7672558c96e16efb9674dfb049ec521573d77a06a59082f9c336cc2440c98978e"}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x72, 0xe7, "b30fc19123f283e30064f73de2698a9caf6a09d4d95fb1e74c3d4a9b9c12071de1243c5da1dc75e5ab641f646a514c3d47f5294662b67426d459bf8f9e2e72b08460b6c005d0255f9680e9bd1e60127cd0cef5a59f4cb0c5340eb51a5cd0eb802126a150148cbfc82397834c50a137206e718666aaad154f6656d31787c894a19f9ed092e0bcb411246dabf152250ede0fa8657c10024f272e965972e43be1606dacc423447b0b0e53d825603961289bc4c475861f901a91c421b1a8a1683b967d35705fcc571bff143e4d5382bd051477fcc65c6f8a18f6f035ac2a4598efd247c3e54e75e556"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @jumbo={0xc2, 0x4, 0xc8a2}, @generic={0x4, 0xc2, "bb63745d3ced991141f34b0f2e798b44f186f4e8eab22a93f87418f45ce4f5bd3694bc2f3a8e3b6aae85bd0a2decc4f9198c13df454592fc82e2f5793899334201754f117d33adc1c4dae156c1b8227a8a5f3ee0e05f95cd5ec623a789ff347fc27275e2ab399d1ca8acdba955498052ea3118d6081c314e72db206e0384b29c11fb9d144a138f8c519f0f44cf322198a89cbf6cdfeef48b76344e49f33c97f585962687a0bce22cc7959eb194409eef049d611f9e87c2a5639c6a875452bfbe4440"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1b9}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x87, 0x14, 0x2, 0x6, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @local}, @empty, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x550}}], 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r3, 0x2}, 0x8) 730.0729ms ago: executing program 1 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0514000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r7 = socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd2a, 0x25dfdbfe, 0x1, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) 696.884374ms ago: executing program 2 (id=797): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x400000}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000880)) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f0000000200007c7d99", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) shutdown(r5, 0x0) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r7 = accept(r6, 0x0, 0x0) bind$can_raw(r7, &(0x7f0000000140), 0x10) sendto$inet6(r7, &(0x7f0000000040)='h', 0x1, 0x91, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xe8, 0x168, 0x10, 0x0, 0xb, 0x1e8, 0x250, 0x250, 0x1e8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00'}, 0x6000000, 0xa8, 0xe8, 0x0, {0x0, 0x28e}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) r12 = socket(0x15, 0x5, 0x0) ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c7) 613.521883ms ago: executing program 0 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x15, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x20040080) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x112}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x4, 0x1, 0x8c30}]}}]}, 0x5c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230000074a4ff7eb4"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r6, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x360, 0x24, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xf}, {0x8, 0x7}, {0x5, 0x7}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0x1, 0x6, 0x1, 0x5, 0x0, 0x7}}, {0x12, 0x2, [0x2ed, 0x8, 0x2, 0xeb, 0xffdd, 0x200, 0x5]}}, {{0x1c, 0x1, {0x7, 0x0, 0x55, 0x10000, 0x2, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0x100, 0x8, 0x0, 0x6, 0x1ff, 0x6]}}]}, @qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xc3, '\x00', 0x8, 0x5, 0x3, 0x100}}]}}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x7, 0x7, 0x0, 0xc, 0x5, 0x6}}, {0x10, 0x2, [0x6, 0xfe01, 0x7ff, 0x5, 0x3, 0x4]}}, {{0x1c, 0x1, {0x2, 0x7, 0x4, 0xfffffffa, 0x0, 0x6, 0x6, 0x4}}, {0xc, 0x2, [0x7, 0x8000, 0x1, 0x3000]}}, {{0x1c, 0x1, {0xc9, 0x6, 0x5, 0x5, 0x0, 0x5, 0xd, 0x6}}, {0x10, 0x2, [0x101, 0x401, 0x1, 0x6, 0xfff7, 0x52a]}}, {{0x1c, 0x1, {0x5, 0x4, 0x1, 0x3, 0x0, 0x3348, 0x92, 0x5}}, {0xe, 0x2, [0x1, 0x7, 0x3, 0x4, 0xa]}}, {{0x1c, 0x1, {0x3, 0x13, 0x1, 0x900000, 0x1, 0x4b16, 0x26f, 0xa}}, {0x18, 0x2, [0x95, 0x0, 0x8, 0x428, 0x301c, 0x462, 0x8, 0x1ff, 0x3, 0x10e1]}}, {{0x1c, 0x1, {0x9, 0xaf, 0x1, 0x8, 0x2, 0x9c6d, 0x5, 0x5}}, {0xe, 0x2, [0x7, 0x29fd, 0x5, 0x8, 0x8f]}}, {{0x1c, 0x1, {0x6, 0x3, 0xffff, 0x6, 0x0, 0x6, 0x1b, 0x6}}, {0x10, 0x2, [0x8, 0x9, 0x8, 0x6, 0x8, 0x200]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd8, 0x7f, 0x101, 0x80000000, 0x2, 0xcffe, 0xfffffffd, 0x3}}, {0xa, 0x2, [0xd, 0x8, 0x1]}}, {{0x1c, 0x1, {0x8, 0x51, 0x5, 0xfff, 0x0, 0xe, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x276d, 0xa, 0x2]}}, {{0x1c, 0x1, {0x8, 0x7, 0x100, 0x9, 0x2, 0x8, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0xbbe7, 0xff, 0x800]}}, {{0x1c, 0x1, {0x9, 0x7, 0x6, 0x4, 0x0, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x1000, 0x3, 0x6]}}, {{0x1c, 0x1, {0x5, 0x8, 0x800, 0xb, 0x0, 0x3, 0x100, 0x2}}, {0x8, 0x2, [0x7fff, 0x2]}}, {{0x1c, 0x1, {0x1, 0x8, 0xb9d2, 0x4, 0x1, 0xa, 0xdb, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x2b, 0x5, 0x5, 0x7053, 0x2, 0x4, 0xac0, 0x2}}, {0x8, 0x2, [0x166, 0x64a9]}}, {{0x1c, 0x1, {0x1, 0xf8, 0x3ff, 0x2, 0x2, 0x4c, 0x3, 0x9}}, {0x16, 0x2, [0x7, 0xe0c, 0x5, 0xed, 0xfffb, 0x2, 0x25, 0x8, 0x5]}}, {{0x1c, 0x1, {0x10, 0x10, 0x8000, 0x9, 0x2, 0x10000, 0x3, 0x1}}, {0x6, 0x2, [0x57]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2b}]}, 0x360}, 0x1, 0x0, 0x0, 0x40}, 0x40480c4) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x12, 0xffffffffffffffff, 0x0) 540.653185ms ago: executing program 2 (id=799): socketpair(0x29, 0x1, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003801400020062728f7529e0e81cd15ec8906964676530"], 0x50}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000301}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003400)=@newtfilter={0x34c8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x15b4, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'rose0\x00'}, @TCA_FW_ACT={0x1060, 0x4, [@m_sample={0xa8, 0x17, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x8, 0xffffffffffffffff, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x81}]}, {0x51, 0x6, "6805358e63ecf984764e2423dc5bb4a6defdd30107dd619926b02d64ae82c175bc7279581bab63420145f77d433a6a982d58057566cf32c8a1ca83292ea67d146f010f770d45ba8d92eb387d99"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_sample={0x68, 0x11, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1560}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x8, 0x3, 0x2, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xf4c, 0x16, 0x0, 0x0, {{0xa}, {0xee4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x10000, 0x6, 0x20000000, 0x4, 0xdfbb}, 0x2d, 0x2, [{0x3, 0x8, 0x20, 0xb, 0x2, 0xfb83}, {0x7ff, 0x3, 0x80000001, 0x81, 0x4}, {0x40, 0x80000001, 0x6, 0x8, 0x5, 0x4e26}, {0xffffc061, 0x9, 0x8000, 0x0, 0xd, 0x80}, {0x2, 0x6cfe, 0x9, 0x3, 0x1400000, 0x3ff}, {0x200, 0x3, 0x7, 0xf, 0x1, 0x6}, {0x5, 0x3, 0xd04, 0x9, 0x4, 0x3}, {0x1, 0x7, 0x7, 0x2, 0xffffffff, 0xd66b}]}, [{0x80000001, 0xc04, 0x7, 0x3, 0x101, 0xb49a}, {0x2, 0xd, 0x100, 0xfffffffc, 0x0, 0x8}, {0x4c, 0x0, 0xf7c5, 0xd2, 0x7, 0x6}, {0x7f, 0x8, 0x7, 0xd2, 0x7ff, 0x4}, {0x323, 0x7, 0x717, 0x0, 0x6, 0x7}, {0x3, 0xa7da, 0x800, 0x8, 0x8, 0x2}, {0x7fff, 0xffff, 0x6, 0x0, 0x3ff3, 0x8}, {0x8, 0xffffffff, 0xbe, 0x9, 0x40, 0x10000}, {0x8, 0x50, 0x3bfd, 0x9, 0x8, 0x6}, {0x1, 0x3, 0x5, 0x7, 0x6, 0x8}, {0x401, 0x9492, 0x3, 0x4d0, 0x8, 0xffff}, {0x3, 0xb0, 0x10, 0x7, 0x5, 0x458}, {0x100, 0x7ff, 0x8, 0x6dd4, 0x8, 0x28cd}, {0x3ff, 0x7, 0x5d52, 0x3, 0xff, 0x8}, {0xf693, 0x7, 0x6, 0x4, 0x0, 0x5}, {0x0, 0x40, 0x100, 0x35f, 0x3, 0x180}, {0xfffffff9, 0xfffffffd, 0x3, 0x1, 0x400, 0x7cd}, {0xe, 0x0, 0x17f, 0x7, 0x4, 0xff3}, {0xcad, 0x6, 0x5, 0x9, 0xffffff81, 0x7}, {0x1181, 0x10720000, 0x8, 0x6e5c, 0x3ac90, 0x5}, {0x8, 0x2, 0x3, 0x7, 0x5, 0x200}, {0x1, 0xc, 0x7, 0xfffff001, 0x40, 0x3}, {0x8, 0xab2a, 0x0, 0x1, 0x9, 0x10}, {0xe6, 0x10, 0x0, 0x8001, 0x3, 0x80}, {0xfffffffa, 0x0, 0x5, 0x7, 0x64, 0x1000}, {0x3, 0x5, 0x40, 0x1, 0x80, 0x2c60}, {0x2b, 0x3, 0xefb0, 0x1, 0x7, 0x4}, {0x20000000, 0x4, 0x4, 0x10000, 0xff, 0x98}, {0x3, 0xc, 0x1, 0x8, 0x9, 0x3}, {0xe, 0x300000, 0x4800000, 0x2, 0x6, 0x7}, {0x3, 0x0, 0x814a, 0xffff, 0x6, 0x2}, {0x112c, 0x0, 0x7d, 0xfffffffc, 0x5, 0x1}, {0x5, 0x3ff, 0x0, 0x4, 0x8, 0x108}, {0x61bffeef, 0x5, 0x8, 0x7, 0xc122, 0x7}, {0x400, 0x80000001, 0x1, 0xfffffffb, 0x0, 0x80000001}, {0x4, 0xffffffff, 0x9, 0x7a, 0x7}, {0x8, 0x8, 0x4f, 0x1, 0x5, 0x3}, {0x6, 0x2, 0x3ff, 0x1, 0x6, 0x9}, {0x8, 0x8, 0x5, 0xcca, 0x1a3, 0x161b3fa4}, {0xc, 0x8001, 0x8, 0x6, 0x1, 0x4}, {0x6, 0x1, 0x400, 0xae, 0xfffffffe, 0x4}, {0x9c, 0x3ff, 0xcbd6, 0x2, 0x1, 0x2}, {0xffff55e7, 0xf65, 0x8001, 0x2df, 0x6, 0x5}, {0xf, 0x7, 0x4, 0xb, 0xddb, 0x3}, {0x6, 0x69, 0xfffffffa, 0x2, 0xc6f3, 0xffffff00}, {0x9, 0x8, 0x8, 0x1, 0x4, 0x85e}, {0xff, 0x786, 0xa, 0x8, 0x1, 0x800}, {0xdb, 0xb, 0x1, 0x5, 0x2, 0x4}, {0x9, 0x9, 0x6, 0xa2f, 0x2, 0xe28}, {0x9, 0xcee, 0x401, 0x9, 0x5, 0x6}, {0xa0, 0x1b286b8, 0x1, 0x83e, 0x0, 0x57d}, {0x1, 0xfffffff9, 0x3, 0x80, 0x0, 0x3}, {0x4, 0x800, 0x2, 0x9, 0x10001}, {0x7f, 0xfffffff9, 0x4, 0x7, 0x5, 0x6}, {0x1ff, 0x5, 0xe32, 0xc, 0x5, 0x2}, {0x7ff, 0x0, 0x7fff, 0xe, 0x6, 0x2}, {0x841b, 0x10000, 0xe, 0x4, 0x800, 0x7}, {0x3, 0x1, 0x1, 0x4, 0x0, 0x80000000}, {0xe, 0x10000, 0x400, 0x400, 0x3, 0x4}, {0x40, 0x80000001, 0x5, 0x6, 0x2800000, 0x6188}, {0x3ff, 0x3, 0x7c, 0x7f, 0x10001, 0x4}, {0x3ff, 0x400, 0x8, 0x40, 0x4, 0x1}, {0x4, 0x40, 0x8, 0x1, 0x40, 0x3}, {0x3, 0x4, 0x6, 0x9, 0x10001, 0x6}, {0x67bb, 0xc, 0x9, 0xfffffffb, 0x5, 0x2}, {0x10, 0x6, 0x9, 0x7, 0x3, 0x1}, {0xa8e1, 0x3, 0x0, 0x6, 0x7, 0x1}, {0x8, 0x6, 0x2d5, 0x4, 0x4, 0x400}, {0x1, 0xfffffffd, 0x9, 0x3, 0x1, 0x3}, {0x3, 0x850b, 0xf, 0x3, 0x10, 0xdc24}, {0x2a9, 0xe51e, 0x1, 0x142bf122, 0xe, 0x80}, {0x0, 0x100, 0x1, 0x5, 0x1}, {0x6, 0x1, 0x5, 0xffffffff, 0x7, 0x1}, {0x7, 0x2f21, 0x5, 0x687c80cd, 0x5, 0xab}, {0x1, 0x29, 0x4, 0x9, 0x1, 0x8}, {0x1, 0x9895, 0x8b100000, 0x8, 0x46f, 0x80}, {0x6, 0x2, 0x9, 0xf7, 0x4a11381}, {0x10001, 0x2, 0x8, 0x6, 0x7, 0x4}, {0x0, 0xfffffffb, 0x7, 0xc2, 0x3, 0x39}, {0x1, 0x80000001, 0x8, 0x8, 0x6, 0x5}, {0xb, 0x9, 0x4ff, 0x80000000, 0x3, 0x8}, {0x1, 0x81, 0x33, 0x6, 0x10000, 0x8}, {0x200, 0x5, 0x5, 0x1, 0xa0, 0xfff}, {0x6, 0x4, 0x401, 0x2, 0x1, 0x80}, {0x7, 0xb9a8, 0x4, 0x4, 0x3, 0x14}, {0x40, 0x1, 0x4, 0x400, 0x3ff, 0x9}, {0x4, 0xa, 0x3d, 0x1, 0x2, 0x43f1}, {0x10001, 0x101, 0x9, 0x2, 0x6, 0x5}, {0x0, 0x80000001, 0x4800000, 0x2, 0xfffffffd, 0x6}, {0x9, 0x5f, 0x7, 0x1}, {0x6, 0x6, 0x3, 0xf, 0x9, 0x2}, {0x4, 0x7, 0x8, 0x2, 0x0, 0x1}, {0x10001, 0x2, 0xb, 0x2, 0x2}, {0x6, 0x2, 0xfffffffd, 0x3ff, 0xfffffffe, 0xc77f}, {0x65d8, 0x80, 0x9, 0x2, 0x6}, {0x6, 0x1, 0x0, 0x1, 0x3, 0x7}, {0xca2, 0x6, 0x7, 0x3984, 0x0, 0x2b8}, {0x1, 0x7, 0x9, 0xc5, 0x5, 0x8}, {0x0, 0xfffc0000, 0x3, 0xa2, 0x8, 0x10000}, {0x80, 0x4, 0x6, 0x2, 0x25, 0xf}, {0x6, 0x8, 0x4, 0xfffffff8, 0x9, 0x6}, {0x81, 0x8, 0x800, 0xfffffffd, 0x6, 0x7}, {0x567f, 0x401, 0x2, 0x2, 0x2, 0x80000001}, {0xa, 0x400, 0x8, 0x2, 0xfffffff0, 0x5bb2}, {0x4, 0x6, 0x0, 0x1, 0x9591, 0x3}, {0x7, 0x3, 0x3, 0x4, 0x9, 0x6}, {0x2, 0x8b7, 0x18, 0x8000, 0x9, 0x5}, {0x9, 0xfff, 0xd0bb, 0x9, 0xfd, 0x8}, {0x3, 0x2, 0x572a, 0x8001, 0x6, 0x7}, {0x5, 0x1, 0x8d1, 0x2, 0x1, 0x4}, {0x3, 0x8, 0x5, 0x6, 0x4, 0x7}, {0xfffffc01, 0x0, 0x98, 0x0, 0x7ff, 0x4}, {0xffffffff, 0xf33, 0x1, 0x7, 0x0, 0xfffffbcc}, {0x0, 0x8000, 0xf0, 0x1, 0x7, 0x8001}, {0x1000, 0x5, 0x100, 0xe0, 0x8, 0x6}, {0x7, 0x2, 0x8, 0xff, 0xe, 0xbc05}, {0xf, 0x7, 0x6, 0x4, 0x1, 0x6}, {0xfffffff9, 0x1, 0x101, 0x9, 0xfff, 0xf2}, {0x400, 0x1, 0x3, 0xfffffffb, 0x1, 0x8}, {0x7fff, 0x2, 0xd, 0x7, 0x2, 0x4}, {0x8, 0x7fffffff, 0x7, 0x9, 0x1, 0x1}, {0x16b, 0xe, 0x7, 0x200, 0x5, 0x7}, {0xfffffff8, 0x3, 0x9, 0x5, 0x1000, 0x7ff}, {0x0, 0x5, 0x8, 0x1000, 0x1, 0x1}, {0x4, 0x1, 0x6, 0xd8, 0x5, 0x7fff}, {0x4390, 0x1, 0x5789, 0xfa, 0x800, 0x2e17}, {0x2, 0x73fd52a4, 0x56, 0xc5, 0x3, 0x4}, {0x6, 0x6, 0x2c, 0x4, 0x2a82, 0x9}], [{0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x4}, {0x3}, {0x5}, {0x2}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x4}, {0x7, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x7, 0x1}, {0x0, 0x1}, {0x4, 0x2fc851c1443d5044}, {0x2, 0x1}, {0x6, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}]}}]}, {0x40, 0x6, "c210af95aa3b09105779dd866cd797963825e3056f5bcec1205bb877310b4ed2a2f7d9c6d1aedf1279b0220521a8fcc51fda683dbfd2bfb21392cde3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_ACT={0xb4, 0x4, [@m_ctinfo={0xb0, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x63, 0x6, "e4bad745edbf24dabf97f7600e7b1c5b3e2f4f1357b9d9c4ed969faac0c189f716aedb963d36aeae3453dfa32212186bf83b5a97e3813832d9016f0b69641e1ac2941ba5abcb4b9169af764c0caf34d3e3de57c8cb968e9a0fc2c84a75577e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xd}}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}, @TCA_FW_POLICE={0x430, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x5, 0x7, 0x1000, 0x7, 0x4, 0x1, 0x3, 0x375a, 0x5, 0xf9b9, 0x10000, 0x1, 0x1, 0xc, 0x3, 0x0, 0x7, 0xf4b, 0x8, 0x6, 0x4, 0x6, 0x9, 0x4, 0x5, 0x2806, 0xa281, 0xcff, 0x100, 0xfec7, 0xa2c1, 0xff, 0x5, 0x1, 0xb, 0xfffffffc, 0x3, 0xef90, 0xbed, 0x7, 0x4, 0x32, 0x7, 0x3, 0x8001, 0xffffffff, 0x81, 0xfffffc01, 0x6, 0x8, 0x7, 0x7, 0x101, 0x2, 0x1000000, 0x0, 0x9, 0x8, 0x3, 0x7f, 0x401, 0x3, 0x157, 0xffffffff, 0x4, 0x6, 0x9, 0x5, 0x8, 0x6, 0x4, 0x5, 0x8d, 0x7fffffff, 0x4, 0x6, 0x1, 0xfa, 0x1000, 0x2, 0xabf, 0x0, 0x1, 0x9, 0x7, 0xf, 0x4, 0x6, 0x81, 0x0, 0xfff, 0x2, 0x1, 0x7, 0xc, 0x8000, 0x7eb8, 0x4, 0xa74, 0x39b, 0x1, 0x7, 0x2f45, 0x7, 0x1000, 0x337c, 0x0, 0x2f8ae9b5, 0x6f, 0x1, 0x1ff, 0x6, 0x7, 0x6, 0x0, 0xc, 0xfffffffe, 0x9, 0x10000, 0x8, 0x4cbd7795, 0xd80e, 0x7, 0x401, 0x100, 0x2, 0x612fadd, 0x6, 0x0, 0x8, 0x8, 0x5, 0x2, 0x200, 0x5f9, 0xcf4, 0x8000, 0x1b5, 0x3, 0x8, 0x5, 0x2, 0x3, 0x8, 0x8, 0x2, 0x4, 0xbfc, 0x4, 0xc92f, 0x90e, 0x3, 0x2, 0x0, 0x68e, 0x9, 0x542, 0x10, 0x3, 0xfffff15b, 0x2, 0x588b, 0x3ff, 0x27a, 0x80000001, 0x1ff, 0x6, 0x200, 0xb72, 0x8, 0x3, 0xfffffff7, 0x0, 0xa, 0x6f, 0x101, 0x3fa, 0x3, 0x40, 0xffff, 0xfffffff9, 0xcf, 0x5, 0x1, 0xfff, 0x80000001, 0x4, 0x9, 0x0, 0x10000, 0x8000, 0xfffffff7, 0x4, 0x7, 0x4, 0x1c00000, 0xf1f, 0x7, 0x0, 0x81, 0x8, 0x5, 0x7, 0x0, 0x4, 0x7, 0xfff, 0x3, 0xffff, 0x0, 0x1, 0xc4, 0x6, 0x2, 0xfffffff7, 0x4, 0x7, 0x2, 0x702d, 0x10000, 0xc, 0x7f, 0x400, 0x4a, 0x6, 0xeb, 0x8, 0x8a, 0x40000000, 0x4, 0x917a, 0x5bde, 0x5a800, 0x7ff, 0x9, 0x7, 0xa79a, 0x9, 0x4, 0x7ff, 0xf0b3, 0x1d, 0x10001, 0x6, 0x1, 0x2, 0x3, 0x0, 0x0, 0xfd4, 0x5, 0x6, 0x6, 0x0, 0xe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1e94, 0x2, [@TCA_CGROUP_ACT={0x1284, 0x1, [@m_connmark={0x134, 0x1e, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x6, 0x8, 0x21}, 0xc}}]}, {0xe7, 0x6, "057991f4d4472a41abcda0f58c30aa3c75666ea2034d7346f3276b7ee70e18b3473124078776d2b4ad22e9a4252c56bde1ace5e212cdd6c99d1e038d087493c181671e024c563bc3f601146dcf17f4b72a3147e3e945c004c0f70799c1d3fe86bff601d2dd1485af1f13448c2dee9e560adc58f03f61bcbb3970fd82dcb4643401aaf5358e0b4721bfb53a4dacd67fa9ffaa4145c24a549d90a9c2bae954a379c4c828fc85222eb6f5e8d10019e22708805b0ccde69c4a08f24e4e0b46bfb8d3650337063c1a9757a2d678eb3e09f2696669af0660946be48fcfadcae5640d312add6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x114c, 0x10, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff7f, 0x8, 0x10000000, 0x5, 0xdd}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x10001, 0x20000000, 0x2400, 0x80000000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xb, 0x4, 0xc, 0x80000000}, 0xc283}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ffefb7b, 0x7, 0x20000000, 0xff, 0x83}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0xffffffffffffffff, 0x10, 0x10}, 0x43}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x1, 0x6, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7f, 0x3, 0x3, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x1, 0x8, 0x3}, 0xe72}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x6, 0x1, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xb0, 0x20000000, 0x6, 0xf4c8}, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x304, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2a0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x11c, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x10}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xe7, 0x5, "00d6951a9a407d2f9a8a43e9be6a4d90531cd40aec839f481c41f317896879264f62645995b89d18d07bd0f7668dbcffeb069e812aff3f62d1a90fdb1eeef3d3b44afc3811a5825dc6dd807aa017a4adde0c439bdd40194cea74e56683e481cb2c5dce93c01964bf983b1fd29e1e71f7e078c1dc26f7ff5dc236216cf7424f6729f1421dd7a08a31fbf29f4fcf1b673503641ee614354971f0f663116cc39cfb1ec39b76098bcbbc862450772bb2aa92771af0b6ab0a5087dd87f02f3e3666fab05e6b0538d81c4fc649daab39f8adee292b25ec3941cd0a270645ca98e39151f7ac87"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7161}, {0x0, 0x6, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x7fff}, {0x7, 0xfffffffe, 0x64, 0x8001}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x8}, {{0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x3a7a}, {0x3, 0x6, 0x6, 0x7da2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x7ff}, {0x4, 0x6, 0x5, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc2e, 0x7, 0x34}, {{0x3, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xf4, 0x3, 0x0, 0x0, {{0x432, 0x0, 0xe1}, "6d9b2ee388eace1d8d78bbb3f96e4b86aad6d2210240c3dcb3f8a4224cb0eeb1fd9cd5e4acedcc3c65cea7234f5115a9b7748a91c61d213315f0061eef1842f175a787910b677c34dd048f6eed900fda0389124cb429e5b5836cd6741f17e103b87fb1ca4c154107b1a869ad3c7b6fee4951808e916eff79a11551e814ccaf80b1586a8ce7e7c8062bcd28db82f724ae555d7b6757afc3a07dfdfb8a1777169a63372d131bde88236140bb198b78382ee83def1a872c65f629a4ec1698ffeb1f7ba07ddcc5dc6785f8547a4532b9827fc7637ad73f1b1ebaa7dea5dc3f11be1c4bc5947680e2"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x829}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x48}, {0x2, 0x0, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x3}, {0x1, 0x1, 0x7, 0x4, 0x3, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x8000}, {0x6, 0x3, 0x0, "6779d1"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_EMATCHES={0x65c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x81}, "ec222055b96becc1ba68567a221d1046153ea217f190fb36e838e51c41ac5f9ec365dc35fcd01ec0d382e97e9238f21cd6038480a79509a10509a6618dc4cd34eedd56a8834c4285b76b6115af44e050957a069c3651126bd2900010b1d2cceac8b48f8487e494b135eb3b878347376956be178835edc290e2d38a4d006b599b923cb022b61905913dab4ed3df16a1ebcd94e86433326b57b77a305f6bbe8e959c8b4a45abd790a9b6edd75f5a789587"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0xc4b}, {0x2, 0x7, 0xfc01, 0x0, 0x8, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x4}, {0xfff, 0x9, 0x7, 0x1, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xcb3}, {0x0, 0x20a8c, 0x9, 0x0, 0x8, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0x2, 0x76, 0xfff, 0x1, 0x3, 0x2}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x10}, [@TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="6e402d87c0015533a8", @TCF_META_TYPE_VAR="936d82dc773f", @TCF_META_TYPE_VAR="ceecea8f33628f"]}, @TCA_EM_META_RVALUE={0x2f, 0x3, [@TCF_META_TYPE_VAR="e425ee7453234981a7b4", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9577d707cbd4ee634f", @TCF_META_TYPE_VAR="99286724991557c7", @TCF_META_TYPE_VAR="0648698c69278e2e"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x59, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x7867}, {0x7, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x40, 0x1, 0x10}, {0xe, 0x6, 0x1, 0x7, 0xc, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x100, 0x1, 0xd119}, {0x17a6483a, 0xee, 0x1d, 0x5, 0xb, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x9, 0x0, 0x0, {{0x5, 0x2, 0x261}, {0xda2, 0x2, 0x0, "d501"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x3}, {0x6, 0x80000001, 0x28, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xa0, 0x1, 0x0, 0x0, {{0x2, 0x4, 0xc5}, [@TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="22c56a6b59ebb5", @TCF_META_TYPE_VAR="5e134c0a86", @TCF_META_TYPE_VAR="45d536755e7759", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x3}, {0xa0}}}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ed4e0d3b160d", @TCF_META_TYPE_VAR="6245b42c3ff3a91b92", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='U3\x00', @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='q']}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="914db9562a28d1", @TCF_META_TYPE_VAR="9dcb3c07", @TCF_META_TYPE_VAR="7b99131b34964756d349"]}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9cb2cb"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xc9, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x80, 0x3, 0x8000}, {0x10001, 0x1ff, 0x10, 0x6}}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x4, 0x9, 0xc}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x8}, {0xd10, 0x3, 0x1, "25fe3d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x28c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x5, 0x2}, {0x3, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="0ab75036978c", @TCF_META_TYPE_VAR="3e78ca89", @TCF_META_TYPE_VAR="d5cf54d661b6", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0x3}, {0x0, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf, 0x2}, {0xa, 0xf, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x1a, 0x2}, {0x1, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="804563d1c4f82d", @TCF_META_TYPE_VAR="2400e0bbc2a86b26", @TCF_META_TYPE_VAR=',(', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="833fbe977231", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CONTAINER={0xf0, 0x1, 0x0, 0x0, {{0x6aa, 0x0, 0x2}, "0b0cd11207b584d8fd3cdc7729b784183d087f77076847cc1e6333c2b2561077dcc0b3b3abeca1272d506763d01ee2f75e448a8c2ad760c0a6c0cfd917411ed295067f833ed81c50709b9005e00a273e8ae2b9b92c748541383624af49dd4404700995b96426d7aec671660895a36db24f1ca25db97515db870bf3423112f4b9ff87f90460cf765c5dff70a636a3f1d9ecdc7b3ba4ea48aabb498641667fa46e27b5b73e96e6b34d653f2416330bd3df78c37a0f631b9e2d469f0a801986a8eb3b9c44fb1809e4ef0a98cd9ad18236f6c2bad72796acbafbfdd52fd5dc6858ef73ea"}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='IU~?', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c65578"]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="613a487d84bf", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="6e188feb5f11", @TCF_META_TYPE_VAR="8b2f768c0069", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="43f081fc"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x93, 0x2}, {0x5, 0xf9, 0x2}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="e39cdadcf1a9322f74f3"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x97, 0x1}, {0xb, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8ed7d3", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="5da72f4489db", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b3da63c061", @TCF_META_TYPE_VAR="a496d0f4"]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xa, 0x2, 0x4}, {0xfff, 0x3, 0x2, "633a0e"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0xffffffffffffffff, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x340, 0x3, 0x6f6c}, {0x7fff, 0x4191, 0x7, 0x7}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffe, 0x8, 0x8}, {0x2, 0x3, 0x4}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x39}, {0xffffffffffffffff, 0x6, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x80}, {0x3, 0x3, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x6, 0xfe000000, 0x0, 0x1, 0x7, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x7ff}, {0x5, 0x7, 0x0, "a81f1862c47e8b"}}}, @TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xfc00, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd07f, 0x7, 0x400}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xffff}, {0xffffffffffffffff, 0x0, 0x4}}}, @TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x4, 0xd, 0x1}}}, @TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x2a}, {0xec6, 0x2, 0x4, 0x1}}}]}]}, @TCA_CGROUP_EMATCHES={0x260, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x24c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x104, 0x1, 0x0, 0x0, {{0x4, 0x9, 0xe7a2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xd5, 0x5, "5101ddfb36e1982bcb68b5dfb1ba9f359758fc2285b509d5d90ef06f20df2cbfc2f12e6305b5c0109fd996830bb393d650f3016022ea8e5aba937e90a20bcf8cb11bc0cdf169b9696945dd7ed512c5ff45a45c479afc6d0f95c669f6a21ec0c3c632e4b1d8dd3a5bce44bfc94deae61189e463a15cc3e6337caabff65a066320175dce5f433fbc02d18398e3e2b3e04a5055eb6e3207c2c3382f2adfdfff26aaec78dd258310497103951d81f383a597b64b2c7c1a0355d3a7912791667f3d2f5f98d72d16dca19d97ad679e9e7d6bc8ef"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfffa, 0x1, 0x1}, {0xc9, 0x9, 0x1, 0x0, 0xa}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x5}, {0x4, 0x3, 0x3, 0x2, 0x4, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xfff8}, {0x8000, 0x3, 0x2, "ea8eb9"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff51, 0x3, 0x4}, {0x40, 0x4, 0x599, 0xa0000000}}}, @TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x1}, "edaec973445a62efe730cf8841c6d8d97df154c9fca0586386d84811ff682fe436002fee37c834eb98a4a59c411752da164d2964e449527220c282598cb39f537fdcdf2468c20abc2ab10dd16e5f7e1473368610069b4c9c1168b23329ffe84de180cbeb42"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x3ff}, {0x101, 0x1, 0xffffffff, 0x6a56293f}}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0xffff, 0x4, 0x100}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3}, {0xe, 0xf3}}}]}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x64}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7f, 0x0, 0x1}, {0x43, 0xfb}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="6ebc", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\'K', @TCF_META_TYPE_VAR='V0', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa]}]}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x0, 0xf, 0x6, {0x4, 0x1, 0xfffc, 0x0, 0x7, 0xe}, {0x1, 0x1, 0x2, 0x53, 0x8, 0x400}, 0xa, 0x1, 0x7fff}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xcf5}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}]}}]}, 0x34c8}}, 0x44050) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f0000000100)="d842f28b", 0x4) sendto$inet6(r7, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$l2tp6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a03000000000000000000020000000900010073797a300000000008000340000000010c000640000000000000000214000000110001"], 0x98}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r10, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c000380060001000000000006000300a0aa000006000300a3aa00000800010000000000"], 0x5c}}, 0x804) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="4000308014000400403a050c5bae9c54a5f6b6d713459a7a2000018008000100000000001400a53fd2ba0426f48203800800020002000000060001"], 0x5c}}, 0x0) 403.630555ms ago: executing program 0 (id=800): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (fail_nth: 24) 402.44235ms ago: executing program 1 (id=801): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x715a9d1e7a68469f, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0xb48, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xaf8, 0x8, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x6cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x404, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x10}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x2b}, {0x8, 0x2, @local}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xb48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @private0, 0xb8}, 0x1c) ppoll(&(0x7f0000000000)=[{r2, 0x2061}], 0x1, 0x0, &(0x7f0000000400)={[0x5]}, 0x8) 292.098206ms ago: executing program 0 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001900000020000180140002"], 0x34}}, 0x0) 263.514799ms ago: executing program 0 (id=803): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], &(0x7f0000000640)=""/4096, 0xc5, 0x1000, 0x0, 0x6a31513, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\b'], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 262.983052ms ago: executing program 1 (id=804): getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @remote, 0x0, 0x0, 0x1, 0x180, 0x7ff, 0x28}) 220.97ms ago: executing program 1 (id=805): r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = accept(0xffffffffffffffff, &(0x7f0000000280)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000000)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000014c0)=[@in6={0xa, 0x4e21, 0x90, @rand_addr=' \x01\x00', 0x7}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x6}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0xfff, @mcast1, 0xbeb1d79}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000300)="0d99", &(0x7f00000004c0)=""/4096}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000), &(0x7f0000000040)=""/128, &(0x7f00000000c0)="4daffe7e3410b628b06f2650e03a8f6b91d0aef410c331c30f4defed11ede7b61512bc0684bb1a0b4e5973a092e00fd067d2650c5be9d990911f69c08d4d214d442c2aef8df3d5bba55487e7ccd5dc075c5b13e64f78a2ae862f4323aa142d6b25a33adc3bea7694a927c1703e824cf2bb615e90cbac8b9a615f634de6e04c3fafd3ccf289b29fd222c646f88e1fb73454298a1c9bdb7bc56095ce0ab3e3c837e634caf553e8cb7df96f5dae8dddece3bd3bdeb12755b208b3a452c501f8607cea21829ed8eb0c60c78f1e1c706a9f2b32d1a892b4863e424fa0d717732ce86da0b947ffade7", &(0x7f00000001c0)="3735078bf77c206e4deaa2b8cf379bd3917d403525ce704fd74270629b171ce2acc856d305a0cd76224e8a2f233adb573e8857fffbe2ea652ed728157417d79bd51e2312ec684fc3d1", 0x8, r0, 0x4}, 0x38) r4 = socket$inet6(0xa, 0x3, 0x8000001) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x1000, 0x10001, @empty}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000000000a600000002000000a100000000736347fb3b100dc7ad"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r7, 0x9}, &(0x7f00000002c0)=0x8) 120.127592ms ago: executing program 0 (id=806): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x8e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @remote, @local, {[], {{0xfeff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a691315a46a6eed1657469c506cd3e85"}, @sack_perm={0x4, 0x2}, @generic={0x0, 0x8, "8bfbd54ae56d"}, @generic={0x0, 0x9, "3836eb47eb1bad"}, @timestamp={0x8, 0xa, 0x3, 0x4}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}]}}}}}}}}, 0x0) 86.433962ms ago: executing program 1 (id=807): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0514000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r7 = socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd2a, 0x25dfdbfe, 0x1, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) kernel console output (not intermixed with test programs): team_slave_0 added [ 54.587643][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.594759][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.602284][ T5238] bridge_slave_0: entered allmulticast mode [ 54.609267][ T5238] bridge_slave_0: entered promiscuous mode [ 54.618493][ T5232] team0: Port device team_slave_0 added [ 54.626713][ T5232] team0: Port device team_slave_1 added [ 54.633743][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.641098][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.648336][ T5240] bridge_slave_1: entered allmulticast mode [ 54.655637][ T5240] bridge_slave_1: entered promiscuous mode [ 54.673724][ T5236] team0: Port device team_slave_1 added [ 54.686033][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.693209][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.700454][ T5238] bridge_slave_1: entered allmulticast mode [ 54.707034][ T5238] bridge_slave_1: entered promiscuous mode [ 54.751472][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.758422][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.784924][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.808840][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.820539][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.827533][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.853549][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.867199][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.880215][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.889821][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.896779][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.924023][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.935439][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 54.947741][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.957490][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.964729][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.990813][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.045977][ T5240] team0: Port device team_slave_0 added [ 55.084779][ T5238] team0: Port device team_slave_0 added [ 55.092984][ T5240] team0: Port device team_slave_1 added [ 55.126545][ T5236] hsr_slave_0: entered promiscuous mode [ 55.133303][ T5236] hsr_slave_1: entered promiscuous mode [ 55.141661][ T5238] team0: Port device team_slave_1 added [ 55.186859][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.194471][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.221329][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.240828][ T5232] hsr_slave_0: entered promiscuous mode [ 55.247202][ T5232] hsr_slave_1: entered promiscuous mode [ 55.253540][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.261534][ T5232] Cannot create hsr debugfs directory [ 55.279483][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.286470][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.312618][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.339679][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.346663][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.372734][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.411880][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.419265][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.426557][ T5244] bridge_slave_0: entered allmulticast mode [ 55.432942][ T53] Bluetooth: hci0: command tx timeout [ 55.434119][ T5244] bridge_slave_0: entered promiscuous mode [ 55.445958][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.453115][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.479987][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.510812][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.517956][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.525514][ T5244] bridge_slave_1: entered allmulticast mode [ 55.532761][ T5244] bridge_slave_1: entered promiscuous mode [ 55.552247][ T5240] hsr_slave_0: entered promiscuous mode [ 55.558475][ T5240] hsr_slave_1: entered promiscuous mode [ 55.566295][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.574241][ T5240] Cannot create hsr debugfs directory [ 55.589327][ T53] Bluetooth: hci1: command tx timeout [ 55.631879][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.646604][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.659948][ T5238] hsr_slave_0: entered promiscuous mode [ 55.666201][ T5238] hsr_slave_1: entered promiscuous mode [ 55.672166][ T53] Bluetooth: hci2: command tx timeout [ 55.677899][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.685531][ T5238] Cannot create hsr debugfs directory [ 55.748721][ T53] Bluetooth: hci3: command tx timeout [ 55.753913][ T5244] team0: Port device team_slave_0 added [ 55.789909][ T5244] team0: Port device team_slave_1 added [ 55.828779][ T53] Bluetooth: hci4: command tx timeout [ 55.862703][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.870174][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.896690][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.920665][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.927752][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.955246][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.055112][ T5244] hsr_slave_0: entered promiscuous mode [ 56.064016][ T5244] hsr_slave_1: entered promiscuous mode [ 56.071595][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.079435][ T5244] Cannot create hsr debugfs directory [ 56.113428][ T5232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.127273][ T5232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.164817][ T5232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.187054][ T5232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.214385][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.233547][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.245426][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.254888][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.343691][ T5240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.353126][ T5240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.381424][ T5240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.393243][ T5240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.452230][ T5238] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.462209][ T5238] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.475800][ T5238] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.485313][ T5238] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.554600][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.577345][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.586738][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.596627][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.664839][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.711873][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.727036][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.734373][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.752620][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.778185][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.785349][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.845937][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.928409][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.935745][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.959680][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.974064][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.981327][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.022343][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.085498][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.108979][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.116089][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.132098][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.145086][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.152262][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.176882][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.186861][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.231915][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.239084][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.266622][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.301419][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.308648][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.367643][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.374769][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.406885][ T5232] veth0_vlan: entered promiscuous mode [ 57.416725][ T2483] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.423915][ T2483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.452529][ T5232] veth1_vlan: entered promiscuous mode [ 57.506504][ T5244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.517747][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.523644][ T53] Bluetooth: hci0: command tx timeout [ 57.568107][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.602825][ T5232] veth0_macvtap: entered promiscuous mode [ 57.635466][ T5232] veth1_macvtap: entered promiscuous mode [ 57.670548][ T53] Bluetooth: hci1: command tx timeout [ 57.728145][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.747783][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.757700][ T53] Bluetooth: hci2: command tx timeout [ 57.772907][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.809625][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.818385][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.827599][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.837174][ T53] Bluetooth: hci3: command tx timeout [ 57.909110][ T53] Bluetooth: hci4: command tx timeout [ 57.922151][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.050826][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.069760][ T5238] veth0_vlan: entered promiscuous mode [ 58.087454][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.090393][ T5236] veth0_vlan: entered promiscuous mode [ 58.105873][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.117734][ T5238] veth1_vlan: entered promiscuous mode [ 58.128694][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.183787][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.205754][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.211997][ T5236] veth1_vlan: entered promiscuous mode [ 58.233827][ T5238] veth0_macvtap: entered promiscuous mode [ 58.258333][ T5238] veth1_macvtap: entered promiscuous mode [ 58.277556][ T5244] veth0_vlan: entered promiscuous mode [ 58.300875][ T5232] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.340620][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.353627][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.370584][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.400162][ T5236] veth0_macvtap: entered promiscuous mode [ 58.429574][ T5244] veth1_vlan: entered promiscuous mode [ 58.436738][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.447687][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.459894][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.492645][ T5240] veth0_vlan: entered promiscuous mode [ 58.503474][ T5236] veth1_macvtap: entered promiscuous mode [ 58.517364][ T5309] tipc: Started in network mode [ 58.522833][ T5309] tipc: Node identity a2462c100e2a, cluster identity 4711 [ 58.531737][ T5309] tipc: Enabled bearer , priority 0 [ 58.566824][ T5309] tipc: Resetting bearer [ 58.581821][ T5238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.591109][ T5238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.600265][ T5238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.609486][ T5238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.626062][ T5244] veth0_macvtap: entered promiscuous mode [ 58.639661][ T5240] veth1_vlan: entered promiscuous mode [ 58.654770][ T5244] veth1_macvtap: entered promiscuous mode [ 58.665819][ T5308] tipc: Resetting bearer [ 59.530443][ T5307] tipc: Node number set to 2892770320 [ 59.600647][ T53] Bluetooth: hci0: command tx timeout [ 59.664933][ T5308] tipc: Disabling bearer [ 59.704270][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.716296][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.731451][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.742118][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.767874][ T53] Bluetooth: hci1: command tx timeout [ 59.778433][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.801790][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.812756][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.822762][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.833556][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.839396][ T53] Bluetooth: hci2: command tx timeout [ 59.845472][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.879696][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.888458][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.902851][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.912117][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.921074][ T53] Bluetooth: hci3: command tx timeout [ 59.924700][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.938433][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.939482][ T5311] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 59.960509][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.971878][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.981775][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.993244][ T53] Bluetooth: hci4: command tx timeout [ 59.998128][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.010545][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.026802][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.038236][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.049847][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.060445][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.072577][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.083099][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.094389][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.120665][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.136300][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.171765][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.182803][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.193096][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.202442][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.226609][ T5240] veth0_macvtap: entered promiscuous mode [ 60.235621][ T5313] netlink: 'syz.0.7': attribute type 29 has an invalid length. [ 60.260409][ T5240] veth1_macvtap: entered promiscuous mode [ 60.267848][ T5313] netlink: 'syz.0.7': attribute type 29 has an invalid length. [ 60.306278][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.324696][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.341686][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.346684][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.351828][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.369824][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.382312][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.393175][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.404627][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.415776][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.427620][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.471923][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.483669][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.495147][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.506472][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.517806][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.536359][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.546463][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.559861][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.571405][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.610983][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.631282][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.675019][ T5240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.689448][ T5240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.699899][ T5240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.709666][ T5240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.731738][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.744929][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.798949][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.806826][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.940188][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.956957][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.980163][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.992264][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.041608][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.074150][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.144106][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 61.166194][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 61.272367][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.323347][ T5343] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.335551][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.342958][ T5331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.378119][ T5342] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.437147][ T5342] x_tables: unsorted underflow at hook 3 [ 61.537684][ T5325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.547563][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.557275][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.567743][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.670639][ T53] Bluetooth: hci0: command tx timeout [ 61.692542][ T5359] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 61.772424][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.808392][ T5360] Zero length message leads to an empty skb [ 61.829984][ T53] Bluetooth: hci1: command tx timeout [ 61.836589][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.909679][ T53] Bluetooth: hci2: command tx timeout [ 61.970460][ T2905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.988954][ T53] Bluetooth: hci3: command tx timeout [ 62.070204][ T53] Bluetooth: hci4: command tx timeout [ 62.176737][ T5369] x_tables: unsorted underflow at hook 3 [ 62.389733][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.547659][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.790707][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24'. [ 62.851153][ T5391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.876556][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.139759][ T5385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.148677][ T5395] macvlan2: entered promiscuous mode [ 63.169003][ T5395] macvlan2: entered allmulticast mode [ 63.343275][ T5399] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 63.396935][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.414964][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.635487][ T5416] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 63.844384][ T5421] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.872709][ T5421] netlink: 'syz.2.33': attribute type 7 has an invalid length. [ 64.087395][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.095330][ T5424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.141347][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 64.165130][ T5424] bridge_slave_1: left allmulticast mode [ 64.183282][ T5424] bridge_slave_1: left promiscuous mode [ 64.202308][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.297763][ T5424] bridge_slave_0: left allmulticast mode [ 64.324913][ T5424] bridge_slave_0: left promiscuous mode [ 64.351411][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.418939][ T5429] x_tables: unsorted underflow at hook 3 [ 64.472281][ T5430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 64.526013][ T5427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.750421][ T5427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.767305][ T5435] warning: `syz.4.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.905779][ T5448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 66.709472][ C0] net_ratelimit: 9 callbacks suppressed [ 66.709493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.957452][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.969121][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.030251][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.048691][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.072497][ T5480] x_tables: unsorted underflow at hook 3 [ 67.783975][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 67.891682][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.900752][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.909730][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.923996][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.932525][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.952292][ T5507] Cannot find del_set index 4 as target [ 68.013679][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.206183][ T5511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.60'. [ 68.226272][ T5511] wg2: entered promiscuous mode [ 68.236341][ T5511] team0: Device wg2 is of different type [ 68.259284][ T5511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.60'. [ 68.581336][ T5531] netlink: 'syz.2.63': attribute type 15 has an invalid length. [ 68.984671][ T5538] No such timeout policy "syz0" [ 70.025587][ T5576] net veth1_virt_wifi virt_wifi0: Device is already in use. [ 70.038500][ T5578] netlink: 224 bytes leftover after parsing attributes in process `syz.3.77'. [ 70.180303][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 70.244297][ T5593] netlink: 48 bytes leftover after parsing attributes in process `syz.4.75'. [ 70.291345][ T5580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 70.375169][ T5601] FAULT_INJECTION: forcing a failure. [ 70.375169][ T5601] name failslab, interval 1, probability 0, space 0, times 1 [ 70.411505][ T5601] CPU: 1 UID: 0 PID: 5601 Comm: syz.3.85 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 70.421738][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.431839][ T5601] Call Trace: [ 70.435134][ T5601] [ 70.438057][ T5601] dump_stack_lvl+0x241/0x360 [ 70.442748][ T5601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.447947][ T5601] ? __pfx__printk+0x10/0x10 [ 70.452624][ T5601] ? __kmalloc_noprof+0xb0/0x400 [ 70.457572][ T5601] ? __pfx___might_resched+0x10/0x10 [ 70.462855][ T5601] should_fail_ex+0x3b0/0x4e0 [ 70.467532][ T5601] ? nla_strdup+0x9c/0x140 [ 70.471951][ T5601] should_failslab+0xac/0x100 [ 70.476715][ T5601] ? nla_strdup+0x9c/0x140 [ 70.481147][ T5601] __kmalloc_noprof+0xd8/0x400 [ 70.485906][ T5601] ? __kasan_kmalloc+0x98/0xb0 [ 70.490670][ T5601] nla_strdup+0x9c/0x140 [ 70.494906][ T5601] nf_tables_newflowtable+0xb5e/0x2480 [ 70.500375][ T5601] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 70.506264][ T5601] ? nfnl_pernet+0x23/0x240 [ 70.510774][ T5601] ? __pfx_lock_release+0x10/0x10 [ 70.515822][ T5601] ? __nla_parse+0x40/0x60 [ 70.520399][ T5601] nfnetlink_rcv+0x14dc/0x2ab0 [ 70.525429][ T5601] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 70.531120][ T5601] ? netlink_deliver_tap+0x2e/0x1b0 [ 70.536345][ T5601] ? skb_clone+0x240/0x390 [ 70.540792][ T5601] ? __pfx_lock_release+0x10/0x10 [ 70.545841][ T5601] ? netlink_deliver_tap+0x2e/0x1b0 [ 70.551054][ T5601] netlink_unicast+0x7f6/0x990 [ 70.555829][ T5601] ? __pfx_netlink_unicast+0x10/0x10 [ 70.561125][ T5601] ? __virt_addr_valid+0x183/0x530 [ 70.566236][ T5601] ? __check_object_size+0x48e/0x900 [ 70.571525][ T5601] netlink_sendmsg+0x8e4/0xcb0 [ 70.576302][ T5601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.581594][ T5601] ? aa_sock_msg_perm+0x91/0x160 [ 70.586528][ T5601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.591809][ T5601] __sock_sendmsg+0x221/0x270 [ 70.596492][ T5601] ____sys_sendmsg+0x52a/0x7e0 [ 70.601257][ T5601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.606551][ T5601] __sys_sendmsg+0x292/0x380 [ 70.611135][ T5601] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.616292][ T5601] ? __pfx_vfs_write+0x10/0x10 [ 70.621101][ T5601] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.627432][ T5601] ? do_syscall_64+0x100/0x230 [ 70.632201][ T5601] ? do_syscall_64+0xb6/0x230 [ 70.636876][ T5601] do_syscall_64+0xf3/0x230 [ 70.641377][ T5601] ? clear_bhb_loop+0x35/0x90 [ 70.646050][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.651941][ T5601] RIP: 0033:0x7fd08d37dff9 [ 70.656361][ T5601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.675968][ T5601] RSP: 002b:00007fd08e0c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.684391][ T5601] RAX: ffffffffffffffda RBX: 00007fd08d535f80 RCX: 00007fd08d37dff9 [ 70.692444][ T5601] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 70.700412][ T5601] RBP: 00007fd08e0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 70.708808][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.716795][ T5601] R13: 0000000000000000 R14: 00007fd08d535f80 R15: 00007fffd510b9f8 [ 70.724792][ T5601] [ 70.786686][ T5604] trusted_key: syz.2.88 sent an empty control message without MSG_MORE. [ 71.709406][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.715849][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.755108][ T5307] net_ratelimit: 7 callbacks suppressed [ 71.755128][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.769122][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.270185][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.112255][ T5626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.92'. [ 73.369682][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.467547][ T5641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'. [ 73.540093][ T5641] wg2: entered promiscuous mode [ 73.559284][ T5641] team0: Device wg2 is of different type [ 73.664327][ T5653] x_tables: unsorted underflow at hook 3 [ 73.694257][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 74.229053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.241945][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.250427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.263102][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.272067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.389676][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.619270][ T5675] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.109'. [ 74.649984][ T5675] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 74.882981][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 75.101674][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 75.129826][ T5694] bridge0: entered promiscuous mode [ 75.160354][ T5697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.117'. [ 76.121888][ T5684] bridge0: left promiscuous mode [ 76.850075][ T25] cfg80211: failed to load regulatory.db [ 77.274594][ T5280] net_ratelimit: 2 callbacks suppressed [ 77.274615][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.288979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.393064][ T5750] x_tables: unsorted underflow at hook 3 [ 77.591038][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.715263][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.119994][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 78.194550][ T5791] netlink: 336 bytes leftover after parsing attributes in process `syz.3.133'. [ 78.209834][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.252749][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.283912][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.304920][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.357942][ T5788] netlink: 52 bytes leftover after parsing attributes in process `syz.3.133'. [ 78.560760][ T5809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.136'. [ 78.629480][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.996590][ T5837] netlink: 'syz.0.147': attribute type 2 has an invalid length. [ 79.167500][ T5845] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 80.077365][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 80.492434][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 80.494229][ T5890] netlink: 'syz.1.165': attribute type 10 has an invalid length. [ 80.545379][ T5896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.554065][ T5890] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 80.610616][ T5892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.096787][ T5920] FAULT_INJECTION: forcing a failure. [ 81.096787][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 81.110022][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.1.175 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 81.120560][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.130993][ T5920] Call Trace: [ 81.134296][ T5920] [ 81.137241][ T5920] dump_stack_lvl+0x241/0x360 [ 81.141982][ T5920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.147211][ T5920] ? __pfx__printk+0x10/0x10 [ 81.152019][ T5920] ? __pfx_lock_release+0x10/0x10 [ 81.157070][ T5920] ? switchdev_handle_fdb_event_to_device+0x3e/0x70 [ 81.163671][ T5920] should_fail_ex+0x3b0/0x4e0 [ 81.168366][ T5920] should_failslab+0xac/0x100 [ 81.173148][ T5920] ? __alloc_skb+0x1c3/0x440 [ 81.177859][ T5920] kmem_cache_alloc_node_noprof+0x71/0x320 [ 81.183705][ T5920] ? br_switchdev_fdb_notify+0x43d/0x530 [ 81.189382][ T5920] __alloc_skb+0x1c3/0x440 [ 81.193945][ T5920] ? __pfx_br_switchdev_fdb_notify+0x10/0x10 [ 81.200057][ T5920] ? __pfx___alloc_skb+0x10/0x10 [ 81.205006][ T5920] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.210994][ T5920] fdb_notify+0xa8/0x170 [ 81.215256][ T5920] fdb_delete+0xf49/0x1220 [ 81.219717][ T5920] ? __pfx_br_vlan_lookup+0x10/0x10 [ 81.224937][ T5920] ? fdb_delete+0x3b0/0x1220 [ 81.229553][ T5920] ? __pfx_fdb_delete+0x10/0x10 [ 81.234453][ T5920] br_fdb_find_delete_local+0x123/0x140 [ 81.240028][ T5920] nbp_vlan_delete+0x17a/0x210 [ 81.244829][ T5920] br_vlan_info+0x16a/0x510 [ 81.249349][ T5920] ? __pfx_br_vlan_info+0x10/0x10 [ 81.254459][ T5920] ? __lock_acquire+0x1384/0x2050 [ 81.259508][ T5920] br_process_vlan_info+0x307/0xbf0 [ 81.264733][ T5920] ? __pfx_br_process_vlan_info+0x10/0x10 [ 81.270500][ T5920] br_afspec+0x3ce/0x640 [ 81.274794][ T5920] ? __pfx_br_afspec+0x10/0x10 [ 81.279560][ T5920] ? rcu_is_watching+0x15/0xb0 [ 81.284343][ T5920] br_dellink+0x249/0x330 [ 81.288856][ T5920] ? __pfx_br_dellink+0x10/0x10 [ 81.293727][ T5920] ? mutex_is_locked+0x12/0x50 [ 81.298618][ T5920] rtnl_bridge_dellink+0x36f/0x610 [ 81.303843][ T5920] ? __pfx_rtnl_bridge_dellink+0x10/0x10 [ 81.309511][ T5920] rtnetlink_rcv_msg+0x73f/0xcf0 [ 81.314459][ T5920] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 81.319615][ T5920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.325638][ T5920] ? ref_tracker_free+0x643/0x7e0 [ 81.330710][ T5920] netlink_rcv_skb+0x1e3/0x430 [ 81.335609][ T5920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.341090][ T5920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.346412][ T5920] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.352006][ T5920] netlink_unicast+0x7f6/0x990 [ 81.356821][ T5920] ? __pfx_netlink_unicast+0x10/0x10 [ 81.362236][ T5920] ? __virt_addr_valid+0x183/0x530 [ 81.367394][ T5920] ? __check_object_size+0x48e/0x900 [ 81.372730][ T5920] netlink_sendmsg+0x8e4/0xcb0 [ 81.377726][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.383052][ T5920] ? aa_sock_msg_perm+0x91/0x160 [ 81.388078][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.393394][ T5920] __sock_sendmsg+0x221/0x270 [ 81.398091][ T5920] ____sys_sendmsg+0x52a/0x7e0 [ 81.402885][ T5920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.408213][ T5920] __sys_sendmsg+0x292/0x380 [ 81.413363][ T5920] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.418516][ T5920] ? __pfx_vfs_write+0x10/0x10 [ 81.423339][ T5920] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.429898][ T5920] ? do_syscall_64+0x100/0x230 [ 81.434966][ T5920] ? do_syscall_64+0xb6/0x230 [ 81.440390][ T5920] do_syscall_64+0xf3/0x230 [ 81.445619][ T5920] ? clear_bhb_loop+0x35/0x90 [ 81.450679][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.458637][ T5920] RIP: 0033:0x7f57f877dff9 [ 81.463242][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.482966][ T5920] RSP: 002b:00007f57f9578038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.491570][ T5920] RAX: ffffffffffffffda RBX: 00007f57f8935f80 RCX: 00007f57f877dff9 [ 81.499658][ T5920] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 81.507835][ T5920] RBP: 00007f57f9578090 R08: 0000000000000000 R09: 0000000000000000 [ 81.516356][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.524456][ T5920] R13: 0000000000000000 R14: 00007f57f8935f80 R15: 00007fffa90461e8 [ 81.532922][ T5920] [ 81.640837][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 81.732354][ T5926] pim6reg1: entered promiscuous mode [ 81.758814][ T5926] pim6reg1: entered allmulticast mode [ 81.882436][ T5947] FAULT_INJECTION: forcing a failure. [ 81.882436][ T5947] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.897947][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.2.181 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 81.908238][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.918413][ T5947] Call Trace: [ 81.921726][ T5947] [ 81.924676][ T5947] dump_stack_lvl+0x241/0x360 [ 81.929659][ T5947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.934901][ T5947] ? __pfx__printk+0x10/0x10 [ 81.939557][ T5947] ? __pfx_lock_release+0x10/0x10 [ 81.944619][ T5947] should_fail_ex+0x3b0/0x4e0 [ 81.949327][ T5947] _copy_from_user+0x2f/0xe0 [ 81.953936][ T5947] do_sock_getsockopt+0x1d1/0x7e0 [ 81.958985][ T5947] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 81.964638][ T5947] ? __fget_files+0x3f3/0x470 [ 81.969333][ T5947] ? __fget_files+0x29/0x470 [ 81.973953][ T5947] __sys_getsockopt+0x267/0x330 [ 81.978832][ T5947] ? __pfx___sys_getsockopt+0x10/0x10 [ 81.984226][ T5947] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.990588][ T5947] ? do_syscall_64+0x100/0x230 [ 81.995644][ T5947] __x64_sys_getsockopt+0xb5/0xd0 [ 82.000696][ T5947] do_syscall_64+0xf3/0x230 [ 82.005482][ T5947] ? clear_bhb_loop+0x35/0x90 [ 82.010183][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.016114][ T5947] RIP: 0033:0x7ff19db7dff9 [ 82.020548][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.040441][ T5947] RSP: 002b:00007ff19e8c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 82.048992][ T5947] RAX: ffffffffffffffda RBX: 00007ff19dd36058 RCX: 00007ff19db7dff9 [ 82.057000][ T5947] RDX: 000000000000000f RSI: 0000000000000084 RDI: 0000000000000003 [ 82.065090][ T5947] RBP: 00007ff19e8c8090 R08: 0000000020000180 R09: 0000000000000000 [ 82.073198][ T5947] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000001 [ 82.081208][ T5947] R13: 0000000000000001 R14: 00007ff19dd36058 R15: 00007ffdb0fa1fd8 [ 82.089227][ T5947] [ 82.567168][ T62] net_ratelimit: 11 callbacks suppressed [ 82.567225][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.581621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.800377][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.852026][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 82.921275][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.002830][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.356371][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.364961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.712745][ T6014] tipc: Started in network mode [ 83.720684][ T6014] tipc: Node identity ca316db3f48c, cluster identity 4711 [ 83.756107][ T6014] tipc: Enabled bearer , priority 0 [ 83.830544][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.895713][ T6016] tipc: Resetting bearer [ 84.038083][ T12] tipc: Resetting bearer [ 84.051458][ T6013] tipc: Resetting bearer [ 84.136902][ T6024] IPv6: addrconf: prefix option has invalid lifetime [ 84.343898][ T6027] FAULT_INJECTION: forcing a failure. [ 84.343898][ T6027] name failslab, interval 1, probability 0, space 0, times 0 [ 84.356727][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.4.205 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 84.366992][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.377078][ T6027] Call Trace: [ 84.380387][ T6027] [ 84.383347][ T6027] dump_stack_lvl+0x241/0x360 [ 84.388067][ T6027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.393299][ T6027] ? __pfx__printk+0x10/0x10 [ 84.397926][ T6027] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 84.404477][ T6027] ? __pfx___might_resched+0x10/0x10 [ 84.409791][ T6027] should_fail_ex+0x3b0/0x4e0 [ 84.414481][ T6027] should_failslab+0xac/0x100 [ 84.419266][ T6027] ? __alloc_skb+0x1c3/0x440 [ 84.423907][ T6027] kmem_cache_alloc_node_noprof+0x71/0x320 [ 84.429765][ T6027] __alloc_skb+0x1c3/0x440 [ 84.434288][ T6027] ? __pfx___alloc_skb+0x10/0x10 [ 84.439254][ T6027] ? netlink_autobind+0xd6/0x2f0 [ 84.444191][ T6027] ? netlink_autobind+0x2b0/0x2f0 [ 84.449210][ T6027] netlink_sendmsg+0x638/0xcb0 [ 84.454009][ T6027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.459300][ T6027] ? aa_sock_msg_perm+0x91/0x160 [ 84.464325][ T6027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.469637][ T6027] __sock_sendmsg+0x221/0x270 [ 84.474317][ T6027] ____sys_sendmsg+0x52a/0x7e0 [ 84.479087][ T6027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.484374][ T6027] __sys_sendmsg+0x292/0x380 [ 84.488962][ T6027] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.494074][ T6027] ? __pfx_vfs_write+0x10/0x10 [ 84.498854][ T6027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.505181][ T6027] ? do_syscall_64+0x100/0x230 [ 84.509947][ T6027] ? do_syscall_64+0xb6/0x230 [ 84.514635][ T6027] do_syscall_64+0xf3/0x230 [ 84.519230][ T6027] ? clear_bhb_loop+0x35/0x90 [ 84.524270][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.530717][ T6027] RIP: 0033:0x7fcfa1b7dff9 [ 84.535243][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.555044][ T6027] RSP: 002b:00007fcfa291c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.563564][ T6027] RAX: ffffffffffffffda RBX: 00007fcfa1d35f80 RCX: 00007fcfa1b7dff9 [ 84.571623][ T6027] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 84.579761][ T6027] RBP: 00007fcfa291c090 R08: 0000000000000000 R09: 0000000000000000 [ 84.587809][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.595855][ T6027] R13: 0000000000000000 R14: 00007fcfa1d35f80 R15: 00007fff3d936558 [ 84.604013][ T6027] [ 84.878756][ T5280] tipc: Node number set to 1052601779 [ 84.929604][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.001928][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.374544][ T6013] tipc: Disabling bearer [ 86.393089][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.401868][ T6043] netlink: 'syz.2.208': attribute type 10 has an invalid length. [ 86.416796][ T6043] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 86.515643][ T6052] netlink: 156 bytes leftover after parsing attributes in process `syz.3.213'. [ 86.774240][ T6071] netlink: 'syz.3.222': attribute type 5 has an invalid length. [ 86.801583][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 87.339141][ T6095] netlink: 14 bytes leftover after parsing attributes in process `syz.3.231'. [ 87.577110][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'. [ 87.598102][ T6109] team0: Device wg2 is of different type [ 87.618334][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 87.816463][ T6125] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 87.977173][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 88.024022][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 88.089923][ T25] net_ratelimit: 5 callbacks suppressed [ 88.089943][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.161930][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 88.205216][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 88.246703][ T6136] team0: Device gtp0 is of different type [ 88.308921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.317272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.329725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.403489][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 88.680989][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.689477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.114275][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.133735][ T6162] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 89.612785][ T6177] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 89.623581][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.632083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.967923][ T6195] netlink: 'syz.4.264': attribute type 15 has an invalid length. [ 90.505862][ T6218] x_tables: unsorted underflow at hook 3 [ 90.761395][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.985044][ T6240] wg2: entered promiscuous mode [ 90.992116][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.995635][ T6240] team0: Device wg2 is of different type [ 91.008432][ T6241] FAULT_INJECTION: forcing a failure. [ 91.008432][ T6241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.040147][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.0.278 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 91.050632][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.060806][ T6241] Call Trace: [ 91.064549][ T6241] [ 91.067507][ T6241] dump_stack_lvl+0x241/0x360 [ 91.072242][ T6241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.077499][ T6241] ? __pfx__printk+0x10/0x10 [ 91.082135][ T6241] ? __pfx_lock_release+0x10/0x10 [ 91.087197][ T6241] ? sctp_addr_id2transport+0x722/0x8b0 [ 91.092783][ T6241] should_fail_ex+0x3b0/0x4e0 [ 91.097929][ T6241] _copy_to_user+0x2f/0xb0 [ 91.102383][ T6241] sctp_getsockopt_peer_addr_info+0x47f/0x680 [ 91.108915][ T6241] ? __pfx_sctp_getsockopt_peer_addr_info+0x10/0x10 [ 91.115533][ T6241] ? sctp_getsockopt+0x13a/0xbb0 [ 91.120497][ T6241] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 91.126291][ T6241] sctp_getsockopt+0x956/0xbb0 [ 91.131094][ T6241] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 91.137161][ T6241] do_sock_getsockopt+0x3c4/0x7e0 [ 91.142201][ T6241] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 91.147752][ T6241] ? __fget_files+0x3f3/0x470 [ 91.152863][ T6241] ? __fget_files+0x29/0x470 [ 91.157457][ T6241] __sys_getsockopt+0x267/0x330 [ 91.162311][ T6241] ? __pfx___sys_getsockopt+0x10/0x10 [ 91.167679][ T6241] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.174052][ T6241] __x64_sys_getsockopt+0xb5/0xd0 [ 91.179096][ T6241] do_syscall_64+0xf3/0x230 [ 91.183609][ T6241] ? clear_bhb_loop+0x35/0x90 [ 91.188306][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.194251][ T6241] RIP: 0033:0x7f9b43b7dff9 [ 91.198701][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.218339][ T6241] RSP: 002b:00007f9b448ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 91.226761][ T6241] RAX: ffffffffffffffda RBX: 00007f9b43d36058 RCX: 00007f9b43b7dff9 [ 91.234821][ T6241] RDX: 000000000000000f RSI: 0000000000000084 RDI: 0000000000000003 [ 91.242786][ T6241] RBP: 00007f9b448ea090 R08: 0000000020000180 R09: 0000000000000000 [ 91.250752][ T6241] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000001 [ 91.258942][ T6241] R13: 0000000000000001 R14: 00007f9b43d36058 R15: 00007ffd7abdee68 [ 91.267051][ T6241] [ 91.698205][ T6256] __nla_validate_parse: 5 callbacks suppressed [ 91.698225][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'. [ 91.731795][ T6256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.809856][ T6256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.818268][ T6261] vxcan0: entered promiscuous mode [ 91.825422][ T6261] vlan2: entered promiscuous mode [ 91.841697][ T6261] vxcan0: left promiscuous mode [ 92.165427][ T6275] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.288'. [ 92.733075][ T6305] netlink: 'syz.2.297': attribute type 7 has an invalid length. [ 93.106387][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'. [ 93.133731][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.214305][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.267290][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 93.290555][ T6327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.351055][ T6327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.378257][ T25] net_ratelimit: 11 callbacks suppressed [ 93.378274][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.402832][ T6329] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 93.430905][ T2905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.439366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.542801][ T6335] FAULT_INJECTION: forcing a failure. [ 93.542801][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 93.557501][ T6335] CPU: 1 UID: 0 PID: 6335 Comm: syz.0.308 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 93.567777][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.577843][ T6335] Call Trace: [ 93.581231][ T6335] [ 93.584176][ T6335] dump_stack_lvl+0x241/0x360 [ 93.588865][ T6335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.594086][ T6335] ? __pfx__printk+0x10/0x10 [ 93.598683][ T6335] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 93.604686][ T6335] ? __pfx___might_resched+0x10/0x10 [ 93.609984][ T6335] should_fail_ex+0x3b0/0x4e0 [ 93.614675][ T6335] ? sock_alloc_inode+0x28/0xc0 [ 93.619537][ T6335] should_failslab+0xac/0x100 [ 93.624321][ T6335] ? sock_alloc_inode+0x28/0xc0 [ 93.629176][ T6335] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 93.634932][ T6335] sock_alloc_inode+0x28/0xc0 [ 93.639728][ T6335] ? __pfx_sock_alloc_inode+0x10/0x10 [ 93.645382][ T6335] new_inode_pseudo+0x69/0x1a0 [ 93.650153][ T6335] do_accept+0x168/0x6b0 [ 93.654424][ T6335] ? __pfx_do_accept+0x10/0x10 [ 93.659238][ T6335] __sys_accept4+0x11e/0x1c0 [ 93.663921][ T6335] ? __pfx___sys_accept4+0x10/0x10 [ 93.669062][ T6335] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.675390][ T6335] ? do_syscall_64+0x100/0x230 [ 93.680150][ T6335] __x64_sys_accept+0x7d/0x90 [ 93.684824][ T6335] do_syscall_64+0xf3/0x230 [ 93.689319][ T6335] ? clear_bhb_loop+0x35/0x90 [ 93.693996][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.699885][ T6335] RIP: 0033:0x7f9b43b7dff9 [ 93.704297][ T6335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.723997][ T6335] RSP: 002b:00007f9b4490b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 93.732502][ T6335] RAX: ffffffffffffffda RBX: 00007f9b43d35f80 RCX: 00007f9b43b7dff9 [ 93.740471][ T6335] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 93.748435][ T6335] RBP: 00007f9b4490b090 R08: 0000000000000000 R09: 0000000000000000 [ 93.756402][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.764377][ T6335] R13: 0000000000000000 R14: 00007f9b43d35f80 R15: 00007ffd7abdee68 [ 93.772357][ T6335] [ 93.960469][ T6347] netlink: 'syz.0.314': attribute type 15 has an invalid length. [ 94.121062][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.128565][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.274474][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.283016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.389381][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.515074][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.324'. [ 94.537116][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.555727][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.564221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.587805][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.355927][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.365465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.873762][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'. [ 95.877949][ T6431] netlink: 'syz.3.336': attribute type 7 has an invalid length. [ 95.934649][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.979736][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.485131][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.342'. [ 96.512037][ T6440] wg2: entered promiscuous mode [ 96.545400][ T6440] team0: Device wg2 is of different type [ 96.601164][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 96.963128][ T6450] netlink: 'syz.4.344': attribute type 7 has an invalid length. [ 97.282051][ T6460] dummy0: entered promiscuous mode [ 97.396720][ T6462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.559233][ T6459] dummy0: left promiscuous mode [ 98.407924][ T8] net_ratelimit: 5 callbacks suppressed [ 98.407944][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.422946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.437459][ T6494] FAULT_INJECTION: forcing a failure. [ 98.437459][ T6494] name failslab, interval 1, probability 0, space 0, times 0 [ 98.464105][ T6494] CPU: 1 UID: 0 PID: 6494 Comm: syz.4.356 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 98.474419][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.484524][ T6494] Call Trace: [ 98.487828][ T6494] [ 98.490778][ T6494] dump_stack_lvl+0x241/0x360 [ 98.495494][ T6494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.500745][ T6494] ? __pfx__printk+0x10/0x10 [ 98.505471][ T6494] ? fs_reclaim_acquire+0x93/0x140 [ 98.510608][ T6494] ? __pfx___might_resched+0x10/0x10 [ 98.516022][ T6494] should_fail_ex+0x3b0/0x4e0 [ 98.520865][ T6494] ? security_inode_alloc+0x32/0x310 [ 98.527269][ T6494] should_failslab+0xac/0x100 [ 98.532102][ T6494] ? security_inode_alloc+0x32/0x310 [ 98.537538][ T6494] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 98.543065][ T6494] security_inode_alloc+0x32/0x310 [ 98.548217][ T6494] inode_init_always+0x966/0xcb0 [ 98.553192][ T6494] ? __pfx_sock_alloc_inode+0x10/0x10 [ 98.558688][ T6494] new_inode_pseudo+0x9e/0x1a0 [ 98.563491][ T6494] do_accept+0x168/0x6b0 [ 98.568037][ T6494] ? __pfx_do_accept+0x10/0x10 [ 98.572867][ T6494] __sys_accept4+0x11e/0x1c0 [ 98.577575][ T6494] ? __pfx___sys_accept4+0x10/0x10 [ 98.582716][ T6494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.589086][ T6494] __x64_sys_accept+0x7d/0x90 [ 98.593805][ T6494] do_syscall_64+0xf3/0x230 [ 98.598333][ T6494] ? clear_bhb_loop+0x35/0x90 [ 98.603035][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.608958][ T6494] RIP: 0033:0x7fcfa1b7dff9 [ 98.613396][ T6494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.633026][ T6494] RSP: 002b:00007fcfa291c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 98.641477][ T6494] RAX: ffffffffffffffda RBX: 00007fcfa1d35f80 RCX: 00007fcfa1b7dff9 [ 98.649749][ T6494] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 98.657844][ T6494] RBP: 00007fcfa291c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.665846][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.673933][ T6494] R13: 0000000000000000 R14: 00007fcfa1d35f80 R15: 00007fff3d936558 [ 98.681957][ T6494] [ 98.690264][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.049287][ T6512] netlink: 'syz.4.358': attribute type 7 has an invalid length. [ 99.133327][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'. [ 99.164062][ T6514] team0: Device wg2 is of different type [ 99.191215][ T2905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.199894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.210121][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.363'. [ 99.349905][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.793006][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.207895][ T6536] can: request_module (can-proto-0) failed. [ 100.474654][ T2905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.484449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.517904][ T6551] Unsupported ieee802154 address type: 0 [ 100.753309][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 100.786994][ T6557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.833751][ T6557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.869280][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.949229][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.377'. [ 101.092953][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.139726][ T6567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 101.305993][ T6567] wg2: entered promiscuous mode [ 101.344277][ T6567] team0: Device wg2 is of different type [ 101.380548][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'. [ 101.503940][ T6576] netlink: 'syz.0.381': attribute type 7 has an invalid length. [ 102.217577][ T6602] netlink: 44 bytes leftover after parsing attributes in process `syz.0.389'. [ 102.255226][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.389'. [ 102.353340][ T6605] tun0: tun_chr_ioctl cmd 35111 [ 102.569181][ T6614] netlink: 'syz.1.393': attribute type 15 has an invalid length. [ 102.611261][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 102.653566][ T6613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.720791][ T6613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.940075][ T6623] FAULT_INJECTION: forcing a failure. [ 102.940075][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 102.963056][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.1.397 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 102.973367][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.983473][ T6623] Call Trace: [ 102.986776][ T6623] [ 102.989815][ T6623] dump_stack_lvl+0x241/0x360 [ 102.994536][ T6623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.999776][ T6623] ? __pfx__printk+0x10/0x10 [ 103.004400][ T6623] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 103.010392][ T6623] ? __pfx___might_resched+0x10/0x10 [ 103.015724][ T6623] should_fail_ex+0x3b0/0x4e0 [ 103.020445][ T6623] ? __d_alloc+0x31/0x700 [ 103.024813][ T6623] should_failslab+0xac/0x100 [ 103.029609][ T6623] ? __d_alloc+0x31/0x700 [ 103.034053][ T6623] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 103.039895][ T6623] __d_alloc+0x31/0x700 [ 103.044083][ T6623] d_alloc_pseudo+0x1f/0xb0 [ 103.048613][ T6623] alloc_file_pseudo+0x123/0x290 [ 103.053604][ T6623] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 103.059097][ T6623] ? evm_inode_alloc_security+0x40/0xb0 [ 103.064680][ T6623] ? security_inode_alloc+0xcd/0x310 [ 103.070005][ T6623] ? inode_init_always+0x97c/0xcb0 [ 103.075179][ T6623] sock_alloc_file+0xb8/0x280 [ 103.079894][ T6623] do_accept+0x3b2/0x6b0 [ 103.084262][ T6623] ? __pfx_do_accept+0x10/0x10 [ 103.089164][ T6623] __sys_accept4+0x11e/0x1c0 [ 103.093790][ T6623] ? __pfx___sys_accept4+0x10/0x10 [ 103.098950][ T6623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.105321][ T6623] ? do_syscall_64+0x100/0x230 [ 103.110209][ T6623] __x64_sys_accept+0x7d/0x90 [ 103.114935][ T6623] do_syscall_64+0xf3/0x230 [ 103.119474][ T6623] ? clear_bhb_loop+0x35/0x90 [ 103.124191][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.130226][ T6623] RIP: 0033:0x7f57f877dff9 [ 103.134669][ T6623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.154372][ T6623] RSP: 002b:00007f57f9578038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 103.162888][ T6623] RAX: ffffffffffffffda RBX: 00007f57f8935f80 RCX: 00007f57f877dff9 [ 103.170855][ T6623] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 103.178836][ T6623] RBP: 00007f57f9578090 R08: 0000000000000000 R09: 0000000000000000 [ 103.187105][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.195095][ T6623] R13: 0000000000000000 R14: 00007f57f8935f80 R15: 00007fffa90461e8 [ 103.203196][ T6623] [ 103.226800][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.398'. [ 103.237409][ T6625] team0: Device wg2 is of different type [ 103.509266][ T8] net_ratelimit: 241 callbacks suppressed [ 103.509287][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.523803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.858554][ T6642] FAULT_INJECTION: forcing a failure. [ 103.858554][ T6642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.904675][ T6642] CPU: 0 UID: 0 PID: 6642 Comm: syz.0.405 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 103.915163][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.925264][ T6642] Call Trace: [ 103.929119][ T6642] [ 103.932087][ T6642] dump_stack_lvl+0x241/0x360 [ 103.936785][ T6642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.941983][ T6642] ? __pfx__printk+0x10/0x10 [ 103.946582][ T6642] ? __pfx_lock_release+0x10/0x10 [ 103.951615][ T6642] ? rcu_is_watching+0x15/0xb0 [ 103.956382][ T6642] should_fail_ex+0x3b0/0x4e0 [ 103.961101][ T6642] _copy_from_iter+0x1ed/0x1d60 [ 103.966048][ T6642] ? alloc_pages_mpol_noprof+0x417/0x680 [ 103.971709][ T6642] ? __pfx__copy_from_iter+0x10/0x10 [ 103.977102][ T6642] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 103.983121][ T6642] ? alloc_pages_noprof+0xef/0x170 [ 103.988267][ T6642] ? page_copy_sane+0x46/0x260 [ 103.993049][ T6642] copy_page_from_iter+0x7a/0x100 [ 103.998115][ T6642] tun_get_user+0x2046/0x47e0 [ 104.002820][ T6642] ? tun_get_user+0x871/0x47e0 [ 104.007685][ T6642] ? __lock_acquire+0x1384/0x2050 [ 104.012724][ T6642] ? __pfx_tun_get_user+0x10/0x10 [ 104.017774][ T6642] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.023246][ T6642] ? tun_get+0x1e/0x2f0 [ 104.027404][ T6642] ? __pfx_lock_release+0x10/0x10 [ 104.032437][ T6642] ? tun_get+0x1e/0x2f0 [ 104.036588][ T6642] ? tun_get+0x27d/0x2f0 [ 104.040835][ T6642] tun_chr_write_iter+0x10d/0x1f0 [ 104.045859][ T6642] vfs_write+0xa6d/0xc90 [ 104.050112][ T6642] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 104.055785][ T6642] ? __pfx_vfs_write+0x10/0x10 [ 104.060592][ T6642] ? fdget_pos+0x19a/0x320 [ 104.065118][ T6642] ksys_write+0x183/0x2b0 [ 104.069484][ T6642] ? __pfx_ksys_write+0x10/0x10 [ 104.074416][ T6642] ? do_syscall_64+0x100/0x230 [ 104.079195][ T6642] ? do_syscall_64+0xb6/0x230 [ 104.083876][ T6642] do_syscall_64+0xf3/0x230 [ 104.088466][ T6642] ? clear_bhb_loop+0x35/0x90 [ 104.093141][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.099044][ T6642] RIP: 0033:0x7f9b43b7cadf [ 104.103459][ T6642] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 104.123156][ T6642] RSP: 002b:00007f9b4490b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 104.131573][ T6642] RAX: ffffffffffffffda RBX: 00007f9b43d35f80 RCX: 00007f9b43b7cadf [ 104.139628][ T6642] RDX: 0000000000000046 RSI: 0000000020000440 RDI: 00000000000000c8 [ 104.147593][ T6642] RBP: 00007f9b4490b090 R08: 0000000000000000 R09: 0000000000000000 [ 104.155587][ T6642] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 104.163578][ T6642] R13: 0000000000000000 R14: 00007f9b43d35f80 R15: 00007ffd7abdee68 [ 104.171571][ T6642] [ 104.177152][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.255199][ T6646] __nla_validate_parse: 1 callbacks suppressed [ 104.255221][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 104.387349][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.396854][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.442498][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.454252][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 104.473218][ T6653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.409'. [ 104.621854][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'. [ 104.648657][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 104.661705][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.413'. [ 104.680172][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.690515][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 104.724890][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.949224][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.957629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.189680][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.719652][ T6683] 0·: renamed from hsr_slave_1 (while UP) [ 105.734296][ T6683] 0·: entered allmulticast mode [ 105.740443][ T6683] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 106.019708][ T6694] team0: Device wg2 is of different type [ 106.129839][ T6699] netlink: 'syz.4.426': attribute type 6 has an invalid length. [ 106.230938][ T5233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.251240][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.260302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.389946][ T6733] FAULT_INJECTION: forcing a failure. [ 107.389946][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 107.437361][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.2.435 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 107.447680][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.457761][ T6733] Call Trace: [ 107.461043][ T6733] [ 107.463970][ T6733] dump_stack_lvl+0x241/0x360 [ 107.468659][ T6733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.473862][ T6733] ? __pfx__printk+0x10/0x10 [ 107.478462][ T6733] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 107.484445][ T6733] ? __pfx___might_resched+0x10/0x10 [ 107.489733][ T6733] should_fail_ex+0x3b0/0x4e0 [ 107.494417][ T6733] should_failslab+0xac/0x100 [ 107.499089][ T6733] ? __alloc_skb+0x1c3/0x440 [ 107.503680][ T6733] kmem_cache_alloc_node_noprof+0x71/0x320 [ 107.509487][ T6733] __alloc_skb+0x1c3/0x440 [ 107.513916][ T6733] ? __pfx___alloc_skb+0x10/0x10 [ 107.518893][ T6733] ? netlink_autobind+0xd6/0x2f0 [ 107.525836][ T6733] ? netlink_autobind+0x2b0/0x2f0 [ 107.530881][ T6733] netlink_sendmsg+0x638/0xcb0 [ 107.535801][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.541220][ T6733] ? aa_sock_msg_perm+0x91/0x160 [ 107.546162][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.551449][ T6733] __sock_sendmsg+0x221/0x270 [ 107.556127][ T6733] ____sys_sendmsg+0x52a/0x7e0 [ 107.560894][ T6733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.566181][ T6733] __sys_sendmsg+0x292/0x380 [ 107.570776][ T6733] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.575938][ T6733] ? __pfx_vfs_write+0x10/0x10 [ 107.580742][ T6733] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.587113][ T6733] ? do_syscall_64+0x100/0x230 [ 107.591878][ T6733] ? do_syscall_64+0xb6/0x230 [ 107.596551][ T6733] do_syscall_64+0xf3/0x230 [ 107.601060][ T6733] ? clear_bhb_loop+0x35/0x90 [ 107.605743][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.611638][ T6733] RIP: 0033:0x7ff19db7dff9 [ 107.616047][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.637258][ T6733] RSP: 002b:00007ff19e8e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.645711][ T6733] RAX: ffffffffffffffda RBX: 00007ff19dd35f80 RCX: 00007ff19db7dff9 [ 107.653703][ T6733] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 107.661761][ T6733] RBP: 00007ff19e8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 107.669878][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.678154][ T6733] R13: 0000000000000000 R14: 00007ff19dd35f80 R15: 00007ffdb0fa1fd8 [ 107.686161][ T6733] [ 108.129637][ T6755] netlink: 'syz.1.443': attribute type 6 has an invalid length. [ 108.412288][ T6769] gretap0: entered promiscuous mode [ 108.446375][ T6769] bond0: entered promiscuous mode [ 108.464820][ T6769] bond_slave_0: entered promiscuous mode [ 108.493535][ T6769] bond_slave_1: entered promiscuous mode [ 108.514444][ T6769] syz_tun: entered promiscuous mode [ 108.542224][ T6779] netlink: 'syz.3.448': attribute type 7 has an invalid length. [ 108.885371][ T6794] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.886030][ T6795] netlink: 'syz.0.454': attribute type 15 has an invalid length. [ 109.126714][ T6808] x_tables: duplicate underflow at hook 2 [ 109.269276][ T8] net_ratelimit: 2 callbacks suppressed [ 109.269294][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.284253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.343932][ T6827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.352375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.360618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.460926][ T6832] __nla_validate_parse: 7 callbacks suppressed [ 109.460949][ T6832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.467'. [ 109.663421][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 109.686820][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 110.074653][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.083490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.583047][ T6877] FAULT_INJECTION: forcing a failure. [ 110.583047][ T6877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.598310][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.4.483 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 110.608713][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.618989][ T6877] Call Trace: [ 110.622392][ T6877] [ 110.625384][ T6877] dump_stack_lvl+0x241/0x360 [ 110.630122][ T6877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.635384][ T6877] ? __pfx__printk+0x10/0x10 [ 110.640134][ T6877] ? __pfx_lock_release+0x10/0x10 [ 110.645305][ T6877] should_fail_ex+0x3b0/0x4e0 [ 110.650048][ T6877] _copy_from_user+0x2f/0xe0 [ 110.654681][ T6877] ____sys_sendmsg+0x2ef/0x7e0 [ 110.659592][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.664945][ T6877] __sys_sendmmsg+0x3ab/0x730 [ 110.669721][ T6877] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.674994][ T6877] ? __pfx_lock_release+0x10/0x10 [ 110.680160][ T6877] ? kstrtouint_from_user+0x128/0x190 [ 110.685697][ T6877] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 110.691633][ T6877] ? ksys_write+0x229/0x2b0 [ 110.696186][ T6877] ? __pfx_lock_release+0x10/0x10 [ 110.701258][ T6877] ? vfs_write+0x7bf/0xc90 [ 110.705691][ T6877] ? kmem_cache_free+0x1a2/0x420 [ 110.710641][ T6877] ? __mutex_unlock_slowpath+0x21d/0x750 [ 110.716283][ T6877] ? __fget_files+0x3f3/0x470 [ 110.720965][ T6877] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.726945][ T6877] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.733270][ T6877] ? do_syscall_64+0x100/0x230 [ 110.738067][ T6877] __x64_sys_sendmmsg+0xa0/0xb0 [ 110.742938][ T6877] do_syscall_64+0xf3/0x230 [ 110.747444][ T6877] ? clear_bhb_loop+0x35/0x90 [ 110.752353][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.758273][ T6877] RIP: 0033:0x7fcfa1b7dff9 [ 110.762710][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.782598][ T6877] RSP: 002b:00007fcfa291c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.791106][ T6877] RAX: ffffffffffffffda RBX: 00007fcfa1d35f80 RCX: 00007fcfa1b7dff9 [ 110.799082][ T6877] RDX: 0000000000000001 RSI: 000000002000b2c0 RDI: 0000000000000003 [ 110.807328][ T6877] RBP: 00007fcfa291c090 R08: 0000000000000000 R09: 0000000000000000 [ 110.815301][ T6877] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 110.823380][ T6877] R13: 0000000000000000 R14: 00007fcfa1d35f80 R15: 00007fff3d936558 [ 110.831465][ T6877] [ 111.089810][ T6887] netlink: 'syz.3.485': attribute type 10 has an invalid length. [ 111.115485][ T6887] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.148912][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 111.168235][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 111.263167][ T6898] FAULT_INJECTION: forcing a failure. [ 111.263167][ T6898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.282569][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.1.490 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 111.292882][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.299390][ T6899] netlink: 'syz.4.492': attribute type 3 has an invalid length. [ 111.302961][ T6898] Call Trace: [ 111.302981][ T6898] [ 111.302990][ T6898] dump_stack_lvl+0x241/0x360 [ 111.303026][ T6898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.326877][ T6898] ? __pfx__printk+0x10/0x10 [ 111.331633][ T6898] ? __pfx_lock_release+0x10/0x10 [ 111.337074][ T6898] should_fail_ex+0x3b0/0x4e0 [ 111.341892][ T6898] _copy_from_user+0x2f/0xe0 [ 111.346685][ T6898] do_sock_getsockopt+0x1d1/0x7e0 [ 111.351747][ T6898] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 111.357327][ T6898] ? __fget_files+0x3f3/0x470 [ 111.362119][ T6898] ? __fget_files+0x29/0x470 [ 111.366930][ T6898] __sys_getsockopt+0x267/0x330 [ 111.372130][ T6898] ? __pfx___sys_getsockopt+0x10/0x10 [ 111.377549][ T6898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.384153][ T6898] ? do_syscall_64+0x100/0x230 [ 111.389137][ T6898] __x64_sys_getsockopt+0xb5/0xd0 [ 111.394205][ T6898] do_syscall_64+0xf3/0x230 [ 111.398715][ T6898] ? clear_bhb_loop+0x35/0x90 [ 111.403388][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.409280][ T6898] RIP: 0033:0x7f57f877dff9 [ 111.414099][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.434445][ T6898] RSP: 002b:00007f57f9578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 111.442884][ T6898] RAX: ffffffffffffffda RBX: 00007f57f8935f80 RCX: 00007f57f877dff9 [ 111.450869][ T6898] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 111.458868][ T6898] RBP: 00007f57f9578090 R08: 00000000200000c0 R09: 0000000000000000 [ 111.466885][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.474980][ T6898] R13: 0000000000000000 R14: 00007f57f8935f80 R15: 00007fffa90461e8 [ 111.482977][ T6898] [ 111.490487][ T6905] Unsupported ieee802154 address type: 0 [ 111.574450][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 112.249930][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 112.273231][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.315981][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.534850][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 112.672855][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 112.701070][ T6946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.745600][ T6946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.360008][ T6971] Unsupported ieee802154 address type: 0 [ 113.508506][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.524'. [ 113.557560][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.611432][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.998327][ T7002] x_tables: duplicate underflow at hook 2 [ 114.013866][ T7002] netlink: 'syz.4.535': attribute type 9 has an invalid length. [ 114.883469][ T7036] __nla_validate_parse: 5 callbacks suppressed [ 114.883491][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 115.009400][ T7033] team0: Port device team_slave_0 removed [ 115.021839][ T7033] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 115.093421][ T7045] Unsupported ieee802154 address type: 0 [ 115.138227][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.550'. [ 115.187038][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.260857][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.611169][ T7071] netlink: 56 bytes leftover after parsing attributes in process `syz.3.562'. [ 115.642198][ T7071] netlink: 56 bytes leftover after parsing attributes in process `syz.3.562'. [ 115.706458][ T7075] Bluetooth: MGMT ver 1.23 [ 115.739860][ T7077] Unsupported ieee802154 address type: 0 [ 115.796977][ T7080] netlink: 96 bytes leftover after parsing attributes in process `syz.3.566'. [ 116.070630][ T7092] netlink: 104 bytes leftover after parsing attributes in process `syz.4.571'. [ 116.673405][ T7106] netlink: 164 bytes leftover after parsing attributes in process `syz.0.576'. [ 117.724478][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 117.733922][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 117.831087][ T7110] netlink: 96 bytes leftover after parsing attributes in process `syz.2.577'. [ 117.856305][ T7112] netlink: 'syz.1.579': attribute type 6 has an invalid length. [ 118.260240][ T7127] openvswitch: netlink: Missing key (keys=20040, expected=2000) [ 118.279548][ T7127] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 118.863741][ T7157] FAULT_INJECTION: forcing a failure. [ 118.863741][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 118.893017][ T7157] CPU: 0 UID: 0 PID: 7157 Comm: syz.4.593 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 118.903323][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.913848][ T7157] Call Trace: [ 118.915069][ T7159] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 118.917129][ T7157] [ 118.917142][ T7157] dump_stack_lvl+0x241/0x360 [ 118.917174][ T7157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.937164][ T7157] ? __pfx__printk+0x10/0x10 [ 118.941814][ T7157] ? ref_tracker_alloc+0x332/0x490 [ 118.946991][ T7157] should_fail_ex+0x3b0/0x4e0 [ 118.951709][ T7157] ? skb_clone+0x20c/0x390 [ 118.956160][ T7157] should_failslab+0xac/0x100 [ 118.960964][ T7157] ? skb_clone+0x20c/0x390 [ 118.965569][ T7157] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 118.970991][ T7157] skb_clone+0x20c/0x390 [ 118.975284][ T7157] __netlink_deliver_tap+0x3cc/0x7c0 [ 118.980615][ T7157] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.985853][ T7157] netlink_deliver_tap+0x19d/0x1b0 [ 118.990994][ T7157] netlink_unicast+0x7c4/0x990 [ 118.995875][ T7157] ? __pfx_netlink_unicast+0x10/0x10 [ 119.001187][ T7157] ? __virt_addr_valid+0x183/0x530 [ 119.006310][ T7157] ? __check_object_size+0x48e/0x900 [ 119.011625][ T7157] netlink_sendmsg+0x8e4/0xcb0 [ 119.016420][ T7157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.021720][ T7157] ? aa_sock_msg_perm+0x91/0x160 [ 119.026701][ T7157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.031993][ T7157] __sock_sendmsg+0x221/0x270 [ 119.036686][ T7157] ____sys_sendmsg+0x52a/0x7e0 [ 119.041456][ T7157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.046844][ T7157] __sys_sendmsg+0x292/0x380 [ 119.051469][ T7157] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.056598][ T7157] ? __pfx_vfs_write+0x10/0x10 [ 119.061477][ T7157] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.067808][ T7157] ? do_syscall_64+0x100/0x230 [ 119.072567][ T7157] ? do_syscall_64+0xb6/0x230 [ 119.077410][ T7157] do_syscall_64+0xf3/0x230 [ 119.081907][ T7157] ? clear_bhb_loop+0x35/0x90 [ 119.086577][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.092467][ T7157] RIP: 0033:0x7fcfa1b7dff9 [ 119.096891][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.116590][ T7157] RSP: 002b:00007fcfa291c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.125013][ T7157] RAX: ffffffffffffffda RBX: 00007fcfa1d35f80 RCX: 00007fcfa1b7dff9 [ 119.133067][ T7157] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 119.141231][ T7157] RBP: 00007fcfa291c090 R08: 0000000000000000 R09: 0000000000000000 [ 119.149305][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.157303][ T7157] R13: 0000000000000000 R14: 00007fcfa1d35f80 R15: 00007fff3d936558 [ 119.165302][ T7157] [ 119.489528][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.530539][ T7171] block nbd3: not configured, cannot reconfigure [ 119.545201][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.601599][ T7178] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 119.608996][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.640108][ T7181] xt_hashlimit: size too large, truncated to 1048576 [ 119.651923][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.664399][ T7211] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 120.922458][ T7219] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 121.030134][ T7224] FAULT_INJECTION: forcing a failure. [ 121.030134][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 121.066302][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.4.616 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 121.076606][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.086683][ T7224] Call Trace: [ 121.089964][ T7224] [ 121.092895][ T7224] dump_stack_lvl+0x241/0x360 [ 121.097583][ T7224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.102788][ T7224] ? __pfx__printk+0x10/0x10 [ 121.107379][ T7224] ? __kmalloc_noprof+0xb0/0x400 [ 121.112836][ T7224] ? __pfx___might_resched+0x10/0x10 [ 121.118117][ T7224] should_fail_ex+0x3b0/0x4e0 [ 121.122807][ T7224] ? sock_kmalloc+0xd7/0x160 [ 121.127576][ T7224] should_failslab+0xac/0x100 [ 121.133758][ T7224] ? sock_kmalloc+0xd7/0x160 [ 121.138357][ T7224] __kmalloc_noprof+0xd8/0x400 [ 121.143137][ T7224] ? do_raw_spin_unlock+0x13c/0x8b0 [ 121.148338][ T7224] sock_kmalloc+0xd7/0x160 [ 121.152755][ T7224] hash_sendmsg+0x80a/0x1110 [ 121.157360][ T7224] ? __pfx_hash_sendmsg+0x10/0x10 [ 121.162470][ T7224] __sock_sendmsg+0x221/0x270 [ 121.167316][ T7224] sock_sendmsg+0x134/0x200 [ 121.171829][ T7224] ? __pfx_sock_sendmsg+0x10/0x10 [ 121.176860][ T7224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.183190][ T7224] ? iov_iter_bvec+0x4e/0x180 [ 121.187895][ T7224] splice_to_socket+0xa10/0x10b0 [ 121.192863][ T7224] ? __pfx_splice_to_socket+0x10/0x10 [ 121.198258][ T7224] ? shmem_file_splice_read+0xbe1/0xd30 [ 121.203819][ T7224] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 121.209710][ T7224] ? __pfx_splice_to_socket+0x10/0x10 [ 121.215080][ T7224] direct_splice_actor+0x11b/0x220 [ 121.220199][ T7224] splice_direct_to_actor+0x586/0xc80 [ 121.225580][ T7224] ? __pfx_direct_splice_actor+0x10/0x10 [ 121.231236][ T7224] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 121.237174][ T7224] ? __fget_files+0x29/0x470 [ 121.241778][ T7224] ? __pfx_lock_release+0x10/0x10 [ 121.246814][ T7224] do_splice_direct+0x289/0x3e0 [ 121.251686][ T7224] ? __pfx_do_splice_direct+0x10/0x10 [ 121.257057][ T7224] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 121.262956][ T7224] ? bpf_lsm_file_permission+0x9/0x10 [ 121.268326][ T7224] ? security_file_permission+0x74/0x280 [ 121.273990][ T7224] ? rw_verify_area+0x1c3/0x6f0 [ 121.278859][ T7224] do_sendfile+0x561/0xe10 [ 121.283275][ T7224] ? __pfx_vfs_write+0x10/0x10 [ 121.288044][ T7224] ? __pfx_do_sendfile+0x10/0x10 [ 121.293022][ T7224] __se_sys_sendfile64+0x17c/0x1e0 [ 121.298180][ T7224] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 121.303965][ T7224] ? do_syscall_64+0x100/0x230 [ 121.309089][ T7224] ? do_syscall_64+0xb6/0x230 [ 121.313800][ T7224] do_syscall_64+0xf3/0x230 [ 121.318333][ T7224] ? clear_bhb_loop+0x35/0x90 [ 121.323134][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.329132][ T7224] RIP: 0033:0x7fcfa1b7dff9 [ 121.333545][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.353147][ T7224] RSP: 002b:00007fcfa28fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 121.361590][ T7224] RAX: ffffffffffffffda RBX: 00007fcfa1d36058 RCX: 00007fcfa1b7dff9 [ 121.369658][ T7224] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 121.377634][ T7224] RBP: 00007fcfa28fb090 R08: 0000000000000000 R09: 0000000000000000 [ 121.385599][ T7224] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 121.393712][ T7224] R13: 0000000000000000 R14: 00007fcfa1d36058 R15: 00007fff3d936558 [ 121.401708][ T7224] [ 121.452116][ T7228] __nla_validate_parse: 10 callbacks suppressed [ 121.452138][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.619'. [ 121.596201][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 121.670361][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.939174][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.961337][ T7231] wg2: left promiscuous mode [ 122.018440][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.042680][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.140085][ T7231] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.149223][ T7231] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.158232][ T7231] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.170836][ T7231] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.235882][ T7242] netlink: 'syz.4.623': attribute type 10 has an invalid length. [ 122.250907][ T7242] macvlan0: entered promiscuous mode [ 122.265938][ T7242] macvlan0: entered allmulticast mode [ 122.282289][ T7242] veth1_vlan: entered allmulticast mode [ 122.302215][ T7242] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 122.510943][ T7258] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 122.541892][ T7260] netlink: 'syz.2.630': attribute type 12 has an invalid length. [ 122.666678][ T7267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.632'. [ 122.905039][ T7274] x_tables: duplicate underflow at hook 2 [ 122.914383][ T7274] netlink: 'syz.3.635': attribute type 9 has an invalid length. [ 122.924301][ T7273] IPVS: length: 215 != 24 [ 123.084808][ T7281] tipc: Can't bind to reserved service type 2 [ 123.170944][ T7283] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 123.188806][ T7283] FAULT_INJECTION: forcing a failure. [ 123.188806][ T7283] name failslab, interval 1, probability 0, space 0, times 0 [ 123.220224][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.3.639 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 123.230528][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.240614][ T7283] Call Trace: [ 123.243917][ T7283] [ 123.246953][ T7283] dump_stack_lvl+0x241/0x360 [ 123.251662][ T7283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.256883][ T7283] ? __pfx__printk+0x10/0x10 [ 123.261492][ T7283] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 123.267492][ T7283] ? __pfx___might_resched+0x10/0x10 [ 123.272816][ T7283] should_fail_ex+0x3b0/0x4e0 [ 123.277614][ T7283] should_failslab+0xac/0x100 [ 123.282390][ T7283] ? __alloc_skb+0x1c3/0x440 [ 123.287001][ T7283] kmem_cache_alloc_node_noprof+0x71/0x320 [ 123.292836][ T7283] __alloc_skb+0x1c3/0x440 [ 123.297279][ T7283] ? __pfx___alloc_skb+0x10/0x10 [ 123.302266][ T7283] ? netlink_ack_tlv_len+0x6e/0x200 [ 123.307483][ T7283] netlink_ack+0x13f/0xa30 [ 123.311930][ T7283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.317451][ T7283] netlink_rcv_skb+0x262/0x430 [ 123.322778][ T7283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.328357][ T7283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.333684][ T7283] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.338909][ T7283] netlink_unicast+0x7f6/0x990 [ 123.343874][ T7283] ? __pfx_netlink_unicast+0x10/0x10 [ 123.349264][ T7283] ? __virt_addr_valid+0x183/0x530 [ 123.354394][ T7283] ? __check_object_size+0x48e/0x900 [ 123.359704][ T7283] netlink_sendmsg+0x8e4/0xcb0 [ 123.364593][ T7283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.369898][ T7283] ? aa_sock_msg_perm+0x91/0x160 [ 123.374940][ T7283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.380286][ T7283] __sock_sendmsg+0x221/0x270 [ 123.384992][ T7283] ____sys_sendmsg+0x52a/0x7e0 [ 123.389782][ T7283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.395093][ T7283] __sys_sendmsg+0x292/0x380 [ 123.399695][ T7283] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.404831][ T7283] ? __pfx_vfs_write+0x10/0x10 [ 123.409634][ T7283] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.415985][ T7283] ? do_syscall_64+0x100/0x230 [ 123.420773][ T7283] ? do_syscall_64+0xb6/0x230 [ 123.425484][ T7283] do_syscall_64+0xf3/0x230 [ 123.430002][ T7283] ? clear_bhb_loop+0x35/0x90 [ 123.434696][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.440661][ T7283] RIP: 0033:0x7fd08d37dff9 [ 123.445172][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.464807][ T7283] RSP: 002b:00007fd08e0c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.473242][ T7283] RAX: ffffffffffffffda RBX: 00007fd08d535f80 RCX: 00007fd08d37dff9 [ 123.481235][ T7283] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 123.489440][ T7283] RBP: 00007fd08e0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.497435][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.505427][ T7283] R13: 0000000000000000 R14: 00007fd08d535f80 R15: 00007fffd510b9f8 [ 123.513558][ T7283] [ 123.655899][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.642'. [ 123.682370][ T7289] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 123.728999][ T7290] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 123.763462][ T7292] FAULT_INJECTION: forcing a failure. [ 123.763462][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 123.826232][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.2.643 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 123.836546][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.846635][ T7292] Call Trace: [ 123.849932][ T7292] [ 123.852878][ T7292] dump_stack_lvl+0x241/0x360 [ 123.857599][ T7292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.863015][ T7292] ? __pfx__printk+0x10/0x10 [ 123.867640][ T7292] ? __kmalloc_noprof+0xb0/0x400 [ 123.872628][ T7292] ? __pfx___might_resched+0x10/0x10 [ 123.878032][ T7292] should_fail_ex+0x3b0/0x4e0 [ 123.882747][ T7292] ? sock_kmalloc+0xd7/0x160 [ 123.887339][ T7292] should_failslab+0xac/0x100 [ 123.892021][ T7292] ? sock_kmalloc+0xd7/0x160 [ 123.896698][ T7292] __kmalloc_noprof+0xd8/0x400 [ 123.901461][ T7292] sock_kmalloc+0xd7/0x160 [ 123.905870][ T7292] skcipher_accept_parent_nokey+0x9e/0x290 [ 123.911676][ T7292] ? __pfx_skcipher_accept_parent_nokey+0x10/0x10 [ 123.918088][ T7292] af_alg_accept+0x204/0x510 [ 123.922677][ T7292] do_accept+0x4b3/0x6b0 [ 123.927011][ T7292] ? __pfx_do_accept+0x10/0x10 [ 123.931793][ T7292] __sys_accept4+0x11e/0x1c0 [ 123.936384][ T7292] ? __pfx___sys_accept4+0x10/0x10 [ 123.941490][ T7292] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.947820][ T7292] ? do_syscall_64+0x100/0x230 [ 123.952577][ T7292] __x64_sys_accept+0x7d/0x90 [ 123.957339][ T7292] do_syscall_64+0xf3/0x230 [ 123.961838][ T7292] ? clear_bhb_loop+0x35/0x90 [ 123.966520][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.972414][ T7292] RIP: 0033:0x7ff19db7dff9 [ 123.976832][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.996853][ T7292] RSP: 002b:00007ff19e8e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 124.005359][ T7292] RAX: ffffffffffffffda RBX: 00007ff19dd35f80 RCX: 00007ff19db7dff9 [ 124.013336][ T7292] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 124.021300][ T7292] RBP: 00007ff19e8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 124.029273][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.037253][ T7292] R13: 0000000000000000 R14: 00007ff19dd35f80 R15: 00007ffdb0fa1fd8 [ 124.045235][ T7292] [ 124.227173][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 124.245159][ T7299] block nbd1: not configured, cannot reconfigure [ 124.300373][ T7310] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 124.407869][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 124.450713][ T7323] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 124.471844][ T7317] netlink: 188 bytes leftover after parsing attributes in process `syz.4.653'. [ 124.485767][ T7317] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 124.510238][ T7319] netlink: 188 bytes leftover after parsing attributes in process `syz.4.653'. [ 124.527742][ T7319] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 124.546317][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 124.656583][ T7332] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 124.682686][ T7328] syz_tun: entered allmulticast mode [ 125.270102][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.665'. [ 125.310458][ T7362] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 125.358067][ T7325] syz_tun: left allmulticast mode [ 125.424835][ T7365] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 125.496738][ T7372] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 125.593587][ T7380] netlink: 'syz.3.669': attribute type 7 has an invalid length. [ 125.982294][ T7388] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 126.061581][ T7400] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 126.888938][ T7413] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 127.697222][ T7437] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 127.850908][ T7447] __nla_validate_parse: 1 callbacks suppressed [ 127.850928][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 127.851019][ T7446] netlink: 52 bytes leftover after parsing attributes in process `syz.3.694'. [ 128.123379][ T7454] netlink: 'syz.3.695': attribute type 7 has an invalid length. [ 128.379467][ T7463] netlink: 'syz.1.699': attribute type 2 has an invalid length. [ 128.402760][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 128.611460][ T7471] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 128.774973][ T7479] netlink: 52 bytes leftover after parsing attributes in process `syz.3.705'. [ 129.017419][ T7496] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 129.044830][ T7487] syz_tun: entered allmulticast mode [ 129.056277][ T7486] syz_tun: left allmulticast mode [ 129.153201][ T7502] FAULT_INJECTION: forcing a failure. [ 129.153201][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 129.194030][ T7502] CPU: 1 UID: 0 PID: 7502 Comm: syz.3.715 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 129.204413][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.214496][ T7502] Call Trace: [ 129.217782][ T7502] [ 129.220726][ T7502] dump_stack_lvl+0x241/0x360 [ 129.225419][ T7502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.230796][ T7502] ? __pfx__printk+0x10/0x10 [ 129.235507][ T7502] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 129.240992][ T7502] ? __pfx___might_resched+0x10/0x10 [ 129.246296][ T7502] should_fail_ex+0x3b0/0x4e0 [ 129.251013][ T7502] should_failslab+0xac/0x100 [ 129.255714][ T7502] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 129.261707][ T7502] __kmalloc_cache_noprof+0x6c/0x2c0 [ 129.267009][ T7502] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 129.272836][ T7502] sctp_association_new+0x15aa/0x2400 [ 129.278226][ T7502] sctp_connect_new_asoc+0x2d8/0x6c0 [ 129.283564][ T7502] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 129.289560][ T7502] ? sctp_sendmsg+0xbb9/0x3520 [ 129.294352][ T7502] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 129.300175][ T7502] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 129.305740][ T7502] sctp_sendmsg+0x219a/0x3520 [ 129.310521][ T7502] ? __pfx_sctp_sendmsg+0x10/0x10 [ 129.315557][ T7502] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.320416][ T7502] ? inet_sendmsg+0x330/0x390 [ 129.325109][ T7502] __sock_sendmsg+0x1a6/0x270 [ 129.329798][ T7502] ____sys_sendmsg+0x52a/0x7e0 [ 129.334586][ T7502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.340248][ T7502] __sys_sendmmsg+0x3ab/0x730 [ 129.344962][ T7502] ? __pfx___sys_sendmmsg+0x10/0x10 [ 129.350171][ T7502] ? __pfx_lock_release+0x10/0x10 [ 129.355198][ T7502] ? kstrtouint_from_user+0x128/0x190 [ 129.360580][ T7502] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 129.366475][ T7502] ? ksys_write+0x229/0x2b0 [ 129.370978][ T7502] ? __pfx_lock_release+0x10/0x10 [ 129.376005][ T7502] ? vfs_write+0x7bf/0xc90 [ 129.380426][ T7502] ? kmem_cache_free+0x1a2/0x420 [ 129.385361][ T7502] ? __mutex_unlock_slowpath+0x21d/0x750 [ 129.391081][ T7502] ? __fget_files+0x3f3/0x470 [ 129.395766][ T7502] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.401775][ T7502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.408130][ T7502] ? do_syscall_64+0x100/0x230 [ 129.413001][ T7502] __x64_sys_sendmmsg+0xa0/0xb0 [ 129.417888][ T7502] do_syscall_64+0xf3/0x230 [ 129.422548][ T7502] ? clear_bhb_loop+0x35/0x90 [ 129.427248][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.433241][ T7502] RIP: 0033:0x7fd08d37dff9 [ 129.437681][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.457378][ T7502] RSP: 002b:00007fd08e0c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.465881][ T7502] RAX: ffffffffffffffda RBX: 00007fd08d535f80 RCX: 00007fd08d37dff9 [ 129.473866][ T7502] RDX: 0000000000000001 RSI: 000000002000b2c0 RDI: 0000000000000003 [ 129.481846][ T7502] RBP: 00007fd08e0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.489821][ T7502] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 129.497794][ T7502] R13: 0000000000000000 R14: 00007fd08d535f80 R15: 00007fffd510b9f8 [ 129.505779][ T7502] [ 129.630365][ T7513] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 129.644370][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.720'. [ 130.020337][ T7522] block nbd3: not configured, cannot reconfigure [ 130.027726][ T7522] FAULT_INJECTION: forcing a failure. [ 130.027726][ T7522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.047191][ T7522] CPU: 0 UID: 0 PID: 7522 Comm: syz.3.723 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 130.057485][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.067569][ T7522] Call Trace: [ 130.070886][ T7522] [ 130.073845][ T7522] dump_stack_lvl+0x241/0x360 [ 130.078568][ T7522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.083810][ T7522] ? __pfx__printk+0x10/0x10 [ 130.088424][ T7522] ? snprintf+0xda/0x120 [ 130.092674][ T7522] should_fail_ex+0x3b0/0x4e0 [ 130.097357][ T7522] _copy_to_user+0x2f/0xb0 [ 130.101776][ T7522] simple_read_from_buffer+0xca/0x150 [ 130.107166][ T7522] proc_fail_nth_read+0x1e9/0x250 [ 130.112195][ T7522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.117747][ T7522] ? rw_verify_area+0x55e/0x6f0 [ 130.122593][ T7522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.128135][ T7522] vfs_read+0x201/0xbc0 [ 130.132288][ T7522] ? __pfx_lock_release+0x10/0x10 [ 130.137316][ T7522] ? __pfx_vfs_read+0x10/0x10 [ 130.141993][ T7522] ? __fget_files+0x3f3/0x470 [ 130.146668][ T7522] ? fdget_pos+0x24e/0x320 [ 130.151090][ T7522] ksys_read+0x183/0x2b0 [ 130.155343][ T7522] ? __pfx_ksys_read+0x10/0x10 [ 130.160575][ T7522] ? do_syscall_64+0x100/0x230 [ 130.165335][ T7522] ? do_syscall_64+0xb6/0x230 [ 130.170010][ T7522] do_syscall_64+0xf3/0x230 [ 130.174508][ T7522] ? clear_bhb_loop+0x35/0x90 [ 130.179182][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.185071][ T7522] RIP: 0033:0x7fd08d37ca3c [ 130.189482][ T7522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 130.209088][ T7522] RSP: 002b:00007fd08e0c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.217500][ T7522] RAX: ffffffffffffffda RBX: 00007fd08d535f80 RCX: 00007fd08d37ca3c [ 130.225740][ T7522] RDX: 000000000000000f RSI: 00007fd08e0c60a0 RDI: 0000000000000003 [ 130.233706][ T7522] RBP: 00007fd08e0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.241673][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.249637][ T7522] R13: 0000000000000000 R14: 00007fd08d535f80 R15: 00007fffd510b9f8 [ 130.257621][ T7522] [ 130.268381][ T7526] syz_tun: entered allmulticast mode [ 130.274354][ T7525] syz_tun: left allmulticast mode [ 130.380228][ T7532] Unsupported ieee802154 address type: 0 [ 130.487147][ T7536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.731'. [ 130.605678][ T7541] netlink: 10 bytes leftover after parsing attributes in process `syz.2.732'. [ 130.905472][ T7565] netlink: 'syz.4.738': attribute type 7 has an invalid length. [ 131.217260][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.747'. [ 131.257757][ T7579] pim6reg: entered allmulticast mode [ 131.343459][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.373207][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.381750][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.395497][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.415945][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 131.424724][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.668873][ T5235] Bluetooth: hci0: command tx timeout [ 131.726887][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.750'. [ 131.756952][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.750'. [ 131.782533][ T7599] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 131.819726][ T7599] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 132.035426][ T7584] chnl_net:caif_netlink_parms(): no params data found [ 132.195632][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.211173][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.222928][ T7584] bridge_slave_0: entered allmulticast mode [ 132.234853][ T7584] bridge_slave_0: entered promiscuous mode [ 132.245277][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.253208][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.261916][ T7584] bridge_slave_1: entered allmulticast mode [ 132.270008][ T7584] bridge_slave_1: entered promiscuous mode [ 132.295407][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.302894][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.352832][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.380001][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.424079][ T7584] team0: Port device team_slave_0 added [ 132.433090][ T7584] team0: Port device team_slave_1 added [ 132.477794][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.486582][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.514222][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.527571][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.535510][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.573878][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.643597][ T7584] hsr_slave_0: entered promiscuous mode [ 132.671010][ T7584] hsr_slave_1: entered promiscuous mode [ 132.689673][ T7584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.719395][ T7584] Cannot create hsr debugfs directory [ 132.784804][ T7636] tipc: Started in network mode [ 132.795670][ T7636] tipc: Node identity 12d73b7fa1bb, cluster identity 4711 [ 132.805399][ T7636] tipc: Enabled bearer , priority 0 [ 132.816274][ T7636] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 132.859170][ T7633] tipc: Disabling bearer [ 132.953512][ T7584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.079560][ T7584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.109918][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.116257][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.291474][ T7584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.417433][ T7584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.451054][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.765'. [ 133.470719][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.506929][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.535186][ T5235] Bluetooth: hci5: command tx timeout [ 133.808220][ T7584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.847612][ T7584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.883663][ T7584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.941539][ T7584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.037795][ T7669] tipc: Enabled bearer , priority 0 [ 134.071817][ T7669] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 134.122086][ T7668] tipc: Disabling bearer [ 134.195388][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.261321][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.303169][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.310468][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.353684][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.360861][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.388100][ T7584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.404812][ T7584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.440130][ T7685] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 134.447832][ T7685] netlink: 9108 bytes leftover after parsing attributes in process `syz.4.778'. [ 134.458046][ T7685] netlink: 225 bytes leftover after parsing attributes in process `syz.4.778'. [ 134.603358][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.651092][ T7584] veth0_vlan: entered promiscuous mode [ 134.667334][ T7584] veth1_vlan: entered promiscuous mode [ 134.702557][ T7584] veth0_macvtap: entered promiscuous mode [ 134.723850][ T7584] veth1_macvtap: entered promiscuous mode [ 134.750179][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.765726][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.777101][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.788923][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.799471][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.811225][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.823763][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.834349][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.845453][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.877629][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.898735][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.929682][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.953687][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.973633][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.986073][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.999123][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.010317][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.024096][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.056137][ T7705] netlink: 'syz.1.783': attribute type 6 has an invalid length. [ 135.068018][ T7584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.082472][ T7584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.092940][ T7584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.105826][ T7584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.118109][ T7707] tipc: Enabled bearer , priority 0 [ 135.144372][ T7707] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 135.267523][ T7706] tipc: Disabling bearer [ 135.371843][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.386678][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.450755][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.471803][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.488357][ T7723] FAULT_INJECTION: forcing a failure. [ 135.488357][ T7723] name failslab, interval 1, probability 0, space 0, times 0 [ 135.510689][ T7723] CPU: 1 UID: 0 PID: 7723 Comm: syz.4.788 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 135.523338][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.533938][ T7723] Call Trace: [ 135.537227][ T7723] [ 135.540166][ T7723] dump_stack_lvl+0x241/0x360 [ 135.544894][ T7723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.550118][ T7723] ? __pfx__printk+0x10/0x10 [ 135.554714][ T7723] ? ref_tracker_alloc+0x332/0x490 [ 135.559826][ T7723] should_fail_ex+0x3b0/0x4e0 [ 135.564504][ T7723] ? skb_clone+0x20c/0x390 [ 135.568919][ T7723] should_failslab+0xac/0x100 [ 135.573596][ T7723] ? skb_clone+0x20c/0x390 [ 135.578005][ T7723] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 135.583466][ T7723] skb_clone+0x20c/0x390 [ 135.587707][ T7723] __netlink_deliver_tap+0x3cc/0x7c0 [ 135.593019][ T7723] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.598213][ T7723] netlink_deliver_tap+0x19d/0x1b0 [ 135.603498][ T7723] netlink_sendskb+0x68/0x140 [ 135.608172][ T7723] netlink_unicast+0x39d/0x990 [ 135.612932][ T7723] ? __asan_memcpy+0x40/0x70 [ 135.617552][ T7723] ? __pfx_netlink_unicast+0x10/0x10 [ 135.622858][ T7723] netlink_rcv_skb+0x262/0x430 [ 135.627747][ T7723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.633324][ T7723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.638644][ T7723] ? __rcu_read_unlock+0xa1/0x110 [ 135.643719][ T7723] netlink_unicast+0x7f6/0x990 [ 135.648520][ T7723] ? __pfx_netlink_unicast+0x10/0x10 [ 135.653842][ T7723] ? __virt_addr_valid+0x183/0x530 [ 135.658954][ T7723] ? __check_object_size+0x48e/0x900 [ 135.664243][ T7723] netlink_sendmsg+0x8e4/0xcb0 [ 135.669017][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.674311][ T7723] ? aa_sock_msg_perm+0x91/0x160 [ 135.679336][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.684623][ T7723] __sock_sendmsg+0x221/0x270 [ 135.689299][ T7723] ____sys_sendmsg+0x52a/0x7e0 [ 135.694064][ T7723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.699527][ T7723] __sys_sendmsg+0x292/0x380 [ 135.704113][ T7723] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.709248][ T7723] ? __pfx_vfs_write+0x10/0x10 [ 135.714030][ T7723] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.720450][ T7723] ? do_syscall_64+0x100/0x230 [ 135.725294][ T7723] ? do_syscall_64+0xb6/0x230 [ 135.730149][ T7723] do_syscall_64+0xf3/0x230 [ 135.734645][ T7723] ? clear_bhb_loop+0x35/0x90 [ 135.739409][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.745308][ T7723] RIP: 0033:0x7fcfa1b7dff9 [ 135.749720][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.769323][ T7723] RSP: 002b:00007fcfa291c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.777910][ T7723] RAX: ffffffffffffffda RBX: 00007fcfa1d35f80 RCX: 00007fcfa1b7dff9 [ 135.785961][ T7723] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 135.793933][ T7723] RBP: 00007fcfa291c090 R08: 0000000000000000 R09: 0000000000000000 [ 135.801989][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.809957][ T7723] R13: 0000000000000000 R14: 00007fcfa1d35f80 R15: 00007fff3d936558 [ 135.817939][ T7723] [ 135.831094][ T5235] Bluetooth: hci5: command tx timeout [ 136.230338][ T7745] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 136.241540][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.251588][ T7745] team0: entered promiscuous mode [ 136.256664][ T7745] team_slave_1: entered promiscuous mode [ 136.264323][ T7745] bond0: (slave team0): Enslaving as an active interface with an up link [ 136.276168][ T7748] netlink: 'syz.1.796': attribute type 7 has an invalid length. [ 136.285850][ T7747] tipc: Enabling of bearer rejected, failed to enable media [ 136.453103][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 136.553921][ T7760] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 136.568230][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 136.731378][ T7768] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 136.914765][ T7776] BUG: Bad page state in process syz.1.807 pfn:5b67f [ 136.921951][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b67f [ 136.930928][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.938131][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 136.946810][ T7776] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 136.955515][ T7776] page dumped because: page_pool leak [ 136.960987][ T7776] page_owner tracks the page as allocated [ 136.966749][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889578883, free_ts 136719013369 [ 136.984247][ T7776] post_alloc_hook+0x1f3/0x230 [ 136.989112][ T7776] get_page_from_freelist+0x3045/0x3190 [ 136.994801][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 137.000664][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 137.006189][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 137.012228][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 137.017489][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 137.022963][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 137.028362][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 137.033376][ T7776] __sys_bpf+0x48d/0x810 [ 137.037666][ T7776] __x64_sys_bpf+0x7c/0x90 [ 137.042287][ T7776] do_syscall_64+0xf3/0x230 [ 137.046826][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.053018][ T7776] page last free pid 8 tgid 8 stack trace: [ 137.058899][ T7776] free_unref_page+0xcfb/0xf20 [ 137.063715][ T7776] vfree+0x186/0x2e0 [ 137.067668][ T7776] pcpu_balance_free+0x772/0xa30 [ 137.072717][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 137.077877][ T7776] process_scheduled_works+0xa63/0x1850 [ 137.083609][ T7776] worker_thread+0x870/0xd30 [ 137.088236][ T7776] kthread+0x2f0/0x390 [ 137.092413][ T7776] ret_from_fork+0x4b/0x80 [ 137.096858][ T7776] ret_from_fork_asm+0x1a/0x30 [ 137.101854][ T7776] Modules linked in: [ 137.105773][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 137.116206][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.126376][ T7776] Call Trace: [ 137.129688][ T7776] [ 137.132648][ T7776] dump_stack_lvl+0x241/0x360 [ 137.137371][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.142612][ T7776] ? __pfx_print_modules+0x10/0x10 [ 137.147765][ T7776] ? __lock_acquire+0x1384/0x2050 [ 137.152862][ T7776] bad_page+0x166/0x1b0 [ 137.157143][ T7776] free_unref_page+0xed0/0xf20 [ 137.162047][ T7776] skb_release_data+0x6dc/0x8a0 [ 137.166947][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 137.171990][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 137.177130][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 137.182286][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 137.187841][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 137.193849][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 137.200528][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 137.207207][ T7776] ? read_tsc+0x9/0x20 [ 137.211299][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 137.216522][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 137.222860][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 137.229026][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 137.235348][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 137.242018][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 137.247298][ T7776] ? __phys_addr+0xba/0x170 [ 137.251795][ T7776] ? build_skb_around+0x111/0x260 [ 137.256826][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 137.262737][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 137.268026][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 137.273844][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 137.279769][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 137.285322][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 137.291216][ T7776] ? synchronize_rcu+0x11b/0x360 [ 137.296151][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 137.301446][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 137.307697][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 137.313625][ T7776] ? _copy_from_user+0xa6/0xe0 [ 137.318426][ T7776] ? bpf_test_init+0x15a/0x180 [ 137.323207][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 137.328761][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 137.334139][ T7776] ? __pfx_lock_release+0x10/0x10 [ 137.339171][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.344975][ T7776] ? __fget_files+0x29/0x470 [ 137.349573][ T7776] ? fput+0x1a8/0x230 [ 137.353557][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.359393][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 137.364348][ T7776] __sys_bpf+0x48d/0x810 [ 137.368593][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 137.373453][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.379448][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.385782][ T7776] ? do_syscall_64+0x100/0x230 [ 137.390543][ T7776] __x64_sys_bpf+0x7c/0x90 [ 137.394954][ T7776] do_syscall_64+0xf3/0x230 [ 137.399459][ T7776] ? clear_bhb_loop+0x35/0x90 [ 137.404132][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.410035][ T7776] RIP: 0033:0x7f57f877dff9 [ 137.414641][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.434351][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.442893][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 137.450859][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 137.458829][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 137.466807][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.474780][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 137.482765][ T7776] [ 137.485950][ T7776] Disabling lock debugging due to kernel taint [ 137.492172][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d0 [ 137.498976][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a0d0f50 pfn:0x7a0d0 [ 137.509271][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.516585][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 137.526045][ T7776] raw: ffff88807a0d0f50 0000000000000001 00000000ffffffff 0000000000000000 [ 137.534721][ T7776] page dumped because: page_pool leak [ 137.540179][ T7776] page_owner tracks the page as allocated [ 137.545897][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889567598, free_ts 136719022934 [ 137.562888][ T7776] post_alloc_hook+0x1f3/0x230 [ 137.567681][ T7776] get_page_from_freelist+0x3045/0x3190 [ 137.573282][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 137.578505][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 137.584034][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 137.589983][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 137.595203][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 137.600905][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 137.606389][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 137.611418][ T7776] __sys_bpf+0x48d/0x810 [ 137.615689][ T7776] __x64_sys_bpf+0x7c/0x90 [ 137.620177][ T7776] do_syscall_64+0xf3/0x230 [ 137.624696][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.630661][ T7776] page last free pid 8 tgid 8 stack trace: [ 137.632717][ T7787] tipc: Enabling of bearer rejected, failed to enable media [ 137.636489][ T7776] free_unref_page+0xcfb/0xf20 [ 137.636525][ T7776] vfree+0x186/0x2e0 [ 137.654043][ T7776] pcpu_balance_free+0x772/0xa30 [ 137.659051][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 137.664313][ T7776] process_scheduled_works+0xa63/0x1850 [ 137.669937][ T7776] worker_thread+0x870/0xd30 [ 137.674550][ T7776] kthread+0x2f0/0x390 [ 137.678686][ T7776] ret_from_fork+0x4b/0x80 [ 137.683128][ T7776] ret_from_fork_asm+0x1a/0x30 [ 137.687919][ T7776] Modules linked in: [ 137.691948][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 137.703676][ T7776] Tainted: [B]=BAD_PAGE [ 137.707819][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.717868][ T7776] Call Trace: [ 137.721175][ T7776] [ 137.724206][ T7776] dump_stack_lvl+0x241/0x360 [ 137.728887][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.734080][ T7776] ? __pfx_print_modules+0x10/0x10 [ 137.739188][ T7776] bad_page+0x166/0x1b0 [ 137.743414][ T7776] free_unref_page+0xed0/0xf20 [ 137.748175][ T7776] skb_release_data+0x6dc/0x8a0 [ 137.753639][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 137.758661][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 137.763780][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 137.769148][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 137.774774][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 137.780749][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 137.787518][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 137.794028][ T7776] ? read_tsc+0x9/0x20 [ 137.798087][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 137.803281][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 137.809689][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 137.815842][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 137.822157][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 137.829255][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 137.834530][ T7776] ? __phys_addr+0xba/0x170 [ 137.839033][ T7776] ? build_skb_around+0x111/0x260 [ 137.844603][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 137.850499][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 137.855792][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 137.861275][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 137.867184][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 137.872836][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 137.878647][ T7776] ? synchronize_rcu+0x11b/0x360 [ 137.883747][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 137.889040][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 137.895279][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 137.901186][ T7776] ? _copy_from_user+0xa6/0xe0 [ 137.905951][ T7776] ? bpf_test_init+0x15a/0x180 [ 137.910712][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 137.916172][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 137.921732][ T7776] ? __pfx_lock_release+0x10/0x10 [ 137.926754][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.932730][ T7776] ? __fget_files+0x29/0x470 [ 137.937327][ T7776] ? fput+0x1a8/0x230 [ 137.941311][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.947110][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 137.952057][ T7776] __sys_bpf+0x48d/0x810 [ 137.956301][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 137.961094][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.967067][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.973388][ T7776] ? do_syscall_64+0x100/0x230 [ 137.978227][ T7776] __x64_sys_bpf+0x7c/0x90 [ 137.982634][ T7776] do_syscall_64+0xf3/0x230 [ 137.987123][ T7776] ? clear_bhb_loop+0x35/0x90 [ 137.991794][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.997776][ T7776] RIP: 0033:0x7f57f877dff9 [ 138.002193][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.021813][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.030343][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 138.038484][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 138.046450][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 138.054516][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.062486][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 138.070630][ T7776] [ 138.073825][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d1 [ 138.080632][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a0d1f50 pfn:0x7a0d1 [ 138.090753][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 138.098051][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 138.106713][ T7776] raw: ffff88807a0d1f50 0000000000000001 00000000ffffffff 0000000000000000 [ 138.115359][ T7776] page dumped because: page_pool leak [ 138.120789][ T7776] page_owner tracks the page as allocated [ 138.126515][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889555824, free_ts 136719031839 [ 138.143569][ T7776] post_alloc_hook+0x1f3/0x230 [ 138.148372][ T7776] get_page_from_freelist+0x3045/0x3190 [ 138.153994][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 138.159248][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 138.165084][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 138.171047][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 138.176266][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 138.181706][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 138.187099][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 138.192118][ T7776] __sys_bpf+0x48d/0x810 [ 138.196385][ T7776] __x64_sys_bpf+0x7c/0x90 [ 138.200863][ T7776] do_syscall_64+0xf3/0x230 [ 138.205387][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.211373][ T7776] page last free pid 8 tgid 8 stack trace: [ 138.217278][ T7776] free_unref_page+0xcfb/0xf20 [ 138.222130][ T7776] vfree+0x186/0x2e0 [ 138.226053][ T7776] pcpu_balance_free+0x772/0xa30 [ 138.231049][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 138.236280][ T7776] process_scheduled_works+0xa63/0x1850 [ 138.241912][ T7776] worker_thread+0x870/0xd30 [ 138.246538][ T7776] kthread+0x2f0/0x390 [ 138.250679][ T7776] ret_from_fork+0x4b/0x80 [ 138.255217][ T7776] ret_from_fork_asm+0x1a/0x30 [ 138.260321][ T7776] Modules linked in: [ 138.264241][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 138.275982][ T7776] Tainted: [B]=BAD_PAGE [ 138.280184][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.290257][ T7776] Call Trace: [ 138.293630][ T7776] [ 138.296549][ T7776] dump_stack_lvl+0x241/0x360 [ 138.301231][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.306525][ T7776] ? __pfx_print_modules+0x10/0x10 [ 138.311632][ T7776] bad_page+0x166/0x1b0 [ 138.315781][ T7776] free_unref_page+0xed0/0xf20 [ 138.320573][ T7776] skb_release_data+0x6dc/0x8a0 [ 138.325524][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 138.330559][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 138.335691][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 138.340659][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 138.346127][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 138.352232][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 138.359176][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 138.365680][ T7776] ? read_tsc+0x9/0x20 [ 138.369748][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 138.374971][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 138.381300][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 138.387444][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 138.393855][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 138.400822][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 138.406044][ T7776] ? __phys_addr+0xba/0x170 [ 138.410554][ T7776] ? build_skb_around+0x111/0x260 [ 138.415676][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 138.421598][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 138.426906][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 138.432454][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 138.438348][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 138.443979][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 138.449790][ T7776] ? synchronize_rcu+0x11b/0x360 [ 138.454723][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 138.460099][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 138.466345][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 138.472417][ T7776] ? _copy_from_user+0xa6/0xe0 [ 138.477173][ T7776] ? bpf_test_init+0x15a/0x180 [ 138.481930][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 138.487384][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 138.492756][ T7776] ? __pfx_lock_release+0x10/0x10 [ 138.497776][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 138.503582][ T7776] ? __fget_files+0x29/0x470 [ 138.508172][ T7776] ? fput+0x1a8/0x230 [ 138.512169][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 138.518009][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 138.523087][ T7776] __sys_bpf+0x48d/0x810 [ 138.527475][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 138.532331][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.538355][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.544718][ T7776] ? do_syscall_64+0x100/0x230 [ 138.549500][ T7776] __x64_sys_bpf+0x7c/0x90 [ 138.553922][ T7776] do_syscall_64+0xf3/0x230 [ 138.558433][ T7776] ? clear_bhb_loop+0x35/0x90 [ 138.563122][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.569049][ T7776] RIP: 0033:0x7f57f877dff9 [ 138.573476][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.593185][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.601697][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 138.609671][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 138.617921][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 138.625899][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.633872][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 138.641849][ T7776] [ 138.644962][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d2 [ 138.651785][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a0d2f50 pfn:0x7a0d2 [ 138.661982][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 138.669446][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 138.678240][ T7776] raw: ffff88807a0d2f50 0000000000000001 00000000ffffffff 0000000000000000 [ 138.686982][ T7776] page dumped because: page_pool leak [ 138.692412][ T7776] page_owner tracks the page as allocated [ 138.698143][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889544500, free_ts 136719040690 [ 138.715235][ T7776] post_alloc_hook+0x1f3/0x230 [ 138.720063][ T7776] get_page_from_freelist+0x3045/0x3190 [ 138.725636][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 138.730985][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 138.736465][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 138.742424][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 138.747664][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 138.753108][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 138.758717][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 138.763694][ T7776] __sys_bpf+0x48d/0x810 [ 138.767966][ T7776] __x64_sys_bpf+0x7c/0x90 [ 138.772450][ T7776] do_syscall_64+0xf3/0x230 [ 138.776978][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.782948][ T7776] page last free pid 8 tgid 8 stack trace: [ 138.788781][ T7776] free_unref_page+0xcfb/0xf20 [ 138.793573][ T7776] vfree+0x186/0x2e0 [ 138.797523][ T7776] pcpu_balance_free+0x772/0xa30 [ 138.802520][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 138.807661][ T7776] process_scheduled_works+0xa63/0x1850 [ 138.813307][ T7776] worker_thread+0x870/0xd30 [ 138.818095][ T7776] kthread+0x2f0/0x390 [ 138.822227][ T7776] ret_from_fork+0x4b/0x80 [ 138.826671][ T7776] ret_from_fork_asm+0x1a/0x30 [ 138.831682][ T7776] Modules linked in: [ 138.835595][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 138.847330][ T7776] Tainted: [B]=BAD_PAGE [ 138.851492][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.861563][ T7776] Call Trace: [ 138.864860][ T7776] [ 138.867806][ T7776] dump_stack_lvl+0x241/0x360 [ 138.872525][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.877755][ T7776] ? __pfx_print_modules+0x10/0x10 [ 138.882905][ T7776] bad_page+0x166/0x1b0 [ 138.887180][ T7776] free_unref_page+0xed0/0xf20 [ 138.891985][ T7776] skb_release_data+0x6dc/0x8a0 [ 138.896872][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 138.902010][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 138.907159][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 138.912135][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 138.917714][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 138.923819][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 138.930450][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 138.937202][ T7776] ? read_tsc+0x9/0x20 [ 138.941310][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 138.946557][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 138.952983][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 138.959134][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 138.965454][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 138.972278][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 138.977499][ T7776] ? __phys_addr+0xba/0x170 [ 138.982013][ T7776] ? build_skb_around+0x111/0x260 [ 138.987048][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 138.993057][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 138.998353][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 139.003919][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 139.009909][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 139.015462][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 139.021281][ T7776] ? synchronize_rcu+0x11b/0x360 [ 139.026302][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 139.031585][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 139.037821][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 139.043743][ T7776] ? _copy_from_user+0xa6/0xe0 [ 139.048605][ T7776] ? bpf_test_init+0x15a/0x180 [ 139.053376][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 139.058833][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 139.064206][ T7776] ? __pfx_lock_release+0x10/0x10 [ 139.069230][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 139.075027][ T7776] ? __fget_files+0x29/0x470 [ 139.079877][ T7776] ? fput+0x1a8/0x230 [ 139.083853][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 139.089656][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 139.094588][ T7776] __sys_bpf+0x48d/0x810 [ 139.098909][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 139.103712][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.109975][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.116482][ T7776] ? do_syscall_64+0x100/0x230 [ 139.121255][ T7776] __x64_sys_bpf+0x7c/0x90 [ 139.125676][ T7776] do_syscall_64+0xf3/0x230 [ 139.130170][ T7776] ? clear_bhb_loop+0x35/0x90 [ 139.134846][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.140750][ T7776] RIP: 0033:0x7f57f877dff9 [ 139.145160][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.164936][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.173542][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 139.181520][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 139.189494][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 139.197509][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.205469][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 139.213437][ T7776] [ 139.216568][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d3 [ 139.223504][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a0d3f50 pfn:0x7a0d3 [ 139.233718][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 139.240902][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 139.249533][ T7776] raw: ffff88807a0d3f50 0000000000000001 00000000ffffffff 0000000000000000 [ 139.258475][ T7776] page dumped because: page_pool leak [ 139.263896][ T7776] page_owner tracks the page as allocated [ 139.269649][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889533479, free_ts 136719049350 [ 139.286636][ T7776] post_alloc_hook+0x1f3/0x230 [ 139.291706][ T7776] get_page_from_freelist+0x3045/0x3190 [ 139.295420][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.813'. [ 139.297252][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 139.297281][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 139.297295][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 139.297316][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 139.297335][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 139.297357][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 139.339727][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 139.344692][ T7776] __sys_bpf+0x48d/0x810 [ 139.349096][ T7776] __x64_sys_bpf+0x7c/0x90 [ 139.353541][ T7776] do_syscall_64+0xf3/0x230 [ 139.358061][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.364028][ T7776] page last free pid 8 tgid 8 stack trace: [ 139.369572][ T7805] syzkaller0: entered allmulticast mode [ 139.370031][ T7776] free_unref_page+0xcfb/0xf20 [ 139.380359][ T7776] vfree+0x186/0x2e0 [ 139.384374][ T7776] pcpu_balance_free+0x772/0xa30 [ 139.389378][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 139.394503][ T7776] process_scheduled_works+0xa63/0x1850 [ 139.400087][ T7776] worker_thread+0x870/0xd30 [ 139.404696][ T7776] kthread+0x2f0/0x390 [ 139.408823][ T7776] ret_from_fork+0x4b/0x80 [ 139.413365][ T7776] ret_from_fork_asm+0x1a/0x30 [ 139.418550][ T7776] Modules linked in: [ 139.422578][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 139.434939][ T7776] Tainted: [B]=BAD_PAGE [ 139.439195][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.449367][ T7776] Call Trace: [ 139.452930][ T7776] [ 139.455874][ T7776] dump_stack_lvl+0x241/0x360 [ 139.460604][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.465826][ T7776] ? __pfx_print_modules+0x10/0x10 [ 139.470954][ T7776] bad_page+0x166/0x1b0 [ 139.475242][ T7776] free_unref_page+0xed0/0xf20 [ 139.480026][ T7776] skb_release_data+0x6dc/0x8a0 [ 139.484889][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 139.489902][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 139.495007][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 139.499953][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 139.505421][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 139.511420][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 139.518126][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 139.524659][ T7776] ? read_tsc+0x9/0x20 [ 139.528755][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 139.533992][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 139.540330][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 139.546520][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 139.552848][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 139.559519][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 139.564803][ T7776] ? __phys_addr+0xba/0x170 [ 139.569329][ T7776] ? build_skb_around+0x111/0x260 [ 139.574353][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 139.580245][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 139.585528][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 139.591099][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 139.596987][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 139.602532][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 139.608423][ T7776] ? synchronize_rcu+0x11b/0x360 [ 139.613353][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 139.618634][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 139.624870][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 139.630774][ T7776] ? _copy_from_user+0xa6/0xe0 [ 139.635623][ T7776] ? bpf_test_init+0x15a/0x180 [ 139.640423][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 139.645879][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 139.651356][ T7776] ? __pfx_lock_release+0x10/0x10 [ 139.656382][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 139.662187][ T7776] ? __fget_files+0x29/0x470 [ 139.666774][ T7776] ? fput+0x1a8/0x230 [ 139.670761][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 139.676573][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 139.681688][ T7776] __sys_bpf+0x48d/0x810 [ 139.685928][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 139.690702][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.696679][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.703009][ T7776] ? do_syscall_64+0x100/0x230 [ 139.707765][ T7776] __x64_sys_bpf+0x7c/0x90 [ 139.712434][ T7776] do_syscall_64+0xf3/0x230 [ 139.716940][ T7776] ? clear_bhb_loop+0x35/0x90 [ 139.721607][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.727495][ T7776] RIP: 0033:0x7f57f877dff9 [ 139.731911][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.751609][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.760020][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 139.767984][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 139.775944][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 139.783916][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.791886][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 139.799859][ T7776] [ 139.802954][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d4 [ 139.809759][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d077000 pfn:0x7a0d4 [ 139.819884][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 139.827023][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 139.835661][ T7776] raw: ffff88807d077000 0000000000000001 00000000ffffffff 0000000000000000 [ 139.844301][ T7776] page dumped because: page_pool leak [ 139.849706][ T7776] page_owner tracks the page as allocated [ 139.855537][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889522928, free_ts 136719058449 [ 139.872624][ T7776] post_alloc_hook+0x1f3/0x230 [ 139.877402][ T7776] get_page_from_freelist+0x3045/0x3190 [ 139.883017][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 139.888232][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 139.893734][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 139.899693][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 139.904944][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 139.910372][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 139.915765][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 139.920750][ T7776] __sys_bpf+0x48d/0x810 [ 139.925379][ T7776] __x64_sys_bpf+0x7c/0x90 [ 139.929882][ T7776] do_syscall_64+0xf3/0x230 [ 139.934392][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.940333][ T7776] page last free pid 8 tgid 8 stack trace: [ 139.946231][ T7776] free_unref_page+0xcfb/0xf20 [ 139.951034][ T7776] vfree+0x186/0x2e0 [ 139.954947][ T7776] pcpu_balance_free+0x772/0xa30 [ 139.960009][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 139.965214][ T7776] process_scheduled_works+0xa63/0x1850 [ 139.970812][ T7776] worker_thread+0x870/0xd30 [ 139.975423][ T7776] kthread+0x2f0/0x390 [ 139.979526][ T7776] ret_from_fork+0x4b/0x80 [ 139.983953][ T7776] ret_from_fork_asm+0x1a/0x30 [ 139.988849][ T7776] Modules linked in: [ 139.992775][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 140.004999][ T7776] Tainted: [B]=BAD_PAGE [ 140.009151][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.019203][ T7776] Call Trace: [ 140.022477][ T7776] [ 140.025395][ T7776] dump_stack_lvl+0x241/0x360 [ 140.030067][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.035258][ T7776] ? __pfx_print_modules+0x10/0x10 [ 140.040376][ T7776] bad_page+0x166/0x1b0 [ 140.044525][ T7776] free_unref_page+0xed0/0xf20 [ 140.049300][ T7776] skb_release_data+0x6dc/0x8a0 [ 140.054160][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 140.059172][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 140.064299][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 140.069242][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 140.074703][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 140.080675][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 140.087266][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 140.093757][ T7776] ? read_tsc+0x9/0x20 [ 140.097922][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 140.103137][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 140.109465][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 140.115612][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 140.121926][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 140.128593][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 140.133783][ T7776] ? __phys_addr+0xba/0x170 [ 140.138272][ T7776] ? build_skb_around+0x111/0x260 [ 140.143296][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 140.149195][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 140.154491][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 140.159957][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 140.165850][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 140.171390][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 140.177184][ T7776] ? synchronize_rcu+0x11b/0x360 [ 140.182116][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 140.187407][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 140.193946][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 140.199856][ T7776] ? _copy_from_user+0xa6/0xe0 [ 140.204635][ T7776] ? bpf_test_init+0x15a/0x180 [ 140.209402][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 140.214948][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 140.220581][ T7776] ? __pfx_lock_release+0x10/0x10 [ 140.225609][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 140.231410][ T7776] ? __fget_files+0x29/0x470 [ 140.236079][ T7776] ? fput+0x1a8/0x230 [ 140.240057][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 140.246755][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 140.251708][ T7776] __sys_bpf+0x48d/0x810 [ 140.255954][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 140.260719][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.267231][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.273643][ T7776] ? do_syscall_64+0x100/0x230 [ 140.278395][ T7776] __x64_sys_bpf+0x7c/0x90 [ 140.282800][ T7776] do_syscall_64+0xf3/0x230 [ 140.287322][ T7776] ? clear_bhb_loop+0x35/0x90 [ 140.291987][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.297870][ T7776] RIP: 0033:0x7f57f877dff9 [ 140.302278][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.321888][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.330400][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 140.338382][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 140.346363][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 140.354350][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.362405][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 140.370418][ T7776] [ 140.373627][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d5 [ 140.380589][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a0d5dc0 pfn:0x7a0d5 [ 140.390806][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 140.398460][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 140.407109][ T7776] raw: ffff88807a0d5dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 140.416007][ T7776] page dumped because: page_pool leak [ 140.421450][ T7776] page_owner tracks the page as allocated [ 140.427175][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889512133, free_ts 136719066904 [ 140.444499][ T7776] post_alloc_hook+0x1f3/0x230 [ 140.449330][ T7776] get_page_from_freelist+0x3045/0x3190 [ 140.454915][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 140.460176][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 140.465679][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 140.471732][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 140.477836][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 140.483374][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 140.488804][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 140.493760][ T7776] __sys_bpf+0x48d/0x810 [ 140.498019][ T7776] __x64_sys_bpf+0x7c/0x90 [ 140.502471][ T7776] do_syscall_64+0xf3/0x230 [ 140.506993][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.512934][ T7776] page last free pid 8 tgid 8 stack trace: [ 140.519265][ T7776] free_unref_page+0xcfb/0xf20 [ 140.524316][ T7776] vfree+0x186/0x2e0 [ 140.528397][ T7776] pcpu_balance_free+0x772/0xa30 [ 140.533482][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 140.538648][ T7776] process_scheduled_works+0xa63/0x1850 [ 140.544251][ T7776] worker_thread+0x870/0xd30 [ 140.548912][ T7776] kthread+0x2f0/0x390 [ 140.552987][ T7776] ret_from_fork+0x4b/0x80 [ 140.557396][ T7776] ret_from_fork_asm+0x1a/0x30 [ 140.562303][ T7776] Modules linked in: [ 140.566210][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 140.577944][ T7776] Tainted: [B]=BAD_PAGE [ 140.582103][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.592166][ T7776] Call Trace: [ 140.595434][ T7776] [ 140.598348][ T7776] dump_stack_lvl+0x241/0x360 [ 140.603053][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.608246][ T7776] ? __pfx_print_modules+0x10/0x10 [ 140.613558][ T7776] bad_page+0x166/0x1b0 [ 140.617722][ T7776] free_unref_page+0xed0/0xf20 [ 140.622497][ T7776] skb_release_data+0x6dc/0x8a0 [ 140.627350][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 140.632390][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 140.637526][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 140.642473][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 140.647933][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 140.653938][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 140.660630][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 140.667129][ T7776] ? read_tsc+0x9/0x20 [ 140.671202][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 140.676407][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 140.682759][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 140.689015][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 140.695461][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 140.702134][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 140.707324][ T7776] ? __phys_addr+0xba/0x170 [ 140.711821][ T7776] ? build_skb_around+0x111/0x260 [ 140.716927][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 140.722912][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 140.728194][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 140.733740][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 140.739656][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 140.745331][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 140.751240][ T7776] ? synchronize_rcu+0x11b/0x360 [ 140.756507][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 140.761930][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 140.768190][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 140.774130][ T7776] ? _copy_from_user+0xa6/0xe0 [ 140.778933][ T7776] ? bpf_test_init+0x15a/0x180 [ 140.783789][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 140.789254][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 140.794624][ T7776] ? __pfx_lock_release+0x10/0x10 [ 140.799645][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 140.805445][ T7776] ? __fget_files+0x29/0x470 [ 140.810030][ T7776] ? fput+0x1a8/0x230 [ 140.814001][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 140.819825][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 140.824759][ T7776] __sys_bpf+0x48d/0x810 [ 140.828992][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 140.833747][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.839738][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.846058][ T7776] ? do_syscall_64+0x100/0x230 [ 140.850987][ T7776] __x64_sys_bpf+0x7c/0x90 [ 140.855390][ T7776] do_syscall_64+0xf3/0x230 [ 140.859978][ T7776] ? clear_bhb_loop+0x35/0x90 [ 140.864645][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.870536][ T7776] RIP: 0033:0x7f57f877dff9 [ 140.874955][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.894810][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.903654][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 140.911618][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 140.920017][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 140.927982][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.935941][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 140.943912][ T7776] [ 140.947040][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d6 [ 140.953857][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031894800 pfn:0x7a0d6 [ 140.963986][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 140.971166][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 140.979861][ T7776] raw: ffff888031894800 0000000000000001 00000000ffffffff 0000000000000000 [ 140.988444][ T7776] page dumped because: page_pool leak [ 140.993861][ T7776] page_owner tracks the page as allocated [ 140.999629][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889501519, free_ts 136719075012 [ 141.016609][ T7776] post_alloc_hook+0x1f3/0x230 [ 141.021523][ T7776] get_page_from_freelist+0x3045/0x3190 [ 141.027087][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 141.032337][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 141.037825][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 141.043792][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 141.049061][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 141.054475][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 141.059912][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 141.064869][ T7776] __sys_bpf+0x48d/0x810 [ 141.069149][ T7776] __x64_sys_bpf+0x7c/0x90 [ 141.073580][ T7776] do_syscall_64+0xf3/0x230 [ 141.078082][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.084018][ T7776] page last free pid 8 tgid 8 stack trace: [ 141.089872][ T7776] free_unref_page+0xcfb/0xf20 [ 141.094644][ T7776] vfree+0x186/0x2e0 [ 141.098535][ T7776] pcpu_balance_free+0x772/0xa30 [ 141.103528][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 141.108942][ T7776] process_scheduled_works+0xa63/0x1850 [ 141.114510][ T7776] worker_thread+0x870/0xd30 [ 141.119345][ T7776] kthread+0x2f0/0x390 [ 141.123444][ T7776] ret_from_fork+0x4b/0x80 [ 141.127864][ T7776] ret_from_fork_asm+0x1a/0x30 [ 141.132672][ T7776] Modules linked in: [ 141.136586][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 141.148370][ T7776] Tainted: [B]=BAD_PAGE [ 141.152572][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.162739][ T7776] Call Trace: [ 141.166031][ T7776] [ 141.169002][ T7776] dump_stack_lvl+0x241/0x360 [ 141.173689][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.178935][ T7776] ? __pfx_print_modules+0x10/0x10 [ 141.184052][ T7776] bad_page+0x166/0x1b0 [ 141.188214][ T7776] free_unref_page+0xed0/0xf20 [ 141.192987][ T7776] skb_release_data+0x6dc/0x8a0 [ 141.197841][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 141.202979][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 141.208096][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 141.213075][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 141.218540][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 141.224539][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 141.231153][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 141.237658][ T7776] ? read_tsc+0x9/0x20 [ 141.241736][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 141.246964][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 141.253486][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 141.259643][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 141.266014][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 141.272742][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 141.277971][ T7776] ? __phys_addr+0xba/0x170 [ 141.282497][ T7776] ? build_skb_around+0x111/0x260 [ 141.287535][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 141.293539][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 141.299012][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 141.304849][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 141.310775][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 141.316361][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 141.322202][ T7776] ? synchronize_rcu+0x11b/0x360 [ 141.327153][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 141.332444][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 141.338691][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 141.344629][ T7776] ? _copy_from_user+0xa6/0xe0 [ 141.349414][ T7776] ? bpf_test_init+0x15a/0x180 [ 141.354189][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 141.359840][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 141.365260][ T7776] ? __pfx_lock_release+0x10/0x10 [ 141.370413][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.376244][ T7776] ? __fget_files+0x29/0x470 [ 141.380840][ T7776] ? fput+0x1a8/0x230 [ 141.384819][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.390627][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 141.395587][ T7776] __sys_bpf+0x48d/0x810 [ 141.399851][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 141.404634][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.410645][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.417024][ T7776] ? do_syscall_64+0x100/0x230 [ 141.421907][ T7776] __x64_sys_bpf+0x7c/0x90 [ 141.426416][ T7776] do_syscall_64+0xf3/0x230 [ 141.430928][ T7776] ? clear_bhb_loop+0x35/0x90 [ 141.435608][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.441504][ T7776] RIP: 0033:0x7f57f877dff9 [ 141.445915][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.465633][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.474077][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 141.482070][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 141.490056][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 141.498141][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.506125][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 141.514669][ T7776] [ 141.518982][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d7 [ 141.526373][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031894800 pfn:0x7a0d7 [ 141.536716][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 141.544111][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 141.552799][ T7776] raw: ffff888031894800 0000000000000001 00000000ffffffff 0000000000000000 [ 141.561462][ T7776] page dumped because: page_pool leak [ 141.566930][ T7776] page_owner tracks the page as allocated [ 141.572718][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889490986, free_ts 136719082609 [ 141.589986][ T7776] post_alloc_hook+0x1f3/0x230 [ 141.594750][ T7776] get_page_from_freelist+0x3045/0x3190 [ 141.600364][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 141.605690][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 141.611202][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 141.617148][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 141.622388][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 141.628310][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 141.633779][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 141.638784][ T7776] __sys_bpf+0x48d/0x810 [ 141.643095][ T7776] __x64_sys_bpf+0x7c/0x90 [ 141.647529][ T7776] do_syscall_64+0xf3/0x230 [ 141.652080][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.658395][ T7776] page last free pid 8 tgid 8 stack trace: [ 141.664254][ T7776] free_unref_page+0xcfb/0xf20 [ 141.669075][ T7776] vfree+0x186/0x2e0 [ 141.672992][ T7776] pcpu_balance_free+0x772/0xa30 [ 141.677988][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 141.683173][ T7776] process_scheduled_works+0xa63/0x1850 [ 141.688761][ T7776] worker_thread+0x870/0xd30 [ 141.693362][ T7776] kthread+0x2f0/0x390 [ 141.697411][ T7776] ret_from_fork+0x4b/0x80 [ 141.701851][ T7776] ret_from_fork_asm+0x1a/0x30 [ 141.706624][ T7776] Modules linked in: [ 141.710616][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 141.722401][ T7776] Tainted: [B]=BAD_PAGE [ 141.726565][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.736612][ T7776] Call Trace: [ 141.739879][ T7776] [ 141.742806][ T7776] dump_stack_lvl+0x241/0x360 [ 141.747483][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.752682][ T7776] ? __pfx_print_modules+0x10/0x10 [ 141.757780][ T7776] bad_page+0x166/0x1b0 [ 141.761918][ T7776] free_unref_page+0xed0/0xf20 [ 141.766670][ T7776] skb_release_data+0x6dc/0x8a0 [ 141.771517][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 141.776549][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 141.781677][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 141.786620][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 141.792068][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 141.798469][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 141.805044][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 141.811527][ T7776] ? read_tsc+0x9/0x20 [ 141.815598][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 141.820797][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 141.827118][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 141.833277][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 141.839596][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 141.846288][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 141.851479][ T7776] ? __phys_addr+0xba/0x170 [ 141.855971][ T7776] ? build_skb_around+0x111/0x260 [ 141.861336][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 141.867319][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 141.872599][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 141.878058][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 141.883952][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 141.889495][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 141.895470][ T7776] ? synchronize_rcu+0x11b/0x360 [ 141.900407][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 141.905688][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 141.911924][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 141.917817][ T7776] ? _copy_from_user+0xa6/0xe0 [ 141.922580][ T7776] ? bpf_test_init+0x15a/0x180 [ 141.927337][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 141.932792][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 141.938156][ T7776] ? __pfx_lock_release+0x10/0x10 [ 141.943180][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.948980][ T7776] ? __fget_files+0x29/0x470 [ 141.953561][ T7776] ? fput+0x1a8/0x230 [ 141.957561][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.963446][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 141.968464][ T7776] __sys_bpf+0x48d/0x810 [ 141.972892][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 141.977828][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.983826][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.990175][ T7776] ? do_syscall_64+0x100/0x230 [ 141.994946][ T7776] __x64_sys_bpf+0x7c/0x90 [ 141.999362][ T7776] do_syscall_64+0xf3/0x230 [ 142.003855][ T7776] ? clear_bhb_loop+0x35/0x90 [ 142.008532][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.014430][ T7776] RIP: 0033:0x7f57f877dff9 [ 142.018930][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.038807][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.047221][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 142.055210][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 142.063291][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 142.071267][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.079239][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 142.087224][ T7776] [ 142.090341][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d8 [ 142.097553][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a0dc000 pfn:0x7a0d8 [ 142.107677][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 142.114874][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 142.123505][ T7776] raw: ffff88807a0dc000 0000000000000001 00000000ffffffff 0000000000000000 [ 142.132126][ T7776] page dumped because: page_pool leak [ 142.137498][ T7776] page_owner tracks the page as allocated [ 142.143262][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889479871, free_ts 136719090790 [ 142.160273][ T7776] post_alloc_hook+0x1f3/0x230 [ 142.165045][ T7776] get_page_from_freelist+0x3045/0x3190 [ 142.170642][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 142.175861][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 142.181387][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 142.187321][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 142.192586][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 142.197973][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 142.203399][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 142.208350][ T7776] __sys_bpf+0x48d/0x810 [ 142.212859][ T7776] __x64_sys_bpf+0x7c/0x90 [ 142.217386][ T7776] do_syscall_64+0xf3/0x230 [ 142.222034][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.227971][ T7776] page last free pid 8 tgid 8 stack trace: [ 142.233904][ T7776] free_unref_page+0xcfb/0xf20 [ 142.238728][ T7776] vfree+0x186/0x2e0 [ 142.242649][ T7776] pcpu_balance_free+0x772/0xa30 [ 142.247604][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 142.252778][ T7776] process_scheduled_works+0xa63/0x1850 [ 142.258340][ T7776] worker_thread+0x870/0xd30 [ 142.262989][ T7776] kthread+0x2f0/0x390 [ 142.267064][ T7776] ret_from_fork+0x4b/0x80 [ 142.271609][ T7776] ret_from_fork_asm+0x1a/0x30 [ 142.276387][ T7776] Modules linked in: [ 142.280318][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 142.292052][ T7776] Tainted: [B]=BAD_PAGE [ 142.296198][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.306433][ T7776] Call Trace: [ 142.309729][ T7776] [ 142.312658][ T7776] dump_stack_lvl+0x241/0x360 [ 142.318105][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.323501][ T7776] ? __pfx_print_modules+0x10/0x10 [ 142.328700][ T7776] bad_page+0x166/0x1b0 [ 142.332860][ T7776] free_unref_page+0xed0/0xf20 [ 142.337827][ T7776] skb_release_data+0x6dc/0x8a0 [ 142.342685][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 142.347698][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 142.352799][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 142.357743][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 142.363203][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 142.369186][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 142.375869][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 142.382364][ T7776] ? read_tsc+0x9/0x20 [ 142.386424][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 142.391626][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 142.398222][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 142.404383][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 142.410709][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 142.417552][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 142.423202][ T7776] ? __phys_addr+0xba/0x170 [ 142.427811][ T7776] ? build_skb_around+0x111/0x260 [ 142.432939][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 142.438862][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 142.444226][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 142.449742][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 142.455677][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 142.461239][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 142.467261][ T7776] ? synchronize_rcu+0x11b/0x360 [ 142.472247][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 142.477654][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 142.483910][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 142.489815][ T7776] ? _copy_from_user+0xa6/0xe0 [ 142.494580][ T7776] ? bpf_test_init+0x15a/0x180 [ 142.499779][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 142.505241][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 142.510610][ T7776] ? __pfx_lock_release+0x10/0x10 [ 142.515836][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.521687][ T7776] ? __fget_files+0x29/0x470 [ 142.526296][ T7776] ? fput+0x1a8/0x230 [ 142.530288][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.536095][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 142.541049][ T7776] __sys_bpf+0x48d/0x810 [ 142.545336][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 142.550107][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.556087][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.562409][ T7776] ? do_syscall_64+0x100/0x230 [ 142.567252][ T7776] __x64_sys_bpf+0x7c/0x90 [ 142.571663][ T7776] do_syscall_64+0xf3/0x230 [ 142.576249][ T7776] ? clear_bhb_loop+0x35/0x90 [ 142.580937][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.586844][ T7776] RIP: 0033:0x7f57f877dff9 [ 142.591279][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.610928][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.619348][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 142.627313][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 142.635302][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 142.643357][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.651329][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 142.659301][ T7776] [ 142.662431][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0d9 [ 142.669240][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x7a0d9 [ 142.678025][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 142.685209][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 142.693850][ T7776] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 142.702495][ T7776] page dumped because: page_pool leak [ 142.708007][ T7776] page_owner tracks the page as allocated [ 142.713780][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889468614, free_ts 136719099188 [ 142.730750][ T7776] post_alloc_hook+0x1f3/0x230 [ 142.735514][ T7776] get_page_from_freelist+0x3045/0x3190 [ 142.741099][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 142.746310][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 142.751919][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 142.757847][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 142.763100][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 142.768495][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 142.774023][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 142.779005][ T7776] __sys_bpf+0x48d/0x810 [ 142.783254][ T7776] __x64_sys_bpf+0x7c/0x90 [ 142.787677][ T7776] do_syscall_64+0xf3/0x230 [ 142.792219][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.798213][ T7776] page last free pid 8 tgid 8 stack trace: [ 142.804580][ T7776] free_unref_page+0xcfb/0xf20 [ 142.809393][ T7776] vfree+0x186/0x2e0 [ 142.813297][ T7776] pcpu_balance_free+0x772/0xa30 [ 142.818220][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 142.823379][ T7776] process_scheduled_works+0xa63/0x1850 [ 142.829053][ T7776] worker_thread+0x870/0xd30 [ 142.833661][ T7776] kthread+0x2f0/0x390 [ 142.837734][ T7776] ret_from_fork+0x4b/0x80 [ 142.842186][ T7776] ret_from_fork_asm+0x1a/0x30 [ 142.846962][ T7776] Modules linked in: [ 142.850881][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 142.862625][ T7776] Tainted: [B]=BAD_PAGE [ 142.866843][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.876886][ T7776] Call Trace: [ 142.880147][ T7776] [ 142.883071][ T7776] dump_stack_lvl+0x241/0x360 [ 142.887750][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.892931][ T7776] ? __pfx_print_modules+0x10/0x10 [ 142.898026][ T7776] bad_page+0x166/0x1b0 [ 142.902162][ T7776] free_unref_page+0xed0/0xf20 [ 142.906921][ T7776] skb_release_data+0x6dc/0x8a0 [ 142.911762][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 142.917203][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 142.922299][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 142.927233][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 142.932675][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 142.938639][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 142.945727][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 142.952206][ T7776] ? read_tsc+0x9/0x20 [ 142.956261][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 142.961460][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 142.967786][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 142.973964][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 142.980281][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 142.986965][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 142.992159][ T7776] ? __phys_addr+0xba/0x170 [ 142.996736][ T7776] ? build_skb_around+0x111/0x260 [ 143.001759][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 143.007664][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 143.012972][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 143.018455][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 143.024361][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 143.029916][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 143.035725][ T7776] ? synchronize_rcu+0x11b/0x360 [ 143.040665][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 143.045956][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 143.052215][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 143.058105][ T7776] ? _copy_from_user+0xa6/0xe0 [ 143.062875][ T7776] ? bpf_test_init+0x15a/0x180 [ 143.067732][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 143.073185][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 143.078553][ T7776] ? __pfx_lock_release+0x10/0x10 [ 143.083576][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 143.089635][ T7776] ? __fget_files+0x29/0x470 [ 143.094219][ T7776] ? fput+0x1a8/0x230 [ 143.098191][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 143.104338][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 143.109291][ T7776] __sys_bpf+0x48d/0x810 [ 143.113542][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 143.118322][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.124308][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.130730][ T7776] ? do_syscall_64+0x100/0x230 [ 143.135595][ T7776] __x64_sys_bpf+0x7c/0x90 [ 143.140031][ T7776] do_syscall_64+0xf3/0x230 [ 143.144539][ T7776] ? clear_bhb_loop+0x35/0x90 [ 143.149222][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.155115][ T7776] RIP: 0033:0x7f57f877dff9 [ 143.159540][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.179228][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.187815][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 143.195776][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 143.203844][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 143.211825][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.219818][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 143.228015][ T7776] [ 143.231120][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0da [ 143.237892][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a0da [ 143.246816][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 143.253992][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 143.262626][ T7776] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 143.271257][ T7776] page dumped because: page_pool leak [ 143.276646][ T7776] page_owner tracks the page as allocated [ 143.282434][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889458043, free_ts 136719108371 [ 143.299579][ T7776] post_alloc_hook+0x1f3/0x230 [ 143.304361][ T7776] get_page_from_freelist+0x3045/0x3190 [ 143.309953][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 143.315167][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 143.320668][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 143.326589][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 143.331841][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 143.337326][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 143.342776][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 143.347725][ T7776] __sys_bpf+0x48d/0x810 [ 143.352007][ T7776] __x64_sys_bpf+0x7c/0x90 [ 143.356454][ T7776] do_syscall_64+0xf3/0x230 [ 143.360994][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.366900][ T7776] page last free pid 8 tgid 8 stack trace: [ 143.372824][ T7776] free_unref_page+0xcfb/0xf20 [ 143.377602][ T7776] vfree+0x186/0x2e0 [ 143.381549][ T7776] pcpu_balance_free+0x772/0xa30 [ 143.386506][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 143.391657][ T7776] process_scheduled_works+0xa63/0x1850 [ 143.397208][ T7776] worker_thread+0x870/0xd30 [ 143.401923][ T7776] kthread+0x2f0/0x390 [ 143.406006][ T7776] ret_from_fork+0x4b/0x80 [ 143.410455][ T7776] ret_from_fork_asm+0x1a/0x30 [ 143.415378][ T7776] Modules linked in: [ 143.419604][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 143.431339][ T7776] Tainted: [B]=BAD_PAGE [ 143.435800][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.445854][ T7776] Call Trace: [ 143.449137][ T7776] [ 143.452055][ T7776] dump_stack_lvl+0x241/0x360 [ 143.456723][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.461905][ T7776] ? __pfx_print_modules+0x10/0x10 [ 143.467009][ T7776] bad_page+0x166/0x1b0 [ 143.471154][ T7776] free_unref_page+0xed0/0xf20 [ 143.475902][ T7776] skb_release_data+0x6dc/0x8a0 [ 143.480757][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 143.485811][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 143.490996][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 143.495937][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 143.501409][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 143.507375][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 143.514061][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 143.520946][ T7776] ? read_tsc+0x9/0x20 [ 143.525238][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 143.530638][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 143.536975][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 143.543130][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 143.549457][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 143.556216][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 143.561403][ T7776] ? __phys_addr+0xba/0x170 [ 143.565931][ T7776] ? build_skb_around+0x111/0x260 [ 143.571038][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 143.576925][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 143.582218][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 143.588372][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 143.594260][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 143.599884][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 143.605682][ T7776] ? synchronize_rcu+0x11b/0x360 [ 143.610611][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 143.615893][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 143.622161][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 143.628063][ T7776] ? _copy_from_user+0xa6/0xe0 [ 143.632837][ T7776] ? bpf_test_init+0x15a/0x180 [ 143.637600][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 143.643056][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 143.648420][ T7776] ? __pfx_lock_release+0x10/0x10 [ 143.653448][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 143.659268][ T7776] ? __fget_files+0x29/0x470 [ 143.663848][ T7776] ? fput+0x1a8/0x230 [ 143.667820][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 143.673706][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 143.678639][ T7776] __sys_bpf+0x48d/0x810 [ 143.682887][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 143.687645][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.693619][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.699943][ T7776] ? do_syscall_64+0x100/0x230 [ 143.704784][ T7776] __x64_sys_bpf+0x7c/0x90 [ 143.709280][ T7776] do_syscall_64+0xf3/0x230 [ 143.713775][ T7776] ? clear_bhb_loop+0x35/0x90 [ 143.718442][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.724424][ T7776] RIP: 0033:0x7f57f877dff9 [ 143.728841][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.748716][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.757127][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 143.765085][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 143.773131][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 143.781095][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.789147][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 143.797115][ T7776] [ 143.800213][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0db [ 143.807078][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a0db [ 143.816642][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 143.823969][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 143.832638][ T7776] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 143.841248][ T7776] page dumped because: page_pool leak [ 143.846602][ T7776] page_owner tracks the page as allocated [ 143.852447][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889447437, free_ts 136719117344 [ 143.869420][ T7776] post_alloc_hook+0x1f3/0x230 [ 143.874178][ T7776] get_page_from_freelist+0x3045/0x3190 [ 143.879767][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 143.885030][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 143.890581][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 143.896501][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 143.901763][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 143.907152][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 143.912601][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 143.917551][ T7776] __sys_bpf+0x48d/0x810 [ 143.922355][ T7776] __x64_sys_bpf+0x7c/0x90 [ 143.926792][ T7776] do_syscall_64+0xf3/0x230 [ 143.931352][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.937272][ T7776] page last free pid 8 tgid 8 stack trace: [ 143.943107][ T7776] free_unref_page+0xcfb/0xf20 [ 143.947885][ T7776] vfree+0x186/0x2e0 [ 143.951809][ T7776] pcpu_balance_free+0x772/0xa30 [ 143.956755][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 143.961891][ T7776] process_scheduled_works+0xa63/0x1850 [ 143.967459][ T7776] worker_thread+0x870/0xd30 [ 143.972088][ T7776] kthread+0x2f0/0x390 [ 143.976158][ T7776] ret_from_fork+0x4b/0x80 [ 143.980602][ T7776] ret_from_fork_asm+0x1a/0x30 [ 143.985378][ T7776] Modules linked in: [ 143.989315][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 144.001214][ T7776] Tainted: [B]=BAD_PAGE [ 144.005345][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.015381][ T7776] Call Trace: [ 144.018903][ T7776] [ 144.021813][ T7776] dump_stack_lvl+0x241/0x360 [ 144.026481][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.031662][ T7776] ? __pfx_print_modules+0x10/0x10 [ 144.036771][ T7776] bad_page+0x166/0x1b0 [ 144.040916][ T7776] free_unref_page+0xed0/0xf20 [ 144.045771][ T7776] skb_release_data+0x6dc/0x8a0 [ 144.050615][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 144.055637][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 144.060749][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 144.065684][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 144.071307][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 144.077280][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 144.083862][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 144.090442][ T7776] ? read_tsc+0x9/0x20 [ 144.094500][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 144.099694][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 144.106013][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 144.112161][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 144.118742][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 144.125406][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 144.130594][ T7776] ? __phys_addr+0xba/0x170 [ 144.135089][ T7776] ? build_skb_around+0x111/0x260 [ 144.140124][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 144.146020][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 144.151314][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 144.156772][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 144.162691][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 144.168258][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 144.174073][ T7776] ? synchronize_rcu+0x11b/0x360 [ 144.179004][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 144.184285][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 144.190611][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 144.196507][ T7776] ? _copy_from_user+0xa6/0xe0 [ 144.201270][ T7776] ? bpf_test_init+0x15a/0x180 [ 144.206201][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 144.211659][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 144.217027][ T7776] ? __pfx_lock_release+0x10/0x10 [ 144.222047][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 144.227856][ T7776] ? __fget_files+0x29/0x470 [ 144.232436][ T7776] ? fput+0x1a8/0x230 [ 144.236407][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 144.242214][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 144.247147][ T7776] __sys_bpf+0x48d/0x810 [ 144.251385][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 144.256145][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.262116][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.268435][ T7776] ? do_syscall_64+0x100/0x230 [ 144.273186][ T7776] __x64_sys_bpf+0x7c/0x90 [ 144.277589][ T7776] do_syscall_64+0xf3/0x230 [ 144.282079][ T7776] ? clear_bhb_loop+0x35/0x90 [ 144.286744][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.292717][ T7776] RIP: 0033:0x7f57f877dff9 [ 144.297126][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.316730][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.325510][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 144.333482][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 144.341451][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 144.350406][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.358381][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 144.366618][ T7776] [ 144.369725][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0dc [ 144.376504][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a0dc [ 144.385322][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 144.392473][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 144.401081][ T7776] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 144.409690][ T7776] page dumped because: page_pool leak [ 144.415040][ T7776] page_owner tracks the page as allocated [ 144.420777][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889436067, free_ts 136719126319 [ 144.437758][ T7776] post_alloc_hook+0x1f3/0x230 [ 144.442577][ T7776] get_page_from_freelist+0x3045/0x3190 [ 144.448151][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 144.453391][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 144.458979][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 144.464884][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 144.470115][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 144.475498][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 144.480915][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 144.485856][ T7776] __sys_bpf+0x48d/0x810 [ 144.490142][ T7776] __x64_sys_bpf+0x7c/0x90 [ 144.494576][ T7776] do_syscall_64+0xf3/0x230 [ 144.499125][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.505064][ T7776] page last free pid 8 tgid 8 stack trace: [ 144.510901][ T7776] free_unref_page+0xcfb/0xf20 [ 144.517079][ T7776] vfree+0x186/0x2e0 [ 144.521169][ T7776] pcpu_balance_free+0x772/0xa30 [ 144.526439][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 144.532144][ T7776] process_scheduled_works+0xa63/0x1850 [ 144.537871][ T7776] worker_thread+0x870/0xd30 [ 144.542504][ T7776] kthread+0x2f0/0x390 [ 144.546612][ T7776] ret_from_fork+0x4b/0x80 [ 144.551065][ T7776] ret_from_fork_asm+0x1a/0x30 [ 144.555851][ T7776] Modules linked in: [ 144.559790][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 144.571533][ T7776] Tainted: [B]=BAD_PAGE [ 144.575677][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.585711][ T7776] Call Trace: [ 144.589061][ T7776] [ 144.591997][ T7776] dump_stack_lvl+0x241/0x360 [ 144.596662][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.601847][ T7776] ? __pfx_print_modules+0x10/0x10 [ 144.606942][ T7776] bad_page+0x166/0x1b0 [ 144.611078][ T7776] free_unref_page+0xed0/0xf20 [ 144.615846][ T7776] skb_release_data+0x6dc/0x8a0 [ 144.620706][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 144.625738][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 144.630861][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 144.635798][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 144.641251][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 144.647237][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 144.653925][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 144.660452][ T7776] ? read_tsc+0x9/0x20 [ 144.664510][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 144.669707][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 144.676038][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 144.682185][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 144.688587][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 144.695250][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 144.700435][ T7776] ? __phys_addr+0xba/0x170 [ 144.704924][ T7776] ? build_skb_around+0x111/0x260 [ 144.709942][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 144.715832][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 144.721112][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 144.726568][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 144.732455][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 144.737996][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 144.743808][ T7776] ? synchronize_rcu+0x11b/0x360 [ 144.748735][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 144.754020][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 144.760263][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 144.766257][ T7776] ? _copy_from_user+0xa6/0xe0 [ 144.771015][ T7776] ? bpf_test_init+0x15a/0x180 [ 144.775776][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 144.781230][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 144.786597][ T7776] ? __pfx_lock_release+0x10/0x10 [ 144.791617][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 144.797414][ T7776] ? __fget_files+0x29/0x470 [ 144.802088][ T7776] ? fput+0x1a8/0x230 [ 144.806059][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 144.811945][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 144.816880][ T7776] __sys_bpf+0x48d/0x810 [ 144.821116][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 144.825875][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.831869][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.838212][ T7776] ? do_syscall_64+0x100/0x230 [ 144.842993][ T7776] __x64_sys_bpf+0x7c/0x90 [ 144.847406][ T7776] do_syscall_64+0xf3/0x230 [ 144.851908][ T7776] ? clear_bhb_loop+0x35/0x90 [ 144.856590][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.862832][ T7776] RIP: 0033:0x7f57f877dff9 [ 144.867238][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.886861][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.895274][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 144.903246][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 144.911220][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 144.919197][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.927281][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 144.935267][ T7776] [ 144.938369][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0dd [ 144.945187][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a0dd [ 144.953995][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 144.961160][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 144.969773][ T7776] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 144.978336][ T7776] page dumped because: page_pool leak [ 144.983734][ T7776] page_owner tracks the page as allocated [ 144.989496][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889424448, free_ts 136719141734 [ 145.006520][ T7776] post_alloc_hook+0x1f3/0x230 [ 145.011422][ T7776] get_page_from_freelist+0x3045/0x3190 [ 145.017055][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 145.022292][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 145.027759][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 145.033683][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 145.038938][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 145.044359][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 145.049885][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 145.054833][ T7776] __sys_bpf+0x48d/0x810 [ 145.059134][ T7776] __x64_sys_bpf+0x7c/0x90 [ 145.063562][ T7776] do_syscall_64+0xf3/0x230 [ 145.068143][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.074110][ T7776] page last free pid 8 tgid 8 stack trace: [ 145.079974][ T7776] free_unref_page+0xcfb/0xf20 [ 145.084852][ T7776] vfree+0x186/0x2e0 [ 145.088786][ T7776] pcpu_balance_free+0x772/0xa30 [ 145.093750][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 145.098924][ T7776] process_scheduled_works+0xa63/0x1850 [ 145.104489][ T7776] worker_thread+0x870/0xd30 [ 145.109329][ T7776] kthread+0x2f0/0x390 [ 145.113525][ T7776] ret_from_fork+0x4b/0x80 [ 145.117949][ T7776] ret_from_fork_asm+0x1a/0x30 [ 145.122748][ T7776] Modules linked in: [ 145.126651][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 145.138353][ T7776] Tainted: [B]=BAD_PAGE [ 145.142482][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.152613][ T7776] Call Trace: [ 145.155887][ T7776] [ 145.158808][ T7776] dump_stack_lvl+0x241/0x360 [ 145.163586][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.168776][ T7776] ? __pfx_print_modules+0x10/0x10 [ 145.173870][ T7776] bad_page+0x166/0x1b0 [ 145.178031][ T7776] free_unref_page+0xed0/0xf20 [ 145.182808][ T7776] skb_release_data+0x6dc/0x8a0 [ 145.187658][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 145.192779][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 145.197967][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 145.202895][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 145.208350][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 145.214319][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 145.220893][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 145.227577][ T7776] ? read_tsc+0x9/0x20 [ 145.231658][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 145.236866][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 145.243198][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 145.249358][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 145.255681][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 145.262443][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 145.267636][ T7776] ? __phys_addr+0xba/0x170 [ 145.272220][ T7776] ? build_skb_around+0x111/0x260 [ 145.277238][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 145.283219][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 145.288500][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 145.293954][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 145.299862][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 145.305436][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 145.311272][ T7776] ? synchronize_rcu+0x11b/0x360 [ 145.316228][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 145.321637][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 145.327895][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 145.333807][ T7776] ? _copy_from_user+0xa6/0xe0 [ 145.338573][ T7776] ? bpf_test_init+0x15a/0x180 [ 145.343333][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 145.348786][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 145.354163][ T7776] ? __pfx_lock_release+0x10/0x10 [ 145.359183][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.364990][ T7776] ? __fget_files+0x29/0x470 [ 145.369587][ T7776] ? fput+0x1a8/0x230 [ 145.373571][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.379380][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 145.384331][ T7776] __sys_bpf+0x48d/0x810 [ 145.388566][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 145.393330][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.399305][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.405625][ T7776] ? do_syscall_64+0x100/0x230 [ 145.410379][ T7776] __x64_sys_bpf+0x7c/0x90 [ 145.414783][ T7776] do_syscall_64+0xf3/0x230 [ 145.419277][ T7776] ? clear_bhb_loop+0x35/0x90 [ 145.423944][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.429833][ T7776] RIP: 0033:0x7f57f877dff9 [ 145.434239][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.453837][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.462245][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 145.470298][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 145.478258][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 145.486485][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.494446][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 145.502412][ T7776] [ 145.505529][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0de [ 145.512348][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a0de [ 145.521191][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 145.528342][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 145.537007][ T7776] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 145.545624][ T7776] page dumped because: page_pool leak [ 145.551019][ T7776] page_owner tracks the page as allocated [ 145.556818][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889413120, free_ts 136719150531 [ 145.573875][ T7776] post_alloc_hook+0x1f3/0x230 [ 145.578686][ T7776] get_page_from_freelist+0x3045/0x3190 [ 145.584330][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 145.589553][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 145.595015][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 145.600948][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 145.606166][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 145.611604][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 145.616996][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 145.622007][ T7776] __sys_bpf+0x48d/0x810 [ 145.626262][ T7776] __x64_sys_bpf+0x7c/0x90 [ 145.630714][ T7776] do_syscall_64+0xf3/0x230 [ 145.635219][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.641161][ T7776] page last free pid 8 tgid 8 stack trace: [ 145.646964][ T7776] free_unref_page+0xcfb/0xf20 [ 145.652065][ T7776] vfree+0x186/0x2e0 [ 145.655988][ T7776] pcpu_balance_free+0x772/0xa30 [ 145.660967][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 145.666094][ T7776] process_scheduled_works+0xa63/0x1850 [ 145.671679][ T7776] worker_thread+0x870/0xd30 [ 145.676281][ T7776] kthread+0x2f0/0x390 [ 145.680384][ T7776] ret_from_fork+0x4b/0x80 [ 145.684824][ T7776] ret_from_fork_asm+0x1a/0x30 [ 145.689621][ T7776] Modules linked in: [ 145.693523][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 145.705231][ T7776] Tainted: [B]=BAD_PAGE [ 145.709369][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.719444][ T7776] Call Trace: [ 145.722711][ T7776] [ 145.725643][ T7776] dump_stack_lvl+0x241/0x360 [ 145.730323][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.735514][ T7776] ? __pfx_print_modules+0x10/0x10 [ 145.740610][ T7776] bad_page+0x166/0x1b0 [ 145.744751][ T7776] free_unref_page+0xed0/0xf20 [ 145.749514][ T7776] skb_release_data+0x6dc/0x8a0 [ 145.754372][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 145.759403][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 145.764501][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 145.769599][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 145.775049][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 145.781025][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 145.787595][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 145.794075][ T7776] ? read_tsc+0x9/0x20 [ 145.798122][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 145.803321][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 145.809734][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 145.816056][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 145.822402][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 145.829069][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 145.834262][ T7776] ? __phys_addr+0xba/0x170 [ 145.838755][ T7776] ? build_skb_around+0x111/0x260 [ 145.843787][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 145.849765][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 145.855057][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 145.860596][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 145.866515][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 145.872258][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 145.878086][ T7776] ? synchronize_rcu+0x11b/0x360 [ 145.883037][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 145.888330][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 145.894599][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 145.900525][ T7776] ? _copy_from_user+0xa6/0xe0 [ 145.905649][ T7776] ? bpf_test_init+0x15a/0x180 [ 145.910513][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 145.916060][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 145.921462][ T7776] ? __pfx_lock_release+0x10/0x10 [ 145.926513][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.932363][ T7776] ? __fget_files+0x29/0x470 [ 145.936955][ T7776] ? fput+0x1a8/0x230 [ 145.940931][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.946746][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 145.951694][ T7776] __sys_bpf+0x48d/0x810 [ 145.955938][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 145.960700][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.966688][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.973018][ T7776] ? do_syscall_64+0x100/0x230 [ 145.977864][ T7776] __x64_sys_bpf+0x7c/0x90 [ 145.982292][ T7776] do_syscall_64+0xf3/0x230 [ 145.986802][ T7776] ? clear_bhb_loop+0x35/0x90 [ 145.991483][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.997389][ T7776] RIP: 0033:0x7f57f877dff9 [ 146.001837][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.021461][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.029870][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 146.037834][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 146.045820][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 146.053815][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.061784][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 146.069752][ T7776] [ 146.072872][ T7776] BUG: Bad page state in process syz.1.807 pfn:7a0df [ 146.079854][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a0df [ 146.088664][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 146.095808][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 146.104447][ T7776] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 146.113052][ T7776] page dumped because: page_pool leak [ 146.118445][ T7776] page_owner tracks the page as allocated [ 146.124205][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889401559, free_ts 136719159313 [ 146.141280][ T7776] post_alloc_hook+0x1f3/0x230 [ 146.146036][ T7776] get_page_from_freelist+0x3045/0x3190 [ 146.151676][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 146.156929][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 146.162432][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 146.168358][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 146.173606][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 146.179036][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 146.184599][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 146.189573][ T7776] __sys_bpf+0x48d/0x810 [ 146.193821][ T7776] __x64_sys_bpf+0x7c/0x90 [ 146.198221][ T7776] do_syscall_64+0xf3/0x230 [ 146.202754][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.208693][ T7776] page last free pid 8 tgid 8 stack trace: [ 146.214504][ T7776] free_unref_page+0xcfb/0xf20 [ 146.219342][ T7776] vfree+0x186/0x2e0 [ 146.223254][ T7776] pcpu_balance_free+0x772/0xa30 [ 146.228201][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 146.233474][ T7776] process_scheduled_works+0xa63/0x1850 [ 146.239047][ T7776] worker_thread+0x870/0xd30 [ 146.243642][ T7776] kthread+0x2f0/0x390 [ 146.247709][ T7776] ret_from_fork+0x4b/0x80 [ 146.252182][ T7776] ret_from_fork_asm+0x1a/0x30 [ 146.256956][ T7776] Modules linked in: [ 146.260882][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 146.272607][ T7776] Tainted: [B]=BAD_PAGE [ 146.276737][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.286779][ T7776] Call Trace: [ 146.290062][ T7776] [ 146.292973][ T7776] dump_stack_lvl+0x241/0x360 [ 146.297637][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.302832][ T7776] ? __pfx_print_modules+0x10/0x10 [ 146.308014][ T7776] bad_page+0x166/0x1b0 [ 146.312150][ T7776] free_unref_page+0xed0/0xf20 [ 146.316921][ T7776] skb_release_data+0x6dc/0x8a0 [ 146.321763][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 146.326772][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 146.331865][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 146.336904][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 146.342369][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 146.348343][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 146.354917][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 146.361835][ T7776] ? read_tsc+0x9/0x20 [ 146.365888][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 146.371087][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 146.377412][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 146.383555][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 146.389881][ T7776] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 146.396729][ T7776] ? __pfx_eth_type_trans+0x10/0x10 [ 146.401920][ T7776] ? __phys_addr+0xba/0x170 [ 146.406411][ T7776] ? build_skb_around+0x111/0x260 [ 146.411442][ T7776] ? __xdp_build_skb_from_frame+0x338/0x650 [ 146.417531][ T7776] netif_receive_skb_list+0x55/0x4b0 [ 146.422853][ T7776] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 146.428343][ T7776] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 146.434280][ T7776] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 146.439861][ T7776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 146.445688][ T7776] ? synchronize_rcu+0x11b/0x360 [ 146.450754][ T7776] ? __pfx_synchronize_rcu+0x10/0x10 [ 146.456079][ T7776] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 146.462337][ T7776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 146.468244][ T7776] ? _copy_from_user+0xa6/0xe0 [ 146.473103][ T7776] ? bpf_test_init+0x15a/0x180 [ 146.477875][ T7776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 146.483340][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 146.488710][ T7776] ? __pfx_lock_release+0x10/0x10 [ 146.493741][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 146.499552][ T7776] ? __fget_files+0x29/0x470 [ 146.504144][ T7776] ? fput+0x1a8/0x230 [ 146.508121][ T7776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 146.514061][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 146.519575][ T7776] __sys_bpf+0x48d/0x810 [ 146.523857][ T7776] ? __pfx___sys_bpf+0x10/0x10 [ 146.528828][ T7776] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.534844][ T7776] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.541184][ T7776] ? do_syscall_64+0x100/0x230 [ 146.545977][ T7776] __x64_sys_bpf+0x7c/0x90 [ 146.550397][ T7776] do_syscall_64+0xf3/0x230 [ 146.554903][ T7776] ? clear_bhb_loop+0x35/0x90 [ 146.559588][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.565564][ T7776] RIP: 0033:0x7f57f877dff9 [ 146.569981][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.589951][ T7776] RSP: 002b:00007f57f9557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.598374][ T7776] RAX: ffffffffffffffda RBX: 00007f57f8936058 RCX: 00007f57f877dff9 [ 146.606511][ T7776] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 146.614518][ T7776] RBP: 00007f57f87f0296 R08: 0000000000000000 R09: 0000000000000000 [ 146.622506][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.630598][ T7776] R13: 0000000000000000 R14: 00007f57f8936058 R15: 00007fffa90461e8 [ 146.638602][ T7776] [ 146.641849][ T7776] BUG: Bad page state in process syz.1.807 pfn:5bbe0 [ 146.648669][ T7776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bbe0000 pfn:0x5bbe0 [ 146.658819][ T7776] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 146.665948][ T7776] raw: 00fff00000000000 dead000000000040 ffff888060c4d000 0000000000000000 [ 146.674560][ T7776] raw: ffff88805bbe0000 0000000000000001 00000000ffffffff 0000000000000000 [ 146.683246][ T7776] page dumped because: page_pool leak [ 146.688638][ T7776] page_owner tracks the page as allocated [ 146.694348][ T7776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7776, tgid 7771 (syz.1.807), ts 136889389932, free_ts 136719168232 [ 146.711322][ T7776] post_alloc_hook+0x1f3/0x230 [ 146.716122][ T7776] get_page_from_freelist+0x3045/0x3190 [ 146.721704][ T7776] __alloc_pages_noprof+0x256/0x6c0 [ 146.726902][ T7776] alloc_pages_bulk_noprof+0x729/0xd40 [ 146.732399][ T7776] __page_pool_alloc_pages_slow+0x122/0x690 [ 146.738306][ T7776] page_pool_alloc_pages+0xd0/0x1c0 [ 146.743546][ T7776] bpf_test_run_xdp_live+0x950/0x2160 [ 146.748976][ T7776] bpf_prog_test_run_xdp+0x805/0x11e0 [ 146.754363][ T7776] bpf_prog_test_run+0x2e4/0x360 [ 146.759330][ T7776] __sys_bpf+0x48d/0x810 [ 146.763578][ T7776] __x64_sys_bpf+0x7c/0x90 [ 146.768001][ T7776] do_syscall_64+0xf3/0x230 [ 146.772541][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.778446][ T7776] page last free pid 8 tgid 8 stack trace: [ 146.784298][ T7776] free_unref_page+0xcfb/0xf20 [ 146.789289][ T7776] vfree+0x186/0x2e0 [ 146.793200][ T7776] pcpu_balance_free+0x772/0xa30 [ 146.798145][ T7776] pcpu_balance_workfn+0xc9f/0xd40 [ 146.803288][ T7776] process_scheduled_works+0xa63/0x1850 [ 146.808865][ T7776] worker_thread+0x870/0xd30 [ 146.813530][ T7776] kthread+0x2f0/0x390 [ 146.817692][ T7776] ret_from_fork+0x4b/0x80 [ 146.822143][ T7776] ret_from_fork_asm+0x1a/0x30 [ 146.827009][ T7776] Modules linked in: [ 146.830953][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.1.807 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 146.842701][ T7776] Tainted: [B]=BAD_PAGE [ 146.846871][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.857119][ T7776] Call Trace: [ 146.860483][ T7776] [ 146.863433][ T7776] dump_stack_lvl+0x241/0x360 [ 146.868499][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.873793][ T7776] ? __pfx_print_modules+0x10/0x10 [ 146.878899][ T7776] bad_page+0x166/0x1b0 [ 146.883041][ T7776] free_unref_page+0xed0/0xf20 [ 146.887798][ T7776] skb_release_data+0x6dc/0x8a0 [ 146.892648][ T7776] sk_skb_reason_drop+0x1c9/0x380 [ 146.897665][ T7776] ? packet_rcv_fanout+0x106/0x6a0 [ 146.902808][ T7776] packet_rcv_fanout+0x117/0x6a0 [ 146.907758][ T7776] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 146.913209][ T7776] __netif_receive_skb_list_core+0x8b7/0x980 [ 146.919291][ T7776] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 146.925972][ T7776] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 146.932471][ T7776] ? read_tsc+0x9/0x20 [ 146.936523][ T7776] ? timekeeping_get_ns+0x2c0/0x420 [ 146.941718][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 146.948137][ T7776] netif_receive_skb_list_internal+0xa51/0xe30 [ 146.954381][ T7776] ? netif_receive_skb_list_internal+0x4e8/0xe30