last executing test programs:

5.614559068s ago: executing program 1 (id=2):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
recvmmsg$unix(r1, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100020}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)

4.679103838s ago: executing program 1 (id=11):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
unshare(0x69a04c8e98d914be)
setsockopt$packet_add_memb(r1, 0x107, 0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
r5 = socket(0x11, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

4.232408083s ago: executing program 2 (id=14):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100020}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)

3.204807778s ago: executing program 2 (id=21):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000900)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="0029687dc171d07c6974395f07db", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000001c0)={0x2, 0x3, 0x12}) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010100000000000000000100000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002400000000014000000020a0500"], 0x98}}, 0x0) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d8b6febaa26f7f61da2a784be3"}]}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x81) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)

3.06990496s ago: executing program 2 (id=24):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x44040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="288000002a000900a7e1902a000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0001800600000005470000"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000000000008c800000008040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008e04000000000080000000000000000000000000054c149f549fb8bf9aee304ef3ea5eb97a2debcfc51a61978276df94e670bdbabe96854ca45b30d758e0dd45f002118944fc4f3449a9fc1e23eb3021"], 0x48)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4)
r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2000d3df5029939d722900000000000000000000000000000000fc8356d7904235169c959fb40b4578a5aa69b86d4f1d8ff9ac018b681da6db78e5e98667db0766ab45903b687e0637378dc207fbbf5d1a0acdf40c7510f04bf3a64205f3b3c695b4626621060362c492d83542fcbb2a8c1225a84ec2ea33ce4abf1e4793e59abbeaef41eee76949837b8eba2ad222283ad370e9d5c180177c7a2bf36c06495ba2122fdd00000000ea93129625176c3b07f5991ad10362bfd236ea48aa18fed9616224ede411258e0312b19b1c401f"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010102, @private=0xa010101}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x28000600)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x18, 0x5a, 0x1, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
close(r4)
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x10, 0x803, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x20000000000001f2, 0x0, 0x0, 0xffffffff, 0xffffffffffffffde, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.747262245s ago: executing program 2 (id=27):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000140)=""/137, &(0x7f0000000000)=0x89)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})
getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@initdev, <r3=>0x0}, &(0x7f00000000c0)=0x14)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x3c, r5, 0x9348bc6c72b0090d, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4e}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @multicast}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r7, &(0x7f0000000380)={0x23, 0x2, 0x81, 0x6}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d00000073080002"], 0x78}}, 0x40)
r8 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40]}}]}}]}, 0x8c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0)
sendmmsg$inet(r11, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000090c00000000fe05000300000000d18a7353320749dd4685f4cb6f630c457282c577b23eac02dde40421a6f8bdf29d7127b6d609487e28fd7ccb606574d6991ac93372a89ede92825e68896014943a2535058bc030aa53c8f69efc8afc88a108fd8cb24a446463838f69e4e02530520cd9164891ecea5e7d5b08ec", @ANYRES32=0x0, @ANYBLOB="10040000000000001c0012800b00010062726964676500000c0002800500180001000000"], 0x3c}}, 0x840)

2.423623244s ago: executing program 4 (id=30):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002540)=@delchain={0x330, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @filter_kind_options=@f_flow={{0x9}, {0x2e0, 0x2, [@TCA_FLOW_EMATCHES={0x2dc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{}, {0xffffffffffffffff}}}, @TCF_EM_CMP={0x18, 0x1}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xd, 0x2, 0x6}, {0x8001, 0x1, 0x1, "a4"}}}, @TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{}, {0x2}}}, @TCF_EM_META={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ec8a277c38cd99", @TCF_META_TYPE_VAR="fe2802bfcc", @TCF_META_TYPE_VAR="b3342c0610"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14, 0x0, 0x0, 0x0, {{0x0, 0x7, 0x3}}}, @TCF_EM_IPSET={0x10}, @TCF_EM_META={0x5c, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="82", @TCF_META_TYPE_VAR="98", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e6949b93e70242", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a76023", @TCF_META_TYPE_VAR='\b', @TCF_META_TYPE_VAR="8dfff919b5"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="a2c000a8dfc2b6d930"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3ffd}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "e8f3e9005c"}}}, @TCF_EM_NBYTE={0x10, 0x0, 0x0, 0x0, {{0x0, 0x2, 0x5}}}, @TCF_EM_IPSET={0x10}]}, @TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x58, 0x0, 0x0, 0x0, {{}, "668e74dff05c58baf0fbb061717b123cb89ce91a683c343344517576e8ba09fecbf8e75b0016b7c6b2a0c8eb04e6d16b8961097b53d295ebc7eb349e652deeb958bff39a5c9ddd43b4"}}, @TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x0, 0x3}}}, @TCF_EM_CANID={0x14}, @TCF_EM_META={0x28, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='/']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="b1", @TCF_META_TYPE_VAR="0318690dbcb7ea26", @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2, 0x1}, {0x81, 0xc, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x0, 0x2}, {0x200, 0x81, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="74e32609e1", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f726ddd7e2"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x330}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendto$packet(r2, 0x0, 0xfffffffffffffd86, 0x20000444, &(0x7f0000003340)={0x11, 0x0, r1}, 0x14)
r4 = socket(0x1e, 0x1, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0xa)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000380)={0x5, {{0xa, 0x4e22, 0x1, @remote, 0xfffffffd}}, {{0xa, 0x4e23, 0xc, @empty, 0x8}}}, 0x108)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800010000000000080008800400128008000200010000002c0004800500030000000000050003000000000005000300000000000500030000000000050003"], 0x58}}, 0x0)
connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r4, &(0x7f0000004440)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004600)=ANY=[], 0x38}}, {{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004940)=ANY=[], 0xa0}}], 0x2, 0x0)

2.305203686s ago: executing program 2 (id=31):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x7, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = accept(r0, &(0x7f00000000c0)=@in, &(0x7f0000000040)=0x80)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gre0\x00', <r4=>0x0})
r5 = accept4$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x0)
sendto$packet(r5, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.200387742s ago: executing program 4 (id=34):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x22020600)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
getpeername$l2tp(r4, 0x0, &(0x7f0000000640)=0x6)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc059)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000040000000bbda44713ade3236e85b1fc412ce53c8850a4652abe078c2369bf1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$FIOCLEX(r5, 0x5451)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
writev(r3, &(0x7f0000000400)=[{0x0}], 0x1)

2.054736302s ago: executing program 2 (id=36):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @null, @null, @default, @bcast, @default, @default]}, &(0x7f0000000080)=0x80, 0x80800)
r1 = accept4$packet(r0, 0x0, &(0x7f00000000c0), 0x80800)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
unshare(0x40040000) (async)
ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000001c0)={0x4, 0x18, [0x0, 0x1, 0x5, 0x9], &(0x7f0000000180)=[0x0, 0x0, 0x0]})
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000820}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0383}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b40)=@broute={'broute\x00', 0x20, 0x5, 0x78e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000340), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x34, 0x88b5, 'wlan1\x00', 'veth1_virt_wifi\x00', 'ipvlan0\x00', 'veth1_vlan\x00', @broadcast, [0xff, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff], 0xa6, 0xd6, 0x206, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x1, 0x1000, 0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:cron_spool_t:s0\x00'}}}}, {0x5, 0x0, 0xf7, 'batadv_slave_1\x00', 'xfrm0\x00', 'veth1_macvtap\x00', 'veth1_to_batadv\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], 0xa6, 0xd6, 0x14e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x1, 0x10, 0x988}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x1c2a, 0x800, 0x1, 0x0, "e1e41a9ff62b8f8fa4505fddf4371af82d853aae6fc58214e2a60d4e00ed35371d87863ea1cda82caa07183bdcb32cc066eac7ead92b4f77ac56eda72cc86931"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x50, 0x88a2, 'batadv0\x00', 'pimreg\x00', 'pimreg0\x00', 'macsec0\x00', @empty, [0x0, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3, {0x9, 0x3ba, 0x200, @local, [0x0, 0x0, 0xff, 0x0, 0xff], 0x8, 0x0, 0x6, 0x9, @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x4e23, 0x4e21, 0xcc00, 0xd75, 0x5, 0x3, 0x17b, 0x4, 0x1ff, 0x6}, 0x8, 0x8}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0xa, 0x600, 'nicvf0\x00', 'batadv_slave_0\x00', 'gretap0\x00', '\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xaca9e28c52c504f2], @multicast, [0x0, 0x647bef5bd179f8f4, 0x0, 0xff, 0x0, 0xff], 0xde, 0x186, 0x1b6, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x4, 0x1, 0x7, {0xf8f1}}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x81, 0x6, 0xd6, 0x0, 0x0, "cda0f40e7cd08c4e168983ec2c999c9c6fcdfc56c5ac6548916df253652572b6d1ca9ebe94643cb2bca6c5813cd92a6e379dd3225440c393506a17296244728b"}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}, {0x9, 0x4c, 0x86dd, 'veth0_macvtap\x00', 'veth1_to_bond\x00', 'team_slave_0\x00', 'vlan1\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xb6, 0xb6, 0xe6, [@limit={{'limit\x00', 0x0, 0x20}, {{0x1, 0x0, 0x1020, 0x1, 0x7, 0x8}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}}]}]}, 0x806) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'ip6_vti0\x00', <r5=>r2, 0x29, 0xd, 0x5d, 0x3, 0x4, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x8, 0x4}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f0000000bc0), 0xc, &(0x7f0000001140)={&(0x7f0000000e00)=@updsa={0x328, 0x1a, 0x100, 0x70bd25, 0x25dfdbfe, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x4e20, 0x6, 0x2, 0x20, 0x80, 0x8, r5, r7}, {@in6=@private2, 0x4d2, 0x6c}, @in=@private=0xa010101, {0x19, 0x8000000000000001, 0x0, 0x9, 0x8001, 0x1, 0x9, 0x9}, {0x1ff, 0x5, 0x6, 0x3}, {0x7fff, 0x1, 0xc0}, 0x70bd25, 0x3500, 0x2, 0x0, 0x3, 0x11}, [@tmpl={0xc4, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4d5, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x0, 0x2, 0x4, 0x4, 0x1ff, 0x8ba}, {{@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d5, 0x3c}, 0xa, @in=@private=0xa010100, 0x3501, 0x0, 0x3, 0x95, 0x7, 0xe, 0x9}, {{@in=@local, 0x4d5, 0x3c}, 0xa, @in=@local, 0x3504, 0x1, 0x1, 0xe7, 0x0, 0x80000000, 0x3}]}, @tmpl={0x84, 0x5, [{{@in6=@empty, 0x4d5, 0xff}, 0x2, @in6=@mcast2, 0x3507, 0x1, 0x0, 0x2, 0x7fffffff, 0x1, 0x7fff}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x2, 0x1, 0x1, 0x2c3, 0x7ff, 0xdaf6}]}, @migrate={0xe8, 0x11, [{@in=@rand_addr=0x64010102, @in6=@mcast1, @in=@multicast2, @in6=@loopback, 0x33, 0x2, 0x0, 0x3505, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, @in=@rand_addr=0x64010100, @in6=@private1, 0x2b, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@loopback, @in=@private=0xa010101, @in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x4, 0x0, 0x0, 0xa, 0xa}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x328}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001280)={'sit0\x00', &(0x7f0000001200)={'gre0\x00', <r8=>r6, 0x700, 0x40, 0x8, 0x81, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x67, 0x0, 0x3, 0x29, 0x0, @empty, @local, {[@noop, @ssrr={0x89, 0x17, 0xab, [@multicast2, @private=0xa010100, @broadcast, @broadcast, @multicast1]}, @noop]}}}}})
sendto$packet(r0, &(0x7f00000011c0)="538710130430eb0735c24d196726a456652c2ff4e751b0189bb0e2bf6e53cef10f7369121c9344867f545f991c59", 0x2e, 0x8000, &(0x7f00000012c0)={0x11, 0x15, r8, 0x1, 0x3}, 0x14) (async)
connect$pppl2tp(r0, &(0x7f0000001300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @remote}, 0x3, 0x0, 0x1, 0x1}}, 0x2e) (async)
r9 = socket(0xf2557898f71df30a, 0x3, 0x3) (async)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000001340)={0x3c, 0xaaf1, 0x6, 0x6, 0x9, 0x81}) (async)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001380)=0x2) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) (async)
ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000001540)="e324385b7348e88a4355aab21377e875579aa035b96d489855646a3b5a618b7bf4ff989157d26a5d353ebdb9529e136b0c421e9c108fa0cc7ded276953b8d8405fc444b0512bff3cbb57fe5d17cc67df386502b65682d67ac0022c60e962b0a142e4249b7d97672d7e0f54bcb8c2c8e0b3083db39e4d5b143e3d62ed62735deece1009d2a3a586fe9271a927b48500c18e9eadc4be2238d3986396e4e07890ab31bcdaafcb7c78c3c7df1d11d3a5aa") (async)
syz_emit_ethernet(0x56, &(0x7f0000001600)={@empty, @local, @void, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x2d, 0x2, 0x0, 0x0, "7793679340f4e2a980b9c07975c8f328817bec62f2147687a1008a52fad64db01d4dfbf0bd22088718d0976e97678bfe648c32863befad7f37dc5ccf0680605c"}}}}, &(0x7f0000001680)={0x1, 0x3, [0x2ff, 0xd31, 0xb7e, 0xd01]}) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, 0x4, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x81) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000017c0), r11) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f0000001800)={0x0, 0x2710}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001840)={<r12=>0x0, 0x186, 0x3, 0x5, 0x0, 0xfffffff9}, &(0x7f0000001880)=0x14)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000018c0)={0x6, 0x0, 0x400, 0x1ff, r12}, 0x10)
getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000001900)={'filter\x00', 0x8a, "1e4082d739e57d3f981498387c86f55c09e312f9c037de896486d67c1be96b6e69de8ca813f7ccdbe3e4fea04942dc79cc79d2d43b56e783db54d68e75ced8bd53c0c258720bda0e692440db30d3f640d9dec7cbbfd3a7af73979923629a976e8a76859f060a71a4aed194a6c43fa25d27babb767bccc4d4148a2fcd2f4525426e4427aec61ab179b617"}, &(0x7f00000019c0)=0xae)

1.703439501s ago: executing program 4 (id=39):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r0, 0x8) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x18, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8948, &(0x7f0000000580)={'vlan0\x00', 0x6})
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8)
sendto$inet(r1, &(0x7f0000000b00)='E', 0x1, 0x4008800, 0x0, 0x0)

1.693826418s ago: executing program 3 (id=40):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r2, &(0x7f0000003100)=@id, 0x10)
sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0)
bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, [0x5, 0x7fffffffffffffff, 0x10, 0x8, 0x1, 0x3, 0x3, 0xfffffffffffffff7, 0x4, 0x2, 0x5, 0x9, 0x3, 0x6, 0x1]}, &(0x7f0000000200)=0x100)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000200010000000800010000000000040008800400048038000c8014000b8008000a"], 0x64}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x38, r8, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}]}, 0x38}}, 0x0)
r11 = socket(0x15, 0x5, 0x0)
connect$netrom(r11, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x1, 0x2, [@broadcast, @multicast2]}, 0x18)

1.448054489s ago: executing program 0 (id=41):
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2000000}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
accept4(r0, &(0x7f0000000000)=@ll, &(0x7f00000000c0)=0x80, 0x81000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x325)

741.781795ms ago: executing program 4 (id=42):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c140}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x44}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280"], 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c140}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x44}}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280"], 0x24}}, 0x0) (async)

739.977615ms ago: executing program 4 (id=43):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6}, 0xc)
read(r0, &(0x7f0000000040)=""/153, 0x99)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000100)=0x1, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="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", 0xfc)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x24, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x284}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @exit, @call={0x85, 0x0, 0x0, 0x81}, @generic={0x5, 0xb, 0x9, 0x8, 0x8ab}, @jmp={0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffffffffffff4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x22, &(0x7f0000000500)=""/34, 0x41100, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x6, 0xffffffff, 0x2a9f}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x3, 0x3, 0x9, 0x9}, {0x2, 0x1, 0x1, 0x7}, {0x1, 0x3, 0x1, 0x2}, {0x0, 0x4, 0x2, 0x3}, {0x3, 0x5, 0xc, 0x9}, {0x4, 0x2, 0x1, 0x7}, {0x0, 0x4, 0xe, 0x8}, {0x3, 0x5, 0x10, 0x2}, {0x2, 0x2, 0xa, 0x6}], 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=<r4=>r2, 0x35, 0x0, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
pipe(&(0x7f0000000900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r6, r3, 0x8, 0x3c, 0x0, @void, @void, @void, @value=r8, r5}, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@setneightbl={0x30, 0x43, 0x10, 0x70bd2d, 0x25dfdbfd, {0xa}, [@NDTA_THRESH2={0x8, 0x3, 0x8000}, @NDTA_THRESH3={0x8, 0x4, 0x10}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x4000005)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb4, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xb4}}, 0x4000050)
close(r6)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r10 = accept$ax25(r4, &(0x7f0000000ec0)={{0x3, @null}, [@remote, @remote, @rose, @rose, @default, @rose, @bcast, @rose]}, &(0x7f0000000f40)=0x48)
ioctl$FICLONE(r9, 0x40049409, r10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r4)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xf8, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20044042}, 0x4000)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r7)
sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x68, r12, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "d7705a8c35171787b4ac011697c1f3"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4002}, 0x40000)
openat$cgroup_root(0xffffff9c, &(0x7f0000001300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), r7)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r14, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004041)
ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000001480))
socket$tipc(0x1e, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000014c0)={[{0x2d, 'rlimit'}, {0x2d, 'net_cls'}, {0x2d, 'net_prio'}, {0x2b, 'memory'}]}, 0x23)
connect$caif(0xffffffffffffffff, &(0x7f0000001500)=@rfm={0x25, 0xfffffff9, "cbe72bd2fe1d6ffa870163fcaa889a82"}, 0x18)

735.994275ms ago: executing program 0 (id=44):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="c2826b68d8ef5571ae6d728819057de45b", @ANYRES16=r3, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32, @ANYBLOB="410000000000000001000603000014000300060a000409f100f006e8ffff00000000080007003a3a0809140002"], 0x44}, 0x1, 0x1000000}, 0x5943c8d0e51b76be) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0) (async)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64, @ANYRES8=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private, @in6=@dev}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0xfc, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="69c9b0986376"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040841}, 0xc000051) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe83)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r11, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200025bd7099639eba5089e9940000fe8000000000000000040000000000ba0000000a326a0fb1c3c6c03436d4"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c4)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0fe9790de02cf6d2"], 0x24}}, 0x0)
r13 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}, {0x10, 0x110, 0xb}], 0x20}, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

735.276801ms ago: executing program 3 (id=45):
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={<r0=>0x0, 0x90, "1aaaf1b886f2571adc659c8d2365d1072c5f60cd0d1f7766d44ee7f090d1f0328d82c620329ce2b6e5e1e8fe28aea7bb35de04f44d772706751e74cffd6706cfc97b42cbca5550e2af86367b2cb8f34547baf2da63401a5a8647004f3951a4722dd624dbbec7fafb9291148e11c23530f32fe0c6fe47d19f9bb199ae22a958e300535ec50620cd6a579cd0cca2d5d1a9"}, &(0x7f0000000280)=0x98)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r0, @in6={{0xa, 0x4e23, 0x0, @private2, 0x14c4}}, 0x7, 0x4}, 0x90)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4)
setsockopt$inet_int(r2, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x0, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x48890)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

727.382307ms ago: executing program 4 (id=46):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36)

726.768803ms ago: executing program 3 (id=47):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004c40)=[{0x18, 0x1, 0x1, 'z'}], 0x18}}], 0x2, 0x8000)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0) (async)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0xffffffff, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9}]}, 0x34}}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x40, 0x0, 0x2d, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @empty}}}})

725.915016ms ago: executing program 0 (id=48):
socketpair$unix(0x1, 0x311573bb0225635, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000010, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
syz_emit_ethernet(0xc2, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x7, "02a20948fd"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000720001328953430000000000070000001fd7"], 0x18}}, 0x0)
r5 = accept4$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000000c0), 0x4)
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x158, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20004010}, 0x10004800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r0, 0xffffe000)

725.642593ms ago: executing program 3 (id=49):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f00000000c0)=0xfffffffffffffffc, 0x12) (async)
ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@private2}, &(0x7f0000000040)=0x14) (rerun: 64)

708.558693ms ago: executing program 0 (id=50):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00', {0x10000}})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="000004000000000000000180bbbbbbbbaaaaaaaaaa00f219e66a541429a4177852e30e147e7e72639f48dc4831475c3a3b7eac3d74b7ba01bffc16d0bf6da69084550c84004e088e1b5fa9d02481e66c46e62cd701762794219f36fe91a653ff5591b71efb2da9b59daf2331d4f388a24135c2dfc79b8f920c4b4db883165aa0c04996c422ab5b722a49539efa690652dad94bfba3724d5911744dff52ef"])
setsockopt(r0, 0xffffffff, 0xb, &(0x7f0000000200)="c8b23baad59160dc5f00670cb8fdf074efe08507e7321b3c5f9505b12f12c0ec9603046172a6693572d4e40c6f6852cd3d0aa2dc3b15965fbd79c56f79f4a70b357c5acd0176b1fa261d39d13d8a201d0573e1a4fd3156a7847fec6a350215ac926e5af611f30540ffbd73c8d43b7a5f021480ac88ba0f6029e1105a52661ece45e30f3acdf617bbedff165f5e381252c4001f9e95f57e403a9b9faa67f530bb93e26d489227fdc381d9960c8f26742cdba2920fc0bfe012ba703faedda3ad192469", 0xc2)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x9, r1, 0x33f}, 0xc)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x9, 0x4)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000015c0), &(0x7f0000000100)=0x21)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40]}}]}}]}, 0x8c}}, 0x0)

683.821712ms ago: executing program 3 (id=51):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004004}, 0x4040000)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x274081883fee8f64}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", ""]}, 0x20}}, 0x4000890) (async)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x274081883fee8f64}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", ""]}, 0x20}}, 0x4000890)
connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x3, @none, 0xc}, 0xe) (async)
connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x3, @none, 0xc}, 0xe)
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000440)={<r6=>0x0, 0x34, "0c62c2b4c3533f5757ba9102be37009d6b12e44bab32f0b167efbd20c27a269bcb10d26f856dc09df79596f137346fe90def7710"}, &(0x7f0000000480)=0x3c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000004c0)={r6, 0x4, 0xcd38}, 0x8)
setsockopt(r1, 0x7, 0xc, &(0x7f0000000500)="e4be1f44ec900bd716382bb197d7a90b028a4879c1b97b6e15ef3f020437b54a49475d89b6df815970e3090a3011509904f660cab82b90d49d02881923a138c6420831b2598f5f6ab34741cc41bdb955d17a6b5b3a2626b497941b0b8ae6164512038e6ed1ded8e9db680341f99dc1636ac10537392ed50d375affb73da9906d12b02ee10972fefda2d9a90c1fe69b8edfe925fe9419f30921fbfa877c5af2bbb49ae29b0f36fd", 0xa7)
syz_genetlink_get_family_id$auto(&(0x7f0000000600)='syz1\x00', r2) (async)
r7 = syz_genetlink_get_family_id$auto(&(0x7f0000000600)='syz1\x00', r2)
sendmsg$autorun(r2, &(0x7f00000006c0)=@policy249={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {0x11}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x7fe00000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x6}, @IPSET_ATTR_SETNAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async)
sendmsg$autorun(r2, &(0x7f00000006c0)=@policy249={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {0x11}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x7fe00000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x6}, @IPSET_ATTR_SETNAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$tun(r2, &(0x7f0000000800)={@void, @val={0x2, 0x3, 0xf, 0x5, 0x3, 0x5}, @x25={0x0, 0x1, 0x27, "cc26eb545feb2a471f1a123a77faf5724ba03b4ba9c2966f0cbfea7d104a17225a06c6b2f5764119ec47b70ef277b65a26b19b9edf398c9e747571d4cc7adb753545a0c821b39e3c44cd904ff64adcc450c7c9620b04c44e72f6a83b72bf9d143070667b180e8ecac24d6e00c6d77e1c89ef3adbfeef21d1c2b86629a0bf1e9467"}}, 0x8e)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000008c0)={<r8=>r0, 0x211, 0x3, 0x8})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r2)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r9, 0x200, 0x6, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}}, 0x8010) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r9, 0x200, 0x6, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}}, 0x8010)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000a40)={r6, 0x7fff, 0x9, 0x2, 0x3, 0x200, 0x0, 0x4, {r6, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}}, 0x3, 0xb1c2, 0x55, 0x5, 0x1}}, &(0x7f0000000b00)=0xb0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000a40)={r6, 0x7fff, 0x9, 0x2, 0x3, 0x200, 0x0, 0x4, {r6, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}}, 0x3, 0xb1c2, 0x55, 0x5, 0x1}}, &(0x7f0000000b00)=0xb0)
socket$netlink(0x10, 0x3, 0x1)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000b40)={<r11=>r10, 0xf04a, 0x9, 0x3})
r12 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r12, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/34, 0x22}], 0x2, &(0x7f0000000e40)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x8624}, &(0x7f0000000c40)=0x8000, &(0x7f0000000c80)=0x100000000, 0x0, 0x2, 0x1, 0x0, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000cc0)=""/188, 0xbc}, &(0x7f0000000d80), 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x8, 0x1}, &(0x7f0000000dc0)=0x401, &(0x7f0000000e00)=0x2, 0x27, 0x25, 0x0, 0x7, 0x2, 0x2}}, @rdma_dest={0x18, 0x114, 0x2, {0xbe63, 0x3}}], 0xf8, 0x4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000f80)={0x1b, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0x6, "253f068b49d077"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001f80)={0x7, [], 0x3, "6265ef445e49ff"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001f80)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}], 0x3, "6265ef445e49ff"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000109040)={0x8, [{r13, r14}], 0x6d, "e39927f7c0d7bb"})

646.246229ms ago: executing program 1 (id=52):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64=r1], 0x1c}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x804, 0x0, 0x1, 0x0, 0x1000}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r6=>0x0})
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000280000001403abc7aa01800000000000000029b2069e59719968844c2413aedec3ffaf707d43a6334730ed635ba28b61fbfae683e47db0ae554c181e8f78d644747045f5f7a2903d98c745f59ebe52d531fe695856"], 0x58}}, 0x0)

435.806966ms ago: executing program 0 (id=53):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x71, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x3b, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @local, {[], {0x0, 0x0, 0x3b, 0x0, @gue={{0x1, 0x0, 0x3, 0x60, 0x0, @void}, "539071200630d267ac942b81d239a8d187f6471e0898b5642e23781841a7936aab2684006ad0f70a21bc73b8d3d83e"}}}}}}}, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x20008000)
r6 = accept$alg(r5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0xfff, 0xb3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
recvmmsg(r6, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x6, 0x0, 0xc8)
sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x698, 0x0, 0x1, 0x0, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x8}, [@nested={0x2bb, 0xd5, 0x0, 0x1, [@generic="bd39784b5fb79086eeb35b604c502b1fdb2772b8ef992dd2ad52d1fe8494bdd60547a632bc6278af2f2a0f5a871d45307879b7faaf9a25b5e4923e858ca80e67b4527ae5e75d505ade4f33fb00d4d594fb370b655f0657ee3cb6073a0190e0bb", @generic="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", @generic="d833e8d9d197fac3ece91284f8d5529eaf8f089e3b3371cde161152e397a1a6277a3e03ed9fbddb78223657f03080aecae03757529607793b24d8d39e320dd76dd6e610c1c283e8caed98dca2dd5eaeee424315fcce118527d47cec928b7cffa5f948ad6cbd2d6366051661e3d1b9a73ba05bde94303575723dce15681fe7ac6a8bbca4b592de5c6415527993d36a3ba3e9d65bc24c76b9925ce875b59b98e5e8b5d87f1adf2ea2da65c41f10336489b1c49984b92f559d863a8491c24cc17719e088b15201bf98ab3e5597bef2fdea700db9d1311209ba5a4b7f04898232335bf", @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x60, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x8e, 0x0, 0x0, @fd=r0}, @generic="cc54ffa746a7b332151212c996226c3963432a31cd335582efd30c54cf5378937394872222341b2b43d5e3c54f49d32f788d3fb948a8c6d3b6a872e6dd3e7b38181cbe", @generic="55ba4b8f51f57e1a4b38a0911bc841335ca65017aa628bf5d63e7e8f39e2"]}, @nested={0x119, 0x134, 0x0, 0x1, [@generic="cb0944d84f9905f64b6901381495cfc8af07480e67b900f63c728e774da0f08860091fcef1362dc3eabcfd032633bf2e6e2a6c721a", @typed={0x4, 0xa6}, @generic="c48eb51d27c9ddd3186d0af94e389ef29d752c6563960d1eb4908bd1d183a86b92846e9bb5182c711f35a6d6b25d7622916edfcdd04fa47f0fedd03a365fcdab054c55da597cf69397a05eee7f2e42f8cf0696f5dcce29ed830cf9827e17f267f052555b7ae65a513535fa4b8996a2a94dab9094540626443dea345a53361bfd0476bebd96e744961c62a0c3b21efb648246b1112211af481a7a32ed00b639b732ef708fce79f802bac4f79bcb493e4855538c1f8beb6d6af0cb1d72c6cd9c1f75e6134aec7753b2fa35c2963719c33d7e2928ab36e2506612179779"]}, @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0x7b, 0x0, 0x0, @str=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x248, 0x4c, 0x0, 0x1, [@typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@private2}, @generic="5207c7fc7dfbfd1e1255803ac510d17dd407cc4388db1cba2eaa7204d4c87ec2fa7f74e7c199f9f4edeb482f32f5474b29653e74ace1ea69ec7a189b374e91a686a25277b85bd06624e173a1cb5772d82a57e80e822856310881bc1327a0bf102a1bd85c5cd0", @generic="0898585d388df208aabc", @typed={0x8, 0x51, 0x0, 0x0, @fd=r2}, @generic="9d1a217994b3e84eca44b806b23ab35b46e5f5c4ce20cc2e1b61a75b73037fe1ff78ee3fa7e1f9e0f559ab6393bfa7cc4039ef0b3efdec79e6f01005e9b21a6983d1ddd29784ba29f16a8afe2d8999ef151d0a31b1a3e1ba7c9b950cc9d73ed90d907ebc845502659343115498e0a4192534ca0e1124463dec66cb", @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x20, 0x0, 0x0, @u64=0xd}, @typed={0x18, 0xa4, 0x0, 0x0, @binary="dcfb22f9fa24cb1712b4d3d18dbde06541020361"}, @typed={0x5, 0x117, 0x0, 0x0, @str='\x00'}, @generic="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"]}, @generic="17fea79be7a52112eaea03d2887d6cc53803d4fd4b29164b56b0aaf2b6bc3ac7a4c79071f1e387ff03c42f8cb26bdebb9c8d799c29904a03a3f28d3daa0ed585356fe3122b"]}, 0x698}, 0x1, 0x0, 0x0, 0x800}, 0x44)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xfffffffffffffe45, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x40400c1)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)

360.98713ms ago: executing program 1 (id=54):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x80000003, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

327.981944ms ago: executing program 3 (id=55):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0}) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x78, r3})
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004004) (async, rerun: 64)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b702000022000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e0500009cb20d03e7564c35a8d36774d5e5003a14817ac61e4dd19699a13477bf7e060e3670ef0e789f65f105006704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a080600000002000000ff000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3957663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964ecbeba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c338615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c1c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553572548104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f32744a8c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6970982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980ede51116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c60100f36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e6887dd7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbc8b8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c545b28211a92000000001501aed8972af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f05e96d738989f2c8b1e6b3a9716b6130a09e2698b12d8ae4d329f305fde3e8dec42eae3c69988ad568543a715755110c8dff124a6ba9ee1dc32ea7d17a35a420133c7df262a30cbff8790d80fd4def27ff1b268014daec1b0d1d2864bf010801f092efac0b349b86631d2a7455a72c0e7f43730b78e9beb255188acb12f3770fcc2223ba034181d9c3acef5b6d9ee77883ca12cfd68a5db88cc94c65a9fd1d070387a351905240b0b1920429109032ddc3cf9bf4ba32f594d45478bca432bdeb1a21fd5b5c2c416ed8eeabade9e2002b4e714dc3d7476fa52fedc0d0e6bed973e3aa468597810c13a8c40d9845bf0080850f309ec4dc5f88ef54b6674d8402f8ccd86d33edb1894e46b793641e9bf407b7c8b2b4b555f07467c96828163ce30fd4c24b108df352bc32eae5b1e3adecf6cf8d2bc3549f49c14a553683499b707a422e98082456c0dcf3f7155db062dfad1e92af9708dca9b70a77f4b88c06f8ee7a43df5f5ac21a6ed194102abaa0970000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, '\x00\x00eX\x00\x00\x00\x00'}}}}}, 0x0)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d29882fbd9423debbbd7cb4a776b86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d"], 0xe0}], 0x1}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000003050004000000000010000300686173683a69702c6d6163001400078005001500090000000800124000000000050005000a00000100060000000900020073797a3200000000ee8a838b03edd1258d9362041d1db8401f36e595f6aa1c9f3b4f72f364ccd3400000000cba796883a4977574ac55c5ddf3d0318c9071cc99acd192f7e0e8a62a1e14d464512926341d108c50e4ee780c57b901ebce3d27363fc1a54ab305493581e59b7038164c0f56e0b73219eec1baddbe358752a9e1825cee2e4ed873e7a48c234154e32d21f67e0422cfa077fcaa824f03837675d82570c189fc657f000000"], 0x5c}}, 0x4000000)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b100f4661504be508b7065d2f6645766dc27d58a5b95c59b6347e126556a5485fb463cd253f62db7af4f59c7c64c64e9b22b1a210fe3a6653b2f8d7da5d347d61279c22300fe0fd9b2e297c578ccf41b27f047e994fead9f8317550ea4e27694bb3292f32ac312defb3228d8e77", 0x8e}, {&(0x7f00000003c0)="ec5e4098db58912c44917ef0cddda42f360df0d388bdfd2f7bf758b1a93813c975a623bb9922c14e95187477acb84b2e9dc0", 0x32}], 0x2, 0x0, 0x0, 0x8040}], 0x1, 0xc050) (async)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) (async)
r12 = accept4(r11, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
setsockopt$MRT_DEL_VIF(r12, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x0, 0x81, 0x4, @vifc_lcl_ifindex, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff33, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

196.140053ms ago: executing program 1 (id=56):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000004400018006000340000000000c00028002000100000000002c000180140003"], 0x58}}, 0x0)
r1 = socket(0x10, 0xa, 0x5)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x5e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x0, 0x6, 0x8, 0x0, 0x40, 0x17d1, 0xfc}, &(0x7f0000000100)=0x9c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x2, 0x2, [0x3, 0x5]}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000004400018006000340000000000c00028002000100000000002c000180140003"], 0x58}}, 0x0) (async)
socket(0x10, 0xa, 0x5) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x5e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x0, 0x6, 0x8, 0x0, 0x40, 0x17d1, 0xfc}, &(0x7f0000000100)=0x9c) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x2, 0x2, [0x3, 0x5]}, 0xc) (async)

62.891932ms ago: executing program 0 (id=57):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010026000000000000000c0000585700eb"], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x12, &(0x7f00000001c0)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006e00000000000000180000000000000000000000000000009500000000000000180000002020781000000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 1 (id=58):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0xa, 0x0, 0x0, 0x2}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts.
[   50.988087][ T5217] cgroup: Unknown subsys name 'net'
[   51.140656][ T5217] cgroup: Unknown subsys name 'cpuset'
[   51.148607][ T5217] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.479938][ T5217] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.997388][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.021425][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.022330][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.031307][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   56.041336][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   56.043271][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.050656][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.059660][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.066088][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   56.070709][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   56.078577][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.092411][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   56.093106][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.100373][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   56.108661][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.114829][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.121988][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   56.129024][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   56.136170][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   56.142402][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   56.149163][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   56.156566][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.171816][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   56.172986][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.179353][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.187186][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.194549][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   56.201976][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   56.207544][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   56.214279][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.593623][ T5229] chnl_net:caif_netlink_parms(): no params data found
[   56.647147][ T5238] chnl_net:caif_netlink_parms(): no params data found
[   56.715302][ T5227] chnl_net:caif_netlink_parms(): no params data found
[   56.725018][ T5228] chnl_net:caif_netlink_parms(): no params data found
[   56.801960][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.811326][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.819173][ T5229] bridge_slave_0: entered allmulticast mode
[   56.825772][ T5229] bridge_slave_0: entered promiscuous mode
[   56.834870][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.842050][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.849272][ T5229] bridge_slave_1: entered allmulticast mode
[   56.856121][ T5229] bridge_slave_1: entered promiscuous mode
[   56.901168][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.908341][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.915485][ T5238] bridge_slave_0: entered allmulticast mode
[   56.923982][ T5238] bridge_slave_0: entered promiscuous mode
[   56.931458][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.938886][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.946129][ T5238] bridge_slave_1: entered allmulticast mode
[   56.952886][ T5238] bridge_slave_1: entered promiscuous mode
[   56.995297][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.034956][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.044467][ T5242] chnl_net:caif_netlink_parms(): no params data found
[   57.055718][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.079332][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.086521][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.094172][ T5227] bridge_slave_0: entered allmulticast mode
[   57.100948][ T5227] bridge_slave_0: entered promiscuous mode
[   57.124221][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.155324][ T5229] team0: Port device team_slave_0 added
[   57.161863][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.169106][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.176262][ T5227] bridge_slave_1: entered allmulticast mode
[   57.183645][ T5227] bridge_slave_1: entered promiscuous mode
[   57.190272][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.197360][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.204944][ T5228] bridge_slave_0: entered allmulticast mode
[   57.211501][ T5228] bridge_slave_0: entered promiscuous mode
[   57.219048][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.226164][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.233603][ T5228] bridge_slave_1: entered allmulticast mode
[   57.240618][ T5228] bridge_slave_1: entered promiscuous mode
[   57.268708][ T5229] team0: Port device team_slave_1 added
[   57.311315][ T5238] team0: Port device team_slave_0 added
[   57.319342][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.341210][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.348426][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.374715][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.390692][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.401173][ T5238] team0: Port device team_slave_1 added
[   57.408757][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.434173][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.441540][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.468060][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.486201][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.548801][ T5227] team0: Port device team_slave_0 added
[   57.564635][ T5228] team0: Port device team_slave_0 added
[   57.574009][ T5228] team0: Port device team_slave_1 added
[   57.580643][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.588402][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.595576][ T5242] bridge_slave_0: entered allmulticast mode
[   57.602706][ T5242] bridge_slave_0: entered promiscuous mode
[   57.610583][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.618337][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.625489][ T5242] bridge_slave_1: entered allmulticast mode
[   57.632213][ T5242] bridge_slave_1: entered promiscuous mode
[   57.651445][ T5227] team0: Port device team_slave_1 added
[   57.666751][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.673877][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.699993][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.712850][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.719917][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.746061][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.793556][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.801192][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.827780][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.855296][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.864989][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.875469][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.904944][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.917395][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.924735][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.950738][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.962241][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.969393][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.995838][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.010467][ T5229] hsr_slave_0: entered promiscuous mode
[   58.016675][ T5229] hsr_slave_1: entered promiscuous mode
[   58.026334][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.082421][ T5242] team0: Port device team_slave_0 added
[   58.090377][ T5242] team0: Port device team_slave_1 added
[   58.124087][ T5228] hsr_slave_0: entered promiscuous mode
[   58.131193][ T5228] hsr_slave_1: entered promiscuous mode
[   58.137187][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.145620][ T5228] Cannot create hsr debugfs directory
[   58.171485][ T5238] hsr_slave_0: entered promiscuous mode
[   58.178843][ T4622] Bluetooth: hci4: command tx timeout
[   58.179270][ T5238] hsr_slave_1: entered promiscuous mode
[   58.190776][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.198551][ T5238] Cannot create hsr debugfs directory
[   58.205476][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.212582][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.238631][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.251528][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.258546][ T5232] Bluetooth: hci0: command tx timeout
[   58.258584][ T5249] Bluetooth: hci3: command tx timeout
[   58.264240][ T4622] Bluetooth: hci2: command tx timeout
[   58.270056][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.302259][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.337925][ T4622] Bluetooth: hci1: command tx timeout
[   58.373644][ T5227] hsr_slave_0: entered promiscuous mode
[   58.380051][ T5227] hsr_slave_1: entered promiscuous mode
[   58.386202][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.395199][ T5227] Cannot create hsr debugfs directory
[   58.456519][ T5242] hsr_slave_0: entered promiscuous mode
[   58.463391][ T5242] hsr_slave_1: entered promiscuous mode
[   58.469847][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.477409][ T5242] Cannot create hsr debugfs directory
[   58.728262][ T5229] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.754177][ T5229] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.773421][ T5229] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.785526][ T5229] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.821010][ T5228] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   58.847432][ T5228] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   58.864380][ T5228] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   58.875413][ T5238] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   58.887464][ T5238] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   58.898915][ T5228] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   58.913525][ T5238] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   58.923174][ T5238] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   58.990805][ T5242] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.011360][ T5242] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.025231][ T5242] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.034955][ T5242] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.134627][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.144712][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.163126][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.174054][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.242729][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.273289][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.291255][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.331539][ T5228] 8021q: adding VLAN 0 to HW filter on device team0
[   59.344789][ T5229] 8021q: adding VLAN 0 to HW filter on device team0
[   59.364669][ T5238] 8021q: adding VLAN 0 to HW filter on device team0
[   59.379566][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.386814][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.409627][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.416795][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.430703][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.437920][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.451465][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.462976][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.470206][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.508977][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.516072][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.525522][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.532635][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.596165][ T5242] 8021q: adding VLAN 0 to HW filter on device team0
[   59.636116][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.652848][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.659974][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.674814][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.685644][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.692786][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.714978][ T5227] 8021q: adding VLAN 0 to HW filter on device team0
[   59.790430][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.797650][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.841970][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.849155][ T3839] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.909673][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.042954][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.104348][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.129947][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.259790][ T4622] Bluetooth: hci4: command tx timeout
[   60.283586][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.306143][ T5229] veth0_vlan: entered promiscuous mode
[   60.330325][ T5228] veth0_vlan: entered promiscuous mode
[   60.338545][ T4622] Bluetooth: hci3: command tx timeout
[   60.338675][ T5249] Bluetooth: hci2: command tx timeout
[   60.343961][ T4622] Bluetooth: hci0: command tx timeout
[   60.386877][ T5229] veth1_vlan: entered promiscuous mode
[   60.421421][ T4622] Bluetooth: hci1: command tx timeout
[   60.434790][ T5228] veth1_vlan: entered promiscuous mode
[   60.451965][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.464274][ T5242] veth0_vlan: entered promiscuous mode
[   60.496947][ T5229] veth0_macvtap: entered promiscuous mode
[   60.524235][ T5242] veth1_vlan: entered promiscuous mode
[   60.537168][ T5229] veth1_macvtap: entered promiscuous mode
[   60.570201][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.586909][ T5238] veth0_vlan: entered promiscuous mode
[   60.604270][ T5228] veth0_macvtap: entered promiscuous mode
[   60.614464][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.642697][ T5228] veth1_macvtap: entered promiscuous mode
[   60.652567][ T5229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.662831][ T5229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.671763][ T5229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.681627][ T5229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.703126][ T5238] veth1_vlan: entered promiscuous mode
[   60.744802][ T5242] veth0_macvtap: entered promiscuous mode
[   60.766224][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.778158][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.792123][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.806679][ T5242] veth1_macvtap: entered promiscuous mode
[   60.844307][ T5227] veth0_vlan: entered promiscuous mode
[   60.854984][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.866275][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.880936][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.891620][ T5228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.901650][ T5228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.912409][ T5228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.921528][ T5228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.963073][ T5238] veth0_macvtap: entered promiscuous mode
[   60.971763][ T3839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.990803][ T3839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.002627][ T5227] veth1_vlan: entered promiscuous mode
[   61.011390][ T5238] veth1_macvtap: entered promiscuous mode
[   61.021654][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.032253][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.042891][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.053413][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.066060][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.114977][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.126515][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.136964][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.149149][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.160288][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.170546][ T5242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.179666][ T5242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.188609][ T5242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.197303][ T5242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.235904][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.245668][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.256564][ T3839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.260830][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.272737][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.283157][ T3839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.283850][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.302897][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.313030][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.324887][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.335851][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.361174][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.377018][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.388154][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.398639][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.408541][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.419019][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.432899][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.451742][ T5229] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.494602][ T5238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.503665][ T5238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.512889][ T5238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.522138][ T5238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.564454][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.576052][ T5227] veth0_macvtap: entered promiscuous mode
[   61.593119][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.603314][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.626562][ T5227] veth1_macvtap: entered promiscuous mode
[   61.634424][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.750262][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.752980][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.782070][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.817948][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.820583][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.856133][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.882795][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.896398][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.907387][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.918507][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.930212][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.041295][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.055527][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.065938][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.077393][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.087632][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.101981][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.112293][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.122871][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.134418][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.145183][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.157796][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.160332][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.186896][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.197627][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.212583][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.283016][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.308437][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.338043][ T4622] Bluetooth: hci4: command tx timeout
[   62.417944][ T4622] Bluetooth: hci0: command tx timeout
[   62.423462][ T5232] Bluetooth: hci2: command tx timeout
[   62.423478][ T5249] Bluetooth: hci3: command tx timeout
[   62.498141][ T5249] Bluetooth: hci1: command tx timeout
[   62.555524][ T5342] Cannot find add_set index 0 as target
[   62.592276][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.600350][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.635239][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.675832][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.965917][ T5344] veth0_vlan: left promiscuous mode
[   63.074691][ T5355] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8'.
[   63.155869][ T5355] ÊüðÿG: entered promiscuous mode
[   63.201352][ T5341] delete_channel: no stack
[   63.325972][ T5358] pim6reg: entered allmulticast mode
[   63.338372][ T5363] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.411793][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'.
[   63.434291][ T5363] lo speed is unknown, defaulting to 1000
[   63.440880][ T5358] pim6reg: left allmulticast mode
[   63.643696][ T5363] lo speed is unknown, defaulting to 1000
[   63.686139][ T5363] lo speed is unknown, defaulting to 1000
[   64.073380][ T5380] team0: Port device macvlan1 added
[   64.079897][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'.
[   64.090672][ T5363] infiniband syz0: set active
[   64.102318][ T5363] infiniband syz0: added lo
[   64.105664][ T5385] veth0_to_bridge: entered promiscuous mode
[   64.120074][ T5385] macvtap1: entered promiscuous mode
[   64.125647][ T5385] macvtap1: entered allmulticast mode
[   64.138252][ T5385] veth0_to_bridge: entered allmulticast mode
[   64.153539][ T5375] team_slave_0: entered promiscuous mode
[   64.159470][ T5375] team_slave_1: entered promiscuous mode
[   64.193188][ T5363] RDS/IB: syz0: added
[   64.197952][ T5363] smc: adding ib device syz0 with port count 1
[   64.212883][ T5375] bond0: (slave vlan2): Enslaving as an active interface with an up link
[   64.225663][ T5363] smc:    ib device syz0 port 1 has pnetid 
[   64.243202][ T5383] veth0_to_bridge: left allmulticast mode
[   64.253336][ T5383] veth0_to_bridge: left promiscuous mode
[   64.269054][ T5282] lo speed is unknown, defaulting to 1000
[   64.272400][ T5359] netlink: 'syz.0.9': attribute type 9 has an invalid length.
[   64.362633][ T1173] lo speed is unknown, defaulting to 1000
[   64.413633][ T5363] lo speed is unknown, defaulting to 1000
[   64.413663][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'.
[   64.422979][ T5393] bM: renamed from lo (while UP)
[   64.436208][ T5249] Bluetooth: hci4: command tx timeout
[   64.451983][ T5393] bM: entered allmulticast mode
[   64.499076][ T5249] Bluetooth: hci0: command tx timeout
[   64.504840][   T54] Bluetooth: hci2: command tx timeout
[   64.504856][ T4622] Bluetooth: hci3: command tx timeout
[   64.551716][ T5396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.571379][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'.
[   64.581064][ T4622] Bluetooth: hci1: command tx timeout
[   64.661166][ T5399] netlink: 'syz.3.19': attribute type 4 has an invalid length.
[   64.668815][ T5399] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19'.
[   64.686819][ T5399] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   64.867921][ T5410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'.
[   64.877873][ T5363] lo speed is unknown, defaulting to 1000
[   64.939657][ T5414] pimreg3: entered allmulticast mode
[   64.960600][ T5414] netlink: 'syz.2.24': attribute type 1 has an invalid length.
[   65.067868][ T5414] pimreg3: left allmulticast mode
[   65.124085][ T5363] lo speed is unknown, defaulting to 1000
[   65.132848][ T5418] tipc: Started in network mode
[   65.149542][ T5418] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   65.169222][ T5420] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.26'.
[   65.179271][ T5418] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   65.196043][ T5418] tipc: Enabled bearer <udp:syz1>, priority 10
[   65.214690][ T5420] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[   65.330374][ T5424] netlink: 76 bytes leftover after parsing attributes in process `syz.2.27'.
[   65.373315][ T5424] Êü�: entered promiscuous mode
[   65.390196][ T5430] netlink: 56 bytes leftover after parsing attributes in process `syz.4.28'.
[   65.408297][ T5363] lo speed is unknown, defaulting to 1000
[   65.680098][ T5363] lo speed is unknown, defaulting to 1000
[   65.836264][ T5443] bridge1: entered promiscuous mode
[   65.879654][ T5443] bridge1: entered allmulticast mode
[   65.885658][ T5446] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.911803][ T5443] team0: Port device bridge1 added
[   65.917410][ T5444] netlink: 'syz.0.33': attribute type 10 has an invalid length.
[   65.962324][ T5449] netlink: 'syz.4.34': attribute type 10 has an invalid length.
[   65.984592][ T5454] Zero length message leads to an empty skb
[   66.004105][ T5449] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   66.047111][ T5443] bridge0: port 3(ip6gretap0) entered blocking state
[   66.072321][ T5443] bridge0: port 3(ip6gretap0) entered disabled state
[   66.096191][ T5443] ip6gretap0: entered allmulticast mode
[   66.140641][ T5443] ip6gretap0: entered promiscuous mode
[   66.157112][ T5443] bridge0: port 3(ip6gretap0) entered blocking state
[   66.164246][ T5443] bridge0: port 3(ip6gretap0) entered forwarding state
[   66.194807][ T5363] lo speed is unknown, defaulting to 1000
[   66.317415][   T51] tipc: Node number set to 1
[   66.417456][ T5475] netlink: 'syz.3.40': attribute type 2 has an invalid length.
[   66.535676][ T5363] lo speed is unknown, defaulting to 1000
[   66.598069][ T5478] tap0: tun_chr_ioctl cmd 1074025677
[   66.603560][ T5478] tap0: linktype set to 805
[   66.844396][ T5363] lo speed is unknown, defaulting to 1000
[   67.008787][ T5498] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[   67.128880][ T5500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.048469][ T5540] BUG: Bad page state in process syz.0.57  pfn:29a8e
[   68.055511][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029a8ea20 pfn:0x29a8e
[   68.065685][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   68.072889][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   68.081556][ T5540] raw: ffff888029a8ea20 0000000000000001 00000000ffffffff 0000000000000000
[   68.090235][ T5540] page dumped because: page_pool leak
[   68.095649][ T5540] page_owner tracks the page as allocated
[   68.101691][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007499504, free_ts 67831886343
[   68.118451][ T5540]  post_alloc_hook+0x1f3/0x230
[   68.123444][ T5540]  get_page_from_freelist+0x3045/0x3190
[   68.129167][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   68.134387][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   68.139936][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   68.145858][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   68.151156][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   68.156644][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   68.162105][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   68.167069][ T5540]  __sys_bpf+0x48d/0x810
[   68.171404][ T5540]  __x64_sys_bpf+0x7c/0x90
[   68.175842][ T5540]  do_syscall_64+0xf3/0x230
[   68.180427][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.186355][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   68.192800][ T5540]  free_unref_page+0xcfb/0xf20
[   68.197605][ T5540]  vfree+0x186/0x2e0
[   68.201594][ T5540]  prealloc_destroy+0x24c/0x310
[   68.206470][ T5540]  htab_map_free+0x7b9/0xa70
[   68.211142][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   68.216368][ T5540]  process_scheduled_works+0xa63/0x1850
[   68.222001][ T5540]  worker_thread+0x870/0xd30
[   68.226619][ T5540]  kthread+0x2f0/0x390
[   68.230759][ T5540]  ret_from_fork+0x4b/0x80
[   68.235291][ T5540]  ret_from_fork_asm+0x1a/0x30
[   68.240145][ T5540] Modules linked in:
[   68.244080][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0
[   68.254263][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   68.264357][ T5540] Call Trace:
[   68.267677][ T5540]  <TASK>
[   68.270632][ T5540]  dump_stack_lvl+0x241/0x360
[   68.275349][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.280585][ T5540]  ? __pfx_print_modules+0x10/0x10
[   68.285745][ T5540]  bad_page+0x166/0x1b0
[   68.289937][ T5540]  free_unref_page+0xed0/0xf20
[   68.295259][ T5540]  skb_release_data+0x6dc/0x8a0
[   68.300145][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   68.305209][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   68.311049][ T5540]  ? mark_lock+0x9a/0x360
[   68.315410][ T5540]  ? __lock_acquire+0x1384/0x2050
[   68.320483][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   68.326591][ T5540]  ? mark_lock+0x9a/0x360
[   68.330957][ T5540]  ? __lock_acquire+0x1384/0x2050
[   68.336037][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   68.342059][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   68.348773][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   68.355308][ T5540]  ? read_tsc+0x9/0x20
[   68.359406][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   68.364651][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   68.371008][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   68.377204][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   68.383575][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   68.390290][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   68.395522][ T5540]  ? __phys_addr+0xba/0x170
[   68.400054][ T5540]  ? build_skb_around+0x111/0x260
[   68.405114][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   68.411129][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   68.416450][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   68.421946][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   68.427888][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   68.433478][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   68.439413][ T5540]  ? synchronize_rcu+0x11b/0x360
[   68.444384][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   68.449733][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   68.456035][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   68.461982][ T5540]  ? _copy_from_user+0xa6/0xe0
[   68.466790][ T5540]  ? bpf_test_init+0x15a/0x180
[   68.471585][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   68.477088][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   68.482517][ T5540]  ? __pfx_lock_release+0x10/0x10
[   68.487676][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   68.493518][ T5540]  ? __fget_files+0x29/0x470
[   68.498146][ T5540]  ? fput+0x1a8/0x230
[   68.502152][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   68.507994][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   68.512952][ T5540]  __sys_bpf+0x48d/0x810
[   68.517193][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   68.521979][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   68.527983][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   68.534324][ T5540]  ? do_syscall_64+0x100/0x230
[   68.539101][ T5540]  __x64_sys_bpf+0x7c/0x90
[   68.543535][ T5540]  do_syscall_64+0xf3/0x230
[   68.548042][ T5540]  ? clear_bhb_loop+0x35/0x90
[   68.552746][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.558847][ T5540] RIP: 0033:0x7fa20b37dff9
[   68.563267][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.582898][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   68.591330][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   68.599314][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   68.607304][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   68.615275][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.623257][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   68.631257][ T5540]  </TASK>
[   68.634356][ T5540] Disabling lock debugging due to kernel taint
[   68.640568][ T5540] BUG: Bad page state in process syz.0.57  pfn:7e5e9
[   68.647246][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7e5e9
[   68.656060][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   68.663206][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   68.671839][ T5540] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000
[   68.680469][ T5540] page dumped because: page_pool leak
[   68.685836][ T5540] page_owner tracks the page as allocated
[   68.691567][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007487955, free_ts 67379119922
[   68.708280][ T5540]  post_alloc_hook+0x1f3/0x230
[   68.713059][ T5540]  get_page_from_freelist+0x3045/0x3190
[   68.718649][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   68.723869][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   68.729381][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   68.735286][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   68.740513][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   68.745894][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   68.751310][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   68.756282][ T5540]  __sys_bpf+0x48d/0x810
[   68.760570][ T5540]  __x64_sys_bpf+0x7c/0x90
[   68.764987][ T5540]  do_syscall_64+0xf3/0x230
[   68.769515][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.775417][ T5540] page last free pid 5507 tgid 5507 stack trace:
[   68.781771][ T5540]  free_unref_page+0xcfb/0xf20
[   68.786542][ T5540]  __folio_put+0x2c7/0x440
[   68.790987][ T5540]  free_large_kmalloc+0x105/0x1c0
[   68.796015][ T5540]  kfree+0x21c/0x440
[   68.799939][ T5540]  device_release+0x99/0x1c0
[   68.804536][ T5540]  kobject_put+0x22f/0x480
[   68.808982][ T5540]  netdev_run_todo+0xe79/0x1000
[   68.813838][ T5540]  tun_chr_close+0x137/0x1b0
[   68.818486][ T5540]  __fput+0x23f/0x880
[   68.822475][ T5540]  task_work_run+0x24f/0x310
[   68.827052][ T5540]  syscall_exit_to_user_mode+0x168/0x370
[   68.832732][ T5540]  do_syscall_64+0x100/0x230
[   68.837358][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.843290][ T5540] Modules linked in:
[   68.847187][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   68.858803][ T5540] Tainted: [B]=BAD_PAGE
[   68.862936][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   68.872992][ T5540] Call Trace:
[   68.876255][ T5540]  <TASK>
[   68.879169][ T5540]  dump_stack_lvl+0x241/0x360
[   68.883858][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.889045][ T5540]  ? __pfx_print_modules+0x10/0x10
[   68.894147][ T5540]  bad_page+0x166/0x1b0
[   68.898297][ T5540]  free_unref_page+0xed0/0xf20
[   68.903073][ T5540]  skb_release_data+0x6dc/0x8a0
[   68.908003][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   68.913022][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   68.918746][ T5540]  ? mark_lock+0x9a/0x360
[   68.923079][ T5540]  ? __lock_acquire+0x1384/0x2050
[   68.928109][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   68.934169][ T5540]  ? mark_lock+0x9a/0x360
[   68.938485][ T5540]  ? __lock_acquire+0x1384/0x2050
[   68.943588][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   68.949572][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   68.956165][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   68.962653][ T5540]  ? read_tsc+0x9/0x20
[   68.966711][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   68.971897][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   68.978209][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   68.984348][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   68.990669][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   68.997343][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   69.002538][ T5540]  ? __phys_addr+0xba/0x170
[   69.007032][ T5540]  ? build_skb_around+0x111/0x260
[   69.012052][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   69.017943][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   69.023235][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   69.028701][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   69.034607][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   69.040145][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   69.045942][ T5540]  ? synchronize_rcu+0x11b/0x360
[   69.050872][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   69.056165][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   69.062416][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   69.068306][ T5540]  ? _copy_from_user+0xa6/0xe0
[   69.073056][ T5540]  ? bpf_test_init+0x15a/0x180
[   69.077808][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   69.083257][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   69.088640][ T5540]  ? __pfx_lock_release+0x10/0x10
[   69.093679][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   69.099502][ T5540]  ? __fget_files+0x29/0x470
[   69.104107][ T5540]  ? fput+0x1a8/0x230
[   69.108079][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   69.113883][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   69.118813][ T5540]  __sys_bpf+0x48d/0x810
[   69.123041][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   69.127795][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   69.133766][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   69.140087][ T5540]  ? do_syscall_64+0x100/0x230
[   69.144846][ T5540]  __x64_sys_bpf+0x7c/0x90
[   69.149266][ T5540]  do_syscall_64+0xf3/0x230
[   69.153769][ T5540]  ? clear_bhb_loop+0x35/0x90
[   69.158432][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.164317][ T5540] RIP: 0033:0x7fa20b37dff9
[   69.168721][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.188324][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   69.196758][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   69.204724][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   69.212688][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   69.220647][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.228609][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   69.236585][ T5540]  </TASK>
[   69.239693][ T5540] BUG: Bad page state in process syz.0.57  pfn:2b362
[   69.246370][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b362500 pfn:0x2b362
[   69.256484][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   69.263617][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   69.272229][ T5540] raw: ffff88802b362500 0000000000000001 00000000ffffffff 0000000000000000
[   69.280830][ T5540] page dumped because: page_pool leak
[   69.286182][ T5540] page_owner tracks the page as allocated
[   69.291922][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007476703, free_ts 67831441950
[   69.308627][ T5540]  post_alloc_hook+0x1f3/0x230
[   69.313387][ T5540]  get_page_from_freelist+0x3045/0x3190
[   69.318970][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   69.324174][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   69.329666][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   69.335571][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   69.340812][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   69.346192][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   69.351603][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   69.356547][ T5540]  __sys_bpf+0x48d/0x810
[   69.360823][ T5540]  __x64_sys_bpf+0x7c/0x90
[   69.365242][ T5540]  do_syscall_64+0xf3/0x230
[   69.369789][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.375689][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   69.382034][ T5540]  free_unref_page+0xcfb/0xf20
[   69.386805][ T5540]  vfree+0x186/0x2e0
[   69.390732][ T5540]  prealloc_destroy+0x24c/0x310
[   69.395586][ T5540]  htab_map_free+0x7b9/0xa70
[   69.400228][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   69.405444][ T5540]  process_scheduled_works+0xa63/0x1850
[   69.411033][ T5540]  worker_thread+0x870/0xd30
[   69.415632][ T5540]  kthread+0x2f0/0x390
[   69.419729][ T5540]  ret_from_fork+0x4b/0x80
[   69.424154][ T5540]  ret_from_fork_asm+0x1a/0x30
[   69.428949][ T5540] Modules linked in:
[   69.432855][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   69.444480][ T5540] Tainted: [B]=BAD_PAGE
[   69.448612][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   69.458649][ T5540] Call Trace:
[   69.461911][ T5540]  <TASK>
[   69.464837][ T5540]  dump_stack_lvl+0x241/0x360
[   69.469507][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.474693][ T5540]  ? __pfx_print_modules+0x10/0x10
[   69.479793][ T5540]  bad_page+0x166/0x1b0
[   69.483933][ T5540]  free_unref_page+0xed0/0xf20
[   69.488698][ T5540]  skb_release_data+0x6dc/0x8a0
[   69.493552][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   69.498559][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   69.504266][ T5540]  ? mark_lock+0x9a/0x360
[   69.508579][ T5540]  ? __lock_acquire+0x1384/0x2050
[   69.513600][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   69.519668][ T5540]  ? mark_lock+0x9a/0x360
[   69.523986][ T5540]  ? __lock_acquire+0x1384/0x2050
[   69.529016][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   69.534984][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   69.541561][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   69.548052][ T5540]  ? read_tsc+0x9/0x20
[   69.552105][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   69.557290][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   69.563604][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   69.569746][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   69.576058][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   69.582713][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   69.587905][ T5540]  ? __phys_addr+0xba/0x170
[   69.592406][ T5540]  ? build_skb_around+0x111/0x260
[   69.597419][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   69.603301][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   69.608571][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   69.614018][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   69.619896][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   69.625435][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   69.631223][ T5540]  ? synchronize_rcu+0x11b/0x360
[   69.636143][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   69.641473][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   69.647716][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   69.653620][ T5540]  ? _copy_from_user+0xa6/0xe0
[   69.658375][ T5540]  ? bpf_test_init+0x15a/0x180
[   69.663120][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   69.668563][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   69.673920][ T5540]  ? __pfx_lock_release+0x10/0x10
[   69.678934][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   69.684899][ T5540]  ? __fget_files+0x29/0x470
[   69.689486][ T5540]  ? fput+0x1a8/0x230
[   69.693468][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   69.699262][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   69.704186][ T5540]  __sys_bpf+0x48d/0x810
[   69.708414][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   69.713162][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   69.719128][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   69.725443][ T5540]  ? do_syscall_64+0x100/0x230
[   69.730195][ T5540]  __x64_sys_bpf+0x7c/0x90
[   69.734592][ T5540]  do_syscall_64+0xf3/0x230
[   69.739083][ T5540]  ? clear_bhb_loop+0x35/0x90
[   69.743761][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.749651][ T5540] RIP: 0033:0x7fa20b37dff9
[   69.754063][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.773654][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   69.782056][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   69.790025][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   69.797995][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   69.805944][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.813897][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   69.821856][ T5540]  </TASK>
[   69.824929][ T5540] BUG: Bad page state in process syz.0.57  pfn:306aa
[   69.831646][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880306aadc0 pfn:0x306aa
[   69.841776][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   69.849026][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   69.857615][ T5540] raw: ffff8880306aadc0 0000000000000001 00000000ffffffff 0000000000000000
[   69.866240][ T5540] page dumped because: page_pool leak
[   69.871651][ T5540] page_owner tracks the page as allocated
[   69.877342][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007465380, free_ts 67831459870
[   69.894039][ T5540]  post_alloc_hook+0x1f3/0x230
[   69.898855][ T5540]  get_page_from_freelist+0x3045/0x3190
[   69.904410][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   69.909658][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   69.915147][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   69.921070][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   69.926277][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   69.931683][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   69.937146][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   69.942123][ T5540]  __sys_bpf+0x48d/0x810
[   69.946368][ T5540]  __x64_sys_bpf+0x7c/0x90
[   69.950917][ T5540]  do_syscall_64+0xf3/0x230
[   69.955433][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.961472][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   69.968029][ T5540]  free_unref_page+0xcfb/0xf20
[   69.972811][ T5540]  vfree+0x186/0x2e0
[   69.976701][ T5540]  prealloc_destroy+0x24c/0x310
[   69.981596][ T5540]  htab_map_free+0x7b9/0xa70
[   69.986209][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   69.991526][ T5540]  process_scheduled_works+0xa63/0x1850
[   69.997082][ T5540]  worker_thread+0x870/0xd30
[   70.001794][ T5540]  kthread+0x2f0/0x390
[   70.005866][ T5540]  ret_from_fork+0x4b/0x80
[   70.010311][ T5540]  ret_from_fork_asm+0x1a/0x30
[   70.015175][ T5540] Modules linked in:
[   70.019124][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   70.030781][ T5540] Tainted: [B]=BAD_PAGE
[   70.035004][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   70.045045][ T5540] Call Trace:
[   70.048310][ T5540]  <TASK>
[   70.051226][ T5540]  dump_stack_lvl+0x241/0x360
[   70.055914][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.061115][ T5540]  ? __pfx_print_modules+0x10/0x10
[   70.066221][ T5540]  bad_page+0x166/0x1b0
[   70.070364][ T5540]  free_unref_page+0xed0/0xf20
[   70.075128][ T5540]  skb_release_data+0x6dc/0x8a0
[   70.079988][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   70.085020][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   70.090727][ T5540]  ? mark_lock+0x9a/0x360
[   70.095046][ T5540]  ? __lock_acquire+0x1384/0x2050
[   70.100072][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   70.106130][ T5540]  ? mark_lock+0x9a/0x360
[   70.110448][ T5540]  ? __lock_acquire+0x1384/0x2050
[   70.115464][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   70.121433][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   70.128020][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   70.134530][ T5540]  ? read_tsc+0x9/0x20
[   70.138587][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   70.143805][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   70.150137][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   70.156371][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   70.162748][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   70.169432][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   70.174619][ T5540]  ? __phys_addr+0xba/0x170
[   70.179124][ T5540]  ? build_skb_around+0x111/0x260
[   70.184159][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   70.190040][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   70.195312][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   70.200759][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   70.206639][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   70.212169][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   70.218311][ T5540]  ? synchronize_rcu+0x11b/0x360
[   70.223230][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   70.228516][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   70.234766][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   70.240653][ T5540]  ? _copy_from_user+0xa6/0xe0
[   70.245425][ T5540]  ? bpf_test_init+0x15a/0x180
[   70.250174][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   70.255736][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   70.261099][ T5540]  ? __pfx_lock_release+0x10/0x10
[   70.266117][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   70.272520][ T5540]  ? __fget_files+0x29/0x470
[   70.277102][ T5540]  ? fput+0x1a8/0x230
[   70.281075][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   70.286871][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   70.291824][ T5540]  __sys_bpf+0x48d/0x810
[   70.296052][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   70.300810][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   70.306779][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   70.313093][ T5540]  ? do_syscall_64+0x100/0x230
[   70.317842][ T5540]  __x64_sys_bpf+0x7c/0x90
[   70.322240][ T5540]  do_syscall_64+0xf3/0x230
[   70.326725][ T5540]  ? clear_bhb_loop+0x35/0x90
[   70.331392][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.337402][ T5540] RIP: 0033:0x7fa20b37dff9
[   70.341800][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.361479][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   70.369886][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   70.377853][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   70.385831][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   70.393807][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.401764][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   70.409731][ T5540]  </TASK>
[   70.412820][ T5540] BUG: Bad page state in process syz.0.57  pfn:2ff16
[   70.419548][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ff16dc0 pfn:0x2ff16
[   70.429665][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   70.436782][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   70.445408][ T5540] raw: ffff88802ff16dc0 0000000000000001 00000000ffffffff 0000000000000000
[   70.454013][ T5540] page dumped because: page_pool leak
[   70.459421][ T5540] page_owner tracks the page as allocated
[   70.465134][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007454044, free_ts 67831473845
[   70.481837][ T5540]  post_alloc_hook+0x1f3/0x230
[   70.486616][ T5540]  get_page_from_freelist+0x3045/0x3190
[   70.492193][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   70.497424][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   70.502906][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   70.508948][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   70.514158][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   70.519557][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   70.524934][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   70.529901][ T5540]  __sys_bpf+0x48d/0x810
[   70.534150][ T5540]  __x64_sys_bpf+0x7c/0x90
[   70.538592][ T5540]  do_syscall_64+0xf3/0x230
[   70.543101][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.549031][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   70.555425][ T5540]  free_unref_page+0xcfb/0xf20
[   70.560225][ T5540]  vfree+0x186/0x2e0
[   70.564132][ T5540]  prealloc_destroy+0x24c/0x310
[   70.569189][ T5540]  htab_map_free+0x7b9/0xa70
[   70.573788][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   70.579014][ T5540]  process_scheduled_works+0xa63/0x1850
[   70.584565][ T5540]  worker_thread+0x870/0xd30
[   70.589187][ T5540]  kthread+0x2f0/0x390
[   70.593269][ T5540]  ret_from_fork+0x4b/0x80
[   70.597675][ T5540]  ret_from_fork_asm+0x1a/0x30
[   70.602482][ T5540] Modules linked in:
[   70.606411][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   70.618042][ T5540] Tainted: [B]=BAD_PAGE
[   70.622179][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   70.632215][ T5540] Call Trace:
[   70.635481][ T5540]  <TASK>
[   70.638417][ T5540]  dump_stack_lvl+0x241/0x360
[   70.643084][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.648283][ T5540]  ? __pfx_print_modules+0x10/0x10
[   70.653489][ T5540]  bad_page+0x166/0x1b0
[   70.657634][ T5540]  free_unref_page+0xed0/0xf20
[   70.662386][ T5540]  skb_release_data+0x6dc/0x8a0
[   70.667317][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   70.672416][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   70.678151][ T5540]  ? mark_lock+0x9a/0x360
[   70.682460][ T5540]  ? __lock_acquire+0x1384/0x2050
[   70.687473][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   70.693532][ T5540]  ? mark_lock+0x9a/0x360
[   70.697851][ T5540]  ? __lock_acquire+0x1384/0x2050
[   70.702886][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   70.708858][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   70.715432][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   70.721918][ T5540]  ? read_tsc+0x9/0x20
[   70.725972][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   70.731153][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   70.737464][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   70.743603][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   70.749924][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   70.756596][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   70.761798][ T5540]  ? __phys_addr+0xba/0x170
[   70.766287][ T5540]  ? build_skb_around+0x111/0x260
[   70.771299][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   70.777212][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   70.782484][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   70.787932][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   70.793809][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   70.799386][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   70.805212][ T5540]  ? synchronize_rcu+0x11b/0x360
[   70.812040][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   70.817363][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   70.823615][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   70.829509][ T5540]  ? _copy_from_user+0xa6/0xe0
[   70.834261][ T5540]  ? bpf_test_init+0x15a/0x180
[   70.839014][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   70.844461][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   70.849843][ T5540]  ? __pfx_lock_release+0x10/0x10
[   70.854878][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   70.860675][ T5540]  ? __fget_files+0x29/0x470
[   70.865252][ T5540]  ? fput+0x1a8/0x230
[   70.869225][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   70.875017][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   70.879941][ T5540]  __sys_bpf+0x48d/0x810
[   70.884169][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   70.888929][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   70.894914][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   70.901233][ T5540]  ? do_syscall_64+0x100/0x230
[   70.905988][ T5540]  __x64_sys_bpf+0x7c/0x90
[   70.910404][ T5540]  do_syscall_64+0xf3/0x230
[   70.914904][ T5540]  ? clear_bhb_loop+0x35/0x90
[   70.919570][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.925460][ T5540] RIP: 0033:0x7fa20b37dff9
[   70.929871][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.949481][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   70.957907][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   70.965873][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   70.973837][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   70.981828][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.989794][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   70.997790][ T5540]  </TASK>
[   71.000896][ T5540] BUG: Bad page state in process syz.0.57  pfn:26d89
[   71.007573][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026d89dc0 pfn:0x26d89
[   71.017929][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   71.025391][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   71.034013][ T5540] raw: ffff888026d89dc0 0000000000000001 00000000ffffffff 0000000000000000
[   71.042628][ T5540] page dumped because: page_pool leak
[   71.048027][ T5540] page_owner tracks the page as allocated
[   71.053738][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007442663, free_ts 67831487697
[   71.070528][ T5540]  post_alloc_hook+0x1f3/0x230
[   71.075373][ T5540]  get_page_from_freelist+0x3045/0x3190
[   71.081115][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   71.086327][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   71.091839][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   71.097790][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   71.102997][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   71.108400][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   71.113782][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   71.118748][ T5540]  __sys_bpf+0x48d/0x810
[   71.122992][ T5540]  __x64_sys_bpf+0x7c/0x90
[   71.127398][ T5540]  do_syscall_64+0xf3/0x230
[   71.131936][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.137878][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   71.144203][ T5540]  free_unref_page+0xcfb/0xf20
[   71.148997][ T5540]  vfree+0x186/0x2e0
[   71.152900][ T5540]  prealloc_destroy+0x24c/0x310
[   71.157786][ T5540]  htab_map_free+0x7b9/0xa70
[   71.162382][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   71.167653][ T5540]  process_scheduled_works+0xa63/0x1850
[   71.173228][ T5540]  worker_thread+0x870/0xd30
[   71.177865][ T5540]  kthread+0x2f0/0x390
[   71.181936][ T5540]  ret_from_fork+0x4b/0x80
[   71.186352][ T5540]  ret_from_fork_asm+0x1a/0x30
[   71.191168][ T5540] Modules linked in:
[   71.195068][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   71.206696][ T5540] Tainted: [B]=BAD_PAGE
[   71.210935][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   71.220973][ T5540] Call Trace:
[   71.224233][ T5540]  <TASK>
[   71.227166][ T5540]  dump_stack_lvl+0x241/0x360
[   71.231848][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.237041][ T5540]  ? __pfx_print_modules+0x10/0x10
[   71.242145][ T5540]  bad_page+0x166/0x1b0
[   71.246288][ T5540]  free_unref_page+0xed0/0xf20
[   71.251061][ T5540]  skb_release_data+0x6dc/0x8a0
[   71.255921][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   71.260937][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   71.266639][ T5540]  ? mark_lock+0x9a/0x360
[   71.270951][ T5540]  ? __lock_acquire+0x1384/0x2050
[   71.275986][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   71.282035][ T5540]  ? mark_lock+0x9a/0x360
[   71.286363][ T5540]  ? __lock_acquire+0x1384/0x2050
[   71.291431][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   71.297398][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   71.303976][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   71.310463][ T5540]  ? read_tsc+0x9/0x20
[   71.314518][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   71.319705][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   71.326017][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   71.332160][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   71.338477][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   71.345137][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   71.350339][ T5540]  ? __phys_addr+0xba/0x170
[   71.354828][ T5540]  ? build_skb_around+0x111/0x260
[   71.359840][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   71.365718][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   71.370990][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   71.376435][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   71.382317][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   71.387865][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   71.393680][ T5540]  ? synchronize_rcu+0x11b/0x360
[   71.398613][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   71.403914][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   71.410145][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   71.416028][ T5540]  ? _copy_from_user+0xa6/0xe0
[   71.420776][ T5540]  ? bpf_test_init+0x15a/0x180
[   71.425540][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   71.431002][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   71.436363][ T5540]  ? __pfx_lock_release+0x10/0x10
[   71.441378][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   71.447171][ T5540]  ? __fget_files+0x29/0x470
[   71.451749][ T5540]  ? fput+0x1a8/0x230
[   71.455717][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   71.461509][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   71.466429][ T5540]  __sys_bpf+0x48d/0x810
[   71.470657][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   71.475410][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   71.481372][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   71.487695][ T5540]  ? do_syscall_64+0x100/0x230
[   71.492469][ T5540]  __x64_sys_bpf+0x7c/0x90
[   71.496898][ T5540]  do_syscall_64+0xf3/0x230
[   71.501413][ T5540]  ? clear_bhb_loop+0x35/0x90
[   71.506103][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.512010][ T5540] RIP: 0033:0x7fa20b37dff9
[   71.516410][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.536003][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   71.544401][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   71.552365][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   71.560327][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   71.568300][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.576262][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   71.584223][ T5540]  </TASK>
[   71.587340][ T5540] BUG: Bad page state in process syz.0.57  pfn:30067
[   71.594071][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030067b40 pfn:0x30067
[   71.604253][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   71.611398][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   71.620030][ T5540] raw: ffff888030067b40 0000000000000001 00000000ffffffff 0000000000000000
[   71.628633][ T5540] page dumped because: page_pool leak
[   71.634003][ T5540] page_owner tracks the page as allocated
[   71.639749][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007431138, free_ts 67831501896
[   71.656452][ T5540]  post_alloc_hook+0x1f3/0x230
[   71.661241][ T5540]  get_page_from_freelist+0x3045/0x3190
[   71.666794][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   71.672019][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   71.677481][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   71.683398][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   71.688641][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   71.694018][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   71.699450][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   71.704397][ T5540]  __sys_bpf+0x48d/0x810
[   71.708665][ T5540]  __x64_sys_bpf+0x7c/0x90
[   71.713082][ T5540]  do_syscall_64+0xf3/0x230
[   71.717587][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.723502][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   71.729844][ T5540]  free_unref_page+0xcfb/0xf20
[   71.734594][ T5540]  vfree+0x186/0x2e0
[   71.738513][ T5540]  prealloc_destroy+0x24c/0x310
[   71.743360][ T5540]  htab_map_free+0x7b9/0xa70
[   71.747984][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   71.753179][ T5540]  process_scheduled_works+0xa63/0x1850
[   71.758755][ T5540]  worker_thread+0x870/0xd30
[   71.763368][ T5540]  kthread+0x2f0/0x390
[   71.767418][ T5540]  ret_from_fork+0x4b/0x80
[   71.771859][ T5540]  ret_from_fork_asm+0x1a/0x30
[   71.776805][ T5540] Modules linked in:
[   71.780728][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   71.792393][ T5540] Tainted: [B]=BAD_PAGE
[   71.796532][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   71.806588][ T5540] Call Trace:
[   71.809857][ T5540]  <TASK>
[   71.812798][ T5540]  dump_stack_lvl+0x241/0x360
[   71.817474][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.822665][ T5540]  ? __pfx_print_modules+0x10/0x10
[   71.827771][ T5540]  bad_page+0x166/0x1b0
[   71.831917][ T5540]  free_unref_page+0xed0/0xf20
[   71.836663][ T5540]  skb_release_data+0x6dc/0x8a0
[   71.841505][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   71.846515][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   71.852219][ T5540]  ? mark_lock+0x9a/0x360
[   71.856533][ T5540]  ? __lock_acquire+0x1384/0x2050
[   71.861544][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   71.867596][ T5540]  ? mark_lock+0x9a/0x360
[   71.871903][ T5540]  ? __lock_acquire+0x1384/0x2050
[   71.876910][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   71.882876][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   71.889467][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   71.896022][ T5540]  ? read_tsc+0x9/0x20
[   71.900095][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   71.905304][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   71.911655][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   71.917823][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   71.924158][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   71.930827][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   71.936016][ T5540]  ? __phys_addr+0xba/0x170
[   71.940524][ T5540]  ? build_skb_around+0x111/0x260
[   71.945539][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   71.951424][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   71.956712][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   71.962159][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   71.968040][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   71.973568][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   71.979364][ T5540]  ? synchronize_rcu+0x11b/0x360
[   71.984292][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   71.989581][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   71.995840][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   72.001736][ T5540]  ? _copy_from_user+0xa6/0xe0
[   72.006499][ T5540]  ? bpf_test_init+0x15a/0x180
[   72.011255][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   72.016696][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   72.022057][ T5540]  ? __pfx_lock_release+0x10/0x10
[   72.027071][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   72.032875][ T5540]  ? __fget_files+0x29/0x470
[   72.037447][ T5540]  ? fput+0x1a8/0x230
[   72.041416][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   72.047210][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   72.052151][ T5540]  __sys_bpf+0x48d/0x810
[   72.056386][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   72.061143][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   72.067118][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   72.073434][ T5540]  ? do_syscall_64+0x100/0x230
[   72.078201][ T5540]  __x64_sys_bpf+0x7c/0x90
[   72.082636][ T5540]  do_syscall_64+0xf3/0x230
[   72.087117][ T5540]  ? clear_bhb_loop+0x35/0x90
[   72.091786][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.097672][ T5540] RIP: 0033:0x7fa20b37dff9
[   72.102076][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.121677][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   72.130087][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   72.138069][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   72.146070][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   72.154046][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.162013][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   72.169989][ T5540]  </TASK>
[   72.173098][ T5540] BUG: Bad page state in process syz.0.57  pfn:3074f
[   72.179826][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3074f
[   72.188628][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   72.195758][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   72.204484][ T5540] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[   72.213303][ T5540] page dumped because: page_pool leak
[   72.218715][ T5540] page_owner tracks the page as allocated
[   72.224548][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007419899, free_ts 67831516656
[   72.241286][ T5540]  post_alloc_hook+0x1f3/0x230
[   72.246160][ T5540]  get_page_from_freelist+0x3045/0x3190
[   72.251762][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   72.256967][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   72.262465][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   72.268421][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   72.273633][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   72.279031][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   72.284416][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   72.289403][ T5540]  __sys_bpf+0x48d/0x810
[   72.293650][ T5540]  __x64_sys_bpf+0x7c/0x90
[   72.298106][ T5540]  do_syscall_64+0xf3/0x230
[   72.302614][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.308538][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   72.314863][ T5540]  free_unref_page+0xcfb/0xf20
[   72.319659][ T5540]  vfree+0x186/0x2e0
[   72.323559][ T5540]  prealloc_destroy+0x24c/0x310
[   72.328446][ T5540]  htab_map_free+0x7b9/0xa70
[   72.333050][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   72.338327][ T5540]  process_scheduled_works+0xa63/0x1850
[   72.343885][ T5540]  worker_thread+0x870/0xd30
[   72.348520][ T5540]  kthread+0x2f0/0x390
[   72.352591][ T5540]  ret_from_fork+0x4b/0x80
[   72.356995][ T5540]  ret_from_fork_asm+0x1a/0x30
[   72.361809][ T5540] Modules linked in:
[   72.365740][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   72.377388][ T5540] Tainted: [B]=BAD_PAGE
[   72.381521][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   72.391557][ T5540] Call Trace:
[   72.394819][ T5540]  <TASK>
[   72.397738][ T5540]  dump_stack_lvl+0x241/0x360
[   72.402414][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.407595][ T5540]  ? __pfx_print_modules+0x10/0x10
[   72.412800][ T5540]  bad_page+0x166/0x1b0
[   72.416964][ T5540]  free_unref_page+0xed0/0xf20
[   72.421751][ T5540]  skb_release_data+0x6dc/0x8a0
[   72.426592][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   72.431618][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   72.437406][ T5540]  ? mark_lock+0x9a/0x360
[   72.441716][ T5540]  ? __lock_acquire+0x1384/0x2050
[   72.446988][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   72.453044][ T5540]  ? mark_lock+0x9a/0x360
[   72.457357][ T5540]  ? __lock_acquire+0x1384/0x2050
[   72.462373][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   72.468356][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   72.475039][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   72.481527][ T5540]  ? read_tsc+0x9/0x20
[   72.485577][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   72.490759][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   72.497066][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   72.503202][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   72.509511][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   72.516210][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   72.521399][ T5540]  ? __phys_addr+0xba/0x170
[   72.525910][ T5540]  ? build_skb_around+0x111/0x260
[   72.530925][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   72.536803][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   72.542184][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   72.547635][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   72.553533][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   72.559082][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   72.564871][ T5540]  ? synchronize_rcu+0x11b/0x360
[   72.569806][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   72.575097][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   72.581324][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   72.587208][ T5540]  ? _copy_from_user+0xa6/0xe0
[   72.591953][ T5540]  ? bpf_test_init+0x15a/0x180
[   72.596702][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   72.602149][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   72.607505][ T5540]  ? __pfx_lock_release+0x10/0x10
[   72.612515][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   72.618320][ T5540]  ? __fget_files+0x29/0x470
[   72.622919][ T5540]  ? fput+0x1a8/0x230
[   72.626893][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   72.632703][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   72.637624][ T5540]  __sys_bpf+0x48d/0x810
[   72.641865][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   72.646616][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   72.652580][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   72.658891][ T5540]  ? do_syscall_64+0x100/0x230
[   72.663646][ T5540]  __x64_sys_bpf+0x7c/0x90
[   72.668048][ T5540]  do_syscall_64+0xf3/0x230
[   72.672552][ T5540]  ? clear_bhb_loop+0x35/0x90
[   72.677212][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.683092][ T5540] RIP: 0033:0x7fa20b37dff9
[   72.687488][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.707090][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   72.715484][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   72.723703][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   72.731657][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   72.739612][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.747562][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   72.755518][ T5540]  </TASK>
[   72.758603][ T5540] BUG: Bad page state in process syz.0.57  pfn:279d0
[   72.765283][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880279d0dc0 pfn:0x279d0
[   72.775407][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   72.782561][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   72.791180][ T5540] raw: ffff8880279d0dc0 0000000000000001 00000000ffffffff 0000000000000000
[   72.799792][ T5540] page dumped because: page_pool leak
[   72.805165][ T5540] page_owner tracks the page as allocated
[   72.810900][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007408521, free_ts 67831529976
[   72.827646][ T5540]  post_alloc_hook+0x1f3/0x230
[   72.832507][ T5540]  get_page_from_freelist+0x3045/0x3190
[   72.838113][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   72.843339][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   72.849277][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   72.855180][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   72.860412][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   72.865797][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   72.871208][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   72.876155][ T5540]  __sys_bpf+0x48d/0x810
[   72.880424][ T5540]  __x64_sys_bpf+0x7c/0x90
[   72.884841][ T5540]  do_syscall_64+0xf3/0x230
[   72.889378][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.895281][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   72.901649][ T5540]  free_unref_page+0xcfb/0xf20
[   72.906450][ T5540]  vfree+0x186/0x2e0
[   72.910392][ T5540]  prealloc_destroy+0x24c/0x310
[   72.915253][ T5540]  htab_map_free+0x7b9/0xa70
[   72.919912][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   72.925123][ T5540]  process_scheduled_works+0xa63/0x1850
[   72.930711][ T5540]  worker_thread+0x870/0xd30
[   72.935320][ T5540]  kthread+0x2f0/0x390
[   72.939413][ T5540]  ret_from_fork+0x4b/0x80
[   72.943852][ T5540]  ret_from_fork_asm+0x1a/0x30
[   72.948665][ T5540] Modules linked in:
[   72.952587][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   72.964207][ T5540] Tainted: [B]=BAD_PAGE
[   72.968343][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   72.978402][ T5540] Call Trace:
[   72.981665][ T5540]  <TASK>
[   72.984578][ T5540]  dump_stack_lvl+0x241/0x360
[   72.989245][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.994426][ T5540]  ? __pfx_print_modules+0x10/0x10
[   72.999520][ T5540]  bad_page+0x166/0x1b0
[   73.003657][ T5540]  free_unref_page+0xed0/0xf20
[   73.008427][ T5540]  skb_release_data+0x6dc/0x8a0
[   73.013285][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   73.018299][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   73.024022][ T5540]  ? mark_lock+0x9a/0x360
[   73.028340][ T5540]  ? __lock_acquire+0x1384/0x2050
[   73.033445][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   73.039494][ T5540]  ? mark_lock+0x9a/0x360
[   73.043809][ T5540]  ? __lock_acquire+0x1384/0x2050
[   73.048830][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   73.054818][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   73.061402][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   73.067899][ T5540]  ? read_tsc+0x9/0x20
[   73.071957][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   73.077169][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   73.083535][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   73.089689][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   73.096008][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   73.102670][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   73.107862][ T5540]  ? __phys_addr+0xba/0x170
[   73.112400][ T5540]  ? build_skb_around+0x111/0x260
[   73.117432][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   73.123336][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   73.128630][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   73.134129][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   73.140194][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   73.145760][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   73.151824][ T5540]  ? synchronize_rcu+0x11b/0x360
[   73.156754][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   73.162039][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   73.168272][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   73.174157][ T5540]  ? _copy_from_user+0xa6/0xe0
[   73.178932][ T5540]  ? bpf_test_init+0x15a/0x180
[   73.183680][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   73.189161][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   73.194535][ T5540]  ? __pfx_lock_release+0x10/0x10
[   73.199544][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   73.205337][ T5540]  ? __fget_files+0x29/0x470
[   73.209936][ T5540]  ? fput+0x1a8/0x230
[   73.213940][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   73.219735][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   73.224656][ T5540]  __sys_bpf+0x48d/0x810
[   73.228966][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   73.233719][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   73.239686][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   73.246005][ T5540]  ? do_syscall_64+0x100/0x230
[   73.250846][ T5540]  __x64_sys_bpf+0x7c/0x90
[   73.255243][ T5540]  do_syscall_64+0xf3/0x230
[   73.259737][ T5540]  ? clear_bhb_loop+0x35/0x90
[   73.264425][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.270320][ T5540] RIP: 0033:0x7fa20b37dff9
[   73.274718][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.294329][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   73.303180][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   73.311401][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   73.319358][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   73.327396][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.335439][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   73.343399][ T5540]  </TASK>
[   73.346478][ T5540] BUG: Bad page state in process syz.0.57  pfn:203d4
[   73.353188][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880203d4140 pfn:0x203d4
[   73.363286][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   73.370450][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   73.379062][ T5540] raw: ffff8880203d4140 0000000000000001 00000000ffffffff 0000000000000000
[   73.387631][ T5540] page dumped because: page_pool leak
[   73.393024][ T5540] page_owner tracks the page as allocated
[   73.398760][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007397233, free_ts 67831544160
[   73.415452][ T5540]  post_alloc_hook+0x1f3/0x230
[   73.420261][ T5540]  get_page_from_freelist+0x3045/0x3190
[   73.425793][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   73.431015][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   73.436493][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   73.442479][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   73.447687][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   73.453131][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   73.458643][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   73.463693][ T5540]  __sys_bpf+0x48d/0x810
[   73.467967][ T5540]  __x64_sys_bpf+0x7c/0x90
[   73.472417][ T5540]  do_syscall_64+0xf3/0x230
[   73.476901][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.482823][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   73.489166][ T5540]  free_unref_page+0xcfb/0xf20
[   73.493942][ T5540]  vfree+0x186/0x2e0
[   73.497863][ T5540]  prealloc_destroy+0x24c/0x310
[   73.502715][ T5540]  htab_map_free+0x7b9/0xa70
[   73.507321][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   73.512546][ T5540]  process_scheduled_works+0xa63/0x1850
[   73.518120][ T5540]  worker_thread+0x870/0xd30
[   73.522721][ T5540]  kthread+0x2f0/0x390
[   73.526767][ T5540]  ret_from_fork+0x4b/0x80
[   73.531213][ T5540]  ret_from_fork_asm+0x1a/0x30
[   73.535992][ T5540] Modules linked in:
[   73.539934][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   73.551687][ T5540] Tainted: [B]=BAD_PAGE
[   73.555838][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   73.565893][ T5540] Call Trace:
[   73.569157][ T5540]  <TASK>
[   73.572071][ T5540]  dump_stack_lvl+0x241/0x360
[   73.577200][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.582386][ T5540]  ? __pfx_print_modules+0x10/0x10
[   73.587485][ T5540]  bad_page+0x166/0x1b0
[   73.591627][ T5540]  free_unref_page+0xed0/0xf20
[   73.596409][ T5540]  skb_release_data+0x6dc/0x8a0
[   73.601270][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   73.606281][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   73.611985][ T5540]  ? mark_lock+0x9a/0x360
[   73.616296][ T5540]  ? __lock_acquire+0x1384/0x2050
[   73.621410][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   73.627479][ T5540]  ? mark_lock+0x9a/0x360
[   73.631789][ T5540]  ? __lock_acquire+0x1384/0x2050
[   73.636798][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   73.642766][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   73.649352][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   73.655877][ T5540]  ? read_tsc+0x9/0x20
[   73.659934][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   73.665225][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   73.671548][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   73.677710][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   73.684061][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   73.690758][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   73.695959][ T5540]  ? __phys_addr+0xba/0x170
[   73.700463][ T5540]  ? build_skb_around+0x111/0x260
[   73.705479][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   73.711363][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   73.716643][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   73.722108][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   73.727985][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   73.733517][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   73.739309][ T5540]  ? synchronize_rcu+0x11b/0x360
[   73.744236][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   73.749521][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   73.755851][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   73.761735][ T5540]  ? _copy_from_user+0xa6/0xe0
[   73.766481][ T5540]  ? bpf_test_init+0x15a/0x180
[   73.771227][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   73.776667][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   73.782053][ T5540]  ? __pfx_lock_release+0x10/0x10
[   73.787152][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   73.792946][ T5540]  ? __fget_files+0x29/0x470
[   73.797518][ T5540]  ? fput+0x1a8/0x230
[   73.801507][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   73.807314][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   73.812234][ T5540]  __sys_bpf+0x48d/0x810
[   73.816474][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   73.821218][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   73.827184][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   73.833496][ T5540]  ? do_syscall_64+0x100/0x230
[   73.838238][ T5540]  __x64_sys_bpf+0x7c/0x90
[   73.842632][ T5540]  do_syscall_64+0xf3/0x230
[   73.847118][ T5540]  ? clear_bhb_loop+0x35/0x90
[   73.851779][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.857660][ T5540] RIP: 0033:0x7fa20b37dff9
[   73.862060][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.881651][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   73.890078][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   73.898046][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   73.906036][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   73.913999][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.922213][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   73.930182][ T5540]  </TASK>
[   73.933352][ T5540] BUG: Bad page state in process syz.0.57  pfn:2f4e4
[   73.940083][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f4e4c80 pfn:0x2f4e4
[   73.950185][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   73.957284][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   73.965897][ T5540] raw: ffff88802f4e4c80 0000000000000001 00000000ffffffff 0000000000000000
[   73.974530][ T5540] page dumped because: page_pool leak
[   73.979942][ T5540] page_owner tracks the page as allocated
[   73.985660][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007385929, free_ts 67831557939
[   74.002544][ T5540]  post_alloc_hook+0x1f3/0x230
[   74.007324][ T5540]  get_page_from_freelist+0x3045/0x3190
[   74.012904][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   74.018150][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   74.023622][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   74.029664][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   74.034885][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   74.040287][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   74.045674][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   74.050653][ T5540]  __sys_bpf+0x48d/0x810
[   74.054902][ T5540]  __x64_sys_bpf+0x7c/0x90
[   74.059346][ T5540]  do_syscall_64+0xf3/0x230
[   74.063848][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.069771][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   74.076090][ T5540]  free_unref_page+0xcfb/0xf20
[   74.080881][ T5540]  vfree+0x186/0x2e0
[   74.084781][ T5540]  prealloc_destroy+0x24c/0x310
[   74.089656][ T5540]  htab_map_free+0x7b9/0xa70
[   74.094334][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   74.099551][ T5540]  process_scheduled_works+0xa63/0x1850
[   74.105108][ T5540]  worker_thread+0x870/0xd30
[   74.109837][ T5540]  kthread+0x2f0/0x390
[   74.113950][ T5540]  ret_from_fork+0x4b/0x80
[   74.118407][ T5540]  ret_from_fork_asm+0x1a/0x30
[   74.123270][ T5540] Modules linked in:
[   74.127155][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   74.138772][ T5540] Tainted: [B]=BAD_PAGE
[   74.142902][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   74.152945][ T5540] Call Trace:
[   74.156224][ T5540]  <TASK>
[   74.159146][ T5540]  dump_stack_lvl+0x241/0x360
[   74.163833][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.169103][ T5540]  ? __pfx_print_modules+0x10/0x10
[   74.174202][ T5540]  bad_page+0x166/0x1b0
[   74.178353][ T5540]  free_unref_page+0xed0/0xf20
[   74.183152][ T5540]  skb_release_data+0x6dc/0x8a0
[   74.188015][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   74.193026][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   74.198732][ T5540]  ? mark_lock+0x9a/0x360
[   74.203061][ T5540]  ? __lock_acquire+0x1384/0x2050
[   74.208071][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   74.214120][ T5540]  ? mark_lock+0x9a/0x360
[   74.218432][ T5540]  ? __lock_acquire+0x1384/0x2050
[   74.223444][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   74.229425][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   74.236033][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   74.242516][ T5540]  ? read_tsc+0x9/0x20
[   74.246572][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   74.251842][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   74.258158][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   74.264321][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   74.270636][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   74.277295][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   74.282504][ T5540]  ? __phys_addr+0xba/0x170
[   74.287006][ T5540]  ? build_skb_around+0x111/0x260
[   74.292019][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   74.297913][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   74.303180][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   74.308623][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   74.314519][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   74.320051][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   74.325838][ T5540]  ? synchronize_rcu+0x11b/0x360
[   74.330771][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   74.336062][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   74.342288][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   74.348175][ T5540]  ? _copy_from_user+0xa6/0xe0
[   74.352919][ T5540]  ? bpf_test_init+0x15a/0x180
[   74.357675][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   74.363141][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   74.368512][ T5540]  ? __pfx_lock_release+0x10/0x10
[   74.373521][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   74.379329][ T5540]  ? __fget_files+0x29/0x470
[   74.383925][ T5540]  ? fput+0x1a8/0x230
[   74.387898][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   74.393774][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   74.398713][ T5540]  __sys_bpf+0x48d/0x810
[   74.402944][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   74.407719][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   74.413696][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   74.420007][ T5540]  ? do_syscall_64+0x100/0x230
[   74.424763][ T5540]  __x64_sys_bpf+0x7c/0x90
[   74.429176][ T5540]  do_syscall_64+0xf3/0x230
[   74.433681][ T5540]  ? clear_bhb_loop+0x35/0x90
[   74.438436][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.444313][ T5540] RIP: 0033:0x7fa20b37dff9
[   74.448707][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.468303][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   74.476701][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   74.484660][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   74.492630][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   74.500585][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.508548][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   74.516502][ T5540]  </TASK>
[   74.519584][ T5540] BUG: Bad page state in process syz.0.57  pfn:77236
[   74.526267][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888077236780 pfn:0x77236
[   74.536424][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   74.543561][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   74.552194][ T5540] raw: ffff888077236780 0000000000000001 00000000ffffffff 0000000000000000
[   74.560798][ T5540] page dumped because: page_pool leak
[   74.566156][ T5540] page_owner tracks the page as allocated
[   74.571900][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007374447, free_ts 67831571819
[   74.588618][ T5540]  post_alloc_hook+0x1f3/0x230
[   74.593374][ T5540]  get_page_from_freelist+0x3045/0x3190
[   74.598962][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   74.604162][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   74.609654][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   74.615554][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   74.620773][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   74.626152][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   74.631558][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   74.636499][ T5540]  __sys_bpf+0x48d/0x810
[   74.640791][ T5540]  __x64_sys_bpf+0x7c/0x90
[   74.645210][ T5540]  do_syscall_64+0xf3/0x230
[   74.649736][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.655634][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   74.661975][ T5540]  free_unref_page+0xcfb/0xf20
[   74.666750][ T5540]  vfree+0x186/0x2e0
[   74.670695][ T5540]  prealloc_destroy+0x24c/0x310
[   74.675550][ T5540]  htab_map_free+0x7b9/0xa70
[   74.680163][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   74.685368][ T5540]  process_scheduled_works+0xa63/0x1850
[   74.690950][ T5540]  worker_thread+0x870/0xd30
[   74.695549][ T5540]  kthread+0x2f0/0x390
[   74.699655][ T5540]  ret_from_fork+0x4b/0x80
[   74.704073][ T5540]  ret_from_fork_asm+0x1a/0x30
[   74.708881][ T5540] Modules linked in:
[   74.712776][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   74.724388][ T5540] Tainted: [B]=BAD_PAGE
[   74.728517][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   74.738559][ T5540] Call Trace:
[   74.741817][ T5540]  <TASK>
[   74.744908][ T5540]  dump_stack_lvl+0x241/0x360
[   74.749581][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.754760][ T5540]  ? __pfx_print_modules+0x10/0x10
[   74.759871][ T5540]  bad_page+0x166/0x1b0
[   74.764006][ T5540]  free_unref_page+0xed0/0xf20
[   74.768769][ T5540]  skb_release_data+0x6dc/0x8a0
[   74.773624][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   74.778633][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   74.784333][ T5540]  ? mark_lock+0x9a/0x360
[   74.788644][ T5540]  ? __lock_acquire+0x1384/0x2050
[   74.793652][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   74.799701][ T5540]  ? mark_lock+0x9a/0x360
[   74.804007][ T5540]  ? __lock_acquire+0x1384/0x2050
[   74.809017][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   74.815443][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   74.822041][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   74.828821][ T5540]  ? read_tsc+0x9/0x20
[   74.832885][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   74.838090][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   74.844410][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   74.850548][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   74.856861][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   74.863538][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   74.868729][ T5540]  ? __phys_addr+0xba/0x170
[   74.873238][ T5540]  ? build_skb_around+0x111/0x260
[   74.878254][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   74.884130][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   74.889404][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   74.894848][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   74.900724][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   74.906252][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   74.912038][ T5540]  ? synchronize_rcu+0x11b/0x360
[   74.916972][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   74.922260][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   74.928515][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   74.934412][ T5540]  ? _copy_from_user+0xa6/0xe0
[   74.939185][ T5540]  ? bpf_test_init+0x15a/0x180
[   74.943959][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   74.949413][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   74.954799][ T5540]  ? __pfx_lock_release+0x10/0x10
[   74.959813][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   74.965622][ T5540]  ? __fget_files+0x29/0x470
[   74.970216][ T5540]  ? fput+0x1a8/0x230
[   74.974205][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   74.980010][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   74.984938][ T5540]  __sys_bpf+0x48d/0x810
[   74.989166][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   74.993913][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   74.999965][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   75.006283][ T5540]  ? do_syscall_64+0x100/0x230
[   75.011030][ T5540]  __x64_sys_bpf+0x7c/0x90
[   75.015431][ T5540]  do_syscall_64+0xf3/0x230
[   75.019927][ T5540]  ? clear_bhb_loop+0x35/0x90
[   75.024619][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.030510][ T5540] RIP: 0033:0x7fa20b37dff9
[   75.034930][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.054633][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   75.063029][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   75.070998][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   75.079012][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   75.086974][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.094928][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   75.102891][ T5540]  </TASK>
[   75.105987][ T5540] BUG: Bad page state in process syz.0.57  pfn:28e44
[   75.112734][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028e44a20 pfn:0x28e44
[   75.122834][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   75.130029][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   75.138796][ T5540] raw: ffff888028e44a20 0000000000000001 00000000ffffffff 0000000000000000
[   75.147366][ T5540] page dumped because: page_pool leak
[   75.152797][ T5540] page_owner tracks the page as allocated
[   75.158565][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007362905, free_ts 67831586201
[   75.175450][ T5540]  post_alloc_hook+0x1f3/0x230
[   75.180256][ T5540]  get_page_from_freelist+0x3045/0x3190
[   75.185787][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   75.191009][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   75.196473][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   75.202490][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   75.207758][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   75.213145][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   75.218562][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   75.223615][ T5540]  __sys_bpf+0x48d/0x810
[   75.227894][ T5540]  __x64_sys_bpf+0x7c/0x90
[   75.232322][ T5540]  do_syscall_64+0xf3/0x230
[   75.236838][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.242765][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   75.249116][ T5540]  free_unref_page+0xcfb/0xf20
[   75.253870][ T5540]  vfree+0x186/0x2e0
[   75.257791][ T5540]  prealloc_destroy+0x24c/0x310
[   75.262673][ T5540]  htab_map_free+0x7b9/0xa70
[   75.267251][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   75.272482][ T5540]  process_scheduled_works+0xa63/0x1850
[   75.278054][ T5540]  worker_thread+0x870/0xd30
[   75.282639][ T5540]  kthread+0x2f0/0x390
[   75.286690][ T5540]  ret_from_fork+0x4b/0x80
[   75.291137][ T5540]  ret_from_fork_asm+0x1a/0x30
[   75.296025][ T5540] Modules linked in:
[   75.299953][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   75.311607][ T5540] Tainted: [B]=BAD_PAGE
[   75.315737][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   75.325772][ T5540] Call Trace:
[   75.329064][ T5540]  <TASK>
[   75.331978][ T5540]  dump_stack_lvl+0x241/0x360
[   75.336655][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.341839][ T5540]  ? __pfx_print_modules+0x10/0x10
[   75.346935][ T5540]  bad_page+0x166/0x1b0
[   75.351078][ T5540]  free_unref_page+0xed0/0xf20
[   75.355826][ T5540]  skb_release_data+0x6dc/0x8a0
[   75.360679][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   75.365722][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   75.371434][ T5540]  ? mark_lock+0x9a/0x360
[   75.375752][ T5540]  ? __lock_acquire+0x1384/0x2050
[   75.380762][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   75.386824][ T5540]  ? mark_lock+0x9a/0x360
[   75.391142][ T5540]  ? __lock_acquire+0x1384/0x2050
[   75.396154][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   75.402124][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   75.408705][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   75.415234][ T5540]  ? read_tsc+0x9/0x20
[   75.419290][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   75.424484][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   75.430890][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   75.437030][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   75.443340][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   75.449998][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   75.455204][ T5540]  ? __phys_addr+0xba/0x170
[   75.459706][ T5540]  ? build_skb_around+0x111/0x260
[   75.464746][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   75.470631][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   75.475903][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   75.481350][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   75.487259][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   75.492800][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   75.498612][ T5540]  ? synchronize_rcu+0x11b/0x360
[   75.503618][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   75.508904][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   75.515154][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   75.521040][ T5540]  ? _copy_from_user+0xa6/0xe0
[   75.525790][ T5540]  ? bpf_test_init+0x15a/0x180
[   75.530622][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   75.536071][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   75.541453][ T5540]  ? __pfx_lock_release+0x10/0x10
[   75.546462][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   75.552256][ T5540]  ? __fget_files+0x29/0x470
[   75.556830][ T5540]  ? fput+0x1a8/0x230
[   75.560802][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   75.566599][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   75.571519][ T5540]  __sys_bpf+0x48d/0x810
[   75.575829][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   75.580578][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   75.586555][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   75.592893][ T5540]  ? do_syscall_64+0x100/0x230
[   75.597734][ T5540]  __x64_sys_bpf+0x7c/0x90
[   75.602142][ T5540]  do_syscall_64+0xf3/0x230
[   75.606621][ T5540]  ? clear_bhb_loop+0x35/0x90
[   75.611282][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.617162][ T5540] RIP: 0033:0x7fa20b37dff9
[   75.621559][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.641168][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   75.649582][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   75.657620][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   75.665577][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   75.673531][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.681480][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   75.689452][ T5540]  </TASK>
[   75.692543][ T5540] BUG: Bad page state in process syz.0.57  pfn:2b10c
[   75.699259][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b10c0d8 pfn:0x2b10c
[   75.709352][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   75.716446][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   75.725058][ T5540] raw: ffff88802b10c0d8 0000000000000001 00000000ffffffff 0000000000000000
[   75.733752][ T5540] page dumped because: page_pool leak
[   75.739167][ T5540] page_owner tracks the page as allocated
[   75.744890][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007351479, free_ts 67831600676
[   75.761617][ T5540]  post_alloc_hook+0x1f3/0x230
[   75.766497][ T5540]  get_page_from_freelist+0x3045/0x3190
[   75.772083][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   75.777309][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   75.782799][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   75.788745][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   75.794046][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   75.799452][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   75.804853][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   75.809917][ T5540]  __sys_bpf+0x48d/0x810
[   75.814163][ T5540]  __x64_sys_bpf+0x7c/0x90
[   75.818618][ T5540]  do_syscall_64+0xf3/0x230
[   75.823148][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.829074][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   75.835484][ T5540]  free_unref_page+0xcfb/0xf20
[   75.840393][ T5540]  vfree+0x186/0x2e0
[   75.844302][ T5540]  prealloc_destroy+0x24c/0x310
[   75.849184][ T5540]  htab_map_free+0x7b9/0xa70
[   75.853784][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   75.859011][ T5540]  process_scheduled_works+0xa63/0x1850
[   75.864584][ T5540]  worker_thread+0x870/0xd30
[   75.869212][ T5540]  kthread+0x2f0/0x390
[   75.873281][ T5540]  ret_from_fork+0x4b/0x80
[   75.877681][ T5540]  ret_from_fork_asm+0x1a/0x30
[   75.882489][ T5540] Modules linked in:
[   75.886368][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   75.897982][ T5540] Tainted: [B]=BAD_PAGE
[   75.902122][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   75.912179][ T5540] Call Trace:
[   75.915441][ T5540]  <TASK>
[   75.918354][ T5540]  dump_stack_lvl+0x241/0x360
[   75.923033][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.928226][ T5540]  ? __pfx_print_modules+0x10/0x10
[   75.933440][ T5540]  bad_page+0x166/0x1b0
[   75.937579][ T5540]  free_unref_page+0xed0/0xf20
[   75.942331][ T5540]  skb_release_data+0x6dc/0x8a0
[   75.947194][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   75.952376][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   75.958170][ T5540]  ? mark_lock+0x9a/0x360
[   75.962553][ T5540]  ? __lock_acquire+0x1384/0x2050
[   75.967586][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   75.973658][ T5540]  ? mark_lock+0x9a/0x360
[   75.978008][ T5540]  ? __lock_acquire+0x1384/0x2050
[   75.983047][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   75.989025][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   75.995600][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   76.002094][ T5540]  ? read_tsc+0x9/0x20
[   76.006151][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   76.011350][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   76.017662][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   76.023812][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   76.030149][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   76.036845][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   76.042031][ T5540]  ? __phys_addr+0xba/0x170
[   76.046517][ T5540]  ? build_skb_around+0x111/0x260
[   76.051527][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   76.057405][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   76.062674][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   76.068118][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   76.073994][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   76.079535][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   76.085338][ T5540]  ? synchronize_rcu+0x11b/0x360
[   76.090259][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   76.095546][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   76.101790][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   76.107677][ T5540]  ? _copy_from_user+0xa6/0xe0
[   76.112437][ T5540]  ? bpf_test_init+0x15a/0x180
[   76.117209][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   76.122656][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   76.128116][ T5540]  ? __pfx_lock_release+0x10/0x10
[   76.133167][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   76.138978][ T5540]  ? __fget_files+0x29/0x470
[   76.143552][ T5540]  ? fput+0x1a8/0x230
[   76.147514][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   76.153305][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   76.158229][ T5540]  __sys_bpf+0x48d/0x810
[   76.162454][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   76.167199][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   76.173164][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   76.179485][ T5540]  ? do_syscall_64+0x100/0x230
[   76.184250][ T5540]  __x64_sys_bpf+0x7c/0x90
[   76.188651][ T5540]  do_syscall_64+0xf3/0x230
[   76.193132][ T5540]  ? clear_bhb_loop+0x35/0x90
[   76.197787][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.203673][ T5540] RIP: 0033:0x7fa20b37dff9
[   76.208071][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.227662][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   76.236065][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   76.244022][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   76.251979][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   76.259935][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.267890][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   76.275848][ T5540]  </TASK>
[   76.278939][ T5540] BUG: Bad page state in process syz.0.57  pfn:27d6c
[   76.285622][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027d6c680 pfn:0x27d6c
[   76.295741][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   76.302897][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   76.311528][ T5540] raw: ffff888027d6c680 0000000000000001 00000000ffffffff 0000000000000000
[   76.320133][ T5540] page dumped because: page_pool leak
[   76.325484][ T5540] page_owner tracks the page as allocated
[   76.331243][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007339950, free_ts 67831614790
[   76.347947][ T5540]  post_alloc_hook+0x1f3/0x230
[   76.352702][ T5540]  get_page_from_freelist+0x3045/0x3190
[   76.358289][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   76.363490][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   76.368976][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   76.374891][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   76.380136][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   76.385516][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   76.390938][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   76.395894][ T5540]  __sys_bpf+0x48d/0x810
[   76.400190][ T5540]  __x64_sys_bpf+0x7c/0x90
[   76.404613][ T5540]  do_syscall_64+0xf3/0x230
[   76.409169][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.415140][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   76.421508][ T5540]  free_unref_page+0xcfb/0xf20
[   76.426299][ T5540]  vfree+0x186/0x2e0
[   76.430239][ T5540]  prealloc_destroy+0x24c/0x310
[   76.435097][ T5540]  htab_map_free+0x7b9/0xa70
[   76.439742][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   76.444944][ T5540]  process_scheduled_works+0xa63/0x1850
[   76.450542][ T5540]  worker_thread+0x870/0xd30
[   76.455138][ T5540]  kthread+0x2f0/0x390
[   76.459248][ T5540]  ret_from_fork+0x4b/0x80
[   76.463771][ T5540]  ret_from_fork_asm+0x1a/0x30
[   76.468595][ T5540] Modules linked in:
[   76.472504][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   76.484134][ T5540] Tainted: [B]=BAD_PAGE
[   76.488270][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   76.498304][ T5540] Call Trace:
[   76.501562][ T5540]  <TASK>
[   76.504476][ T5540]  dump_stack_lvl+0x241/0x360
[   76.509155][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.514342][ T5540]  ? __pfx_print_modules+0x10/0x10
[   76.519439][ T5540]  bad_page+0x166/0x1b0
[   76.523576][ T5540]  free_unref_page+0xed0/0xf20
[   76.528335][ T5540]  skb_release_data+0x6dc/0x8a0
[   76.533187][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   76.538194][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   76.543896][ T5540]  ? mark_lock+0x9a/0x360
[   76.548209][ T5540]  ? __lock_acquire+0x1384/0x2050
[   76.553221][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   76.559274][ T5540]  ? mark_lock+0x9a/0x360
[   76.563580][ T5540]  ? __lock_acquire+0x1384/0x2050
[   76.568590][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   76.574550][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   76.581122][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   76.587604][ T5540]  ? read_tsc+0x9/0x20
[   76.591656][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   76.596834][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   76.603139][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   76.609276][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   76.615590][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   76.622250][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   76.627438][ T5540]  ? __phys_addr+0xba/0x170
[   76.631928][ T5540]  ? build_skb_around+0x111/0x260
[   76.636951][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   76.642831][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   76.648100][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   76.653562][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   76.659439][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   76.664977][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   76.670773][ T5540]  ? synchronize_rcu+0x11b/0x360
[   76.675780][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   76.681058][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   76.687303][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   76.693186][ T5540]  ? _copy_from_user+0xa6/0xe0
[   76.697939][ T5540]  ? bpf_test_init+0x15a/0x180
[   76.702710][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   76.708166][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   76.713637][ T5540]  ? __pfx_lock_release+0x10/0x10
[   76.718693][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   76.724490][ T5540]  ? __fget_files+0x29/0x470
[   76.729082][ T5540]  ? fput+0x1a8/0x230
[   76.733247][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   76.739127][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   76.744048][ T5540]  __sys_bpf+0x48d/0x810
[   76.748446][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   76.753194][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   76.759250][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   76.765578][ T5540]  ? do_syscall_64+0x100/0x230
[   76.770408][ T5540]  __x64_sys_bpf+0x7c/0x90
[   76.774809][ T5540]  do_syscall_64+0xf3/0x230
[   76.779305][ T5540]  ? clear_bhb_loop+0x35/0x90
[   76.783984][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.789955][ T5540] RIP: 0033:0x7fa20b37dff9
[   76.794355][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.814047][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   76.822482][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   76.830493][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   76.838496][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   76.846456][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.854422][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   76.862408][ T5540]  </TASK>
[   76.865527][ T5540] BUG: Bad page state in process syz.0.57  pfn:12408
[   76.872259][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880124086c8 pfn:0x12408
[   76.882366][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   76.889516][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   76.898159][ T5540] raw: ffff8880124086c8 0000000000000001 00000000ffffffff 0000000000000000
[   76.906722][ T5540] page dumped because: page_pool leak
[   76.912124][ T5540] page_owner tracks the page as allocated
[   76.917891][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007329184, free_ts 67831628928
[   76.934672][ T5540]  post_alloc_hook+0x1f3/0x230
[   76.939501][ T5540]  get_page_from_freelist+0x3045/0x3190
[   76.945064][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   76.950318][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   76.955788][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   76.961758][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   76.966969][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   76.972502][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   76.977919][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   76.982866][ T5540]  __sys_bpf+0x48d/0x810
[   76.987098][ T5540]  __x64_sys_bpf+0x7c/0x90
[   76.991549][ T5540]  do_syscall_64+0xf3/0x230
[   76.996076][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.002009][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   77.008380][ T5540]  free_unref_page+0xcfb/0xf20
[   77.013157][ T5540]  vfree+0x186/0x2e0
[   77.017040][ T5540]  prealloc_destroy+0x24c/0x310
[   77.022018][ T5540]  htab_map_free+0x7b9/0xa70
[   77.026618][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   77.031849][ T5540]  process_scheduled_works+0xa63/0x1850
[   77.037401][ T5540]  worker_thread+0x870/0xd30
[   77.042035][ T5540]  kthread+0x2f0/0x390
[   77.046107][ T5540]  ret_from_fork+0x4b/0x80
[   77.050612][ T5540]  ret_from_fork_asm+0x1a/0x30
[   77.055501][ T5540] Modules linked in:
[   77.059452][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   77.071094][ T5540] Tainted: [B]=BAD_PAGE
[   77.075227][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   77.085372][ T5540] Call Trace:
[   77.088637][ T5540]  <TASK>
[   77.091550][ T5540]  dump_stack_lvl+0x241/0x360
[   77.096240][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.101447][ T5540]  ? __pfx_print_modules+0x10/0x10
[   77.106622][ T5540]  bad_page+0x166/0x1b0
[   77.110783][ T5540]  free_unref_page+0xed0/0xf20
[   77.115551][ T5540]  skb_release_data+0x6dc/0x8a0
[   77.120403][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   77.125457][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   77.131181][ T5540]  ? mark_lock+0x9a/0x360
[   77.135507][ T5540]  ? __lock_acquire+0x1384/0x2050
[   77.140541][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   77.146620][ T5540]  ? mark_lock+0x9a/0x360
[   77.150946][ T5540]  ? __lock_acquire+0x1384/0x2050
[   77.156055][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   77.162040][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   77.168635][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   77.175152][ T5540]  ? read_tsc+0x9/0x20
[   77.179212][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   77.184397][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   77.190713][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   77.196851][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   77.203165][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   77.209824][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   77.215029][ T5540]  ? __phys_addr+0xba/0x170
[   77.219526][ T5540]  ? build_skb_around+0x111/0x260
[   77.224658][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   77.230581][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   77.235859][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   77.241312][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   77.247287][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   77.252909][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   77.258704][ T5540]  ? synchronize_rcu+0x11b/0x360
[   77.263632][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   77.268917][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   77.275168][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   77.281060][ T5540]  ? _copy_from_user+0xa6/0xe0
[   77.285804][ T5540]  ? bpf_test_init+0x15a/0x180
[   77.290551][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   77.295993][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   77.301350][ T5540]  ? __pfx_lock_release+0x10/0x10
[   77.306361][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   77.312152][ T5540]  ? __fget_files+0x29/0x470
[   77.316740][ T5540]  ? fput+0x1a8/0x230
[   77.320717][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   77.326533][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   77.331550][ T5540]  __sys_bpf+0x48d/0x810
[   77.335776][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   77.340520][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   77.346481][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   77.352809][ T5540]  ? do_syscall_64+0x100/0x230
[   77.357565][ T5540]  __x64_sys_bpf+0x7c/0x90
[   77.361972][ T5540]  do_syscall_64+0xf3/0x230
[   77.366466][ T5540]  ? clear_bhb_loop+0x35/0x90
[   77.371134][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.377026][ T5540] RIP: 0033:0x7fa20b37dff9
[   77.381424][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.401015][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   77.409412][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   77.417383][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   77.425352][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   77.433328][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.441288][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   77.449247][ T5540]  </TASK>
[   77.452329][ T5540] BUG: Bad page state in process syz.0.57  pfn:30526
[   77.459063][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880305264d8 pfn:0x30526
[   77.469179][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   77.476312][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   77.485109][ T5540] raw: ffff8880305264d8 0000000000000001 00000000ffffffff 0000000000000000
[   77.493736][ T5540] page dumped because: page_pool leak
[   77.499140][ T5540] page_owner tracks the page as allocated
[   77.504850][ T5540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5540, tgid 5536 (syz.0.57), ts 68007318199, free_ts 67831643530
[   77.521579][ T5540]  post_alloc_hook+0x1f3/0x230
[   77.526356][ T5540]  get_page_from_freelist+0x3045/0x3190
[   77.531938][ T5540]  __alloc_pages_noprof+0x256/0x6c0
[   77.537147][ T5540]  alloc_pages_bulk_noprof+0x729/0xd40
[   77.542718][ T5540]  __page_pool_alloc_pages_slow+0x122/0x690
[   77.548672][ T5540]  page_pool_alloc_pages+0xd0/0x1c0
[   77.553888][ T5540]  bpf_test_run_xdp_live+0x950/0x2160
[   77.559335][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   77.564827][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   77.569828][ T5540]  __sys_bpf+0x48d/0x810
[   77.574080][ T5540]  __x64_sys_bpf+0x7c/0x90
[   77.578547][ T5540]  do_syscall_64+0xf3/0x230
[   77.583054][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.588981][ T5540] page last free pid 2929 tgid 2929 stack trace:
[   77.595303][ T5540]  free_unref_page+0xcfb/0xf20
[   77.600099][ T5540]  vfree+0x186/0x2e0
[   77.604004][ T5540]  prealloc_destroy+0x24c/0x310
[   77.608878][ T5540]  htab_map_free+0x7b9/0xa70
[   77.613477][ T5540]  bpf_map_free_deferred+0xe4/0x100
[   77.618700][ T5540]  process_scheduled_works+0xa63/0x1850
[   77.624251][ T5540]  worker_thread+0x870/0xd30
[   77.628872][ T5540]  kthread+0x2f0/0x390
[   77.632980][ T5540]  ret_from_fork+0x4b/0x80
[   77.637387][ T5540]  ret_from_fork_asm+0x1a/0x30
[   77.642191][ T5540] Modules linked in:
[   77.646089][ T5540] CPU: 1 UID: 0 PID: 5540 Comm: syz.0.57 Tainted: G    B              6.11.0-syzkaller-11503-gc824deb1a897 #0
[   77.657794][ T5540] Tainted: [B]=BAD_PAGE
[   77.661936][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   77.671973][ T5540] Call Trace:
[   77.675265][ T5540]  <TASK>
[   77.678202][ T5540]  dump_stack_lvl+0x241/0x360
[   77.682880][ T5540]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.688070][ T5540]  ? __pfx_print_modules+0x10/0x10
[   77.693173][ T5540]  bad_page+0x166/0x1b0
[   77.697314][ T5540]  free_unref_page+0xed0/0xf20
[   77.702160][ T5540]  skb_release_data+0x6dc/0x8a0
[   77.706998][ T5540]  sk_skb_reason_drop+0x1c9/0x380
[   77.712006][ T5540]  __netif_receive_skb_core+0x3edd/0x4570
[   77.717716][ T5540]  ? mark_lock+0x9a/0x360
[   77.722039][ T5540]  ? __lock_acquire+0x1384/0x2050
[   77.727070][ T5540]  ? __pfx___netif_receive_skb_core+0x10/0x10
[   77.733124][ T5540]  ? mark_lock+0x9a/0x360
[   77.737449][ T5540]  ? __lock_acquire+0x1384/0x2050
[   77.742486][ T5540]  __netif_receive_skb_list_core+0x2b1/0x980
[   77.748470][ T5540]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   77.755084][ T5540]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[   77.761593][ T5540]  ? read_tsc+0x9/0x20
[   77.765675][ T5540]  ? timekeeping_get_ns+0x2c0/0x420
[   77.770867][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   77.777182][ T5540]  netif_receive_skb_list_internal+0xa51/0xe30
[   77.783327][ T5540]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[   77.789643][ T5540]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[   77.796303][ T5540]  ? __pfx_eth_type_trans+0x10/0x10
[   77.801674][ T5540]  ? __phys_addr+0xba/0x170
[   77.806166][ T5540]  ? build_skb_around+0x111/0x260
[   77.811180][ T5540]  ? __xdp_build_skb_from_frame+0x338/0x650
[   77.817060][ T5540]  netif_receive_skb_list+0x55/0x4b0
[   77.822347][ T5540]  bpf_test_run_xdp_live+0x1b0d/0x2160
[   77.827860][ T5540]  ? bpf_dispatcher_change_prog+0xd8b/0xf10
[   77.833760][ T5540]  ? bpf_test_run_xdp_live+0x5d6/0x2160
[   77.839313][ T5540]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[   77.845134][ T5540]  ? synchronize_rcu+0x11b/0x360
[   77.850077][ T5540]  ? __pfx_synchronize_rcu+0x10/0x10
[   77.855464][ T5540]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[   77.861693][ T5540]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[   77.867576][ T5540]  ? _copy_from_user+0xa6/0xe0
[   77.872330][ T5540]  ? bpf_test_init+0x15a/0x180
[   77.877081][ T5540]  ? xdp_convert_md_to_buff+0x5b/0x330
[   77.882525][ T5540]  bpf_prog_test_run_xdp+0x805/0x11e0
[   77.887886][ T5540]  ? __pfx_lock_release+0x10/0x10
[   77.892897][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   77.898700][ T5540]  ? __fget_files+0x29/0x470
[   77.903296][ T5540]  ? fput+0x1a8/0x230
[   77.907264][ T5540]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   77.913057][ T5540]  bpf_prog_test_run+0x2e4/0x360
[   77.917992][ T5540]  __sys_bpf+0x48d/0x810
[   77.922217][ T5540]  ? __pfx___sys_bpf+0x10/0x10
[   77.927157][ T5540]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   77.933140][ T5540]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   77.939456][ T5540]  ? do_syscall_64+0x100/0x230
[   77.944238][ T5540]  __x64_sys_bpf+0x7c/0x90
[   77.948660][ T5540]  do_syscall_64+0xf3/0x230
[   77.953174][ T5540]  ? clear_bhb_loop+0x35/0x90
[   77.957846][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.963794][ T5540] RIP: 0033:0x7fa20b37dff9
[   77.968212][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.987824][ T5540] RSP: 002b:00007fa20c11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   77.996250][ T5540] RAX: ffffffffffffffda RBX: 00007fa20b536058 RCX: 00007fa20b37dff9
[   78.004314][ T5540] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[   78.012374][ T5540] RBP: 00007fa20b3f0296 R08: 0000000000000000 R09: 0000000000000000
[   78.020350][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.028303][ T5540] R13: 0000000000000000 R14: 00007fa20b536058 R15: 00007ffd132a7848
[   78.036278][ T5540]  </TASK>
[   78.039367][ T5540] BUG: Bad page state in process syz.0.57  pfn:304b1
[   78.046055][ T5540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x304b1
[   78.054876][ T5540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   78.062024][ T5540] raw: 00fff00000000000 dead000000000040 ffff88805dc4b000 0000000000000000
[   78.070720][ T5540] raw: 0000000000000004 0000000000000001 00000000ffffffff 0000000000000000
[   78.079459][ T5540] page dumped because: page_pool leak
[   78.084830][ T5540] page_owner tracks the page as allocated